<div dir="ltr"><p class="MsoNormal" style="margin:0in 0in 14pt;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Arial,sans-serif"><b><span lang="EN" style="font-size:12pt;font-family:Calibri,sans-serif">Product:</span></b><span lang="EN" style="font-size:12pt;font-family:Calibri,sans-serif"><br>
BigFix Compliance</span></p>

<p class="MsoNormal" style="margin:14pt 0in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Arial,sans-serif"><b><span lang="EN" style="font-size:12pt;font-family:Calibri,sans-serif">Title:</span></b><span lang="EN" style="font-size:12pt;font-family:Calibri,sans-serif"><br>
Updated CIS Checklist for Oracle Linux 8</span><span lang="EN" style="font-size:12pt;font-family:Calibri,sans-serif;color:rgb(41,42,46);background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial"> </span><span lang="EN" style="font-size:12pt;font-family:Calibri,sans-serif;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial"> </span><span lang="EN" style="font-size:12pt;font-family:Calibri,sans-serif"></span></p>

<p class="MsoNormal" style="margin:14pt 0in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Arial,sans-serif"><b><span lang="EN" style="font-size:12pt;font-family:Calibri,sans-serif">Security Benchmark:</span></b><span lang="EN" style="font-size:12pt;font-family:Calibri,sans-serif"><br>
</span><span lang="EN" style="font-size:12pt;font-family:Calibri,sans-serif;color:rgb(41,42,46)">CIS Oracle Linux 8 Benchmark</span><span lang="EN" style="font-size:12pt;font-family:Calibri,sans-serif">, V4.0.0</span></p>

<p class="MsoNormal" style="margin:14pt 0in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Arial,sans-serif"><b><span lang="EN" style="font-size:12pt;font-family:Calibri,sans-serif">Published Sites:</span></b><span lang="EN" style="font-size:12pt;font-family:Calibri,sans-serif"><br>
CIS Checklist for Oracle Linux 8<span style="background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial">, site version 12</span><br>
<span style="background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial">(The site version is
provided for air-gap customers.)</span></span></p>

<p class="MsoNormal" style="margin:12pt 0in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Arial,sans-serif"><b><span lang="EN" style="font-size:12pt;font-family:Calibri,sans-serif">Details: </span></b></p>

<p class="MsoNormal" style="margin:12pt 0in 0.0001pt 0.5in;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">●<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">     
</span></span><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif"> Total New Fixlets: 59</span></p>

<p class="MsoNormal" style="margin:0in 0in 0in 0.5in;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">●<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">     
</span></span><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif"> Total Updated Fixlets: 65</span></p>

<p class="MsoNormal" style="margin:0in 0in 0in 0.5in;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">●<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">     
</span></span><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif"> Total Deleted Fixlets: 25</span></p>

<p class="MsoNormal" style="margin:0in 0in 12pt 0.5in;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">●<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">      </span></span><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif"> Total Fixlets in Site: 318</span></p>

<p class="MsoNormal" style="margin:12pt 0in;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><b><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">New Fixlets:</span></b></p>

<p class="MsoNormal" style="margin:0in 0in 0in 0.5in;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">●<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">     
</span></span><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">Ensure access to /etc/cron.yearly is configured</span></p>

<p class="MsoNormal" style="margin:0in 0in 0in 0.5in;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">●<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">     
</span></span><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">Ensure access to /etc/security/opasswd is configured</span></p>

<p class="MsoNormal" style="margin:0in 0in 0in 0.5in;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">●<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">     
</span></span><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">Ensure access to /etc/sysconfig/sshd is configured</span></p>

<p class="MsoNormal" style="margin:0in 0in 0in 0.5in;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">●<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">     
</span></span><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">Ensure accounts without a valid login shell are locked</span></p>

<p class="MsoNormal" style="margin:0in 0in 0in 0.5in;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">●<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">     
</span></span><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">Ensure atm kernel module is not available</span></p>

<p class="MsoNormal" style="margin:0in 0in 0in 0.5in;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">●<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">     
</span></span><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">Ensure audit tools group owner is configured</span></p>

<p class="MsoNormal" style="margin:0in 0in 0in 0.5in;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">●<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">     
</span></span><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">Ensure auditd packages are installed</span></p>

<p class="MsoNormal" style="margin:0in 0in 0in 0.5in;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">●<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">     
</span></span><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">Ensure can kernel module is not available</span></p>

<p class="MsoNormal" style="margin:0in 0in 0in 0.5in;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">●<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">     
</span></span><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">Ensure cockpit web services are not in use</span></p>

<p class="MsoNormal" style="margin:0in 0in 0in 0.5in;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">●<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">     
</span></span><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">Ensure core file size is configured</span></p>

<p class="MsoNormal" style="margin:0in 0in 0in 0.5in;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">●<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">     
</span></span><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">Ensure firewalld backend is configured</span></p>

<p class="MsoNormal" style="margin:0in 0in 0in 0.5in;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">●<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">     
</span></span><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">Ensure firewalld is installed</span></p>

<p class="MsoNormal" style="margin:0in 0in 0in 0.5in;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">●<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">     
</span></span><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">Ensure firewalld loopback source address traffic is configured</span></p>

<p class="MsoNormal" style="margin:0in 0in 0in 0.5in;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">●<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">     
</span></span><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">Ensure firewalld loopback traffic is configured</span></p>

<p class="MsoNormal" style="margin:0in 0in 0in 0.5in;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">●<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">     
</span></span><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">Ensure firewalld.service is configured</span></p>

<p class="MsoNormal" style="margin:0in 0in 0in 0.5in;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">●<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">     
</span></span><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">Ensure firewire-core kernel module is not available</span></p>

<p class="MsoNormal" style="margin:0in 0in 0in 0.5in;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">●<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">     
</span></span><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">Ensure fs.protected_hardlinks is configured</span></p>

<p class="MsoNormal" style="margin:0in 0in 0in 0.5in;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">●<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">     
</span></span><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">Ensure fs.protected_symlinks is configured</span></p>

<p class="MsoNormal" style="margin:0in 0in 0in 0.5in;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">●<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">     
</span></span><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">Ensure fs.suid_dumpable is configured</span></p>

<p class="MsoNormal" style="margin:0in 0in 0in 0.5in;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">●<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">     
</span></span><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">Ensure GDM disable-user-list is configured</span></p>

<p class="MsoNormal" style="margin:0in 0in 0in 0.5in;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">●<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">     
</span></span><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">Ensure group root is the only GID 0 group</span></p>

<p class="MsoNormal" style="margin:0in 0in 0in 0.5in;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">●<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">     
</span></span><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">Ensure journald log file access is configured</span></p>

<p class="MsoNormal" style="margin:0in 0in 0in 0.5in;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">●<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">     
</span></span><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">Ensure journald service is active</span></p>

<p class="MsoNormal" style="margin:0in 0in 0in 0.5in;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">●<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">     
</span></span><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">Ensure kernel.dmesg_restrict is configured</span></p>

<p class="MsoNormal" style="margin:0in 0in 0in 0.5in;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">●<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">     
</span></span><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">Ensure kernel.kptr_restrict is configured</span></p>

<p class="MsoNormal" style="margin:0in 0in 0in 0.5in;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">●<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">     
</span></span><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">Ensure minimum password days is configured</span></p>

<p class="MsoNormal" style="margin:0in 0in 0in 0.5in;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">●<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">     
</span></span><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">Ensure net.ipv4.conf.all.accept_redirects is configured</span></p>

<p class="MsoNormal" style="margin:0in 0in 0in 0.5in;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">●<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">     
</span></span><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">Ensure net.ipv4.conf.all.accept_source_route is configured</span></p>

<p class="MsoNormal" style="margin:0in 0in 0in 0.5in;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">●<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">     
</span></span><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">Ensure net.ipv4.conf.all.forwarding is configured</span></p>

<p class="MsoNormal" style="margin:0in 0in 0in 0.5in;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">●<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">     
</span></span><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">Ensure net.ipv4.conf.all.log_martians is configured</span></p>

<p class="MsoNormal" style="margin:0in 0in 0in 0.5in;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">●<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">     
</span></span><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">Ensure net.ipv4.conf.all.rp_filter is configured</span></p>

<p class="MsoNormal" style="margin:0in 0in 0in 0.5in;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">●<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">     
</span></span><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">Ensure net.ipv4.conf.all.secure_redirects is configured</span></p>

<p class="MsoNormal" style="margin:0in 0in 0in 0.5in;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">●<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">     
</span></span><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">Ensure net.ipv4.conf.all.send_redirects is configured</span></p>

<p class="MsoNormal" style="margin:0in 0in 0in 0.5in;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">●<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">     
</span></span><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">Ensure net.ipv4.conf.default.accept_redirects is configured</span></p>

<p class="MsoNormal" style="margin:0in 0in 0in 0.5in;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">●<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">     
</span></span><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">Ensure net.ipv4.conf.default.accept_source_route is configured</span></p>

<p class="MsoNormal" style="margin:0in 0in 0in 0.5in;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">●<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">     
</span></span><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">Ensure net.ipv4.conf.default.forwarding is configured</span></p>

<p class="MsoNormal" style="margin:0in 0in 0in 0.5in;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">●<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">     
</span></span><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">Ensure net.ipv4.conf.default.log_martians is configured</span></p>

<p class="MsoNormal" style="margin:0in 0in 0in 0.5in;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">●<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">     
</span></span><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">Ensure net.ipv4.conf.default.rp_filter is configured</span></p>

<p class="MsoNormal" style="margin:0in 0in 0in 0.5in;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">●<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">     
</span></span><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">Ensure net.ipv4.conf.default.secure_redirects is configured</span></p>

<p class="MsoNormal" style="margin:0in 0in 0in 0.5in;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">●<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">     
</span></span><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">Ensure net.ipv4.conf.default.send_redirects is configured</span></p>

<p class="MsoNormal" style="margin:0in 0in 0in 0.5in;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">●<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">     
</span></span><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">Ensure net.ipv4.ip_forward is configured</span></p>

<p class="MsoNormal" style="margin:0in 0in 0in 0.5in;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">●<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">     
</span></span><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">Ensure net.ipv6.conf.all.accept_ra is configured</span></p>

<p class="MsoNormal" style="margin:0in 0in 0in 0.5in;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">●<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">     
</span></span><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">Ensure net.ipv6.conf.all.accept_redirects is configured</span></p>

<p class="MsoNormal" style="margin:0in 0in 0in 0.5in;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">●<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">     
</span></span><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">Ensure net.ipv6.conf.all.accept_source_route is configured</span></p>

<p class="MsoNormal" style="margin:0in 0in 0in 0.5in;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">●<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">     
</span></span><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">Ensure net.ipv6.conf.all.forwarding is configured</span></p>

<p class="MsoNormal" style="margin:0in 0in 0in 0.5in;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">●<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">     
</span></span><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">Ensure net.ipv6.conf.default.accept_ra is configured</span></p>

<p class="MsoNormal" style="margin:0in 0in 0in 0.5in;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">●<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">     
</span></span><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">Ensure net.ipv6.conf.default.accept_redirects is configured</span></p>

<p class="MsoNormal" style="margin:0in 0in 0in 0.5in;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">●<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">     
</span></span><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">Ensure net.ipv6.conf.default.accept_source_route is configured</span></p>

<p class="MsoNormal" style="margin:0in 0in 0in 0.5in;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">●<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">     
</span></span><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">Ensure net.ipv6.conf.default.forwarding is configured</span></p>

<p class="MsoNormal" style="margin:0in 0in 0in 0.5in;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">●<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">     
</span></span><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">Ensure overlay kernel module is not available</span></p>

<p class="MsoNormal" style="margin:0in 0in 0in 0.5in;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">●<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">     
</span></span><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">Ensure rsyslog service is enabled and active</span></p>

<p class="MsoNormal" style="margin:0in 0in 0in 0.5in;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">●<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">     
</span></span><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">Ensure sshd GSSAPIAuthentication is disabled</span></p>

<p class="MsoNormal" style="margin:0in 0in 0in 0.5in;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">●<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">     
</span></span><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">Ensure system accounts do not have a valid login shell</span></p>

<p class="MsoNormal" style="margin:0in 0in 0in 0.5in;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">●<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">     
</span></span><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">Ensure system wide crypto policy disables chacha20-poly1305 for
ssh</span></p>

<p class="MsoNormal" style="margin:0in 0in 0in 0.5in;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">●<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">     
</span></span><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">Ensure system wide crypto policy disables EtM for ssh</span></p>

<p class="MsoNormal" style="margin:0in 0in 0in 0.5in;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">●<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">     
</span></span><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">Ensure systemd-coredump Storage is configured</span></p>

<p class="MsoNormal" style="margin:0in 0in 0in 0.5in;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">●<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">     
</span></span><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">Ensure the audit configuration is loaded regardless of errors</span></p>

<p class="MsoNormal" style="margin:0in 0in 0in 0.5in;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">●<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">     
</span></span><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">Ensure weak dependencies are configured</span></p>

<p class="MsoNormal" style="margin:0in 0in 12pt 0.5in;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">●<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">      </span></span><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">Ensure Xwayland is configured</span></p>

<p class="MsoNormal" style="margin:12pt 0in;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><b><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">Updated Fixlets:</span></b></p>

<p class="MsoNormal" style="margin:0in 0in 0in 0.5in;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">●<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">     
</span></span><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">Ensure cramfs kernel module is not available</span></p>

<p class="MsoNormal" style="margin:0in 0in 0in 0.5in;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">●<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">     
</span></span><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">Ensure freevxfs kernel module is not available</span></p>

<p class="MsoNormal" style="margin:0in 0in 0in 0.5in;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">●<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">     
</span></span><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">Ensure hfs kernel module is not available</span></p>

<p class="MsoNormal" style="margin:0in 0in 0in 0.5in;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">●<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">     
</span></span><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">Ensure hfsplus kernel module is not available</span></p>

<p class="MsoNormal" style="margin:0in 0in 0in 0.5in;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">●<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">     
</span></span><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">Ensure jffs2 kernel module is not available</span></p>

<p class="MsoNormal" style="margin:0in 0in 0in 0.5in;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">●<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">     
</span></span><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">Ensure udf kernel module is not available</span></p>

<p class="MsoNormal" style="margin:0in 0in 0in 0.5in;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">●<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">     
</span></span><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">Ensure GPG keys are configured</span></p>

<p class="MsoNormal" style="margin:0in 0in 0in 0.5in;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">●<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">     
</span></span><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">Ensure package manager repositories are configured</span></p>

<p class="MsoNormal" style="margin:0in 0in 0in 0.5in;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">●<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">     
</span></span><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">Ensure SELinux is not disabled in bootloader configuration</span></p>

<p class="MsoNormal" style="margin:0in 0in 0in 0.5in;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">●<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">     
</span></span><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">Ensure SELinux policy is configured</span></p>

<p class="MsoNormal" style="margin:0in 0in 0in 0.5in;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">●<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">     
</span></span><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">Ensure system wide crypto policy disables sha1 hash and
signature support</span></p>

<p class="MsoNormal" style="margin:0in 0in 0in 0.5in;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">●<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">     
</span></span><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">Ensure system wide crypto policy disables cbc for ssh</span></p>

<p class="MsoNormal" style="margin:0in 0in 0in 0.5in;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">●<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">     
</span></span><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">Ensure XDMCP is not enabled</span></p>

<p class="MsoNormal" style="margin:0in 0in 0in 0.5in;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">●<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">     
</span></span><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">Ensure GNOME Display Manager is removed</span></p>

<p class="MsoNormal" style="margin:0in 0in 0in 0.5in;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">●<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">     
</span></span><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">Ensure X window server services are not in use</span></p>

<p class="MsoNormal" style="margin:0in 0in 0in 0.5in;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">●<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">     
</span></span><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">Ensure mail transfer agents are configured for local-only mode</span></p>

<p class="MsoNormal" style="margin:0in 0in 0in 0.5in;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">●<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">     
</span></span><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">Ensure cron daemon is enabled and active</span></p>

<p class="MsoNormal" style="margin:0in 0in 0in 0.5in;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">●<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">     
</span></span><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">Ensure sshd crypto_policy is not set</span></p>

<p class="MsoNormal" style="margin:0in 0in 0in 0.5in;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">●<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">     
</span></span><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">Ensure sshd access is configured</span></p>

<p class="MsoNormal" style="margin:0in 0in 0in 0.5in;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">●<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">     
</span></span><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">Ensure sshd Banner is configured</span></p>

<p class="MsoNormal" style="margin:0in 0in 0in 0.5in;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">●<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">     
</span></span><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">Ensure sshd Ignore Rhosts is enabled</span></p>

<p class="MsoNormal" style="margin:0in 0in 0in 0.5in;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">●<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">     
</span></span><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">Ensure sshd Login Grace Time is configured</span></p>

<p class="MsoNormal" style="margin:0in 0in 0in 0.5in;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">●<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">     
</span></span><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">Ensure sshd MaxAuthTries is configured</span></p>

<p class="MsoNormal" style="margin:0in 0in 0in 0.5in;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">●<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">     
</span></span><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">Ensure sshd MaxSessions is configured</span></p>

<p class="MsoNormal" style="margin:0in 0in 0in 0.5in;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">●<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">     
</span></span><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">Ensure sshd MaxStartups is configured</span></p>

<p class="MsoNormal" style="margin:0in 0in 0in 0.5in;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">●<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">     
</span></span><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">Ensure sshd PermitEmptyPasswords is disabled</span></p>

<p class="MsoNormal" style="margin:0in 0in 0in 0.5in;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">●<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">     
</span></span><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">Ensure sshd PermitRootLogin is disabled</span></p>

<p class="MsoNormal" style="margin:0in 0in 0in 0.5in;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">●<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">     
</span></span><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">Ensure sshd PermitUserEnvironment is disabled</span></p>

<p class="MsoNormal" style="margin:0in 0in 0in 0.5in;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">●<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">     
</span></span><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">Ensure sshd UsePAM is enabled</span></p>

<p class="MsoNormal" style="margin:0in 0in 0in 0.5in;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">●<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">     
</span></span><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">Ensure sudo commands use pty</span></p>

<p class="MsoNormal" style="margin:0in 0in 0in 0.5in;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">●<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">     
</span></span><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">Ensure sudo log file exists</span></p>

<p class="MsoNormal" style="margin:0in 0in 0in 0.5in;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">●<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">     
</span></span><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">Ensure re-authentication for privilege escalation is not
disabled globally</span></p>

<p class="MsoNormal" style="margin:0in 0in 0in 0.5in;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">●<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">     
</span></span><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">Ensure access to the su command is restricted</span></p>

<p class="MsoNormal" style="margin:0in 0in 0in 0.5in;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">●<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">     
</span></span><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">Ensure password failed attempts lockout includes root account</span></p>

<p class="MsoNormal" style="margin:0in 0in 0in 0.5in;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">●<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">     
</span></span><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">Ensure password number of changed characters is configured</span></p>

<p class="MsoNormal" style="margin:0in 0in 0in 0.5in;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">●<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">     
</span></span><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">Ensure password length is configured</span></p>

<p class="MsoNormal" style="margin:0in 0in 0in 0.5in;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">●<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">     
</span></span><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">Ensure password complexity is configured</span></p>

<p class="MsoNormal" style="margin:0in 0in 0in 0.5in;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">●<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">     
</span></span><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">Ensure password same consecutive characters is configured</span></p>

<p class="MsoNormal" style="margin:0in 0in 0in 0.5in;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">●<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">     
</span></span><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">Ensure password maximum sequential characters is configured</span></p>

<p class="MsoNormal" style="margin:0in 0in 0in 0.5in;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">●<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">     
</span></span><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">Ensure password dictionary check is enabled</span></p>

<p class="MsoNormal" style="margin:0in 0in 0in 0.5in;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">●<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">     
</span></span><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">Ensure password quality is enforced for the root user</span></p>

<p class="MsoNormal" style="margin:0in 0in 0in 0.5in;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">●<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">     
</span></span><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">Ensure password history is enforced for the root user</span></p>

<p class="MsoNormal" style="margin:0in 0in 0in 0.5in;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">●<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">     
</span></span><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">Ensure pam_pwhistory includes use_authtok</span></p>

<p class="MsoNormal" style="margin:0in 0in 0in 0.5in;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">●<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">     
</span></span><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">Ensure pam_unix does not include nullok</span></p>

<p class="MsoNormal" style="margin:0in 0in 0in 0.5in;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">●<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">     
</span></span><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">Ensure pam_unix includes a strong password hashing algorithm</span></p>

<p class="MsoNormal" style="margin:0in 0in 0in 0.5in;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">●<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">     
</span></span><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">Ensure pam_unix includes use_authtok</span></p>

<p class="MsoNormal" style="margin:0in 0in 0in 0.5in;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">●<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">     
</span></span><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">Ensure all users last password change date is in the past</span></p>

<p class="MsoNormal" style="margin:0in 0in 0in 0.5in;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">●<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">     
</span></span><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">Ensure root is the only UID 0 account</span></p>

<p class="MsoNormal" style="margin:0in 0in 0in 0.5in;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">●<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">     
</span></span><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">Ensure root user umask is configured</span></p>

<p class="MsoNormal" style="margin:0in 0in 0in 0.5in;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">●<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">     
</span></span><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">Ensure nologin is not listed in /etc/shells</span></p>

<p class="MsoNormal" style="margin:0in 0in 0in 0.5in;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">●<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">     
</span></span><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">Ensure cryptographic mechanisms are used to protect the
integrity of audit tools</span></p>

<p class="MsoNormal" style="margin:0in 0in 0in 0.5in;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">●<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">     
</span></span><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">Ensure rsyslog is installed</span></p>

<p class="MsoNormal" style="margin:0in 0in 0in 0.5in;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">●<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">     
</span></span><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">Ensure auditing for processes that start prior to auditd is
enabled</span></p>

<p class="MsoNormal" style="margin:0in 0in 0in 0.5in;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">●<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">     
</span></span><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">Ensure audit log storage size is configured</span></p>

<p class="MsoNormal" style="margin:0in 0in 0in 0.5in;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">●<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">     
</span></span><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">Ensure events that modify the sudo log file are collected</span></p>

<p class="MsoNormal" style="margin:0in 0in 0in 0.5in;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">●<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">     
</span></span><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">Ensure events that modify date and time information are
collected</span></p>

<p class="MsoNormal" style="margin:0in 0in 0in 0.5in;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">●<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">     
</span></span><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">Ensure use of privileged commands are collected</span></p>

<p class="MsoNormal" style="margin:0in 0in 0in 0.5in;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">●<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">     
</span></span><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">Ensure session initiation information is collected</span></p>

<p class="MsoNormal" style="margin:0in 0in 0in 0.5in;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">●<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">     
</span></span><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">Ensure events that modify the system's Mandatory Access Controls
are collected</span></p>

<p class="MsoNormal" style="margin:0in 0in 0in 0.5in;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">●<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">     
</span></span><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">Ensure the audit configuration is immutable</span></p>

<p class="MsoNormal" style="margin:0in 0in 0in 0.5in;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">●<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">     
</span></span><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">Ensure the running and on disk configuration is the same</span></p>

<p class="MsoNormal" style="margin:0in 0in 0in 0.5in;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">●<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">     
</span></span><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">Ensure world writable files and directories are secured</span></p>

<p class="MsoNormal" style="margin:0in 0in 0in 0.5in;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">●<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">     
</span></span><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">Ensure SUID and SGID files are reviewed</span></p>

<p class="MsoNormal" style="margin:0in 0in 0in 0.5in;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">●<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">     
</span></span><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">Ensure all groups in /etc/passwd exist in /etc/group</span></p>

<p class="MsoNormal" style="margin:0in 0in 12pt 0.5in;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">●<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">      </span></span><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">Ensure local interactive user
home directories are configured</span></p>

<p class="MsoNormal" style="margin:12pt 0in;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><b><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">Deleted Fixlets:</span></b></p>

<p class="MsoNormal" style="margin:0in 0in 0in 0.5in;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">●<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">     
</span></span><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">Ensure a single firewall configuration utility is in use</span></p>

<p class="MsoNormal" style="margin:0in 0in 0in 0.5in;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">●<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">     
</span></span><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">Ensure audit is installed</span></p>

<p class="MsoNormal" style="margin:0in 0in 0in 0.5in;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">●<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">     
</span></span><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">Ensure audit tools are 755 or more restrictive</span></p>

<p class="MsoNormal" style="margin:0in 0in 0in 0.5in;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">●<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">     
</span></span><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">Ensure core dump storage is disabled</span></p>

<p class="MsoNormal" style="margin:0in 0in 0in 0.5in;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">●<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">     
</span></span><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">Ensure GDM automatic mounting of removable media is disabled</span></p>

<p class="MsoNormal" style="margin:0in 0in 0in 0.5in;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">●<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">     
</span></span><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">Ensure GDM autorun-never is enabled</span></p>

<p class="MsoNormal" style="margin:0in 0in 0in 0.5in;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">●<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">     
</span></span><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">Ensure GDM disable-user-list option is enabled</span></p>

<p class="MsoNormal" style="margin:0in 0in 0in 0.5in;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">●<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">     
</span></span><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">Ensure GDM screen locks when the user is idle</span></p>

<p class="MsoNormal" style="margin:0in 0in 0in 0.5in;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">●<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">     
</span></span><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">Ensure host based firewall loopback traffic is configured</span></p>

<p class="MsoNormal" style="margin:0in 0in 0in 0.5in;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">●<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">     
</span></span><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">Ensure icmp redirects are not accepted</span></p>

<p class="MsoNormal" style="margin:0in 0in 0in 0.5in;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">●<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">     
</span></span><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">Ensure ip forwarding is disabled</span></p>

<p class="MsoNormal" style="margin:0in 0in 0in 0.5in;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">●<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">     
</span></span><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">Ensure ipv6 router advertisements are not accepted</span></p>

<p class="MsoNormal" style="margin:0in 0in 0in 0.5in;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">●<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">     
</span></span><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">Ensure journald service is enabled</span></p>

<p class="MsoNormal" style="margin:0in 0in 0in 0.5in;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">●<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">     
</span></span><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">Ensure nftables base chains exist</span></p>

<p class="MsoNormal" style="margin:0in 0in 0in 0.5in;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">●<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">     
</span></span><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">Ensure nftables default deny firewall policy</span></p>

<p class="MsoNormal" style="margin:0in 0in 0in 0.5in;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">●<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">     
</span></span><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">Ensure nftables established connections are configured</span></p>

<p class="MsoNormal" style="margin:0in 0in 0in 0.5in;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">●<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">     
</span></span><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">Ensure nftables is installed</span></p>

<p class="MsoNormal" style="margin:0in 0in 0in 0.5in;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">●<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">     
</span></span><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">Ensure packet redirect sending is disabled</span></p>

<p class="MsoNormal" style="margin:0in 0in 0in 0.5in;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">●<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">     
</span></span><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">Ensure permissions on /etc/opasswd are configured</span></p>

<p class="MsoNormal" style="margin:0in 0in 0in 0.5in;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">●<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">     
</span></span><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">Ensure reverse path filtering is enabled</span></p>

<p class="MsoNormal" style="margin:0in 0in 0in 0.5in;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">●<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">     
</span></span><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">Ensure rsyslog service is enabled</span></p>

<p class="MsoNormal" style="margin:0in 0in 0in 0.5in;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">●<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">     
</span></span><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">Ensure secure icmp redirects are not accepted</span></p>

<p class="MsoNormal" style="margin:0in 0in 0in 0.5in;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">●<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">     
</span></span><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">Ensure source routed packets are not accepted</span></p>

<p class="MsoNormal" style="margin:0in 0in 0in 0.5in;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">●<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">     
</span></span><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">Ensure suspicious packets are logged</span></p>

<p class="MsoNormal" style="margin:0in 0in 12pt 0.5in;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">●<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">      </span></span><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">Ensure system accounts are
secured</span></p>

<p class="MsoNormal" style="margin:12pt 0in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Arial,sans-serif"><b><span lang="EN" style="font-size:12pt;font-family:Calibri,sans-serif;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial">Additional details:</span></b></p>

<p class="MsoNormal" style="margin:12pt 0in 0.0001pt 0.5in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:12pt;font-family:Calibri,sans-serif">●<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">     
</span></span><span lang="EN" style="font-size:12pt;font-family:Calibri,sans-serif">Both
analysis and remediation checks are included.</span></p>

<p class="MsoNormal" style="margin:0in 0in 0in 0.5in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:12pt;font-family:Calibri,sans-serif">●<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">     
</span></span><span lang="EN" style="font-size:12pt;font-family:Calibri,sans-serif">Some
of the checks allow you to use the parameterized setting to enable
customization for compliance evaluation. Note that parameterization and
remediation actions require the creation of a custom site.</span></p>

<p class="MsoNormal" style="margin:0in 0in 0in 0.5in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:12pt;font-family:Calibri,sans-serif">●<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">     
</span></span><span lang="EN" style="font-size:12pt;font-family:Calibri,sans-serif">Improved
a few checks by adding the pending restart feature to them. The pending restart
feature works in the following ways:</span></p>

<p class="MsoNormal" style="margin:0in 0in 0in 0.5in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:12pt;font-family:Calibri,sans-serif">●<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">     
</span></span><span lang="EN" style="font-size:12pt;font-family:Calibri,sans-serif"> The action results will show “Pending Restart”
instead of “Fixed” for those checks which require OS reboot.</span></p>

<p class="MsoNormal" style="margin:0in 0in 0in 0.5in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:12pt;font-family:Calibri,sans-serif">●<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">     
</span></span><span lang="EN" style="font-size:12pt;font-family:Calibri,sans-serif">The
check will show relevant for those endpoints until they are rebooted.</span></p>

<p class="MsoNormal" style="margin:0in 0in 12pt 0.5in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:12pt;font-family:Calibri,sans-serif">●<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">     
</span></span><span lang="EN" style="font-size:12pt;font-family:Calibri,sans-serif">Post
reboot of the endpoint the action results will show as “Fixed” and the check
will be compliant.</span></p>

<p class="MsoNormal" style="margin:0in 0in 12pt 0.5in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:12pt;font-family:Calibri,sans-serif"> </span></p>

<p class="MsoNormal" style="margin:12pt 0in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Arial,sans-serif"><b><span lang="EN" style="font-size:12pt;font-family:Calibri,sans-serif">Action to take:</span></b><span lang="EN" style="font-size:12pt;font-family:Calibri,sans-serif"></span></p>

<p class="MsoNormal" style="margin:12pt 0in 0.0001pt 0.5in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:12pt;font-family:Calibri,sans-serif">●<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">     
</span></span><span lang="EN" style="font-size:12pt;font-family:Calibri,sans-serif">To
subscribe to the above site, you can use the License Overview Dashboard to
enable and gather the site. Note that you must be entitled to the BigFix
Compliance product and you must be using BigFix version 10.0.0 and later.</span><span lang="EN" style="font-size:12pt;font-family:Calibri,sans-serif"></span></p>

<p class="MsoNormal" style="margin:0in 0in 12pt 0.5in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:12pt;font-family:Calibri,sans-serif">●<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">     
</span></span><span lang="EN" style="font-size:12pt;font-family:Calibri,sans-serif">If
you use custom sites, update your custom sites accordingly to use the latest
content. You can synchronize your content by using the Synchronize Custom
Checks wizard. For more information, see </span><span lang="EN" style="color:black"><a href="https://help.hcltechsw.com/bigfix/11.0/compliance/Compliance/SCM_Users_Guide/c_using_synchronize_custom_checks_wiz.html"><span style="font-size:12pt;font-family:Calibri,sans-serif;color:rgb(0,136,204);text-decoration:none">Using the
Synchronize Custom Checks wizard</span></a></span><span lang="EN" style="font-size:12pt;font-family:Calibri,sans-serif"></span></p>

<p class="MsoNormal" style="margin:12pt 0in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Arial,sans-serif"><b><span lang="EN" style="font-size:12pt;font-family:Calibri,sans-serif">More information:<br>
</span></b><span lang="EN" style="font-size:12pt;font-family:Calibri,sans-serif">To know more about the BigFix
Compliance SCM checklists, please see the following resources:</span></p>

<p class="MsoNormal" style="margin:12pt 0in 12pt 0.5in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:12pt;font-family:Calibri,sans-serif">●<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">     
</span></span><span lang="EN" style="font-size:12pt;font-family:Calibri,sans-serif">BigFix
Forum:</span></p>

<p class="MsoNormal" style="margin:12pt 0in 12pt 0.5in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="color:black"><a href="https://forum.bigfix.com/c/release-announcements/compliance/63"><b><span style="font-size:12pt;font-family:Calibri,sans-serif;color:rgb(0,136,204);text-decoration:none">Compliance
(Release Announcements)</span></b></a></span><span lang="EN" style="font-size:12pt;font-family:Calibri,sans-serif"></span></p>

<h3 style="margin:0in 0in 19pt 4pt;text-indent:32pt;line-height:120%;break-after:auto;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:14pt;font-family:Arial,sans-serif;color:rgb(67,67,67);font-weight:normal"><a name="_369sj42yp351"></a><span lang="EN" style="font-size:12pt;line-height:120%;font-family:Calibri,sans-serif;color:rgb(34,34,34)">This category is used by HCL to
announce new releases for BigFix Compliance.</span></h3>

<p class="MsoNormal" style="margin:12pt 0in 12pt 0.5in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:12pt;font-family:Calibri,sans-serif">●<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">     
</span></span><span lang="EN" style="font-size:12pt;font-family:Calibri,sans-serif">BigFix
Compliance SCM Checklists:</span></p>

<h3 style="margin:0in 0in 19pt 4pt;text-indent:32pt;line-height:120%;break-after:auto;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:14pt;font-family:Arial,sans-serif;color:rgb(67,67,67);font-weight:normal"><a name="_tho3m6ultotl"></a><span lang="EN"><a href="https://forum.bigfix.com/c/release-announcements/scm-checklists/86"><b><span style="font-size:12pt;line-height:120%;font-family:Calibri,sans-serif;color:rgb(0,136,204);text-decoration:none">SCM Checklists</span></b></a></span><b><span lang="EN" style="font-size:12pt;line-height:120%;font-family:Calibri,sans-serif;color:rgb(0,136,204)"></span></b></h3>

<p class="MsoNormal" style="margin:12pt 0in 11pt 40pt;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:12pt;font-family:Calibri,sans-serif">This category is the central reference for all SCM
Checklists supported by BigFix Compliance. It covers the complete list of
active checklists across all supported frameworks and platforms, including CIS,
DISA STIG, PCI DSS, NIST, and more, along with site name, version details, and
supported OS versions.</span></p>

<p class="MsoNormal" style="margin:12pt 0in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:12pt;font-family:Calibri,sans-serif">We hope you find this latest release of SCM content
useful and effective. Thank you!<br>
<i>– The BigFix Compliance team</i></span></p></div>