<div dir="ltr"><p class="MsoNormal" style="margin:0in 0in 14pt;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><b><span lang="EN" style="font-size:12pt">Product:</span></b><span lang="EN" style="font-size:12pt"><br>
BigFix Compliance</span></p>
<p class="MsoNormal" style="margin:14pt 0in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><b><span lang="EN" style="font-size:12pt">Title:</span></b><span lang="EN" style="font-size:12pt"><br>
</span><span lang="EN" style="font-size:12pt;font-family:Arial,sans-serif">Updated </span><span lang="EN" style="font-size:12pt;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial">CIS
Checklist for </span><span lang="EN" style="font-size:12pt;color:black">Ubuntu Linux 20.04</span><span lang="EN" style="font-size:12pt"></span></p>
<p class="MsoNormal" style="margin:14pt 0in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><b><span lang="EN" style="font-size:12pt">Security Benchmark:</span></b><span lang="EN" style="font-size:12pt"><br>
<span style="background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial">CIS Checklist for Ubuntu
Linux 20.04 LTS Benchmark, v3.0.0</span></span></p>
<p class="MsoNormal" style="margin:14pt 0in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><b><span lang="EN" style="font-size:12pt">Published Sites:</span></b><span lang="EN" style="font-size:12pt"><br>
<span style="background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial">CIS Checklist for Ubuntu20,
site version 11</span><br>
<span style="background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial">(The site version is
provided for air-gap customers.)</span></span></p>
<p class="MsoNormal" style="margin:14pt 0in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><b><span lang="EN" style="font-size:11.5pt;color:black">Details:</span></b><span lang="EN" style="font-size:11.5pt"></span></p>
<p class="MsoNormal" style="margin:14pt 0in 0in 51pt;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:10pt;font-family:"Noto Sans Symbols"">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman""> </span></span><span lang="EN" style="font-size:11.5pt;color:black">Total New
Fixlets: 172</span><span lang="EN" style="font-size:11.5pt"></span></p>
<p class="MsoNormal" style="margin:14pt 0in 0in 51pt;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:10pt;font-family:"Noto Sans Symbols"">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman""> </span></span><span lang="EN" style="font-size:11.5pt;color:black">Total
Updated Fixlets: 124</span><span lang="EN" style="font-size:11.5pt"></span></p>
<p class="MsoNormal" style="margin:14pt 0in 0in 51pt;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:10pt;font-family:"Noto Sans Symbols"">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman""> </span></span><span lang="EN" style="font-size:11.5pt;color:black">Total
Deleted Fixlets: 149</span><span lang="EN" style="font-size:11.5pt"></span></p>
<p class="MsoNormal" style="margin:14pt 0in 0in 51pt;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:10pt;font-family:"Noto Sans Symbols"">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman""> </span></span><span lang="EN" style="font-size:11.5pt;color:black">Total
Fixlets in Site: 298</span><span lang="EN" style="font-size:11.5pt"></span></p>
<p class="MsoNormal" style="margin:14pt 0in 0in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:11.5pt"> </span></p>
<p class="MsoNormal" style="margin:14pt 0in 0in 0.5in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><b><span lang="EN" style="font-size:12.5pt;color:black">New
Items:</span></b><b><span lang="EN" style="font-size:12.5pt"></span></b></p>
<p class="MsoNormal" style="margin:14pt 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:11.5pt">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:11.5pt;color:black">Ensure cramfs kernel module is not
available </span><span lang="EN" style="font-size:11.5pt"></span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:11.5pt">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:11.5pt;color:black">Ensure freevxfs kernel module is not
available </span><span lang="EN" style="font-size:11.5pt"></span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:11.5pt">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:11.5pt;color:black">Ensure hfs kernel module is not
available </span><span lang="EN" style="font-size:11.5pt"></span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:11.5pt">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:11.5pt;color:black">Ensure hfsplus kernel module is not
available </span><span lang="EN" style="font-size:11.5pt"></span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:11.5pt">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:11.5pt;color:black">Ensure jffs2 kernel module is not
available </span><span lang="EN" style="font-size:11.5pt"></span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:11.5pt">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:11.5pt;color:black">Ensure overlay kernel module is not
available </span><span lang="EN" style="font-size:11.5pt"></span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:11.5pt">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:11.5pt;color:black">Ensure squashfs kernel module is not
available </span><span lang="EN" style="font-size:11.5pt"></span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:11.5pt">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:11.5pt;color:black">Ensure udf kernel module is not
available </span><span lang="EN" style="font-size:11.5pt"></span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:11.5pt">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:11.5pt;color:black">Ensure usb-storage kernel module is not
available </span><span lang="EN" style="font-size:11.5pt"></span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:11.5pt">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:11.5pt;color:black">Ensure /dev/shm is a separate
partition </span><span lang="EN" style="font-size:11.5pt"></span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:11.5pt">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:11.5pt;color:black">Ensure latest versions of the apparmor
packages are installed </span><span lang="EN" style="font-size:11.5pt"></span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:11.5pt">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:11.5pt;color:black">Ensure all AppArmor Profiles are not
disabled </span><span lang="EN" style="font-size:11.5pt"></span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:11.5pt">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:11.5pt;color:black">Ensure access to bootloader config is
configured </span><span lang="EN" style="font-size:11.5pt"></span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:11.5pt">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:11.5pt;color:black">Ensure address space layout randomization
is enabled </span><span lang="EN" style="font-size:11.5pt"></span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:11.5pt">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:11.5pt;color:black">Ensure /etc/motd is configured </span><span lang="EN" style="font-size:11.5pt"></span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:11.5pt">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:11.5pt;color:black">Ensure /etc/issue is configured </span><span lang="EN" style="font-size:11.5pt"></span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:11.5pt">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:11.5pt;color:black">Ensure /etc/<a href="http://issue.net">issue.net</a> is configured </span><span lang="EN" style="font-size:11.5pt"></span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:11.5pt">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:11.5pt;color:black">Ensure access to /etc/motd is
configured </span><span lang="EN" style="font-size:11.5pt"></span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:11.5pt">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:11.5pt;color:black">Ensure access to /etc/issue is
configured </span><span lang="EN" style="font-size:11.5pt"></span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:11.5pt">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:11.5pt;color:black">Ensure access to /etc/<a href="http://issue.net">issue.net</a> is
configured </span><span lang="EN" style="font-size:11.5pt"></span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:11.5pt">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:11.5pt;color:black">Ensure GDM is removed </span><span lang="EN" style="font-size:11.5pt"></span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:11.5pt">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:11.5pt;color:black">Ensure XDMCP is not enabled </span><span lang="EN" style="font-size:11.5pt"></span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:11.5pt">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:11.5pt;color:black">Ensure autofs services are not in
use </span><span lang="EN" style="font-size:11.5pt"></span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:11.5pt">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:11.5pt;color:black">Ensure nis server services are not in
use </span><span lang="EN" style="font-size:11.5pt"></span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:11.5pt">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:11.5pt;color:black">Ensure print server services are not in
use </span><span lang="EN" style="font-size:11.5pt"></span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:11.5pt">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:11.5pt;color:black">Ensure rpcbind services are not in
use </span><span lang="EN" style="font-size:11.5pt"></span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:11.5pt">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:11.5pt;color:black">Ensure rsync services are not in use </span><span lang="EN" style="font-size:11.5pt"></span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:11.5pt">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:11.5pt;color:black">Ensure samba file server services are not
in use </span><span lang="EN" style="font-size:11.5pt"></span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:11.5pt">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:11.5pt;color:black">Ensure snmp services are not in use </span><span lang="EN" style="font-size:11.5pt"></span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:11.5pt">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:11.5pt;color:black">Ensure tftp server services are not in
use </span><span lang="EN" style="font-size:11.5pt"></span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:11.5pt">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:11.5pt;color:black">Ensure web proxy server services are not
in use </span><span lang="EN" style="font-size:11.5pt"></span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:11.5pt">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:11.5pt;color:black">Ensure web server services are not in
use </span><span lang="EN" style="font-size:11.5pt"></span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:11.5pt">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:11.5pt;color:black">Ensure xinetd services are not in
use </span><span lang="EN" style="font-size:11.5pt"></span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:11.5pt">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:11.5pt;color:black">Ensure avahi daemon services are not in
use </span><span lang="EN" style="font-size:11.5pt"></span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:11.5pt">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:11.5pt;color:black">Ensure X window server services are not
in use </span><span lang="EN" style="font-size:11.5pt"></span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:11.5pt">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:11.5pt;color:black">Ensure mail transfer agents are
configured for local-only mode </span><span lang="EN" style="font-size:11.5pt"></span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:11.5pt">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:11.5pt;color:black">Ensure dhcp server services are not in
use </span><span lang="EN" style="font-size:11.5pt"></span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:11.5pt">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:11.5pt;color:black">Ensure dns server services are not in
use </span><span lang="EN" style="font-size:11.5pt"></span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:11.5pt">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:11.5pt;color:black">Ensure dnsmasq services are not in
use </span><span lang="EN" style="font-size:11.5pt"></span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:11.5pt">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:11.5pt;color:black">Ensure ftp server services are not in
use </span><span lang="EN" style="font-size:11.5pt"></span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:11.5pt">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:11.5pt;color:black">Ensure ldap server services are not in
use </span><span lang="EN" style="font-size:11.5pt"></span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:11.5pt">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:11.5pt;color:black">Ensure message access server services are
not in use </span><span lang="EN" style="font-size:11.5pt"></span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:11.5pt">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:11.5pt;color:black">Ensure network file system services are
not in use </span><span lang="EN" style="font-size:11.5pt"></span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:11.5pt">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:11.5pt;color:black">Ensure nis client is not installed </span><span lang="EN" style="font-size:11.5pt"></span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:11.5pt">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:11.5pt;color:black">Ensure ldap client is not installed </span><span lang="EN" style="font-size:11.5pt"></span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:11.5pt">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:11.5pt;color:black">Ensure ftp client is not installed </span><span lang="EN" style="font-size:11.5pt"></span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:11.5pt">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:11.5pt;color:black">Ensure access to /etc/crontab is
configured </span><span lang="EN" style="font-size:11.5pt"></span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:11.5pt">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:11.5pt;color:black">Ensure access to /etc/cron.hourly is
configured </span><span lang="EN" style="font-size:11.5pt"></span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:11.5pt">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:11.5pt;color:black">Ensure access to /etc/cron.daily is
configured </span><span lang="EN" style="font-size:11.5pt"></span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:11.5pt">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:11.5pt;color:black">Ensure access to /etc/cron.weekly is
configured </span><span lang="EN" style="font-size:11.5pt"></span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:11.5pt">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:11.5pt;color:black">Ensure access to /etc/cron.monthly is
configured </span><span lang="EN" style="font-size:11.5pt"></span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:11.5pt">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:11.5pt;color:black">Ensure access to /etc/cron.yearly is
configured </span><span lang="EN" style="font-size:11.5pt"></span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:11.5pt">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:11.5pt;color:black">Ensure access to /etc/cron.d is
configured </span><span lang="EN" style="font-size:11.5pt"></span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:11.5pt">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:11.5pt;color:black">Ensure access to crontab is
configured </span><span lang="EN" style="font-size:11.5pt"></span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:11.5pt">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:11.5pt;color:black">Ensure access to at is configured </span><span lang="EN" style="font-size:11.5pt"></span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:11.5pt">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:11.5pt;color:black">Ensure wireless interfaces are not
available </span><span lang="EN" style="font-size:11.5pt"></span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:11.5pt">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:11.5pt;color:black">Ensure bluetooth services are not in
use </span><span lang="EN" style="font-size:11.5pt"></span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:11.5pt">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:11.5pt;color:black">Ensure dccp kernel module is not
available </span><span lang="EN" style="font-size:11.5pt"></span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:11.5pt">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:11.5pt;color:black">Ensure tipc kernel module is not
available </span><span lang="EN" style="font-size:11.5pt"></span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:11.5pt">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:11.5pt;color:black">Ensure rds kernel module is not
available </span><span lang="EN" style="font-size:11.5pt"></span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:11.5pt">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:11.5pt;color:black">Ensure sctp kernel module is not
available </span><span lang="EN" style="font-size:11.5pt"></span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:11.5pt">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:11.5pt;color:black">Ensure ip forwarding is disabled </span><span lang="EN" style="font-size:11.5pt"></span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:11.5pt">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:11.5pt;color:black">Ensure tcp syn cookies is enabled </span><span lang="EN" style="font-size:11.5pt"></span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:11.5pt">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:11.5pt;color:black">Ensure ipv6 router advertisements are not
accepted </span><span lang="EN" style="font-size:11.5pt"></span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:11.5pt">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:11.5pt;color:black">Ensure bogus icmp responses are
ignored </span><span lang="EN" style="font-size:11.5pt"></span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:11.5pt">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:11.5pt;color:black">Ensure broadcast icmp requests are
ignored </span><span lang="EN" style="font-size:11.5pt"></span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:11.5pt">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:11.5pt;color:black">Ensure icmp redirects are not
accepted </span><span lang="EN" style="font-size:11.5pt"></span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:11.5pt">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:11.5pt;color:black">Ensure secure icmp redirects are not
accepted </span><span lang="EN" style="font-size:11.5pt"></span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:11.5pt">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:11.5pt;color:black">Ensure reverse path filtering is
enabled </span><span lang="EN" style="font-size:11.5pt"></span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:11.5pt">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:11.5pt;color:black">Ensure a single firewall configuration
utility is in use </span><span lang="EN" style="font-size:11.5pt"></span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:11.5pt">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:11.5pt;color:black">Ensure nftables is not in use with
ufw </span><span lang="EN" style="font-size:11.5pt"></span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:11.5pt">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:11.5pt;color:black">Ensure nftables is not in use with
iptables </span><span lang="EN" style="font-size:11.5pt"></span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:11.5pt">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:11.5pt;color:black">Ensure ufw is not in use with
iptables </span><span lang="EN" style="font-size:11.5pt"></span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:11.5pt">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:11.5pt;color:black">Ensure access to /etc/ssh/sshd_config is
configured </span><span lang="EN" style="font-size:11.5pt"></span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:11.5pt">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:11.5pt;color:black">Ensure sshd HostbasedAuthentication is
disabled </span><span lang="EN" style="font-size:11.5pt"></span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:11.5pt">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:11.5pt;color:black">Ensure sshd IgnoreRhosts is enabled </span><span lang="EN" style="font-size:11.5pt"></span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:11.5pt">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:11.5pt;color:black">Ensure sshd KexAlgorithms is
configured </span><span lang="EN" style="font-size:11.5pt"></span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:11.5pt">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:11.5pt;color:black">Ensure sshd LoginGraceTime is
configured </span><span lang="EN" style="font-size:11.5pt"></span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:11.5pt">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:11.5pt;color:black">Ensure sshd LogLevel is configured </span><span lang="EN" style="font-size:11.5pt"></span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:11.5pt">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:11.5pt;color:black">Ensure sshd MACs are configured </span><span lang="EN" style="font-size:11.5pt"></span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:11.5pt">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:11.5pt;color:black">Ensure sshd MaxAuthTries is
configured </span><span lang="EN" style="font-size:11.5pt"></span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:11.5pt">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:11.5pt;color:black">Ensure sshd MaxSessions is
configured </span><span lang="EN" style="font-size:11.5pt"></span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:11.5pt">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:11.5pt;color:black">Ensure sshd MaxStartups is
configured </span><span lang="EN" style="font-size:11.5pt"></span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:11.5pt">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:11.5pt;color:black">Ensure sshd PermitEmptyPasswords is
disabled </span><span lang="EN" style="font-size:11.5pt"></span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:11.5pt">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:11.5pt;color:black">Ensure access to SSH private host key
files is configured </span><span lang="EN" style="font-size:11.5pt"></span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:11.5pt">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:11.5pt;color:black">Ensure sshd PermitRootLogin is
disabled </span><span lang="EN" style="font-size:11.5pt"></span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:11.5pt">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:11.5pt;color:black">Ensure sshd PermitUserEnvironment is
disabled </span><span lang="EN" style="font-size:11.5pt"></span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:11.5pt">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:11.5pt;color:black">Ensure sshd UsePAM is enabled </span><span lang="EN" style="font-size:11.5pt"></span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:11.5pt">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:11.5pt;color:black">Ensure access to SSH public host key
files is configured </span><span lang="EN" style="font-size:11.5pt"></span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:11.5pt">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:11.5pt;color:black">Ensure sshd access is configured </span><span lang="EN" style="font-size:11.5pt"></span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:11.5pt">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:11.5pt;color:black">Ensure sshd Banner is configured </span><span lang="EN" style="font-size:11.5pt"></span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:11.5pt">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:11.5pt;color:black">Ensure sshd Ciphers are configured </span><span lang="EN" style="font-size:11.5pt"></span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:11.5pt">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:11.5pt;color:black">Ensure sshd ClientAliveInterval and
ClientAliveCountMax are configured </span><span lang="EN" style="font-size:11.5pt"></span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:11.5pt">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:11.5pt;color:black">Ensure sshd DisableForwarding is
enabled </span><span lang="EN" style="font-size:11.5pt"></span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:11.5pt">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:11.5pt;color:black">Ensure sshd GSSAPIAuthentication is
disabled </span><span lang="EN" style="font-size:11.5pt"></span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:11.5pt">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:11.5pt;color:black">Ensure sudo authentication timeout is
configured </span><span lang="EN" style="font-size:11.5pt"></span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:11.5pt">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:11.5pt;color:black">Ensure latest version of pam is
installed </span><span lang="EN" style="font-size:11.5pt"></span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:11.5pt">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:11.5pt;color:black">Ensure latest version of libpam-modules
is installed </span><span lang="EN" style="font-size:11.5pt"></span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:11.5pt">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:11.5pt;color:black">Ensure latest version of libpam-pwquality
is installed </span><span lang="EN" style="font-size:11.5pt"></span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:11.5pt">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:11.5pt;color:black">Ensure pam_unix module is enabled </span><span lang="EN" style="font-size:11.5pt"></span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:11.5pt">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:11.5pt;color:black">Ensure pam_faillock module is
enabled </span><span lang="EN" style="font-size:11.5pt"></span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:11.5pt">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:11.5pt;color:black">Ensure pam_pwquality module is
enabled </span><span lang="EN" style="font-size:11.5pt"></span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:11.5pt">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:11.5pt;color:black">Ensure pam_pwhistory module is
enabled </span><span lang="EN" style="font-size:11.5pt"></span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:11.5pt">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:11.5pt;color:black">Ensure password failed attempts lockout
is configured </span><span lang="EN" style="font-size:11.5pt"></span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:11.5pt">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:11.5pt;color:black">Ensure password unlock time is
configured </span><span lang="EN" style="font-size:11.5pt"></span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:11.5pt">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:11.5pt;color:black">Ensure password failed attempts lockout
includes root account </span><span lang="EN" style="font-size:11.5pt"></span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:11.5pt">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:11.5pt;color:black">Ensure password number of changed
characters is configured </span><span lang="EN" style="font-size:11.5pt"></span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:11.5pt">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:11.5pt;color:black">Ensure minimum password length is
configured </span><span lang="EN" style="font-size:11.5pt"></span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:11.5pt">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:11.5pt;color:black">Ensure password complexity is
configured </span><span lang="EN" style="font-size:11.5pt"></span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:11.5pt">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:11.5pt;color:black">Ensure password same consecutive
characters is configured </span><span lang="EN" style="font-size:11.5pt"></span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:11.5pt">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:11.5pt;color:black">Ensure password maximum sequential
characters is configured </span><span lang="EN" style="font-size:11.5pt"></span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:11.5pt">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:11.5pt;color:black">Ensure password dictionary check is
enabled </span><span lang="EN" style="font-size:11.5pt"></span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:11.5pt">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:11.5pt;color:black">Ensure password quality checking is
enforced </span><span lang="EN" style="font-size:11.5pt"></span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:11.5pt">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:11.5pt;color:black">Ensure password quality is enforced for
the root user </span><span lang="EN" style="font-size:11.5pt"></span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:11.5pt">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:11.5pt;color:black">Ensure password history remember is
configured </span><span lang="EN" style="font-size:11.5pt"></span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:11.5pt">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:11.5pt;color:black">Ensure password history is enforced for
the root user </span><span lang="EN" style="font-size:11.5pt"></span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:11.5pt">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:11.5pt;color:black">Ensure pam_pwhistory includes
use_authtok </span><span lang="EN" style="font-size:11.5pt"></span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:11.5pt">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:11.5pt;color:black">Ensure pam_unix does not include
nullok </span><span lang="EN" style="font-size:11.5pt"></span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:11.5pt">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:11.5pt;color:black">Ensure pam_unix does not include
remember </span><span lang="EN" style="font-size:11.5pt"></span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:11.5pt">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:11.5pt;color:black">Ensure pam_unix includes a strong
password hashing algorithm </span><span lang="EN" style="font-size:11.5pt"></span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:11.5pt">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:11.5pt;color:black">Ensure pam_unix includes use_authtok </span><span lang="EN" style="font-size:11.5pt"></span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:11.5pt">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:11.5pt;color:black">Ensure password expiration is
configured </span><span lang="EN" style="font-size:11.5pt"></span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:11.5pt">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:11.5pt;color:black">Ensure minimum password days is
configured </span><span lang="EN" style="font-size:11.5pt"></span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:11.5pt">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:11.5pt;color:black">Ensure password expiration warning days
is configured </span><span lang="EN" style="font-size:11.5pt"></span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:11.5pt">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:11.5pt;color:black">Ensure inactive password lock is
configured </span><span lang="EN" style="font-size:11.5pt"></span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:11.5pt">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:11.5pt;color:black">Ensure root is the only GID 0
account </span><span lang="EN" style="font-size:11.5pt"></span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:11.5pt">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:11.5pt;color:black">Ensure group root is the only GID 0
group </span><span lang="EN" style="font-size:11.5pt"></span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:11.5pt">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:11.5pt;color:black">Ensure root account access is
controlled </span><span lang="EN" style="font-size:11.5pt"></span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:11.5pt">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:11.5pt;color:black">Ensure root path integrity </span><span lang="EN" style="font-size:11.5pt"></span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:11.5pt">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:11.5pt;color:black">Ensure root user umask is configured </span><span lang="EN" style="font-size:11.5pt"></span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:11.5pt">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:11.5pt;color:black">Ensure system accounts do not have a
valid login shell </span><span lang="EN" style="font-size:11.5pt"></span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:11.5pt">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:11.5pt;color:black">Ensure accounts without a valid login
shell are locked </span><span lang="EN" style="font-size:11.5pt"></span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:11.5pt">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:11.5pt;color:black">Ensure default user umask is
configured </span><span lang="EN" style="font-size:11.5pt"></span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:11.5pt">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:11.5pt;color:black">Ensure journald service is enabled and
active </span><span lang="EN" style="font-size:11.5pt"></span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:11.5pt">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:11.5pt;color:black">Ensure journald log file rotation is
configured </span><span lang="EN" style="font-size:11.5pt"></span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:11.5pt">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:11.5pt;color:black">Ensure systemd-journal-upload
authentication is configured </span><span lang="EN" style="font-size:11.5pt"></span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:11.5pt">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:11.5pt;color:black">Ensure systemd-journal-upload is enabled
and active </span><span lang="EN" style="font-size:11.5pt"></span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:11.5pt">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:11.5pt;color:black">Ensure systemd-journal-remote service is
not in use </span><span lang="EN" style="font-size:11.5pt"></span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:11.5pt">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:11.5pt;color:black">Ensure journald ForwardToSyslog is
disabled </span><span lang="EN" style="font-size:11.5pt"></span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:11.5pt">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:11.5pt;color:black">Ensure journald Compress is
configured </span><span lang="EN" style="font-size:11.5pt"></span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:11.5pt">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:11.5pt;color:black">Ensure journald Storage is
configured </span><span lang="EN" style="font-size:11.5pt"></span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:11.5pt">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:11.5pt;color:black">Ensure rsyslog service is enabled and
active </span><span lang="EN" style="font-size:11.5pt"></span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:11.5pt">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:11.5pt;color:black">Ensure rsyslog log file creation mode is
configured </span><span lang="EN" style="font-size:11.5pt"></span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:11.5pt">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:11.5pt;color:black">Ensure access to all logfiles has been
configured </span><span lang="EN" style="font-size:11.5pt"></span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:11.5pt">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:11.5pt;color:black">Ensure auditd packages are installed </span><span lang="EN" style="font-size:11.5pt"></span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:11.5pt">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:11.5pt;color:black">Ensure audit_backlog_limit is
configured </span><span lang="EN" style="font-size:11.5pt"></span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:11.5pt">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:11.5pt;color:black">Ensure system warns when audit logs are
low on space </span><span lang="EN" style="font-size:11.5pt"></span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:11.5pt">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:11.5pt;color:black">Ensure successful and unsuccessful
attempts to use the chcon command are collected
</span><span lang="EN" style="font-size:11.5pt"></span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:11.5pt">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:11.5pt;color:black">Ensure successful and unsuccessful
attempts to use the setfacl command are collected </span><span lang="EN" style="font-size:11.5pt"></span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:11.5pt">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:11.5pt;color:black">Ensure successful and unsuccessful
attempts to use the chacl command are collected
</span><span lang="EN" style="font-size:11.5pt"></span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:11.5pt">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:11.5pt;color:black">Ensure successful and unsuccessful
attempts to use the usermod command are collected </span><span lang="EN" style="font-size:11.5pt"></span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:11.5pt">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:11.5pt;color:black">Ensure audit log files mode is
configured </span><span lang="EN" style="font-size:11.5pt"></span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:11.5pt">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:11.5pt;color:black">Ensure audit tools group owner is
configured </span><span lang="EN" style="font-size:11.5pt"></span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:11.5pt">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:11.5pt;color:black">Ensure audit log files owner is
configured </span><span lang="EN" style="font-size:11.5pt"></span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:11.5pt">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:11.5pt;color:black">Ensure audit log files group owner is
configured </span><span lang="EN" style="font-size:11.5pt"></span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:11.5pt">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:11.5pt;color:black">Ensure the audit log file directory mode
is configured </span><span lang="EN" style="font-size:11.5pt"></span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:11.5pt">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:11.5pt;color:black">Ensure audit configuration files mode is
configured </span><span lang="EN" style="font-size:11.5pt"></span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:11.5pt">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:11.5pt;color:black">Ensure audit configuration files owner is
configured </span><span lang="EN" style="font-size:11.5pt"></span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:11.5pt">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:11.5pt;color:black">Ensure audit configuration files group
owner is configured </span><span lang="EN" style="font-size:11.5pt"></span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:11.5pt">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:11.5pt;color:black">Ensure audit tools mode is
configured </span><span lang="EN" style="font-size:11.5pt"></span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:11.5pt">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:11.5pt;color:black">Ensure audit tools owner is
configured </span><span lang="EN" style="font-size:11.5pt"></span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:11.5pt">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:11.5pt;color:black">Ensure access to /etc/passwd is
configured </span><span lang="EN" style="font-size:11.5pt"></span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:11.5pt">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:11.5pt;color:black">Ensure access to /etc/security/opasswd is
configured </span><span lang="EN" style="font-size:11.5pt"></span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:11.5pt">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:11.5pt;color:black">Ensure no files or directories without an
owner and a group exist </span><span lang="EN" style="font-size:11.5pt"></span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:11.5pt">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:11.5pt;color:black">Ensure access to /etc/passwd- is
configured </span><span lang="EN" style="font-size:11.5pt"></span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:11.5pt">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:11.5pt;color:black">Ensure access to /etc/group is
configured </span><span lang="EN" style="font-size:11.5pt"></span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:11.5pt">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:11.5pt;color:black">Ensure access to /etc/group- is
configured </span><span lang="EN" style="font-size:11.5pt"></span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:11.5pt">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:11.5pt;color:black">Ensure access to /etc/shadow is
configured </span><span lang="EN" style="font-size:11.5pt"></span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:11.5pt">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:11.5pt;color:black">Ensure access to /etc/shadow- is
configured </span><span lang="EN" style="font-size:11.5pt"></span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:11.5pt">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:11.5pt;color:black">Ensure access to /etc/gshadow is
configured </span><span lang="EN" style="font-size:11.5pt"></span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:11.5pt">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:11.5pt;color:black">Ensure access to /etc/gshadow- is
configured </span><span lang="EN" style="font-size:11.5pt"></span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:11.5pt">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:11.5pt;color:black">Ensure access to /etc/shells is
configured </span><span lang="EN" style="font-size:11.5pt"></span></p>
<p class="MsoNormal" style="margin:14pt 0in 0in 0.5in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:11.5pt"> </span></p>
<p class="MsoNormal" style="margin:14pt 0in 0in 0.5in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><b><span lang="EN" style="font-size:12.5pt;color:black">Modified
Items:</span></b><span lang="EN" style="font-size:11.5pt"></span></p>
<p class="MsoNormal" style="margin:14pt 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:11.5pt">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:11.5pt;color:black">Ensure /tmp is a separate partition</span><span lang="EN" style="font-size:11.5pt"></span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:11.5pt">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:11.5pt;color:black">Ensure nodev option set on /tmp partition</span><span lang="EN" style="font-size:11.5pt"></span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:11.5pt">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:11.5pt;color:black">Ensure nosuid option set on /tmp
partition</span><span lang="EN" style="font-size:11.5pt"></span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:11.5pt">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:11.5pt;color:black">Ensure noexec option set on /tmp
partition</span><span lang="EN" style="font-size:11.5pt"></span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:11.5pt">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:11.5pt;color:black">Ensure nodev option set on /dev/shm
partition</span><span lang="EN" style="font-size:11.5pt"></span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:11.5pt">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:11.5pt;color:black">Ensure nosuid option set on /dev/shm
partition</span><span lang="EN" style="font-size:11.5pt"></span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:11.5pt">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:11.5pt;color:black">Ensure noexec option set on /dev/shm
partition</span><span lang="EN" style="font-size:11.5pt"></span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:11.5pt">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:11.5pt;color:black">Ensure separate partition exists for
/home</span><span lang="EN" style="font-size:11.5pt"></span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:11.5pt">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:11.5pt;color:black">Ensure nodev option set on /home
partition</span><span lang="EN" style="font-size:11.5pt"></span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:11.5pt">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:11.5pt;color:black">Ensure nosuid option set on /home
partition</span><span lang="EN" style="font-size:11.5pt"></span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:11.5pt">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:11.5pt;color:black">Ensure separate partition exists for /var</span><span lang="EN" style="font-size:11.5pt"></span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:11.5pt">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:11.5pt;color:black">Ensure nodev option set on /var partition</span><span lang="EN" style="font-size:11.5pt"></span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:11.5pt">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:11.5pt;color:black">Ensure nosuid option set on /var
partition</span><span lang="EN" style="font-size:11.5pt"></span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:11.5pt">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:11.5pt;color:black">Ensure separate partition exists for
/var/tmp</span><span lang="EN" style="font-size:11.5pt"></span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:11.5pt">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:11.5pt;color:black">Ensure nodev option set on /var/tmp
partition</span><span lang="EN" style="font-size:11.5pt"></span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:11.5pt">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:11.5pt;color:black">Ensure nosuid option set on /var/tmp
partition</span><span lang="EN" style="font-size:11.5pt"></span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:11.5pt">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:11.5pt;color:black">Ensure noexec option set on /var/tmp
partition</span><span lang="EN" style="font-size:11.5pt"></span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:11.5pt">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:11.5pt;color:black">Ensure separate partition exists for
/var/log</span><span lang="EN" style="font-size:11.5pt"></span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:11.5pt">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:11.5pt;color:black">Ensure nodev option set on /var/log
partition</span><span lang="EN" style="font-size:11.5pt"></span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:11.5pt">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:11.5pt;color:black">Ensure nosuid option set on /var/log
partition</span><span lang="EN" style="font-size:11.5pt"></span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:11.5pt">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:11.5pt;color:black">Ensure noexec option set on /var/log
partition</span><span lang="EN" style="font-size:11.5pt"></span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:11.5pt">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:11.5pt;color:black">Ensure separate partition exists for
/var/log/audit</span><span lang="EN" style="font-size:11.5pt"></span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:11.5pt">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:11.5pt;color:black">Ensure nodev option set on /var/log/audit
partition</span><span lang="EN" style="font-size:11.5pt"></span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:11.5pt">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:11.5pt;color:black">Ensure nosuid option set on
/var/log/audit partition</span><span lang="EN" style="font-size:11.5pt"></span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:11.5pt">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:11.5pt;color:black">Ensure noexec option set on
/var/log/audit partition</span><span lang="EN" style="font-size:11.5pt"></span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:11.5pt">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:11.5pt;color:black">Ensure GPG keys are configured</span><span lang="EN" style="font-size:11.5pt"></span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:11.5pt">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:11.5pt;color:black">Ensure updates, patches, and additional
security software are installed</span><span lang="EN" style="font-size:11.5pt"></span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:11.5pt">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:11.5pt;color:black">Ensure AppArmor is enabled in the
bootloader configuration</span><span lang="EN" style="font-size:11.5pt"></span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:11.5pt">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:11.5pt;color:black">Ensure all AppArmor Profiles are
enforcing</span><span lang="EN" style="font-size:11.5pt"></span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:11.5pt">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:11.5pt;color:black">Ensure ptrace\_scope is restricted</span><span lang="EN" style="font-size:11.5pt"></span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:11.5pt">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:11.5pt;color:black">Ensure core dumps are restricted</span><span lang="EN" style="font-size:11.5pt"></span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:11.5pt">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:11.5pt;color:black">Ensure prelink is not installed</span><span lang="EN" style="font-size:11.5pt"></span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:11.5pt">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:11.5pt;color:black">Ensure Automatic Error Reporting is not
enabled</span><span lang="EN" style="font-size:11.5pt"></span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:11.5pt">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:11.5pt;color:black">Ensure GDM login banner is configured</span><span lang="EN" style="font-size:11.5pt"></span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:11.5pt">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:11.5pt;color:black">Ensure GDM disable-user-list option is
enabled</span><span lang="EN" style="font-size:11.5pt"></span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:11.5pt">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:11.5pt;color:black">Ensure GDM screen locks when the user is
idle</span><span lang="EN" style="font-size:11.5pt"></span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:11.5pt">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:11.5pt;color:black">Ensure GDM screen locks cannot be
overridden</span><span lang="EN" style="font-size:11.5pt"></span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:11.5pt">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:11.5pt;color:black">Ensure GDM automatic mounting of
removable media is disabled</span><span lang="EN" style="font-size:11.5pt"></span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:11.5pt">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:11.5pt;color:black">Ensure GDM disabling automatic mounting
of removable media is not overridden</span><span lang="EN" style="font-size:11.5pt"></span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:11.5pt">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:11.5pt;color:black">Ensure GDM autorun-never is enabled</span><span lang="EN" style="font-size:11.5pt"></span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:11.5pt">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:11.5pt;color:black">Ensure GDM autorun-never is not
overridden</span><span lang="EN" style="font-size:11.5pt"></span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:11.5pt">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:11.5pt;color:black">Ensure rsh client is not installed</span><span lang="EN" style="font-size:11.5pt"></span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:11.5pt">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:11.5pt;color:black">Ensure talk client is not installed</span><span lang="EN" style="font-size:11.5pt"></span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:11.5pt">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:11.5pt;color:black">Ensure telnet client is not installed</span><span lang="EN" style="font-size:11.5pt"></span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:11.5pt">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:11.5pt;color:black">Ensure a single time synchronization
daemon is in use</span><span lang="EN" style="font-size:11.5pt"></span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:11.5pt">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:11.5pt;color:black">Ensure systemd-timesyncd configured with
authorized timeserver</span><span lang="EN" style="font-size:11.5pt"></span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:11.5pt">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:11.5pt;color:black">Ensure systemd-timesyncd is enabled and
running</span><span lang="EN" style="font-size:11.5pt"></span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:11.5pt">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:11.5pt;color:black">Ensure chrony is configured with
authorized timeserver</span><span lang="EN" style="font-size:11.5pt"></span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:11.5pt">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:11.5pt;color:black">Ensure chrony is running as user \_chrony</span><span lang="EN" style="font-size:11.5pt"></span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:11.5pt">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:11.5pt;color:black">Ensure chrony is enabled and running</span><span lang="EN" style="font-size:11.5pt"></span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:11.5pt">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:11.5pt;color:black">Ensure cron daemon is enabled and active</span><span lang="EN" style="font-size:11.5pt"></span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:11.5pt">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:11.5pt;color:black">Ensure packet redirect sending is
disabled</span><span lang="EN" style="font-size:11.5pt"></span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:11.5pt">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:11.5pt;color:black">Ensure source routed packets are not
accepted</span><span lang="EN" style="font-size:11.5pt"></span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:11.5pt">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:11.5pt;color:black">Ensure suspicious packets are logged</span><span lang="EN" style="font-size:11.5pt"></span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:11.5pt">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:11.5pt;color:black">Ensure ufw is installed</span><span lang="EN" style="font-size:11.5pt"></span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:11.5pt">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:11.5pt;color:black">Ensure iptables-persistent is not
installed with ufw</span><span lang="EN" style="font-size:11.5pt"></span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:11.5pt">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:11.5pt;color:black">Ensure ufw service is enabled</span><span lang="EN" style="font-size:11.5pt"></span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:11.5pt">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:11.5pt;color:black">Ensure ufw loopback traffic is configured</span><span lang="EN" style="font-size:11.5pt"></span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:11.5pt">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:11.5pt;color:black">Ensure ufw default deny firewall policy</span><span lang="EN" style="font-size:11.5pt"></span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:11.5pt">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:11.5pt;color:black">Ensure nftables is installed</span><span lang="EN" style="font-size:11.5pt"></span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:11.5pt">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:11.5pt;color:black">Ensure nftables rules are permanent</span><span lang="EN" style="font-size:11.5pt"></span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:11.5pt">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:11.5pt;color:black">Ensure ufw is uninstalled or disabled
with nftables</span><span lang="EN" style="font-size:11.5pt"></span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:11.5pt">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:11.5pt;color:black">Ensure iptables are flushed with nftables</span><span lang="EN" style="font-size:11.5pt"></span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:11.5pt">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:11.5pt;color:black">Ensure a nftables table exists</span><span lang="EN" style="font-size:11.5pt"></span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:11.5pt">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:11.5pt;color:black">Ensure nftables base chains exist</span><span lang="EN" style="font-size:11.5pt"></span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:11.5pt">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:11.5pt;color:black">Ensure nftables loopback traffic is
configured</span><span lang="EN" style="font-size:11.5pt"></span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:11.5pt">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:11.5pt;color:black">Ensure nftables default deny firewall
policy</span><span lang="EN" style="font-size:11.5pt"></span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:11.5pt">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:11.5pt;color:black">Ensure nftables service is enabled</span><span lang="EN" style="font-size:11.5pt"></span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:11.5pt">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:11.5pt;color:black">Ensure iptables packages are installed</span><span lang="EN" style="font-size:11.5pt"></span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:11.5pt">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:11.5pt;color:black">Ensure iptables default deny firewall
policy</span><span lang="EN" style="font-size:11.5pt"></span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:11.5pt">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:11.5pt;color:black">Ensure iptables loopback traffic is
configured</span><span lang="EN" style="font-size:11.5pt"></span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:11.5pt">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:11.5pt;color:black">Ensure ip6tables default deny firewall
policy</span><span lang="EN" style="font-size:11.5pt"></span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:11.5pt">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:11.5pt;color:black">Ensure ip6tables loopback traffic is
configured</span><span lang="EN" style="font-size:11.5pt"></span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:11.5pt">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:11.5pt;color:black">Ensure sudo is installed</span><span lang="EN" style="font-size:11.5pt"></span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:11.5pt">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:11.5pt;color:black">Ensure sudo commands use pty</span><span lang="EN" style="font-size:11.5pt"></span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:11.5pt">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:11.5pt;color:black">Ensure sudo log file exists</span><span lang="EN" style="font-size:11.5pt"></span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:11.5pt">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:11.5pt;color:black">Ensure users must provide password for
privilege escalation</span><span lang="EN" style="font-size:11.5pt"></span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:11.5pt">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:11.5pt;color:black">Ensure re-authentication for privilege
escalation is not disabled globally</span><span lang="EN" style="font-size:11.5pt"></span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:11.5pt">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:11.5pt;color:black">Ensure access to the su command is
restricted</span><span lang="EN" style="font-size:11.5pt"></span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:11.5pt">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:11.5pt;color:black">Ensure strong password hashing algorithm
is configured</span><span lang="EN" style="font-size:11.5pt"></span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:11.5pt">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:11.5pt;color:black">Ensure all users last password change
date is in the past</span><span lang="EN" style="font-size:11.5pt"></span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:11.5pt">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:11.5pt;color:black">Ensure root is the only UID 0 account</span><span lang="EN" style="font-size:11.5pt"></span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:11.5pt">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:11.5pt;color:black">Ensure nologin is not listed in
/etc/shells</span><span lang="EN" style="font-size:11.5pt"></span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:11.5pt">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:11.5pt;color:black">Ensure default user shell timeout is
configured</span><span lang="EN" style="font-size:11.5pt"></span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:11.5pt">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:11.5pt;color:black">Ensure AIDE is installed</span><span lang="EN" style="font-size:11.5pt"></span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:11.5pt">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:11.5pt;color:black">Ensure filesystem integrity is regularly
checked</span><span lang="EN" style="font-size:11.5pt"></span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:11.5pt">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:11.5pt;color:black">Ensure cryptographic mechanisms are used
to protect the integrity of audit tools</span><span lang="EN" style="font-size:11.5pt"></span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:11.5pt">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:11.5pt;color:black">Ensure systemd-journal-remote is
installed</span><span lang="EN" style="font-size:11.5pt"></span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:11.5pt">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:11.5pt;color:black">Ensure rsyslog is installed</span><span lang="EN" style="font-size:11.5pt"></span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:11.5pt">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:11.5pt;color:black">Ensure journald is configured to send
logs to rsyslog</span><span lang="EN" style="font-size:11.5pt"></span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:11.5pt">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:11.5pt;color:black">Ensure rsyslog is configured to send logs
to a remote log host</span><span lang="EN" style="font-size:11.5pt"></span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:11.5pt">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:11.5pt;color:black">Ensure rsyslog is not configured to
receive logs from a remote client</span><span lang="EN" style="font-size:11.5pt"></span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:11.5pt">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:11.5pt;color:black">Ensure auditd service is enabled and
active</span><span lang="EN" style="font-size:11.5pt"></span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:11.5pt">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:11.5pt;color:black">Ensure auditing for processes that start
prior to auditd is enabled</span><span lang="EN" style="font-size:11.5pt"></span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:11.5pt">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:11.5pt;color:black">Ensure audit log storage size is
configured</span><span lang="EN" style="font-size:11.5pt"></span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:11.5pt">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:11.5pt;color:black">Ensure audit logs are not automatically
deleted</span><span lang="EN" style="font-size:11.5pt"></span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:11.5pt">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:11.5pt;color:black">Ensure system is disabled when audit logs
are full</span><span lang="EN" style="font-size:11.5pt"></span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:11.5pt">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:11.5pt;color:black">Ensure changes to system administration
scope (sudoers) is collected</span><span lang="EN" style="font-size:11.5pt"></span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:11.5pt">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:11.5pt;color:black">Ensure successful file system mounts are
collected</span><span lang="EN" style="font-size:11.5pt"></span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:11.5pt">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:11.5pt;color:black">Ensure session initiation information is
collected</span><span lang="EN" style="font-size:11.5pt"></span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:11.5pt">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:11.5pt;color:black">Ensure login and logout events are
collected</span><span lang="EN" style="font-size:11.5pt"></span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:11.5pt">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:11.5pt;color:black">Ensure file deletion events by users are
collected</span><span lang="EN" style="font-size:11.5pt"></span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:11.5pt">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:11.5pt;color:black">Ensure events that modify the system's
Mandatory Access Controls are collected</span><span lang="EN" style="font-size:11.5pt"></span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:11.5pt">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:11.5pt;color:black">Ensure kernel module loading unloading
and modification is collected</span><span lang="EN" style="font-size:11.5pt"></span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:11.5pt">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:11.5pt;color:black">Ensure actions as another user are always
logged</span><span lang="EN" style="font-size:11.5pt"></span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:11.5pt">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:11.5pt;color:black">Ensure the audit configuration is
immutable</span><span lang="EN" style="font-size:11.5pt"></span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:11.5pt">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:11.5pt;color:black">Ensure the running and on disk
configuration is the same</span><span lang="EN" style="font-size:11.5pt"></span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:11.5pt">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:11.5pt;color:black">Ensure events that modify the sudo log
file are collected</span><span lang="EN" style="font-size:11.5pt"></span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:11.5pt">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:11.5pt;color:black">Ensure events that modify date and time
information are collected</span><span lang="EN" style="font-size:11.5pt"></span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:11.5pt">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:11.5pt;color:black">Ensure events that modify the system's
network environment are collected</span><span lang="EN" style="font-size:11.5pt"></span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:11.5pt">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:11.5pt;color:black">Ensure use of privileged commands are
collected</span><span lang="EN" style="font-size:11.5pt"></span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:11.5pt">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:11.5pt;color:black">Ensure unsuccessful file access attempts
are collected</span><span lang="EN" style="font-size:11.5pt"></span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:11.5pt">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:11.5pt;color:black">Ensure events that modify user/group
information are collected</span><span lang="EN" style="font-size:11.5pt"></span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:11.5pt">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:11.5pt;color:black">Ensure discretionary access control
permission modification events are collected</span><span lang="EN" style="font-size:11.5pt"></span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:11.5pt">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:11.5pt;color:black">Ensure world writable files and
directories are secured</span><span lang="EN" style="font-size:11.5pt"></span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:11.5pt">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:11.5pt;color:black">Ensure accounts in /etc/passwd use
shadowed passwords</span><span lang="EN" style="font-size:11.5pt"></span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:11.5pt">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:11.5pt;color:black">Ensure local interactive user dot files
access is configured</span><span lang="EN" style="font-size:11.5pt"></span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:11.5pt">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:11.5pt;color:black">Ensure /etc/shadow password fields are
not empty</span><span lang="EN" style="font-size:11.5pt"></span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:11.5pt">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:11.5pt;color:black">Ensure all groups in /etc/passwd exist in
/etc/group</span><span lang="EN" style="font-size:11.5pt"></span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:11.5pt">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:11.5pt;color:black">Ensure shadow group is empty</span><span lang="EN" style="font-size:11.5pt"></span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:11.5pt">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:11.5pt;color:black">Ensure no duplicate UIDs exist</span><span lang="EN" style="font-size:11.5pt"></span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:11.5pt">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:11.5pt;color:black">Ensure no duplicate GIDs exist</span><span lang="EN" style="font-size:11.5pt"></span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:11.5pt">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:11.5pt;color:black">Ensure no duplicate user names exist</span><span lang="EN" style="font-size:11.5pt"></span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:11.5pt">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:11.5pt;color:black">Ensure no duplicate group names exist</span><span lang="EN" style="font-size:11.5pt"></span></p>
<p class="MsoNormal" style="margin:14pt 0in 0in 0.5in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:11.5pt"> </span></p>
<p class="MsoNormal" style="margin:14pt 0in 0in 0.5in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><b><span lang="EN" style="font-size:12.5pt;color:black">Deleted
Items:</span></b><span lang="EN" style="font-size:12.5pt"></span></p>
<p class="MsoNormal" style="margin:14pt 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:11.5pt">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:11.5pt;color:black">Ensure mounting of cramfs filesystems is
disabled</span><span lang="EN" style="font-size:11.5pt"></span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:11.5pt">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:11.5pt;color:black">Ensure mounting of freevxfs filesystems
is disabled</span><span lang="EN" style="font-size:11.5pt"></span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:11.5pt">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:11.5pt;color:black">Ensure mounting of jffs2 filesystems is
disabled</span><span lang="EN" style="font-size:11.5pt"></span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:11.5pt">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:11.5pt;color:black">Ensure mounting of hfs filesystems is
disabled</span><span lang="EN" style="font-size:11.5pt"></span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:11.5pt">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:11.5pt;color:black">Ensure mounting of hfsplus filesystems is
disabled</span><span lang="EN" style="font-size:11.5pt"></span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:11.5pt">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:11.5pt;color:black">Ensure mounting of squashfs filesystems
is disabled</span><span lang="EN" style="font-size:11.5pt"></span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:11.5pt">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:11.5pt;color:black">Ensure mounting of udf filesystems is
disabled</span><span lang="EN" style="font-size:11.5pt"></span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:11.5pt">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:11.5pt;color:black">Disable USB Storage</span><span lang="EN" style="font-size:11.5pt"></span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:11.5pt">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:11.5pt;color:black">Disable Automounting</span><span lang="EN" style="font-size:11.5pt"></span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:11.5pt">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:11.5pt;color:black">Ensure permissions on bootloader config
are configured</span><span lang="EN" style="font-size:11.5pt"></span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:11.5pt">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:11.5pt;color:black">Ensure authentication required for single
user mode</span><span lang="EN" style="font-size:11.5pt"></span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:11.5pt">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:11.5pt;color:black">Ensure address space layout randomization
(ASLR) is enabled</span><span lang="EN" style="font-size:11.5pt"></span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:11.5pt">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:11.5pt;color:black">Ensure AppArmor is installed</span><span lang="EN" style="font-size:11.5pt"></span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:11.5pt">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:11.5pt;color:black">Ensure all AppArmor Profiles are in
enforce or complain mode</span><span lang="EN" style="font-size:11.5pt"></span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:11.5pt">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:11.5pt;color:black">Ensure message of the day is configured
properly</span><span lang="EN" style="font-size:11.5pt"></span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:11.5pt">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:11.5pt;color:black">Ensure local login warning banner is
configured properly</span><span lang="EN" style="font-size:11.5pt"></span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:11.5pt">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:11.5pt;color:black">Ensure remote login warning banner is
configured properly</span><span lang="EN" style="font-size:11.5pt"></span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:11.5pt">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:11.5pt;color:black">Ensure permissions on /etc/motd are
configured</span><span lang="EN" style="font-size:11.5pt"></span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:11.5pt">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:11.5pt;color:black">Ensure permissions on /etc/issue are
configured</span><span lang="EN" style="font-size:11.5pt"></span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:11.5pt">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:11.5pt;color:black">Ensure permissions on /etc/<a href="http://issue.net">issue.net</a> are
configured</span><span lang="EN" style="font-size:11.5pt"></span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:11.5pt">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:11.5pt;color:black">Ensure GNOME Display Manager is removed</span><span lang="EN" style="font-size:11.5pt"></span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:11.5pt">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:11.5pt;color:black">Ensure XDCMP is not enabled</span><span lang="EN" style="font-size:11.5pt"></span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:11.5pt">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:11.5pt;color:black">Ensure ntp access control is configured</span><span lang="EN" style="font-size:11.5pt"></span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:11.5pt">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:11.5pt;color:black">Ensure ntp is configured with authorized
timeserver</span><span lang="EN" style="font-size:11.5pt"></span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:11.5pt">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:11.5pt;color:black">Ensure ntp is running as user ntp</span><span lang="EN" style="font-size:11.5pt"></span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:11.5pt">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:11.5pt;color:black">Ensure ntp is enabled and running</span><span lang="EN" style="font-size:11.5pt"></span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:11.5pt">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:11.5pt;color:black">Ensure X Window System is not installed</span><span lang="EN" style="font-size:11.5pt"></span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:11.5pt">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:11.5pt;color:black">Ensure IMAP and POP3 server are not
installed</span><span lang="EN" style="font-size:11.5pt"></span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:11.5pt">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:11.5pt;color:black">Ensure Samba is not installed</span><span lang="EN" style="font-size:11.5pt"></span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:11.5pt">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:11.5pt;color:black">Ensure HTTP Proxy Server is not installed</span><span lang="EN" style="font-size:11.5pt"></span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:11.5pt">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:11.5pt;color:black">Ensure SNMP Server is not installed</span><span lang="EN" style="font-size:11.5pt"></span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:11.5pt">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:11.5pt;color:black">Ensure NIS Server is not installed</span><span lang="EN" style="font-size:11.5pt"></span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:11.5pt">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:11.5pt;color:black">Ensure dnsmasq is not installed</span><span lang="EN" style="font-size:11.5pt"></span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:11.5pt">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:11.5pt;color:black">Ensure mail transfer agent is configured
for local-only mode</span><span lang="EN" style="font-size:11.5pt"></span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:11.5pt">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:11.5pt;color:black">Ensure rsync service is either not
installed or is masked</span><span lang="EN" style="font-size:11.5pt"></span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:11.5pt">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:11.5pt;color:black">Ensure Avahi Server is not installed</span><span lang="EN" style="font-size:11.5pt"></span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:11.5pt">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:11.5pt;color:black">Ensure CUPS is not installed</span><span lang="EN" style="font-size:11.5pt"></span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:11.5pt">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:11.5pt;color:black">Ensure DHCP Server is not installed</span><span lang="EN" style="font-size:11.5pt"></span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:11.5pt">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:11.5pt;color:black">Ensure LDAP server is not installed</span><span lang="EN" style="font-size:11.5pt"></span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:11.5pt">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:11.5pt;color:black">Ensure NFS is not installed</span><span lang="EN" style="font-size:11.5pt"></span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:11.5pt">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:11.5pt;color:black">Ensure DNS Server is not installed</span><span lang="EN" style="font-size:11.5pt"></span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:11.5pt">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:11.5pt;color:black">Ensure FTP Server is not installed</span><span lang="EN" style="font-size:11.5pt"></span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:11.5pt">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:11.5pt;color:black">Ensure HTTP server is not installed</span><span lang="EN" style="font-size:11.5pt"></span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:11.5pt">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:11.5pt;color:black">Ensure NIS Client is not installed</span><span lang="EN" style="font-size:11.5pt"></span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:11.5pt">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:11.5pt;color:black">Ensure LDAP client is not installed</span><span lang="EN" style="font-size:11.5pt"></span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:11.5pt">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:11.5pt;color:black">Ensure RPC is not installed</span><span lang="EN" style="font-size:11.5pt"></span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:11.5pt">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:11.5pt;color:black">Ensure nonessential services are removed
or masked</span><span lang="EN" style="font-size:11.5pt"></span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:11.5pt">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:11.5pt;color:black">Ensure wireless interfaces are disabled</span><span lang="EN" style="font-size:11.5pt"></span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:11.5pt">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:11.5pt;color:black">Ensure bluetooth is disabled</span><span lang="EN" style="font-size:11.5pt"></span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:11.5pt">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:11.5pt;color:black">Ensure DCCP is disabled</span><span lang="EN" style="font-size:11.5pt"></span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:11.5pt">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:11.5pt;color:black">Ensure SCTP is disabled</span><span lang="EN" style="font-size:11.5pt"></span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:11.5pt">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:11.5pt;color:black">Ensure RDS is disabled</span><span lang="EN" style="font-size:11.5pt"></span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:11.5pt">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:11.5pt;color:black">Ensure TIPC is disabled</span><span lang="EN" style="font-size:11.5pt"></span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:11.5pt">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:11.5pt;color:black">Ensure IP forwarding is disabled</span><span lang="EN" style="font-size:11.5pt"></span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:11.5pt">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:11.5pt;color:black">Ensure ICMP redirects are not accepted</span><span lang="EN" style="font-size:11.5pt"></span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:11.5pt">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:11.5pt;color:black">Ensure secure ICMP redirects are not
accepted</span><span lang="EN" style="font-size:11.5pt"></span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:11.5pt">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:11.5pt;color:black">Ensure broadcast ICMP requests are
ignored</span><span lang="EN" style="font-size:11.5pt"></span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:11.5pt">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:11.5pt;color:black">Ensure bogus ICMP responses are ignored</span><span lang="EN" style="font-size:11.5pt"></span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:11.5pt">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:11.5pt;color:black">Ensure Reverse Path Filtering is enabled</span><span lang="EN" style="font-size:11.5pt"></span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:11.5pt">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:11.5pt;color:black">Ensure TCP SYN Cookies is enabled</span><span lang="EN" style="font-size:11.5pt"></span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:11.5pt">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:11.5pt;color:black">Ensure IPv6 router advertisements are not
accepted</span><span lang="EN" style="font-size:11.5pt"></span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:11.5pt">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:11.5pt;color:black">Ensure nftables is not installed with
iptables</span><span lang="EN" style="font-size:11.5pt"></span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:11.5pt">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:11.5pt;color:black">Ensure ufw is uninstalled or disabled
with iptables</span><span lang="EN" style="font-size:11.5pt"></span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:11.5pt">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:11.5pt;color:black">Ensure permissions on /etc/crontab are
configured</span><span lang="EN" style="font-size:11.5pt"></span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:11.5pt">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:11.5pt;color:black">Ensure permissions on /etc/cron.hourly
are configured</span><span lang="EN" style="font-size:11.5pt"></span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:11.5pt">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:11.5pt;color:black">Ensure permissions on /etc/cron.daily are
configured</span><span lang="EN" style="font-size:11.5pt"></span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:11.5pt">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:11.5pt;color:black">Ensure permissions on /etc/cron.weekly
are configured</span><span lang="EN" style="font-size:11.5pt"></span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:11.5pt">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:11.5pt;color:black">Ensure permissions on /etc/cron.monthly
are configured</span><span lang="EN" style="font-size:11.5pt"></span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:11.5pt">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:11.5pt;color:black">Ensure permissions on /etc/cron.d are
configured</span><span lang="EN" style="font-size:11.5pt"></span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:11.5pt">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:11.5pt;color:black">Ensure cron is restricted to authorized
users</span><span lang="EN" style="font-size:11.5pt"></span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:11.5pt">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:11.5pt;color:black">Ensure at is restricted to authorized
users</span><span lang="EN" style="font-size:11.5pt"></span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:11.5pt">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:11.5pt;color:black">Ensure permissions on
/etc/ssh/sshd_config are configured</span><span lang="EN" style="font-size:11.5pt"></span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:11.5pt">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:11.5pt;color:black">Ensure SSH PermitUserEnvironment is
disabled</span><span lang="EN" style="font-size:11.5pt"></span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:11.5pt">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:11.5pt;color:black">Ensure SSH IgnoreRhosts is enabled</span><span lang="EN" style="font-size:11.5pt"></span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:11.5pt">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:11.5pt;color:black">Ensure SSH X11 forwarding is disabled</span><span lang="EN" style="font-size:11.5pt"></span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:11.5pt">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:11.5pt;color:black">Ensure only strong Ciphers are used</span><span lang="EN" style="font-size:11.5pt"></span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:11.5pt">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:11.5pt;color:black">Ensure only strong MAC algorithms are
used</span><span lang="EN" style="font-size:11.5pt"></span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:11.5pt">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:11.5pt;color:black">Ensure only strong Key Exchange
algorithms are used</span><span lang="EN" style="font-size:11.5pt"></span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:11.5pt">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:11.5pt;color:black">Ensure SSH AllowTcpForwarding is disabled</span><span lang="EN" style="font-size:11.5pt"></span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:11.5pt">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:11.5pt;color:black">Ensure SSH warning banner is configured</span><span lang="EN" style="font-size:11.5pt"></span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:11.5pt">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:11.5pt;color:black">Ensure SSH MaxAuthTries is set to 4 or
less</span><span lang="EN" style="font-size:11.5pt"></span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:11.5pt">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:11.5pt;color:black">Ensure SSH MaxStartups is configured</span><span lang="EN" style="font-size:11.5pt"></span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:11.5pt">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:11.5pt;color:black">Ensure permissions on SSH private host
key files are configured</span><span lang="EN" style="font-size:11.5pt"></span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:11.5pt">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:11.5pt;color:black">Ensure SSH LoginGraceTime is set to one
minute or less</span><span lang="EN" style="font-size:11.5pt"></span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:11.5pt">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:11.5pt;color:black">Ensure SSH MaxSessions is set to 10 or
less</span><span lang="EN" style="font-size:11.5pt"></span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:11.5pt">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:11.5pt;color:black">Ensure SSH Idle Timeout Interval is
configured</span><span lang="EN" style="font-size:11.5pt"></span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:11.5pt">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:11.5pt;color:black">Ensure permissions on SSH public host key
files are configured</span><span lang="EN" style="font-size:11.5pt"></span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:11.5pt">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:11.5pt;color:black">Ensure SSH access is limited</span><span lang="EN" style="font-size:11.5pt"></span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:11.5pt">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:11.5pt;color:black">Ensure SSH LogLevel is appropriate</span><span lang="EN" style="font-size:11.5pt"></span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:11.5pt">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:11.5pt;color:black">Ensure SSH PAM is enabled</span><span lang="EN" style="font-size:11.5pt"></span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:11.5pt">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:11.5pt;color:black">Ensure SSH root login is disabled</span><span lang="EN" style="font-size:11.5pt"></span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:11.5pt">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:11.5pt;color:black">Ensure SSH HostbasedAuthentication is
disabled</span><span lang="EN" style="font-size:11.5pt"></span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:11.5pt">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:11.5pt;color:black">Ensure SSH PermitEmptyPasswords is
disabled</span><span lang="EN" style="font-size:11.5pt"></span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:11.5pt">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:11.5pt;color:black">Ensure sudo authentication timeout is
configured correctly</span><span lang="EN" style="font-size:11.5pt"></span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:11.5pt">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:11.5pt;color:black">Ensure password creation requirements are
configured</span><span lang="EN" style="font-size:11.5pt"></span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:11.5pt">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:11.5pt;color:black">Ensure lockout for failed password
attempts is configured</span><span lang="EN" style="font-size:11.5pt"></span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:11.5pt">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:11.5pt;color:black">Ensure password reuse is limited</span><span lang="EN" style="font-size:11.5pt"></span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:11.5pt">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:11.5pt;color:black">Ensure all current passwords uses the
configured hashing algorithm</span><span lang="EN" style="font-size:11.5pt"></span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:11.5pt">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:11.5pt;color:black">Ensure minimum days between password
changes is configured</span><span lang="EN" style="font-size:11.5pt"></span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:11.5pt">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:11.5pt;color:black">Ensure password expiration is 365 days or
less</span><span lang="EN" style="font-size:11.5pt"></span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:11.5pt">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:11.5pt;color:black">Ensure password expiration warning days
is 7 or more</span><span lang="EN" style="font-size:11.5pt"></span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:11.5pt">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:11.5pt;color:black">Ensure inactive password lock is 30 days
or less</span><span lang="EN" style="font-size:11.5pt"></span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:11.5pt">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:11.5pt;color:black">Ensure the number of changed characters
in a new password is configured</span><span lang="EN" style="font-size:11.5pt"></span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:11.5pt">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:11.5pt;color:black">Ensure preventing the use of dictionary
words for passwords is configured</span><span lang="EN" style="font-size:11.5pt"></span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:11.5pt">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:11.5pt;color:black">Ensure system accounts are secured</span><span lang="EN" style="font-size:11.5pt"></span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:11.5pt">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:11.5pt;color:black">Ensure default group for the root account
is GID 0</span><span lang="EN" style="font-size:11.5pt"></span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:11.5pt">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:11.5pt;color:black">Ensure default user umask is 027 or more
restrictive</span><span lang="EN" style="font-size:11.5pt"></span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:11.5pt">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:11.5pt;color:black">Ensure maximum number of same consecutive
characters in a password is configured</span><span lang="EN" style="font-size:11.5pt"></span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:11.5pt">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:11.5pt;color:black">Ensure systemd-journal-remote is
configured</span><span lang="EN" style="font-size:11.5pt"></span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:11.5pt">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:11.5pt;color:black">Ensure systemd-journal-remote is enabled</span><span lang="EN" style="font-size:11.5pt"></span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:11.5pt">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:11.5pt;color:black">Ensure journald is not configured to
receive logs from a remote client</span><span lang="EN" style="font-size:11.5pt"></span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:11.5pt">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:11.5pt;color:black">Ensure journald service is enabled</span><span lang="EN" style="font-size:11.5pt"></span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:11.5pt">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:11.5pt;color:black">Ensure journald is configured to compress
large log files</span><span lang="EN" style="font-size:11.5pt"></span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:11.5pt">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:11.5pt;color:black">Ensure journald is configured to write
logfiles to persistent disk</span><span lang="EN" style="font-size:11.5pt"></span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:11.5pt">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:11.5pt;color:black">Ensure journald is not configured to send
logs to rsyslog</span><span lang="EN" style="font-size:11.5pt"></span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:11.5pt">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:11.5pt;color:black">Ensure journald log rotation is
configured per site policy</span><span lang="EN" style="font-size:11.5pt"></span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:11.5pt">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:11.5pt;color:black">Ensure journald default file permissions
configured</span><span lang="EN" style="font-size:11.5pt"></span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:11.5pt">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:11.5pt;color:black">Ensure rsyslog service is enabled</span><span lang="EN" style="font-size:11.5pt"></span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:11.5pt">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:11.5pt;color:black">Ensure rsyslog default file permissions
are configured</span><span lang="EN" style="font-size:11.5pt"></span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:11.5pt">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:11.5pt;color:black">Ensure logging is configured</span><span lang="EN" style="font-size:11.5pt"></span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:11.5pt">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:11.5pt;color:black">Ensure all logfiles have appropriate
access configured</span><span lang="EN" style="font-size:11.5pt"></span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:11.5pt">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:11.5pt;color:black">Ensure auditd is installed</span><span lang="EN" style="font-size:11.5pt"></span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:11.5pt">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:11.5pt;color:black">Ensure audit_backlog_limit is sufficient</span><span lang="EN" style="font-size:11.5pt"></span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:11.5pt">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:11.5pt;color:black">Ensure successful and unsuccessful
attempts to use the chcon command are recorded</span><span lang="EN" style="font-size:11.5pt"></span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:11.5pt">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:11.5pt;color:black">Ensure successful and unsuccessful
attempts to use the setfacl command are recorded</span><span lang="EN" style="font-size:11.5pt"></span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:11.5pt">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:11.5pt;color:black">Ensure successful and unsuccessful
attempts to use the chacl command are recorded</span><span lang="EN" style="font-size:11.5pt"></span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:11.5pt">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:11.5pt;color:black">Ensure successful and unsuccessful
attempts to use the usermod command are recorded</span><span lang="EN" style="font-size:11.5pt"></span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:11.5pt">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:11.5pt;color:black">Ensure audit log files are mode 0640 or
less permissive</span><span lang="EN" style="font-size:11.5pt"></span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:11.5pt">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:11.5pt;color:black">Ensure audit tools belong to group root</span><span lang="EN" style="font-size:11.5pt"></span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:11.5pt">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:11.5pt;color:black">Ensure only authorized users own audit
log files</span><span lang="EN" style="font-size:11.5pt"></span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:11.5pt">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:11.5pt;color:black">Ensure only authorized groups are
assigned ownership of audit log files</span><span lang="EN" style="font-size:11.5pt"></span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:11.5pt">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:11.5pt;color:black">Ensure the audit log directory is 0750 or
more restrictive</span><span lang="EN" style="font-size:11.5pt"></span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:11.5pt">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:11.5pt;color:black">Ensure audit configuration files are 640
or more restrictive</span><span lang="EN" style="font-size:11.5pt"></span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:11.5pt">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:11.5pt;color:black">Ensure audit configuration files are
owned by root</span><span lang="EN" style="font-size:11.5pt"></span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:11.5pt">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:11.5pt;color:black">Ensure audit configuration files belong
to group root</span><span lang="EN" style="font-size:11.5pt"></span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:11.5pt">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:11.5pt;color:black">Ensure audit tools are 755 or more
restrictive</span><span lang="EN" style="font-size:11.5pt"></span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:11.5pt">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:11.5pt;color:black">Ensure audit tools are owned by root</span><span lang="EN" style="font-size:11.5pt"></span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:11.5pt">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:11.5pt;color:black">Ensure permissions on /etc/passwd are
configured</span><span lang="EN" style="font-size:11.5pt"></span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:11.5pt">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:11.5pt;color:black">Ensure permissions on /etc/opasswd are
configured</span><span lang="EN" style="font-size:11.5pt"></span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:11.5pt">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:11.5pt;color:black">Ensure no unowned or ungrouped files or
directories exist</span><span lang="EN" style="font-size:11.5pt"></span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:11.5pt">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:11.5pt;color:black">Ensure permissions on /etc/passwd- are
configured</span><span lang="EN" style="font-size:11.5pt"></span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:11.5pt">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:11.5pt;color:black">Ensure permissions on /etc/group are
configured</span><span lang="EN" style="font-size:11.5pt"></span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:11.5pt">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:11.5pt;color:black">Ensure permissions on /etc/group- are
configured</span><span lang="EN" style="font-size:11.5pt"></span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:11.5pt">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:11.5pt;color:black">Ensure permissions on /etc/shadow are
configured</span><span lang="EN" style="font-size:11.5pt"></span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:11.5pt">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:11.5pt;color:black">Ensure permissions on /etc/shadow- are
configured</span><span lang="EN" style="font-size:11.5pt"></span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:11.5pt">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:11.5pt;color:black">Ensure permissions on /etc/gshadow are
configured</span><span lang="EN" style="font-size:11.5pt"></span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:11.5pt">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:11.5pt;color:black">Ensure permissions on /etc/gshadow- are
configured</span><span lang="EN" style="font-size:11.5pt"></span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:11.5pt">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:11.5pt;color:black">Ensure permissions on /etc/shells are
configured</span><span lang="EN" style="font-size:11.5pt"></span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:11.5pt">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:11.5pt;color:black">Ensure root PATH Integrity</span><span lang="EN" style="font-size:11.5pt"></span></p>
<p class="MsoNormal" style="margin:14pt 0in 0in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:11.5pt"> </span></p>
<p class="MsoNormal" style="margin:14pt 0in 0in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><b><span lang="EN" style="font-size:11.5pt;color:black">Additional
details:</span></b><b><span lang="EN" style="font-size:11.5pt"></span></b></p>
<p class="MsoNormal" style="margin:14pt 0in 0in 51pt;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:10pt;font-family:"Noto Sans Symbols"">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman""> </span></span><span lang="EN" style="font-size:11.5pt;color:black">Both
analysis and remediation checks are included</span><span lang="EN" style="font-size:11.5pt"></span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 51pt;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:10pt;font-family:"Noto Sans Symbols"">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman""> </span></span><span lang="EN" style="font-size:11.5pt;color:black">Some of
the checks allow you to use the parameterized setting to enable customization
for compliance evaluation. Note that parameterization and remediation actions
require the creation of a custom site.<br>
Improved few checks by adding the pending restart feature to them. The pending
restart feature works in the following ways:</span><span lang="EN"></span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 51pt;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:10pt;font-family:"Noto Sans Symbols"">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman""> </span></span><span lang="EN" style="font-size:11.5pt;color:black">The
action results will show “Pending Restart” instead of “Fixed” for those checks
which requires OS reboot.</span><span lang="EN"></span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 51pt;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:10pt;font-family:"Noto Sans Symbols"">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman""> </span></span><span lang="EN" style="font-size:11.5pt;color:black">The check
will show relevant for those endpoints until they are rebooted.</span><span lang="EN"></span></p>
<p class="MsoNormal" style="margin:0in 0in 14pt 51pt;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:10pt;font-family:"Noto Sans Symbols"">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman""> </span></span><span lang="EN" style="font-size:11.5pt;color:black">Post
reboot of the endpoint the action results will show as “Fixed” and the check
will be compliant.</span><span lang="EN"></span></p>
<p class="MsoNormal" style="margin:14pt 0in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><b><span lang="EN" style="font-size:11.5pt;color:black">Actions to take:</span></b><span lang="EN" style="font-size:11.5pt"></span></p>
<p class="MsoNormal" style="margin:14pt 0in 0in 51pt;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:10pt;font-family:"Noto Sans Symbols"">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman""> </span></span><span lang="EN" style="font-size:11.5pt;color:black">To
subscribe to the above site, you can use the License Overview Dashboard to
enable and gather the site. Note that you must be entitled to the BigFix
Compliance product and you must be using BigFix version 9.5 and later.</span><span lang="EN"></span></p>
<p class="MsoNormal" style="margin:0in 0in 14pt 51pt;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:10pt;font-family:"Noto Sans Symbols"">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman""> </span></span><span lang="EN" style="font-size:11.5pt;color:black">If you
use custom sites, update your custom sites accordingly to use the latest
content. You can synchronize your content by using the Synchronize Custom
Checks wizard. For more information, see</span><span lang="EN" style="color:black"> <a href="https://help.hcltechsw.com/bigfix/11.0/compliance/Compliance/SCM_Users_Guide/c_using_synchronize_custom_checks_wiz.html"><span style="font-size:11.5pt;color:blue;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial">Using
the Synchronize Custom Checks wizard</span></a></span><span lang="EN"></span></p>
<p class="MsoNormal" style="margin:14pt 0in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><b><span lang="EN" style="font-size:11.5pt;color:black">More information:</span></b><span lang="EN" style="font-size:11.5pt;color:black"><br>
To know more about the BigFix Compliance SCM checklists, please see the
following resources:</span><span lang="EN" style="font-size:11.5pt"></span></p>
<p class="MsoNormal" style="margin:14pt 0in 0in 51pt;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:10pt;font-family:"Noto Sans Symbols"">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman""> </span></span><span lang="EN" style="font-size:11.5pt;color:black">BigFix
Forum:<br>
</span><span lang="EN" style="color:black"><a href="https://forum.bigfix.com/c/release-announcements/compliance"><span style="font-size:11.5pt;color:blue;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial">https://forum.bigfix.com/c/release-announcements/compliance</span></a></span><span lang="EN" style="font-size:11.5pt;color:black"> </span><span lang="EN"></span></p>
<p class="MsoNormal" style="margin:0in 0in 14pt 51pt;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:10pt;font-family:"Noto Sans Symbols"">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman""> </span></span><span lang="EN" style="font-size:11.5pt;color:black">BigFix
Compliance SCM Checklists:<br>
</span><span lang="EN" style="color:black"><a href="https://bigfix-wiki.hcltechsw.com/wikis/home?lang=enus#!/wiki/BigFix%20Wiki/page/SCM%20Checklists"><span style="font-size:11.5pt;color:blue;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial">Welcome
to Wikis</span></a></span><span lang="EN"></span></p>
<p class="MsoNormal" style="margin:14pt 0in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:11.5pt;color:black">We hope you find
this latest release of SCM content useful and effective. Thank you!</span><span lang="EN" style="font-size:11.5pt"></span></p>
<p class="MsoNormal" style="margin:14pt 0in 8pt;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><i><span lang="EN" style="font-size:11.5pt;color:black">– The BigFix Compliance team</span></i><span lang="EN" style="font-size:11.5pt"></span></p></div>