<div dir="ltr"><p class="MsoNormal" style="margin:0in 0in 12pt;line-height:115%;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><b><span lang="EN" style="font-size:10.5pt;line-height:115%;font-family:Arial,sans-serif">Product:<br>
</span></b><span lang="EN" style="font-size:10.5pt;line-height:115%;font-family:Arial,sans-serif"> BigFix Compliance</span></p>

<p class="MsoNormal" style="margin:12pt 0in;line-height:115%;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><b><span lang="EN" style="font-size:10.5pt;line-height:115%;font-family:Arial,sans-serif">Title:<br>
</span></b><span lang="EN" style="font-size:10.5pt;line-height:115%;font-family:Arial,sans-serif"> </span><span lang="EN" style="font-size:12pt;line-height:115%;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial">Updated
DISA STIG Checklist for SUSE Linux 12.</span><span lang="EN" style="font-size:10.5pt;line-height:115%;font-family:Arial,sans-serif"></span></p>

<p class="MsoNormal" style="margin:12pt 0in;line-height:115%;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><b><span lang="EN" style="font-size:10.5pt;line-height:115%;font-family:Arial,sans-serif">Security Benchmark:<br>
</span></b><span lang="EN" style="font-size:10.5pt;line-height:115%;font-family:Arial,sans-serif"> </span><span lang="EN" style="font-size:12pt;line-height:115%;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial">DISA STIG
Checklist for SUSE Linux 12 Benchmark, v3r3</span><span lang="EN" style="font-size:10.5pt;line-height:115%;font-family:Arial,sans-serif"></span></p>

<p class="MsoNormal" style="margin:12pt 0in;line-height:115%;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><b><span lang="EN" style="font-size:10.5pt;line-height:115%;font-family:Arial,sans-serif">Published Sites:<br>
</span></b><span lang="EN" style="font-size:10.5pt;line-height:115%;font-family:Arial,sans-serif"> </span><span lang="EN" style="font-size:12pt;line-height:115%;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial">DISA STIG
Checklist for SUSE Linux 12, site version 5</span><span lang="EN" style="font-size:10.5pt;line-height:115%;font-family:Arial,sans-serif"><br>
 (The site version is provided for
air-gap customers.)</span></p>

<p class="MsoNormal" style="margin:14pt 0in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><b><span lang="EN" style="font-size:11.5pt;color:black">Details:</span></b><span lang="EN" style="font-size:11.5pt"></span></p>

<p class="MsoNormal" style="margin:14pt 0in 0in 51pt;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:11.5pt;font-family:"Noto Sans Symbols"">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">      </span></span><span lang="EN" style="font-size:11.5pt;color:black">Total New
Fixlets:  1</span><span lang="EN" style="font-size:11.5pt;font-family:"Noto Sans Symbols""></span></p>

<p class="MsoNormal" style="margin:14pt 0in 0in 51pt;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:11.5pt;font-family:"Noto Sans Symbols"">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">      </span></span><span lang="EN" style="font-size:11.5pt;color:black">Total
Updated Fixlets:  96</span><span lang="EN" style="font-size:11.5pt;font-family:"Noto Sans Symbols""></span></p>

<p class="MsoNormal" style="margin:14pt 0in 0in 51pt;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:11.5pt;font-family:"Noto Sans Symbols"">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">      </span></span><span lang="EN" style="font-size:11.5pt;color:black">Total
Deleted Fixlets: 3</span><span lang="EN" style="font-size:11.5pt;font-family:"Noto Sans Symbols""></span></p>

<p class="MsoNormal" style="margin:14pt 0in 0in 51pt;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:11.5pt;font-family:"Noto Sans Symbols"">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">      </span></span><span lang="EN" style="font-size:11.5pt;color:black">Total
Fixlets in Site: 203</span><span lang="EN" style="font-size:11.5pt;font-family:"Noto Sans Symbols""></span></p>

<p class="MsoNormal" style="margin:14pt 0in 0in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:11.5pt;color:black">             </span><b><span lang="EN" style="font-size:12.5pt;color:black">ADDED :</span></b><b><span lang="EN" style="font-size:12.5pt"></span></b></p>

<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:11.5pt">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">     
</span></span><span lang="EN" style="color:black">The SUSE operating system must initiate a session lock after a
10-minute period of inactivity.</span><span lang="EN" style="font-size:11.5pt"></span></p>

<p class="MsoNormal" style="margin:14pt 0in 0in 0.5in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><b><span lang="EN" style="font-size:12.5pt;color:black">UPDATED :</span></b><span lang="EN" style="font-size:11.5pt"></span></p>

<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:11.5pt">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">     
</span></span><span lang="EN" style="font-size:10pt;font-family:Arial,sans-serif">The
SUSE operating system must display a banner before granting local or remote
access to the system via a graphical user logon.</span><span lang="EN" style="font-size:11.5pt"></span></p>

<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:11.5pt">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">     
</span></span><span lang="EN" style="font-size:10pt;font-family:Arial,sans-serif">The
sticky bit must be set on all SUSE operating system world-writable directories.</span><span lang="EN" style="font-size:11.5pt"></span></p>

<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:11.5pt">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">     
</span></span><span lang="EN" style="font-size:10pt;font-family:Arial,sans-serif">The
SUSE operating system must not have duplicate User IDs (UIDs) for interactive
users.</span><span lang="EN" style="font-size:11.5pt"></span></p>

<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:11.5pt">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">     
</span></span><span lang="EN" style="font-size:10pt;font-family:Arial,sans-serif">All
SUSE operating system files and directories must have a valid owner.</span><span lang="EN" style="font-size:11.5pt"></span></p>

<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:11.5pt">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">     
</span></span><span lang="EN" style="font-size:10pt;font-family:Arial,sans-serif">All
SUSE operating system files and directories must have a valid group owner.</span><span lang="EN" style="font-size:11.5pt"></span></p>

<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:11.5pt">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">     
</span></span><span lang="EN" style="font-size:10pt;font-family:Arial,sans-serif">All
SUSE operating system local initialization files must have mode 0740 or less
permissive.</span><span lang="EN" style="font-size:11.5pt"></span></p>

<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:11.5pt">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">     
</span></span><span lang="EN" style="font-size:10pt;font-family:Arial,sans-serif">All
SUSE operating system local interactive user initialization files executable
search paths must contain only paths that resolve to the users home directory.</span><span lang="EN" style="font-size:11.5pt"></span></p>

<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:11.5pt">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">     
</span></span><span lang="EN" style="font-size:10pt;font-family:Arial,sans-serif">SUSE
operating system file systems that contain user home directories must be
mounted to prevent files with the setuid and setgid bit set from being
executed.</span><span lang="EN" style="font-size:11.5pt"></span></p>

<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:11.5pt">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">     
</span></span><span lang="EN" style="font-size:10pt;font-family:Arial,sans-serif">All
SUSE operating system world-writable directories must be group-owned by root,
sys, bin, or an application group.</span><span lang="EN" style="font-size:11.5pt"></span></p>

<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:11.5pt">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">     
</span></span><span lang="EN" style="font-size:10pt;font-family:Arial,sans-serif">The
SUSE operating system must use a separate file system for the system audit data
path.</span><span lang="EN" style="font-size:11.5pt"></span></p>

<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:11.5pt">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">     
</span></span><span lang="EN" style="font-size:10pt;font-family:Arial,sans-serif">The
SUSE operating system must allocate audit record storage capacity to store at
least one weeks worth of audit records when audit records are not immediately
sent to a central audit record storage facility.</span><span lang="EN" style="font-size:11.5pt"></span></p>

<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:11.5pt">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">     
</span></span><span lang="EN" style="font-size:10pt;font-family:Arial,sans-serif">The
SUSE operating system must not allow automatic logon via SSH.</span><span lang="EN" style="font-size:11.5pt"></span></p>

<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:11.5pt">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">     
</span></span><span lang="EN" style="font-size:10pt;font-family:Arial,sans-serif">The
SUSE operating system must not allow users to override SSH environment
variables.</span><span lang="EN" style="font-size:11.5pt"></span></p>

<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:11.5pt">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">     
</span></span><span lang="EN" style="font-size:10pt;font-family:Arial,sans-serif">The
SUSE operating system must use a virus scan program.</span><span lang="EN" style="font-size:11.5pt"></span></p>

<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:11.5pt">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">     
</span></span><span lang="EN" style="font-size:10pt;font-family:Arial,sans-serif">The
SUSE operating system SSH daemon must prevent remote hosts from connecting to
the proxy display.</span><span lang="EN" style="font-size:11.5pt"></span></p>

<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:11.5pt">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">     
</span></span><span lang="EN" style="font-size:10pt;font-family:Arial,sans-serif">The
SUSE operating system must generate audit records for all uses of the unlink,
unlinkat, rename, renameat and rmdir syscalls.</span><span lang="EN" style="font-size:11.5pt"></span></p>

<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:11.5pt">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">     
</span></span><span lang="EN" style="font-size:10pt;font-family:Arial,sans-serif">The
SUSE operating system must restrict access to the kernel message buffer.</span><span lang="EN" style="font-size:11.5pt"></span></p>

<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:11.5pt">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">     
</span></span><span lang="EN" style="font-size:10pt;font-family:Arial,sans-serif">The
SUSE operating system must employ FIPS 140-3 approved cryptographic hashing
algorithms for all stored passwords.</span><span lang="EN" style="font-size:11.5pt"></span></p>

<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:11.5pt">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">     
</span></span><span lang="EN" style="font-size:10pt;font-family:Arial,sans-serif">There
must be no .shosts files on the SUSE operating system.</span><span lang="EN" style="font-size:11.5pt"></span></p>

<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:11.5pt">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">     
</span></span><span lang="EN" style="font-size:10pt;font-family:Arial,sans-serif">There
must be no shosts.equiv files on the SUSE operating system.</span><span lang="EN" style="font-size:11.5pt"></span></p>

<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:11.5pt">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">     
</span></span><span lang="EN" style="font-size:10pt;font-family:Arial,sans-serif">SUSE
operating system file systems that are being imported via Network File System
(NFS) must be mounted to prevent files with the setuid and setgid bit set from
being executed.</span><span lang="EN" style="font-size:11.5pt"></span></p>

<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:11.5pt">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">     
</span></span><span lang="EN" style="font-size:10pt;font-family:Arial,sans-serif">SUSE
operating system file systems that are being imported via Network File System
(NFS) must be mounted to prevent binary files from being executed.</span><span lang="EN" style="font-size:11.5pt"></span></p>

<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:11.5pt">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">     
</span></span><span lang="EN" style="font-size:10pt;font-family:Arial,sans-serif">The
SUSE operating system must use a separate file system for /var.</span><span lang="EN" style="font-size:11.5pt"></span></p>

<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:11.5pt">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">     
</span></span><span lang="EN" style="font-size:10pt;font-family:Arial,sans-serif">The
SUSE operating system must generate audit records for all account creations,
modifications, disabling, and termination events that affect /etc/passwd.</span><span lang="EN" style="font-size:11.5pt"></span></p>

<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:11.5pt">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">     
</span></span><span lang="EN" style="font-size:10pt;font-family:Arial,sans-serif">The
SUSE operating system must generate audit records for all account creations,
modifications, disabling, and termination events that affect /etc/group.</span><span lang="EN" style="font-size:11.5pt"></span></p>

<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:11.5pt">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">     
</span></span><span lang="EN" style="font-size:10pt;font-family:Arial,sans-serif">The
SUSE operating system must generate audit records for all account creations,
modifications, disabling, and termination events that affect /etc/shadow.</span><span lang="EN" style="font-size:11.5pt"></span></p>

<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:11.5pt">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">     
</span></span><span lang="EN" style="font-size:10pt;font-family:Arial,sans-serif">The
SUSE operating system must generate audit records for all account creations,
modifications, disabling, and termination events that affect /etc/opasswd.</span><span lang="EN" style="font-size:11.5pt"></span></p>

<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:11.5pt">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">     
</span></span><span lang="EN" style="font-size:10pt;font-family:Arial,sans-serif">The
SUSE operating system must generate audit records for all uses of the
privileged functions.</span><span lang="EN" style="font-size:11.5pt"></span></p>

<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:11.5pt">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">     
</span></span><span lang="EN" style="font-size:10pt;font-family:Arial,sans-serif">The
SUSE operating system must generate audit records for all uses of the su
command.</span><span lang="EN" style="font-size:11.5pt"></span></p>

<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:11.5pt">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">     
</span></span><span lang="EN" style="font-size:10pt;font-family:Arial,sans-serif">The
SUSE operating system must generate audit records for all uses of the sudo
command.</span><span lang="EN" style="font-size:11.5pt"></span></p>

<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:11.5pt">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">     
</span></span><span lang="EN" style="font-size:10pt;font-family:Arial,sans-serif">The
SUSE operating system must generate audit records for all uses of the chfn
command.</span><span lang="EN" style="font-size:11.5pt"></span></p>

<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:11.5pt">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">     
</span></span><span lang="EN" style="font-size:10pt;font-family:Arial,sans-serif">The
SUSE operating system must generate audit records for all uses of the mount
command.</span><span lang="EN" style="font-size:11.5pt"></span></p>

<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:11.5pt">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">     
</span></span><span lang="EN" style="font-size:10pt;font-family:Arial,sans-serif">The
SUSE operating system must generate audit records for all uses of the umount
command.</span><span lang="EN" style="font-size:11.5pt"></span></p>

<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:11.5pt">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">     
</span></span><span lang="EN" style="font-size:10pt;font-family:Arial,sans-serif">The
SUSE operating system must generate audit records for all uses of the ssh-agent
command.</span><span lang="EN" style="font-size:11.5pt"></span></p>

<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:11.5pt">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">     
</span></span><span lang="EN" style="font-size:10pt;font-family:Arial,sans-serif">The
SUSE operating system must generate audit records for all uses of the
ssh-keysign command.</span><span lang="EN" style="font-size:11.5pt"></span></p>

<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:11.5pt">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">     
</span></span><span lang="EN" style="font-size:10pt;font-family:Arial,sans-serif">The
SUSE operating system must generate audit records for all uses of the kmod
command.</span><span lang="EN" style="font-size:11.5pt"></span></p>

<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:11.5pt">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">     
</span></span><span lang="EN" style="font-size:10pt;font-family:Arial,sans-serif">The
SUSE operating system must generate audit records for all uses of the setxattr,
fsetxattr, lsetxattr, removexattr, fremovexattr, and lremovexattr syscalls.</span><span lang="EN" style="font-size:11.5pt"></span></p>

<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:11.5pt">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">     
</span></span><span lang="EN" style="font-size:10pt;font-family:Arial,sans-serif">The
SUSE operating system must generate audit records for all uses of the chown,
fchown, fchownat, and lchown syscalls.</span><span lang="EN" style="font-size:11.5pt"></span></p>

<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:11.5pt">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">     
</span></span><span lang="EN" style="font-size:10pt;font-family:Arial,sans-serif">The
SUSE operating system must generate audit records for all uses of the chmod,
fchmod, and fchmodat system calls.</span><span lang="EN" style="font-size:11.5pt"></span></p>

<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:11.5pt">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">     
</span></span><span lang="EN" style="font-size:10pt;font-family:Arial,sans-serif">The
SUSE operating system must generate audit records for all uses of the creat,
open, openat, open_by_handle_at, truncate, and ftruncate syscalls.</span><span lang="EN" style="font-size:11.5pt"></span></p>

<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:11.5pt">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">     
</span></span><span lang="EN" style="font-size:10pt;font-family:Arial,sans-serif">The
SUSE operating system must generate audit records for all uses of the passwd
command.</span><span lang="EN" style="font-size:11.5pt"></span></p>

<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:11.5pt">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">     
</span></span><span lang="EN" style="font-size:10pt;font-family:Arial,sans-serif">The
SUSE operating system must generate audit records for all uses of the gpasswd
command.</span><span lang="EN" style="font-size:11.5pt"></span></p>

<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:11.5pt">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">     
</span></span><span lang="EN" style="font-size:10pt;font-family:Arial,sans-serif">The
SUSE operating system must generate audit records for all uses of the newgrp
command.</span><span lang="EN" style="font-size:11.5pt"></span></p>

<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:11.5pt">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">     
</span></span><span lang="EN" style="font-size:10pt;font-family:Arial,sans-serif">The
SUSE operating system must generate audit records for a uses of the chsh
command.</span><span lang="EN" style="font-size:11.5pt"></span></p>

<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:11.5pt">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">     
</span></span><span lang="EN" style="font-size:10pt;font-family:Arial,sans-serif">The
SUSE operating system must generate audit records for all account creations,
modifications, disabling, and termination events that affect /etc/gshadow.</span><span lang="EN" style="font-size:11.5pt"></span></p>

<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:11.5pt">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">     
</span></span><span lang="EN" style="font-size:10pt;font-family:Arial,sans-serif">The
SUSE operating system must generate audit records for all uses of the chmod
command.</span><span lang="EN" style="font-size:11.5pt"></span></p>

<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:11.5pt">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">     
</span></span><span lang="EN" style="font-size:10pt;font-family:Arial,sans-serif">The
SUSE operating system must generate audit records for all uses of the setfacl
command.</span><span lang="EN" style="font-size:11.5pt"></span></p>

<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:11.5pt">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">     
</span></span><span lang="EN" style="font-size:10pt;font-family:Arial,sans-serif">The
SUSE operating system must generate audit records for all uses of the chacl
command.</span><span lang="EN" style="font-size:11.5pt"></span></p>

<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:11.5pt">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">     
</span></span><span lang="EN" style="font-size:10pt;font-family:Arial,sans-serif">Successful/unsuccessful
attempts to modify categories of information (e.g., classification levels) must
generate audit records.</span><span lang="EN" style="font-size:11.5pt"></span></p>

<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:11.5pt">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">     
</span></span><span lang="EN" style="font-size:10pt;font-family:Arial,sans-serif">The
SUSE operating system must generate audit records for all uses of the rm
command.</span><span lang="EN" style="font-size:11.5pt"></span></p>

<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:11.5pt">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">     
</span></span><span lang="EN" style="font-size:10pt;font-family:Arial,sans-serif">The
SUSE operating system must generate audit records for all modifications to the
tallylog file must generate an audit record.</span><span lang="EN" style="font-size:11.5pt"></span></p>

<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:11.5pt">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">     
</span></span><span lang="EN" style="font-size:10pt;font-family:Arial,sans-serif">The
SUSE operating system must generate audit records for all modifications to the
lastlog file.</span><span lang="EN" style="font-size:11.5pt"></span></p>

<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:11.5pt">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">     
</span></span><span lang="EN" style="font-size:10pt;font-family:Arial,sans-serif">The
SUSE operating system must generate audit records for all uses of the passmass
command.</span><span lang="EN" style="font-size:11.5pt"></span></p>

<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:11.5pt">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">     
</span></span><span lang="EN" style="font-size:10pt;font-family:Arial,sans-serif">The
SUSE operating system must generate audit records for all uses of the
unix_chkpwd command.</span><span lang="EN" style="font-size:11.5pt"></span></p>

<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:11.5pt">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">     
</span></span><span lang="EN" style="font-size:10pt;font-family:Arial,sans-serif">The
SUSE operating system must generate audit records for all uses of the chage
command.</span><span lang="EN" style="font-size:11.5pt"></span></p>

<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:11.5pt">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">     
</span></span><span lang="EN" style="font-size:10pt;font-family:Arial,sans-serif">The
SUSE operating system must generate audit records for all uses of the usermod
command.</span><span lang="EN" style="font-size:11.5pt"></span></p>

<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:11.5pt">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">     
</span></span><span lang="EN" style="font-size:10pt;font-family:Arial,sans-serif">The
SUSE operating system must generate audit records for all uses of the crontab
command.</span><span lang="EN" style="font-size:11.5pt"></span></p>

<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:11.5pt">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">     
</span></span><span lang="EN" style="font-size:10pt;font-family:Arial,sans-serif">The
SUSE operating system must generate audit records for all uses of the
pam_timestamp_check command.</span><span lang="EN" style="font-size:11.5pt"></span></p>

<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:11.5pt">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">     
</span></span><span lang="EN" style="font-size:10pt;font-family:Arial,sans-serif">The
SUSE operating system must generate audit records for all uses of the
delete_module command.</span><span lang="EN" style="font-size:11.5pt"></span></p>

<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:11.5pt">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">     
</span></span><span lang="EN" style="font-size:10pt;font-family:Arial,sans-serif">The
SUSE operating system must generate audit records for all uses of the
init_module and finit_module syscalls.</span><span lang="EN" style="font-size:11.5pt"></span></p>

<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:11.5pt">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">     
</span></span><span lang="EN" style="font-size:10pt;font-family:Arial,sans-serif">The
SUSE operating system must generate audit records for all modifications to the
faillog file.</span><span lang="EN" style="font-size:11.5pt"></span></p>

<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:11.5pt">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">     
</span></span><span lang="EN" style="font-size:10pt;font-family:Arial,sans-serif">The
SUSE operating system must log SSH connection attempts and failures to the
server.</span><span lang="EN" style="font-size:11.5pt"></span></p>

<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:11.5pt">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">     
</span></span><span lang="EN" style="font-size:10pt;font-family:Arial,sans-serif">The
SUSE operating system must display the date and time of the last successful
account logon upon an SSH logon.</span><span lang="EN" style="font-size:11.5pt"></span></p>

<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:11.5pt">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">     
</span></span><span lang="EN" style="font-size:10pt;font-family:Arial,sans-serif">The
SUSE operating system must deny direct logons to the root account using remote
access via SSH.</span><span lang="EN" style="font-size:11.5pt"></span></p>

<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:11.5pt">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">     
</span></span><span lang="EN" style="font-size:10pt;font-family:Arial,sans-serif">The
SUSE operating system SSH daemon must be configured with a timeout interval.</span><span lang="EN" style="font-size:11.5pt"></span></p>

<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:11.5pt">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">     
</span></span><span lang="EN" style="font-size:10pt;font-family:Arial,sans-serif">The
SUSE operating system for all network connections associated with SSH traffic
must immediately terminate at the end of the session or after 10 minutes of
inactivity.</span><span lang="EN" style="font-size:11.5pt"></span></p>

<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:11.5pt">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">     
</span></span><span lang="EN" style="font-size:10pt;font-family:Arial,sans-serif">The
SUSE operating system SSH daemon must be configured to not allow authentication
using known hosts authentication.</span><span lang="EN" style="font-size:11.5pt"></span></p>

<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:11.5pt">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">     
</span></span><span lang="EN" style="font-size:10pt;font-family:Arial,sans-serif">The
SUSE operating system SSH daemon must perform strict mode checking of home
directory configuration files.</span><span lang="EN" style="font-size:11.5pt"></span></p>

<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:11.5pt">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">     
</span></span><span lang="EN" style="font-size:10pt;font-family:Arial,sans-serif">The
SUSE operating system SSH daemon must disable forwarded remote X connections
for interactive users, unless to fulfill documented and validated mission
requirements.</span><span lang="EN" style="font-size:11.5pt"></span></p>

<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:11.5pt">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">     
</span></span><span lang="EN" style="font-size:10pt;font-family:Arial,sans-serif">The
SUSE operating system must implement kptr-restrict to prevent the leaking of
internal kernel addresses.</span><span lang="EN" style="font-size:11.5pt"></span></p>

<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:11.5pt">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">     
</span></span><span lang="EN" style="font-size:10pt;font-family:Arial,sans-serif">Address
space layout randomization (ASLR) must be implemented by the SUSE operating
system to protect memory from unauthorized code execution.</span><span lang="EN" style="font-size:11.5pt"></span></p>

<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:11.5pt">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">     
</span></span><span lang="EN" style="font-size:10pt;font-family:Arial,sans-serif">The
SUSE operating system must be configured to use TCP syncookies.</span><span lang="EN" style="font-size:11.5pt"></span></p>

<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:11.5pt">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">     
</span></span><span lang="EN" style="font-size:10pt;font-family:Arial,sans-serif">The
SUSE operating system must not forward Internet Protocol version 4 (IPv4)
source-routed packets.</span><span lang="EN" style="font-size:11.5pt"></span></p>

<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:11.5pt">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">     
</span></span><span lang="EN" style="font-size:10pt;font-family:Arial,sans-serif">The
SUSE operating system must not forward Internet Protocol version 6 (IPv6)
source-routed packets.</span><span lang="EN" style="font-size:11.5pt"></span></p>

<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:11.5pt">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">     
</span></span><span lang="EN" style="font-size:10pt;font-family:Arial,sans-serif">The
SUSE operating system must not forward Internet Protocol version 4 (IPv4)
source-routed packets by default.</span><span lang="EN" style="font-size:11.5pt"></span></p>

<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:11.5pt">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">     
</span></span><span lang="EN" style="font-size:10pt;font-family:Arial,sans-serif">The
SUSE operating system must not respond to Internet Protocol version 4 (IPv4)
Internet Control Message Protocol (ICMP) echoes sent to a broadcast address.</span><span lang="EN" style="font-size:11.5pt"></span></p>

<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:11.5pt">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">     
</span></span><span lang="EN" style="font-size:10pt;font-family:Arial,sans-serif">The
SUSE operating system must prevent Internet Protocol version 4 (IPv4) Internet
Control Message Protocol (ICMP) redirect messages from being accepted.</span><span lang="EN" style="font-size:11.5pt"></span></p>

<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:11.5pt">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">     
</span></span><span lang="EN" style="font-size:10pt;font-family:Arial,sans-serif">The
SUSE operating system must not allow interfaces to accept Internet Protocol
version 4 (IPv4) Internet Control Message Protocol (ICMP) redirect messages by
default.</span><span lang="EN" style="font-size:11.5pt"></span></p>

<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:11.5pt">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">     
</span></span><span lang="EN" style="font-size:10pt;font-family:Arial,sans-serif">The
SUSE operating system must not allow interfaces to accept Internet Protocol
version 6 (IPv6) Internet Control Message Protocol (ICMP) redirect messages by
default.</span><span lang="EN" style="font-size:11.5pt"></span></p>

<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:11.5pt">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">     
</span></span><span lang="EN" style="font-size:10pt;font-family:Arial,sans-serif">The
SUSE operating system must not allow interfaces to send Internet Protocol
version 4 (IPv4) Internet Control Message Protocol (ICMP) redirect messages by
default.</span><span lang="EN" style="font-size:11.5pt"></span></p>

<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:11.5pt">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">     
</span></span><span lang="EN" style="font-size:10pt;font-family:Arial,sans-serif">The
SUSE operating system must not send Internet Protocol version 4 (IPv4) Internet
Control Message Protocol (ICMP) redirects.</span><span lang="EN" style="font-size:11.5pt"></span></p>

<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:11.5pt">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">     
</span></span><span lang="EN" style="font-size:10pt;font-family:Arial,sans-serif">The
SUSE operating system must not be performing Internet Protocol version 4 (IPv4)
packet forwarding unless the system is a router.</span><span lang="EN" style="font-size:11.5pt"></span></p>

<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:11.5pt">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">     
</span></span><span lang="EN" style="font-size:10pt;font-family:Arial,sans-serif">The
SUSE operating system library files must have mode 0755 or less permissive.</span><span lang="EN" style="font-size:11.5pt"></span></p>

<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:11.5pt">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">     
</span></span><span lang="EN" style="font-size:10pt;font-family:Arial,sans-serif">The
SUSE operating system library directories must have mode 0755 or less
permissive.</span><span lang="EN" style="font-size:11.5pt"></span></p>

<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:11.5pt">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">     
</span></span><span lang="EN" style="font-size:10pt;font-family:Arial,sans-serif">The
SUSE operating system library files must be owned by root.</span><span lang="EN" style="font-size:11.5pt"></span></p>

<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:11.5pt">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">     
</span></span><span lang="EN" style="font-size:10pt;font-family:Arial,sans-serif">The
SUSE operating system library directories must be owned by root.</span><span lang="EN" style="font-size:11.5pt"></span></p>

<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:11.5pt">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">     
</span></span><span lang="EN" style="font-size:10pt;font-family:Arial,sans-serif">The
SUSE operating system library files must be group-owned by root.</span><span lang="EN" style="font-size:11.5pt"></span></p>

<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:11.5pt">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">     
</span></span><span lang="EN" style="font-size:10pt;font-family:Arial,sans-serif">The
SUSE operating system library directories must be group-owned by root.</span><span lang="EN" style="font-size:11.5pt"></span></p>

<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:11.5pt">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">     
</span></span><span lang="EN" style="font-size:10pt;font-family:Arial,sans-serif">The
SUSE operating system must have directories that contain system commands set to
a mode of 0755 or less permissive.</span><span lang="EN" style="font-size:11.5pt"></span></p>

<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:11.5pt">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">     
</span></span><span lang="EN" style="font-size:10pt;font-family:Arial,sans-serif">The
SUSE operating system must have system commands owned by root.</span><span lang="EN" style="font-size:11.5pt"></span></p>

<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:11.5pt">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">     
</span></span><span lang="EN" style="font-size:10pt;font-family:Arial,sans-serif">The
SUSE operating system must have directories that contain system commands owned
by root.</span><span lang="EN" style="font-size:11.5pt"></span></p>

<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:11.5pt">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">     
</span></span><span lang="EN" style="font-size:10pt;font-family:Arial,sans-serif">The
SUSE operating system must have directories that contain system commands
group-owned by root.</span><span lang="EN" style="font-size:11.5pt"></span></p>

<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:11.5pt">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">     
</span></span><span lang="EN" style="font-size:10pt;font-family:Arial,sans-serif">The
SUSE operating system must not forward Internet Protocol version 6 (IPv6)
source-routed packets by default.</span><span lang="EN" style="font-size:11.5pt"></span></p>

<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:11.5pt">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">     
</span></span><span lang="EN" style="font-size:10pt;font-family:Arial,sans-serif">The
SUSE operating system must prevent Internet Protocol version 6 (IPv6) Internet
Control Message Protocol (ICMP) redirect messages from being accepted.</span><span lang="EN" style="font-size:11.5pt"></span></p>

<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:11.5pt">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">     
</span></span><span lang="EN" style="font-size:10pt;font-family:Arial,sans-serif">The
SUSE operating system must not be performing Internet Protocol version 6 (IPv6)
packet forwarding unless the system is a router.</span><span lang="EN" style="font-size:11.5pt"></span></p>

<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:11.5pt">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">     
</span></span><span lang="EN" style="font-size:10pt;font-family:Arial,sans-serif">The
SUSE operating system must not be performing Internet Protocol version 6 (IPv6)
packet forwarding by default unless the system is a router.</span><span lang="EN" style="font-size:11.5pt"></span></p>

<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:10pt;font-family:Arial,sans-serif"> </span></p>

<p class="MsoNormal" style="margin:0in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:10pt;font-family:Arial,sans-serif">            </span><b><span lang="EN" style="font-size:12.5pt;color:black">DELETED :</span></b><span lang="EN" style="font-size:11.5pt"></span></p>

<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:11.5pt">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">     
</span></span><span lang="EN" style="font-size:10pt;font-family:Arial,sans-serif">The
SUSE operating system must implement the Endpoint Security for Linux Threat
Prevention tool.</span><span lang="EN" style="font-size:11.5pt"></span></p>

<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:11.5pt">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">     
</span></span><span lang="EN" style="font-size:10pt;font-family:Arial,sans-serif">The
SUSE operating system must employ a password history file.</span><span lang="EN" style="font-size:11.5pt"></span></p>

<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:11.5pt">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">     
</span></span><span lang="EN" style="font-size:10pt;font-family:Arial,sans-serif">The
SUSE operating system must not allow passwords to be reused for a minimum of
five (5) generations.</span><span lang="EN" style="font-size:11.5pt"></span></p>

<p class="MsoNormal" style="margin:0in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:10pt;font-family:Arial,sans-serif">            <b>            </b></span></p>

<p class="MsoNormal" style="margin:14pt 0in 0in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><b><span lang="EN" style="font-size:11.5pt;color:black">Additional
details:</span></b><b><span lang="EN" style="font-size:11.5pt"></span></b></p>

<p class="MsoNormal" style="margin:14pt 0in 0in 51pt;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:11.5pt;font-family:"Noto Sans Symbols"">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">      </span></span><span lang="EN" style="font-size:11.5pt;color:black">Both
analysis and remediation checks are included</span><span lang="EN" style="font-size:11.5pt;font-family:"Noto Sans Symbols""></span></p>

<p class="MsoNormal" style="margin:0in 0in 0in 51pt;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:10pt;font-family:"Noto Sans Symbols"">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">       </span></span><span lang="EN" style="font-size:11.5pt;color:black">Some of
the checks allow you to use the parameterized setting to enable customization
for compliance evaluation. Note that parameterization and remediation actions
require the creation of a custom site.<br>
Improved few checks by adding the pending restart feature to them. The pending
restart feature works in the following ways:</span><span lang="EN" style="font-size:10pt;font-family:"Noto Sans Symbols""></span></p>

<p class="MsoNormal" style="margin:0in 0in 0in 51pt;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:10pt;font-family:"Noto Sans Symbols"">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">       </span></span><span lang="EN" style="font-size:11.5pt;color:black">The
action results will show “Pending Restart” instead of “Fixed” for those checks
which requires OS reboot.</span><span lang="EN" style="font-size:10pt;font-family:"Noto Sans Symbols""></span></p>

<p class="MsoNormal" style="margin:0in 0in 0in 51pt;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:10pt;font-family:"Noto Sans Symbols"">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">       </span></span><span lang="EN" style="font-size:11.5pt;color:black">The check
will show relevant for those endpoints until they are rebooted.</span><span lang="EN" style="font-size:10pt;font-family:"Noto Sans Symbols""></span></p>

<p class="MsoNormal" style="margin:0in 0in 14pt 51pt;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:10pt;font-family:"Noto Sans Symbols"">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">       </span></span><span lang="EN" style="font-size:11.5pt;color:black">Post
reboot of the endpoint the action results will show as “Fixed” and the check
will be compliant.</span><span lang="EN" style="font-size:10pt;font-family:"Noto Sans Symbols""></span></p>

<p class="MsoNormal" style="margin:14pt 0in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><b><span lang="EN" style="font-size:11.5pt;color:black">Actions to take:</span></b><span lang="EN" style="font-size:11.5pt"></span></p>

<p class="MsoNormal" style="margin:14pt 0in 0in 51pt;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:10pt;font-family:"Noto Sans Symbols"">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">       </span></span><span lang="EN" style="font-size:11.5pt;color:black">To
subscribe to the above site, you can use the License Overview Dashboard to
enable and gather the site. Note that you must be entitled to the BigFix
Compliance product and you must be using BigFix version 10 and later.</span><span lang="EN" style="font-size:10pt;font-family:"Noto Sans Symbols""></span></p>

<p class="MsoNormal" style="margin:0in 0in 14pt 51pt;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:10pt;font-family:"Noto Sans Symbols"">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">       </span></span><span lang="EN" style="font-size:11.5pt;color:black">If you
use custom sites, update your custom sites accordingly to use the latest
content. You can synchronize your content by using the Synchronize Custom
Checks wizard. For more information, see</span><span lang="EN" style="color:black"> <a href="https://help.hcltechsw.com/bigfix/11.0/compliance/Compliance/SCM_Users_Guide/c_using_synchronize_custom_checks_wiz.html" style="color:blue"><span style="font-size:11.5pt;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial">Using
the Synchronize Custom Checks wizard</span></a></span><span lang="EN" style="font-size:10pt;font-family:"Noto Sans Symbols""></span></p>

<p class="MsoNormal" style="margin:14pt 0in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><b><span lang="EN" style="font-size:11.5pt;color:black">More information:</span></b><span lang="EN" style="font-size:11.5pt;color:black"><br>
To know more about the BigFix Compliance SCM checklists, please see the
following resources:</span><span lang="EN" style="font-size:11.5pt"></span></p>

<p class="MsoNormal" style="margin:14pt 0in 0in 51pt;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:10pt;font-family:"Noto Sans Symbols"">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">       </span></span><span lang="EN" style="font-size:11.5pt;color:black">BigFix
Forum:<br>
</span><span lang="EN" style="color:black"><a href="https://forum.bigfix.com/c/release-announcements/compliance" style="color:blue"><span style="font-size:11.5pt;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial">https://forum.bigfix.com/c/release-announcements/compliance</span></a></span><span lang="EN" style="font-size:11.5pt;color:black"> </span><span lang="EN" style="font-size:10pt;font-family:"Noto Sans Symbols""></span></p>

<p class="MsoNormal" style="margin:0in 0in 14pt 51pt;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:10pt;font-family:"Noto Sans Symbols"">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">       </span></span><span lang="EN" style="font-size:11.5pt;color:black">BigFix
Compliance SCM Checklists:<br>
</span><span lang="EN" style="color:black"><a href="https://bigfix-wiki.hcltechsw.com/wikis/home?lang=enus#!/wiki/BigFix%20Wiki/page/SCM%20Checklists" style="color:blue"><span style="font-size:11.5pt;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial">Welcome
to Wikis</span></a></span><span lang="EN" style="font-size:10pt;font-family:"Noto Sans Symbols""></span></p>

<p class="MsoNormal" style="margin:14pt 0in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN" style="font-size:11.5pt;color:black">We hope you find
this latest release of SCM content useful and effective. Thank you!</span><span lang="EN" style="font-size:11.5pt"></span></p>

<i><span lang="EN" style="font-size:11.5pt;line-height:107%;font-family:Calibri,sans-serif">– The BigFix Compliance team</span></i></div>