diff --git a/stig/linux/config/CentOS74.mof b/stig/linux/config/CentOS74.mof index 01f092b..0761cf7 100644 --- a/stig/linux/config/CentOS74.mof +++ b/stig/linux/config/CentOS74.mof @@ -1,7 +1,7 @@ /* @TargetNode='CentOS74' @GeneratedBy=Microsoft -@GenerationDate=01/31/2022 17:13:26 +@GenerationDate=05/04/2022 09:09:33 @GenerationHost=Microsoft */ @@ -9,7 +9,7 @@ instance of MSFT_nxPackageResource as $MSFT_nxPackageResource1ref { ResourceID = "[nxPackage][V-204442][high][SRG-OS-000095-GPOS-00049]::[RHEL]Baseline"; Ensure = "Absent"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxPackage.ps1::8::5::nxPackage"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxPackage.ps1::8::5::nxPackage"; Name = "rsh-server"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -19,7 +19,7 @@ instance of MSFT_nxPackageResource as $MSFT_nxPackageResource2ref { ResourceID = "[nxPackage][V-204443][high][SRG-OS-000095-GPOS-00049]::[RHEL]Baseline"; Ensure = "Absent"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxPackage.ps1::8::5::nxPackage"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxPackage.ps1::8::5::nxPackage"; Name = "ypserv"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -29,7 +29,7 @@ instance of MSFT_nxPackageResource as $MSFT_nxPackageResource3ref { ResourceID = "[nxPackage][V-204497][high][SRG-OS-000033-GPOS-00014]::[RHEL]Baseline"; Ensure = "Present"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxPackage.ps1::8::5::nxPackage"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxPackage.ps1::8::5::nxPackage"; Name = "dracut-fips"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -39,7 +39,7 @@ instance of MSFT_nxPackageResource as $MSFT_nxPackageResource4ref { ResourceID = "[nxPackage][V-204498][low][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; Ensure = "Present"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxPackage.ps1::8::5::nxPackage"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxPackage.ps1::8::5::nxPackage"; Name = "aide"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -49,7 +49,7 @@ instance of MSFT_nxPackageResource as $MSFT_nxPackageResource5ref { ResourceID = "[nxPackage][V-204502][high][SRG-OS-000095-GPOS-00049]::[RHEL]Baseline"; Ensure = "Absent"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxPackage.ps1::8::5::nxPackage"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxPackage.ps1::8::5::nxPackage"; Name = "telnet-server"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -59,7 +59,7 @@ instance of MSFT_nxPackageResource as $MSFT_nxPackageResource6ref { ResourceID = "[nxPackage][V-204585][medium][SRG-OS-000423-GPOS-00187]::[RHEL]Baseline"; Ensure = "Present"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxPackage.ps1::8::5::nxPackage"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxPackage.ps1::8::5::nxPackage"; Name = "openssh-server"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -69,7 +69,7 @@ instance of MSFT_nxPackageResource as $MSFT_nxPackageResource7ref { ResourceID = "[nxPackage][V-204604.a][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; Ensure = "Present"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxPackage.ps1::8::5::nxPackage"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxPackage.ps1::8::5::nxPackage"; Name = "firewalld"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -79,7 +79,7 @@ instance of MSFT_nxPackageResource as $MSFT_nxPackageResource8ref { ResourceID = "[nxPackage][V-204620][high][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; Ensure = "Absent"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxPackage.ps1::8::5::nxPackage"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxPackage.ps1::8::5::nxPackage"; Name = "vsftpd"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -89,7 +89,7 @@ instance of MSFT_nxPackageResource as $MSFT_nxPackageResource9ref { ResourceID = "[nxPackage][V-204621][high][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; Ensure = "Absent"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxPackage.ps1::8::5::nxPackage"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxPackage.ps1::8::5::nxPackage"; Name = "tftp-server"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -99,7 +99,7 @@ instance of MSFT_nxPackageResource as $MSFT_nxPackageResource10ref { ResourceID = "[nxPackage][V-204631][medium][SRG-OS-000375-GPOS-00160]::[RHEL]Baseline"; Ensure = "Present"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxPackage.ps1::8::5::nxPackage"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxPackage.ps1::8::5::nxPackage"; Name = "pam_pkcs11"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -111,7 +111,7 @@ ResourceID = "[nxFile][V-204395][medium][SRG-OS-000023-GPOS-00006]::[RHEL]Baseli Contents = "You are accessing a U.S. Government (USG) Information System (IS) that is provided for USG-authorized use only.\n\nBy using this IS (which includes any device attached to this IS), you consent to the following conditions:\n\n-The USG routinely intercepts and monitors communications on this IS for purposes including, but not limited to, penetration testing, COMSEC monitoring, network operations and defense, personnel misconduct (PM), law enforcement (LE), and counterintelligence (CI) investigations.\n\n-At any time, the USG may inspect and seize data stored on this IS.\n\n-Communications using, or data stored on, this IS are not private, are subject to routine monitoring, interception, and search, and may be disclosed or used for any USG-authorized purpose.\n\n-This IS includes security measures (e.g., authentication and access controls) to protect USG interests--not for your personal benefit or privacy.\n\n-Notwithstanding the above, using this IS does not constitute consent to PM, LE or CI investigative searching or monitoring of the content of privileged communications, or work product, related to personal representation or services by attorneys, psychotherapists, or clergy, and their assistants. Such communications and work product are private and confidential. See User Agreement for details."; DestinationPath = "/etc/issue"; ModuleName = "nx"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; ModuleVersion = "1.0"; ConfigurationName = "LinuxBaseLine"; }; @@ -121,7 +121,7 @@ ResourceID = "[nxFile][V-204449.a][medium][SRG-OS-000114-GPOS-00059]::[RHEL]Base Contents = ""; DestinationPath = "/etc/modprobe.d/usb-storage.conf"; ModuleName = "nx"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; ModuleVersion = "1.0"; ConfigurationName = "LinuxBaseLine"; }; @@ -131,7 +131,7 @@ ResourceID = "[nxFile][V-204449.b][medium][SRG-OS-000114-GPOS-00059]::[RHEL]Base Contents = ""; DestinationPath = "/etc/modprobe.d/blacklist.conf"; ModuleName = "nx"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; ModuleVersion = "1.0"; ConfigurationName = "LinuxBaseLine"; }; @@ -141,7 +141,7 @@ ResourceID = "[nxFile][V-204450.a][medium][SRG-OS-000378-GPOS-00163]::[RHEL]Base Contents = ""; DestinationPath = "/etc/modprobe.d/dccp.conf"; ModuleName = "nx"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; ModuleVersion = "1.0"; ConfigurationName = "LinuxBaseLine"; }; @@ -151,7 +151,7 @@ ResourceID = "[nxFile][V-204576][low][SRG-OS-000027-GPOS-00008]::[RHEL]Baseline" Contents = "* hard maxlogins 10"; DestinationPath = "/etc/security/limits.d/204576-powerstig.conf"; ModuleName = "nx"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; ModuleVersion = "1.0"; ConfigurationName = "LinuxBaseLine"; }; @@ -161,7 +161,7 @@ ResourceID = "[nxFile][V-204579.a][medium][SRG-OS-000163-GPOS-00072]::[RHEL]Base Contents = ""; DestinationPath = "/etc/profile.d/tmout.sh"; ModuleName = "nx"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; ModuleVersion = "1.0"; ConfigurationName = "LinuxBaseLine"; }; @@ -171,7 +171,7 @@ ResourceID = "[nxFile][V-204584][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseli Contents = "kernel.randomize_va_space = 2"; DestinationPath = "/etc/sysctl.d/204584-powerstig.conf"; ModuleName = "nx"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; ModuleVersion = "1.0"; ConfigurationName = "LinuxBaseLine"; }; @@ -181,7 +181,7 @@ ResourceID = "[nxFile][V-204609][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseli Contents = "net.ipv4.conf.all.accept_source_route = 0"; DestinationPath = "/etc/sysctl.d/204609-powerstig.conf"; ModuleName = "nx"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; ModuleVersion = "1.0"; ConfigurationName = "LinuxBaseLine"; }; @@ -191,7 +191,7 @@ ResourceID = "[nxFile][V-204610][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseli Contents = "net.ipv4.conf.all.rp_filter = 1"; DestinationPath = "/etc/sysctl.d/204610-powerstig.conf"; ModuleName = "nx"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; ModuleVersion = "1.0"; ConfigurationName = "LinuxBaseLine"; }; @@ -201,7 +201,7 @@ ResourceID = "[nxFile][V-204611][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseli Contents = "net.ipv4.conf.default.rp_filter = 1"; DestinationPath = "/etc/sysctl.d/204611-powerstig.conf"; ModuleName = "nx"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; ModuleVersion = "1.0"; ConfigurationName = "LinuxBaseLine"; }; @@ -211,7 +211,7 @@ ResourceID = "[nxFile][V-204612][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseli Contents = "net.ipv4.conf.default.accept_source_route = 0"; DestinationPath = "/etc/sysctl.d/204612-powerstig.conf"; ModuleName = "nx"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; ModuleVersion = "1.0"; ConfigurationName = "LinuxBaseLine"; }; @@ -221,7 +221,7 @@ ResourceID = "[nxFile][V-204613][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseli Contents = "net.ipv4.icmp_echo_ignore_broadcasts = 1"; DestinationPath = "/etc/sysctl.d/204613-powerstig.conf"; ModuleName = "nx"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; ModuleVersion = "1.0"; ConfigurationName = "LinuxBaseLine"; }; @@ -231,7 +231,7 @@ ResourceID = "[nxFile][V-204614][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseli Contents = "net.ipv4.conf.default.accept_redirects = 0"; DestinationPath = "/etc/sysctl.d/204614-powerstig.conf"; ModuleName = "nx"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; ModuleVersion = "1.0"; ConfigurationName = "LinuxBaseLine"; }; @@ -241,7 +241,7 @@ ResourceID = "[nxFile][V-204615][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseli Contents = "net.ipv4.conf.all.accept_redirects = 0"; DestinationPath = "/etc/sysctl.d/204615-powerstig.conf"; ModuleName = "nx"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; ModuleVersion = "1.0"; ConfigurationName = "LinuxBaseLine"; }; @@ -251,7 +251,7 @@ ResourceID = "[nxFile][V-204616][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseli Contents = "net.ipv4.conf.default.send_redirects = 0"; DestinationPath = "/etc/sysctl.d/204616-powerstig.conf"; ModuleName = "nx"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; ModuleVersion = "1.0"; ConfigurationName = "LinuxBaseLine"; }; @@ -261,7 +261,7 @@ ResourceID = "[nxFile][V-204617][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseli Contents = "net.ipv4.conf.all.send_redirects = 0"; DestinationPath = "/etc/sysctl.d/204617-powerstig.conf"; ModuleName = "nx"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; ModuleVersion = "1.0"; ConfigurationName = "LinuxBaseLine"; }; @@ -271,7 +271,7 @@ ResourceID = "[nxFile][V-204625][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseli Contents = "net.ipv4.ip_forward = 0"; DestinationPath = "/etc/sysctl.d/204625-powerstig.conf"; ModuleName = "nx"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; ModuleVersion = "1.0"; ConfigurationName = "LinuxBaseLine"; }; @@ -281,7 +281,7 @@ ResourceID = "[nxFile][V-204630][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseli Contents = "net.ipv6.conf.all.accept_source_route = 0"; DestinationPath = "/etc/sysctl.d/204630-powerstig.conf"; ModuleName = "nx"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; ModuleVersion = "1.0"; ConfigurationName = "LinuxBaseLine"; }; @@ -291,7 +291,7 @@ ResourceID = "[nxFile][V-237634.a][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Base Contents = "Defaults !targetpw"; DestinationPath = "/etc/sudoers.d/237634a-powerstig.conf"; ModuleName = "nx"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; ModuleVersion = "1.0"; ConfigurationName = "LinuxBaseLine"; }; @@ -301,7 +301,7 @@ ResourceID = "[nxFile][V-237634.b][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Base Contents = "Defaults !rootpw"; DestinationPath = "/etc/sudoers.d/237634b-powerstig.conf"; ModuleName = "nx"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; ModuleVersion = "1.0"; ConfigurationName = "LinuxBaseLine"; }; @@ -311,7 +311,7 @@ ResourceID = "[nxFile][V-237634.c][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Base Contents = "Defaults !runaspw"; DestinationPath = "/etc/sudoers.d/237634c-powerstig.conf"; ModuleName = "nx"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; ModuleVersion = "1.0"; ConfigurationName = "LinuxBaseLine"; }; @@ -321,17 +321,7 @@ ResourceID = "[nxFile][V-237635][medium][SRG-OS-000373-GPOS-00156]::[RHEL]Baseli Contents = "Defaults timestamp_timeout=0"; DestinationPath = "/etc/sudoers.d/237635-powerstig.conf"; ModuleName = "nx"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; - ModuleVersion = "1.0"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileResource as $MSFT_nxFileResource23ref -{ -ResourceID = "[nxFile][V-250314][medium][SRG-OS-000324-GPOS-00125]::[RHEL]Baseline"; - Contents = "%wheel ALL=(ALL) TYPE=sysadm_t ROLE=sysadm_r ALL"; - DestinationPath = "/etc/sudoers.d/250314-powerstig.conf"; - ModuleName = "nx"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; ModuleVersion = "1.0"; ConfigurationName = "LinuxBaseLine"; }; @@ -339,7 +329,7 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource1ref { ResourceID = "[nxFileLine][V-204405][medium][SRG-OS-000069-GPOS-00037]::[RHEL]Baseline"; ContainsLine = "password substack system-auth"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/pam.d/passwd"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -350,7 +340,7 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource2ref { ResourceID = "[nxFileLine][V-204407][medium][SRG-OS-000069-GPOS-00037]::[RHEL]Baseline"; ContainsLine = "ucredit = -1"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/security/pwquality.conf"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -361,7 +351,7 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource3ref { ResourceID = "[nxFileLine][V-204408][medium][SRG-OS-000070-GPOS-00038]::[RHEL]Baseline"; ContainsLine = "lcredit = -1"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/security/pwquality.conf"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -372,7 +362,7 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource4ref { ResourceID = "[nxFileLine][V-204409][medium][SRG-OS-000071-GPOS-00039]::[RHEL]Baseline"; ContainsLine = "dcredit = -1"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/security/pwquality.conf"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -383,7 +373,7 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource5ref { ResourceID = "[nxFileLine][V-204410][medium][SRG-OS-000266-GPOS-00101]::[RHEL]Baseline"; ContainsLine = "ocredit=-1"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/security/pwquality.conf"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -394,7 +384,7 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource6ref { ResourceID = "[nxFileLine][V-204411][medium][SRG-OS-000072-GPOS-00040]::[RHEL]Baseline"; ContainsLine = "difok = 8"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/security/pwquality.conf"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -405,7 +395,7 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource7ref { ResourceID = "[nxFileLine][V-204412][medium][SRG-OS-000072-GPOS-00040]::[RHEL]Baseline"; ContainsLine = "minclass = 4"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/security/pwquality.conf"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -416,7 +406,7 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource8ref { ResourceID = "[nxFileLine][V-204413][medium][SRG-OS-000072-GPOS-00040]::[RHEL]Baseline"; ContainsLine = "maxrepeat = 3"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/security/pwquality.conf"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -427,18 +417,18 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource9ref { ResourceID = "[nxFileLine][V-204414][medium][SRG-OS-000072-GPOS-00040]::[RHEL]Baseline"; ContainsLine = "maxclassrepeat = 4"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/security/pwquality.conf"; ModuleName = "nx"; ModuleVersion = "1.0"; - DoesNotContainPattern = "^#\\s*maxclassrepeat\\s*=.*|^\\s*maxclassrepeat\\s*=\\s*(?:\\d{2,}|[3-9])"; + DoesNotContainPattern = "^#\\s*maxclassrepeat\\s*=.*|^\\s*maxclassrepeat\\s*=\\s*(?:\\d{2,}|[1-3|5-9])"; ConfigurationName = "LinuxBaseLine"; }; instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource10ref { ResourceID = "[nxFileLine][V-204416][medium][SRG-OS-000073-GPOS-00041]::[RHEL]Baseline"; ContainsLine = "ENCRYPT_METHOD SHA512"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/login.defs"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -449,7 +439,7 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource11ref { ResourceID = "[nxFileLine][V-204418][medium][SRG-OS-000075-GPOS-00043]::[RHEL]Baseline"; ContainsLine = "PASS_MIN_DAYS 1"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/login.defs"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -460,7 +450,7 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource12ref { ResourceID = "[nxFileLine][V-204420][medium][SRG-OS-000076-GPOS-00044]::[RHEL]Baseline"; ContainsLine = "PASS_MAX_DAYS 60"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/login.defs"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -471,7 +461,7 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource13ref { ResourceID = "[nxFileLine][V-204423][medium][SRG-OS-000078-GPOS-00046]::[RHEL]Baseline"; ContainsLine = "minlen = 15"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/security/pwquality.conf"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -482,7 +472,7 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource14ref { ResourceID = "[nxFileLine][V-204425][high][SRG-OS-000106-GPOS-00053]::[RHEL]Baseline"; ContainsLine = "PermitEmptyPasswords no"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/ssh/sshd_config"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -492,19 +482,19 @@ ResourceID = "[nxFileLine][V-204425][high][SRG-OS-000106-GPOS-00053]::[RHEL]Base instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource15ref { ResourceID = "[nxFileLine][V-204426][medium][SRG-OS-000118-GPOS-00060]::[RHEL]Baseline"; - ContainsLine = "INACTIVE=0"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + ContainsLine = "INACTIVE=35"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/default/useradd"; ModuleName = "nx"; ModuleVersion = "1.0"; - DoesNotContainPattern = "^#\\s*INACTIVE.*$|^INACTIVE\\s*=\\s*(?!0\\b)[-]*\\w*$"; + DoesNotContainPattern = "^#\\s*INACTIVE\\s*=.*|^\\s*INACTIVE\\s*=\\s*(3[5-9]|[4-9]\\d+|\\d{3,})"; ConfigurationName = "LinuxBaseLine"; }; instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource16ref { ResourceID = "[nxFileLine][V-204431][medium][SRG-OS-000480-GPOS-00226]::[RHEL]Baseline"; ContainsLine = "FAIL_DELAY 4"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/login.defs"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -515,7 +505,7 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource17ref { ResourceID = "[nxFileLine][V-204434][medium][SRG-OS-000480-GPOS-00229]::[RHEL]Baseline"; ContainsLine = "PermitUserEnvironment no"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/ssh/sshd_config"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -526,7 +516,7 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource18ref { ResourceID = "[nxFileLine][V-204435][medium][SRG-OS-000480-GPOS-00229]::[RHEL]Baseline"; ContainsLine = "HostbasedAuthentication no"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/ssh/sshd_config"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -537,7 +527,7 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource19ref { ResourceID = "[nxFileLine][V-204447][high][SRG-OS-000366-GPOS-00153]::[RHEL]Baseline"; ContainsLine = "gpgcheck=1"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/yum.conf"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -548,7 +538,7 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource20ref { ResourceID = "[nxFileLine][V-204448][high][SRG-OS-000366-GPOS-00153]::[RHEL]Baseline"; ContainsLine = "localpkg_gpgcheck=1"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/yum.conf"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -559,7 +549,7 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource21ref { ResourceID = "[nxFileLine][V-204449.c][medium][SRG-OS-000114-GPOS-00059]::[RHEL]Baseline"; ContainsLine = "install usb-storage /bin/true"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/modprobe.d/usb-storage.conf"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -570,7 +560,7 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource22ref { ResourceID = "[nxFileLine][V-204449.d][medium][SRG-OS-000114-GPOS-00059]::[RHEL]Baseline"; ContainsLine = "blacklist usb-storage"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/modprobe.d/blacklist.conf"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -581,7 +571,7 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource23ref { ResourceID = "[nxFileLine][V-204450.b][medium][SRG-OS-000378-GPOS-00163]::[RHEL]Baseline"; ContainsLine = "install dccp /bin/true"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/modprobe.d/dccp.conf"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -592,7 +582,7 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource24ref { ResourceID = "[nxFileLine][V-204450.c][medium][SRG-OS-000378-GPOS-00163]::[RHEL]Baseline"; ContainsLine = "blacklist dccp"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/modprobe.d/blacklist.conf"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -603,7 +593,7 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource25ref { ResourceID = "[nxFileLine][V-204452][low][SRG-OS-000437-GPOS-00194]::[RHEL]Baseline"; ContainsLine = "clean_requirements_on_remove=1"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/yum.conf"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -614,7 +604,7 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource26ref { ResourceID = "[nxFileLine][V-204453][medium][SRG-OS-000445-GPOS-00199]::[RHEL]Baseline"; ContainsLine = "SELINUX=enforcing"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/selinux/config"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -625,7 +615,7 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource27ref { ResourceID = "[nxFileLine][V-204454][medium][SRG-OS-000445-GPOS-00199]::[RHEL]Baseline"; ContainsLine = "SELINUXTYPE=targeted"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/selinux/config"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -636,7 +626,7 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource28ref { ResourceID = "[nxFileLine][V-204457][medium][SRG-OS-000480-GPOS-00228]::[RHEL]Baseline"; ContainsLine = "UMASK 077"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/login.defs"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -647,7 +637,7 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource29ref { ResourceID = "[nxFileLine][V-204466][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; ContainsLine = "CREATE_HOME yes"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/login.defs"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -658,16 +648,16 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource30ref { ResourceID = "[nxFileLine][V-204504][medium][SRG-OS-000046-GPOS-00022]::[RHEL]Baseline"; ContainsLine = "-f 2"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "^#\\s*-f\\s+2|^\\s*-f\\s*1"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileResource as $MSFT_nxFileResource24ref +instance of MSFT_nxFileResource as $MSFT_nxFileResource23ref { -SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::29::9::nxFile"; +SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::29::9::nxFile"; ModuleName = "nx"; ModuleVersion = "1.0"; ResourceID = "[nxFile][V-204506.a][medium][SRG-OS-000342-GPOS-00133]::[RHEL]Baseline"; @@ -678,7 +668,7 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource31ref { ResourceID = "[nxFileLine][V-204506.a][medium][SRG-OS-000342-GPOS-00133]::[RHEL]Baseline"; ContainsLine = "active = yes"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audisp/plugins.d/au-remote.conf"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -689,7 +679,7 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource32ref { ResourceID = "[nxFileLine][V-204506.b][medium][SRG-OS-000342-GPOS-00133]::[RHEL]Baseline"; ContainsLine = "direction = out"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audisp/plugins.d/au-remote.conf"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -700,7 +690,7 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource33ref { ResourceID = "[nxFileLine][V-204506.c][medium][SRG-OS-000342-GPOS-00133]::[RHEL]Baseline"; ContainsLine = "path = /sbin/audisp-remote"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audisp/plugins.d/au-remote.conf"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -711,7 +701,7 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource34ref { ResourceID = "[nxFileLine][V-204506.d][medium][SRG-OS-000342-GPOS-00133]::[RHEL]Baseline"; ContainsLine = "type = always"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audisp/plugins.d/au-remote.conf"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -722,7 +712,7 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource35ref { ResourceID = "[nxFileLine][V-204507][medium][SRG-OS-000342-GPOS-00133]::[RHEL]Baseline"; ContainsLine = "overflow_action = syslog"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audisp/audispd.conf"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -733,16 +723,16 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource36ref { ResourceID = "[nxFileLine][V-204508][medium][SRG-OS-000342-GPOS-00133]::[RHEL]Baseline"; ContainsLine = "name_format = hostname"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audisp/audispd.conf"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "^#\\s*name_format.*$|^name_format\\s*=\\s*(?!hostname$)\\w*$"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileResource as $MSFT_nxFileResource25ref +instance of MSFT_nxFileResource as $MSFT_nxFileResource24ref { -SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::19::9::nxFile"; +SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::19::9::nxFile"; ModuleName = "nx"; ModuleVersion = "1.0"; ResourceID = "[nxFile][V-204510][medium][SRG-OS-000342-GPOS-00133]::[RHEL]Baseline"; @@ -753,7 +743,7 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource37ref { ResourceID = "[nxFileLine][V-204510][medium][SRG-OS-000342-GPOS-00133]::[RHEL]Baseline"; ContainsLine = "enable_krb5 = yes"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audisp/audisp-remote.conf"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -764,7 +754,7 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource38ref { ResourceID = "[nxFileLine][V-204511][medium][SRG-OS-000342-GPOS-00133]::[RHEL]Baseline"; ContainsLine = "disk_full_action = single"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audisp/audisp-remote.conf"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -775,7 +765,7 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource39ref { ResourceID = "[nxFileLine][V-204512][medium][SRG-OS-000342-GPOS-00133]::[RHEL]Baseline"; ContainsLine = "network_failure_action = syslog"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audisp/audisp-remote.conf"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -786,7 +776,7 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource40ref { ResourceID = "[nxFileLine][V-204514][medium][SRG-OS-000343-GPOS-00134]::[RHEL]Baseline"; ContainsLine = "space_left_action = email"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/auditd.conf"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -797,7 +787,7 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource41ref { ResourceID = "[nxFileLine][V-204515][medium][SRG-OS-000343-GPOS-00134]::[RHEL]Baseline"; ContainsLine = "action_mail_acct = root"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/auditd.conf"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -808,7 +798,7 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource42ref { ResourceID = "[nxFileLine][V-204516.a][medium][SRG-OS-000327-GPOS-00127]::[RHEL]Baseline"; ContainsLine = "-a always,exit -F arch=b32 -S execve -C uid!=euid -F euid=0 -k setuid"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -819,7 +809,7 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource43ref { ResourceID = "[nxFileLine][V-204516.b][medium][SRG-OS-000327-GPOS-00127]::[RHEL]Baseline"; ContainsLine = "-a always,exit -F arch=b64 -S execve -C uid!=euid -F euid=0 -k setuid"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -830,7 +820,7 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource44ref { ResourceID = "[nxFileLine][V-204516.c][medium][SRG-OS-000327-GPOS-00127]::[RHEL]Baseline"; ContainsLine = "-a always,exit -F arch=b32 -S execve -C gid!=egid -F egid=0 -k setgid"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -841,7 +831,7 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource45ref { ResourceID = "[nxFileLine][V-204516.d][medium][SRG-OS-000327-GPOS-00127]::[RHEL]Baseline"; ContainsLine = "-a always,exit -F arch=b64 -S execve -C gid!=egid -F egid=0 -k setgid"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -851,1318 +841,779 @@ ResourceID = "[nxFileLine][V-204516.d][medium][SRG-OS-000327-GPOS-00127]::[RHEL] instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource46ref { ResourceID = "[nxFileLine][V-204517.a][medium][SRG-OS-000064-GPOS-00033]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S chown -F auid>=1000 -F auid!=unset -k perm_mod"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + ContainsLine = "-a always,exit -F arch=b32 -S chown,fchown,fchownat,lchown -F auid>=1000 -F auid!=unset -k perm_mod"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*chown\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*perm_mod"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*chown,fchown,fchownat,lchown\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*perm_mod"; ConfigurationName = "LinuxBaseLine"; }; instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource47ref { ResourceID = "[nxFileLine][V-204517.b][medium][SRG-OS-000064-GPOS-00033]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S chown -F auid>=1000 -F auid!=unset -k perm_mod"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + ContainsLine = "-a always,exit -F arch=b64 -S chown,fchown,fchownat,lchown -F auid>=1000 -F auid!=unset -k perm_mod"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*chown\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*perm_mod"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*chown,fchown,fchownat,lchown\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*perm_mod"; ConfigurationName = "LinuxBaseLine"; }; instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource48ref { -ResourceID = "[nxFileLine][V-204518.a][medium][SRG-OS-000064-GPOS-00033]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S fchown -F auid>=1000 -F auid!=unset -k perm_mod"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; +ResourceID = "[nxFileLine][V-204521.a][medium][SRG-OS-000458-GPOS-00203]::[RHEL]Baseline"; + ContainsLine = "-a always,exit -F arch=b32 -S chmod,fchmod,fchmodat -F auid>=1000 -F auid!=unset -k perm_mod"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*fchown\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*perm_mod"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*chmod,fchmod,fchmodat\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*perm_mod"; ConfigurationName = "LinuxBaseLine"; }; instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource49ref { -ResourceID = "[nxFileLine][V-204518.b][medium][SRG-OS-000064-GPOS-00033]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S fchown -F auid>=1000 -F auid!=unset -k perm_mod"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; +ResourceID = "[nxFileLine][V-204521.b][medium][SRG-OS-000458-GPOS-00203]::[RHEL]Baseline"; + ContainsLine = "-a always,exit -F arch=b64 -S chmod,fchmod,fchmodat -F auid>=1000 -F auid!=unset -k perm_mod"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*fchown\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*perm_mod"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*chmod,fchmod,fchmodat\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*perm_mod"; ConfigurationName = "LinuxBaseLine"; }; instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource50ref { -ResourceID = "[nxFileLine][V-204519.a][medium][SRG-OS-000064-GPOS-00033]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S lchown -F auid>=1000 -F auid!=unset -k perm_mod"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; +ResourceID = "[nxFileLine][V-204524.a][medium][SRG-OS-000458-GPOS-00203]::[RHEL]Baseline"; + ContainsLine = "-a always,exit -F arch=b32 -S setxattr,fsetxattr,lsetxattr,removexattr,fremovexattr,lremovexattr -F auid>=1000 -F auid!=unset -k perm_mod"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*lchown\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*perm_mod"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*setxattr,fsetxattr,lsetxattr,removexattr,fremovexattr,lremovexattr\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*perm_mod"; ConfigurationName = "LinuxBaseLine"; }; instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource51ref { -ResourceID = "[nxFileLine][V-204519.b][medium][SRG-OS-000064-GPOS-00033]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S lchown -F auid>=1000 -F auid!=unset -k perm_mod"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; +ResourceID = "[nxFileLine][V-204524.b][medium][SRG-OS-000458-GPOS-00203]::[RHEL]Baseline"; + ContainsLine = "-a always,exit -F arch=b64 -S setxattr,fsetxattr,lsetxattr,removexattr,fremovexattr,lremovexattr -F auid>=1000 -F auid!=unset -k perm_mod"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*lchown\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*perm_mod"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*setxattr,fsetxattr,lsetxattr,removexattr,fremovexattr,lremovexattr\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*perm_mod"; ConfigurationName = "LinuxBaseLine"; }; instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource52ref { -ResourceID = "[nxFileLine][V-204520.a][medium][SRG-OS-000064-GPOS-00033]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S fchownat -F auid>=1000 -F auid!=unset -k perm_mod"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; +ResourceID = "[nxFileLine][V-204531.a][medium][SRG-OS-000064-GPOS-00033]::[RHEL]Baseline"; + ContainsLine = "-a always,exit -F arch=b32 -S creat,open,openat,open_by_handle_at,truncate,ftruncate -F exit=-EPERM -F auid>=1000 -F auid!=unset -k access"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*fchownat\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*perm_mod"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*creat,open,openat,open_by_handle_at,truncate,ftruncate\\s*-F\\s*exit\\s*=\\s*-EPERM\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*access"; ConfigurationName = "LinuxBaseLine"; }; instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource53ref { -ResourceID = "[nxFileLine][V-204520.b][medium][SRG-OS-000064-GPOS-00033]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S fchownat -F auid>=1000 -F auid!=unset -k perm_mod"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; +ResourceID = "[nxFileLine][V-204531.b][medium][SRG-OS-000064-GPOS-00033]::[RHEL]Baseline"; + ContainsLine = "-a always,exit -F arch=b32 -S creat,open,openat,open_by_handle_at,truncate,ftruncate -F exit=-EACCES -F auid>=1000 -F auid!=unset -k access"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*fchownat\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*perm_mod"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*creat,open,openat,open_by_handle_at,truncate,ftruncate\\s*-F\\s*exit\\s*=\\s*-EACCES\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*access"; ConfigurationName = "LinuxBaseLine"; }; instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource54ref { -ResourceID = "[nxFileLine][V-204521.a][medium][SRG-OS-000458-GPOS-00203]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S chmod -F auid>=1000 -F auid!=unset -k perm_mod"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; +ResourceID = "[nxFileLine][V-204531.c][medium][SRG-OS-000064-GPOS-00033]::[RHEL]Baseline"; + ContainsLine = "-a always,exit -F arch=b64 -S creat,open,openat,open_by_handle_at,truncate,ftruncate -F exit=-EPERM -F auid>=1000 -F auid!=unset -k access"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*chmod\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*perm_mod"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*creat,open,openat,open_by_handle_at,truncate,ftruncate\\s*-F\\s*exit\\s*=\\s*-EPERM\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*access"; ConfigurationName = "LinuxBaseLine"; }; instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource55ref { -ResourceID = "[nxFileLine][V-204521.b][medium][SRG-OS-000458-GPOS-00203]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S chmod -F auid>=1000 -F auid!=unset -k perm_mod"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; +ResourceID = "[nxFileLine][V-204531.d][medium][SRG-OS-000064-GPOS-00033]::[RHEL]Baseline"; + ContainsLine = "-a always,exit -F arch=b64 -S creat,open,openat,open_by_handle_at,truncate,ftruncate -F exit=-EACCES -F auid>=1000 -F auid!=unset -k access"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*chmod\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*perm_mod"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*creat,open,openat,open_by_handle_at,truncate,ftruncate\\s*-F\\s*exit\\s*=\\s*-EACCES\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*access"; ConfigurationName = "LinuxBaseLine"; }; instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource56ref { -ResourceID = "[nxFileLine][V-204522.a][medium][SRG-OS-000458-GPOS-00203]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S fchmod -F auid>=1000 -F auid!=unset -k perm_mod"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*fchmod\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*perm_mod"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource57ref -{ -ResourceID = "[nxFileLine][V-204522.b][medium][SRG-OS-000458-GPOS-00203]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S fchmod -F auid>=1000 -F auid!=unset -k perm_mod"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*fchmod\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*perm_mod"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource58ref -{ -ResourceID = "[nxFileLine][V-204523.a][medium][SRG-OS-000458-GPOS-00203]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S fchmodat -F auid>=1000 -F auid!=unset -k perm_mod"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*fchmodat\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*perm_mod"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource59ref -{ -ResourceID = "[nxFileLine][V-204523.b][medium][SRG-OS-000458-GPOS-00203]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S fchmodat -F auid>=1000 -F auid!=unset -k perm_mod"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*fchmodat\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*perm_mod"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource60ref -{ -ResourceID = "[nxFileLine][V-204524.a][medium][SRG-OS-000458-GPOS-00203]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S setxattr -F auid>=1000 -F auid!=unset -k perm_mod"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*setxattr\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*perm_mod"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource61ref -{ -ResourceID = "[nxFileLine][V-204524.b][medium][SRG-OS-000458-GPOS-00203]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S setxattr -F auid>=1000 -F auid!=unset -k perm_mod"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*setxattr\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*perm_mod"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource62ref -{ -ResourceID = "[nxFileLine][V-204525.a][medium][SRG-OS-000458-GPOS-00203]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S fsetxattr -F auid>=1000 -F auid!=unset -k perm_mod"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*fsetxattr\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*perm_mod"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource63ref -{ -ResourceID = "[nxFileLine][V-204525.b][medium][SRG-OS-000458-GPOS-00203]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S fsetxattr -F auid>=1000 -F auid!=unset -k perm_mod"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*fsetxattr\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*perm_mod"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource64ref -{ -ResourceID = "[nxFileLine][V-204526.a][medium][SRG-OS-000458-GPOS-00203]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S lsetxattr -F auid>=1000 -F auid!=unset -k perm_mod"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*lsetxattr\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*perm_mod"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource65ref -{ -ResourceID = "[nxFileLine][V-204526.b][medium][SRG-OS-000458-GPOS-00203]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S lsetxattr -F auid>=1000 -F auid!=unset -k perm_mod"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*lsetxattr\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*perm_mod"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource66ref -{ -ResourceID = "[nxFileLine][V-204527.a][medium][SRG-OS-000458-GPOS-00203]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S removexattr -F auid>=1000 -F auid!=unset -k perm_mod"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*removexattr\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*perm_mod"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource67ref -{ -ResourceID = "[nxFileLine][V-204527.b][medium][SRG-OS-000458-GPOS-00203]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S removexattr -F auid>=1000 -F auid!=unset -k perm_mod"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*removexattr\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*perm_mod"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource68ref -{ -ResourceID = "[nxFileLine][V-204528.a][medium][SRG-OS-000458-GPOS-00203]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S fremovexattr -F auid>=1000 -F auid!=unset -k perm_mod"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*fremovexattr\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*perm_mod"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource69ref -{ -ResourceID = "[nxFileLine][V-204528.b][medium][SRG-OS-000458-GPOS-00203]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S fremovexattr -F auid>=1000 -F auid!=unset -k perm_mod"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*fremovexattr\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*perm_mod"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource70ref -{ -ResourceID = "[nxFileLine][V-204529.a][medium][SRG-OS-000458-GPOS-00203]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S lremovexattr -F auid>=1000 -F auid!=unset -k perm_mod"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*lremovexattr\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*perm_mod"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource71ref -{ -ResourceID = "[nxFileLine][V-204529.b][medium][SRG-OS-000458-GPOS-00203]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S lremovexattr -F auid>=1000 -F auid!=unset -k perm_mod"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*lremovexattr\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*perm_mod"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource72ref -{ -ResourceID = "[nxFileLine][V-204530.a][medium][SRG-OS-000064-GPOS-00033]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S creat F exit=-EPERM -F auid>=1000 -F auid!=unset -k access"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*creat\\s*F\\s*exit\\s*=\\s*-EPERM\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*access"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource73ref -{ -ResourceID = "[nxFileLine][V-204530.b][medium][SRG-OS-000064-GPOS-00033]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S creat -F exit=-EACCES -F auid>=1000 -F auid!=unset -k access"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*creat\\s*-F\\s*exit\\s*=\\s*-EACCES\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*access"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource74ref -{ -ResourceID = "[nxFileLine][V-204530.c][medium][SRG-OS-000064-GPOS-00033]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S creat -F exit=-EPERM -F auid>=1000 -F auid!=unset -k access"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*creat\\s*-F\\s*exit\\s*=\\s*-EPERM\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*access"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource75ref -{ -ResourceID = "[nxFileLine][V-204530.d][medium][SRG-OS-000064-GPOS-00033]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S creat -F exit=-EACCES -F auid>=1000 -F auid!=unset -k access"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*creat\\s*-F\\s*exit\\s*=\\s*-EACCES\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*access"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource76ref -{ -ResourceID = "[nxFileLine][V-204531.a][medium][SRG-OS-000064-GPOS-00033]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S open -F exit=-EPERM -F auid>=1000 -F auid!=unset -k access"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*open\\s*-F\\s*exit\\s*=\\s*-EPERM\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*access"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource77ref -{ -ResourceID = "[nxFileLine][V-204531.b][medium][SRG-OS-000064-GPOS-00033]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S open -F exit=-EACCES -F auid>=1000 -F auid!=unset -k access"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*open\\s*-F\\s*exit\\s*=\\s*-EACCES\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*access"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource78ref -{ -ResourceID = "[nxFileLine][V-204531.c][medium][SRG-OS-000064-GPOS-00033]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S open -F exit=-EPERM -F auid>=1000 -F auid!=unset -k access"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*open\\s*-F\\s*exit\\s*=\\s*-EPERM\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*access"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource79ref -{ -ResourceID = "[nxFileLine][V-204531.d][medium][SRG-OS-000064-GPOS-00033]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S open -F exit=-EACCES -F auid>=1000 -F auid!=unset -k access"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*open\\s*-F\\s*exit\\s*=\\s*-EACCES\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*access"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource80ref -{ -ResourceID = "[nxFileLine][V-204532.a][medium][SRG-OS-000064-GPOS-00033]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S openat -F exit=-EPERM -F auid>=1000 -F auid!=unset -k access"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*openat\\s*-F\\s*exit\\s*=\\s*-EPERM\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*access"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource81ref -{ -ResourceID = "[nxFileLine][V-204532.b][medium][SRG-OS-000064-GPOS-00033]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S openat -F exit=-EACCES -F auid>=1000 -F auid!=unset -k access"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*openat\\s*-F\\s*exit\\s*=\\s*-EACCES\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*access"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource82ref -{ -ResourceID = "[nxFileLine][V-204532.c][medium][SRG-OS-000064-GPOS-00033]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S openat -F exit=-EPERM -F auid>=1000 -F auid!=unset -k access"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*openat\\s*-F\\s*exit\\s*=\\s*-EPERM\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*access"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource83ref -{ -ResourceID = "[nxFileLine][V-204532.d][medium][SRG-OS-000064-GPOS-00033]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S openat -F exit=-EACCES -F auid>=1000 -F auid!=unset -k access"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*openat\\s*-F\\s*exit\\s*=\\s*-EACCES\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*access"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource84ref -{ -ResourceID = "[nxFileLine][V-204533.a][medium][SRG-OS-000064-GPOS-00033]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S open_by_handle_at -F exit=-EPERM -F auid>=1000 -F auid!=unset -k access"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*open_by_handle_at\\s*-F\\s*exit\\s*=\\s*-EPERM\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*access"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource85ref -{ -ResourceID = "[nxFileLine][V-204533.b][medium][SRG-OS-000064-GPOS-00033]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S open_by_handle_at -F exit=-EACCES -F auid>=1000 -F auid!=unset -k access"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*open_by_handle_at\\s*-F\\s*exit\\s*=\\s*-EACCES\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*access"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource86ref -{ -ResourceID = "[nxFileLine][V-204533.c][medium][SRG-OS-000064-GPOS-00033]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S open_by_handle_at -F exit=-EPERM -F auid>=1000 -F auid!=unset -k access"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*open_by_handle_at\\s*-F\\s*exit\\s*=\\s*-EPERM\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*access"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource87ref -{ -ResourceID = "[nxFileLine][V-204533.d][medium][SRG-OS-000064-GPOS-00033]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S open_by_handle_at -F exit=-EACCES -F auid>=1000 -F auid!=unset -k access"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*open_by_handle_at\\s*-F\\s*exit\\s*=\\s*-EACCES\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*access"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource88ref -{ -ResourceID = "[nxFileLine][V-204534.a][medium][SRG-OS-000064-GPOS-00033]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S truncate -F exit=-EPERM -F auid>=1000 -F auid!=unset -k access"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*truncate\\s*-F\\s*exit\\s*=\\s*-EPERM\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*access"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource89ref -{ -ResourceID = "[nxFileLine][V-204534.b][medium][SRG-OS-000064-GPOS-00033]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S truncate -F exit=-EACCES -F auid>=1000 -F auid!=unset -k access"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*truncate\\s*-F\\s*exit\\s*=\\s*-EACCES\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*access"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource90ref -{ -ResourceID = "[nxFileLine][V-204534.c][medium][SRG-OS-000064-GPOS-00033]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S truncate -F exit=-EPERM -F auid>=1000 -F auid!=unset -k access"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*truncate\\s*-F\\s*exit\\s*=\\s*-EPERM\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*access"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource91ref -{ -ResourceID = "[nxFileLine][V-204534.d][medium][SRG-OS-000064-GPOS-00033]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S truncate -F exit=-EACCES -F auid>=1000 -F auid!=unset -k access"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*truncate\\s*-F\\s*exit\\s*=\\s*-EACCES\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*access"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource92ref -{ -ResourceID = "[nxFileLine][V-204535.a][medium][SRG-OS-000064-GPOS-00033]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S ftruncate -F exit=-EPERM -F auid>=1000 -F auid!=unset -k access"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*ftruncate\\s*-F\\s*exit\\s*=\\s*-EPERM\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*access"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource93ref -{ -ResourceID = "[nxFileLine][V-204535.b][medium][SRG-OS-000064-GPOS-00033]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S ftruncate -F exit=-EACCES -F auid>=1000 -F auid!=unset -k access"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*ftruncate\\s*-F\\s*exit\\s*=\\s*-EACCES\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*access"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource94ref -{ -ResourceID = "[nxFileLine][V-204535.c][medium][SRG-OS-000064-GPOS-00033]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S ftruncate -F exit=-EPERM -F auid>=1000 -F auid!=unset -k access"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*ftruncate\\s*-F\\s*exit\\s*=\\s*-EPERM\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*access"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource95ref -{ -ResourceID = "[nxFileLine][V-204535.d][medium][SRG-OS-000064-GPOS-00033]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S ftruncate -F exit=-EACCES -F auid>=1000 -F auid!=unset -k access"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*ftruncate\\s*-F\\s*exit\\s*=\\s*-EACCES\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*access"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource96ref -{ ResourceID = "[nxFileLine][V-204536][medium][SRG-OS-000392-GPOS-00172]::[RHEL]Baseline"; ContainsLine = "-a always,exit -F path=/usr/sbin/semanage -F auid>=1000 -F auid!=unset -k privileged-priv_change"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/sbin/semanage\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-priv_change"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource97ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource57ref { ResourceID = "[nxFileLine][V-204537][medium][SRG-OS-000392-GPOS-00172]::[RHEL]Baseline"; ContainsLine = "-a always,exit -F path=/usr/sbin/setsebool -F auid>=1000 -F auid!=unset -k privileged-priv_change"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/sbin/setsebool\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-priv_change"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource98ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource58ref { ResourceID = "[nxFileLine][V-204538][medium][SRG-OS-000392-GPOS-00172]::[RHEL]Baseline"; ContainsLine = "-a always,exit -F path=/usr/bin/chcon -F auid>=1000 -F auid!=unset -k privileged-priv_change"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/bin/chcon\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-priv_change"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource99ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource59ref { ResourceID = "[nxFileLine][V-204539][medium][SRG-OS-000392-GPOS-00172]::[RHEL]Baseline"; ContainsLine = "-a always,exit -F path=/usr/sbin/setfiles -F auid>=1000 -F auid!=unset -k privileged-priv_change"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/sbin/setfiles\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-priv_change"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource100ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource60ref { ResourceID = "[nxFileLine][V-204540][medium][SRG-OS-000392-GPOS-00172]::[RHEL]Baseline"; ContainsLine = "-w /var/run/faillock -p wa -k logins"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "#\\s*-w\\s*/var/run/faillock\\s*-p\\s*wa\\s*-k\\s*logins"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource101ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource61ref { ResourceID = "[nxFileLine][V-204541][medium][SRG-OS-000392-GPOS-00172]::[RHEL]Baseline"; ContainsLine = "-w /var/log/lastlog -p wa -k logins"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "#\\s*-w\\s*/var/log/lastlog\\s*-p\\s*wa\\s*-k\\s*logins"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource102ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource62ref { ResourceID = "[nxFileLine][V-204542][medium][SRG-OS-000042-GPOS-00020]::[RHEL]Baseline"; ContainsLine = "-a always,exit -F path=/usr/bin/passwd -F auid>=1000 -F auid!=unset -k privileged-passwd"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/bin/passwd\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-passwd"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource103ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource63ref { ResourceID = "[nxFileLine][V-204543][medium][SRG-OS-000042-GPOS-00020]::[RHEL]Baseline"; ContainsLine = "-a always,exit -F path=/usr/sbin/unix_chkpwd -F auid>=1000 -F auid!=unset -k privileged-passwd"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/sbin/unix_chkpwd\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-passwd"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource104ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource64ref { ResourceID = "[nxFileLine][V-204544][medium][SRG-OS-000042-GPOS-00020]::[RHEL]Baseline"; ContainsLine = "-a always,exit -F path=/usr/bin/gpasswd -F auid>=1000 -F auid!=unset -k privileged-passwd"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/bin/gpasswd\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-passwd"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource105ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource65ref { ResourceID = "[nxFileLine][V-204545][medium][SRG-OS-000042-GPOS-00020]::[RHEL]Baseline"; ContainsLine = "-a always,exit -F path=/usr/bin/chage -F auid>=1000 -F auid!=unset -k privileged-passwd"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/bin/chage\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-passwd"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource106ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource66ref { ResourceID = "[nxFileLine][V-204546][medium][SRG-OS-000042-GPOS-00020]::[RHEL]Baseline"; ContainsLine = "-a always,exit -F path=/usr/sbin/userhelper -F auid>=1000 -F auid!=unset -k privileged-passwd"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/sbin/userhelper\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-passwd"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource107ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource67ref { ResourceID = "[nxFileLine][V-204547][medium][SRG-OS-000037-GPOS-00015]::[RHEL]Baseline"; ContainsLine = "-a always,exit -F path=/usr/bin/su -F auid>=1000 -F auid!=unset -k privileged-priv_change"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/bin/su\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-priv_change"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource108ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource68ref { ResourceID = "[nxFileLine][V-204548][medium][SRG-OS-000037-GPOS-00015]::[RHEL]Baseline"; ContainsLine = "-a always,exit -F path=/usr/bin/sudo -F auid>=1000 -F auid!=unset -k privileged-priv_change"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/bin/sudo\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-priv_change"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource109ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource69ref { ResourceID = "[nxFileLine][V-204549.a][medium][SRG-OS-000037-GPOS-00015]::[RHEL]Baseline"; ContainsLine = "-w /etc/sudoers -p wa -k privileged-actions"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "#\\s*-w /etc/sudoers -p wa -k privileged-actions"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource110ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource70ref { ResourceID = "[nxFileLine][V-204549.b][medium][SRG-OS-000037-GPOS-00015]::[RHEL]Baseline"; ContainsLine = "-w /etc/sudoers.d/ -p wa -k privileged-actions"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "#\\s*-w /etc/sudoers.d/ -p wa -k privileged-actions"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource111ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource71ref { ResourceID = "[nxFileLine][V-204550][medium][SRG-OS-000037-GPOS-00015]::[RHEL]Baseline"; ContainsLine = "-a always,exit -F path=/usr/bin/newgrp -F auid>=1000 -F auid!=unset -k privileged-priv_change"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/bin/newgrp\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-priv_change"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource112ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource72ref { ResourceID = "[nxFileLine][V-204551][medium][SRG-OS-000037-GPOS-00015]::[RHEL]Baseline"; ContainsLine = "-a always,exit -F path=/usr/bin/chsh -F auid>=1000 -F auid!=unset -k privileged-priv_change"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/bin/chsh\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-priv_change"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource113ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource73ref { ResourceID = "[nxFileLine][V-204552.a][medium][SRG-OS-000042-GPOS-00020]::[RHEL]Baseline"; ContainsLine = "-a always,exit -F arch=b32 -S mount -F auid>=1000 -F auid!=unset -k privileged-mount"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*mount\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-mount"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource114ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource74ref { ResourceID = "[nxFileLine][V-204552.b][medium][SRG-OS-000042-GPOS-00020]::[RHEL]Baseline"; ContainsLine = "-a always,exit -F arch=b64 -S mount -F auid>=1000 -F auid!=unset -k privileged-mount"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*mount\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-mount"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource115ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource75ref { ResourceID = "[nxFileLine][V-204552.c][medium][SRG-OS-000042-GPOS-00020]::[RHEL]Baseline"; ContainsLine = "-a always,exit -F path=/usr/bin/mount -F auid>=1000 -F auid!=unset -k privileged-mount"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/bin/mount\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-mount"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource116ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource76ref { ResourceID = "[nxFileLine][V-204553][medium][SRG-OS-000042-GPOS-00020]::[RHEL]Baseline"; ContainsLine = "-a always,exit -F path=/usr/bin/umount -F auid>=1000 -F auid!=unset -k privileged-mount"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/bin/umount\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-mount"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource117ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource77ref { ResourceID = "[nxFileLine][V-204554][medium][SRG-OS-000042-GPOS-00020]::[RHEL]Baseline"; ContainsLine = "-a always,exit -F path=/usr/sbin/postdrop -F auid>=1000 -F auid!=unset -k privileged-postfix"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/sbin/postdrop\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-postfix"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource118ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource78ref { ResourceID = "[nxFileLine][V-204555][medium][SRG-OS-000042-GPOS-00020]::[RHEL]Baseline"; ContainsLine = "-a always,exit -F path=/usr/sbin/postqueue -F auid>=1000 -F auid!=unset -k privileged-postfix"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/sbin/postqueue\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-postfix"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource119ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource79ref { ResourceID = "[nxFileLine][V-204556][medium][SRG-OS-000042-GPOS-00020]::[RHEL]Baseline"; ContainsLine = "-a always,exit -F path=/usr/libexec/openssh/ssh-keysign -F auid>=1000 -F auid!=unset -k privileged-ssh"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/libexec/openssh/ssh-keysign\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-ssh"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource120ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource80ref { ResourceID = "[nxFileLine][V-204557][medium][SRG-OS-000042-GPOS-00020]::[RHEL]Baseline"; ContainsLine = "-a always,exit -F path=/usr/bin/crontab -F auid>=1000 -F auid!=unset -k privileged-cron"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/bin/crontab\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-cron"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource121ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource81ref { ResourceID = "[nxFileLine][V-204558][medium][SRG-OS-000471-GPOS-00215]::[RHEL]Baseline"; ContainsLine = "-a always,exit -F path=/usr/sbin/pam_timestamp_check -F auid>=1000 -F auid!=unset -k privileged-pam"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/sbin/pam_timestamp_check\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-pam"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource122ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource82ref { ResourceID = "[nxFileLine][V-204559.a][medium][SRG-OS-000471-GPOS-00216]::[RHEL]Baseline"; ContainsLine = "-a always,exit -F arch=b32 -S create_module -k module-change"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*create_module\\s*-k\\s*module-change"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource123ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource83ref { ResourceID = "[nxFileLine][V-204559.b][medium][SRG-OS-000471-GPOS-00216]::[RHEL]Baseline"; ContainsLine = "-a always,exit -F arch=b64 -S create_module -k module-change"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*create_module\\s*-k\\s*module-change"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource124ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource84ref { ResourceID = "[nxFileLine][V-204560.a][medium][SRG-OS-000471-GPOS-00216]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S init_module -k module-change"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + ContainsLine = "-a always,exit -F arch=b32 -S init_module,finit_module -k modulechange"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*init_module\\s*-k\\s*module-change"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*init_module,finit_module\\s*-k\\s*modulechange"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource125ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource85ref { ResourceID = "[nxFileLine][V-204560.b][medium][SRG-OS-000471-GPOS-00216]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S init_module -k module-change"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + ContainsLine = "-a always,exit -F arch=b64 -S init_module,finit_module -k modulechange"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*init_module\\s*-k\\s*module-change"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*init_module,finit_module\\s*-k\\s*modulechange"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource126ref -{ -ResourceID = "[nxFileLine][V-204561.a][medium][SRG-OS-000471-GPOS-00216]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S finit_module -k module-change"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*finit_module\\s*-k\\s*module-change"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource127ref -{ -ResourceID = "[nxFileLine][V-204561.b][medium][SRG-OS-000471-GPOS-00216]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S finit_module -k module-change"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*finit_module\\s*-k\\s*module-change"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource128ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource86ref { ResourceID = "[nxFileLine][V-204562.a][medium][SRG-OS-000471-GPOS-00216]::[RHEL]Baseline"; ContainsLine = "-a always,exit -F arch=b32 -S delete_module -k module-change"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*delete_module\\s*-k\\s*module-change"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource129ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource87ref { ResourceID = "[nxFileLine][V-204562.b][medium][SRG-OS-000471-GPOS-00216]::[RHEL]Baseline"; ContainsLine = "-a always,exit -F arch=b64 -S delete_module -k module-change"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*delete_module\\s*-k\\s*module-change"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource130ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource88ref { ResourceID = "[nxFileLine][V-204563][medium][SRG-OS-000471-GPOS-00216]::[RHEL]Baseline"; ContainsLine = "-w /usr/bin/kmod -p x -F auid!=unset -k module-change"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "#\\s*-w\\s*/usr/bin/kmod\\s*-p\\s*x\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*module-change"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource131ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource89ref { ResourceID = "[nxFileLine][V-204564][medium][SRG-OS-000004-GPOS-00004]::[RHEL]Baseline"; ContainsLine = "-w /etc/passwd -p wa -k identity"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "#\\s*-w\\s*/etc/passwd\\s*-p\\s*wa\\s*-k\\s*identity"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource132ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource90ref { ResourceID = "[nxFileLine][V-204565][medium][SRG-OS-000004-GPOS-00004]::[RHEL]Baseline"; ContainsLine = "-w /etc/group -p wa -k identity"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "#\\s*-w\\s*/etc/group\\s*-p\\s*wa\\s*-k\\s*identity"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource133ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource91ref { ResourceID = "[nxFileLine][V-204566][medium][SRG-OS-000004-GPOS-00004]::[RHEL]Baseline"; ContainsLine = "-w /etc/gshadow -p wa -k identity"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "#\\s*-w\\s*/etc/gshadow\\s*-p\\s*wa\\s*-k\\s*identity"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource134ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource92ref { ResourceID = "[nxFileLine][V-204567][medium][SRG-OS-000004-GPOS-00004]::[RHEL]Baseline"; ContainsLine = "-w /etc/shadow -p wa -k identity"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "#\\s*-w\\s*/etc/shadow\\s*-p\\s*wa\\s*-k\\s*identity"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource135ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource93ref { ResourceID = "[nxFileLine][V-204568][medium][SRG-OS-000004-GPOS-00004]::[RHEL]Baseline"; ContainsLine = "-w /etc/security/opasswd -p wa -k identity"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "#\\s*-w\\s*/etc/security/opasswd\\s*-p\\s*wa\\s*-k\\s*identity"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource136ref -{ -ResourceID = "[nxFileLine][V-204569.a][medium][SRG-OS-000466-GPOS-00210]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S rename -F auid>=1000 -F auid!=unset -k delete"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*rename\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*delete"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource137ref -{ -ResourceID = "[nxFileLine][V-204569.b][medium][SRG-OS-000466-GPOS-00210]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S rename -F auid>=1000 -F auid!=unset -k delete"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*rename\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*delete"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource138ref -{ -ResourceID = "[nxFileLine][V-204570.a][medium][SRG-OS-000466-GPOS-00210]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S renameat -F auid>=1000 -F auid!=unset -k delete"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*renameat\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*delete"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource139ref -{ -ResourceID = "[nxFileLine][V-204570.b][medium][SRG-OS-000466-GPOS-00210]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S renameat -F auid>=1000 -F auid!=unset -k delete"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*renameat\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*delete"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource140ref -{ -ResourceID = "[nxFileLine][V-204571.a][medium][SRG-OS-000466-GPOS-00210]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S rmdir -F auid>=1000 -F auid!=unset -k delete"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*rmdir\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*delete"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource141ref -{ -ResourceID = "[nxFileLine][V-204571.b][medium][SRG-OS-000466-GPOS-00210]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S rmdir -F auid>=1000 -F auid!=unset -k delete"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*rmdir\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*delete"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource142ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource94ref { ResourceID = "[nxFileLine][V-204572.a][medium][SRG-OS-000466-GPOS-00210]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S unlink -F auid>=1000 -F auid!=unset -k delete"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + ContainsLine = "-a always,exit -F arch=b32 -S unlink,unlinkat,rename,renameat,rmdir -F auid>=1000 -F auid!=unset -k delete"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*unlink\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*delete"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*unlink,unlinkat,rename,renameat,rmdir\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*delete"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource143ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource95ref { ResourceID = "[nxFileLine][V-204572.b][medium][SRG-OS-000466-GPOS-00210]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S unlink -F auid>=1000 -F auid!=unset -k delete"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + ContainsLine = "-a always,exit -F arch=b64 -S unlink,unlinkat,rename,renameat,rmdir -F auid>=1000 -F auid!=unset -k delete"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*unlink\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*delete"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*unlink,unlinkat,rename,renameat,rmdir\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*delete"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource144ref -{ -ResourceID = "[nxFileLine][V-204573.a][medium][SRG-OS-000466-GPOS-00210]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S unlinkat -F auid>=1000 -F auid!=unset -k delete"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*unlinkat\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*delete"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource145ref -{ -ResourceID = "[nxFileLine][V-204573.b][medium][SRG-OS-000466-GPOS-00210]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S unlinkat -F auid>=1000 -F auid!=unset -k delete"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*unlinkat\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*delete"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource146ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource96ref { ResourceID = "[nxFileLine][V-204578][medium][SRG-OS-000033-GPOS-00014]::[RHEL]Baseline"; ContainsLine = "Ciphers aes256-ctr,aes192-ctr,aes128-ctr"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/ssh/sshd_config"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "^#\\s*Ciphers.*|^\\s*Ciphers\\s*aes128-ctr.*|^\\s*Ciphers\\s*aes192-ctr.*"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource147ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource97ref { ResourceID = "[nxFileLine][V-204579.b][medium][SRG-OS-000163-GPOS-00072]::[RHEL]Baseline"; ContainsLine = "declare -xr TMOUT=900"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/profile.d/tmout.sh"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "^\\s*TMOUT\\s*=\\s*[0-8]?[0-9]?[0-9]?$|^#\\s*TMOUT.*"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource148ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource98ref { ResourceID = "[nxFileLine][V-204580][medium][SRG-OS-000023-GPOS-00006]::[RHEL]Baseline"; ContainsLine = "banner /etc/issue"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/ssh/sshd_config"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "#\\s*banner\\s*/etc/issue"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource149ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource99ref { ResourceID = "[nxFileLine][V-204587][medium][SRG-OS-000163-GPOS-00072]::[RHEL]Baseline"; ContainsLine = "ClientAliveInterval 600"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/ssh/sshd_config"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "^\\s*ClientAliveInterval\\s*[0-5]?[0-9]?[0-9]?\\s*$|^#\\s*ClientAliveInterval.*|^\\s*ClientAliveInterval\\s*$"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource150ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource100ref { ResourceID = "[nxFileLine][V-204588][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; ContainsLine = "RhostsRSAAuthentication no"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/ssh/sshd_config"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "^#\\s*RhostsRSAAuthentication.*$|^RhostsRSAAuthentication\\s*(?!no\\b)\\w*$"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource151ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource101ref { ResourceID = "[nxFileLine][V-204589][medium][SRG-OS-000163-GPOS-00072]::[RHEL]Baseline"; ContainsLine = "ClientAliveCountMax 0"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/ssh/sshd_config"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "^#\\s*ClientAliveCountMax.*$|^ClientAliveCountMax\\s*(?!0\\b)\\w*$"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource152ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource102ref { ResourceID = "[nxFileLine][V-204590][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; ContainsLine = "IgnoreRhosts yes"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/ssh/sshd_config"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "^#\\s*IgnoreRhosts.*$|^IgnoreRhosts\\s*(?!yes\\b)\\w*$"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource153ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource103ref { ResourceID = "[nxFileLine][V-204591][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; ContainsLine = "PrintLastLog yes"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/ssh/sshd_config"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "^#\\s*PrintLastLog.*$|^PrintLastLog\\s*(?!yes\\b)\\w*$"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource154ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource104ref { ResourceID = "[nxFileLine][V-204592][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; ContainsLine = "PermitRootLogin no"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/ssh/sshd_config"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "^#\\s*PermitRootLogin.*$|^PermitRootLogin\\s*(?!no\\b)\\w*$"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource155ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource105ref { ResourceID = "[nxFileLine][V-204593][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; ContainsLine = "IgnoreUserKnownHosts yes"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/ssh/sshd_config"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "^#\\s*IgnoreUserKnownHosts.*$|^IgnoreUserKnownHosts\\s*(?!yes\\b)\\w*$"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource156ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource106ref { ResourceID = "[nxFileLine][V-204594][high][SRG-OS-000074-GPOS-00042]::[RHEL]Baseline"; ContainsLine = "Protocol 2"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/ssh/sshd_config"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "^#\\s*Protocol.*$|^Protocol\\s*(?!2\\b)\\w*$"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource157ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource107ref { ResourceID = "[nxFileLine][V-204595][medium][SRG-OS-000250-GPOS-00093]::[RHEL]Baseline"; ContainsLine = "MACs hmac-sha2-512,hmac-sha2-256"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/ssh/sshd_config"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "#\\s*MACs.*|\\s*MACs\\s*hmac-(?!sha2-512).*"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource158ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource108ref { ResourceID = "[nxFileLine][V-204598][medium][SRG-OS-000364-GPOS-00151]::[RHEL]Baseline"; ContainsLine = "GSSAPIAuthentication no"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/ssh/sshd_config"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "^#\\s*GSSAPIAuthentication.*$|^GSSAPIAuthentication\\s*(?!no\\b)\\w*$"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource159ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource109ref { ResourceID = "[nxFileLine][V-204599][medium][SRG-OS-000364-GPOS-00151]::[RHEL]Baseline"; ContainsLine = "KerberosAuthentication no"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/ssh/sshd_config"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "^#\\s*KerberosAuthentication.*$|^KerberosAuthentication\\s*(?!no\\b)\\w*$"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource160ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource110ref { ResourceID = "[nxFileLine][V-204600][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; ContainsLine = "StrictModes yes"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/ssh/sshd_config"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "^#\\s*StrictModes.*$|^StrictModes\\s*(?!yes\\b)\\w*$"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource161ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource111ref { ResourceID = "[nxFileLine][V-204601][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; ContainsLine = "UsePrivilegeSeparation sandbox"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/ssh/sshd_config"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "^#\\s*UsePrivilegeSeparation.*$|^UsePrivilegeSeparation\\s*(?!sandbox\\b)\\w*$"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource162ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource112ref { ResourceID = "[nxFileLine][V-204602][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; ContainsLine = "Compression delayed"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/ssh/sshd_config"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "^#\\s*Compression.*$|^Compression\\s*(?!delayed\\b)\\w*$"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource163ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource113ref { ResourceID = "[nxFileLine][V-204622][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; ContainsLine = "X11Forwarding no"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/ssh/sshd_config"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "^#\\s*X11Forwarding.*$|^X11Forwarding\\s*(?!no\\b)\\w*$"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource164ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource114ref { ResourceID = "[nxFileLine][V-233307][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; ContainsLine = "X11UseLocalhost yes"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/ssh/sshd_config"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "#\\s*X11UseLocalhost\\s*yes"; ConfigurationName = "LinuxBaseLine"; }; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource115ref +{ +ResourceID = "[nxFileLine][V-250314][medium][SRG-OS-000324-GPOS-00125]::[RHEL]Baseline"; + ContainsLine = "%wheel ALL=(ALL) TYPE=sysadm_t ROLE=sysadm_r ALL"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/sudoers"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*%wheel\\s*ALL\\s*=\\s*(ALL)\\s*TYPE\\s*=\\s*sysadm_t\\s*ROLE\\s*=\\s*sysadm_r\\s*ALL"; + ConfigurationName = "LinuxBaseLine"; +}; instance of MSFT_nxServiceResource as $MSFT_nxServiceResource1ref { ResourceID = "[nxService][V-204451][medium][SRG-OS-000114-GPOS-00059]::[RHEL]Baseline"; Controller = "systemd"; Enabled = False; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxService.ps1::13::9::nxService"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxService.ps1::13::9::nxService"; Name = "autofs"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -2173,7 +1624,7 @@ instance of MSFT_nxServiceResource as $MSFT_nxServiceResource2ref ResourceID = "[nxService][V-204492][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; Controller = "systemd"; Enabled = False; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxService.ps1::13::9::nxService"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxService.ps1::13::9::nxService"; Name = "kdump"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -2185,7 +1636,7 @@ ResourceID = "[nxService][V-204503][medium][SRG-OS-000038-GPOS-00016]::[RHEL]Bas Controller = "systemd"; State = "Running"; Enabled = True; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxService.ps1::22::9::nxService"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxService.ps1::22::9::nxService"; Name = "auditd"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -2197,7 +1648,7 @@ ResourceID = "[nxService][V-204586][medium][SRG-OS-000423-GPOS-00187]::[RHEL]Bas Controller = "systemd"; State = "Running"; Enabled = True; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxService.ps1::22::9::nxService"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxService.ps1::22::9::nxService"; Name = "sshd"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -2209,7 +1660,7 @@ ResourceID = "[nxService][V-204604.b][medium][SRG-OS-000480-GPOS-00227]::[RHEL]B Controller = "systemd"; State = "Running"; Enabled = True; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxService.ps1::22::9::nxService"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxService.ps1::22::9::nxService"; Name = "firewalld"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -2220,7 +1671,7 @@ instance of MSFT_nxScriptResource as $MSFT_nxScriptResource1ref ResourceID = "[nxScript][V-204399.b][medium][[Skip] SRG-OS-000029-GPOS-00010]::[RHEL]Baseline"; GetScript = "#!/bin/bash\necho [V-204399.b][medium][[Skip] SRG-OS-000029-GPOS-00010]"; TestScript = "#!/bin/bash\nexit 0"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxScript.skip.ps1::10::5::nxScript"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxScript.skip.ps1::10::5::nxScript"; SetScript = "#!/bin/bash"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -2231,7 +1682,7 @@ instance of MSFT_nxScriptResource as $MSFT_nxScriptResource2ref ResourceID = "[nxScript][V-204400][medium][[Skip] SRG-OS-000029-GPOS-00010]::[RHEL]Baseline"; GetScript = "#!/bin/bash\necho [V-204400][medium][[Skip] SRG-OS-000029-GPOS-00010]"; TestScript = "#!/bin/bash\nexit 0"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxScript.skip.ps1::10::5::nxScript"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxScript.skip.ps1::10::5::nxScript"; SetScript = "#!/bin/bash"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -2242,7 +1693,7 @@ instance of MSFT_nxScriptResource as $MSFT_nxScriptResource3ref ResourceID = "[nxScript][V-204403][medium][[Skip] SRG-OS-000029-GPOS-00010]::[RHEL]Baseline"; GetScript = "#!/bin/bash\necho [V-204403][medium][[Skip] SRG-OS-000029-GPOS-00010]"; TestScript = "#!/bin/bash\nexit 0"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxScript.skip.ps1::10::5::nxScript"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxScript.skip.ps1::10::5::nxScript"; SetScript = "#!/bin/bash"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -2253,7 +1704,7 @@ instance of MSFT_nxScriptResource as $MSFT_nxScriptResource4ref ResourceID = "[nxScript][V-204509][medium][[Skip] SRG-OS-000342-GPOS-00133]::[RHEL]Baseline"; GetScript = "#!/bin/bash\necho [V-204509][medium][[Skip] SRG-OS-000342-GPOS-00133]"; TestScript = "#!/bin/bash\nexit 0"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxScript.skip.ps1::10::5::nxScript"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxScript.skip.ps1::10::5::nxScript"; SetScript = "#!/bin/bash"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -2264,7 +1715,7 @@ instance of MSFT_nxScriptResource as $MSFT_nxScriptResource5ref ResourceID = "[nxScript][V-204513][medium][[Skip] SRG-OS-000343-GPOS-00134]::[RHEL]Baseline"; GetScript = "#!/bin/bash\necho [V-204513][medium][[Skip] SRG-OS-000343-GPOS-00134]"; TestScript = "#!/bin/bash\nexit 0"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxScript.skip.ps1::10::5::nxScript"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxScript.skip.ps1::10::5::nxScript"; SetScript = "#!/bin/bash"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -2275,7 +1726,7 @@ instance of MSFT_nxScriptResource as $MSFT_nxScriptResource6ref ResourceID = "[nxScript][V-204623][medium][[Skip] SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; GetScript = "#!/bin/bash\necho [V-204623][medium][[Skip] SRG-OS-000480-GPOS-00227]"; TestScript = "#!/bin/bash\nexit 0"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxScript.skip.ps1::10::5::nxScript"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxScript.skip.ps1::10::5::nxScript"; SetScript = "#!/bin/bash"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -2286,7 +1737,7 @@ instance of MSFT_nxScriptResource as $MSFT_nxScriptResource7ref ResourceID = "[nxScript][V-244557][medium][[Skip] SRG-OS-000080-GPOS-00048]::[RHEL]Baseline"; GetScript = "#!/bin/bash\necho [V-244557][medium][[Skip] SRG-OS-000080-GPOS-00048]"; TestScript = "#!/bin/bash\nexit 0"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxScript.skip.ps1::10::5::nxScript"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxScript.skip.ps1::10::5::nxScript"; SetScript = "#!/bin/bash"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -2297,7 +1748,7 @@ instance of MSFT_nxScriptResource as $MSFT_nxScriptResource8ref ResourceID = "[nxScript][V-244558][medium][[Skip] SRG-OS-000080-GPOS-00048]::[RHEL]Baseline"; GetScript = "#!/bin/bash\necho [V-244558][medium][[Skip] SRG-OS-000080-GPOS-00048]"; TestScript = "#!/bin/bash\nexit 0"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxScript.skip.ps1::10::5::nxScript"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxScript.skip.ps1::10::5::nxScript"; SetScript = "#!/bin/bash"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -2308,7 +1759,7 @@ instance of MSFT_nxScriptResource as $MSFT_nxScriptResource9ref ResourceID = "[nxScript][V-204399.a][medium][[Skip] SRG-OS-000029-GPOS-00010]::[RHEL]Baseline"; GetScript = "#!/bin/bash\necho [V-204399.a][medium][[Skip] SRG-OS-000029-GPOS-00010]"; TestScript = "#!/bin/bash\nexit 0"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxScript.skip.ps1::10::5::nxScript"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxScript.skip.ps1::10::5::nxScript"; SetScript = "#!/bin/bash"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -2325,7 +1776,7 @@ instance of OMI_ConfigurationDocument Author="Microsoft"; - GenerationDate="01/31/2022 17:13:26"; + GenerationDate="05/04/2022 09:09:33"; GenerationHost="Microsoft"; diff --git a/stig/linux/config/CentOS75.mof b/stig/linux/config/CentOS75.mof index cb26ac0..11a72c8 100644 --- a/stig/linux/config/CentOS75.mof +++ b/stig/linux/config/CentOS75.mof @@ -1,7 +1,7 @@ /* @TargetNode='CentOS75' @GeneratedBy=Microsoft -@GenerationDate=01/31/2022 17:13:26 +@GenerationDate=05/04/2022 09:09:33 @GenerationHost=Microsoft */ @@ -9,7 +9,7 @@ instance of MSFT_nxPackageResource as $MSFT_nxPackageResource1ref { ResourceID = "[nxPackage][V-204442][high][SRG-OS-000095-GPOS-00049]::[RHEL]Baseline"; Ensure = "Absent"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxPackage.ps1::8::5::nxPackage"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxPackage.ps1::8::5::nxPackage"; Name = "rsh-server"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -19,7 +19,7 @@ instance of MSFT_nxPackageResource as $MSFT_nxPackageResource2ref { ResourceID = "[nxPackage][V-204443][high][SRG-OS-000095-GPOS-00049]::[RHEL]Baseline"; Ensure = "Absent"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxPackage.ps1::8::5::nxPackage"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxPackage.ps1::8::5::nxPackage"; Name = "ypserv"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -29,7 +29,7 @@ instance of MSFT_nxPackageResource as $MSFT_nxPackageResource3ref { ResourceID = "[nxPackage][V-204497][high][SRG-OS-000033-GPOS-00014]::[RHEL]Baseline"; Ensure = "Present"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxPackage.ps1::8::5::nxPackage"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxPackage.ps1::8::5::nxPackage"; Name = "dracut-fips"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -39,7 +39,7 @@ instance of MSFT_nxPackageResource as $MSFT_nxPackageResource4ref { ResourceID = "[nxPackage][V-204498][low][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; Ensure = "Present"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxPackage.ps1::8::5::nxPackage"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxPackage.ps1::8::5::nxPackage"; Name = "aide"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -49,7 +49,7 @@ instance of MSFT_nxPackageResource as $MSFT_nxPackageResource5ref { ResourceID = "[nxPackage][V-204502][high][SRG-OS-000095-GPOS-00049]::[RHEL]Baseline"; Ensure = "Absent"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxPackage.ps1::8::5::nxPackage"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxPackage.ps1::8::5::nxPackage"; Name = "telnet-server"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -59,7 +59,7 @@ instance of MSFT_nxPackageResource as $MSFT_nxPackageResource6ref { ResourceID = "[nxPackage][V-204585][medium][SRG-OS-000423-GPOS-00187]::[RHEL]Baseline"; Ensure = "Present"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxPackage.ps1::8::5::nxPackage"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxPackage.ps1::8::5::nxPackage"; Name = "openssh-server"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -69,7 +69,7 @@ instance of MSFT_nxPackageResource as $MSFT_nxPackageResource7ref { ResourceID = "[nxPackage][V-204604.a][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; Ensure = "Present"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxPackage.ps1::8::5::nxPackage"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxPackage.ps1::8::5::nxPackage"; Name = "firewalld"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -79,7 +79,7 @@ instance of MSFT_nxPackageResource as $MSFT_nxPackageResource8ref { ResourceID = "[nxPackage][V-204620][high][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; Ensure = "Absent"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxPackage.ps1::8::5::nxPackage"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxPackage.ps1::8::5::nxPackage"; Name = "vsftpd"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -89,7 +89,7 @@ instance of MSFT_nxPackageResource as $MSFT_nxPackageResource9ref { ResourceID = "[nxPackage][V-204621][high][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; Ensure = "Absent"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxPackage.ps1::8::5::nxPackage"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxPackage.ps1::8::5::nxPackage"; Name = "tftp-server"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -99,7 +99,7 @@ instance of MSFT_nxPackageResource as $MSFT_nxPackageResource10ref { ResourceID = "[nxPackage][V-204631][medium][SRG-OS-000375-GPOS-00160]::[RHEL]Baseline"; Ensure = "Present"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxPackage.ps1::8::5::nxPackage"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxPackage.ps1::8::5::nxPackage"; Name = "pam_pkcs11"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -111,7 +111,7 @@ ResourceID = "[nxFile][V-204395][medium][SRG-OS-000023-GPOS-00006]::[RHEL]Baseli Contents = "You are accessing a U.S. Government (USG) Information System (IS) that is provided for USG-authorized use only.\n\nBy using this IS (which includes any device attached to this IS), you consent to the following conditions:\n\n-The USG routinely intercepts and monitors communications on this IS for purposes including, but not limited to, penetration testing, COMSEC monitoring, network operations and defense, personnel misconduct (PM), law enforcement (LE), and counterintelligence (CI) investigations.\n\n-At any time, the USG may inspect and seize data stored on this IS.\n\n-Communications using, or data stored on, this IS are not private, are subject to routine monitoring, interception, and search, and may be disclosed or used for any USG-authorized purpose.\n\n-This IS includes security measures (e.g., authentication and access controls) to protect USG interests--not for your personal benefit or privacy.\n\n-Notwithstanding the above, using this IS does not constitute consent to PM, LE or CI investigative searching or monitoring of the content of privileged communications, or work product, related to personal representation or services by attorneys, psychotherapists, or clergy, and their assistants. Such communications and work product are private and confidential. See User Agreement for details."; DestinationPath = "/etc/issue"; ModuleName = "nx"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; ModuleVersion = "1.0"; ConfigurationName = "LinuxBaseLine"; }; @@ -121,7 +121,7 @@ ResourceID = "[nxFile][V-204449.a][medium][SRG-OS-000114-GPOS-00059]::[RHEL]Base Contents = ""; DestinationPath = "/etc/modprobe.d/usb-storage.conf"; ModuleName = "nx"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; ModuleVersion = "1.0"; ConfigurationName = "LinuxBaseLine"; }; @@ -131,7 +131,7 @@ ResourceID = "[nxFile][V-204449.b][medium][SRG-OS-000114-GPOS-00059]::[RHEL]Base Contents = ""; DestinationPath = "/etc/modprobe.d/blacklist.conf"; ModuleName = "nx"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; ModuleVersion = "1.0"; ConfigurationName = "LinuxBaseLine"; }; @@ -141,7 +141,7 @@ ResourceID = "[nxFile][V-204450.a][medium][SRG-OS-000378-GPOS-00163]::[RHEL]Base Contents = ""; DestinationPath = "/etc/modprobe.d/dccp.conf"; ModuleName = "nx"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; ModuleVersion = "1.0"; ConfigurationName = "LinuxBaseLine"; }; @@ -151,7 +151,7 @@ ResourceID = "[nxFile][V-204576][low][SRG-OS-000027-GPOS-00008]::[RHEL]Baseline" Contents = "* hard maxlogins 10"; DestinationPath = "/etc/security/limits.d/204576-powerstig.conf"; ModuleName = "nx"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; ModuleVersion = "1.0"; ConfigurationName = "LinuxBaseLine"; }; @@ -161,7 +161,7 @@ ResourceID = "[nxFile][V-204579.a][medium][SRG-OS-000163-GPOS-00072]::[RHEL]Base Contents = ""; DestinationPath = "/etc/profile.d/tmout.sh"; ModuleName = "nx"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; ModuleVersion = "1.0"; ConfigurationName = "LinuxBaseLine"; }; @@ -171,7 +171,7 @@ ResourceID = "[nxFile][V-204584][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseli Contents = "kernel.randomize_va_space = 2"; DestinationPath = "/etc/sysctl.d/204584-powerstig.conf"; ModuleName = "nx"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; ModuleVersion = "1.0"; ConfigurationName = "LinuxBaseLine"; }; @@ -181,7 +181,7 @@ ResourceID = "[nxFile][V-204609][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseli Contents = "net.ipv4.conf.all.accept_source_route = 0"; DestinationPath = "/etc/sysctl.d/204609-powerstig.conf"; ModuleName = "nx"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; ModuleVersion = "1.0"; ConfigurationName = "LinuxBaseLine"; }; @@ -191,7 +191,7 @@ ResourceID = "[nxFile][V-204610][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseli Contents = "net.ipv4.conf.all.rp_filter = 1"; DestinationPath = "/etc/sysctl.d/204610-powerstig.conf"; ModuleName = "nx"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; ModuleVersion = "1.0"; ConfigurationName = "LinuxBaseLine"; }; @@ -201,7 +201,7 @@ ResourceID = "[nxFile][V-204611][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseli Contents = "net.ipv4.conf.default.rp_filter = 1"; DestinationPath = "/etc/sysctl.d/204611-powerstig.conf"; ModuleName = "nx"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; ModuleVersion = "1.0"; ConfigurationName = "LinuxBaseLine"; }; @@ -211,7 +211,7 @@ ResourceID = "[nxFile][V-204612][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseli Contents = "net.ipv4.conf.default.accept_source_route = 0"; DestinationPath = "/etc/sysctl.d/204612-powerstig.conf"; ModuleName = "nx"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; ModuleVersion = "1.0"; ConfigurationName = "LinuxBaseLine"; }; @@ -221,7 +221,7 @@ ResourceID = "[nxFile][V-204613][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseli Contents = "net.ipv4.icmp_echo_ignore_broadcasts = 1"; DestinationPath = "/etc/sysctl.d/204613-powerstig.conf"; ModuleName = "nx"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; ModuleVersion = "1.0"; ConfigurationName = "LinuxBaseLine"; }; @@ -231,7 +231,7 @@ ResourceID = "[nxFile][V-204614][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseli Contents = "net.ipv4.conf.default.accept_redirects = 0"; DestinationPath = "/etc/sysctl.d/204614-powerstig.conf"; ModuleName = "nx"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; ModuleVersion = "1.0"; ConfigurationName = "LinuxBaseLine"; }; @@ -241,7 +241,7 @@ ResourceID = "[nxFile][V-204615][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseli Contents = "net.ipv4.conf.all.accept_redirects = 0"; DestinationPath = "/etc/sysctl.d/204615-powerstig.conf"; ModuleName = "nx"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; ModuleVersion = "1.0"; ConfigurationName = "LinuxBaseLine"; }; @@ -251,7 +251,7 @@ ResourceID = "[nxFile][V-204616][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseli Contents = "net.ipv4.conf.default.send_redirects = 0"; DestinationPath = "/etc/sysctl.d/204616-powerstig.conf"; ModuleName = "nx"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; ModuleVersion = "1.0"; ConfigurationName = "LinuxBaseLine"; }; @@ -261,7 +261,7 @@ ResourceID = "[nxFile][V-204617][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseli Contents = "net.ipv4.conf.all.send_redirects = 0"; DestinationPath = "/etc/sysctl.d/204617-powerstig.conf"; ModuleName = "nx"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; ModuleVersion = "1.0"; ConfigurationName = "LinuxBaseLine"; }; @@ -271,7 +271,7 @@ ResourceID = "[nxFile][V-204625][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseli Contents = "net.ipv4.ip_forward = 0"; DestinationPath = "/etc/sysctl.d/204625-powerstig.conf"; ModuleName = "nx"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; ModuleVersion = "1.0"; ConfigurationName = "LinuxBaseLine"; }; @@ -281,7 +281,7 @@ ResourceID = "[nxFile][V-204630][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseli Contents = "net.ipv6.conf.all.accept_source_route = 0"; DestinationPath = "/etc/sysctl.d/204630-powerstig.conf"; ModuleName = "nx"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; ModuleVersion = "1.0"; ConfigurationName = "LinuxBaseLine"; }; @@ -291,7 +291,7 @@ ResourceID = "[nxFile][V-237634.a][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Base Contents = "Defaults !targetpw"; DestinationPath = "/etc/sudoers.d/237634a-powerstig.conf"; ModuleName = "nx"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; ModuleVersion = "1.0"; ConfigurationName = "LinuxBaseLine"; }; @@ -301,7 +301,7 @@ ResourceID = "[nxFile][V-237634.b][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Base Contents = "Defaults !rootpw"; DestinationPath = "/etc/sudoers.d/237634b-powerstig.conf"; ModuleName = "nx"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; ModuleVersion = "1.0"; ConfigurationName = "LinuxBaseLine"; }; @@ -311,7 +311,7 @@ ResourceID = "[nxFile][V-237634.c][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Base Contents = "Defaults !runaspw"; DestinationPath = "/etc/sudoers.d/237634c-powerstig.conf"; ModuleName = "nx"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; ModuleVersion = "1.0"; ConfigurationName = "LinuxBaseLine"; }; @@ -321,17 +321,7 @@ ResourceID = "[nxFile][V-237635][medium][SRG-OS-000373-GPOS-00156]::[RHEL]Baseli Contents = "Defaults timestamp_timeout=0"; DestinationPath = "/etc/sudoers.d/237635-powerstig.conf"; ModuleName = "nx"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; - ModuleVersion = "1.0"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileResource as $MSFT_nxFileResource23ref -{ -ResourceID = "[nxFile][V-250314][medium][SRG-OS-000324-GPOS-00125]::[RHEL]Baseline"; - Contents = "%wheel ALL=(ALL) TYPE=sysadm_t ROLE=sysadm_r ALL"; - DestinationPath = "/etc/sudoers.d/250314-powerstig.conf"; - ModuleName = "nx"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; ModuleVersion = "1.0"; ConfigurationName = "LinuxBaseLine"; }; @@ -339,7 +329,7 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource1ref { ResourceID = "[nxFileLine][V-204405][medium][SRG-OS-000069-GPOS-00037]::[RHEL]Baseline"; ContainsLine = "password substack system-auth"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/pam.d/passwd"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -350,7 +340,7 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource2ref { ResourceID = "[nxFileLine][V-204407][medium][SRG-OS-000069-GPOS-00037]::[RHEL]Baseline"; ContainsLine = "ucredit = -1"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/security/pwquality.conf"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -361,7 +351,7 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource3ref { ResourceID = "[nxFileLine][V-204408][medium][SRG-OS-000070-GPOS-00038]::[RHEL]Baseline"; ContainsLine = "lcredit = -1"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/security/pwquality.conf"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -372,7 +362,7 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource4ref { ResourceID = "[nxFileLine][V-204409][medium][SRG-OS-000071-GPOS-00039]::[RHEL]Baseline"; ContainsLine = "dcredit = -1"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/security/pwquality.conf"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -383,7 +373,7 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource5ref { ResourceID = "[nxFileLine][V-204410][medium][SRG-OS-000266-GPOS-00101]::[RHEL]Baseline"; ContainsLine = "ocredit=-1"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/security/pwquality.conf"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -394,7 +384,7 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource6ref { ResourceID = "[nxFileLine][V-204411][medium][SRG-OS-000072-GPOS-00040]::[RHEL]Baseline"; ContainsLine = "difok = 8"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/security/pwquality.conf"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -405,7 +395,7 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource7ref { ResourceID = "[nxFileLine][V-204412][medium][SRG-OS-000072-GPOS-00040]::[RHEL]Baseline"; ContainsLine = "minclass = 4"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/security/pwquality.conf"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -416,7 +406,7 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource8ref { ResourceID = "[nxFileLine][V-204413][medium][SRG-OS-000072-GPOS-00040]::[RHEL]Baseline"; ContainsLine = "maxrepeat = 3"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/security/pwquality.conf"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -427,18 +417,18 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource9ref { ResourceID = "[nxFileLine][V-204414][medium][SRG-OS-000072-GPOS-00040]::[RHEL]Baseline"; ContainsLine = "maxclassrepeat = 4"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/security/pwquality.conf"; ModuleName = "nx"; ModuleVersion = "1.0"; - DoesNotContainPattern = "^#\\s*maxclassrepeat\\s*=.*|^\\s*maxclassrepeat\\s*=\\s*(?:\\d{2,}|[3-9])"; + DoesNotContainPattern = "^#\\s*maxclassrepeat\\s*=.*|^\\s*maxclassrepeat\\s*=\\s*(?:\\d{2,}|[1-3|5-9])"; ConfigurationName = "LinuxBaseLine"; }; instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource10ref { ResourceID = "[nxFileLine][V-204416][medium][SRG-OS-000073-GPOS-00041]::[RHEL]Baseline"; ContainsLine = "ENCRYPT_METHOD SHA512"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/login.defs"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -449,7 +439,7 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource11ref { ResourceID = "[nxFileLine][V-204418][medium][SRG-OS-000075-GPOS-00043]::[RHEL]Baseline"; ContainsLine = "PASS_MIN_DAYS 1"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/login.defs"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -460,7 +450,7 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource12ref { ResourceID = "[nxFileLine][V-204420][medium][SRG-OS-000076-GPOS-00044]::[RHEL]Baseline"; ContainsLine = "PASS_MAX_DAYS 60"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/login.defs"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -471,7 +461,7 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource13ref { ResourceID = "[nxFileLine][V-204423][medium][SRG-OS-000078-GPOS-00046]::[RHEL]Baseline"; ContainsLine = "minlen = 15"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/security/pwquality.conf"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -482,7 +472,7 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource14ref { ResourceID = "[nxFileLine][V-204425][high][SRG-OS-000106-GPOS-00053]::[RHEL]Baseline"; ContainsLine = "PermitEmptyPasswords no"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/ssh/sshd_config"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -492,19 +482,19 @@ ResourceID = "[nxFileLine][V-204425][high][SRG-OS-000106-GPOS-00053]::[RHEL]Base instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource15ref { ResourceID = "[nxFileLine][V-204426][medium][SRG-OS-000118-GPOS-00060]::[RHEL]Baseline"; - ContainsLine = "INACTIVE=0"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + ContainsLine = "INACTIVE=35"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/default/useradd"; ModuleName = "nx"; ModuleVersion = "1.0"; - DoesNotContainPattern = "^#\\s*INACTIVE.*$|^INACTIVE\\s*=\\s*(?!0\\b)[-]*\\w*$"; + DoesNotContainPattern = "^#\\s*INACTIVE\\s*=.*|^\\s*INACTIVE\\s*=\\s*(3[5-9]|[4-9]\\d+|\\d{3,})"; ConfigurationName = "LinuxBaseLine"; }; instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource16ref { ResourceID = "[nxFileLine][V-204431][medium][SRG-OS-000480-GPOS-00226]::[RHEL]Baseline"; ContainsLine = "FAIL_DELAY 4"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/login.defs"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -515,7 +505,7 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource17ref { ResourceID = "[nxFileLine][V-204434][medium][SRG-OS-000480-GPOS-00229]::[RHEL]Baseline"; ContainsLine = "PermitUserEnvironment no"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/ssh/sshd_config"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -526,7 +516,7 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource18ref { ResourceID = "[nxFileLine][V-204435][medium][SRG-OS-000480-GPOS-00229]::[RHEL]Baseline"; ContainsLine = "HostbasedAuthentication no"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/ssh/sshd_config"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -537,7 +527,7 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource19ref { ResourceID = "[nxFileLine][V-204447][high][SRG-OS-000366-GPOS-00153]::[RHEL]Baseline"; ContainsLine = "gpgcheck=1"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/yum.conf"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -548,7 +538,7 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource20ref { ResourceID = "[nxFileLine][V-204448][high][SRG-OS-000366-GPOS-00153]::[RHEL]Baseline"; ContainsLine = "localpkg_gpgcheck=1"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/yum.conf"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -559,7 +549,7 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource21ref { ResourceID = "[nxFileLine][V-204449.c][medium][SRG-OS-000114-GPOS-00059]::[RHEL]Baseline"; ContainsLine = "install usb-storage /bin/true"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/modprobe.d/usb-storage.conf"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -570,7 +560,7 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource22ref { ResourceID = "[nxFileLine][V-204449.d][medium][SRG-OS-000114-GPOS-00059]::[RHEL]Baseline"; ContainsLine = "blacklist usb-storage"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/modprobe.d/blacklist.conf"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -581,7 +571,7 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource23ref { ResourceID = "[nxFileLine][V-204450.b][medium][SRG-OS-000378-GPOS-00163]::[RHEL]Baseline"; ContainsLine = "install dccp /bin/true"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/modprobe.d/dccp.conf"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -592,7 +582,7 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource24ref { ResourceID = "[nxFileLine][V-204450.c][medium][SRG-OS-000378-GPOS-00163]::[RHEL]Baseline"; ContainsLine = "blacklist dccp"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/modprobe.d/blacklist.conf"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -603,7 +593,7 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource25ref { ResourceID = "[nxFileLine][V-204452][low][SRG-OS-000437-GPOS-00194]::[RHEL]Baseline"; ContainsLine = "clean_requirements_on_remove=1"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/yum.conf"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -614,7 +604,7 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource26ref { ResourceID = "[nxFileLine][V-204453][medium][SRG-OS-000445-GPOS-00199]::[RHEL]Baseline"; ContainsLine = "SELINUX=enforcing"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/selinux/config"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -625,7 +615,7 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource27ref { ResourceID = "[nxFileLine][V-204454][medium][SRG-OS-000445-GPOS-00199]::[RHEL]Baseline"; ContainsLine = "SELINUXTYPE=targeted"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/selinux/config"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -636,7 +626,7 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource28ref { ResourceID = "[nxFileLine][V-204457][medium][SRG-OS-000480-GPOS-00228]::[RHEL]Baseline"; ContainsLine = "UMASK 077"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/login.defs"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -647,7 +637,7 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource29ref { ResourceID = "[nxFileLine][V-204466][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; ContainsLine = "CREATE_HOME yes"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/login.defs"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -658,16 +648,16 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource30ref { ResourceID = "[nxFileLine][V-204504][medium][SRG-OS-000046-GPOS-00022]::[RHEL]Baseline"; ContainsLine = "-f 2"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "^#\\s*-f\\s+2|^\\s*-f\\s*1"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileResource as $MSFT_nxFileResource24ref +instance of MSFT_nxFileResource as $MSFT_nxFileResource23ref { -SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::29::9::nxFile"; +SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::29::9::nxFile"; ModuleName = "nx"; ModuleVersion = "1.0"; ResourceID = "[nxFile][V-204506.a][medium][SRG-OS-000342-GPOS-00133]::[RHEL]Baseline"; @@ -678,7 +668,7 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource31ref { ResourceID = "[nxFileLine][V-204506.a][medium][SRG-OS-000342-GPOS-00133]::[RHEL]Baseline"; ContainsLine = "active = yes"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audisp/plugins.d/au-remote.conf"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -689,7 +679,7 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource32ref { ResourceID = "[nxFileLine][V-204506.b][medium][SRG-OS-000342-GPOS-00133]::[RHEL]Baseline"; ContainsLine = "direction = out"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audisp/plugins.d/au-remote.conf"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -700,7 +690,7 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource33ref { ResourceID = "[nxFileLine][V-204506.c][medium][SRG-OS-000342-GPOS-00133]::[RHEL]Baseline"; ContainsLine = "path = /sbin/audisp-remote"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audisp/plugins.d/au-remote.conf"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -711,7 +701,7 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource34ref { ResourceID = "[nxFileLine][V-204506.d][medium][SRG-OS-000342-GPOS-00133]::[RHEL]Baseline"; ContainsLine = "type = always"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audisp/plugins.d/au-remote.conf"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -722,7 +712,7 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource35ref { ResourceID = "[nxFileLine][V-204507][medium][SRG-OS-000342-GPOS-00133]::[RHEL]Baseline"; ContainsLine = "overflow_action = syslog"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audisp/audispd.conf"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -733,16 +723,16 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource36ref { ResourceID = "[nxFileLine][V-204508][medium][SRG-OS-000342-GPOS-00133]::[RHEL]Baseline"; ContainsLine = "name_format = hostname"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audisp/audispd.conf"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "^#\\s*name_format.*$|^name_format\\s*=\\s*(?!hostname$)\\w*$"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileResource as $MSFT_nxFileResource25ref +instance of MSFT_nxFileResource as $MSFT_nxFileResource24ref { -SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::19::9::nxFile"; +SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::19::9::nxFile"; ModuleName = "nx"; ModuleVersion = "1.0"; ResourceID = "[nxFile][V-204510][medium][SRG-OS-000342-GPOS-00133]::[RHEL]Baseline"; @@ -753,7 +743,7 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource37ref { ResourceID = "[nxFileLine][V-204510][medium][SRG-OS-000342-GPOS-00133]::[RHEL]Baseline"; ContainsLine = "enable_krb5 = yes"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audisp/audisp-remote.conf"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -764,7 +754,7 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource38ref { ResourceID = "[nxFileLine][V-204511][medium][SRG-OS-000342-GPOS-00133]::[RHEL]Baseline"; ContainsLine = "disk_full_action = single"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audisp/audisp-remote.conf"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -775,7 +765,7 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource39ref { ResourceID = "[nxFileLine][V-204512][medium][SRG-OS-000342-GPOS-00133]::[RHEL]Baseline"; ContainsLine = "network_failure_action = syslog"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audisp/audisp-remote.conf"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -786,7 +776,7 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource40ref { ResourceID = "[nxFileLine][V-204514][medium][SRG-OS-000343-GPOS-00134]::[RHEL]Baseline"; ContainsLine = "space_left_action = email"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/auditd.conf"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -797,7 +787,7 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource41ref { ResourceID = "[nxFileLine][V-204515][medium][SRG-OS-000343-GPOS-00134]::[RHEL]Baseline"; ContainsLine = "action_mail_acct = root"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/auditd.conf"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -808,7 +798,7 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource42ref { ResourceID = "[nxFileLine][V-204516.a][medium][SRG-OS-000327-GPOS-00127]::[RHEL]Baseline"; ContainsLine = "-a always,exit -F arch=b32 -S execve -C uid!=euid -F euid=0 -k setuid"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -819,7 +809,7 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource43ref { ResourceID = "[nxFileLine][V-204516.b][medium][SRG-OS-000327-GPOS-00127]::[RHEL]Baseline"; ContainsLine = "-a always,exit -F arch=b64 -S execve -C uid!=euid -F euid=0 -k setuid"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -830,7 +820,7 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource44ref { ResourceID = "[nxFileLine][V-204516.c][medium][SRG-OS-000327-GPOS-00127]::[RHEL]Baseline"; ContainsLine = "-a always,exit -F arch=b32 -S execve -C gid!=egid -F egid=0 -k setgid"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -841,7 +831,7 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource45ref { ResourceID = "[nxFileLine][V-204516.d][medium][SRG-OS-000327-GPOS-00127]::[RHEL]Baseline"; ContainsLine = "-a always,exit -F arch=b64 -S execve -C gid!=egid -F egid=0 -k setgid"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -851,1318 +841,779 @@ ResourceID = "[nxFileLine][V-204516.d][medium][SRG-OS-000327-GPOS-00127]::[RHEL] instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource46ref { ResourceID = "[nxFileLine][V-204517.a][medium][SRG-OS-000064-GPOS-00033]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S chown -F auid>=1000 -F auid!=unset -k perm_mod"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + ContainsLine = "-a always,exit -F arch=b32 -S chown,fchown,fchownat,lchown -F auid>=1000 -F auid!=unset -k perm_mod"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*chown\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*perm_mod"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*chown,fchown,fchownat,lchown\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*perm_mod"; ConfigurationName = "LinuxBaseLine"; }; instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource47ref { ResourceID = "[nxFileLine][V-204517.b][medium][SRG-OS-000064-GPOS-00033]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S chown -F auid>=1000 -F auid!=unset -k perm_mod"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + ContainsLine = "-a always,exit -F arch=b64 -S chown,fchown,fchownat,lchown -F auid>=1000 -F auid!=unset -k perm_mod"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*chown\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*perm_mod"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*chown,fchown,fchownat,lchown\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*perm_mod"; ConfigurationName = "LinuxBaseLine"; }; instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource48ref { -ResourceID = "[nxFileLine][V-204518.a][medium][SRG-OS-000064-GPOS-00033]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S fchown -F auid>=1000 -F auid!=unset -k perm_mod"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; +ResourceID = "[nxFileLine][V-204521.a][medium][SRG-OS-000458-GPOS-00203]::[RHEL]Baseline"; + ContainsLine = "-a always,exit -F arch=b32 -S chmod,fchmod,fchmodat -F auid>=1000 -F auid!=unset -k perm_mod"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*fchown\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*perm_mod"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*chmod,fchmod,fchmodat\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*perm_mod"; ConfigurationName = "LinuxBaseLine"; }; instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource49ref { -ResourceID = "[nxFileLine][V-204518.b][medium][SRG-OS-000064-GPOS-00033]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S fchown -F auid>=1000 -F auid!=unset -k perm_mod"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; +ResourceID = "[nxFileLine][V-204521.b][medium][SRG-OS-000458-GPOS-00203]::[RHEL]Baseline"; + ContainsLine = "-a always,exit -F arch=b64 -S chmod,fchmod,fchmodat -F auid>=1000 -F auid!=unset -k perm_mod"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*fchown\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*perm_mod"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*chmod,fchmod,fchmodat\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*perm_mod"; ConfigurationName = "LinuxBaseLine"; }; instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource50ref { -ResourceID = "[nxFileLine][V-204519.a][medium][SRG-OS-000064-GPOS-00033]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S lchown -F auid>=1000 -F auid!=unset -k perm_mod"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; +ResourceID = "[nxFileLine][V-204524.a][medium][SRG-OS-000458-GPOS-00203]::[RHEL]Baseline"; + ContainsLine = "-a always,exit -F arch=b32 -S setxattr,fsetxattr,lsetxattr,removexattr,fremovexattr,lremovexattr -F auid>=1000 -F auid!=unset -k perm_mod"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*lchown\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*perm_mod"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*setxattr,fsetxattr,lsetxattr,removexattr,fremovexattr,lremovexattr\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*perm_mod"; ConfigurationName = "LinuxBaseLine"; }; instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource51ref { -ResourceID = "[nxFileLine][V-204519.b][medium][SRG-OS-000064-GPOS-00033]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S lchown -F auid>=1000 -F auid!=unset -k perm_mod"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; +ResourceID = "[nxFileLine][V-204524.b][medium][SRG-OS-000458-GPOS-00203]::[RHEL]Baseline"; + ContainsLine = "-a always,exit -F arch=b64 -S setxattr,fsetxattr,lsetxattr,removexattr,fremovexattr,lremovexattr -F auid>=1000 -F auid!=unset -k perm_mod"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*lchown\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*perm_mod"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*setxattr,fsetxattr,lsetxattr,removexattr,fremovexattr,lremovexattr\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*perm_mod"; ConfigurationName = "LinuxBaseLine"; }; instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource52ref { -ResourceID = "[nxFileLine][V-204520.a][medium][SRG-OS-000064-GPOS-00033]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S fchownat -F auid>=1000 -F auid!=unset -k perm_mod"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; +ResourceID = "[nxFileLine][V-204531.a][medium][SRG-OS-000064-GPOS-00033]::[RHEL]Baseline"; + ContainsLine = "-a always,exit -F arch=b32 -S creat,open,openat,open_by_handle_at,truncate,ftruncate -F exit=-EPERM -F auid>=1000 -F auid!=unset -k access"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*fchownat\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*perm_mod"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*creat,open,openat,open_by_handle_at,truncate,ftruncate\\s*-F\\s*exit\\s*=\\s*-EPERM\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*access"; ConfigurationName = "LinuxBaseLine"; }; instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource53ref { -ResourceID = "[nxFileLine][V-204520.b][medium][SRG-OS-000064-GPOS-00033]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S fchownat -F auid>=1000 -F auid!=unset -k perm_mod"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; +ResourceID = "[nxFileLine][V-204531.b][medium][SRG-OS-000064-GPOS-00033]::[RHEL]Baseline"; + ContainsLine = "-a always,exit -F arch=b32 -S creat,open,openat,open_by_handle_at,truncate,ftruncate -F exit=-EACCES -F auid>=1000 -F auid!=unset -k access"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*fchownat\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*perm_mod"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*creat,open,openat,open_by_handle_at,truncate,ftruncate\\s*-F\\s*exit\\s*=\\s*-EACCES\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*access"; ConfigurationName = "LinuxBaseLine"; }; instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource54ref { -ResourceID = "[nxFileLine][V-204521.a][medium][SRG-OS-000458-GPOS-00203]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S chmod -F auid>=1000 -F auid!=unset -k perm_mod"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; +ResourceID = "[nxFileLine][V-204531.c][medium][SRG-OS-000064-GPOS-00033]::[RHEL]Baseline"; + ContainsLine = "-a always,exit -F arch=b64 -S creat,open,openat,open_by_handle_at,truncate,ftruncate -F exit=-EPERM -F auid>=1000 -F auid!=unset -k access"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*chmod\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*perm_mod"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*creat,open,openat,open_by_handle_at,truncate,ftruncate\\s*-F\\s*exit\\s*=\\s*-EPERM\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*access"; ConfigurationName = "LinuxBaseLine"; }; instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource55ref { -ResourceID = "[nxFileLine][V-204521.b][medium][SRG-OS-000458-GPOS-00203]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S chmod -F auid>=1000 -F auid!=unset -k perm_mod"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; +ResourceID = "[nxFileLine][V-204531.d][medium][SRG-OS-000064-GPOS-00033]::[RHEL]Baseline"; + ContainsLine = "-a always,exit -F arch=b64 -S creat,open,openat,open_by_handle_at,truncate,ftruncate -F exit=-EACCES -F auid>=1000 -F auid!=unset -k access"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*chmod\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*perm_mod"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*creat,open,openat,open_by_handle_at,truncate,ftruncate\\s*-F\\s*exit\\s*=\\s*-EACCES\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*access"; ConfigurationName = "LinuxBaseLine"; }; instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource56ref { -ResourceID = "[nxFileLine][V-204522.a][medium][SRG-OS-000458-GPOS-00203]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S fchmod -F auid>=1000 -F auid!=unset -k perm_mod"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*fchmod\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*perm_mod"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource57ref -{ -ResourceID = "[nxFileLine][V-204522.b][medium][SRG-OS-000458-GPOS-00203]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S fchmod -F auid>=1000 -F auid!=unset -k perm_mod"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*fchmod\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*perm_mod"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource58ref -{ -ResourceID = "[nxFileLine][V-204523.a][medium][SRG-OS-000458-GPOS-00203]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S fchmodat -F auid>=1000 -F auid!=unset -k perm_mod"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*fchmodat\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*perm_mod"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource59ref -{ -ResourceID = "[nxFileLine][V-204523.b][medium][SRG-OS-000458-GPOS-00203]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S fchmodat -F auid>=1000 -F auid!=unset -k perm_mod"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*fchmodat\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*perm_mod"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource60ref -{ -ResourceID = "[nxFileLine][V-204524.a][medium][SRG-OS-000458-GPOS-00203]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S setxattr -F auid>=1000 -F auid!=unset -k perm_mod"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*setxattr\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*perm_mod"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource61ref -{ -ResourceID = "[nxFileLine][V-204524.b][medium][SRG-OS-000458-GPOS-00203]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S setxattr -F auid>=1000 -F auid!=unset -k perm_mod"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*setxattr\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*perm_mod"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource62ref -{ -ResourceID = "[nxFileLine][V-204525.a][medium][SRG-OS-000458-GPOS-00203]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S fsetxattr -F auid>=1000 -F auid!=unset -k perm_mod"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*fsetxattr\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*perm_mod"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource63ref -{ -ResourceID = "[nxFileLine][V-204525.b][medium][SRG-OS-000458-GPOS-00203]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S fsetxattr -F auid>=1000 -F auid!=unset -k perm_mod"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*fsetxattr\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*perm_mod"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource64ref -{ -ResourceID = "[nxFileLine][V-204526.a][medium][SRG-OS-000458-GPOS-00203]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S lsetxattr -F auid>=1000 -F auid!=unset -k perm_mod"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*lsetxattr\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*perm_mod"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource65ref -{ -ResourceID = "[nxFileLine][V-204526.b][medium][SRG-OS-000458-GPOS-00203]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S lsetxattr -F auid>=1000 -F auid!=unset -k perm_mod"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*lsetxattr\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*perm_mod"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource66ref -{ -ResourceID = "[nxFileLine][V-204527.a][medium][SRG-OS-000458-GPOS-00203]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S removexattr -F auid>=1000 -F auid!=unset -k perm_mod"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*removexattr\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*perm_mod"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource67ref -{ -ResourceID = "[nxFileLine][V-204527.b][medium][SRG-OS-000458-GPOS-00203]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S removexattr -F auid>=1000 -F auid!=unset -k perm_mod"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*removexattr\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*perm_mod"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource68ref -{ -ResourceID = "[nxFileLine][V-204528.a][medium][SRG-OS-000458-GPOS-00203]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S fremovexattr -F auid>=1000 -F auid!=unset -k perm_mod"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*fremovexattr\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*perm_mod"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource69ref -{ -ResourceID = "[nxFileLine][V-204528.b][medium][SRG-OS-000458-GPOS-00203]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S fremovexattr -F auid>=1000 -F auid!=unset -k perm_mod"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*fremovexattr\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*perm_mod"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource70ref -{ -ResourceID = "[nxFileLine][V-204529.a][medium][SRG-OS-000458-GPOS-00203]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S lremovexattr -F auid>=1000 -F auid!=unset -k perm_mod"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*lremovexattr\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*perm_mod"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource71ref -{ -ResourceID = "[nxFileLine][V-204529.b][medium][SRG-OS-000458-GPOS-00203]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S lremovexattr -F auid>=1000 -F auid!=unset -k perm_mod"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*lremovexattr\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*perm_mod"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource72ref -{ -ResourceID = "[nxFileLine][V-204530.a][medium][SRG-OS-000064-GPOS-00033]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S creat F exit=-EPERM -F auid>=1000 -F auid!=unset -k access"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*creat\\s*F\\s*exit\\s*=\\s*-EPERM\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*access"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource73ref -{ -ResourceID = "[nxFileLine][V-204530.b][medium][SRG-OS-000064-GPOS-00033]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S creat -F exit=-EACCES -F auid>=1000 -F auid!=unset -k access"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*creat\\s*-F\\s*exit\\s*=\\s*-EACCES\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*access"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource74ref -{ -ResourceID = "[nxFileLine][V-204530.c][medium][SRG-OS-000064-GPOS-00033]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S creat -F exit=-EPERM -F auid>=1000 -F auid!=unset -k access"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*creat\\s*-F\\s*exit\\s*=\\s*-EPERM\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*access"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource75ref -{ -ResourceID = "[nxFileLine][V-204530.d][medium][SRG-OS-000064-GPOS-00033]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S creat -F exit=-EACCES -F auid>=1000 -F auid!=unset -k access"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*creat\\s*-F\\s*exit\\s*=\\s*-EACCES\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*access"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource76ref -{ -ResourceID = "[nxFileLine][V-204531.a][medium][SRG-OS-000064-GPOS-00033]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S open -F exit=-EPERM -F auid>=1000 -F auid!=unset -k access"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*open\\s*-F\\s*exit\\s*=\\s*-EPERM\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*access"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource77ref -{ -ResourceID = "[nxFileLine][V-204531.b][medium][SRG-OS-000064-GPOS-00033]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S open -F exit=-EACCES -F auid>=1000 -F auid!=unset -k access"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*open\\s*-F\\s*exit\\s*=\\s*-EACCES\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*access"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource78ref -{ -ResourceID = "[nxFileLine][V-204531.c][medium][SRG-OS-000064-GPOS-00033]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S open -F exit=-EPERM -F auid>=1000 -F auid!=unset -k access"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*open\\s*-F\\s*exit\\s*=\\s*-EPERM\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*access"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource79ref -{ -ResourceID = "[nxFileLine][V-204531.d][medium][SRG-OS-000064-GPOS-00033]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S open -F exit=-EACCES -F auid>=1000 -F auid!=unset -k access"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*open\\s*-F\\s*exit\\s*=\\s*-EACCES\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*access"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource80ref -{ -ResourceID = "[nxFileLine][V-204532.a][medium][SRG-OS-000064-GPOS-00033]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S openat -F exit=-EPERM -F auid>=1000 -F auid!=unset -k access"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*openat\\s*-F\\s*exit\\s*=\\s*-EPERM\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*access"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource81ref -{ -ResourceID = "[nxFileLine][V-204532.b][medium][SRG-OS-000064-GPOS-00033]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S openat -F exit=-EACCES -F auid>=1000 -F auid!=unset -k access"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*openat\\s*-F\\s*exit\\s*=\\s*-EACCES\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*access"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource82ref -{ -ResourceID = "[nxFileLine][V-204532.c][medium][SRG-OS-000064-GPOS-00033]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S openat -F exit=-EPERM -F auid>=1000 -F auid!=unset -k access"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*openat\\s*-F\\s*exit\\s*=\\s*-EPERM\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*access"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource83ref -{ -ResourceID = "[nxFileLine][V-204532.d][medium][SRG-OS-000064-GPOS-00033]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S openat -F exit=-EACCES -F auid>=1000 -F auid!=unset -k access"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*openat\\s*-F\\s*exit\\s*=\\s*-EACCES\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*access"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource84ref -{ -ResourceID = "[nxFileLine][V-204533.a][medium][SRG-OS-000064-GPOS-00033]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S open_by_handle_at -F exit=-EPERM -F auid>=1000 -F auid!=unset -k access"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*open_by_handle_at\\s*-F\\s*exit\\s*=\\s*-EPERM\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*access"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource85ref -{ -ResourceID = "[nxFileLine][V-204533.b][medium][SRG-OS-000064-GPOS-00033]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S open_by_handle_at -F exit=-EACCES -F auid>=1000 -F auid!=unset -k access"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*open_by_handle_at\\s*-F\\s*exit\\s*=\\s*-EACCES\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*access"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource86ref -{ -ResourceID = "[nxFileLine][V-204533.c][medium][SRG-OS-000064-GPOS-00033]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S open_by_handle_at -F exit=-EPERM -F auid>=1000 -F auid!=unset -k access"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*open_by_handle_at\\s*-F\\s*exit\\s*=\\s*-EPERM\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*access"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource87ref -{ -ResourceID = "[nxFileLine][V-204533.d][medium][SRG-OS-000064-GPOS-00033]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S open_by_handle_at -F exit=-EACCES -F auid>=1000 -F auid!=unset -k access"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*open_by_handle_at\\s*-F\\s*exit\\s*=\\s*-EACCES\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*access"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource88ref -{ -ResourceID = "[nxFileLine][V-204534.a][medium][SRG-OS-000064-GPOS-00033]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S truncate -F exit=-EPERM -F auid>=1000 -F auid!=unset -k access"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*truncate\\s*-F\\s*exit\\s*=\\s*-EPERM\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*access"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource89ref -{ -ResourceID = "[nxFileLine][V-204534.b][medium][SRG-OS-000064-GPOS-00033]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S truncate -F exit=-EACCES -F auid>=1000 -F auid!=unset -k access"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*truncate\\s*-F\\s*exit\\s*=\\s*-EACCES\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*access"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource90ref -{ -ResourceID = "[nxFileLine][V-204534.c][medium][SRG-OS-000064-GPOS-00033]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S truncate -F exit=-EPERM -F auid>=1000 -F auid!=unset -k access"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*truncate\\s*-F\\s*exit\\s*=\\s*-EPERM\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*access"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource91ref -{ -ResourceID = "[nxFileLine][V-204534.d][medium][SRG-OS-000064-GPOS-00033]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S truncate -F exit=-EACCES -F auid>=1000 -F auid!=unset -k access"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*truncate\\s*-F\\s*exit\\s*=\\s*-EACCES\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*access"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource92ref -{ -ResourceID = "[nxFileLine][V-204535.a][medium][SRG-OS-000064-GPOS-00033]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S ftruncate -F exit=-EPERM -F auid>=1000 -F auid!=unset -k access"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*ftruncate\\s*-F\\s*exit\\s*=\\s*-EPERM\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*access"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource93ref -{ -ResourceID = "[nxFileLine][V-204535.b][medium][SRG-OS-000064-GPOS-00033]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S ftruncate -F exit=-EACCES -F auid>=1000 -F auid!=unset -k access"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*ftruncate\\s*-F\\s*exit\\s*=\\s*-EACCES\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*access"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource94ref -{ -ResourceID = "[nxFileLine][V-204535.c][medium][SRG-OS-000064-GPOS-00033]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S ftruncate -F exit=-EPERM -F auid>=1000 -F auid!=unset -k access"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*ftruncate\\s*-F\\s*exit\\s*=\\s*-EPERM\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*access"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource95ref -{ -ResourceID = "[nxFileLine][V-204535.d][medium][SRG-OS-000064-GPOS-00033]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S ftruncate -F exit=-EACCES -F auid>=1000 -F auid!=unset -k access"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*ftruncate\\s*-F\\s*exit\\s*=\\s*-EACCES\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*access"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource96ref -{ ResourceID = "[nxFileLine][V-204536][medium][SRG-OS-000392-GPOS-00172]::[RHEL]Baseline"; ContainsLine = "-a always,exit -F path=/usr/sbin/semanage -F auid>=1000 -F auid!=unset -k privileged-priv_change"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/sbin/semanage\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-priv_change"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource97ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource57ref { ResourceID = "[nxFileLine][V-204537][medium][SRG-OS-000392-GPOS-00172]::[RHEL]Baseline"; ContainsLine = "-a always,exit -F path=/usr/sbin/setsebool -F auid>=1000 -F auid!=unset -k privileged-priv_change"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/sbin/setsebool\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-priv_change"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource98ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource58ref { ResourceID = "[nxFileLine][V-204538][medium][SRG-OS-000392-GPOS-00172]::[RHEL]Baseline"; ContainsLine = "-a always,exit -F path=/usr/bin/chcon -F auid>=1000 -F auid!=unset -k privileged-priv_change"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/bin/chcon\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-priv_change"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource99ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource59ref { ResourceID = "[nxFileLine][V-204539][medium][SRG-OS-000392-GPOS-00172]::[RHEL]Baseline"; ContainsLine = "-a always,exit -F path=/usr/sbin/setfiles -F auid>=1000 -F auid!=unset -k privileged-priv_change"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/sbin/setfiles\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-priv_change"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource100ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource60ref { ResourceID = "[nxFileLine][V-204540][medium][SRG-OS-000392-GPOS-00172]::[RHEL]Baseline"; ContainsLine = "-w /var/run/faillock -p wa -k logins"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "#\\s*-w\\s*/var/run/faillock\\s*-p\\s*wa\\s*-k\\s*logins"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource101ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource61ref { ResourceID = "[nxFileLine][V-204541][medium][SRG-OS-000392-GPOS-00172]::[RHEL]Baseline"; ContainsLine = "-w /var/log/lastlog -p wa -k logins"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "#\\s*-w\\s*/var/log/lastlog\\s*-p\\s*wa\\s*-k\\s*logins"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource102ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource62ref { ResourceID = "[nxFileLine][V-204542][medium][SRG-OS-000042-GPOS-00020]::[RHEL]Baseline"; ContainsLine = "-a always,exit -F path=/usr/bin/passwd -F auid>=1000 -F auid!=unset -k privileged-passwd"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/bin/passwd\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-passwd"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource103ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource63ref { ResourceID = "[nxFileLine][V-204543][medium][SRG-OS-000042-GPOS-00020]::[RHEL]Baseline"; ContainsLine = "-a always,exit -F path=/usr/sbin/unix_chkpwd -F auid>=1000 -F auid!=unset -k privileged-passwd"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/sbin/unix_chkpwd\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-passwd"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource104ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource64ref { ResourceID = "[nxFileLine][V-204544][medium][SRG-OS-000042-GPOS-00020]::[RHEL]Baseline"; ContainsLine = "-a always,exit -F path=/usr/bin/gpasswd -F auid>=1000 -F auid!=unset -k privileged-passwd"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/bin/gpasswd\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-passwd"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource105ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource65ref { ResourceID = "[nxFileLine][V-204545][medium][SRG-OS-000042-GPOS-00020]::[RHEL]Baseline"; ContainsLine = "-a always,exit -F path=/usr/bin/chage -F auid>=1000 -F auid!=unset -k privileged-passwd"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/bin/chage\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-passwd"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource106ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource66ref { ResourceID = "[nxFileLine][V-204546][medium][SRG-OS-000042-GPOS-00020]::[RHEL]Baseline"; ContainsLine = "-a always,exit -F path=/usr/sbin/userhelper -F auid>=1000 -F auid!=unset -k privileged-passwd"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/sbin/userhelper\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-passwd"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource107ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource67ref { ResourceID = "[nxFileLine][V-204547][medium][SRG-OS-000037-GPOS-00015]::[RHEL]Baseline"; ContainsLine = "-a always,exit -F path=/usr/bin/su -F auid>=1000 -F auid!=unset -k privileged-priv_change"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/bin/su\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-priv_change"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource108ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource68ref { ResourceID = "[nxFileLine][V-204548][medium][SRG-OS-000037-GPOS-00015]::[RHEL]Baseline"; ContainsLine = "-a always,exit -F path=/usr/bin/sudo -F auid>=1000 -F auid!=unset -k privileged-priv_change"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/bin/sudo\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-priv_change"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource109ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource69ref { ResourceID = "[nxFileLine][V-204549.a][medium][SRG-OS-000037-GPOS-00015]::[RHEL]Baseline"; ContainsLine = "-w /etc/sudoers -p wa -k privileged-actions"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "#\\s*-w /etc/sudoers -p wa -k privileged-actions"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource110ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource70ref { ResourceID = "[nxFileLine][V-204549.b][medium][SRG-OS-000037-GPOS-00015]::[RHEL]Baseline"; ContainsLine = "-w /etc/sudoers.d/ -p wa -k privileged-actions"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "#\\s*-w /etc/sudoers.d/ -p wa -k privileged-actions"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource111ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource71ref { ResourceID = "[nxFileLine][V-204550][medium][SRG-OS-000037-GPOS-00015]::[RHEL]Baseline"; ContainsLine = "-a always,exit -F path=/usr/bin/newgrp -F auid>=1000 -F auid!=unset -k privileged-priv_change"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/bin/newgrp\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-priv_change"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource112ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource72ref { ResourceID = "[nxFileLine][V-204551][medium][SRG-OS-000037-GPOS-00015]::[RHEL]Baseline"; ContainsLine = "-a always,exit -F path=/usr/bin/chsh -F auid>=1000 -F auid!=unset -k privileged-priv_change"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/bin/chsh\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-priv_change"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource113ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource73ref { ResourceID = "[nxFileLine][V-204552.a][medium][SRG-OS-000042-GPOS-00020]::[RHEL]Baseline"; ContainsLine = "-a always,exit -F arch=b32 -S mount -F auid>=1000 -F auid!=unset -k privileged-mount"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*mount\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-mount"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource114ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource74ref { ResourceID = "[nxFileLine][V-204552.b][medium][SRG-OS-000042-GPOS-00020]::[RHEL]Baseline"; ContainsLine = "-a always,exit -F arch=b64 -S mount -F auid>=1000 -F auid!=unset -k privileged-mount"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*mount\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-mount"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource115ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource75ref { ResourceID = "[nxFileLine][V-204552.c][medium][SRG-OS-000042-GPOS-00020]::[RHEL]Baseline"; ContainsLine = "-a always,exit -F path=/usr/bin/mount -F auid>=1000 -F auid!=unset -k privileged-mount"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/bin/mount\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-mount"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource116ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource76ref { ResourceID = "[nxFileLine][V-204553][medium][SRG-OS-000042-GPOS-00020]::[RHEL]Baseline"; ContainsLine = "-a always,exit -F path=/usr/bin/umount -F auid>=1000 -F auid!=unset -k privileged-mount"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/bin/umount\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-mount"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource117ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource77ref { ResourceID = "[nxFileLine][V-204554][medium][SRG-OS-000042-GPOS-00020]::[RHEL]Baseline"; ContainsLine = "-a always,exit -F path=/usr/sbin/postdrop -F auid>=1000 -F auid!=unset -k privileged-postfix"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/sbin/postdrop\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-postfix"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource118ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource78ref { ResourceID = "[nxFileLine][V-204555][medium][SRG-OS-000042-GPOS-00020]::[RHEL]Baseline"; ContainsLine = "-a always,exit -F path=/usr/sbin/postqueue -F auid>=1000 -F auid!=unset -k privileged-postfix"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/sbin/postqueue\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-postfix"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource119ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource79ref { ResourceID = "[nxFileLine][V-204556][medium][SRG-OS-000042-GPOS-00020]::[RHEL]Baseline"; ContainsLine = "-a always,exit -F path=/usr/libexec/openssh/ssh-keysign -F auid>=1000 -F auid!=unset -k privileged-ssh"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/libexec/openssh/ssh-keysign\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-ssh"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource120ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource80ref { ResourceID = "[nxFileLine][V-204557][medium][SRG-OS-000042-GPOS-00020]::[RHEL]Baseline"; ContainsLine = "-a always,exit -F path=/usr/bin/crontab -F auid>=1000 -F auid!=unset -k privileged-cron"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/bin/crontab\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-cron"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource121ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource81ref { ResourceID = "[nxFileLine][V-204558][medium][SRG-OS-000471-GPOS-00215]::[RHEL]Baseline"; ContainsLine = "-a always,exit -F path=/usr/sbin/pam_timestamp_check -F auid>=1000 -F auid!=unset -k privileged-pam"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/sbin/pam_timestamp_check\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-pam"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource122ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource82ref { ResourceID = "[nxFileLine][V-204559.a][medium][SRG-OS-000471-GPOS-00216]::[RHEL]Baseline"; ContainsLine = "-a always,exit -F arch=b32 -S create_module -k module-change"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*create_module\\s*-k\\s*module-change"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource123ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource83ref { ResourceID = "[nxFileLine][V-204559.b][medium][SRG-OS-000471-GPOS-00216]::[RHEL]Baseline"; ContainsLine = "-a always,exit -F arch=b64 -S create_module -k module-change"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*create_module\\s*-k\\s*module-change"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource124ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource84ref { ResourceID = "[nxFileLine][V-204560.a][medium][SRG-OS-000471-GPOS-00216]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S init_module -k module-change"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + ContainsLine = "-a always,exit -F arch=b32 -S init_module,finit_module -k modulechange"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*init_module\\s*-k\\s*module-change"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*init_module,finit_module\\s*-k\\s*modulechange"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource125ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource85ref { ResourceID = "[nxFileLine][V-204560.b][medium][SRG-OS-000471-GPOS-00216]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S init_module -k module-change"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + ContainsLine = "-a always,exit -F arch=b64 -S init_module,finit_module -k modulechange"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*init_module\\s*-k\\s*module-change"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*init_module,finit_module\\s*-k\\s*modulechange"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource126ref -{ -ResourceID = "[nxFileLine][V-204561.a][medium][SRG-OS-000471-GPOS-00216]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S finit_module -k module-change"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*finit_module\\s*-k\\s*module-change"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource127ref -{ -ResourceID = "[nxFileLine][V-204561.b][medium][SRG-OS-000471-GPOS-00216]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S finit_module -k module-change"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*finit_module\\s*-k\\s*module-change"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource128ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource86ref { ResourceID = "[nxFileLine][V-204562.a][medium][SRG-OS-000471-GPOS-00216]::[RHEL]Baseline"; ContainsLine = "-a always,exit -F arch=b32 -S delete_module -k module-change"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*delete_module\\s*-k\\s*module-change"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource129ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource87ref { ResourceID = "[nxFileLine][V-204562.b][medium][SRG-OS-000471-GPOS-00216]::[RHEL]Baseline"; ContainsLine = "-a always,exit -F arch=b64 -S delete_module -k module-change"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*delete_module\\s*-k\\s*module-change"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource130ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource88ref { ResourceID = "[nxFileLine][V-204563][medium][SRG-OS-000471-GPOS-00216]::[RHEL]Baseline"; ContainsLine = "-w /usr/bin/kmod -p x -F auid!=unset -k module-change"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "#\\s*-w\\s*/usr/bin/kmod\\s*-p\\s*x\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*module-change"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource131ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource89ref { ResourceID = "[nxFileLine][V-204564][medium][SRG-OS-000004-GPOS-00004]::[RHEL]Baseline"; ContainsLine = "-w /etc/passwd -p wa -k identity"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "#\\s*-w\\s*/etc/passwd\\s*-p\\s*wa\\s*-k\\s*identity"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource132ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource90ref { ResourceID = "[nxFileLine][V-204565][medium][SRG-OS-000004-GPOS-00004]::[RHEL]Baseline"; ContainsLine = "-w /etc/group -p wa -k identity"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "#\\s*-w\\s*/etc/group\\s*-p\\s*wa\\s*-k\\s*identity"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource133ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource91ref { ResourceID = "[nxFileLine][V-204566][medium][SRG-OS-000004-GPOS-00004]::[RHEL]Baseline"; ContainsLine = "-w /etc/gshadow -p wa -k identity"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "#\\s*-w\\s*/etc/gshadow\\s*-p\\s*wa\\s*-k\\s*identity"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource134ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource92ref { ResourceID = "[nxFileLine][V-204567][medium][SRG-OS-000004-GPOS-00004]::[RHEL]Baseline"; ContainsLine = "-w /etc/shadow -p wa -k identity"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "#\\s*-w\\s*/etc/shadow\\s*-p\\s*wa\\s*-k\\s*identity"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource135ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource93ref { ResourceID = "[nxFileLine][V-204568][medium][SRG-OS-000004-GPOS-00004]::[RHEL]Baseline"; ContainsLine = "-w /etc/security/opasswd -p wa -k identity"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "#\\s*-w\\s*/etc/security/opasswd\\s*-p\\s*wa\\s*-k\\s*identity"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource136ref -{ -ResourceID = "[nxFileLine][V-204569.a][medium][SRG-OS-000466-GPOS-00210]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S rename -F auid>=1000 -F auid!=unset -k delete"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*rename\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*delete"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource137ref -{ -ResourceID = "[nxFileLine][V-204569.b][medium][SRG-OS-000466-GPOS-00210]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S rename -F auid>=1000 -F auid!=unset -k delete"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*rename\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*delete"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource138ref -{ -ResourceID = "[nxFileLine][V-204570.a][medium][SRG-OS-000466-GPOS-00210]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S renameat -F auid>=1000 -F auid!=unset -k delete"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*renameat\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*delete"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource139ref -{ -ResourceID = "[nxFileLine][V-204570.b][medium][SRG-OS-000466-GPOS-00210]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S renameat -F auid>=1000 -F auid!=unset -k delete"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*renameat\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*delete"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource140ref -{ -ResourceID = "[nxFileLine][V-204571.a][medium][SRG-OS-000466-GPOS-00210]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S rmdir -F auid>=1000 -F auid!=unset -k delete"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*rmdir\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*delete"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource141ref -{ -ResourceID = "[nxFileLine][V-204571.b][medium][SRG-OS-000466-GPOS-00210]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S rmdir -F auid>=1000 -F auid!=unset -k delete"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*rmdir\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*delete"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource142ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource94ref { ResourceID = "[nxFileLine][V-204572.a][medium][SRG-OS-000466-GPOS-00210]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S unlink -F auid>=1000 -F auid!=unset -k delete"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + ContainsLine = "-a always,exit -F arch=b32 -S unlink,unlinkat,rename,renameat,rmdir -F auid>=1000 -F auid!=unset -k delete"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*unlink\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*delete"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*unlink,unlinkat,rename,renameat,rmdir\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*delete"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource143ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource95ref { ResourceID = "[nxFileLine][V-204572.b][medium][SRG-OS-000466-GPOS-00210]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S unlink -F auid>=1000 -F auid!=unset -k delete"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + ContainsLine = "-a always,exit -F arch=b64 -S unlink,unlinkat,rename,renameat,rmdir -F auid>=1000 -F auid!=unset -k delete"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*unlink\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*delete"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*unlink,unlinkat,rename,renameat,rmdir\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*delete"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource144ref -{ -ResourceID = "[nxFileLine][V-204573.a][medium][SRG-OS-000466-GPOS-00210]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S unlinkat -F auid>=1000 -F auid!=unset -k delete"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*unlinkat\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*delete"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource145ref -{ -ResourceID = "[nxFileLine][V-204573.b][medium][SRG-OS-000466-GPOS-00210]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S unlinkat -F auid>=1000 -F auid!=unset -k delete"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*unlinkat\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*delete"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource146ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource96ref { ResourceID = "[nxFileLine][V-204578][medium][SRG-OS-000033-GPOS-00014]::[RHEL]Baseline"; ContainsLine = "Ciphers aes256-ctr,aes192-ctr,aes128-ctr"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/ssh/sshd_config"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "^#\\s*Ciphers.*|^\\s*Ciphers\\s*aes128-ctr.*|^\\s*Ciphers\\s*aes192-ctr.*"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource147ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource97ref { ResourceID = "[nxFileLine][V-204579.b][medium][SRG-OS-000163-GPOS-00072]::[RHEL]Baseline"; ContainsLine = "declare -xr TMOUT=900"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/profile.d/tmout.sh"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "^\\s*TMOUT\\s*=\\s*[0-8]?[0-9]?[0-9]?$|^#\\s*TMOUT.*"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource148ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource98ref { ResourceID = "[nxFileLine][V-204580][medium][SRG-OS-000023-GPOS-00006]::[RHEL]Baseline"; ContainsLine = "banner /etc/issue"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/ssh/sshd_config"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "#\\s*banner\\s*/etc/issue"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource149ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource99ref { ResourceID = "[nxFileLine][V-204587][medium][SRG-OS-000163-GPOS-00072]::[RHEL]Baseline"; ContainsLine = "ClientAliveInterval 600"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/ssh/sshd_config"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "^\\s*ClientAliveInterval\\s*[0-5]?[0-9]?[0-9]?\\s*$|^#\\s*ClientAliveInterval.*|^\\s*ClientAliveInterval\\s*$"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource150ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource100ref { ResourceID = "[nxFileLine][V-204588][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; ContainsLine = "RhostsRSAAuthentication no"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/ssh/sshd_config"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "^#\\s*RhostsRSAAuthentication.*$|^RhostsRSAAuthentication\\s*(?!no\\b)\\w*$"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource151ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource101ref { ResourceID = "[nxFileLine][V-204589][medium][SRG-OS-000163-GPOS-00072]::[RHEL]Baseline"; ContainsLine = "ClientAliveCountMax 0"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/ssh/sshd_config"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "^#\\s*ClientAliveCountMax.*$|^ClientAliveCountMax\\s*(?!0\\b)\\w*$"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource152ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource102ref { ResourceID = "[nxFileLine][V-204590][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; ContainsLine = "IgnoreRhosts yes"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/ssh/sshd_config"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "^#\\s*IgnoreRhosts.*$|^IgnoreRhosts\\s*(?!yes\\b)\\w*$"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource153ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource103ref { ResourceID = "[nxFileLine][V-204591][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; ContainsLine = "PrintLastLog yes"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/ssh/sshd_config"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "^#\\s*PrintLastLog.*$|^PrintLastLog\\s*(?!yes\\b)\\w*$"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource154ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource104ref { ResourceID = "[nxFileLine][V-204592][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; ContainsLine = "PermitRootLogin no"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/ssh/sshd_config"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "^#\\s*PermitRootLogin.*$|^PermitRootLogin\\s*(?!no\\b)\\w*$"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource155ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource105ref { ResourceID = "[nxFileLine][V-204593][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; ContainsLine = "IgnoreUserKnownHosts yes"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/ssh/sshd_config"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "^#\\s*IgnoreUserKnownHosts.*$|^IgnoreUserKnownHosts\\s*(?!yes\\b)\\w*$"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource156ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource106ref { ResourceID = "[nxFileLine][V-204594][high][SRG-OS-000074-GPOS-00042]::[RHEL]Baseline"; ContainsLine = "Protocol 2"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/ssh/sshd_config"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "^#\\s*Protocol.*$|^Protocol\\s*(?!2\\b)\\w*$"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource157ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource107ref { ResourceID = "[nxFileLine][V-204595][medium][SRG-OS-000250-GPOS-00093]::[RHEL]Baseline"; ContainsLine = "MACs hmac-sha2-512,hmac-sha2-256"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/ssh/sshd_config"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "#\\s*MACs.*|\\s*MACs\\s*hmac-(?!sha2-512).*"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource158ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource108ref { ResourceID = "[nxFileLine][V-204598][medium][SRG-OS-000364-GPOS-00151]::[RHEL]Baseline"; ContainsLine = "GSSAPIAuthentication no"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/ssh/sshd_config"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "^#\\s*GSSAPIAuthentication.*$|^GSSAPIAuthentication\\s*(?!no\\b)\\w*$"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource159ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource109ref { ResourceID = "[nxFileLine][V-204599][medium][SRG-OS-000364-GPOS-00151]::[RHEL]Baseline"; ContainsLine = "KerberosAuthentication no"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/ssh/sshd_config"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "^#\\s*KerberosAuthentication.*$|^KerberosAuthentication\\s*(?!no\\b)\\w*$"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource160ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource110ref { ResourceID = "[nxFileLine][V-204600][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; ContainsLine = "StrictModes yes"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/ssh/sshd_config"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "^#\\s*StrictModes.*$|^StrictModes\\s*(?!yes\\b)\\w*$"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource161ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource111ref { ResourceID = "[nxFileLine][V-204601][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; ContainsLine = "UsePrivilegeSeparation sandbox"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/ssh/sshd_config"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "^#\\s*UsePrivilegeSeparation.*$|^UsePrivilegeSeparation\\s*(?!sandbox\\b)\\w*$"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource162ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource112ref { ResourceID = "[nxFileLine][V-204602][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; ContainsLine = "Compression delayed"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/ssh/sshd_config"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "^#\\s*Compression.*$|^Compression\\s*(?!delayed\\b)\\w*$"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource163ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource113ref { ResourceID = "[nxFileLine][V-204622][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; ContainsLine = "X11Forwarding no"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/ssh/sshd_config"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "^#\\s*X11Forwarding.*$|^X11Forwarding\\s*(?!no\\b)\\w*$"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource164ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource114ref { ResourceID = "[nxFileLine][V-233307][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; ContainsLine = "X11UseLocalhost yes"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/ssh/sshd_config"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "#\\s*X11UseLocalhost\\s*yes"; ConfigurationName = "LinuxBaseLine"; }; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource115ref +{ +ResourceID = "[nxFileLine][V-250314][medium][SRG-OS-000324-GPOS-00125]::[RHEL]Baseline"; + ContainsLine = "%wheel ALL=(ALL) TYPE=sysadm_t ROLE=sysadm_r ALL"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/sudoers"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*%wheel\\s*ALL\\s*=\\s*(ALL)\\s*TYPE\\s*=\\s*sysadm_t\\s*ROLE\\s*=\\s*sysadm_r\\s*ALL"; + ConfigurationName = "LinuxBaseLine"; +}; instance of MSFT_nxServiceResource as $MSFT_nxServiceResource1ref { ResourceID = "[nxService][V-204451][medium][SRG-OS-000114-GPOS-00059]::[RHEL]Baseline"; Controller = "systemd"; Enabled = False; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxService.ps1::13::9::nxService"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxService.ps1::13::9::nxService"; Name = "autofs"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -2173,7 +1624,7 @@ instance of MSFT_nxServiceResource as $MSFT_nxServiceResource2ref ResourceID = "[nxService][V-204492][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; Controller = "systemd"; Enabled = False; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxService.ps1::13::9::nxService"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxService.ps1::13::9::nxService"; Name = "kdump"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -2185,7 +1636,7 @@ ResourceID = "[nxService][V-204503][medium][SRG-OS-000038-GPOS-00016]::[RHEL]Bas Controller = "systemd"; State = "Running"; Enabled = True; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxService.ps1::22::9::nxService"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxService.ps1::22::9::nxService"; Name = "auditd"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -2197,7 +1648,7 @@ ResourceID = "[nxService][V-204586][medium][SRG-OS-000423-GPOS-00187]::[RHEL]Bas Controller = "systemd"; State = "Running"; Enabled = True; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxService.ps1::22::9::nxService"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxService.ps1::22::9::nxService"; Name = "sshd"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -2209,7 +1660,7 @@ ResourceID = "[nxService][V-204604.b][medium][SRG-OS-000480-GPOS-00227]::[RHEL]B Controller = "systemd"; State = "Running"; Enabled = True; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxService.ps1::22::9::nxService"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxService.ps1::22::9::nxService"; Name = "firewalld"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -2220,7 +1671,7 @@ instance of MSFT_nxScriptResource as $MSFT_nxScriptResource1ref ResourceID = "[nxScript][V-204399.b][medium][[Skip] SRG-OS-000029-GPOS-00010]::[RHEL]Baseline"; GetScript = "#!/bin/bash\necho [V-204399.b][medium][[Skip] SRG-OS-000029-GPOS-00010]"; TestScript = "#!/bin/bash\nexit 0"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxScript.skip.ps1::10::5::nxScript"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxScript.skip.ps1::10::5::nxScript"; SetScript = "#!/bin/bash"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -2231,7 +1682,7 @@ instance of MSFT_nxScriptResource as $MSFT_nxScriptResource2ref ResourceID = "[nxScript][V-204400][medium][[Skip] SRG-OS-000029-GPOS-00010]::[RHEL]Baseline"; GetScript = "#!/bin/bash\necho [V-204400][medium][[Skip] SRG-OS-000029-GPOS-00010]"; TestScript = "#!/bin/bash\nexit 0"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxScript.skip.ps1::10::5::nxScript"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxScript.skip.ps1::10::5::nxScript"; SetScript = "#!/bin/bash"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -2242,7 +1693,7 @@ instance of MSFT_nxScriptResource as $MSFT_nxScriptResource3ref ResourceID = "[nxScript][V-204403][medium][[Skip] SRG-OS-000029-GPOS-00010]::[RHEL]Baseline"; GetScript = "#!/bin/bash\necho [V-204403][medium][[Skip] SRG-OS-000029-GPOS-00010]"; TestScript = "#!/bin/bash\nexit 0"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxScript.skip.ps1::10::5::nxScript"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxScript.skip.ps1::10::5::nxScript"; SetScript = "#!/bin/bash"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -2253,7 +1704,7 @@ instance of MSFT_nxScriptResource as $MSFT_nxScriptResource4ref ResourceID = "[nxScript][V-204509][medium][[Skip] SRG-OS-000342-GPOS-00133]::[RHEL]Baseline"; GetScript = "#!/bin/bash\necho [V-204509][medium][[Skip] SRG-OS-000342-GPOS-00133]"; TestScript = "#!/bin/bash\nexit 0"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxScript.skip.ps1::10::5::nxScript"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxScript.skip.ps1::10::5::nxScript"; SetScript = "#!/bin/bash"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -2264,7 +1715,7 @@ instance of MSFT_nxScriptResource as $MSFT_nxScriptResource5ref ResourceID = "[nxScript][V-204513][medium][[Skip] SRG-OS-000343-GPOS-00134]::[RHEL]Baseline"; GetScript = "#!/bin/bash\necho [V-204513][medium][[Skip] SRG-OS-000343-GPOS-00134]"; TestScript = "#!/bin/bash\nexit 0"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxScript.skip.ps1::10::5::nxScript"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxScript.skip.ps1::10::5::nxScript"; SetScript = "#!/bin/bash"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -2275,7 +1726,7 @@ instance of MSFT_nxScriptResource as $MSFT_nxScriptResource6ref ResourceID = "[nxScript][V-204623][medium][[Skip] SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; GetScript = "#!/bin/bash\necho [V-204623][medium][[Skip] SRG-OS-000480-GPOS-00227]"; TestScript = "#!/bin/bash\nexit 0"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxScript.skip.ps1::10::5::nxScript"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxScript.skip.ps1::10::5::nxScript"; SetScript = "#!/bin/bash"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -2286,7 +1737,7 @@ instance of MSFT_nxScriptResource as $MSFT_nxScriptResource7ref ResourceID = "[nxScript][V-244557][medium][[Skip] SRG-OS-000080-GPOS-00048]::[RHEL]Baseline"; GetScript = "#!/bin/bash\necho [V-244557][medium][[Skip] SRG-OS-000080-GPOS-00048]"; TestScript = "#!/bin/bash\nexit 0"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxScript.skip.ps1::10::5::nxScript"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxScript.skip.ps1::10::5::nxScript"; SetScript = "#!/bin/bash"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -2297,7 +1748,7 @@ instance of MSFT_nxScriptResource as $MSFT_nxScriptResource8ref ResourceID = "[nxScript][V-244558][medium][[Skip] SRG-OS-000080-GPOS-00048]::[RHEL]Baseline"; GetScript = "#!/bin/bash\necho [V-244558][medium][[Skip] SRG-OS-000080-GPOS-00048]"; TestScript = "#!/bin/bash\nexit 0"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxScript.skip.ps1::10::5::nxScript"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxScript.skip.ps1::10::5::nxScript"; SetScript = "#!/bin/bash"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -2308,7 +1759,7 @@ instance of MSFT_nxScriptResource as $MSFT_nxScriptResource9ref ResourceID = "[nxScript][V-204399.a][medium][[Skip] SRG-OS-000029-GPOS-00010]::[RHEL]Baseline"; GetScript = "#!/bin/bash\necho [V-204399.a][medium][[Skip] SRG-OS-000029-GPOS-00010]"; TestScript = "#!/bin/bash\nexit 0"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxScript.skip.ps1::10::5::nxScript"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxScript.skip.ps1::10::5::nxScript"; SetScript = "#!/bin/bash"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -2325,7 +1776,7 @@ instance of OMI_ConfigurationDocument Author="Microsoft"; - GenerationDate="01/31/2022 17:13:26"; + GenerationDate="05/04/2022 09:09:33"; GenerationHost="Microsoft"; diff --git a/stig/linux/config/CentOS76.mof b/stig/linux/config/CentOS76.mof index d06339a..32e0894 100644 --- a/stig/linux/config/CentOS76.mof +++ b/stig/linux/config/CentOS76.mof @@ -1,7 +1,7 @@ /* @TargetNode='CentOS76' @GeneratedBy=Microsoft -@GenerationDate=01/31/2022 17:13:26 +@GenerationDate=05/04/2022 09:09:33 @GenerationHost=Microsoft */ @@ -9,7 +9,7 @@ instance of MSFT_nxPackageResource as $MSFT_nxPackageResource1ref { ResourceID = "[nxPackage][V-204442][high][SRG-OS-000095-GPOS-00049]::[RHEL]Baseline"; Ensure = "Absent"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxPackage.ps1::8::5::nxPackage"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxPackage.ps1::8::5::nxPackage"; Name = "rsh-server"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -19,7 +19,7 @@ instance of MSFT_nxPackageResource as $MSFT_nxPackageResource2ref { ResourceID = "[nxPackage][V-204443][high][SRG-OS-000095-GPOS-00049]::[RHEL]Baseline"; Ensure = "Absent"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxPackage.ps1::8::5::nxPackage"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxPackage.ps1::8::5::nxPackage"; Name = "ypserv"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -29,7 +29,7 @@ instance of MSFT_nxPackageResource as $MSFT_nxPackageResource3ref { ResourceID = "[nxPackage][V-204497][high][SRG-OS-000033-GPOS-00014]::[RHEL]Baseline"; Ensure = "Present"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxPackage.ps1::8::5::nxPackage"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxPackage.ps1::8::5::nxPackage"; Name = "dracut-fips"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -39,7 +39,7 @@ instance of MSFT_nxPackageResource as $MSFT_nxPackageResource4ref { ResourceID = "[nxPackage][V-204498][low][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; Ensure = "Present"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxPackage.ps1::8::5::nxPackage"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxPackage.ps1::8::5::nxPackage"; Name = "aide"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -49,7 +49,7 @@ instance of MSFT_nxPackageResource as $MSFT_nxPackageResource5ref { ResourceID = "[nxPackage][V-204502][high][SRG-OS-000095-GPOS-00049]::[RHEL]Baseline"; Ensure = "Absent"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxPackage.ps1::8::5::nxPackage"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxPackage.ps1::8::5::nxPackage"; Name = "telnet-server"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -59,7 +59,7 @@ instance of MSFT_nxPackageResource as $MSFT_nxPackageResource6ref { ResourceID = "[nxPackage][V-204585][medium][SRG-OS-000423-GPOS-00187]::[RHEL]Baseline"; Ensure = "Present"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxPackage.ps1::8::5::nxPackage"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxPackage.ps1::8::5::nxPackage"; Name = "openssh-server"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -69,7 +69,7 @@ instance of MSFT_nxPackageResource as $MSFT_nxPackageResource7ref { ResourceID = "[nxPackage][V-204604.a][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; Ensure = "Present"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxPackage.ps1::8::5::nxPackage"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxPackage.ps1::8::5::nxPackage"; Name = "firewalld"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -79,7 +79,7 @@ instance of MSFT_nxPackageResource as $MSFT_nxPackageResource8ref { ResourceID = "[nxPackage][V-204620][high][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; Ensure = "Absent"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxPackage.ps1::8::5::nxPackage"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxPackage.ps1::8::5::nxPackage"; Name = "vsftpd"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -89,7 +89,7 @@ instance of MSFT_nxPackageResource as $MSFT_nxPackageResource9ref { ResourceID = "[nxPackage][V-204621][high][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; Ensure = "Absent"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxPackage.ps1::8::5::nxPackage"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxPackage.ps1::8::5::nxPackage"; Name = "tftp-server"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -99,7 +99,7 @@ instance of MSFT_nxPackageResource as $MSFT_nxPackageResource10ref { ResourceID = "[nxPackage][V-204631][medium][SRG-OS-000375-GPOS-00160]::[RHEL]Baseline"; Ensure = "Present"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxPackage.ps1::8::5::nxPackage"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxPackage.ps1::8::5::nxPackage"; Name = "pam_pkcs11"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -111,7 +111,7 @@ ResourceID = "[nxFile][V-204395][medium][SRG-OS-000023-GPOS-00006]::[RHEL]Baseli Contents = "You are accessing a U.S. Government (USG) Information System (IS) that is provided for USG-authorized use only.\n\nBy using this IS (which includes any device attached to this IS), you consent to the following conditions:\n\n-The USG routinely intercepts and monitors communications on this IS for purposes including, but not limited to, penetration testing, COMSEC monitoring, network operations and defense, personnel misconduct (PM), law enforcement (LE), and counterintelligence (CI) investigations.\n\n-At any time, the USG may inspect and seize data stored on this IS.\n\n-Communications using, or data stored on, this IS are not private, are subject to routine monitoring, interception, and search, and may be disclosed or used for any USG-authorized purpose.\n\n-This IS includes security measures (e.g., authentication and access controls) to protect USG interests--not for your personal benefit or privacy.\n\n-Notwithstanding the above, using this IS does not constitute consent to PM, LE or CI investigative searching or monitoring of the content of privileged communications, or work product, related to personal representation or services by attorneys, psychotherapists, or clergy, and their assistants. Such communications and work product are private and confidential. See User Agreement for details."; DestinationPath = "/etc/issue"; ModuleName = "nx"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; ModuleVersion = "1.0"; ConfigurationName = "LinuxBaseLine"; }; @@ -121,7 +121,7 @@ ResourceID = "[nxFile][V-204449.a][medium][SRG-OS-000114-GPOS-00059]::[RHEL]Base Contents = ""; DestinationPath = "/etc/modprobe.d/usb-storage.conf"; ModuleName = "nx"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; ModuleVersion = "1.0"; ConfigurationName = "LinuxBaseLine"; }; @@ -131,7 +131,7 @@ ResourceID = "[nxFile][V-204449.b][medium][SRG-OS-000114-GPOS-00059]::[RHEL]Base Contents = ""; DestinationPath = "/etc/modprobe.d/blacklist.conf"; ModuleName = "nx"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; ModuleVersion = "1.0"; ConfigurationName = "LinuxBaseLine"; }; @@ -141,7 +141,7 @@ ResourceID = "[nxFile][V-204450.a][medium][SRG-OS-000378-GPOS-00163]::[RHEL]Base Contents = ""; DestinationPath = "/etc/modprobe.d/dccp.conf"; ModuleName = "nx"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; ModuleVersion = "1.0"; ConfigurationName = "LinuxBaseLine"; }; @@ -151,7 +151,7 @@ ResourceID = "[nxFile][V-204576][low][SRG-OS-000027-GPOS-00008]::[RHEL]Baseline" Contents = "* hard maxlogins 10"; DestinationPath = "/etc/security/limits.d/204576-powerstig.conf"; ModuleName = "nx"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; ModuleVersion = "1.0"; ConfigurationName = "LinuxBaseLine"; }; @@ -161,7 +161,7 @@ ResourceID = "[nxFile][V-204579.a][medium][SRG-OS-000163-GPOS-00072]::[RHEL]Base Contents = ""; DestinationPath = "/etc/profile.d/tmout.sh"; ModuleName = "nx"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; ModuleVersion = "1.0"; ConfigurationName = "LinuxBaseLine"; }; @@ -171,7 +171,7 @@ ResourceID = "[nxFile][V-204584][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseli Contents = "kernel.randomize_va_space = 2"; DestinationPath = "/etc/sysctl.d/204584-powerstig.conf"; ModuleName = "nx"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; ModuleVersion = "1.0"; ConfigurationName = "LinuxBaseLine"; }; @@ -181,7 +181,7 @@ ResourceID = "[nxFile][V-204609][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseli Contents = "net.ipv4.conf.all.accept_source_route = 0"; DestinationPath = "/etc/sysctl.d/204609-powerstig.conf"; ModuleName = "nx"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; ModuleVersion = "1.0"; ConfigurationName = "LinuxBaseLine"; }; @@ -191,7 +191,7 @@ ResourceID = "[nxFile][V-204610][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseli Contents = "net.ipv4.conf.all.rp_filter = 1"; DestinationPath = "/etc/sysctl.d/204610-powerstig.conf"; ModuleName = "nx"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; ModuleVersion = "1.0"; ConfigurationName = "LinuxBaseLine"; }; @@ -201,7 +201,7 @@ ResourceID = "[nxFile][V-204611][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseli Contents = "net.ipv4.conf.default.rp_filter = 1"; DestinationPath = "/etc/sysctl.d/204611-powerstig.conf"; ModuleName = "nx"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; ModuleVersion = "1.0"; ConfigurationName = "LinuxBaseLine"; }; @@ -211,7 +211,7 @@ ResourceID = "[nxFile][V-204612][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseli Contents = "net.ipv4.conf.default.accept_source_route = 0"; DestinationPath = "/etc/sysctl.d/204612-powerstig.conf"; ModuleName = "nx"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; ModuleVersion = "1.0"; ConfigurationName = "LinuxBaseLine"; }; @@ -221,7 +221,7 @@ ResourceID = "[nxFile][V-204613][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseli Contents = "net.ipv4.icmp_echo_ignore_broadcasts = 1"; DestinationPath = "/etc/sysctl.d/204613-powerstig.conf"; ModuleName = "nx"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; ModuleVersion = "1.0"; ConfigurationName = "LinuxBaseLine"; }; @@ -231,7 +231,7 @@ ResourceID = "[nxFile][V-204614][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseli Contents = "net.ipv4.conf.default.accept_redirects = 0"; DestinationPath = "/etc/sysctl.d/204614-powerstig.conf"; ModuleName = "nx"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; ModuleVersion = "1.0"; ConfigurationName = "LinuxBaseLine"; }; @@ -241,7 +241,7 @@ ResourceID = "[nxFile][V-204615][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseli Contents = "net.ipv4.conf.all.accept_redirects = 0"; DestinationPath = "/etc/sysctl.d/204615-powerstig.conf"; ModuleName = "nx"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; ModuleVersion = "1.0"; ConfigurationName = "LinuxBaseLine"; }; @@ -251,7 +251,7 @@ ResourceID = "[nxFile][V-204616][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseli Contents = "net.ipv4.conf.default.send_redirects = 0"; DestinationPath = "/etc/sysctl.d/204616-powerstig.conf"; ModuleName = "nx"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; ModuleVersion = "1.0"; ConfigurationName = "LinuxBaseLine"; }; @@ -261,7 +261,7 @@ ResourceID = "[nxFile][V-204617][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseli Contents = "net.ipv4.conf.all.send_redirects = 0"; DestinationPath = "/etc/sysctl.d/204617-powerstig.conf"; ModuleName = "nx"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; ModuleVersion = "1.0"; ConfigurationName = "LinuxBaseLine"; }; @@ -271,7 +271,7 @@ ResourceID = "[nxFile][V-204625][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseli Contents = "net.ipv4.ip_forward = 0"; DestinationPath = "/etc/sysctl.d/204625-powerstig.conf"; ModuleName = "nx"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; ModuleVersion = "1.0"; ConfigurationName = "LinuxBaseLine"; }; @@ -281,7 +281,7 @@ ResourceID = "[nxFile][V-204630][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseli Contents = "net.ipv6.conf.all.accept_source_route = 0"; DestinationPath = "/etc/sysctl.d/204630-powerstig.conf"; ModuleName = "nx"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; ModuleVersion = "1.0"; ConfigurationName = "LinuxBaseLine"; }; @@ -291,7 +291,7 @@ ResourceID = "[nxFile][V-237634.a][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Base Contents = "Defaults !targetpw"; DestinationPath = "/etc/sudoers.d/237634a-powerstig.conf"; ModuleName = "nx"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; ModuleVersion = "1.0"; ConfigurationName = "LinuxBaseLine"; }; @@ -301,7 +301,7 @@ ResourceID = "[nxFile][V-237634.b][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Base Contents = "Defaults !rootpw"; DestinationPath = "/etc/sudoers.d/237634b-powerstig.conf"; ModuleName = "nx"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; ModuleVersion = "1.0"; ConfigurationName = "LinuxBaseLine"; }; @@ -311,7 +311,7 @@ ResourceID = "[nxFile][V-237634.c][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Base Contents = "Defaults !runaspw"; DestinationPath = "/etc/sudoers.d/237634c-powerstig.conf"; ModuleName = "nx"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; ModuleVersion = "1.0"; ConfigurationName = "LinuxBaseLine"; }; @@ -321,17 +321,7 @@ ResourceID = "[nxFile][V-237635][medium][SRG-OS-000373-GPOS-00156]::[RHEL]Baseli Contents = "Defaults timestamp_timeout=0"; DestinationPath = "/etc/sudoers.d/237635-powerstig.conf"; ModuleName = "nx"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; - ModuleVersion = "1.0"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileResource as $MSFT_nxFileResource23ref -{ -ResourceID = "[nxFile][V-250314][medium][SRG-OS-000324-GPOS-00125]::[RHEL]Baseline"; - Contents = "%wheel ALL=(ALL) TYPE=sysadm_t ROLE=sysadm_r ALL"; - DestinationPath = "/etc/sudoers.d/250314-powerstig.conf"; - ModuleName = "nx"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; ModuleVersion = "1.0"; ConfigurationName = "LinuxBaseLine"; }; @@ -339,7 +329,7 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource1ref { ResourceID = "[nxFileLine][V-204405][medium][SRG-OS-000069-GPOS-00037]::[RHEL]Baseline"; ContainsLine = "password substack system-auth"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/pam.d/passwd"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -350,7 +340,7 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource2ref { ResourceID = "[nxFileLine][V-204407][medium][SRG-OS-000069-GPOS-00037]::[RHEL]Baseline"; ContainsLine = "ucredit = -1"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/security/pwquality.conf"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -361,7 +351,7 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource3ref { ResourceID = "[nxFileLine][V-204408][medium][SRG-OS-000070-GPOS-00038]::[RHEL]Baseline"; ContainsLine = "lcredit = -1"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/security/pwquality.conf"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -372,7 +362,7 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource4ref { ResourceID = "[nxFileLine][V-204409][medium][SRG-OS-000071-GPOS-00039]::[RHEL]Baseline"; ContainsLine = "dcredit = -1"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/security/pwquality.conf"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -383,7 +373,7 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource5ref { ResourceID = "[nxFileLine][V-204410][medium][SRG-OS-000266-GPOS-00101]::[RHEL]Baseline"; ContainsLine = "ocredit=-1"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/security/pwquality.conf"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -394,7 +384,7 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource6ref { ResourceID = "[nxFileLine][V-204411][medium][SRG-OS-000072-GPOS-00040]::[RHEL]Baseline"; ContainsLine = "difok = 8"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/security/pwquality.conf"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -405,7 +395,7 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource7ref { ResourceID = "[nxFileLine][V-204412][medium][SRG-OS-000072-GPOS-00040]::[RHEL]Baseline"; ContainsLine = "minclass = 4"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/security/pwquality.conf"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -416,7 +406,7 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource8ref { ResourceID = "[nxFileLine][V-204413][medium][SRG-OS-000072-GPOS-00040]::[RHEL]Baseline"; ContainsLine = "maxrepeat = 3"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/security/pwquality.conf"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -427,18 +417,18 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource9ref { ResourceID = "[nxFileLine][V-204414][medium][SRG-OS-000072-GPOS-00040]::[RHEL]Baseline"; ContainsLine = "maxclassrepeat = 4"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/security/pwquality.conf"; ModuleName = "nx"; ModuleVersion = "1.0"; - DoesNotContainPattern = "^#\\s*maxclassrepeat\\s*=.*|^\\s*maxclassrepeat\\s*=\\s*(?:\\d{2,}|[3-9])"; + DoesNotContainPattern = "^#\\s*maxclassrepeat\\s*=.*|^\\s*maxclassrepeat\\s*=\\s*(?:\\d{2,}|[1-3|5-9])"; ConfigurationName = "LinuxBaseLine"; }; instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource10ref { ResourceID = "[nxFileLine][V-204416][medium][SRG-OS-000073-GPOS-00041]::[RHEL]Baseline"; ContainsLine = "ENCRYPT_METHOD SHA512"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/login.defs"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -449,7 +439,7 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource11ref { ResourceID = "[nxFileLine][V-204418][medium][SRG-OS-000075-GPOS-00043]::[RHEL]Baseline"; ContainsLine = "PASS_MIN_DAYS 1"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/login.defs"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -460,7 +450,7 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource12ref { ResourceID = "[nxFileLine][V-204420][medium][SRG-OS-000076-GPOS-00044]::[RHEL]Baseline"; ContainsLine = "PASS_MAX_DAYS 60"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/login.defs"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -471,7 +461,7 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource13ref { ResourceID = "[nxFileLine][V-204423][medium][SRG-OS-000078-GPOS-00046]::[RHEL]Baseline"; ContainsLine = "minlen = 15"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/security/pwquality.conf"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -482,7 +472,7 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource14ref { ResourceID = "[nxFileLine][V-204425][high][SRG-OS-000106-GPOS-00053]::[RHEL]Baseline"; ContainsLine = "PermitEmptyPasswords no"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/ssh/sshd_config"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -492,19 +482,19 @@ ResourceID = "[nxFileLine][V-204425][high][SRG-OS-000106-GPOS-00053]::[RHEL]Base instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource15ref { ResourceID = "[nxFileLine][V-204426][medium][SRG-OS-000118-GPOS-00060]::[RHEL]Baseline"; - ContainsLine = "INACTIVE=0"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + ContainsLine = "INACTIVE=35"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/default/useradd"; ModuleName = "nx"; ModuleVersion = "1.0"; - DoesNotContainPattern = "^#\\s*INACTIVE.*$|^INACTIVE\\s*=\\s*(?!0\\b)[-]*\\w*$"; + DoesNotContainPattern = "^#\\s*INACTIVE\\s*=.*|^\\s*INACTIVE\\s*=\\s*(3[5-9]|[4-9]\\d+|\\d{3,})"; ConfigurationName = "LinuxBaseLine"; }; instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource16ref { ResourceID = "[nxFileLine][V-204431][medium][SRG-OS-000480-GPOS-00226]::[RHEL]Baseline"; ContainsLine = "FAIL_DELAY 4"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/login.defs"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -515,7 +505,7 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource17ref { ResourceID = "[nxFileLine][V-204434][medium][SRG-OS-000480-GPOS-00229]::[RHEL]Baseline"; ContainsLine = "PermitUserEnvironment no"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/ssh/sshd_config"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -526,7 +516,7 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource18ref { ResourceID = "[nxFileLine][V-204435][medium][SRG-OS-000480-GPOS-00229]::[RHEL]Baseline"; ContainsLine = "HostbasedAuthentication no"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/ssh/sshd_config"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -537,7 +527,7 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource19ref { ResourceID = "[nxFileLine][V-204447][high][SRG-OS-000366-GPOS-00153]::[RHEL]Baseline"; ContainsLine = "gpgcheck=1"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/yum.conf"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -548,7 +538,7 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource20ref { ResourceID = "[nxFileLine][V-204448][high][SRG-OS-000366-GPOS-00153]::[RHEL]Baseline"; ContainsLine = "localpkg_gpgcheck=1"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/yum.conf"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -559,7 +549,7 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource21ref { ResourceID = "[nxFileLine][V-204449.c][medium][SRG-OS-000114-GPOS-00059]::[RHEL]Baseline"; ContainsLine = "install usb-storage /bin/true"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/modprobe.d/usb-storage.conf"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -570,7 +560,7 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource22ref { ResourceID = "[nxFileLine][V-204449.d][medium][SRG-OS-000114-GPOS-00059]::[RHEL]Baseline"; ContainsLine = "blacklist usb-storage"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/modprobe.d/blacklist.conf"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -581,7 +571,7 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource23ref { ResourceID = "[nxFileLine][V-204450.b][medium][SRG-OS-000378-GPOS-00163]::[RHEL]Baseline"; ContainsLine = "install dccp /bin/true"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/modprobe.d/dccp.conf"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -592,7 +582,7 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource24ref { ResourceID = "[nxFileLine][V-204450.c][medium][SRG-OS-000378-GPOS-00163]::[RHEL]Baseline"; ContainsLine = "blacklist dccp"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/modprobe.d/blacklist.conf"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -603,7 +593,7 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource25ref { ResourceID = "[nxFileLine][V-204452][low][SRG-OS-000437-GPOS-00194]::[RHEL]Baseline"; ContainsLine = "clean_requirements_on_remove=1"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/yum.conf"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -614,7 +604,7 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource26ref { ResourceID = "[nxFileLine][V-204453][medium][SRG-OS-000445-GPOS-00199]::[RHEL]Baseline"; ContainsLine = "SELINUX=enforcing"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/selinux/config"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -625,7 +615,7 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource27ref { ResourceID = "[nxFileLine][V-204454][medium][SRG-OS-000445-GPOS-00199]::[RHEL]Baseline"; ContainsLine = "SELINUXTYPE=targeted"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/selinux/config"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -636,7 +626,7 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource28ref { ResourceID = "[nxFileLine][V-204457][medium][SRG-OS-000480-GPOS-00228]::[RHEL]Baseline"; ContainsLine = "UMASK 077"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/login.defs"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -647,7 +637,7 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource29ref { ResourceID = "[nxFileLine][V-204466][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; ContainsLine = "CREATE_HOME yes"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/login.defs"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -658,16 +648,16 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource30ref { ResourceID = "[nxFileLine][V-204504][medium][SRG-OS-000046-GPOS-00022]::[RHEL]Baseline"; ContainsLine = "-f 2"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "^#\\s*-f\\s+2|^\\s*-f\\s*1"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileResource as $MSFT_nxFileResource24ref +instance of MSFT_nxFileResource as $MSFT_nxFileResource23ref { -SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::29::9::nxFile"; +SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::29::9::nxFile"; ModuleName = "nx"; ModuleVersion = "1.0"; ResourceID = "[nxFile][V-204506.a][medium][SRG-OS-000342-GPOS-00133]::[RHEL]Baseline"; @@ -678,7 +668,7 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource31ref { ResourceID = "[nxFileLine][V-204506.a][medium][SRG-OS-000342-GPOS-00133]::[RHEL]Baseline"; ContainsLine = "active = yes"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audisp/plugins.d/au-remote.conf"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -689,7 +679,7 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource32ref { ResourceID = "[nxFileLine][V-204506.b][medium][SRG-OS-000342-GPOS-00133]::[RHEL]Baseline"; ContainsLine = "direction = out"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audisp/plugins.d/au-remote.conf"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -700,7 +690,7 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource33ref { ResourceID = "[nxFileLine][V-204506.c][medium][SRG-OS-000342-GPOS-00133]::[RHEL]Baseline"; ContainsLine = "path = /sbin/audisp-remote"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audisp/plugins.d/au-remote.conf"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -711,7 +701,7 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource34ref { ResourceID = "[nxFileLine][V-204506.d][medium][SRG-OS-000342-GPOS-00133]::[RHEL]Baseline"; ContainsLine = "type = always"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audisp/plugins.d/au-remote.conf"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -722,7 +712,7 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource35ref { ResourceID = "[nxFileLine][V-204507][medium][SRG-OS-000342-GPOS-00133]::[RHEL]Baseline"; ContainsLine = "overflow_action = syslog"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audisp/audispd.conf"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -733,16 +723,16 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource36ref { ResourceID = "[nxFileLine][V-204508][medium][SRG-OS-000342-GPOS-00133]::[RHEL]Baseline"; ContainsLine = "name_format = hostname"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audisp/audispd.conf"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "^#\\s*name_format.*$|^name_format\\s*=\\s*(?!hostname$)\\w*$"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileResource as $MSFT_nxFileResource25ref +instance of MSFT_nxFileResource as $MSFT_nxFileResource24ref { -SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::19::9::nxFile"; +SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::19::9::nxFile"; ModuleName = "nx"; ModuleVersion = "1.0"; ResourceID = "[nxFile][V-204510][medium][SRG-OS-000342-GPOS-00133]::[RHEL]Baseline"; @@ -753,7 +743,7 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource37ref { ResourceID = "[nxFileLine][V-204510][medium][SRG-OS-000342-GPOS-00133]::[RHEL]Baseline"; ContainsLine = "enable_krb5 = yes"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audisp/audisp-remote.conf"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -764,7 +754,7 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource38ref { ResourceID = "[nxFileLine][V-204511][medium][SRG-OS-000342-GPOS-00133]::[RHEL]Baseline"; ContainsLine = "disk_full_action = single"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audisp/audisp-remote.conf"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -775,7 +765,7 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource39ref { ResourceID = "[nxFileLine][V-204512][medium][SRG-OS-000342-GPOS-00133]::[RHEL]Baseline"; ContainsLine = "network_failure_action = syslog"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audisp/audisp-remote.conf"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -786,7 +776,7 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource40ref { ResourceID = "[nxFileLine][V-204514][medium][SRG-OS-000343-GPOS-00134]::[RHEL]Baseline"; ContainsLine = "space_left_action = email"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/auditd.conf"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -797,7 +787,7 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource41ref { ResourceID = "[nxFileLine][V-204515][medium][SRG-OS-000343-GPOS-00134]::[RHEL]Baseline"; ContainsLine = "action_mail_acct = root"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/auditd.conf"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -808,7 +798,7 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource42ref { ResourceID = "[nxFileLine][V-204516.a][medium][SRG-OS-000327-GPOS-00127]::[RHEL]Baseline"; ContainsLine = "-a always,exit -F arch=b32 -S execve -C uid!=euid -F euid=0 -k setuid"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -819,7 +809,7 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource43ref { ResourceID = "[nxFileLine][V-204516.b][medium][SRG-OS-000327-GPOS-00127]::[RHEL]Baseline"; ContainsLine = "-a always,exit -F arch=b64 -S execve -C uid!=euid -F euid=0 -k setuid"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -830,7 +820,7 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource44ref { ResourceID = "[nxFileLine][V-204516.c][medium][SRG-OS-000327-GPOS-00127]::[RHEL]Baseline"; ContainsLine = "-a always,exit -F arch=b32 -S execve -C gid!=egid -F egid=0 -k setgid"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -841,7 +831,7 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource45ref { ResourceID = "[nxFileLine][V-204516.d][medium][SRG-OS-000327-GPOS-00127]::[RHEL]Baseline"; ContainsLine = "-a always,exit -F arch=b64 -S execve -C gid!=egid -F egid=0 -k setgid"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -851,1318 +841,779 @@ ResourceID = "[nxFileLine][V-204516.d][medium][SRG-OS-000327-GPOS-00127]::[RHEL] instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource46ref { ResourceID = "[nxFileLine][V-204517.a][medium][SRG-OS-000064-GPOS-00033]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S chown -F auid>=1000 -F auid!=unset -k perm_mod"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + ContainsLine = "-a always,exit -F arch=b32 -S chown,fchown,fchownat,lchown -F auid>=1000 -F auid!=unset -k perm_mod"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*chown\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*perm_mod"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*chown,fchown,fchownat,lchown\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*perm_mod"; ConfigurationName = "LinuxBaseLine"; }; instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource47ref { ResourceID = "[nxFileLine][V-204517.b][medium][SRG-OS-000064-GPOS-00033]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S chown -F auid>=1000 -F auid!=unset -k perm_mod"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + ContainsLine = "-a always,exit -F arch=b64 -S chown,fchown,fchownat,lchown -F auid>=1000 -F auid!=unset -k perm_mod"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*chown\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*perm_mod"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*chown,fchown,fchownat,lchown\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*perm_mod"; ConfigurationName = "LinuxBaseLine"; }; instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource48ref { -ResourceID = "[nxFileLine][V-204518.a][medium][SRG-OS-000064-GPOS-00033]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S fchown -F auid>=1000 -F auid!=unset -k perm_mod"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; +ResourceID = "[nxFileLine][V-204521.a][medium][SRG-OS-000458-GPOS-00203]::[RHEL]Baseline"; + ContainsLine = "-a always,exit -F arch=b32 -S chmod,fchmod,fchmodat -F auid>=1000 -F auid!=unset -k perm_mod"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*fchown\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*perm_mod"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*chmod,fchmod,fchmodat\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*perm_mod"; ConfigurationName = "LinuxBaseLine"; }; instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource49ref { -ResourceID = "[nxFileLine][V-204518.b][medium][SRG-OS-000064-GPOS-00033]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S fchown -F auid>=1000 -F auid!=unset -k perm_mod"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; +ResourceID = "[nxFileLine][V-204521.b][medium][SRG-OS-000458-GPOS-00203]::[RHEL]Baseline"; + ContainsLine = "-a always,exit -F arch=b64 -S chmod,fchmod,fchmodat -F auid>=1000 -F auid!=unset -k perm_mod"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*fchown\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*perm_mod"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*chmod,fchmod,fchmodat\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*perm_mod"; ConfigurationName = "LinuxBaseLine"; }; instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource50ref { -ResourceID = "[nxFileLine][V-204519.a][medium][SRG-OS-000064-GPOS-00033]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S lchown -F auid>=1000 -F auid!=unset -k perm_mod"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; +ResourceID = "[nxFileLine][V-204524.a][medium][SRG-OS-000458-GPOS-00203]::[RHEL]Baseline"; + ContainsLine = "-a always,exit -F arch=b32 -S setxattr,fsetxattr,lsetxattr,removexattr,fremovexattr,lremovexattr -F auid>=1000 -F auid!=unset -k perm_mod"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*lchown\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*perm_mod"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*setxattr,fsetxattr,lsetxattr,removexattr,fremovexattr,lremovexattr\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*perm_mod"; ConfigurationName = "LinuxBaseLine"; }; instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource51ref { -ResourceID = "[nxFileLine][V-204519.b][medium][SRG-OS-000064-GPOS-00033]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S lchown -F auid>=1000 -F auid!=unset -k perm_mod"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; +ResourceID = "[nxFileLine][V-204524.b][medium][SRG-OS-000458-GPOS-00203]::[RHEL]Baseline"; + ContainsLine = "-a always,exit -F arch=b64 -S setxattr,fsetxattr,lsetxattr,removexattr,fremovexattr,lremovexattr -F auid>=1000 -F auid!=unset -k perm_mod"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*lchown\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*perm_mod"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*setxattr,fsetxattr,lsetxattr,removexattr,fremovexattr,lremovexattr\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*perm_mod"; ConfigurationName = "LinuxBaseLine"; }; instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource52ref { -ResourceID = "[nxFileLine][V-204520.a][medium][SRG-OS-000064-GPOS-00033]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S fchownat -F auid>=1000 -F auid!=unset -k perm_mod"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; +ResourceID = "[nxFileLine][V-204531.a][medium][SRG-OS-000064-GPOS-00033]::[RHEL]Baseline"; + ContainsLine = "-a always,exit -F arch=b32 -S creat,open,openat,open_by_handle_at,truncate,ftruncate -F exit=-EPERM -F auid>=1000 -F auid!=unset -k access"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*fchownat\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*perm_mod"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*creat,open,openat,open_by_handle_at,truncate,ftruncate\\s*-F\\s*exit\\s*=\\s*-EPERM\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*access"; ConfigurationName = "LinuxBaseLine"; }; instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource53ref { -ResourceID = "[nxFileLine][V-204520.b][medium][SRG-OS-000064-GPOS-00033]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S fchownat -F auid>=1000 -F auid!=unset -k perm_mod"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; +ResourceID = "[nxFileLine][V-204531.b][medium][SRG-OS-000064-GPOS-00033]::[RHEL]Baseline"; + ContainsLine = "-a always,exit -F arch=b32 -S creat,open,openat,open_by_handle_at,truncate,ftruncate -F exit=-EACCES -F auid>=1000 -F auid!=unset -k access"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*fchownat\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*perm_mod"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*creat,open,openat,open_by_handle_at,truncate,ftruncate\\s*-F\\s*exit\\s*=\\s*-EACCES\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*access"; ConfigurationName = "LinuxBaseLine"; }; instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource54ref { -ResourceID = "[nxFileLine][V-204521.a][medium][SRG-OS-000458-GPOS-00203]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S chmod -F auid>=1000 -F auid!=unset -k perm_mod"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; +ResourceID = "[nxFileLine][V-204531.c][medium][SRG-OS-000064-GPOS-00033]::[RHEL]Baseline"; + ContainsLine = "-a always,exit -F arch=b64 -S creat,open,openat,open_by_handle_at,truncate,ftruncate -F exit=-EPERM -F auid>=1000 -F auid!=unset -k access"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*chmod\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*perm_mod"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*creat,open,openat,open_by_handle_at,truncate,ftruncate\\s*-F\\s*exit\\s*=\\s*-EPERM\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*access"; ConfigurationName = "LinuxBaseLine"; }; instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource55ref { -ResourceID = "[nxFileLine][V-204521.b][medium][SRG-OS-000458-GPOS-00203]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S chmod -F auid>=1000 -F auid!=unset -k perm_mod"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; +ResourceID = "[nxFileLine][V-204531.d][medium][SRG-OS-000064-GPOS-00033]::[RHEL]Baseline"; + ContainsLine = "-a always,exit -F arch=b64 -S creat,open,openat,open_by_handle_at,truncate,ftruncate -F exit=-EACCES -F auid>=1000 -F auid!=unset -k access"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*chmod\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*perm_mod"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*creat,open,openat,open_by_handle_at,truncate,ftruncate\\s*-F\\s*exit\\s*=\\s*-EACCES\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*access"; ConfigurationName = "LinuxBaseLine"; }; instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource56ref { -ResourceID = "[nxFileLine][V-204522.a][medium][SRG-OS-000458-GPOS-00203]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S fchmod -F auid>=1000 -F auid!=unset -k perm_mod"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*fchmod\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*perm_mod"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource57ref -{ -ResourceID = "[nxFileLine][V-204522.b][medium][SRG-OS-000458-GPOS-00203]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S fchmod -F auid>=1000 -F auid!=unset -k perm_mod"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*fchmod\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*perm_mod"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource58ref -{ -ResourceID = "[nxFileLine][V-204523.a][medium][SRG-OS-000458-GPOS-00203]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S fchmodat -F auid>=1000 -F auid!=unset -k perm_mod"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*fchmodat\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*perm_mod"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource59ref -{ -ResourceID = "[nxFileLine][V-204523.b][medium][SRG-OS-000458-GPOS-00203]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S fchmodat -F auid>=1000 -F auid!=unset -k perm_mod"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*fchmodat\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*perm_mod"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource60ref -{ -ResourceID = "[nxFileLine][V-204524.a][medium][SRG-OS-000458-GPOS-00203]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S setxattr -F auid>=1000 -F auid!=unset -k perm_mod"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*setxattr\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*perm_mod"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource61ref -{ -ResourceID = "[nxFileLine][V-204524.b][medium][SRG-OS-000458-GPOS-00203]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S setxattr -F auid>=1000 -F auid!=unset -k perm_mod"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*setxattr\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*perm_mod"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource62ref -{ -ResourceID = "[nxFileLine][V-204525.a][medium][SRG-OS-000458-GPOS-00203]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S fsetxattr -F auid>=1000 -F auid!=unset -k perm_mod"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*fsetxattr\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*perm_mod"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource63ref -{ -ResourceID = "[nxFileLine][V-204525.b][medium][SRG-OS-000458-GPOS-00203]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S fsetxattr -F auid>=1000 -F auid!=unset -k perm_mod"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*fsetxattr\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*perm_mod"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource64ref -{ -ResourceID = "[nxFileLine][V-204526.a][medium][SRG-OS-000458-GPOS-00203]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S lsetxattr -F auid>=1000 -F auid!=unset -k perm_mod"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*lsetxattr\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*perm_mod"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource65ref -{ -ResourceID = "[nxFileLine][V-204526.b][medium][SRG-OS-000458-GPOS-00203]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S lsetxattr -F auid>=1000 -F auid!=unset -k perm_mod"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*lsetxattr\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*perm_mod"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource66ref -{ -ResourceID = "[nxFileLine][V-204527.a][medium][SRG-OS-000458-GPOS-00203]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S removexattr -F auid>=1000 -F auid!=unset -k perm_mod"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*removexattr\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*perm_mod"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource67ref -{ -ResourceID = "[nxFileLine][V-204527.b][medium][SRG-OS-000458-GPOS-00203]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S removexattr -F auid>=1000 -F auid!=unset -k perm_mod"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*removexattr\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*perm_mod"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource68ref -{ -ResourceID = "[nxFileLine][V-204528.a][medium][SRG-OS-000458-GPOS-00203]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S fremovexattr -F auid>=1000 -F auid!=unset -k perm_mod"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*fremovexattr\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*perm_mod"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource69ref -{ -ResourceID = "[nxFileLine][V-204528.b][medium][SRG-OS-000458-GPOS-00203]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S fremovexattr -F auid>=1000 -F auid!=unset -k perm_mod"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*fremovexattr\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*perm_mod"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource70ref -{ -ResourceID = "[nxFileLine][V-204529.a][medium][SRG-OS-000458-GPOS-00203]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S lremovexattr -F auid>=1000 -F auid!=unset -k perm_mod"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*lremovexattr\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*perm_mod"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource71ref -{ -ResourceID = "[nxFileLine][V-204529.b][medium][SRG-OS-000458-GPOS-00203]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S lremovexattr -F auid>=1000 -F auid!=unset -k perm_mod"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*lremovexattr\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*perm_mod"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource72ref -{ -ResourceID = "[nxFileLine][V-204530.a][medium][SRG-OS-000064-GPOS-00033]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S creat F exit=-EPERM -F auid>=1000 -F auid!=unset -k access"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*creat\\s*F\\s*exit\\s*=\\s*-EPERM\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*access"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource73ref -{ -ResourceID = "[nxFileLine][V-204530.b][medium][SRG-OS-000064-GPOS-00033]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S creat -F exit=-EACCES -F auid>=1000 -F auid!=unset -k access"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*creat\\s*-F\\s*exit\\s*=\\s*-EACCES\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*access"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource74ref -{ -ResourceID = "[nxFileLine][V-204530.c][medium][SRG-OS-000064-GPOS-00033]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S creat -F exit=-EPERM -F auid>=1000 -F auid!=unset -k access"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*creat\\s*-F\\s*exit\\s*=\\s*-EPERM\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*access"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource75ref -{ -ResourceID = "[nxFileLine][V-204530.d][medium][SRG-OS-000064-GPOS-00033]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S creat -F exit=-EACCES -F auid>=1000 -F auid!=unset -k access"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*creat\\s*-F\\s*exit\\s*=\\s*-EACCES\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*access"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource76ref -{ -ResourceID = "[nxFileLine][V-204531.a][medium][SRG-OS-000064-GPOS-00033]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S open -F exit=-EPERM -F auid>=1000 -F auid!=unset -k access"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*open\\s*-F\\s*exit\\s*=\\s*-EPERM\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*access"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource77ref -{ -ResourceID = "[nxFileLine][V-204531.b][medium][SRG-OS-000064-GPOS-00033]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S open -F exit=-EACCES -F auid>=1000 -F auid!=unset -k access"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*open\\s*-F\\s*exit\\s*=\\s*-EACCES\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*access"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource78ref -{ -ResourceID = "[nxFileLine][V-204531.c][medium][SRG-OS-000064-GPOS-00033]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S open -F exit=-EPERM -F auid>=1000 -F auid!=unset -k access"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*open\\s*-F\\s*exit\\s*=\\s*-EPERM\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*access"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource79ref -{ -ResourceID = "[nxFileLine][V-204531.d][medium][SRG-OS-000064-GPOS-00033]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S open -F exit=-EACCES -F auid>=1000 -F auid!=unset -k access"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*open\\s*-F\\s*exit\\s*=\\s*-EACCES\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*access"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource80ref -{ -ResourceID = "[nxFileLine][V-204532.a][medium][SRG-OS-000064-GPOS-00033]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S openat -F exit=-EPERM -F auid>=1000 -F auid!=unset -k access"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*openat\\s*-F\\s*exit\\s*=\\s*-EPERM\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*access"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource81ref -{ -ResourceID = "[nxFileLine][V-204532.b][medium][SRG-OS-000064-GPOS-00033]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S openat -F exit=-EACCES -F auid>=1000 -F auid!=unset -k access"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*openat\\s*-F\\s*exit\\s*=\\s*-EACCES\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*access"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource82ref -{ -ResourceID = "[nxFileLine][V-204532.c][medium][SRG-OS-000064-GPOS-00033]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S openat -F exit=-EPERM -F auid>=1000 -F auid!=unset -k access"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*openat\\s*-F\\s*exit\\s*=\\s*-EPERM\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*access"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource83ref -{ -ResourceID = "[nxFileLine][V-204532.d][medium][SRG-OS-000064-GPOS-00033]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S openat -F exit=-EACCES -F auid>=1000 -F auid!=unset -k access"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*openat\\s*-F\\s*exit\\s*=\\s*-EACCES\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*access"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource84ref -{ -ResourceID = "[nxFileLine][V-204533.a][medium][SRG-OS-000064-GPOS-00033]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S open_by_handle_at -F exit=-EPERM -F auid>=1000 -F auid!=unset -k access"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*open_by_handle_at\\s*-F\\s*exit\\s*=\\s*-EPERM\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*access"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource85ref -{ -ResourceID = "[nxFileLine][V-204533.b][medium][SRG-OS-000064-GPOS-00033]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S open_by_handle_at -F exit=-EACCES -F auid>=1000 -F auid!=unset -k access"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*open_by_handle_at\\s*-F\\s*exit\\s*=\\s*-EACCES\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*access"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource86ref -{ -ResourceID = "[nxFileLine][V-204533.c][medium][SRG-OS-000064-GPOS-00033]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S open_by_handle_at -F exit=-EPERM -F auid>=1000 -F auid!=unset -k access"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*open_by_handle_at\\s*-F\\s*exit\\s*=\\s*-EPERM\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*access"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource87ref -{ -ResourceID = "[nxFileLine][V-204533.d][medium][SRG-OS-000064-GPOS-00033]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S open_by_handle_at -F exit=-EACCES -F auid>=1000 -F auid!=unset -k access"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*open_by_handle_at\\s*-F\\s*exit\\s*=\\s*-EACCES\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*access"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource88ref -{ -ResourceID = "[nxFileLine][V-204534.a][medium][SRG-OS-000064-GPOS-00033]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S truncate -F exit=-EPERM -F auid>=1000 -F auid!=unset -k access"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*truncate\\s*-F\\s*exit\\s*=\\s*-EPERM\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*access"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource89ref -{ -ResourceID = "[nxFileLine][V-204534.b][medium][SRG-OS-000064-GPOS-00033]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S truncate -F exit=-EACCES -F auid>=1000 -F auid!=unset -k access"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*truncate\\s*-F\\s*exit\\s*=\\s*-EACCES\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*access"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource90ref -{ -ResourceID = "[nxFileLine][V-204534.c][medium][SRG-OS-000064-GPOS-00033]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S truncate -F exit=-EPERM -F auid>=1000 -F auid!=unset -k access"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*truncate\\s*-F\\s*exit\\s*=\\s*-EPERM\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*access"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource91ref -{ -ResourceID = "[nxFileLine][V-204534.d][medium][SRG-OS-000064-GPOS-00033]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S truncate -F exit=-EACCES -F auid>=1000 -F auid!=unset -k access"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*truncate\\s*-F\\s*exit\\s*=\\s*-EACCES\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*access"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource92ref -{ -ResourceID = "[nxFileLine][V-204535.a][medium][SRG-OS-000064-GPOS-00033]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S ftruncate -F exit=-EPERM -F auid>=1000 -F auid!=unset -k access"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*ftruncate\\s*-F\\s*exit\\s*=\\s*-EPERM\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*access"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource93ref -{ -ResourceID = "[nxFileLine][V-204535.b][medium][SRG-OS-000064-GPOS-00033]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S ftruncate -F exit=-EACCES -F auid>=1000 -F auid!=unset -k access"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*ftruncate\\s*-F\\s*exit\\s*=\\s*-EACCES\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*access"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource94ref -{ -ResourceID = "[nxFileLine][V-204535.c][medium][SRG-OS-000064-GPOS-00033]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S ftruncate -F exit=-EPERM -F auid>=1000 -F auid!=unset -k access"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*ftruncate\\s*-F\\s*exit\\s*=\\s*-EPERM\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*access"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource95ref -{ -ResourceID = "[nxFileLine][V-204535.d][medium][SRG-OS-000064-GPOS-00033]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S ftruncate -F exit=-EACCES -F auid>=1000 -F auid!=unset -k access"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*ftruncate\\s*-F\\s*exit\\s*=\\s*-EACCES\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*access"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource96ref -{ ResourceID = "[nxFileLine][V-204536][medium][SRG-OS-000392-GPOS-00172]::[RHEL]Baseline"; ContainsLine = "-a always,exit -F path=/usr/sbin/semanage -F auid>=1000 -F auid!=unset -k privileged-priv_change"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/sbin/semanage\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-priv_change"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource97ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource57ref { ResourceID = "[nxFileLine][V-204537][medium][SRG-OS-000392-GPOS-00172]::[RHEL]Baseline"; ContainsLine = "-a always,exit -F path=/usr/sbin/setsebool -F auid>=1000 -F auid!=unset -k privileged-priv_change"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/sbin/setsebool\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-priv_change"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource98ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource58ref { ResourceID = "[nxFileLine][V-204538][medium][SRG-OS-000392-GPOS-00172]::[RHEL]Baseline"; ContainsLine = "-a always,exit -F path=/usr/bin/chcon -F auid>=1000 -F auid!=unset -k privileged-priv_change"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/bin/chcon\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-priv_change"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource99ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource59ref { ResourceID = "[nxFileLine][V-204539][medium][SRG-OS-000392-GPOS-00172]::[RHEL]Baseline"; ContainsLine = "-a always,exit -F path=/usr/sbin/setfiles -F auid>=1000 -F auid!=unset -k privileged-priv_change"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/sbin/setfiles\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-priv_change"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource100ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource60ref { ResourceID = "[nxFileLine][V-204540][medium][SRG-OS-000392-GPOS-00172]::[RHEL]Baseline"; ContainsLine = "-w /var/run/faillock -p wa -k logins"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "#\\s*-w\\s*/var/run/faillock\\s*-p\\s*wa\\s*-k\\s*logins"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource101ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource61ref { ResourceID = "[nxFileLine][V-204541][medium][SRG-OS-000392-GPOS-00172]::[RHEL]Baseline"; ContainsLine = "-w /var/log/lastlog -p wa -k logins"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "#\\s*-w\\s*/var/log/lastlog\\s*-p\\s*wa\\s*-k\\s*logins"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource102ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource62ref { ResourceID = "[nxFileLine][V-204542][medium][SRG-OS-000042-GPOS-00020]::[RHEL]Baseline"; ContainsLine = "-a always,exit -F path=/usr/bin/passwd -F auid>=1000 -F auid!=unset -k privileged-passwd"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/bin/passwd\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-passwd"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource103ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource63ref { ResourceID = "[nxFileLine][V-204543][medium][SRG-OS-000042-GPOS-00020]::[RHEL]Baseline"; ContainsLine = "-a always,exit -F path=/usr/sbin/unix_chkpwd -F auid>=1000 -F auid!=unset -k privileged-passwd"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/sbin/unix_chkpwd\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-passwd"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource104ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource64ref { ResourceID = "[nxFileLine][V-204544][medium][SRG-OS-000042-GPOS-00020]::[RHEL]Baseline"; ContainsLine = "-a always,exit -F path=/usr/bin/gpasswd -F auid>=1000 -F auid!=unset -k privileged-passwd"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/bin/gpasswd\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-passwd"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource105ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource65ref { ResourceID = "[nxFileLine][V-204545][medium][SRG-OS-000042-GPOS-00020]::[RHEL]Baseline"; ContainsLine = "-a always,exit -F path=/usr/bin/chage -F auid>=1000 -F auid!=unset -k privileged-passwd"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/bin/chage\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-passwd"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource106ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource66ref { ResourceID = "[nxFileLine][V-204546][medium][SRG-OS-000042-GPOS-00020]::[RHEL]Baseline"; ContainsLine = "-a always,exit -F path=/usr/sbin/userhelper -F auid>=1000 -F auid!=unset -k privileged-passwd"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/sbin/userhelper\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-passwd"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource107ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource67ref { ResourceID = "[nxFileLine][V-204547][medium][SRG-OS-000037-GPOS-00015]::[RHEL]Baseline"; ContainsLine = "-a always,exit -F path=/usr/bin/su -F auid>=1000 -F auid!=unset -k privileged-priv_change"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/bin/su\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-priv_change"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource108ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource68ref { ResourceID = "[nxFileLine][V-204548][medium][SRG-OS-000037-GPOS-00015]::[RHEL]Baseline"; ContainsLine = "-a always,exit -F path=/usr/bin/sudo -F auid>=1000 -F auid!=unset -k privileged-priv_change"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/bin/sudo\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-priv_change"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource109ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource69ref { ResourceID = "[nxFileLine][V-204549.a][medium][SRG-OS-000037-GPOS-00015]::[RHEL]Baseline"; ContainsLine = "-w /etc/sudoers -p wa -k privileged-actions"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "#\\s*-w /etc/sudoers -p wa -k privileged-actions"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource110ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource70ref { ResourceID = "[nxFileLine][V-204549.b][medium][SRG-OS-000037-GPOS-00015]::[RHEL]Baseline"; ContainsLine = "-w /etc/sudoers.d/ -p wa -k privileged-actions"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "#\\s*-w /etc/sudoers.d/ -p wa -k privileged-actions"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource111ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource71ref { ResourceID = "[nxFileLine][V-204550][medium][SRG-OS-000037-GPOS-00015]::[RHEL]Baseline"; ContainsLine = "-a always,exit -F path=/usr/bin/newgrp -F auid>=1000 -F auid!=unset -k privileged-priv_change"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/bin/newgrp\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-priv_change"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource112ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource72ref { ResourceID = "[nxFileLine][V-204551][medium][SRG-OS-000037-GPOS-00015]::[RHEL]Baseline"; ContainsLine = "-a always,exit -F path=/usr/bin/chsh -F auid>=1000 -F auid!=unset -k privileged-priv_change"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/bin/chsh\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-priv_change"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource113ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource73ref { ResourceID = "[nxFileLine][V-204552.a][medium][SRG-OS-000042-GPOS-00020]::[RHEL]Baseline"; ContainsLine = "-a always,exit -F arch=b32 -S mount -F auid>=1000 -F auid!=unset -k privileged-mount"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*mount\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-mount"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource114ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource74ref { ResourceID = "[nxFileLine][V-204552.b][medium][SRG-OS-000042-GPOS-00020]::[RHEL]Baseline"; ContainsLine = "-a always,exit -F arch=b64 -S mount -F auid>=1000 -F auid!=unset -k privileged-mount"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*mount\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-mount"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource115ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource75ref { ResourceID = "[nxFileLine][V-204552.c][medium][SRG-OS-000042-GPOS-00020]::[RHEL]Baseline"; ContainsLine = "-a always,exit -F path=/usr/bin/mount -F auid>=1000 -F auid!=unset -k privileged-mount"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/bin/mount\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-mount"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource116ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource76ref { ResourceID = "[nxFileLine][V-204553][medium][SRG-OS-000042-GPOS-00020]::[RHEL]Baseline"; ContainsLine = "-a always,exit -F path=/usr/bin/umount -F auid>=1000 -F auid!=unset -k privileged-mount"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/bin/umount\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-mount"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource117ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource77ref { ResourceID = "[nxFileLine][V-204554][medium][SRG-OS-000042-GPOS-00020]::[RHEL]Baseline"; ContainsLine = "-a always,exit -F path=/usr/sbin/postdrop -F auid>=1000 -F auid!=unset -k privileged-postfix"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/sbin/postdrop\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-postfix"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource118ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource78ref { ResourceID = "[nxFileLine][V-204555][medium][SRG-OS-000042-GPOS-00020]::[RHEL]Baseline"; ContainsLine = "-a always,exit -F path=/usr/sbin/postqueue -F auid>=1000 -F auid!=unset -k privileged-postfix"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/sbin/postqueue\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-postfix"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource119ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource79ref { ResourceID = "[nxFileLine][V-204556][medium][SRG-OS-000042-GPOS-00020]::[RHEL]Baseline"; ContainsLine = "-a always,exit -F path=/usr/libexec/openssh/ssh-keysign -F auid>=1000 -F auid!=unset -k privileged-ssh"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/libexec/openssh/ssh-keysign\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-ssh"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource120ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource80ref { ResourceID = "[nxFileLine][V-204557][medium][SRG-OS-000042-GPOS-00020]::[RHEL]Baseline"; ContainsLine = "-a always,exit -F path=/usr/bin/crontab -F auid>=1000 -F auid!=unset -k privileged-cron"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/bin/crontab\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-cron"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource121ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource81ref { ResourceID = "[nxFileLine][V-204558][medium][SRG-OS-000471-GPOS-00215]::[RHEL]Baseline"; ContainsLine = "-a always,exit -F path=/usr/sbin/pam_timestamp_check -F auid>=1000 -F auid!=unset -k privileged-pam"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/sbin/pam_timestamp_check\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-pam"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource122ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource82ref { ResourceID = "[nxFileLine][V-204559.a][medium][SRG-OS-000471-GPOS-00216]::[RHEL]Baseline"; ContainsLine = "-a always,exit -F arch=b32 -S create_module -k module-change"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*create_module\\s*-k\\s*module-change"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource123ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource83ref { ResourceID = "[nxFileLine][V-204559.b][medium][SRG-OS-000471-GPOS-00216]::[RHEL]Baseline"; ContainsLine = "-a always,exit -F arch=b64 -S create_module -k module-change"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*create_module\\s*-k\\s*module-change"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource124ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource84ref { ResourceID = "[nxFileLine][V-204560.a][medium][SRG-OS-000471-GPOS-00216]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S init_module -k module-change"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + ContainsLine = "-a always,exit -F arch=b32 -S init_module,finit_module -k modulechange"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*init_module\\s*-k\\s*module-change"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*init_module,finit_module\\s*-k\\s*modulechange"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource125ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource85ref { ResourceID = "[nxFileLine][V-204560.b][medium][SRG-OS-000471-GPOS-00216]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S init_module -k module-change"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + ContainsLine = "-a always,exit -F arch=b64 -S init_module,finit_module -k modulechange"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*init_module\\s*-k\\s*module-change"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*init_module,finit_module\\s*-k\\s*modulechange"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource126ref -{ -ResourceID = "[nxFileLine][V-204561.a][medium][SRG-OS-000471-GPOS-00216]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S finit_module -k module-change"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*finit_module\\s*-k\\s*module-change"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource127ref -{ -ResourceID = "[nxFileLine][V-204561.b][medium][SRG-OS-000471-GPOS-00216]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S finit_module -k module-change"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*finit_module\\s*-k\\s*module-change"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource128ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource86ref { ResourceID = "[nxFileLine][V-204562.a][medium][SRG-OS-000471-GPOS-00216]::[RHEL]Baseline"; ContainsLine = "-a always,exit -F arch=b32 -S delete_module -k module-change"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*delete_module\\s*-k\\s*module-change"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource129ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource87ref { ResourceID = "[nxFileLine][V-204562.b][medium][SRG-OS-000471-GPOS-00216]::[RHEL]Baseline"; ContainsLine = "-a always,exit -F arch=b64 -S delete_module -k module-change"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*delete_module\\s*-k\\s*module-change"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource130ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource88ref { ResourceID = "[nxFileLine][V-204563][medium][SRG-OS-000471-GPOS-00216]::[RHEL]Baseline"; ContainsLine = "-w /usr/bin/kmod -p x -F auid!=unset -k module-change"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "#\\s*-w\\s*/usr/bin/kmod\\s*-p\\s*x\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*module-change"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource131ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource89ref { ResourceID = "[nxFileLine][V-204564][medium][SRG-OS-000004-GPOS-00004]::[RHEL]Baseline"; ContainsLine = "-w /etc/passwd -p wa -k identity"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "#\\s*-w\\s*/etc/passwd\\s*-p\\s*wa\\s*-k\\s*identity"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource132ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource90ref { ResourceID = "[nxFileLine][V-204565][medium][SRG-OS-000004-GPOS-00004]::[RHEL]Baseline"; ContainsLine = "-w /etc/group -p wa -k identity"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "#\\s*-w\\s*/etc/group\\s*-p\\s*wa\\s*-k\\s*identity"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource133ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource91ref { ResourceID = "[nxFileLine][V-204566][medium][SRG-OS-000004-GPOS-00004]::[RHEL]Baseline"; ContainsLine = "-w /etc/gshadow -p wa -k identity"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "#\\s*-w\\s*/etc/gshadow\\s*-p\\s*wa\\s*-k\\s*identity"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource134ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource92ref { ResourceID = "[nxFileLine][V-204567][medium][SRG-OS-000004-GPOS-00004]::[RHEL]Baseline"; ContainsLine = "-w /etc/shadow -p wa -k identity"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "#\\s*-w\\s*/etc/shadow\\s*-p\\s*wa\\s*-k\\s*identity"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource135ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource93ref { ResourceID = "[nxFileLine][V-204568][medium][SRG-OS-000004-GPOS-00004]::[RHEL]Baseline"; ContainsLine = "-w /etc/security/opasswd -p wa -k identity"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "#\\s*-w\\s*/etc/security/opasswd\\s*-p\\s*wa\\s*-k\\s*identity"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource136ref -{ -ResourceID = "[nxFileLine][V-204569.a][medium][SRG-OS-000466-GPOS-00210]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S rename -F auid>=1000 -F auid!=unset -k delete"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*rename\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*delete"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource137ref -{ -ResourceID = "[nxFileLine][V-204569.b][medium][SRG-OS-000466-GPOS-00210]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S rename -F auid>=1000 -F auid!=unset -k delete"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*rename\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*delete"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource138ref -{ -ResourceID = "[nxFileLine][V-204570.a][medium][SRG-OS-000466-GPOS-00210]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S renameat -F auid>=1000 -F auid!=unset -k delete"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*renameat\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*delete"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource139ref -{ -ResourceID = "[nxFileLine][V-204570.b][medium][SRG-OS-000466-GPOS-00210]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S renameat -F auid>=1000 -F auid!=unset -k delete"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*renameat\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*delete"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource140ref -{ -ResourceID = "[nxFileLine][V-204571.a][medium][SRG-OS-000466-GPOS-00210]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S rmdir -F auid>=1000 -F auid!=unset -k delete"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*rmdir\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*delete"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource141ref -{ -ResourceID = "[nxFileLine][V-204571.b][medium][SRG-OS-000466-GPOS-00210]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S rmdir -F auid>=1000 -F auid!=unset -k delete"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*rmdir\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*delete"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource142ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource94ref { ResourceID = "[nxFileLine][V-204572.a][medium][SRG-OS-000466-GPOS-00210]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S unlink -F auid>=1000 -F auid!=unset -k delete"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + ContainsLine = "-a always,exit -F arch=b32 -S unlink,unlinkat,rename,renameat,rmdir -F auid>=1000 -F auid!=unset -k delete"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*unlink\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*delete"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*unlink,unlinkat,rename,renameat,rmdir\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*delete"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource143ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource95ref { ResourceID = "[nxFileLine][V-204572.b][medium][SRG-OS-000466-GPOS-00210]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S unlink -F auid>=1000 -F auid!=unset -k delete"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + ContainsLine = "-a always,exit -F arch=b64 -S unlink,unlinkat,rename,renameat,rmdir -F auid>=1000 -F auid!=unset -k delete"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*unlink\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*delete"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*unlink,unlinkat,rename,renameat,rmdir\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*delete"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource144ref -{ -ResourceID = "[nxFileLine][V-204573.a][medium][SRG-OS-000466-GPOS-00210]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S unlinkat -F auid>=1000 -F auid!=unset -k delete"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*unlinkat\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*delete"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource145ref -{ -ResourceID = "[nxFileLine][V-204573.b][medium][SRG-OS-000466-GPOS-00210]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S unlinkat -F auid>=1000 -F auid!=unset -k delete"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*unlinkat\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*delete"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource146ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource96ref { ResourceID = "[nxFileLine][V-204578][medium][SRG-OS-000033-GPOS-00014]::[RHEL]Baseline"; ContainsLine = "Ciphers aes256-ctr,aes192-ctr,aes128-ctr"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/ssh/sshd_config"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "^#\\s*Ciphers.*|^\\s*Ciphers\\s*aes128-ctr.*|^\\s*Ciphers\\s*aes192-ctr.*"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource147ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource97ref { ResourceID = "[nxFileLine][V-204579.b][medium][SRG-OS-000163-GPOS-00072]::[RHEL]Baseline"; ContainsLine = "declare -xr TMOUT=900"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/profile.d/tmout.sh"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "^\\s*TMOUT\\s*=\\s*[0-8]?[0-9]?[0-9]?$|^#\\s*TMOUT.*"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource148ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource98ref { ResourceID = "[nxFileLine][V-204580][medium][SRG-OS-000023-GPOS-00006]::[RHEL]Baseline"; ContainsLine = "banner /etc/issue"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/ssh/sshd_config"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "#\\s*banner\\s*/etc/issue"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource149ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource99ref { ResourceID = "[nxFileLine][V-204587][medium][SRG-OS-000163-GPOS-00072]::[RHEL]Baseline"; ContainsLine = "ClientAliveInterval 600"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/ssh/sshd_config"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "^\\s*ClientAliveInterval\\s*[0-5]?[0-9]?[0-9]?\\s*$|^#\\s*ClientAliveInterval.*|^\\s*ClientAliveInterval\\s*$"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource150ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource100ref { ResourceID = "[nxFileLine][V-204588][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; ContainsLine = "RhostsRSAAuthentication no"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/ssh/sshd_config"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "^#\\s*RhostsRSAAuthentication.*$|^RhostsRSAAuthentication\\s*(?!no\\b)\\w*$"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource151ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource101ref { ResourceID = "[nxFileLine][V-204589][medium][SRG-OS-000163-GPOS-00072]::[RHEL]Baseline"; ContainsLine = "ClientAliveCountMax 0"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/ssh/sshd_config"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "^#\\s*ClientAliveCountMax.*$|^ClientAliveCountMax\\s*(?!0\\b)\\w*$"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource152ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource102ref { ResourceID = "[nxFileLine][V-204590][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; ContainsLine = "IgnoreRhosts yes"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/ssh/sshd_config"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "^#\\s*IgnoreRhosts.*$|^IgnoreRhosts\\s*(?!yes\\b)\\w*$"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource153ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource103ref { ResourceID = "[nxFileLine][V-204591][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; ContainsLine = "PrintLastLog yes"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/ssh/sshd_config"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "^#\\s*PrintLastLog.*$|^PrintLastLog\\s*(?!yes\\b)\\w*$"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource154ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource104ref { ResourceID = "[nxFileLine][V-204592][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; ContainsLine = "PermitRootLogin no"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/ssh/sshd_config"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "^#\\s*PermitRootLogin.*$|^PermitRootLogin\\s*(?!no\\b)\\w*$"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource155ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource105ref { ResourceID = "[nxFileLine][V-204593][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; ContainsLine = "IgnoreUserKnownHosts yes"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/ssh/sshd_config"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "^#\\s*IgnoreUserKnownHosts.*$|^IgnoreUserKnownHosts\\s*(?!yes\\b)\\w*$"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource156ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource106ref { ResourceID = "[nxFileLine][V-204594][high][SRG-OS-000074-GPOS-00042]::[RHEL]Baseline"; ContainsLine = "Protocol 2"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/ssh/sshd_config"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "^#\\s*Protocol.*$|^Protocol\\s*(?!2\\b)\\w*$"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource157ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource107ref { ResourceID = "[nxFileLine][V-204595][medium][SRG-OS-000250-GPOS-00093]::[RHEL]Baseline"; ContainsLine = "MACs hmac-sha2-512,hmac-sha2-256"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/ssh/sshd_config"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "#\\s*MACs.*|\\s*MACs\\s*hmac-(?!sha2-512).*"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource158ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource108ref { ResourceID = "[nxFileLine][V-204598][medium][SRG-OS-000364-GPOS-00151]::[RHEL]Baseline"; ContainsLine = "GSSAPIAuthentication no"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/ssh/sshd_config"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "^#\\s*GSSAPIAuthentication.*$|^GSSAPIAuthentication\\s*(?!no\\b)\\w*$"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource159ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource109ref { ResourceID = "[nxFileLine][V-204599][medium][SRG-OS-000364-GPOS-00151]::[RHEL]Baseline"; ContainsLine = "KerberosAuthentication no"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/ssh/sshd_config"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "^#\\s*KerberosAuthentication.*$|^KerberosAuthentication\\s*(?!no\\b)\\w*$"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource160ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource110ref { ResourceID = "[nxFileLine][V-204600][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; ContainsLine = "StrictModes yes"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/ssh/sshd_config"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "^#\\s*StrictModes.*$|^StrictModes\\s*(?!yes\\b)\\w*$"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource161ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource111ref { ResourceID = "[nxFileLine][V-204601][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; ContainsLine = "UsePrivilegeSeparation sandbox"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/ssh/sshd_config"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "^#\\s*UsePrivilegeSeparation.*$|^UsePrivilegeSeparation\\s*(?!sandbox\\b)\\w*$"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource162ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource112ref { ResourceID = "[nxFileLine][V-204602][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; ContainsLine = "Compression delayed"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/ssh/sshd_config"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "^#\\s*Compression.*$|^Compression\\s*(?!delayed\\b)\\w*$"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource163ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource113ref { ResourceID = "[nxFileLine][V-204622][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; ContainsLine = "X11Forwarding no"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/ssh/sshd_config"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "^#\\s*X11Forwarding.*$|^X11Forwarding\\s*(?!no\\b)\\w*$"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource164ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource114ref { ResourceID = "[nxFileLine][V-233307][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; ContainsLine = "X11UseLocalhost yes"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/ssh/sshd_config"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "#\\s*X11UseLocalhost\\s*yes"; ConfigurationName = "LinuxBaseLine"; }; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource115ref +{ +ResourceID = "[nxFileLine][V-250314][medium][SRG-OS-000324-GPOS-00125]::[RHEL]Baseline"; + ContainsLine = "%wheel ALL=(ALL) TYPE=sysadm_t ROLE=sysadm_r ALL"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/sudoers"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*%wheel\\s*ALL\\s*=\\s*(ALL)\\s*TYPE\\s*=\\s*sysadm_t\\s*ROLE\\s*=\\s*sysadm_r\\s*ALL"; + ConfigurationName = "LinuxBaseLine"; +}; instance of MSFT_nxServiceResource as $MSFT_nxServiceResource1ref { ResourceID = "[nxService][V-204451][medium][SRG-OS-000114-GPOS-00059]::[RHEL]Baseline"; Controller = "systemd"; Enabled = False; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxService.ps1::13::9::nxService"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxService.ps1::13::9::nxService"; Name = "autofs"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -2173,7 +1624,7 @@ instance of MSFT_nxServiceResource as $MSFT_nxServiceResource2ref ResourceID = "[nxService][V-204492][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; Controller = "systemd"; Enabled = False; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxService.ps1::13::9::nxService"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxService.ps1::13::9::nxService"; Name = "kdump"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -2185,7 +1636,7 @@ ResourceID = "[nxService][V-204503][medium][SRG-OS-000038-GPOS-00016]::[RHEL]Bas Controller = "systemd"; State = "Running"; Enabled = True; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxService.ps1::22::9::nxService"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxService.ps1::22::9::nxService"; Name = "auditd"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -2197,7 +1648,7 @@ ResourceID = "[nxService][V-204586][medium][SRG-OS-000423-GPOS-00187]::[RHEL]Bas Controller = "systemd"; State = "Running"; Enabled = True; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxService.ps1::22::9::nxService"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxService.ps1::22::9::nxService"; Name = "sshd"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -2209,7 +1660,7 @@ ResourceID = "[nxService][V-204604.b][medium][SRG-OS-000480-GPOS-00227]::[RHEL]B Controller = "systemd"; State = "Running"; Enabled = True; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxService.ps1::22::9::nxService"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxService.ps1::22::9::nxService"; Name = "firewalld"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -2220,7 +1671,7 @@ instance of MSFT_nxScriptResource as $MSFT_nxScriptResource1ref ResourceID = "[nxScript][V-204399.b][medium][[Skip] SRG-OS-000029-GPOS-00010]::[RHEL]Baseline"; GetScript = "#!/bin/bash\necho [V-204399.b][medium][[Skip] SRG-OS-000029-GPOS-00010]"; TestScript = "#!/bin/bash\nexit 0"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxScript.skip.ps1::10::5::nxScript"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxScript.skip.ps1::10::5::nxScript"; SetScript = "#!/bin/bash"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -2231,7 +1682,7 @@ instance of MSFT_nxScriptResource as $MSFT_nxScriptResource2ref ResourceID = "[nxScript][V-204400][medium][[Skip] SRG-OS-000029-GPOS-00010]::[RHEL]Baseline"; GetScript = "#!/bin/bash\necho [V-204400][medium][[Skip] SRG-OS-000029-GPOS-00010]"; TestScript = "#!/bin/bash\nexit 0"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxScript.skip.ps1::10::5::nxScript"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxScript.skip.ps1::10::5::nxScript"; SetScript = "#!/bin/bash"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -2242,7 +1693,7 @@ instance of MSFT_nxScriptResource as $MSFT_nxScriptResource3ref ResourceID = "[nxScript][V-204403][medium][[Skip] SRG-OS-000029-GPOS-00010]::[RHEL]Baseline"; GetScript = "#!/bin/bash\necho [V-204403][medium][[Skip] SRG-OS-000029-GPOS-00010]"; TestScript = "#!/bin/bash\nexit 0"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxScript.skip.ps1::10::5::nxScript"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxScript.skip.ps1::10::5::nxScript"; SetScript = "#!/bin/bash"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -2253,7 +1704,7 @@ instance of MSFT_nxScriptResource as $MSFT_nxScriptResource4ref ResourceID = "[nxScript][V-204509][medium][[Skip] SRG-OS-000342-GPOS-00133]::[RHEL]Baseline"; GetScript = "#!/bin/bash\necho [V-204509][medium][[Skip] SRG-OS-000342-GPOS-00133]"; TestScript = "#!/bin/bash\nexit 0"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxScript.skip.ps1::10::5::nxScript"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxScript.skip.ps1::10::5::nxScript"; SetScript = "#!/bin/bash"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -2264,7 +1715,7 @@ instance of MSFT_nxScriptResource as $MSFT_nxScriptResource5ref ResourceID = "[nxScript][V-204513][medium][[Skip] SRG-OS-000343-GPOS-00134]::[RHEL]Baseline"; GetScript = "#!/bin/bash\necho [V-204513][medium][[Skip] SRG-OS-000343-GPOS-00134]"; TestScript = "#!/bin/bash\nexit 0"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxScript.skip.ps1::10::5::nxScript"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxScript.skip.ps1::10::5::nxScript"; SetScript = "#!/bin/bash"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -2275,7 +1726,7 @@ instance of MSFT_nxScriptResource as $MSFT_nxScriptResource6ref ResourceID = "[nxScript][V-204623][medium][[Skip] SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; GetScript = "#!/bin/bash\necho [V-204623][medium][[Skip] SRG-OS-000480-GPOS-00227]"; TestScript = "#!/bin/bash\nexit 0"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxScript.skip.ps1::10::5::nxScript"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxScript.skip.ps1::10::5::nxScript"; SetScript = "#!/bin/bash"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -2286,7 +1737,7 @@ instance of MSFT_nxScriptResource as $MSFT_nxScriptResource7ref ResourceID = "[nxScript][V-244557][medium][[Skip] SRG-OS-000080-GPOS-00048]::[RHEL]Baseline"; GetScript = "#!/bin/bash\necho [V-244557][medium][[Skip] SRG-OS-000080-GPOS-00048]"; TestScript = "#!/bin/bash\nexit 0"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxScript.skip.ps1::10::5::nxScript"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxScript.skip.ps1::10::5::nxScript"; SetScript = "#!/bin/bash"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -2297,7 +1748,7 @@ instance of MSFT_nxScriptResource as $MSFT_nxScriptResource8ref ResourceID = "[nxScript][V-244558][medium][[Skip] SRG-OS-000080-GPOS-00048]::[RHEL]Baseline"; GetScript = "#!/bin/bash\necho [V-244558][medium][[Skip] SRG-OS-000080-GPOS-00048]"; TestScript = "#!/bin/bash\nexit 0"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxScript.skip.ps1::10::5::nxScript"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxScript.skip.ps1::10::5::nxScript"; SetScript = "#!/bin/bash"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -2308,7 +1759,7 @@ instance of MSFT_nxScriptResource as $MSFT_nxScriptResource9ref ResourceID = "[nxScript][V-204399.a][medium][[Skip] SRG-OS-000029-GPOS-00010]::[RHEL]Baseline"; GetScript = "#!/bin/bash\necho [V-204399.a][medium][[Skip] SRG-OS-000029-GPOS-00010]"; TestScript = "#!/bin/bash\nexit 0"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxScript.skip.ps1::10::5::nxScript"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxScript.skip.ps1::10::5::nxScript"; SetScript = "#!/bin/bash"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -2325,7 +1776,7 @@ instance of OMI_ConfigurationDocument Author="Microsoft"; - GenerationDate="01/31/2022 17:13:26"; + GenerationDate="05/04/2022 09:09:33"; GenerationHost="Microsoft"; diff --git a/stig/linux/config/CentOS77.mof b/stig/linux/config/CentOS77.mof index 1a606d8..9869f81 100644 --- a/stig/linux/config/CentOS77.mof +++ b/stig/linux/config/CentOS77.mof @@ -1,7 +1,7 @@ /* @TargetNode='CentOS77' @GeneratedBy=Microsoft -@GenerationDate=01/31/2022 17:13:26 +@GenerationDate=05/04/2022 09:09:33 @GenerationHost=Microsoft */ @@ -9,7 +9,7 @@ instance of MSFT_nxPackageResource as $MSFT_nxPackageResource1ref { ResourceID = "[nxPackage][V-204442][high][SRG-OS-000095-GPOS-00049]::[RHEL]Baseline"; Ensure = "Absent"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxPackage.ps1::8::5::nxPackage"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxPackage.ps1::8::5::nxPackage"; Name = "rsh-server"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -19,7 +19,7 @@ instance of MSFT_nxPackageResource as $MSFT_nxPackageResource2ref { ResourceID = "[nxPackage][V-204443][high][SRG-OS-000095-GPOS-00049]::[RHEL]Baseline"; Ensure = "Absent"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxPackage.ps1::8::5::nxPackage"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxPackage.ps1::8::5::nxPackage"; Name = "ypserv"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -29,7 +29,7 @@ instance of MSFT_nxPackageResource as $MSFT_nxPackageResource3ref { ResourceID = "[nxPackage][V-204497][high][SRG-OS-000033-GPOS-00014]::[RHEL]Baseline"; Ensure = "Present"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxPackage.ps1::8::5::nxPackage"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxPackage.ps1::8::5::nxPackage"; Name = "dracut-fips"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -39,7 +39,7 @@ instance of MSFT_nxPackageResource as $MSFT_nxPackageResource4ref { ResourceID = "[nxPackage][V-204498][low][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; Ensure = "Present"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxPackage.ps1::8::5::nxPackage"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxPackage.ps1::8::5::nxPackage"; Name = "aide"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -49,7 +49,7 @@ instance of MSFT_nxPackageResource as $MSFT_nxPackageResource5ref { ResourceID = "[nxPackage][V-204502][high][SRG-OS-000095-GPOS-00049]::[RHEL]Baseline"; Ensure = "Absent"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxPackage.ps1::8::5::nxPackage"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxPackage.ps1::8::5::nxPackage"; Name = "telnet-server"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -59,7 +59,7 @@ instance of MSFT_nxPackageResource as $MSFT_nxPackageResource6ref { ResourceID = "[nxPackage][V-204585][medium][SRG-OS-000423-GPOS-00187]::[RHEL]Baseline"; Ensure = "Present"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxPackage.ps1::8::5::nxPackage"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxPackage.ps1::8::5::nxPackage"; Name = "openssh-server"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -69,7 +69,7 @@ instance of MSFT_nxPackageResource as $MSFT_nxPackageResource7ref { ResourceID = "[nxPackage][V-204604.a][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; Ensure = "Present"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxPackage.ps1::8::5::nxPackage"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxPackage.ps1::8::5::nxPackage"; Name = "firewalld"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -79,7 +79,7 @@ instance of MSFT_nxPackageResource as $MSFT_nxPackageResource8ref { ResourceID = "[nxPackage][V-204620][high][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; Ensure = "Absent"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxPackage.ps1::8::5::nxPackage"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxPackage.ps1::8::5::nxPackage"; Name = "vsftpd"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -89,7 +89,7 @@ instance of MSFT_nxPackageResource as $MSFT_nxPackageResource9ref { ResourceID = "[nxPackage][V-204621][high][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; Ensure = "Absent"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxPackage.ps1::8::5::nxPackage"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxPackage.ps1::8::5::nxPackage"; Name = "tftp-server"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -99,7 +99,7 @@ instance of MSFT_nxPackageResource as $MSFT_nxPackageResource10ref { ResourceID = "[nxPackage][V-204631][medium][SRG-OS-000375-GPOS-00160]::[RHEL]Baseline"; Ensure = "Present"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxPackage.ps1::8::5::nxPackage"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxPackage.ps1::8::5::nxPackage"; Name = "pam_pkcs11"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -111,7 +111,7 @@ ResourceID = "[nxFile][V-204395][medium][SRG-OS-000023-GPOS-00006]::[RHEL]Baseli Contents = "You are accessing a U.S. Government (USG) Information System (IS) that is provided for USG-authorized use only.\n\nBy using this IS (which includes any device attached to this IS), you consent to the following conditions:\n\n-The USG routinely intercepts and monitors communications on this IS for purposes including, but not limited to, penetration testing, COMSEC monitoring, network operations and defense, personnel misconduct (PM), law enforcement (LE), and counterintelligence (CI) investigations.\n\n-At any time, the USG may inspect and seize data stored on this IS.\n\n-Communications using, or data stored on, this IS are not private, are subject to routine monitoring, interception, and search, and may be disclosed or used for any USG-authorized purpose.\n\n-This IS includes security measures (e.g., authentication and access controls) to protect USG interests--not for your personal benefit or privacy.\n\n-Notwithstanding the above, using this IS does not constitute consent to PM, LE or CI investigative searching or monitoring of the content of privileged communications, or work product, related to personal representation or services by attorneys, psychotherapists, or clergy, and their assistants. Such communications and work product are private and confidential. See User Agreement for details."; DestinationPath = "/etc/issue"; ModuleName = "nx"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; ModuleVersion = "1.0"; ConfigurationName = "LinuxBaseLine"; }; @@ -121,7 +121,7 @@ ResourceID = "[nxFile][V-204449.a][medium][SRG-OS-000114-GPOS-00059]::[RHEL]Base Contents = ""; DestinationPath = "/etc/modprobe.d/usb-storage.conf"; ModuleName = "nx"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; ModuleVersion = "1.0"; ConfigurationName = "LinuxBaseLine"; }; @@ -131,7 +131,7 @@ ResourceID = "[nxFile][V-204449.b][medium][SRG-OS-000114-GPOS-00059]::[RHEL]Base Contents = ""; DestinationPath = "/etc/modprobe.d/blacklist.conf"; ModuleName = "nx"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; ModuleVersion = "1.0"; ConfigurationName = "LinuxBaseLine"; }; @@ -141,7 +141,7 @@ ResourceID = "[nxFile][V-204450.a][medium][SRG-OS-000378-GPOS-00163]::[RHEL]Base Contents = ""; DestinationPath = "/etc/modprobe.d/dccp.conf"; ModuleName = "nx"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; ModuleVersion = "1.0"; ConfigurationName = "LinuxBaseLine"; }; @@ -151,7 +151,7 @@ ResourceID = "[nxFile][V-204576][low][SRG-OS-000027-GPOS-00008]::[RHEL]Baseline" Contents = "* hard maxlogins 10"; DestinationPath = "/etc/security/limits.d/204576-powerstig.conf"; ModuleName = "nx"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; ModuleVersion = "1.0"; ConfigurationName = "LinuxBaseLine"; }; @@ -161,7 +161,7 @@ ResourceID = "[nxFile][V-204579.a][medium][SRG-OS-000163-GPOS-00072]::[RHEL]Base Contents = ""; DestinationPath = "/etc/profile.d/tmout.sh"; ModuleName = "nx"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; ModuleVersion = "1.0"; ConfigurationName = "LinuxBaseLine"; }; @@ -171,7 +171,7 @@ ResourceID = "[nxFile][V-204584][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseli Contents = "kernel.randomize_va_space = 2"; DestinationPath = "/etc/sysctl.d/204584-powerstig.conf"; ModuleName = "nx"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; ModuleVersion = "1.0"; ConfigurationName = "LinuxBaseLine"; }; @@ -181,7 +181,7 @@ ResourceID = "[nxFile][V-204609][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseli Contents = "net.ipv4.conf.all.accept_source_route = 0"; DestinationPath = "/etc/sysctl.d/204609-powerstig.conf"; ModuleName = "nx"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; ModuleVersion = "1.0"; ConfigurationName = "LinuxBaseLine"; }; @@ -191,7 +191,7 @@ ResourceID = "[nxFile][V-204610][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseli Contents = "net.ipv4.conf.all.rp_filter = 1"; DestinationPath = "/etc/sysctl.d/204610-powerstig.conf"; ModuleName = "nx"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; ModuleVersion = "1.0"; ConfigurationName = "LinuxBaseLine"; }; @@ -201,7 +201,7 @@ ResourceID = "[nxFile][V-204611][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseli Contents = "net.ipv4.conf.default.rp_filter = 1"; DestinationPath = "/etc/sysctl.d/204611-powerstig.conf"; ModuleName = "nx"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; ModuleVersion = "1.0"; ConfigurationName = "LinuxBaseLine"; }; @@ -211,7 +211,7 @@ ResourceID = "[nxFile][V-204612][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseli Contents = "net.ipv4.conf.default.accept_source_route = 0"; DestinationPath = "/etc/sysctl.d/204612-powerstig.conf"; ModuleName = "nx"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; ModuleVersion = "1.0"; ConfigurationName = "LinuxBaseLine"; }; @@ -221,7 +221,7 @@ ResourceID = "[nxFile][V-204613][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseli Contents = "net.ipv4.icmp_echo_ignore_broadcasts = 1"; DestinationPath = "/etc/sysctl.d/204613-powerstig.conf"; ModuleName = "nx"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; ModuleVersion = "1.0"; ConfigurationName = "LinuxBaseLine"; }; @@ -231,7 +231,7 @@ ResourceID = "[nxFile][V-204614][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseli Contents = "net.ipv4.conf.default.accept_redirects = 0"; DestinationPath = "/etc/sysctl.d/204614-powerstig.conf"; ModuleName = "nx"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; ModuleVersion = "1.0"; ConfigurationName = "LinuxBaseLine"; }; @@ -241,7 +241,7 @@ ResourceID = "[nxFile][V-204615][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseli Contents = "net.ipv4.conf.all.accept_redirects = 0"; DestinationPath = "/etc/sysctl.d/204615-powerstig.conf"; ModuleName = "nx"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; ModuleVersion = "1.0"; ConfigurationName = "LinuxBaseLine"; }; @@ -251,7 +251,7 @@ ResourceID = "[nxFile][V-204616][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseli Contents = "net.ipv4.conf.default.send_redirects = 0"; DestinationPath = "/etc/sysctl.d/204616-powerstig.conf"; ModuleName = "nx"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; ModuleVersion = "1.0"; ConfigurationName = "LinuxBaseLine"; }; @@ -261,7 +261,7 @@ ResourceID = "[nxFile][V-204617][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseli Contents = "net.ipv4.conf.all.send_redirects = 0"; DestinationPath = "/etc/sysctl.d/204617-powerstig.conf"; ModuleName = "nx"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; ModuleVersion = "1.0"; ConfigurationName = "LinuxBaseLine"; }; @@ -271,7 +271,7 @@ ResourceID = "[nxFile][V-204625][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseli Contents = "net.ipv4.ip_forward = 0"; DestinationPath = "/etc/sysctl.d/204625-powerstig.conf"; ModuleName = "nx"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; ModuleVersion = "1.0"; ConfigurationName = "LinuxBaseLine"; }; @@ -281,7 +281,7 @@ ResourceID = "[nxFile][V-204630][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseli Contents = "net.ipv6.conf.all.accept_source_route = 0"; DestinationPath = "/etc/sysctl.d/204630-powerstig.conf"; ModuleName = "nx"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; ModuleVersion = "1.0"; ConfigurationName = "LinuxBaseLine"; }; @@ -291,7 +291,7 @@ ResourceID = "[nxFile][V-237634.a][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Base Contents = "Defaults !targetpw"; DestinationPath = "/etc/sudoers.d/237634a-powerstig.conf"; ModuleName = "nx"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; ModuleVersion = "1.0"; ConfigurationName = "LinuxBaseLine"; }; @@ -301,7 +301,7 @@ ResourceID = "[nxFile][V-237634.b][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Base Contents = "Defaults !rootpw"; DestinationPath = "/etc/sudoers.d/237634b-powerstig.conf"; ModuleName = "nx"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; ModuleVersion = "1.0"; ConfigurationName = "LinuxBaseLine"; }; @@ -311,7 +311,7 @@ ResourceID = "[nxFile][V-237634.c][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Base Contents = "Defaults !runaspw"; DestinationPath = "/etc/sudoers.d/237634c-powerstig.conf"; ModuleName = "nx"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; ModuleVersion = "1.0"; ConfigurationName = "LinuxBaseLine"; }; @@ -321,17 +321,7 @@ ResourceID = "[nxFile][V-237635][medium][SRG-OS-000373-GPOS-00156]::[RHEL]Baseli Contents = "Defaults timestamp_timeout=0"; DestinationPath = "/etc/sudoers.d/237635-powerstig.conf"; ModuleName = "nx"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; - ModuleVersion = "1.0"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileResource as $MSFT_nxFileResource23ref -{ -ResourceID = "[nxFile][V-250314][medium][SRG-OS-000324-GPOS-00125]::[RHEL]Baseline"; - Contents = "%wheel ALL=(ALL) TYPE=sysadm_t ROLE=sysadm_r ALL"; - DestinationPath = "/etc/sudoers.d/250314-powerstig.conf"; - ModuleName = "nx"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; ModuleVersion = "1.0"; ConfigurationName = "LinuxBaseLine"; }; @@ -339,7 +329,7 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource1ref { ResourceID = "[nxFileLine][V-204405][medium][SRG-OS-000069-GPOS-00037]::[RHEL]Baseline"; ContainsLine = "password substack system-auth"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/pam.d/passwd"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -350,7 +340,7 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource2ref { ResourceID = "[nxFileLine][V-204407][medium][SRG-OS-000069-GPOS-00037]::[RHEL]Baseline"; ContainsLine = "ucredit = -1"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/security/pwquality.conf"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -361,7 +351,7 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource3ref { ResourceID = "[nxFileLine][V-204408][medium][SRG-OS-000070-GPOS-00038]::[RHEL]Baseline"; ContainsLine = "lcredit = -1"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/security/pwquality.conf"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -372,7 +362,7 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource4ref { ResourceID = "[nxFileLine][V-204409][medium][SRG-OS-000071-GPOS-00039]::[RHEL]Baseline"; ContainsLine = "dcredit = -1"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/security/pwquality.conf"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -383,7 +373,7 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource5ref { ResourceID = "[nxFileLine][V-204410][medium][SRG-OS-000266-GPOS-00101]::[RHEL]Baseline"; ContainsLine = "ocredit=-1"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/security/pwquality.conf"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -394,7 +384,7 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource6ref { ResourceID = "[nxFileLine][V-204411][medium][SRG-OS-000072-GPOS-00040]::[RHEL]Baseline"; ContainsLine = "difok = 8"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/security/pwquality.conf"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -405,7 +395,7 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource7ref { ResourceID = "[nxFileLine][V-204412][medium][SRG-OS-000072-GPOS-00040]::[RHEL]Baseline"; ContainsLine = "minclass = 4"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/security/pwquality.conf"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -416,7 +406,7 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource8ref { ResourceID = "[nxFileLine][V-204413][medium][SRG-OS-000072-GPOS-00040]::[RHEL]Baseline"; ContainsLine = "maxrepeat = 3"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/security/pwquality.conf"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -427,18 +417,18 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource9ref { ResourceID = "[nxFileLine][V-204414][medium][SRG-OS-000072-GPOS-00040]::[RHEL]Baseline"; ContainsLine = "maxclassrepeat = 4"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/security/pwquality.conf"; ModuleName = "nx"; ModuleVersion = "1.0"; - DoesNotContainPattern = "^#\\s*maxclassrepeat\\s*=.*|^\\s*maxclassrepeat\\s*=\\s*(?:\\d{2,}|[3-9])"; + DoesNotContainPattern = "^#\\s*maxclassrepeat\\s*=.*|^\\s*maxclassrepeat\\s*=\\s*(?:\\d{2,}|[1-3|5-9])"; ConfigurationName = "LinuxBaseLine"; }; instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource10ref { ResourceID = "[nxFileLine][V-204416][medium][SRG-OS-000073-GPOS-00041]::[RHEL]Baseline"; ContainsLine = "ENCRYPT_METHOD SHA512"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/login.defs"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -449,7 +439,7 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource11ref { ResourceID = "[nxFileLine][V-204418][medium][SRG-OS-000075-GPOS-00043]::[RHEL]Baseline"; ContainsLine = "PASS_MIN_DAYS 1"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/login.defs"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -460,7 +450,7 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource12ref { ResourceID = "[nxFileLine][V-204420][medium][SRG-OS-000076-GPOS-00044]::[RHEL]Baseline"; ContainsLine = "PASS_MAX_DAYS 60"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/login.defs"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -471,7 +461,7 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource13ref { ResourceID = "[nxFileLine][V-204423][medium][SRG-OS-000078-GPOS-00046]::[RHEL]Baseline"; ContainsLine = "minlen = 15"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/security/pwquality.conf"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -482,7 +472,7 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource14ref { ResourceID = "[nxFileLine][V-204425][high][SRG-OS-000106-GPOS-00053]::[RHEL]Baseline"; ContainsLine = "PermitEmptyPasswords no"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/ssh/sshd_config"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -492,19 +482,19 @@ ResourceID = "[nxFileLine][V-204425][high][SRG-OS-000106-GPOS-00053]::[RHEL]Base instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource15ref { ResourceID = "[nxFileLine][V-204426][medium][SRG-OS-000118-GPOS-00060]::[RHEL]Baseline"; - ContainsLine = "INACTIVE=0"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + ContainsLine = "INACTIVE=35"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/default/useradd"; ModuleName = "nx"; ModuleVersion = "1.0"; - DoesNotContainPattern = "^#\\s*INACTIVE.*$|^INACTIVE\\s*=\\s*(?!0\\b)[-]*\\w*$"; + DoesNotContainPattern = "^#\\s*INACTIVE\\s*=.*|^\\s*INACTIVE\\s*=\\s*(3[5-9]|[4-9]\\d+|\\d{3,})"; ConfigurationName = "LinuxBaseLine"; }; instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource16ref { ResourceID = "[nxFileLine][V-204431][medium][SRG-OS-000480-GPOS-00226]::[RHEL]Baseline"; ContainsLine = "FAIL_DELAY 4"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/login.defs"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -515,7 +505,7 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource17ref { ResourceID = "[nxFileLine][V-204434][medium][SRG-OS-000480-GPOS-00229]::[RHEL]Baseline"; ContainsLine = "PermitUserEnvironment no"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/ssh/sshd_config"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -526,7 +516,7 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource18ref { ResourceID = "[nxFileLine][V-204435][medium][SRG-OS-000480-GPOS-00229]::[RHEL]Baseline"; ContainsLine = "HostbasedAuthentication no"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/ssh/sshd_config"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -537,7 +527,7 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource19ref { ResourceID = "[nxFileLine][V-204447][high][SRG-OS-000366-GPOS-00153]::[RHEL]Baseline"; ContainsLine = "gpgcheck=1"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/yum.conf"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -548,7 +538,7 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource20ref { ResourceID = "[nxFileLine][V-204448][high][SRG-OS-000366-GPOS-00153]::[RHEL]Baseline"; ContainsLine = "localpkg_gpgcheck=1"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/yum.conf"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -559,7 +549,7 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource21ref { ResourceID = "[nxFileLine][V-204449.c][medium][SRG-OS-000114-GPOS-00059]::[RHEL]Baseline"; ContainsLine = "install usb-storage /bin/true"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/modprobe.d/usb-storage.conf"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -570,7 +560,7 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource22ref { ResourceID = "[nxFileLine][V-204449.d][medium][SRG-OS-000114-GPOS-00059]::[RHEL]Baseline"; ContainsLine = "blacklist usb-storage"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/modprobe.d/blacklist.conf"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -581,7 +571,7 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource23ref { ResourceID = "[nxFileLine][V-204450.b][medium][SRG-OS-000378-GPOS-00163]::[RHEL]Baseline"; ContainsLine = "install dccp /bin/true"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/modprobe.d/dccp.conf"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -592,7 +582,7 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource24ref { ResourceID = "[nxFileLine][V-204450.c][medium][SRG-OS-000378-GPOS-00163]::[RHEL]Baseline"; ContainsLine = "blacklist dccp"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/modprobe.d/blacklist.conf"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -603,7 +593,7 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource25ref { ResourceID = "[nxFileLine][V-204452][low][SRG-OS-000437-GPOS-00194]::[RHEL]Baseline"; ContainsLine = "clean_requirements_on_remove=1"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/yum.conf"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -614,7 +604,7 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource26ref { ResourceID = "[nxFileLine][V-204453][medium][SRG-OS-000445-GPOS-00199]::[RHEL]Baseline"; ContainsLine = "SELINUX=enforcing"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/selinux/config"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -625,7 +615,7 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource27ref { ResourceID = "[nxFileLine][V-204454][medium][SRG-OS-000445-GPOS-00199]::[RHEL]Baseline"; ContainsLine = "SELINUXTYPE=targeted"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/selinux/config"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -636,7 +626,7 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource28ref { ResourceID = "[nxFileLine][V-204457][medium][SRG-OS-000480-GPOS-00228]::[RHEL]Baseline"; ContainsLine = "UMASK 077"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/login.defs"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -647,7 +637,7 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource29ref { ResourceID = "[nxFileLine][V-204466][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; ContainsLine = "CREATE_HOME yes"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/login.defs"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -658,16 +648,16 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource30ref { ResourceID = "[nxFileLine][V-204504][medium][SRG-OS-000046-GPOS-00022]::[RHEL]Baseline"; ContainsLine = "-f 2"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "^#\\s*-f\\s+2|^\\s*-f\\s*1"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileResource as $MSFT_nxFileResource24ref +instance of MSFT_nxFileResource as $MSFT_nxFileResource23ref { -SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::29::9::nxFile"; +SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::29::9::nxFile"; ModuleName = "nx"; ModuleVersion = "1.0"; ResourceID = "[nxFile][V-204506.a][medium][SRG-OS-000342-GPOS-00133]::[RHEL]Baseline"; @@ -678,7 +668,7 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource31ref { ResourceID = "[nxFileLine][V-204506.a][medium][SRG-OS-000342-GPOS-00133]::[RHEL]Baseline"; ContainsLine = "active = yes"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audisp/plugins.d/au-remote.conf"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -689,7 +679,7 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource32ref { ResourceID = "[nxFileLine][V-204506.b][medium][SRG-OS-000342-GPOS-00133]::[RHEL]Baseline"; ContainsLine = "direction = out"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audisp/plugins.d/au-remote.conf"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -700,7 +690,7 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource33ref { ResourceID = "[nxFileLine][V-204506.c][medium][SRG-OS-000342-GPOS-00133]::[RHEL]Baseline"; ContainsLine = "path = /sbin/audisp-remote"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audisp/plugins.d/au-remote.conf"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -711,7 +701,7 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource34ref { ResourceID = "[nxFileLine][V-204506.d][medium][SRG-OS-000342-GPOS-00133]::[RHEL]Baseline"; ContainsLine = "type = always"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audisp/plugins.d/au-remote.conf"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -722,7 +712,7 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource35ref { ResourceID = "[nxFileLine][V-204507][medium][SRG-OS-000342-GPOS-00133]::[RHEL]Baseline"; ContainsLine = "overflow_action = syslog"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audisp/audispd.conf"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -733,16 +723,16 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource36ref { ResourceID = "[nxFileLine][V-204508][medium][SRG-OS-000342-GPOS-00133]::[RHEL]Baseline"; ContainsLine = "name_format = hostname"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audisp/audispd.conf"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "^#\\s*name_format.*$|^name_format\\s*=\\s*(?!hostname$)\\w*$"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileResource as $MSFT_nxFileResource25ref +instance of MSFT_nxFileResource as $MSFT_nxFileResource24ref { -SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::19::9::nxFile"; +SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::19::9::nxFile"; ModuleName = "nx"; ModuleVersion = "1.0"; ResourceID = "[nxFile][V-204510][medium][SRG-OS-000342-GPOS-00133]::[RHEL]Baseline"; @@ -753,7 +743,7 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource37ref { ResourceID = "[nxFileLine][V-204510][medium][SRG-OS-000342-GPOS-00133]::[RHEL]Baseline"; ContainsLine = "enable_krb5 = yes"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audisp/audisp-remote.conf"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -764,7 +754,7 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource38ref { ResourceID = "[nxFileLine][V-204511][medium][SRG-OS-000342-GPOS-00133]::[RHEL]Baseline"; ContainsLine = "disk_full_action = single"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audisp/audisp-remote.conf"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -775,7 +765,7 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource39ref { ResourceID = "[nxFileLine][V-204512][medium][SRG-OS-000342-GPOS-00133]::[RHEL]Baseline"; ContainsLine = "network_failure_action = syslog"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audisp/audisp-remote.conf"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -786,7 +776,7 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource40ref { ResourceID = "[nxFileLine][V-204514][medium][SRG-OS-000343-GPOS-00134]::[RHEL]Baseline"; ContainsLine = "space_left_action = email"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/auditd.conf"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -797,7 +787,7 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource41ref { ResourceID = "[nxFileLine][V-204515][medium][SRG-OS-000343-GPOS-00134]::[RHEL]Baseline"; ContainsLine = "action_mail_acct = root"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/auditd.conf"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -808,7 +798,7 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource42ref { ResourceID = "[nxFileLine][V-204516.a][medium][SRG-OS-000327-GPOS-00127]::[RHEL]Baseline"; ContainsLine = "-a always,exit -F arch=b32 -S execve -C uid!=euid -F euid=0 -k setuid"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -819,7 +809,7 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource43ref { ResourceID = "[nxFileLine][V-204516.b][medium][SRG-OS-000327-GPOS-00127]::[RHEL]Baseline"; ContainsLine = "-a always,exit -F arch=b64 -S execve -C uid!=euid -F euid=0 -k setuid"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -830,7 +820,7 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource44ref { ResourceID = "[nxFileLine][V-204516.c][medium][SRG-OS-000327-GPOS-00127]::[RHEL]Baseline"; ContainsLine = "-a always,exit -F arch=b32 -S execve -C gid!=egid -F egid=0 -k setgid"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -841,7 +831,7 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource45ref { ResourceID = "[nxFileLine][V-204516.d][medium][SRG-OS-000327-GPOS-00127]::[RHEL]Baseline"; ContainsLine = "-a always,exit -F arch=b64 -S execve -C gid!=egid -F egid=0 -k setgid"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -851,1318 +841,779 @@ ResourceID = "[nxFileLine][V-204516.d][medium][SRG-OS-000327-GPOS-00127]::[RHEL] instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource46ref { ResourceID = "[nxFileLine][V-204517.a][medium][SRG-OS-000064-GPOS-00033]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S chown -F auid>=1000 -F auid!=unset -k perm_mod"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + ContainsLine = "-a always,exit -F arch=b32 -S chown,fchown,fchownat,lchown -F auid>=1000 -F auid!=unset -k perm_mod"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*chown\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*perm_mod"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*chown,fchown,fchownat,lchown\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*perm_mod"; ConfigurationName = "LinuxBaseLine"; }; instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource47ref { ResourceID = "[nxFileLine][V-204517.b][medium][SRG-OS-000064-GPOS-00033]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S chown -F auid>=1000 -F auid!=unset -k perm_mod"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + ContainsLine = "-a always,exit -F arch=b64 -S chown,fchown,fchownat,lchown -F auid>=1000 -F auid!=unset -k perm_mod"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*chown\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*perm_mod"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*chown,fchown,fchownat,lchown\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*perm_mod"; ConfigurationName = "LinuxBaseLine"; }; instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource48ref { -ResourceID = "[nxFileLine][V-204518.a][medium][SRG-OS-000064-GPOS-00033]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S fchown -F auid>=1000 -F auid!=unset -k perm_mod"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; +ResourceID = "[nxFileLine][V-204521.a][medium][SRG-OS-000458-GPOS-00203]::[RHEL]Baseline"; + ContainsLine = "-a always,exit -F arch=b32 -S chmod,fchmod,fchmodat -F auid>=1000 -F auid!=unset -k perm_mod"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*fchown\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*perm_mod"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*chmod,fchmod,fchmodat\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*perm_mod"; ConfigurationName = "LinuxBaseLine"; }; instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource49ref { -ResourceID = "[nxFileLine][V-204518.b][medium][SRG-OS-000064-GPOS-00033]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S fchown -F auid>=1000 -F auid!=unset -k perm_mod"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; +ResourceID = "[nxFileLine][V-204521.b][medium][SRG-OS-000458-GPOS-00203]::[RHEL]Baseline"; + ContainsLine = "-a always,exit -F arch=b64 -S chmod,fchmod,fchmodat -F auid>=1000 -F auid!=unset -k perm_mod"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*fchown\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*perm_mod"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*chmod,fchmod,fchmodat\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*perm_mod"; ConfigurationName = "LinuxBaseLine"; }; instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource50ref { -ResourceID = "[nxFileLine][V-204519.a][medium][SRG-OS-000064-GPOS-00033]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S lchown -F auid>=1000 -F auid!=unset -k perm_mod"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; +ResourceID = "[nxFileLine][V-204524.a][medium][SRG-OS-000458-GPOS-00203]::[RHEL]Baseline"; + ContainsLine = "-a always,exit -F arch=b32 -S setxattr,fsetxattr,lsetxattr,removexattr,fremovexattr,lremovexattr -F auid>=1000 -F auid!=unset -k perm_mod"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*lchown\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*perm_mod"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*setxattr,fsetxattr,lsetxattr,removexattr,fremovexattr,lremovexattr\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*perm_mod"; ConfigurationName = "LinuxBaseLine"; }; instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource51ref { -ResourceID = "[nxFileLine][V-204519.b][medium][SRG-OS-000064-GPOS-00033]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S lchown -F auid>=1000 -F auid!=unset -k perm_mod"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; +ResourceID = "[nxFileLine][V-204524.b][medium][SRG-OS-000458-GPOS-00203]::[RHEL]Baseline"; + ContainsLine = "-a always,exit -F arch=b64 -S setxattr,fsetxattr,lsetxattr,removexattr,fremovexattr,lremovexattr -F auid>=1000 -F auid!=unset -k perm_mod"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*lchown\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*perm_mod"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*setxattr,fsetxattr,lsetxattr,removexattr,fremovexattr,lremovexattr\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*perm_mod"; ConfigurationName = "LinuxBaseLine"; }; instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource52ref { -ResourceID = "[nxFileLine][V-204520.a][medium][SRG-OS-000064-GPOS-00033]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S fchownat -F auid>=1000 -F auid!=unset -k perm_mod"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; +ResourceID = "[nxFileLine][V-204531.a][medium][SRG-OS-000064-GPOS-00033]::[RHEL]Baseline"; + ContainsLine = "-a always,exit -F arch=b32 -S creat,open,openat,open_by_handle_at,truncate,ftruncate -F exit=-EPERM -F auid>=1000 -F auid!=unset -k access"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*fchownat\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*perm_mod"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*creat,open,openat,open_by_handle_at,truncate,ftruncate\\s*-F\\s*exit\\s*=\\s*-EPERM\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*access"; ConfigurationName = "LinuxBaseLine"; }; instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource53ref { -ResourceID = "[nxFileLine][V-204520.b][medium][SRG-OS-000064-GPOS-00033]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S fchownat -F auid>=1000 -F auid!=unset -k perm_mod"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; +ResourceID = "[nxFileLine][V-204531.b][medium][SRG-OS-000064-GPOS-00033]::[RHEL]Baseline"; + ContainsLine = "-a always,exit -F arch=b32 -S creat,open,openat,open_by_handle_at,truncate,ftruncate -F exit=-EACCES -F auid>=1000 -F auid!=unset -k access"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*fchownat\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*perm_mod"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*creat,open,openat,open_by_handle_at,truncate,ftruncate\\s*-F\\s*exit\\s*=\\s*-EACCES\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*access"; ConfigurationName = "LinuxBaseLine"; }; instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource54ref { -ResourceID = "[nxFileLine][V-204521.a][medium][SRG-OS-000458-GPOS-00203]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S chmod -F auid>=1000 -F auid!=unset -k perm_mod"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; +ResourceID = "[nxFileLine][V-204531.c][medium][SRG-OS-000064-GPOS-00033]::[RHEL]Baseline"; + ContainsLine = "-a always,exit -F arch=b64 -S creat,open,openat,open_by_handle_at,truncate,ftruncate -F exit=-EPERM -F auid>=1000 -F auid!=unset -k access"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*chmod\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*perm_mod"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*creat,open,openat,open_by_handle_at,truncate,ftruncate\\s*-F\\s*exit\\s*=\\s*-EPERM\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*access"; ConfigurationName = "LinuxBaseLine"; }; instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource55ref { -ResourceID = "[nxFileLine][V-204521.b][medium][SRG-OS-000458-GPOS-00203]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S chmod -F auid>=1000 -F auid!=unset -k perm_mod"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; +ResourceID = "[nxFileLine][V-204531.d][medium][SRG-OS-000064-GPOS-00033]::[RHEL]Baseline"; + ContainsLine = "-a always,exit -F arch=b64 -S creat,open,openat,open_by_handle_at,truncate,ftruncate -F exit=-EACCES -F auid>=1000 -F auid!=unset -k access"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*chmod\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*perm_mod"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*creat,open,openat,open_by_handle_at,truncate,ftruncate\\s*-F\\s*exit\\s*=\\s*-EACCES\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*access"; ConfigurationName = "LinuxBaseLine"; }; instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource56ref { -ResourceID = "[nxFileLine][V-204522.a][medium][SRG-OS-000458-GPOS-00203]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S fchmod -F auid>=1000 -F auid!=unset -k perm_mod"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*fchmod\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*perm_mod"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource57ref -{ -ResourceID = "[nxFileLine][V-204522.b][medium][SRG-OS-000458-GPOS-00203]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S fchmod -F auid>=1000 -F auid!=unset -k perm_mod"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*fchmod\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*perm_mod"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource58ref -{ -ResourceID = "[nxFileLine][V-204523.a][medium][SRG-OS-000458-GPOS-00203]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S fchmodat -F auid>=1000 -F auid!=unset -k perm_mod"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*fchmodat\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*perm_mod"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource59ref -{ -ResourceID = "[nxFileLine][V-204523.b][medium][SRG-OS-000458-GPOS-00203]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S fchmodat -F auid>=1000 -F auid!=unset -k perm_mod"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*fchmodat\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*perm_mod"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource60ref -{ -ResourceID = "[nxFileLine][V-204524.a][medium][SRG-OS-000458-GPOS-00203]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S setxattr -F auid>=1000 -F auid!=unset -k perm_mod"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*setxattr\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*perm_mod"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource61ref -{ -ResourceID = "[nxFileLine][V-204524.b][medium][SRG-OS-000458-GPOS-00203]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S setxattr -F auid>=1000 -F auid!=unset -k perm_mod"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*setxattr\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*perm_mod"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource62ref -{ -ResourceID = "[nxFileLine][V-204525.a][medium][SRG-OS-000458-GPOS-00203]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S fsetxattr -F auid>=1000 -F auid!=unset -k perm_mod"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*fsetxattr\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*perm_mod"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource63ref -{ -ResourceID = "[nxFileLine][V-204525.b][medium][SRG-OS-000458-GPOS-00203]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S fsetxattr -F auid>=1000 -F auid!=unset -k perm_mod"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*fsetxattr\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*perm_mod"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource64ref -{ -ResourceID = "[nxFileLine][V-204526.a][medium][SRG-OS-000458-GPOS-00203]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S lsetxattr -F auid>=1000 -F auid!=unset -k perm_mod"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*lsetxattr\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*perm_mod"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource65ref -{ -ResourceID = "[nxFileLine][V-204526.b][medium][SRG-OS-000458-GPOS-00203]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S lsetxattr -F auid>=1000 -F auid!=unset -k perm_mod"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*lsetxattr\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*perm_mod"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource66ref -{ -ResourceID = "[nxFileLine][V-204527.a][medium][SRG-OS-000458-GPOS-00203]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S removexattr -F auid>=1000 -F auid!=unset -k perm_mod"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*removexattr\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*perm_mod"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource67ref -{ -ResourceID = "[nxFileLine][V-204527.b][medium][SRG-OS-000458-GPOS-00203]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S removexattr -F auid>=1000 -F auid!=unset -k perm_mod"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*removexattr\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*perm_mod"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource68ref -{ -ResourceID = "[nxFileLine][V-204528.a][medium][SRG-OS-000458-GPOS-00203]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S fremovexattr -F auid>=1000 -F auid!=unset -k perm_mod"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*fremovexattr\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*perm_mod"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource69ref -{ -ResourceID = "[nxFileLine][V-204528.b][medium][SRG-OS-000458-GPOS-00203]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S fremovexattr -F auid>=1000 -F auid!=unset -k perm_mod"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*fremovexattr\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*perm_mod"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource70ref -{ -ResourceID = "[nxFileLine][V-204529.a][medium][SRG-OS-000458-GPOS-00203]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S lremovexattr -F auid>=1000 -F auid!=unset -k perm_mod"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*lremovexattr\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*perm_mod"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource71ref -{ -ResourceID = "[nxFileLine][V-204529.b][medium][SRG-OS-000458-GPOS-00203]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S lremovexattr -F auid>=1000 -F auid!=unset -k perm_mod"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*lremovexattr\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*perm_mod"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource72ref -{ -ResourceID = "[nxFileLine][V-204530.a][medium][SRG-OS-000064-GPOS-00033]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S creat F exit=-EPERM -F auid>=1000 -F auid!=unset -k access"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*creat\\s*F\\s*exit\\s*=\\s*-EPERM\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*access"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource73ref -{ -ResourceID = "[nxFileLine][V-204530.b][medium][SRG-OS-000064-GPOS-00033]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S creat -F exit=-EACCES -F auid>=1000 -F auid!=unset -k access"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*creat\\s*-F\\s*exit\\s*=\\s*-EACCES\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*access"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource74ref -{ -ResourceID = "[nxFileLine][V-204530.c][medium][SRG-OS-000064-GPOS-00033]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S creat -F exit=-EPERM -F auid>=1000 -F auid!=unset -k access"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*creat\\s*-F\\s*exit\\s*=\\s*-EPERM\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*access"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource75ref -{ -ResourceID = "[nxFileLine][V-204530.d][medium][SRG-OS-000064-GPOS-00033]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S creat -F exit=-EACCES -F auid>=1000 -F auid!=unset -k access"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*creat\\s*-F\\s*exit\\s*=\\s*-EACCES\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*access"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource76ref -{ -ResourceID = "[nxFileLine][V-204531.a][medium][SRG-OS-000064-GPOS-00033]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S open -F exit=-EPERM -F auid>=1000 -F auid!=unset -k access"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*open\\s*-F\\s*exit\\s*=\\s*-EPERM\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*access"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource77ref -{ -ResourceID = "[nxFileLine][V-204531.b][medium][SRG-OS-000064-GPOS-00033]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S open -F exit=-EACCES -F auid>=1000 -F auid!=unset -k access"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*open\\s*-F\\s*exit\\s*=\\s*-EACCES\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*access"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource78ref -{ -ResourceID = "[nxFileLine][V-204531.c][medium][SRG-OS-000064-GPOS-00033]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S open -F exit=-EPERM -F auid>=1000 -F auid!=unset -k access"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*open\\s*-F\\s*exit\\s*=\\s*-EPERM\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*access"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource79ref -{ -ResourceID = "[nxFileLine][V-204531.d][medium][SRG-OS-000064-GPOS-00033]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S open -F exit=-EACCES -F auid>=1000 -F auid!=unset -k access"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*open\\s*-F\\s*exit\\s*=\\s*-EACCES\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*access"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource80ref -{ -ResourceID = "[nxFileLine][V-204532.a][medium][SRG-OS-000064-GPOS-00033]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S openat -F exit=-EPERM -F auid>=1000 -F auid!=unset -k access"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*openat\\s*-F\\s*exit\\s*=\\s*-EPERM\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*access"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource81ref -{ -ResourceID = "[nxFileLine][V-204532.b][medium][SRG-OS-000064-GPOS-00033]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S openat -F exit=-EACCES -F auid>=1000 -F auid!=unset -k access"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*openat\\s*-F\\s*exit\\s*=\\s*-EACCES\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*access"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource82ref -{ -ResourceID = "[nxFileLine][V-204532.c][medium][SRG-OS-000064-GPOS-00033]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S openat -F exit=-EPERM -F auid>=1000 -F auid!=unset -k access"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*openat\\s*-F\\s*exit\\s*=\\s*-EPERM\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*access"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource83ref -{ -ResourceID = "[nxFileLine][V-204532.d][medium][SRG-OS-000064-GPOS-00033]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S openat -F exit=-EACCES -F auid>=1000 -F auid!=unset -k access"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*openat\\s*-F\\s*exit\\s*=\\s*-EACCES\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*access"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource84ref -{ -ResourceID = "[nxFileLine][V-204533.a][medium][SRG-OS-000064-GPOS-00033]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S open_by_handle_at -F exit=-EPERM -F auid>=1000 -F auid!=unset -k access"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*open_by_handle_at\\s*-F\\s*exit\\s*=\\s*-EPERM\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*access"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource85ref -{ -ResourceID = "[nxFileLine][V-204533.b][medium][SRG-OS-000064-GPOS-00033]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S open_by_handle_at -F exit=-EACCES -F auid>=1000 -F auid!=unset -k access"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*open_by_handle_at\\s*-F\\s*exit\\s*=\\s*-EACCES\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*access"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource86ref -{ -ResourceID = "[nxFileLine][V-204533.c][medium][SRG-OS-000064-GPOS-00033]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S open_by_handle_at -F exit=-EPERM -F auid>=1000 -F auid!=unset -k access"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*open_by_handle_at\\s*-F\\s*exit\\s*=\\s*-EPERM\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*access"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource87ref -{ -ResourceID = "[nxFileLine][V-204533.d][medium][SRG-OS-000064-GPOS-00033]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S open_by_handle_at -F exit=-EACCES -F auid>=1000 -F auid!=unset -k access"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*open_by_handle_at\\s*-F\\s*exit\\s*=\\s*-EACCES\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*access"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource88ref -{ -ResourceID = "[nxFileLine][V-204534.a][medium][SRG-OS-000064-GPOS-00033]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S truncate -F exit=-EPERM -F auid>=1000 -F auid!=unset -k access"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*truncate\\s*-F\\s*exit\\s*=\\s*-EPERM\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*access"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource89ref -{ -ResourceID = "[nxFileLine][V-204534.b][medium][SRG-OS-000064-GPOS-00033]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S truncate -F exit=-EACCES -F auid>=1000 -F auid!=unset -k access"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*truncate\\s*-F\\s*exit\\s*=\\s*-EACCES\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*access"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource90ref -{ -ResourceID = "[nxFileLine][V-204534.c][medium][SRG-OS-000064-GPOS-00033]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S truncate -F exit=-EPERM -F auid>=1000 -F auid!=unset -k access"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*truncate\\s*-F\\s*exit\\s*=\\s*-EPERM\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*access"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource91ref -{ -ResourceID = "[nxFileLine][V-204534.d][medium][SRG-OS-000064-GPOS-00033]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S truncate -F exit=-EACCES -F auid>=1000 -F auid!=unset -k access"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*truncate\\s*-F\\s*exit\\s*=\\s*-EACCES\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*access"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource92ref -{ -ResourceID = "[nxFileLine][V-204535.a][medium][SRG-OS-000064-GPOS-00033]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S ftruncate -F exit=-EPERM -F auid>=1000 -F auid!=unset -k access"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*ftruncate\\s*-F\\s*exit\\s*=\\s*-EPERM\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*access"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource93ref -{ -ResourceID = "[nxFileLine][V-204535.b][medium][SRG-OS-000064-GPOS-00033]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S ftruncate -F exit=-EACCES -F auid>=1000 -F auid!=unset -k access"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*ftruncate\\s*-F\\s*exit\\s*=\\s*-EACCES\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*access"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource94ref -{ -ResourceID = "[nxFileLine][V-204535.c][medium][SRG-OS-000064-GPOS-00033]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S ftruncate -F exit=-EPERM -F auid>=1000 -F auid!=unset -k access"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*ftruncate\\s*-F\\s*exit\\s*=\\s*-EPERM\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*access"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource95ref -{ -ResourceID = "[nxFileLine][V-204535.d][medium][SRG-OS-000064-GPOS-00033]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S ftruncate -F exit=-EACCES -F auid>=1000 -F auid!=unset -k access"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*ftruncate\\s*-F\\s*exit\\s*=\\s*-EACCES\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*access"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource96ref -{ ResourceID = "[nxFileLine][V-204536][medium][SRG-OS-000392-GPOS-00172]::[RHEL]Baseline"; ContainsLine = "-a always,exit -F path=/usr/sbin/semanage -F auid>=1000 -F auid!=unset -k privileged-priv_change"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/sbin/semanage\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-priv_change"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource97ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource57ref { ResourceID = "[nxFileLine][V-204537][medium][SRG-OS-000392-GPOS-00172]::[RHEL]Baseline"; ContainsLine = "-a always,exit -F path=/usr/sbin/setsebool -F auid>=1000 -F auid!=unset -k privileged-priv_change"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/sbin/setsebool\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-priv_change"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource98ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource58ref { ResourceID = "[nxFileLine][V-204538][medium][SRG-OS-000392-GPOS-00172]::[RHEL]Baseline"; ContainsLine = "-a always,exit -F path=/usr/bin/chcon -F auid>=1000 -F auid!=unset -k privileged-priv_change"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/bin/chcon\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-priv_change"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource99ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource59ref { ResourceID = "[nxFileLine][V-204539][medium][SRG-OS-000392-GPOS-00172]::[RHEL]Baseline"; ContainsLine = "-a always,exit -F path=/usr/sbin/setfiles -F auid>=1000 -F auid!=unset -k privileged-priv_change"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/sbin/setfiles\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-priv_change"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource100ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource60ref { ResourceID = "[nxFileLine][V-204540][medium][SRG-OS-000392-GPOS-00172]::[RHEL]Baseline"; ContainsLine = "-w /var/run/faillock -p wa -k logins"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "#\\s*-w\\s*/var/run/faillock\\s*-p\\s*wa\\s*-k\\s*logins"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource101ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource61ref { ResourceID = "[nxFileLine][V-204541][medium][SRG-OS-000392-GPOS-00172]::[RHEL]Baseline"; ContainsLine = "-w /var/log/lastlog -p wa -k logins"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "#\\s*-w\\s*/var/log/lastlog\\s*-p\\s*wa\\s*-k\\s*logins"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource102ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource62ref { ResourceID = "[nxFileLine][V-204542][medium][SRG-OS-000042-GPOS-00020]::[RHEL]Baseline"; ContainsLine = "-a always,exit -F path=/usr/bin/passwd -F auid>=1000 -F auid!=unset -k privileged-passwd"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/bin/passwd\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-passwd"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource103ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource63ref { ResourceID = "[nxFileLine][V-204543][medium][SRG-OS-000042-GPOS-00020]::[RHEL]Baseline"; ContainsLine = "-a always,exit -F path=/usr/sbin/unix_chkpwd -F auid>=1000 -F auid!=unset -k privileged-passwd"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/sbin/unix_chkpwd\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-passwd"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource104ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource64ref { ResourceID = "[nxFileLine][V-204544][medium][SRG-OS-000042-GPOS-00020]::[RHEL]Baseline"; ContainsLine = "-a always,exit -F path=/usr/bin/gpasswd -F auid>=1000 -F auid!=unset -k privileged-passwd"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/bin/gpasswd\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-passwd"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource105ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource65ref { ResourceID = "[nxFileLine][V-204545][medium][SRG-OS-000042-GPOS-00020]::[RHEL]Baseline"; ContainsLine = "-a always,exit -F path=/usr/bin/chage -F auid>=1000 -F auid!=unset -k privileged-passwd"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/bin/chage\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-passwd"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource106ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource66ref { ResourceID = "[nxFileLine][V-204546][medium][SRG-OS-000042-GPOS-00020]::[RHEL]Baseline"; ContainsLine = "-a always,exit -F path=/usr/sbin/userhelper -F auid>=1000 -F auid!=unset -k privileged-passwd"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/sbin/userhelper\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-passwd"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource107ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource67ref { ResourceID = "[nxFileLine][V-204547][medium][SRG-OS-000037-GPOS-00015]::[RHEL]Baseline"; ContainsLine = "-a always,exit -F path=/usr/bin/su -F auid>=1000 -F auid!=unset -k privileged-priv_change"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/bin/su\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-priv_change"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource108ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource68ref { ResourceID = "[nxFileLine][V-204548][medium][SRG-OS-000037-GPOS-00015]::[RHEL]Baseline"; ContainsLine = "-a always,exit -F path=/usr/bin/sudo -F auid>=1000 -F auid!=unset -k privileged-priv_change"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/bin/sudo\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-priv_change"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource109ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource69ref { ResourceID = "[nxFileLine][V-204549.a][medium][SRG-OS-000037-GPOS-00015]::[RHEL]Baseline"; ContainsLine = "-w /etc/sudoers -p wa -k privileged-actions"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "#\\s*-w /etc/sudoers -p wa -k privileged-actions"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource110ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource70ref { ResourceID = "[nxFileLine][V-204549.b][medium][SRG-OS-000037-GPOS-00015]::[RHEL]Baseline"; ContainsLine = "-w /etc/sudoers.d/ -p wa -k privileged-actions"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "#\\s*-w /etc/sudoers.d/ -p wa -k privileged-actions"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource111ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource71ref { ResourceID = "[nxFileLine][V-204550][medium][SRG-OS-000037-GPOS-00015]::[RHEL]Baseline"; ContainsLine = "-a always,exit -F path=/usr/bin/newgrp -F auid>=1000 -F auid!=unset -k privileged-priv_change"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/bin/newgrp\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-priv_change"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource112ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource72ref { ResourceID = "[nxFileLine][V-204551][medium][SRG-OS-000037-GPOS-00015]::[RHEL]Baseline"; ContainsLine = "-a always,exit -F path=/usr/bin/chsh -F auid>=1000 -F auid!=unset -k privileged-priv_change"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/bin/chsh\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-priv_change"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource113ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource73ref { ResourceID = "[nxFileLine][V-204552.a][medium][SRG-OS-000042-GPOS-00020]::[RHEL]Baseline"; ContainsLine = "-a always,exit -F arch=b32 -S mount -F auid>=1000 -F auid!=unset -k privileged-mount"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*mount\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-mount"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource114ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource74ref { ResourceID = "[nxFileLine][V-204552.b][medium][SRG-OS-000042-GPOS-00020]::[RHEL]Baseline"; ContainsLine = "-a always,exit -F arch=b64 -S mount -F auid>=1000 -F auid!=unset -k privileged-mount"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*mount\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-mount"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource115ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource75ref { ResourceID = "[nxFileLine][V-204552.c][medium][SRG-OS-000042-GPOS-00020]::[RHEL]Baseline"; ContainsLine = "-a always,exit -F path=/usr/bin/mount -F auid>=1000 -F auid!=unset -k privileged-mount"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/bin/mount\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-mount"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource116ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource76ref { ResourceID = "[nxFileLine][V-204553][medium][SRG-OS-000042-GPOS-00020]::[RHEL]Baseline"; ContainsLine = "-a always,exit -F path=/usr/bin/umount -F auid>=1000 -F auid!=unset -k privileged-mount"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/bin/umount\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-mount"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource117ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource77ref { ResourceID = "[nxFileLine][V-204554][medium][SRG-OS-000042-GPOS-00020]::[RHEL]Baseline"; ContainsLine = "-a always,exit -F path=/usr/sbin/postdrop -F auid>=1000 -F auid!=unset -k privileged-postfix"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/sbin/postdrop\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-postfix"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource118ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource78ref { ResourceID = "[nxFileLine][V-204555][medium][SRG-OS-000042-GPOS-00020]::[RHEL]Baseline"; ContainsLine = "-a always,exit -F path=/usr/sbin/postqueue -F auid>=1000 -F auid!=unset -k privileged-postfix"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/sbin/postqueue\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-postfix"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource119ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource79ref { ResourceID = "[nxFileLine][V-204556][medium][SRG-OS-000042-GPOS-00020]::[RHEL]Baseline"; ContainsLine = "-a always,exit -F path=/usr/libexec/openssh/ssh-keysign -F auid>=1000 -F auid!=unset -k privileged-ssh"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/libexec/openssh/ssh-keysign\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-ssh"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource120ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource80ref { ResourceID = "[nxFileLine][V-204557][medium][SRG-OS-000042-GPOS-00020]::[RHEL]Baseline"; ContainsLine = "-a always,exit -F path=/usr/bin/crontab -F auid>=1000 -F auid!=unset -k privileged-cron"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/bin/crontab\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-cron"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource121ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource81ref { ResourceID = "[nxFileLine][V-204558][medium][SRG-OS-000471-GPOS-00215]::[RHEL]Baseline"; ContainsLine = "-a always,exit -F path=/usr/sbin/pam_timestamp_check -F auid>=1000 -F auid!=unset -k privileged-pam"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/sbin/pam_timestamp_check\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-pam"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource122ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource82ref { ResourceID = "[nxFileLine][V-204559.a][medium][SRG-OS-000471-GPOS-00216]::[RHEL]Baseline"; ContainsLine = "-a always,exit -F arch=b32 -S create_module -k module-change"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*create_module\\s*-k\\s*module-change"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource123ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource83ref { ResourceID = "[nxFileLine][V-204559.b][medium][SRG-OS-000471-GPOS-00216]::[RHEL]Baseline"; ContainsLine = "-a always,exit -F arch=b64 -S create_module -k module-change"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*create_module\\s*-k\\s*module-change"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource124ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource84ref { ResourceID = "[nxFileLine][V-204560.a][medium][SRG-OS-000471-GPOS-00216]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S init_module -k module-change"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + ContainsLine = "-a always,exit -F arch=b32 -S init_module,finit_module -k modulechange"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*init_module\\s*-k\\s*module-change"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*init_module,finit_module\\s*-k\\s*modulechange"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource125ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource85ref { ResourceID = "[nxFileLine][V-204560.b][medium][SRG-OS-000471-GPOS-00216]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S init_module -k module-change"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + ContainsLine = "-a always,exit -F arch=b64 -S init_module,finit_module -k modulechange"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*init_module\\s*-k\\s*module-change"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*init_module,finit_module\\s*-k\\s*modulechange"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource126ref -{ -ResourceID = "[nxFileLine][V-204561.a][medium][SRG-OS-000471-GPOS-00216]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S finit_module -k module-change"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*finit_module\\s*-k\\s*module-change"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource127ref -{ -ResourceID = "[nxFileLine][V-204561.b][medium][SRG-OS-000471-GPOS-00216]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S finit_module -k module-change"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*finit_module\\s*-k\\s*module-change"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource128ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource86ref { ResourceID = "[nxFileLine][V-204562.a][medium][SRG-OS-000471-GPOS-00216]::[RHEL]Baseline"; ContainsLine = "-a always,exit -F arch=b32 -S delete_module -k module-change"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*delete_module\\s*-k\\s*module-change"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource129ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource87ref { ResourceID = "[nxFileLine][V-204562.b][medium][SRG-OS-000471-GPOS-00216]::[RHEL]Baseline"; ContainsLine = "-a always,exit -F arch=b64 -S delete_module -k module-change"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*delete_module\\s*-k\\s*module-change"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource130ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource88ref { ResourceID = "[nxFileLine][V-204563][medium][SRG-OS-000471-GPOS-00216]::[RHEL]Baseline"; ContainsLine = "-w /usr/bin/kmod -p x -F auid!=unset -k module-change"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "#\\s*-w\\s*/usr/bin/kmod\\s*-p\\s*x\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*module-change"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource131ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource89ref { ResourceID = "[nxFileLine][V-204564][medium][SRG-OS-000004-GPOS-00004]::[RHEL]Baseline"; ContainsLine = "-w /etc/passwd -p wa -k identity"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "#\\s*-w\\s*/etc/passwd\\s*-p\\s*wa\\s*-k\\s*identity"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource132ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource90ref { ResourceID = "[nxFileLine][V-204565][medium][SRG-OS-000004-GPOS-00004]::[RHEL]Baseline"; ContainsLine = "-w /etc/group -p wa -k identity"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "#\\s*-w\\s*/etc/group\\s*-p\\s*wa\\s*-k\\s*identity"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource133ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource91ref { ResourceID = "[nxFileLine][V-204566][medium][SRG-OS-000004-GPOS-00004]::[RHEL]Baseline"; ContainsLine = "-w /etc/gshadow -p wa -k identity"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "#\\s*-w\\s*/etc/gshadow\\s*-p\\s*wa\\s*-k\\s*identity"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource134ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource92ref { ResourceID = "[nxFileLine][V-204567][medium][SRG-OS-000004-GPOS-00004]::[RHEL]Baseline"; ContainsLine = "-w /etc/shadow -p wa -k identity"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "#\\s*-w\\s*/etc/shadow\\s*-p\\s*wa\\s*-k\\s*identity"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource135ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource93ref { ResourceID = "[nxFileLine][V-204568][medium][SRG-OS-000004-GPOS-00004]::[RHEL]Baseline"; ContainsLine = "-w /etc/security/opasswd -p wa -k identity"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "#\\s*-w\\s*/etc/security/opasswd\\s*-p\\s*wa\\s*-k\\s*identity"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource136ref -{ -ResourceID = "[nxFileLine][V-204569.a][medium][SRG-OS-000466-GPOS-00210]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S rename -F auid>=1000 -F auid!=unset -k delete"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*rename\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*delete"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource137ref -{ -ResourceID = "[nxFileLine][V-204569.b][medium][SRG-OS-000466-GPOS-00210]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S rename -F auid>=1000 -F auid!=unset -k delete"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*rename\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*delete"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource138ref -{ -ResourceID = "[nxFileLine][V-204570.a][medium][SRG-OS-000466-GPOS-00210]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S renameat -F auid>=1000 -F auid!=unset -k delete"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*renameat\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*delete"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource139ref -{ -ResourceID = "[nxFileLine][V-204570.b][medium][SRG-OS-000466-GPOS-00210]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S renameat -F auid>=1000 -F auid!=unset -k delete"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*renameat\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*delete"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource140ref -{ -ResourceID = "[nxFileLine][V-204571.a][medium][SRG-OS-000466-GPOS-00210]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S rmdir -F auid>=1000 -F auid!=unset -k delete"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*rmdir\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*delete"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource141ref -{ -ResourceID = "[nxFileLine][V-204571.b][medium][SRG-OS-000466-GPOS-00210]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S rmdir -F auid>=1000 -F auid!=unset -k delete"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*rmdir\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*delete"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource142ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource94ref { ResourceID = "[nxFileLine][V-204572.a][medium][SRG-OS-000466-GPOS-00210]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S unlink -F auid>=1000 -F auid!=unset -k delete"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + ContainsLine = "-a always,exit -F arch=b32 -S unlink,unlinkat,rename,renameat,rmdir -F auid>=1000 -F auid!=unset -k delete"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*unlink\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*delete"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*unlink,unlinkat,rename,renameat,rmdir\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*delete"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource143ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource95ref { ResourceID = "[nxFileLine][V-204572.b][medium][SRG-OS-000466-GPOS-00210]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S unlink -F auid>=1000 -F auid!=unset -k delete"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + ContainsLine = "-a always,exit -F arch=b64 -S unlink,unlinkat,rename,renameat,rmdir -F auid>=1000 -F auid!=unset -k delete"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*unlink\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*delete"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*unlink,unlinkat,rename,renameat,rmdir\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*delete"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource144ref -{ -ResourceID = "[nxFileLine][V-204573.a][medium][SRG-OS-000466-GPOS-00210]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S unlinkat -F auid>=1000 -F auid!=unset -k delete"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*unlinkat\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*delete"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource145ref -{ -ResourceID = "[nxFileLine][V-204573.b][medium][SRG-OS-000466-GPOS-00210]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S unlinkat -F auid>=1000 -F auid!=unset -k delete"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*unlinkat\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*delete"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource146ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource96ref { ResourceID = "[nxFileLine][V-204578][medium][SRG-OS-000033-GPOS-00014]::[RHEL]Baseline"; ContainsLine = "Ciphers aes256-ctr,aes192-ctr,aes128-ctr"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/ssh/sshd_config"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "^#\\s*Ciphers.*|^\\s*Ciphers\\s*aes128-ctr.*|^\\s*Ciphers\\s*aes192-ctr.*"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource147ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource97ref { ResourceID = "[nxFileLine][V-204579.b][medium][SRG-OS-000163-GPOS-00072]::[RHEL]Baseline"; ContainsLine = "declare -xr TMOUT=900"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/profile.d/tmout.sh"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "^\\s*TMOUT\\s*=\\s*[0-8]?[0-9]?[0-9]?$|^#\\s*TMOUT.*"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource148ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource98ref { ResourceID = "[nxFileLine][V-204580][medium][SRG-OS-000023-GPOS-00006]::[RHEL]Baseline"; ContainsLine = "banner /etc/issue"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/ssh/sshd_config"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "#\\s*banner\\s*/etc/issue"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource149ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource99ref { ResourceID = "[nxFileLine][V-204587][medium][SRG-OS-000163-GPOS-00072]::[RHEL]Baseline"; ContainsLine = "ClientAliveInterval 600"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/ssh/sshd_config"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "^\\s*ClientAliveInterval\\s*[0-5]?[0-9]?[0-9]?\\s*$|^#\\s*ClientAliveInterval.*|^\\s*ClientAliveInterval\\s*$"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource150ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource100ref { ResourceID = "[nxFileLine][V-204588][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; ContainsLine = "RhostsRSAAuthentication no"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/ssh/sshd_config"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "^#\\s*RhostsRSAAuthentication.*$|^RhostsRSAAuthentication\\s*(?!no\\b)\\w*$"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource151ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource101ref { ResourceID = "[nxFileLine][V-204589][medium][SRG-OS-000163-GPOS-00072]::[RHEL]Baseline"; ContainsLine = "ClientAliveCountMax 0"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/ssh/sshd_config"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "^#\\s*ClientAliveCountMax.*$|^ClientAliveCountMax\\s*(?!0\\b)\\w*$"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource152ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource102ref { ResourceID = "[nxFileLine][V-204590][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; ContainsLine = "IgnoreRhosts yes"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/ssh/sshd_config"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "^#\\s*IgnoreRhosts.*$|^IgnoreRhosts\\s*(?!yes\\b)\\w*$"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource153ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource103ref { ResourceID = "[nxFileLine][V-204591][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; ContainsLine = "PrintLastLog yes"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/ssh/sshd_config"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "^#\\s*PrintLastLog.*$|^PrintLastLog\\s*(?!yes\\b)\\w*$"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource154ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource104ref { ResourceID = "[nxFileLine][V-204592][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; ContainsLine = "PermitRootLogin no"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/ssh/sshd_config"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "^#\\s*PermitRootLogin.*$|^PermitRootLogin\\s*(?!no\\b)\\w*$"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource155ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource105ref { ResourceID = "[nxFileLine][V-204593][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; ContainsLine = "IgnoreUserKnownHosts yes"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/ssh/sshd_config"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "^#\\s*IgnoreUserKnownHosts.*$|^IgnoreUserKnownHosts\\s*(?!yes\\b)\\w*$"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource156ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource106ref { ResourceID = "[nxFileLine][V-204594][high][SRG-OS-000074-GPOS-00042]::[RHEL]Baseline"; ContainsLine = "Protocol 2"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/ssh/sshd_config"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "^#\\s*Protocol.*$|^Protocol\\s*(?!2\\b)\\w*$"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource157ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource107ref { ResourceID = "[nxFileLine][V-204595][medium][SRG-OS-000250-GPOS-00093]::[RHEL]Baseline"; ContainsLine = "MACs hmac-sha2-512,hmac-sha2-256"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/ssh/sshd_config"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "#\\s*MACs.*|\\s*MACs\\s*hmac-(?!sha2-512).*"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource158ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource108ref { ResourceID = "[nxFileLine][V-204598][medium][SRG-OS-000364-GPOS-00151]::[RHEL]Baseline"; ContainsLine = "GSSAPIAuthentication no"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/ssh/sshd_config"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "^#\\s*GSSAPIAuthentication.*$|^GSSAPIAuthentication\\s*(?!no\\b)\\w*$"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource159ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource109ref { ResourceID = "[nxFileLine][V-204599][medium][SRG-OS-000364-GPOS-00151]::[RHEL]Baseline"; ContainsLine = "KerberosAuthentication no"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/ssh/sshd_config"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "^#\\s*KerberosAuthentication.*$|^KerberosAuthentication\\s*(?!no\\b)\\w*$"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource160ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource110ref { ResourceID = "[nxFileLine][V-204600][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; ContainsLine = "StrictModes yes"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/ssh/sshd_config"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "^#\\s*StrictModes.*$|^StrictModes\\s*(?!yes\\b)\\w*$"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource161ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource111ref { ResourceID = "[nxFileLine][V-204601][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; ContainsLine = "UsePrivilegeSeparation sandbox"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/ssh/sshd_config"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "^#\\s*UsePrivilegeSeparation.*$|^UsePrivilegeSeparation\\s*(?!sandbox\\b)\\w*$"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource162ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource112ref { ResourceID = "[nxFileLine][V-204602][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; ContainsLine = "Compression delayed"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/ssh/sshd_config"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "^#\\s*Compression.*$|^Compression\\s*(?!delayed\\b)\\w*$"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource163ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource113ref { ResourceID = "[nxFileLine][V-204622][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; ContainsLine = "X11Forwarding no"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/ssh/sshd_config"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "^#\\s*X11Forwarding.*$|^X11Forwarding\\s*(?!no\\b)\\w*$"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource164ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource114ref { ResourceID = "[nxFileLine][V-233307][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; ContainsLine = "X11UseLocalhost yes"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/ssh/sshd_config"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "#\\s*X11UseLocalhost\\s*yes"; ConfigurationName = "LinuxBaseLine"; }; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource115ref +{ +ResourceID = "[nxFileLine][V-250314][medium][SRG-OS-000324-GPOS-00125]::[RHEL]Baseline"; + ContainsLine = "%wheel ALL=(ALL) TYPE=sysadm_t ROLE=sysadm_r ALL"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/sudoers"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*%wheel\\s*ALL\\s*=\\s*(ALL)\\s*TYPE\\s*=\\s*sysadm_t\\s*ROLE\\s*=\\s*sysadm_r\\s*ALL"; + ConfigurationName = "LinuxBaseLine"; +}; instance of MSFT_nxServiceResource as $MSFT_nxServiceResource1ref { ResourceID = "[nxService][V-204451][medium][SRG-OS-000114-GPOS-00059]::[RHEL]Baseline"; Controller = "systemd"; Enabled = False; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxService.ps1::13::9::nxService"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxService.ps1::13::9::nxService"; Name = "autofs"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -2173,7 +1624,7 @@ instance of MSFT_nxServiceResource as $MSFT_nxServiceResource2ref ResourceID = "[nxService][V-204492][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; Controller = "systemd"; Enabled = False; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxService.ps1::13::9::nxService"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxService.ps1::13::9::nxService"; Name = "kdump"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -2185,7 +1636,7 @@ ResourceID = "[nxService][V-204503][medium][SRG-OS-000038-GPOS-00016]::[RHEL]Bas Controller = "systemd"; State = "Running"; Enabled = True; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxService.ps1::22::9::nxService"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxService.ps1::22::9::nxService"; Name = "auditd"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -2197,7 +1648,7 @@ ResourceID = "[nxService][V-204586][medium][SRG-OS-000423-GPOS-00187]::[RHEL]Bas Controller = "systemd"; State = "Running"; Enabled = True; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxService.ps1::22::9::nxService"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxService.ps1::22::9::nxService"; Name = "sshd"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -2209,7 +1660,7 @@ ResourceID = "[nxService][V-204604.b][medium][SRG-OS-000480-GPOS-00227]::[RHEL]B Controller = "systemd"; State = "Running"; Enabled = True; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxService.ps1::22::9::nxService"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxService.ps1::22::9::nxService"; Name = "firewalld"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -2220,7 +1671,7 @@ instance of MSFT_nxScriptResource as $MSFT_nxScriptResource1ref ResourceID = "[nxScript][V-204399.b][medium][[Skip] SRG-OS-000029-GPOS-00010]::[RHEL]Baseline"; GetScript = "#!/bin/bash\necho [V-204399.b][medium][[Skip] SRG-OS-000029-GPOS-00010]"; TestScript = "#!/bin/bash\nexit 0"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxScript.skip.ps1::10::5::nxScript"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxScript.skip.ps1::10::5::nxScript"; SetScript = "#!/bin/bash"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -2231,7 +1682,7 @@ instance of MSFT_nxScriptResource as $MSFT_nxScriptResource2ref ResourceID = "[nxScript][V-204400][medium][[Skip] SRG-OS-000029-GPOS-00010]::[RHEL]Baseline"; GetScript = "#!/bin/bash\necho [V-204400][medium][[Skip] SRG-OS-000029-GPOS-00010]"; TestScript = "#!/bin/bash\nexit 0"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxScript.skip.ps1::10::5::nxScript"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxScript.skip.ps1::10::5::nxScript"; SetScript = "#!/bin/bash"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -2242,7 +1693,7 @@ instance of MSFT_nxScriptResource as $MSFT_nxScriptResource3ref ResourceID = "[nxScript][V-204403][medium][[Skip] SRG-OS-000029-GPOS-00010]::[RHEL]Baseline"; GetScript = "#!/bin/bash\necho [V-204403][medium][[Skip] SRG-OS-000029-GPOS-00010]"; TestScript = "#!/bin/bash\nexit 0"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxScript.skip.ps1::10::5::nxScript"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxScript.skip.ps1::10::5::nxScript"; SetScript = "#!/bin/bash"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -2253,7 +1704,7 @@ instance of MSFT_nxScriptResource as $MSFT_nxScriptResource4ref ResourceID = "[nxScript][V-204509][medium][[Skip] SRG-OS-000342-GPOS-00133]::[RHEL]Baseline"; GetScript = "#!/bin/bash\necho [V-204509][medium][[Skip] SRG-OS-000342-GPOS-00133]"; TestScript = "#!/bin/bash\nexit 0"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxScript.skip.ps1::10::5::nxScript"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxScript.skip.ps1::10::5::nxScript"; SetScript = "#!/bin/bash"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -2264,7 +1715,7 @@ instance of MSFT_nxScriptResource as $MSFT_nxScriptResource5ref ResourceID = "[nxScript][V-204513][medium][[Skip] SRG-OS-000343-GPOS-00134]::[RHEL]Baseline"; GetScript = "#!/bin/bash\necho [V-204513][medium][[Skip] SRG-OS-000343-GPOS-00134]"; TestScript = "#!/bin/bash\nexit 0"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxScript.skip.ps1::10::5::nxScript"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxScript.skip.ps1::10::5::nxScript"; SetScript = "#!/bin/bash"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -2275,7 +1726,7 @@ instance of MSFT_nxScriptResource as $MSFT_nxScriptResource6ref ResourceID = "[nxScript][V-204623][medium][[Skip] SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; GetScript = "#!/bin/bash\necho [V-204623][medium][[Skip] SRG-OS-000480-GPOS-00227]"; TestScript = "#!/bin/bash\nexit 0"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxScript.skip.ps1::10::5::nxScript"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxScript.skip.ps1::10::5::nxScript"; SetScript = "#!/bin/bash"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -2286,7 +1737,7 @@ instance of MSFT_nxScriptResource as $MSFT_nxScriptResource7ref ResourceID = "[nxScript][V-244557][medium][[Skip] SRG-OS-000080-GPOS-00048]::[RHEL]Baseline"; GetScript = "#!/bin/bash\necho [V-244557][medium][[Skip] SRG-OS-000080-GPOS-00048]"; TestScript = "#!/bin/bash\nexit 0"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxScript.skip.ps1::10::5::nxScript"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxScript.skip.ps1::10::5::nxScript"; SetScript = "#!/bin/bash"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -2297,7 +1748,7 @@ instance of MSFT_nxScriptResource as $MSFT_nxScriptResource8ref ResourceID = "[nxScript][V-244558][medium][[Skip] SRG-OS-000080-GPOS-00048]::[RHEL]Baseline"; GetScript = "#!/bin/bash\necho [V-244558][medium][[Skip] SRG-OS-000080-GPOS-00048]"; TestScript = "#!/bin/bash\nexit 0"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxScript.skip.ps1::10::5::nxScript"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxScript.skip.ps1::10::5::nxScript"; SetScript = "#!/bin/bash"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -2308,7 +1759,7 @@ instance of MSFT_nxScriptResource as $MSFT_nxScriptResource9ref ResourceID = "[nxScript][V-204399.a][medium][[Skip] SRG-OS-000029-GPOS-00010]::[RHEL]Baseline"; GetScript = "#!/bin/bash\necho [V-204399.a][medium][[Skip] SRG-OS-000029-GPOS-00010]"; TestScript = "#!/bin/bash\nexit 0"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxScript.skip.ps1::10::5::nxScript"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxScript.skip.ps1::10::5::nxScript"; SetScript = "#!/bin/bash"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -2325,7 +1776,7 @@ instance of OMI_ConfigurationDocument Author="Microsoft"; - GenerationDate="01/31/2022 17:13:26"; + GenerationDate="05/04/2022 09:09:33"; GenerationHost="Microsoft"; diff --git a/stig/linux/config/CentOS78.mof b/stig/linux/config/CentOS78.mof index 3294777..edd63cb 100644 --- a/stig/linux/config/CentOS78.mof +++ b/stig/linux/config/CentOS78.mof @@ -1,7 +1,7 @@ /* @TargetNode='CentOS78' @GeneratedBy=Microsoft -@GenerationDate=01/31/2022 17:13:26 +@GenerationDate=05/04/2022 09:09:33 @GenerationHost=Microsoft */ @@ -9,7 +9,7 @@ instance of MSFT_nxPackageResource as $MSFT_nxPackageResource1ref { ResourceID = "[nxPackage][V-204442][high][SRG-OS-000095-GPOS-00049]::[RHEL]Baseline"; Ensure = "Absent"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxPackage.ps1::8::5::nxPackage"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxPackage.ps1::8::5::nxPackage"; Name = "rsh-server"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -19,7 +19,7 @@ instance of MSFT_nxPackageResource as $MSFT_nxPackageResource2ref { ResourceID = "[nxPackage][V-204443][high][SRG-OS-000095-GPOS-00049]::[RHEL]Baseline"; Ensure = "Absent"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxPackage.ps1::8::5::nxPackage"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxPackage.ps1::8::5::nxPackage"; Name = "ypserv"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -29,7 +29,7 @@ instance of MSFT_nxPackageResource as $MSFT_nxPackageResource3ref { ResourceID = "[nxPackage][V-204497][high][SRG-OS-000033-GPOS-00014]::[RHEL]Baseline"; Ensure = "Present"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxPackage.ps1::8::5::nxPackage"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxPackage.ps1::8::5::nxPackage"; Name = "dracut-fips"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -39,7 +39,7 @@ instance of MSFT_nxPackageResource as $MSFT_nxPackageResource4ref { ResourceID = "[nxPackage][V-204498][low][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; Ensure = "Present"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxPackage.ps1::8::5::nxPackage"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxPackage.ps1::8::5::nxPackage"; Name = "aide"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -49,7 +49,7 @@ instance of MSFT_nxPackageResource as $MSFT_nxPackageResource5ref { ResourceID = "[nxPackage][V-204502][high][SRG-OS-000095-GPOS-00049]::[RHEL]Baseline"; Ensure = "Absent"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxPackage.ps1::8::5::nxPackage"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxPackage.ps1::8::5::nxPackage"; Name = "telnet-server"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -59,7 +59,7 @@ instance of MSFT_nxPackageResource as $MSFT_nxPackageResource6ref { ResourceID = "[nxPackage][V-204585][medium][SRG-OS-000423-GPOS-00187]::[RHEL]Baseline"; Ensure = "Present"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxPackage.ps1::8::5::nxPackage"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxPackage.ps1::8::5::nxPackage"; Name = "openssh-server"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -69,7 +69,7 @@ instance of MSFT_nxPackageResource as $MSFT_nxPackageResource7ref { ResourceID = "[nxPackage][V-204604.a][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; Ensure = "Present"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxPackage.ps1::8::5::nxPackage"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxPackage.ps1::8::5::nxPackage"; Name = "firewalld"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -79,7 +79,7 @@ instance of MSFT_nxPackageResource as $MSFT_nxPackageResource8ref { ResourceID = "[nxPackage][V-204620][high][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; Ensure = "Absent"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxPackage.ps1::8::5::nxPackage"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxPackage.ps1::8::5::nxPackage"; Name = "vsftpd"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -89,7 +89,7 @@ instance of MSFT_nxPackageResource as $MSFT_nxPackageResource9ref { ResourceID = "[nxPackage][V-204621][high][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; Ensure = "Absent"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxPackage.ps1::8::5::nxPackage"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxPackage.ps1::8::5::nxPackage"; Name = "tftp-server"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -99,7 +99,7 @@ instance of MSFT_nxPackageResource as $MSFT_nxPackageResource10ref { ResourceID = "[nxPackage][V-204631][medium][SRG-OS-000375-GPOS-00160]::[RHEL]Baseline"; Ensure = "Present"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxPackage.ps1::8::5::nxPackage"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxPackage.ps1::8::5::nxPackage"; Name = "pam_pkcs11"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -111,7 +111,7 @@ ResourceID = "[nxFile][V-204395][medium][SRG-OS-000023-GPOS-00006]::[RHEL]Baseli Contents = "You are accessing a U.S. Government (USG) Information System (IS) that is provided for USG-authorized use only.\n\nBy using this IS (which includes any device attached to this IS), you consent to the following conditions:\n\n-The USG routinely intercepts and monitors communications on this IS for purposes including, but not limited to, penetration testing, COMSEC monitoring, network operations and defense, personnel misconduct (PM), law enforcement (LE), and counterintelligence (CI) investigations.\n\n-At any time, the USG may inspect and seize data stored on this IS.\n\n-Communications using, or data stored on, this IS are not private, are subject to routine monitoring, interception, and search, and may be disclosed or used for any USG-authorized purpose.\n\n-This IS includes security measures (e.g., authentication and access controls) to protect USG interests--not for your personal benefit or privacy.\n\n-Notwithstanding the above, using this IS does not constitute consent to PM, LE or CI investigative searching or monitoring of the content of privileged communications, or work product, related to personal representation or services by attorneys, psychotherapists, or clergy, and their assistants. Such communications and work product are private and confidential. See User Agreement for details."; DestinationPath = "/etc/issue"; ModuleName = "nx"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; ModuleVersion = "1.0"; ConfigurationName = "LinuxBaseLine"; }; @@ -121,7 +121,7 @@ ResourceID = "[nxFile][V-204449.a][medium][SRG-OS-000114-GPOS-00059]::[RHEL]Base Contents = ""; DestinationPath = "/etc/modprobe.d/usb-storage.conf"; ModuleName = "nx"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; ModuleVersion = "1.0"; ConfigurationName = "LinuxBaseLine"; }; @@ -131,7 +131,7 @@ ResourceID = "[nxFile][V-204449.b][medium][SRG-OS-000114-GPOS-00059]::[RHEL]Base Contents = ""; DestinationPath = "/etc/modprobe.d/blacklist.conf"; ModuleName = "nx"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; ModuleVersion = "1.0"; ConfigurationName = "LinuxBaseLine"; }; @@ -141,7 +141,7 @@ ResourceID = "[nxFile][V-204450.a][medium][SRG-OS-000378-GPOS-00163]::[RHEL]Base Contents = ""; DestinationPath = "/etc/modprobe.d/dccp.conf"; ModuleName = "nx"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; ModuleVersion = "1.0"; ConfigurationName = "LinuxBaseLine"; }; @@ -151,7 +151,7 @@ ResourceID = "[nxFile][V-204576][low][SRG-OS-000027-GPOS-00008]::[RHEL]Baseline" Contents = "* hard maxlogins 10"; DestinationPath = "/etc/security/limits.d/204576-powerstig.conf"; ModuleName = "nx"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; ModuleVersion = "1.0"; ConfigurationName = "LinuxBaseLine"; }; @@ -161,7 +161,7 @@ ResourceID = "[nxFile][V-204579.a][medium][SRG-OS-000163-GPOS-00072]::[RHEL]Base Contents = ""; DestinationPath = "/etc/profile.d/tmout.sh"; ModuleName = "nx"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; ModuleVersion = "1.0"; ConfigurationName = "LinuxBaseLine"; }; @@ -171,7 +171,7 @@ ResourceID = "[nxFile][V-204584][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseli Contents = "kernel.randomize_va_space = 2"; DestinationPath = "/etc/sysctl.d/204584-powerstig.conf"; ModuleName = "nx"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; ModuleVersion = "1.0"; ConfigurationName = "LinuxBaseLine"; }; @@ -181,7 +181,7 @@ ResourceID = "[nxFile][V-204609][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseli Contents = "net.ipv4.conf.all.accept_source_route = 0"; DestinationPath = "/etc/sysctl.d/204609-powerstig.conf"; ModuleName = "nx"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; ModuleVersion = "1.0"; ConfigurationName = "LinuxBaseLine"; }; @@ -191,7 +191,7 @@ ResourceID = "[nxFile][V-204610][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseli Contents = "net.ipv4.conf.all.rp_filter = 1"; DestinationPath = "/etc/sysctl.d/204610-powerstig.conf"; ModuleName = "nx"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; ModuleVersion = "1.0"; ConfigurationName = "LinuxBaseLine"; }; @@ -201,7 +201,7 @@ ResourceID = "[nxFile][V-204611][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseli Contents = "net.ipv4.conf.default.rp_filter = 1"; DestinationPath = "/etc/sysctl.d/204611-powerstig.conf"; ModuleName = "nx"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; ModuleVersion = "1.0"; ConfigurationName = "LinuxBaseLine"; }; @@ -211,7 +211,7 @@ ResourceID = "[nxFile][V-204612][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseli Contents = "net.ipv4.conf.default.accept_source_route = 0"; DestinationPath = "/etc/sysctl.d/204612-powerstig.conf"; ModuleName = "nx"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; ModuleVersion = "1.0"; ConfigurationName = "LinuxBaseLine"; }; @@ -221,7 +221,7 @@ ResourceID = "[nxFile][V-204613][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseli Contents = "net.ipv4.icmp_echo_ignore_broadcasts = 1"; DestinationPath = "/etc/sysctl.d/204613-powerstig.conf"; ModuleName = "nx"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; ModuleVersion = "1.0"; ConfigurationName = "LinuxBaseLine"; }; @@ -231,7 +231,7 @@ ResourceID = "[nxFile][V-204614][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseli Contents = "net.ipv4.conf.default.accept_redirects = 0"; DestinationPath = "/etc/sysctl.d/204614-powerstig.conf"; ModuleName = "nx"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; ModuleVersion = "1.0"; ConfigurationName = "LinuxBaseLine"; }; @@ -241,7 +241,7 @@ ResourceID = "[nxFile][V-204615][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseli Contents = "net.ipv4.conf.all.accept_redirects = 0"; DestinationPath = "/etc/sysctl.d/204615-powerstig.conf"; ModuleName = "nx"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; ModuleVersion = "1.0"; ConfigurationName = "LinuxBaseLine"; }; @@ -251,7 +251,7 @@ ResourceID = "[nxFile][V-204616][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseli Contents = "net.ipv4.conf.default.send_redirects = 0"; DestinationPath = "/etc/sysctl.d/204616-powerstig.conf"; ModuleName = "nx"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; ModuleVersion = "1.0"; ConfigurationName = "LinuxBaseLine"; }; @@ -261,7 +261,7 @@ ResourceID = "[nxFile][V-204617][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseli Contents = "net.ipv4.conf.all.send_redirects = 0"; DestinationPath = "/etc/sysctl.d/204617-powerstig.conf"; ModuleName = "nx"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; ModuleVersion = "1.0"; ConfigurationName = "LinuxBaseLine"; }; @@ -271,7 +271,7 @@ ResourceID = "[nxFile][V-204625][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseli Contents = "net.ipv4.ip_forward = 0"; DestinationPath = "/etc/sysctl.d/204625-powerstig.conf"; ModuleName = "nx"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; ModuleVersion = "1.0"; ConfigurationName = "LinuxBaseLine"; }; @@ -281,7 +281,7 @@ ResourceID = "[nxFile][V-204630][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseli Contents = "net.ipv6.conf.all.accept_source_route = 0"; DestinationPath = "/etc/sysctl.d/204630-powerstig.conf"; ModuleName = "nx"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; ModuleVersion = "1.0"; ConfigurationName = "LinuxBaseLine"; }; @@ -291,7 +291,7 @@ ResourceID = "[nxFile][V-237634.a][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Base Contents = "Defaults !targetpw"; DestinationPath = "/etc/sudoers.d/237634a-powerstig.conf"; ModuleName = "nx"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; ModuleVersion = "1.0"; ConfigurationName = "LinuxBaseLine"; }; @@ -301,7 +301,7 @@ ResourceID = "[nxFile][V-237634.b][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Base Contents = "Defaults !rootpw"; DestinationPath = "/etc/sudoers.d/237634b-powerstig.conf"; ModuleName = "nx"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; ModuleVersion = "1.0"; ConfigurationName = "LinuxBaseLine"; }; @@ -311,7 +311,7 @@ ResourceID = "[nxFile][V-237634.c][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Base Contents = "Defaults !runaspw"; DestinationPath = "/etc/sudoers.d/237634c-powerstig.conf"; ModuleName = "nx"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; ModuleVersion = "1.0"; ConfigurationName = "LinuxBaseLine"; }; @@ -321,17 +321,7 @@ ResourceID = "[nxFile][V-237635][medium][SRG-OS-000373-GPOS-00156]::[RHEL]Baseli Contents = "Defaults timestamp_timeout=0"; DestinationPath = "/etc/sudoers.d/237635-powerstig.conf"; ModuleName = "nx"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; - ModuleVersion = "1.0"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileResource as $MSFT_nxFileResource23ref -{ -ResourceID = "[nxFile][V-250314][medium][SRG-OS-000324-GPOS-00125]::[RHEL]Baseline"; - Contents = "%wheel ALL=(ALL) TYPE=sysadm_t ROLE=sysadm_r ALL"; - DestinationPath = "/etc/sudoers.d/250314-powerstig.conf"; - ModuleName = "nx"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; ModuleVersion = "1.0"; ConfigurationName = "LinuxBaseLine"; }; @@ -339,7 +329,7 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource1ref { ResourceID = "[nxFileLine][V-204405][medium][SRG-OS-000069-GPOS-00037]::[RHEL]Baseline"; ContainsLine = "password substack system-auth"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/pam.d/passwd"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -350,7 +340,7 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource2ref { ResourceID = "[nxFileLine][V-204407][medium][SRG-OS-000069-GPOS-00037]::[RHEL]Baseline"; ContainsLine = "ucredit = -1"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/security/pwquality.conf"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -361,7 +351,7 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource3ref { ResourceID = "[nxFileLine][V-204408][medium][SRG-OS-000070-GPOS-00038]::[RHEL]Baseline"; ContainsLine = "lcredit = -1"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/security/pwquality.conf"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -372,7 +362,7 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource4ref { ResourceID = "[nxFileLine][V-204409][medium][SRG-OS-000071-GPOS-00039]::[RHEL]Baseline"; ContainsLine = "dcredit = -1"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/security/pwquality.conf"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -383,7 +373,7 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource5ref { ResourceID = "[nxFileLine][V-204410][medium][SRG-OS-000266-GPOS-00101]::[RHEL]Baseline"; ContainsLine = "ocredit=-1"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/security/pwquality.conf"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -394,7 +384,7 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource6ref { ResourceID = "[nxFileLine][V-204411][medium][SRG-OS-000072-GPOS-00040]::[RHEL]Baseline"; ContainsLine = "difok = 8"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/security/pwquality.conf"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -405,7 +395,7 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource7ref { ResourceID = "[nxFileLine][V-204412][medium][SRG-OS-000072-GPOS-00040]::[RHEL]Baseline"; ContainsLine = "minclass = 4"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/security/pwquality.conf"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -416,7 +406,7 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource8ref { ResourceID = "[nxFileLine][V-204413][medium][SRG-OS-000072-GPOS-00040]::[RHEL]Baseline"; ContainsLine = "maxrepeat = 3"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/security/pwquality.conf"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -427,18 +417,18 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource9ref { ResourceID = "[nxFileLine][V-204414][medium][SRG-OS-000072-GPOS-00040]::[RHEL]Baseline"; ContainsLine = "maxclassrepeat = 4"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/security/pwquality.conf"; ModuleName = "nx"; ModuleVersion = "1.0"; - DoesNotContainPattern = "^#\\s*maxclassrepeat\\s*=.*|^\\s*maxclassrepeat\\s*=\\s*(?:\\d{2,}|[3-9])"; + DoesNotContainPattern = "^#\\s*maxclassrepeat\\s*=.*|^\\s*maxclassrepeat\\s*=\\s*(?:\\d{2,}|[1-3|5-9])"; ConfigurationName = "LinuxBaseLine"; }; instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource10ref { ResourceID = "[nxFileLine][V-204416][medium][SRG-OS-000073-GPOS-00041]::[RHEL]Baseline"; ContainsLine = "ENCRYPT_METHOD SHA512"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/login.defs"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -449,7 +439,7 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource11ref { ResourceID = "[nxFileLine][V-204418][medium][SRG-OS-000075-GPOS-00043]::[RHEL]Baseline"; ContainsLine = "PASS_MIN_DAYS 1"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/login.defs"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -460,7 +450,7 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource12ref { ResourceID = "[nxFileLine][V-204420][medium][SRG-OS-000076-GPOS-00044]::[RHEL]Baseline"; ContainsLine = "PASS_MAX_DAYS 60"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/login.defs"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -471,7 +461,7 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource13ref { ResourceID = "[nxFileLine][V-204423][medium][SRG-OS-000078-GPOS-00046]::[RHEL]Baseline"; ContainsLine = "minlen = 15"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/security/pwquality.conf"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -482,7 +472,7 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource14ref { ResourceID = "[nxFileLine][V-204425][high][SRG-OS-000106-GPOS-00053]::[RHEL]Baseline"; ContainsLine = "PermitEmptyPasswords no"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/ssh/sshd_config"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -492,19 +482,19 @@ ResourceID = "[nxFileLine][V-204425][high][SRG-OS-000106-GPOS-00053]::[RHEL]Base instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource15ref { ResourceID = "[nxFileLine][V-204426][medium][SRG-OS-000118-GPOS-00060]::[RHEL]Baseline"; - ContainsLine = "INACTIVE=0"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + ContainsLine = "INACTIVE=35"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/default/useradd"; ModuleName = "nx"; ModuleVersion = "1.0"; - DoesNotContainPattern = "^#\\s*INACTIVE.*$|^INACTIVE\\s*=\\s*(?!0\\b)[-]*\\w*$"; + DoesNotContainPattern = "^#\\s*INACTIVE\\s*=.*|^\\s*INACTIVE\\s*=\\s*(3[5-9]|[4-9]\\d+|\\d{3,})"; ConfigurationName = "LinuxBaseLine"; }; instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource16ref { ResourceID = "[nxFileLine][V-204431][medium][SRG-OS-000480-GPOS-00226]::[RHEL]Baseline"; ContainsLine = "FAIL_DELAY 4"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/login.defs"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -515,7 +505,7 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource17ref { ResourceID = "[nxFileLine][V-204434][medium][SRG-OS-000480-GPOS-00229]::[RHEL]Baseline"; ContainsLine = "PermitUserEnvironment no"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/ssh/sshd_config"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -526,7 +516,7 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource18ref { ResourceID = "[nxFileLine][V-204435][medium][SRG-OS-000480-GPOS-00229]::[RHEL]Baseline"; ContainsLine = "HostbasedAuthentication no"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/ssh/sshd_config"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -537,7 +527,7 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource19ref { ResourceID = "[nxFileLine][V-204447][high][SRG-OS-000366-GPOS-00153]::[RHEL]Baseline"; ContainsLine = "gpgcheck=1"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/yum.conf"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -548,7 +538,7 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource20ref { ResourceID = "[nxFileLine][V-204448][high][SRG-OS-000366-GPOS-00153]::[RHEL]Baseline"; ContainsLine = "localpkg_gpgcheck=1"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/yum.conf"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -559,7 +549,7 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource21ref { ResourceID = "[nxFileLine][V-204449.c][medium][SRG-OS-000114-GPOS-00059]::[RHEL]Baseline"; ContainsLine = "install usb-storage /bin/true"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/modprobe.d/usb-storage.conf"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -570,7 +560,7 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource22ref { ResourceID = "[nxFileLine][V-204449.d][medium][SRG-OS-000114-GPOS-00059]::[RHEL]Baseline"; ContainsLine = "blacklist usb-storage"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/modprobe.d/blacklist.conf"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -581,7 +571,7 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource23ref { ResourceID = "[nxFileLine][V-204450.b][medium][SRG-OS-000378-GPOS-00163]::[RHEL]Baseline"; ContainsLine = "install dccp /bin/true"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/modprobe.d/dccp.conf"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -592,7 +582,7 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource24ref { ResourceID = "[nxFileLine][V-204450.c][medium][SRG-OS-000378-GPOS-00163]::[RHEL]Baseline"; ContainsLine = "blacklist dccp"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/modprobe.d/blacklist.conf"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -603,7 +593,7 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource25ref { ResourceID = "[nxFileLine][V-204452][low][SRG-OS-000437-GPOS-00194]::[RHEL]Baseline"; ContainsLine = "clean_requirements_on_remove=1"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/yum.conf"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -614,7 +604,7 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource26ref { ResourceID = "[nxFileLine][V-204453][medium][SRG-OS-000445-GPOS-00199]::[RHEL]Baseline"; ContainsLine = "SELINUX=enforcing"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/selinux/config"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -625,7 +615,7 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource27ref { ResourceID = "[nxFileLine][V-204454][medium][SRG-OS-000445-GPOS-00199]::[RHEL]Baseline"; ContainsLine = "SELINUXTYPE=targeted"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/selinux/config"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -636,7 +626,7 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource28ref { ResourceID = "[nxFileLine][V-204457][medium][SRG-OS-000480-GPOS-00228]::[RHEL]Baseline"; ContainsLine = "UMASK 077"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/login.defs"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -647,7 +637,7 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource29ref { ResourceID = "[nxFileLine][V-204466][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; ContainsLine = "CREATE_HOME yes"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/login.defs"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -658,16 +648,16 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource30ref { ResourceID = "[nxFileLine][V-204504][medium][SRG-OS-000046-GPOS-00022]::[RHEL]Baseline"; ContainsLine = "-f 2"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "^#\\s*-f\\s+2|^\\s*-f\\s*1"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileResource as $MSFT_nxFileResource24ref +instance of MSFT_nxFileResource as $MSFT_nxFileResource23ref { -SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::29::9::nxFile"; +SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::29::9::nxFile"; ModuleName = "nx"; ModuleVersion = "1.0"; ResourceID = "[nxFile][V-204506.a][medium][SRG-OS-000342-GPOS-00133]::[RHEL]Baseline"; @@ -678,7 +668,7 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource31ref { ResourceID = "[nxFileLine][V-204506.a][medium][SRG-OS-000342-GPOS-00133]::[RHEL]Baseline"; ContainsLine = "active = yes"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audisp/plugins.d/au-remote.conf"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -689,7 +679,7 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource32ref { ResourceID = "[nxFileLine][V-204506.b][medium][SRG-OS-000342-GPOS-00133]::[RHEL]Baseline"; ContainsLine = "direction = out"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audisp/plugins.d/au-remote.conf"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -700,7 +690,7 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource33ref { ResourceID = "[nxFileLine][V-204506.c][medium][SRG-OS-000342-GPOS-00133]::[RHEL]Baseline"; ContainsLine = "path = /sbin/audisp-remote"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audisp/plugins.d/au-remote.conf"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -711,7 +701,7 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource34ref { ResourceID = "[nxFileLine][V-204506.d][medium][SRG-OS-000342-GPOS-00133]::[RHEL]Baseline"; ContainsLine = "type = always"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audisp/plugins.d/au-remote.conf"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -722,7 +712,7 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource35ref { ResourceID = "[nxFileLine][V-204507][medium][SRG-OS-000342-GPOS-00133]::[RHEL]Baseline"; ContainsLine = "overflow_action = syslog"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audisp/audispd.conf"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -733,16 +723,16 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource36ref { ResourceID = "[nxFileLine][V-204508][medium][SRG-OS-000342-GPOS-00133]::[RHEL]Baseline"; ContainsLine = "name_format = hostname"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audisp/audispd.conf"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "^#\\s*name_format.*$|^name_format\\s*=\\s*(?!hostname$)\\w*$"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileResource as $MSFT_nxFileResource25ref +instance of MSFT_nxFileResource as $MSFT_nxFileResource24ref { -SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::19::9::nxFile"; +SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::19::9::nxFile"; ModuleName = "nx"; ModuleVersion = "1.0"; ResourceID = "[nxFile][V-204510][medium][SRG-OS-000342-GPOS-00133]::[RHEL]Baseline"; @@ -753,7 +743,7 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource37ref { ResourceID = "[nxFileLine][V-204510][medium][SRG-OS-000342-GPOS-00133]::[RHEL]Baseline"; ContainsLine = "enable_krb5 = yes"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audisp/audisp-remote.conf"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -764,7 +754,7 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource38ref { ResourceID = "[nxFileLine][V-204511][medium][SRG-OS-000342-GPOS-00133]::[RHEL]Baseline"; ContainsLine = "disk_full_action = single"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audisp/audisp-remote.conf"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -775,7 +765,7 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource39ref { ResourceID = "[nxFileLine][V-204512][medium][SRG-OS-000342-GPOS-00133]::[RHEL]Baseline"; ContainsLine = "network_failure_action = syslog"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audisp/audisp-remote.conf"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -786,7 +776,7 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource40ref { ResourceID = "[nxFileLine][V-204514][medium][SRG-OS-000343-GPOS-00134]::[RHEL]Baseline"; ContainsLine = "space_left_action = email"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/auditd.conf"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -797,7 +787,7 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource41ref { ResourceID = "[nxFileLine][V-204515][medium][SRG-OS-000343-GPOS-00134]::[RHEL]Baseline"; ContainsLine = "action_mail_acct = root"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/auditd.conf"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -808,7 +798,7 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource42ref { ResourceID = "[nxFileLine][V-204516.a][medium][SRG-OS-000327-GPOS-00127]::[RHEL]Baseline"; ContainsLine = "-a always,exit -F arch=b32 -S execve -C uid!=euid -F euid=0 -k setuid"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -819,7 +809,7 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource43ref { ResourceID = "[nxFileLine][V-204516.b][medium][SRG-OS-000327-GPOS-00127]::[RHEL]Baseline"; ContainsLine = "-a always,exit -F arch=b64 -S execve -C uid!=euid -F euid=0 -k setuid"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -830,7 +820,7 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource44ref { ResourceID = "[nxFileLine][V-204516.c][medium][SRG-OS-000327-GPOS-00127]::[RHEL]Baseline"; ContainsLine = "-a always,exit -F arch=b32 -S execve -C gid!=egid -F egid=0 -k setgid"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -841,7 +831,7 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource45ref { ResourceID = "[nxFileLine][V-204516.d][medium][SRG-OS-000327-GPOS-00127]::[RHEL]Baseline"; ContainsLine = "-a always,exit -F arch=b64 -S execve -C gid!=egid -F egid=0 -k setgid"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -851,1318 +841,779 @@ ResourceID = "[nxFileLine][V-204516.d][medium][SRG-OS-000327-GPOS-00127]::[RHEL] instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource46ref { ResourceID = "[nxFileLine][V-204517.a][medium][SRG-OS-000064-GPOS-00033]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S chown -F auid>=1000 -F auid!=unset -k perm_mod"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + ContainsLine = "-a always,exit -F arch=b32 -S chown,fchown,fchownat,lchown -F auid>=1000 -F auid!=unset -k perm_mod"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*chown\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*perm_mod"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*chown,fchown,fchownat,lchown\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*perm_mod"; ConfigurationName = "LinuxBaseLine"; }; instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource47ref { ResourceID = "[nxFileLine][V-204517.b][medium][SRG-OS-000064-GPOS-00033]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S chown -F auid>=1000 -F auid!=unset -k perm_mod"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + ContainsLine = "-a always,exit -F arch=b64 -S chown,fchown,fchownat,lchown -F auid>=1000 -F auid!=unset -k perm_mod"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*chown\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*perm_mod"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*chown,fchown,fchownat,lchown\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*perm_mod"; ConfigurationName = "LinuxBaseLine"; }; instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource48ref { -ResourceID = "[nxFileLine][V-204518.a][medium][SRG-OS-000064-GPOS-00033]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S fchown -F auid>=1000 -F auid!=unset -k perm_mod"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; +ResourceID = "[nxFileLine][V-204521.a][medium][SRG-OS-000458-GPOS-00203]::[RHEL]Baseline"; + ContainsLine = "-a always,exit -F arch=b32 -S chmod,fchmod,fchmodat -F auid>=1000 -F auid!=unset -k perm_mod"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*fchown\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*perm_mod"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*chmod,fchmod,fchmodat\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*perm_mod"; ConfigurationName = "LinuxBaseLine"; }; instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource49ref { -ResourceID = "[nxFileLine][V-204518.b][medium][SRG-OS-000064-GPOS-00033]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S fchown -F auid>=1000 -F auid!=unset -k perm_mod"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; +ResourceID = "[nxFileLine][V-204521.b][medium][SRG-OS-000458-GPOS-00203]::[RHEL]Baseline"; + ContainsLine = "-a always,exit -F arch=b64 -S chmod,fchmod,fchmodat -F auid>=1000 -F auid!=unset -k perm_mod"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*fchown\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*perm_mod"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*chmod,fchmod,fchmodat\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*perm_mod"; ConfigurationName = "LinuxBaseLine"; }; instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource50ref { -ResourceID = "[nxFileLine][V-204519.a][medium][SRG-OS-000064-GPOS-00033]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S lchown -F auid>=1000 -F auid!=unset -k perm_mod"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; +ResourceID = "[nxFileLine][V-204524.a][medium][SRG-OS-000458-GPOS-00203]::[RHEL]Baseline"; + ContainsLine = "-a always,exit -F arch=b32 -S setxattr,fsetxattr,lsetxattr,removexattr,fremovexattr,lremovexattr -F auid>=1000 -F auid!=unset -k perm_mod"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*lchown\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*perm_mod"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*setxattr,fsetxattr,lsetxattr,removexattr,fremovexattr,lremovexattr\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*perm_mod"; ConfigurationName = "LinuxBaseLine"; }; instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource51ref { -ResourceID = "[nxFileLine][V-204519.b][medium][SRG-OS-000064-GPOS-00033]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S lchown -F auid>=1000 -F auid!=unset -k perm_mod"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; +ResourceID = "[nxFileLine][V-204524.b][medium][SRG-OS-000458-GPOS-00203]::[RHEL]Baseline"; + ContainsLine = "-a always,exit -F arch=b64 -S setxattr,fsetxattr,lsetxattr,removexattr,fremovexattr,lremovexattr -F auid>=1000 -F auid!=unset -k perm_mod"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*lchown\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*perm_mod"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*setxattr,fsetxattr,lsetxattr,removexattr,fremovexattr,lremovexattr\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*perm_mod"; ConfigurationName = "LinuxBaseLine"; }; instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource52ref { -ResourceID = "[nxFileLine][V-204520.a][medium][SRG-OS-000064-GPOS-00033]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S fchownat -F auid>=1000 -F auid!=unset -k perm_mod"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; +ResourceID = "[nxFileLine][V-204531.a][medium][SRG-OS-000064-GPOS-00033]::[RHEL]Baseline"; + ContainsLine = "-a always,exit -F arch=b32 -S creat,open,openat,open_by_handle_at,truncate,ftruncate -F exit=-EPERM -F auid>=1000 -F auid!=unset -k access"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*fchownat\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*perm_mod"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*creat,open,openat,open_by_handle_at,truncate,ftruncate\\s*-F\\s*exit\\s*=\\s*-EPERM\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*access"; ConfigurationName = "LinuxBaseLine"; }; instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource53ref { -ResourceID = "[nxFileLine][V-204520.b][medium][SRG-OS-000064-GPOS-00033]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S fchownat -F auid>=1000 -F auid!=unset -k perm_mod"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; +ResourceID = "[nxFileLine][V-204531.b][medium][SRG-OS-000064-GPOS-00033]::[RHEL]Baseline"; + ContainsLine = "-a always,exit -F arch=b32 -S creat,open,openat,open_by_handle_at,truncate,ftruncate -F exit=-EACCES -F auid>=1000 -F auid!=unset -k access"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*fchownat\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*perm_mod"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*creat,open,openat,open_by_handle_at,truncate,ftruncate\\s*-F\\s*exit\\s*=\\s*-EACCES\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*access"; ConfigurationName = "LinuxBaseLine"; }; instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource54ref { -ResourceID = "[nxFileLine][V-204521.a][medium][SRG-OS-000458-GPOS-00203]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S chmod -F auid>=1000 -F auid!=unset -k perm_mod"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; +ResourceID = "[nxFileLine][V-204531.c][medium][SRG-OS-000064-GPOS-00033]::[RHEL]Baseline"; + ContainsLine = "-a always,exit -F arch=b64 -S creat,open,openat,open_by_handle_at,truncate,ftruncate -F exit=-EPERM -F auid>=1000 -F auid!=unset -k access"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*chmod\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*perm_mod"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*creat,open,openat,open_by_handle_at,truncate,ftruncate\\s*-F\\s*exit\\s*=\\s*-EPERM\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*access"; ConfigurationName = "LinuxBaseLine"; }; instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource55ref { -ResourceID = "[nxFileLine][V-204521.b][medium][SRG-OS-000458-GPOS-00203]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S chmod -F auid>=1000 -F auid!=unset -k perm_mod"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; +ResourceID = "[nxFileLine][V-204531.d][medium][SRG-OS-000064-GPOS-00033]::[RHEL]Baseline"; + ContainsLine = "-a always,exit -F arch=b64 -S creat,open,openat,open_by_handle_at,truncate,ftruncate -F exit=-EACCES -F auid>=1000 -F auid!=unset -k access"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*chmod\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*perm_mod"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*creat,open,openat,open_by_handle_at,truncate,ftruncate\\s*-F\\s*exit\\s*=\\s*-EACCES\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*access"; ConfigurationName = "LinuxBaseLine"; }; instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource56ref { -ResourceID = "[nxFileLine][V-204522.a][medium][SRG-OS-000458-GPOS-00203]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S fchmod -F auid>=1000 -F auid!=unset -k perm_mod"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*fchmod\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*perm_mod"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource57ref -{ -ResourceID = "[nxFileLine][V-204522.b][medium][SRG-OS-000458-GPOS-00203]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S fchmod -F auid>=1000 -F auid!=unset -k perm_mod"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*fchmod\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*perm_mod"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource58ref -{ -ResourceID = "[nxFileLine][V-204523.a][medium][SRG-OS-000458-GPOS-00203]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S fchmodat -F auid>=1000 -F auid!=unset -k perm_mod"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*fchmodat\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*perm_mod"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource59ref -{ -ResourceID = "[nxFileLine][V-204523.b][medium][SRG-OS-000458-GPOS-00203]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S fchmodat -F auid>=1000 -F auid!=unset -k perm_mod"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*fchmodat\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*perm_mod"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource60ref -{ -ResourceID = "[nxFileLine][V-204524.a][medium][SRG-OS-000458-GPOS-00203]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S setxattr -F auid>=1000 -F auid!=unset -k perm_mod"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*setxattr\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*perm_mod"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource61ref -{ -ResourceID = "[nxFileLine][V-204524.b][medium][SRG-OS-000458-GPOS-00203]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S setxattr -F auid>=1000 -F auid!=unset -k perm_mod"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*setxattr\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*perm_mod"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource62ref -{ -ResourceID = "[nxFileLine][V-204525.a][medium][SRG-OS-000458-GPOS-00203]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S fsetxattr -F auid>=1000 -F auid!=unset -k perm_mod"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*fsetxattr\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*perm_mod"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource63ref -{ -ResourceID = "[nxFileLine][V-204525.b][medium][SRG-OS-000458-GPOS-00203]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S fsetxattr -F auid>=1000 -F auid!=unset -k perm_mod"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*fsetxattr\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*perm_mod"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource64ref -{ -ResourceID = "[nxFileLine][V-204526.a][medium][SRG-OS-000458-GPOS-00203]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S lsetxattr -F auid>=1000 -F auid!=unset -k perm_mod"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*lsetxattr\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*perm_mod"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource65ref -{ -ResourceID = "[nxFileLine][V-204526.b][medium][SRG-OS-000458-GPOS-00203]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S lsetxattr -F auid>=1000 -F auid!=unset -k perm_mod"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*lsetxattr\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*perm_mod"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource66ref -{ -ResourceID = "[nxFileLine][V-204527.a][medium][SRG-OS-000458-GPOS-00203]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S removexattr -F auid>=1000 -F auid!=unset -k perm_mod"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*removexattr\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*perm_mod"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource67ref -{ -ResourceID = "[nxFileLine][V-204527.b][medium][SRG-OS-000458-GPOS-00203]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S removexattr -F auid>=1000 -F auid!=unset -k perm_mod"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*removexattr\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*perm_mod"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource68ref -{ -ResourceID = "[nxFileLine][V-204528.a][medium][SRG-OS-000458-GPOS-00203]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S fremovexattr -F auid>=1000 -F auid!=unset -k perm_mod"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*fremovexattr\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*perm_mod"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource69ref -{ -ResourceID = "[nxFileLine][V-204528.b][medium][SRG-OS-000458-GPOS-00203]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S fremovexattr -F auid>=1000 -F auid!=unset -k perm_mod"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*fremovexattr\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*perm_mod"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource70ref -{ -ResourceID = "[nxFileLine][V-204529.a][medium][SRG-OS-000458-GPOS-00203]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S lremovexattr -F auid>=1000 -F auid!=unset -k perm_mod"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*lremovexattr\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*perm_mod"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource71ref -{ -ResourceID = "[nxFileLine][V-204529.b][medium][SRG-OS-000458-GPOS-00203]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S lremovexattr -F auid>=1000 -F auid!=unset -k perm_mod"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*lremovexattr\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*perm_mod"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource72ref -{ -ResourceID = "[nxFileLine][V-204530.a][medium][SRG-OS-000064-GPOS-00033]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S creat F exit=-EPERM -F auid>=1000 -F auid!=unset -k access"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*creat\\s*F\\s*exit\\s*=\\s*-EPERM\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*access"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource73ref -{ -ResourceID = "[nxFileLine][V-204530.b][medium][SRG-OS-000064-GPOS-00033]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S creat -F exit=-EACCES -F auid>=1000 -F auid!=unset -k access"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*creat\\s*-F\\s*exit\\s*=\\s*-EACCES\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*access"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource74ref -{ -ResourceID = "[nxFileLine][V-204530.c][medium][SRG-OS-000064-GPOS-00033]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S creat -F exit=-EPERM -F auid>=1000 -F auid!=unset -k access"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*creat\\s*-F\\s*exit\\s*=\\s*-EPERM\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*access"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource75ref -{ -ResourceID = "[nxFileLine][V-204530.d][medium][SRG-OS-000064-GPOS-00033]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S creat -F exit=-EACCES -F auid>=1000 -F auid!=unset -k access"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*creat\\s*-F\\s*exit\\s*=\\s*-EACCES\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*access"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource76ref -{ -ResourceID = "[nxFileLine][V-204531.a][medium][SRG-OS-000064-GPOS-00033]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S open -F exit=-EPERM -F auid>=1000 -F auid!=unset -k access"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*open\\s*-F\\s*exit\\s*=\\s*-EPERM\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*access"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource77ref -{ -ResourceID = "[nxFileLine][V-204531.b][medium][SRG-OS-000064-GPOS-00033]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S open -F exit=-EACCES -F auid>=1000 -F auid!=unset -k access"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*open\\s*-F\\s*exit\\s*=\\s*-EACCES\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*access"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource78ref -{ -ResourceID = "[nxFileLine][V-204531.c][medium][SRG-OS-000064-GPOS-00033]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S open -F exit=-EPERM -F auid>=1000 -F auid!=unset -k access"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*open\\s*-F\\s*exit\\s*=\\s*-EPERM\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*access"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource79ref -{ -ResourceID = "[nxFileLine][V-204531.d][medium][SRG-OS-000064-GPOS-00033]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S open -F exit=-EACCES -F auid>=1000 -F auid!=unset -k access"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*open\\s*-F\\s*exit\\s*=\\s*-EACCES\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*access"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource80ref -{ -ResourceID = "[nxFileLine][V-204532.a][medium][SRG-OS-000064-GPOS-00033]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S openat -F exit=-EPERM -F auid>=1000 -F auid!=unset -k access"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*openat\\s*-F\\s*exit\\s*=\\s*-EPERM\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*access"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource81ref -{ -ResourceID = "[nxFileLine][V-204532.b][medium][SRG-OS-000064-GPOS-00033]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S openat -F exit=-EACCES -F auid>=1000 -F auid!=unset -k access"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*openat\\s*-F\\s*exit\\s*=\\s*-EACCES\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*access"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource82ref -{ -ResourceID = "[nxFileLine][V-204532.c][medium][SRG-OS-000064-GPOS-00033]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S openat -F exit=-EPERM -F auid>=1000 -F auid!=unset -k access"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*openat\\s*-F\\s*exit\\s*=\\s*-EPERM\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*access"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource83ref -{ -ResourceID = "[nxFileLine][V-204532.d][medium][SRG-OS-000064-GPOS-00033]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S openat -F exit=-EACCES -F auid>=1000 -F auid!=unset -k access"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*openat\\s*-F\\s*exit\\s*=\\s*-EACCES\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*access"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource84ref -{ -ResourceID = "[nxFileLine][V-204533.a][medium][SRG-OS-000064-GPOS-00033]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S open_by_handle_at -F exit=-EPERM -F auid>=1000 -F auid!=unset -k access"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*open_by_handle_at\\s*-F\\s*exit\\s*=\\s*-EPERM\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*access"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource85ref -{ -ResourceID = "[nxFileLine][V-204533.b][medium][SRG-OS-000064-GPOS-00033]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S open_by_handle_at -F exit=-EACCES -F auid>=1000 -F auid!=unset -k access"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*open_by_handle_at\\s*-F\\s*exit\\s*=\\s*-EACCES\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*access"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource86ref -{ -ResourceID = "[nxFileLine][V-204533.c][medium][SRG-OS-000064-GPOS-00033]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S open_by_handle_at -F exit=-EPERM -F auid>=1000 -F auid!=unset -k access"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*open_by_handle_at\\s*-F\\s*exit\\s*=\\s*-EPERM\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*access"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource87ref -{ -ResourceID = "[nxFileLine][V-204533.d][medium][SRG-OS-000064-GPOS-00033]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S open_by_handle_at -F exit=-EACCES -F auid>=1000 -F auid!=unset -k access"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*open_by_handle_at\\s*-F\\s*exit\\s*=\\s*-EACCES\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*access"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource88ref -{ -ResourceID = "[nxFileLine][V-204534.a][medium][SRG-OS-000064-GPOS-00033]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S truncate -F exit=-EPERM -F auid>=1000 -F auid!=unset -k access"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*truncate\\s*-F\\s*exit\\s*=\\s*-EPERM\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*access"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource89ref -{ -ResourceID = "[nxFileLine][V-204534.b][medium][SRG-OS-000064-GPOS-00033]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S truncate -F exit=-EACCES -F auid>=1000 -F auid!=unset -k access"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*truncate\\s*-F\\s*exit\\s*=\\s*-EACCES\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*access"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource90ref -{ -ResourceID = "[nxFileLine][V-204534.c][medium][SRG-OS-000064-GPOS-00033]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S truncate -F exit=-EPERM -F auid>=1000 -F auid!=unset -k access"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*truncate\\s*-F\\s*exit\\s*=\\s*-EPERM\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*access"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource91ref -{ -ResourceID = "[nxFileLine][V-204534.d][medium][SRG-OS-000064-GPOS-00033]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S truncate -F exit=-EACCES -F auid>=1000 -F auid!=unset -k access"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*truncate\\s*-F\\s*exit\\s*=\\s*-EACCES\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*access"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource92ref -{ -ResourceID = "[nxFileLine][V-204535.a][medium][SRG-OS-000064-GPOS-00033]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S ftruncate -F exit=-EPERM -F auid>=1000 -F auid!=unset -k access"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*ftruncate\\s*-F\\s*exit\\s*=\\s*-EPERM\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*access"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource93ref -{ -ResourceID = "[nxFileLine][V-204535.b][medium][SRG-OS-000064-GPOS-00033]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S ftruncate -F exit=-EACCES -F auid>=1000 -F auid!=unset -k access"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*ftruncate\\s*-F\\s*exit\\s*=\\s*-EACCES\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*access"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource94ref -{ -ResourceID = "[nxFileLine][V-204535.c][medium][SRG-OS-000064-GPOS-00033]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S ftruncate -F exit=-EPERM -F auid>=1000 -F auid!=unset -k access"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*ftruncate\\s*-F\\s*exit\\s*=\\s*-EPERM\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*access"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource95ref -{ -ResourceID = "[nxFileLine][V-204535.d][medium][SRG-OS-000064-GPOS-00033]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S ftruncate -F exit=-EACCES -F auid>=1000 -F auid!=unset -k access"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*ftruncate\\s*-F\\s*exit\\s*=\\s*-EACCES\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*access"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource96ref -{ ResourceID = "[nxFileLine][V-204536][medium][SRG-OS-000392-GPOS-00172]::[RHEL]Baseline"; ContainsLine = "-a always,exit -F path=/usr/sbin/semanage -F auid>=1000 -F auid!=unset -k privileged-priv_change"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/sbin/semanage\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-priv_change"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource97ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource57ref { ResourceID = "[nxFileLine][V-204537][medium][SRG-OS-000392-GPOS-00172]::[RHEL]Baseline"; ContainsLine = "-a always,exit -F path=/usr/sbin/setsebool -F auid>=1000 -F auid!=unset -k privileged-priv_change"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/sbin/setsebool\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-priv_change"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource98ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource58ref { ResourceID = "[nxFileLine][V-204538][medium][SRG-OS-000392-GPOS-00172]::[RHEL]Baseline"; ContainsLine = "-a always,exit -F path=/usr/bin/chcon -F auid>=1000 -F auid!=unset -k privileged-priv_change"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/bin/chcon\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-priv_change"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource99ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource59ref { ResourceID = "[nxFileLine][V-204539][medium][SRG-OS-000392-GPOS-00172]::[RHEL]Baseline"; ContainsLine = "-a always,exit -F path=/usr/sbin/setfiles -F auid>=1000 -F auid!=unset -k privileged-priv_change"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/sbin/setfiles\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-priv_change"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource100ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource60ref { ResourceID = "[nxFileLine][V-204540][medium][SRG-OS-000392-GPOS-00172]::[RHEL]Baseline"; ContainsLine = "-w /var/run/faillock -p wa -k logins"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "#\\s*-w\\s*/var/run/faillock\\s*-p\\s*wa\\s*-k\\s*logins"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource101ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource61ref { ResourceID = "[nxFileLine][V-204541][medium][SRG-OS-000392-GPOS-00172]::[RHEL]Baseline"; ContainsLine = "-w /var/log/lastlog -p wa -k logins"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "#\\s*-w\\s*/var/log/lastlog\\s*-p\\s*wa\\s*-k\\s*logins"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource102ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource62ref { ResourceID = "[nxFileLine][V-204542][medium][SRG-OS-000042-GPOS-00020]::[RHEL]Baseline"; ContainsLine = "-a always,exit -F path=/usr/bin/passwd -F auid>=1000 -F auid!=unset -k privileged-passwd"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/bin/passwd\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-passwd"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource103ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource63ref { ResourceID = "[nxFileLine][V-204543][medium][SRG-OS-000042-GPOS-00020]::[RHEL]Baseline"; ContainsLine = "-a always,exit -F path=/usr/sbin/unix_chkpwd -F auid>=1000 -F auid!=unset -k privileged-passwd"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/sbin/unix_chkpwd\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-passwd"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource104ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource64ref { ResourceID = "[nxFileLine][V-204544][medium][SRG-OS-000042-GPOS-00020]::[RHEL]Baseline"; ContainsLine = "-a always,exit -F path=/usr/bin/gpasswd -F auid>=1000 -F auid!=unset -k privileged-passwd"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/bin/gpasswd\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-passwd"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource105ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource65ref { ResourceID = "[nxFileLine][V-204545][medium][SRG-OS-000042-GPOS-00020]::[RHEL]Baseline"; ContainsLine = "-a always,exit -F path=/usr/bin/chage -F auid>=1000 -F auid!=unset -k privileged-passwd"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/bin/chage\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-passwd"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource106ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource66ref { ResourceID = "[nxFileLine][V-204546][medium][SRG-OS-000042-GPOS-00020]::[RHEL]Baseline"; ContainsLine = "-a always,exit -F path=/usr/sbin/userhelper -F auid>=1000 -F auid!=unset -k privileged-passwd"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/sbin/userhelper\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-passwd"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource107ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource67ref { ResourceID = "[nxFileLine][V-204547][medium][SRG-OS-000037-GPOS-00015]::[RHEL]Baseline"; ContainsLine = "-a always,exit -F path=/usr/bin/su -F auid>=1000 -F auid!=unset -k privileged-priv_change"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/bin/su\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-priv_change"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource108ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource68ref { ResourceID = "[nxFileLine][V-204548][medium][SRG-OS-000037-GPOS-00015]::[RHEL]Baseline"; ContainsLine = "-a always,exit -F path=/usr/bin/sudo -F auid>=1000 -F auid!=unset -k privileged-priv_change"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/bin/sudo\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-priv_change"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource109ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource69ref { ResourceID = "[nxFileLine][V-204549.a][medium][SRG-OS-000037-GPOS-00015]::[RHEL]Baseline"; ContainsLine = "-w /etc/sudoers -p wa -k privileged-actions"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "#\\s*-w /etc/sudoers -p wa -k privileged-actions"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource110ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource70ref { ResourceID = "[nxFileLine][V-204549.b][medium][SRG-OS-000037-GPOS-00015]::[RHEL]Baseline"; ContainsLine = "-w /etc/sudoers.d/ -p wa -k privileged-actions"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "#\\s*-w /etc/sudoers.d/ -p wa -k privileged-actions"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource111ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource71ref { ResourceID = "[nxFileLine][V-204550][medium][SRG-OS-000037-GPOS-00015]::[RHEL]Baseline"; ContainsLine = "-a always,exit -F path=/usr/bin/newgrp -F auid>=1000 -F auid!=unset -k privileged-priv_change"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/bin/newgrp\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-priv_change"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource112ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource72ref { ResourceID = "[nxFileLine][V-204551][medium][SRG-OS-000037-GPOS-00015]::[RHEL]Baseline"; ContainsLine = "-a always,exit -F path=/usr/bin/chsh -F auid>=1000 -F auid!=unset -k privileged-priv_change"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/bin/chsh\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-priv_change"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource113ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource73ref { ResourceID = "[nxFileLine][V-204552.a][medium][SRG-OS-000042-GPOS-00020]::[RHEL]Baseline"; ContainsLine = "-a always,exit -F arch=b32 -S mount -F auid>=1000 -F auid!=unset -k privileged-mount"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*mount\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-mount"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource114ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource74ref { ResourceID = "[nxFileLine][V-204552.b][medium][SRG-OS-000042-GPOS-00020]::[RHEL]Baseline"; ContainsLine = "-a always,exit -F arch=b64 -S mount -F auid>=1000 -F auid!=unset -k privileged-mount"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*mount\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-mount"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource115ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource75ref { ResourceID = "[nxFileLine][V-204552.c][medium][SRG-OS-000042-GPOS-00020]::[RHEL]Baseline"; ContainsLine = "-a always,exit -F path=/usr/bin/mount -F auid>=1000 -F auid!=unset -k privileged-mount"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/bin/mount\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-mount"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource116ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource76ref { ResourceID = "[nxFileLine][V-204553][medium][SRG-OS-000042-GPOS-00020]::[RHEL]Baseline"; ContainsLine = "-a always,exit -F path=/usr/bin/umount -F auid>=1000 -F auid!=unset -k privileged-mount"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/bin/umount\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-mount"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource117ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource77ref { ResourceID = "[nxFileLine][V-204554][medium][SRG-OS-000042-GPOS-00020]::[RHEL]Baseline"; ContainsLine = "-a always,exit -F path=/usr/sbin/postdrop -F auid>=1000 -F auid!=unset -k privileged-postfix"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/sbin/postdrop\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-postfix"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource118ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource78ref { ResourceID = "[nxFileLine][V-204555][medium][SRG-OS-000042-GPOS-00020]::[RHEL]Baseline"; ContainsLine = "-a always,exit -F path=/usr/sbin/postqueue -F auid>=1000 -F auid!=unset -k privileged-postfix"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/sbin/postqueue\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-postfix"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource119ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource79ref { ResourceID = "[nxFileLine][V-204556][medium][SRG-OS-000042-GPOS-00020]::[RHEL]Baseline"; ContainsLine = "-a always,exit -F path=/usr/libexec/openssh/ssh-keysign -F auid>=1000 -F auid!=unset -k privileged-ssh"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/libexec/openssh/ssh-keysign\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-ssh"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource120ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource80ref { ResourceID = "[nxFileLine][V-204557][medium][SRG-OS-000042-GPOS-00020]::[RHEL]Baseline"; ContainsLine = "-a always,exit -F path=/usr/bin/crontab -F auid>=1000 -F auid!=unset -k privileged-cron"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/bin/crontab\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-cron"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource121ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource81ref { ResourceID = "[nxFileLine][V-204558][medium][SRG-OS-000471-GPOS-00215]::[RHEL]Baseline"; ContainsLine = "-a always,exit -F path=/usr/sbin/pam_timestamp_check -F auid>=1000 -F auid!=unset -k privileged-pam"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/sbin/pam_timestamp_check\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-pam"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource122ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource82ref { ResourceID = "[nxFileLine][V-204559.a][medium][SRG-OS-000471-GPOS-00216]::[RHEL]Baseline"; ContainsLine = "-a always,exit -F arch=b32 -S create_module -k module-change"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*create_module\\s*-k\\s*module-change"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource123ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource83ref { ResourceID = "[nxFileLine][V-204559.b][medium][SRG-OS-000471-GPOS-00216]::[RHEL]Baseline"; ContainsLine = "-a always,exit -F arch=b64 -S create_module -k module-change"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*create_module\\s*-k\\s*module-change"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource124ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource84ref { ResourceID = "[nxFileLine][V-204560.a][medium][SRG-OS-000471-GPOS-00216]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S init_module -k module-change"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + ContainsLine = "-a always,exit -F arch=b32 -S init_module,finit_module -k modulechange"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*init_module\\s*-k\\s*module-change"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*init_module,finit_module\\s*-k\\s*modulechange"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource125ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource85ref { ResourceID = "[nxFileLine][V-204560.b][medium][SRG-OS-000471-GPOS-00216]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S init_module -k module-change"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + ContainsLine = "-a always,exit -F arch=b64 -S init_module,finit_module -k modulechange"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*init_module\\s*-k\\s*module-change"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*init_module,finit_module\\s*-k\\s*modulechange"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource126ref -{ -ResourceID = "[nxFileLine][V-204561.a][medium][SRG-OS-000471-GPOS-00216]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S finit_module -k module-change"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*finit_module\\s*-k\\s*module-change"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource127ref -{ -ResourceID = "[nxFileLine][V-204561.b][medium][SRG-OS-000471-GPOS-00216]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S finit_module -k module-change"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*finit_module\\s*-k\\s*module-change"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource128ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource86ref { ResourceID = "[nxFileLine][V-204562.a][medium][SRG-OS-000471-GPOS-00216]::[RHEL]Baseline"; ContainsLine = "-a always,exit -F arch=b32 -S delete_module -k module-change"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*delete_module\\s*-k\\s*module-change"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource129ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource87ref { ResourceID = "[nxFileLine][V-204562.b][medium][SRG-OS-000471-GPOS-00216]::[RHEL]Baseline"; ContainsLine = "-a always,exit -F arch=b64 -S delete_module -k module-change"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*delete_module\\s*-k\\s*module-change"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource130ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource88ref { ResourceID = "[nxFileLine][V-204563][medium][SRG-OS-000471-GPOS-00216]::[RHEL]Baseline"; ContainsLine = "-w /usr/bin/kmod -p x -F auid!=unset -k module-change"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "#\\s*-w\\s*/usr/bin/kmod\\s*-p\\s*x\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*module-change"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource131ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource89ref { ResourceID = "[nxFileLine][V-204564][medium][SRG-OS-000004-GPOS-00004]::[RHEL]Baseline"; ContainsLine = "-w /etc/passwd -p wa -k identity"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "#\\s*-w\\s*/etc/passwd\\s*-p\\s*wa\\s*-k\\s*identity"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource132ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource90ref { ResourceID = "[nxFileLine][V-204565][medium][SRG-OS-000004-GPOS-00004]::[RHEL]Baseline"; ContainsLine = "-w /etc/group -p wa -k identity"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "#\\s*-w\\s*/etc/group\\s*-p\\s*wa\\s*-k\\s*identity"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource133ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource91ref { ResourceID = "[nxFileLine][V-204566][medium][SRG-OS-000004-GPOS-00004]::[RHEL]Baseline"; ContainsLine = "-w /etc/gshadow -p wa -k identity"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "#\\s*-w\\s*/etc/gshadow\\s*-p\\s*wa\\s*-k\\s*identity"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource134ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource92ref { ResourceID = "[nxFileLine][V-204567][medium][SRG-OS-000004-GPOS-00004]::[RHEL]Baseline"; ContainsLine = "-w /etc/shadow -p wa -k identity"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "#\\s*-w\\s*/etc/shadow\\s*-p\\s*wa\\s*-k\\s*identity"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource135ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource93ref { ResourceID = "[nxFileLine][V-204568][medium][SRG-OS-000004-GPOS-00004]::[RHEL]Baseline"; ContainsLine = "-w /etc/security/opasswd -p wa -k identity"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "#\\s*-w\\s*/etc/security/opasswd\\s*-p\\s*wa\\s*-k\\s*identity"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource136ref -{ -ResourceID = "[nxFileLine][V-204569.a][medium][SRG-OS-000466-GPOS-00210]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S rename -F auid>=1000 -F auid!=unset -k delete"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*rename\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*delete"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource137ref -{ -ResourceID = "[nxFileLine][V-204569.b][medium][SRG-OS-000466-GPOS-00210]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S rename -F auid>=1000 -F auid!=unset -k delete"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*rename\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*delete"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource138ref -{ -ResourceID = "[nxFileLine][V-204570.a][medium][SRG-OS-000466-GPOS-00210]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S renameat -F auid>=1000 -F auid!=unset -k delete"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*renameat\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*delete"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource139ref -{ -ResourceID = "[nxFileLine][V-204570.b][medium][SRG-OS-000466-GPOS-00210]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S renameat -F auid>=1000 -F auid!=unset -k delete"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*renameat\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*delete"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource140ref -{ -ResourceID = "[nxFileLine][V-204571.a][medium][SRG-OS-000466-GPOS-00210]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S rmdir -F auid>=1000 -F auid!=unset -k delete"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*rmdir\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*delete"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource141ref -{ -ResourceID = "[nxFileLine][V-204571.b][medium][SRG-OS-000466-GPOS-00210]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S rmdir -F auid>=1000 -F auid!=unset -k delete"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*rmdir\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*delete"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource142ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource94ref { ResourceID = "[nxFileLine][V-204572.a][medium][SRG-OS-000466-GPOS-00210]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S unlink -F auid>=1000 -F auid!=unset -k delete"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + ContainsLine = "-a always,exit -F arch=b32 -S unlink,unlinkat,rename,renameat,rmdir -F auid>=1000 -F auid!=unset -k delete"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*unlink\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*delete"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*unlink,unlinkat,rename,renameat,rmdir\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*delete"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource143ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource95ref { ResourceID = "[nxFileLine][V-204572.b][medium][SRG-OS-000466-GPOS-00210]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S unlink -F auid>=1000 -F auid!=unset -k delete"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + ContainsLine = "-a always,exit -F arch=b64 -S unlink,unlinkat,rename,renameat,rmdir -F auid>=1000 -F auid!=unset -k delete"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*unlink\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*delete"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*unlink,unlinkat,rename,renameat,rmdir\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*delete"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource144ref -{ -ResourceID = "[nxFileLine][V-204573.a][medium][SRG-OS-000466-GPOS-00210]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S unlinkat -F auid>=1000 -F auid!=unset -k delete"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*unlinkat\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*delete"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource145ref -{ -ResourceID = "[nxFileLine][V-204573.b][medium][SRG-OS-000466-GPOS-00210]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S unlinkat -F auid>=1000 -F auid!=unset -k delete"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*unlinkat\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*delete"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource146ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource96ref { ResourceID = "[nxFileLine][V-204578][medium][SRG-OS-000033-GPOS-00014]::[RHEL]Baseline"; ContainsLine = "Ciphers aes256-ctr,aes192-ctr,aes128-ctr"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/ssh/sshd_config"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "^#\\s*Ciphers.*|^\\s*Ciphers\\s*aes128-ctr.*|^\\s*Ciphers\\s*aes192-ctr.*"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource147ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource97ref { ResourceID = "[nxFileLine][V-204579.b][medium][SRG-OS-000163-GPOS-00072]::[RHEL]Baseline"; ContainsLine = "declare -xr TMOUT=900"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/profile.d/tmout.sh"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "^\\s*TMOUT\\s*=\\s*[0-8]?[0-9]?[0-9]?$|^#\\s*TMOUT.*"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource148ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource98ref { ResourceID = "[nxFileLine][V-204580][medium][SRG-OS-000023-GPOS-00006]::[RHEL]Baseline"; ContainsLine = "banner /etc/issue"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/ssh/sshd_config"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "#\\s*banner\\s*/etc/issue"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource149ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource99ref { ResourceID = "[nxFileLine][V-204587][medium][SRG-OS-000163-GPOS-00072]::[RHEL]Baseline"; ContainsLine = "ClientAliveInterval 600"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/ssh/sshd_config"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "^\\s*ClientAliveInterval\\s*[0-5]?[0-9]?[0-9]?\\s*$|^#\\s*ClientAliveInterval.*|^\\s*ClientAliveInterval\\s*$"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource150ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource100ref { ResourceID = "[nxFileLine][V-204588][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; ContainsLine = "RhostsRSAAuthentication no"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/ssh/sshd_config"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "^#\\s*RhostsRSAAuthentication.*$|^RhostsRSAAuthentication\\s*(?!no\\b)\\w*$"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource151ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource101ref { ResourceID = "[nxFileLine][V-204589][medium][SRG-OS-000163-GPOS-00072]::[RHEL]Baseline"; ContainsLine = "ClientAliveCountMax 0"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/ssh/sshd_config"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "^#\\s*ClientAliveCountMax.*$|^ClientAliveCountMax\\s*(?!0\\b)\\w*$"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource152ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource102ref { ResourceID = "[nxFileLine][V-204590][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; ContainsLine = "IgnoreRhosts yes"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/ssh/sshd_config"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "^#\\s*IgnoreRhosts.*$|^IgnoreRhosts\\s*(?!yes\\b)\\w*$"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource153ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource103ref { ResourceID = "[nxFileLine][V-204591][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; ContainsLine = "PrintLastLog yes"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/ssh/sshd_config"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "^#\\s*PrintLastLog.*$|^PrintLastLog\\s*(?!yes\\b)\\w*$"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource154ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource104ref { ResourceID = "[nxFileLine][V-204592][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; ContainsLine = "PermitRootLogin no"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/ssh/sshd_config"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "^#\\s*PermitRootLogin.*$|^PermitRootLogin\\s*(?!no\\b)\\w*$"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource155ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource105ref { ResourceID = "[nxFileLine][V-204593][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; ContainsLine = "IgnoreUserKnownHosts yes"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/ssh/sshd_config"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "^#\\s*IgnoreUserKnownHosts.*$|^IgnoreUserKnownHosts\\s*(?!yes\\b)\\w*$"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource156ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource106ref { ResourceID = "[nxFileLine][V-204594][high][SRG-OS-000074-GPOS-00042]::[RHEL]Baseline"; ContainsLine = "Protocol 2"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/ssh/sshd_config"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "^#\\s*Protocol.*$|^Protocol\\s*(?!2\\b)\\w*$"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource157ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource107ref { ResourceID = "[nxFileLine][V-204595][medium][SRG-OS-000250-GPOS-00093]::[RHEL]Baseline"; ContainsLine = "MACs hmac-sha2-512,hmac-sha2-256"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/ssh/sshd_config"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "#\\s*MACs.*|\\s*MACs\\s*hmac-(?!sha2-512).*"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource158ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource108ref { ResourceID = "[nxFileLine][V-204598][medium][SRG-OS-000364-GPOS-00151]::[RHEL]Baseline"; ContainsLine = "GSSAPIAuthentication no"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/ssh/sshd_config"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "^#\\s*GSSAPIAuthentication.*$|^GSSAPIAuthentication\\s*(?!no\\b)\\w*$"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource159ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource109ref { ResourceID = "[nxFileLine][V-204599][medium][SRG-OS-000364-GPOS-00151]::[RHEL]Baseline"; ContainsLine = "KerberosAuthentication no"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/ssh/sshd_config"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "^#\\s*KerberosAuthentication.*$|^KerberosAuthentication\\s*(?!no\\b)\\w*$"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource160ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource110ref { ResourceID = "[nxFileLine][V-204600][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; ContainsLine = "StrictModes yes"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/ssh/sshd_config"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "^#\\s*StrictModes.*$|^StrictModes\\s*(?!yes\\b)\\w*$"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource161ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource111ref { ResourceID = "[nxFileLine][V-204601][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; ContainsLine = "UsePrivilegeSeparation sandbox"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/ssh/sshd_config"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "^#\\s*UsePrivilegeSeparation.*$|^UsePrivilegeSeparation\\s*(?!sandbox\\b)\\w*$"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource162ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource112ref { ResourceID = "[nxFileLine][V-204602][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; ContainsLine = "Compression delayed"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/ssh/sshd_config"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "^#\\s*Compression.*$|^Compression\\s*(?!delayed\\b)\\w*$"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource163ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource113ref { ResourceID = "[nxFileLine][V-204622][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; ContainsLine = "X11Forwarding no"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/ssh/sshd_config"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "^#\\s*X11Forwarding.*$|^X11Forwarding\\s*(?!no\\b)\\w*$"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource164ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource114ref { ResourceID = "[nxFileLine][V-233307][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; ContainsLine = "X11UseLocalhost yes"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/ssh/sshd_config"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "#\\s*X11UseLocalhost\\s*yes"; ConfigurationName = "LinuxBaseLine"; }; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource115ref +{ +ResourceID = "[nxFileLine][V-250314][medium][SRG-OS-000324-GPOS-00125]::[RHEL]Baseline"; + ContainsLine = "%wheel ALL=(ALL) TYPE=sysadm_t ROLE=sysadm_r ALL"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/sudoers"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*%wheel\\s*ALL\\s*=\\s*(ALL)\\s*TYPE\\s*=\\s*sysadm_t\\s*ROLE\\s*=\\s*sysadm_r\\s*ALL"; + ConfigurationName = "LinuxBaseLine"; +}; instance of MSFT_nxServiceResource as $MSFT_nxServiceResource1ref { ResourceID = "[nxService][V-204451][medium][SRG-OS-000114-GPOS-00059]::[RHEL]Baseline"; Controller = "systemd"; Enabled = False; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxService.ps1::13::9::nxService"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxService.ps1::13::9::nxService"; Name = "autofs"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -2173,7 +1624,7 @@ instance of MSFT_nxServiceResource as $MSFT_nxServiceResource2ref ResourceID = "[nxService][V-204492][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; Controller = "systemd"; Enabled = False; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxService.ps1::13::9::nxService"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxService.ps1::13::9::nxService"; Name = "kdump"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -2185,7 +1636,7 @@ ResourceID = "[nxService][V-204503][medium][SRG-OS-000038-GPOS-00016]::[RHEL]Bas Controller = "systemd"; State = "Running"; Enabled = True; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxService.ps1::22::9::nxService"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxService.ps1::22::9::nxService"; Name = "auditd"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -2197,7 +1648,7 @@ ResourceID = "[nxService][V-204586][medium][SRG-OS-000423-GPOS-00187]::[RHEL]Bas Controller = "systemd"; State = "Running"; Enabled = True; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxService.ps1::22::9::nxService"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxService.ps1::22::9::nxService"; Name = "sshd"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -2209,7 +1660,7 @@ ResourceID = "[nxService][V-204604.b][medium][SRG-OS-000480-GPOS-00227]::[RHEL]B Controller = "systemd"; State = "Running"; Enabled = True; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxService.ps1::22::9::nxService"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxService.ps1::22::9::nxService"; Name = "firewalld"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -2220,7 +1671,7 @@ instance of MSFT_nxScriptResource as $MSFT_nxScriptResource1ref ResourceID = "[nxScript][V-204399.b][medium][[Skip] SRG-OS-000029-GPOS-00010]::[RHEL]Baseline"; GetScript = "#!/bin/bash\necho [V-204399.b][medium][[Skip] SRG-OS-000029-GPOS-00010]"; TestScript = "#!/bin/bash\nexit 0"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxScript.skip.ps1::10::5::nxScript"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxScript.skip.ps1::10::5::nxScript"; SetScript = "#!/bin/bash"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -2231,7 +1682,7 @@ instance of MSFT_nxScriptResource as $MSFT_nxScriptResource2ref ResourceID = "[nxScript][V-204400][medium][[Skip] SRG-OS-000029-GPOS-00010]::[RHEL]Baseline"; GetScript = "#!/bin/bash\necho [V-204400][medium][[Skip] SRG-OS-000029-GPOS-00010]"; TestScript = "#!/bin/bash\nexit 0"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxScript.skip.ps1::10::5::nxScript"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxScript.skip.ps1::10::5::nxScript"; SetScript = "#!/bin/bash"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -2242,7 +1693,7 @@ instance of MSFT_nxScriptResource as $MSFT_nxScriptResource3ref ResourceID = "[nxScript][V-204403][medium][[Skip] SRG-OS-000029-GPOS-00010]::[RHEL]Baseline"; GetScript = "#!/bin/bash\necho [V-204403][medium][[Skip] SRG-OS-000029-GPOS-00010]"; TestScript = "#!/bin/bash\nexit 0"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxScript.skip.ps1::10::5::nxScript"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxScript.skip.ps1::10::5::nxScript"; SetScript = "#!/bin/bash"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -2253,7 +1704,7 @@ instance of MSFT_nxScriptResource as $MSFT_nxScriptResource4ref ResourceID = "[nxScript][V-204509][medium][[Skip] SRG-OS-000342-GPOS-00133]::[RHEL]Baseline"; GetScript = "#!/bin/bash\necho [V-204509][medium][[Skip] SRG-OS-000342-GPOS-00133]"; TestScript = "#!/bin/bash\nexit 0"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxScript.skip.ps1::10::5::nxScript"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxScript.skip.ps1::10::5::nxScript"; SetScript = "#!/bin/bash"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -2264,7 +1715,7 @@ instance of MSFT_nxScriptResource as $MSFT_nxScriptResource5ref ResourceID = "[nxScript][V-204513][medium][[Skip] SRG-OS-000343-GPOS-00134]::[RHEL]Baseline"; GetScript = "#!/bin/bash\necho [V-204513][medium][[Skip] SRG-OS-000343-GPOS-00134]"; TestScript = "#!/bin/bash\nexit 0"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxScript.skip.ps1::10::5::nxScript"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxScript.skip.ps1::10::5::nxScript"; SetScript = "#!/bin/bash"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -2275,7 +1726,7 @@ instance of MSFT_nxScriptResource as $MSFT_nxScriptResource6ref ResourceID = "[nxScript][V-204623][medium][[Skip] SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; GetScript = "#!/bin/bash\necho [V-204623][medium][[Skip] SRG-OS-000480-GPOS-00227]"; TestScript = "#!/bin/bash\nexit 0"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxScript.skip.ps1::10::5::nxScript"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxScript.skip.ps1::10::5::nxScript"; SetScript = "#!/bin/bash"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -2286,7 +1737,7 @@ instance of MSFT_nxScriptResource as $MSFT_nxScriptResource7ref ResourceID = "[nxScript][V-244557][medium][[Skip] SRG-OS-000080-GPOS-00048]::[RHEL]Baseline"; GetScript = "#!/bin/bash\necho [V-244557][medium][[Skip] SRG-OS-000080-GPOS-00048]"; TestScript = "#!/bin/bash\nexit 0"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxScript.skip.ps1::10::5::nxScript"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxScript.skip.ps1::10::5::nxScript"; SetScript = "#!/bin/bash"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -2297,7 +1748,7 @@ instance of MSFT_nxScriptResource as $MSFT_nxScriptResource8ref ResourceID = "[nxScript][V-244558][medium][[Skip] SRG-OS-000080-GPOS-00048]::[RHEL]Baseline"; GetScript = "#!/bin/bash\necho [V-244558][medium][[Skip] SRG-OS-000080-GPOS-00048]"; TestScript = "#!/bin/bash\nexit 0"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxScript.skip.ps1::10::5::nxScript"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxScript.skip.ps1::10::5::nxScript"; SetScript = "#!/bin/bash"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -2308,7 +1759,7 @@ instance of MSFT_nxScriptResource as $MSFT_nxScriptResource9ref ResourceID = "[nxScript][V-204399.a][medium][[Skip] SRG-OS-000029-GPOS-00010]::[RHEL]Baseline"; GetScript = "#!/bin/bash\necho [V-204399.a][medium][[Skip] SRG-OS-000029-GPOS-00010]"; TestScript = "#!/bin/bash\nexit 0"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxScript.skip.ps1::10::5::nxScript"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxScript.skip.ps1::10::5::nxScript"; SetScript = "#!/bin/bash"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -2325,7 +1776,7 @@ instance of OMI_ConfigurationDocument Author="Microsoft"; - GenerationDate="01/31/2022 17:13:26"; + GenerationDate="05/04/2022 09:09:33"; GenerationHost="Microsoft"; diff --git a/stig/linux/config/CentOS79.mof b/stig/linux/config/CentOS79.mof index b7715b0..19ff071 100644 --- a/stig/linux/config/CentOS79.mof +++ b/stig/linux/config/CentOS79.mof @@ -1,7 +1,7 @@ /* @TargetNode='CentOS79' @GeneratedBy=Microsoft -@GenerationDate=01/31/2022 17:13:26 +@GenerationDate=05/04/2022 09:09:33 @GenerationHost=Microsoft */ @@ -9,7 +9,7 @@ instance of MSFT_nxPackageResource as $MSFT_nxPackageResource1ref { ResourceID = "[nxPackage][V-204442][high][SRG-OS-000095-GPOS-00049]::[RHEL]Baseline"; Ensure = "Absent"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxPackage.ps1::8::5::nxPackage"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxPackage.ps1::8::5::nxPackage"; Name = "rsh-server"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -19,7 +19,7 @@ instance of MSFT_nxPackageResource as $MSFT_nxPackageResource2ref { ResourceID = "[nxPackage][V-204443][high][SRG-OS-000095-GPOS-00049]::[RHEL]Baseline"; Ensure = "Absent"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxPackage.ps1::8::5::nxPackage"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxPackage.ps1::8::5::nxPackage"; Name = "ypserv"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -29,7 +29,7 @@ instance of MSFT_nxPackageResource as $MSFT_nxPackageResource3ref { ResourceID = "[nxPackage][V-204497][high][SRG-OS-000033-GPOS-00014]::[RHEL]Baseline"; Ensure = "Present"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxPackage.ps1::8::5::nxPackage"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxPackage.ps1::8::5::nxPackage"; Name = "dracut-fips"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -39,7 +39,7 @@ instance of MSFT_nxPackageResource as $MSFT_nxPackageResource4ref { ResourceID = "[nxPackage][V-204498][low][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; Ensure = "Present"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxPackage.ps1::8::5::nxPackage"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxPackage.ps1::8::5::nxPackage"; Name = "aide"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -49,7 +49,7 @@ instance of MSFT_nxPackageResource as $MSFT_nxPackageResource5ref { ResourceID = "[nxPackage][V-204502][high][SRG-OS-000095-GPOS-00049]::[RHEL]Baseline"; Ensure = "Absent"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxPackage.ps1::8::5::nxPackage"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxPackage.ps1::8::5::nxPackage"; Name = "telnet-server"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -59,7 +59,7 @@ instance of MSFT_nxPackageResource as $MSFT_nxPackageResource6ref { ResourceID = "[nxPackage][V-204585][medium][SRG-OS-000423-GPOS-00187]::[RHEL]Baseline"; Ensure = "Present"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxPackage.ps1::8::5::nxPackage"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxPackage.ps1::8::5::nxPackage"; Name = "openssh-server"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -69,7 +69,7 @@ instance of MSFT_nxPackageResource as $MSFT_nxPackageResource7ref { ResourceID = "[nxPackage][V-204604.a][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; Ensure = "Present"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxPackage.ps1::8::5::nxPackage"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxPackage.ps1::8::5::nxPackage"; Name = "firewalld"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -79,7 +79,7 @@ instance of MSFT_nxPackageResource as $MSFT_nxPackageResource8ref { ResourceID = "[nxPackage][V-204620][high][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; Ensure = "Absent"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxPackage.ps1::8::5::nxPackage"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxPackage.ps1::8::5::nxPackage"; Name = "vsftpd"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -89,7 +89,7 @@ instance of MSFT_nxPackageResource as $MSFT_nxPackageResource9ref { ResourceID = "[nxPackage][V-204621][high][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; Ensure = "Absent"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxPackage.ps1::8::5::nxPackage"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxPackage.ps1::8::5::nxPackage"; Name = "tftp-server"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -99,7 +99,7 @@ instance of MSFT_nxPackageResource as $MSFT_nxPackageResource10ref { ResourceID = "[nxPackage][V-204631][medium][SRG-OS-000375-GPOS-00160]::[RHEL]Baseline"; Ensure = "Present"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxPackage.ps1::8::5::nxPackage"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxPackage.ps1::8::5::nxPackage"; Name = "pam_pkcs11"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -111,7 +111,7 @@ ResourceID = "[nxFile][V-204395][medium][SRG-OS-000023-GPOS-00006]::[RHEL]Baseli Contents = "You are accessing a U.S. Government (USG) Information System (IS) that is provided for USG-authorized use only.\n\nBy using this IS (which includes any device attached to this IS), you consent to the following conditions:\n\n-The USG routinely intercepts and monitors communications on this IS for purposes including, but not limited to, penetration testing, COMSEC monitoring, network operations and defense, personnel misconduct (PM), law enforcement (LE), and counterintelligence (CI) investigations.\n\n-At any time, the USG may inspect and seize data stored on this IS.\n\n-Communications using, or data stored on, this IS are not private, are subject to routine monitoring, interception, and search, and may be disclosed or used for any USG-authorized purpose.\n\n-This IS includes security measures (e.g., authentication and access controls) to protect USG interests--not for your personal benefit or privacy.\n\n-Notwithstanding the above, using this IS does not constitute consent to PM, LE or CI investigative searching or monitoring of the content of privileged communications, or work product, related to personal representation or services by attorneys, psychotherapists, or clergy, and their assistants. Such communications and work product are private and confidential. See User Agreement for details."; DestinationPath = "/etc/issue"; ModuleName = "nx"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; ModuleVersion = "1.0"; ConfigurationName = "LinuxBaseLine"; }; @@ -121,7 +121,7 @@ ResourceID = "[nxFile][V-204449.a][medium][SRG-OS-000114-GPOS-00059]::[RHEL]Base Contents = ""; DestinationPath = "/etc/modprobe.d/usb-storage.conf"; ModuleName = "nx"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; ModuleVersion = "1.0"; ConfigurationName = "LinuxBaseLine"; }; @@ -131,7 +131,7 @@ ResourceID = "[nxFile][V-204449.b][medium][SRG-OS-000114-GPOS-00059]::[RHEL]Base Contents = ""; DestinationPath = "/etc/modprobe.d/blacklist.conf"; ModuleName = "nx"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; ModuleVersion = "1.0"; ConfigurationName = "LinuxBaseLine"; }; @@ -141,7 +141,7 @@ ResourceID = "[nxFile][V-204450.a][medium][SRG-OS-000378-GPOS-00163]::[RHEL]Base Contents = ""; DestinationPath = "/etc/modprobe.d/dccp.conf"; ModuleName = "nx"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; ModuleVersion = "1.0"; ConfigurationName = "LinuxBaseLine"; }; @@ -151,7 +151,7 @@ ResourceID = "[nxFile][V-204576][low][SRG-OS-000027-GPOS-00008]::[RHEL]Baseline" Contents = "* hard maxlogins 10"; DestinationPath = "/etc/security/limits.d/204576-powerstig.conf"; ModuleName = "nx"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; ModuleVersion = "1.0"; ConfigurationName = "LinuxBaseLine"; }; @@ -161,7 +161,7 @@ ResourceID = "[nxFile][V-204579.a][medium][SRG-OS-000163-GPOS-00072]::[RHEL]Base Contents = ""; DestinationPath = "/etc/profile.d/tmout.sh"; ModuleName = "nx"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; ModuleVersion = "1.0"; ConfigurationName = "LinuxBaseLine"; }; @@ -171,7 +171,7 @@ ResourceID = "[nxFile][V-204584][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseli Contents = "kernel.randomize_va_space = 2"; DestinationPath = "/etc/sysctl.d/204584-powerstig.conf"; ModuleName = "nx"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; ModuleVersion = "1.0"; ConfigurationName = "LinuxBaseLine"; }; @@ -181,7 +181,7 @@ ResourceID = "[nxFile][V-204609][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseli Contents = "net.ipv4.conf.all.accept_source_route = 0"; DestinationPath = "/etc/sysctl.d/204609-powerstig.conf"; ModuleName = "nx"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; ModuleVersion = "1.0"; ConfigurationName = "LinuxBaseLine"; }; @@ -191,7 +191,7 @@ ResourceID = "[nxFile][V-204610][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseli Contents = "net.ipv4.conf.all.rp_filter = 1"; DestinationPath = "/etc/sysctl.d/204610-powerstig.conf"; ModuleName = "nx"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; ModuleVersion = "1.0"; ConfigurationName = "LinuxBaseLine"; }; @@ -201,7 +201,7 @@ ResourceID = "[nxFile][V-204611][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseli Contents = "net.ipv4.conf.default.rp_filter = 1"; DestinationPath = "/etc/sysctl.d/204611-powerstig.conf"; ModuleName = "nx"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; ModuleVersion = "1.0"; ConfigurationName = "LinuxBaseLine"; }; @@ -211,7 +211,7 @@ ResourceID = "[nxFile][V-204612][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseli Contents = "net.ipv4.conf.default.accept_source_route = 0"; DestinationPath = "/etc/sysctl.d/204612-powerstig.conf"; ModuleName = "nx"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; ModuleVersion = "1.0"; ConfigurationName = "LinuxBaseLine"; }; @@ -221,7 +221,7 @@ ResourceID = "[nxFile][V-204613][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseli Contents = "net.ipv4.icmp_echo_ignore_broadcasts = 1"; DestinationPath = "/etc/sysctl.d/204613-powerstig.conf"; ModuleName = "nx"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; ModuleVersion = "1.0"; ConfigurationName = "LinuxBaseLine"; }; @@ -231,7 +231,7 @@ ResourceID = "[nxFile][V-204614][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseli Contents = "net.ipv4.conf.default.accept_redirects = 0"; DestinationPath = "/etc/sysctl.d/204614-powerstig.conf"; ModuleName = "nx"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; ModuleVersion = "1.0"; ConfigurationName = "LinuxBaseLine"; }; @@ -241,7 +241,7 @@ ResourceID = "[nxFile][V-204615][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseli Contents = "net.ipv4.conf.all.accept_redirects = 0"; DestinationPath = "/etc/sysctl.d/204615-powerstig.conf"; ModuleName = "nx"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; ModuleVersion = "1.0"; ConfigurationName = "LinuxBaseLine"; }; @@ -251,7 +251,7 @@ ResourceID = "[nxFile][V-204616][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseli Contents = "net.ipv4.conf.default.send_redirects = 0"; DestinationPath = "/etc/sysctl.d/204616-powerstig.conf"; ModuleName = "nx"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; ModuleVersion = "1.0"; ConfigurationName = "LinuxBaseLine"; }; @@ -261,7 +261,7 @@ ResourceID = "[nxFile][V-204617][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseli Contents = "net.ipv4.conf.all.send_redirects = 0"; DestinationPath = "/etc/sysctl.d/204617-powerstig.conf"; ModuleName = "nx"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; ModuleVersion = "1.0"; ConfigurationName = "LinuxBaseLine"; }; @@ -271,7 +271,7 @@ ResourceID = "[nxFile][V-204625][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseli Contents = "net.ipv4.ip_forward = 0"; DestinationPath = "/etc/sysctl.d/204625-powerstig.conf"; ModuleName = "nx"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; ModuleVersion = "1.0"; ConfigurationName = "LinuxBaseLine"; }; @@ -281,7 +281,7 @@ ResourceID = "[nxFile][V-204630][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseli Contents = "net.ipv6.conf.all.accept_source_route = 0"; DestinationPath = "/etc/sysctl.d/204630-powerstig.conf"; ModuleName = "nx"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; ModuleVersion = "1.0"; ConfigurationName = "LinuxBaseLine"; }; @@ -291,7 +291,7 @@ ResourceID = "[nxFile][V-237634.a][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Base Contents = "Defaults !targetpw"; DestinationPath = "/etc/sudoers.d/237634a-powerstig.conf"; ModuleName = "nx"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; ModuleVersion = "1.0"; ConfigurationName = "LinuxBaseLine"; }; @@ -301,7 +301,7 @@ ResourceID = "[nxFile][V-237634.b][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Base Contents = "Defaults !rootpw"; DestinationPath = "/etc/sudoers.d/237634b-powerstig.conf"; ModuleName = "nx"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; ModuleVersion = "1.0"; ConfigurationName = "LinuxBaseLine"; }; @@ -311,7 +311,7 @@ ResourceID = "[nxFile][V-237634.c][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Base Contents = "Defaults !runaspw"; DestinationPath = "/etc/sudoers.d/237634c-powerstig.conf"; ModuleName = "nx"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; ModuleVersion = "1.0"; ConfigurationName = "LinuxBaseLine"; }; @@ -321,17 +321,7 @@ ResourceID = "[nxFile][V-237635][medium][SRG-OS-000373-GPOS-00156]::[RHEL]Baseli Contents = "Defaults timestamp_timeout=0"; DestinationPath = "/etc/sudoers.d/237635-powerstig.conf"; ModuleName = "nx"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; - ModuleVersion = "1.0"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileResource as $MSFT_nxFileResource23ref -{ -ResourceID = "[nxFile][V-250314][medium][SRG-OS-000324-GPOS-00125]::[RHEL]Baseline"; - Contents = "%wheel ALL=(ALL) TYPE=sysadm_t ROLE=sysadm_r ALL"; - DestinationPath = "/etc/sudoers.d/250314-powerstig.conf"; - ModuleName = "nx"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; ModuleVersion = "1.0"; ConfigurationName = "LinuxBaseLine"; }; @@ -339,7 +329,7 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource1ref { ResourceID = "[nxFileLine][V-204405][medium][SRG-OS-000069-GPOS-00037]::[RHEL]Baseline"; ContainsLine = "password substack system-auth"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/pam.d/passwd"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -350,7 +340,7 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource2ref { ResourceID = "[nxFileLine][V-204407][medium][SRG-OS-000069-GPOS-00037]::[RHEL]Baseline"; ContainsLine = "ucredit = -1"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/security/pwquality.conf"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -361,7 +351,7 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource3ref { ResourceID = "[nxFileLine][V-204408][medium][SRG-OS-000070-GPOS-00038]::[RHEL]Baseline"; ContainsLine = "lcredit = -1"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/security/pwquality.conf"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -372,7 +362,7 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource4ref { ResourceID = "[nxFileLine][V-204409][medium][SRG-OS-000071-GPOS-00039]::[RHEL]Baseline"; ContainsLine = "dcredit = -1"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/security/pwquality.conf"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -383,7 +373,7 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource5ref { ResourceID = "[nxFileLine][V-204410][medium][SRG-OS-000266-GPOS-00101]::[RHEL]Baseline"; ContainsLine = "ocredit=-1"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/security/pwquality.conf"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -394,7 +384,7 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource6ref { ResourceID = "[nxFileLine][V-204411][medium][SRG-OS-000072-GPOS-00040]::[RHEL]Baseline"; ContainsLine = "difok = 8"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/security/pwquality.conf"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -405,7 +395,7 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource7ref { ResourceID = "[nxFileLine][V-204412][medium][SRG-OS-000072-GPOS-00040]::[RHEL]Baseline"; ContainsLine = "minclass = 4"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/security/pwquality.conf"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -416,7 +406,7 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource8ref { ResourceID = "[nxFileLine][V-204413][medium][SRG-OS-000072-GPOS-00040]::[RHEL]Baseline"; ContainsLine = "maxrepeat = 3"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/security/pwquality.conf"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -427,18 +417,18 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource9ref { ResourceID = "[nxFileLine][V-204414][medium][SRG-OS-000072-GPOS-00040]::[RHEL]Baseline"; ContainsLine = "maxclassrepeat = 4"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/security/pwquality.conf"; ModuleName = "nx"; ModuleVersion = "1.0"; - DoesNotContainPattern = "^#\\s*maxclassrepeat\\s*=.*|^\\s*maxclassrepeat\\s*=\\s*(?:\\d{2,}|[3-9])"; + DoesNotContainPattern = "^#\\s*maxclassrepeat\\s*=.*|^\\s*maxclassrepeat\\s*=\\s*(?:\\d{2,}|[1-3|5-9])"; ConfigurationName = "LinuxBaseLine"; }; instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource10ref { ResourceID = "[nxFileLine][V-204416][medium][SRG-OS-000073-GPOS-00041]::[RHEL]Baseline"; ContainsLine = "ENCRYPT_METHOD SHA512"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/login.defs"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -449,7 +439,7 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource11ref { ResourceID = "[nxFileLine][V-204418][medium][SRG-OS-000075-GPOS-00043]::[RHEL]Baseline"; ContainsLine = "PASS_MIN_DAYS 1"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/login.defs"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -460,7 +450,7 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource12ref { ResourceID = "[nxFileLine][V-204420][medium][SRG-OS-000076-GPOS-00044]::[RHEL]Baseline"; ContainsLine = "PASS_MAX_DAYS 60"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/login.defs"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -471,7 +461,7 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource13ref { ResourceID = "[nxFileLine][V-204423][medium][SRG-OS-000078-GPOS-00046]::[RHEL]Baseline"; ContainsLine = "minlen = 15"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/security/pwquality.conf"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -482,7 +472,7 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource14ref { ResourceID = "[nxFileLine][V-204425][high][SRG-OS-000106-GPOS-00053]::[RHEL]Baseline"; ContainsLine = "PermitEmptyPasswords no"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/ssh/sshd_config"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -492,19 +482,19 @@ ResourceID = "[nxFileLine][V-204425][high][SRG-OS-000106-GPOS-00053]::[RHEL]Base instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource15ref { ResourceID = "[nxFileLine][V-204426][medium][SRG-OS-000118-GPOS-00060]::[RHEL]Baseline"; - ContainsLine = "INACTIVE=0"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + ContainsLine = "INACTIVE=35"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/default/useradd"; ModuleName = "nx"; ModuleVersion = "1.0"; - DoesNotContainPattern = "^#\\s*INACTIVE.*$|^INACTIVE\\s*=\\s*(?!0\\b)[-]*\\w*$"; + DoesNotContainPattern = "^#\\s*INACTIVE\\s*=.*|^\\s*INACTIVE\\s*=\\s*(3[5-9]|[4-9]\\d+|\\d{3,})"; ConfigurationName = "LinuxBaseLine"; }; instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource16ref { ResourceID = "[nxFileLine][V-204431][medium][SRG-OS-000480-GPOS-00226]::[RHEL]Baseline"; ContainsLine = "FAIL_DELAY 4"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/login.defs"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -515,7 +505,7 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource17ref { ResourceID = "[nxFileLine][V-204434][medium][SRG-OS-000480-GPOS-00229]::[RHEL]Baseline"; ContainsLine = "PermitUserEnvironment no"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/ssh/sshd_config"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -526,7 +516,7 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource18ref { ResourceID = "[nxFileLine][V-204435][medium][SRG-OS-000480-GPOS-00229]::[RHEL]Baseline"; ContainsLine = "HostbasedAuthentication no"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/ssh/sshd_config"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -537,7 +527,7 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource19ref { ResourceID = "[nxFileLine][V-204447][high][SRG-OS-000366-GPOS-00153]::[RHEL]Baseline"; ContainsLine = "gpgcheck=1"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/yum.conf"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -548,7 +538,7 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource20ref { ResourceID = "[nxFileLine][V-204448][high][SRG-OS-000366-GPOS-00153]::[RHEL]Baseline"; ContainsLine = "localpkg_gpgcheck=1"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/yum.conf"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -559,7 +549,7 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource21ref { ResourceID = "[nxFileLine][V-204449.c][medium][SRG-OS-000114-GPOS-00059]::[RHEL]Baseline"; ContainsLine = "install usb-storage /bin/true"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/modprobe.d/usb-storage.conf"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -570,7 +560,7 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource22ref { ResourceID = "[nxFileLine][V-204449.d][medium][SRG-OS-000114-GPOS-00059]::[RHEL]Baseline"; ContainsLine = "blacklist usb-storage"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/modprobe.d/blacklist.conf"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -581,7 +571,7 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource23ref { ResourceID = "[nxFileLine][V-204450.b][medium][SRG-OS-000378-GPOS-00163]::[RHEL]Baseline"; ContainsLine = "install dccp /bin/true"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/modprobe.d/dccp.conf"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -592,7 +582,7 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource24ref { ResourceID = "[nxFileLine][V-204450.c][medium][SRG-OS-000378-GPOS-00163]::[RHEL]Baseline"; ContainsLine = "blacklist dccp"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/modprobe.d/blacklist.conf"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -603,7 +593,7 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource25ref { ResourceID = "[nxFileLine][V-204452][low][SRG-OS-000437-GPOS-00194]::[RHEL]Baseline"; ContainsLine = "clean_requirements_on_remove=1"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/yum.conf"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -614,7 +604,7 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource26ref { ResourceID = "[nxFileLine][V-204453][medium][SRG-OS-000445-GPOS-00199]::[RHEL]Baseline"; ContainsLine = "SELINUX=enforcing"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/selinux/config"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -625,7 +615,7 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource27ref { ResourceID = "[nxFileLine][V-204454][medium][SRG-OS-000445-GPOS-00199]::[RHEL]Baseline"; ContainsLine = "SELINUXTYPE=targeted"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/selinux/config"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -636,7 +626,7 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource28ref { ResourceID = "[nxFileLine][V-204457][medium][SRG-OS-000480-GPOS-00228]::[RHEL]Baseline"; ContainsLine = "UMASK 077"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/login.defs"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -647,7 +637,7 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource29ref { ResourceID = "[nxFileLine][V-204466][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; ContainsLine = "CREATE_HOME yes"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/login.defs"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -658,16 +648,16 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource30ref { ResourceID = "[nxFileLine][V-204504][medium][SRG-OS-000046-GPOS-00022]::[RHEL]Baseline"; ContainsLine = "-f 2"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "^#\\s*-f\\s+2|^\\s*-f\\s*1"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileResource as $MSFT_nxFileResource24ref +instance of MSFT_nxFileResource as $MSFT_nxFileResource23ref { -SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::29::9::nxFile"; +SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::29::9::nxFile"; ModuleName = "nx"; ModuleVersion = "1.0"; ResourceID = "[nxFile][V-204506.a][medium][SRG-OS-000342-GPOS-00133]::[RHEL]Baseline"; @@ -678,7 +668,7 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource31ref { ResourceID = "[nxFileLine][V-204506.a][medium][SRG-OS-000342-GPOS-00133]::[RHEL]Baseline"; ContainsLine = "active = yes"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audisp/plugins.d/au-remote.conf"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -689,7 +679,7 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource32ref { ResourceID = "[nxFileLine][V-204506.b][medium][SRG-OS-000342-GPOS-00133]::[RHEL]Baseline"; ContainsLine = "direction = out"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audisp/plugins.d/au-remote.conf"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -700,7 +690,7 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource33ref { ResourceID = "[nxFileLine][V-204506.c][medium][SRG-OS-000342-GPOS-00133]::[RHEL]Baseline"; ContainsLine = "path = /sbin/audisp-remote"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audisp/plugins.d/au-remote.conf"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -711,7 +701,7 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource34ref { ResourceID = "[nxFileLine][V-204506.d][medium][SRG-OS-000342-GPOS-00133]::[RHEL]Baseline"; ContainsLine = "type = always"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audisp/plugins.d/au-remote.conf"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -722,7 +712,7 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource35ref { ResourceID = "[nxFileLine][V-204507][medium][SRG-OS-000342-GPOS-00133]::[RHEL]Baseline"; ContainsLine = "overflow_action = syslog"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audisp/audispd.conf"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -733,16 +723,16 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource36ref { ResourceID = "[nxFileLine][V-204508][medium][SRG-OS-000342-GPOS-00133]::[RHEL]Baseline"; ContainsLine = "name_format = hostname"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audisp/audispd.conf"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "^#\\s*name_format.*$|^name_format\\s*=\\s*(?!hostname$)\\w*$"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileResource as $MSFT_nxFileResource25ref +instance of MSFT_nxFileResource as $MSFT_nxFileResource24ref { -SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::19::9::nxFile"; +SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::19::9::nxFile"; ModuleName = "nx"; ModuleVersion = "1.0"; ResourceID = "[nxFile][V-204510][medium][SRG-OS-000342-GPOS-00133]::[RHEL]Baseline"; @@ -753,7 +743,7 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource37ref { ResourceID = "[nxFileLine][V-204510][medium][SRG-OS-000342-GPOS-00133]::[RHEL]Baseline"; ContainsLine = "enable_krb5 = yes"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audisp/audisp-remote.conf"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -764,7 +754,7 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource38ref { ResourceID = "[nxFileLine][V-204511][medium][SRG-OS-000342-GPOS-00133]::[RHEL]Baseline"; ContainsLine = "disk_full_action = single"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audisp/audisp-remote.conf"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -775,7 +765,7 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource39ref { ResourceID = "[nxFileLine][V-204512][medium][SRG-OS-000342-GPOS-00133]::[RHEL]Baseline"; ContainsLine = "network_failure_action = syslog"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audisp/audisp-remote.conf"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -786,7 +776,7 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource40ref { ResourceID = "[nxFileLine][V-204514][medium][SRG-OS-000343-GPOS-00134]::[RHEL]Baseline"; ContainsLine = "space_left_action = email"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/auditd.conf"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -797,7 +787,7 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource41ref { ResourceID = "[nxFileLine][V-204515][medium][SRG-OS-000343-GPOS-00134]::[RHEL]Baseline"; ContainsLine = "action_mail_acct = root"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/auditd.conf"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -808,7 +798,7 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource42ref { ResourceID = "[nxFileLine][V-204516.a][medium][SRG-OS-000327-GPOS-00127]::[RHEL]Baseline"; ContainsLine = "-a always,exit -F arch=b32 -S execve -C uid!=euid -F euid=0 -k setuid"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -819,7 +809,7 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource43ref { ResourceID = "[nxFileLine][V-204516.b][medium][SRG-OS-000327-GPOS-00127]::[RHEL]Baseline"; ContainsLine = "-a always,exit -F arch=b64 -S execve -C uid!=euid -F euid=0 -k setuid"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -830,7 +820,7 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource44ref { ResourceID = "[nxFileLine][V-204516.c][medium][SRG-OS-000327-GPOS-00127]::[RHEL]Baseline"; ContainsLine = "-a always,exit -F arch=b32 -S execve -C gid!=egid -F egid=0 -k setgid"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -841,7 +831,7 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource45ref { ResourceID = "[nxFileLine][V-204516.d][medium][SRG-OS-000327-GPOS-00127]::[RHEL]Baseline"; ContainsLine = "-a always,exit -F arch=b64 -S execve -C gid!=egid -F egid=0 -k setgid"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -851,1318 +841,779 @@ ResourceID = "[nxFileLine][V-204516.d][medium][SRG-OS-000327-GPOS-00127]::[RHEL] instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource46ref { ResourceID = "[nxFileLine][V-204517.a][medium][SRG-OS-000064-GPOS-00033]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S chown -F auid>=1000 -F auid!=unset -k perm_mod"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + ContainsLine = "-a always,exit -F arch=b32 -S chown,fchown,fchownat,lchown -F auid>=1000 -F auid!=unset -k perm_mod"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*chown\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*perm_mod"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*chown,fchown,fchownat,lchown\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*perm_mod"; ConfigurationName = "LinuxBaseLine"; }; instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource47ref { ResourceID = "[nxFileLine][V-204517.b][medium][SRG-OS-000064-GPOS-00033]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S chown -F auid>=1000 -F auid!=unset -k perm_mod"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + ContainsLine = "-a always,exit -F arch=b64 -S chown,fchown,fchownat,lchown -F auid>=1000 -F auid!=unset -k perm_mod"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*chown\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*perm_mod"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*chown,fchown,fchownat,lchown\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*perm_mod"; ConfigurationName = "LinuxBaseLine"; }; instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource48ref { -ResourceID = "[nxFileLine][V-204518.a][medium][SRG-OS-000064-GPOS-00033]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S fchown -F auid>=1000 -F auid!=unset -k perm_mod"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; +ResourceID = "[nxFileLine][V-204521.a][medium][SRG-OS-000458-GPOS-00203]::[RHEL]Baseline"; + ContainsLine = "-a always,exit -F arch=b32 -S chmod,fchmod,fchmodat -F auid>=1000 -F auid!=unset -k perm_mod"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*fchown\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*perm_mod"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*chmod,fchmod,fchmodat\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*perm_mod"; ConfigurationName = "LinuxBaseLine"; }; instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource49ref { -ResourceID = "[nxFileLine][V-204518.b][medium][SRG-OS-000064-GPOS-00033]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S fchown -F auid>=1000 -F auid!=unset -k perm_mod"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; +ResourceID = "[nxFileLine][V-204521.b][medium][SRG-OS-000458-GPOS-00203]::[RHEL]Baseline"; + ContainsLine = "-a always,exit -F arch=b64 -S chmod,fchmod,fchmodat -F auid>=1000 -F auid!=unset -k perm_mod"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*fchown\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*perm_mod"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*chmod,fchmod,fchmodat\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*perm_mod"; ConfigurationName = "LinuxBaseLine"; }; instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource50ref { -ResourceID = "[nxFileLine][V-204519.a][medium][SRG-OS-000064-GPOS-00033]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S lchown -F auid>=1000 -F auid!=unset -k perm_mod"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; +ResourceID = "[nxFileLine][V-204524.a][medium][SRG-OS-000458-GPOS-00203]::[RHEL]Baseline"; + ContainsLine = "-a always,exit -F arch=b32 -S setxattr,fsetxattr,lsetxattr,removexattr,fremovexattr,lremovexattr -F auid>=1000 -F auid!=unset -k perm_mod"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*lchown\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*perm_mod"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*setxattr,fsetxattr,lsetxattr,removexattr,fremovexattr,lremovexattr\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*perm_mod"; ConfigurationName = "LinuxBaseLine"; }; instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource51ref { -ResourceID = "[nxFileLine][V-204519.b][medium][SRG-OS-000064-GPOS-00033]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S lchown -F auid>=1000 -F auid!=unset -k perm_mod"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; +ResourceID = "[nxFileLine][V-204524.b][medium][SRG-OS-000458-GPOS-00203]::[RHEL]Baseline"; + ContainsLine = "-a always,exit -F arch=b64 -S setxattr,fsetxattr,lsetxattr,removexattr,fremovexattr,lremovexattr -F auid>=1000 -F auid!=unset -k perm_mod"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*lchown\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*perm_mod"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*setxattr,fsetxattr,lsetxattr,removexattr,fremovexattr,lremovexattr\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*perm_mod"; ConfigurationName = "LinuxBaseLine"; }; instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource52ref { -ResourceID = "[nxFileLine][V-204520.a][medium][SRG-OS-000064-GPOS-00033]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S fchownat -F auid>=1000 -F auid!=unset -k perm_mod"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; +ResourceID = "[nxFileLine][V-204531.a][medium][SRG-OS-000064-GPOS-00033]::[RHEL]Baseline"; + ContainsLine = "-a always,exit -F arch=b32 -S creat,open,openat,open_by_handle_at,truncate,ftruncate -F exit=-EPERM -F auid>=1000 -F auid!=unset -k access"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*fchownat\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*perm_mod"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*creat,open,openat,open_by_handle_at,truncate,ftruncate\\s*-F\\s*exit\\s*=\\s*-EPERM\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*access"; ConfigurationName = "LinuxBaseLine"; }; instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource53ref { -ResourceID = "[nxFileLine][V-204520.b][medium][SRG-OS-000064-GPOS-00033]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S fchownat -F auid>=1000 -F auid!=unset -k perm_mod"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; +ResourceID = "[nxFileLine][V-204531.b][medium][SRG-OS-000064-GPOS-00033]::[RHEL]Baseline"; + ContainsLine = "-a always,exit -F arch=b32 -S creat,open,openat,open_by_handle_at,truncate,ftruncate -F exit=-EACCES -F auid>=1000 -F auid!=unset -k access"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*fchownat\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*perm_mod"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*creat,open,openat,open_by_handle_at,truncate,ftruncate\\s*-F\\s*exit\\s*=\\s*-EACCES\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*access"; ConfigurationName = "LinuxBaseLine"; }; instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource54ref { -ResourceID = "[nxFileLine][V-204521.a][medium][SRG-OS-000458-GPOS-00203]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S chmod -F auid>=1000 -F auid!=unset -k perm_mod"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; +ResourceID = "[nxFileLine][V-204531.c][medium][SRG-OS-000064-GPOS-00033]::[RHEL]Baseline"; + ContainsLine = "-a always,exit -F arch=b64 -S creat,open,openat,open_by_handle_at,truncate,ftruncate -F exit=-EPERM -F auid>=1000 -F auid!=unset -k access"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*chmod\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*perm_mod"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*creat,open,openat,open_by_handle_at,truncate,ftruncate\\s*-F\\s*exit\\s*=\\s*-EPERM\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*access"; ConfigurationName = "LinuxBaseLine"; }; instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource55ref { -ResourceID = "[nxFileLine][V-204521.b][medium][SRG-OS-000458-GPOS-00203]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S chmod -F auid>=1000 -F auid!=unset -k perm_mod"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; +ResourceID = "[nxFileLine][V-204531.d][medium][SRG-OS-000064-GPOS-00033]::[RHEL]Baseline"; + ContainsLine = "-a always,exit -F arch=b64 -S creat,open,openat,open_by_handle_at,truncate,ftruncate -F exit=-EACCES -F auid>=1000 -F auid!=unset -k access"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*chmod\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*perm_mod"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*creat,open,openat,open_by_handle_at,truncate,ftruncate\\s*-F\\s*exit\\s*=\\s*-EACCES\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*access"; ConfigurationName = "LinuxBaseLine"; }; instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource56ref { -ResourceID = "[nxFileLine][V-204522.a][medium][SRG-OS-000458-GPOS-00203]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S fchmod -F auid>=1000 -F auid!=unset -k perm_mod"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*fchmod\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*perm_mod"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource57ref -{ -ResourceID = "[nxFileLine][V-204522.b][medium][SRG-OS-000458-GPOS-00203]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S fchmod -F auid>=1000 -F auid!=unset -k perm_mod"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*fchmod\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*perm_mod"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource58ref -{ -ResourceID = "[nxFileLine][V-204523.a][medium][SRG-OS-000458-GPOS-00203]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S fchmodat -F auid>=1000 -F auid!=unset -k perm_mod"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*fchmodat\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*perm_mod"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource59ref -{ -ResourceID = "[nxFileLine][V-204523.b][medium][SRG-OS-000458-GPOS-00203]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S fchmodat -F auid>=1000 -F auid!=unset -k perm_mod"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*fchmodat\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*perm_mod"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource60ref -{ -ResourceID = "[nxFileLine][V-204524.a][medium][SRG-OS-000458-GPOS-00203]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S setxattr -F auid>=1000 -F auid!=unset -k perm_mod"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*setxattr\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*perm_mod"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource61ref -{ -ResourceID = "[nxFileLine][V-204524.b][medium][SRG-OS-000458-GPOS-00203]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S setxattr -F auid>=1000 -F auid!=unset -k perm_mod"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*setxattr\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*perm_mod"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource62ref -{ -ResourceID = "[nxFileLine][V-204525.a][medium][SRG-OS-000458-GPOS-00203]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S fsetxattr -F auid>=1000 -F auid!=unset -k perm_mod"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*fsetxattr\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*perm_mod"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource63ref -{ -ResourceID = "[nxFileLine][V-204525.b][medium][SRG-OS-000458-GPOS-00203]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S fsetxattr -F auid>=1000 -F auid!=unset -k perm_mod"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*fsetxattr\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*perm_mod"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource64ref -{ -ResourceID = "[nxFileLine][V-204526.a][medium][SRG-OS-000458-GPOS-00203]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S lsetxattr -F auid>=1000 -F auid!=unset -k perm_mod"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*lsetxattr\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*perm_mod"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource65ref -{ -ResourceID = "[nxFileLine][V-204526.b][medium][SRG-OS-000458-GPOS-00203]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S lsetxattr -F auid>=1000 -F auid!=unset -k perm_mod"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*lsetxattr\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*perm_mod"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource66ref -{ -ResourceID = "[nxFileLine][V-204527.a][medium][SRG-OS-000458-GPOS-00203]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S removexattr -F auid>=1000 -F auid!=unset -k perm_mod"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*removexattr\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*perm_mod"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource67ref -{ -ResourceID = "[nxFileLine][V-204527.b][medium][SRG-OS-000458-GPOS-00203]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S removexattr -F auid>=1000 -F auid!=unset -k perm_mod"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*removexattr\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*perm_mod"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource68ref -{ -ResourceID = "[nxFileLine][V-204528.a][medium][SRG-OS-000458-GPOS-00203]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S fremovexattr -F auid>=1000 -F auid!=unset -k perm_mod"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*fremovexattr\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*perm_mod"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource69ref -{ -ResourceID = "[nxFileLine][V-204528.b][medium][SRG-OS-000458-GPOS-00203]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S fremovexattr -F auid>=1000 -F auid!=unset -k perm_mod"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*fremovexattr\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*perm_mod"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource70ref -{ -ResourceID = "[nxFileLine][V-204529.a][medium][SRG-OS-000458-GPOS-00203]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S lremovexattr -F auid>=1000 -F auid!=unset -k perm_mod"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*lremovexattr\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*perm_mod"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource71ref -{ -ResourceID = "[nxFileLine][V-204529.b][medium][SRG-OS-000458-GPOS-00203]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S lremovexattr -F auid>=1000 -F auid!=unset -k perm_mod"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*lremovexattr\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*perm_mod"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource72ref -{ -ResourceID = "[nxFileLine][V-204530.a][medium][SRG-OS-000064-GPOS-00033]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S creat F exit=-EPERM -F auid>=1000 -F auid!=unset -k access"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*creat\\s*F\\s*exit\\s*=\\s*-EPERM\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*access"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource73ref -{ -ResourceID = "[nxFileLine][V-204530.b][medium][SRG-OS-000064-GPOS-00033]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S creat -F exit=-EACCES -F auid>=1000 -F auid!=unset -k access"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*creat\\s*-F\\s*exit\\s*=\\s*-EACCES\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*access"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource74ref -{ -ResourceID = "[nxFileLine][V-204530.c][medium][SRG-OS-000064-GPOS-00033]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S creat -F exit=-EPERM -F auid>=1000 -F auid!=unset -k access"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*creat\\s*-F\\s*exit\\s*=\\s*-EPERM\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*access"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource75ref -{ -ResourceID = "[nxFileLine][V-204530.d][medium][SRG-OS-000064-GPOS-00033]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S creat -F exit=-EACCES -F auid>=1000 -F auid!=unset -k access"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*creat\\s*-F\\s*exit\\s*=\\s*-EACCES\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*access"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource76ref -{ -ResourceID = "[nxFileLine][V-204531.a][medium][SRG-OS-000064-GPOS-00033]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S open -F exit=-EPERM -F auid>=1000 -F auid!=unset -k access"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*open\\s*-F\\s*exit\\s*=\\s*-EPERM\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*access"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource77ref -{ -ResourceID = "[nxFileLine][V-204531.b][medium][SRG-OS-000064-GPOS-00033]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S open -F exit=-EACCES -F auid>=1000 -F auid!=unset -k access"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*open\\s*-F\\s*exit\\s*=\\s*-EACCES\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*access"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource78ref -{ -ResourceID = "[nxFileLine][V-204531.c][medium][SRG-OS-000064-GPOS-00033]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S open -F exit=-EPERM -F auid>=1000 -F auid!=unset -k access"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*open\\s*-F\\s*exit\\s*=\\s*-EPERM\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*access"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource79ref -{ -ResourceID = "[nxFileLine][V-204531.d][medium][SRG-OS-000064-GPOS-00033]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S open -F exit=-EACCES -F auid>=1000 -F auid!=unset -k access"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*open\\s*-F\\s*exit\\s*=\\s*-EACCES\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*access"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource80ref -{ -ResourceID = "[nxFileLine][V-204532.a][medium][SRG-OS-000064-GPOS-00033]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S openat -F exit=-EPERM -F auid>=1000 -F auid!=unset -k access"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*openat\\s*-F\\s*exit\\s*=\\s*-EPERM\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*access"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource81ref -{ -ResourceID = "[nxFileLine][V-204532.b][medium][SRG-OS-000064-GPOS-00033]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S openat -F exit=-EACCES -F auid>=1000 -F auid!=unset -k access"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*openat\\s*-F\\s*exit\\s*=\\s*-EACCES\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*access"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource82ref -{ -ResourceID = "[nxFileLine][V-204532.c][medium][SRG-OS-000064-GPOS-00033]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S openat -F exit=-EPERM -F auid>=1000 -F auid!=unset -k access"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*openat\\s*-F\\s*exit\\s*=\\s*-EPERM\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*access"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource83ref -{ -ResourceID = "[nxFileLine][V-204532.d][medium][SRG-OS-000064-GPOS-00033]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S openat -F exit=-EACCES -F auid>=1000 -F auid!=unset -k access"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*openat\\s*-F\\s*exit\\s*=\\s*-EACCES\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*access"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource84ref -{ -ResourceID = "[nxFileLine][V-204533.a][medium][SRG-OS-000064-GPOS-00033]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S open_by_handle_at -F exit=-EPERM -F auid>=1000 -F auid!=unset -k access"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*open_by_handle_at\\s*-F\\s*exit\\s*=\\s*-EPERM\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*access"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource85ref -{ -ResourceID = "[nxFileLine][V-204533.b][medium][SRG-OS-000064-GPOS-00033]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S open_by_handle_at -F exit=-EACCES -F auid>=1000 -F auid!=unset -k access"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*open_by_handle_at\\s*-F\\s*exit\\s*=\\s*-EACCES\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*access"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource86ref -{ -ResourceID = "[nxFileLine][V-204533.c][medium][SRG-OS-000064-GPOS-00033]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S open_by_handle_at -F exit=-EPERM -F auid>=1000 -F auid!=unset -k access"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*open_by_handle_at\\s*-F\\s*exit\\s*=\\s*-EPERM\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*access"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource87ref -{ -ResourceID = "[nxFileLine][V-204533.d][medium][SRG-OS-000064-GPOS-00033]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S open_by_handle_at -F exit=-EACCES -F auid>=1000 -F auid!=unset -k access"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*open_by_handle_at\\s*-F\\s*exit\\s*=\\s*-EACCES\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*access"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource88ref -{ -ResourceID = "[nxFileLine][V-204534.a][medium][SRG-OS-000064-GPOS-00033]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S truncate -F exit=-EPERM -F auid>=1000 -F auid!=unset -k access"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*truncate\\s*-F\\s*exit\\s*=\\s*-EPERM\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*access"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource89ref -{ -ResourceID = "[nxFileLine][V-204534.b][medium][SRG-OS-000064-GPOS-00033]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S truncate -F exit=-EACCES -F auid>=1000 -F auid!=unset -k access"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*truncate\\s*-F\\s*exit\\s*=\\s*-EACCES\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*access"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource90ref -{ -ResourceID = "[nxFileLine][V-204534.c][medium][SRG-OS-000064-GPOS-00033]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S truncate -F exit=-EPERM -F auid>=1000 -F auid!=unset -k access"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*truncate\\s*-F\\s*exit\\s*=\\s*-EPERM\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*access"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource91ref -{ -ResourceID = "[nxFileLine][V-204534.d][medium][SRG-OS-000064-GPOS-00033]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S truncate -F exit=-EACCES -F auid>=1000 -F auid!=unset -k access"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*truncate\\s*-F\\s*exit\\s*=\\s*-EACCES\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*access"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource92ref -{ -ResourceID = "[nxFileLine][V-204535.a][medium][SRG-OS-000064-GPOS-00033]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S ftruncate -F exit=-EPERM -F auid>=1000 -F auid!=unset -k access"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*ftruncate\\s*-F\\s*exit\\s*=\\s*-EPERM\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*access"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource93ref -{ -ResourceID = "[nxFileLine][V-204535.b][medium][SRG-OS-000064-GPOS-00033]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S ftruncate -F exit=-EACCES -F auid>=1000 -F auid!=unset -k access"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*ftruncate\\s*-F\\s*exit\\s*=\\s*-EACCES\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*access"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource94ref -{ -ResourceID = "[nxFileLine][V-204535.c][medium][SRG-OS-000064-GPOS-00033]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S ftruncate -F exit=-EPERM -F auid>=1000 -F auid!=unset -k access"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*ftruncate\\s*-F\\s*exit\\s*=\\s*-EPERM\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*access"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource95ref -{ -ResourceID = "[nxFileLine][V-204535.d][medium][SRG-OS-000064-GPOS-00033]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S ftruncate -F exit=-EACCES -F auid>=1000 -F auid!=unset -k access"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*ftruncate\\s*-F\\s*exit\\s*=\\s*-EACCES\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*access"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource96ref -{ ResourceID = "[nxFileLine][V-204536][medium][SRG-OS-000392-GPOS-00172]::[RHEL]Baseline"; ContainsLine = "-a always,exit -F path=/usr/sbin/semanage -F auid>=1000 -F auid!=unset -k privileged-priv_change"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/sbin/semanage\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-priv_change"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource97ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource57ref { ResourceID = "[nxFileLine][V-204537][medium][SRG-OS-000392-GPOS-00172]::[RHEL]Baseline"; ContainsLine = "-a always,exit -F path=/usr/sbin/setsebool -F auid>=1000 -F auid!=unset -k privileged-priv_change"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/sbin/setsebool\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-priv_change"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource98ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource58ref { ResourceID = "[nxFileLine][V-204538][medium][SRG-OS-000392-GPOS-00172]::[RHEL]Baseline"; ContainsLine = "-a always,exit -F path=/usr/bin/chcon -F auid>=1000 -F auid!=unset -k privileged-priv_change"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/bin/chcon\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-priv_change"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource99ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource59ref { ResourceID = "[nxFileLine][V-204539][medium][SRG-OS-000392-GPOS-00172]::[RHEL]Baseline"; ContainsLine = "-a always,exit -F path=/usr/sbin/setfiles -F auid>=1000 -F auid!=unset -k privileged-priv_change"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/sbin/setfiles\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-priv_change"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource100ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource60ref { ResourceID = "[nxFileLine][V-204540][medium][SRG-OS-000392-GPOS-00172]::[RHEL]Baseline"; ContainsLine = "-w /var/run/faillock -p wa -k logins"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "#\\s*-w\\s*/var/run/faillock\\s*-p\\s*wa\\s*-k\\s*logins"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource101ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource61ref { ResourceID = "[nxFileLine][V-204541][medium][SRG-OS-000392-GPOS-00172]::[RHEL]Baseline"; ContainsLine = "-w /var/log/lastlog -p wa -k logins"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "#\\s*-w\\s*/var/log/lastlog\\s*-p\\s*wa\\s*-k\\s*logins"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource102ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource62ref { ResourceID = "[nxFileLine][V-204542][medium][SRG-OS-000042-GPOS-00020]::[RHEL]Baseline"; ContainsLine = "-a always,exit -F path=/usr/bin/passwd -F auid>=1000 -F auid!=unset -k privileged-passwd"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/bin/passwd\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-passwd"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource103ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource63ref { ResourceID = "[nxFileLine][V-204543][medium][SRG-OS-000042-GPOS-00020]::[RHEL]Baseline"; ContainsLine = "-a always,exit -F path=/usr/sbin/unix_chkpwd -F auid>=1000 -F auid!=unset -k privileged-passwd"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/sbin/unix_chkpwd\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-passwd"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource104ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource64ref { ResourceID = "[nxFileLine][V-204544][medium][SRG-OS-000042-GPOS-00020]::[RHEL]Baseline"; ContainsLine = "-a always,exit -F path=/usr/bin/gpasswd -F auid>=1000 -F auid!=unset -k privileged-passwd"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/bin/gpasswd\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-passwd"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource105ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource65ref { ResourceID = "[nxFileLine][V-204545][medium][SRG-OS-000042-GPOS-00020]::[RHEL]Baseline"; ContainsLine = "-a always,exit -F path=/usr/bin/chage -F auid>=1000 -F auid!=unset -k privileged-passwd"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/bin/chage\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-passwd"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource106ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource66ref { ResourceID = "[nxFileLine][V-204546][medium][SRG-OS-000042-GPOS-00020]::[RHEL]Baseline"; ContainsLine = "-a always,exit -F path=/usr/sbin/userhelper -F auid>=1000 -F auid!=unset -k privileged-passwd"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/sbin/userhelper\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-passwd"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource107ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource67ref { ResourceID = "[nxFileLine][V-204547][medium][SRG-OS-000037-GPOS-00015]::[RHEL]Baseline"; ContainsLine = "-a always,exit -F path=/usr/bin/su -F auid>=1000 -F auid!=unset -k privileged-priv_change"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/bin/su\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-priv_change"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource108ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource68ref { ResourceID = "[nxFileLine][V-204548][medium][SRG-OS-000037-GPOS-00015]::[RHEL]Baseline"; ContainsLine = "-a always,exit -F path=/usr/bin/sudo -F auid>=1000 -F auid!=unset -k privileged-priv_change"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/bin/sudo\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-priv_change"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource109ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource69ref { ResourceID = "[nxFileLine][V-204549.a][medium][SRG-OS-000037-GPOS-00015]::[RHEL]Baseline"; ContainsLine = "-w /etc/sudoers -p wa -k privileged-actions"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "#\\s*-w /etc/sudoers -p wa -k privileged-actions"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource110ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource70ref { ResourceID = "[nxFileLine][V-204549.b][medium][SRG-OS-000037-GPOS-00015]::[RHEL]Baseline"; ContainsLine = "-w /etc/sudoers.d/ -p wa -k privileged-actions"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "#\\s*-w /etc/sudoers.d/ -p wa -k privileged-actions"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource111ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource71ref { ResourceID = "[nxFileLine][V-204550][medium][SRG-OS-000037-GPOS-00015]::[RHEL]Baseline"; ContainsLine = "-a always,exit -F path=/usr/bin/newgrp -F auid>=1000 -F auid!=unset -k privileged-priv_change"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/bin/newgrp\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-priv_change"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource112ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource72ref { ResourceID = "[nxFileLine][V-204551][medium][SRG-OS-000037-GPOS-00015]::[RHEL]Baseline"; ContainsLine = "-a always,exit -F path=/usr/bin/chsh -F auid>=1000 -F auid!=unset -k privileged-priv_change"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/bin/chsh\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-priv_change"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource113ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource73ref { ResourceID = "[nxFileLine][V-204552.a][medium][SRG-OS-000042-GPOS-00020]::[RHEL]Baseline"; ContainsLine = "-a always,exit -F arch=b32 -S mount -F auid>=1000 -F auid!=unset -k privileged-mount"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*mount\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-mount"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource114ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource74ref { ResourceID = "[nxFileLine][V-204552.b][medium][SRG-OS-000042-GPOS-00020]::[RHEL]Baseline"; ContainsLine = "-a always,exit -F arch=b64 -S mount -F auid>=1000 -F auid!=unset -k privileged-mount"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*mount\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-mount"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource115ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource75ref { ResourceID = "[nxFileLine][V-204552.c][medium][SRG-OS-000042-GPOS-00020]::[RHEL]Baseline"; ContainsLine = "-a always,exit -F path=/usr/bin/mount -F auid>=1000 -F auid!=unset -k privileged-mount"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/bin/mount\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-mount"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource116ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource76ref { ResourceID = "[nxFileLine][V-204553][medium][SRG-OS-000042-GPOS-00020]::[RHEL]Baseline"; ContainsLine = "-a always,exit -F path=/usr/bin/umount -F auid>=1000 -F auid!=unset -k privileged-mount"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/bin/umount\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-mount"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource117ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource77ref { ResourceID = "[nxFileLine][V-204554][medium][SRG-OS-000042-GPOS-00020]::[RHEL]Baseline"; ContainsLine = "-a always,exit -F path=/usr/sbin/postdrop -F auid>=1000 -F auid!=unset -k privileged-postfix"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/sbin/postdrop\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-postfix"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource118ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource78ref { ResourceID = "[nxFileLine][V-204555][medium][SRG-OS-000042-GPOS-00020]::[RHEL]Baseline"; ContainsLine = "-a always,exit -F path=/usr/sbin/postqueue -F auid>=1000 -F auid!=unset -k privileged-postfix"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/sbin/postqueue\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-postfix"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource119ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource79ref { ResourceID = "[nxFileLine][V-204556][medium][SRG-OS-000042-GPOS-00020]::[RHEL]Baseline"; ContainsLine = "-a always,exit -F path=/usr/libexec/openssh/ssh-keysign -F auid>=1000 -F auid!=unset -k privileged-ssh"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/libexec/openssh/ssh-keysign\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-ssh"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource120ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource80ref { ResourceID = "[nxFileLine][V-204557][medium][SRG-OS-000042-GPOS-00020]::[RHEL]Baseline"; ContainsLine = "-a always,exit -F path=/usr/bin/crontab -F auid>=1000 -F auid!=unset -k privileged-cron"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/bin/crontab\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-cron"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource121ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource81ref { ResourceID = "[nxFileLine][V-204558][medium][SRG-OS-000471-GPOS-00215]::[RHEL]Baseline"; ContainsLine = "-a always,exit -F path=/usr/sbin/pam_timestamp_check -F auid>=1000 -F auid!=unset -k privileged-pam"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/sbin/pam_timestamp_check\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-pam"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource122ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource82ref { ResourceID = "[nxFileLine][V-204559.a][medium][SRG-OS-000471-GPOS-00216]::[RHEL]Baseline"; ContainsLine = "-a always,exit -F arch=b32 -S create_module -k module-change"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*create_module\\s*-k\\s*module-change"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource123ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource83ref { ResourceID = "[nxFileLine][V-204559.b][medium][SRG-OS-000471-GPOS-00216]::[RHEL]Baseline"; ContainsLine = "-a always,exit -F arch=b64 -S create_module -k module-change"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*create_module\\s*-k\\s*module-change"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource124ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource84ref { ResourceID = "[nxFileLine][V-204560.a][medium][SRG-OS-000471-GPOS-00216]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S init_module -k module-change"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + ContainsLine = "-a always,exit -F arch=b32 -S init_module,finit_module -k modulechange"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*init_module\\s*-k\\s*module-change"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*init_module,finit_module\\s*-k\\s*modulechange"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource125ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource85ref { ResourceID = "[nxFileLine][V-204560.b][medium][SRG-OS-000471-GPOS-00216]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S init_module -k module-change"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + ContainsLine = "-a always,exit -F arch=b64 -S init_module,finit_module -k modulechange"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*init_module\\s*-k\\s*module-change"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*init_module,finit_module\\s*-k\\s*modulechange"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource126ref -{ -ResourceID = "[nxFileLine][V-204561.a][medium][SRG-OS-000471-GPOS-00216]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S finit_module -k module-change"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*finit_module\\s*-k\\s*module-change"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource127ref -{ -ResourceID = "[nxFileLine][V-204561.b][medium][SRG-OS-000471-GPOS-00216]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S finit_module -k module-change"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*finit_module\\s*-k\\s*module-change"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource128ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource86ref { ResourceID = "[nxFileLine][V-204562.a][medium][SRG-OS-000471-GPOS-00216]::[RHEL]Baseline"; ContainsLine = "-a always,exit -F arch=b32 -S delete_module -k module-change"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*delete_module\\s*-k\\s*module-change"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource129ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource87ref { ResourceID = "[nxFileLine][V-204562.b][medium][SRG-OS-000471-GPOS-00216]::[RHEL]Baseline"; ContainsLine = "-a always,exit -F arch=b64 -S delete_module -k module-change"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*delete_module\\s*-k\\s*module-change"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource130ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource88ref { ResourceID = "[nxFileLine][V-204563][medium][SRG-OS-000471-GPOS-00216]::[RHEL]Baseline"; ContainsLine = "-w /usr/bin/kmod -p x -F auid!=unset -k module-change"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "#\\s*-w\\s*/usr/bin/kmod\\s*-p\\s*x\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*module-change"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource131ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource89ref { ResourceID = "[nxFileLine][V-204564][medium][SRG-OS-000004-GPOS-00004]::[RHEL]Baseline"; ContainsLine = "-w /etc/passwd -p wa -k identity"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "#\\s*-w\\s*/etc/passwd\\s*-p\\s*wa\\s*-k\\s*identity"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource132ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource90ref { ResourceID = "[nxFileLine][V-204565][medium][SRG-OS-000004-GPOS-00004]::[RHEL]Baseline"; ContainsLine = "-w /etc/group -p wa -k identity"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "#\\s*-w\\s*/etc/group\\s*-p\\s*wa\\s*-k\\s*identity"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource133ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource91ref { ResourceID = "[nxFileLine][V-204566][medium][SRG-OS-000004-GPOS-00004]::[RHEL]Baseline"; ContainsLine = "-w /etc/gshadow -p wa -k identity"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "#\\s*-w\\s*/etc/gshadow\\s*-p\\s*wa\\s*-k\\s*identity"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource134ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource92ref { ResourceID = "[nxFileLine][V-204567][medium][SRG-OS-000004-GPOS-00004]::[RHEL]Baseline"; ContainsLine = "-w /etc/shadow -p wa -k identity"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "#\\s*-w\\s*/etc/shadow\\s*-p\\s*wa\\s*-k\\s*identity"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource135ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource93ref { ResourceID = "[nxFileLine][V-204568][medium][SRG-OS-000004-GPOS-00004]::[RHEL]Baseline"; ContainsLine = "-w /etc/security/opasswd -p wa -k identity"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "#\\s*-w\\s*/etc/security/opasswd\\s*-p\\s*wa\\s*-k\\s*identity"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource136ref -{ -ResourceID = "[nxFileLine][V-204569.a][medium][SRG-OS-000466-GPOS-00210]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S rename -F auid>=1000 -F auid!=unset -k delete"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*rename\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*delete"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource137ref -{ -ResourceID = "[nxFileLine][V-204569.b][medium][SRG-OS-000466-GPOS-00210]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S rename -F auid>=1000 -F auid!=unset -k delete"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*rename\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*delete"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource138ref -{ -ResourceID = "[nxFileLine][V-204570.a][medium][SRG-OS-000466-GPOS-00210]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S renameat -F auid>=1000 -F auid!=unset -k delete"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*renameat\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*delete"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource139ref -{ -ResourceID = "[nxFileLine][V-204570.b][medium][SRG-OS-000466-GPOS-00210]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S renameat -F auid>=1000 -F auid!=unset -k delete"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*renameat\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*delete"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource140ref -{ -ResourceID = "[nxFileLine][V-204571.a][medium][SRG-OS-000466-GPOS-00210]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S rmdir -F auid>=1000 -F auid!=unset -k delete"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*rmdir\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*delete"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource141ref -{ -ResourceID = "[nxFileLine][V-204571.b][medium][SRG-OS-000466-GPOS-00210]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S rmdir -F auid>=1000 -F auid!=unset -k delete"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*rmdir\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*delete"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource142ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource94ref { ResourceID = "[nxFileLine][V-204572.a][medium][SRG-OS-000466-GPOS-00210]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S unlink -F auid>=1000 -F auid!=unset -k delete"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + ContainsLine = "-a always,exit -F arch=b32 -S unlink,unlinkat,rename,renameat,rmdir -F auid>=1000 -F auid!=unset -k delete"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*unlink\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*delete"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*unlink,unlinkat,rename,renameat,rmdir\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*delete"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource143ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource95ref { ResourceID = "[nxFileLine][V-204572.b][medium][SRG-OS-000466-GPOS-00210]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S unlink -F auid>=1000 -F auid!=unset -k delete"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + ContainsLine = "-a always,exit -F arch=b64 -S unlink,unlinkat,rename,renameat,rmdir -F auid>=1000 -F auid!=unset -k delete"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*unlink\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*delete"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*unlink,unlinkat,rename,renameat,rmdir\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*delete"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource144ref -{ -ResourceID = "[nxFileLine][V-204573.a][medium][SRG-OS-000466-GPOS-00210]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S unlinkat -F auid>=1000 -F auid!=unset -k delete"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*unlinkat\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*delete"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource145ref -{ -ResourceID = "[nxFileLine][V-204573.b][medium][SRG-OS-000466-GPOS-00210]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S unlinkat -F auid>=1000 -F auid!=unset -k delete"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*unlinkat\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*delete"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource146ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource96ref { ResourceID = "[nxFileLine][V-204578][medium][SRG-OS-000033-GPOS-00014]::[RHEL]Baseline"; ContainsLine = "Ciphers aes256-ctr,aes192-ctr,aes128-ctr"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/ssh/sshd_config"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "^#\\s*Ciphers.*|^\\s*Ciphers\\s*aes128-ctr.*|^\\s*Ciphers\\s*aes192-ctr.*"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource147ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource97ref { ResourceID = "[nxFileLine][V-204579.b][medium][SRG-OS-000163-GPOS-00072]::[RHEL]Baseline"; ContainsLine = "declare -xr TMOUT=900"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/profile.d/tmout.sh"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "^\\s*TMOUT\\s*=\\s*[0-8]?[0-9]?[0-9]?$|^#\\s*TMOUT.*"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource148ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource98ref { ResourceID = "[nxFileLine][V-204580][medium][SRG-OS-000023-GPOS-00006]::[RHEL]Baseline"; ContainsLine = "banner /etc/issue"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/ssh/sshd_config"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "#\\s*banner\\s*/etc/issue"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource149ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource99ref { ResourceID = "[nxFileLine][V-204587][medium][SRG-OS-000163-GPOS-00072]::[RHEL]Baseline"; ContainsLine = "ClientAliveInterval 600"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/ssh/sshd_config"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "^\\s*ClientAliveInterval\\s*[0-5]?[0-9]?[0-9]?\\s*$|^#\\s*ClientAliveInterval.*|^\\s*ClientAliveInterval\\s*$"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource150ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource100ref { ResourceID = "[nxFileLine][V-204588][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; ContainsLine = "RhostsRSAAuthentication no"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/ssh/sshd_config"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "^#\\s*RhostsRSAAuthentication.*$|^RhostsRSAAuthentication\\s*(?!no\\b)\\w*$"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource151ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource101ref { ResourceID = "[nxFileLine][V-204589][medium][SRG-OS-000163-GPOS-00072]::[RHEL]Baseline"; ContainsLine = "ClientAliveCountMax 0"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/ssh/sshd_config"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "^#\\s*ClientAliveCountMax.*$|^ClientAliveCountMax\\s*(?!0\\b)\\w*$"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource152ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource102ref { ResourceID = "[nxFileLine][V-204590][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; ContainsLine = "IgnoreRhosts yes"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/ssh/sshd_config"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "^#\\s*IgnoreRhosts.*$|^IgnoreRhosts\\s*(?!yes\\b)\\w*$"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource153ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource103ref { ResourceID = "[nxFileLine][V-204591][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; ContainsLine = "PrintLastLog yes"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/ssh/sshd_config"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "^#\\s*PrintLastLog.*$|^PrintLastLog\\s*(?!yes\\b)\\w*$"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource154ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource104ref { ResourceID = "[nxFileLine][V-204592][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; ContainsLine = "PermitRootLogin no"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/ssh/sshd_config"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "^#\\s*PermitRootLogin.*$|^PermitRootLogin\\s*(?!no\\b)\\w*$"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource155ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource105ref { ResourceID = "[nxFileLine][V-204593][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; ContainsLine = "IgnoreUserKnownHosts yes"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/ssh/sshd_config"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "^#\\s*IgnoreUserKnownHosts.*$|^IgnoreUserKnownHosts\\s*(?!yes\\b)\\w*$"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource156ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource106ref { ResourceID = "[nxFileLine][V-204594][high][SRG-OS-000074-GPOS-00042]::[RHEL]Baseline"; ContainsLine = "Protocol 2"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/ssh/sshd_config"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "^#\\s*Protocol.*$|^Protocol\\s*(?!2\\b)\\w*$"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource157ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource107ref { ResourceID = "[nxFileLine][V-204595][medium][SRG-OS-000250-GPOS-00093]::[RHEL]Baseline"; ContainsLine = "MACs hmac-sha2-512,hmac-sha2-256"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/ssh/sshd_config"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "#\\s*MACs.*|\\s*MACs\\s*hmac-(?!sha2-512).*"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource158ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource108ref { ResourceID = "[nxFileLine][V-204598][medium][SRG-OS-000364-GPOS-00151]::[RHEL]Baseline"; ContainsLine = "GSSAPIAuthentication no"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/ssh/sshd_config"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "^#\\s*GSSAPIAuthentication.*$|^GSSAPIAuthentication\\s*(?!no\\b)\\w*$"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource159ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource109ref { ResourceID = "[nxFileLine][V-204599][medium][SRG-OS-000364-GPOS-00151]::[RHEL]Baseline"; ContainsLine = "KerberosAuthentication no"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/ssh/sshd_config"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "^#\\s*KerberosAuthentication.*$|^KerberosAuthentication\\s*(?!no\\b)\\w*$"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource160ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource110ref { ResourceID = "[nxFileLine][V-204600][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; ContainsLine = "StrictModes yes"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/ssh/sshd_config"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "^#\\s*StrictModes.*$|^StrictModes\\s*(?!yes\\b)\\w*$"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource161ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource111ref { ResourceID = "[nxFileLine][V-204601][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; ContainsLine = "UsePrivilegeSeparation sandbox"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/ssh/sshd_config"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "^#\\s*UsePrivilegeSeparation.*$|^UsePrivilegeSeparation\\s*(?!sandbox\\b)\\w*$"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource162ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource112ref { ResourceID = "[nxFileLine][V-204602][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; ContainsLine = "Compression delayed"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/ssh/sshd_config"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "^#\\s*Compression.*$|^Compression\\s*(?!delayed\\b)\\w*$"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource163ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource113ref { ResourceID = "[nxFileLine][V-204622][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; ContainsLine = "X11Forwarding no"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/ssh/sshd_config"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "^#\\s*X11Forwarding.*$|^X11Forwarding\\s*(?!no\\b)\\w*$"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource164ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource114ref { ResourceID = "[nxFileLine][V-233307][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; ContainsLine = "X11UseLocalhost yes"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/ssh/sshd_config"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "#\\s*X11UseLocalhost\\s*yes"; ConfigurationName = "LinuxBaseLine"; }; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource115ref +{ +ResourceID = "[nxFileLine][V-250314][medium][SRG-OS-000324-GPOS-00125]::[RHEL]Baseline"; + ContainsLine = "%wheel ALL=(ALL) TYPE=sysadm_t ROLE=sysadm_r ALL"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/sudoers"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*%wheel\\s*ALL\\s*=\\s*(ALL)\\s*TYPE\\s*=\\s*sysadm_t\\s*ROLE\\s*=\\s*sysadm_r\\s*ALL"; + ConfigurationName = "LinuxBaseLine"; +}; instance of MSFT_nxServiceResource as $MSFT_nxServiceResource1ref { ResourceID = "[nxService][V-204451][medium][SRG-OS-000114-GPOS-00059]::[RHEL]Baseline"; Controller = "systemd"; Enabled = False; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxService.ps1::13::9::nxService"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxService.ps1::13::9::nxService"; Name = "autofs"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -2173,7 +1624,7 @@ instance of MSFT_nxServiceResource as $MSFT_nxServiceResource2ref ResourceID = "[nxService][V-204492][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; Controller = "systemd"; Enabled = False; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxService.ps1::13::9::nxService"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxService.ps1::13::9::nxService"; Name = "kdump"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -2185,7 +1636,7 @@ ResourceID = "[nxService][V-204503][medium][SRG-OS-000038-GPOS-00016]::[RHEL]Bas Controller = "systemd"; State = "Running"; Enabled = True; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxService.ps1::22::9::nxService"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxService.ps1::22::9::nxService"; Name = "auditd"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -2197,7 +1648,7 @@ ResourceID = "[nxService][V-204586][medium][SRG-OS-000423-GPOS-00187]::[RHEL]Bas Controller = "systemd"; State = "Running"; Enabled = True; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxService.ps1::22::9::nxService"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxService.ps1::22::9::nxService"; Name = "sshd"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -2209,7 +1660,7 @@ ResourceID = "[nxService][V-204604.b][medium][SRG-OS-000480-GPOS-00227]::[RHEL]B Controller = "systemd"; State = "Running"; Enabled = True; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxService.ps1::22::9::nxService"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxService.ps1::22::9::nxService"; Name = "firewalld"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -2220,7 +1671,7 @@ instance of MSFT_nxScriptResource as $MSFT_nxScriptResource1ref ResourceID = "[nxScript][V-204399.b][medium][[Skip] SRG-OS-000029-GPOS-00010]::[RHEL]Baseline"; GetScript = "#!/bin/bash\necho [V-204399.b][medium][[Skip] SRG-OS-000029-GPOS-00010]"; TestScript = "#!/bin/bash\nexit 0"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxScript.skip.ps1::10::5::nxScript"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxScript.skip.ps1::10::5::nxScript"; SetScript = "#!/bin/bash"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -2231,7 +1682,7 @@ instance of MSFT_nxScriptResource as $MSFT_nxScriptResource2ref ResourceID = "[nxScript][V-204400][medium][[Skip] SRG-OS-000029-GPOS-00010]::[RHEL]Baseline"; GetScript = "#!/bin/bash\necho [V-204400][medium][[Skip] SRG-OS-000029-GPOS-00010]"; TestScript = "#!/bin/bash\nexit 0"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxScript.skip.ps1::10::5::nxScript"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxScript.skip.ps1::10::5::nxScript"; SetScript = "#!/bin/bash"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -2242,7 +1693,7 @@ instance of MSFT_nxScriptResource as $MSFT_nxScriptResource3ref ResourceID = "[nxScript][V-204403][medium][[Skip] SRG-OS-000029-GPOS-00010]::[RHEL]Baseline"; GetScript = "#!/bin/bash\necho [V-204403][medium][[Skip] SRG-OS-000029-GPOS-00010]"; TestScript = "#!/bin/bash\nexit 0"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxScript.skip.ps1::10::5::nxScript"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxScript.skip.ps1::10::5::nxScript"; SetScript = "#!/bin/bash"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -2253,7 +1704,7 @@ instance of MSFT_nxScriptResource as $MSFT_nxScriptResource4ref ResourceID = "[nxScript][V-204509][medium][[Skip] SRG-OS-000342-GPOS-00133]::[RHEL]Baseline"; GetScript = "#!/bin/bash\necho [V-204509][medium][[Skip] SRG-OS-000342-GPOS-00133]"; TestScript = "#!/bin/bash\nexit 0"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxScript.skip.ps1::10::5::nxScript"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxScript.skip.ps1::10::5::nxScript"; SetScript = "#!/bin/bash"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -2264,7 +1715,7 @@ instance of MSFT_nxScriptResource as $MSFT_nxScriptResource5ref ResourceID = "[nxScript][V-204513][medium][[Skip] SRG-OS-000343-GPOS-00134]::[RHEL]Baseline"; GetScript = "#!/bin/bash\necho [V-204513][medium][[Skip] SRG-OS-000343-GPOS-00134]"; TestScript = "#!/bin/bash\nexit 0"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxScript.skip.ps1::10::5::nxScript"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxScript.skip.ps1::10::5::nxScript"; SetScript = "#!/bin/bash"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -2275,7 +1726,7 @@ instance of MSFT_nxScriptResource as $MSFT_nxScriptResource6ref ResourceID = "[nxScript][V-204623][medium][[Skip] SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; GetScript = "#!/bin/bash\necho [V-204623][medium][[Skip] SRG-OS-000480-GPOS-00227]"; TestScript = "#!/bin/bash\nexit 0"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxScript.skip.ps1::10::5::nxScript"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxScript.skip.ps1::10::5::nxScript"; SetScript = "#!/bin/bash"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -2286,7 +1737,7 @@ instance of MSFT_nxScriptResource as $MSFT_nxScriptResource7ref ResourceID = "[nxScript][V-244557][medium][[Skip] SRG-OS-000080-GPOS-00048]::[RHEL]Baseline"; GetScript = "#!/bin/bash\necho [V-244557][medium][[Skip] SRG-OS-000080-GPOS-00048]"; TestScript = "#!/bin/bash\nexit 0"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxScript.skip.ps1::10::5::nxScript"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxScript.skip.ps1::10::5::nxScript"; SetScript = "#!/bin/bash"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -2297,7 +1748,7 @@ instance of MSFT_nxScriptResource as $MSFT_nxScriptResource8ref ResourceID = "[nxScript][V-244558][medium][[Skip] SRG-OS-000080-GPOS-00048]::[RHEL]Baseline"; GetScript = "#!/bin/bash\necho [V-244558][medium][[Skip] SRG-OS-000080-GPOS-00048]"; TestScript = "#!/bin/bash\nexit 0"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxScript.skip.ps1::10::5::nxScript"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxScript.skip.ps1::10::5::nxScript"; SetScript = "#!/bin/bash"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -2308,7 +1759,7 @@ instance of MSFT_nxScriptResource as $MSFT_nxScriptResource9ref ResourceID = "[nxScript][V-204399.a][medium][[Skip] SRG-OS-000029-GPOS-00010]::[RHEL]Baseline"; GetScript = "#!/bin/bash\necho [V-204399.a][medium][[Skip] SRG-OS-000029-GPOS-00010]"; TestScript = "#!/bin/bash\nexit 0"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxScript.skip.ps1::10::5::nxScript"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxScript.skip.ps1::10::5::nxScript"; SetScript = "#!/bin/bash"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -2325,7 +1776,7 @@ instance of OMI_ConfigurationDocument Author="Microsoft"; - GenerationDate="01/31/2022 17:13:26"; + GenerationDate="05/04/2022 09:09:33"; GenerationHost="Microsoft"; diff --git a/stig/linux/config/RHEL72.mof b/stig/linux/config/RHEL72.mof index 0507771..4a2c868 100644 --- a/stig/linux/config/RHEL72.mof +++ b/stig/linux/config/RHEL72.mof @@ -1,7 +1,7 @@ /* @TargetNode='RHEL72' @GeneratedBy=Microsoft -@GenerationDate=01/31/2022 17:13:26 +@GenerationDate=05/04/2022 09:09:33 @GenerationHost=Microsoft */ @@ -9,7 +9,7 @@ instance of MSFT_nxPackageResource as $MSFT_nxPackageResource1ref { ResourceID = "[nxPackage][V-204442][high][SRG-OS-000095-GPOS-00049]::[RHEL]Baseline"; Ensure = "Absent"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxPackage.ps1::8::5::nxPackage"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxPackage.ps1::8::5::nxPackage"; Name = "rsh-server"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -19,7 +19,7 @@ instance of MSFT_nxPackageResource as $MSFT_nxPackageResource2ref { ResourceID = "[nxPackage][V-204443][high][SRG-OS-000095-GPOS-00049]::[RHEL]Baseline"; Ensure = "Absent"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxPackage.ps1::8::5::nxPackage"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxPackage.ps1::8::5::nxPackage"; Name = "ypserv"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -29,7 +29,7 @@ instance of MSFT_nxPackageResource as $MSFT_nxPackageResource3ref { ResourceID = "[nxPackage][V-204497][high][SRG-OS-000033-GPOS-00014]::[RHEL]Baseline"; Ensure = "Present"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxPackage.ps1::8::5::nxPackage"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxPackage.ps1::8::5::nxPackage"; Name = "dracut-fips"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -39,7 +39,7 @@ instance of MSFT_nxPackageResource as $MSFT_nxPackageResource4ref { ResourceID = "[nxPackage][V-204498][low][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; Ensure = "Present"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxPackage.ps1::8::5::nxPackage"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxPackage.ps1::8::5::nxPackage"; Name = "aide"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -49,7 +49,7 @@ instance of MSFT_nxPackageResource as $MSFT_nxPackageResource5ref { ResourceID = "[nxPackage][V-204502][high][SRG-OS-000095-GPOS-00049]::[RHEL]Baseline"; Ensure = "Absent"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxPackage.ps1::8::5::nxPackage"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxPackage.ps1::8::5::nxPackage"; Name = "telnet-server"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -59,7 +59,7 @@ instance of MSFT_nxPackageResource as $MSFT_nxPackageResource6ref { ResourceID = "[nxPackage][V-204585][medium][SRG-OS-000423-GPOS-00187]::[RHEL]Baseline"; Ensure = "Present"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxPackage.ps1::8::5::nxPackage"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxPackage.ps1::8::5::nxPackage"; Name = "openssh-server"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -69,7 +69,7 @@ instance of MSFT_nxPackageResource as $MSFT_nxPackageResource7ref { ResourceID = "[nxPackage][V-204604.a][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; Ensure = "Present"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxPackage.ps1::8::5::nxPackage"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxPackage.ps1::8::5::nxPackage"; Name = "firewalld"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -79,7 +79,7 @@ instance of MSFT_nxPackageResource as $MSFT_nxPackageResource8ref { ResourceID = "[nxPackage][V-204620][high][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; Ensure = "Absent"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxPackage.ps1::8::5::nxPackage"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxPackage.ps1::8::5::nxPackage"; Name = "vsftpd"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -89,7 +89,7 @@ instance of MSFT_nxPackageResource as $MSFT_nxPackageResource9ref { ResourceID = "[nxPackage][V-204621][high][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; Ensure = "Absent"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxPackage.ps1::8::5::nxPackage"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxPackage.ps1::8::5::nxPackage"; Name = "tftp-server"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -99,7 +99,7 @@ instance of MSFT_nxPackageResource as $MSFT_nxPackageResource10ref { ResourceID = "[nxPackage][V-204631][medium][SRG-OS-000375-GPOS-00160]::[RHEL]Baseline"; Ensure = "Present"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxPackage.ps1::8::5::nxPackage"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxPackage.ps1::8::5::nxPackage"; Name = "pam_pkcs11"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -111,7 +111,7 @@ ResourceID = "[nxFile][V-204395][medium][SRG-OS-000023-GPOS-00006]::[RHEL]Baseli Contents = "You are accessing a U.S. Government (USG) Information System (IS) that is provided for USG-authorized use only.\n\nBy using this IS (which includes any device attached to this IS), you consent to the following conditions:\n\n-The USG routinely intercepts and monitors communications on this IS for purposes including, but not limited to, penetration testing, COMSEC monitoring, network operations and defense, personnel misconduct (PM), law enforcement (LE), and counterintelligence (CI) investigations.\n\n-At any time, the USG may inspect and seize data stored on this IS.\n\n-Communications using, or data stored on, this IS are not private, are subject to routine monitoring, interception, and search, and may be disclosed or used for any USG-authorized purpose.\n\n-This IS includes security measures (e.g., authentication and access controls) to protect USG interests--not for your personal benefit or privacy.\n\n-Notwithstanding the above, using this IS does not constitute consent to PM, LE or CI investigative searching or monitoring of the content of privileged communications, or work product, related to personal representation or services by attorneys, psychotherapists, or clergy, and their assistants. Such communications and work product are private and confidential. See User Agreement for details."; DestinationPath = "/etc/issue"; ModuleName = "nx"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; ModuleVersion = "1.0"; ConfigurationName = "LinuxBaseLine"; }; @@ -121,7 +121,7 @@ ResourceID = "[nxFile][V-204449.a][medium][SRG-OS-000114-GPOS-00059]::[RHEL]Base Contents = ""; DestinationPath = "/etc/modprobe.d/usb-storage.conf"; ModuleName = "nx"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; ModuleVersion = "1.0"; ConfigurationName = "LinuxBaseLine"; }; @@ -131,7 +131,7 @@ ResourceID = "[nxFile][V-204449.b][medium][SRG-OS-000114-GPOS-00059]::[RHEL]Base Contents = ""; DestinationPath = "/etc/modprobe.d/blacklist.conf"; ModuleName = "nx"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; ModuleVersion = "1.0"; ConfigurationName = "LinuxBaseLine"; }; @@ -141,7 +141,7 @@ ResourceID = "[nxFile][V-204450.a][medium][SRG-OS-000378-GPOS-00163]::[RHEL]Base Contents = ""; DestinationPath = "/etc/modprobe.d/dccp.conf"; ModuleName = "nx"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; ModuleVersion = "1.0"; ConfigurationName = "LinuxBaseLine"; }; @@ -151,7 +151,7 @@ ResourceID = "[nxFile][V-204576][low][SRG-OS-000027-GPOS-00008]::[RHEL]Baseline" Contents = "* hard maxlogins 10"; DestinationPath = "/etc/security/limits.d/204576-powerstig.conf"; ModuleName = "nx"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; ModuleVersion = "1.0"; ConfigurationName = "LinuxBaseLine"; }; @@ -161,7 +161,7 @@ ResourceID = "[nxFile][V-204579.a][medium][SRG-OS-000163-GPOS-00072]::[RHEL]Base Contents = ""; DestinationPath = "/etc/profile.d/tmout.sh"; ModuleName = "nx"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; ModuleVersion = "1.0"; ConfigurationName = "LinuxBaseLine"; }; @@ -171,7 +171,7 @@ ResourceID = "[nxFile][V-204584][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseli Contents = "kernel.randomize_va_space = 2"; DestinationPath = "/etc/sysctl.d/204584-powerstig.conf"; ModuleName = "nx"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; ModuleVersion = "1.0"; ConfigurationName = "LinuxBaseLine"; }; @@ -181,7 +181,7 @@ ResourceID = "[nxFile][V-204609][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseli Contents = "net.ipv4.conf.all.accept_source_route = 0"; DestinationPath = "/etc/sysctl.d/204609-powerstig.conf"; ModuleName = "nx"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; ModuleVersion = "1.0"; ConfigurationName = "LinuxBaseLine"; }; @@ -191,7 +191,7 @@ ResourceID = "[nxFile][V-204610][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseli Contents = "net.ipv4.conf.all.rp_filter = 1"; DestinationPath = "/etc/sysctl.d/204610-powerstig.conf"; ModuleName = "nx"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; ModuleVersion = "1.0"; ConfigurationName = "LinuxBaseLine"; }; @@ -201,7 +201,7 @@ ResourceID = "[nxFile][V-204611][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseli Contents = "net.ipv4.conf.default.rp_filter = 1"; DestinationPath = "/etc/sysctl.d/204611-powerstig.conf"; ModuleName = "nx"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; ModuleVersion = "1.0"; ConfigurationName = "LinuxBaseLine"; }; @@ -211,7 +211,7 @@ ResourceID = "[nxFile][V-204612][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseli Contents = "net.ipv4.conf.default.accept_source_route = 0"; DestinationPath = "/etc/sysctl.d/204612-powerstig.conf"; ModuleName = "nx"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; ModuleVersion = "1.0"; ConfigurationName = "LinuxBaseLine"; }; @@ -221,7 +221,7 @@ ResourceID = "[nxFile][V-204613][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseli Contents = "net.ipv4.icmp_echo_ignore_broadcasts = 1"; DestinationPath = "/etc/sysctl.d/204613-powerstig.conf"; ModuleName = "nx"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; ModuleVersion = "1.0"; ConfigurationName = "LinuxBaseLine"; }; @@ -231,7 +231,7 @@ ResourceID = "[nxFile][V-204614][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseli Contents = "net.ipv4.conf.default.accept_redirects = 0"; DestinationPath = "/etc/sysctl.d/204614-powerstig.conf"; ModuleName = "nx"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; ModuleVersion = "1.0"; ConfigurationName = "LinuxBaseLine"; }; @@ -241,7 +241,7 @@ ResourceID = "[nxFile][V-204615][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseli Contents = "net.ipv4.conf.all.accept_redirects = 0"; DestinationPath = "/etc/sysctl.d/204615-powerstig.conf"; ModuleName = "nx"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; ModuleVersion = "1.0"; ConfigurationName = "LinuxBaseLine"; }; @@ -251,7 +251,7 @@ ResourceID = "[nxFile][V-204616][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseli Contents = "net.ipv4.conf.default.send_redirects = 0"; DestinationPath = "/etc/sysctl.d/204616-powerstig.conf"; ModuleName = "nx"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; ModuleVersion = "1.0"; ConfigurationName = "LinuxBaseLine"; }; @@ -261,7 +261,7 @@ ResourceID = "[nxFile][V-204617][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseli Contents = "net.ipv4.conf.all.send_redirects = 0"; DestinationPath = "/etc/sysctl.d/204617-powerstig.conf"; ModuleName = "nx"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; ModuleVersion = "1.0"; ConfigurationName = "LinuxBaseLine"; }; @@ -271,7 +271,7 @@ ResourceID = "[nxFile][V-204625][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseli Contents = "net.ipv4.ip_forward = 0"; DestinationPath = "/etc/sysctl.d/204625-powerstig.conf"; ModuleName = "nx"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; ModuleVersion = "1.0"; ConfigurationName = "LinuxBaseLine"; }; @@ -281,7 +281,7 @@ ResourceID = "[nxFile][V-204630][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseli Contents = "net.ipv6.conf.all.accept_source_route = 0"; DestinationPath = "/etc/sysctl.d/204630-powerstig.conf"; ModuleName = "nx"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; ModuleVersion = "1.0"; ConfigurationName = "LinuxBaseLine"; }; @@ -291,7 +291,7 @@ ResourceID = "[nxFile][V-237634.a][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Base Contents = "Defaults !targetpw"; DestinationPath = "/etc/sudoers.d/237634a-powerstig.conf"; ModuleName = "nx"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; ModuleVersion = "1.0"; ConfigurationName = "LinuxBaseLine"; }; @@ -301,7 +301,7 @@ ResourceID = "[nxFile][V-237634.b][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Base Contents = "Defaults !rootpw"; DestinationPath = "/etc/sudoers.d/237634b-powerstig.conf"; ModuleName = "nx"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; ModuleVersion = "1.0"; ConfigurationName = "LinuxBaseLine"; }; @@ -311,7 +311,7 @@ ResourceID = "[nxFile][V-237634.c][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Base Contents = "Defaults !runaspw"; DestinationPath = "/etc/sudoers.d/237634c-powerstig.conf"; ModuleName = "nx"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; ModuleVersion = "1.0"; ConfigurationName = "LinuxBaseLine"; }; @@ -321,17 +321,7 @@ ResourceID = "[nxFile][V-237635][medium][SRG-OS-000373-GPOS-00156]::[RHEL]Baseli Contents = "Defaults timestamp_timeout=0"; DestinationPath = "/etc/sudoers.d/237635-powerstig.conf"; ModuleName = "nx"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; - ModuleVersion = "1.0"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileResource as $MSFT_nxFileResource23ref -{ -ResourceID = "[nxFile][V-250314][medium][SRG-OS-000324-GPOS-00125]::[RHEL]Baseline"; - Contents = "%wheel ALL=(ALL) TYPE=sysadm_t ROLE=sysadm_r ALL"; - DestinationPath = "/etc/sudoers.d/250314-powerstig.conf"; - ModuleName = "nx"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; ModuleVersion = "1.0"; ConfigurationName = "LinuxBaseLine"; }; @@ -339,7 +329,7 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource1ref { ResourceID = "[nxFileLine][V-204405][medium][SRG-OS-000069-GPOS-00037]::[RHEL]Baseline"; ContainsLine = "password substack system-auth"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/pam.d/passwd"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -350,7 +340,7 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource2ref { ResourceID = "[nxFileLine][V-204407][medium][SRG-OS-000069-GPOS-00037]::[RHEL]Baseline"; ContainsLine = "ucredit = -1"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/security/pwquality.conf"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -361,7 +351,7 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource3ref { ResourceID = "[nxFileLine][V-204408][medium][SRG-OS-000070-GPOS-00038]::[RHEL]Baseline"; ContainsLine = "lcredit = -1"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/security/pwquality.conf"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -372,7 +362,7 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource4ref { ResourceID = "[nxFileLine][V-204409][medium][SRG-OS-000071-GPOS-00039]::[RHEL]Baseline"; ContainsLine = "dcredit = -1"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/security/pwquality.conf"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -383,7 +373,7 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource5ref { ResourceID = "[nxFileLine][V-204410][medium][SRG-OS-000266-GPOS-00101]::[RHEL]Baseline"; ContainsLine = "ocredit=-1"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/security/pwquality.conf"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -394,7 +384,7 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource6ref { ResourceID = "[nxFileLine][V-204411][medium][SRG-OS-000072-GPOS-00040]::[RHEL]Baseline"; ContainsLine = "difok = 8"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/security/pwquality.conf"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -405,7 +395,7 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource7ref { ResourceID = "[nxFileLine][V-204412][medium][SRG-OS-000072-GPOS-00040]::[RHEL]Baseline"; ContainsLine = "minclass = 4"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/security/pwquality.conf"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -416,7 +406,7 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource8ref { ResourceID = "[nxFileLine][V-204413][medium][SRG-OS-000072-GPOS-00040]::[RHEL]Baseline"; ContainsLine = "maxrepeat = 3"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/security/pwquality.conf"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -427,18 +417,18 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource9ref { ResourceID = "[nxFileLine][V-204414][medium][SRG-OS-000072-GPOS-00040]::[RHEL]Baseline"; ContainsLine = "maxclassrepeat = 4"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/security/pwquality.conf"; ModuleName = "nx"; ModuleVersion = "1.0"; - DoesNotContainPattern = "^#\\s*maxclassrepeat\\s*=.*|^\\s*maxclassrepeat\\s*=\\s*(?:\\d{2,}|[3-9])"; + DoesNotContainPattern = "^#\\s*maxclassrepeat\\s*=.*|^\\s*maxclassrepeat\\s*=\\s*(?:\\d{2,}|[1-3|5-9])"; ConfigurationName = "LinuxBaseLine"; }; instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource10ref { ResourceID = "[nxFileLine][V-204416][medium][SRG-OS-000073-GPOS-00041]::[RHEL]Baseline"; ContainsLine = "ENCRYPT_METHOD SHA512"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/login.defs"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -449,7 +439,7 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource11ref { ResourceID = "[nxFileLine][V-204418][medium][SRG-OS-000075-GPOS-00043]::[RHEL]Baseline"; ContainsLine = "PASS_MIN_DAYS 1"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/login.defs"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -460,7 +450,7 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource12ref { ResourceID = "[nxFileLine][V-204420][medium][SRG-OS-000076-GPOS-00044]::[RHEL]Baseline"; ContainsLine = "PASS_MAX_DAYS 60"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/login.defs"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -471,7 +461,7 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource13ref { ResourceID = "[nxFileLine][V-204423][medium][SRG-OS-000078-GPOS-00046]::[RHEL]Baseline"; ContainsLine = "minlen = 15"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/security/pwquality.conf"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -482,7 +472,7 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource14ref { ResourceID = "[nxFileLine][V-204425][high][SRG-OS-000106-GPOS-00053]::[RHEL]Baseline"; ContainsLine = "PermitEmptyPasswords no"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/ssh/sshd_config"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -492,19 +482,19 @@ ResourceID = "[nxFileLine][V-204425][high][SRG-OS-000106-GPOS-00053]::[RHEL]Base instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource15ref { ResourceID = "[nxFileLine][V-204426][medium][SRG-OS-000118-GPOS-00060]::[RHEL]Baseline"; - ContainsLine = "INACTIVE=0"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + ContainsLine = "INACTIVE=35"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/default/useradd"; ModuleName = "nx"; ModuleVersion = "1.0"; - DoesNotContainPattern = "^#\\s*INACTIVE.*$|^INACTIVE\\s*=\\s*(?!0\\b)[-]*\\w*$"; + DoesNotContainPattern = "^#\\s*INACTIVE\\s*=.*|^\\s*INACTIVE\\s*=\\s*(3[5-9]|[4-9]\\d+|\\d{3,})"; ConfigurationName = "LinuxBaseLine"; }; instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource16ref { ResourceID = "[nxFileLine][V-204431][medium][SRG-OS-000480-GPOS-00226]::[RHEL]Baseline"; ContainsLine = "FAIL_DELAY 4"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/login.defs"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -515,7 +505,7 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource17ref { ResourceID = "[nxFileLine][V-204434][medium][SRG-OS-000480-GPOS-00229]::[RHEL]Baseline"; ContainsLine = "PermitUserEnvironment no"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/ssh/sshd_config"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -526,7 +516,7 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource18ref { ResourceID = "[nxFileLine][V-204435][medium][SRG-OS-000480-GPOS-00229]::[RHEL]Baseline"; ContainsLine = "HostbasedAuthentication no"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/ssh/sshd_config"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -537,7 +527,7 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource19ref { ResourceID = "[nxFileLine][V-204447][high][SRG-OS-000366-GPOS-00153]::[RHEL]Baseline"; ContainsLine = "gpgcheck=1"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/yum.conf"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -548,7 +538,7 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource20ref { ResourceID = "[nxFileLine][V-204448][high][SRG-OS-000366-GPOS-00153]::[RHEL]Baseline"; ContainsLine = "localpkg_gpgcheck=1"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/yum.conf"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -559,7 +549,7 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource21ref { ResourceID = "[nxFileLine][V-204449.c][medium][SRG-OS-000114-GPOS-00059]::[RHEL]Baseline"; ContainsLine = "install usb-storage /bin/true"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/modprobe.d/usb-storage.conf"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -570,7 +560,7 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource22ref { ResourceID = "[nxFileLine][V-204449.d][medium][SRG-OS-000114-GPOS-00059]::[RHEL]Baseline"; ContainsLine = "blacklist usb-storage"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/modprobe.d/blacklist.conf"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -581,7 +571,7 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource23ref { ResourceID = "[nxFileLine][V-204450.b][medium][SRG-OS-000378-GPOS-00163]::[RHEL]Baseline"; ContainsLine = "install dccp /bin/true"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/modprobe.d/dccp.conf"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -592,7 +582,7 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource24ref { ResourceID = "[nxFileLine][V-204450.c][medium][SRG-OS-000378-GPOS-00163]::[RHEL]Baseline"; ContainsLine = "blacklist dccp"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/modprobe.d/blacklist.conf"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -603,7 +593,7 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource25ref { ResourceID = "[nxFileLine][V-204452][low][SRG-OS-000437-GPOS-00194]::[RHEL]Baseline"; ContainsLine = "clean_requirements_on_remove=1"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/yum.conf"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -614,7 +604,7 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource26ref { ResourceID = "[nxFileLine][V-204453][medium][SRG-OS-000445-GPOS-00199]::[RHEL]Baseline"; ContainsLine = "SELINUX=enforcing"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/selinux/config"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -625,7 +615,7 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource27ref { ResourceID = "[nxFileLine][V-204454][medium][SRG-OS-000445-GPOS-00199]::[RHEL]Baseline"; ContainsLine = "SELINUXTYPE=targeted"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/selinux/config"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -636,7 +626,7 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource28ref { ResourceID = "[nxFileLine][V-204457][medium][SRG-OS-000480-GPOS-00228]::[RHEL]Baseline"; ContainsLine = "UMASK 077"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/login.defs"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -647,7 +637,7 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource29ref { ResourceID = "[nxFileLine][V-204466][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; ContainsLine = "CREATE_HOME yes"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/login.defs"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -658,16 +648,16 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource30ref { ResourceID = "[nxFileLine][V-204504][medium][SRG-OS-000046-GPOS-00022]::[RHEL]Baseline"; ContainsLine = "-f 2"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "^#\\s*-f\\s+2|^\\s*-f\\s*1"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileResource as $MSFT_nxFileResource24ref +instance of MSFT_nxFileResource as $MSFT_nxFileResource23ref { -SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::29::9::nxFile"; +SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::29::9::nxFile"; ModuleName = "nx"; ModuleVersion = "1.0"; ResourceID = "[nxFile][V-204506.a][medium][SRG-OS-000342-GPOS-00133]::[RHEL]Baseline"; @@ -678,7 +668,7 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource31ref { ResourceID = "[nxFileLine][V-204506.a][medium][SRG-OS-000342-GPOS-00133]::[RHEL]Baseline"; ContainsLine = "active = yes"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audisp/plugins.d/au-remote.conf"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -689,7 +679,7 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource32ref { ResourceID = "[nxFileLine][V-204506.b][medium][SRG-OS-000342-GPOS-00133]::[RHEL]Baseline"; ContainsLine = "direction = out"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audisp/plugins.d/au-remote.conf"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -700,7 +690,7 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource33ref { ResourceID = "[nxFileLine][V-204506.c][medium][SRG-OS-000342-GPOS-00133]::[RHEL]Baseline"; ContainsLine = "path = /sbin/audisp-remote"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audisp/plugins.d/au-remote.conf"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -711,7 +701,7 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource34ref { ResourceID = "[nxFileLine][V-204506.d][medium][SRG-OS-000342-GPOS-00133]::[RHEL]Baseline"; ContainsLine = "type = always"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audisp/plugins.d/au-remote.conf"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -722,7 +712,7 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource35ref { ResourceID = "[nxFileLine][V-204507][medium][SRG-OS-000342-GPOS-00133]::[RHEL]Baseline"; ContainsLine = "overflow_action = syslog"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audisp/audispd.conf"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -733,16 +723,16 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource36ref { ResourceID = "[nxFileLine][V-204508][medium][SRG-OS-000342-GPOS-00133]::[RHEL]Baseline"; ContainsLine = "name_format = hostname"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audisp/audispd.conf"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "^#\\s*name_format.*$|^name_format\\s*=\\s*(?!hostname$)\\w*$"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileResource as $MSFT_nxFileResource25ref +instance of MSFT_nxFileResource as $MSFT_nxFileResource24ref { -SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::19::9::nxFile"; +SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::19::9::nxFile"; ModuleName = "nx"; ModuleVersion = "1.0"; ResourceID = "[nxFile][V-204510][medium][SRG-OS-000342-GPOS-00133]::[RHEL]Baseline"; @@ -753,7 +743,7 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource37ref { ResourceID = "[nxFileLine][V-204510][medium][SRG-OS-000342-GPOS-00133]::[RHEL]Baseline"; ContainsLine = "enable_krb5 = yes"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audisp/audisp-remote.conf"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -764,7 +754,7 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource38ref { ResourceID = "[nxFileLine][V-204511][medium][SRG-OS-000342-GPOS-00133]::[RHEL]Baseline"; ContainsLine = "disk_full_action = single"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audisp/audisp-remote.conf"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -775,7 +765,7 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource39ref { ResourceID = "[nxFileLine][V-204512][medium][SRG-OS-000342-GPOS-00133]::[RHEL]Baseline"; ContainsLine = "network_failure_action = syslog"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audisp/audisp-remote.conf"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -786,7 +776,7 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource40ref { ResourceID = "[nxFileLine][V-204514][medium][SRG-OS-000343-GPOS-00134]::[RHEL]Baseline"; ContainsLine = "space_left_action = email"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/auditd.conf"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -797,7 +787,7 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource41ref { ResourceID = "[nxFileLine][V-204515][medium][SRG-OS-000343-GPOS-00134]::[RHEL]Baseline"; ContainsLine = "action_mail_acct = root"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/auditd.conf"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -808,7 +798,7 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource42ref { ResourceID = "[nxFileLine][V-204516.a][medium][SRG-OS-000327-GPOS-00127]::[RHEL]Baseline"; ContainsLine = "-a always,exit -F arch=b32 -S execve -C uid!=euid -F euid=0 -k setuid"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -819,7 +809,7 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource43ref { ResourceID = "[nxFileLine][V-204516.b][medium][SRG-OS-000327-GPOS-00127]::[RHEL]Baseline"; ContainsLine = "-a always,exit -F arch=b64 -S execve -C uid!=euid -F euid=0 -k setuid"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -830,7 +820,7 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource44ref { ResourceID = "[nxFileLine][V-204516.c][medium][SRG-OS-000327-GPOS-00127]::[RHEL]Baseline"; ContainsLine = "-a always,exit -F arch=b32 -S execve -C gid!=egid -F egid=0 -k setgid"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -841,7 +831,7 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource45ref { ResourceID = "[nxFileLine][V-204516.d][medium][SRG-OS-000327-GPOS-00127]::[RHEL]Baseline"; ContainsLine = "-a always,exit -F arch=b64 -S execve -C gid!=egid -F egid=0 -k setgid"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -851,1318 +841,779 @@ ResourceID = "[nxFileLine][V-204516.d][medium][SRG-OS-000327-GPOS-00127]::[RHEL] instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource46ref { ResourceID = "[nxFileLine][V-204517.a][medium][SRG-OS-000064-GPOS-00033]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S chown -F auid>=1000 -F auid!=unset -k perm_mod"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + ContainsLine = "-a always,exit -F arch=b32 -S chown,fchown,fchownat,lchown -F auid>=1000 -F auid!=unset -k perm_mod"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*chown\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*perm_mod"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*chown,fchown,fchownat,lchown\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*perm_mod"; ConfigurationName = "LinuxBaseLine"; }; instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource47ref { ResourceID = "[nxFileLine][V-204517.b][medium][SRG-OS-000064-GPOS-00033]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S chown -F auid>=1000 -F auid!=unset -k perm_mod"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + ContainsLine = "-a always,exit -F arch=b64 -S chown,fchown,fchownat,lchown -F auid>=1000 -F auid!=unset -k perm_mod"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*chown\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*perm_mod"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*chown,fchown,fchownat,lchown\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*perm_mod"; ConfigurationName = "LinuxBaseLine"; }; instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource48ref { -ResourceID = "[nxFileLine][V-204518.a][medium][SRG-OS-000064-GPOS-00033]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S fchown -F auid>=1000 -F auid!=unset -k perm_mod"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; +ResourceID = "[nxFileLine][V-204521.a][medium][SRG-OS-000458-GPOS-00203]::[RHEL]Baseline"; + ContainsLine = "-a always,exit -F arch=b32 -S chmod,fchmod,fchmodat -F auid>=1000 -F auid!=unset -k perm_mod"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*fchown\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*perm_mod"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*chmod,fchmod,fchmodat\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*perm_mod"; ConfigurationName = "LinuxBaseLine"; }; instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource49ref { -ResourceID = "[nxFileLine][V-204518.b][medium][SRG-OS-000064-GPOS-00033]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S fchown -F auid>=1000 -F auid!=unset -k perm_mod"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; +ResourceID = "[nxFileLine][V-204521.b][medium][SRG-OS-000458-GPOS-00203]::[RHEL]Baseline"; + ContainsLine = "-a always,exit -F arch=b64 -S chmod,fchmod,fchmodat -F auid>=1000 -F auid!=unset -k perm_mod"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*fchown\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*perm_mod"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*chmod,fchmod,fchmodat\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*perm_mod"; ConfigurationName = "LinuxBaseLine"; }; instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource50ref { -ResourceID = "[nxFileLine][V-204519.a][medium][SRG-OS-000064-GPOS-00033]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S lchown -F auid>=1000 -F auid!=unset -k perm_mod"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; +ResourceID = "[nxFileLine][V-204524.a][medium][SRG-OS-000458-GPOS-00203]::[RHEL]Baseline"; + ContainsLine = "-a always,exit -F arch=b32 -S setxattr,fsetxattr,lsetxattr,removexattr,fremovexattr,lremovexattr -F auid>=1000 -F auid!=unset -k perm_mod"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*lchown\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*perm_mod"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*setxattr,fsetxattr,lsetxattr,removexattr,fremovexattr,lremovexattr\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*perm_mod"; ConfigurationName = "LinuxBaseLine"; }; instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource51ref { -ResourceID = "[nxFileLine][V-204519.b][medium][SRG-OS-000064-GPOS-00033]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S lchown -F auid>=1000 -F auid!=unset -k perm_mod"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; +ResourceID = "[nxFileLine][V-204524.b][medium][SRG-OS-000458-GPOS-00203]::[RHEL]Baseline"; + ContainsLine = "-a always,exit -F arch=b64 -S setxattr,fsetxattr,lsetxattr,removexattr,fremovexattr,lremovexattr -F auid>=1000 -F auid!=unset -k perm_mod"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*lchown\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*perm_mod"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*setxattr,fsetxattr,lsetxattr,removexattr,fremovexattr,lremovexattr\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*perm_mod"; ConfigurationName = "LinuxBaseLine"; }; instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource52ref { -ResourceID = "[nxFileLine][V-204520.a][medium][SRG-OS-000064-GPOS-00033]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S fchownat -F auid>=1000 -F auid!=unset -k perm_mod"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; +ResourceID = "[nxFileLine][V-204531.a][medium][SRG-OS-000064-GPOS-00033]::[RHEL]Baseline"; + ContainsLine = "-a always,exit -F arch=b32 -S creat,open,openat,open_by_handle_at,truncate,ftruncate -F exit=-EPERM -F auid>=1000 -F auid!=unset -k access"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*fchownat\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*perm_mod"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*creat,open,openat,open_by_handle_at,truncate,ftruncate\\s*-F\\s*exit\\s*=\\s*-EPERM\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*access"; ConfigurationName = "LinuxBaseLine"; }; instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource53ref { -ResourceID = "[nxFileLine][V-204520.b][medium][SRG-OS-000064-GPOS-00033]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S fchownat -F auid>=1000 -F auid!=unset -k perm_mod"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; +ResourceID = "[nxFileLine][V-204531.b][medium][SRG-OS-000064-GPOS-00033]::[RHEL]Baseline"; + ContainsLine = "-a always,exit -F arch=b32 -S creat,open,openat,open_by_handle_at,truncate,ftruncate -F exit=-EACCES -F auid>=1000 -F auid!=unset -k access"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*fchownat\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*perm_mod"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*creat,open,openat,open_by_handle_at,truncate,ftruncate\\s*-F\\s*exit\\s*=\\s*-EACCES\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*access"; ConfigurationName = "LinuxBaseLine"; }; instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource54ref { -ResourceID = "[nxFileLine][V-204521.a][medium][SRG-OS-000458-GPOS-00203]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S chmod -F auid>=1000 -F auid!=unset -k perm_mod"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; +ResourceID = "[nxFileLine][V-204531.c][medium][SRG-OS-000064-GPOS-00033]::[RHEL]Baseline"; + ContainsLine = "-a always,exit -F arch=b64 -S creat,open,openat,open_by_handle_at,truncate,ftruncate -F exit=-EPERM -F auid>=1000 -F auid!=unset -k access"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*chmod\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*perm_mod"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*creat,open,openat,open_by_handle_at,truncate,ftruncate\\s*-F\\s*exit\\s*=\\s*-EPERM\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*access"; ConfigurationName = "LinuxBaseLine"; }; instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource55ref { -ResourceID = "[nxFileLine][V-204521.b][medium][SRG-OS-000458-GPOS-00203]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S chmod -F auid>=1000 -F auid!=unset -k perm_mod"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; +ResourceID = "[nxFileLine][V-204531.d][medium][SRG-OS-000064-GPOS-00033]::[RHEL]Baseline"; + ContainsLine = "-a always,exit -F arch=b64 -S creat,open,openat,open_by_handle_at,truncate,ftruncate -F exit=-EACCES -F auid>=1000 -F auid!=unset -k access"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*chmod\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*perm_mod"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*creat,open,openat,open_by_handle_at,truncate,ftruncate\\s*-F\\s*exit\\s*=\\s*-EACCES\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*access"; ConfigurationName = "LinuxBaseLine"; }; instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource56ref { -ResourceID = "[nxFileLine][V-204522.a][medium][SRG-OS-000458-GPOS-00203]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S fchmod -F auid>=1000 -F auid!=unset -k perm_mod"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*fchmod\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*perm_mod"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource57ref -{ -ResourceID = "[nxFileLine][V-204522.b][medium][SRG-OS-000458-GPOS-00203]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S fchmod -F auid>=1000 -F auid!=unset -k perm_mod"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*fchmod\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*perm_mod"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource58ref -{ -ResourceID = "[nxFileLine][V-204523.a][medium][SRG-OS-000458-GPOS-00203]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S fchmodat -F auid>=1000 -F auid!=unset -k perm_mod"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*fchmodat\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*perm_mod"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource59ref -{ -ResourceID = "[nxFileLine][V-204523.b][medium][SRG-OS-000458-GPOS-00203]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S fchmodat -F auid>=1000 -F auid!=unset -k perm_mod"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*fchmodat\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*perm_mod"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource60ref -{ -ResourceID = "[nxFileLine][V-204524.a][medium][SRG-OS-000458-GPOS-00203]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S setxattr -F auid>=1000 -F auid!=unset -k perm_mod"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*setxattr\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*perm_mod"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource61ref -{ -ResourceID = "[nxFileLine][V-204524.b][medium][SRG-OS-000458-GPOS-00203]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S setxattr -F auid>=1000 -F auid!=unset -k perm_mod"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*setxattr\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*perm_mod"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource62ref -{ -ResourceID = "[nxFileLine][V-204525.a][medium][SRG-OS-000458-GPOS-00203]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S fsetxattr -F auid>=1000 -F auid!=unset -k perm_mod"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*fsetxattr\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*perm_mod"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource63ref -{ -ResourceID = "[nxFileLine][V-204525.b][medium][SRG-OS-000458-GPOS-00203]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S fsetxattr -F auid>=1000 -F auid!=unset -k perm_mod"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*fsetxattr\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*perm_mod"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource64ref -{ -ResourceID = "[nxFileLine][V-204526.a][medium][SRG-OS-000458-GPOS-00203]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S lsetxattr -F auid>=1000 -F auid!=unset -k perm_mod"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*lsetxattr\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*perm_mod"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource65ref -{ -ResourceID = "[nxFileLine][V-204526.b][medium][SRG-OS-000458-GPOS-00203]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S lsetxattr -F auid>=1000 -F auid!=unset -k perm_mod"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*lsetxattr\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*perm_mod"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource66ref -{ -ResourceID = "[nxFileLine][V-204527.a][medium][SRG-OS-000458-GPOS-00203]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S removexattr -F auid>=1000 -F auid!=unset -k perm_mod"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*removexattr\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*perm_mod"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource67ref -{ -ResourceID = "[nxFileLine][V-204527.b][medium][SRG-OS-000458-GPOS-00203]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S removexattr -F auid>=1000 -F auid!=unset -k perm_mod"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*removexattr\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*perm_mod"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource68ref -{ -ResourceID = "[nxFileLine][V-204528.a][medium][SRG-OS-000458-GPOS-00203]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S fremovexattr -F auid>=1000 -F auid!=unset -k perm_mod"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*fremovexattr\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*perm_mod"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource69ref -{ -ResourceID = "[nxFileLine][V-204528.b][medium][SRG-OS-000458-GPOS-00203]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S fremovexattr -F auid>=1000 -F auid!=unset -k perm_mod"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*fremovexattr\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*perm_mod"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource70ref -{ -ResourceID = "[nxFileLine][V-204529.a][medium][SRG-OS-000458-GPOS-00203]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S lremovexattr -F auid>=1000 -F auid!=unset -k perm_mod"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*lremovexattr\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*perm_mod"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource71ref -{ -ResourceID = "[nxFileLine][V-204529.b][medium][SRG-OS-000458-GPOS-00203]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S lremovexattr -F auid>=1000 -F auid!=unset -k perm_mod"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*lremovexattr\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*perm_mod"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource72ref -{ -ResourceID = "[nxFileLine][V-204530.a][medium][SRG-OS-000064-GPOS-00033]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S creat F exit=-EPERM -F auid>=1000 -F auid!=unset -k access"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*creat\\s*F\\s*exit\\s*=\\s*-EPERM\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*access"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource73ref -{ -ResourceID = "[nxFileLine][V-204530.b][medium][SRG-OS-000064-GPOS-00033]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S creat -F exit=-EACCES -F auid>=1000 -F auid!=unset -k access"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*creat\\s*-F\\s*exit\\s*=\\s*-EACCES\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*access"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource74ref -{ -ResourceID = "[nxFileLine][V-204530.c][medium][SRG-OS-000064-GPOS-00033]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S creat -F exit=-EPERM -F auid>=1000 -F auid!=unset -k access"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*creat\\s*-F\\s*exit\\s*=\\s*-EPERM\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*access"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource75ref -{ -ResourceID = "[nxFileLine][V-204530.d][medium][SRG-OS-000064-GPOS-00033]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S creat -F exit=-EACCES -F auid>=1000 -F auid!=unset -k access"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*creat\\s*-F\\s*exit\\s*=\\s*-EACCES\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*access"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource76ref -{ -ResourceID = "[nxFileLine][V-204531.a][medium][SRG-OS-000064-GPOS-00033]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S open -F exit=-EPERM -F auid>=1000 -F auid!=unset -k access"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*open\\s*-F\\s*exit\\s*=\\s*-EPERM\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*access"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource77ref -{ -ResourceID = "[nxFileLine][V-204531.b][medium][SRG-OS-000064-GPOS-00033]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S open -F exit=-EACCES -F auid>=1000 -F auid!=unset -k access"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*open\\s*-F\\s*exit\\s*=\\s*-EACCES\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*access"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource78ref -{ -ResourceID = "[nxFileLine][V-204531.c][medium][SRG-OS-000064-GPOS-00033]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S open -F exit=-EPERM -F auid>=1000 -F auid!=unset -k access"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*open\\s*-F\\s*exit\\s*=\\s*-EPERM\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*access"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource79ref -{ -ResourceID = "[nxFileLine][V-204531.d][medium][SRG-OS-000064-GPOS-00033]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S open -F exit=-EACCES -F auid>=1000 -F auid!=unset -k access"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*open\\s*-F\\s*exit\\s*=\\s*-EACCES\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*access"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource80ref -{ -ResourceID = "[nxFileLine][V-204532.a][medium][SRG-OS-000064-GPOS-00033]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S openat -F exit=-EPERM -F auid>=1000 -F auid!=unset -k access"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*openat\\s*-F\\s*exit\\s*=\\s*-EPERM\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*access"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource81ref -{ -ResourceID = "[nxFileLine][V-204532.b][medium][SRG-OS-000064-GPOS-00033]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S openat -F exit=-EACCES -F auid>=1000 -F auid!=unset -k access"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*openat\\s*-F\\s*exit\\s*=\\s*-EACCES\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*access"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource82ref -{ -ResourceID = "[nxFileLine][V-204532.c][medium][SRG-OS-000064-GPOS-00033]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S openat -F exit=-EPERM -F auid>=1000 -F auid!=unset -k access"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*openat\\s*-F\\s*exit\\s*=\\s*-EPERM\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*access"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource83ref -{ -ResourceID = "[nxFileLine][V-204532.d][medium][SRG-OS-000064-GPOS-00033]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S openat -F exit=-EACCES -F auid>=1000 -F auid!=unset -k access"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*openat\\s*-F\\s*exit\\s*=\\s*-EACCES\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*access"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource84ref -{ -ResourceID = "[nxFileLine][V-204533.a][medium][SRG-OS-000064-GPOS-00033]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S open_by_handle_at -F exit=-EPERM -F auid>=1000 -F auid!=unset -k access"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*open_by_handle_at\\s*-F\\s*exit\\s*=\\s*-EPERM\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*access"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource85ref -{ -ResourceID = "[nxFileLine][V-204533.b][medium][SRG-OS-000064-GPOS-00033]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S open_by_handle_at -F exit=-EACCES -F auid>=1000 -F auid!=unset -k access"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*open_by_handle_at\\s*-F\\s*exit\\s*=\\s*-EACCES\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*access"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource86ref -{ -ResourceID = "[nxFileLine][V-204533.c][medium][SRG-OS-000064-GPOS-00033]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S open_by_handle_at -F exit=-EPERM -F auid>=1000 -F auid!=unset -k access"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*open_by_handle_at\\s*-F\\s*exit\\s*=\\s*-EPERM\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*access"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource87ref -{ -ResourceID = "[nxFileLine][V-204533.d][medium][SRG-OS-000064-GPOS-00033]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S open_by_handle_at -F exit=-EACCES -F auid>=1000 -F auid!=unset -k access"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*open_by_handle_at\\s*-F\\s*exit\\s*=\\s*-EACCES\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*access"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource88ref -{ -ResourceID = "[nxFileLine][V-204534.a][medium][SRG-OS-000064-GPOS-00033]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S truncate -F exit=-EPERM -F auid>=1000 -F auid!=unset -k access"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*truncate\\s*-F\\s*exit\\s*=\\s*-EPERM\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*access"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource89ref -{ -ResourceID = "[nxFileLine][V-204534.b][medium][SRG-OS-000064-GPOS-00033]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S truncate -F exit=-EACCES -F auid>=1000 -F auid!=unset -k access"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*truncate\\s*-F\\s*exit\\s*=\\s*-EACCES\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*access"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource90ref -{ -ResourceID = "[nxFileLine][V-204534.c][medium][SRG-OS-000064-GPOS-00033]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S truncate -F exit=-EPERM -F auid>=1000 -F auid!=unset -k access"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*truncate\\s*-F\\s*exit\\s*=\\s*-EPERM\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*access"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource91ref -{ -ResourceID = "[nxFileLine][V-204534.d][medium][SRG-OS-000064-GPOS-00033]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S truncate -F exit=-EACCES -F auid>=1000 -F auid!=unset -k access"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*truncate\\s*-F\\s*exit\\s*=\\s*-EACCES\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*access"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource92ref -{ -ResourceID = "[nxFileLine][V-204535.a][medium][SRG-OS-000064-GPOS-00033]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S ftruncate -F exit=-EPERM -F auid>=1000 -F auid!=unset -k access"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*ftruncate\\s*-F\\s*exit\\s*=\\s*-EPERM\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*access"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource93ref -{ -ResourceID = "[nxFileLine][V-204535.b][medium][SRG-OS-000064-GPOS-00033]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S ftruncate -F exit=-EACCES -F auid>=1000 -F auid!=unset -k access"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*ftruncate\\s*-F\\s*exit\\s*=\\s*-EACCES\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*access"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource94ref -{ -ResourceID = "[nxFileLine][V-204535.c][medium][SRG-OS-000064-GPOS-00033]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S ftruncate -F exit=-EPERM -F auid>=1000 -F auid!=unset -k access"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*ftruncate\\s*-F\\s*exit\\s*=\\s*-EPERM\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*access"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource95ref -{ -ResourceID = "[nxFileLine][V-204535.d][medium][SRG-OS-000064-GPOS-00033]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S ftruncate -F exit=-EACCES -F auid>=1000 -F auid!=unset -k access"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*ftruncate\\s*-F\\s*exit\\s*=\\s*-EACCES\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*access"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource96ref -{ ResourceID = "[nxFileLine][V-204536][medium][SRG-OS-000392-GPOS-00172]::[RHEL]Baseline"; ContainsLine = "-a always,exit -F path=/usr/sbin/semanage -F auid>=1000 -F auid!=unset -k privileged-priv_change"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/sbin/semanage\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-priv_change"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource97ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource57ref { ResourceID = "[nxFileLine][V-204537][medium][SRG-OS-000392-GPOS-00172]::[RHEL]Baseline"; ContainsLine = "-a always,exit -F path=/usr/sbin/setsebool -F auid>=1000 -F auid!=unset -k privileged-priv_change"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/sbin/setsebool\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-priv_change"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource98ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource58ref { ResourceID = "[nxFileLine][V-204538][medium][SRG-OS-000392-GPOS-00172]::[RHEL]Baseline"; ContainsLine = "-a always,exit -F path=/usr/bin/chcon -F auid>=1000 -F auid!=unset -k privileged-priv_change"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/bin/chcon\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-priv_change"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource99ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource59ref { ResourceID = "[nxFileLine][V-204539][medium][SRG-OS-000392-GPOS-00172]::[RHEL]Baseline"; ContainsLine = "-a always,exit -F path=/usr/sbin/setfiles -F auid>=1000 -F auid!=unset -k privileged-priv_change"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/sbin/setfiles\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-priv_change"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource100ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource60ref { ResourceID = "[nxFileLine][V-204540][medium][SRG-OS-000392-GPOS-00172]::[RHEL]Baseline"; ContainsLine = "-w /var/run/faillock -p wa -k logins"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "#\\s*-w\\s*/var/run/faillock\\s*-p\\s*wa\\s*-k\\s*logins"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource101ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource61ref { ResourceID = "[nxFileLine][V-204541][medium][SRG-OS-000392-GPOS-00172]::[RHEL]Baseline"; ContainsLine = "-w /var/log/lastlog -p wa -k logins"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "#\\s*-w\\s*/var/log/lastlog\\s*-p\\s*wa\\s*-k\\s*logins"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource102ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource62ref { ResourceID = "[nxFileLine][V-204542][medium][SRG-OS-000042-GPOS-00020]::[RHEL]Baseline"; ContainsLine = "-a always,exit -F path=/usr/bin/passwd -F auid>=1000 -F auid!=unset -k privileged-passwd"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/bin/passwd\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-passwd"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource103ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource63ref { ResourceID = "[nxFileLine][V-204543][medium][SRG-OS-000042-GPOS-00020]::[RHEL]Baseline"; ContainsLine = "-a always,exit -F path=/usr/sbin/unix_chkpwd -F auid>=1000 -F auid!=unset -k privileged-passwd"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/sbin/unix_chkpwd\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-passwd"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource104ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource64ref { ResourceID = "[nxFileLine][V-204544][medium][SRG-OS-000042-GPOS-00020]::[RHEL]Baseline"; ContainsLine = "-a always,exit -F path=/usr/bin/gpasswd -F auid>=1000 -F auid!=unset -k privileged-passwd"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/bin/gpasswd\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-passwd"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource105ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource65ref { ResourceID = "[nxFileLine][V-204545][medium][SRG-OS-000042-GPOS-00020]::[RHEL]Baseline"; ContainsLine = "-a always,exit -F path=/usr/bin/chage -F auid>=1000 -F auid!=unset -k privileged-passwd"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/bin/chage\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-passwd"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource106ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource66ref { ResourceID = "[nxFileLine][V-204546][medium][SRG-OS-000042-GPOS-00020]::[RHEL]Baseline"; ContainsLine = "-a always,exit -F path=/usr/sbin/userhelper -F auid>=1000 -F auid!=unset -k privileged-passwd"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/sbin/userhelper\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-passwd"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource107ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource67ref { ResourceID = "[nxFileLine][V-204547][medium][SRG-OS-000037-GPOS-00015]::[RHEL]Baseline"; ContainsLine = "-a always,exit -F path=/usr/bin/su -F auid>=1000 -F auid!=unset -k privileged-priv_change"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/bin/su\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-priv_change"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource108ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource68ref { ResourceID = "[nxFileLine][V-204548][medium][SRG-OS-000037-GPOS-00015]::[RHEL]Baseline"; ContainsLine = "-a always,exit -F path=/usr/bin/sudo -F auid>=1000 -F auid!=unset -k privileged-priv_change"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/bin/sudo\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-priv_change"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource109ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource69ref { ResourceID = "[nxFileLine][V-204549.a][medium][SRG-OS-000037-GPOS-00015]::[RHEL]Baseline"; ContainsLine = "-w /etc/sudoers -p wa -k privileged-actions"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "#\\s*-w /etc/sudoers -p wa -k privileged-actions"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource110ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource70ref { ResourceID = "[nxFileLine][V-204549.b][medium][SRG-OS-000037-GPOS-00015]::[RHEL]Baseline"; ContainsLine = "-w /etc/sudoers.d/ -p wa -k privileged-actions"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "#\\s*-w /etc/sudoers.d/ -p wa -k privileged-actions"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource111ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource71ref { ResourceID = "[nxFileLine][V-204550][medium][SRG-OS-000037-GPOS-00015]::[RHEL]Baseline"; ContainsLine = "-a always,exit -F path=/usr/bin/newgrp -F auid>=1000 -F auid!=unset -k privileged-priv_change"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/bin/newgrp\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-priv_change"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource112ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource72ref { ResourceID = "[nxFileLine][V-204551][medium][SRG-OS-000037-GPOS-00015]::[RHEL]Baseline"; ContainsLine = "-a always,exit -F path=/usr/bin/chsh -F auid>=1000 -F auid!=unset -k privileged-priv_change"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/bin/chsh\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-priv_change"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource113ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource73ref { ResourceID = "[nxFileLine][V-204552.a][medium][SRG-OS-000042-GPOS-00020]::[RHEL]Baseline"; ContainsLine = "-a always,exit -F arch=b32 -S mount -F auid>=1000 -F auid!=unset -k privileged-mount"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*mount\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-mount"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource114ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource74ref { ResourceID = "[nxFileLine][V-204552.b][medium][SRG-OS-000042-GPOS-00020]::[RHEL]Baseline"; ContainsLine = "-a always,exit -F arch=b64 -S mount -F auid>=1000 -F auid!=unset -k privileged-mount"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*mount\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-mount"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource115ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource75ref { ResourceID = "[nxFileLine][V-204552.c][medium][SRG-OS-000042-GPOS-00020]::[RHEL]Baseline"; ContainsLine = "-a always,exit -F path=/usr/bin/mount -F auid>=1000 -F auid!=unset -k privileged-mount"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/bin/mount\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-mount"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource116ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource76ref { ResourceID = "[nxFileLine][V-204553][medium][SRG-OS-000042-GPOS-00020]::[RHEL]Baseline"; ContainsLine = "-a always,exit -F path=/usr/bin/umount -F auid>=1000 -F auid!=unset -k privileged-mount"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/bin/umount\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-mount"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource117ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource77ref { ResourceID = "[nxFileLine][V-204554][medium][SRG-OS-000042-GPOS-00020]::[RHEL]Baseline"; ContainsLine = "-a always,exit -F path=/usr/sbin/postdrop -F auid>=1000 -F auid!=unset -k privileged-postfix"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/sbin/postdrop\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-postfix"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource118ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource78ref { ResourceID = "[nxFileLine][V-204555][medium][SRG-OS-000042-GPOS-00020]::[RHEL]Baseline"; ContainsLine = "-a always,exit -F path=/usr/sbin/postqueue -F auid>=1000 -F auid!=unset -k privileged-postfix"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/sbin/postqueue\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-postfix"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource119ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource79ref { ResourceID = "[nxFileLine][V-204556][medium][SRG-OS-000042-GPOS-00020]::[RHEL]Baseline"; ContainsLine = "-a always,exit -F path=/usr/libexec/openssh/ssh-keysign -F auid>=1000 -F auid!=unset -k privileged-ssh"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/libexec/openssh/ssh-keysign\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-ssh"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource120ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource80ref { ResourceID = "[nxFileLine][V-204557][medium][SRG-OS-000042-GPOS-00020]::[RHEL]Baseline"; ContainsLine = "-a always,exit -F path=/usr/bin/crontab -F auid>=1000 -F auid!=unset -k privileged-cron"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/bin/crontab\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-cron"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource121ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource81ref { ResourceID = "[nxFileLine][V-204558][medium][SRG-OS-000471-GPOS-00215]::[RHEL]Baseline"; ContainsLine = "-a always,exit -F path=/usr/sbin/pam_timestamp_check -F auid>=1000 -F auid!=unset -k privileged-pam"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/sbin/pam_timestamp_check\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-pam"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource122ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource82ref { ResourceID = "[nxFileLine][V-204559.a][medium][SRG-OS-000471-GPOS-00216]::[RHEL]Baseline"; ContainsLine = "-a always,exit -F arch=b32 -S create_module -k module-change"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*create_module\\s*-k\\s*module-change"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource123ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource83ref { ResourceID = "[nxFileLine][V-204559.b][medium][SRG-OS-000471-GPOS-00216]::[RHEL]Baseline"; ContainsLine = "-a always,exit -F arch=b64 -S create_module -k module-change"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*create_module\\s*-k\\s*module-change"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource124ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource84ref { ResourceID = "[nxFileLine][V-204560.a][medium][SRG-OS-000471-GPOS-00216]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S init_module -k module-change"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + ContainsLine = "-a always,exit -F arch=b32 -S init_module,finit_module -k modulechange"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*init_module\\s*-k\\s*module-change"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*init_module,finit_module\\s*-k\\s*modulechange"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource125ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource85ref { ResourceID = "[nxFileLine][V-204560.b][medium][SRG-OS-000471-GPOS-00216]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S init_module -k module-change"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + ContainsLine = "-a always,exit -F arch=b64 -S init_module,finit_module -k modulechange"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*init_module\\s*-k\\s*module-change"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*init_module,finit_module\\s*-k\\s*modulechange"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource126ref -{ -ResourceID = "[nxFileLine][V-204561.a][medium][SRG-OS-000471-GPOS-00216]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S finit_module -k module-change"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*finit_module\\s*-k\\s*module-change"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource127ref -{ -ResourceID = "[nxFileLine][V-204561.b][medium][SRG-OS-000471-GPOS-00216]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S finit_module -k module-change"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*finit_module\\s*-k\\s*module-change"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource128ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource86ref { ResourceID = "[nxFileLine][V-204562.a][medium][SRG-OS-000471-GPOS-00216]::[RHEL]Baseline"; ContainsLine = "-a always,exit -F arch=b32 -S delete_module -k module-change"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*delete_module\\s*-k\\s*module-change"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource129ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource87ref { ResourceID = "[nxFileLine][V-204562.b][medium][SRG-OS-000471-GPOS-00216]::[RHEL]Baseline"; ContainsLine = "-a always,exit -F arch=b64 -S delete_module -k module-change"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*delete_module\\s*-k\\s*module-change"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource130ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource88ref { ResourceID = "[nxFileLine][V-204563][medium][SRG-OS-000471-GPOS-00216]::[RHEL]Baseline"; ContainsLine = "-w /usr/bin/kmod -p x -F auid!=unset -k module-change"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "#\\s*-w\\s*/usr/bin/kmod\\s*-p\\s*x\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*module-change"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource131ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource89ref { ResourceID = "[nxFileLine][V-204564][medium][SRG-OS-000004-GPOS-00004]::[RHEL]Baseline"; ContainsLine = "-w /etc/passwd -p wa -k identity"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "#\\s*-w\\s*/etc/passwd\\s*-p\\s*wa\\s*-k\\s*identity"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource132ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource90ref { ResourceID = "[nxFileLine][V-204565][medium][SRG-OS-000004-GPOS-00004]::[RHEL]Baseline"; ContainsLine = "-w /etc/group -p wa -k identity"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "#\\s*-w\\s*/etc/group\\s*-p\\s*wa\\s*-k\\s*identity"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource133ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource91ref { ResourceID = "[nxFileLine][V-204566][medium][SRG-OS-000004-GPOS-00004]::[RHEL]Baseline"; ContainsLine = "-w /etc/gshadow -p wa -k identity"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "#\\s*-w\\s*/etc/gshadow\\s*-p\\s*wa\\s*-k\\s*identity"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource134ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource92ref { ResourceID = "[nxFileLine][V-204567][medium][SRG-OS-000004-GPOS-00004]::[RHEL]Baseline"; ContainsLine = "-w /etc/shadow -p wa -k identity"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "#\\s*-w\\s*/etc/shadow\\s*-p\\s*wa\\s*-k\\s*identity"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource135ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource93ref { ResourceID = "[nxFileLine][V-204568][medium][SRG-OS-000004-GPOS-00004]::[RHEL]Baseline"; ContainsLine = "-w /etc/security/opasswd -p wa -k identity"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "#\\s*-w\\s*/etc/security/opasswd\\s*-p\\s*wa\\s*-k\\s*identity"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource136ref -{ -ResourceID = "[nxFileLine][V-204569.a][medium][SRG-OS-000466-GPOS-00210]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S rename -F auid>=1000 -F auid!=unset -k delete"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*rename\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*delete"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource137ref -{ -ResourceID = "[nxFileLine][V-204569.b][medium][SRG-OS-000466-GPOS-00210]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S rename -F auid>=1000 -F auid!=unset -k delete"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*rename\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*delete"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource138ref -{ -ResourceID = "[nxFileLine][V-204570.a][medium][SRG-OS-000466-GPOS-00210]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S renameat -F auid>=1000 -F auid!=unset -k delete"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*renameat\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*delete"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource139ref -{ -ResourceID = "[nxFileLine][V-204570.b][medium][SRG-OS-000466-GPOS-00210]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S renameat -F auid>=1000 -F auid!=unset -k delete"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*renameat\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*delete"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource140ref -{ -ResourceID = "[nxFileLine][V-204571.a][medium][SRG-OS-000466-GPOS-00210]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S rmdir -F auid>=1000 -F auid!=unset -k delete"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*rmdir\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*delete"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource141ref -{ -ResourceID = "[nxFileLine][V-204571.b][medium][SRG-OS-000466-GPOS-00210]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S rmdir -F auid>=1000 -F auid!=unset -k delete"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*rmdir\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*delete"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource142ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource94ref { ResourceID = "[nxFileLine][V-204572.a][medium][SRG-OS-000466-GPOS-00210]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S unlink -F auid>=1000 -F auid!=unset -k delete"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + ContainsLine = "-a always,exit -F arch=b32 -S unlink,unlinkat,rename,renameat,rmdir -F auid>=1000 -F auid!=unset -k delete"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*unlink\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*delete"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*unlink,unlinkat,rename,renameat,rmdir\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*delete"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource143ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource95ref { ResourceID = "[nxFileLine][V-204572.b][medium][SRG-OS-000466-GPOS-00210]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S unlink -F auid>=1000 -F auid!=unset -k delete"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + ContainsLine = "-a always,exit -F arch=b64 -S unlink,unlinkat,rename,renameat,rmdir -F auid>=1000 -F auid!=unset -k delete"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*unlink\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*delete"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*unlink,unlinkat,rename,renameat,rmdir\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*delete"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource144ref -{ -ResourceID = "[nxFileLine][V-204573.a][medium][SRG-OS-000466-GPOS-00210]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S unlinkat -F auid>=1000 -F auid!=unset -k delete"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*unlinkat\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*delete"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource145ref -{ -ResourceID = "[nxFileLine][V-204573.b][medium][SRG-OS-000466-GPOS-00210]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S unlinkat -F auid>=1000 -F auid!=unset -k delete"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*unlinkat\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*delete"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource146ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource96ref { ResourceID = "[nxFileLine][V-204578][medium][SRG-OS-000033-GPOS-00014]::[RHEL]Baseline"; ContainsLine = "Ciphers aes256-ctr,aes192-ctr,aes128-ctr"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/ssh/sshd_config"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "^#\\s*Ciphers.*|^\\s*Ciphers\\s*aes128-ctr.*|^\\s*Ciphers\\s*aes192-ctr.*"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource147ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource97ref { ResourceID = "[nxFileLine][V-204579.b][medium][SRG-OS-000163-GPOS-00072]::[RHEL]Baseline"; ContainsLine = "declare -xr TMOUT=900"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/profile.d/tmout.sh"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "^\\s*TMOUT\\s*=\\s*[0-8]?[0-9]?[0-9]?$|^#\\s*TMOUT.*"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource148ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource98ref { ResourceID = "[nxFileLine][V-204580][medium][SRG-OS-000023-GPOS-00006]::[RHEL]Baseline"; ContainsLine = "banner /etc/issue"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/ssh/sshd_config"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "#\\s*banner\\s*/etc/issue"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource149ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource99ref { ResourceID = "[nxFileLine][V-204587][medium][SRG-OS-000163-GPOS-00072]::[RHEL]Baseline"; ContainsLine = "ClientAliveInterval 600"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/ssh/sshd_config"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "^\\s*ClientAliveInterval\\s*[0-5]?[0-9]?[0-9]?\\s*$|^#\\s*ClientAliveInterval.*|^\\s*ClientAliveInterval\\s*$"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource150ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource100ref { ResourceID = "[nxFileLine][V-204588][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; ContainsLine = "RhostsRSAAuthentication no"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/ssh/sshd_config"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "^#\\s*RhostsRSAAuthentication.*$|^RhostsRSAAuthentication\\s*(?!no\\b)\\w*$"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource151ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource101ref { ResourceID = "[nxFileLine][V-204589][medium][SRG-OS-000163-GPOS-00072]::[RHEL]Baseline"; ContainsLine = "ClientAliveCountMax 0"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/ssh/sshd_config"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "^#\\s*ClientAliveCountMax.*$|^ClientAliveCountMax\\s*(?!0\\b)\\w*$"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource152ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource102ref { ResourceID = "[nxFileLine][V-204590][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; ContainsLine = "IgnoreRhosts yes"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/ssh/sshd_config"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "^#\\s*IgnoreRhosts.*$|^IgnoreRhosts\\s*(?!yes\\b)\\w*$"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource153ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource103ref { ResourceID = "[nxFileLine][V-204591][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; ContainsLine = "PrintLastLog yes"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/ssh/sshd_config"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "^#\\s*PrintLastLog.*$|^PrintLastLog\\s*(?!yes\\b)\\w*$"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource154ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource104ref { ResourceID = "[nxFileLine][V-204592][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; ContainsLine = "PermitRootLogin no"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/ssh/sshd_config"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "^#\\s*PermitRootLogin.*$|^PermitRootLogin\\s*(?!no\\b)\\w*$"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource155ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource105ref { ResourceID = "[nxFileLine][V-204593][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; ContainsLine = "IgnoreUserKnownHosts yes"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/ssh/sshd_config"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "^#\\s*IgnoreUserKnownHosts.*$|^IgnoreUserKnownHosts\\s*(?!yes\\b)\\w*$"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource156ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource106ref { ResourceID = "[nxFileLine][V-204594][high][SRG-OS-000074-GPOS-00042]::[RHEL]Baseline"; ContainsLine = "Protocol 2"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/ssh/sshd_config"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "^#\\s*Protocol.*$|^Protocol\\s*(?!2\\b)\\w*$"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource157ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource107ref { ResourceID = "[nxFileLine][V-204595][medium][SRG-OS-000250-GPOS-00093]::[RHEL]Baseline"; ContainsLine = "MACs hmac-sha2-512,hmac-sha2-256"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/ssh/sshd_config"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "#\\s*MACs.*|\\s*MACs\\s*hmac-(?!sha2-512).*"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource158ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource108ref { ResourceID = "[nxFileLine][V-204598][medium][SRG-OS-000364-GPOS-00151]::[RHEL]Baseline"; ContainsLine = "GSSAPIAuthentication no"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/ssh/sshd_config"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "^#\\s*GSSAPIAuthentication.*$|^GSSAPIAuthentication\\s*(?!no\\b)\\w*$"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource159ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource109ref { ResourceID = "[nxFileLine][V-204599][medium][SRG-OS-000364-GPOS-00151]::[RHEL]Baseline"; ContainsLine = "KerberosAuthentication no"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/ssh/sshd_config"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "^#\\s*KerberosAuthentication.*$|^KerberosAuthentication\\s*(?!no\\b)\\w*$"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource160ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource110ref { ResourceID = "[nxFileLine][V-204600][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; ContainsLine = "StrictModes yes"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/ssh/sshd_config"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "^#\\s*StrictModes.*$|^StrictModes\\s*(?!yes\\b)\\w*$"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource161ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource111ref { ResourceID = "[nxFileLine][V-204601][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; ContainsLine = "UsePrivilegeSeparation sandbox"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/ssh/sshd_config"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "^#\\s*UsePrivilegeSeparation.*$|^UsePrivilegeSeparation\\s*(?!sandbox\\b)\\w*$"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource162ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource112ref { ResourceID = "[nxFileLine][V-204602][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; ContainsLine = "Compression delayed"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/ssh/sshd_config"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "^#\\s*Compression.*$|^Compression\\s*(?!delayed\\b)\\w*$"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource163ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource113ref { ResourceID = "[nxFileLine][V-204622][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; ContainsLine = "X11Forwarding no"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/ssh/sshd_config"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "^#\\s*X11Forwarding.*$|^X11Forwarding\\s*(?!no\\b)\\w*$"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource164ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource114ref { ResourceID = "[nxFileLine][V-233307][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; ContainsLine = "X11UseLocalhost yes"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/ssh/sshd_config"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "#\\s*X11UseLocalhost\\s*yes"; ConfigurationName = "LinuxBaseLine"; }; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource115ref +{ +ResourceID = "[nxFileLine][V-250314][medium][SRG-OS-000324-GPOS-00125]::[RHEL]Baseline"; + ContainsLine = "%wheel ALL=(ALL) TYPE=sysadm_t ROLE=sysadm_r ALL"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/sudoers"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*%wheel\\s*ALL\\s*=\\s*(ALL)\\s*TYPE\\s*=\\s*sysadm_t\\s*ROLE\\s*=\\s*sysadm_r\\s*ALL"; + ConfigurationName = "LinuxBaseLine"; +}; instance of MSFT_nxServiceResource as $MSFT_nxServiceResource1ref { ResourceID = "[nxService][V-204451][medium][SRG-OS-000114-GPOS-00059]::[RHEL]Baseline"; Controller = "systemd"; Enabled = False; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxService.ps1::13::9::nxService"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxService.ps1::13::9::nxService"; Name = "autofs"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -2173,7 +1624,7 @@ instance of MSFT_nxServiceResource as $MSFT_nxServiceResource2ref ResourceID = "[nxService][V-204492][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; Controller = "systemd"; Enabled = False; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxService.ps1::13::9::nxService"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxService.ps1::13::9::nxService"; Name = "kdump"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -2185,7 +1636,7 @@ ResourceID = "[nxService][V-204503][medium][SRG-OS-000038-GPOS-00016]::[RHEL]Bas Controller = "systemd"; State = "Running"; Enabled = True; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxService.ps1::22::9::nxService"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxService.ps1::22::9::nxService"; Name = "auditd"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -2197,7 +1648,7 @@ ResourceID = "[nxService][V-204586][medium][SRG-OS-000423-GPOS-00187]::[RHEL]Bas Controller = "systemd"; State = "Running"; Enabled = True; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxService.ps1::22::9::nxService"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxService.ps1::22::9::nxService"; Name = "sshd"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -2209,7 +1660,7 @@ ResourceID = "[nxService][V-204604.b][medium][SRG-OS-000480-GPOS-00227]::[RHEL]B Controller = "systemd"; State = "Running"; Enabled = True; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxService.ps1::22::9::nxService"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxService.ps1::22::9::nxService"; Name = "firewalld"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -2220,7 +1671,7 @@ instance of MSFT_nxScriptResource as $MSFT_nxScriptResource1ref ResourceID = "[nxScript][V-204399.b][medium][[Skip] SRG-OS-000029-GPOS-00010]::[RHEL]Baseline"; GetScript = "#!/bin/bash\necho [V-204399.b][medium][[Skip] SRG-OS-000029-GPOS-00010]"; TestScript = "#!/bin/bash\nexit 0"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxScript.skip.ps1::10::5::nxScript"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxScript.skip.ps1::10::5::nxScript"; SetScript = "#!/bin/bash"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -2231,7 +1682,7 @@ instance of MSFT_nxScriptResource as $MSFT_nxScriptResource2ref ResourceID = "[nxScript][V-204400][medium][[Skip] SRG-OS-000029-GPOS-00010]::[RHEL]Baseline"; GetScript = "#!/bin/bash\necho [V-204400][medium][[Skip] SRG-OS-000029-GPOS-00010]"; TestScript = "#!/bin/bash\nexit 0"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxScript.skip.ps1::10::5::nxScript"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxScript.skip.ps1::10::5::nxScript"; SetScript = "#!/bin/bash"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -2242,7 +1693,7 @@ instance of MSFT_nxScriptResource as $MSFT_nxScriptResource3ref ResourceID = "[nxScript][V-204403][medium][[Skip] SRG-OS-000029-GPOS-00010]::[RHEL]Baseline"; GetScript = "#!/bin/bash\necho [V-204403][medium][[Skip] SRG-OS-000029-GPOS-00010]"; TestScript = "#!/bin/bash\nexit 0"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxScript.skip.ps1::10::5::nxScript"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxScript.skip.ps1::10::5::nxScript"; SetScript = "#!/bin/bash"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -2253,7 +1704,7 @@ instance of MSFT_nxScriptResource as $MSFT_nxScriptResource4ref ResourceID = "[nxScript][V-204509][medium][[Skip] SRG-OS-000342-GPOS-00133]::[RHEL]Baseline"; GetScript = "#!/bin/bash\necho [V-204509][medium][[Skip] SRG-OS-000342-GPOS-00133]"; TestScript = "#!/bin/bash\nexit 0"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxScript.skip.ps1::10::5::nxScript"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxScript.skip.ps1::10::5::nxScript"; SetScript = "#!/bin/bash"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -2264,7 +1715,7 @@ instance of MSFT_nxScriptResource as $MSFT_nxScriptResource5ref ResourceID = "[nxScript][V-204513][medium][[Skip] SRG-OS-000343-GPOS-00134]::[RHEL]Baseline"; GetScript = "#!/bin/bash\necho [V-204513][medium][[Skip] SRG-OS-000343-GPOS-00134]"; TestScript = "#!/bin/bash\nexit 0"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxScript.skip.ps1::10::5::nxScript"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxScript.skip.ps1::10::5::nxScript"; SetScript = "#!/bin/bash"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -2275,7 +1726,7 @@ instance of MSFT_nxScriptResource as $MSFT_nxScriptResource6ref ResourceID = "[nxScript][V-204623][medium][[Skip] SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; GetScript = "#!/bin/bash\necho [V-204623][medium][[Skip] SRG-OS-000480-GPOS-00227]"; TestScript = "#!/bin/bash\nexit 0"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxScript.skip.ps1::10::5::nxScript"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxScript.skip.ps1::10::5::nxScript"; SetScript = "#!/bin/bash"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -2286,7 +1737,7 @@ instance of MSFT_nxScriptResource as $MSFT_nxScriptResource7ref ResourceID = "[nxScript][V-244557][medium][[Skip] SRG-OS-000080-GPOS-00048]::[RHEL]Baseline"; GetScript = "#!/bin/bash\necho [V-244557][medium][[Skip] SRG-OS-000080-GPOS-00048]"; TestScript = "#!/bin/bash\nexit 0"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxScript.skip.ps1::10::5::nxScript"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxScript.skip.ps1::10::5::nxScript"; SetScript = "#!/bin/bash"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -2297,7 +1748,7 @@ instance of MSFT_nxScriptResource as $MSFT_nxScriptResource8ref ResourceID = "[nxScript][V-244558][medium][[Skip] SRG-OS-000080-GPOS-00048]::[RHEL]Baseline"; GetScript = "#!/bin/bash\necho [V-244558][medium][[Skip] SRG-OS-000080-GPOS-00048]"; TestScript = "#!/bin/bash\nexit 0"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxScript.skip.ps1::10::5::nxScript"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxScript.skip.ps1::10::5::nxScript"; SetScript = "#!/bin/bash"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -2308,7 +1759,7 @@ instance of MSFT_nxScriptResource as $MSFT_nxScriptResource9ref ResourceID = "[nxScript][V-204399.a][medium][[Skip] SRG-OS-000029-GPOS-00010]::[RHEL]Baseline"; GetScript = "#!/bin/bash\necho [V-204399.a][medium][[Skip] SRG-OS-000029-GPOS-00010]"; TestScript = "#!/bin/bash\nexit 0"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxScript.skip.ps1::10::5::nxScript"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxScript.skip.ps1::10::5::nxScript"; SetScript = "#!/bin/bash"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -2325,7 +1776,7 @@ instance of OMI_ConfigurationDocument Author="Microsoft"; - GenerationDate="01/31/2022 17:13:26"; + GenerationDate="05/04/2022 09:09:33"; GenerationHost="Microsoft"; diff --git a/stig/linux/config/RHEL73.mof b/stig/linux/config/RHEL73.mof index 65163e4..798fea1 100644 --- a/stig/linux/config/RHEL73.mof +++ b/stig/linux/config/RHEL73.mof @@ -1,7 +1,7 @@ /* @TargetNode='RHEL73' @GeneratedBy=Microsoft -@GenerationDate=01/31/2022 17:13:26 +@GenerationDate=05/04/2022 09:09:33 @GenerationHost=Microsoft */ @@ -9,7 +9,7 @@ instance of MSFT_nxPackageResource as $MSFT_nxPackageResource1ref { ResourceID = "[nxPackage][V-204442][high][SRG-OS-000095-GPOS-00049]::[RHEL]Baseline"; Ensure = "Absent"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxPackage.ps1::8::5::nxPackage"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxPackage.ps1::8::5::nxPackage"; Name = "rsh-server"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -19,7 +19,7 @@ instance of MSFT_nxPackageResource as $MSFT_nxPackageResource2ref { ResourceID = "[nxPackage][V-204443][high][SRG-OS-000095-GPOS-00049]::[RHEL]Baseline"; Ensure = "Absent"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxPackage.ps1::8::5::nxPackage"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxPackage.ps1::8::5::nxPackage"; Name = "ypserv"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -29,7 +29,7 @@ instance of MSFT_nxPackageResource as $MSFT_nxPackageResource3ref { ResourceID = "[nxPackage][V-204497][high][SRG-OS-000033-GPOS-00014]::[RHEL]Baseline"; Ensure = "Present"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxPackage.ps1::8::5::nxPackage"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxPackage.ps1::8::5::nxPackage"; Name = "dracut-fips"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -39,7 +39,7 @@ instance of MSFT_nxPackageResource as $MSFT_nxPackageResource4ref { ResourceID = "[nxPackage][V-204498][low][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; Ensure = "Present"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxPackage.ps1::8::5::nxPackage"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxPackage.ps1::8::5::nxPackage"; Name = "aide"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -49,7 +49,7 @@ instance of MSFT_nxPackageResource as $MSFT_nxPackageResource5ref { ResourceID = "[nxPackage][V-204502][high][SRG-OS-000095-GPOS-00049]::[RHEL]Baseline"; Ensure = "Absent"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxPackage.ps1::8::5::nxPackage"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxPackage.ps1::8::5::nxPackage"; Name = "telnet-server"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -59,7 +59,7 @@ instance of MSFT_nxPackageResource as $MSFT_nxPackageResource6ref { ResourceID = "[nxPackage][V-204585][medium][SRG-OS-000423-GPOS-00187]::[RHEL]Baseline"; Ensure = "Present"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxPackage.ps1::8::5::nxPackage"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxPackage.ps1::8::5::nxPackage"; Name = "openssh-server"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -69,7 +69,7 @@ instance of MSFT_nxPackageResource as $MSFT_nxPackageResource7ref { ResourceID = "[nxPackage][V-204604.a][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; Ensure = "Present"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxPackage.ps1::8::5::nxPackage"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxPackage.ps1::8::5::nxPackage"; Name = "firewalld"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -79,7 +79,7 @@ instance of MSFT_nxPackageResource as $MSFT_nxPackageResource8ref { ResourceID = "[nxPackage][V-204620][high][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; Ensure = "Absent"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxPackage.ps1::8::5::nxPackage"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxPackage.ps1::8::5::nxPackage"; Name = "vsftpd"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -89,7 +89,7 @@ instance of MSFT_nxPackageResource as $MSFT_nxPackageResource9ref { ResourceID = "[nxPackage][V-204621][high][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; Ensure = "Absent"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxPackage.ps1::8::5::nxPackage"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxPackage.ps1::8::5::nxPackage"; Name = "tftp-server"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -99,7 +99,7 @@ instance of MSFT_nxPackageResource as $MSFT_nxPackageResource10ref { ResourceID = "[nxPackage][V-204631][medium][SRG-OS-000375-GPOS-00160]::[RHEL]Baseline"; Ensure = "Present"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxPackage.ps1::8::5::nxPackage"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxPackage.ps1::8::5::nxPackage"; Name = "pam_pkcs11"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -111,7 +111,7 @@ ResourceID = "[nxFile][V-204395][medium][SRG-OS-000023-GPOS-00006]::[RHEL]Baseli Contents = "You are accessing a U.S. Government (USG) Information System (IS) that is provided for USG-authorized use only.\n\nBy using this IS (which includes any device attached to this IS), you consent to the following conditions:\n\n-The USG routinely intercepts and monitors communications on this IS for purposes including, but not limited to, penetration testing, COMSEC monitoring, network operations and defense, personnel misconduct (PM), law enforcement (LE), and counterintelligence (CI) investigations.\n\n-At any time, the USG may inspect and seize data stored on this IS.\n\n-Communications using, or data stored on, this IS are not private, are subject to routine monitoring, interception, and search, and may be disclosed or used for any USG-authorized purpose.\n\n-This IS includes security measures (e.g., authentication and access controls) to protect USG interests--not for your personal benefit or privacy.\n\n-Notwithstanding the above, using this IS does not constitute consent to PM, LE or CI investigative searching or monitoring of the content of privileged communications, or work product, related to personal representation or services by attorneys, psychotherapists, or clergy, and their assistants. Such communications and work product are private and confidential. See User Agreement for details."; DestinationPath = "/etc/issue"; ModuleName = "nx"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; ModuleVersion = "1.0"; ConfigurationName = "LinuxBaseLine"; }; @@ -121,7 +121,7 @@ ResourceID = "[nxFile][V-204449.a][medium][SRG-OS-000114-GPOS-00059]::[RHEL]Base Contents = ""; DestinationPath = "/etc/modprobe.d/usb-storage.conf"; ModuleName = "nx"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; ModuleVersion = "1.0"; ConfigurationName = "LinuxBaseLine"; }; @@ -131,7 +131,7 @@ ResourceID = "[nxFile][V-204449.b][medium][SRG-OS-000114-GPOS-00059]::[RHEL]Base Contents = ""; DestinationPath = "/etc/modprobe.d/blacklist.conf"; ModuleName = "nx"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; ModuleVersion = "1.0"; ConfigurationName = "LinuxBaseLine"; }; @@ -141,7 +141,7 @@ ResourceID = "[nxFile][V-204450.a][medium][SRG-OS-000378-GPOS-00163]::[RHEL]Base Contents = ""; DestinationPath = "/etc/modprobe.d/dccp.conf"; ModuleName = "nx"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; ModuleVersion = "1.0"; ConfigurationName = "LinuxBaseLine"; }; @@ -151,7 +151,7 @@ ResourceID = "[nxFile][V-204576][low][SRG-OS-000027-GPOS-00008]::[RHEL]Baseline" Contents = "* hard maxlogins 10"; DestinationPath = "/etc/security/limits.d/204576-powerstig.conf"; ModuleName = "nx"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; ModuleVersion = "1.0"; ConfigurationName = "LinuxBaseLine"; }; @@ -161,7 +161,7 @@ ResourceID = "[nxFile][V-204579.a][medium][SRG-OS-000163-GPOS-00072]::[RHEL]Base Contents = ""; DestinationPath = "/etc/profile.d/tmout.sh"; ModuleName = "nx"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; ModuleVersion = "1.0"; ConfigurationName = "LinuxBaseLine"; }; @@ -171,7 +171,7 @@ ResourceID = "[nxFile][V-204584][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseli Contents = "kernel.randomize_va_space = 2"; DestinationPath = "/etc/sysctl.d/204584-powerstig.conf"; ModuleName = "nx"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; ModuleVersion = "1.0"; ConfigurationName = "LinuxBaseLine"; }; @@ -181,7 +181,7 @@ ResourceID = "[nxFile][V-204609][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseli Contents = "net.ipv4.conf.all.accept_source_route = 0"; DestinationPath = "/etc/sysctl.d/204609-powerstig.conf"; ModuleName = "nx"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; ModuleVersion = "1.0"; ConfigurationName = "LinuxBaseLine"; }; @@ -191,7 +191,7 @@ ResourceID = "[nxFile][V-204610][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseli Contents = "net.ipv4.conf.all.rp_filter = 1"; DestinationPath = "/etc/sysctl.d/204610-powerstig.conf"; ModuleName = "nx"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; ModuleVersion = "1.0"; ConfigurationName = "LinuxBaseLine"; }; @@ -201,7 +201,7 @@ ResourceID = "[nxFile][V-204611][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseli Contents = "net.ipv4.conf.default.rp_filter = 1"; DestinationPath = "/etc/sysctl.d/204611-powerstig.conf"; ModuleName = "nx"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; ModuleVersion = "1.0"; ConfigurationName = "LinuxBaseLine"; }; @@ -211,7 +211,7 @@ ResourceID = "[nxFile][V-204612][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseli Contents = "net.ipv4.conf.default.accept_source_route = 0"; DestinationPath = "/etc/sysctl.d/204612-powerstig.conf"; ModuleName = "nx"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; ModuleVersion = "1.0"; ConfigurationName = "LinuxBaseLine"; }; @@ -221,7 +221,7 @@ ResourceID = "[nxFile][V-204613][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseli Contents = "net.ipv4.icmp_echo_ignore_broadcasts = 1"; DestinationPath = "/etc/sysctl.d/204613-powerstig.conf"; ModuleName = "nx"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; ModuleVersion = "1.0"; ConfigurationName = "LinuxBaseLine"; }; @@ -231,7 +231,7 @@ ResourceID = "[nxFile][V-204614][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseli Contents = "net.ipv4.conf.default.accept_redirects = 0"; DestinationPath = "/etc/sysctl.d/204614-powerstig.conf"; ModuleName = "nx"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; ModuleVersion = "1.0"; ConfigurationName = "LinuxBaseLine"; }; @@ -241,7 +241,7 @@ ResourceID = "[nxFile][V-204615][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseli Contents = "net.ipv4.conf.all.accept_redirects = 0"; DestinationPath = "/etc/sysctl.d/204615-powerstig.conf"; ModuleName = "nx"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; ModuleVersion = "1.0"; ConfigurationName = "LinuxBaseLine"; }; @@ -251,7 +251,7 @@ ResourceID = "[nxFile][V-204616][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseli Contents = "net.ipv4.conf.default.send_redirects = 0"; DestinationPath = "/etc/sysctl.d/204616-powerstig.conf"; ModuleName = "nx"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; ModuleVersion = "1.0"; ConfigurationName = "LinuxBaseLine"; }; @@ -261,7 +261,7 @@ ResourceID = "[nxFile][V-204617][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseli Contents = "net.ipv4.conf.all.send_redirects = 0"; DestinationPath = "/etc/sysctl.d/204617-powerstig.conf"; ModuleName = "nx"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; ModuleVersion = "1.0"; ConfigurationName = "LinuxBaseLine"; }; @@ -271,7 +271,7 @@ ResourceID = "[nxFile][V-204625][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseli Contents = "net.ipv4.ip_forward = 0"; DestinationPath = "/etc/sysctl.d/204625-powerstig.conf"; ModuleName = "nx"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; ModuleVersion = "1.0"; ConfigurationName = "LinuxBaseLine"; }; @@ -281,7 +281,7 @@ ResourceID = "[nxFile][V-204630][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseli Contents = "net.ipv6.conf.all.accept_source_route = 0"; DestinationPath = "/etc/sysctl.d/204630-powerstig.conf"; ModuleName = "nx"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; ModuleVersion = "1.0"; ConfigurationName = "LinuxBaseLine"; }; @@ -291,7 +291,7 @@ ResourceID = "[nxFile][V-237634.a][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Base Contents = "Defaults !targetpw"; DestinationPath = "/etc/sudoers.d/237634a-powerstig.conf"; ModuleName = "nx"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; ModuleVersion = "1.0"; ConfigurationName = "LinuxBaseLine"; }; @@ -301,7 +301,7 @@ ResourceID = "[nxFile][V-237634.b][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Base Contents = "Defaults !rootpw"; DestinationPath = "/etc/sudoers.d/237634b-powerstig.conf"; ModuleName = "nx"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; ModuleVersion = "1.0"; ConfigurationName = "LinuxBaseLine"; }; @@ -311,7 +311,7 @@ ResourceID = "[nxFile][V-237634.c][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Base Contents = "Defaults !runaspw"; DestinationPath = "/etc/sudoers.d/237634c-powerstig.conf"; ModuleName = "nx"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; ModuleVersion = "1.0"; ConfigurationName = "LinuxBaseLine"; }; @@ -321,17 +321,7 @@ ResourceID = "[nxFile][V-237635][medium][SRG-OS-000373-GPOS-00156]::[RHEL]Baseli Contents = "Defaults timestamp_timeout=0"; DestinationPath = "/etc/sudoers.d/237635-powerstig.conf"; ModuleName = "nx"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; - ModuleVersion = "1.0"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileResource as $MSFT_nxFileResource23ref -{ -ResourceID = "[nxFile][V-250314][medium][SRG-OS-000324-GPOS-00125]::[RHEL]Baseline"; - Contents = "%wheel ALL=(ALL) TYPE=sysadm_t ROLE=sysadm_r ALL"; - DestinationPath = "/etc/sudoers.d/250314-powerstig.conf"; - ModuleName = "nx"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; ModuleVersion = "1.0"; ConfigurationName = "LinuxBaseLine"; }; @@ -339,7 +329,7 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource1ref { ResourceID = "[nxFileLine][V-204405][medium][SRG-OS-000069-GPOS-00037]::[RHEL]Baseline"; ContainsLine = "password substack system-auth"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/pam.d/passwd"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -350,7 +340,7 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource2ref { ResourceID = "[nxFileLine][V-204407][medium][SRG-OS-000069-GPOS-00037]::[RHEL]Baseline"; ContainsLine = "ucredit = -1"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/security/pwquality.conf"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -361,7 +351,7 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource3ref { ResourceID = "[nxFileLine][V-204408][medium][SRG-OS-000070-GPOS-00038]::[RHEL]Baseline"; ContainsLine = "lcredit = -1"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/security/pwquality.conf"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -372,7 +362,7 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource4ref { ResourceID = "[nxFileLine][V-204409][medium][SRG-OS-000071-GPOS-00039]::[RHEL]Baseline"; ContainsLine = "dcredit = -1"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/security/pwquality.conf"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -383,7 +373,7 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource5ref { ResourceID = "[nxFileLine][V-204410][medium][SRG-OS-000266-GPOS-00101]::[RHEL]Baseline"; ContainsLine = "ocredit=-1"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/security/pwquality.conf"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -394,7 +384,7 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource6ref { ResourceID = "[nxFileLine][V-204411][medium][SRG-OS-000072-GPOS-00040]::[RHEL]Baseline"; ContainsLine = "difok = 8"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/security/pwquality.conf"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -405,7 +395,7 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource7ref { ResourceID = "[nxFileLine][V-204412][medium][SRG-OS-000072-GPOS-00040]::[RHEL]Baseline"; ContainsLine = "minclass = 4"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/security/pwquality.conf"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -416,7 +406,7 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource8ref { ResourceID = "[nxFileLine][V-204413][medium][SRG-OS-000072-GPOS-00040]::[RHEL]Baseline"; ContainsLine = "maxrepeat = 3"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/security/pwquality.conf"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -427,18 +417,18 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource9ref { ResourceID = "[nxFileLine][V-204414][medium][SRG-OS-000072-GPOS-00040]::[RHEL]Baseline"; ContainsLine = "maxclassrepeat = 4"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/security/pwquality.conf"; ModuleName = "nx"; ModuleVersion = "1.0"; - DoesNotContainPattern = "^#\\s*maxclassrepeat\\s*=.*|^\\s*maxclassrepeat\\s*=\\s*(?:\\d{2,}|[3-9])"; + DoesNotContainPattern = "^#\\s*maxclassrepeat\\s*=.*|^\\s*maxclassrepeat\\s*=\\s*(?:\\d{2,}|[1-3|5-9])"; ConfigurationName = "LinuxBaseLine"; }; instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource10ref { ResourceID = "[nxFileLine][V-204416][medium][SRG-OS-000073-GPOS-00041]::[RHEL]Baseline"; ContainsLine = "ENCRYPT_METHOD SHA512"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/login.defs"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -449,7 +439,7 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource11ref { ResourceID = "[nxFileLine][V-204418][medium][SRG-OS-000075-GPOS-00043]::[RHEL]Baseline"; ContainsLine = "PASS_MIN_DAYS 1"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/login.defs"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -460,7 +450,7 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource12ref { ResourceID = "[nxFileLine][V-204420][medium][SRG-OS-000076-GPOS-00044]::[RHEL]Baseline"; ContainsLine = "PASS_MAX_DAYS 60"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/login.defs"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -471,7 +461,7 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource13ref { ResourceID = "[nxFileLine][V-204423][medium][SRG-OS-000078-GPOS-00046]::[RHEL]Baseline"; ContainsLine = "minlen = 15"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/security/pwquality.conf"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -482,7 +472,7 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource14ref { ResourceID = "[nxFileLine][V-204425][high][SRG-OS-000106-GPOS-00053]::[RHEL]Baseline"; ContainsLine = "PermitEmptyPasswords no"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/ssh/sshd_config"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -492,19 +482,19 @@ ResourceID = "[nxFileLine][V-204425][high][SRG-OS-000106-GPOS-00053]::[RHEL]Base instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource15ref { ResourceID = "[nxFileLine][V-204426][medium][SRG-OS-000118-GPOS-00060]::[RHEL]Baseline"; - ContainsLine = "INACTIVE=0"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + ContainsLine = "INACTIVE=35"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/default/useradd"; ModuleName = "nx"; ModuleVersion = "1.0"; - DoesNotContainPattern = "^#\\s*INACTIVE.*$|^INACTIVE\\s*=\\s*(?!0\\b)[-]*\\w*$"; + DoesNotContainPattern = "^#\\s*INACTIVE\\s*=.*|^\\s*INACTIVE\\s*=\\s*(3[5-9]|[4-9]\\d+|\\d{3,})"; ConfigurationName = "LinuxBaseLine"; }; instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource16ref { ResourceID = "[nxFileLine][V-204431][medium][SRG-OS-000480-GPOS-00226]::[RHEL]Baseline"; ContainsLine = "FAIL_DELAY 4"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/login.defs"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -515,7 +505,7 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource17ref { ResourceID = "[nxFileLine][V-204434][medium][SRG-OS-000480-GPOS-00229]::[RHEL]Baseline"; ContainsLine = "PermitUserEnvironment no"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/ssh/sshd_config"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -526,7 +516,7 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource18ref { ResourceID = "[nxFileLine][V-204435][medium][SRG-OS-000480-GPOS-00229]::[RHEL]Baseline"; ContainsLine = "HostbasedAuthentication no"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/ssh/sshd_config"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -537,7 +527,7 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource19ref { ResourceID = "[nxFileLine][V-204447][high][SRG-OS-000366-GPOS-00153]::[RHEL]Baseline"; ContainsLine = "gpgcheck=1"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/yum.conf"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -548,7 +538,7 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource20ref { ResourceID = "[nxFileLine][V-204448][high][SRG-OS-000366-GPOS-00153]::[RHEL]Baseline"; ContainsLine = "localpkg_gpgcheck=1"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/yum.conf"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -559,7 +549,7 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource21ref { ResourceID = "[nxFileLine][V-204449.c][medium][SRG-OS-000114-GPOS-00059]::[RHEL]Baseline"; ContainsLine = "install usb-storage /bin/true"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/modprobe.d/usb-storage.conf"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -570,7 +560,7 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource22ref { ResourceID = "[nxFileLine][V-204449.d][medium][SRG-OS-000114-GPOS-00059]::[RHEL]Baseline"; ContainsLine = "blacklist usb-storage"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/modprobe.d/blacklist.conf"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -581,7 +571,7 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource23ref { ResourceID = "[nxFileLine][V-204450.b][medium][SRG-OS-000378-GPOS-00163]::[RHEL]Baseline"; ContainsLine = "install dccp /bin/true"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/modprobe.d/dccp.conf"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -592,7 +582,7 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource24ref { ResourceID = "[nxFileLine][V-204450.c][medium][SRG-OS-000378-GPOS-00163]::[RHEL]Baseline"; ContainsLine = "blacklist dccp"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/modprobe.d/blacklist.conf"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -603,7 +593,7 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource25ref { ResourceID = "[nxFileLine][V-204452][low][SRG-OS-000437-GPOS-00194]::[RHEL]Baseline"; ContainsLine = "clean_requirements_on_remove=1"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/yum.conf"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -614,7 +604,7 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource26ref { ResourceID = "[nxFileLine][V-204453][medium][SRG-OS-000445-GPOS-00199]::[RHEL]Baseline"; ContainsLine = "SELINUX=enforcing"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/selinux/config"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -625,7 +615,7 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource27ref { ResourceID = "[nxFileLine][V-204454][medium][SRG-OS-000445-GPOS-00199]::[RHEL]Baseline"; ContainsLine = "SELINUXTYPE=targeted"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/selinux/config"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -636,7 +626,7 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource28ref { ResourceID = "[nxFileLine][V-204457][medium][SRG-OS-000480-GPOS-00228]::[RHEL]Baseline"; ContainsLine = "UMASK 077"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/login.defs"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -647,7 +637,7 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource29ref { ResourceID = "[nxFileLine][V-204466][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; ContainsLine = "CREATE_HOME yes"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/login.defs"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -658,16 +648,16 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource30ref { ResourceID = "[nxFileLine][V-204504][medium][SRG-OS-000046-GPOS-00022]::[RHEL]Baseline"; ContainsLine = "-f 2"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "^#\\s*-f\\s+2|^\\s*-f\\s*1"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileResource as $MSFT_nxFileResource24ref +instance of MSFT_nxFileResource as $MSFT_nxFileResource23ref { -SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::29::9::nxFile"; +SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::29::9::nxFile"; ModuleName = "nx"; ModuleVersion = "1.0"; ResourceID = "[nxFile][V-204506.a][medium][SRG-OS-000342-GPOS-00133]::[RHEL]Baseline"; @@ -678,7 +668,7 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource31ref { ResourceID = "[nxFileLine][V-204506.a][medium][SRG-OS-000342-GPOS-00133]::[RHEL]Baseline"; ContainsLine = "active = yes"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audisp/plugins.d/au-remote.conf"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -689,7 +679,7 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource32ref { ResourceID = "[nxFileLine][V-204506.b][medium][SRG-OS-000342-GPOS-00133]::[RHEL]Baseline"; ContainsLine = "direction = out"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audisp/plugins.d/au-remote.conf"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -700,7 +690,7 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource33ref { ResourceID = "[nxFileLine][V-204506.c][medium][SRG-OS-000342-GPOS-00133]::[RHEL]Baseline"; ContainsLine = "path = /sbin/audisp-remote"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audisp/plugins.d/au-remote.conf"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -711,7 +701,7 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource34ref { ResourceID = "[nxFileLine][V-204506.d][medium][SRG-OS-000342-GPOS-00133]::[RHEL]Baseline"; ContainsLine = "type = always"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audisp/plugins.d/au-remote.conf"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -722,7 +712,7 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource35ref { ResourceID = "[nxFileLine][V-204507][medium][SRG-OS-000342-GPOS-00133]::[RHEL]Baseline"; ContainsLine = "overflow_action = syslog"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audisp/audispd.conf"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -733,16 +723,16 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource36ref { ResourceID = "[nxFileLine][V-204508][medium][SRG-OS-000342-GPOS-00133]::[RHEL]Baseline"; ContainsLine = "name_format = hostname"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audisp/audispd.conf"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "^#\\s*name_format.*$|^name_format\\s*=\\s*(?!hostname$)\\w*$"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileResource as $MSFT_nxFileResource25ref +instance of MSFT_nxFileResource as $MSFT_nxFileResource24ref { -SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::19::9::nxFile"; +SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::19::9::nxFile"; ModuleName = "nx"; ModuleVersion = "1.0"; ResourceID = "[nxFile][V-204510][medium][SRG-OS-000342-GPOS-00133]::[RHEL]Baseline"; @@ -753,7 +743,7 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource37ref { ResourceID = "[nxFileLine][V-204510][medium][SRG-OS-000342-GPOS-00133]::[RHEL]Baseline"; ContainsLine = "enable_krb5 = yes"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audisp/audisp-remote.conf"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -764,7 +754,7 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource38ref { ResourceID = "[nxFileLine][V-204511][medium][SRG-OS-000342-GPOS-00133]::[RHEL]Baseline"; ContainsLine = "disk_full_action = single"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audisp/audisp-remote.conf"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -775,7 +765,7 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource39ref { ResourceID = "[nxFileLine][V-204512][medium][SRG-OS-000342-GPOS-00133]::[RHEL]Baseline"; ContainsLine = "network_failure_action = syslog"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audisp/audisp-remote.conf"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -786,7 +776,7 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource40ref { ResourceID = "[nxFileLine][V-204514][medium][SRG-OS-000343-GPOS-00134]::[RHEL]Baseline"; ContainsLine = "space_left_action = email"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/auditd.conf"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -797,7 +787,7 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource41ref { ResourceID = "[nxFileLine][V-204515][medium][SRG-OS-000343-GPOS-00134]::[RHEL]Baseline"; ContainsLine = "action_mail_acct = root"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/auditd.conf"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -808,7 +798,7 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource42ref { ResourceID = "[nxFileLine][V-204516.a][medium][SRG-OS-000327-GPOS-00127]::[RHEL]Baseline"; ContainsLine = "-a always,exit -F arch=b32 -S execve -C uid!=euid -F euid=0 -k setuid"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -819,7 +809,7 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource43ref { ResourceID = "[nxFileLine][V-204516.b][medium][SRG-OS-000327-GPOS-00127]::[RHEL]Baseline"; ContainsLine = "-a always,exit -F arch=b64 -S execve -C uid!=euid -F euid=0 -k setuid"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -830,7 +820,7 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource44ref { ResourceID = "[nxFileLine][V-204516.c][medium][SRG-OS-000327-GPOS-00127]::[RHEL]Baseline"; ContainsLine = "-a always,exit -F arch=b32 -S execve -C gid!=egid -F egid=0 -k setgid"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -841,7 +831,7 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource45ref { ResourceID = "[nxFileLine][V-204516.d][medium][SRG-OS-000327-GPOS-00127]::[RHEL]Baseline"; ContainsLine = "-a always,exit -F arch=b64 -S execve -C gid!=egid -F egid=0 -k setgid"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -851,1318 +841,779 @@ ResourceID = "[nxFileLine][V-204516.d][medium][SRG-OS-000327-GPOS-00127]::[RHEL] instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource46ref { ResourceID = "[nxFileLine][V-204517.a][medium][SRG-OS-000064-GPOS-00033]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S chown -F auid>=1000 -F auid!=unset -k perm_mod"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + ContainsLine = "-a always,exit -F arch=b32 -S chown,fchown,fchownat,lchown -F auid>=1000 -F auid!=unset -k perm_mod"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*chown\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*perm_mod"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*chown,fchown,fchownat,lchown\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*perm_mod"; ConfigurationName = "LinuxBaseLine"; }; instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource47ref { ResourceID = "[nxFileLine][V-204517.b][medium][SRG-OS-000064-GPOS-00033]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S chown -F auid>=1000 -F auid!=unset -k perm_mod"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + ContainsLine = "-a always,exit -F arch=b64 -S chown,fchown,fchownat,lchown -F auid>=1000 -F auid!=unset -k perm_mod"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*chown\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*perm_mod"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*chown,fchown,fchownat,lchown\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*perm_mod"; ConfigurationName = "LinuxBaseLine"; }; instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource48ref { -ResourceID = "[nxFileLine][V-204518.a][medium][SRG-OS-000064-GPOS-00033]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S fchown -F auid>=1000 -F auid!=unset -k perm_mod"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; +ResourceID = "[nxFileLine][V-204521.a][medium][SRG-OS-000458-GPOS-00203]::[RHEL]Baseline"; + ContainsLine = "-a always,exit -F arch=b32 -S chmod,fchmod,fchmodat -F auid>=1000 -F auid!=unset -k perm_mod"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*fchown\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*perm_mod"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*chmod,fchmod,fchmodat\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*perm_mod"; ConfigurationName = "LinuxBaseLine"; }; instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource49ref { -ResourceID = "[nxFileLine][V-204518.b][medium][SRG-OS-000064-GPOS-00033]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S fchown -F auid>=1000 -F auid!=unset -k perm_mod"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; +ResourceID = "[nxFileLine][V-204521.b][medium][SRG-OS-000458-GPOS-00203]::[RHEL]Baseline"; + ContainsLine = "-a always,exit -F arch=b64 -S chmod,fchmod,fchmodat -F auid>=1000 -F auid!=unset -k perm_mod"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*fchown\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*perm_mod"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*chmod,fchmod,fchmodat\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*perm_mod"; ConfigurationName = "LinuxBaseLine"; }; instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource50ref { -ResourceID = "[nxFileLine][V-204519.a][medium][SRG-OS-000064-GPOS-00033]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S lchown -F auid>=1000 -F auid!=unset -k perm_mod"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; +ResourceID = "[nxFileLine][V-204524.a][medium][SRG-OS-000458-GPOS-00203]::[RHEL]Baseline"; + ContainsLine = "-a always,exit -F arch=b32 -S setxattr,fsetxattr,lsetxattr,removexattr,fremovexattr,lremovexattr -F auid>=1000 -F auid!=unset -k perm_mod"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*lchown\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*perm_mod"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*setxattr,fsetxattr,lsetxattr,removexattr,fremovexattr,lremovexattr\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*perm_mod"; ConfigurationName = "LinuxBaseLine"; }; instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource51ref { -ResourceID = "[nxFileLine][V-204519.b][medium][SRG-OS-000064-GPOS-00033]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S lchown -F auid>=1000 -F auid!=unset -k perm_mod"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; +ResourceID = "[nxFileLine][V-204524.b][medium][SRG-OS-000458-GPOS-00203]::[RHEL]Baseline"; + ContainsLine = "-a always,exit -F arch=b64 -S setxattr,fsetxattr,lsetxattr,removexattr,fremovexattr,lremovexattr -F auid>=1000 -F auid!=unset -k perm_mod"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*lchown\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*perm_mod"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*setxattr,fsetxattr,lsetxattr,removexattr,fremovexattr,lremovexattr\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*perm_mod"; ConfigurationName = "LinuxBaseLine"; }; instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource52ref { -ResourceID = "[nxFileLine][V-204520.a][medium][SRG-OS-000064-GPOS-00033]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S fchownat -F auid>=1000 -F auid!=unset -k perm_mod"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; +ResourceID = "[nxFileLine][V-204531.a][medium][SRG-OS-000064-GPOS-00033]::[RHEL]Baseline"; + ContainsLine = "-a always,exit -F arch=b32 -S creat,open,openat,open_by_handle_at,truncate,ftruncate -F exit=-EPERM -F auid>=1000 -F auid!=unset -k access"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*fchownat\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*perm_mod"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*creat,open,openat,open_by_handle_at,truncate,ftruncate\\s*-F\\s*exit\\s*=\\s*-EPERM\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*access"; ConfigurationName = "LinuxBaseLine"; }; instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource53ref { -ResourceID = "[nxFileLine][V-204520.b][medium][SRG-OS-000064-GPOS-00033]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S fchownat -F auid>=1000 -F auid!=unset -k perm_mod"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; +ResourceID = "[nxFileLine][V-204531.b][medium][SRG-OS-000064-GPOS-00033]::[RHEL]Baseline"; + ContainsLine = "-a always,exit -F arch=b32 -S creat,open,openat,open_by_handle_at,truncate,ftruncate -F exit=-EACCES -F auid>=1000 -F auid!=unset -k access"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*fchownat\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*perm_mod"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*creat,open,openat,open_by_handle_at,truncate,ftruncate\\s*-F\\s*exit\\s*=\\s*-EACCES\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*access"; ConfigurationName = "LinuxBaseLine"; }; instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource54ref { -ResourceID = "[nxFileLine][V-204521.a][medium][SRG-OS-000458-GPOS-00203]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S chmod -F auid>=1000 -F auid!=unset -k perm_mod"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; +ResourceID = "[nxFileLine][V-204531.c][medium][SRG-OS-000064-GPOS-00033]::[RHEL]Baseline"; + ContainsLine = "-a always,exit -F arch=b64 -S creat,open,openat,open_by_handle_at,truncate,ftruncate -F exit=-EPERM -F auid>=1000 -F auid!=unset -k access"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*chmod\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*perm_mod"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*creat,open,openat,open_by_handle_at,truncate,ftruncate\\s*-F\\s*exit\\s*=\\s*-EPERM\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*access"; ConfigurationName = "LinuxBaseLine"; }; instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource55ref { -ResourceID = "[nxFileLine][V-204521.b][medium][SRG-OS-000458-GPOS-00203]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S chmod -F auid>=1000 -F auid!=unset -k perm_mod"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; +ResourceID = "[nxFileLine][V-204531.d][medium][SRG-OS-000064-GPOS-00033]::[RHEL]Baseline"; + ContainsLine = "-a always,exit -F arch=b64 -S creat,open,openat,open_by_handle_at,truncate,ftruncate -F exit=-EACCES -F auid>=1000 -F auid!=unset -k access"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*chmod\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*perm_mod"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*creat,open,openat,open_by_handle_at,truncate,ftruncate\\s*-F\\s*exit\\s*=\\s*-EACCES\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*access"; ConfigurationName = "LinuxBaseLine"; }; instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource56ref { -ResourceID = "[nxFileLine][V-204522.a][medium][SRG-OS-000458-GPOS-00203]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S fchmod -F auid>=1000 -F auid!=unset -k perm_mod"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*fchmod\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*perm_mod"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource57ref -{ -ResourceID = "[nxFileLine][V-204522.b][medium][SRG-OS-000458-GPOS-00203]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S fchmod -F auid>=1000 -F auid!=unset -k perm_mod"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*fchmod\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*perm_mod"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource58ref -{ -ResourceID = "[nxFileLine][V-204523.a][medium][SRG-OS-000458-GPOS-00203]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S fchmodat -F auid>=1000 -F auid!=unset -k perm_mod"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*fchmodat\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*perm_mod"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource59ref -{ -ResourceID = "[nxFileLine][V-204523.b][medium][SRG-OS-000458-GPOS-00203]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S fchmodat -F auid>=1000 -F auid!=unset -k perm_mod"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*fchmodat\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*perm_mod"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource60ref -{ -ResourceID = "[nxFileLine][V-204524.a][medium][SRG-OS-000458-GPOS-00203]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S setxattr -F auid>=1000 -F auid!=unset -k perm_mod"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*setxattr\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*perm_mod"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource61ref -{ -ResourceID = "[nxFileLine][V-204524.b][medium][SRG-OS-000458-GPOS-00203]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S setxattr -F auid>=1000 -F auid!=unset -k perm_mod"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*setxattr\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*perm_mod"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource62ref -{ -ResourceID = "[nxFileLine][V-204525.a][medium][SRG-OS-000458-GPOS-00203]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S fsetxattr -F auid>=1000 -F auid!=unset -k perm_mod"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*fsetxattr\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*perm_mod"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource63ref -{ -ResourceID = "[nxFileLine][V-204525.b][medium][SRG-OS-000458-GPOS-00203]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S fsetxattr -F auid>=1000 -F auid!=unset -k perm_mod"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*fsetxattr\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*perm_mod"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource64ref -{ -ResourceID = "[nxFileLine][V-204526.a][medium][SRG-OS-000458-GPOS-00203]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S lsetxattr -F auid>=1000 -F auid!=unset -k perm_mod"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*lsetxattr\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*perm_mod"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource65ref -{ -ResourceID = "[nxFileLine][V-204526.b][medium][SRG-OS-000458-GPOS-00203]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S lsetxattr -F auid>=1000 -F auid!=unset -k perm_mod"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*lsetxattr\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*perm_mod"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource66ref -{ -ResourceID = "[nxFileLine][V-204527.a][medium][SRG-OS-000458-GPOS-00203]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S removexattr -F auid>=1000 -F auid!=unset -k perm_mod"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*removexattr\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*perm_mod"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource67ref -{ -ResourceID = "[nxFileLine][V-204527.b][medium][SRG-OS-000458-GPOS-00203]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S removexattr -F auid>=1000 -F auid!=unset -k perm_mod"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*removexattr\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*perm_mod"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource68ref -{ -ResourceID = "[nxFileLine][V-204528.a][medium][SRG-OS-000458-GPOS-00203]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S fremovexattr -F auid>=1000 -F auid!=unset -k perm_mod"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*fremovexattr\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*perm_mod"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource69ref -{ -ResourceID = "[nxFileLine][V-204528.b][medium][SRG-OS-000458-GPOS-00203]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S fremovexattr -F auid>=1000 -F auid!=unset -k perm_mod"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*fremovexattr\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*perm_mod"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource70ref -{ -ResourceID = "[nxFileLine][V-204529.a][medium][SRG-OS-000458-GPOS-00203]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S lremovexattr -F auid>=1000 -F auid!=unset -k perm_mod"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*lremovexattr\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*perm_mod"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource71ref -{ -ResourceID = "[nxFileLine][V-204529.b][medium][SRG-OS-000458-GPOS-00203]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S lremovexattr -F auid>=1000 -F auid!=unset -k perm_mod"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*lremovexattr\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*perm_mod"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource72ref -{ -ResourceID = "[nxFileLine][V-204530.a][medium][SRG-OS-000064-GPOS-00033]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S creat F exit=-EPERM -F auid>=1000 -F auid!=unset -k access"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*creat\\s*F\\s*exit\\s*=\\s*-EPERM\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*access"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource73ref -{ -ResourceID = "[nxFileLine][V-204530.b][medium][SRG-OS-000064-GPOS-00033]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S creat -F exit=-EACCES -F auid>=1000 -F auid!=unset -k access"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*creat\\s*-F\\s*exit\\s*=\\s*-EACCES\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*access"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource74ref -{ -ResourceID = "[nxFileLine][V-204530.c][medium][SRG-OS-000064-GPOS-00033]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S creat -F exit=-EPERM -F auid>=1000 -F auid!=unset -k access"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*creat\\s*-F\\s*exit\\s*=\\s*-EPERM\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*access"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource75ref -{ -ResourceID = "[nxFileLine][V-204530.d][medium][SRG-OS-000064-GPOS-00033]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S creat -F exit=-EACCES -F auid>=1000 -F auid!=unset -k access"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*creat\\s*-F\\s*exit\\s*=\\s*-EACCES\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*access"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource76ref -{ -ResourceID = "[nxFileLine][V-204531.a][medium][SRG-OS-000064-GPOS-00033]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S open -F exit=-EPERM -F auid>=1000 -F auid!=unset -k access"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*open\\s*-F\\s*exit\\s*=\\s*-EPERM\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*access"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource77ref -{ -ResourceID = "[nxFileLine][V-204531.b][medium][SRG-OS-000064-GPOS-00033]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S open -F exit=-EACCES -F auid>=1000 -F auid!=unset -k access"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*open\\s*-F\\s*exit\\s*=\\s*-EACCES\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*access"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource78ref -{ -ResourceID = "[nxFileLine][V-204531.c][medium][SRG-OS-000064-GPOS-00033]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S open -F exit=-EPERM -F auid>=1000 -F auid!=unset -k access"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*open\\s*-F\\s*exit\\s*=\\s*-EPERM\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*access"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource79ref -{ -ResourceID = "[nxFileLine][V-204531.d][medium][SRG-OS-000064-GPOS-00033]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S open -F exit=-EACCES -F auid>=1000 -F auid!=unset -k access"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*open\\s*-F\\s*exit\\s*=\\s*-EACCES\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*access"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource80ref -{ -ResourceID = "[nxFileLine][V-204532.a][medium][SRG-OS-000064-GPOS-00033]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S openat -F exit=-EPERM -F auid>=1000 -F auid!=unset -k access"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*openat\\s*-F\\s*exit\\s*=\\s*-EPERM\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*access"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource81ref -{ -ResourceID = "[nxFileLine][V-204532.b][medium][SRG-OS-000064-GPOS-00033]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S openat -F exit=-EACCES -F auid>=1000 -F auid!=unset -k access"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*openat\\s*-F\\s*exit\\s*=\\s*-EACCES\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*access"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource82ref -{ -ResourceID = "[nxFileLine][V-204532.c][medium][SRG-OS-000064-GPOS-00033]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S openat -F exit=-EPERM -F auid>=1000 -F auid!=unset -k access"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*openat\\s*-F\\s*exit\\s*=\\s*-EPERM\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*access"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource83ref -{ -ResourceID = "[nxFileLine][V-204532.d][medium][SRG-OS-000064-GPOS-00033]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S openat -F exit=-EACCES -F auid>=1000 -F auid!=unset -k access"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*openat\\s*-F\\s*exit\\s*=\\s*-EACCES\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*access"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource84ref -{ -ResourceID = "[nxFileLine][V-204533.a][medium][SRG-OS-000064-GPOS-00033]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S open_by_handle_at -F exit=-EPERM -F auid>=1000 -F auid!=unset -k access"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*open_by_handle_at\\s*-F\\s*exit\\s*=\\s*-EPERM\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*access"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource85ref -{ -ResourceID = "[nxFileLine][V-204533.b][medium][SRG-OS-000064-GPOS-00033]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S open_by_handle_at -F exit=-EACCES -F auid>=1000 -F auid!=unset -k access"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*open_by_handle_at\\s*-F\\s*exit\\s*=\\s*-EACCES\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*access"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource86ref -{ -ResourceID = "[nxFileLine][V-204533.c][medium][SRG-OS-000064-GPOS-00033]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S open_by_handle_at -F exit=-EPERM -F auid>=1000 -F auid!=unset -k access"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*open_by_handle_at\\s*-F\\s*exit\\s*=\\s*-EPERM\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*access"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource87ref -{ -ResourceID = "[nxFileLine][V-204533.d][medium][SRG-OS-000064-GPOS-00033]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S open_by_handle_at -F exit=-EACCES -F auid>=1000 -F auid!=unset -k access"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*open_by_handle_at\\s*-F\\s*exit\\s*=\\s*-EACCES\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*access"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource88ref -{ -ResourceID = "[nxFileLine][V-204534.a][medium][SRG-OS-000064-GPOS-00033]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S truncate -F exit=-EPERM -F auid>=1000 -F auid!=unset -k access"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*truncate\\s*-F\\s*exit\\s*=\\s*-EPERM\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*access"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource89ref -{ -ResourceID = "[nxFileLine][V-204534.b][medium][SRG-OS-000064-GPOS-00033]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S truncate -F exit=-EACCES -F auid>=1000 -F auid!=unset -k access"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*truncate\\s*-F\\s*exit\\s*=\\s*-EACCES\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*access"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource90ref -{ -ResourceID = "[nxFileLine][V-204534.c][medium][SRG-OS-000064-GPOS-00033]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S truncate -F exit=-EPERM -F auid>=1000 -F auid!=unset -k access"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*truncate\\s*-F\\s*exit\\s*=\\s*-EPERM\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*access"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource91ref -{ -ResourceID = "[nxFileLine][V-204534.d][medium][SRG-OS-000064-GPOS-00033]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S truncate -F exit=-EACCES -F auid>=1000 -F auid!=unset -k access"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*truncate\\s*-F\\s*exit\\s*=\\s*-EACCES\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*access"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource92ref -{ -ResourceID = "[nxFileLine][V-204535.a][medium][SRG-OS-000064-GPOS-00033]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S ftruncate -F exit=-EPERM -F auid>=1000 -F auid!=unset -k access"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*ftruncate\\s*-F\\s*exit\\s*=\\s*-EPERM\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*access"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource93ref -{ -ResourceID = "[nxFileLine][V-204535.b][medium][SRG-OS-000064-GPOS-00033]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S ftruncate -F exit=-EACCES -F auid>=1000 -F auid!=unset -k access"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*ftruncate\\s*-F\\s*exit\\s*=\\s*-EACCES\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*access"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource94ref -{ -ResourceID = "[nxFileLine][V-204535.c][medium][SRG-OS-000064-GPOS-00033]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S ftruncate -F exit=-EPERM -F auid>=1000 -F auid!=unset -k access"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*ftruncate\\s*-F\\s*exit\\s*=\\s*-EPERM\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*access"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource95ref -{ -ResourceID = "[nxFileLine][V-204535.d][medium][SRG-OS-000064-GPOS-00033]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S ftruncate -F exit=-EACCES -F auid>=1000 -F auid!=unset -k access"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*ftruncate\\s*-F\\s*exit\\s*=\\s*-EACCES\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*access"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource96ref -{ ResourceID = "[nxFileLine][V-204536][medium][SRG-OS-000392-GPOS-00172]::[RHEL]Baseline"; ContainsLine = "-a always,exit -F path=/usr/sbin/semanage -F auid>=1000 -F auid!=unset -k privileged-priv_change"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/sbin/semanage\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-priv_change"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource97ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource57ref { ResourceID = "[nxFileLine][V-204537][medium][SRG-OS-000392-GPOS-00172]::[RHEL]Baseline"; ContainsLine = "-a always,exit -F path=/usr/sbin/setsebool -F auid>=1000 -F auid!=unset -k privileged-priv_change"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/sbin/setsebool\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-priv_change"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource98ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource58ref { ResourceID = "[nxFileLine][V-204538][medium][SRG-OS-000392-GPOS-00172]::[RHEL]Baseline"; ContainsLine = "-a always,exit -F path=/usr/bin/chcon -F auid>=1000 -F auid!=unset -k privileged-priv_change"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/bin/chcon\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-priv_change"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource99ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource59ref { ResourceID = "[nxFileLine][V-204539][medium][SRG-OS-000392-GPOS-00172]::[RHEL]Baseline"; ContainsLine = "-a always,exit -F path=/usr/sbin/setfiles -F auid>=1000 -F auid!=unset -k privileged-priv_change"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/sbin/setfiles\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-priv_change"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource100ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource60ref { ResourceID = "[nxFileLine][V-204540][medium][SRG-OS-000392-GPOS-00172]::[RHEL]Baseline"; ContainsLine = "-w /var/run/faillock -p wa -k logins"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "#\\s*-w\\s*/var/run/faillock\\s*-p\\s*wa\\s*-k\\s*logins"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource101ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource61ref { ResourceID = "[nxFileLine][V-204541][medium][SRG-OS-000392-GPOS-00172]::[RHEL]Baseline"; ContainsLine = "-w /var/log/lastlog -p wa -k logins"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "#\\s*-w\\s*/var/log/lastlog\\s*-p\\s*wa\\s*-k\\s*logins"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource102ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource62ref { ResourceID = "[nxFileLine][V-204542][medium][SRG-OS-000042-GPOS-00020]::[RHEL]Baseline"; ContainsLine = "-a always,exit -F path=/usr/bin/passwd -F auid>=1000 -F auid!=unset -k privileged-passwd"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/bin/passwd\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-passwd"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource103ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource63ref { ResourceID = "[nxFileLine][V-204543][medium][SRG-OS-000042-GPOS-00020]::[RHEL]Baseline"; ContainsLine = "-a always,exit -F path=/usr/sbin/unix_chkpwd -F auid>=1000 -F auid!=unset -k privileged-passwd"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/sbin/unix_chkpwd\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-passwd"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource104ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource64ref { ResourceID = "[nxFileLine][V-204544][medium][SRG-OS-000042-GPOS-00020]::[RHEL]Baseline"; ContainsLine = "-a always,exit -F path=/usr/bin/gpasswd -F auid>=1000 -F auid!=unset -k privileged-passwd"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/bin/gpasswd\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-passwd"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource105ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource65ref { ResourceID = "[nxFileLine][V-204545][medium][SRG-OS-000042-GPOS-00020]::[RHEL]Baseline"; ContainsLine = "-a always,exit -F path=/usr/bin/chage -F auid>=1000 -F auid!=unset -k privileged-passwd"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/bin/chage\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-passwd"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource106ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource66ref { ResourceID = "[nxFileLine][V-204546][medium][SRG-OS-000042-GPOS-00020]::[RHEL]Baseline"; ContainsLine = "-a always,exit -F path=/usr/sbin/userhelper -F auid>=1000 -F auid!=unset -k privileged-passwd"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/sbin/userhelper\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-passwd"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource107ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource67ref { ResourceID = "[nxFileLine][V-204547][medium][SRG-OS-000037-GPOS-00015]::[RHEL]Baseline"; ContainsLine = "-a always,exit -F path=/usr/bin/su -F auid>=1000 -F auid!=unset -k privileged-priv_change"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/bin/su\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-priv_change"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource108ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource68ref { ResourceID = "[nxFileLine][V-204548][medium][SRG-OS-000037-GPOS-00015]::[RHEL]Baseline"; ContainsLine = "-a always,exit -F path=/usr/bin/sudo -F auid>=1000 -F auid!=unset -k privileged-priv_change"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/bin/sudo\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-priv_change"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource109ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource69ref { ResourceID = "[nxFileLine][V-204549.a][medium][SRG-OS-000037-GPOS-00015]::[RHEL]Baseline"; ContainsLine = "-w /etc/sudoers -p wa -k privileged-actions"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "#\\s*-w /etc/sudoers -p wa -k privileged-actions"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource110ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource70ref { ResourceID = "[nxFileLine][V-204549.b][medium][SRG-OS-000037-GPOS-00015]::[RHEL]Baseline"; ContainsLine = "-w /etc/sudoers.d/ -p wa -k privileged-actions"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "#\\s*-w /etc/sudoers.d/ -p wa -k privileged-actions"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource111ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource71ref { ResourceID = "[nxFileLine][V-204550][medium][SRG-OS-000037-GPOS-00015]::[RHEL]Baseline"; ContainsLine = "-a always,exit -F path=/usr/bin/newgrp -F auid>=1000 -F auid!=unset -k privileged-priv_change"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/bin/newgrp\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-priv_change"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource112ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource72ref { ResourceID = "[nxFileLine][V-204551][medium][SRG-OS-000037-GPOS-00015]::[RHEL]Baseline"; ContainsLine = "-a always,exit -F path=/usr/bin/chsh -F auid>=1000 -F auid!=unset -k privileged-priv_change"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/bin/chsh\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-priv_change"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource113ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource73ref { ResourceID = "[nxFileLine][V-204552.a][medium][SRG-OS-000042-GPOS-00020]::[RHEL]Baseline"; ContainsLine = "-a always,exit -F arch=b32 -S mount -F auid>=1000 -F auid!=unset -k privileged-mount"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*mount\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-mount"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource114ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource74ref { ResourceID = "[nxFileLine][V-204552.b][medium][SRG-OS-000042-GPOS-00020]::[RHEL]Baseline"; ContainsLine = "-a always,exit -F arch=b64 -S mount -F auid>=1000 -F auid!=unset -k privileged-mount"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*mount\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-mount"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource115ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource75ref { ResourceID = "[nxFileLine][V-204552.c][medium][SRG-OS-000042-GPOS-00020]::[RHEL]Baseline"; ContainsLine = "-a always,exit -F path=/usr/bin/mount -F auid>=1000 -F auid!=unset -k privileged-mount"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/bin/mount\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-mount"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource116ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource76ref { ResourceID = "[nxFileLine][V-204553][medium][SRG-OS-000042-GPOS-00020]::[RHEL]Baseline"; ContainsLine = "-a always,exit -F path=/usr/bin/umount -F auid>=1000 -F auid!=unset -k privileged-mount"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/bin/umount\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-mount"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource117ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource77ref { ResourceID = "[nxFileLine][V-204554][medium][SRG-OS-000042-GPOS-00020]::[RHEL]Baseline"; ContainsLine = "-a always,exit -F path=/usr/sbin/postdrop -F auid>=1000 -F auid!=unset -k privileged-postfix"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/sbin/postdrop\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-postfix"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource118ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource78ref { ResourceID = "[nxFileLine][V-204555][medium][SRG-OS-000042-GPOS-00020]::[RHEL]Baseline"; ContainsLine = "-a always,exit -F path=/usr/sbin/postqueue -F auid>=1000 -F auid!=unset -k privileged-postfix"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/sbin/postqueue\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-postfix"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource119ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource79ref { ResourceID = "[nxFileLine][V-204556][medium][SRG-OS-000042-GPOS-00020]::[RHEL]Baseline"; ContainsLine = "-a always,exit -F path=/usr/libexec/openssh/ssh-keysign -F auid>=1000 -F auid!=unset -k privileged-ssh"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/libexec/openssh/ssh-keysign\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-ssh"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource120ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource80ref { ResourceID = "[nxFileLine][V-204557][medium][SRG-OS-000042-GPOS-00020]::[RHEL]Baseline"; ContainsLine = "-a always,exit -F path=/usr/bin/crontab -F auid>=1000 -F auid!=unset -k privileged-cron"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/bin/crontab\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-cron"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource121ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource81ref { ResourceID = "[nxFileLine][V-204558][medium][SRG-OS-000471-GPOS-00215]::[RHEL]Baseline"; ContainsLine = "-a always,exit -F path=/usr/sbin/pam_timestamp_check -F auid>=1000 -F auid!=unset -k privileged-pam"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/sbin/pam_timestamp_check\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-pam"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource122ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource82ref { ResourceID = "[nxFileLine][V-204559.a][medium][SRG-OS-000471-GPOS-00216]::[RHEL]Baseline"; ContainsLine = "-a always,exit -F arch=b32 -S create_module -k module-change"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*create_module\\s*-k\\s*module-change"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource123ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource83ref { ResourceID = "[nxFileLine][V-204559.b][medium][SRG-OS-000471-GPOS-00216]::[RHEL]Baseline"; ContainsLine = "-a always,exit -F arch=b64 -S create_module -k module-change"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*create_module\\s*-k\\s*module-change"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource124ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource84ref { ResourceID = "[nxFileLine][V-204560.a][medium][SRG-OS-000471-GPOS-00216]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S init_module -k module-change"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + ContainsLine = "-a always,exit -F arch=b32 -S init_module,finit_module -k modulechange"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*init_module\\s*-k\\s*module-change"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*init_module,finit_module\\s*-k\\s*modulechange"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource125ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource85ref { ResourceID = "[nxFileLine][V-204560.b][medium][SRG-OS-000471-GPOS-00216]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S init_module -k module-change"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + ContainsLine = "-a always,exit -F arch=b64 -S init_module,finit_module -k modulechange"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*init_module\\s*-k\\s*module-change"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*init_module,finit_module\\s*-k\\s*modulechange"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource126ref -{ -ResourceID = "[nxFileLine][V-204561.a][medium][SRG-OS-000471-GPOS-00216]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S finit_module -k module-change"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*finit_module\\s*-k\\s*module-change"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource127ref -{ -ResourceID = "[nxFileLine][V-204561.b][medium][SRG-OS-000471-GPOS-00216]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S finit_module -k module-change"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*finit_module\\s*-k\\s*module-change"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource128ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource86ref { ResourceID = "[nxFileLine][V-204562.a][medium][SRG-OS-000471-GPOS-00216]::[RHEL]Baseline"; ContainsLine = "-a always,exit -F arch=b32 -S delete_module -k module-change"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*delete_module\\s*-k\\s*module-change"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource129ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource87ref { ResourceID = "[nxFileLine][V-204562.b][medium][SRG-OS-000471-GPOS-00216]::[RHEL]Baseline"; ContainsLine = "-a always,exit -F arch=b64 -S delete_module -k module-change"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*delete_module\\s*-k\\s*module-change"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource130ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource88ref { ResourceID = "[nxFileLine][V-204563][medium][SRG-OS-000471-GPOS-00216]::[RHEL]Baseline"; ContainsLine = "-w /usr/bin/kmod -p x -F auid!=unset -k module-change"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "#\\s*-w\\s*/usr/bin/kmod\\s*-p\\s*x\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*module-change"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource131ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource89ref { ResourceID = "[nxFileLine][V-204564][medium][SRG-OS-000004-GPOS-00004]::[RHEL]Baseline"; ContainsLine = "-w /etc/passwd -p wa -k identity"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "#\\s*-w\\s*/etc/passwd\\s*-p\\s*wa\\s*-k\\s*identity"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource132ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource90ref { ResourceID = "[nxFileLine][V-204565][medium][SRG-OS-000004-GPOS-00004]::[RHEL]Baseline"; ContainsLine = "-w /etc/group -p wa -k identity"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "#\\s*-w\\s*/etc/group\\s*-p\\s*wa\\s*-k\\s*identity"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource133ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource91ref { ResourceID = "[nxFileLine][V-204566][medium][SRG-OS-000004-GPOS-00004]::[RHEL]Baseline"; ContainsLine = "-w /etc/gshadow -p wa -k identity"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "#\\s*-w\\s*/etc/gshadow\\s*-p\\s*wa\\s*-k\\s*identity"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource134ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource92ref { ResourceID = "[nxFileLine][V-204567][medium][SRG-OS-000004-GPOS-00004]::[RHEL]Baseline"; ContainsLine = "-w /etc/shadow -p wa -k identity"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "#\\s*-w\\s*/etc/shadow\\s*-p\\s*wa\\s*-k\\s*identity"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource135ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource93ref { ResourceID = "[nxFileLine][V-204568][medium][SRG-OS-000004-GPOS-00004]::[RHEL]Baseline"; ContainsLine = "-w /etc/security/opasswd -p wa -k identity"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "#\\s*-w\\s*/etc/security/opasswd\\s*-p\\s*wa\\s*-k\\s*identity"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource136ref -{ -ResourceID = "[nxFileLine][V-204569.a][medium][SRG-OS-000466-GPOS-00210]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S rename -F auid>=1000 -F auid!=unset -k delete"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*rename\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*delete"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource137ref -{ -ResourceID = "[nxFileLine][V-204569.b][medium][SRG-OS-000466-GPOS-00210]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S rename -F auid>=1000 -F auid!=unset -k delete"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*rename\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*delete"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource138ref -{ -ResourceID = "[nxFileLine][V-204570.a][medium][SRG-OS-000466-GPOS-00210]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S renameat -F auid>=1000 -F auid!=unset -k delete"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*renameat\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*delete"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource139ref -{ -ResourceID = "[nxFileLine][V-204570.b][medium][SRG-OS-000466-GPOS-00210]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S renameat -F auid>=1000 -F auid!=unset -k delete"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*renameat\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*delete"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource140ref -{ -ResourceID = "[nxFileLine][V-204571.a][medium][SRG-OS-000466-GPOS-00210]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S rmdir -F auid>=1000 -F auid!=unset -k delete"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*rmdir\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*delete"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource141ref -{ -ResourceID = "[nxFileLine][V-204571.b][medium][SRG-OS-000466-GPOS-00210]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S rmdir -F auid>=1000 -F auid!=unset -k delete"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*rmdir\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*delete"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource142ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource94ref { ResourceID = "[nxFileLine][V-204572.a][medium][SRG-OS-000466-GPOS-00210]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S unlink -F auid>=1000 -F auid!=unset -k delete"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + ContainsLine = "-a always,exit -F arch=b32 -S unlink,unlinkat,rename,renameat,rmdir -F auid>=1000 -F auid!=unset -k delete"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*unlink\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*delete"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*unlink,unlinkat,rename,renameat,rmdir\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*delete"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource143ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource95ref { ResourceID = "[nxFileLine][V-204572.b][medium][SRG-OS-000466-GPOS-00210]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S unlink -F auid>=1000 -F auid!=unset -k delete"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + ContainsLine = "-a always,exit -F arch=b64 -S unlink,unlinkat,rename,renameat,rmdir -F auid>=1000 -F auid!=unset -k delete"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*unlink\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*delete"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*unlink,unlinkat,rename,renameat,rmdir\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*delete"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource144ref -{ -ResourceID = "[nxFileLine][V-204573.a][medium][SRG-OS-000466-GPOS-00210]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S unlinkat -F auid>=1000 -F auid!=unset -k delete"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*unlinkat\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*delete"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource145ref -{ -ResourceID = "[nxFileLine][V-204573.b][medium][SRG-OS-000466-GPOS-00210]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S unlinkat -F auid>=1000 -F auid!=unset -k delete"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*unlinkat\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*delete"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource146ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource96ref { ResourceID = "[nxFileLine][V-204578][medium][SRG-OS-000033-GPOS-00014]::[RHEL]Baseline"; ContainsLine = "Ciphers aes256-ctr,aes192-ctr,aes128-ctr"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/ssh/sshd_config"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "^#\\s*Ciphers.*|^\\s*Ciphers\\s*aes128-ctr.*|^\\s*Ciphers\\s*aes192-ctr.*"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource147ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource97ref { ResourceID = "[nxFileLine][V-204579.b][medium][SRG-OS-000163-GPOS-00072]::[RHEL]Baseline"; ContainsLine = "declare -xr TMOUT=900"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/profile.d/tmout.sh"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "^\\s*TMOUT\\s*=\\s*[0-8]?[0-9]?[0-9]?$|^#\\s*TMOUT.*"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource148ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource98ref { ResourceID = "[nxFileLine][V-204580][medium][SRG-OS-000023-GPOS-00006]::[RHEL]Baseline"; ContainsLine = "banner /etc/issue"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/ssh/sshd_config"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "#\\s*banner\\s*/etc/issue"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource149ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource99ref { ResourceID = "[nxFileLine][V-204587][medium][SRG-OS-000163-GPOS-00072]::[RHEL]Baseline"; ContainsLine = "ClientAliveInterval 600"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/ssh/sshd_config"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "^\\s*ClientAliveInterval\\s*[0-5]?[0-9]?[0-9]?\\s*$|^#\\s*ClientAliveInterval.*|^\\s*ClientAliveInterval\\s*$"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource150ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource100ref { ResourceID = "[nxFileLine][V-204588][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; ContainsLine = "RhostsRSAAuthentication no"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/ssh/sshd_config"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "^#\\s*RhostsRSAAuthentication.*$|^RhostsRSAAuthentication\\s*(?!no\\b)\\w*$"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource151ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource101ref { ResourceID = "[nxFileLine][V-204589][medium][SRG-OS-000163-GPOS-00072]::[RHEL]Baseline"; ContainsLine = "ClientAliveCountMax 0"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/ssh/sshd_config"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "^#\\s*ClientAliveCountMax.*$|^ClientAliveCountMax\\s*(?!0\\b)\\w*$"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource152ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource102ref { ResourceID = "[nxFileLine][V-204590][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; ContainsLine = "IgnoreRhosts yes"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/ssh/sshd_config"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "^#\\s*IgnoreRhosts.*$|^IgnoreRhosts\\s*(?!yes\\b)\\w*$"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource153ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource103ref { ResourceID = "[nxFileLine][V-204591][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; ContainsLine = "PrintLastLog yes"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/ssh/sshd_config"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "^#\\s*PrintLastLog.*$|^PrintLastLog\\s*(?!yes\\b)\\w*$"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource154ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource104ref { ResourceID = "[nxFileLine][V-204592][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; ContainsLine = "PermitRootLogin no"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/ssh/sshd_config"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "^#\\s*PermitRootLogin.*$|^PermitRootLogin\\s*(?!no\\b)\\w*$"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource155ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource105ref { ResourceID = "[nxFileLine][V-204593][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; ContainsLine = "IgnoreUserKnownHosts yes"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/ssh/sshd_config"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "^#\\s*IgnoreUserKnownHosts.*$|^IgnoreUserKnownHosts\\s*(?!yes\\b)\\w*$"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource156ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource106ref { ResourceID = "[nxFileLine][V-204594][high][SRG-OS-000074-GPOS-00042]::[RHEL]Baseline"; ContainsLine = "Protocol 2"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/ssh/sshd_config"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "^#\\s*Protocol.*$|^Protocol\\s*(?!2\\b)\\w*$"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource157ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource107ref { ResourceID = "[nxFileLine][V-204595][medium][SRG-OS-000250-GPOS-00093]::[RHEL]Baseline"; ContainsLine = "MACs hmac-sha2-512,hmac-sha2-256"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/ssh/sshd_config"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "#\\s*MACs.*|\\s*MACs\\s*hmac-(?!sha2-512).*"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource158ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource108ref { ResourceID = "[nxFileLine][V-204598][medium][SRG-OS-000364-GPOS-00151]::[RHEL]Baseline"; ContainsLine = "GSSAPIAuthentication no"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/ssh/sshd_config"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "^#\\s*GSSAPIAuthentication.*$|^GSSAPIAuthentication\\s*(?!no\\b)\\w*$"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource159ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource109ref { ResourceID = "[nxFileLine][V-204599][medium][SRG-OS-000364-GPOS-00151]::[RHEL]Baseline"; ContainsLine = "KerberosAuthentication no"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/ssh/sshd_config"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "^#\\s*KerberosAuthentication.*$|^KerberosAuthentication\\s*(?!no\\b)\\w*$"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource160ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource110ref { ResourceID = "[nxFileLine][V-204600][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; ContainsLine = "StrictModes yes"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/ssh/sshd_config"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "^#\\s*StrictModes.*$|^StrictModes\\s*(?!yes\\b)\\w*$"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource161ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource111ref { ResourceID = "[nxFileLine][V-204601][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; ContainsLine = "UsePrivilegeSeparation sandbox"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/ssh/sshd_config"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "^#\\s*UsePrivilegeSeparation.*$|^UsePrivilegeSeparation\\s*(?!sandbox\\b)\\w*$"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource162ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource112ref { ResourceID = "[nxFileLine][V-204602][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; ContainsLine = "Compression delayed"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/ssh/sshd_config"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "^#\\s*Compression.*$|^Compression\\s*(?!delayed\\b)\\w*$"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource163ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource113ref { ResourceID = "[nxFileLine][V-204622][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; ContainsLine = "X11Forwarding no"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/ssh/sshd_config"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "^#\\s*X11Forwarding.*$|^X11Forwarding\\s*(?!no\\b)\\w*$"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource164ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource114ref { ResourceID = "[nxFileLine][V-233307][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; ContainsLine = "X11UseLocalhost yes"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/ssh/sshd_config"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "#\\s*X11UseLocalhost\\s*yes"; ConfigurationName = "LinuxBaseLine"; }; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource115ref +{ +ResourceID = "[nxFileLine][V-250314][medium][SRG-OS-000324-GPOS-00125]::[RHEL]Baseline"; + ContainsLine = "%wheel ALL=(ALL) TYPE=sysadm_t ROLE=sysadm_r ALL"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/sudoers"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*%wheel\\s*ALL\\s*=\\s*(ALL)\\s*TYPE\\s*=\\s*sysadm_t\\s*ROLE\\s*=\\s*sysadm_r\\s*ALL"; + ConfigurationName = "LinuxBaseLine"; +}; instance of MSFT_nxServiceResource as $MSFT_nxServiceResource1ref { ResourceID = "[nxService][V-204451][medium][SRG-OS-000114-GPOS-00059]::[RHEL]Baseline"; Controller = "systemd"; Enabled = False; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxService.ps1::13::9::nxService"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxService.ps1::13::9::nxService"; Name = "autofs"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -2173,7 +1624,7 @@ instance of MSFT_nxServiceResource as $MSFT_nxServiceResource2ref ResourceID = "[nxService][V-204492][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; Controller = "systemd"; Enabled = False; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxService.ps1::13::9::nxService"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxService.ps1::13::9::nxService"; Name = "kdump"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -2185,7 +1636,7 @@ ResourceID = "[nxService][V-204503][medium][SRG-OS-000038-GPOS-00016]::[RHEL]Bas Controller = "systemd"; State = "Running"; Enabled = True; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxService.ps1::22::9::nxService"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxService.ps1::22::9::nxService"; Name = "auditd"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -2197,7 +1648,7 @@ ResourceID = "[nxService][V-204586][medium][SRG-OS-000423-GPOS-00187]::[RHEL]Bas Controller = "systemd"; State = "Running"; Enabled = True; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxService.ps1::22::9::nxService"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxService.ps1::22::9::nxService"; Name = "sshd"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -2209,7 +1660,7 @@ ResourceID = "[nxService][V-204604.b][medium][SRG-OS-000480-GPOS-00227]::[RHEL]B Controller = "systemd"; State = "Running"; Enabled = True; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxService.ps1::22::9::nxService"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxService.ps1::22::9::nxService"; Name = "firewalld"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -2220,7 +1671,7 @@ instance of MSFT_nxScriptResource as $MSFT_nxScriptResource1ref ResourceID = "[nxScript][V-204399.b][medium][[Skip] SRG-OS-000029-GPOS-00010]::[RHEL]Baseline"; GetScript = "#!/bin/bash\necho [V-204399.b][medium][[Skip] SRG-OS-000029-GPOS-00010]"; TestScript = "#!/bin/bash\nexit 0"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxScript.skip.ps1::10::5::nxScript"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxScript.skip.ps1::10::5::nxScript"; SetScript = "#!/bin/bash"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -2231,7 +1682,7 @@ instance of MSFT_nxScriptResource as $MSFT_nxScriptResource2ref ResourceID = "[nxScript][V-204400][medium][[Skip] SRG-OS-000029-GPOS-00010]::[RHEL]Baseline"; GetScript = "#!/bin/bash\necho [V-204400][medium][[Skip] SRG-OS-000029-GPOS-00010]"; TestScript = "#!/bin/bash\nexit 0"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxScript.skip.ps1::10::5::nxScript"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxScript.skip.ps1::10::5::nxScript"; SetScript = "#!/bin/bash"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -2242,7 +1693,7 @@ instance of MSFT_nxScriptResource as $MSFT_nxScriptResource3ref ResourceID = "[nxScript][V-204403][medium][[Skip] SRG-OS-000029-GPOS-00010]::[RHEL]Baseline"; GetScript = "#!/bin/bash\necho [V-204403][medium][[Skip] SRG-OS-000029-GPOS-00010]"; TestScript = "#!/bin/bash\nexit 0"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxScript.skip.ps1::10::5::nxScript"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxScript.skip.ps1::10::5::nxScript"; SetScript = "#!/bin/bash"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -2253,7 +1704,7 @@ instance of MSFT_nxScriptResource as $MSFT_nxScriptResource4ref ResourceID = "[nxScript][V-204509][medium][[Skip] SRG-OS-000342-GPOS-00133]::[RHEL]Baseline"; GetScript = "#!/bin/bash\necho [V-204509][medium][[Skip] SRG-OS-000342-GPOS-00133]"; TestScript = "#!/bin/bash\nexit 0"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxScript.skip.ps1::10::5::nxScript"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxScript.skip.ps1::10::5::nxScript"; SetScript = "#!/bin/bash"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -2264,7 +1715,7 @@ instance of MSFT_nxScriptResource as $MSFT_nxScriptResource5ref ResourceID = "[nxScript][V-204513][medium][[Skip] SRG-OS-000343-GPOS-00134]::[RHEL]Baseline"; GetScript = "#!/bin/bash\necho [V-204513][medium][[Skip] SRG-OS-000343-GPOS-00134]"; TestScript = "#!/bin/bash\nexit 0"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxScript.skip.ps1::10::5::nxScript"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxScript.skip.ps1::10::5::nxScript"; SetScript = "#!/bin/bash"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -2275,7 +1726,7 @@ instance of MSFT_nxScriptResource as $MSFT_nxScriptResource6ref ResourceID = "[nxScript][V-204623][medium][[Skip] SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; GetScript = "#!/bin/bash\necho [V-204623][medium][[Skip] SRG-OS-000480-GPOS-00227]"; TestScript = "#!/bin/bash\nexit 0"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxScript.skip.ps1::10::5::nxScript"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxScript.skip.ps1::10::5::nxScript"; SetScript = "#!/bin/bash"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -2286,7 +1737,7 @@ instance of MSFT_nxScriptResource as $MSFT_nxScriptResource7ref ResourceID = "[nxScript][V-244557][medium][[Skip] SRG-OS-000080-GPOS-00048]::[RHEL]Baseline"; GetScript = "#!/bin/bash\necho [V-244557][medium][[Skip] SRG-OS-000080-GPOS-00048]"; TestScript = "#!/bin/bash\nexit 0"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxScript.skip.ps1::10::5::nxScript"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxScript.skip.ps1::10::5::nxScript"; SetScript = "#!/bin/bash"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -2297,7 +1748,7 @@ instance of MSFT_nxScriptResource as $MSFT_nxScriptResource8ref ResourceID = "[nxScript][V-244558][medium][[Skip] SRG-OS-000080-GPOS-00048]::[RHEL]Baseline"; GetScript = "#!/bin/bash\necho [V-244558][medium][[Skip] SRG-OS-000080-GPOS-00048]"; TestScript = "#!/bin/bash\nexit 0"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxScript.skip.ps1::10::5::nxScript"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxScript.skip.ps1::10::5::nxScript"; SetScript = "#!/bin/bash"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -2308,7 +1759,7 @@ instance of MSFT_nxScriptResource as $MSFT_nxScriptResource9ref ResourceID = "[nxScript][V-204399.a][medium][[Skip] SRG-OS-000029-GPOS-00010]::[RHEL]Baseline"; GetScript = "#!/bin/bash\necho [V-204399.a][medium][[Skip] SRG-OS-000029-GPOS-00010]"; TestScript = "#!/bin/bash\nexit 0"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxScript.skip.ps1::10::5::nxScript"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxScript.skip.ps1::10::5::nxScript"; SetScript = "#!/bin/bash"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -2325,7 +1776,7 @@ instance of OMI_ConfigurationDocument Author="Microsoft"; - GenerationDate="01/31/2022 17:13:26"; + GenerationDate="05/04/2022 09:09:33"; GenerationHost="Microsoft"; diff --git a/stig/linux/config/RHEL74.mof b/stig/linux/config/RHEL74.mof index 16f7234..7c59b55 100644 --- a/stig/linux/config/RHEL74.mof +++ b/stig/linux/config/RHEL74.mof @@ -1,7 +1,7 @@ /* @TargetNode='RHEL74' @GeneratedBy=Microsoft -@GenerationDate=01/31/2022 17:13:26 +@GenerationDate=05/04/2022 09:09:33 @GenerationHost=Microsoft */ @@ -9,7 +9,7 @@ instance of MSFT_nxPackageResource as $MSFT_nxPackageResource1ref { ResourceID = "[nxPackage][V-204442][high][SRG-OS-000095-GPOS-00049]::[RHEL]Baseline"; Ensure = "Absent"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxPackage.ps1::8::5::nxPackage"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxPackage.ps1::8::5::nxPackage"; Name = "rsh-server"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -19,7 +19,7 @@ instance of MSFT_nxPackageResource as $MSFT_nxPackageResource2ref { ResourceID = "[nxPackage][V-204443][high][SRG-OS-000095-GPOS-00049]::[RHEL]Baseline"; Ensure = "Absent"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxPackage.ps1::8::5::nxPackage"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxPackage.ps1::8::5::nxPackage"; Name = "ypserv"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -29,7 +29,7 @@ instance of MSFT_nxPackageResource as $MSFT_nxPackageResource3ref { ResourceID = "[nxPackage][V-204497][high][SRG-OS-000033-GPOS-00014]::[RHEL]Baseline"; Ensure = "Present"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxPackage.ps1::8::5::nxPackage"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxPackage.ps1::8::5::nxPackage"; Name = "dracut-fips"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -39,7 +39,7 @@ instance of MSFT_nxPackageResource as $MSFT_nxPackageResource4ref { ResourceID = "[nxPackage][V-204498][low][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; Ensure = "Present"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxPackage.ps1::8::5::nxPackage"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxPackage.ps1::8::5::nxPackage"; Name = "aide"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -49,7 +49,7 @@ instance of MSFT_nxPackageResource as $MSFT_nxPackageResource5ref { ResourceID = "[nxPackage][V-204502][high][SRG-OS-000095-GPOS-00049]::[RHEL]Baseline"; Ensure = "Absent"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxPackage.ps1::8::5::nxPackage"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxPackage.ps1::8::5::nxPackage"; Name = "telnet-server"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -59,7 +59,7 @@ instance of MSFT_nxPackageResource as $MSFT_nxPackageResource6ref { ResourceID = "[nxPackage][V-204585][medium][SRG-OS-000423-GPOS-00187]::[RHEL]Baseline"; Ensure = "Present"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxPackage.ps1::8::5::nxPackage"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxPackage.ps1::8::5::nxPackage"; Name = "openssh-server"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -69,7 +69,7 @@ instance of MSFT_nxPackageResource as $MSFT_nxPackageResource7ref { ResourceID = "[nxPackage][V-204604.a][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; Ensure = "Present"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxPackage.ps1::8::5::nxPackage"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxPackage.ps1::8::5::nxPackage"; Name = "firewalld"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -79,7 +79,7 @@ instance of MSFT_nxPackageResource as $MSFT_nxPackageResource8ref { ResourceID = "[nxPackage][V-204620][high][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; Ensure = "Absent"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxPackage.ps1::8::5::nxPackage"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxPackage.ps1::8::5::nxPackage"; Name = "vsftpd"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -89,7 +89,7 @@ instance of MSFT_nxPackageResource as $MSFT_nxPackageResource9ref { ResourceID = "[nxPackage][V-204621][high][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; Ensure = "Absent"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxPackage.ps1::8::5::nxPackage"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxPackage.ps1::8::5::nxPackage"; Name = "tftp-server"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -99,7 +99,7 @@ instance of MSFT_nxPackageResource as $MSFT_nxPackageResource10ref { ResourceID = "[nxPackage][V-204631][medium][SRG-OS-000375-GPOS-00160]::[RHEL]Baseline"; Ensure = "Present"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxPackage.ps1::8::5::nxPackage"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxPackage.ps1::8::5::nxPackage"; Name = "pam_pkcs11"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -111,7 +111,7 @@ ResourceID = "[nxFile][V-204395][medium][SRG-OS-000023-GPOS-00006]::[RHEL]Baseli Contents = "You are accessing a U.S. Government (USG) Information System (IS) that is provided for USG-authorized use only.\n\nBy using this IS (which includes any device attached to this IS), you consent to the following conditions:\n\n-The USG routinely intercepts and monitors communications on this IS for purposes including, but not limited to, penetration testing, COMSEC monitoring, network operations and defense, personnel misconduct (PM), law enforcement (LE), and counterintelligence (CI) investigations.\n\n-At any time, the USG may inspect and seize data stored on this IS.\n\n-Communications using, or data stored on, this IS are not private, are subject to routine monitoring, interception, and search, and may be disclosed or used for any USG-authorized purpose.\n\n-This IS includes security measures (e.g., authentication and access controls) to protect USG interests--not for your personal benefit or privacy.\n\n-Notwithstanding the above, using this IS does not constitute consent to PM, LE or CI investigative searching or monitoring of the content of privileged communications, or work product, related to personal representation or services by attorneys, psychotherapists, or clergy, and their assistants. Such communications and work product are private and confidential. See User Agreement for details."; DestinationPath = "/etc/issue"; ModuleName = "nx"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; ModuleVersion = "1.0"; ConfigurationName = "LinuxBaseLine"; }; @@ -121,7 +121,7 @@ ResourceID = "[nxFile][V-204449.a][medium][SRG-OS-000114-GPOS-00059]::[RHEL]Base Contents = ""; DestinationPath = "/etc/modprobe.d/usb-storage.conf"; ModuleName = "nx"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; ModuleVersion = "1.0"; ConfigurationName = "LinuxBaseLine"; }; @@ -131,7 +131,7 @@ ResourceID = "[nxFile][V-204449.b][medium][SRG-OS-000114-GPOS-00059]::[RHEL]Base Contents = ""; DestinationPath = "/etc/modprobe.d/blacklist.conf"; ModuleName = "nx"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; ModuleVersion = "1.0"; ConfigurationName = "LinuxBaseLine"; }; @@ -141,7 +141,7 @@ ResourceID = "[nxFile][V-204450.a][medium][SRG-OS-000378-GPOS-00163]::[RHEL]Base Contents = ""; DestinationPath = "/etc/modprobe.d/dccp.conf"; ModuleName = "nx"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; ModuleVersion = "1.0"; ConfigurationName = "LinuxBaseLine"; }; @@ -151,7 +151,7 @@ ResourceID = "[nxFile][V-204576][low][SRG-OS-000027-GPOS-00008]::[RHEL]Baseline" Contents = "* hard maxlogins 10"; DestinationPath = "/etc/security/limits.d/204576-powerstig.conf"; ModuleName = "nx"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; ModuleVersion = "1.0"; ConfigurationName = "LinuxBaseLine"; }; @@ -161,7 +161,7 @@ ResourceID = "[nxFile][V-204579.a][medium][SRG-OS-000163-GPOS-00072]::[RHEL]Base Contents = ""; DestinationPath = "/etc/profile.d/tmout.sh"; ModuleName = "nx"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; ModuleVersion = "1.0"; ConfigurationName = "LinuxBaseLine"; }; @@ -171,7 +171,7 @@ ResourceID = "[nxFile][V-204584][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseli Contents = "kernel.randomize_va_space = 2"; DestinationPath = "/etc/sysctl.d/204584-powerstig.conf"; ModuleName = "nx"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; ModuleVersion = "1.0"; ConfigurationName = "LinuxBaseLine"; }; @@ -181,7 +181,7 @@ ResourceID = "[nxFile][V-204609][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseli Contents = "net.ipv4.conf.all.accept_source_route = 0"; DestinationPath = "/etc/sysctl.d/204609-powerstig.conf"; ModuleName = "nx"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; ModuleVersion = "1.0"; ConfigurationName = "LinuxBaseLine"; }; @@ -191,7 +191,7 @@ ResourceID = "[nxFile][V-204610][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseli Contents = "net.ipv4.conf.all.rp_filter = 1"; DestinationPath = "/etc/sysctl.d/204610-powerstig.conf"; ModuleName = "nx"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; ModuleVersion = "1.0"; ConfigurationName = "LinuxBaseLine"; }; @@ -201,7 +201,7 @@ ResourceID = "[nxFile][V-204611][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseli Contents = "net.ipv4.conf.default.rp_filter = 1"; DestinationPath = "/etc/sysctl.d/204611-powerstig.conf"; ModuleName = "nx"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; ModuleVersion = "1.0"; ConfigurationName = "LinuxBaseLine"; }; @@ -211,7 +211,7 @@ ResourceID = "[nxFile][V-204612][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseli Contents = "net.ipv4.conf.default.accept_source_route = 0"; DestinationPath = "/etc/sysctl.d/204612-powerstig.conf"; ModuleName = "nx"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; ModuleVersion = "1.0"; ConfigurationName = "LinuxBaseLine"; }; @@ -221,7 +221,7 @@ ResourceID = "[nxFile][V-204613][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseli Contents = "net.ipv4.icmp_echo_ignore_broadcasts = 1"; DestinationPath = "/etc/sysctl.d/204613-powerstig.conf"; ModuleName = "nx"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; ModuleVersion = "1.0"; ConfigurationName = "LinuxBaseLine"; }; @@ -231,7 +231,7 @@ ResourceID = "[nxFile][V-204614][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseli Contents = "net.ipv4.conf.default.accept_redirects = 0"; DestinationPath = "/etc/sysctl.d/204614-powerstig.conf"; ModuleName = "nx"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; ModuleVersion = "1.0"; ConfigurationName = "LinuxBaseLine"; }; @@ -241,7 +241,7 @@ ResourceID = "[nxFile][V-204615][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseli Contents = "net.ipv4.conf.all.accept_redirects = 0"; DestinationPath = "/etc/sysctl.d/204615-powerstig.conf"; ModuleName = "nx"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; ModuleVersion = "1.0"; ConfigurationName = "LinuxBaseLine"; }; @@ -251,7 +251,7 @@ ResourceID = "[nxFile][V-204616][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseli Contents = "net.ipv4.conf.default.send_redirects = 0"; DestinationPath = "/etc/sysctl.d/204616-powerstig.conf"; ModuleName = "nx"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; ModuleVersion = "1.0"; ConfigurationName = "LinuxBaseLine"; }; @@ -261,7 +261,7 @@ ResourceID = "[nxFile][V-204617][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseli Contents = "net.ipv4.conf.all.send_redirects = 0"; DestinationPath = "/etc/sysctl.d/204617-powerstig.conf"; ModuleName = "nx"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; ModuleVersion = "1.0"; ConfigurationName = "LinuxBaseLine"; }; @@ -271,7 +271,7 @@ ResourceID = "[nxFile][V-204625][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseli Contents = "net.ipv4.ip_forward = 0"; DestinationPath = "/etc/sysctl.d/204625-powerstig.conf"; ModuleName = "nx"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; ModuleVersion = "1.0"; ConfigurationName = "LinuxBaseLine"; }; @@ -281,7 +281,7 @@ ResourceID = "[nxFile][V-204630][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseli Contents = "net.ipv6.conf.all.accept_source_route = 0"; DestinationPath = "/etc/sysctl.d/204630-powerstig.conf"; ModuleName = "nx"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; ModuleVersion = "1.0"; ConfigurationName = "LinuxBaseLine"; }; @@ -291,7 +291,7 @@ ResourceID = "[nxFile][V-237634.a][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Base Contents = "Defaults !targetpw"; DestinationPath = "/etc/sudoers.d/237634a-powerstig.conf"; ModuleName = "nx"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; ModuleVersion = "1.0"; ConfigurationName = "LinuxBaseLine"; }; @@ -301,7 +301,7 @@ ResourceID = "[nxFile][V-237634.b][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Base Contents = "Defaults !rootpw"; DestinationPath = "/etc/sudoers.d/237634b-powerstig.conf"; ModuleName = "nx"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; ModuleVersion = "1.0"; ConfigurationName = "LinuxBaseLine"; }; @@ -311,7 +311,7 @@ ResourceID = "[nxFile][V-237634.c][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Base Contents = "Defaults !runaspw"; DestinationPath = "/etc/sudoers.d/237634c-powerstig.conf"; ModuleName = "nx"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; ModuleVersion = "1.0"; ConfigurationName = "LinuxBaseLine"; }; @@ -321,17 +321,7 @@ ResourceID = "[nxFile][V-237635][medium][SRG-OS-000373-GPOS-00156]::[RHEL]Baseli Contents = "Defaults timestamp_timeout=0"; DestinationPath = "/etc/sudoers.d/237635-powerstig.conf"; ModuleName = "nx"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; - ModuleVersion = "1.0"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileResource as $MSFT_nxFileResource23ref -{ -ResourceID = "[nxFile][V-250314][medium][SRG-OS-000324-GPOS-00125]::[RHEL]Baseline"; - Contents = "%wheel ALL=(ALL) TYPE=sysadm_t ROLE=sysadm_r ALL"; - DestinationPath = "/etc/sudoers.d/250314-powerstig.conf"; - ModuleName = "nx"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; ModuleVersion = "1.0"; ConfigurationName = "LinuxBaseLine"; }; @@ -339,7 +329,7 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource1ref { ResourceID = "[nxFileLine][V-204405][medium][SRG-OS-000069-GPOS-00037]::[RHEL]Baseline"; ContainsLine = "password substack system-auth"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/pam.d/passwd"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -350,7 +340,7 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource2ref { ResourceID = "[nxFileLine][V-204407][medium][SRG-OS-000069-GPOS-00037]::[RHEL]Baseline"; ContainsLine = "ucredit = -1"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/security/pwquality.conf"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -361,7 +351,7 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource3ref { ResourceID = "[nxFileLine][V-204408][medium][SRG-OS-000070-GPOS-00038]::[RHEL]Baseline"; ContainsLine = "lcredit = -1"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/security/pwquality.conf"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -372,7 +362,7 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource4ref { ResourceID = "[nxFileLine][V-204409][medium][SRG-OS-000071-GPOS-00039]::[RHEL]Baseline"; ContainsLine = "dcredit = -1"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/security/pwquality.conf"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -383,7 +373,7 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource5ref { ResourceID = "[nxFileLine][V-204410][medium][SRG-OS-000266-GPOS-00101]::[RHEL]Baseline"; ContainsLine = "ocredit=-1"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/security/pwquality.conf"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -394,7 +384,7 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource6ref { ResourceID = "[nxFileLine][V-204411][medium][SRG-OS-000072-GPOS-00040]::[RHEL]Baseline"; ContainsLine = "difok = 8"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/security/pwquality.conf"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -405,7 +395,7 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource7ref { ResourceID = "[nxFileLine][V-204412][medium][SRG-OS-000072-GPOS-00040]::[RHEL]Baseline"; ContainsLine = "minclass = 4"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/security/pwquality.conf"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -416,7 +406,7 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource8ref { ResourceID = "[nxFileLine][V-204413][medium][SRG-OS-000072-GPOS-00040]::[RHEL]Baseline"; ContainsLine = "maxrepeat = 3"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/security/pwquality.conf"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -427,18 +417,18 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource9ref { ResourceID = "[nxFileLine][V-204414][medium][SRG-OS-000072-GPOS-00040]::[RHEL]Baseline"; ContainsLine = "maxclassrepeat = 4"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/security/pwquality.conf"; ModuleName = "nx"; ModuleVersion = "1.0"; - DoesNotContainPattern = "^#\\s*maxclassrepeat\\s*=.*|^\\s*maxclassrepeat\\s*=\\s*(?:\\d{2,}|[3-9])"; + DoesNotContainPattern = "^#\\s*maxclassrepeat\\s*=.*|^\\s*maxclassrepeat\\s*=\\s*(?:\\d{2,}|[1-3|5-9])"; ConfigurationName = "LinuxBaseLine"; }; instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource10ref { ResourceID = "[nxFileLine][V-204416][medium][SRG-OS-000073-GPOS-00041]::[RHEL]Baseline"; ContainsLine = "ENCRYPT_METHOD SHA512"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/login.defs"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -449,7 +439,7 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource11ref { ResourceID = "[nxFileLine][V-204418][medium][SRG-OS-000075-GPOS-00043]::[RHEL]Baseline"; ContainsLine = "PASS_MIN_DAYS 1"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/login.defs"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -460,7 +450,7 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource12ref { ResourceID = "[nxFileLine][V-204420][medium][SRG-OS-000076-GPOS-00044]::[RHEL]Baseline"; ContainsLine = "PASS_MAX_DAYS 60"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/login.defs"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -471,7 +461,7 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource13ref { ResourceID = "[nxFileLine][V-204423][medium][SRG-OS-000078-GPOS-00046]::[RHEL]Baseline"; ContainsLine = "minlen = 15"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/security/pwquality.conf"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -482,7 +472,7 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource14ref { ResourceID = "[nxFileLine][V-204425][high][SRG-OS-000106-GPOS-00053]::[RHEL]Baseline"; ContainsLine = "PermitEmptyPasswords no"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/ssh/sshd_config"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -492,19 +482,19 @@ ResourceID = "[nxFileLine][V-204425][high][SRG-OS-000106-GPOS-00053]::[RHEL]Base instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource15ref { ResourceID = "[nxFileLine][V-204426][medium][SRG-OS-000118-GPOS-00060]::[RHEL]Baseline"; - ContainsLine = "INACTIVE=0"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + ContainsLine = "INACTIVE=35"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/default/useradd"; ModuleName = "nx"; ModuleVersion = "1.0"; - DoesNotContainPattern = "^#\\s*INACTIVE.*$|^INACTIVE\\s*=\\s*(?!0\\b)[-]*\\w*$"; + DoesNotContainPattern = "^#\\s*INACTIVE\\s*=.*|^\\s*INACTIVE\\s*=\\s*(3[5-9]|[4-9]\\d+|\\d{3,})"; ConfigurationName = "LinuxBaseLine"; }; instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource16ref { ResourceID = "[nxFileLine][V-204431][medium][SRG-OS-000480-GPOS-00226]::[RHEL]Baseline"; ContainsLine = "FAIL_DELAY 4"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/login.defs"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -515,7 +505,7 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource17ref { ResourceID = "[nxFileLine][V-204434][medium][SRG-OS-000480-GPOS-00229]::[RHEL]Baseline"; ContainsLine = "PermitUserEnvironment no"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/ssh/sshd_config"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -526,7 +516,7 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource18ref { ResourceID = "[nxFileLine][V-204435][medium][SRG-OS-000480-GPOS-00229]::[RHEL]Baseline"; ContainsLine = "HostbasedAuthentication no"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/ssh/sshd_config"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -537,7 +527,7 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource19ref { ResourceID = "[nxFileLine][V-204447][high][SRG-OS-000366-GPOS-00153]::[RHEL]Baseline"; ContainsLine = "gpgcheck=1"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/yum.conf"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -548,7 +538,7 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource20ref { ResourceID = "[nxFileLine][V-204448][high][SRG-OS-000366-GPOS-00153]::[RHEL]Baseline"; ContainsLine = "localpkg_gpgcheck=1"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/yum.conf"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -559,7 +549,7 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource21ref { ResourceID = "[nxFileLine][V-204449.c][medium][SRG-OS-000114-GPOS-00059]::[RHEL]Baseline"; ContainsLine = "install usb-storage /bin/true"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/modprobe.d/usb-storage.conf"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -570,7 +560,7 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource22ref { ResourceID = "[nxFileLine][V-204449.d][medium][SRG-OS-000114-GPOS-00059]::[RHEL]Baseline"; ContainsLine = "blacklist usb-storage"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/modprobe.d/blacklist.conf"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -581,7 +571,7 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource23ref { ResourceID = "[nxFileLine][V-204450.b][medium][SRG-OS-000378-GPOS-00163]::[RHEL]Baseline"; ContainsLine = "install dccp /bin/true"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/modprobe.d/dccp.conf"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -592,7 +582,7 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource24ref { ResourceID = "[nxFileLine][V-204450.c][medium][SRG-OS-000378-GPOS-00163]::[RHEL]Baseline"; ContainsLine = "blacklist dccp"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/modprobe.d/blacklist.conf"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -603,7 +593,7 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource25ref { ResourceID = "[nxFileLine][V-204452][low][SRG-OS-000437-GPOS-00194]::[RHEL]Baseline"; ContainsLine = "clean_requirements_on_remove=1"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/yum.conf"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -614,7 +604,7 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource26ref { ResourceID = "[nxFileLine][V-204453][medium][SRG-OS-000445-GPOS-00199]::[RHEL]Baseline"; ContainsLine = "SELINUX=enforcing"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/selinux/config"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -625,7 +615,7 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource27ref { ResourceID = "[nxFileLine][V-204454][medium][SRG-OS-000445-GPOS-00199]::[RHEL]Baseline"; ContainsLine = "SELINUXTYPE=targeted"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/selinux/config"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -636,7 +626,7 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource28ref { ResourceID = "[nxFileLine][V-204457][medium][SRG-OS-000480-GPOS-00228]::[RHEL]Baseline"; ContainsLine = "UMASK 077"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/login.defs"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -647,7 +637,7 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource29ref { ResourceID = "[nxFileLine][V-204466][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; ContainsLine = "CREATE_HOME yes"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/login.defs"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -658,16 +648,16 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource30ref { ResourceID = "[nxFileLine][V-204504][medium][SRG-OS-000046-GPOS-00022]::[RHEL]Baseline"; ContainsLine = "-f 2"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "^#\\s*-f\\s+2|^\\s*-f\\s*1"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileResource as $MSFT_nxFileResource24ref +instance of MSFT_nxFileResource as $MSFT_nxFileResource23ref { -SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::29::9::nxFile"; +SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::29::9::nxFile"; ModuleName = "nx"; ModuleVersion = "1.0"; ResourceID = "[nxFile][V-204506.a][medium][SRG-OS-000342-GPOS-00133]::[RHEL]Baseline"; @@ -678,7 +668,7 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource31ref { ResourceID = "[nxFileLine][V-204506.a][medium][SRG-OS-000342-GPOS-00133]::[RHEL]Baseline"; ContainsLine = "active = yes"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audisp/plugins.d/au-remote.conf"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -689,7 +679,7 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource32ref { ResourceID = "[nxFileLine][V-204506.b][medium][SRG-OS-000342-GPOS-00133]::[RHEL]Baseline"; ContainsLine = "direction = out"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audisp/plugins.d/au-remote.conf"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -700,7 +690,7 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource33ref { ResourceID = "[nxFileLine][V-204506.c][medium][SRG-OS-000342-GPOS-00133]::[RHEL]Baseline"; ContainsLine = "path = /sbin/audisp-remote"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audisp/plugins.d/au-remote.conf"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -711,7 +701,7 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource34ref { ResourceID = "[nxFileLine][V-204506.d][medium][SRG-OS-000342-GPOS-00133]::[RHEL]Baseline"; ContainsLine = "type = always"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audisp/plugins.d/au-remote.conf"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -722,7 +712,7 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource35ref { ResourceID = "[nxFileLine][V-204507][medium][SRG-OS-000342-GPOS-00133]::[RHEL]Baseline"; ContainsLine = "overflow_action = syslog"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audisp/audispd.conf"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -733,16 +723,16 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource36ref { ResourceID = "[nxFileLine][V-204508][medium][SRG-OS-000342-GPOS-00133]::[RHEL]Baseline"; ContainsLine = "name_format = hostname"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audisp/audispd.conf"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "^#\\s*name_format.*$|^name_format\\s*=\\s*(?!hostname$)\\w*$"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileResource as $MSFT_nxFileResource25ref +instance of MSFT_nxFileResource as $MSFT_nxFileResource24ref { -SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::19::9::nxFile"; +SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::19::9::nxFile"; ModuleName = "nx"; ModuleVersion = "1.0"; ResourceID = "[nxFile][V-204510][medium][SRG-OS-000342-GPOS-00133]::[RHEL]Baseline"; @@ -753,7 +743,7 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource37ref { ResourceID = "[nxFileLine][V-204510][medium][SRG-OS-000342-GPOS-00133]::[RHEL]Baseline"; ContainsLine = "enable_krb5 = yes"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audisp/audisp-remote.conf"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -764,7 +754,7 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource38ref { ResourceID = "[nxFileLine][V-204511][medium][SRG-OS-000342-GPOS-00133]::[RHEL]Baseline"; ContainsLine = "disk_full_action = single"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audisp/audisp-remote.conf"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -775,7 +765,7 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource39ref { ResourceID = "[nxFileLine][V-204512][medium][SRG-OS-000342-GPOS-00133]::[RHEL]Baseline"; ContainsLine = "network_failure_action = syslog"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audisp/audisp-remote.conf"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -786,7 +776,7 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource40ref { ResourceID = "[nxFileLine][V-204514][medium][SRG-OS-000343-GPOS-00134]::[RHEL]Baseline"; ContainsLine = "space_left_action = email"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/auditd.conf"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -797,7 +787,7 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource41ref { ResourceID = "[nxFileLine][V-204515][medium][SRG-OS-000343-GPOS-00134]::[RHEL]Baseline"; ContainsLine = "action_mail_acct = root"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/auditd.conf"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -808,7 +798,7 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource42ref { ResourceID = "[nxFileLine][V-204516.a][medium][SRG-OS-000327-GPOS-00127]::[RHEL]Baseline"; ContainsLine = "-a always,exit -F arch=b32 -S execve -C uid!=euid -F euid=0 -k setuid"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -819,7 +809,7 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource43ref { ResourceID = "[nxFileLine][V-204516.b][medium][SRG-OS-000327-GPOS-00127]::[RHEL]Baseline"; ContainsLine = "-a always,exit -F arch=b64 -S execve -C uid!=euid -F euid=0 -k setuid"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -830,7 +820,7 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource44ref { ResourceID = "[nxFileLine][V-204516.c][medium][SRG-OS-000327-GPOS-00127]::[RHEL]Baseline"; ContainsLine = "-a always,exit -F arch=b32 -S execve -C gid!=egid -F egid=0 -k setgid"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -841,7 +831,7 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource45ref { ResourceID = "[nxFileLine][V-204516.d][medium][SRG-OS-000327-GPOS-00127]::[RHEL]Baseline"; ContainsLine = "-a always,exit -F arch=b64 -S execve -C gid!=egid -F egid=0 -k setgid"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -851,1318 +841,779 @@ ResourceID = "[nxFileLine][V-204516.d][medium][SRG-OS-000327-GPOS-00127]::[RHEL] instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource46ref { ResourceID = "[nxFileLine][V-204517.a][medium][SRG-OS-000064-GPOS-00033]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S chown -F auid>=1000 -F auid!=unset -k perm_mod"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + ContainsLine = "-a always,exit -F arch=b32 -S chown,fchown,fchownat,lchown -F auid>=1000 -F auid!=unset -k perm_mod"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*chown\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*perm_mod"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*chown,fchown,fchownat,lchown\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*perm_mod"; ConfigurationName = "LinuxBaseLine"; }; instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource47ref { ResourceID = "[nxFileLine][V-204517.b][medium][SRG-OS-000064-GPOS-00033]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S chown -F auid>=1000 -F auid!=unset -k perm_mod"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + ContainsLine = "-a always,exit -F arch=b64 -S chown,fchown,fchownat,lchown -F auid>=1000 -F auid!=unset -k perm_mod"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*chown\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*perm_mod"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*chown,fchown,fchownat,lchown\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*perm_mod"; ConfigurationName = "LinuxBaseLine"; }; instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource48ref { -ResourceID = "[nxFileLine][V-204518.a][medium][SRG-OS-000064-GPOS-00033]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S fchown -F auid>=1000 -F auid!=unset -k perm_mod"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; +ResourceID = "[nxFileLine][V-204521.a][medium][SRG-OS-000458-GPOS-00203]::[RHEL]Baseline"; + ContainsLine = "-a always,exit -F arch=b32 -S chmod,fchmod,fchmodat -F auid>=1000 -F auid!=unset -k perm_mod"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*fchown\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*perm_mod"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*chmod,fchmod,fchmodat\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*perm_mod"; ConfigurationName = "LinuxBaseLine"; }; instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource49ref { -ResourceID = "[nxFileLine][V-204518.b][medium][SRG-OS-000064-GPOS-00033]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S fchown -F auid>=1000 -F auid!=unset -k perm_mod"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; +ResourceID = "[nxFileLine][V-204521.b][medium][SRG-OS-000458-GPOS-00203]::[RHEL]Baseline"; + ContainsLine = "-a always,exit -F arch=b64 -S chmod,fchmod,fchmodat -F auid>=1000 -F auid!=unset -k perm_mod"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*fchown\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*perm_mod"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*chmod,fchmod,fchmodat\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*perm_mod"; ConfigurationName = "LinuxBaseLine"; }; instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource50ref { -ResourceID = "[nxFileLine][V-204519.a][medium][SRG-OS-000064-GPOS-00033]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S lchown -F auid>=1000 -F auid!=unset -k perm_mod"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; +ResourceID = "[nxFileLine][V-204524.a][medium][SRG-OS-000458-GPOS-00203]::[RHEL]Baseline"; + ContainsLine = "-a always,exit -F arch=b32 -S setxattr,fsetxattr,lsetxattr,removexattr,fremovexattr,lremovexattr -F auid>=1000 -F auid!=unset -k perm_mod"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*lchown\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*perm_mod"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*setxattr,fsetxattr,lsetxattr,removexattr,fremovexattr,lremovexattr\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*perm_mod"; ConfigurationName = "LinuxBaseLine"; }; instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource51ref { -ResourceID = "[nxFileLine][V-204519.b][medium][SRG-OS-000064-GPOS-00033]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S lchown -F auid>=1000 -F auid!=unset -k perm_mod"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; +ResourceID = "[nxFileLine][V-204524.b][medium][SRG-OS-000458-GPOS-00203]::[RHEL]Baseline"; + ContainsLine = "-a always,exit -F arch=b64 -S setxattr,fsetxattr,lsetxattr,removexattr,fremovexattr,lremovexattr -F auid>=1000 -F auid!=unset -k perm_mod"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*lchown\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*perm_mod"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*setxattr,fsetxattr,lsetxattr,removexattr,fremovexattr,lremovexattr\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*perm_mod"; ConfigurationName = "LinuxBaseLine"; }; instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource52ref { -ResourceID = "[nxFileLine][V-204520.a][medium][SRG-OS-000064-GPOS-00033]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S fchownat -F auid>=1000 -F auid!=unset -k perm_mod"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; +ResourceID = "[nxFileLine][V-204531.a][medium][SRG-OS-000064-GPOS-00033]::[RHEL]Baseline"; + ContainsLine = "-a always,exit -F arch=b32 -S creat,open,openat,open_by_handle_at,truncate,ftruncate -F exit=-EPERM -F auid>=1000 -F auid!=unset -k access"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*fchownat\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*perm_mod"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*creat,open,openat,open_by_handle_at,truncate,ftruncate\\s*-F\\s*exit\\s*=\\s*-EPERM\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*access"; ConfigurationName = "LinuxBaseLine"; }; instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource53ref { -ResourceID = "[nxFileLine][V-204520.b][medium][SRG-OS-000064-GPOS-00033]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S fchownat -F auid>=1000 -F auid!=unset -k perm_mod"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; +ResourceID = "[nxFileLine][V-204531.b][medium][SRG-OS-000064-GPOS-00033]::[RHEL]Baseline"; + ContainsLine = "-a always,exit -F arch=b32 -S creat,open,openat,open_by_handle_at,truncate,ftruncate -F exit=-EACCES -F auid>=1000 -F auid!=unset -k access"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*fchownat\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*perm_mod"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*creat,open,openat,open_by_handle_at,truncate,ftruncate\\s*-F\\s*exit\\s*=\\s*-EACCES\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*access"; ConfigurationName = "LinuxBaseLine"; }; instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource54ref { -ResourceID = "[nxFileLine][V-204521.a][medium][SRG-OS-000458-GPOS-00203]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S chmod -F auid>=1000 -F auid!=unset -k perm_mod"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; +ResourceID = "[nxFileLine][V-204531.c][medium][SRG-OS-000064-GPOS-00033]::[RHEL]Baseline"; + ContainsLine = "-a always,exit -F arch=b64 -S creat,open,openat,open_by_handle_at,truncate,ftruncate -F exit=-EPERM -F auid>=1000 -F auid!=unset -k access"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*chmod\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*perm_mod"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*creat,open,openat,open_by_handle_at,truncate,ftruncate\\s*-F\\s*exit\\s*=\\s*-EPERM\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*access"; ConfigurationName = "LinuxBaseLine"; }; instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource55ref { -ResourceID = "[nxFileLine][V-204521.b][medium][SRG-OS-000458-GPOS-00203]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S chmod -F auid>=1000 -F auid!=unset -k perm_mod"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; +ResourceID = "[nxFileLine][V-204531.d][medium][SRG-OS-000064-GPOS-00033]::[RHEL]Baseline"; + ContainsLine = "-a always,exit -F arch=b64 -S creat,open,openat,open_by_handle_at,truncate,ftruncate -F exit=-EACCES -F auid>=1000 -F auid!=unset -k access"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*chmod\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*perm_mod"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*creat,open,openat,open_by_handle_at,truncate,ftruncate\\s*-F\\s*exit\\s*=\\s*-EACCES\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*access"; ConfigurationName = "LinuxBaseLine"; }; instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource56ref { -ResourceID = "[nxFileLine][V-204522.a][medium][SRG-OS-000458-GPOS-00203]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S fchmod -F auid>=1000 -F auid!=unset -k perm_mod"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*fchmod\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*perm_mod"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource57ref -{ -ResourceID = "[nxFileLine][V-204522.b][medium][SRG-OS-000458-GPOS-00203]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S fchmod -F auid>=1000 -F auid!=unset -k perm_mod"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*fchmod\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*perm_mod"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource58ref -{ -ResourceID = "[nxFileLine][V-204523.a][medium][SRG-OS-000458-GPOS-00203]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S fchmodat -F auid>=1000 -F auid!=unset -k perm_mod"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*fchmodat\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*perm_mod"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource59ref -{ -ResourceID = "[nxFileLine][V-204523.b][medium][SRG-OS-000458-GPOS-00203]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S fchmodat -F auid>=1000 -F auid!=unset -k perm_mod"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*fchmodat\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*perm_mod"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource60ref -{ -ResourceID = "[nxFileLine][V-204524.a][medium][SRG-OS-000458-GPOS-00203]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S setxattr -F auid>=1000 -F auid!=unset -k perm_mod"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*setxattr\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*perm_mod"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource61ref -{ -ResourceID = "[nxFileLine][V-204524.b][medium][SRG-OS-000458-GPOS-00203]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S setxattr -F auid>=1000 -F auid!=unset -k perm_mod"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*setxattr\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*perm_mod"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource62ref -{ -ResourceID = "[nxFileLine][V-204525.a][medium][SRG-OS-000458-GPOS-00203]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S fsetxattr -F auid>=1000 -F auid!=unset -k perm_mod"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*fsetxattr\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*perm_mod"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource63ref -{ -ResourceID = "[nxFileLine][V-204525.b][medium][SRG-OS-000458-GPOS-00203]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S fsetxattr -F auid>=1000 -F auid!=unset -k perm_mod"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*fsetxattr\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*perm_mod"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource64ref -{ -ResourceID = "[nxFileLine][V-204526.a][medium][SRG-OS-000458-GPOS-00203]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S lsetxattr -F auid>=1000 -F auid!=unset -k perm_mod"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*lsetxattr\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*perm_mod"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource65ref -{ -ResourceID = "[nxFileLine][V-204526.b][medium][SRG-OS-000458-GPOS-00203]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S lsetxattr -F auid>=1000 -F auid!=unset -k perm_mod"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*lsetxattr\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*perm_mod"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource66ref -{ -ResourceID = "[nxFileLine][V-204527.a][medium][SRG-OS-000458-GPOS-00203]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S removexattr -F auid>=1000 -F auid!=unset -k perm_mod"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*removexattr\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*perm_mod"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource67ref -{ -ResourceID = "[nxFileLine][V-204527.b][medium][SRG-OS-000458-GPOS-00203]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S removexattr -F auid>=1000 -F auid!=unset -k perm_mod"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*removexattr\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*perm_mod"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource68ref -{ -ResourceID = "[nxFileLine][V-204528.a][medium][SRG-OS-000458-GPOS-00203]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S fremovexattr -F auid>=1000 -F auid!=unset -k perm_mod"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*fremovexattr\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*perm_mod"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource69ref -{ -ResourceID = "[nxFileLine][V-204528.b][medium][SRG-OS-000458-GPOS-00203]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S fremovexattr -F auid>=1000 -F auid!=unset -k perm_mod"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*fremovexattr\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*perm_mod"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource70ref -{ -ResourceID = "[nxFileLine][V-204529.a][medium][SRG-OS-000458-GPOS-00203]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S lremovexattr -F auid>=1000 -F auid!=unset -k perm_mod"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*lremovexattr\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*perm_mod"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource71ref -{ -ResourceID = "[nxFileLine][V-204529.b][medium][SRG-OS-000458-GPOS-00203]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S lremovexattr -F auid>=1000 -F auid!=unset -k perm_mod"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*lremovexattr\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*perm_mod"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource72ref -{ -ResourceID = "[nxFileLine][V-204530.a][medium][SRG-OS-000064-GPOS-00033]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S creat F exit=-EPERM -F auid>=1000 -F auid!=unset -k access"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*creat\\s*F\\s*exit\\s*=\\s*-EPERM\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*access"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource73ref -{ -ResourceID = "[nxFileLine][V-204530.b][medium][SRG-OS-000064-GPOS-00033]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S creat -F exit=-EACCES -F auid>=1000 -F auid!=unset -k access"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*creat\\s*-F\\s*exit\\s*=\\s*-EACCES\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*access"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource74ref -{ -ResourceID = "[nxFileLine][V-204530.c][medium][SRG-OS-000064-GPOS-00033]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S creat -F exit=-EPERM -F auid>=1000 -F auid!=unset -k access"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*creat\\s*-F\\s*exit\\s*=\\s*-EPERM\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*access"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource75ref -{ -ResourceID = "[nxFileLine][V-204530.d][medium][SRG-OS-000064-GPOS-00033]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S creat -F exit=-EACCES -F auid>=1000 -F auid!=unset -k access"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*creat\\s*-F\\s*exit\\s*=\\s*-EACCES\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*access"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource76ref -{ -ResourceID = "[nxFileLine][V-204531.a][medium][SRG-OS-000064-GPOS-00033]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S open -F exit=-EPERM -F auid>=1000 -F auid!=unset -k access"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*open\\s*-F\\s*exit\\s*=\\s*-EPERM\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*access"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource77ref -{ -ResourceID = "[nxFileLine][V-204531.b][medium][SRG-OS-000064-GPOS-00033]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S open -F exit=-EACCES -F auid>=1000 -F auid!=unset -k access"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*open\\s*-F\\s*exit\\s*=\\s*-EACCES\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*access"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource78ref -{ -ResourceID = "[nxFileLine][V-204531.c][medium][SRG-OS-000064-GPOS-00033]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S open -F exit=-EPERM -F auid>=1000 -F auid!=unset -k access"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*open\\s*-F\\s*exit\\s*=\\s*-EPERM\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*access"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource79ref -{ -ResourceID = "[nxFileLine][V-204531.d][medium][SRG-OS-000064-GPOS-00033]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S open -F exit=-EACCES -F auid>=1000 -F auid!=unset -k access"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*open\\s*-F\\s*exit\\s*=\\s*-EACCES\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*access"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource80ref -{ -ResourceID = "[nxFileLine][V-204532.a][medium][SRG-OS-000064-GPOS-00033]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S openat -F exit=-EPERM -F auid>=1000 -F auid!=unset -k access"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*openat\\s*-F\\s*exit\\s*=\\s*-EPERM\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*access"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource81ref -{ -ResourceID = "[nxFileLine][V-204532.b][medium][SRG-OS-000064-GPOS-00033]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S openat -F exit=-EACCES -F auid>=1000 -F auid!=unset -k access"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*openat\\s*-F\\s*exit\\s*=\\s*-EACCES\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*access"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource82ref -{ -ResourceID = "[nxFileLine][V-204532.c][medium][SRG-OS-000064-GPOS-00033]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S openat -F exit=-EPERM -F auid>=1000 -F auid!=unset -k access"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*openat\\s*-F\\s*exit\\s*=\\s*-EPERM\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*access"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource83ref -{ -ResourceID = "[nxFileLine][V-204532.d][medium][SRG-OS-000064-GPOS-00033]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S openat -F exit=-EACCES -F auid>=1000 -F auid!=unset -k access"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*openat\\s*-F\\s*exit\\s*=\\s*-EACCES\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*access"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource84ref -{ -ResourceID = "[nxFileLine][V-204533.a][medium][SRG-OS-000064-GPOS-00033]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S open_by_handle_at -F exit=-EPERM -F auid>=1000 -F auid!=unset -k access"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*open_by_handle_at\\s*-F\\s*exit\\s*=\\s*-EPERM\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*access"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource85ref -{ -ResourceID = "[nxFileLine][V-204533.b][medium][SRG-OS-000064-GPOS-00033]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S open_by_handle_at -F exit=-EACCES -F auid>=1000 -F auid!=unset -k access"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*open_by_handle_at\\s*-F\\s*exit\\s*=\\s*-EACCES\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*access"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource86ref -{ -ResourceID = "[nxFileLine][V-204533.c][medium][SRG-OS-000064-GPOS-00033]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S open_by_handle_at -F exit=-EPERM -F auid>=1000 -F auid!=unset -k access"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*open_by_handle_at\\s*-F\\s*exit\\s*=\\s*-EPERM\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*access"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource87ref -{ -ResourceID = "[nxFileLine][V-204533.d][medium][SRG-OS-000064-GPOS-00033]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S open_by_handle_at -F exit=-EACCES -F auid>=1000 -F auid!=unset -k access"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*open_by_handle_at\\s*-F\\s*exit\\s*=\\s*-EACCES\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*access"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource88ref -{ -ResourceID = "[nxFileLine][V-204534.a][medium][SRG-OS-000064-GPOS-00033]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S truncate -F exit=-EPERM -F auid>=1000 -F auid!=unset -k access"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*truncate\\s*-F\\s*exit\\s*=\\s*-EPERM\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*access"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource89ref -{ -ResourceID = "[nxFileLine][V-204534.b][medium][SRG-OS-000064-GPOS-00033]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S truncate -F exit=-EACCES -F auid>=1000 -F auid!=unset -k access"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*truncate\\s*-F\\s*exit\\s*=\\s*-EACCES\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*access"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource90ref -{ -ResourceID = "[nxFileLine][V-204534.c][medium][SRG-OS-000064-GPOS-00033]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S truncate -F exit=-EPERM -F auid>=1000 -F auid!=unset -k access"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*truncate\\s*-F\\s*exit\\s*=\\s*-EPERM\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*access"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource91ref -{ -ResourceID = "[nxFileLine][V-204534.d][medium][SRG-OS-000064-GPOS-00033]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S truncate -F exit=-EACCES -F auid>=1000 -F auid!=unset -k access"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*truncate\\s*-F\\s*exit\\s*=\\s*-EACCES\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*access"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource92ref -{ -ResourceID = "[nxFileLine][V-204535.a][medium][SRG-OS-000064-GPOS-00033]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S ftruncate -F exit=-EPERM -F auid>=1000 -F auid!=unset -k access"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*ftruncate\\s*-F\\s*exit\\s*=\\s*-EPERM\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*access"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource93ref -{ -ResourceID = "[nxFileLine][V-204535.b][medium][SRG-OS-000064-GPOS-00033]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S ftruncate -F exit=-EACCES -F auid>=1000 -F auid!=unset -k access"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*ftruncate\\s*-F\\s*exit\\s*=\\s*-EACCES\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*access"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource94ref -{ -ResourceID = "[nxFileLine][V-204535.c][medium][SRG-OS-000064-GPOS-00033]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S ftruncate -F exit=-EPERM -F auid>=1000 -F auid!=unset -k access"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*ftruncate\\s*-F\\s*exit\\s*=\\s*-EPERM\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*access"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource95ref -{ -ResourceID = "[nxFileLine][V-204535.d][medium][SRG-OS-000064-GPOS-00033]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S ftruncate -F exit=-EACCES -F auid>=1000 -F auid!=unset -k access"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*ftruncate\\s*-F\\s*exit\\s*=\\s*-EACCES\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*access"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource96ref -{ ResourceID = "[nxFileLine][V-204536][medium][SRG-OS-000392-GPOS-00172]::[RHEL]Baseline"; ContainsLine = "-a always,exit -F path=/usr/sbin/semanage -F auid>=1000 -F auid!=unset -k privileged-priv_change"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/sbin/semanage\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-priv_change"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource97ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource57ref { ResourceID = "[nxFileLine][V-204537][medium][SRG-OS-000392-GPOS-00172]::[RHEL]Baseline"; ContainsLine = "-a always,exit -F path=/usr/sbin/setsebool -F auid>=1000 -F auid!=unset -k privileged-priv_change"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/sbin/setsebool\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-priv_change"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource98ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource58ref { ResourceID = "[nxFileLine][V-204538][medium][SRG-OS-000392-GPOS-00172]::[RHEL]Baseline"; ContainsLine = "-a always,exit -F path=/usr/bin/chcon -F auid>=1000 -F auid!=unset -k privileged-priv_change"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/bin/chcon\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-priv_change"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource99ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource59ref { ResourceID = "[nxFileLine][V-204539][medium][SRG-OS-000392-GPOS-00172]::[RHEL]Baseline"; ContainsLine = "-a always,exit -F path=/usr/sbin/setfiles -F auid>=1000 -F auid!=unset -k privileged-priv_change"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/sbin/setfiles\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-priv_change"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource100ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource60ref { ResourceID = "[nxFileLine][V-204540][medium][SRG-OS-000392-GPOS-00172]::[RHEL]Baseline"; ContainsLine = "-w /var/run/faillock -p wa -k logins"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "#\\s*-w\\s*/var/run/faillock\\s*-p\\s*wa\\s*-k\\s*logins"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource101ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource61ref { ResourceID = "[nxFileLine][V-204541][medium][SRG-OS-000392-GPOS-00172]::[RHEL]Baseline"; ContainsLine = "-w /var/log/lastlog -p wa -k logins"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "#\\s*-w\\s*/var/log/lastlog\\s*-p\\s*wa\\s*-k\\s*logins"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource102ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource62ref { ResourceID = "[nxFileLine][V-204542][medium][SRG-OS-000042-GPOS-00020]::[RHEL]Baseline"; ContainsLine = "-a always,exit -F path=/usr/bin/passwd -F auid>=1000 -F auid!=unset -k privileged-passwd"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/bin/passwd\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-passwd"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource103ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource63ref { ResourceID = "[nxFileLine][V-204543][medium][SRG-OS-000042-GPOS-00020]::[RHEL]Baseline"; ContainsLine = "-a always,exit -F path=/usr/sbin/unix_chkpwd -F auid>=1000 -F auid!=unset -k privileged-passwd"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/sbin/unix_chkpwd\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-passwd"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource104ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource64ref { ResourceID = "[nxFileLine][V-204544][medium][SRG-OS-000042-GPOS-00020]::[RHEL]Baseline"; ContainsLine = "-a always,exit -F path=/usr/bin/gpasswd -F auid>=1000 -F auid!=unset -k privileged-passwd"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/bin/gpasswd\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-passwd"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource105ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource65ref { ResourceID = "[nxFileLine][V-204545][medium][SRG-OS-000042-GPOS-00020]::[RHEL]Baseline"; ContainsLine = "-a always,exit -F path=/usr/bin/chage -F auid>=1000 -F auid!=unset -k privileged-passwd"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/bin/chage\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-passwd"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource106ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource66ref { ResourceID = "[nxFileLine][V-204546][medium][SRG-OS-000042-GPOS-00020]::[RHEL]Baseline"; ContainsLine = "-a always,exit -F path=/usr/sbin/userhelper -F auid>=1000 -F auid!=unset -k privileged-passwd"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/sbin/userhelper\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-passwd"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource107ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource67ref { ResourceID = "[nxFileLine][V-204547][medium][SRG-OS-000037-GPOS-00015]::[RHEL]Baseline"; ContainsLine = "-a always,exit -F path=/usr/bin/su -F auid>=1000 -F auid!=unset -k privileged-priv_change"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/bin/su\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-priv_change"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource108ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource68ref { ResourceID = "[nxFileLine][V-204548][medium][SRG-OS-000037-GPOS-00015]::[RHEL]Baseline"; ContainsLine = "-a always,exit -F path=/usr/bin/sudo -F auid>=1000 -F auid!=unset -k privileged-priv_change"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/bin/sudo\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-priv_change"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource109ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource69ref { ResourceID = "[nxFileLine][V-204549.a][medium][SRG-OS-000037-GPOS-00015]::[RHEL]Baseline"; ContainsLine = "-w /etc/sudoers -p wa -k privileged-actions"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "#\\s*-w /etc/sudoers -p wa -k privileged-actions"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource110ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource70ref { ResourceID = "[nxFileLine][V-204549.b][medium][SRG-OS-000037-GPOS-00015]::[RHEL]Baseline"; ContainsLine = "-w /etc/sudoers.d/ -p wa -k privileged-actions"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "#\\s*-w /etc/sudoers.d/ -p wa -k privileged-actions"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource111ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource71ref { ResourceID = "[nxFileLine][V-204550][medium][SRG-OS-000037-GPOS-00015]::[RHEL]Baseline"; ContainsLine = "-a always,exit -F path=/usr/bin/newgrp -F auid>=1000 -F auid!=unset -k privileged-priv_change"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/bin/newgrp\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-priv_change"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource112ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource72ref { ResourceID = "[nxFileLine][V-204551][medium][SRG-OS-000037-GPOS-00015]::[RHEL]Baseline"; ContainsLine = "-a always,exit -F path=/usr/bin/chsh -F auid>=1000 -F auid!=unset -k privileged-priv_change"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/bin/chsh\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-priv_change"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource113ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource73ref { ResourceID = "[nxFileLine][V-204552.a][medium][SRG-OS-000042-GPOS-00020]::[RHEL]Baseline"; ContainsLine = "-a always,exit -F arch=b32 -S mount -F auid>=1000 -F auid!=unset -k privileged-mount"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*mount\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-mount"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource114ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource74ref { ResourceID = "[nxFileLine][V-204552.b][medium][SRG-OS-000042-GPOS-00020]::[RHEL]Baseline"; ContainsLine = "-a always,exit -F arch=b64 -S mount -F auid>=1000 -F auid!=unset -k privileged-mount"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*mount\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-mount"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource115ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource75ref { ResourceID = "[nxFileLine][V-204552.c][medium][SRG-OS-000042-GPOS-00020]::[RHEL]Baseline"; ContainsLine = "-a always,exit -F path=/usr/bin/mount -F auid>=1000 -F auid!=unset -k privileged-mount"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/bin/mount\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-mount"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource116ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource76ref { ResourceID = "[nxFileLine][V-204553][medium][SRG-OS-000042-GPOS-00020]::[RHEL]Baseline"; ContainsLine = "-a always,exit -F path=/usr/bin/umount -F auid>=1000 -F auid!=unset -k privileged-mount"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/bin/umount\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-mount"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource117ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource77ref { ResourceID = "[nxFileLine][V-204554][medium][SRG-OS-000042-GPOS-00020]::[RHEL]Baseline"; ContainsLine = "-a always,exit -F path=/usr/sbin/postdrop -F auid>=1000 -F auid!=unset -k privileged-postfix"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/sbin/postdrop\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-postfix"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource118ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource78ref { ResourceID = "[nxFileLine][V-204555][medium][SRG-OS-000042-GPOS-00020]::[RHEL]Baseline"; ContainsLine = "-a always,exit -F path=/usr/sbin/postqueue -F auid>=1000 -F auid!=unset -k privileged-postfix"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/sbin/postqueue\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-postfix"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource119ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource79ref { ResourceID = "[nxFileLine][V-204556][medium][SRG-OS-000042-GPOS-00020]::[RHEL]Baseline"; ContainsLine = "-a always,exit -F path=/usr/libexec/openssh/ssh-keysign -F auid>=1000 -F auid!=unset -k privileged-ssh"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/libexec/openssh/ssh-keysign\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-ssh"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource120ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource80ref { ResourceID = "[nxFileLine][V-204557][medium][SRG-OS-000042-GPOS-00020]::[RHEL]Baseline"; ContainsLine = "-a always,exit -F path=/usr/bin/crontab -F auid>=1000 -F auid!=unset -k privileged-cron"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/bin/crontab\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-cron"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource121ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource81ref { ResourceID = "[nxFileLine][V-204558][medium][SRG-OS-000471-GPOS-00215]::[RHEL]Baseline"; ContainsLine = "-a always,exit -F path=/usr/sbin/pam_timestamp_check -F auid>=1000 -F auid!=unset -k privileged-pam"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/sbin/pam_timestamp_check\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-pam"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource122ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource82ref { ResourceID = "[nxFileLine][V-204559.a][medium][SRG-OS-000471-GPOS-00216]::[RHEL]Baseline"; ContainsLine = "-a always,exit -F arch=b32 -S create_module -k module-change"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*create_module\\s*-k\\s*module-change"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource123ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource83ref { ResourceID = "[nxFileLine][V-204559.b][medium][SRG-OS-000471-GPOS-00216]::[RHEL]Baseline"; ContainsLine = "-a always,exit -F arch=b64 -S create_module -k module-change"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*create_module\\s*-k\\s*module-change"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource124ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource84ref { ResourceID = "[nxFileLine][V-204560.a][medium][SRG-OS-000471-GPOS-00216]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S init_module -k module-change"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + ContainsLine = "-a always,exit -F arch=b32 -S init_module,finit_module -k modulechange"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*init_module\\s*-k\\s*module-change"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*init_module,finit_module\\s*-k\\s*modulechange"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource125ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource85ref { ResourceID = "[nxFileLine][V-204560.b][medium][SRG-OS-000471-GPOS-00216]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S init_module -k module-change"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + ContainsLine = "-a always,exit -F arch=b64 -S init_module,finit_module -k modulechange"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*init_module\\s*-k\\s*module-change"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*init_module,finit_module\\s*-k\\s*modulechange"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource126ref -{ -ResourceID = "[nxFileLine][V-204561.a][medium][SRG-OS-000471-GPOS-00216]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S finit_module -k module-change"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*finit_module\\s*-k\\s*module-change"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource127ref -{ -ResourceID = "[nxFileLine][V-204561.b][medium][SRG-OS-000471-GPOS-00216]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S finit_module -k module-change"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*finit_module\\s*-k\\s*module-change"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource128ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource86ref { ResourceID = "[nxFileLine][V-204562.a][medium][SRG-OS-000471-GPOS-00216]::[RHEL]Baseline"; ContainsLine = "-a always,exit -F arch=b32 -S delete_module -k module-change"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*delete_module\\s*-k\\s*module-change"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource129ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource87ref { ResourceID = "[nxFileLine][V-204562.b][medium][SRG-OS-000471-GPOS-00216]::[RHEL]Baseline"; ContainsLine = "-a always,exit -F arch=b64 -S delete_module -k module-change"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*delete_module\\s*-k\\s*module-change"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource130ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource88ref { ResourceID = "[nxFileLine][V-204563][medium][SRG-OS-000471-GPOS-00216]::[RHEL]Baseline"; ContainsLine = "-w /usr/bin/kmod -p x -F auid!=unset -k module-change"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "#\\s*-w\\s*/usr/bin/kmod\\s*-p\\s*x\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*module-change"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource131ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource89ref { ResourceID = "[nxFileLine][V-204564][medium][SRG-OS-000004-GPOS-00004]::[RHEL]Baseline"; ContainsLine = "-w /etc/passwd -p wa -k identity"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "#\\s*-w\\s*/etc/passwd\\s*-p\\s*wa\\s*-k\\s*identity"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource132ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource90ref { ResourceID = "[nxFileLine][V-204565][medium][SRG-OS-000004-GPOS-00004]::[RHEL]Baseline"; ContainsLine = "-w /etc/group -p wa -k identity"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "#\\s*-w\\s*/etc/group\\s*-p\\s*wa\\s*-k\\s*identity"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource133ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource91ref { ResourceID = "[nxFileLine][V-204566][medium][SRG-OS-000004-GPOS-00004]::[RHEL]Baseline"; ContainsLine = "-w /etc/gshadow -p wa -k identity"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "#\\s*-w\\s*/etc/gshadow\\s*-p\\s*wa\\s*-k\\s*identity"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource134ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource92ref { ResourceID = "[nxFileLine][V-204567][medium][SRG-OS-000004-GPOS-00004]::[RHEL]Baseline"; ContainsLine = "-w /etc/shadow -p wa -k identity"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "#\\s*-w\\s*/etc/shadow\\s*-p\\s*wa\\s*-k\\s*identity"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource135ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource93ref { ResourceID = "[nxFileLine][V-204568][medium][SRG-OS-000004-GPOS-00004]::[RHEL]Baseline"; ContainsLine = "-w /etc/security/opasswd -p wa -k identity"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "#\\s*-w\\s*/etc/security/opasswd\\s*-p\\s*wa\\s*-k\\s*identity"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource136ref -{ -ResourceID = "[nxFileLine][V-204569.a][medium][SRG-OS-000466-GPOS-00210]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S rename -F auid>=1000 -F auid!=unset -k delete"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*rename\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*delete"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource137ref -{ -ResourceID = "[nxFileLine][V-204569.b][medium][SRG-OS-000466-GPOS-00210]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S rename -F auid>=1000 -F auid!=unset -k delete"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*rename\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*delete"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource138ref -{ -ResourceID = "[nxFileLine][V-204570.a][medium][SRG-OS-000466-GPOS-00210]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S renameat -F auid>=1000 -F auid!=unset -k delete"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*renameat\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*delete"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource139ref -{ -ResourceID = "[nxFileLine][V-204570.b][medium][SRG-OS-000466-GPOS-00210]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S renameat -F auid>=1000 -F auid!=unset -k delete"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*renameat\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*delete"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource140ref -{ -ResourceID = "[nxFileLine][V-204571.a][medium][SRG-OS-000466-GPOS-00210]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S rmdir -F auid>=1000 -F auid!=unset -k delete"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*rmdir\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*delete"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource141ref -{ -ResourceID = "[nxFileLine][V-204571.b][medium][SRG-OS-000466-GPOS-00210]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S rmdir -F auid>=1000 -F auid!=unset -k delete"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*rmdir\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*delete"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource142ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource94ref { ResourceID = "[nxFileLine][V-204572.a][medium][SRG-OS-000466-GPOS-00210]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S unlink -F auid>=1000 -F auid!=unset -k delete"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + ContainsLine = "-a always,exit -F arch=b32 -S unlink,unlinkat,rename,renameat,rmdir -F auid>=1000 -F auid!=unset -k delete"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*unlink\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*delete"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*unlink,unlinkat,rename,renameat,rmdir\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*delete"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource143ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource95ref { ResourceID = "[nxFileLine][V-204572.b][medium][SRG-OS-000466-GPOS-00210]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S unlink -F auid>=1000 -F auid!=unset -k delete"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + ContainsLine = "-a always,exit -F arch=b64 -S unlink,unlinkat,rename,renameat,rmdir -F auid>=1000 -F auid!=unset -k delete"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*unlink\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*delete"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*unlink,unlinkat,rename,renameat,rmdir\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*delete"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource144ref -{ -ResourceID = "[nxFileLine][V-204573.a][medium][SRG-OS-000466-GPOS-00210]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S unlinkat -F auid>=1000 -F auid!=unset -k delete"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*unlinkat\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*delete"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource145ref -{ -ResourceID = "[nxFileLine][V-204573.b][medium][SRG-OS-000466-GPOS-00210]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S unlinkat -F auid>=1000 -F auid!=unset -k delete"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*unlinkat\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*delete"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource146ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource96ref { ResourceID = "[nxFileLine][V-204578][medium][SRG-OS-000033-GPOS-00014]::[RHEL]Baseline"; ContainsLine = "Ciphers aes256-ctr,aes192-ctr,aes128-ctr"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/ssh/sshd_config"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "^#\\s*Ciphers.*|^\\s*Ciphers\\s*aes128-ctr.*|^\\s*Ciphers\\s*aes192-ctr.*"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource147ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource97ref { ResourceID = "[nxFileLine][V-204579.b][medium][SRG-OS-000163-GPOS-00072]::[RHEL]Baseline"; ContainsLine = "declare -xr TMOUT=900"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/profile.d/tmout.sh"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "^\\s*TMOUT\\s*=\\s*[0-8]?[0-9]?[0-9]?$|^#\\s*TMOUT.*"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource148ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource98ref { ResourceID = "[nxFileLine][V-204580][medium][SRG-OS-000023-GPOS-00006]::[RHEL]Baseline"; ContainsLine = "banner /etc/issue"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/ssh/sshd_config"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "#\\s*banner\\s*/etc/issue"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource149ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource99ref { ResourceID = "[nxFileLine][V-204587][medium][SRG-OS-000163-GPOS-00072]::[RHEL]Baseline"; ContainsLine = "ClientAliveInterval 600"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/ssh/sshd_config"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "^\\s*ClientAliveInterval\\s*[0-5]?[0-9]?[0-9]?\\s*$|^#\\s*ClientAliveInterval.*|^\\s*ClientAliveInterval\\s*$"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource150ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource100ref { ResourceID = "[nxFileLine][V-204588][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; ContainsLine = "RhostsRSAAuthentication no"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/ssh/sshd_config"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "^#\\s*RhostsRSAAuthentication.*$|^RhostsRSAAuthentication\\s*(?!no\\b)\\w*$"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource151ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource101ref { ResourceID = "[nxFileLine][V-204589][medium][SRG-OS-000163-GPOS-00072]::[RHEL]Baseline"; ContainsLine = "ClientAliveCountMax 0"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/ssh/sshd_config"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "^#\\s*ClientAliveCountMax.*$|^ClientAliveCountMax\\s*(?!0\\b)\\w*$"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource152ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource102ref { ResourceID = "[nxFileLine][V-204590][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; ContainsLine = "IgnoreRhosts yes"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/ssh/sshd_config"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "^#\\s*IgnoreRhosts.*$|^IgnoreRhosts\\s*(?!yes\\b)\\w*$"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource153ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource103ref { ResourceID = "[nxFileLine][V-204591][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; ContainsLine = "PrintLastLog yes"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/ssh/sshd_config"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "^#\\s*PrintLastLog.*$|^PrintLastLog\\s*(?!yes\\b)\\w*$"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource154ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource104ref { ResourceID = "[nxFileLine][V-204592][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; ContainsLine = "PermitRootLogin no"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/ssh/sshd_config"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "^#\\s*PermitRootLogin.*$|^PermitRootLogin\\s*(?!no\\b)\\w*$"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource155ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource105ref { ResourceID = "[nxFileLine][V-204593][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; ContainsLine = "IgnoreUserKnownHosts yes"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/ssh/sshd_config"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "^#\\s*IgnoreUserKnownHosts.*$|^IgnoreUserKnownHosts\\s*(?!yes\\b)\\w*$"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource156ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource106ref { ResourceID = "[nxFileLine][V-204594][high][SRG-OS-000074-GPOS-00042]::[RHEL]Baseline"; ContainsLine = "Protocol 2"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/ssh/sshd_config"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "^#\\s*Protocol.*$|^Protocol\\s*(?!2\\b)\\w*$"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource157ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource107ref { ResourceID = "[nxFileLine][V-204595][medium][SRG-OS-000250-GPOS-00093]::[RHEL]Baseline"; ContainsLine = "MACs hmac-sha2-512,hmac-sha2-256"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/ssh/sshd_config"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "#\\s*MACs.*|\\s*MACs\\s*hmac-(?!sha2-512).*"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource158ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource108ref { ResourceID = "[nxFileLine][V-204598][medium][SRG-OS-000364-GPOS-00151]::[RHEL]Baseline"; ContainsLine = "GSSAPIAuthentication no"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/ssh/sshd_config"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "^#\\s*GSSAPIAuthentication.*$|^GSSAPIAuthentication\\s*(?!no\\b)\\w*$"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource159ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource109ref { ResourceID = "[nxFileLine][V-204599][medium][SRG-OS-000364-GPOS-00151]::[RHEL]Baseline"; ContainsLine = "KerberosAuthentication no"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/ssh/sshd_config"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "^#\\s*KerberosAuthentication.*$|^KerberosAuthentication\\s*(?!no\\b)\\w*$"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource160ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource110ref { ResourceID = "[nxFileLine][V-204600][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; ContainsLine = "StrictModes yes"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/ssh/sshd_config"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "^#\\s*StrictModes.*$|^StrictModes\\s*(?!yes\\b)\\w*$"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource161ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource111ref { ResourceID = "[nxFileLine][V-204601][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; ContainsLine = "UsePrivilegeSeparation sandbox"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/ssh/sshd_config"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "^#\\s*UsePrivilegeSeparation.*$|^UsePrivilegeSeparation\\s*(?!sandbox\\b)\\w*$"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource162ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource112ref { ResourceID = "[nxFileLine][V-204602][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; ContainsLine = "Compression delayed"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/ssh/sshd_config"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "^#\\s*Compression.*$|^Compression\\s*(?!delayed\\b)\\w*$"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource163ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource113ref { ResourceID = "[nxFileLine][V-204622][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; ContainsLine = "X11Forwarding no"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/ssh/sshd_config"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "^#\\s*X11Forwarding.*$|^X11Forwarding\\s*(?!no\\b)\\w*$"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource164ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource114ref { ResourceID = "[nxFileLine][V-233307][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; ContainsLine = "X11UseLocalhost yes"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/ssh/sshd_config"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "#\\s*X11UseLocalhost\\s*yes"; ConfigurationName = "LinuxBaseLine"; }; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource115ref +{ +ResourceID = "[nxFileLine][V-250314][medium][SRG-OS-000324-GPOS-00125]::[RHEL]Baseline"; + ContainsLine = "%wheel ALL=(ALL) TYPE=sysadm_t ROLE=sysadm_r ALL"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/sudoers"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*%wheel\\s*ALL\\s*=\\s*(ALL)\\s*TYPE\\s*=\\s*sysadm_t\\s*ROLE\\s*=\\s*sysadm_r\\s*ALL"; + ConfigurationName = "LinuxBaseLine"; +}; instance of MSFT_nxServiceResource as $MSFT_nxServiceResource1ref { ResourceID = "[nxService][V-204451][medium][SRG-OS-000114-GPOS-00059]::[RHEL]Baseline"; Controller = "systemd"; Enabled = False; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxService.ps1::13::9::nxService"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxService.ps1::13::9::nxService"; Name = "autofs"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -2173,7 +1624,7 @@ instance of MSFT_nxServiceResource as $MSFT_nxServiceResource2ref ResourceID = "[nxService][V-204492][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; Controller = "systemd"; Enabled = False; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxService.ps1::13::9::nxService"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxService.ps1::13::9::nxService"; Name = "kdump"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -2185,7 +1636,7 @@ ResourceID = "[nxService][V-204503][medium][SRG-OS-000038-GPOS-00016]::[RHEL]Bas Controller = "systemd"; State = "Running"; Enabled = True; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxService.ps1::22::9::nxService"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxService.ps1::22::9::nxService"; Name = "auditd"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -2197,7 +1648,7 @@ ResourceID = "[nxService][V-204586][medium][SRG-OS-000423-GPOS-00187]::[RHEL]Bas Controller = "systemd"; State = "Running"; Enabled = True; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxService.ps1::22::9::nxService"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxService.ps1::22::9::nxService"; Name = "sshd"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -2209,7 +1660,7 @@ ResourceID = "[nxService][V-204604.b][medium][SRG-OS-000480-GPOS-00227]::[RHEL]B Controller = "systemd"; State = "Running"; Enabled = True; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxService.ps1::22::9::nxService"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxService.ps1::22::9::nxService"; Name = "firewalld"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -2220,7 +1671,7 @@ instance of MSFT_nxScriptResource as $MSFT_nxScriptResource1ref ResourceID = "[nxScript][V-204399.b][medium][[Skip] SRG-OS-000029-GPOS-00010]::[RHEL]Baseline"; GetScript = "#!/bin/bash\necho [V-204399.b][medium][[Skip] SRG-OS-000029-GPOS-00010]"; TestScript = "#!/bin/bash\nexit 0"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxScript.skip.ps1::10::5::nxScript"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxScript.skip.ps1::10::5::nxScript"; SetScript = "#!/bin/bash"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -2231,7 +1682,7 @@ instance of MSFT_nxScriptResource as $MSFT_nxScriptResource2ref ResourceID = "[nxScript][V-204400][medium][[Skip] SRG-OS-000029-GPOS-00010]::[RHEL]Baseline"; GetScript = "#!/bin/bash\necho [V-204400][medium][[Skip] SRG-OS-000029-GPOS-00010]"; TestScript = "#!/bin/bash\nexit 0"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxScript.skip.ps1::10::5::nxScript"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxScript.skip.ps1::10::5::nxScript"; SetScript = "#!/bin/bash"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -2242,7 +1693,7 @@ instance of MSFT_nxScriptResource as $MSFT_nxScriptResource3ref ResourceID = "[nxScript][V-204403][medium][[Skip] SRG-OS-000029-GPOS-00010]::[RHEL]Baseline"; GetScript = "#!/bin/bash\necho [V-204403][medium][[Skip] SRG-OS-000029-GPOS-00010]"; TestScript = "#!/bin/bash\nexit 0"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxScript.skip.ps1::10::5::nxScript"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxScript.skip.ps1::10::5::nxScript"; SetScript = "#!/bin/bash"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -2253,7 +1704,7 @@ instance of MSFT_nxScriptResource as $MSFT_nxScriptResource4ref ResourceID = "[nxScript][V-204509][medium][[Skip] SRG-OS-000342-GPOS-00133]::[RHEL]Baseline"; GetScript = "#!/bin/bash\necho [V-204509][medium][[Skip] SRG-OS-000342-GPOS-00133]"; TestScript = "#!/bin/bash\nexit 0"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxScript.skip.ps1::10::5::nxScript"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxScript.skip.ps1::10::5::nxScript"; SetScript = "#!/bin/bash"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -2264,7 +1715,7 @@ instance of MSFT_nxScriptResource as $MSFT_nxScriptResource5ref ResourceID = "[nxScript][V-204513][medium][[Skip] SRG-OS-000343-GPOS-00134]::[RHEL]Baseline"; GetScript = "#!/bin/bash\necho [V-204513][medium][[Skip] SRG-OS-000343-GPOS-00134]"; TestScript = "#!/bin/bash\nexit 0"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxScript.skip.ps1::10::5::nxScript"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxScript.skip.ps1::10::5::nxScript"; SetScript = "#!/bin/bash"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -2275,7 +1726,7 @@ instance of MSFT_nxScriptResource as $MSFT_nxScriptResource6ref ResourceID = "[nxScript][V-204623][medium][[Skip] SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; GetScript = "#!/bin/bash\necho [V-204623][medium][[Skip] SRG-OS-000480-GPOS-00227]"; TestScript = "#!/bin/bash\nexit 0"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxScript.skip.ps1::10::5::nxScript"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxScript.skip.ps1::10::5::nxScript"; SetScript = "#!/bin/bash"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -2286,7 +1737,7 @@ instance of MSFT_nxScriptResource as $MSFT_nxScriptResource7ref ResourceID = "[nxScript][V-244557][medium][[Skip] SRG-OS-000080-GPOS-00048]::[RHEL]Baseline"; GetScript = "#!/bin/bash\necho [V-244557][medium][[Skip] SRG-OS-000080-GPOS-00048]"; TestScript = "#!/bin/bash\nexit 0"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxScript.skip.ps1::10::5::nxScript"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxScript.skip.ps1::10::5::nxScript"; SetScript = "#!/bin/bash"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -2297,7 +1748,7 @@ instance of MSFT_nxScriptResource as $MSFT_nxScriptResource8ref ResourceID = "[nxScript][V-244558][medium][[Skip] SRG-OS-000080-GPOS-00048]::[RHEL]Baseline"; GetScript = "#!/bin/bash\necho [V-244558][medium][[Skip] SRG-OS-000080-GPOS-00048]"; TestScript = "#!/bin/bash\nexit 0"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxScript.skip.ps1::10::5::nxScript"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxScript.skip.ps1::10::5::nxScript"; SetScript = "#!/bin/bash"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -2308,7 +1759,7 @@ instance of MSFT_nxScriptResource as $MSFT_nxScriptResource9ref ResourceID = "[nxScript][V-204399.a][medium][[Skip] SRG-OS-000029-GPOS-00010]::[RHEL]Baseline"; GetScript = "#!/bin/bash\necho [V-204399.a][medium][[Skip] SRG-OS-000029-GPOS-00010]"; TestScript = "#!/bin/bash\nexit 0"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxScript.skip.ps1::10::5::nxScript"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxScript.skip.ps1::10::5::nxScript"; SetScript = "#!/bin/bash"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -2325,7 +1776,7 @@ instance of OMI_ConfigurationDocument Author="Microsoft"; - GenerationDate="01/31/2022 17:13:26"; + GenerationDate="05/04/2022 09:09:33"; GenerationHost="Microsoft"; diff --git a/stig/linux/config/RHEL75.mof b/stig/linux/config/RHEL75.mof index dc529ad..593a2f2 100644 --- a/stig/linux/config/RHEL75.mof +++ b/stig/linux/config/RHEL75.mof @@ -1,7 +1,7 @@ /* @TargetNode='RHEL75' @GeneratedBy=Microsoft -@GenerationDate=01/31/2022 17:13:26 +@GenerationDate=05/04/2022 09:09:33 @GenerationHost=Microsoft */ @@ -9,7 +9,7 @@ instance of MSFT_nxPackageResource as $MSFT_nxPackageResource1ref { ResourceID = "[nxPackage][V-204442][high][SRG-OS-000095-GPOS-00049]::[RHEL]Baseline"; Ensure = "Absent"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxPackage.ps1::8::5::nxPackage"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxPackage.ps1::8::5::nxPackage"; Name = "rsh-server"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -19,7 +19,7 @@ instance of MSFT_nxPackageResource as $MSFT_nxPackageResource2ref { ResourceID = "[nxPackage][V-204443][high][SRG-OS-000095-GPOS-00049]::[RHEL]Baseline"; Ensure = "Absent"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxPackage.ps1::8::5::nxPackage"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxPackage.ps1::8::5::nxPackage"; Name = "ypserv"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -29,7 +29,7 @@ instance of MSFT_nxPackageResource as $MSFT_nxPackageResource3ref { ResourceID = "[nxPackage][V-204497][high][SRG-OS-000033-GPOS-00014]::[RHEL]Baseline"; Ensure = "Present"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxPackage.ps1::8::5::nxPackage"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxPackage.ps1::8::5::nxPackage"; Name = "dracut-fips"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -39,7 +39,7 @@ instance of MSFT_nxPackageResource as $MSFT_nxPackageResource4ref { ResourceID = "[nxPackage][V-204498][low][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; Ensure = "Present"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxPackage.ps1::8::5::nxPackage"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxPackage.ps1::8::5::nxPackage"; Name = "aide"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -49,7 +49,7 @@ instance of MSFT_nxPackageResource as $MSFT_nxPackageResource5ref { ResourceID = "[nxPackage][V-204502][high][SRG-OS-000095-GPOS-00049]::[RHEL]Baseline"; Ensure = "Absent"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxPackage.ps1::8::5::nxPackage"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxPackage.ps1::8::5::nxPackage"; Name = "telnet-server"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -59,7 +59,7 @@ instance of MSFT_nxPackageResource as $MSFT_nxPackageResource6ref { ResourceID = "[nxPackage][V-204585][medium][SRG-OS-000423-GPOS-00187]::[RHEL]Baseline"; Ensure = "Present"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxPackage.ps1::8::5::nxPackage"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxPackage.ps1::8::5::nxPackage"; Name = "openssh-server"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -69,7 +69,7 @@ instance of MSFT_nxPackageResource as $MSFT_nxPackageResource7ref { ResourceID = "[nxPackage][V-204604.a][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; Ensure = "Present"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxPackage.ps1::8::5::nxPackage"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxPackage.ps1::8::5::nxPackage"; Name = "firewalld"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -79,7 +79,7 @@ instance of MSFT_nxPackageResource as $MSFT_nxPackageResource8ref { ResourceID = "[nxPackage][V-204620][high][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; Ensure = "Absent"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxPackage.ps1::8::5::nxPackage"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxPackage.ps1::8::5::nxPackage"; Name = "vsftpd"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -89,7 +89,7 @@ instance of MSFT_nxPackageResource as $MSFT_nxPackageResource9ref { ResourceID = "[nxPackage][V-204621][high][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; Ensure = "Absent"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxPackage.ps1::8::5::nxPackage"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxPackage.ps1::8::5::nxPackage"; Name = "tftp-server"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -99,7 +99,7 @@ instance of MSFT_nxPackageResource as $MSFT_nxPackageResource10ref { ResourceID = "[nxPackage][V-204631][medium][SRG-OS-000375-GPOS-00160]::[RHEL]Baseline"; Ensure = "Present"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxPackage.ps1::8::5::nxPackage"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxPackage.ps1::8::5::nxPackage"; Name = "pam_pkcs11"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -111,7 +111,7 @@ ResourceID = "[nxFile][V-204395][medium][SRG-OS-000023-GPOS-00006]::[RHEL]Baseli Contents = "You are accessing a U.S. Government (USG) Information System (IS) that is provided for USG-authorized use only.\n\nBy using this IS (which includes any device attached to this IS), you consent to the following conditions:\n\n-The USG routinely intercepts and monitors communications on this IS for purposes including, but not limited to, penetration testing, COMSEC monitoring, network operations and defense, personnel misconduct (PM), law enforcement (LE), and counterintelligence (CI) investigations.\n\n-At any time, the USG may inspect and seize data stored on this IS.\n\n-Communications using, or data stored on, this IS are not private, are subject to routine monitoring, interception, and search, and may be disclosed or used for any USG-authorized purpose.\n\n-This IS includes security measures (e.g., authentication and access controls) to protect USG interests--not for your personal benefit or privacy.\n\n-Notwithstanding the above, using this IS does not constitute consent to PM, LE or CI investigative searching or monitoring of the content of privileged communications, or work product, related to personal representation or services by attorneys, psychotherapists, or clergy, and their assistants. Such communications and work product are private and confidential. See User Agreement for details."; DestinationPath = "/etc/issue"; ModuleName = "nx"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; ModuleVersion = "1.0"; ConfigurationName = "LinuxBaseLine"; }; @@ -121,7 +121,7 @@ ResourceID = "[nxFile][V-204449.a][medium][SRG-OS-000114-GPOS-00059]::[RHEL]Base Contents = ""; DestinationPath = "/etc/modprobe.d/usb-storage.conf"; ModuleName = "nx"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; ModuleVersion = "1.0"; ConfigurationName = "LinuxBaseLine"; }; @@ -131,7 +131,7 @@ ResourceID = "[nxFile][V-204449.b][medium][SRG-OS-000114-GPOS-00059]::[RHEL]Base Contents = ""; DestinationPath = "/etc/modprobe.d/blacklist.conf"; ModuleName = "nx"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; ModuleVersion = "1.0"; ConfigurationName = "LinuxBaseLine"; }; @@ -141,7 +141,7 @@ ResourceID = "[nxFile][V-204450.a][medium][SRG-OS-000378-GPOS-00163]::[RHEL]Base Contents = ""; DestinationPath = "/etc/modprobe.d/dccp.conf"; ModuleName = "nx"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; ModuleVersion = "1.0"; ConfigurationName = "LinuxBaseLine"; }; @@ -151,7 +151,7 @@ ResourceID = "[nxFile][V-204576][low][SRG-OS-000027-GPOS-00008]::[RHEL]Baseline" Contents = "* hard maxlogins 10"; DestinationPath = "/etc/security/limits.d/204576-powerstig.conf"; ModuleName = "nx"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; ModuleVersion = "1.0"; ConfigurationName = "LinuxBaseLine"; }; @@ -161,7 +161,7 @@ ResourceID = "[nxFile][V-204579.a][medium][SRG-OS-000163-GPOS-00072]::[RHEL]Base Contents = ""; DestinationPath = "/etc/profile.d/tmout.sh"; ModuleName = "nx"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; ModuleVersion = "1.0"; ConfigurationName = "LinuxBaseLine"; }; @@ -171,7 +171,7 @@ ResourceID = "[nxFile][V-204584][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseli Contents = "kernel.randomize_va_space = 2"; DestinationPath = "/etc/sysctl.d/204584-powerstig.conf"; ModuleName = "nx"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; ModuleVersion = "1.0"; ConfigurationName = "LinuxBaseLine"; }; @@ -181,7 +181,7 @@ ResourceID = "[nxFile][V-204609][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseli Contents = "net.ipv4.conf.all.accept_source_route = 0"; DestinationPath = "/etc/sysctl.d/204609-powerstig.conf"; ModuleName = "nx"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; ModuleVersion = "1.0"; ConfigurationName = "LinuxBaseLine"; }; @@ -191,7 +191,7 @@ ResourceID = "[nxFile][V-204610][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseli Contents = "net.ipv4.conf.all.rp_filter = 1"; DestinationPath = "/etc/sysctl.d/204610-powerstig.conf"; ModuleName = "nx"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; ModuleVersion = "1.0"; ConfigurationName = "LinuxBaseLine"; }; @@ -201,7 +201,7 @@ ResourceID = "[nxFile][V-204611][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseli Contents = "net.ipv4.conf.default.rp_filter = 1"; DestinationPath = "/etc/sysctl.d/204611-powerstig.conf"; ModuleName = "nx"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; ModuleVersion = "1.0"; ConfigurationName = "LinuxBaseLine"; }; @@ -211,7 +211,7 @@ ResourceID = "[nxFile][V-204612][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseli Contents = "net.ipv4.conf.default.accept_source_route = 0"; DestinationPath = "/etc/sysctl.d/204612-powerstig.conf"; ModuleName = "nx"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; ModuleVersion = "1.0"; ConfigurationName = "LinuxBaseLine"; }; @@ -221,7 +221,7 @@ ResourceID = "[nxFile][V-204613][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseli Contents = "net.ipv4.icmp_echo_ignore_broadcasts = 1"; DestinationPath = "/etc/sysctl.d/204613-powerstig.conf"; ModuleName = "nx"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; ModuleVersion = "1.0"; ConfigurationName = "LinuxBaseLine"; }; @@ -231,7 +231,7 @@ ResourceID = "[nxFile][V-204614][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseli Contents = "net.ipv4.conf.default.accept_redirects = 0"; DestinationPath = "/etc/sysctl.d/204614-powerstig.conf"; ModuleName = "nx"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; ModuleVersion = "1.0"; ConfigurationName = "LinuxBaseLine"; }; @@ -241,7 +241,7 @@ ResourceID = "[nxFile][V-204615][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseli Contents = "net.ipv4.conf.all.accept_redirects = 0"; DestinationPath = "/etc/sysctl.d/204615-powerstig.conf"; ModuleName = "nx"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; ModuleVersion = "1.0"; ConfigurationName = "LinuxBaseLine"; }; @@ -251,7 +251,7 @@ ResourceID = "[nxFile][V-204616][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseli Contents = "net.ipv4.conf.default.send_redirects = 0"; DestinationPath = "/etc/sysctl.d/204616-powerstig.conf"; ModuleName = "nx"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; ModuleVersion = "1.0"; ConfigurationName = "LinuxBaseLine"; }; @@ -261,7 +261,7 @@ ResourceID = "[nxFile][V-204617][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseli Contents = "net.ipv4.conf.all.send_redirects = 0"; DestinationPath = "/etc/sysctl.d/204617-powerstig.conf"; ModuleName = "nx"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; ModuleVersion = "1.0"; ConfigurationName = "LinuxBaseLine"; }; @@ -271,7 +271,7 @@ ResourceID = "[nxFile][V-204625][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseli Contents = "net.ipv4.ip_forward = 0"; DestinationPath = "/etc/sysctl.d/204625-powerstig.conf"; ModuleName = "nx"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; ModuleVersion = "1.0"; ConfigurationName = "LinuxBaseLine"; }; @@ -281,7 +281,7 @@ ResourceID = "[nxFile][V-204630][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseli Contents = "net.ipv6.conf.all.accept_source_route = 0"; DestinationPath = "/etc/sysctl.d/204630-powerstig.conf"; ModuleName = "nx"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; ModuleVersion = "1.0"; ConfigurationName = "LinuxBaseLine"; }; @@ -291,7 +291,7 @@ ResourceID = "[nxFile][V-237634.a][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Base Contents = "Defaults !targetpw"; DestinationPath = "/etc/sudoers.d/237634a-powerstig.conf"; ModuleName = "nx"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; ModuleVersion = "1.0"; ConfigurationName = "LinuxBaseLine"; }; @@ -301,7 +301,7 @@ ResourceID = "[nxFile][V-237634.b][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Base Contents = "Defaults !rootpw"; DestinationPath = "/etc/sudoers.d/237634b-powerstig.conf"; ModuleName = "nx"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; ModuleVersion = "1.0"; ConfigurationName = "LinuxBaseLine"; }; @@ -311,7 +311,7 @@ ResourceID = "[nxFile][V-237634.c][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Base Contents = "Defaults !runaspw"; DestinationPath = "/etc/sudoers.d/237634c-powerstig.conf"; ModuleName = "nx"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; ModuleVersion = "1.0"; ConfigurationName = "LinuxBaseLine"; }; @@ -321,17 +321,7 @@ ResourceID = "[nxFile][V-237635][medium][SRG-OS-000373-GPOS-00156]::[RHEL]Baseli Contents = "Defaults timestamp_timeout=0"; DestinationPath = "/etc/sudoers.d/237635-powerstig.conf"; ModuleName = "nx"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; - ModuleVersion = "1.0"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileResource as $MSFT_nxFileResource23ref -{ -ResourceID = "[nxFile][V-250314][medium][SRG-OS-000324-GPOS-00125]::[RHEL]Baseline"; - Contents = "%wheel ALL=(ALL) TYPE=sysadm_t ROLE=sysadm_r ALL"; - DestinationPath = "/etc/sudoers.d/250314-powerstig.conf"; - ModuleName = "nx"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; ModuleVersion = "1.0"; ConfigurationName = "LinuxBaseLine"; }; @@ -339,7 +329,7 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource1ref { ResourceID = "[nxFileLine][V-204405][medium][SRG-OS-000069-GPOS-00037]::[RHEL]Baseline"; ContainsLine = "password substack system-auth"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/pam.d/passwd"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -350,7 +340,7 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource2ref { ResourceID = "[nxFileLine][V-204407][medium][SRG-OS-000069-GPOS-00037]::[RHEL]Baseline"; ContainsLine = "ucredit = -1"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/security/pwquality.conf"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -361,7 +351,7 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource3ref { ResourceID = "[nxFileLine][V-204408][medium][SRG-OS-000070-GPOS-00038]::[RHEL]Baseline"; ContainsLine = "lcredit = -1"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/security/pwquality.conf"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -372,7 +362,7 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource4ref { ResourceID = "[nxFileLine][V-204409][medium][SRG-OS-000071-GPOS-00039]::[RHEL]Baseline"; ContainsLine = "dcredit = -1"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/security/pwquality.conf"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -383,7 +373,7 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource5ref { ResourceID = "[nxFileLine][V-204410][medium][SRG-OS-000266-GPOS-00101]::[RHEL]Baseline"; ContainsLine = "ocredit=-1"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/security/pwquality.conf"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -394,7 +384,7 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource6ref { ResourceID = "[nxFileLine][V-204411][medium][SRG-OS-000072-GPOS-00040]::[RHEL]Baseline"; ContainsLine = "difok = 8"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/security/pwquality.conf"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -405,7 +395,7 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource7ref { ResourceID = "[nxFileLine][V-204412][medium][SRG-OS-000072-GPOS-00040]::[RHEL]Baseline"; ContainsLine = "minclass = 4"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/security/pwquality.conf"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -416,7 +406,7 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource8ref { ResourceID = "[nxFileLine][V-204413][medium][SRG-OS-000072-GPOS-00040]::[RHEL]Baseline"; ContainsLine = "maxrepeat = 3"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/security/pwquality.conf"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -427,18 +417,18 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource9ref { ResourceID = "[nxFileLine][V-204414][medium][SRG-OS-000072-GPOS-00040]::[RHEL]Baseline"; ContainsLine = "maxclassrepeat = 4"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/security/pwquality.conf"; ModuleName = "nx"; ModuleVersion = "1.0"; - DoesNotContainPattern = "^#\\s*maxclassrepeat\\s*=.*|^\\s*maxclassrepeat\\s*=\\s*(?:\\d{2,}|[3-9])"; + DoesNotContainPattern = "^#\\s*maxclassrepeat\\s*=.*|^\\s*maxclassrepeat\\s*=\\s*(?:\\d{2,}|[1-3|5-9])"; ConfigurationName = "LinuxBaseLine"; }; instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource10ref { ResourceID = "[nxFileLine][V-204416][medium][SRG-OS-000073-GPOS-00041]::[RHEL]Baseline"; ContainsLine = "ENCRYPT_METHOD SHA512"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/login.defs"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -449,7 +439,7 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource11ref { ResourceID = "[nxFileLine][V-204418][medium][SRG-OS-000075-GPOS-00043]::[RHEL]Baseline"; ContainsLine = "PASS_MIN_DAYS 1"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/login.defs"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -460,7 +450,7 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource12ref { ResourceID = "[nxFileLine][V-204420][medium][SRG-OS-000076-GPOS-00044]::[RHEL]Baseline"; ContainsLine = "PASS_MAX_DAYS 60"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/login.defs"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -471,7 +461,7 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource13ref { ResourceID = "[nxFileLine][V-204423][medium][SRG-OS-000078-GPOS-00046]::[RHEL]Baseline"; ContainsLine = "minlen = 15"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/security/pwquality.conf"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -482,7 +472,7 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource14ref { ResourceID = "[nxFileLine][V-204425][high][SRG-OS-000106-GPOS-00053]::[RHEL]Baseline"; ContainsLine = "PermitEmptyPasswords no"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/ssh/sshd_config"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -492,19 +482,19 @@ ResourceID = "[nxFileLine][V-204425][high][SRG-OS-000106-GPOS-00053]::[RHEL]Base instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource15ref { ResourceID = "[nxFileLine][V-204426][medium][SRG-OS-000118-GPOS-00060]::[RHEL]Baseline"; - ContainsLine = "INACTIVE=0"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + ContainsLine = "INACTIVE=35"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/default/useradd"; ModuleName = "nx"; ModuleVersion = "1.0"; - DoesNotContainPattern = "^#\\s*INACTIVE.*$|^INACTIVE\\s*=\\s*(?!0\\b)[-]*\\w*$"; + DoesNotContainPattern = "^#\\s*INACTIVE\\s*=.*|^\\s*INACTIVE\\s*=\\s*(3[5-9]|[4-9]\\d+|\\d{3,})"; ConfigurationName = "LinuxBaseLine"; }; instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource16ref { ResourceID = "[nxFileLine][V-204431][medium][SRG-OS-000480-GPOS-00226]::[RHEL]Baseline"; ContainsLine = "FAIL_DELAY 4"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/login.defs"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -515,7 +505,7 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource17ref { ResourceID = "[nxFileLine][V-204434][medium][SRG-OS-000480-GPOS-00229]::[RHEL]Baseline"; ContainsLine = "PermitUserEnvironment no"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/ssh/sshd_config"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -526,7 +516,7 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource18ref { ResourceID = "[nxFileLine][V-204435][medium][SRG-OS-000480-GPOS-00229]::[RHEL]Baseline"; ContainsLine = "HostbasedAuthentication no"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/ssh/sshd_config"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -537,7 +527,7 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource19ref { ResourceID = "[nxFileLine][V-204447][high][SRG-OS-000366-GPOS-00153]::[RHEL]Baseline"; ContainsLine = "gpgcheck=1"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/yum.conf"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -548,7 +538,7 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource20ref { ResourceID = "[nxFileLine][V-204448][high][SRG-OS-000366-GPOS-00153]::[RHEL]Baseline"; ContainsLine = "localpkg_gpgcheck=1"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/yum.conf"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -559,7 +549,7 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource21ref { ResourceID = "[nxFileLine][V-204449.c][medium][SRG-OS-000114-GPOS-00059]::[RHEL]Baseline"; ContainsLine = "install usb-storage /bin/true"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/modprobe.d/usb-storage.conf"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -570,7 +560,7 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource22ref { ResourceID = "[nxFileLine][V-204449.d][medium][SRG-OS-000114-GPOS-00059]::[RHEL]Baseline"; ContainsLine = "blacklist usb-storage"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/modprobe.d/blacklist.conf"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -581,7 +571,7 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource23ref { ResourceID = "[nxFileLine][V-204450.b][medium][SRG-OS-000378-GPOS-00163]::[RHEL]Baseline"; ContainsLine = "install dccp /bin/true"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/modprobe.d/dccp.conf"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -592,7 +582,7 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource24ref { ResourceID = "[nxFileLine][V-204450.c][medium][SRG-OS-000378-GPOS-00163]::[RHEL]Baseline"; ContainsLine = "blacklist dccp"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/modprobe.d/blacklist.conf"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -603,7 +593,7 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource25ref { ResourceID = "[nxFileLine][V-204452][low][SRG-OS-000437-GPOS-00194]::[RHEL]Baseline"; ContainsLine = "clean_requirements_on_remove=1"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/yum.conf"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -614,7 +604,7 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource26ref { ResourceID = "[nxFileLine][V-204453][medium][SRG-OS-000445-GPOS-00199]::[RHEL]Baseline"; ContainsLine = "SELINUX=enforcing"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/selinux/config"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -625,7 +615,7 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource27ref { ResourceID = "[nxFileLine][V-204454][medium][SRG-OS-000445-GPOS-00199]::[RHEL]Baseline"; ContainsLine = "SELINUXTYPE=targeted"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/selinux/config"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -636,7 +626,7 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource28ref { ResourceID = "[nxFileLine][V-204457][medium][SRG-OS-000480-GPOS-00228]::[RHEL]Baseline"; ContainsLine = "UMASK 077"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/login.defs"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -647,7 +637,7 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource29ref { ResourceID = "[nxFileLine][V-204466][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; ContainsLine = "CREATE_HOME yes"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/login.defs"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -658,16 +648,16 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource30ref { ResourceID = "[nxFileLine][V-204504][medium][SRG-OS-000046-GPOS-00022]::[RHEL]Baseline"; ContainsLine = "-f 2"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "^#\\s*-f\\s+2|^\\s*-f\\s*1"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileResource as $MSFT_nxFileResource24ref +instance of MSFT_nxFileResource as $MSFT_nxFileResource23ref { -SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::29::9::nxFile"; +SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::29::9::nxFile"; ModuleName = "nx"; ModuleVersion = "1.0"; ResourceID = "[nxFile][V-204506.a][medium][SRG-OS-000342-GPOS-00133]::[RHEL]Baseline"; @@ -678,7 +668,7 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource31ref { ResourceID = "[nxFileLine][V-204506.a][medium][SRG-OS-000342-GPOS-00133]::[RHEL]Baseline"; ContainsLine = "active = yes"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audisp/plugins.d/au-remote.conf"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -689,7 +679,7 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource32ref { ResourceID = "[nxFileLine][V-204506.b][medium][SRG-OS-000342-GPOS-00133]::[RHEL]Baseline"; ContainsLine = "direction = out"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audisp/plugins.d/au-remote.conf"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -700,7 +690,7 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource33ref { ResourceID = "[nxFileLine][V-204506.c][medium][SRG-OS-000342-GPOS-00133]::[RHEL]Baseline"; ContainsLine = "path = /sbin/audisp-remote"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audisp/plugins.d/au-remote.conf"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -711,7 +701,7 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource34ref { ResourceID = "[nxFileLine][V-204506.d][medium][SRG-OS-000342-GPOS-00133]::[RHEL]Baseline"; ContainsLine = "type = always"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audisp/plugins.d/au-remote.conf"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -722,7 +712,7 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource35ref { ResourceID = "[nxFileLine][V-204507][medium][SRG-OS-000342-GPOS-00133]::[RHEL]Baseline"; ContainsLine = "overflow_action = syslog"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audisp/audispd.conf"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -733,16 +723,16 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource36ref { ResourceID = "[nxFileLine][V-204508][medium][SRG-OS-000342-GPOS-00133]::[RHEL]Baseline"; ContainsLine = "name_format = hostname"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audisp/audispd.conf"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "^#\\s*name_format.*$|^name_format\\s*=\\s*(?!hostname$)\\w*$"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileResource as $MSFT_nxFileResource25ref +instance of MSFT_nxFileResource as $MSFT_nxFileResource24ref { -SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::19::9::nxFile"; +SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::19::9::nxFile"; ModuleName = "nx"; ModuleVersion = "1.0"; ResourceID = "[nxFile][V-204510][medium][SRG-OS-000342-GPOS-00133]::[RHEL]Baseline"; @@ -753,7 +743,7 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource37ref { ResourceID = "[nxFileLine][V-204510][medium][SRG-OS-000342-GPOS-00133]::[RHEL]Baseline"; ContainsLine = "enable_krb5 = yes"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audisp/audisp-remote.conf"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -764,7 +754,7 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource38ref { ResourceID = "[nxFileLine][V-204511][medium][SRG-OS-000342-GPOS-00133]::[RHEL]Baseline"; ContainsLine = "disk_full_action = single"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audisp/audisp-remote.conf"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -775,7 +765,7 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource39ref { ResourceID = "[nxFileLine][V-204512][medium][SRG-OS-000342-GPOS-00133]::[RHEL]Baseline"; ContainsLine = "network_failure_action = syslog"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audisp/audisp-remote.conf"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -786,7 +776,7 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource40ref { ResourceID = "[nxFileLine][V-204514][medium][SRG-OS-000343-GPOS-00134]::[RHEL]Baseline"; ContainsLine = "space_left_action = email"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/auditd.conf"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -797,7 +787,7 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource41ref { ResourceID = "[nxFileLine][V-204515][medium][SRG-OS-000343-GPOS-00134]::[RHEL]Baseline"; ContainsLine = "action_mail_acct = root"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/auditd.conf"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -808,7 +798,7 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource42ref { ResourceID = "[nxFileLine][V-204516.a][medium][SRG-OS-000327-GPOS-00127]::[RHEL]Baseline"; ContainsLine = "-a always,exit -F arch=b32 -S execve -C uid!=euid -F euid=0 -k setuid"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -819,7 +809,7 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource43ref { ResourceID = "[nxFileLine][V-204516.b][medium][SRG-OS-000327-GPOS-00127]::[RHEL]Baseline"; ContainsLine = "-a always,exit -F arch=b64 -S execve -C uid!=euid -F euid=0 -k setuid"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -830,7 +820,7 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource44ref { ResourceID = "[nxFileLine][V-204516.c][medium][SRG-OS-000327-GPOS-00127]::[RHEL]Baseline"; ContainsLine = "-a always,exit -F arch=b32 -S execve -C gid!=egid -F egid=0 -k setgid"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -841,7 +831,7 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource45ref { ResourceID = "[nxFileLine][V-204516.d][medium][SRG-OS-000327-GPOS-00127]::[RHEL]Baseline"; ContainsLine = "-a always,exit -F arch=b64 -S execve -C gid!=egid -F egid=0 -k setgid"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -851,1318 +841,779 @@ ResourceID = "[nxFileLine][V-204516.d][medium][SRG-OS-000327-GPOS-00127]::[RHEL] instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource46ref { ResourceID = "[nxFileLine][V-204517.a][medium][SRG-OS-000064-GPOS-00033]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S chown -F auid>=1000 -F auid!=unset -k perm_mod"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + ContainsLine = "-a always,exit -F arch=b32 -S chown,fchown,fchownat,lchown -F auid>=1000 -F auid!=unset -k perm_mod"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*chown\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*perm_mod"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*chown,fchown,fchownat,lchown\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*perm_mod"; ConfigurationName = "LinuxBaseLine"; }; instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource47ref { ResourceID = "[nxFileLine][V-204517.b][medium][SRG-OS-000064-GPOS-00033]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S chown -F auid>=1000 -F auid!=unset -k perm_mod"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + ContainsLine = "-a always,exit -F arch=b64 -S chown,fchown,fchownat,lchown -F auid>=1000 -F auid!=unset -k perm_mod"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*chown\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*perm_mod"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*chown,fchown,fchownat,lchown\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*perm_mod"; ConfigurationName = "LinuxBaseLine"; }; instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource48ref { -ResourceID = "[nxFileLine][V-204518.a][medium][SRG-OS-000064-GPOS-00033]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S fchown -F auid>=1000 -F auid!=unset -k perm_mod"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; +ResourceID = "[nxFileLine][V-204521.a][medium][SRG-OS-000458-GPOS-00203]::[RHEL]Baseline"; + ContainsLine = "-a always,exit -F arch=b32 -S chmod,fchmod,fchmodat -F auid>=1000 -F auid!=unset -k perm_mod"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*fchown\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*perm_mod"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*chmod,fchmod,fchmodat\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*perm_mod"; ConfigurationName = "LinuxBaseLine"; }; instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource49ref { -ResourceID = "[nxFileLine][V-204518.b][medium][SRG-OS-000064-GPOS-00033]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S fchown -F auid>=1000 -F auid!=unset -k perm_mod"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; +ResourceID = "[nxFileLine][V-204521.b][medium][SRG-OS-000458-GPOS-00203]::[RHEL]Baseline"; + ContainsLine = "-a always,exit -F arch=b64 -S chmod,fchmod,fchmodat -F auid>=1000 -F auid!=unset -k perm_mod"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*fchown\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*perm_mod"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*chmod,fchmod,fchmodat\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*perm_mod"; ConfigurationName = "LinuxBaseLine"; }; instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource50ref { -ResourceID = "[nxFileLine][V-204519.a][medium][SRG-OS-000064-GPOS-00033]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S lchown -F auid>=1000 -F auid!=unset -k perm_mod"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; +ResourceID = "[nxFileLine][V-204524.a][medium][SRG-OS-000458-GPOS-00203]::[RHEL]Baseline"; + ContainsLine = "-a always,exit -F arch=b32 -S setxattr,fsetxattr,lsetxattr,removexattr,fremovexattr,lremovexattr -F auid>=1000 -F auid!=unset -k perm_mod"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*lchown\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*perm_mod"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*setxattr,fsetxattr,lsetxattr,removexattr,fremovexattr,lremovexattr\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*perm_mod"; ConfigurationName = "LinuxBaseLine"; }; instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource51ref { -ResourceID = "[nxFileLine][V-204519.b][medium][SRG-OS-000064-GPOS-00033]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S lchown -F auid>=1000 -F auid!=unset -k perm_mod"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; +ResourceID = "[nxFileLine][V-204524.b][medium][SRG-OS-000458-GPOS-00203]::[RHEL]Baseline"; + ContainsLine = "-a always,exit -F arch=b64 -S setxattr,fsetxattr,lsetxattr,removexattr,fremovexattr,lremovexattr -F auid>=1000 -F auid!=unset -k perm_mod"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*lchown\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*perm_mod"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*setxattr,fsetxattr,lsetxattr,removexattr,fremovexattr,lremovexattr\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*perm_mod"; ConfigurationName = "LinuxBaseLine"; }; instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource52ref { -ResourceID = "[nxFileLine][V-204520.a][medium][SRG-OS-000064-GPOS-00033]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S fchownat -F auid>=1000 -F auid!=unset -k perm_mod"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; +ResourceID = "[nxFileLine][V-204531.a][medium][SRG-OS-000064-GPOS-00033]::[RHEL]Baseline"; + ContainsLine = "-a always,exit -F arch=b32 -S creat,open,openat,open_by_handle_at,truncate,ftruncate -F exit=-EPERM -F auid>=1000 -F auid!=unset -k access"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*fchownat\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*perm_mod"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*creat,open,openat,open_by_handle_at,truncate,ftruncate\\s*-F\\s*exit\\s*=\\s*-EPERM\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*access"; ConfigurationName = "LinuxBaseLine"; }; instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource53ref { -ResourceID = "[nxFileLine][V-204520.b][medium][SRG-OS-000064-GPOS-00033]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S fchownat -F auid>=1000 -F auid!=unset -k perm_mod"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; +ResourceID = "[nxFileLine][V-204531.b][medium][SRG-OS-000064-GPOS-00033]::[RHEL]Baseline"; + ContainsLine = "-a always,exit -F arch=b32 -S creat,open,openat,open_by_handle_at,truncate,ftruncate -F exit=-EACCES -F auid>=1000 -F auid!=unset -k access"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*fchownat\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*perm_mod"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*creat,open,openat,open_by_handle_at,truncate,ftruncate\\s*-F\\s*exit\\s*=\\s*-EACCES\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*access"; ConfigurationName = "LinuxBaseLine"; }; instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource54ref { -ResourceID = "[nxFileLine][V-204521.a][medium][SRG-OS-000458-GPOS-00203]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S chmod -F auid>=1000 -F auid!=unset -k perm_mod"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; +ResourceID = "[nxFileLine][V-204531.c][medium][SRG-OS-000064-GPOS-00033]::[RHEL]Baseline"; + ContainsLine = "-a always,exit -F arch=b64 -S creat,open,openat,open_by_handle_at,truncate,ftruncate -F exit=-EPERM -F auid>=1000 -F auid!=unset -k access"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*chmod\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*perm_mod"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*creat,open,openat,open_by_handle_at,truncate,ftruncate\\s*-F\\s*exit\\s*=\\s*-EPERM\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*access"; ConfigurationName = "LinuxBaseLine"; }; instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource55ref { -ResourceID = "[nxFileLine][V-204521.b][medium][SRG-OS-000458-GPOS-00203]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S chmod -F auid>=1000 -F auid!=unset -k perm_mod"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; +ResourceID = "[nxFileLine][V-204531.d][medium][SRG-OS-000064-GPOS-00033]::[RHEL]Baseline"; + ContainsLine = "-a always,exit -F arch=b64 -S creat,open,openat,open_by_handle_at,truncate,ftruncate -F exit=-EACCES -F auid>=1000 -F auid!=unset -k access"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*chmod\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*perm_mod"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*creat,open,openat,open_by_handle_at,truncate,ftruncate\\s*-F\\s*exit\\s*=\\s*-EACCES\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*access"; ConfigurationName = "LinuxBaseLine"; }; instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource56ref { -ResourceID = "[nxFileLine][V-204522.a][medium][SRG-OS-000458-GPOS-00203]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S fchmod -F auid>=1000 -F auid!=unset -k perm_mod"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*fchmod\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*perm_mod"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource57ref -{ -ResourceID = "[nxFileLine][V-204522.b][medium][SRG-OS-000458-GPOS-00203]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S fchmod -F auid>=1000 -F auid!=unset -k perm_mod"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*fchmod\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*perm_mod"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource58ref -{ -ResourceID = "[nxFileLine][V-204523.a][medium][SRG-OS-000458-GPOS-00203]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S fchmodat -F auid>=1000 -F auid!=unset -k perm_mod"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*fchmodat\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*perm_mod"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource59ref -{ -ResourceID = "[nxFileLine][V-204523.b][medium][SRG-OS-000458-GPOS-00203]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S fchmodat -F auid>=1000 -F auid!=unset -k perm_mod"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*fchmodat\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*perm_mod"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource60ref -{ -ResourceID = "[nxFileLine][V-204524.a][medium][SRG-OS-000458-GPOS-00203]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S setxattr -F auid>=1000 -F auid!=unset -k perm_mod"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*setxattr\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*perm_mod"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource61ref -{ -ResourceID = "[nxFileLine][V-204524.b][medium][SRG-OS-000458-GPOS-00203]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S setxattr -F auid>=1000 -F auid!=unset -k perm_mod"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*setxattr\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*perm_mod"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource62ref -{ -ResourceID = "[nxFileLine][V-204525.a][medium][SRG-OS-000458-GPOS-00203]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S fsetxattr -F auid>=1000 -F auid!=unset -k perm_mod"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*fsetxattr\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*perm_mod"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource63ref -{ -ResourceID = "[nxFileLine][V-204525.b][medium][SRG-OS-000458-GPOS-00203]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S fsetxattr -F auid>=1000 -F auid!=unset -k perm_mod"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*fsetxattr\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*perm_mod"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource64ref -{ -ResourceID = "[nxFileLine][V-204526.a][medium][SRG-OS-000458-GPOS-00203]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S lsetxattr -F auid>=1000 -F auid!=unset -k perm_mod"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*lsetxattr\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*perm_mod"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource65ref -{ -ResourceID = "[nxFileLine][V-204526.b][medium][SRG-OS-000458-GPOS-00203]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S lsetxattr -F auid>=1000 -F auid!=unset -k perm_mod"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*lsetxattr\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*perm_mod"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource66ref -{ -ResourceID = "[nxFileLine][V-204527.a][medium][SRG-OS-000458-GPOS-00203]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S removexattr -F auid>=1000 -F auid!=unset -k perm_mod"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*removexattr\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*perm_mod"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource67ref -{ -ResourceID = "[nxFileLine][V-204527.b][medium][SRG-OS-000458-GPOS-00203]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S removexattr -F auid>=1000 -F auid!=unset -k perm_mod"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*removexattr\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*perm_mod"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource68ref -{ -ResourceID = "[nxFileLine][V-204528.a][medium][SRG-OS-000458-GPOS-00203]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S fremovexattr -F auid>=1000 -F auid!=unset -k perm_mod"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*fremovexattr\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*perm_mod"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource69ref -{ -ResourceID = "[nxFileLine][V-204528.b][medium][SRG-OS-000458-GPOS-00203]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S fremovexattr -F auid>=1000 -F auid!=unset -k perm_mod"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*fremovexattr\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*perm_mod"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource70ref -{ -ResourceID = "[nxFileLine][V-204529.a][medium][SRG-OS-000458-GPOS-00203]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S lremovexattr -F auid>=1000 -F auid!=unset -k perm_mod"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*lremovexattr\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*perm_mod"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource71ref -{ -ResourceID = "[nxFileLine][V-204529.b][medium][SRG-OS-000458-GPOS-00203]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S lremovexattr -F auid>=1000 -F auid!=unset -k perm_mod"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*lremovexattr\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*perm_mod"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource72ref -{ -ResourceID = "[nxFileLine][V-204530.a][medium][SRG-OS-000064-GPOS-00033]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S creat F exit=-EPERM -F auid>=1000 -F auid!=unset -k access"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*creat\\s*F\\s*exit\\s*=\\s*-EPERM\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*access"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource73ref -{ -ResourceID = "[nxFileLine][V-204530.b][medium][SRG-OS-000064-GPOS-00033]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S creat -F exit=-EACCES -F auid>=1000 -F auid!=unset -k access"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*creat\\s*-F\\s*exit\\s*=\\s*-EACCES\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*access"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource74ref -{ -ResourceID = "[nxFileLine][V-204530.c][medium][SRG-OS-000064-GPOS-00033]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S creat -F exit=-EPERM -F auid>=1000 -F auid!=unset -k access"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*creat\\s*-F\\s*exit\\s*=\\s*-EPERM\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*access"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource75ref -{ -ResourceID = "[nxFileLine][V-204530.d][medium][SRG-OS-000064-GPOS-00033]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S creat -F exit=-EACCES -F auid>=1000 -F auid!=unset -k access"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*creat\\s*-F\\s*exit\\s*=\\s*-EACCES\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*access"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource76ref -{ -ResourceID = "[nxFileLine][V-204531.a][medium][SRG-OS-000064-GPOS-00033]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S open -F exit=-EPERM -F auid>=1000 -F auid!=unset -k access"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*open\\s*-F\\s*exit\\s*=\\s*-EPERM\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*access"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource77ref -{ -ResourceID = "[nxFileLine][V-204531.b][medium][SRG-OS-000064-GPOS-00033]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S open -F exit=-EACCES -F auid>=1000 -F auid!=unset -k access"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*open\\s*-F\\s*exit\\s*=\\s*-EACCES\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*access"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource78ref -{ -ResourceID = "[nxFileLine][V-204531.c][medium][SRG-OS-000064-GPOS-00033]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S open -F exit=-EPERM -F auid>=1000 -F auid!=unset -k access"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*open\\s*-F\\s*exit\\s*=\\s*-EPERM\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*access"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource79ref -{ -ResourceID = "[nxFileLine][V-204531.d][medium][SRG-OS-000064-GPOS-00033]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S open -F exit=-EACCES -F auid>=1000 -F auid!=unset -k access"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*open\\s*-F\\s*exit\\s*=\\s*-EACCES\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*access"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource80ref -{ -ResourceID = "[nxFileLine][V-204532.a][medium][SRG-OS-000064-GPOS-00033]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S openat -F exit=-EPERM -F auid>=1000 -F auid!=unset -k access"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*openat\\s*-F\\s*exit\\s*=\\s*-EPERM\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*access"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource81ref -{ -ResourceID = "[nxFileLine][V-204532.b][medium][SRG-OS-000064-GPOS-00033]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S openat -F exit=-EACCES -F auid>=1000 -F auid!=unset -k access"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*openat\\s*-F\\s*exit\\s*=\\s*-EACCES\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*access"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource82ref -{ -ResourceID = "[nxFileLine][V-204532.c][medium][SRG-OS-000064-GPOS-00033]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S openat -F exit=-EPERM -F auid>=1000 -F auid!=unset -k access"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*openat\\s*-F\\s*exit\\s*=\\s*-EPERM\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*access"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource83ref -{ -ResourceID = "[nxFileLine][V-204532.d][medium][SRG-OS-000064-GPOS-00033]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S openat -F exit=-EACCES -F auid>=1000 -F auid!=unset -k access"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*openat\\s*-F\\s*exit\\s*=\\s*-EACCES\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*access"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource84ref -{ -ResourceID = "[nxFileLine][V-204533.a][medium][SRG-OS-000064-GPOS-00033]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S open_by_handle_at -F exit=-EPERM -F auid>=1000 -F auid!=unset -k access"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*open_by_handle_at\\s*-F\\s*exit\\s*=\\s*-EPERM\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*access"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource85ref -{ -ResourceID = "[nxFileLine][V-204533.b][medium][SRG-OS-000064-GPOS-00033]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S open_by_handle_at -F exit=-EACCES -F auid>=1000 -F auid!=unset -k access"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*open_by_handle_at\\s*-F\\s*exit\\s*=\\s*-EACCES\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*access"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource86ref -{ -ResourceID = "[nxFileLine][V-204533.c][medium][SRG-OS-000064-GPOS-00033]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S open_by_handle_at -F exit=-EPERM -F auid>=1000 -F auid!=unset -k access"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*open_by_handle_at\\s*-F\\s*exit\\s*=\\s*-EPERM\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*access"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource87ref -{ -ResourceID = "[nxFileLine][V-204533.d][medium][SRG-OS-000064-GPOS-00033]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S open_by_handle_at -F exit=-EACCES -F auid>=1000 -F auid!=unset -k access"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*open_by_handle_at\\s*-F\\s*exit\\s*=\\s*-EACCES\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*access"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource88ref -{ -ResourceID = "[nxFileLine][V-204534.a][medium][SRG-OS-000064-GPOS-00033]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S truncate -F exit=-EPERM -F auid>=1000 -F auid!=unset -k access"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*truncate\\s*-F\\s*exit\\s*=\\s*-EPERM\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*access"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource89ref -{ -ResourceID = "[nxFileLine][V-204534.b][medium][SRG-OS-000064-GPOS-00033]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S truncate -F exit=-EACCES -F auid>=1000 -F auid!=unset -k access"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*truncate\\s*-F\\s*exit\\s*=\\s*-EACCES\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*access"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource90ref -{ -ResourceID = "[nxFileLine][V-204534.c][medium][SRG-OS-000064-GPOS-00033]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S truncate -F exit=-EPERM -F auid>=1000 -F auid!=unset -k access"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*truncate\\s*-F\\s*exit\\s*=\\s*-EPERM\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*access"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource91ref -{ -ResourceID = "[nxFileLine][V-204534.d][medium][SRG-OS-000064-GPOS-00033]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S truncate -F exit=-EACCES -F auid>=1000 -F auid!=unset -k access"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*truncate\\s*-F\\s*exit\\s*=\\s*-EACCES\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*access"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource92ref -{ -ResourceID = "[nxFileLine][V-204535.a][medium][SRG-OS-000064-GPOS-00033]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S ftruncate -F exit=-EPERM -F auid>=1000 -F auid!=unset -k access"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*ftruncate\\s*-F\\s*exit\\s*=\\s*-EPERM\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*access"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource93ref -{ -ResourceID = "[nxFileLine][V-204535.b][medium][SRG-OS-000064-GPOS-00033]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S ftruncate -F exit=-EACCES -F auid>=1000 -F auid!=unset -k access"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*ftruncate\\s*-F\\s*exit\\s*=\\s*-EACCES\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*access"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource94ref -{ -ResourceID = "[nxFileLine][V-204535.c][medium][SRG-OS-000064-GPOS-00033]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S ftruncate -F exit=-EPERM -F auid>=1000 -F auid!=unset -k access"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*ftruncate\\s*-F\\s*exit\\s*=\\s*-EPERM\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*access"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource95ref -{ -ResourceID = "[nxFileLine][V-204535.d][medium][SRG-OS-000064-GPOS-00033]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S ftruncate -F exit=-EACCES -F auid>=1000 -F auid!=unset -k access"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*ftruncate\\s*-F\\s*exit\\s*=\\s*-EACCES\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*access"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource96ref -{ ResourceID = "[nxFileLine][V-204536][medium][SRG-OS-000392-GPOS-00172]::[RHEL]Baseline"; ContainsLine = "-a always,exit -F path=/usr/sbin/semanage -F auid>=1000 -F auid!=unset -k privileged-priv_change"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/sbin/semanage\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-priv_change"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource97ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource57ref { ResourceID = "[nxFileLine][V-204537][medium][SRG-OS-000392-GPOS-00172]::[RHEL]Baseline"; ContainsLine = "-a always,exit -F path=/usr/sbin/setsebool -F auid>=1000 -F auid!=unset -k privileged-priv_change"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/sbin/setsebool\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-priv_change"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource98ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource58ref { ResourceID = "[nxFileLine][V-204538][medium][SRG-OS-000392-GPOS-00172]::[RHEL]Baseline"; ContainsLine = "-a always,exit -F path=/usr/bin/chcon -F auid>=1000 -F auid!=unset -k privileged-priv_change"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/bin/chcon\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-priv_change"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource99ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource59ref { ResourceID = "[nxFileLine][V-204539][medium][SRG-OS-000392-GPOS-00172]::[RHEL]Baseline"; ContainsLine = "-a always,exit -F path=/usr/sbin/setfiles -F auid>=1000 -F auid!=unset -k privileged-priv_change"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/sbin/setfiles\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-priv_change"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource100ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource60ref { ResourceID = "[nxFileLine][V-204540][medium][SRG-OS-000392-GPOS-00172]::[RHEL]Baseline"; ContainsLine = "-w /var/run/faillock -p wa -k logins"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "#\\s*-w\\s*/var/run/faillock\\s*-p\\s*wa\\s*-k\\s*logins"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource101ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource61ref { ResourceID = "[nxFileLine][V-204541][medium][SRG-OS-000392-GPOS-00172]::[RHEL]Baseline"; ContainsLine = "-w /var/log/lastlog -p wa -k logins"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "#\\s*-w\\s*/var/log/lastlog\\s*-p\\s*wa\\s*-k\\s*logins"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource102ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource62ref { ResourceID = "[nxFileLine][V-204542][medium][SRG-OS-000042-GPOS-00020]::[RHEL]Baseline"; ContainsLine = "-a always,exit -F path=/usr/bin/passwd -F auid>=1000 -F auid!=unset -k privileged-passwd"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/bin/passwd\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-passwd"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource103ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource63ref { ResourceID = "[nxFileLine][V-204543][medium][SRG-OS-000042-GPOS-00020]::[RHEL]Baseline"; ContainsLine = "-a always,exit -F path=/usr/sbin/unix_chkpwd -F auid>=1000 -F auid!=unset -k privileged-passwd"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/sbin/unix_chkpwd\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-passwd"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource104ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource64ref { ResourceID = "[nxFileLine][V-204544][medium][SRG-OS-000042-GPOS-00020]::[RHEL]Baseline"; ContainsLine = "-a always,exit -F path=/usr/bin/gpasswd -F auid>=1000 -F auid!=unset -k privileged-passwd"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/bin/gpasswd\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-passwd"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource105ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource65ref { ResourceID = "[nxFileLine][V-204545][medium][SRG-OS-000042-GPOS-00020]::[RHEL]Baseline"; ContainsLine = "-a always,exit -F path=/usr/bin/chage -F auid>=1000 -F auid!=unset -k privileged-passwd"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/bin/chage\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-passwd"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource106ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource66ref { ResourceID = "[nxFileLine][V-204546][medium][SRG-OS-000042-GPOS-00020]::[RHEL]Baseline"; ContainsLine = "-a always,exit -F path=/usr/sbin/userhelper -F auid>=1000 -F auid!=unset -k privileged-passwd"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/sbin/userhelper\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-passwd"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource107ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource67ref { ResourceID = "[nxFileLine][V-204547][medium][SRG-OS-000037-GPOS-00015]::[RHEL]Baseline"; ContainsLine = "-a always,exit -F path=/usr/bin/su -F auid>=1000 -F auid!=unset -k privileged-priv_change"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/bin/su\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-priv_change"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource108ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource68ref { ResourceID = "[nxFileLine][V-204548][medium][SRG-OS-000037-GPOS-00015]::[RHEL]Baseline"; ContainsLine = "-a always,exit -F path=/usr/bin/sudo -F auid>=1000 -F auid!=unset -k privileged-priv_change"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/bin/sudo\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-priv_change"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource109ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource69ref { ResourceID = "[nxFileLine][V-204549.a][medium][SRG-OS-000037-GPOS-00015]::[RHEL]Baseline"; ContainsLine = "-w /etc/sudoers -p wa -k privileged-actions"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "#\\s*-w /etc/sudoers -p wa -k privileged-actions"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource110ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource70ref { ResourceID = "[nxFileLine][V-204549.b][medium][SRG-OS-000037-GPOS-00015]::[RHEL]Baseline"; ContainsLine = "-w /etc/sudoers.d/ -p wa -k privileged-actions"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "#\\s*-w /etc/sudoers.d/ -p wa -k privileged-actions"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource111ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource71ref { ResourceID = "[nxFileLine][V-204550][medium][SRG-OS-000037-GPOS-00015]::[RHEL]Baseline"; ContainsLine = "-a always,exit -F path=/usr/bin/newgrp -F auid>=1000 -F auid!=unset -k privileged-priv_change"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/bin/newgrp\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-priv_change"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource112ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource72ref { ResourceID = "[nxFileLine][V-204551][medium][SRG-OS-000037-GPOS-00015]::[RHEL]Baseline"; ContainsLine = "-a always,exit -F path=/usr/bin/chsh -F auid>=1000 -F auid!=unset -k privileged-priv_change"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/bin/chsh\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-priv_change"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource113ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource73ref { ResourceID = "[nxFileLine][V-204552.a][medium][SRG-OS-000042-GPOS-00020]::[RHEL]Baseline"; ContainsLine = "-a always,exit -F arch=b32 -S mount -F auid>=1000 -F auid!=unset -k privileged-mount"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*mount\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-mount"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource114ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource74ref { ResourceID = "[nxFileLine][V-204552.b][medium][SRG-OS-000042-GPOS-00020]::[RHEL]Baseline"; ContainsLine = "-a always,exit -F arch=b64 -S mount -F auid>=1000 -F auid!=unset -k privileged-mount"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*mount\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-mount"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource115ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource75ref { ResourceID = "[nxFileLine][V-204552.c][medium][SRG-OS-000042-GPOS-00020]::[RHEL]Baseline"; ContainsLine = "-a always,exit -F path=/usr/bin/mount -F auid>=1000 -F auid!=unset -k privileged-mount"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/bin/mount\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-mount"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource116ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource76ref { ResourceID = "[nxFileLine][V-204553][medium][SRG-OS-000042-GPOS-00020]::[RHEL]Baseline"; ContainsLine = "-a always,exit -F path=/usr/bin/umount -F auid>=1000 -F auid!=unset -k privileged-mount"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/bin/umount\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-mount"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource117ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource77ref { ResourceID = "[nxFileLine][V-204554][medium][SRG-OS-000042-GPOS-00020]::[RHEL]Baseline"; ContainsLine = "-a always,exit -F path=/usr/sbin/postdrop -F auid>=1000 -F auid!=unset -k privileged-postfix"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/sbin/postdrop\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-postfix"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource118ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource78ref { ResourceID = "[nxFileLine][V-204555][medium][SRG-OS-000042-GPOS-00020]::[RHEL]Baseline"; ContainsLine = "-a always,exit -F path=/usr/sbin/postqueue -F auid>=1000 -F auid!=unset -k privileged-postfix"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/sbin/postqueue\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-postfix"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource119ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource79ref { ResourceID = "[nxFileLine][V-204556][medium][SRG-OS-000042-GPOS-00020]::[RHEL]Baseline"; ContainsLine = "-a always,exit -F path=/usr/libexec/openssh/ssh-keysign -F auid>=1000 -F auid!=unset -k privileged-ssh"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/libexec/openssh/ssh-keysign\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-ssh"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource120ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource80ref { ResourceID = "[nxFileLine][V-204557][medium][SRG-OS-000042-GPOS-00020]::[RHEL]Baseline"; ContainsLine = "-a always,exit -F path=/usr/bin/crontab -F auid>=1000 -F auid!=unset -k privileged-cron"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/bin/crontab\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-cron"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource121ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource81ref { ResourceID = "[nxFileLine][V-204558][medium][SRG-OS-000471-GPOS-00215]::[RHEL]Baseline"; ContainsLine = "-a always,exit -F path=/usr/sbin/pam_timestamp_check -F auid>=1000 -F auid!=unset -k privileged-pam"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/sbin/pam_timestamp_check\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-pam"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource122ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource82ref { ResourceID = "[nxFileLine][V-204559.a][medium][SRG-OS-000471-GPOS-00216]::[RHEL]Baseline"; ContainsLine = "-a always,exit -F arch=b32 -S create_module -k module-change"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*create_module\\s*-k\\s*module-change"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource123ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource83ref { ResourceID = "[nxFileLine][V-204559.b][medium][SRG-OS-000471-GPOS-00216]::[RHEL]Baseline"; ContainsLine = "-a always,exit -F arch=b64 -S create_module -k module-change"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*create_module\\s*-k\\s*module-change"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource124ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource84ref { ResourceID = "[nxFileLine][V-204560.a][medium][SRG-OS-000471-GPOS-00216]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S init_module -k module-change"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + ContainsLine = "-a always,exit -F arch=b32 -S init_module,finit_module -k modulechange"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*init_module\\s*-k\\s*module-change"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*init_module,finit_module\\s*-k\\s*modulechange"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource125ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource85ref { ResourceID = "[nxFileLine][V-204560.b][medium][SRG-OS-000471-GPOS-00216]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S init_module -k module-change"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + ContainsLine = "-a always,exit -F arch=b64 -S init_module,finit_module -k modulechange"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*init_module\\s*-k\\s*module-change"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*init_module,finit_module\\s*-k\\s*modulechange"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource126ref -{ -ResourceID = "[nxFileLine][V-204561.a][medium][SRG-OS-000471-GPOS-00216]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S finit_module -k module-change"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*finit_module\\s*-k\\s*module-change"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource127ref -{ -ResourceID = "[nxFileLine][V-204561.b][medium][SRG-OS-000471-GPOS-00216]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S finit_module -k module-change"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*finit_module\\s*-k\\s*module-change"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource128ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource86ref { ResourceID = "[nxFileLine][V-204562.a][medium][SRG-OS-000471-GPOS-00216]::[RHEL]Baseline"; ContainsLine = "-a always,exit -F arch=b32 -S delete_module -k module-change"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*delete_module\\s*-k\\s*module-change"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource129ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource87ref { ResourceID = "[nxFileLine][V-204562.b][medium][SRG-OS-000471-GPOS-00216]::[RHEL]Baseline"; ContainsLine = "-a always,exit -F arch=b64 -S delete_module -k module-change"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*delete_module\\s*-k\\s*module-change"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource130ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource88ref { ResourceID = "[nxFileLine][V-204563][medium][SRG-OS-000471-GPOS-00216]::[RHEL]Baseline"; ContainsLine = "-w /usr/bin/kmod -p x -F auid!=unset -k module-change"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "#\\s*-w\\s*/usr/bin/kmod\\s*-p\\s*x\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*module-change"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource131ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource89ref { ResourceID = "[nxFileLine][V-204564][medium][SRG-OS-000004-GPOS-00004]::[RHEL]Baseline"; ContainsLine = "-w /etc/passwd -p wa -k identity"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "#\\s*-w\\s*/etc/passwd\\s*-p\\s*wa\\s*-k\\s*identity"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource132ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource90ref { ResourceID = "[nxFileLine][V-204565][medium][SRG-OS-000004-GPOS-00004]::[RHEL]Baseline"; ContainsLine = "-w /etc/group -p wa -k identity"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "#\\s*-w\\s*/etc/group\\s*-p\\s*wa\\s*-k\\s*identity"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource133ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource91ref { ResourceID = "[nxFileLine][V-204566][medium][SRG-OS-000004-GPOS-00004]::[RHEL]Baseline"; ContainsLine = "-w /etc/gshadow -p wa -k identity"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "#\\s*-w\\s*/etc/gshadow\\s*-p\\s*wa\\s*-k\\s*identity"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource134ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource92ref { ResourceID = "[nxFileLine][V-204567][medium][SRG-OS-000004-GPOS-00004]::[RHEL]Baseline"; ContainsLine = "-w /etc/shadow -p wa -k identity"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "#\\s*-w\\s*/etc/shadow\\s*-p\\s*wa\\s*-k\\s*identity"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource135ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource93ref { ResourceID = "[nxFileLine][V-204568][medium][SRG-OS-000004-GPOS-00004]::[RHEL]Baseline"; ContainsLine = "-w /etc/security/opasswd -p wa -k identity"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "#\\s*-w\\s*/etc/security/opasswd\\s*-p\\s*wa\\s*-k\\s*identity"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource136ref -{ -ResourceID = "[nxFileLine][V-204569.a][medium][SRG-OS-000466-GPOS-00210]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S rename -F auid>=1000 -F auid!=unset -k delete"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*rename\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*delete"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource137ref -{ -ResourceID = "[nxFileLine][V-204569.b][medium][SRG-OS-000466-GPOS-00210]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S rename -F auid>=1000 -F auid!=unset -k delete"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*rename\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*delete"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource138ref -{ -ResourceID = "[nxFileLine][V-204570.a][medium][SRG-OS-000466-GPOS-00210]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S renameat -F auid>=1000 -F auid!=unset -k delete"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*renameat\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*delete"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource139ref -{ -ResourceID = "[nxFileLine][V-204570.b][medium][SRG-OS-000466-GPOS-00210]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S renameat -F auid>=1000 -F auid!=unset -k delete"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*renameat\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*delete"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource140ref -{ -ResourceID = "[nxFileLine][V-204571.a][medium][SRG-OS-000466-GPOS-00210]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S rmdir -F auid>=1000 -F auid!=unset -k delete"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*rmdir\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*delete"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource141ref -{ -ResourceID = "[nxFileLine][V-204571.b][medium][SRG-OS-000466-GPOS-00210]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S rmdir -F auid>=1000 -F auid!=unset -k delete"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*rmdir\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*delete"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource142ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource94ref { ResourceID = "[nxFileLine][V-204572.a][medium][SRG-OS-000466-GPOS-00210]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S unlink -F auid>=1000 -F auid!=unset -k delete"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + ContainsLine = "-a always,exit -F arch=b32 -S unlink,unlinkat,rename,renameat,rmdir -F auid>=1000 -F auid!=unset -k delete"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*unlink\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*delete"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*unlink,unlinkat,rename,renameat,rmdir\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*delete"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource143ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource95ref { ResourceID = "[nxFileLine][V-204572.b][medium][SRG-OS-000466-GPOS-00210]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S unlink -F auid>=1000 -F auid!=unset -k delete"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + ContainsLine = "-a always,exit -F arch=b64 -S unlink,unlinkat,rename,renameat,rmdir -F auid>=1000 -F auid!=unset -k delete"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*unlink\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*delete"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*unlink,unlinkat,rename,renameat,rmdir\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*delete"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource144ref -{ -ResourceID = "[nxFileLine][V-204573.a][medium][SRG-OS-000466-GPOS-00210]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S unlinkat -F auid>=1000 -F auid!=unset -k delete"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*unlinkat\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*delete"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource145ref -{ -ResourceID = "[nxFileLine][V-204573.b][medium][SRG-OS-000466-GPOS-00210]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S unlinkat -F auid>=1000 -F auid!=unset -k delete"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*unlinkat\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*delete"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource146ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource96ref { ResourceID = "[nxFileLine][V-204578][medium][SRG-OS-000033-GPOS-00014]::[RHEL]Baseline"; ContainsLine = "Ciphers aes256-ctr,aes192-ctr,aes128-ctr"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/ssh/sshd_config"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "^#\\s*Ciphers.*|^\\s*Ciphers\\s*aes128-ctr.*|^\\s*Ciphers\\s*aes192-ctr.*"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource147ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource97ref { ResourceID = "[nxFileLine][V-204579.b][medium][SRG-OS-000163-GPOS-00072]::[RHEL]Baseline"; ContainsLine = "declare -xr TMOUT=900"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/profile.d/tmout.sh"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "^\\s*TMOUT\\s*=\\s*[0-8]?[0-9]?[0-9]?$|^#\\s*TMOUT.*"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource148ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource98ref { ResourceID = "[nxFileLine][V-204580][medium][SRG-OS-000023-GPOS-00006]::[RHEL]Baseline"; ContainsLine = "banner /etc/issue"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/ssh/sshd_config"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "#\\s*banner\\s*/etc/issue"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource149ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource99ref { ResourceID = "[nxFileLine][V-204587][medium][SRG-OS-000163-GPOS-00072]::[RHEL]Baseline"; ContainsLine = "ClientAliveInterval 600"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/ssh/sshd_config"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "^\\s*ClientAliveInterval\\s*[0-5]?[0-9]?[0-9]?\\s*$|^#\\s*ClientAliveInterval.*|^\\s*ClientAliveInterval\\s*$"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource150ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource100ref { ResourceID = "[nxFileLine][V-204588][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; ContainsLine = "RhostsRSAAuthentication no"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/ssh/sshd_config"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "^#\\s*RhostsRSAAuthentication.*$|^RhostsRSAAuthentication\\s*(?!no\\b)\\w*$"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource151ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource101ref { ResourceID = "[nxFileLine][V-204589][medium][SRG-OS-000163-GPOS-00072]::[RHEL]Baseline"; ContainsLine = "ClientAliveCountMax 0"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/ssh/sshd_config"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "^#\\s*ClientAliveCountMax.*$|^ClientAliveCountMax\\s*(?!0\\b)\\w*$"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource152ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource102ref { ResourceID = "[nxFileLine][V-204590][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; ContainsLine = "IgnoreRhosts yes"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/ssh/sshd_config"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "^#\\s*IgnoreRhosts.*$|^IgnoreRhosts\\s*(?!yes\\b)\\w*$"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource153ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource103ref { ResourceID = "[nxFileLine][V-204591][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; ContainsLine = "PrintLastLog yes"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/ssh/sshd_config"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "^#\\s*PrintLastLog.*$|^PrintLastLog\\s*(?!yes\\b)\\w*$"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource154ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource104ref { ResourceID = "[nxFileLine][V-204592][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; ContainsLine = "PermitRootLogin no"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/ssh/sshd_config"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "^#\\s*PermitRootLogin.*$|^PermitRootLogin\\s*(?!no\\b)\\w*$"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource155ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource105ref { ResourceID = "[nxFileLine][V-204593][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; ContainsLine = "IgnoreUserKnownHosts yes"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/ssh/sshd_config"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "^#\\s*IgnoreUserKnownHosts.*$|^IgnoreUserKnownHosts\\s*(?!yes\\b)\\w*$"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource156ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource106ref { ResourceID = "[nxFileLine][V-204594][high][SRG-OS-000074-GPOS-00042]::[RHEL]Baseline"; ContainsLine = "Protocol 2"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/ssh/sshd_config"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "^#\\s*Protocol.*$|^Protocol\\s*(?!2\\b)\\w*$"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource157ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource107ref { ResourceID = "[nxFileLine][V-204595][medium][SRG-OS-000250-GPOS-00093]::[RHEL]Baseline"; ContainsLine = "MACs hmac-sha2-512,hmac-sha2-256"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/ssh/sshd_config"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "#\\s*MACs.*|\\s*MACs\\s*hmac-(?!sha2-512).*"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource158ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource108ref { ResourceID = "[nxFileLine][V-204598][medium][SRG-OS-000364-GPOS-00151]::[RHEL]Baseline"; ContainsLine = "GSSAPIAuthentication no"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/ssh/sshd_config"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "^#\\s*GSSAPIAuthentication.*$|^GSSAPIAuthentication\\s*(?!no\\b)\\w*$"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource159ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource109ref { ResourceID = "[nxFileLine][V-204599][medium][SRG-OS-000364-GPOS-00151]::[RHEL]Baseline"; ContainsLine = "KerberosAuthentication no"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/ssh/sshd_config"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "^#\\s*KerberosAuthentication.*$|^KerberosAuthentication\\s*(?!no\\b)\\w*$"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource160ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource110ref { ResourceID = "[nxFileLine][V-204600][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; ContainsLine = "StrictModes yes"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/ssh/sshd_config"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "^#\\s*StrictModes.*$|^StrictModes\\s*(?!yes\\b)\\w*$"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource161ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource111ref { ResourceID = "[nxFileLine][V-204601][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; ContainsLine = "UsePrivilegeSeparation sandbox"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/ssh/sshd_config"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "^#\\s*UsePrivilegeSeparation.*$|^UsePrivilegeSeparation\\s*(?!sandbox\\b)\\w*$"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource162ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource112ref { ResourceID = "[nxFileLine][V-204602][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; ContainsLine = "Compression delayed"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/ssh/sshd_config"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "^#\\s*Compression.*$|^Compression\\s*(?!delayed\\b)\\w*$"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource163ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource113ref { ResourceID = "[nxFileLine][V-204622][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; ContainsLine = "X11Forwarding no"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/ssh/sshd_config"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "^#\\s*X11Forwarding.*$|^X11Forwarding\\s*(?!no\\b)\\w*$"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource164ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource114ref { ResourceID = "[nxFileLine][V-233307][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; ContainsLine = "X11UseLocalhost yes"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/ssh/sshd_config"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "#\\s*X11UseLocalhost\\s*yes"; ConfigurationName = "LinuxBaseLine"; }; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource115ref +{ +ResourceID = "[nxFileLine][V-250314][medium][SRG-OS-000324-GPOS-00125]::[RHEL]Baseline"; + ContainsLine = "%wheel ALL=(ALL) TYPE=sysadm_t ROLE=sysadm_r ALL"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/sudoers"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*%wheel\\s*ALL\\s*=\\s*(ALL)\\s*TYPE\\s*=\\s*sysadm_t\\s*ROLE\\s*=\\s*sysadm_r\\s*ALL"; + ConfigurationName = "LinuxBaseLine"; +}; instance of MSFT_nxServiceResource as $MSFT_nxServiceResource1ref { ResourceID = "[nxService][V-204451][medium][SRG-OS-000114-GPOS-00059]::[RHEL]Baseline"; Controller = "systemd"; Enabled = False; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxService.ps1::13::9::nxService"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxService.ps1::13::9::nxService"; Name = "autofs"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -2173,7 +1624,7 @@ instance of MSFT_nxServiceResource as $MSFT_nxServiceResource2ref ResourceID = "[nxService][V-204492][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; Controller = "systemd"; Enabled = False; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxService.ps1::13::9::nxService"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxService.ps1::13::9::nxService"; Name = "kdump"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -2185,7 +1636,7 @@ ResourceID = "[nxService][V-204503][medium][SRG-OS-000038-GPOS-00016]::[RHEL]Bas Controller = "systemd"; State = "Running"; Enabled = True; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxService.ps1::22::9::nxService"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxService.ps1::22::9::nxService"; Name = "auditd"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -2197,7 +1648,7 @@ ResourceID = "[nxService][V-204586][medium][SRG-OS-000423-GPOS-00187]::[RHEL]Bas Controller = "systemd"; State = "Running"; Enabled = True; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxService.ps1::22::9::nxService"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxService.ps1::22::9::nxService"; Name = "sshd"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -2209,7 +1660,7 @@ ResourceID = "[nxService][V-204604.b][medium][SRG-OS-000480-GPOS-00227]::[RHEL]B Controller = "systemd"; State = "Running"; Enabled = True; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxService.ps1::22::9::nxService"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxService.ps1::22::9::nxService"; Name = "firewalld"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -2220,7 +1671,7 @@ instance of MSFT_nxScriptResource as $MSFT_nxScriptResource1ref ResourceID = "[nxScript][V-204399.b][medium][[Skip] SRG-OS-000029-GPOS-00010]::[RHEL]Baseline"; GetScript = "#!/bin/bash\necho [V-204399.b][medium][[Skip] SRG-OS-000029-GPOS-00010]"; TestScript = "#!/bin/bash\nexit 0"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxScript.skip.ps1::10::5::nxScript"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxScript.skip.ps1::10::5::nxScript"; SetScript = "#!/bin/bash"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -2231,7 +1682,7 @@ instance of MSFT_nxScriptResource as $MSFT_nxScriptResource2ref ResourceID = "[nxScript][V-204400][medium][[Skip] SRG-OS-000029-GPOS-00010]::[RHEL]Baseline"; GetScript = "#!/bin/bash\necho [V-204400][medium][[Skip] SRG-OS-000029-GPOS-00010]"; TestScript = "#!/bin/bash\nexit 0"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxScript.skip.ps1::10::5::nxScript"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxScript.skip.ps1::10::5::nxScript"; SetScript = "#!/bin/bash"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -2242,7 +1693,7 @@ instance of MSFT_nxScriptResource as $MSFT_nxScriptResource3ref ResourceID = "[nxScript][V-204403][medium][[Skip] SRG-OS-000029-GPOS-00010]::[RHEL]Baseline"; GetScript = "#!/bin/bash\necho [V-204403][medium][[Skip] SRG-OS-000029-GPOS-00010]"; TestScript = "#!/bin/bash\nexit 0"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxScript.skip.ps1::10::5::nxScript"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxScript.skip.ps1::10::5::nxScript"; SetScript = "#!/bin/bash"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -2253,7 +1704,7 @@ instance of MSFT_nxScriptResource as $MSFT_nxScriptResource4ref ResourceID = "[nxScript][V-204509][medium][[Skip] SRG-OS-000342-GPOS-00133]::[RHEL]Baseline"; GetScript = "#!/bin/bash\necho [V-204509][medium][[Skip] SRG-OS-000342-GPOS-00133]"; TestScript = "#!/bin/bash\nexit 0"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxScript.skip.ps1::10::5::nxScript"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxScript.skip.ps1::10::5::nxScript"; SetScript = "#!/bin/bash"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -2264,7 +1715,7 @@ instance of MSFT_nxScriptResource as $MSFT_nxScriptResource5ref ResourceID = "[nxScript][V-204513][medium][[Skip] SRG-OS-000343-GPOS-00134]::[RHEL]Baseline"; GetScript = "#!/bin/bash\necho [V-204513][medium][[Skip] SRG-OS-000343-GPOS-00134]"; TestScript = "#!/bin/bash\nexit 0"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxScript.skip.ps1::10::5::nxScript"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxScript.skip.ps1::10::5::nxScript"; SetScript = "#!/bin/bash"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -2275,7 +1726,7 @@ instance of MSFT_nxScriptResource as $MSFT_nxScriptResource6ref ResourceID = "[nxScript][V-204623][medium][[Skip] SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; GetScript = "#!/bin/bash\necho [V-204623][medium][[Skip] SRG-OS-000480-GPOS-00227]"; TestScript = "#!/bin/bash\nexit 0"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxScript.skip.ps1::10::5::nxScript"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxScript.skip.ps1::10::5::nxScript"; SetScript = "#!/bin/bash"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -2286,7 +1737,7 @@ instance of MSFT_nxScriptResource as $MSFT_nxScriptResource7ref ResourceID = "[nxScript][V-244557][medium][[Skip] SRG-OS-000080-GPOS-00048]::[RHEL]Baseline"; GetScript = "#!/bin/bash\necho [V-244557][medium][[Skip] SRG-OS-000080-GPOS-00048]"; TestScript = "#!/bin/bash\nexit 0"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxScript.skip.ps1::10::5::nxScript"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxScript.skip.ps1::10::5::nxScript"; SetScript = "#!/bin/bash"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -2297,7 +1748,7 @@ instance of MSFT_nxScriptResource as $MSFT_nxScriptResource8ref ResourceID = "[nxScript][V-244558][medium][[Skip] SRG-OS-000080-GPOS-00048]::[RHEL]Baseline"; GetScript = "#!/bin/bash\necho [V-244558][medium][[Skip] SRG-OS-000080-GPOS-00048]"; TestScript = "#!/bin/bash\nexit 0"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxScript.skip.ps1::10::5::nxScript"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxScript.skip.ps1::10::5::nxScript"; SetScript = "#!/bin/bash"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -2308,7 +1759,7 @@ instance of MSFT_nxScriptResource as $MSFT_nxScriptResource9ref ResourceID = "[nxScript][V-204399.a][medium][[Skip] SRG-OS-000029-GPOS-00010]::[RHEL]Baseline"; GetScript = "#!/bin/bash\necho [V-204399.a][medium][[Skip] SRG-OS-000029-GPOS-00010]"; TestScript = "#!/bin/bash\nexit 0"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxScript.skip.ps1::10::5::nxScript"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxScript.skip.ps1::10::5::nxScript"; SetScript = "#!/bin/bash"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -2325,7 +1776,7 @@ instance of OMI_ConfigurationDocument Author="Microsoft"; - GenerationDate="01/31/2022 17:13:26"; + GenerationDate="05/04/2022 09:09:33"; GenerationHost="Microsoft"; diff --git a/stig/linux/config/RHEL77.mof b/stig/linux/config/RHEL77.mof index 778479b..667f978 100644 --- a/stig/linux/config/RHEL77.mof +++ b/stig/linux/config/RHEL77.mof @@ -1,7 +1,7 @@ /* @TargetNode='RHEL77' @GeneratedBy=Microsoft -@GenerationDate=01/31/2022 17:13:26 +@GenerationDate=05/04/2022 09:09:33 @GenerationHost=Microsoft */ @@ -9,7 +9,7 @@ instance of MSFT_nxPackageResource as $MSFT_nxPackageResource1ref { ResourceID = "[nxPackage][V-204442][high][SRG-OS-000095-GPOS-00049]::[RHEL]Baseline"; Ensure = "Absent"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxPackage.ps1::8::5::nxPackage"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxPackage.ps1::8::5::nxPackage"; Name = "rsh-server"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -19,7 +19,7 @@ instance of MSFT_nxPackageResource as $MSFT_nxPackageResource2ref { ResourceID = "[nxPackage][V-204443][high][SRG-OS-000095-GPOS-00049]::[RHEL]Baseline"; Ensure = "Absent"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxPackage.ps1::8::5::nxPackage"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxPackage.ps1::8::5::nxPackage"; Name = "ypserv"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -29,7 +29,7 @@ instance of MSFT_nxPackageResource as $MSFT_nxPackageResource3ref { ResourceID = "[nxPackage][V-204497][high][SRG-OS-000033-GPOS-00014]::[RHEL]Baseline"; Ensure = "Present"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxPackage.ps1::8::5::nxPackage"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxPackage.ps1::8::5::nxPackage"; Name = "dracut-fips"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -39,7 +39,7 @@ instance of MSFT_nxPackageResource as $MSFT_nxPackageResource4ref { ResourceID = "[nxPackage][V-204498][low][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; Ensure = "Present"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxPackage.ps1::8::5::nxPackage"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxPackage.ps1::8::5::nxPackage"; Name = "aide"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -49,7 +49,7 @@ instance of MSFT_nxPackageResource as $MSFT_nxPackageResource5ref { ResourceID = "[nxPackage][V-204502][high][SRG-OS-000095-GPOS-00049]::[RHEL]Baseline"; Ensure = "Absent"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxPackage.ps1::8::5::nxPackage"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxPackage.ps1::8::5::nxPackage"; Name = "telnet-server"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -59,7 +59,7 @@ instance of MSFT_nxPackageResource as $MSFT_nxPackageResource6ref { ResourceID = "[nxPackage][V-204585][medium][SRG-OS-000423-GPOS-00187]::[RHEL]Baseline"; Ensure = "Present"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxPackage.ps1::8::5::nxPackage"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxPackage.ps1::8::5::nxPackage"; Name = "openssh-server"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -69,7 +69,7 @@ instance of MSFT_nxPackageResource as $MSFT_nxPackageResource7ref { ResourceID = "[nxPackage][V-204604.a][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; Ensure = "Present"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxPackage.ps1::8::5::nxPackage"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxPackage.ps1::8::5::nxPackage"; Name = "firewalld"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -79,7 +79,7 @@ instance of MSFT_nxPackageResource as $MSFT_nxPackageResource8ref { ResourceID = "[nxPackage][V-204620][high][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; Ensure = "Absent"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxPackage.ps1::8::5::nxPackage"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxPackage.ps1::8::5::nxPackage"; Name = "vsftpd"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -89,7 +89,7 @@ instance of MSFT_nxPackageResource as $MSFT_nxPackageResource9ref { ResourceID = "[nxPackage][V-204621][high][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; Ensure = "Absent"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxPackage.ps1::8::5::nxPackage"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxPackage.ps1::8::5::nxPackage"; Name = "tftp-server"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -99,7 +99,7 @@ instance of MSFT_nxPackageResource as $MSFT_nxPackageResource10ref { ResourceID = "[nxPackage][V-204631][medium][SRG-OS-000375-GPOS-00160]::[RHEL]Baseline"; Ensure = "Present"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxPackage.ps1::8::5::nxPackage"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxPackage.ps1::8::5::nxPackage"; Name = "pam_pkcs11"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -111,7 +111,7 @@ ResourceID = "[nxFile][V-204395][medium][SRG-OS-000023-GPOS-00006]::[RHEL]Baseli Contents = "You are accessing a U.S. Government (USG) Information System (IS) that is provided for USG-authorized use only.\n\nBy using this IS (which includes any device attached to this IS), you consent to the following conditions:\n\n-The USG routinely intercepts and monitors communications on this IS for purposes including, but not limited to, penetration testing, COMSEC monitoring, network operations and defense, personnel misconduct (PM), law enforcement (LE), and counterintelligence (CI) investigations.\n\n-At any time, the USG may inspect and seize data stored on this IS.\n\n-Communications using, or data stored on, this IS are not private, are subject to routine monitoring, interception, and search, and may be disclosed or used for any USG-authorized purpose.\n\n-This IS includes security measures (e.g., authentication and access controls) to protect USG interests--not for your personal benefit or privacy.\n\n-Notwithstanding the above, using this IS does not constitute consent to PM, LE or CI investigative searching or monitoring of the content of privileged communications, or work product, related to personal representation or services by attorneys, psychotherapists, or clergy, and their assistants. Such communications and work product are private and confidential. See User Agreement for details."; DestinationPath = "/etc/issue"; ModuleName = "nx"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; ModuleVersion = "1.0"; ConfigurationName = "LinuxBaseLine"; }; @@ -121,7 +121,7 @@ ResourceID = "[nxFile][V-204449.a][medium][SRG-OS-000114-GPOS-00059]::[RHEL]Base Contents = ""; DestinationPath = "/etc/modprobe.d/usb-storage.conf"; ModuleName = "nx"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; ModuleVersion = "1.0"; ConfigurationName = "LinuxBaseLine"; }; @@ -131,7 +131,7 @@ ResourceID = "[nxFile][V-204449.b][medium][SRG-OS-000114-GPOS-00059]::[RHEL]Base Contents = ""; DestinationPath = "/etc/modprobe.d/blacklist.conf"; ModuleName = "nx"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; ModuleVersion = "1.0"; ConfigurationName = "LinuxBaseLine"; }; @@ -141,7 +141,7 @@ ResourceID = "[nxFile][V-204450.a][medium][SRG-OS-000378-GPOS-00163]::[RHEL]Base Contents = ""; DestinationPath = "/etc/modprobe.d/dccp.conf"; ModuleName = "nx"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; ModuleVersion = "1.0"; ConfigurationName = "LinuxBaseLine"; }; @@ -151,7 +151,7 @@ ResourceID = "[nxFile][V-204576][low][SRG-OS-000027-GPOS-00008]::[RHEL]Baseline" Contents = "* hard maxlogins 10"; DestinationPath = "/etc/security/limits.d/204576-powerstig.conf"; ModuleName = "nx"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; ModuleVersion = "1.0"; ConfigurationName = "LinuxBaseLine"; }; @@ -161,7 +161,7 @@ ResourceID = "[nxFile][V-204579.a][medium][SRG-OS-000163-GPOS-00072]::[RHEL]Base Contents = ""; DestinationPath = "/etc/profile.d/tmout.sh"; ModuleName = "nx"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; ModuleVersion = "1.0"; ConfigurationName = "LinuxBaseLine"; }; @@ -171,7 +171,7 @@ ResourceID = "[nxFile][V-204584][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseli Contents = "kernel.randomize_va_space = 2"; DestinationPath = "/etc/sysctl.d/204584-powerstig.conf"; ModuleName = "nx"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; ModuleVersion = "1.0"; ConfigurationName = "LinuxBaseLine"; }; @@ -181,7 +181,7 @@ ResourceID = "[nxFile][V-204609][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseli Contents = "net.ipv4.conf.all.accept_source_route = 0"; DestinationPath = "/etc/sysctl.d/204609-powerstig.conf"; ModuleName = "nx"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; ModuleVersion = "1.0"; ConfigurationName = "LinuxBaseLine"; }; @@ -191,7 +191,7 @@ ResourceID = "[nxFile][V-204610][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseli Contents = "net.ipv4.conf.all.rp_filter = 1"; DestinationPath = "/etc/sysctl.d/204610-powerstig.conf"; ModuleName = "nx"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; ModuleVersion = "1.0"; ConfigurationName = "LinuxBaseLine"; }; @@ -201,7 +201,7 @@ ResourceID = "[nxFile][V-204611][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseli Contents = "net.ipv4.conf.default.rp_filter = 1"; DestinationPath = "/etc/sysctl.d/204611-powerstig.conf"; ModuleName = "nx"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; ModuleVersion = "1.0"; ConfigurationName = "LinuxBaseLine"; }; @@ -211,7 +211,7 @@ ResourceID = "[nxFile][V-204612][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseli Contents = "net.ipv4.conf.default.accept_source_route = 0"; DestinationPath = "/etc/sysctl.d/204612-powerstig.conf"; ModuleName = "nx"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; ModuleVersion = "1.0"; ConfigurationName = "LinuxBaseLine"; }; @@ -221,7 +221,7 @@ ResourceID = "[nxFile][V-204613][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseli Contents = "net.ipv4.icmp_echo_ignore_broadcasts = 1"; DestinationPath = "/etc/sysctl.d/204613-powerstig.conf"; ModuleName = "nx"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; ModuleVersion = "1.0"; ConfigurationName = "LinuxBaseLine"; }; @@ -231,7 +231,7 @@ ResourceID = "[nxFile][V-204614][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseli Contents = "net.ipv4.conf.default.accept_redirects = 0"; DestinationPath = "/etc/sysctl.d/204614-powerstig.conf"; ModuleName = "nx"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; ModuleVersion = "1.0"; ConfigurationName = "LinuxBaseLine"; }; @@ -241,7 +241,7 @@ ResourceID = "[nxFile][V-204615][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseli Contents = "net.ipv4.conf.all.accept_redirects = 0"; DestinationPath = "/etc/sysctl.d/204615-powerstig.conf"; ModuleName = "nx"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; ModuleVersion = "1.0"; ConfigurationName = "LinuxBaseLine"; }; @@ -251,7 +251,7 @@ ResourceID = "[nxFile][V-204616][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseli Contents = "net.ipv4.conf.default.send_redirects = 0"; DestinationPath = "/etc/sysctl.d/204616-powerstig.conf"; ModuleName = "nx"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; ModuleVersion = "1.0"; ConfigurationName = "LinuxBaseLine"; }; @@ -261,7 +261,7 @@ ResourceID = "[nxFile][V-204617][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseli Contents = "net.ipv4.conf.all.send_redirects = 0"; DestinationPath = "/etc/sysctl.d/204617-powerstig.conf"; ModuleName = "nx"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; ModuleVersion = "1.0"; ConfigurationName = "LinuxBaseLine"; }; @@ -271,7 +271,7 @@ ResourceID = "[nxFile][V-204625][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseli Contents = "net.ipv4.ip_forward = 0"; DestinationPath = "/etc/sysctl.d/204625-powerstig.conf"; ModuleName = "nx"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; ModuleVersion = "1.0"; ConfigurationName = "LinuxBaseLine"; }; @@ -281,7 +281,7 @@ ResourceID = "[nxFile][V-204630][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseli Contents = "net.ipv6.conf.all.accept_source_route = 0"; DestinationPath = "/etc/sysctl.d/204630-powerstig.conf"; ModuleName = "nx"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; ModuleVersion = "1.0"; ConfigurationName = "LinuxBaseLine"; }; @@ -291,7 +291,7 @@ ResourceID = "[nxFile][V-237634.a][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Base Contents = "Defaults !targetpw"; DestinationPath = "/etc/sudoers.d/237634a-powerstig.conf"; ModuleName = "nx"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; ModuleVersion = "1.0"; ConfigurationName = "LinuxBaseLine"; }; @@ -301,7 +301,7 @@ ResourceID = "[nxFile][V-237634.b][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Base Contents = "Defaults !rootpw"; DestinationPath = "/etc/sudoers.d/237634b-powerstig.conf"; ModuleName = "nx"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; ModuleVersion = "1.0"; ConfigurationName = "LinuxBaseLine"; }; @@ -311,7 +311,7 @@ ResourceID = "[nxFile][V-237634.c][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Base Contents = "Defaults !runaspw"; DestinationPath = "/etc/sudoers.d/237634c-powerstig.conf"; ModuleName = "nx"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; ModuleVersion = "1.0"; ConfigurationName = "LinuxBaseLine"; }; @@ -321,17 +321,7 @@ ResourceID = "[nxFile][V-237635][medium][SRG-OS-000373-GPOS-00156]::[RHEL]Baseli Contents = "Defaults timestamp_timeout=0"; DestinationPath = "/etc/sudoers.d/237635-powerstig.conf"; ModuleName = "nx"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; - ModuleVersion = "1.0"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileResource as $MSFT_nxFileResource23ref -{ -ResourceID = "[nxFile][V-250314][medium][SRG-OS-000324-GPOS-00125]::[RHEL]Baseline"; - Contents = "%wheel ALL=(ALL) TYPE=sysadm_t ROLE=sysadm_r ALL"; - DestinationPath = "/etc/sudoers.d/250314-powerstig.conf"; - ModuleName = "nx"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; ModuleVersion = "1.0"; ConfigurationName = "LinuxBaseLine"; }; @@ -339,7 +329,7 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource1ref { ResourceID = "[nxFileLine][V-204405][medium][SRG-OS-000069-GPOS-00037]::[RHEL]Baseline"; ContainsLine = "password substack system-auth"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/pam.d/passwd"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -350,7 +340,7 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource2ref { ResourceID = "[nxFileLine][V-204407][medium][SRG-OS-000069-GPOS-00037]::[RHEL]Baseline"; ContainsLine = "ucredit = -1"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/security/pwquality.conf"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -361,7 +351,7 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource3ref { ResourceID = "[nxFileLine][V-204408][medium][SRG-OS-000070-GPOS-00038]::[RHEL]Baseline"; ContainsLine = "lcredit = -1"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/security/pwquality.conf"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -372,7 +362,7 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource4ref { ResourceID = "[nxFileLine][V-204409][medium][SRG-OS-000071-GPOS-00039]::[RHEL]Baseline"; ContainsLine = "dcredit = -1"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/security/pwquality.conf"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -383,7 +373,7 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource5ref { ResourceID = "[nxFileLine][V-204410][medium][SRG-OS-000266-GPOS-00101]::[RHEL]Baseline"; ContainsLine = "ocredit=-1"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/security/pwquality.conf"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -394,7 +384,7 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource6ref { ResourceID = "[nxFileLine][V-204411][medium][SRG-OS-000072-GPOS-00040]::[RHEL]Baseline"; ContainsLine = "difok = 8"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/security/pwquality.conf"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -405,7 +395,7 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource7ref { ResourceID = "[nxFileLine][V-204412][medium][SRG-OS-000072-GPOS-00040]::[RHEL]Baseline"; ContainsLine = "minclass = 4"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/security/pwquality.conf"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -416,7 +406,7 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource8ref { ResourceID = "[nxFileLine][V-204413][medium][SRG-OS-000072-GPOS-00040]::[RHEL]Baseline"; ContainsLine = "maxrepeat = 3"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/security/pwquality.conf"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -427,18 +417,18 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource9ref { ResourceID = "[nxFileLine][V-204414][medium][SRG-OS-000072-GPOS-00040]::[RHEL]Baseline"; ContainsLine = "maxclassrepeat = 4"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/security/pwquality.conf"; ModuleName = "nx"; ModuleVersion = "1.0"; - DoesNotContainPattern = "^#\\s*maxclassrepeat\\s*=.*|^\\s*maxclassrepeat\\s*=\\s*(?:\\d{2,}|[3-9])"; + DoesNotContainPattern = "^#\\s*maxclassrepeat\\s*=.*|^\\s*maxclassrepeat\\s*=\\s*(?:\\d{2,}|[1-3|5-9])"; ConfigurationName = "LinuxBaseLine"; }; instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource10ref { ResourceID = "[nxFileLine][V-204416][medium][SRG-OS-000073-GPOS-00041]::[RHEL]Baseline"; ContainsLine = "ENCRYPT_METHOD SHA512"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/login.defs"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -449,7 +439,7 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource11ref { ResourceID = "[nxFileLine][V-204418][medium][SRG-OS-000075-GPOS-00043]::[RHEL]Baseline"; ContainsLine = "PASS_MIN_DAYS 1"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/login.defs"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -460,7 +450,7 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource12ref { ResourceID = "[nxFileLine][V-204420][medium][SRG-OS-000076-GPOS-00044]::[RHEL]Baseline"; ContainsLine = "PASS_MAX_DAYS 60"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/login.defs"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -471,7 +461,7 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource13ref { ResourceID = "[nxFileLine][V-204423][medium][SRG-OS-000078-GPOS-00046]::[RHEL]Baseline"; ContainsLine = "minlen = 15"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/security/pwquality.conf"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -482,7 +472,7 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource14ref { ResourceID = "[nxFileLine][V-204425][high][SRG-OS-000106-GPOS-00053]::[RHEL]Baseline"; ContainsLine = "PermitEmptyPasswords no"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/ssh/sshd_config"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -492,19 +482,19 @@ ResourceID = "[nxFileLine][V-204425][high][SRG-OS-000106-GPOS-00053]::[RHEL]Base instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource15ref { ResourceID = "[nxFileLine][V-204426][medium][SRG-OS-000118-GPOS-00060]::[RHEL]Baseline"; - ContainsLine = "INACTIVE=0"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + ContainsLine = "INACTIVE=35"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/default/useradd"; ModuleName = "nx"; ModuleVersion = "1.0"; - DoesNotContainPattern = "^#\\s*INACTIVE.*$|^INACTIVE\\s*=\\s*(?!0\\b)[-]*\\w*$"; + DoesNotContainPattern = "^#\\s*INACTIVE\\s*=.*|^\\s*INACTIVE\\s*=\\s*(3[5-9]|[4-9]\\d+|\\d{3,})"; ConfigurationName = "LinuxBaseLine"; }; instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource16ref { ResourceID = "[nxFileLine][V-204431][medium][SRG-OS-000480-GPOS-00226]::[RHEL]Baseline"; ContainsLine = "FAIL_DELAY 4"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/login.defs"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -515,7 +505,7 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource17ref { ResourceID = "[nxFileLine][V-204434][medium][SRG-OS-000480-GPOS-00229]::[RHEL]Baseline"; ContainsLine = "PermitUserEnvironment no"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/ssh/sshd_config"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -526,7 +516,7 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource18ref { ResourceID = "[nxFileLine][V-204435][medium][SRG-OS-000480-GPOS-00229]::[RHEL]Baseline"; ContainsLine = "HostbasedAuthentication no"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/ssh/sshd_config"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -537,7 +527,7 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource19ref { ResourceID = "[nxFileLine][V-204447][high][SRG-OS-000366-GPOS-00153]::[RHEL]Baseline"; ContainsLine = "gpgcheck=1"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/yum.conf"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -548,7 +538,7 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource20ref { ResourceID = "[nxFileLine][V-204448][high][SRG-OS-000366-GPOS-00153]::[RHEL]Baseline"; ContainsLine = "localpkg_gpgcheck=1"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/yum.conf"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -559,7 +549,7 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource21ref { ResourceID = "[nxFileLine][V-204449.c][medium][SRG-OS-000114-GPOS-00059]::[RHEL]Baseline"; ContainsLine = "install usb-storage /bin/true"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/modprobe.d/usb-storage.conf"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -570,7 +560,7 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource22ref { ResourceID = "[nxFileLine][V-204449.d][medium][SRG-OS-000114-GPOS-00059]::[RHEL]Baseline"; ContainsLine = "blacklist usb-storage"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/modprobe.d/blacklist.conf"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -581,7 +571,7 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource23ref { ResourceID = "[nxFileLine][V-204450.b][medium][SRG-OS-000378-GPOS-00163]::[RHEL]Baseline"; ContainsLine = "install dccp /bin/true"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/modprobe.d/dccp.conf"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -592,7 +582,7 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource24ref { ResourceID = "[nxFileLine][V-204450.c][medium][SRG-OS-000378-GPOS-00163]::[RHEL]Baseline"; ContainsLine = "blacklist dccp"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/modprobe.d/blacklist.conf"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -603,7 +593,7 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource25ref { ResourceID = "[nxFileLine][V-204452][low][SRG-OS-000437-GPOS-00194]::[RHEL]Baseline"; ContainsLine = "clean_requirements_on_remove=1"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/yum.conf"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -614,7 +604,7 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource26ref { ResourceID = "[nxFileLine][V-204453][medium][SRG-OS-000445-GPOS-00199]::[RHEL]Baseline"; ContainsLine = "SELINUX=enforcing"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/selinux/config"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -625,7 +615,7 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource27ref { ResourceID = "[nxFileLine][V-204454][medium][SRG-OS-000445-GPOS-00199]::[RHEL]Baseline"; ContainsLine = "SELINUXTYPE=targeted"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/selinux/config"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -636,7 +626,7 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource28ref { ResourceID = "[nxFileLine][V-204457][medium][SRG-OS-000480-GPOS-00228]::[RHEL]Baseline"; ContainsLine = "UMASK 077"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/login.defs"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -647,7 +637,7 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource29ref { ResourceID = "[nxFileLine][V-204466][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; ContainsLine = "CREATE_HOME yes"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/login.defs"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -658,16 +648,16 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource30ref { ResourceID = "[nxFileLine][V-204504][medium][SRG-OS-000046-GPOS-00022]::[RHEL]Baseline"; ContainsLine = "-f 2"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "^#\\s*-f\\s+2|^\\s*-f\\s*1"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileResource as $MSFT_nxFileResource24ref +instance of MSFT_nxFileResource as $MSFT_nxFileResource23ref { -SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::29::9::nxFile"; +SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::29::9::nxFile"; ModuleName = "nx"; ModuleVersion = "1.0"; ResourceID = "[nxFile][V-204506.a][medium][SRG-OS-000342-GPOS-00133]::[RHEL]Baseline"; @@ -678,7 +668,7 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource31ref { ResourceID = "[nxFileLine][V-204506.a][medium][SRG-OS-000342-GPOS-00133]::[RHEL]Baseline"; ContainsLine = "active = yes"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audisp/plugins.d/au-remote.conf"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -689,7 +679,7 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource32ref { ResourceID = "[nxFileLine][V-204506.b][medium][SRG-OS-000342-GPOS-00133]::[RHEL]Baseline"; ContainsLine = "direction = out"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audisp/plugins.d/au-remote.conf"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -700,7 +690,7 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource33ref { ResourceID = "[nxFileLine][V-204506.c][medium][SRG-OS-000342-GPOS-00133]::[RHEL]Baseline"; ContainsLine = "path = /sbin/audisp-remote"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audisp/plugins.d/au-remote.conf"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -711,7 +701,7 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource34ref { ResourceID = "[nxFileLine][V-204506.d][medium][SRG-OS-000342-GPOS-00133]::[RHEL]Baseline"; ContainsLine = "type = always"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audisp/plugins.d/au-remote.conf"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -722,7 +712,7 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource35ref { ResourceID = "[nxFileLine][V-204507][medium][SRG-OS-000342-GPOS-00133]::[RHEL]Baseline"; ContainsLine = "overflow_action = syslog"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audisp/audispd.conf"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -733,16 +723,16 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource36ref { ResourceID = "[nxFileLine][V-204508][medium][SRG-OS-000342-GPOS-00133]::[RHEL]Baseline"; ContainsLine = "name_format = hostname"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audisp/audispd.conf"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "^#\\s*name_format.*$|^name_format\\s*=\\s*(?!hostname$)\\w*$"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileResource as $MSFT_nxFileResource25ref +instance of MSFT_nxFileResource as $MSFT_nxFileResource24ref { -SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::19::9::nxFile"; +SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::19::9::nxFile"; ModuleName = "nx"; ModuleVersion = "1.0"; ResourceID = "[nxFile][V-204510][medium][SRG-OS-000342-GPOS-00133]::[RHEL]Baseline"; @@ -753,7 +743,7 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource37ref { ResourceID = "[nxFileLine][V-204510][medium][SRG-OS-000342-GPOS-00133]::[RHEL]Baseline"; ContainsLine = "enable_krb5 = yes"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audisp/audisp-remote.conf"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -764,7 +754,7 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource38ref { ResourceID = "[nxFileLine][V-204511][medium][SRG-OS-000342-GPOS-00133]::[RHEL]Baseline"; ContainsLine = "disk_full_action = single"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audisp/audisp-remote.conf"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -775,7 +765,7 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource39ref { ResourceID = "[nxFileLine][V-204512][medium][SRG-OS-000342-GPOS-00133]::[RHEL]Baseline"; ContainsLine = "network_failure_action = syslog"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audisp/audisp-remote.conf"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -786,7 +776,7 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource40ref { ResourceID = "[nxFileLine][V-204514][medium][SRG-OS-000343-GPOS-00134]::[RHEL]Baseline"; ContainsLine = "space_left_action = email"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/auditd.conf"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -797,7 +787,7 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource41ref { ResourceID = "[nxFileLine][V-204515][medium][SRG-OS-000343-GPOS-00134]::[RHEL]Baseline"; ContainsLine = "action_mail_acct = root"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/auditd.conf"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -808,7 +798,7 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource42ref { ResourceID = "[nxFileLine][V-204516.a][medium][SRG-OS-000327-GPOS-00127]::[RHEL]Baseline"; ContainsLine = "-a always,exit -F arch=b32 -S execve -C uid!=euid -F euid=0 -k setuid"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -819,7 +809,7 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource43ref { ResourceID = "[nxFileLine][V-204516.b][medium][SRG-OS-000327-GPOS-00127]::[RHEL]Baseline"; ContainsLine = "-a always,exit -F arch=b64 -S execve -C uid!=euid -F euid=0 -k setuid"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -830,7 +820,7 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource44ref { ResourceID = "[nxFileLine][V-204516.c][medium][SRG-OS-000327-GPOS-00127]::[RHEL]Baseline"; ContainsLine = "-a always,exit -F arch=b32 -S execve -C gid!=egid -F egid=0 -k setgid"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -841,7 +831,7 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource45ref { ResourceID = "[nxFileLine][V-204516.d][medium][SRG-OS-000327-GPOS-00127]::[RHEL]Baseline"; ContainsLine = "-a always,exit -F arch=b64 -S execve -C gid!=egid -F egid=0 -k setgid"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -851,1318 +841,779 @@ ResourceID = "[nxFileLine][V-204516.d][medium][SRG-OS-000327-GPOS-00127]::[RHEL] instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource46ref { ResourceID = "[nxFileLine][V-204517.a][medium][SRG-OS-000064-GPOS-00033]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S chown -F auid>=1000 -F auid!=unset -k perm_mod"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + ContainsLine = "-a always,exit -F arch=b32 -S chown,fchown,fchownat,lchown -F auid>=1000 -F auid!=unset -k perm_mod"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*chown\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*perm_mod"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*chown,fchown,fchownat,lchown\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*perm_mod"; ConfigurationName = "LinuxBaseLine"; }; instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource47ref { ResourceID = "[nxFileLine][V-204517.b][medium][SRG-OS-000064-GPOS-00033]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S chown -F auid>=1000 -F auid!=unset -k perm_mod"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + ContainsLine = "-a always,exit -F arch=b64 -S chown,fchown,fchownat,lchown -F auid>=1000 -F auid!=unset -k perm_mod"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*chown\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*perm_mod"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*chown,fchown,fchownat,lchown\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*perm_mod"; ConfigurationName = "LinuxBaseLine"; }; instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource48ref { -ResourceID = "[nxFileLine][V-204518.a][medium][SRG-OS-000064-GPOS-00033]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S fchown -F auid>=1000 -F auid!=unset -k perm_mod"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; +ResourceID = "[nxFileLine][V-204521.a][medium][SRG-OS-000458-GPOS-00203]::[RHEL]Baseline"; + ContainsLine = "-a always,exit -F arch=b32 -S chmod,fchmod,fchmodat -F auid>=1000 -F auid!=unset -k perm_mod"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*fchown\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*perm_mod"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*chmod,fchmod,fchmodat\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*perm_mod"; ConfigurationName = "LinuxBaseLine"; }; instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource49ref { -ResourceID = "[nxFileLine][V-204518.b][medium][SRG-OS-000064-GPOS-00033]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S fchown -F auid>=1000 -F auid!=unset -k perm_mod"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; +ResourceID = "[nxFileLine][V-204521.b][medium][SRG-OS-000458-GPOS-00203]::[RHEL]Baseline"; + ContainsLine = "-a always,exit -F arch=b64 -S chmod,fchmod,fchmodat -F auid>=1000 -F auid!=unset -k perm_mod"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*fchown\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*perm_mod"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*chmod,fchmod,fchmodat\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*perm_mod"; ConfigurationName = "LinuxBaseLine"; }; instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource50ref { -ResourceID = "[nxFileLine][V-204519.a][medium][SRG-OS-000064-GPOS-00033]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S lchown -F auid>=1000 -F auid!=unset -k perm_mod"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; +ResourceID = "[nxFileLine][V-204524.a][medium][SRG-OS-000458-GPOS-00203]::[RHEL]Baseline"; + ContainsLine = "-a always,exit -F arch=b32 -S setxattr,fsetxattr,lsetxattr,removexattr,fremovexattr,lremovexattr -F auid>=1000 -F auid!=unset -k perm_mod"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*lchown\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*perm_mod"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*setxattr,fsetxattr,lsetxattr,removexattr,fremovexattr,lremovexattr\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*perm_mod"; ConfigurationName = "LinuxBaseLine"; }; instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource51ref { -ResourceID = "[nxFileLine][V-204519.b][medium][SRG-OS-000064-GPOS-00033]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S lchown -F auid>=1000 -F auid!=unset -k perm_mod"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; +ResourceID = "[nxFileLine][V-204524.b][medium][SRG-OS-000458-GPOS-00203]::[RHEL]Baseline"; + ContainsLine = "-a always,exit -F arch=b64 -S setxattr,fsetxattr,lsetxattr,removexattr,fremovexattr,lremovexattr -F auid>=1000 -F auid!=unset -k perm_mod"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*lchown\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*perm_mod"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*setxattr,fsetxattr,lsetxattr,removexattr,fremovexattr,lremovexattr\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*perm_mod"; ConfigurationName = "LinuxBaseLine"; }; instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource52ref { -ResourceID = "[nxFileLine][V-204520.a][medium][SRG-OS-000064-GPOS-00033]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S fchownat -F auid>=1000 -F auid!=unset -k perm_mod"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; +ResourceID = "[nxFileLine][V-204531.a][medium][SRG-OS-000064-GPOS-00033]::[RHEL]Baseline"; + ContainsLine = "-a always,exit -F arch=b32 -S creat,open,openat,open_by_handle_at,truncate,ftruncate -F exit=-EPERM -F auid>=1000 -F auid!=unset -k access"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*fchownat\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*perm_mod"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*creat,open,openat,open_by_handle_at,truncate,ftruncate\\s*-F\\s*exit\\s*=\\s*-EPERM\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*access"; ConfigurationName = "LinuxBaseLine"; }; instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource53ref { -ResourceID = "[nxFileLine][V-204520.b][medium][SRG-OS-000064-GPOS-00033]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S fchownat -F auid>=1000 -F auid!=unset -k perm_mod"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; +ResourceID = "[nxFileLine][V-204531.b][medium][SRG-OS-000064-GPOS-00033]::[RHEL]Baseline"; + ContainsLine = "-a always,exit -F arch=b32 -S creat,open,openat,open_by_handle_at,truncate,ftruncate -F exit=-EACCES -F auid>=1000 -F auid!=unset -k access"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*fchownat\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*perm_mod"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*creat,open,openat,open_by_handle_at,truncate,ftruncate\\s*-F\\s*exit\\s*=\\s*-EACCES\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*access"; ConfigurationName = "LinuxBaseLine"; }; instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource54ref { -ResourceID = "[nxFileLine][V-204521.a][medium][SRG-OS-000458-GPOS-00203]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S chmod -F auid>=1000 -F auid!=unset -k perm_mod"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; +ResourceID = "[nxFileLine][V-204531.c][medium][SRG-OS-000064-GPOS-00033]::[RHEL]Baseline"; + ContainsLine = "-a always,exit -F arch=b64 -S creat,open,openat,open_by_handle_at,truncate,ftruncate -F exit=-EPERM -F auid>=1000 -F auid!=unset -k access"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*chmod\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*perm_mod"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*creat,open,openat,open_by_handle_at,truncate,ftruncate\\s*-F\\s*exit\\s*=\\s*-EPERM\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*access"; ConfigurationName = "LinuxBaseLine"; }; instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource55ref { -ResourceID = "[nxFileLine][V-204521.b][medium][SRG-OS-000458-GPOS-00203]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S chmod -F auid>=1000 -F auid!=unset -k perm_mod"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; +ResourceID = "[nxFileLine][V-204531.d][medium][SRG-OS-000064-GPOS-00033]::[RHEL]Baseline"; + ContainsLine = "-a always,exit -F arch=b64 -S creat,open,openat,open_by_handle_at,truncate,ftruncate -F exit=-EACCES -F auid>=1000 -F auid!=unset -k access"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*chmod\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*perm_mod"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*creat,open,openat,open_by_handle_at,truncate,ftruncate\\s*-F\\s*exit\\s*=\\s*-EACCES\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*access"; ConfigurationName = "LinuxBaseLine"; }; instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource56ref { -ResourceID = "[nxFileLine][V-204522.a][medium][SRG-OS-000458-GPOS-00203]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S fchmod -F auid>=1000 -F auid!=unset -k perm_mod"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*fchmod\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*perm_mod"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource57ref -{ -ResourceID = "[nxFileLine][V-204522.b][medium][SRG-OS-000458-GPOS-00203]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S fchmod -F auid>=1000 -F auid!=unset -k perm_mod"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*fchmod\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*perm_mod"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource58ref -{ -ResourceID = "[nxFileLine][V-204523.a][medium][SRG-OS-000458-GPOS-00203]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S fchmodat -F auid>=1000 -F auid!=unset -k perm_mod"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*fchmodat\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*perm_mod"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource59ref -{ -ResourceID = "[nxFileLine][V-204523.b][medium][SRG-OS-000458-GPOS-00203]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S fchmodat -F auid>=1000 -F auid!=unset -k perm_mod"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*fchmodat\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*perm_mod"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource60ref -{ -ResourceID = "[nxFileLine][V-204524.a][medium][SRG-OS-000458-GPOS-00203]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S setxattr -F auid>=1000 -F auid!=unset -k perm_mod"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*setxattr\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*perm_mod"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource61ref -{ -ResourceID = "[nxFileLine][V-204524.b][medium][SRG-OS-000458-GPOS-00203]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S setxattr -F auid>=1000 -F auid!=unset -k perm_mod"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*setxattr\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*perm_mod"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource62ref -{ -ResourceID = "[nxFileLine][V-204525.a][medium][SRG-OS-000458-GPOS-00203]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S fsetxattr -F auid>=1000 -F auid!=unset -k perm_mod"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*fsetxattr\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*perm_mod"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource63ref -{ -ResourceID = "[nxFileLine][V-204525.b][medium][SRG-OS-000458-GPOS-00203]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S fsetxattr -F auid>=1000 -F auid!=unset -k perm_mod"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*fsetxattr\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*perm_mod"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource64ref -{ -ResourceID = "[nxFileLine][V-204526.a][medium][SRG-OS-000458-GPOS-00203]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S lsetxattr -F auid>=1000 -F auid!=unset -k perm_mod"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*lsetxattr\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*perm_mod"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource65ref -{ -ResourceID = "[nxFileLine][V-204526.b][medium][SRG-OS-000458-GPOS-00203]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S lsetxattr -F auid>=1000 -F auid!=unset -k perm_mod"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*lsetxattr\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*perm_mod"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource66ref -{ -ResourceID = "[nxFileLine][V-204527.a][medium][SRG-OS-000458-GPOS-00203]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S removexattr -F auid>=1000 -F auid!=unset -k perm_mod"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*removexattr\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*perm_mod"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource67ref -{ -ResourceID = "[nxFileLine][V-204527.b][medium][SRG-OS-000458-GPOS-00203]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S removexattr -F auid>=1000 -F auid!=unset -k perm_mod"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*removexattr\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*perm_mod"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource68ref -{ -ResourceID = "[nxFileLine][V-204528.a][medium][SRG-OS-000458-GPOS-00203]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S fremovexattr -F auid>=1000 -F auid!=unset -k perm_mod"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*fremovexattr\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*perm_mod"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource69ref -{ -ResourceID = "[nxFileLine][V-204528.b][medium][SRG-OS-000458-GPOS-00203]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S fremovexattr -F auid>=1000 -F auid!=unset -k perm_mod"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*fremovexattr\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*perm_mod"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource70ref -{ -ResourceID = "[nxFileLine][V-204529.a][medium][SRG-OS-000458-GPOS-00203]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S lremovexattr -F auid>=1000 -F auid!=unset -k perm_mod"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*lremovexattr\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*perm_mod"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource71ref -{ -ResourceID = "[nxFileLine][V-204529.b][medium][SRG-OS-000458-GPOS-00203]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S lremovexattr -F auid>=1000 -F auid!=unset -k perm_mod"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*lremovexattr\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*perm_mod"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource72ref -{ -ResourceID = "[nxFileLine][V-204530.a][medium][SRG-OS-000064-GPOS-00033]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S creat F exit=-EPERM -F auid>=1000 -F auid!=unset -k access"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*creat\\s*F\\s*exit\\s*=\\s*-EPERM\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*access"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource73ref -{ -ResourceID = "[nxFileLine][V-204530.b][medium][SRG-OS-000064-GPOS-00033]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S creat -F exit=-EACCES -F auid>=1000 -F auid!=unset -k access"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*creat\\s*-F\\s*exit\\s*=\\s*-EACCES\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*access"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource74ref -{ -ResourceID = "[nxFileLine][V-204530.c][medium][SRG-OS-000064-GPOS-00033]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S creat -F exit=-EPERM -F auid>=1000 -F auid!=unset -k access"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*creat\\s*-F\\s*exit\\s*=\\s*-EPERM\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*access"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource75ref -{ -ResourceID = "[nxFileLine][V-204530.d][medium][SRG-OS-000064-GPOS-00033]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S creat -F exit=-EACCES -F auid>=1000 -F auid!=unset -k access"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*creat\\s*-F\\s*exit\\s*=\\s*-EACCES\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*access"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource76ref -{ -ResourceID = "[nxFileLine][V-204531.a][medium][SRG-OS-000064-GPOS-00033]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S open -F exit=-EPERM -F auid>=1000 -F auid!=unset -k access"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*open\\s*-F\\s*exit\\s*=\\s*-EPERM\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*access"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource77ref -{ -ResourceID = "[nxFileLine][V-204531.b][medium][SRG-OS-000064-GPOS-00033]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S open -F exit=-EACCES -F auid>=1000 -F auid!=unset -k access"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*open\\s*-F\\s*exit\\s*=\\s*-EACCES\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*access"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource78ref -{ -ResourceID = "[nxFileLine][V-204531.c][medium][SRG-OS-000064-GPOS-00033]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S open -F exit=-EPERM -F auid>=1000 -F auid!=unset -k access"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*open\\s*-F\\s*exit\\s*=\\s*-EPERM\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*access"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource79ref -{ -ResourceID = "[nxFileLine][V-204531.d][medium][SRG-OS-000064-GPOS-00033]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S open -F exit=-EACCES -F auid>=1000 -F auid!=unset -k access"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*open\\s*-F\\s*exit\\s*=\\s*-EACCES\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*access"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource80ref -{ -ResourceID = "[nxFileLine][V-204532.a][medium][SRG-OS-000064-GPOS-00033]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S openat -F exit=-EPERM -F auid>=1000 -F auid!=unset -k access"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*openat\\s*-F\\s*exit\\s*=\\s*-EPERM\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*access"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource81ref -{ -ResourceID = "[nxFileLine][V-204532.b][medium][SRG-OS-000064-GPOS-00033]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S openat -F exit=-EACCES -F auid>=1000 -F auid!=unset -k access"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*openat\\s*-F\\s*exit\\s*=\\s*-EACCES\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*access"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource82ref -{ -ResourceID = "[nxFileLine][V-204532.c][medium][SRG-OS-000064-GPOS-00033]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S openat -F exit=-EPERM -F auid>=1000 -F auid!=unset -k access"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*openat\\s*-F\\s*exit\\s*=\\s*-EPERM\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*access"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource83ref -{ -ResourceID = "[nxFileLine][V-204532.d][medium][SRG-OS-000064-GPOS-00033]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S openat -F exit=-EACCES -F auid>=1000 -F auid!=unset -k access"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*openat\\s*-F\\s*exit\\s*=\\s*-EACCES\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*access"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource84ref -{ -ResourceID = "[nxFileLine][V-204533.a][medium][SRG-OS-000064-GPOS-00033]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S open_by_handle_at -F exit=-EPERM -F auid>=1000 -F auid!=unset -k access"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*open_by_handle_at\\s*-F\\s*exit\\s*=\\s*-EPERM\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*access"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource85ref -{ -ResourceID = "[nxFileLine][V-204533.b][medium][SRG-OS-000064-GPOS-00033]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S open_by_handle_at -F exit=-EACCES -F auid>=1000 -F auid!=unset -k access"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*open_by_handle_at\\s*-F\\s*exit\\s*=\\s*-EACCES\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*access"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource86ref -{ -ResourceID = "[nxFileLine][V-204533.c][medium][SRG-OS-000064-GPOS-00033]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S open_by_handle_at -F exit=-EPERM -F auid>=1000 -F auid!=unset -k access"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*open_by_handle_at\\s*-F\\s*exit\\s*=\\s*-EPERM\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*access"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource87ref -{ -ResourceID = "[nxFileLine][V-204533.d][medium][SRG-OS-000064-GPOS-00033]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S open_by_handle_at -F exit=-EACCES -F auid>=1000 -F auid!=unset -k access"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*open_by_handle_at\\s*-F\\s*exit\\s*=\\s*-EACCES\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*access"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource88ref -{ -ResourceID = "[nxFileLine][V-204534.a][medium][SRG-OS-000064-GPOS-00033]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S truncate -F exit=-EPERM -F auid>=1000 -F auid!=unset -k access"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*truncate\\s*-F\\s*exit\\s*=\\s*-EPERM\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*access"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource89ref -{ -ResourceID = "[nxFileLine][V-204534.b][medium][SRG-OS-000064-GPOS-00033]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S truncate -F exit=-EACCES -F auid>=1000 -F auid!=unset -k access"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*truncate\\s*-F\\s*exit\\s*=\\s*-EACCES\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*access"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource90ref -{ -ResourceID = "[nxFileLine][V-204534.c][medium][SRG-OS-000064-GPOS-00033]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S truncate -F exit=-EPERM -F auid>=1000 -F auid!=unset -k access"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*truncate\\s*-F\\s*exit\\s*=\\s*-EPERM\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*access"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource91ref -{ -ResourceID = "[nxFileLine][V-204534.d][medium][SRG-OS-000064-GPOS-00033]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S truncate -F exit=-EACCES -F auid>=1000 -F auid!=unset -k access"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*truncate\\s*-F\\s*exit\\s*=\\s*-EACCES\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*access"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource92ref -{ -ResourceID = "[nxFileLine][V-204535.a][medium][SRG-OS-000064-GPOS-00033]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S ftruncate -F exit=-EPERM -F auid>=1000 -F auid!=unset -k access"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*ftruncate\\s*-F\\s*exit\\s*=\\s*-EPERM\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*access"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource93ref -{ -ResourceID = "[nxFileLine][V-204535.b][medium][SRG-OS-000064-GPOS-00033]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S ftruncate -F exit=-EACCES -F auid>=1000 -F auid!=unset -k access"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*ftruncate\\s*-F\\s*exit\\s*=\\s*-EACCES\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*access"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource94ref -{ -ResourceID = "[nxFileLine][V-204535.c][medium][SRG-OS-000064-GPOS-00033]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S ftruncate -F exit=-EPERM -F auid>=1000 -F auid!=unset -k access"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*ftruncate\\s*-F\\s*exit\\s*=\\s*-EPERM\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*access"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource95ref -{ -ResourceID = "[nxFileLine][V-204535.d][medium][SRG-OS-000064-GPOS-00033]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S ftruncate -F exit=-EACCES -F auid>=1000 -F auid!=unset -k access"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*ftruncate\\s*-F\\s*exit\\s*=\\s*-EACCES\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*access"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource96ref -{ ResourceID = "[nxFileLine][V-204536][medium][SRG-OS-000392-GPOS-00172]::[RHEL]Baseline"; ContainsLine = "-a always,exit -F path=/usr/sbin/semanage -F auid>=1000 -F auid!=unset -k privileged-priv_change"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/sbin/semanage\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-priv_change"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource97ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource57ref { ResourceID = "[nxFileLine][V-204537][medium][SRG-OS-000392-GPOS-00172]::[RHEL]Baseline"; ContainsLine = "-a always,exit -F path=/usr/sbin/setsebool -F auid>=1000 -F auid!=unset -k privileged-priv_change"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/sbin/setsebool\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-priv_change"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource98ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource58ref { ResourceID = "[nxFileLine][V-204538][medium][SRG-OS-000392-GPOS-00172]::[RHEL]Baseline"; ContainsLine = "-a always,exit -F path=/usr/bin/chcon -F auid>=1000 -F auid!=unset -k privileged-priv_change"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/bin/chcon\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-priv_change"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource99ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource59ref { ResourceID = "[nxFileLine][V-204539][medium][SRG-OS-000392-GPOS-00172]::[RHEL]Baseline"; ContainsLine = "-a always,exit -F path=/usr/sbin/setfiles -F auid>=1000 -F auid!=unset -k privileged-priv_change"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/sbin/setfiles\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-priv_change"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource100ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource60ref { ResourceID = "[nxFileLine][V-204540][medium][SRG-OS-000392-GPOS-00172]::[RHEL]Baseline"; ContainsLine = "-w /var/run/faillock -p wa -k logins"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "#\\s*-w\\s*/var/run/faillock\\s*-p\\s*wa\\s*-k\\s*logins"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource101ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource61ref { ResourceID = "[nxFileLine][V-204541][medium][SRG-OS-000392-GPOS-00172]::[RHEL]Baseline"; ContainsLine = "-w /var/log/lastlog -p wa -k logins"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "#\\s*-w\\s*/var/log/lastlog\\s*-p\\s*wa\\s*-k\\s*logins"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource102ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource62ref { ResourceID = "[nxFileLine][V-204542][medium][SRG-OS-000042-GPOS-00020]::[RHEL]Baseline"; ContainsLine = "-a always,exit -F path=/usr/bin/passwd -F auid>=1000 -F auid!=unset -k privileged-passwd"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/bin/passwd\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-passwd"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource103ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource63ref { ResourceID = "[nxFileLine][V-204543][medium][SRG-OS-000042-GPOS-00020]::[RHEL]Baseline"; ContainsLine = "-a always,exit -F path=/usr/sbin/unix_chkpwd -F auid>=1000 -F auid!=unset -k privileged-passwd"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/sbin/unix_chkpwd\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-passwd"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource104ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource64ref { ResourceID = "[nxFileLine][V-204544][medium][SRG-OS-000042-GPOS-00020]::[RHEL]Baseline"; ContainsLine = "-a always,exit -F path=/usr/bin/gpasswd -F auid>=1000 -F auid!=unset -k privileged-passwd"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/bin/gpasswd\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-passwd"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource105ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource65ref { ResourceID = "[nxFileLine][V-204545][medium][SRG-OS-000042-GPOS-00020]::[RHEL]Baseline"; ContainsLine = "-a always,exit -F path=/usr/bin/chage -F auid>=1000 -F auid!=unset -k privileged-passwd"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/bin/chage\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-passwd"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource106ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource66ref { ResourceID = "[nxFileLine][V-204546][medium][SRG-OS-000042-GPOS-00020]::[RHEL]Baseline"; ContainsLine = "-a always,exit -F path=/usr/sbin/userhelper -F auid>=1000 -F auid!=unset -k privileged-passwd"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/sbin/userhelper\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-passwd"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource107ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource67ref { ResourceID = "[nxFileLine][V-204547][medium][SRG-OS-000037-GPOS-00015]::[RHEL]Baseline"; ContainsLine = "-a always,exit -F path=/usr/bin/su -F auid>=1000 -F auid!=unset -k privileged-priv_change"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/bin/su\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-priv_change"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource108ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource68ref { ResourceID = "[nxFileLine][V-204548][medium][SRG-OS-000037-GPOS-00015]::[RHEL]Baseline"; ContainsLine = "-a always,exit -F path=/usr/bin/sudo -F auid>=1000 -F auid!=unset -k privileged-priv_change"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/bin/sudo\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-priv_change"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource109ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource69ref { ResourceID = "[nxFileLine][V-204549.a][medium][SRG-OS-000037-GPOS-00015]::[RHEL]Baseline"; ContainsLine = "-w /etc/sudoers -p wa -k privileged-actions"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "#\\s*-w /etc/sudoers -p wa -k privileged-actions"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource110ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource70ref { ResourceID = "[nxFileLine][V-204549.b][medium][SRG-OS-000037-GPOS-00015]::[RHEL]Baseline"; ContainsLine = "-w /etc/sudoers.d/ -p wa -k privileged-actions"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "#\\s*-w /etc/sudoers.d/ -p wa -k privileged-actions"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource111ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource71ref { ResourceID = "[nxFileLine][V-204550][medium][SRG-OS-000037-GPOS-00015]::[RHEL]Baseline"; ContainsLine = "-a always,exit -F path=/usr/bin/newgrp -F auid>=1000 -F auid!=unset -k privileged-priv_change"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/bin/newgrp\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-priv_change"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource112ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource72ref { ResourceID = "[nxFileLine][V-204551][medium][SRG-OS-000037-GPOS-00015]::[RHEL]Baseline"; ContainsLine = "-a always,exit -F path=/usr/bin/chsh -F auid>=1000 -F auid!=unset -k privileged-priv_change"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/bin/chsh\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-priv_change"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource113ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource73ref { ResourceID = "[nxFileLine][V-204552.a][medium][SRG-OS-000042-GPOS-00020]::[RHEL]Baseline"; ContainsLine = "-a always,exit -F arch=b32 -S mount -F auid>=1000 -F auid!=unset -k privileged-mount"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*mount\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-mount"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource114ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource74ref { ResourceID = "[nxFileLine][V-204552.b][medium][SRG-OS-000042-GPOS-00020]::[RHEL]Baseline"; ContainsLine = "-a always,exit -F arch=b64 -S mount -F auid>=1000 -F auid!=unset -k privileged-mount"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*mount\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-mount"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource115ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource75ref { ResourceID = "[nxFileLine][V-204552.c][medium][SRG-OS-000042-GPOS-00020]::[RHEL]Baseline"; ContainsLine = "-a always,exit -F path=/usr/bin/mount -F auid>=1000 -F auid!=unset -k privileged-mount"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/bin/mount\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-mount"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource116ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource76ref { ResourceID = "[nxFileLine][V-204553][medium][SRG-OS-000042-GPOS-00020]::[RHEL]Baseline"; ContainsLine = "-a always,exit -F path=/usr/bin/umount -F auid>=1000 -F auid!=unset -k privileged-mount"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/bin/umount\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-mount"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource117ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource77ref { ResourceID = "[nxFileLine][V-204554][medium][SRG-OS-000042-GPOS-00020]::[RHEL]Baseline"; ContainsLine = "-a always,exit -F path=/usr/sbin/postdrop -F auid>=1000 -F auid!=unset -k privileged-postfix"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/sbin/postdrop\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-postfix"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource118ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource78ref { ResourceID = "[nxFileLine][V-204555][medium][SRG-OS-000042-GPOS-00020]::[RHEL]Baseline"; ContainsLine = "-a always,exit -F path=/usr/sbin/postqueue -F auid>=1000 -F auid!=unset -k privileged-postfix"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/sbin/postqueue\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-postfix"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource119ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource79ref { ResourceID = "[nxFileLine][V-204556][medium][SRG-OS-000042-GPOS-00020]::[RHEL]Baseline"; ContainsLine = "-a always,exit -F path=/usr/libexec/openssh/ssh-keysign -F auid>=1000 -F auid!=unset -k privileged-ssh"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/libexec/openssh/ssh-keysign\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-ssh"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource120ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource80ref { ResourceID = "[nxFileLine][V-204557][medium][SRG-OS-000042-GPOS-00020]::[RHEL]Baseline"; ContainsLine = "-a always,exit -F path=/usr/bin/crontab -F auid>=1000 -F auid!=unset -k privileged-cron"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/bin/crontab\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-cron"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource121ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource81ref { ResourceID = "[nxFileLine][V-204558][medium][SRG-OS-000471-GPOS-00215]::[RHEL]Baseline"; ContainsLine = "-a always,exit -F path=/usr/sbin/pam_timestamp_check -F auid>=1000 -F auid!=unset -k privileged-pam"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/sbin/pam_timestamp_check\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-pam"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource122ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource82ref { ResourceID = "[nxFileLine][V-204559.a][medium][SRG-OS-000471-GPOS-00216]::[RHEL]Baseline"; ContainsLine = "-a always,exit -F arch=b32 -S create_module -k module-change"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*create_module\\s*-k\\s*module-change"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource123ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource83ref { ResourceID = "[nxFileLine][V-204559.b][medium][SRG-OS-000471-GPOS-00216]::[RHEL]Baseline"; ContainsLine = "-a always,exit -F arch=b64 -S create_module -k module-change"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*create_module\\s*-k\\s*module-change"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource124ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource84ref { ResourceID = "[nxFileLine][V-204560.a][medium][SRG-OS-000471-GPOS-00216]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S init_module -k module-change"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + ContainsLine = "-a always,exit -F arch=b32 -S init_module,finit_module -k modulechange"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*init_module\\s*-k\\s*module-change"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*init_module,finit_module\\s*-k\\s*modulechange"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource125ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource85ref { ResourceID = "[nxFileLine][V-204560.b][medium][SRG-OS-000471-GPOS-00216]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S init_module -k module-change"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + ContainsLine = "-a always,exit -F arch=b64 -S init_module,finit_module -k modulechange"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*init_module\\s*-k\\s*module-change"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*init_module,finit_module\\s*-k\\s*modulechange"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource126ref -{ -ResourceID = "[nxFileLine][V-204561.a][medium][SRG-OS-000471-GPOS-00216]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S finit_module -k module-change"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*finit_module\\s*-k\\s*module-change"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource127ref -{ -ResourceID = "[nxFileLine][V-204561.b][medium][SRG-OS-000471-GPOS-00216]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S finit_module -k module-change"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*finit_module\\s*-k\\s*module-change"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource128ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource86ref { ResourceID = "[nxFileLine][V-204562.a][medium][SRG-OS-000471-GPOS-00216]::[RHEL]Baseline"; ContainsLine = "-a always,exit -F arch=b32 -S delete_module -k module-change"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*delete_module\\s*-k\\s*module-change"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource129ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource87ref { ResourceID = "[nxFileLine][V-204562.b][medium][SRG-OS-000471-GPOS-00216]::[RHEL]Baseline"; ContainsLine = "-a always,exit -F arch=b64 -S delete_module -k module-change"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*delete_module\\s*-k\\s*module-change"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource130ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource88ref { ResourceID = "[nxFileLine][V-204563][medium][SRG-OS-000471-GPOS-00216]::[RHEL]Baseline"; ContainsLine = "-w /usr/bin/kmod -p x -F auid!=unset -k module-change"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "#\\s*-w\\s*/usr/bin/kmod\\s*-p\\s*x\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*module-change"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource131ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource89ref { ResourceID = "[nxFileLine][V-204564][medium][SRG-OS-000004-GPOS-00004]::[RHEL]Baseline"; ContainsLine = "-w /etc/passwd -p wa -k identity"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "#\\s*-w\\s*/etc/passwd\\s*-p\\s*wa\\s*-k\\s*identity"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource132ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource90ref { ResourceID = "[nxFileLine][V-204565][medium][SRG-OS-000004-GPOS-00004]::[RHEL]Baseline"; ContainsLine = "-w /etc/group -p wa -k identity"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "#\\s*-w\\s*/etc/group\\s*-p\\s*wa\\s*-k\\s*identity"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource133ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource91ref { ResourceID = "[nxFileLine][V-204566][medium][SRG-OS-000004-GPOS-00004]::[RHEL]Baseline"; ContainsLine = "-w /etc/gshadow -p wa -k identity"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "#\\s*-w\\s*/etc/gshadow\\s*-p\\s*wa\\s*-k\\s*identity"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource134ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource92ref { ResourceID = "[nxFileLine][V-204567][medium][SRG-OS-000004-GPOS-00004]::[RHEL]Baseline"; ContainsLine = "-w /etc/shadow -p wa -k identity"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "#\\s*-w\\s*/etc/shadow\\s*-p\\s*wa\\s*-k\\s*identity"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource135ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource93ref { ResourceID = "[nxFileLine][V-204568][medium][SRG-OS-000004-GPOS-00004]::[RHEL]Baseline"; ContainsLine = "-w /etc/security/opasswd -p wa -k identity"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "#\\s*-w\\s*/etc/security/opasswd\\s*-p\\s*wa\\s*-k\\s*identity"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource136ref -{ -ResourceID = "[nxFileLine][V-204569.a][medium][SRG-OS-000466-GPOS-00210]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S rename -F auid>=1000 -F auid!=unset -k delete"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*rename\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*delete"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource137ref -{ -ResourceID = "[nxFileLine][V-204569.b][medium][SRG-OS-000466-GPOS-00210]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S rename -F auid>=1000 -F auid!=unset -k delete"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*rename\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*delete"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource138ref -{ -ResourceID = "[nxFileLine][V-204570.a][medium][SRG-OS-000466-GPOS-00210]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S renameat -F auid>=1000 -F auid!=unset -k delete"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*renameat\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*delete"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource139ref -{ -ResourceID = "[nxFileLine][V-204570.b][medium][SRG-OS-000466-GPOS-00210]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S renameat -F auid>=1000 -F auid!=unset -k delete"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*renameat\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*delete"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource140ref -{ -ResourceID = "[nxFileLine][V-204571.a][medium][SRG-OS-000466-GPOS-00210]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S rmdir -F auid>=1000 -F auid!=unset -k delete"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*rmdir\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*delete"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource141ref -{ -ResourceID = "[nxFileLine][V-204571.b][medium][SRG-OS-000466-GPOS-00210]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S rmdir -F auid>=1000 -F auid!=unset -k delete"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*rmdir\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*delete"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource142ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource94ref { ResourceID = "[nxFileLine][V-204572.a][medium][SRG-OS-000466-GPOS-00210]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S unlink -F auid>=1000 -F auid!=unset -k delete"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + ContainsLine = "-a always,exit -F arch=b32 -S unlink,unlinkat,rename,renameat,rmdir -F auid>=1000 -F auid!=unset -k delete"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*unlink\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*delete"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*unlink,unlinkat,rename,renameat,rmdir\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*delete"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource143ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource95ref { ResourceID = "[nxFileLine][V-204572.b][medium][SRG-OS-000466-GPOS-00210]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S unlink -F auid>=1000 -F auid!=unset -k delete"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + ContainsLine = "-a always,exit -F arch=b64 -S unlink,unlinkat,rename,renameat,rmdir -F auid>=1000 -F auid!=unset -k delete"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*unlink\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*delete"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*unlink,unlinkat,rename,renameat,rmdir\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*delete"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource144ref -{ -ResourceID = "[nxFileLine][V-204573.a][medium][SRG-OS-000466-GPOS-00210]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S unlinkat -F auid>=1000 -F auid!=unset -k delete"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*unlinkat\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*delete"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource145ref -{ -ResourceID = "[nxFileLine][V-204573.b][medium][SRG-OS-000466-GPOS-00210]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S unlinkat -F auid>=1000 -F auid!=unset -k delete"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*unlinkat\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*delete"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource146ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource96ref { ResourceID = "[nxFileLine][V-204578][medium][SRG-OS-000033-GPOS-00014]::[RHEL]Baseline"; ContainsLine = "Ciphers aes256-ctr,aes192-ctr,aes128-ctr"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/ssh/sshd_config"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "^#\\s*Ciphers.*|^\\s*Ciphers\\s*aes128-ctr.*|^\\s*Ciphers\\s*aes192-ctr.*"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource147ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource97ref { ResourceID = "[nxFileLine][V-204579.b][medium][SRG-OS-000163-GPOS-00072]::[RHEL]Baseline"; ContainsLine = "declare -xr TMOUT=900"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/profile.d/tmout.sh"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "^\\s*TMOUT\\s*=\\s*[0-8]?[0-9]?[0-9]?$|^#\\s*TMOUT.*"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource148ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource98ref { ResourceID = "[nxFileLine][V-204580][medium][SRG-OS-000023-GPOS-00006]::[RHEL]Baseline"; ContainsLine = "banner /etc/issue"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/ssh/sshd_config"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "#\\s*banner\\s*/etc/issue"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource149ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource99ref { ResourceID = "[nxFileLine][V-204587][medium][SRG-OS-000163-GPOS-00072]::[RHEL]Baseline"; ContainsLine = "ClientAliveInterval 600"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/ssh/sshd_config"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "^\\s*ClientAliveInterval\\s*[0-5]?[0-9]?[0-9]?\\s*$|^#\\s*ClientAliveInterval.*|^\\s*ClientAliveInterval\\s*$"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource150ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource100ref { ResourceID = "[nxFileLine][V-204588][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; ContainsLine = "RhostsRSAAuthentication no"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/ssh/sshd_config"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "^#\\s*RhostsRSAAuthentication.*$|^RhostsRSAAuthentication\\s*(?!no\\b)\\w*$"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource151ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource101ref { ResourceID = "[nxFileLine][V-204589][medium][SRG-OS-000163-GPOS-00072]::[RHEL]Baseline"; ContainsLine = "ClientAliveCountMax 0"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/ssh/sshd_config"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "^#\\s*ClientAliveCountMax.*$|^ClientAliveCountMax\\s*(?!0\\b)\\w*$"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource152ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource102ref { ResourceID = "[nxFileLine][V-204590][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; ContainsLine = "IgnoreRhosts yes"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/ssh/sshd_config"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "^#\\s*IgnoreRhosts.*$|^IgnoreRhosts\\s*(?!yes\\b)\\w*$"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource153ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource103ref { ResourceID = "[nxFileLine][V-204591][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; ContainsLine = "PrintLastLog yes"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/ssh/sshd_config"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "^#\\s*PrintLastLog.*$|^PrintLastLog\\s*(?!yes\\b)\\w*$"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource154ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource104ref { ResourceID = "[nxFileLine][V-204592][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; ContainsLine = "PermitRootLogin no"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/ssh/sshd_config"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "^#\\s*PermitRootLogin.*$|^PermitRootLogin\\s*(?!no\\b)\\w*$"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource155ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource105ref { ResourceID = "[nxFileLine][V-204593][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; ContainsLine = "IgnoreUserKnownHosts yes"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/ssh/sshd_config"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "^#\\s*IgnoreUserKnownHosts.*$|^IgnoreUserKnownHosts\\s*(?!yes\\b)\\w*$"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource156ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource106ref { ResourceID = "[nxFileLine][V-204594][high][SRG-OS-000074-GPOS-00042]::[RHEL]Baseline"; ContainsLine = "Protocol 2"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/ssh/sshd_config"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "^#\\s*Protocol.*$|^Protocol\\s*(?!2\\b)\\w*$"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource157ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource107ref { ResourceID = "[nxFileLine][V-204595][medium][SRG-OS-000250-GPOS-00093]::[RHEL]Baseline"; ContainsLine = "MACs hmac-sha2-512,hmac-sha2-256"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/ssh/sshd_config"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "#\\s*MACs.*|\\s*MACs\\s*hmac-(?!sha2-512).*"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource158ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource108ref { ResourceID = "[nxFileLine][V-204598][medium][SRG-OS-000364-GPOS-00151]::[RHEL]Baseline"; ContainsLine = "GSSAPIAuthentication no"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/ssh/sshd_config"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "^#\\s*GSSAPIAuthentication.*$|^GSSAPIAuthentication\\s*(?!no\\b)\\w*$"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource159ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource109ref { ResourceID = "[nxFileLine][V-204599][medium][SRG-OS-000364-GPOS-00151]::[RHEL]Baseline"; ContainsLine = "KerberosAuthentication no"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/ssh/sshd_config"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "^#\\s*KerberosAuthentication.*$|^KerberosAuthentication\\s*(?!no\\b)\\w*$"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource160ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource110ref { ResourceID = "[nxFileLine][V-204600][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; ContainsLine = "StrictModes yes"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/ssh/sshd_config"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "^#\\s*StrictModes.*$|^StrictModes\\s*(?!yes\\b)\\w*$"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource161ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource111ref { ResourceID = "[nxFileLine][V-204601][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; ContainsLine = "UsePrivilegeSeparation sandbox"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/ssh/sshd_config"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "^#\\s*UsePrivilegeSeparation.*$|^UsePrivilegeSeparation\\s*(?!sandbox\\b)\\w*$"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource162ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource112ref { ResourceID = "[nxFileLine][V-204602][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; ContainsLine = "Compression delayed"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/ssh/sshd_config"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "^#\\s*Compression.*$|^Compression\\s*(?!delayed\\b)\\w*$"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource163ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource113ref { ResourceID = "[nxFileLine][V-204622][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; ContainsLine = "X11Forwarding no"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/ssh/sshd_config"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "^#\\s*X11Forwarding.*$|^X11Forwarding\\s*(?!no\\b)\\w*$"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource164ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource114ref { ResourceID = "[nxFileLine][V-233307][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; ContainsLine = "X11UseLocalhost yes"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/ssh/sshd_config"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "#\\s*X11UseLocalhost\\s*yes"; ConfigurationName = "LinuxBaseLine"; }; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource115ref +{ +ResourceID = "[nxFileLine][V-250314][medium][SRG-OS-000324-GPOS-00125]::[RHEL]Baseline"; + ContainsLine = "%wheel ALL=(ALL) TYPE=sysadm_t ROLE=sysadm_r ALL"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/sudoers"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*%wheel\\s*ALL\\s*=\\s*(ALL)\\s*TYPE\\s*=\\s*sysadm_t\\s*ROLE\\s*=\\s*sysadm_r\\s*ALL"; + ConfigurationName = "LinuxBaseLine"; +}; instance of MSFT_nxServiceResource as $MSFT_nxServiceResource1ref { ResourceID = "[nxService][V-204451][medium][SRG-OS-000114-GPOS-00059]::[RHEL]Baseline"; Controller = "systemd"; Enabled = False; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxService.ps1::13::9::nxService"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxService.ps1::13::9::nxService"; Name = "autofs"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -2173,7 +1624,7 @@ instance of MSFT_nxServiceResource as $MSFT_nxServiceResource2ref ResourceID = "[nxService][V-204492][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; Controller = "systemd"; Enabled = False; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxService.ps1::13::9::nxService"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxService.ps1::13::9::nxService"; Name = "kdump"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -2185,7 +1636,7 @@ ResourceID = "[nxService][V-204503][medium][SRG-OS-000038-GPOS-00016]::[RHEL]Bas Controller = "systemd"; State = "Running"; Enabled = True; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxService.ps1::22::9::nxService"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxService.ps1::22::9::nxService"; Name = "auditd"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -2197,7 +1648,7 @@ ResourceID = "[nxService][V-204586][medium][SRG-OS-000423-GPOS-00187]::[RHEL]Bas Controller = "systemd"; State = "Running"; Enabled = True; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxService.ps1::22::9::nxService"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxService.ps1::22::9::nxService"; Name = "sshd"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -2209,7 +1660,7 @@ ResourceID = "[nxService][V-204604.b][medium][SRG-OS-000480-GPOS-00227]::[RHEL]B Controller = "systemd"; State = "Running"; Enabled = True; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxService.ps1::22::9::nxService"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxService.ps1::22::9::nxService"; Name = "firewalld"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -2220,7 +1671,7 @@ instance of MSFT_nxScriptResource as $MSFT_nxScriptResource1ref ResourceID = "[nxScript][V-204399.b][medium][[Skip] SRG-OS-000029-GPOS-00010]::[RHEL]Baseline"; GetScript = "#!/bin/bash\necho [V-204399.b][medium][[Skip] SRG-OS-000029-GPOS-00010]"; TestScript = "#!/bin/bash\nexit 0"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxScript.skip.ps1::10::5::nxScript"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxScript.skip.ps1::10::5::nxScript"; SetScript = "#!/bin/bash"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -2231,7 +1682,7 @@ instance of MSFT_nxScriptResource as $MSFT_nxScriptResource2ref ResourceID = "[nxScript][V-204400][medium][[Skip] SRG-OS-000029-GPOS-00010]::[RHEL]Baseline"; GetScript = "#!/bin/bash\necho [V-204400][medium][[Skip] SRG-OS-000029-GPOS-00010]"; TestScript = "#!/bin/bash\nexit 0"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxScript.skip.ps1::10::5::nxScript"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxScript.skip.ps1::10::5::nxScript"; SetScript = "#!/bin/bash"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -2242,7 +1693,7 @@ instance of MSFT_nxScriptResource as $MSFT_nxScriptResource3ref ResourceID = "[nxScript][V-204403][medium][[Skip] SRG-OS-000029-GPOS-00010]::[RHEL]Baseline"; GetScript = "#!/bin/bash\necho [V-204403][medium][[Skip] SRG-OS-000029-GPOS-00010]"; TestScript = "#!/bin/bash\nexit 0"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxScript.skip.ps1::10::5::nxScript"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxScript.skip.ps1::10::5::nxScript"; SetScript = "#!/bin/bash"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -2253,7 +1704,7 @@ instance of MSFT_nxScriptResource as $MSFT_nxScriptResource4ref ResourceID = "[nxScript][V-204509][medium][[Skip] SRG-OS-000342-GPOS-00133]::[RHEL]Baseline"; GetScript = "#!/bin/bash\necho [V-204509][medium][[Skip] SRG-OS-000342-GPOS-00133]"; TestScript = "#!/bin/bash\nexit 0"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxScript.skip.ps1::10::5::nxScript"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxScript.skip.ps1::10::5::nxScript"; SetScript = "#!/bin/bash"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -2264,7 +1715,7 @@ instance of MSFT_nxScriptResource as $MSFT_nxScriptResource5ref ResourceID = "[nxScript][V-204513][medium][[Skip] SRG-OS-000343-GPOS-00134]::[RHEL]Baseline"; GetScript = "#!/bin/bash\necho [V-204513][medium][[Skip] SRG-OS-000343-GPOS-00134]"; TestScript = "#!/bin/bash\nexit 0"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxScript.skip.ps1::10::5::nxScript"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxScript.skip.ps1::10::5::nxScript"; SetScript = "#!/bin/bash"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -2275,7 +1726,7 @@ instance of MSFT_nxScriptResource as $MSFT_nxScriptResource6ref ResourceID = "[nxScript][V-204623][medium][[Skip] SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; GetScript = "#!/bin/bash\necho [V-204623][medium][[Skip] SRG-OS-000480-GPOS-00227]"; TestScript = "#!/bin/bash\nexit 0"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxScript.skip.ps1::10::5::nxScript"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxScript.skip.ps1::10::5::nxScript"; SetScript = "#!/bin/bash"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -2286,7 +1737,7 @@ instance of MSFT_nxScriptResource as $MSFT_nxScriptResource7ref ResourceID = "[nxScript][V-244557][medium][[Skip] SRG-OS-000080-GPOS-00048]::[RHEL]Baseline"; GetScript = "#!/bin/bash\necho [V-244557][medium][[Skip] SRG-OS-000080-GPOS-00048]"; TestScript = "#!/bin/bash\nexit 0"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxScript.skip.ps1::10::5::nxScript"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxScript.skip.ps1::10::5::nxScript"; SetScript = "#!/bin/bash"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -2297,7 +1748,7 @@ instance of MSFT_nxScriptResource as $MSFT_nxScriptResource8ref ResourceID = "[nxScript][V-244558][medium][[Skip] SRG-OS-000080-GPOS-00048]::[RHEL]Baseline"; GetScript = "#!/bin/bash\necho [V-244558][medium][[Skip] SRG-OS-000080-GPOS-00048]"; TestScript = "#!/bin/bash\nexit 0"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxScript.skip.ps1::10::5::nxScript"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxScript.skip.ps1::10::5::nxScript"; SetScript = "#!/bin/bash"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -2308,7 +1759,7 @@ instance of MSFT_nxScriptResource as $MSFT_nxScriptResource9ref ResourceID = "[nxScript][V-204399.a][medium][[Skip] SRG-OS-000029-GPOS-00010]::[RHEL]Baseline"; GetScript = "#!/bin/bash\necho [V-204399.a][medium][[Skip] SRG-OS-000029-GPOS-00010]"; TestScript = "#!/bin/bash\nexit 0"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxScript.skip.ps1::10::5::nxScript"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxScript.skip.ps1::10::5::nxScript"; SetScript = "#!/bin/bash"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -2325,7 +1776,7 @@ instance of OMI_ConfigurationDocument Author="Microsoft"; - GenerationDate="01/31/2022 17:13:26"; + GenerationDate="05/04/2022 09:09:33"; GenerationHost="Microsoft"; diff --git a/stig/linux/config/RHEL78.mof b/stig/linux/config/RHEL78.mof index 8bf2425..1da8662 100644 --- a/stig/linux/config/RHEL78.mof +++ b/stig/linux/config/RHEL78.mof @@ -1,7 +1,7 @@ /* @TargetNode='RHEL78' @GeneratedBy=Microsoft -@GenerationDate=01/31/2022 17:13:26 +@GenerationDate=05/04/2022 09:09:33 @GenerationHost=Microsoft */ @@ -9,7 +9,7 @@ instance of MSFT_nxPackageResource as $MSFT_nxPackageResource1ref { ResourceID = "[nxPackage][V-204442][high][SRG-OS-000095-GPOS-00049]::[RHEL]Baseline"; Ensure = "Absent"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxPackage.ps1::8::5::nxPackage"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxPackage.ps1::8::5::nxPackage"; Name = "rsh-server"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -19,7 +19,7 @@ instance of MSFT_nxPackageResource as $MSFT_nxPackageResource2ref { ResourceID = "[nxPackage][V-204443][high][SRG-OS-000095-GPOS-00049]::[RHEL]Baseline"; Ensure = "Absent"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxPackage.ps1::8::5::nxPackage"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxPackage.ps1::8::5::nxPackage"; Name = "ypserv"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -29,7 +29,7 @@ instance of MSFT_nxPackageResource as $MSFT_nxPackageResource3ref { ResourceID = "[nxPackage][V-204497][high][SRG-OS-000033-GPOS-00014]::[RHEL]Baseline"; Ensure = "Present"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxPackage.ps1::8::5::nxPackage"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxPackage.ps1::8::5::nxPackage"; Name = "dracut-fips"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -39,7 +39,7 @@ instance of MSFT_nxPackageResource as $MSFT_nxPackageResource4ref { ResourceID = "[nxPackage][V-204498][low][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; Ensure = "Present"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxPackage.ps1::8::5::nxPackage"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxPackage.ps1::8::5::nxPackage"; Name = "aide"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -49,7 +49,7 @@ instance of MSFT_nxPackageResource as $MSFT_nxPackageResource5ref { ResourceID = "[nxPackage][V-204502][high][SRG-OS-000095-GPOS-00049]::[RHEL]Baseline"; Ensure = "Absent"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxPackage.ps1::8::5::nxPackage"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxPackage.ps1::8::5::nxPackage"; Name = "telnet-server"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -59,7 +59,7 @@ instance of MSFT_nxPackageResource as $MSFT_nxPackageResource6ref { ResourceID = "[nxPackage][V-204585][medium][SRG-OS-000423-GPOS-00187]::[RHEL]Baseline"; Ensure = "Present"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxPackage.ps1::8::5::nxPackage"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxPackage.ps1::8::5::nxPackage"; Name = "openssh-server"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -69,7 +69,7 @@ instance of MSFT_nxPackageResource as $MSFT_nxPackageResource7ref { ResourceID = "[nxPackage][V-204604.a][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; Ensure = "Present"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxPackage.ps1::8::5::nxPackage"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxPackage.ps1::8::5::nxPackage"; Name = "firewalld"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -79,7 +79,7 @@ instance of MSFT_nxPackageResource as $MSFT_nxPackageResource8ref { ResourceID = "[nxPackage][V-204620][high][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; Ensure = "Absent"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxPackage.ps1::8::5::nxPackage"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxPackage.ps1::8::5::nxPackage"; Name = "vsftpd"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -89,7 +89,7 @@ instance of MSFT_nxPackageResource as $MSFT_nxPackageResource9ref { ResourceID = "[nxPackage][V-204621][high][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; Ensure = "Absent"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxPackage.ps1::8::5::nxPackage"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxPackage.ps1::8::5::nxPackage"; Name = "tftp-server"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -99,7 +99,7 @@ instance of MSFT_nxPackageResource as $MSFT_nxPackageResource10ref { ResourceID = "[nxPackage][V-204631][medium][SRG-OS-000375-GPOS-00160]::[RHEL]Baseline"; Ensure = "Present"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxPackage.ps1::8::5::nxPackage"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxPackage.ps1::8::5::nxPackage"; Name = "pam_pkcs11"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -111,7 +111,7 @@ ResourceID = "[nxFile][V-204395][medium][SRG-OS-000023-GPOS-00006]::[RHEL]Baseli Contents = "You are accessing a U.S. Government (USG) Information System (IS) that is provided for USG-authorized use only.\n\nBy using this IS (which includes any device attached to this IS), you consent to the following conditions:\n\n-The USG routinely intercepts and monitors communications on this IS for purposes including, but not limited to, penetration testing, COMSEC monitoring, network operations and defense, personnel misconduct (PM), law enforcement (LE), and counterintelligence (CI) investigations.\n\n-At any time, the USG may inspect and seize data stored on this IS.\n\n-Communications using, or data stored on, this IS are not private, are subject to routine monitoring, interception, and search, and may be disclosed or used for any USG-authorized purpose.\n\n-This IS includes security measures (e.g., authentication and access controls) to protect USG interests--not for your personal benefit or privacy.\n\n-Notwithstanding the above, using this IS does not constitute consent to PM, LE or CI investigative searching or monitoring of the content of privileged communications, or work product, related to personal representation or services by attorneys, psychotherapists, or clergy, and their assistants. Such communications and work product are private and confidential. See User Agreement for details."; DestinationPath = "/etc/issue"; ModuleName = "nx"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; ModuleVersion = "1.0"; ConfigurationName = "LinuxBaseLine"; }; @@ -121,7 +121,7 @@ ResourceID = "[nxFile][V-204449.a][medium][SRG-OS-000114-GPOS-00059]::[RHEL]Base Contents = ""; DestinationPath = "/etc/modprobe.d/usb-storage.conf"; ModuleName = "nx"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; ModuleVersion = "1.0"; ConfigurationName = "LinuxBaseLine"; }; @@ -131,7 +131,7 @@ ResourceID = "[nxFile][V-204449.b][medium][SRG-OS-000114-GPOS-00059]::[RHEL]Base Contents = ""; DestinationPath = "/etc/modprobe.d/blacklist.conf"; ModuleName = "nx"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; ModuleVersion = "1.0"; ConfigurationName = "LinuxBaseLine"; }; @@ -141,7 +141,7 @@ ResourceID = "[nxFile][V-204450.a][medium][SRG-OS-000378-GPOS-00163]::[RHEL]Base Contents = ""; DestinationPath = "/etc/modprobe.d/dccp.conf"; ModuleName = "nx"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; ModuleVersion = "1.0"; ConfigurationName = "LinuxBaseLine"; }; @@ -151,7 +151,7 @@ ResourceID = "[nxFile][V-204576][low][SRG-OS-000027-GPOS-00008]::[RHEL]Baseline" Contents = "* hard maxlogins 10"; DestinationPath = "/etc/security/limits.d/204576-powerstig.conf"; ModuleName = "nx"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; ModuleVersion = "1.0"; ConfigurationName = "LinuxBaseLine"; }; @@ -161,7 +161,7 @@ ResourceID = "[nxFile][V-204579.a][medium][SRG-OS-000163-GPOS-00072]::[RHEL]Base Contents = ""; DestinationPath = "/etc/profile.d/tmout.sh"; ModuleName = "nx"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; ModuleVersion = "1.0"; ConfigurationName = "LinuxBaseLine"; }; @@ -171,7 +171,7 @@ ResourceID = "[nxFile][V-204584][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseli Contents = "kernel.randomize_va_space = 2"; DestinationPath = "/etc/sysctl.d/204584-powerstig.conf"; ModuleName = "nx"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; ModuleVersion = "1.0"; ConfigurationName = "LinuxBaseLine"; }; @@ -181,7 +181,7 @@ ResourceID = "[nxFile][V-204609][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseli Contents = "net.ipv4.conf.all.accept_source_route = 0"; DestinationPath = "/etc/sysctl.d/204609-powerstig.conf"; ModuleName = "nx"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; ModuleVersion = "1.0"; ConfigurationName = "LinuxBaseLine"; }; @@ -191,7 +191,7 @@ ResourceID = "[nxFile][V-204610][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseli Contents = "net.ipv4.conf.all.rp_filter = 1"; DestinationPath = "/etc/sysctl.d/204610-powerstig.conf"; ModuleName = "nx"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; ModuleVersion = "1.0"; ConfigurationName = "LinuxBaseLine"; }; @@ -201,7 +201,7 @@ ResourceID = "[nxFile][V-204611][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseli Contents = "net.ipv4.conf.default.rp_filter = 1"; DestinationPath = "/etc/sysctl.d/204611-powerstig.conf"; ModuleName = "nx"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; ModuleVersion = "1.0"; ConfigurationName = "LinuxBaseLine"; }; @@ -211,7 +211,7 @@ ResourceID = "[nxFile][V-204612][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseli Contents = "net.ipv4.conf.default.accept_source_route = 0"; DestinationPath = "/etc/sysctl.d/204612-powerstig.conf"; ModuleName = "nx"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; ModuleVersion = "1.0"; ConfigurationName = "LinuxBaseLine"; }; @@ -221,7 +221,7 @@ ResourceID = "[nxFile][V-204613][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseli Contents = "net.ipv4.icmp_echo_ignore_broadcasts = 1"; DestinationPath = "/etc/sysctl.d/204613-powerstig.conf"; ModuleName = "nx"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; ModuleVersion = "1.0"; ConfigurationName = "LinuxBaseLine"; }; @@ -231,7 +231,7 @@ ResourceID = "[nxFile][V-204614][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseli Contents = "net.ipv4.conf.default.accept_redirects = 0"; DestinationPath = "/etc/sysctl.d/204614-powerstig.conf"; ModuleName = "nx"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; ModuleVersion = "1.0"; ConfigurationName = "LinuxBaseLine"; }; @@ -241,7 +241,7 @@ ResourceID = "[nxFile][V-204615][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseli Contents = "net.ipv4.conf.all.accept_redirects = 0"; DestinationPath = "/etc/sysctl.d/204615-powerstig.conf"; ModuleName = "nx"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; ModuleVersion = "1.0"; ConfigurationName = "LinuxBaseLine"; }; @@ -251,7 +251,7 @@ ResourceID = "[nxFile][V-204616][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseli Contents = "net.ipv4.conf.default.send_redirects = 0"; DestinationPath = "/etc/sysctl.d/204616-powerstig.conf"; ModuleName = "nx"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; ModuleVersion = "1.0"; ConfigurationName = "LinuxBaseLine"; }; @@ -261,7 +261,7 @@ ResourceID = "[nxFile][V-204617][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseli Contents = "net.ipv4.conf.all.send_redirects = 0"; DestinationPath = "/etc/sysctl.d/204617-powerstig.conf"; ModuleName = "nx"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; ModuleVersion = "1.0"; ConfigurationName = "LinuxBaseLine"; }; @@ -271,7 +271,7 @@ ResourceID = "[nxFile][V-204625][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseli Contents = "net.ipv4.ip_forward = 0"; DestinationPath = "/etc/sysctl.d/204625-powerstig.conf"; ModuleName = "nx"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; ModuleVersion = "1.0"; ConfigurationName = "LinuxBaseLine"; }; @@ -281,7 +281,7 @@ ResourceID = "[nxFile][V-204630][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseli Contents = "net.ipv6.conf.all.accept_source_route = 0"; DestinationPath = "/etc/sysctl.d/204630-powerstig.conf"; ModuleName = "nx"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; ModuleVersion = "1.0"; ConfigurationName = "LinuxBaseLine"; }; @@ -291,7 +291,7 @@ ResourceID = "[nxFile][V-237634.a][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Base Contents = "Defaults !targetpw"; DestinationPath = "/etc/sudoers.d/237634a-powerstig.conf"; ModuleName = "nx"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; ModuleVersion = "1.0"; ConfigurationName = "LinuxBaseLine"; }; @@ -301,7 +301,7 @@ ResourceID = "[nxFile][V-237634.b][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Base Contents = "Defaults !rootpw"; DestinationPath = "/etc/sudoers.d/237634b-powerstig.conf"; ModuleName = "nx"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; ModuleVersion = "1.0"; ConfigurationName = "LinuxBaseLine"; }; @@ -311,7 +311,7 @@ ResourceID = "[nxFile][V-237634.c][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Base Contents = "Defaults !runaspw"; DestinationPath = "/etc/sudoers.d/237634c-powerstig.conf"; ModuleName = "nx"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; ModuleVersion = "1.0"; ConfigurationName = "LinuxBaseLine"; }; @@ -321,17 +321,7 @@ ResourceID = "[nxFile][V-237635][medium][SRG-OS-000373-GPOS-00156]::[RHEL]Baseli Contents = "Defaults timestamp_timeout=0"; DestinationPath = "/etc/sudoers.d/237635-powerstig.conf"; ModuleName = "nx"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; - ModuleVersion = "1.0"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileResource as $MSFT_nxFileResource23ref -{ -ResourceID = "[nxFile][V-250314][medium][SRG-OS-000324-GPOS-00125]::[RHEL]Baseline"; - Contents = "%wheel ALL=(ALL) TYPE=sysadm_t ROLE=sysadm_r ALL"; - DestinationPath = "/etc/sudoers.d/250314-powerstig.conf"; - ModuleName = "nx"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; ModuleVersion = "1.0"; ConfigurationName = "LinuxBaseLine"; }; @@ -339,7 +329,7 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource1ref { ResourceID = "[nxFileLine][V-204405][medium][SRG-OS-000069-GPOS-00037]::[RHEL]Baseline"; ContainsLine = "password substack system-auth"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/pam.d/passwd"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -350,7 +340,7 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource2ref { ResourceID = "[nxFileLine][V-204407][medium][SRG-OS-000069-GPOS-00037]::[RHEL]Baseline"; ContainsLine = "ucredit = -1"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/security/pwquality.conf"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -361,7 +351,7 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource3ref { ResourceID = "[nxFileLine][V-204408][medium][SRG-OS-000070-GPOS-00038]::[RHEL]Baseline"; ContainsLine = "lcredit = -1"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/security/pwquality.conf"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -372,7 +362,7 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource4ref { ResourceID = "[nxFileLine][V-204409][medium][SRG-OS-000071-GPOS-00039]::[RHEL]Baseline"; ContainsLine = "dcredit = -1"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/security/pwquality.conf"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -383,7 +373,7 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource5ref { ResourceID = "[nxFileLine][V-204410][medium][SRG-OS-000266-GPOS-00101]::[RHEL]Baseline"; ContainsLine = "ocredit=-1"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/security/pwquality.conf"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -394,7 +384,7 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource6ref { ResourceID = "[nxFileLine][V-204411][medium][SRG-OS-000072-GPOS-00040]::[RHEL]Baseline"; ContainsLine = "difok = 8"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/security/pwquality.conf"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -405,7 +395,7 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource7ref { ResourceID = "[nxFileLine][V-204412][medium][SRG-OS-000072-GPOS-00040]::[RHEL]Baseline"; ContainsLine = "minclass = 4"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/security/pwquality.conf"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -416,7 +406,7 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource8ref { ResourceID = "[nxFileLine][V-204413][medium][SRG-OS-000072-GPOS-00040]::[RHEL]Baseline"; ContainsLine = "maxrepeat = 3"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/security/pwquality.conf"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -427,18 +417,18 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource9ref { ResourceID = "[nxFileLine][V-204414][medium][SRG-OS-000072-GPOS-00040]::[RHEL]Baseline"; ContainsLine = "maxclassrepeat = 4"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/security/pwquality.conf"; ModuleName = "nx"; ModuleVersion = "1.0"; - DoesNotContainPattern = "^#\\s*maxclassrepeat\\s*=.*|^\\s*maxclassrepeat\\s*=\\s*(?:\\d{2,}|[3-9])"; + DoesNotContainPattern = "^#\\s*maxclassrepeat\\s*=.*|^\\s*maxclassrepeat\\s*=\\s*(?:\\d{2,}|[1-3|5-9])"; ConfigurationName = "LinuxBaseLine"; }; instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource10ref { ResourceID = "[nxFileLine][V-204416][medium][SRG-OS-000073-GPOS-00041]::[RHEL]Baseline"; ContainsLine = "ENCRYPT_METHOD SHA512"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/login.defs"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -449,7 +439,7 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource11ref { ResourceID = "[nxFileLine][V-204418][medium][SRG-OS-000075-GPOS-00043]::[RHEL]Baseline"; ContainsLine = "PASS_MIN_DAYS 1"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/login.defs"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -460,7 +450,7 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource12ref { ResourceID = "[nxFileLine][V-204420][medium][SRG-OS-000076-GPOS-00044]::[RHEL]Baseline"; ContainsLine = "PASS_MAX_DAYS 60"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/login.defs"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -471,7 +461,7 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource13ref { ResourceID = "[nxFileLine][V-204423][medium][SRG-OS-000078-GPOS-00046]::[RHEL]Baseline"; ContainsLine = "minlen = 15"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/security/pwquality.conf"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -482,7 +472,7 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource14ref { ResourceID = "[nxFileLine][V-204425][high][SRG-OS-000106-GPOS-00053]::[RHEL]Baseline"; ContainsLine = "PermitEmptyPasswords no"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/ssh/sshd_config"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -492,19 +482,19 @@ ResourceID = "[nxFileLine][V-204425][high][SRG-OS-000106-GPOS-00053]::[RHEL]Base instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource15ref { ResourceID = "[nxFileLine][V-204426][medium][SRG-OS-000118-GPOS-00060]::[RHEL]Baseline"; - ContainsLine = "INACTIVE=0"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + ContainsLine = "INACTIVE=35"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/default/useradd"; ModuleName = "nx"; ModuleVersion = "1.0"; - DoesNotContainPattern = "^#\\s*INACTIVE.*$|^INACTIVE\\s*=\\s*(?!0\\b)[-]*\\w*$"; + DoesNotContainPattern = "^#\\s*INACTIVE\\s*=.*|^\\s*INACTIVE\\s*=\\s*(3[5-9]|[4-9]\\d+|\\d{3,})"; ConfigurationName = "LinuxBaseLine"; }; instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource16ref { ResourceID = "[nxFileLine][V-204431][medium][SRG-OS-000480-GPOS-00226]::[RHEL]Baseline"; ContainsLine = "FAIL_DELAY 4"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/login.defs"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -515,7 +505,7 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource17ref { ResourceID = "[nxFileLine][V-204434][medium][SRG-OS-000480-GPOS-00229]::[RHEL]Baseline"; ContainsLine = "PermitUserEnvironment no"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/ssh/sshd_config"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -526,7 +516,7 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource18ref { ResourceID = "[nxFileLine][V-204435][medium][SRG-OS-000480-GPOS-00229]::[RHEL]Baseline"; ContainsLine = "HostbasedAuthentication no"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/ssh/sshd_config"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -537,7 +527,7 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource19ref { ResourceID = "[nxFileLine][V-204447][high][SRG-OS-000366-GPOS-00153]::[RHEL]Baseline"; ContainsLine = "gpgcheck=1"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/yum.conf"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -548,7 +538,7 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource20ref { ResourceID = "[nxFileLine][V-204448][high][SRG-OS-000366-GPOS-00153]::[RHEL]Baseline"; ContainsLine = "localpkg_gpgcheck=1"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/yum.conf"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -559,7 +549,7 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource21ref { ResourceID = "[nxFileLine][V-204449.c][medium][SRG-OS-000114-GPOS-00059]::[RHEL]Baseline"; ContainsLine = "install usb-storage /bin/true"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/modprobe.d/usb-storage.conf"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -570,7 +560,7 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource22ref { ResourceID = "[nxFileLine][V-204449.d][medium][SRG-OS-000114-GPOS-00059]::[RHEL]Baseline"; ContainsLine = "blacklist usb-storage"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/modprobe.d/blacklist.conf"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -581,7 +571,7 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource23ref { ResourceID = "[nxFileLine][V-204450.b][medium][SRG-OS-000378-GPOS-00163]::[RHEL]Baseline"; ContainsLine = "install dccp /bin/true"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/modprobe.d/dccp.conf"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -592,7 +582,7 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource24ref { ResourceID = "[nxFileLine][V-204450.c][medium][SRG-OS-000378-GPOS-00163]::[RHEL]Baseline"; ContainsLine = "blacklist dccp"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/modprobe.d/blacklist.conf"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -603,7 +593,7 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource25ref { ResourceID = "[nxFileLine][V-204452][low][SRG-OS-000437-GPOS-00194]::[RHEL]Baseline"; ContainsLine = "clean_requirements_on_remove=1"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/yum.conf"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -614,7 +604,7 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource26ref { ResourceID = "[nxFileLine][V-204453][medium][SRG-OS-000445-GPOS-00199]::[RHEL]Baseline"; ContainsLine = "SELINUX=enforcing"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/selinux/config"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -625,7 +615,7 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource27ref { ResourceID = "[nxFileLine][V-204454][medium][SRG-OS-000445-GPOS-00199]::[RHEL]Baseline"; ContainsLine = "SELINUXTYPE=targeted"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/selinux/config"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -636,7 +626,7 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource28ref { ResourceID = "[nxFileLine][V-204457][medium][SRG-OS-000480-GPOS-00228]::[RHEL]Baseline"; ContainsLine = "UMASK 077"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/login.defs"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -647,7 +637,7 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource29ref { ResourceID = "[nxFileLine][V-204466][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; ContainsLine = "CREATE_HOME yes"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/login.defs"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -658,16 +648,16 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource30ref { ResourceID = "[nxFileLine][V-204504][medium][SRG-OS-000046-GPOS-00022]::[RHEL]Baseline"; ContainsLine = "-f 2"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "^#\\s*-f\\s+2|^\\s*-f\\s*1"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileResource as $MSFT_nxFileResource24ref +instance of MSFT_nxFileResource as $MSFT_nxFileResource23ref { -SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::29::9::nxFile"; +SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::29::9::nxFile"; ModuleName = "nx"; ModuleVersion = "1.0"; ResourceID = "[nxFile][V-204506.a][medium][SRG-OS-000342-GPOS-00133]::[RHEL]Baseline"; @@ -678,7 +668,7 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource31ref { ResourceID = "[nxFileLine][V-204506.a][medium][SRG-OS-000342-GPOS-00133]::[RHEL]Baseline"; ContainsLine = "active = yes"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audisp/plugins.d/au-remote.conf"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -689,7 +679,7 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource32ref { ResourceID = "[nxFileLine][V-204506.b][medium][SRG-OS-000342-GPOS-00133]::[RHEL]Baseline"; ContainsLine = "direction = out"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audisp/plugins.d/au-remote.conf"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -700,7 +690,7 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource33ref { ResourceID = "[nxFileLine][V-204506.c][medium][SRG-OS-000342-GPOS-00133]::[RHEL]Baseline"; ContainsLine = "path = /sbin/audisp-remote"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audisp/plugins.d/au-remote.conf"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -711,7 +701,7 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource34ref { ResourceID = "[nxFileLine][V-204506.d][medium][SRG-OS-000342-GPOS-00133]::[RHEL]Baseline"; ContainsLine = "type = always"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audisp/plugins.d/au-remote.conf"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -722,7 +712,7 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource35ref { ResourceID = "[nxFileLine][V-204507][medium][SRG-OS-000342-GPOS-00133]::[RHEL]Baseline"; ContainsLine = "overflow_action = syslog"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audisp/audispd.conf"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -733,16 +723,16 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource36ref { ResourceID = "[nxFileLine][V-204508][medium][SRG-OS-000342-GPOS-00133]::[RHEL]Baseline"; ContainsLine = "name_format = hostname"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audisp/audispd.conf"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "^#\\s*name_format.*$|^name_format\\s*=\\s*(?!hostname$)\\w*$"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileResource as $MSFT_nxFileResource25ref +instance of MSFT_nxFileResource as $MSFT_nxFileResource24ref { -SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::19::9::nxFile"; +SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::19::9::nxFile"; ModuleName = "nx"; ModuleVersion = "1.0"; ResourceID = "[nxFile][V-204510][medium][SRG-OS-000342-GPOS-00133]::[RHEL]Baseline"; @@ -753,7 +743,7 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource37ref { ResourceID = "[nxFileLine][V-204510][medium][SRG-OS-000342-GPOS-00133]::[RHEL]Baseline"; ContainsLine = "enable_krb5 = yes"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audisp/audisp-remote.conf"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -764,7 +754,7 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource38ref { ResourceID = "[nxFileLine][V-204511][medium][SRG-OS-000342-GPOS-00133]::[RHEL]Baseline"; ContainsLine = "disk_full_action = single"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audisp/audisp-remote.conf"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -775,7 +765,7 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource39ref { ResourceID = "[nxFileLine][V-204512][medium][SRG-OS-000342-GPOS-00133]::[RHEL]Baseline"; ContainsLine = "network_failure_action = syslog"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audisp/audisp-remote.conf"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -786,7 +776,7 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource40ref { ResourceID = "[nxFileLine][V-204514][medium][SRG-OS-000343-GPOS-00134]::[RHEL]Baseline"; ContainsLine = "space_left_action = email"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/auditd.conf"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -797,7 +787,7 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource41ref { ResourceID = "[nxFileLine][V-204515][medium][SRG-OS-000343-GPOS-00134]::[RHEL]Baseline"; ContainsLine = "action_mail_acct = root"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/auditd.conf"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -808,7 +798,7 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource42ref { ResourceID = "[nxFileLine][V-204516.a][medium][SRG-OS-000327-GPOS-00127]::[RHEL]Baseline"; ContainsLine = "-a always,exit -F arch=b32 -S execve -C uid!=euid -F euid=0 -k setuid"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -819,7 +809,7 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource43ref { ResourceID = "[nxFileLine][V-204516.b][medium][SRG-OS-000327-GPOS-00127]::[RHEL]Baseline"; ContainsLine = "-a always,exit -F arch=b64 -S execve -C uid!=euid -F euid=0 -k setuid"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -830,7 +820,7 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource44ref { ResourceID = "[nxFileLine][V-204516.c][medium][SRG-OS-000327-GPOS-00127]::[RHEL]Baseline"; ContainsLine = "-a always,exit -F arch=b32 -S execve -C gid!=egid -F egid=0 -k setgid"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -841,7 +831,7 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource45ref { ResourceID = "[nxFileLine][V-204516.d][medium][SRG-OS-000327-GPOS-00127]::[RHEL]Baseline"; ContainsLine = "-a always,exit -F arch=b64 -S execve -C gid!=egid -F egid=0 -k setgid"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -851,1318 +841,779 @@ ResourceID = "[nxFileLine][V-204516.d][medium][SRG-OS-000327-GPOS-00127]::[RHEL] instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource46ref { ResourceID = "[nxFileLine][V-204517.a][medium][SRG-OS-000064-GPOS-00033]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S chown -F auid>=1000 -F auid!=unset -k perm_mod"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + ContainsLine = "-a always,exit -F arch=b32 -S chown,fchown,fchownat,lchown -F auid>=1000 -F auid!=unset -k perm_mod"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*chown\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*perm_mod"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*chown,fchown,fchownat,lchown\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*perm_mod"; ConfigurationName = "LinuxBaseLine"; }; instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource47ref { ResourceID = "[nxFileLine][V-204517.b][medium][SRG-OS-000064-GPOS-00033]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S chown -F auid>=1000 -F auid!=unset -k perm_mod"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + ContainsLine = "-a always,exit -F arch=b64 -S chown,fchown,fchownat,lchown -F auid>=1000 -F auid!=unset -k perm_mod"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*chown\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*perm_mod"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*chown,fchown,fchownat,lchown\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*perm_mod"; ConfigurationName = "LinuxBaseLine"; }; instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource48ref { -ResourceID = "[nxFileLine][V-204518.a][medium][SRG-OS-000064-GPOS-00033]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S fchown -F auid>=1000 -F auid!=unset -k perm_mod"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; +ResourceID = "[nxFileLine][V-204521.a][medium][SRG-OS-000458-GPOS-00203]::[RHEL]Baseline"; + ContainsLine = "-a always,exit -F arch=b32 -S chmod,fchmod,fchmodat -F auid>=1000 -F auid!=unset -k perm_mod"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*fchown\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*perm_mod"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*chmod,fchmod,fchmodat\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*perm_mod"; ConfigurationName = "LinuxBaseLine"; }; instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource49ref { -ResourceID = "[nxFileLine][V-204518.b][medium][SRG-OS-000064-GPOS-00033]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S fchown -F auid>=1000 -F auid!=unset -k perm_mod"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; +ResourceID = "[nxFileLine][V-204521.b][medium][SRG-OS-000458-GPOS-00203]::[RHEL]Baseline"; + ContainsLine = "-a always,exit -F arch=b64 -S chmod,fchmod,fchmodat -F auid>=1000 -F auid!=unset -k perm_mod"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*fchown\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*perm_mod"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*chmod,fchmod,fchmodat\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*perm_mod"; ConfigurationName = "LinuxBaseLine"; }; instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource50ref { -ResourceID = "[nxFileLine][V-204519.a][medium][SRG-OS-000064-GPOS-00033]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S lchown -F auid>=1000 -F auid!=unset -k perm_mod"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; +ResourceID = "[nxFileLine][V-204524.a][medium][SRG-OS-000458-GPOS-00203]::[RHEL]Baseline"; + ContainsLine = "-a always,exit -F arch=b32 -S setxattr,fsetxattr,lsetxattr,removexattr,fremovexattr,lremovexattr -F auid>=1000 -F auid!=unset -k perm_mod"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*lchown\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*perm_mod"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*setxattr,fsetxattr,lsetxattr,removexattr,fremovexattr,lremovexattr\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*perm_mod"; ConfigurationName = "LinuxBaseLine"; }; instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource51ref { -ResourceID = "[nxFileLine][V-204519.b][medium][SRG-OS-000064-GPOS-00033]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S lchown -F auid>=1000 -F auid!=unset -k perm_mod"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; +ResourceID = "[nxFileLine][V-204524.b][medium][SRG-OS-000458-GPOS-00203]::[RHEL]Baseline"; + ContainsLine = "-a always,exit -F arch=b64 -S setxattr,fsetxattr,lsetxattr,removexattr,fremovexattr,lremovexattr -F auid>=1000 -F auid!=unset -k perm_mod"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*lchown\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*perm_mod"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*setxattr,fsetxattr,lsetxattr,removexattr,fremovexattr,lremovexattr\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*perm_mod"; ConfigurationName = "LinuxBaseLine"; }; instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource52ref { -ResourceID = "[nxFileLine][V-204520.a][medium][SRG-OS-000064-GPOS-00033]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S fchownat -F auid>=1000 -F auid!=unset -k perm_mod"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; +ResourceID = "[nxFileLine][V-204531.a][medium][SRG-OS-000064-GPOS-00033]::[RHEL]Baseline"; + ContainsLine = "-a always,exit -F arch=b32 -S creat,open,openat,open_by_handle_at,truncate,ftruncate -F exit=-EPERM -F auid>=1000 -F auid!=unset -k access"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*fchownat\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*perm_mod"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*creat,open,openat,open_by_handle_at,truncate,ftruncate\\s*-F\\s*exit\\s*=\\s*-EPERM\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*access"; ConfigurationName = "LinuxBaseLine"; }; instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource53ref { -ResourceID = "[nxFileLine][V-204520.b][medium][SRG-OS-000064-GPOS-00033]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S fchownat -F auid>=1000 -F auid!=unset -k perm_mod"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; +ResourceID = "[nxFileLine][V-204531.b][medium][SRG-OS-000064-GPOS-00033]::[RHEL]Baseline"; + ContainsLine = "-a always,exit -F arch=b32 -S creat,open,openat,open_by_handle_at,truncate,ftruncate -F exit=-EACCES -F auid>=1000 -F auid!=unset -k access"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*fchownat\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*perm_mod"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*creat,open,openat,open_by_handle_at,truncate,ftruncate\\s*-F\\s*exit\\s*=\\s*-EACCES\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*access"; ConfigurationName = "LinuxBaseLine"; }; instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource54ref { -ResourceID = "[nxFileLine][V-204521.a][medium][SRG-OS-000458-GPOS-00203]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S chmod -F auid>=1000 -F auid!=unset -k perm_mod"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; +ResourceID = "[nxFileLine][V-204531.c][medium][SRG-OS-000064-GPOS-00033]::[RHEL]Baseline"; + ContainsLine = "-a always,exit -F arch=b64 -S creat,open,openat,open_by_handle_at,truncate,ftruncate -F exit=-EPERM -F auid>=1000 -F auid!=unset -k access"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*chmod\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*perm_mod"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*creat,open,openat,open_by_handle_at,truncate,ftruncate\\s*-F\\s*exit\\s*=\\s*-EPERM\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*access"; ConfigurationName = "LinuxBaseLine"; }; instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource55ref { -ResourceID = "[nxFileLine][V-204521.b][medium][SRG-OS-000458-GPOS-00203]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S chmod -F auid>=1000 -F auid!=unset -k perm_mod"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; +ResourceID = "[nxFileLine][V-204531.d][medium][SRG-OS-000064-GPOS-00033]::[RHEL]Baseline"; + ContainsLine = "-a always,exit -F arch=b64 -S creat,open,openat,open_by_handle_at,truncate,ftruncate -F exit=-EACCES -F auid>=1000 -F auid!=unset -k access"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*chmod\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*perm_mod"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*creat,open,openat,open_by_handle_at,truncate,ftruncate\\s*-F\\s*exit\\s*=\\s*-EACCES\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*access"; ConfigurationName = "LinuxBaseLine"; }; instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource56ref { -ResourceID = "[nxFileLine][V-204522.a][medium][SRG-OS-000458-GPOS-00203]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S fchmod -F auid>=1000 -F auid!=unset -k perm_mod"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*fchmod\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*perm_mod"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource57ref -{ -ResourceID = "[nxFileLine][V-204522.b][medium][SRG-OS-000458-GPOS-00203]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S fchmod -F auid>=1000 -F auid!=unset -k perm_mod"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*fchmod\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*perm_mod"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource58ref -{ -ResourceID = "[nxFileLine][V-204523.a][medium][SRG-OS-000458-GPOS-00203]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S fchmodat -F auid>=1000 -F auid!=unset -k perm_mod"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*fchmodat\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*perm_mod"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource59ref -{ -ResourceID = "[nxFileLine][V-204523.b][medium][SRG-OS-000458-GPOS-00203]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S fchmodat -F auid>=1000 -F auid!=unset -k perm_mod"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*fchmodat\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*perm_mod"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource60ref -{ -ResourceID = "[nxFileLine][V-204524.a][medium][SRG-OS-000458-GPOS-00203]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S setxattr -F auid>=1000 -F auid!=unset -k perm_mod"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*setxattr\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*perm_mod"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource61ref -{ -ResourceID = "[nxFileLine][V-204524.b][medium][SRG-OS-000458-GPOS-00203]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S setxattr -F auid>=1000 -F auid!=unset -k perm_mod"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*setxattr\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*perm_mod"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource62ref -{ -ResourceID = "[nxFileLine][V-204525.a][medium][SRG-OS-000458-GPOS-00203]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S fsetxattr -F auid>=1000 -F auid!=unset -k perm_mod"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*fsetxattr\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*perm_mod"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource63ref -{ -ResourceID = "[nxFileLine][V-204525.b][medium][SRG-OS-000458-GPOS-00203]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S fsetxattr -F auid>=1000 -F auid!=unset -k perm_mod"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*fsetxattr\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*perm_mod"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource64ref -{ -ResourceID = "[nxFileLine][V-204526.a][medium][SRG-OS-000458-GPOS-00203]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S lsetxattr -F auid>=1000 -F auid!=unset -k perm_mod"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*lsetxattr\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*perm_mod"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource65ref -{ -ResourceID = "[nxFileLine][V-204526.b][medium][SRG-OS-000458-GPOS-00203]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S lsetxattr -F auid>=1000 -F auid!=unset -k perm_mod"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*lsetxattr\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*perm_mod"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource66ref -{ -ResourceID = "[nxFileLine][V-204527.a][medium][SRG-OS-000458-GPOS-00203]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S removexattr -F auid>=1000 -F auid!=unset -k perm_mod"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*removexattr\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*perm_mod"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource67ref -{ -ResourceID = "[nxFileLine][V-204527.b][medium][SRG-OS-000458-GPOS-00203]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S removexattr -F auid>=1000 -F auid!=unset -k perm_mod"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*removexattr\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*perm_mod"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource68ref -{ -ResourceID = "[nxFileLine][V-204528.a][medium][SRG-OS-000458-GPOS-00203]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S fremovexattr -F auid>=1000 -F auid!=unset -k perm_mod"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*fremovexattr\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*perm_mod"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource69ref -{ -ResourceID = "[nxFileLine][V-204528.b][medium][SRG-OS-000458-GPOS-00203]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S fremovexattr -F auid>=1000 -F auid!=unset -k perm_mod"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*fremovexattr\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*perm_mod"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource70ref -{ -ResourceID = "[nxFileLine][V-204529.a][medium][SRG-OS-000458-GPOS-00203]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S lremovexattr -F auid>=1000 -F auid!=unset -k perm_mod"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*lremovexattr\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*perm_mod"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource71ref -{ -ResourceID = "[nxFileLine][V-204529.b][medium][SRG-OS-000458-GPOS-00203]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S lremovexattr -F auid>=1000 -F auid!=unset -k perm_mod"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*lremovexattr\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*perm_mod"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource72ref -{ -ResourceID = "[nxFileLine][V-204530.a][medium][SRG-OS-000064-GPOS-00033]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S creat F exit=-EPERM -F auid>=1000 -F auid!=unset -k access"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*creat\\s*F\\s*exit\\s*=\\s*-EPERM\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*access"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource73ref -{ -ResourceID = "[nxFileLine][V-204530.b][medium][SRG-OS-000064-GPOS-00033]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S creat -F exit=-EACCES -F auid>=1000 -F auid!=unset -k access"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*creat\\s*-F\\s*exit\\s*=\\s*-EACCES\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*access"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource74ref -{ -ResourceID = "[nxFileLine][V-204530.c][medium][SRG-OS-000064-GPOS-00033]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S creat -F exit=-EPERM -F auid>=1000 -F auid!=unset -k access"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*creat\\s*-F\\s*exit\\s*=\\s*-EPERM\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*access"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource75ref -{ -ResourceID = "[nxFileLine][V-204530.d][medium][SRG-OS-000064-GPOS-00033]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S creat -F exit=-EACCES -F auid>=1000 -F auid!=unset -k access"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*creat\\s*-F\\s*exit\\s*=\\s*-EACCES\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*access"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource76ref -{ -ResourceID = "[nxFileLine][V-204531.a][medium][SRG-OS-000064-GPOS-00033]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S open -F exit=-EPERM -F auid>=1000 -F auid!=unset -k access"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*open\\s*-F\\s*exit\\s*=\\s*-EPERM\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*access"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource77ref -{ -ResourceID = "[nxFileLine][V-204531.b][medium][SRG-OS-000064-GPOS-00033]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S open -F exit=-EACCES -F auid>=1000 -F auid!=unset -k access"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*open\\s*-F\\s*exit\\s*=\\s*-EACCES\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*access"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource78ref -{ -ResourceID = "[nxFileLine][V-204531.c][medium][SRG-OS-000064-GPOS-00033]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S open -F exit=-EPERM -F auid>=1000 -F auid!=unset -k access"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*open\\s*-F\\s*exit\\s*=\\s*-EPERM\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*access"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource79ref -{ -ResourceID = "[nxFileLine][V-204531.d][medium][SRG-OS-000064-GPOS-00033]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S open -F exit=-EACCES -F auid>=1000 -F auid!=unset -k access"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*open\\s*-F\\s*exit\\s*=\\s*-EACCES\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*access"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource80ref -{ -ResourceID = "[nxFileLine][V-204532.a][medium][SRG-OS-000064-GPOS-00033]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S openat -F exit=-EPERM -F auid>=1000 -F auid!=unset -k access"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*openat\\s*-F\\s*exit\\s*=\\s*-EPERM\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*access"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource81ref -{ -ResourceID = "[nxFileLine][V-204532.b][medium][SRG-OS-000064-GPOS-00033]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S openat -F exit=-EACCES -F auid>=1000 -F auid!=unset -k access"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*openat\\s*-F\\s*exit\\s*=\\s*-EACCES\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*access"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource82ref -{ -ResourceID = "[nxFileLine][V-204532.c][medium][SRG-OS-000064-GPOS-00033]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S openat -F exit=-EPERM -F auid>=1000 -F auid!=unset -k access"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*openat\\s*-F\\s*exit\\s*=\\s*-EPERM\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*access"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource83ref -{ -ResourceID = "[nxFileLine][V-204532.d][medium][SRG-OS-000064-GPOS-00033]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S openat -F exit=-EACCES -F auid>=1000 -F auid!=unset -k access"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*openat\\s*-F\\s*exit\\s*=\\s*-EACCES\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*access"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource84ref -{ -ResourceID = "[nxFileLine][V-204533.a][medium][SRG-OS-000064-GPOS-00033]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S open_by_handle_at -F exit=-EPERM -F auid>=1000 -F auid!=unset -k access"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*open_by_handle_at\\s*-F\\s*exit\\s*=\\s*-EPERM\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*access"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource85ref -{ -ResourceID = "[nxFileLine][V-204533.b][medium][SRG-OS-000064-GPOS-00033]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S open_by_handle_at -F exit=-EACCES -F auid>=1000 -F auid!=unset -k access"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*open_by_handle_at\\s*-F\\s*exit\\s*=\\s*-EACCES\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*access"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource86ref -{ -ResourceID = "[nxFileLine][V-204533.c][medium][SRG-OS-000064-GPOS-00033]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S open_by_handle_at -F exit=-EPERM -F auid>=1000 -F auid!=unset -k access"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*open_by_handle_at\\s*-F\\s*exit\\s*=\\s*-EPERM\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*access"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource87ref -{ -ResourceID = "[nxFileLine][V-204533.d][medium][SRG-OS-000064-GPOS-00033]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S open_by_handle_at -F exit=-EACCES -F auid>=1000 -F auid!=unset -k access"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*open_by_handle_at\\s*-F\\s*exit\\s*=\\s*-EACCES\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*access"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource88ref -{ -ResourceID = "[nxFileLine][V-204534.a][medium][SRG-OS-000064-GPOS-00033]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S truncate -F exit=-EPERM -F auid>=1000 -F auid!=unset -k access"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*truncate\\s*-F\\s*exit\\s*=\\s*-EPERM\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*access"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource89ref -{ -ResourceID = "[nxFileLine][V-204534.b][medium][SRG-OS-000064-GPOS-00033]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S truncate -F exit=-EACCES -F auid>=1000 -F auid!=unset -k access"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*truncate\\s*-F\\s*exit\\s*=\\s*-EACCES\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*access"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource90ref -{ -ResourceID = "[nxFileLine][V-204534.c][medium][SRG-OS-000064-GPOS-00033]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S truncate -F exit=-EPERM -F auid>=1000 -F auid!=unset -k access"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*truncate\\s*-F\\s*exit\\s*=\\s*-EPERM\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*access"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource91ref -{ -ResourceID = "[nxFileLine][V-204534.d][medium][SRG-OS-000064-GPOS-00033]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S truncate -F exit=-EACCES -F auid>=1000 -F auid!=unset -k access"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*truncate\\s*-F\\s*exit\\s*=\\s*-EACCES\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*access"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource92ref -{ -ResourceID = "[nxFileLine][V-204535.a][medium][SRG-OS-000064-GPOS-00033]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S ftruncate -F exit=-EPERM -F auid>=1000 -F auid!=unset -k access"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*ftruncate\\s*-F\\s*exit\\s*=\\s*-EPERM\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*access"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource93ref -{ -ResourceID = "[nxFileLine][V-204535.b][medium][SRG-OS-000064-GPOS-00033]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S ftruncate -F exit=-EACCES -F auid>=1000 -F auid!=unset -k access"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*ftruncate\\s*-F\\s*exit\\s*=\\s*-EACCES\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*access"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource94ref -{ -ResourceID = "[nxFileLine][V-204535.c][medium][SRG-OS-000064-GPOS-00033]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S ftruncate -F exit=-EPERM -F auid>=1000 -F auid!=unset -k access"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*ftruncate\\s*-F\\s*exit\\s*=\\s*-EPERM\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*access"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource95ref -{ -ResourceID = "[nxFileLine][V-204535.d][medium][SRG-OS-000064-GPOS-00033]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S ftruncate -F exit=-EACCES -F auid>=1000 -F auid!=unset -k access"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*ftruncate\\s*-F\\s*exit\\s*=\\s*-EACCES\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*access"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource96ref -{ ResourceID = "[nxFileLine][V-204536][medium][SRG-OS-000392-GPOS-00172]::[RHEL]Baseline"; ContainsLine = "-a always,exit -F path=/usr/sbin/semanage -F auid>=1000 -F auid!=unset -k privileged-priv_change"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/sbin/semanage\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-priv_change"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource97ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource57ref { ResourceID = "[nxFileLine][V-204537][medium][SRG-OS-000392-GPOS-00172]::[RHEL]Baseline"; ContainsLine = "-a always,exit -F path=/usr/sbin/setsebool -F auid>=1000 -F auid!=unset -k privileged-priv_change"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/sbin/setsebool\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-priv_change"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource98ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource58ref { ResourceID = "[nxFileLine][V-204538][medium][SRG-OS-000392-GPOS-00172]::[RHEL]Baseline"; ContainsLine = "-a always,exit -F path=/usr/bin/chcon -F auid>=1000 -F auid!=unset -k privileged-priv_change"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/bin/chcon\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-priv_change"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource99ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource59ref { ResourceID = "[nxFileLine][V-204539][medium][SRG-OS-000392-GPOS-00172]::[RHEL]Baseline"; ContainsLine = "-a always,exit -F path=/usr/sbin/setfiles -F auid>=1000 -F auid!=unset -k privileged-priv_change"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/sbin/setfiles\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-priv_change"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource100ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource60ref { ResourceID = "[nxFileLine][V-204540][medium][SRG-OS-000392-GPOS-00172]::[RHEL]Baseline"; ContainsLine = "-w /var/run/faillock -p wa -k logins"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "#\\s*-w\\s*/var/run/faillock\\s*-p\\s*wa\\s*-k\\s*logins"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource101ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource61ref { ResourceID = "[nxFileLine][V-204541][medium][SRG-OS-000392-GPOS-00172]::[RHEL]Baseline"; ContainsLine = "-w /var/log/lastlog -p wa -k logins"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "#\\s*-w\\s*/var/log/lastlog\\s*-p\\s*wa\\s*-k\\s*logins"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource102ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource62ref { ResourceID = "[nxFileLine][V-204542][medium][SRG-OS-000042-GPOS-00020]::[RHEL]Baseline"; ContainsLine = "-a always,exit -F path=/usr/bin/passwd -F auid>=1000 -F auid!=unset -k privileged-passwd"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/bin/passwd\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-passwd"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource103ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource63ref { ResourceID = "[nxFileLine][V-204543][medium][SRG-OS-000042-GPOS-00020]::[RHEL]Baseline"; ContainsLine = "-a always,exit -F path=/usr/sbin/unix_chkpwd -F auid>=1000 -F auid!=unset -k privileged-passwd"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/sbin/unix_chkpwd\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-passwd"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource104ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource64ref { ResourceID = "[nxFileLine][V-204544][medium][SRG-OS-000042-GPOS-00020]::[RHEL]Baseline"; ContainsLine = "-a always,exit -F path=/usr/bin/gpasswd -F auid>=1000 -F auid!=unset -k privileged-passwd"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/bin/gpasswd\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-passwd"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource105ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource65ref { ResourceID = "[nxFileLine][V-204545][medium][SRG-OS-000042-GPOS-00020]::[RHEL]Baseline"; ContainsLine = "-a always,exit -F path=/usr/bin/chage -F auid>=1000 -F auid!=unset -k privileged-passwd"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/bin/chage\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-passwd"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource106ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource66ref { ResourceID = "[nxFileLine][V-204546][medium][SRG-OS-000042-GPOS-00020]::[RHEL]Baseline"; ContainsLine = "-a always,exit -F path=/usr/sbin/userhelper -F auid>=1000 -F auid!=unset -k privileged-passwd"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/sbin/userhelper\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-passwd"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource107ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource67ref { ResourceID = "[nxFileLine][V-204547][medium][SRG-OS-000037-GPOS-00015]::[RHEL]Baseline"; ContainsLine = "-a always,exit -F path=/usr/bin/su -F auid>=1000 -F auid!=unset -k privileged-priv_change"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/bin/su\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-priv_change"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource108ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource68ref { ResourceID = "[nxFileLine][V-204548][medium][SRG-OS-000037-GPOS-00015]::[RHEL]Baseline"; ContainsLine = "-a always,exit -F path=/usr/bin/sudo -F auid>=1000 -F auid!=unset -k privileged-priv_change"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/bin/sudo\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-priv_change"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource109ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource69ref { ResourceID = "[nxFileLine][V-204549.a][medium][SRG-OS-000037-GPOS-00015]::[RHEL]Baseline"; ContainsLine = "-w /etc/sudoers -p wa -k privileged-actions"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "#\\s*-w /etc/sudoers -p wa -k privileged-actions"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource110ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource70ref { ResourceID = "[nxFileLine][V-204549.b][medium][SRG-OS-000037-GPOS-00015]::[RHEL]Baseline"; ContainsLine = "-w /etc/sudoers.d/ -p wa -k privileged-actions"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "#\\s*-w /etc/sudoers.d/ -p wa -k privileged-actions"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource111ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource71ref { ResourceID = "[nxFileLine][V-204550][medium][SRG-OS-000037-GPOS-00015]::[RHEL]Baseline"; ContainsLine = "-a always,exit -F path=/usr/bin/newgrp -F auid>=1000 -F auid!=unset -k privileged-priv_change"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/bin/newgrp\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-priv_change"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource112ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource72ref { ResourceID = "[nxFileLine][V-204551][medium][SRG-OS-000037-GPOS-00015]::[RHEL]Baseline"; ContainsLine = "-a always,exit -F path=/usr/bin/chsh -F auid>=1000 -F auid!=unset -k privileged-priv_change"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/bin/chsh\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-priv_change"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource113ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource73ref { ResourceID = "[nxFileLine][V-204552.a][medium][SRG-OS-000042-GPOS-00020]::[RHEL]Baseline"; ContainsLine = "-a always,exit -F arch=b32 -S mount -F auid>=1000 -F auid!=unset -k privileged-mount"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*mount\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-mount"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource114ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource74ref { ResourceID = "[nxFileLine][V-204552.b][medium][SRG-OS-000042-GPOS-00020]::[RHEL]Baseline"; ContainsLine = "-a always,exit -F arch=b64 -S mount -F auid>=1000 -F auid!=unset -k privileged-mount"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*mount\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-mount"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource115ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource75ref { ResourceID = "[nxFileLine][V-204552.c][medium][SRG-OS-000042-GPOS-00020]::[RHEL]Baseline"; ContainsLine = "-a always,exit -F path=/usr/bin/mount -F auid>=1000 -F auid!=unset -k privileged-mount"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/bin/mount\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-mount"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource116ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource76ref { ResourceID = "[nxFileLine][V-204553][medium][SRG-OS-000042-GPOS-00020]::[RHEL]Baseline"; ContainsLine = "-a always,exit -F path=/usr/bin/umount -F auid>=1000 -F auid!=unset -k privileged-mount"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/bin/umount\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-mount"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource117ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource77ref { ResourceID = "[nxFileLine][V-204554][medium][SRG-OS-000042-GPOS-00020]::[RHEL]Baseline"; ContainsLine = "-a always,exit -F path=/usr/sbin/postdrop -F auid>=1000 -F auid!=unset -k privileged-postfix"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/sbin/postdrop\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-postfix"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource118ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource78ref { ResourceID = "[nxFileLine][V-204555][medium][SRG-OS-000042-GPOS-00020]::[RHEL]Baseline"; ContainsLine = "-a always,exit -F path=/usr/sbin/postqueue -F auid>=1000 -F auid!=unset -k privileged-postfix"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/sbin/postqueue\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-postfix"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource119ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource79ref { ResourceID = "[nxFileLine][V-204556][medium][SRG-OS-000042-GPOS-00020]::[RHEL]Baseline"; ContainsLine = "-a always,exit -F path=/usr/libexec/openssh/ssh-keysign -F auid>=1000 -F auid!=unset -k privileged-ssh"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/libexec/openssh/ssh-keysign\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-ssh"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource120ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource80ref { ResourceID = "[nxFileLine][V-204557][medium][SRG-OS-000042-GPOS-00020]::[RHEL]Baseline"; ContainsLine = "-a always,exit -F path=/usr/bin/crontab -F auid>=1000 -F auid!=unset -k privileged-cron"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/bin/crontab\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-cron"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource121ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource81ref { ResourceID = "[nxFileLine][V-204558][medium][SRG-OS-000471-GPOS-00215]::[RHEL]Baseline"; ContainsLine = "-a always,exit -F path=/usr/sbin/pam_timestamp_check -F auid>=1000 -F auid!=unset -k privileged-pam"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/sbin/pam_timestamp_check\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-pam"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource122ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource82ref { ResourceID = "[nxFileLine][V-204559.a][medium][SRG-OS-000471-GPOS-00216]::[RHEL]Baseline"; ContainsLine = "-a always,exit -F arch=b32 -S create_module -k module-change"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*create_module\\s*-k\\s*module-change"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource123ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource83ref { ResourceID = "[nxFileLine][V-204559.b][medium][SRG-OS-000471-GPOS-00216]::[RHEL]Baseline"; ContainsLine = "-a always,exit -F arch=b64 -S create_module -k module-change"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*create_module\\s*-k\\s*module-change"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource124ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource84ref { ResourceID = "[nxFileLine][V-204560.a][medium][SRG-OS-000471-GPOS-00216]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S init_module -k module-change"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + ContainsLine = "-a always,exit -F arch=b32 -S init_module,finit_module -k modulechange"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*init_module\\s*-k\\s*module-change"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*init_module,finit_module\\s*-k\\s*modulechange"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource125ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource85ref { ResourceID = "[nxFileLine][V-204560.b][medium][SRG-OS-000471-GPOS-00216]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S init_module -k module-change"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + ContainsLine = "-a always,exit -F arch=b64 -S init_module,finit_module -k modulechange"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*init_module\\s*-k\\s*module-change"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*init_module,finit_module\\s*-k\\s*modulechange"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource126ref -{ -ResourceID = "[nxFileLine][V-204561.a][medium][SRG-OS-000471-GPOS-00216]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S finit_module -k module-change"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*finit_module\\s*-k\\s*module-change"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource127ref -{ -ResourceID = "[nxFileLine][V-204561.b][medium][SRG-OS-000471-GPOS-00216]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S finit_module -k module-change"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*finit_module\\s*-k\\s*module-change"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource128ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource86ref { ResourceID = "[nxFileLine][V-204562.a][medium][SRG-OS-000471-GPOS-00216]::[RHEL]Baseline"; ContainsLine = "-a always,exit -F arch=b32 -S delete_module -k module-change"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*delete_module\\s*-k\\s*module-change"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource129ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource87ref { ResourceID = "[nxFileLine][V-204562.b][medium][SRG-OS-000471-GPOS-00216]::[RHEL]Baseline"; ContainsLine = "-a always,exit -F arch=b64 -S delete_module -k module-change"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*delete_module\\s*-k\\s*module-change"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource130ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource88ref { ResourceID = "[nxFileLine][V-204563][medium][SRG-OS-000471-GPOS-00216]::[RHEL]Baseline"; ContainsLine = "-w /usr/bin/kmod -p x -F auid!=unset -k module-change"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "#\\s*-w\\s*/usr/bin/kmod\\s*-p\\s*x\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*module-change"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource131ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource89ref { ResourceID = "[nxFileLine][V-204564][medium][SRG-OS-000004-GPOS-00004]::[RHEL]Baseline"; ContainsLine = "-w /etc/passwd -p wa -k identity"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "#\\s*-w\\s*/etc/passwd\\s*-p\\s*wa\\s*-k\\s*identity"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource132ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource90ref { ResourceID = "[nxFileLine][V-204565][medium][SRG-OS-000004-GPOS-00004]::[RHEL]Baseline"; ContainsLine = "-w /etc/group -p wa -k identity"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "#\\s*-w\\s*/etc/group\\s*-p\\s*wa\\s*-k\\s*identity"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource133ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource91ref { ResourceID = "[nxFileLine][V-204566][medium][SRG-OS-000004-GPOS-00004]::[RHEL]Baseline"; ContainsLine = "-w /etc/gshadow -p wa -k identity"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "#\\s*-w\\s*/etc/gshadow\\s*-p\\s*wa\\s*-k\\s*identity"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource134ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource92ref { ResourceID = "[nxFileLine][V-204567][medium][SRG-OS-000004-GPOS-00004]::[RHEL]Baseline"; ContainsLine = "-w /etc/shadow -p wa -k identity"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "#\\s*-w\\s*/etc/shadow\\s*-p\\s*wa\\s*-k\\s*identity"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource135ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource93ref { ResourceID = "[nxFileLine][V-204568][medium][SRG-OS-000004-GPOS-00004]::[RHEL]Baseline"; ContainsLine = "-w /etc/security/opasswd -p wa -k identity"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "#\\s*-w\\s*/etc/security/opasswd\\s*-p\\s*wa\\s*-k\\s*identity"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource136ref -{ -ResourceID = "[nxFileLine][V-204569.a][medium][SRG-OS-000466-GPOS-00210]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S rename -F auid>=1000 -F auid!=unset -k delete"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*rename\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*delete"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource137ref -{ -ResourceID = "[nxFileLine][V-204569.b][medium][SRG-OS-000466-GPOS-00210]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S rename -F auid>=1000 -F auid!=unset -k delete"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*rename\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*delete"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource138ref -{ -ResourceID = "[nxFileLine][V-204570.a][medium][SRG-OS-000466-GPOS-00210]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S renameat -F auid>=1000 -F auid!=unset -k delete"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*renameat\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*delete"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource139ref -{ -ResourceID = "[nxFileLine][V-204570.b][medium][SRG-OS-000466-GPOS-00210]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S renameat -F auid>=1000 -F auid!=unset -k delete"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*renameat\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*delete"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource140ref -{ -ResourceID = "[nxFileLine][V-204571.a][medium][SRG-OS-000466-GPOS-00210]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S rmdir -F auid>=1000 -F auid!=unset -k delete"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*rmdir\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*delete"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource141ref -{ -ResourceID = "[nxFileLine][V-204571.b][medium][SRG-OS-000466-GPOS-00210]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S rmdir -F auid>=1000 -F auid!=unset -k delete"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*rmdir\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*delete"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource142ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource94ref { ResourceID = "[nxFileLine][V-204572.a][medium][SRG-OS-000466-GPOS-00210]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S unlink -F auid>=1000 -F auid!=unset -k delete"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + ContainsLine = "-a always,exit -F arch=b32 -S unlink,unlinkat,rename,renameat,rmdir -F auid>=1000 -F auid!=unset -k delete"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*unlink\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*delete"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*unlink,unlinkat,rename,renameat,rmdir\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*delete"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource143ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource95ref { ResourceID = "[nxFileLine][V-204572.b][medium][SRG-OS-000466-GPOS-00210]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S unlink -F auid>=1000 -F auid!=unset -k delete"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + ContainsLine = "-a always,exit -F arch=b64 -S unlink,unlinkat,rename,renameat,rmdir -F auid>=1000 -F auid!=unset -k delete"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*unlink\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*delete"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*unlink,unlinkat,rename,renameat,rmdir\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*delete"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource144ref -{ -ResourceID = "[nxFileLine][V-204573.a][medium][SRG-OS-000466-GPOS-00210]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S unlinkat -F auid>=1000 -F auid!=unset -k delete"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*unlinkat\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*delete"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource145ref -{ -ResourceID = "[nxFileLine][V-204573.b][medium][SRG-OS-000466-GPOS-00210]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S unlinkat -F auid>=1000 -F auid!=unset -k delete"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*unlinkat\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*delete"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource146ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource96ref { ResourceID = "[nxFileLine][V-204578][medium][SRG-OS-000033-GPOS-00014]::[RHEL]Baseline"; ContainsLine = "Ciphers aes256-ctr,aes192-ctr,aes128-ctr"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/ssh/sshd_config"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "^#\\s*Ciphers.*|^\\s*Ciphers\\s*aes128-ctr.*|^\\s*Ciphers\\s*aes192-ctr.*"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource147ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource97ref { ResourceID = "[nxFileLine][V-204579.b][medium][SRG-OS-000163-GPOS-00072]::[RHEL]Baseline"; ContainsLine = "declare -xr TMOUT=900"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/profile.d/tmout.sh"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "^\\s*TMOUT\\s*=\\s*[0-8]?[0-9]?[0-9]?$|^#\\s*TMOUT.*"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource148ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource98ref { ResourceID = "[nxFileLine][V-204580][medium][SRG-OS-000023-GPOS-00006]::[RHEL]Baseline"; ContainsLine = "banner /etc/issue"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/ssh/sshd_config"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "#\\s*banner\\s*/etc/issue"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource149ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource99ref { ResourceID = "[nxFileLine][V-204587][medium][SRG-OS-000163-GPOS-00072]::[RHEL]Baseline"; ContainsLine = "ClientAliveInterval 600"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/ssh/sshd_config"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "^\\s*ClientAliveInterval\\s*[0-5]?[0-9]?[0-9]?\\s*$|^#\\s*ClientAliveInterval.*|^\\s*ClientAliveInterval\\s*$"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource150ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource100ref { ResourceID = "[nxFileLine][V-204588][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; ContainsLine = "RhostsRSAAuthentication no"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/ssh/sshd_config"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "^#\\s*RhostsRSAAuthentication.*$|^RhostsRSAAuthentication\\s*(?!no\\b)\\w*$"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource151ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource101ref { ResourceID = "[nxFileLine][V-204589][medium][SRG-OS-000163-GPOS-00072]::[RHEL]Baseline"; ContainsLine = "ClientAliveCountMax 0"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/ssh/sshd_config"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "^#\\s*ClientAliveCountMax.*$|^ClientAliveCountMax\\s*(?!0\\b)\\w*$"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource152ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource102ref { ResourceID = "[nxFileLine][V-204590][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; ContainsLine = "IgnoreRhosts yes"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/ssh/sshd_config"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "^#\\s*IgnoreRhosts.*$|^IgnoreRhosts\\s*(?!yes\\b)\\w*$"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource153ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource103ref { ResourceID = "[nxFileLine][V-204591][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; ContainsLine = "PrintLastLog yes"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/ssh/sshd_config"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "^#\\s*PrintLastLog.*$|^PrintLastLog\\s*(?!yes\\b)\\w*$"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource154ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource104ref { ResourceID = "[nxFileLine][V-204592][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; ContainsLine = "PermitRootLogin no"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/ssh/sshd_config"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "^#\\s*PermitRootLogin.*$|^PermitRootLogin\\s*(?!no\\b)\\w*$"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource155ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource105ref { ResourceID = "[nxFileLine][V-204593][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; ContainsLine = "IgnoreUserKnownHosts yes"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/ssh/sshd_config"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "^#\\s*IgnoreUserKnownHosts.*$|^IgnoreUserKnownHosts\\s*(?!yes\\b)\\w*$"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource156ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource106ref { ResourceID = "[nxFileLine][V-204594][high][SRG-OS-000074-GPOS-00042]::[RHEL]Baseline"; ContainsLine = "Protocol 2"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/ssh/sshd_config"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "^#\\s*Protocol.*$|^Protocol\\s*(?!2\\b)\\w*$"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource157ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource107ref { ResourceID = "[nxFileLine][V-204595][medium][SRG-OS-000250-GPOS-00093]::[RHEL]Baseline"; ContainsLine = "MACs hmac-sha2-512,hmac-sha2-256"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/ssh/sshd_config"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "#\\s*MACs.*|\\s*MACs\\s*hmac-(?!sha2-512).*"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource158ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource108ref { ResourceID = "[nxFileLine][V-204598][medium][SRG-OS-000364-GPOS-00151]::[RHEL]Baseline"; ContainsLine = "GSSAPIAuthentication no"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/ssh/sshd_config"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "^#\\s*GSSAPIAuthentication.*$|^GSSAPIAuthentication\\s*(?!no\\b)\\w*$"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource159ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource109ref { ResourceID = "[nxFileLine][V-204599][medium][SRG-OS-000364-GPOS-00151]::[RHEL]Baseline"; ContainsLine = "KerberosAuthentication no"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/ssh/sshd_config"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "^#\\s*KerberosAuthentication.*$|^KerberosAuthentication\\s*(?!no\\b)\\w*$"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource160ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource110ref { ResourceID = "[nxFileLine][V-204600][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; ContainsLine = "StrictModes yes"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/ssh/sshd_config"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "^#\\s*StrictModes.*$|^StrictModes\\s*(?!yes\\b)\\w*$"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource161ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource111ref { ResourceID = "[nxFileLine][V-204601][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; ContainsLine = "UsePrivilegeSeparation sandbox"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/ssh/sshd_config"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "^#\\s*UsePrivilegeSeparation.*$|^UsePrivilegeSeparation\\s*(?!sandbox\\b)\\w*$"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource162ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource112ref { ResourceID = "[nxFileLine][V-204602][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; ContainsLine = "Compression delayed"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/ssh/sshd_config"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "^#\\s*Compression.*$|^Compression\\s*(?!delayed\\b)\\w*$"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource163ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource113ref { ResourceID = "[nxFileLine][V-204622][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; ContainsLine = "X11Forwarding no"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/ssh/sshd_config"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "^#\\s*X11Forwarding.*$|^X11Forwarding\\s*(?!no\\b)\\w*$"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource164ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource114ref { ResourceID = "[nxFileLine][V-233307][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; ContainsLine = "X11UseLocalhost yes"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/ssh/sshd_config"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "#\\s*X11UseLocalhost\\s*yes"; ConfigurationName = "LinuxBaseLine"; }; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource115ref +{ +ResourceID = "[nxFileLine][V-250314][medium][SRG-OS-000324-GPOS-00125]::[RHEL]Baseline"; + ContainsLine = "%wheel ALL=(ALL) TYPE=sysadm_t ROLE=sysadm_r ALL"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/sudoers"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*%wheel\\s*ALL\\s*=\\s*(ALL)\\s*TYPE\\s*=\\s*sysadm_t\\s*ROLE\\s*=\\s*sysadm_r\\s*ALL"; + ConfigurationName = "LinuxBaseLine"; +}; instance of MSFT_nxServiceResource as $MSFT_nxServiceResource1ref { ResourceID = "[nxService][V-204451][medium][SRG-OS-000114-GPOS-00059]::[RHEL]Baseline"; Controller = "systemd"; Enabled = False; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxService.ps1::13::9::nxService"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxService.ps1::13::9::nxService"; Name = "autofs"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -2173,7 +1624,7 @@ instance of MSFT_nxServiceResource as $MSFT_nxServiceResource2ref ResourceID = "[nxService][V-204492][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; Controller = "systemd"; Enabled = False; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxService.ps1::13::9::nxService"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxService.ps1::13::9::nxService"; Name = "kdump"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -2185,7 +1636,7 @@ ResourceID = "[nxService][V-204503][medium][SRG-OS-000038-GPOS-00016]::[RHEL]Bas Controller = "systemd"; State = "Running"; Enabled = True; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxService.ps1::22::9::nxService"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxService.ps1::22::9::nxService"; Name = "auditd"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -2197,7 +1648,7 @@ ResourceID = "[nxService][V-204586][medium][SRG-OS-000423-GPOS-00187]::[RHEL]Bas Controller = "systemd"; State = "Running"; Enabled = True; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxService.ps1::22::9::nxService"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxService.ps1::22::9::nxService"; Name = "sshd"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -2209,7 +1660,7 @@ ResourceID = "[nxService][V-204604.b][medium][SRG-OS-000480-GPOS-00227]::[RHEL]B Controller = "systemd"; State = "Running"; Enabled = True; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxService.ps1::22::9::nxService"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxService.ps1::22::9::nxService"; Name = "firewalld"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -2220,7 +1671,7 @@ instance of MSFT_nxScriptResource as $MSFT_nxScriptResource1ref ResourceID = "[nxScript][V-204399.b][medium][[Skip] SRG-OS-000029-GPOS-00010]::[RHEL]Baseline"; GetScript = "#!/bin/bash\necho [V-204399.b][medium][[Skip] SRG-OS-000029-GPOS-00010]"; TestScript = "#!/bin/bash\nexit 0"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxScript.skip.ps1::10::5::nxScript"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxScript.skip.ps1::10::5::nxScript"; SetScript = "#!/bin/bash"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -2231,7 +1682,7 @@ instance of MSFT_nxScriptResource as $MSFT_nxScriptResource2ref ResourceID = "[nxScript][V-204400][medium][[Skip] SRG-OS-000029-GPOS-00010]::[RHEL]Baseline"; GetScript = "#!/bin/bash\necho [V-204400][medium][[Skip] SRG-OS-000029-GPOS-00010]"; TestScript = "#!/bin/bash\nexit 0"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxScript.skip.ps1::10::5::nxScript"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxScript.skip.ps1::10::5::nxScript"; SetScript = "#!/bin/bash"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -2242,7 +1693,7 @@ instance of MSFT_nxScriptResource as $MSFT_nxScriptResource3ref ResourceID = "[nxScript][V-204403][medium][[Skip] SRG-OS-000029-GPOS-00010]::[RHEL]Baseline"; GetScript = "#!/bin/bash\necho [V-204403][medium][[Skip] SRG-OS-000029-GPOS-00010]"; TestScript = "#!/bin/bash\nexit 0"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxScript.skip.ps1::10::5::nxScript"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxScript.skip.ps1::10::5::nxScript"; SetScript = "#!/bin/bash"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -2253,7 +1704,7 @@ instance of MSFT_nxScriptResource as $MSFT_nxScriptResource4ref ResourceID = "[nxScript][V-204509][medium][[Skip] SRG-OS-000342-GPOS-00133]::[RHEL]Baseline"; GetScript = "#!/bin/bash\necho [V-204509][medium][[Skip] SRG-OS-000342-GPOS-00133]"; TestScript = "#!/bin/bash\nexit 0"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxScript.skip.ps1::10::5::nxScript"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxScript.skip.ps1::10::5::nxScript"; SetScript = "#!/bin/bash"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -2264,7 +1715,7 @@ instance of MSFT_nxScriptResource as $MSFT_nxScriptResource5ref ResourceID = "[nxScript][V-204513][medium][[Skip] SRG-OS-000343-GPOS-00134]::[RHEL]Baseline"; GetScript = "#!/bin/bash\necho [V-204513][medium][[Skip] SRG-OS-000343-GPOS-00134]"; TestScript = "#!/bin/bash\nexit 0"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxScript.skip.ps1::10::5::nxScript"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxScript.skip.ps1::10::5::nxScript"; SetScript = "#!/bin/bash"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -2275,7 +1726,7 @@ instance of MSFT_nxScriptResource as $MSFT_nxScriptResource6ref ResourceID = "[nxScript][V-204623][medium][[Skip] SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; GetScript = "#!/bin/bash\necho [V-204623][medium][[Skip] SRG-OS-000480-GPOS-00227]"; TestScript = "#!/bin/bash\nexit 0"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxScript.skip.ps1::10::5::nxScript"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxScript.skip.ps1::10::5::nxScript"; SetScript = "#!/bin/bash"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -2286,7 +1737,7 @@ instance of MSFT_nxScriptResource as $MSFT_nxScriptResource7ref ResourceID = "[nxScript][V-244557][medium][[Skip] SRG-OS-000080-GPOS-00048]::[RHEL]Baseline"; GetScript = "#!/bin/bash\necho [V-244557][medium][[Skip] SRG-OS-000080-GPOS-00048]"; TestScript = "#!/bin/bash\nexit 0"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxScript.skip.ps1::10::5::nxScript"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxScript.skip.ps1::10::5::nxScript"; SetScript = "#!/bin/bash"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -2297,7 +1748,7 @@ instance of MSFT_nxScriptResource as $MSFT_nxScriptResource8ref ResourceID = "[nxScript][V-244558][medium][[Skip] SRG-OS-000080-GPOS-00048]::[RHEL]Baseline"; GetScript = "#!/bin/bash\necho [V-244558][medium][[Skip] SRG-OS-000080-GPOS-00048]"; TestScript = "#!/bin/bash\nexit 0"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxScript.skip.ps1::10::5::nxScript"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxScript.skip.ps1::10::5::nxScript"; SetScript = "#!/bin/bash"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -2308,7 +1759,7 @@ instance of MSFT_nxScriptResource as $MSFT_nxScriptResource9ref ResourceID = "[nxScript][V-204399.a][medium][[Skip] SRG-OS-000029-GPOS-00010]::[RHEL]Baseline"; GetScript = "#!/bin/bash\necho [V-204399.a][medium][[Skip] SRG-OS-000029-GPOS-00010]"; TestScript = "#!/bin/bash\nexit 0"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxScript.skip.ps1::10::5::nxScript"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxScript.skip.ps1::10::5::nxScript"; SetScript = "#!/bin/bash"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -2325,7 +1776,7 @@ instance of OMI_ConfigurationDocument Author="Microsoft"; - GenerationDate="01/31/2022 17:13:26"; + GenerationDate="05/04/2022 09:09:33"; GenerationHost="Microsoft"; diff --git a/stig/linux/config/RHEL79.mof b/stig/linux/config/RHEL79.mof index 2ba5363..e03dacd 100644 --- a/stig/linux/config/RHEL79.mof +++ b/stig/linux/config/RHEL79.mof @@ -1,7 +1,7 @@ /* @TargetNode='RHEL79' @GeneratedBy=Microsoft -@GenerationDate=01/31/2022 17:13:26 +@GenerationDate=05/04/2022 09:09:33 @GenerationHost=Microsoft */ @@ -9,7 +9,7 @@ instance of MSFT_nxPackageResource as $MSFT_nxPackageResource1ref { ResourceID = "[nxPackage][V-204442][high][SRG-OS-000095-GPOS-00049]::[RHEL]Baseline"; Ensure = "Absent"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxPackage.ps1::8::5::nxPackage"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxPackage.ps1::8::5::nxPackage"; Name = "rsh-server"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -19,7 +19,7 @@ instance of MSFT_nxPackageResource as $MSFT_nxPackageResource2ref { ResourceID = "[nxPackage][V-204443][high][SRG-OS-000095-GPOS-00049]::[RHEL]Baseline"; Ensure = "Absent"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxPackage.ps1::8::5::nxPackage"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxPackage.ps1::8::5::nxPackage"; Name = "ypserv"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -29,7 +29,7 @@ instance of MSFT_nxPackageResource as $MSFT_nxPackageResource3ref { ResourceID = "[nxPackage][V-204497][high][SRG-OS-000033-GPOS-00014]::[RHEL]Baseline"; Ensure = "Present"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxPackage.ps1::8::5::nxPackage"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxPackage.ps1::8::5::nxPackage"; Name = "dracut-fips"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -39,7 +39,7 @@ instance of MSFT_nxPackageResource as $MSFT_nxPackageResource4ref { ResourceID = "[nxPackage][V-204498][low][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; Ensure = "Present"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxPackage.ps1::8::5::nxPackage"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxPackage.ps1::8::5::nxPackage"; Name = "aide"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -49,7 +49,7 @@ instance of MSFT_nxPackageResource as $MSFT_nxPackageResource5ref { ResourceID = "[nxPackage][V-204502][high][SRG-OS-000095-GPOS-00049]::[RHEL]Baseline"; Ensure = "Absent"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxPackage.ps1::8::5::nxPackage"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxPackage.ps1::8::5::nxPackage"; Name = "telnet-server"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -59,7 +59,7 @@ instance of MSFT_nxPackageResource as $MSFT_nxPackageResource6ref { ResourceID = "[nxPackage][V-204585][medium][SRG-OS-000423-GPOS-00187]::[RHEL]Baseline"; Ensure = "Present"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxPackage.ps1::8::5::nxPackage"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxPackage.ps1::8::5::nxPackage"; Name = "openssh-server"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -69,7 +69,7 @@ instance of MSFT_nxPackageResource as $MSFT_nxPackageResource7ref { ResourceID = "[nxPackage][V-204604.a][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; Ensure = "Present"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxPackage.ps1::8::5::nxPackage"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxPackage.ps1::8::5::nxPackage"; Name = "firewalld"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -79,7 +79,7 @@ instance of MSFT_nxPackageResource as $MSFT_nxPackageResource8ref { ResourceID = "[nxPackage][V-204620][high][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; Ensure = "Absent"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxPackage.ps1::8::5::nxPackage"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxPackage.ps1::8::5::nxPackage"; Name = "vsftpd"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -89,7 +89,7 @@ instance of MSFT_nxPackageResource as $MSFT_nxPackageResource9ref { ResourceID = "[nxPackage][V-204621][high][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; Ensure = "Absent"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxPackage.ps1::8::5::nxPackage"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxPackage.ps1::8::5::nxPackage"; Name = "tftp-server"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -99,7 +99,7 @@ instance of MSFT_nxPackageResource as $MSFT_nxPackageResource10ref { ResourceID = "[nxPackage][V-204631][medium][SRG-OS-000375-GPOS-00160]::[RHEL]Baseline"; Ensure = "Present"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxPackage.ps1::8::5::nxPackage"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxPackage.ps1::8::5::nxPackage"; Name = "pam_pkcs11"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -111,7 +111,7 @@ ResourceID = "[nxFile][V-204395][medium][SRG-OS-000023-GPOS-00006]::[RHEL]Baseli Contents = "You are accessing a U.S. Government (USG) Information System (IS) that is provided for USG-authorized use only.\n\nBy using this IS (which includes any device attached to this IS), you consent to the following conditions:\n\n-The USG routinely intercepts and monitors communications on this IS for purposes including, but not limited to, penetration testing, COMSEC monitoring, network operations and defense, personnel misconduct (PM), law enforcement (LE), and counterintelligence (CI) investigations.\n\n-At any time, the USG may inspect and seize data stored on this IS.\n\n-Communications using, or data stored on, this IS are not private, are subject to routine monitoring, interception, and search, and may be disclosed or used for any USG-authorized purpose.\n\n-This IS includes security measures (e.g., authentication and access controls) to protect USG interests--not for your personal benefit or privacy.\n\n-Notwithstanding the above, using this IS does not constitute consent to PM, LE or CI investigative searching or monitoring of the content of privileged communications, or work product, related to personal representation or services by attorneys, psychotherapists, or clergy, and their assistants. Such communications and work product are private and confidential. See User Agreement for details."; DestinationPath = "/etc/issue"; ModuleName = "nx"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; ModuleVersion = "1.0"; ConfigurationName = "LinuxBaseLine"; }; @@ -121,7 +121,7 @@ ResourceID = "[nxFile][V-204449.a][medium][SRG-OS-000114-GPOS-00059]::[RHEL]Base Contents = ""; DestinationPath = "/etc/modprobe.d/usb-storage.conf"; ModuleName = "nx"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; ModuleVersion = "1.0"; ConfigurationName = "LinuxBaseLine"; }; @@ -131,7 +131,7 @@ ResourceID = "[nxFile][V-204449.b][medium][SRG-OS-000114-GPOS-00059]::[RHEL]Base Contents = ""; DestinationPath = "/etc/modprobe.d/blacklist.conf"; ModuleName = "nx"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; ModuleVersion = "1.0"; ConfigurationName = "LinuxBaseLine"; }; @@ -141,7 +141,7 @@ ResourceID = "[nxFile][V-204450.a][medium][SRG-OS-000378-GPOS-00163]::[RHEL]Base Contents = ""; DestinationPath = "/etc/modprobe.d/dccp.conf"; ModuleName = "nx"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; ModuleVersion = "1.0"; ConfigurationName = "LinuxBaseLine"; }; @@ -151,7 +151,7 @@ ResourceID = "[nxFile][V-204576][low][SRG-OS-000027-GPOS-00008]::[RHEL]Baseline" Contents = "* hard maxlogins 10"; DestinationPath = "/etc/security/limits.d/204576-powerstig.conf"; ModuleName = "nx"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; ModuleVersion = "1.0"; ConfigurationName = "LinuxBaseLine"; }; @@ -161,7 +161,7 @@ ResourceID = "[nxFile][V-204579.a][medium][SRG-OS-000163-GPOS-00072]::[RHEL]Base Contents = ""; DestinationPath = "/etc/profile.d/tmout.sh"; ModuleName = "nx"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; ModuleVersion = "1.0"; ConfigurationName = "LinuxBaseLine"; }; @@ -171,7 +171,7 @@ ResourceID = "[nxFile][V-204584][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseli Contents = "kernel.randomize_va_space = 2"; DestinationPath = "/etc/sysctl.d/204584-powerstig.conf"; ModuleName = "nx"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; ModuleVersion = "1.0"; ConfigurationName = "LinuxBaseLine"; }; @@ -181,7 +181,7 @@ ResourceID = "[nxFile][V-204609][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseli Contents = "net.ipv4.conf.all.accept_source_route = 0"; DestinationPath = "/etc/sysctl.d/204609-powerstig.conf"; ModuleName = "nx"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; ModuleVersion = "1.0"; ConfigurationName = "LinuxBaseLine"; }; @@ -191,7 +191,7 @@ ResourceID = "[nxFile][V-204610][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseli Contents = "net.ipv4.conf.all.rp_filter = 1"; DestinationPath = "/etc/sysctl.d/204610-powerstig.conf"; ModuleName = "nx"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; ModuleVersion = "1.0"; ConfigurationName = "LinuxBaseLine"; }; @@ -201,7 +201,7 @@ ResourceID = "[nxFile][V-204611][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseli Contents = "net.ipv4.conf.default.rp_filter = 1"; DestinationPath = "/etc/sysctl.d/204611-powerstig.conf"; ModuleName = "nx"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; ModuleVersion = "1.0"; ConfigurationName = "LinuxBaseLine"; }; @@ -211,7 +211,7 @@ ResourceID = "[nxFile][V-204612][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseli Contents = "net.ipv4.conf.default.accept_source_route = 0"; DestinationPath = "/etc/sysctl.d/204612-powerstig.conf"; ModuleName = "nx"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; ModuleVersion = "1.0"; ConfigurationName = "LinuxBaseLine"; }; @@ -221,7 +221,7 @@ ResourceID = "[nxFile][V-204613][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseli Contents = "net.ipv4.icmp_echo_ignore_broadcasts = 1"; DestinationPath = "/etc/sysctl.d/204613-powerstig.conf"; ModuleName = "nx"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; ModuleVersion = "1.0"; ConfigurationName = "LinuxBaseLine"; }; @@ -231,7 +231,7 @@ ResourceID = "[nxFile][V-204614][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseli Contents = "net.ipv4.conf.default.accept_redirects = 0"; DestinationPath = "/etc/sysctl.d/204614-powerstig.conf"; ModuleName = "nx"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; ModuleVersion = "1.0"; ConfigurationName = "LinuxBaseLine"; }; @@ -241,7 +241,7 @@ ResourceID = "[nxFile][V-204615][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseli Contents = "net.ipv4.conf.all.accept_redirects = 0"; DestinationPath = "/etc/sysctl.d/204615-powerstig.conf"; ModuleName = "nx"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; ModuleVersion = "1.0"; ConfigurationName = "LinuxBaseLine"; }; @@ -251,7 +251,7 @@ ResourceID = "[nxFile][V-204616][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseli Contents = "net.ipv4.conf.default.send_redirects = 0"; DestinationPath = "/etc/sysctl.d/204616-powerstig.conf"; ModuleName = "nx"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; ModuleVersion = "1.0"; ConfigurationName = "LinuxBaseLine"; }; @@ -261,7 +261,7 @@ ResourceID = "[nxFile][V-204617][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseli Contents = "net.ipv4.conf.all.send_redirects = 0"; DestinationPath = "/etc/sysctl.d/204617-powerstig.conf"; ModuleName = "nx"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; ModuleVersion = "1.0"; ConfigurationName = "LinuxBaseLine"; }; @@ -271,7 +271,7 @@ ResourceID = "[nxFile][V-204625][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseli Contents = "net.ipv4.ip_forward = 0"; DestinationPath = "/etc/sysctl.d/204625-powerstig.conf"; ModuleName = "nx"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; ModuleVersion = "1.0"; ConfigurationName = "LinuxBaseLine"; }; @@ -281,7 +281,7 @@ ResourceID = "[nxFile][V-204630][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseli Contents = "net.ipv6.conf.all.accept_source_route = 0"; DestinationPath = "/etc/sysctl.d/204630-powerstig.conf"; ModuleName = "nx"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; ModuleVersion = "1.0"; ConfigurationName = "LinuxBaseLine"; }; @@ -291,7 +291,7 @@ ResourceID = "[nxFile][V-237634.a][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Base Contents = "Defaults !targetpw"; DestinationPath = "/etc/sudoers.d/237634a-powerstig.conf"; ModuleName = "nx"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; ModuleVersion = "1.0"; ConfigurationName = "LinuxBaseLine"; }; @@ -301,7 +301,7 @@ ResourceID = "[nxFile][V-237634.b][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Base Contents = "Defaults !rootpw"; DestinationPath = "/etc/sudoers.d/237634b-powerstig.conf"; ModuleName = "nx"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; ModuleVersion = "1.0"; ConfigurationName = "LinuxBaseLine"; }; @@ -311,7 +311,7 @@ ResourceID = "[nxFile][V-237634.c][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Base Contents = "Defaults !runaspw"; DestinationPath = "/etc/sudoers.d/237634c-powerstig.conf"; ModuleName = "nx"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; ModuleVersion = "1.0"; ConfigurationName = "LinuxBaseLine"; }; @@ -321,17 +321,7 @@ ResourceID = "[nxFile][V-237635][medium][SRG-OS-000373-GPOS-00156]::[RHEL]Baseli Contents = "Defaults timestamp_timeout=0"; DestinationPath = "/etc/sudoers.d/237635-powerstig.conf"; ModuleName = "nx"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; - ModuleVersion = "1.0"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileResource as $MSFT_nxFileResource23ref -{ -ResourceID = "[nxFile][V-250314][medium][SRG-OS-000324-GPOS-00125]::[RHEL]Baseline"; - Contents = "%wheel ALL=(ALL) TYPE=sysadm_t ROLE=sysadm_r ALL"; - DestinationPath = "/etc/sudoers.d/250314-powerstig.conf"; - ModuleName = "nx"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; ModuleVersion = "1.0"; ConfigurationName = "LinuxBaseLine"; }; @@ -339,7 +329,7 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource1ref { ResourceID = "[nxFileLine][V-204405][medium][SRG-OS-000069-GPOS-00037]::[RHEL]Baseline"; ContainsLine = "password substack system-auth"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/pam.d/passwd"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -350,7 +340,7 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource2ref { ResourceID = "[nxFileLine][V-204407][medium][SRG-OS-000069-GPOS-00037]::[RHEL]Baseline"; ContainsLine = "ucredit = -1"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/security/pwquality.conf"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -361,7 +351,7 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource3ref { ResourceID = "[nxFileLine][V-204408][medium][SRG-OS-000070-GPOS-00038]::[RHEL]Baseline"; ContainsLine = "lcredit = -1"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/security/pwquality.conf"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -372,7 +362,7 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource4ref { ResourceID = "[nxFileLine][V-204409][medium][SRG-OS-000071-GPOS-00039]::[RHEL]Baseline"; ContainsLine = "dcredit = -1"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/security/pwquality.conf"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -383,7 +373,7 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource5ref { ResourceID = "[nxFileLine][V-204410][medium][SRG-OS-000266-GPOS-00101]::[RHEL]Baseline"; ContainsLine = "ocredit=-1"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/security/pwquality.conf"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -394,7 +384,7 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource6ref { ResourceID = "[nxFileLine][V-204411][medium][SRG-OS-000072-GPOS-00040]::[RHEL]Baseline"; ContainsLine = "difok = 8"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/security/pwquality.conf"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -405,7 +395,7 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource7ref { ResourceID = "[nxFileLine][V-204412][medium][SRG-OS-000072-GPOS-00040]::[RHEL]Baseline"; ContainsLine = "minclass = 4"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/security/pwquality.conf"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -416,7 +406,7 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource8ref { ResourceID = "[nxFileLine][V-204413][medium][SRG-OS-000072-GPOS-00040]::[RHEL]Baseline"; ContainsLine = "maxrepeat = 3"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/security/pwquality.conf"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -427,18 +417,18 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource9ref { ResourceID = "[nxFileLine][V-204414][medium][SRG-OS-000072-GPOS-00040]::[RHEL]Baseline"; ContainsLine = "maxclassrepeat = 4"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/security/pwquality.conf"; ModuleName = "nx"; ModuleVersion = "1.0"; - DoesNotContainPattern = "^#\\s*maxclassrepeat\\s*=.*|^\\s*maxclassrepeat\\s*=\\s*(?:\\d{2,}|[3-9])"; + DoesNotContainPattern = "^#\\s*maxclassrepeat\\s*=.*|^\\s*maxclassrepeat\\s*=\\s*(?:\\d{2,}|[1-3|5-9])"; ConfigurationName = "LinuxBaseLine"; }; instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource10ref { ResourceID = "[nxFileLine][V-204416][medium][SRG-OS-000073-GPOS-00041]::[RHEL]Baseline"; ContainsLine = "ENCRYPT_METHOD SHA512"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/login.defs"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -449,7 +439,7 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource11ref { ResourceID = "[nxFileLine][V-204418][medium][SRG-OS-000075-GPOS-00043]::[RHEL]Baseline"; ContainsLine = "PASS_MIN_DAYS 1"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/login.defs"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -460,7 +450,7 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource12ref { ResourceID = "[nxFileLine][V-204420][medium][SRG-OS-000076-GPOS-00044]::[RHEL]Baseline"; ContainsLine = "PASS_MAX_DAYS 60"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/login.defs"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -471,7 +461,7 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource13ref { ResourceID = "[nxFileLine][V-204423][medium][SRG-OS-000078-GPOS-00046]::[RHEL]Baseline"; ContainsLine = "minlen = 15"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/security/pwquality.conf"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -482,7 +472,7 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource14ref { ResourceID = "[nxFileLine][V-204425][high][SRG-OS-000106-GPOS-00053]::[RHEL]Baseline"; ContainsLine = "PermitEmptyPasswords no"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/ssh/sshd_config"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -492,19 +482,19 @@ ResourceID = "[nxFileLine][V-204425][high][SRG-OS-000106-GPOS-00053]::[RHEL]Base instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource15ref { ResourceID = "[nxFileLine][V-204426][medium][SRG-OS-000118-GPOS-00060]::[RHEL]Baseline"; - ContainsLine = "INACTIVE=0"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + ContainsLine = "INACTIVE=35"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/default/useradd"; ModuleName = "nx"; ModuleVersion = "1.0"; - DoesNotContainPattern = "^#\\s*INACTIVE.*$|^INACTIVE\\s*=\\s*(?!0\\b)[-]*\\w*$"; + DoesNotContainPattern = "^#\\s*INACTIVE\\s*=.*|^\\s*INACTIVE\\s*=\\s*(3[5-9]|[4-9]\\d+|\\d{3,})"; ConfigurationName = "LinuxBaseLine"; }; instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource16ref { ResourceID = "[nxFileLine][V-204431][medium][SRG-OS-000480-GPOS-00226]::[RHEL]Baseline"; ContainsLine = "FAIL_DELAY 4"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/login.defs"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -515,7 +505,7 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource17ref { ResourceID = "[nxFileLine][V-204434][medium][SRG-OS-000480-GPOS-00229]::[RHEL]Baseline"; ContainsLine = "PermitUserEnvironment no"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/ssh/sshd_config"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -526,7 +516,7 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource18ref { ResourceID = "[nxFileLine][V-204435][medium][SRG-OS-000480-GPOS-00229]::[RHEL]Baseline"; ContainsLine = "HostbasedAuthentication no"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/ssh/sshd_config"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -537,7 +527,7 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource19ref { ResourceID = "[nxFileLine][V-204447][high][SRG-OS-000366-GPOS-00153]::[RHEL]Baseline"; ContainsLine = "gpgcheck=1"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/yum.conf"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -548,7 +538,7 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource20ref { ResourceID = "[nxFileLine][V-204448][high][SRG-OS-000366-GPOS-00153]::[RHEL]Baseline"; ContainsLine = "localpkg_gpgcheck=1"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/yum.conf"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -559,7 +549,7 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource21ref { ResourceID = "[nxFileLine][V-204449.c][medium][SRG-OS-000114-GPOS-00059]::[RHEL]Baseline"; ContainsLine = "install usb-storage /bin/true"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/modprobe.d/usb-storage.conf"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -570,7 +560,7 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource22ref { ResourceID = "[nxFileLine][V-204449.d][medium][SRG-OS-000114-GPOS-00059]::[RHEL]Baseline"; ContainsLine = "blacklist usb-storage"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/modprobe.d/blacklist.conf"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -581,7 +571,7 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource23ref { ResourceID = "[nxFileLine][V-204450.b][medium][SRG-OS-000378-GPOS-00163]::[RHEL]Baseline"; ContainsLine = "install dccp /bin/true"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/modprobe.d/dccp.conf"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -592,7 +582,7 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource24ref { ResourceID = "[nxFileLine][V-204450.c][medium][SRG-OS-000378-GPOS-00163]::[RHEL]Baseline"; ContainsLine = "blacklist dccp"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/modprobe.d/blacklist.conf"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -603,7 +593,7 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource25ref { ResourceID = "[nxFileLine][V-204452][low][SRG-OS-000437-GPOS-00194]::[RHEL]Baseline"; ContainsLine = "clean_requirements_on_remove=1"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/yum.conf"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -614,7 +604,7 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource26ref { ResourceID = "[nxFileLine][V-204453][medium][SRG-OS-000445-GPOS-00199]::[RHEL]Baseline"; ContainsLine = "SELINUX=enforcing"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/selinux/config"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -625,7 +615,7 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource27ref { ResourceID = "[nxFileLine][V-204454][medium][SRG-OS-000445-GPOS-00199]::[RHEL]Baseline"; ContainsLine = "SELINUXTYPE=targeted"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/selinux/config"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -636,7 +626,7 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource28ref { ResourceID = "[nxFileLine][V-204457][medium][SRG-OS-000480-GPOS-00228]::[RHEL]Baseline"; ContainsLine = "UMASK 077"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/login.defs"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -647,7 +637,7 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource29ref { ResourceID = "[nxFileLine][V-204466][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; ContainsLine = "CREATE_HOME yes"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/login.defs"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -658,16 +648,16 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource30ref { ResourceID = "[nxFileLine][V-204504][medium][SRG-OS-000046-GPOS-00022]::[RHEL]Baseline"; ContainsLine = "-f 2"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "^#\\s*-f\\s+2|^\\s*-f\\s*1"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileResource as $MSFT_nxFileResource24ref +instance of MSFT_nxFileResource as $MSFT_nxFileResource23ref { -SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::29::9::nxFile"; +SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::29::9::nxFile"; ModuleName = "nx"; ModuleVersion = "1.0"; ResourceID = "[nxFile][V-204506.a][medium][SRG-OS-000342-GPOS-00133]::[RHEL]Baseline"; @@ -678,7 +668,7 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource31ref { ResourceID = "[nxFileLine][V-204506.a][medium][SRG-OS-000342-GPOS-00133]::[RHEL]Baseline"; ContainsLine = "active = yes"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audisp/plugins.d/au-remote.conf"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -689,7 +679,7 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource32ref { ResourceID = "[nxFileLine][V-204506.b][medium][SRG-OS-000342-GPOS-00133]::[RHEL]Baseline"; ContainsLine = "direction = out"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audisp/plugins.d/au-remote.conf"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -700,7 +690,7 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource33ref { ResourceID = "[nxFileLine][V-204506.c][medium][SRG-OS-000342-GPOS-00133]::[RHEL]Baseline"; ContainsLine = "path = /sbin/audisp-remote"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audisp/plugins.d/au-remote.conf"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -711,7 +701,7 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource34ref { ResourceID = "[nxFileLine][V-204506.d][medium][SRG-OS-000342-GPOS-00133]::[RHEL]Baseline"; ContainsLine = "type = always"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audisp/plugins.d/au-remote.conf"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -722,7 +712,7 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource35ref { ResourceID = "[nxFileLine][V-204507][medium][SRG-OS-000342-GPOS-00133]::[RHEL]Baseline"; ContainsLine = "overflow_action = syslog"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audisp/audispd.conf"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -733,16 +723,16 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource36ref { ResourceID = "[nxFileLine][V-204508][medium][SRG-OS-000342-GPOS-00133]::[RHEL]Baseline"; ContainsLine = "name_format = hostname"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audisp/audispd.conf"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "^#\\s*name_format.*$|^name_format\\s*=\\s*(?!hostname$)\\w*$"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileResource as $MSFT_nxFileResource25ref +instance of MSFT_nxFileResource as $MSFT_nxFileResource24ref { -SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::19::9::nxFile"; +SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::19::9::nxFile"; ModuleName = "nx"; ModuleVersion = "1.0"; ResourceID = "[nxFile][V-204510][medium][SRG-OS-000342-GPOS-00133]::[RHEL]Baseline"; @@ -753,7 +743,7 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource37ref { ResourceID = "[nxFileLine][V-204510][medium][SRG-OS-000342-GPOS-00133]::[RHEL]Baseline"; ContainsLine = "enable_krb5 = yes"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audisp/audisp-remote.conf"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -764,7 +754,7 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource38ref { ResourceID = "[nxFileLine][V-204511][medium][SRG-OS-000342-GPOS-00133]::[RHEL]Baseline"; ContainsLine = "disk_full_action = single"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audisp/audisp-remote.conf"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -775,7 +765,7 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource39ref { ResourceID = "[nxFileLine][V-204512][medium][SRG-OS-000342-GPOS-00133]::[RHEL]Baseline"; ContainsLine = "network_failure_action = syslog"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audisp/audisp-remote.conf"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -786,7 +776,7 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource40ref { ResourceID = "[nxFileLine][V-204514][medium][SRG-OS-000343-GPOS-00134]::[RHEL]Baseline"; ContainsLine = "space_left_action = email"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/auditd.conf"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -797,7 +787,7 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource41ref { ResourceID = "[nxFileLine][V-204515][medium][SRG-OS-000343-GPOS-00134]::[RHEL]Baseline"; ContainsLine = "action_mail_acct = root"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/auditd.conf"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -808,7 +798,7 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource42ref { ResourceID = "[nxFileLine][V-204516.a][medium][SRG-OS-000327-GPOS-00127]::[RHEL]Baseline"; ContainsLine = "-a always,exit -F arch=b32 -S execve -C uid!=euid -F euid=0 -k setuid"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -819,7 +809,7 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource43ref { ResourceID = "[nxFileLine][V-204516.b][medium][SRG-OS-000327-GPOS-00127]::[RHEL]Baseline"; ContainsLine = "-a always,exit -F arch=b64 -S execve -C uid!=euid -F euid=0 -k setuid"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -830,7 +820,7 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource44ref { ResourceID = "[nxFileLine][V-204516.c][medium][SRG-OS-000327-GPOS-00127]::[RHEL]Baseline"; ContainsLine = "-a always,exit -F arch=b32 -S execve -C gid!=egid -F egid=0 -k setgid"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -841,7 +831,7 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource45ref { ResourceID = "[nxFileLine][V-204516.d][medium][SRG-OS-000327-GPOS-00127]::[RHEL]Baseline"; ContainsLine = "-a always,exit -F arch=b64 -S execve -C gid!=egid -F egid=0 -k setgid"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -851,1318 +841,779 @@ ResourceID = "[nxFileLine][V-204516.d][medium][SRG-OS-000327-GPOS-00127]::[RHEL] instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource46ref { ResourceID = "[nxFileLine][V-204517.a][medium][SRG-OS-000064-GPOS-00033]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S chown -F auid>=1000 -F auid!=unset -k perm_mod"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + ContainsLine = "-a always,exit -F arch=b32 -S chown,fchown,fchownat,lchown -F auid>=1000 -F auid!=unset -k perm_mod"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*chown\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*perm_mod"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*chown,fchown,fchownat,lchown\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*perm_mod"; ConfigurationName = "LinuxBaseLine"; }; instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource47ref { ResourceID = "[nxFileLine][V-204517.b][medium][SRG-OS-000064-GPOS-00033]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S chown -F auid>=1000 -F auid!=unset -k perm_mod"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + ContainsLine = "-a always,exit -F arch=b64 -S chown,fchown,fchownat,lchown -F auid>=1000 -F auid!=unset -k perm_mod"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*chown\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*perm_mod"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*chown,fchown,fchownat,lchown\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*perm_mod"; ConfigurationName = "LinuxBaseLine"; }; instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource48ref { -ResourceID = "[nxFileLine][V-204518.a][medium][SRG-OS-000064-GPOS-00033]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S fchown -F auid>=1000 -F auid!=unset -k perm_mod"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; +ResourceID = "[nxFileLine][V-204521.a][medium][SRG-OS-000458-GPOS-00203]::[RHEL]Baseline"; + ContainsLine = "-a always,exit -F arch=b32 -S chmod,fchmod,fchmodat -F auid>=1000 -F auid!=unset -k perm_mod"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*fchown\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*perm_mod"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*chmod,fchmod,fchmodat\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*perm_mod"; ConfigurationName = "LinuxBaseLine"; }; instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource49ref { -ResourceID = "[nxFileLine][V-204518.b][medium][SRG-OS-000064-GPOS-00033]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S fchown -F auid>=1000 -F auid!=unset -k perm_mod"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; +ResourceID = "[nxFileLine][V-204521.b][medium][SRG-OS-000458-GPOS-00203]::[RHEL]Baseline"; + ContainsLine = "-a always,exit -F arch=b64 -S chmod,fchmod,fchmodat -F auid>=1000 -F auid!=unset -k perm_mod"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*fchown\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*perm_mod"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*chmod,fchmod,fchmodat\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*perm_mod"; ConfigurationName = "LinuxBaseLine"; }; instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource50ref { -ResourceID = "[nxFileLine][V-204519.a][medium][SRG-OS-000064-GPOS-00033]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S lchown -F auid>=1000 -F auid!=unset -k perm_mod"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; +ResourceID = "[nxFileLine][V-204524.a][medium][SRG-OS-000458-GPOS-00203]::[RHEL]Baseline"; + ContainsLine = "-a always,exit -F arch=b32 -S setxattr,fsetxattr,lsetxattr,removexattr,fremovexattr,lremovexattr -F auid>=1000 -F auid!=unset -k perm_mod"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*lchown\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*perm_mod"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*setxattr,fsetxattr,lsetxattr,removexattr,fremovexattr,lremovexattr\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*perm_mod"; ConfigurationName = "LinuxBaseLine"; }; instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource51ref { -ResourceID = "[nxFileLine][V-204519.b][medium][SRG-OS-000064-GPOS-00033]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S lchown -F auid>=1000 -F auid!=unset -k perm_mod"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; +ResourceID = "[nxFileLine][V-204524.b][medium][SRG-OS-000458-GPOS-00203]::[RHEL]Baseline"; + ContainsLine = "-a always,exit -F arch=b64 -S setxattr,fsetxattr,lsetxattr,removexattr,fremovexattr,lremovexattr -F auid>=1000 -F auid!=unset -k perm_mod"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*lchown\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*perm_mod"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*setxattr,fsetxattr,lsetxattr,removexattr,fremovexattr,lremovexattr\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*perm_mod"; ConfigurationName = "LinuxBaseLine"; }; instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource52ref { -ResourceID = "[nxFileLine][V-204520.a][medium][SRG-OS-000064-GPOS-00033]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S fchownat -F auid>=1000 -F auid!=unset -k perm_mod"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; +ResourceID = "[nxFileLine][V-204531.a][medium][SRG-OS-000064-GPOS-00033]::[RHEL]Baseline"; + ContainsLine = "-a always,exit -F arch=b32 -S creat,open,openat,open_by_handle_at,truncate,ftruncate -F exit=-EPERM -F auid>=1000 -F auid!=unset -k access"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*fchownat\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*perm_mod"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*creat,open,openat,open_by_handle_at,truncate,ftruncate\\s*-F\\s*exit\\s*=\\s*-EPERM\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*access"; ConfigurationName = "LinuxBaseLine"; }; instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource53ref { -ResourceID = "[nxFileLine][V-204520.b][medium][SRG-OS-000064-GPOS-00033]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S fchownat -F auid>=1000 -F auid!=unset -k perm_mod"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; +ResourceID = "[nxFileLine][V-204531.b][medium][SRG-OS-000064-GPOS-00033]::[RHEL]Baseline"; + ContainsLine = "-a always,exit -F arch=b32 -S creat,open,openat,open_by_handle_at,truncate,ftruncate -F exit=-EACCES -F auid>=1000 -F auid!=unset -k access"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*fchownat\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*perm_mod"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*creat,open,openat,open_by_handle_at,truncate,ftruncate\\s*-F\\s*exit\\s*=\\s*-EACCES\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*access"; ConfigurationName = "LinuxBaseLine"; }; instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource54ref { -ResourceID = "[nxFileLine][V-204521.a][medium][SRG-OS-000458-GPOS-00203]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S chmod -F auid>=1000 -F auid!=unset -k perm_mod"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; +ResourceID = "[nxFileLine][V-204531.c][medium][SRG-OS-000064-GPOS-00033]::[RHEL]Baseline"; + ContainsLine = "-a always,exit -F arch=b64 -S creat,open,openat,open_by_handle_at,truncate,ftruncate -F exit=-EPERM -F auid>=1000 -F auid!=unset -k access"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*chmod\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*perm_mod"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*creat,open,openat,open_by_handle_at,truncate,ftruncate\\s*-F\\s*exit\\s*=\\s*-EPERM\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*access"; ConfigurationName = "LinuxBaseLine"; }; instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource55ref { -ResourceID = "[nxFileLine][V-204521.b][medium][SRG-OS-000458-GPOS-00203]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S chmod -F auid>=1000 -F auid!=unset -k perm_mod"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; +ResourceID = "[nxFileLine][V-204531.d][medium][SRG-OS-000064-GPOS-00033]::[RHEL]Baseline"; + ContainsLine = "-a always,exit -F arch=b64 -S creat,open,openat,open_by_handle_at,truncate,ftruncate -F exit=-EACCES -F auid>=1000 -F auid!=unset -k access"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*chmod\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*perm_mod"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*creat,open,openat,open_by_handle_at,truncate,ftruncate\\s*-F\\s*exit\\s*=\\s*-EACCES\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*access"; ConfigurationName = "LinuxBaseLine"; }; instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource56ref { -ResourceID = "[nxFileLine][V-204522.a][medium][SRG-OS-000458-GPOS-00203]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S fchmod -F auid>=1000 -F auid!=unset -k perm_mod"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*fchmod\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*perm_mod"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource57ref -{ -ResourceID = "[nxFileLine][V-204522.b][medium][SRG-OS-000458-GPOS-00203]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S fchmod -F auid>=1000 -F auid!=unset -k perm_mod"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*fchmod\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*perm_mod"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource58ref -{ -ResourceID = "[nxFileLine][V-204523.a][medium][SRG-OS-000458-GPOS-00203]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S fchmodat -F auid>=1000 -F auid!=unset -k perm_mod"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*fchmodat\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*perm_mod"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource59ref -{ -ResourceID = "[nxFileLine][V-204523.b][medium][SRG-OS-000458-GPOS-00203]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S fchmodat -F auid>=1000 -F auid!=unset -k perm_mod"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*fchmodat\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*perm_mod"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource60ref -{ -ResourceID = "[nxFileLine][V-204524.a][medium][SRG-OS-000458-GPOS-00203]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S setxattr -F auid>=1000 -F auid!=unset -k perm_mod"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*setxattr\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*perm_mod"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource61ref -{ -ResourceID = "[nxFileLine][V-204524.b][medium][SRG-OS-000458-GPOS-00203]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S setxattr -F auid>=1000 -F auid!=unset -k perm_mod"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*setxattr\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*perm_mod"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource62ref -{ -ResourceID = "[nxFileLine][V-204525.a][medium][SRG-OS-000458-GPOS-00203]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S fsetxattr -F auid>=1000 -F auid!=unset -k perm_mod"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*fsetxattr\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*perm_mod"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource63ref -{ -ResourceID = "[nxFileLine][V-204525.b][medium][SRG-OS-000458-GPOS-00203]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S fsetxattr -F auid>=1000 -F auid!=unset -k perm_mod"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*fsetxattr\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*perm_mod"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource64ref -{ -ResourceID = "[nxFileLine][V-204526.a][medium][SRG-OS-000458-GPOS-00203]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S lsetxattr -F auid>=1000 -F auid!=unset -k perm_mod"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*lsetxattr\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*perm_mod"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource65ref -{ -ResourceID = "[nxFileLine][V-204526.b][medium][SRG-OS-000458-GPOS-00203]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S lsetxattr -F auid>=1000 -F auid!=unset -k perm_mod"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*lsetxattr\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*perm_mod"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource66ref -{ -ResourceID = "[nxFileLine][V-204527.a][medium][SRG-OS-000458-GPOS-00203]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S removexattr -F auid>=1000 -F auid!=unset -k perm_mod"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*removexattr\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*perm_mod"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource67ref -{ -ResourceID = "[nxFileLine][V-204527.b][medium][SRG-OS-000458-GPOS-00203]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S removexattr -F auid>=1000 -F auid!=unset -k perm_mod"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*removexattr\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*perm_mod"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource68ref -{ -ResourceID = "[nxFileLine][V-204528.a][medium][SRG-OS-000458-GPOS-00203]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S fremovexattr -F auid>=1000 -F auid!=unset -k perm_mod"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*fremovexattr\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*perm_mod"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource69ref -{ -ResourceID = "[nxFileLine][V-204528.b][medium][SRG-OS-000458-GPOS-00203]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S fremovexattr -F auid>=1000 -F auid!=unset -k perm_mod"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*fremovexattr\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*perm_mod"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource70ref -{ -ResourceID = "[nxFileLine][V-204529.a][medium][SRG-OS-000458-GPOS-00203]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S lremovexattr -F auid>=1000 -F auid!=unset -k perm_mod"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*lremovexattr\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*perm_mod"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource71ref -{ -ResourceID = "[nxFileLine][V-204529.b][medium][SRG-OS-000458-GPOS-00203]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S lremovexattr -F auid>=1000 -F auid!=unset -k perm_mod"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*lremovexattr\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*perm_mod"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource72ref -{ -ResourceID = "[nxFileLine][V-204530.a][medium][SRG-OS-000064-GPOS-00033]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S creat F exit=-EPERM -F auid>=1000 -F auid!=unset -k access"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*creat\\s*F\\s*exit\\s*=\\s*-EPERM\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*access"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource73ref -{ -ResourceID = "[nxFileLine][V-204530.b][medium][SRG-OS-000064-GPOS-00033]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S creat -F exit=-EACCES -F auid>=1000 -F auid!=unset -k access"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*creat\\s*-F\\s*exit\\s*=\\s*-EACCES\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*access"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource74ref -{ -ResourceID = "[nxFileLine][V-204530.c][medium][SRG-OS-000064-GPOS-00033]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S creat -F exit=-EPERM -F auid>=1000 -F auid!=unset -k access"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*creat\\s*-F\\s*exit\\s*=\\s*-EPERM\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*access"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource75ref -{ -ResourceID = "[nxFileLine][V-204530.d][medium][SRG-OS-000064-GPOS-00033]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S creat -F exit=-EACCES -F auid>=1000 -F auid!=unset -k access"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*creat\\s*-F\\s*exit\\s*=\\s*-EACCES\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*access"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource76ref -{ -ResourceID = "[nxFileLine][V-204531.a][medium][SRG-OS-000064-GPOS-00033]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S open -F exit=-EPERM -F auid>=1000 -F auid!=unset -k access"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*open\\s*-F\\s*exit\\s*=\\s*-EPERM\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*access"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource77ref -{ -ResourceID = "[nxFileLine][V-204531.b][medium][SRG-OS-000064-GPOS-00033]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S open -F exit=-EACCES -F auid>=1000 -F auid!=unset -k access"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*open\\s*-F\\s*exit\\s*=\\s*-EACCES\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*access"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource78ref -{ -ResourceID = "[nxFileLine][V-204531.c][medium][SRG-OS-000064-GPOS-00033]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S open -F exit=-EPERM -F auid>=1000 -F auid!=unset -k access"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*open\\s*-F\\s*exit\\s*=\\s*-EPERM\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*access"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource79ref -{ -ResourceID = "[nxFileLine][V-204531.d][medium][SRG-OS-000064-GPOS-00033]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S open -F exit=-EACCES -F auid>=1000 -F auid!=unset -k access"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*open\\s*-F\\s*exit\\s*=\\s*-EACCES\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*access"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource80ref -{ -ResourceID = "[nxFileLine][V-204532.a][medium][SRG-OS-000064-GPOS-00033]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S openat -F exit=-EPERM -F auid>=1000 -F auid!=unset -k access"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*openat\\s*-F\\s*exit\\s*=\\s*-EPERM\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*access"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource81ref -{ -ResourceID = "[nxFileLine][V-204532.b][medium][SRG-OS-000064-GPOS-00033]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S openat -F exit=-EACCES -F auid>=1000 -F auid!=unset -k access"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*openat\\s*-F\\s*exit\\s*=\\s*-EACCES\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*access"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource82ref -{ -ResourceID = "[nxFileLine][V-204532.c][medium][SRG-OS-000064-GPOS-00033]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S openat -F exit=-EPERM -F auid>=1000 -F auid!=unset -k access"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*openat\\s*-F\\s*exit\\s*=\\s*-EPERM\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*access"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource83ref -{ -ResourceID = "[nxFileLine][V-204532.d][medium][SRG-OS-000064-GPOS-00033]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S openat -F exit=-EACCES -F auid>=1000 -F auid!=unset -k access"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*openat\\s*-F\\s*exit\\s*=\\s*-EACCES\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*access"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource84ref -{ -ResourceID = "[nxFileLine][V-204533.a][medium][SRG-OS-000064-GPOS-00033]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S open_by_handle_at -F exit=-EPERM -F auid>=1000 -F auid!=unset -k access"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*open_by_handle_at\\s*-F\\s*exit\\s*=\\s*-EPERM\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*access"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource85ref -{ -ResourceID = "[nxFileLine][V-204533.b][medium][SRG-OS-000064-GPOS-00033]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S open_by_handle_at -F exit=-EACCES -F auid>=1000 -F auid!=unset -k access"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*open_by_handle_at\\s*-F\\s*exit\\s*=\\s*-EACCES\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*access"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource86ref -{ -ResourceID = "[nxFileLine][V-204533.c][medium][SRG-OS-000064-GPOS-00033]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S open_by_handle_at -F exit=-EPERM -F auid>=1000 -F auid!=unset -k access"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*open_by_handle_at\\s*-F\\s*exit\\s*=\\s*-EPERM\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*access"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource87ref -{ -ResourceID = "[nxFileLine][V-204533.d][medium][SRG-OS-000064-GPOS-00033]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S open_by_handle_at -F exit=-EACCES -F auid>=1000 -F auid!=unset -k access"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*open_by_handle_at\\s*-F\\s*exit\\s*=\\s*-EACCES\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*access"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource88ref -{ -ResourceID = "[nxFileLine][V-204534.a][medium][SRG-OS-000064-GPOS-00033]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S truncate -F exit=-EPERM -F auid>=1000 -F auid!=unset -k access"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*truncate\\s*-F\\s*exit\\s*=\\s*-EPERM\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*access"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource89ref -{ -ResourceID = "[nxFileLine][V-204534.b][medium][SRG-OS-000064-GPOS-00033]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S truncate -F exit=-EACCES -F auid>=1000 -F auid!=unset -k access"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*truncate\\s*-F\\s*exit\\s*=\\s*-EACCES\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*access"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource90ref -{ -ResourceID = "[nxFileLine][V-204534.c][medium][SRG-OS-000064-GPOS-00033]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S truncate -F exit=-EPERM -F auid>=1000 -F auid!=unset -k access"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*truncate\\s*-F\\s*exit\\s*=\\s*-EPERM\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*access"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource91ref -{ -ResourceID = "[nxFileLine][V-204534.d][medium][SRG-OS-000064-GPOS-00033]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S truncate -F exit=-EACCES -F auid>=1000 -F auid!=unset -k access"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*truncate\\s*-F\\s*exit\\s*=\\s*-EACCES\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*access"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource92ref -{ -ResourceID = "[nxFileLine][V-204535.a][medium][SRG-OS-000064-GPOS-00033]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S ftruncate -F exit=-EPERM -F auid>=1000 -F auid!=unset -k access"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*ftruncate\\s*-F\\s*exit\\s*=\\s*-EPERM\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*access"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource93ref -{ -ResourceID = "[nxFileLine][V-204535.b][medium][SRG-OS-000064-GPOS-00033]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S ftruncate -F exit=-EACCES -F auid>=1000 -F auid!=unset -k access"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*ftruncate\\s*-F\\s*exit\\s*=\\s*-EACCES\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*access"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource94ref -{ -ResourceID = "[nxFileLine][V-204535.c][medium][SRG-OS-000064-GPOS-00033]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S ftruncate -F exit=-EPERM -F auid>=1000 -F auid!=unset -k access"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*ftruncate\\s*-F\\s*exit\\s*=\\s*-EPERM\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*access"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource95ref -{ -ResourceID = "[nxFileLine][V-204535.d][medium][SRG-OS-000064-GPOS-00033]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S ftruncate -F exit=-EACCES -F auid>=1000 -F auid!=unset -k access"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*ftruncate\\s*-F\\s*exit\\s*=\\s*-EACCES\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*access"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource96ref -{ ResourceID = "[nxFileLine][V-204536][medium][SRG-OS-000392-GPOS-00172]::[RHEL]Baseline"; ContainsLine = "-a always,exit -F path=/usr/sbin/semanage -F auid>=1000 -F auid!=unset -k privileged-priv_change"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/sbin/semanage\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-priv_change"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource97ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource57ref { ResourceID = "[nxFileLine][V-204537][medium][SRG-OS-000392-GPOS-00172]::[RHEL]Baseline"; ContainsLine = "-a always,exit -F path=/usr/sbin/setsebool -F auid>=1000 -F auid!=unset -k privileged-priv_change"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/sbin/setsebool\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-priv_change"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource98ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource58ref { ResourceID = "[nxFileLine][V-204538][medium][SRG-OS-000392-GPOS-00172]::[RHEL]Baseline"; ContainsLine = "-a always,exit -F path=/usr/bin/chcon -F auid>=1000 -F auid!=unset -k privileged-priv_change"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/bin/chcon\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-priv_change"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource99ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource59ref { ResourceID = "[nxFileLine][V-204539][medium][SRG-OS-000392-GPOS-00172]::[RHEL]Baseline"; ContainsLine = "-a always,exit -F path=/usr/sbin/setfiles -F auid>=1000 -F auid!=unset -k privileged-priv_change"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/sbin/setfiles\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-priv_change"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource100ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource60ref { ResourceID = "[nxFileLine][V-204540][medium][SRG-OS-000392-GPOS-00172]::[RHEL]Baseline"; ContainsLine = "-w /var/run/faillock -p wa -k logins"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "#\\s*-w\\s*/var/run/faillock\\s*-p\\s*wa\\s*-k\\s*logins"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource101ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource61ref { ResourceID = "[nxFileLine][V-204541][medium][SRG-OS-000392-GPOS-00172]::[RHEL]Baseline"; ContainsLine = "-w /var/log/lastlog -p wa -k logins"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "#\\s*-w\\s*/var/log/lastlog\\s*-p\\s*wa\\s*-k\\s*logins"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource102ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource62ref { ResourceID = "[nxFileLine][V-204542][medium][SRG-OS-000042-GPOS-00020]::[RHEL]Baseline"; ContainsLine = "-a always,exit -F path=/usr/bin/passwd -F auid>=1000 -F auid!=unset -k privileged-passwd"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/bin/passwd\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-passwd"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource103ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource63ref { ResourceID = "[nxFileLine][V-204543][medium][SRG-OS-000042-GPOS-00020]::[RHEL]Baseline"; ContainsLine = "-a always,exit -F path=/usr/sbin/unix_chkpwd -F auid>=1000 -F auid!=unset -k privileged-passwd"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/sbin/unix_chkpwd\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-passwd"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource104ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource64ref { ResourceID = "[nxFileLine][V-204544][medium][SRG-OS-000042-GPOS-00020]::[RHEL]Baseline"; ContainsLine = "-a always,exit -F path=/usr/bin/gpasswd -F auid>=1000 -F auid!=unset -k privileged-passwd"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/bin/gpasswd\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-passwd"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource105ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource65ref { ResourceID = "[nxFileLine][V-204545][medium][SRG-OS-000042-GPOS-00020]::[RHEL]Baseline"; ContainsLine = "-a always,exit -F path=/usr/bin/chage -F auid>=1000 -F auid!=unset -k privileged-passwd"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/bin/chage\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-passwd"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource106ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource66ref { ResourceID = "[nxFileLine][V-204546][medium][SRG-OS-000042-GPOS-00020]::[RHEL]Baseline"; ContainsLine = "-a always,exit -F path=/usr/sbin/userhelper -F auid>=1000 -F auid!=unset -k privileged-passwd"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/sbin/userhelper\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-passwd"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource107ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource67ref { ResourceID = "[nxFileLine][V-204547][medium][SRG-OS-000037-GPOS-00015]::[RHEL]Baseline"; ContainsLine = "-a always,exit -F path=/usr/bin/su -F auid>=1000 -F auid!=unset -k privileged-priv_change"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/bin/su\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-priv_change"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource108ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource68ref { ResourceID = "[nxFileLine][V-204548][medium][SRG-OS-000037-GPOS-00015]::[RHEL]Baseline"; ContainsLine = "-a always,exit -F path=/usr/bin/sudo -F auid>=1000 -F auid!=unset -k privileged-priv_change"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/bin/sudo\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-priv_change"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource109ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource69ref { ResourceID = "[nxFileLine][V-204549.a][medium][SRG-OS-000037-GPOS-00015]::[RHEL]Baseline"; ContainsLine = "-w /etc/sudoers -p wa -k privileged-actions"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "#\\s*-w /etc/sudoers -p wa -k privileged-actions"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource110ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource70ref { ResourceID = "[nxFileLine][V-204549.b][medium][SRG-OS-000037-GPOS-00015]::[RHEL]Baseline"; ContainsLine = "-w /etc/sudoers.d/ -p wa -k privileged-actions"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "#\\s*-w /etc/sudoers.d/ -p wa -k privileged-actions"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource111ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource71ref { ResourceID = "[nxFileLine][V-204550][medium][SRG-OS-000037-GPOS-00015]::[RHEL]Baseline"; ContainsLine = "-a always,exit -F path=/usr/bin/newgrp -F auid>=1000 -F auid!=unset -k privileged-priv_change"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/bin/newgrp\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-priv_change"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource112ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource72ref { ResourceID = "[nxFileLine][V-204551][medium][SRG-OS-000037-GPOS-00015]::[RHEL]Baseline"; ContainsLine = "-a always,exit -F path=/usr/bin/chsh -F auid>=1000 -F auid!=unset -k privileged-priv_change"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/bin/chsh\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-priv_change"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource113ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource73ref { ResourceID = "[nxFileLine][V-204552.a][medium][SRG-OS-000042-GPOS-00020]::[RHEL]Baseline"; ContainsLine = "-a always,exit -F arch=b32 -S mount -F auid>=1000 -F auid!=unset -k privileged-mount"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*mount\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-mount"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource114ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource74ref { ResourceID = "[nxFileLine][V-204552.b][medium][SRG-OS-000042-GPOS-00020]::[RHEL]Baseline"; ContainsLine = "-a always,exit -F arch=b64 -S mount -F auid>=1000 -F auid!=unset -k privileged-mount"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*mount\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-mount"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource115ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource75ref { ResourceID = "[nxFileLine][V-204552.c][medium][SRG-OS-000042-GPOS-00020]::[RHEL]Baseline"; ContainsLine = "-a always,exit -F path=/usr/bin/mount -F auid>=1000 -F auid!=unset -k privileged-mount"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/bin/mount\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-mount"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource116ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource76ref { ResourceID = "[nxFileLine][V-204553][medium][SRG-OS-000042-GPOS-00020]::[RHEL]Baseline"; ContainsLine = "-a always,exit -F path=/usr/bin/umount -F auid>=1000 -F auid!=unset -k privileged-mount"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/bin/umount\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-mount"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource117ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource77ref { ResourceID = "[nxFileLine][V-204554][medium][SRG-OS-000042-GPOS-00020]::[RHEL]Baseline"; ContainsLine = "-a always,exit -F path=/usr/sbin/postdrop -F auid>=1000 -F auid!=unset -k privileged-postfix"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/sbin/postdrop\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-postfix"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource118ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource78ref { ResourceID = "[nxFileLine][V-204555][medium][SRG-OS-000042-GPOS-00020]::[RHEL]Baseline"; ContainsLine = "-a always,exit -F path=/usr/sbin/postqueue -F auid>=1000 -F auid!=unset -k privileged-postfix"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/sbin/postqueue\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-postfix"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource119ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource79ref { ResourceID = "[nxFileLine][V-204556][medium][SRG-OS-000042-GPOS-00020]::[RHEL]Baseline"; ContainsLine = "-a always,exit -F path=/usr/libexec/openssh/ssh-keysign -F auid>=1000 -F auid!=unset -k privileged-ssh"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/libexec/openssh/ssh-keysign\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-ssh"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource120ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource80ref { ResourceID = "[nxFileLine][V-204557][medium][SRG-OS-000042-GPOS-00020]::[RHEL]Baseline"; ContainsLine = "-a always,exit -F path=/usr/bin/crontab -F auid>=1000 -F auid!=unset -k privileged-cron"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/bin/crontab\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-cron"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource121ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource81ref { ResourceID = "[nxFileLine][V-204558][medium][SRG-OS-000471-GPOS-00215]::[RHEL]Baseline"; ContainsLine = "-a always,exit -F path=/usr/sbin/pam_timestamp_check -F auid>=1000 -F auid!=unset -k privileged-pam"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/sbin/pam_timestamp_check\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-pam"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource122ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource82ref { ResourceID = "[nxFileLine][V-204559.a][medium][SRG-OS-000471-GPOS-00216]::[RHEL]Baseline"; ContainsLine = "-a always,exit -F arch=b32 -S create_module -k module-change"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*create_module\\s*-k\\s*module-change"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource123ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource83ref { ResourceID = "[nxFileLine][V-204559.b][medium][SRG-OS-000471-GPOS-00216]::[RHEL]Baseline"; ContainsLine = "-a always,exit -F arch=b64 -S create_module -k module-change"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*create_module\\s*-k\\s*module-change"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource124ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource84ref { ResourceID = "[nxFileLine][V-204560.a][medium][SRG-OS-000471-GPOS-00216]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S init_module -k module-change"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + ContainsLine = "-a always,exit -F arch=b32 -S init_module,finit_module -k modulechange"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*init_module\\s*-k\\s*module-change"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*init_module,finit_module\\s*-k\\s*modulechange"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource125ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource85ref { ResourceID = "[nxFileLine][V-204560.b][medium][SRG-OS-000471-GPOS-00216]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S init_module -k module-change"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + ContainsLine = "-a always,exit -F arch=b64 -S init_module,finit_module -k modulechange"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*init_module\\s*-k\\s*module-change"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*init_module,finit_module\\s*-k\\s*modulechange"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource126ref -{ -ResourceID = "[nxFileLine][V-204561.a][medium][SRG-OS-000471-GPOS-00216]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S finit_module -k module-change"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*finit_module\\s*-k\\s*module-change"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource127ref -{ -ResourceID = "[nxFileLine][V-204561.b][medium][SRG-OS-000471-GPOS-00216]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S finit_module -k module-change"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*finit_module\\s*-k\\s*module-change"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource128ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource86ref { ResourceID = "[nxFileLine][V-204562.a][medium][SRG-OS-000471-GPOS-00216]::[RHEL]Baseline"; ContainsLine = "-a always,exit -F arch=b32 -S delete_module -k module-change"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*delete_module\\s*-k\\s*module-change"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource129ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource87ref { ResourceID = "[nxFileLine][V-204562.b][medium][SRG-OS-000471-GPOS-00216]::[RHEL]Baseline"; ContainsLine = "-a always,exit -F arch=b64 -S delete_module -k module-change"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*delete_module\\s*-k\\s*module-change"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource130ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource88ref { ResourceID = "[nxFileLine][V-204563][medium][SRG-OS-000471-GPOS-00216]::[RHEL]Baseline"; ContainsLine = "-w /usr/bin/kmod -p x -F auid!=unset -k module-change"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "#\\s*-w\\s*/usr/bin/kmod\\s*-p\\s*x\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*module-change"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource131ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource89ref { ResourceID = "[nxFileLine][V-204564][medium][SRG-OS-000004-GPOS-00004]::[RHEL]Baseline"; ContainsLine = "-w /etc/passwd -p wa -k identity"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "#\\s*-w\\s*/etc/passwd\\s*-p\\s*wa\\s*-k\\s*identity"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource132ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource90ref { ResourceID = "[nxFileLine][V-204565][medium][SRG-OS-000004-GPOS-00004]::[RHEL]Baseline"; ContainsLine = "-w /etc/group -p wa -k identity"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "#\\s*-w\\s*/etc/group\\s*-p\\s*wa\\s*-k\\s*identity"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource133ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource91ref { ResourceID = "[nxFileLine][V-204566][medium][SRG-OS-000004-GPOS-00004]::[RHEL]Baseline"; ContainsLine = "-w /etc/gshadow -p wa -k identity"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "#\\s*-w\\s*/etc/gshadow\\s*-p\\s*wa\\s*-k\\s*identity"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource134ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource92ref { ResourceID = "[nxFileLine][V-204567][medium][SRG-OS-000004-GPOS-00004]::[RHEL]Baseline"; ContainsLine = "-w /etc/shadow -p wa -k identity"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "#\\s*-w\\s*/etc/shadow\\s*-p\\s*wa\\s*-k\\s*identity"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource135ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource93ref { ResourceID = "[nxFileLine][V-204568][medium][SRG-OS-000004-GPOS-00004]::[RHEL]Baseline"; ContainsLine = "-w /etc/security/opasswd -p wa -k identity"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "#\\s*-w\\s*/etc/security/opasswd\\s*-p\\s*wa\\s*-k\\s*identity"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource136ref -{ -ResourceID = "[nxFileLine][V-204569.a][medium][SRG-OS-000466-GPOS-00210]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S rename -F auid>=1000 -F auid!=unset -k delete"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*rename\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*delete"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource137ref -{ -ResourceID = "[nxFileLine][V-204569.b][medium][SRG-OS-000466-GPOS-00210]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S rename -F auid>=1000 -F auid!=unset -k delete"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*rename\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*delete"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource138ref -{ -ResourceID = "[nxFileLine][V-204570.a][medium][SRG-OS-000466-GPOS-00210]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S renameat -F auid>=1000 -F auid!=unset -k delete"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*renameat\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*delete"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource139ref -{ -ResourceID = "[nxFileLine][V-204570.b][medium][SRG-OS-000466-GPOS-00210]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S renameat -F auid>=1000 -F auid!=unset -k delete"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*renameat\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*delete"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource140ref -{ -ResourceID = "[nxFileLine][V-204571.a][medium][SRG-OS-000466-GPOS-00210]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S rmdir -F auid>=1000 -F auid!=unset -k delete"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*rmdir\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*delete"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource141ref -{ -ResourceID = "[nxFileLine][V-204571.b][medium][SRG-OS-000466-GPOS-00210]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S rmdir -F auid>=1000 -F auid!=unset -k delete"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*rmdir\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*delete"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource142ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource94ref { ResourceID = "[nxFileLine][V-204572.a][medium][SRG-OS-000466-GPOS-00210]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S unlink -F auid>=1000 -F auid!=unset -k delete"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + ContainsLine = "-a always,exit -F arch=b32 -S unlink,unlinkat,rename,renameat,rmdir -F auid>=1000 -F auid!=unset -k delete"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*unlink\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*delete"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*unlink,unlinkat,rename,renameat,rmdir\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*delete"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource143ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource95ref { ResourceID = "[nxFileLine][V-204572.b][medium][SRG-OS-000466-GPOS-00210]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S unlink -F auid>=1000 -F auid!=unset -k delete"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + ContainsLine = "-a always,exit -F arch=b64 -S unlink,unlinkat,rename,renameat,rmdir -F auid>=1000 -F auid!=unset -k delete"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*unlink\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*delete"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*unlink,unlinkat,rename,renameat,rmdir\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*delete"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource144ref -{ -ResourceID = "[nxFileLine][V-204573.a][medium][SRG-OS-000466-GPOS-00210]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S unlinkat -F auid>=1000 -F auid!=unset -k delete"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*unlinkat\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*delete"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource145ref -{ -ResourceID = "[nxFileLine][V-204573.b][medium][SRG-OS-000466-GPOS-00210]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S unlinkat -F auid>=1000 -F auid!=unset -k delete"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*unlinkat\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*delete"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource146ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource96ref { ResourceID = "[nxFileLine][V-204578][medium][SRG-OS-000033-GPOS-00014]::[RHEL]Baseline"; ContainsLine = "Ciphers aes256-ctr,aes192-ctr,aes128-ctr"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/ssh/sshd_config"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "^#\\s*Ciphers.*|^\\s*Ciphers\\s*aes128-ctr.*|^\\s*Ciphers\\s*aes192-ctr.*"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource147ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource97ref { ResourceID = "[nxFileLine][V-204579.b][medium][SRG-OS-000163-GPOS-00072]::[RHEL]Baseline"; ContainsLine = "declare -xr TMOUT=900"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/profile.d/tmout.sh"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "^\\s*TMOUT\\s*=\\s*[0-8]?[0-9]?[0-9]?$|^#\\s*TMOUT.*"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource148ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource98ref { ResourceID = "[nxFileLine][V-204580][medium][SRG-OS-000023-GPOS-00006]::[RHEL]Baseline"; ContainsLine = "banner /etc/issue"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/ssh/sshd_config"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "#\\s*banner\\s*/etc/issue"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource149ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource99ref { ResourceID = "[nxFileLine][V-204587][medium][SRG-OS-000163-GPOS-00072]::[RHEL]Baseline"; ContainsLine = "ClientAliveInterval 600"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/ssh/sshd_config"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "^\\s*ClientAliveInterval\\s*[0-5]?[0-9]?[0-9]?\\s*$|^#\\s*ClientAliveInterval.*|^\\s*ClientAliveInterval\\s*$"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource150ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource100ref { ResourceID = "[nxFileLine][V-204588][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; ContainsLine = "RhostsRSAAuthentication no"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/ssh/sshd_config"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "^#\\s*RhostsRSAAuthentication.*$|^RhostsRSAAuthentication\\s*(?!no\\b)\\w*$"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource151ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource101ref { ResourceID = "[nxFileLine][V-204589][medium][SRG-OS-000163-GPOS-00072]::[RHEL]Baseline"; ContainsLine = "ClientAliveCountMax 0"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/ssh/sshd_config"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "^#\\s*ClientAliveCountMax.*$|^ClientAliveCountMax\\s*(?!0\\b)\\w*$"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource152ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource102ref { ResourceID = "[nxFileLine][V-204590][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; ContainsLine = "IgnoreRhosts yes"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/ssh/sshd_config"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "^#\\s*IgnoreRhosts.*$|^IgnoreRhosts\\s*(?!yes\\b)\\w*$"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource153ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource103ref { ResourceID = "[nxFileLine][V-204591][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; ContainsLine = "PrintLastLog yes"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/ssh/sshd_config"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "^#\\s*PrintLastLog.*$|^PrintLastLog\\s*(?!yes\\b)\\w*$"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource154ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource104ref { ResourceID = "[nxFileLine][V-204592][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; ContainsLine = "PermitRootLogin no"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/ssh/sshd_config"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "^#\\s*PermitRootLogin.*$|^PermitRootLogin\\s*(?!no\\b)\\w*$"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource155ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource105ref { ResourceID = "[nxFileLine][V-204593][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; ContainsLine = "IgnoreUserKnownHosts yes"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/ssh/sshd_config"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "^#\\s*IgnoreUserKnownHosts.*$|^IgnoreUserKnownHosts\\s*(?!yes\\b)\\w*$"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource156ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource106ref { ResourceID = "[nxFileLine][V-204594][high][SRG-OS-000074-GPOS-00042]::[RHEL]Baseline"; ContainsLine = "Protocol 2"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/ssh/sshd_config"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "^#\\s*Protocol.*$|^Protocol\\s*(?!2\\b)\\w*$"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource157ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource107ref { ResourceID = "[nxFileLine][V-204595][medium][SRG-OS-000250-GPOS-00093]::[RHEL]Baseline"; ContainsLine = "MACs hmac-sha2-512,hmac-sha2-256"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/ssh/sshd_config"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "#\\s*MACs.*|\\s*MACs\\s*hmac-(?!sha2-512).*"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource158ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource108ref { ResourceID = "[nxFileLine][V-204598][medium][SRG-OS-000364-GPOS-00151]::[RHEL]Baseline"; ContainsLine = "GSSAPIAuthentication no"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/ssh/sshd_config"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "^#\\s*GSSAPIAuthentication.*$|^GSSAPIAuthentication\\s*(?!no\\b)\\w*$"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource159ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource109ref { ResourceID = "[nxFileLine][V-204599][medium][SRG-OS-000364-GPOS-00151]::[RHEL]Baseline"; ContainsLine = "KerberosAuthentication no"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/ssh/sshd_config"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "^#\\s*KerberosAuthentication.*$|^KerberosAuthentication\\s*(?!no\\b)\\w*$"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource160ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource110ref { ResourceID = "[nxFileLine][V-204600][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; ContainsLine = "StrictModes yes"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/ssh/sshd_config"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "^#\\s*StrictModes.*$|^StrictModes\\s*(?!yes\\b)\\w*$"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource161ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource111ref { ResourceID = "[nxFileLine][V-204601][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; ContainsLine = "UsePrivilegeSeparation sandbox"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/ssh/sshd_config"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "^#\\s*UsePrivilegeSeparation.*$|^UsePrivilegeSeparation\\s*(?!sandbox\\b)\\w*$"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource162ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource112ref { ResourceID = "[nxFileLine][V-204602][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; ContainsLine = "Compression delayed"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/ssh/sshd_config"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "^#\\s*Compression.*$|^Compression\\s*(?!delayed\\b)\\w*$"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource163ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource113ref { ResourceID = "[nxFileLine][V-204622][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; ContainsLine = "X11Forwarding no"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/ssh/sshd_config"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "^#\\s*X11Forwarding.*$|^X11Forwarding\\s*(?!no\\b)\\w*$"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource164ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource114ref { ResourceID = "[nxFileLine][V-233307][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; ContainsLine = "X11UseLocalhost yes"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/ssh/sshd_config"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "#\\s*X11UseLocalhost\\s*yes"; ConfigurationName = "LinuxBaseLine"; }; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource115ref +{ +ResourceID = "[nxFileLine][V-250314][medium][SRG-OS-000324-GPOS-00125]::[RHEL]Baseline"; + ContainsLine = "%wheel ALL=(ALL) TYPE=sysadm_t ROLE=sysadm_r ALL"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/sudoers"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*%wheel\\s*ALL\\s*=\\s*(ALL)\\s*TYPE\\s*=\\s*sysadm_t\\s*ROLE\\s*=\\s*sysadm_r\\s*ALL"; + ConfigurationName = "LinuxBaseLine"; +}; instance of MSFT_nxServiceResource as $MSFT_nxServiceResource1ref { ResourceID = "[nxService][V-204451][medium][SRG-OS-000114-GPOS-00059]::[RHEL]Baseline"; Controller = "systemd"; Enabled = False; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxService.ps1::13::9::nxService"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxService.ps1::13::9::nxService"; Name = "autofs"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -2173,7 +1624,7 @@ instance of MSFT_nxServiceResource as $MSFT_nxServiceResource2ref ResourceID = "[nxService][V-204492][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; Controller = "systemd"; Enabled = False; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxService.ps1::13::9::nxService"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxService.ps1::13::9::nxService"; Name = "kdump"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -2185,7 +1636,7 @@ ResourceID = "[nxService][V-204503][medium][SRG-OS-000038-GPOS-00016]::[RHEL]Bas Controller = "systemd"; State = "Running"; Enabled = True; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxService.ps1::22::9::nxService"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxService.ps1::22::9::nxService"; Name = "auditd"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -2197,7 +1648,7 @@ ResourceID = "[nxService][V-204586][medium][SRG-OS-000423-GPOS-00187]::[RHEL]Bas Controller = "systemd"; State = "Running"; Enabled = True; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxService.ps1::22::9::nxService"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxService.ps1::22::9::nxService"; Name = "sshd"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -2209,7 +1660,7 @@ ResourceID = "[nxService][V-204604.b][medium][SRG-OS-000480-GPOS-00227]::[RHEL]B Controller = "systemd"; State = "Running"; Enabled = True; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxService.ps1::22::9::nxService"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxService.ps1::22::9::nxService"; Name = "firewalld"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -2220,7 +1671,7 @@ instance of MSFT_nxScriptResource as $MSFT_nxScriptResource1ref ResourceID = "[nxScript][V-204399.b][medium][[Skip] SRG-OS-000029-GPOS-00010]::[RHEL]Baseline"; GetScript = "#!/bin/bash\necho [V-204399.b][medium][[Skip] SRG-OS-000029-GPOS-00010]"; TestScript = "#!/bin/bash\nexit 0"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxScript.skip.ps1::10::5::nxScript"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxScript.skip.ps1::10::5::nxScript"; SetScript = "#!/bin/bash"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -2231,7 +1682,7 @@ instance of MSFT_nxScriptResource as $MSFT_nxScriptResource2ref ResourceID = "[nxScript][V-204400][medium][[Skip] SRG-OS-000029-GPOS-00010]::[RHEL]Baseline"; GetScript = "#!/bin/bash\necho [V-204400][medium][[Skip] SRG-OS-000029-GPOS-00010]"; TestScript = "#!/bin/bash\nexit 0"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxScript.skip.ps1::10::5::nxScript"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxScript.skip.ps1::10::5::nxScript"; SetScript = "#!/bin/bash"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -2242,7 +1693,7 @@ instance of MSFT_nxScriptResource as $MSFT_nxScriptResource3ref ResourceID = "[nxScript][V-204403][medium][[Skip] SRG-OS-000029-GPOS-00010]::[RHEL]Baseline"; GetScript = "#!/bin/bash\necho [V-204403][medium][[Skip] SRG-OS-000029-GPOS-00010]"; TestScript = "#!/bin/bash\nexit 0"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxScript.skip.ps1::10::5::nxScript"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxScript.skip.ps1::10::5::nxScript"; SetScript = "#!/bin/bash"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -2253,7 +1704,7 @@ instance of MSFT_nxScriptResource as $MSFT_nxScriptResource4ref ResourceID = "[nxScript][V-204509][medium][[Skip] SRG-OS-000342-GPOS-00133]::[RHEL]Baseline"; GetScript = "#!/bin/bash\necho [V-204509][medium][[Skip] SRG-OS-000342-GPOS-00133]"; TestScript = "#!/bin/bash\nexit 0"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxScript.skip.ps1::10::5::nxScript"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxScript.skip.ps1::10::5::nxScript"; SetScript = "#!/bin/bash"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -2264,7 +1715,7 @@ instance of MSFT_nxScriptResource as $MSFT_nxScriptResource5ref ResourceID = "[nxScript][V-204513][medium][[Skip] SRG-OS-000343-GPOS-00134]::[RHEL]Baseline"; GetScript = "#!/bin/bash\necho [V-204513][medium][[Skip] SRG-OS-000343-GPOS-00134]"; TestScript = "#!/bin/bash\nexit 0"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxScript.skip.ps1::10::5::nxScript"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxScript.skip.ps1::10::5::nxScript"; SetScript = "#!/bin/bash"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -2275,7 +1726,7 @@ instance of MSFT_nxScriptResource as $MSFT_nxScriptResource6ref ResourceID = "[nxScript][V-204623][medium][[Skip] SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; GetScript = "#!/bin/bash\necho [V-204623][medium][[Skip] SRG-OS-000480-GPOS-00227]"; TestScript = "#!/bin/bash\nexit 0"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxScript.skip.ps1::10::5::nxScript"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxScript.skip.ps1::10::5::nxScript"; SetScript = "#!/bin/bash"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -2286,7 +1737,7 @@ instance of MSFT_nxScriptResource as $MSFT_nxScriptResource7ref ResourceID = "[nxScript][V-244557][medium][[Skip] SRG-OS-000080-GPOS-00048]::[RHEL]Baseline"; GetScript = "#!/bin/bash\necho [V-244557][medium][[Skip] SRG-OS-000080-GPOS-00048]"; TestScript = "#!/bin/bash\nexit 0"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxScript.skip.ps1::10::5::nxScript"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxScript.skip.ps1::10::5::nxScript"; SetScript = "#!/bin/bash"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -2297,7 +1748,7 @@ instance of MSFT_nxScriptResource as $MSFT_nxScriptResource8ref ResourceID = "[nxScript][V-244558][medium][[Skip] SRG-OS-000080-GPOS-00048]::[RHEL]Baseline"; GetScript = "#!/bin/bash\necho [V-244558][medium][[Skip] SRG-OS-000080-GPOS-00048]"; TestScript = "#!/bin/bash\nexit 0"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxScript.skip.ps1::10::5::nxScript"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxScript.skip.ps1::10::5::nxScript"; SetScript = "#!/bin/bash"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -2308,7 +1759,7 @@ instance of MSFT_nxScriptResource as $MSFT_nxScriptResource9ref ResourceID = "[nxScript][V-204399.a][medium][[Skip] SRG-OS-000029-GPOS-00010]::[RHEL]Baseline"; GetScript = "#!/bin/bash\necho [V-204399.a][medium][[Skip] SRG-OS-000029-GPOS-00010]"; TestScript = "#!/bin/bash\nexit 0"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxScript.skip.ps1::10::5::nxScript"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxScript.skip.ps1::10::5::nxScript"; SetScript = "#!/bin/bash"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -2325,7 +1776,7 @@ instance of OMI_ConfigurationDocument Author="Microsoft"; - GenerationDate="01/31/2022 17:13:26"; + GenerationDate="05/04/2022 09:09:33"; GenerationHost="Microsoft"; diff --git a/stig/linux/config/Ubuntu1804-DataScience.mof b/stig/linux/config/Ubuntu1804-DataScience.mof index 6066eca..18a0dc9 100644 --- a/stig/linux/config/Ubuntu1804-DataScience.mof +++ b/stig/linux/config/Ubuntu1804-DataScience.mof @@ -1,7 +1,7 @@ /* @TargetNode='Ubuntu1804-DataScience' @GeneratedBy=Microsoft -@GenerationDate=01/31/2022 17:13:26 +@GenerationDate=05/04/2022 09:09:33 @GenerationHost=Microsoft */ @@ -9,7 +9,7 @@ instance of MSFT_nxPackageResource as $MSFT_nxPackageResource1ref { ResourceID = "[nxPackage][V-219153.a][low][SRG-OS-000479-GPOS-00224]::[Ubuntu]Baseline"; Ensure = "Present"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxPackage.ps1::8::5::nxPackage"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxPackage.ps1::8::5::nxPackage"; Name = "audispd-plugins"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -19,7 +19,7 @@ instance of MSFT_nxPackageResource as $MSFT_nxPackageResource2ref { ResourceID = "[nxPackage][V-219157][high][SRG-OS-000095-GPOS-00049]::[Ubuntu]Baseline"; Ensure = "Absent"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxPackage.ps1::8::5::nxPackage"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxPackage.ps1::8::5::nxPackage"; Name = "nis"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -29,7 +29,7 @@ instance of MSFT_nxPackageResource as $MSFT_nxPackageResource3ref { ResourceID = "[nxPackage][V-219158][high][SRG-OS-000095-GPOS-00049]::[Ubuntu]Baseline"; Ensure = "Absent"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxPackage.ps1::8::5::nxPackage"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxPackage.ps1::8::5::nxPackage"; Name = "rsh-server"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -39,7 +39,7 @@ instance of MSFT_nxPackageResource as $MSFT_nxPackageResource4ref { ResourceID = "[nxPackage][V-219160.a][medium][SRG-OS-000269-GPOS-00103]::[Ubuntu]Baseline"; Ensure = "Present"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxPackage.ps1::8::5::nxPackage"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxPackage.ps1::8::5::nxPackage"; Name = "rsyslog"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -49,7 +49,7 @@ instance of MSFT_nxPackageResource as $MSFT_nxPackageResource5ref { ResourceID = "[nxPackage][V-219161][medium][SRG-OS-000297-GPOS-00115]::[Ubuntu]Baseline"; Ensure = "Present"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxPackage.ps1::8::5::nxPackage"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxPackage.ps1::8::5::nxPackage"; Name = "ufw"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -59,7 +59,7 @@ instance of MSFT_nxPackageResource as $MSFT_nxPackageResource6ref { ResourceID = "[nxPackage][V-219177][high][SRG-OS-000074-GPOS-00042]::[Ubuntu]Baseline"; Ensure = "Absent"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxPackage.ps1::8::5::nxPackage"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxPackage.ps1::8::5::nxPackage"; Name = "telnetd"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -69,7 +69,7 @@ instance of MSFT_nxPackageResource as $MSFT_nxPackageResource7ref { ResourceID = "[nxPackage][V-219186.a][medium][SRG-OS-000480-GPOS-00225]::[Ubuntu]Baseline"; Ensure = "Present"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxPackage.ps1::8::5::nxPackage"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxPackage.ps1::8::5::nxPackage"; Name = "libpam-pwquality"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -79,7 +79,7 @@ instance of MSFT_nxPackageResource as $MSFT_nxPackageResource8ref { ResourceID = "[nxPackage][V-219225.a][medium][SRG-OS-000038-GPOS-00016]::[Ubuntu]Baseline"; Ensure = "Present"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxPackage.ps1::8::5::nxPackage"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxPackage.ps1::8::5::nxPackage"; Name = "auditd"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -89,7 +89,7 @@ instance of MSFT_nxPackageResource as $MSFT_nxPackageResource9ref { ResourceID = "[nxPackage][V-219304][medium][SRG-OS-000030-GPOS-00011]::[Ubuntu]Baseline"; Ensure = "Present"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxPackage.ps1::8::5::nxPackage"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxPackage.ps1::8::5::nxPackage"; Name = "vlock"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -97,59 +97,49 @@ ResourceID = "[nxPackage][V-219304][medium][SRG-OS-000030-GPOS-00011]::[Ubuntu]B }; instance of MSFT_nxPackageResource as $MSFT_nxPackageResource10ref { -ResourceID = "[nxPackage][V-219313.a][high][SRG-OS-000423-GPOS-00187]::[Ubuntu]Baseline"; +ResourceID = "[nxPackage][V-219318][medium][SRG-OS-000375-GPOS-00160]::[Ubuntu]Baseline"; Ensure = "Present"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxPackage.ps1::8::5::nxPackage"; - Name = "ssh"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxPackage.ps1::8::5::nxPackage"; + Name = "libpam-pkcs11"; ModuleName = "nx"; ModuleVersion = "1.0"; ConfigurationName = "LinuxBaseLine"; }; instance of MSFT_nxPackageResource as $MSFT_nxPackageResource11ref { -ResourceID = "[nxPackage][V-219318][medium][SRG-OS-000375-GPOS-00160]::[Ubuntu]Baseline"; +ResourceID = "[nxPackage][V-219319][medium][SRG-OS-000376-GPOS-00161]::[Ubuntu]Baseline"; Ensure = "Present"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxPackage.ps1::8::5::nxPackage"; - Name = "libpam-pkcs11"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxPackage.ps1::8::5::nxPackage"; + Name = "opensc-pkcs11"; ModuleName = "nx"; ModuleVersion = "1.0"; ConfigurationName = "LinuxBaseLine"; }; instance of MSFT_nxPackageResource as $MSFT_nxPackageResource12ref { -ResourceID = "[nxPackage][V-219319][medium][SRG-OS-000376-GPOS-00161]::[Ubuntu]Baseline"; +ResourceID = "[nxPackage][V-219322.a][low][SRG-OS-000312-GPOS-00122]::[Ubuntu]Baseline"; Ensure = "Present"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxPackage.ps1::8::5::nxPackage"; - Name = "opensc-pkcs11"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxPackage.ps1::8::5::nxPackage"; + Name = "libpam-apparmor"; ModuleName = "nx"; ModuleVersion = "1.0"; ConfigurationName = "LinuxBaseLine"; }; instance of MSFT_nxPackageResource as $MSFT_nxPackageResource13ref { -ResourceID = "[nxPackage][V-219322.a][low][SRG-OS-000312-GPOS-00122]::[Ubuntu]Baseline"; +ResourceID = "[nxPackage][V-219323][medium][SRG-OS-000368-GPOS-00154]::[Ubuntu]Baseline"; Ensure = "Present"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxPackage.ps1::8::5::nxPackage"; - Name = "libpam-apparmor"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxPackage.ps1::8::5::nxPackage"; + Name = "apparmor"; ModuleName = "nx"; ModuleVersion = "1.0"; ConfigurationName = "LinuxBaseLine"; }; instance of MSFT_nxPackageResource as $MSFT_nxPackageResource14ref { -ResourceID = "[nxPackage][V-219323][medium][SRG-OS-000368-GPOS-00154]::[Ubuntu]Baseline"; - Ensure = "Present"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxPackage.ps1::8::5::nxPackage"; - Name = "apparmor"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxPackageResource as $MSFT_nxPackageResource15ref -{ ResourceID = "[nxPackage][V-219343][medium][SRG-OS-000445-GPOS-00199]::[Ubuntu]Baseline"; Ensure = "Present"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxPackage.ps1::8::5::nxPackage"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxPackage.ps1::8::5::nxPackage"; Name = "aide"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -161,7 +151,7 @@ ResourceID = "[nxFile][V-219303.a][medium][SRG-OS-000029-GPOS-00010]::[Ubuntu]Ba Contents = ""; DestinationPath = "/etc/profile.d/autologout.sh"; ModuleName = "nx"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; ModuleVersion = "1.0"; ConfigurationName = "LinuxBaseLine"; }; @@ -171,7 +161,7 @@ ResourceID = "[nxFile][V-219339.a][medium][SRG-OS-000378-GPOS-00163]::[Ubuntu]Ba Contents = ""; DestinationPath = "/etc/modprobe.d/DISASTIG.conf"; ModuleName = "nx"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; ModuleVersion = "1.0"; ConfigurationName = "LinuxBaseLine"; }; @@ -179,7 +169,7 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource1ref { ResourceID = "[nxFileLine][V-219152.a][low][SRG-OS-000343-GPOS-00134]::[Ubuntu]Baseline"; ContainsLine = "space_left_action = email"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/auditd.conf"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -188,7 +178,7 @@ ResourceID = "[nxFileLine][V-219152.a][low][SRG-OS-000343-GPOS-00134]::[Ubuntu]B }; instance of MSFT_nxFileResource as $MSFT_nxFileResource3ref { -SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::29::9::nxFile"; +SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::29::9::nxFile"; ModuleName = "nx"; ModuleVersion = "1.0"; ResourceID = "[nxFile][V-219153.b][low][SRG-OS-000479-GPOS-00224]::[Ubuntu]Baseline"; @@ -199,7 +189,7 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource2ref { ResourceID = "[nxFileLine][V-219153.b][low][SRG-OS-000479-GPOS-00224]::[Ubuntu]Baseline"; ContainsLine = "active = yes"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audisp/plugins.d/au-remote.conf"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -210,7 +200,7 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource3ref { ResourceID = "[nxFileLine][V-219156.a][medium][SRG-OS-000437-GPOS-00194]::[Ubuntu]Baseline"; ContainsLine = "Unattended-Upgrade::Remove-Unused-Dependencies \"true\";"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/apt/apt.conf.d/50unattended-upgrades"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -221,7 +211,7 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource4ref { ResourceID = "[nxFileLine][V-219156.b][medium][SRG-OS-000437-GPOS-00194]::[Ubuntu]Baseline"; ContainsLine = "Unattended-Upgrade::Remove-Unused-Kernel-Packages \"true\";"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/apt/apt.conf.d/50unattended-upgrades"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -232,7 +222,7 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource5ref { ResourceID = "[nxFileLine][V-219170.a][medium][SRG-OS-000228-GPOS-00088]::[Ubuntu]Baseline"; ContainsLine = "Banner /etc/issue"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/ssh/sshd_config"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -243,7 +233,7 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource6ref { ResourceID = "[nxFileLine][V-219170.b][medium][SRG-OS-000228-GPOS-00088]::[Ubuntu]Baseline"; ContainsLine = "You are accessing a U.S. Government (USG) Information System (IS) that is provided for USG-authorized use only.\n\nBy using this IS (which includes any device attached to this IS), you consent to the following conditions.\n\n-The USG routinely intercepts and monitors communications on this IS for purposes including, but not limited to, penetration testing, COMSEC monitoring, network operations and defense, personnel misconduct (PM), law enforcement (LE), and counterintelligence (CI) investigations.\n\n-At any time, the USG may inspect and seize data stored on this IS.\n\n-Communications using, or data stored on, this IS are not private, are subject to routine monitoring, interception, and search, and may be disclosed or used for any USG-authorized purpose.\n\n-This IS includes security measures (e.g., authentication and access controls) to protect USG interests--not for your personal benefit or privacy.\n\n-Notwithstanding the above, using this IS does not constitute consent to PM, LE or CI investigative searching or monitoring of the content of privileged communications, or work product, related to personal representation or services by attorneys, psychotherapists, or clergy, and their assistants. Such communications and work product are private and confidential. See User Agreement for details."; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/issue"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -254,7 +244,7 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource7ref { ResourceID = "[nxFileLine][V-219172][low][SRG-OS-000069-GPOS-00037]::[Ubuntu]Baseline"; ContainsLine = "ucredit=-1"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/security/pwquality.conf"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -265,7 +255,7 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource8ref { ResourceID = "[nxFileLine][V-219173][low][SRG-OS-000070-GPOS-00038]::[Ubuntu]Baseline"; ContainsLine = "lcredit=-1"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/security/pwquality.conf"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -276,7 +266,7 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource9ref { ResourceID = "[nxFileLine][V-219174][low][SRG-OS-000071-GPOS-00039]::[Ubuntu]Baseline"; ContainsLine = "dcredit=-1"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/security/pwquality.conf"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -287,7 +277,7 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource10ref { ResourceID = "[nxFileLine][V-219175][low][SRG-OS-000072-GPOS-00040]::[Ubuntu]Baseline"; ContainsLine = "difok=8"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/security/pwquality.conf"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -298,7 +288,7 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource11ref { ResourceID = "[nxFileLine][V-219176][medium][SRG-OS-000073-GPOS-00041]::[Ubuntu]Baseline"; ContainsLine = "ENCRYPT_METHOD SHA512"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/login.defs"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -309,7 +299,7 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource12ref { ResourceID = "[nxFileLine][V-219178][low][SRG-OS-000075-GPOS-00043]::[Ubuntu]Baseline"; ContainsLine = "PASS_MIN_DAYS 1"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/login.defs"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -320,7 +310,7 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource13ref { ResourceID = "[nxFileLine][V-219179][low][SRG-OS-000076-GPOS-00044]::[Ubuntu]Baseline"; ContainsLine = "PASS_MAX_DAYS 60"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/login.defs"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -331,7 +321,7 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource14ref { ResourceID = "[nxFileLine][V-219181][medium][SRG-OS-000078-GPOS-00046]::[Ubuntu]Baseline"; ContainsLine = "minlen=15"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/security/pwquality.conf"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -342,7 +332,7 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource15ref { ResourceID = "[nxFileLine][V-219184][medium][SRG-OS-000480-GPOS-00225]::[Ubuntu]Baseline"; ContainsLine = "dictcheck=1"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/security/pwquality.conf"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -353,7 +343,7 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource16ref { ResourceID = "[nxFileLine][V-219186.b][medium][SRG-OS-000480-GPOS-00225]::[Ubuntu]Baseline"; ContainsLine = "enforcing = 1"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/security/pwquality.conf"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -364,7 +354,7 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource17ref { ResourceID = "[nxFileLine][V-219210][low][SRG-OS-000266-GPOS-00101]::[Ubuntu]Baseline"; ContainsLine = "ocredit=-1"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/security/pwquality.conf"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -375,7 +365,7 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource18ref { ResourceID = "[nxFileLine][V-219213][medium][SRG-OS-000064-GPOS-00033]::[Ubuntu]Baseline"; ContainsLine = "-w /var/log/tallylog -p wa -k logins"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -386,7 +376,7 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource19ref { ResourceID = "[nxFileLine][V-219214][medium][SRG-OS-000064-GPOS-00033]::[Ubuntu]Baseline"; ContainsLine = "-w /var/log/faillog -p wa -k logins"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -397,7 +387,7 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource20ref { ResourceID = "[nxFileLine][V-219215][medium][SRG-OS-000064-GPOS-00033]::[Ubuntu]Baseline"; ContainsLine = "-w /var/log/lastlog -p wa -k logins"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -408,7 +398,7 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource21ref { ResourceID = "[nxFileLine][V-219216][medium][SRG-OS-000471-GPOS-00215]::[Ubuntu]Baseline"; ContainsLine = "-w /var/log/sudo.log -p wa -k priv_actions"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -419,7 +409,7 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource22ref { ResourceID = "[nxFileLine][V-219217][medium][SRG-OS-000472-GPOS-00217]::[Ubuntu]Baseline"; ContainsLine = "-w /var/log/wtmp -p wa -k logins"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -430,7 +420,7 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource23ref { ResourceID = "[nxFileLine][V-219218][medium][SRG-OS-000472-GPOS-00217]::[Ubuntu]Baseline"; ContainsLine = "-w /var/run/utmp -p wa -k logins"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -441,7 +431,7 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource24ref { ResourceID = "[nxFileLine][V-219219][medium][SRG-OS-000472-GPOS-00217]::[Ubuntu]Baseline"; ContainsLine = "-w /var/log/btmp -p wa -k logins"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -452,7 +442,7 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource25ref { ResourceID = "[nxFileLine][V-219220][medium][SRG-OS-000476-GPOS-00221]::[Ubuntu]Baseline"; ContainsLine = "-w /etc/passwd -p wa -k usergroup_modification"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -463,7 +453,7 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource26ref { ResourceID = "[nxFileLine][V-219221][medium][SRG-OS-000476-GPOS-00221]::[Ubuntu]Baseline"; ContainsLine = "-w /etc/group -p wa -k usergroup_modification"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -474,7 +464,7 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource27ref { ResourceID = "[nxFileLine][V-219222][medium][SRG-OS-000476-GPOS-00221]::[Ubuntu]Baseline"; ContainsLine = "-w /etc/gshadow -p wa -k usergroup_modification"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -485,7 +475,7 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource28ref { ResourceID = "[nxFileLine][V-219223][medium][SRG-OS-000476-GPOS-00221]::[Ubuntu]Baseline"; ContainsLine = "-w /etc/shadow -p wa -k usergroup_modification"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -496,7 +486,7 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource29ref { ResourceID = "[nxFileLine][V-219224][medium][SRG-OS-000476-GPOS-00221]::[Ubuntu]Baseline"; ContainsLine = "-w /etc/security/opasswd -p wa -k usergroup_modification"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -507,7 +497,7 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource30ref { ResourceID = "[nxFileLine][V-219226][medium][SRG-OS-000046-GPOS-00022]::[Ubuntu]Baseline"; ContainsLine = "action_mail_acct = root"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/auditd.conf"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -518,7 +508,7 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource31ref { ResourceID = "[nxFileLine][V-219227][medium][SRG-OS-000047-GPOS-00023]::[Ubuntu]Baseline"; ContainsLine = "disk_full_action = HALT"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/auditd.conf"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -529,7 +519,7 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource32ref { ResourceID = "[nxFileLine][V-219238][medium][SRG-OS-000064-GPOS-00033]::[Ubuntu]Baseline"; ContainsLine = "-a always,exit -F path=/bin/su -F perm=x -F auid>=1000 -F auid!=-1 -k privileged-priv_change"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -540,7 +530,7 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource33ref { ResourceID = "[nxFileLine][V-219239][medium][SRG-OS-000064-GPOS-00033]::[Ubuntu]Baseline"; ContainsLine = "-a always,exit -F path=/usr/bin/chfn -F perm=x -F auid>=1000 -F auid!=-1 -k privileged-chfn"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -551,7 +541,7 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource34ref { ResourceID = "[nxFileLine][V-219240][medium][SRG-OS-000064-GPOS-00033]::[Ubuntu]Baseline"; ContainsLine = "-a always,exit -F path=/bin/mount -F perm=x -F auid>=1000 -F auid!=-1 -k privileged-mount"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -562,7 +552,7 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource35ref { ResourceID = "[nxFileLine][V-219241][medium][SRG-OS-000064-GPOS-00033]::[Ubuntu]Baseline"; ContainsLine = "-a always,exit -F path=/bin/umount -F perm=x -F auid>=1000 -F auid!=-1 -k privileged-umount"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -573,7 +563,7 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource36ref { ResourceID = "[nxFileLine][V-219242][medium][SRG-OS-000064-GPOS-00033]::[Ubuntu]Baseline"; ContainsLine = "-a always,exit -F path=/usr/bin/ssh-agent -F perm=x -F auid>=1000 -F auid!=-1 -k privileged-ssh"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -584,7 +574,7 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource37ref { ResourceID = "[nxFileLine][V-219243][medium][SRG-OS-000064-GPOS-00033]::[Ubuntu]Baseline"; ContainsLine = "-a always,exit -F path=/usr/lib/openssh/ssh-keysign -F perm=x -F auid>=1000 -F auid!=-1 -k privileged-ssh"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -594,1372 +584,679 @@ ResourceID = "[nxFileLine][V-219243][medium][SRG-OS-000064-GPOS-00033]::[Ubuntu] instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource38ref { ResourceID = "[nxFileLine][V-219244.a][medium][SRG-OS-000064-GPOS-00033]::[Ubuntu]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S setxattr -F auid>=1000 -F auid!=-1 -k perm_mod"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + ContainsLine = "-a always,exit -F arch=b32 -S setxattr,fsetxattr,lsetxattr,removexattr,fremovexattr,lremovexattr -F auid>=1000 -F auid!=-1 -k perm_mod"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*setxattr\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*-1\\s*-k\\s*perm_mod"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*setxattr,fsetxattr,lsetxattr,removexattr,fremovexattr,lremovexattr\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*-1\\s*-k\\s*perm_mod"; ConfigurationName = "LinuxBaseLine"; }; instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource39ref { ResourceID = "[nxFileLine][V-219244.b][medium][SRG-OS-000064-GPOS-00033]::[Ubuntu]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S setxattr -F auid=0 -k perm_mod"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + ContainsLine = "-a always,exit -F arch=b32 -S setxattr,fsetxattr,lsetxattr,removexattr,fremovexattr,lremovexattr -F auid=0 -k perm_mod"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*setxattr\\s*-F\\s*auid\\s*=\\s*0\\s*-k\\s*perm_mod"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*setxattr,fsetxattr,lsetxattr,removexattr,fremovexattr,lremovexattr\\s*-F\\s*auid\\s*=\\s*0\\s*-k\\s*perm_mod"; ConfigurationName = "LinuxBaseLine"; }; instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource40ref { ResourceID = "[nxFileLine][V-219244.c][medium][SRG-OS-000064-GPOS-00033]::[Ubuntu]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S setxattr -F auid>=1000 -F auid!=-1 -k perm_mod"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + ContainsLine = "-a always,exit -F arch=b64 -S setxattr,fsetxattr,lsetxattr,removexattr,fremovexattr,lremovexattr -F auid>=1000 -F auid!=-1 -k perm_mod"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*setxattr\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*-1\\s*-k\\s*perm_mod"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*setxattr,fsetxattr,lsetxattr,removexattr,fremovexattr,lremovexattr\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*-1\\s*-k\\s*perm_mod"; ConfigurationName = "LinuxBaseLine"; }; instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource41ref { ResourceID = "[nxFileLine][V-219244.d][medium][SRG-OS-000064-GPOS-00033]::[Ubuntu]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S setxattr -F auid=0 -k perm_mod"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + ContainsLine = "-a always,exit -F arch=b64 -S setxattr,fsetxattr,lsetxattr,removexattr,fremovexattr,lremovexattr -F auid=0 -k perm_mod"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*setxattr\\s*-F\\s*auid\\s*=\\s*0\\s*-k\\s*perm_mod"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*setxattr,fsetxattr,lsetxattr,removexattr,fremovexattr,lremovexattr\\s*-F\\s*auid\\s*=\\s*0\\s*-k\\s*perm_mod"; ConfigurationName = "LinuxBaseLine"; }; instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource42ref { -ResourceID = "[nxFileLine][V-219245.a][medium][SRG-OS-000064-GPOS-00033]::[Ubuntu]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S lsetxattr -F auid>=1000 -F auid!=-1 -k perm_mod"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; +ResourceID = "[nxFileLine][V-219250.a][medium][SRG-OS-000064-GPOS-00033]::[Ubuntu]Baseline"; + ContainsLine = "-a always,exit -F arch=b32 -S chown,fchown,fchownat,lchown -F auid>=1000 -F auid!=-1 -k perm_chng"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*lsetxattr\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*-1\\s*-k\\s*perm_mod"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*chown,fchown,fchownat,lchown\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*-1\\s*-k\\s*perm_chng"; ConfigurationName = "LinuxBaseLine"; }; instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource43ref { -ResourceID = "[nxFileLine][V-219245.b][medium][SRG-OS-000064-GPOS-00033]::[Ubuntu]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S lsetxattr -F auid=0 -k perm_mod"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; +ResourceID = "[nxFileLine][V-219250.b][medium][SRG-OS-000064-GPOS-00033]::[Ubuntu]Baseline"; + ContainsLine = "-a always,exit -F arch=b64 -S chown,fchown,fchownat,lchown -F auid>=1000 -F auid!=-1 -k perm_chng"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*lsetxattr\\s*-F\\s*auid\\s*=\\s*0\\s*-k\\s*perm_mod"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*chown,fchown,fchownat,lchown\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*-1\\s*-k\\s*perm_chng"; ConfigurationName = "LinuxBaseLine"; }; instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource44ref { -ResourceID = "[nxFileLine][V-219245.c][medium][SRG-OS-000064-GPOS-00033]::[Ubuntu]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S lsetxattr -F auid>=1000 -F auid!=-1 -k perm_mod"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; +ResourceID = "[nxFileLine][V-219254.a][medium][SRG-OS-000064-GPOS-00033]::[Ubuntu]Baseline"; + ContainsLine = "-a always,exit -F arch=b32 -S chmod,fchmod,fchmodat -F auid>=1000 -F auid!=-1 -k perm_chng"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*lsetxattr\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*-1\\s*-k\\s*perm_mod"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*chmod,fchmod,fchmodat\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*-1\\s*-k\\s*perm_chng"; ConfigurationName = "LinuxBaseLine"; }; instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource45ref { -ResourceID = "[nxFileLine][V-219245.d][medium][SRG-OS-000064-GPOS-00033]::[Ubuntu]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S lsetxattr -F auid=0 -k perm_mod"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; +ResourceID = "[nxFileLine][V-219254.b][medium][SRG-OS-000064-GPOS-00033]::[Ubuntu]Baseline"; + ContainsLine = "-a always,exit -F arch=b64 -S chmod,fchmod,fchmodat -F auid>=1000 -F auid!=-1 -k perm_chng"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*lsetxattr\\s*-F\\s*auid\\s*=\\s*0\\s*-k\\s*perm_mod"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*chmod,fchmod,fchmodat\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*-1\\s*-k\\s*perm_chng"; ConfigurationName = "LinuxBaseLine"; }; instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource46ref { -ResourceID = "[nxFileLine][V-219246.a][medium][SRG-OS-000064-GPOS-00033]::[Ubuntu]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S fsetxattr -F auid>=1000 -F auid!=-1 -k perm_mod"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; +ResourceID = "[nxFileLine][V-219257.a][medium][SRG-OS-000064-GPOS-00033]::[Ubuntu]Baseline"; + ContainsLine = "-a always,exit -F arch=b32 -S creat,open,openat,open_by_handle_at,truncate,ftruncate -F exit=-EPERM -F auid>=1000 -F auid!=-1 -k perm_access"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*fsetxattr\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*-1\\s*-k\\s*perm_mod"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*creat,open,openat,open_by_handle_at,truncate,ftruncate\\s*-F\\s*exit\\s*=\\s*-EPERM\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*-1\\s*-k\\s*perm_access"; ConfigurationName = "LinuxBaseLine"; }; instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource47ref { -ResourceID = "[nxFileLine][V-219246.b][medium][SRG-OS-000064-GPOS-00033]::[Ubuntu]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S fsetxattr -F auid=0 -k perm_mod"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; +ResourceID = "[nxFileLine][V-219257.b][medium][SRG-OS-000064-GPOS-00033]::[Ubuntu]Baseline"; + ContainsLine = "-a always,exit -F arch=b32 -S creat,open,openat,open_by_handle_at,truncate,ftruncate -F exit=-EACCES -F auid>=1000 -F auid!=-1 -k perm_access"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*fsetxattr\\s*-F\\s*auid\\s*=\\s*0\\s*-k\\s*perm_mod"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*creat,open,openat,open_by_handle_at,truncate,ftruncate\\s*-F\\s*exit\\s*=\\s*-EACCES\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*-1\\s*-k\\s*perm_access"; ConfigurationName = "LinuxBaseLine"; }; instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource48ref { -ResourceID = "[nxFileLine][V-219246.c][medium][SRG-OS-000064-GPOS-00033]::[Ubuntu]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S fsetxattr -F auid>=1000 -F auid!=-1 -k perm_mod"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; +ResourceID = "[nxFileLine][V-219257.c][medium][SRG-OS-000064-GPOS-00033]::[Ubuntu]Baseline"; + ContainsLine = "-a always,exit -F arch=b64 -S creat,open,openat,open_by_handle_at,truncate,ftruncate -F exit=-EPERM -F auid>=1000 -F auid!=-1 -k perm_access"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*fsetxattr\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*-1\\s*-k\\s*perm_mod"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*creat,open,openat,open_by_handle_at,truncate,ftruncate\\s*-F\\s*exit\\s*=\\s*-EPERM\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*-1\\s*-k\\s*perm_access"; ConfigurationName = "LinuxBaseLine"; }; instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource49ref { -ResourceID = "[nxFileLine][V-219246.d][medium][SRG-OS-000064-GPOS-00033]::[Ubuntu]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S fsetxattr -F auid=0 -k perm_mod"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; +ResourceID = "[nxFileLine][V-219257.d][medium][SRG-OS-000064-GPOS-00033]::[Ubuntu]Baseline"; + ContainsLine = "-a always,exit -F arch=b64 -S creat,open,openat,open_by_handle_at,truncate,ftruncate -F exit=-EACCES -F auid>=1000 -F auid!=-1 -k perm_access"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*fsetxattr\\s*-F\\s*auid\\s*=\\s*0\\s*-k\\s*perm_mod"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*creat,open,openat,open_by_handle_at,truncate,ftruncate\\s*-F\\s*exit\\s*=\\s*-EACCES\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*-1\\s*-k\\s*perm_access"; ConfigurationName = "LinuxBaseLine"; }; instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource50ref { -ResourceID = "[nxFileLine][V-219247.a][medium][SRG-OS-000064-GPOS-00033]::[Ubuntu]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S removexattr -F auid>=1000 -F auid!=-1 -k perm_mod"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*removexattr\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*-1\\s*-k\\s*perm_mod"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource51ref -{ -ResourceID = "[nxFileLine][V-219247.b][medium][SRG-OS-000064-GPOS-00033]::[Ubuntu]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S removexattr -F auid=0 -k perm_mod"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*removexattr\\s*-F\\s*auid\\s*=\\s*0\\s*-k\\s*perm_mod"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource52ref -{ -ResourceID = "[nxFileLine][V-219247.c][medium][SRG-OS-000064-GPOS-00033]::[Ubuntu]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S removexattr -F auid>=1000 -F auid!=-1 -k perm_mod"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*removexattr\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*-1\\s*-k\\s*perm_mod"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource53ref -{ -ResourceID = "[nxFileLine][V-219247.d][medium][SRG-OS-000064-GPOS-00033]::[Ubuntu]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S removexattr -F auid=0 -k perm_mod"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*removexattr\\s*-F\\s*auid\\s*=\\s*0\\s*-k\\s*perm_mod"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource54ref -{ -ResourceID = "[nxFileLine][V-219248.a][medium][SRG-OS-000064-GPOS-00033]::[Ubuntu]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S lremovexattr -F auid>=1000 -F auid!=-1 -k perm_mod"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*lremovexattr\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*-1\\s*-k\\s*perm_mod"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource55ref -{ -ResourceID = "[nxFileLine][V-219248.b][medium][SRG-OS-000064-GPOS-00033]::[Ubuntu]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S lremovexattr -F auid=0 -k perm_mod"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*lremovexattr\\s*-F\\s*auid\\s*=\\s*0\\s*-k\\s*perm_mod"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource56ref -{ -ResourceID = "[nxFileLine][V-219248.c][medium][SRG-OS-000064-GPOS-00033]::[Ubuntu]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S lremovexattr -F auid>=1000 -F auid!=-1 -k perm_mod"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*lremovexattr\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*-1\\s*-k\\s*perm_mod"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource57ref -{ -ResourceID = "[nxFileLine][V-219248.d][medium][SRG-OS-000064-GPOS-00033]::[Ubuntu]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S lremovexattr -F auid=0 -k perm_mod"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*lremovexattr\\s*-F\\s*auid\\s*=\\s*0\\s*-k\\s*perm_mod"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource58ref -{ -ResourceID = "[nxFileLine][V-219249.a][medium][SRG-OS-000064-GPOS-00033]::[Ubuntu]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S fremovexattr -F auid>=1000 -F auid!=-1 -k perm_mod"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*fremovexattr\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*-1\\s*-k\\s*perm_mod"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource59ref -{ -ResourceID = "[nxFileLine][V-219249.b][medium][SRG-OS-000064-GPOS-00033]::[Ubuntu]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S fremovexattr -F auid=0 -k perm_mod"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*fremovexattr\\s*-F\\s*auid\\s*=\\s*0\\s*-k\\s*perm_mod"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource60ref -{ -ResourceID = "[nxFileLine][V-219249.c][medium][SRG-OS-000064-GPOS-00033]::[Ubuntu]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S fremovexattr -F auid>=1000 -F auid!=-1 -k perm_mod"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*fremovexattr\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*-1\\s*-k\\s*perm_mod"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource61ref -{ -ResourceID = "[nxFileLine][V-219249.d][medium][SRG-OS-000064-GPOS-00033]::[Ubuntu]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S fremovexattr -F auid=0 -k perm_mod"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*fremovexattr\\s*-F\\s*auid\\s*=\\s*0\\s*-k\\s*perm_mod"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource62ref -{ -ResourceID = "[nxFileLine][V-219250.a][medium][SRG-OS-000064-GPOS-00033]::[Ubuntu]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S chown -F auid>=1000 -F auid!=-1 -k perm_chng"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*chown\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*-1\\s*-k\\s*perm_chng"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource63ref -{ -ResourceID = "[nxFileLine][V-219250.b][medium][SRG-OS-000064-GPOS-00033]::[Ubuntu]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S chown -F auid>=1000 -F auid!=-1 -k perm_chng"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*chown\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*-1\\s*-k\\s*perm_chng"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource64ref -{ -ResourceID = "[nxFileLine][V-219251.a][medium][SRG-OS-000064-GPOS-00033]::[Ubuntu]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S fchown -F auid>=1000 -F auid!=-1 -k perm_chng"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*fchown\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*-1\\s*-k\\s*perm_chng"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource65ref -{ -ResourceID = "[nxFileLine][V-219251.b][medium][SRG-OS-000064-GPOS-00033]::[Ubuntu]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S fchown -F auid>=1000 -F auid!=-1 -k perm_chng"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*fchown\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*-1\\s*-k\\s*perm_chng"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource66ref -{ -ResourceID = "[nxFileLine][V-219252.a][medium][SRG-OS-000064-GPOS-00033]::[Ubuntu]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S fchownat -F auid>=1000 -F auid!=-1 -k perm_chng"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*fchownat\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*-1\\s*-k\\s*perm_chng"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource67ref -{ -ResourceID = "[nxFileLine][V-219252.b][medium][SRG-OS-000064-GPOS-00033]::[Ubuntu]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S fchownat -F auid>=1000 -F auid!=-1 -k perm_chng"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*fchownat\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*-1\\s*-k\\s*perm_chng"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource68ref -{ -ResourceID = "[nxFileLine][V-219253.a][medium][SRG-OS-000064-GPOS-00033]::[Ubuntu]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S lchown -F auid>=1000 -F auid!=-1 -k perm_chng"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*lchown\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*-1\\s*-k\\s*perm_chng"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource69ref -{ -ResourceID = "[nxFileLine][V-219253.b][medium][SRG-OS-000064-GPOS-00033]::[Ubuntu]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S lchown -F auid>=1000 -F auid!=-1 -k perm_chng"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*lchown\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*-1\\s*-k\\s*perm_chng"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource70ref -{ -ResourceID = "[nxFileLine][V-219254.a][medium][SRG-OS-000064-GPOS-00033]::[Ubuntu]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S chmod -F auid>=1000 -F auid!=-1 -k perm_chng"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*chmod\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*-1\\s*-k\\s*perm_chng"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource71ref -{ -ResourceID = "[nxFileLine][V-219254.b][medium][SRG-OS-000064-GPOS-00033]::[Ubuntu]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S chmod -F auid>=1000 -F auid!=-1 -k perm_chng"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*chmod\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*-1\\s*-k\\s*perm_chng"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource72ref -{ -ResourceID = "[nxFileLine][V-219255.a][medium][SRG-OS-000064-GPOS-00033]::[Ubuntu]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S fchmod -F auid>=1000 -F auid!=-1 -k perm_chng"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*fchmod\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*-1\\s*-k\\s*perm_chng"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource73ref -{ -ResourceID = "[nxFileLine][V-219255.b][medium][SRG-OS-000064-GPOS-00033]::[Ubuntu]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S fchmod -F auid>=1000 -F auid!=-1 -k perm_chng"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*fchmod\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*-1\\s*-k\\s*perm_chng"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource74ref -{ -ResourceID = "[nxFileLine][V-219256.a][medium][SRG-OS-000064-GPOS-00033]::[Ubuntu]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S fchmodat -F auid>=1000 -F auid!=-1 -k perm_chng"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*fchmodat\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*-1\\s*-k\\s*perm_chng"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource75ref -{ -ResourceID = "[nxFileLine][V-219256.b][medium][SRG-OS-000064-GPOS-00033]::[Ubuntu]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S fchmodat -F auid>=1000 -F auid!=-1 -k perm_chng"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*fchmodat\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*-1\\s*-k\\s*perm_chng"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource76ref -{ -ResourceID = "[nxFileLine][V-219257.a][medium][SRG-OS-000064-GPOS-00033]::[Ubuntu]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S open -F exit=-EPERM -F auid>=1000 -F auid!=-1 -k perm_access"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*open\\s*-F\\s*exit\\s*=\\s*-EPERM\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*-1\\s*-k\\s*perm_access"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource77ref -{ -ResourceID = "[nxFileLine][V-219257.b][medium][SRG-OS-000064-GPOS-00033]::[Ubuntu]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S open -F exit=-EACCES -F auid>=1000 -F auid!=-1 -k perm_access"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*open\\s*-F\\s*exit\\s*=\\s*-EACCES\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*-1\\s*-k\\s*perm_access"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource78ref -{ -ResourceID = "[nxFileLine][V-219257.c][medium][SRG-OS-000064-GPOS-00033]::[Ubuntu]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S open -F exit=-EPERM -F auid>=1000 -F auid!=-1 -k perm_access"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*open\\s*-F\\s*exit\\s*=\\s*-EPERM\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*-1\\s*-k\\s*perm_access"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource79ref -{ -ResourceID = "[nxFileLine][V-219257.d][medium][SRG-OS-000064-GPOS-00033]::[Ubuntu]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S open -F exit=-EACCES -F auid>=1000 -F auid!=-1 -k perm_access"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*open\\s*-F\\s*exit\\s*=\\s*-EACCES\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*-1\\s*-k\\s*perm_access"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource80ref -{ -ResourceID = "[nxFileLine][V-219261.a][medium][SRG-OS-000064-GPOS-00033]::[Ubuntu]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S openat -F exit=-EPERM -F auid>=1000 -F auid!=-1 -k perm_access"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*openat\\s*-F\\s*exit\\s*=\\s*-EPERM\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*-1\\s*-k\\s*perm_access"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource81ref -{ -ResourceID = "[nxFileLine][V-219261.b][medium][SRG-OS-000064-GPOS-00033]::[Ubuntu]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S openat -F exit=-EACCES -F auid>=1000 -F auid!=-1 -k perm_access"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*openat\\s*-F\\s*exit\\s*=\\s*-EACCES\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*-1\\s*-k\\s*perm_access"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource82ref -{ -ResourceID = "[nxFileLine][V-219261.c][medium][SRG-OS-000064-GPOS-00033]::[Ubuntu]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S openat -F exit=-EPERM -F auid>=1000 -F auid!=-1 -k perm_access"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*openat\\s*-F\\s*exit\\s*=\\s*-EPERM\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*-1\\s*-k\\s*perm_access"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource83ref -{ -ResourceID = "[nxFileLine][V-219261.d][medium][SRG-OS-000064-GPOS-00033]::[Ubuntu]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S openat -F exit=-EACCES -F auid>=1000 -F auid!=-1 -k perm_access"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*openat\\s*-F\\s*exit\\s*=\\s*-EACCES\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*-1\\s*-k\\s*perm_access"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource84ref -{ -ResourceID = "[nxFileLine][V-219262.a][medium][SRG-OS-000064-GPOS-00033]::[Ubuntu]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S open_by_handle_at -F exit=-EPERM -F auid>=1000 -F auid!=-1 -k perm_access"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*open_by_handle_at\\s*-F\\s*exit\\s*=\\s*-EPERM\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*-1\\s*-k\\s*perm_access"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource85ref -{ -ResourceID = "[nxFileLine][V-219262.b][medium][SRG-OS-000064-GPOS-00033]::[Ubuntu]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S open_by_handle_at -F exit=-EACCES -F auid>=1000 -F auid!=-1 -k perm_access"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*open_by_handle_at\\s*-F\\s*exit\\s*=\\s*-EACCES\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*-1\\s*-k\\s*perm_access"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource86ref -{ -ResourceID = "[nxFileLine][V-219262.c][medium][SRG-OS-000064-GPOS-00033]::[Ubuntu]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S open_by_handle_at -F exit=-EPERM -F auid>=1000 -F auid!=-1 -k perm_access"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*open_by_handle_at\\s*-F\\s*exit\\s*=\\s*-EPERM\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*-1\\s*-k\\s*perm_access"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource87ref -{ -ResourceID = "[nxFileLine][V-219262.d][medium][SRG-OS-000064-GPOS-00033]::[Ubuntu]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S open_by_handle_at -F exit=-EACCES -F auid>=1000 -F auid!=-1 -k perm_access"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*open_by_handle_at\\s*-F\\s*exit\\s*=\\s*-EACCES\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*-1\\s*-k\\s*perm_access"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource88ref -{ ResourceID = "[nxFileLine][V-219263][medium][SRG-OS-000064-GPOS-00033]::[Ubuntu]Baseline"; ContainsLine = "-a always,exit -F path=/usr/bin/sudo -F perm=x -F auid>=1000 -F auid!=-1 -k priv_cmd"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/bin/sudo\\s*-F\\s*perm\\s*=\\s*x\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*-1\\s*-k\\s*priv_cmd"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource89ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource51ref { ResourceID = "[nxFileLine][V-219264][medium][SRG-OS-000064-GPOS-00033]::[Ubuntu]Baseline"; ContainsLine = "-a always,exit -F path=/usr/bin/sudoedit -F perm=x -F auid>=1000 -F auid!=-1 -k priv_cmd"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/bin/sudoedit\\s*-F\\s*perm\\s*=\\s*x\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*-1\\s*-k\\s*priv_cmd"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource90ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource52ref { ResourceID = "[nxFileLine][V-219265][medium][SRG-OS-000064-GPOS-00033]::[Ubuntu]Baseline"; ContainsLine = "-a always,exit -F path=/usr/bin/chsh -F perm=x -F auid>=1000 -F auid!=-1 -k priv_cmd"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/bin/chsh\\s*-F\\s*perm\\s*=\\s*x\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*-1\\s*-k\\s*priv_cmd"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource91ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource53ref { ResourceID = "[nxFileLine][V-219266][medium][SRG-OS-000064-GPOS-00033]::[Ubuntu]Baseline"; ContainsLine = "-a always,exit -F path=/usr/bin/newgrp -F perm=x -F auid>=1000 -F auid!=-1 -k priv_cmd"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/bin/newgrp\\s*-F\\s*perm\\s*=\\s*x\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*-1\\s*-k\\s*priv_cmd"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource92ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource54ref { ResourceID = "[nxFileLine][V-219267][medium][SRG-OS-000064-GPOS-00033]::[Ubuntu]Baseline"; ContainsLine = "-a always,exit -F path=/usr/bin/chcon -F perm=x -F auid>=1000 -F auid!=-1 -k perm_chng"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/bin/chcon\\s*-F\\s*perm\\s*=\\s*x\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*-1\\s*-k\\s*perm_chng"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource93ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource55ref { ResourceID = "[nxFileLine][V-219268][medium][SRG-OS-000064-GPOS-00033]::[Ubuntu]Baseline"; ContainsLine = "-a always,exit -F path=/sbin/apparmor_parser -F perm=x -F auid>=1000 -F auid!=-1 -k perm_chng"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/sbin/apparmor_parser\\s*-F\\s*perm\\s*=\\s*x\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*-1\\s*-k\\s*perm_chng"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource94ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource56ref { ResourceID = "[nxFileLine][V-219269][medium][SRG-OS-000064-GPOS-00033]::[Ubuntu]Baseline"; ContainsLine = "-a always,exit -F path=/usr/bin/setfacl -F perm=x -F auid>=1000 -F auid!=-1 -k perm_chng"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/bin/setfacl\\s*-F\\s*perm\\s*=\\s*x\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*-1\\s*-k\\s*perm_chng"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource95ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource57ref { ResourceID = "[nxFileLine][V-219270][medium][SRG-OS-000064-GPOS-00033]::[Ubuntu]Baseline"; ContainsLine = "-a always,exit -F path=/usr/bin/chacl -F perm=x -F auid>=1000 -F auid!=-1 -k perm_chng"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/bin/chacl\\s*-F\\s*perm\\s*=\\s*x\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*-1\\s*-k\\s*perm_chng"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource96ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource58ref { ResourceID = "[nxFileLine][V-219271][medium][SRG-OS-000064-GPOS-00033]::[Ubuntu]Baseline"; ContainsLine = "-a always,exit -F path=/usr/bin/passwd -F perm=x -F auid>=1000 -F auid!=-1 -k privileged-passwd"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/bin/passwd\\s*-F\\s*perm\\s*=\\s*x\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*-1\\s*-k\\s*privileged-passwd"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource97ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource59ref { ResourceID = "[nxFileLine][V-219272][medium][SRG-OS-000064-GPOS-00033]::[Ubuntu]Baseline"; ContainsLine = "-a always,exit -F path=/sbin/unix_update -F perm=x -F auid>=1000 -F auid!=-1 -k privileged-unix-update"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/sbin/unix_update\\s*-F\\s*perm\\s*=\\s*x\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*-1\\s*-k\\s*privileged-unix-update"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource98ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource60ref { ResourceID = "[nxFileLine][V-219273][medium][SRG-OS-000064-GPOS-00033]::[Ubuntu]Baseline"; ContainsLine = "-a always,exit -F path=/usr/bin/gpasswd -F perm=x -F auid>=1000 -F auid!=-1 -k privileged-gpasswd"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/bin/gpasswd\\s*-F\\s*perm\\s*=\\s*x\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*-1\\s*-k\\s*privileged-gpasswd"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource99ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource61ref { ResourceID = "[nxFileLine][V-219274][medium][SRG-OS-000064-GPOS-00033]::[Ubuntu]Baseline"; ContainsLine = "-a always,exit -F path=/usr/bin/chage -F perm=x -F auid>=1000 -F auid!=-1 -k privileged-chage"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/bin/chage\\s*-F\\s*perm\\s*=\\s*x\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*-1\\s*-k\\s*privileged-chage"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource100ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource62ref { ResourceID = "[nxFileLine][V-219275][medium][SRG-OS-000064-GPOS-00033]::[Ubuntu]Baseline"; ContainsLine = "-a always,exit -F path=/usr/sbin/usermod -F perm=x -F auid>=1000 -F auid!=-1 -k privileged-usermod"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/sbin/usermod\\s*-F\\s*perm\\s*=\\s*x\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*-1\\s*-k\\s*privileged-usermod"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource101ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource63ref { ResourceID = "[nxFileLine][V-219276][medium][SRG-OS-000064-GPOS-00033]::[Ubuntu]Baseline"; ContainsLine = "-a always,exit -F path=/usr/bin/crontab -F perm=x -F auid>=1000 -F auid!=-1 -k privileged-crontab"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/bin/crontab\\s*-F\\s*perm\\s*=\\s*x\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*-1\\s*-k\\s*privileged-crontab"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource102ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource64ref { ResourceID = "[nxFileLine][V-219277][medium][SRG-OS-000064-GPOS-00033]::[Ubuntu]Baseline"; ContainsLine = "-a always,exit -F path=/usr/sbin/pam_timestamp_check -F perm=x -F auid>=1000 -F auid!=-1 -k privileged-pam_timestamp_check"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/sbin/pam_timestamp_check\\s*-F\\s*perm\\s*=\\s*x\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*-1\\s*-k\\s*privileged-pam_timestamp_check"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource103ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource65ref { ResourceID = "[nxFileLine][V-219279.a][medium][SRG-OS-000064-GPOS-00033]::[Ubuntu]Baseline"; ContainsLine = "-a always,exit -F arch=b32 -S finit_module -F auid>=1000 -F auid!=-1 -k module_chng"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*finit_module\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*-1\\s*-k\\s*module_chng"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource104ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource66ref { ResourceID = "[nxFileLine][V-219279.b][medium][SRG-OS-000064-GPOS-00033]::[Ubuntu]Baseline"; ContainsLine = "-a always,exit -F arch=b64 -S finit_module -F auid>=1000 -F auid!=-1 -k module_chng"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*finit_module\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*-1\\s*-k\\s*module_chng"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource105ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource67ref { ResourceID = "[nxFileLine][V-219281.a][medium][SRG-OS-000326-GPOS-00126]::[Ubuntu]Baseline"; ContainsLine = "-a always,exit -F arch=b64 -S execve -C uid!=euid -F euid=0 -F key=execpriv"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*execve\\s*-C\\s*uid!\\s*=\\s*euid\\s*-F\\s*euid\\s*=\\s*0\\s*-F\\s*key\\s*=\\s*execpriv"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource106ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource68ref { ResourceID = "[nxFileLine][V-219281.b][medium][SRG-OS-000326-GPOS-00126]::[Ubuntu]Baseline"; ContainsLine = "-a always,exit -F arch=b64 -S execve -C gid!=egid -F egid=0 -F key=execpriv"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*execve\\s*-C\\s*gid!\\s*=\\s*egid\\s*-F\\s*egid\\s*=\\s*0\\s*-F\\s*key\\s*=\\s*execpriv"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource107ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource69ref { ResourceID = "[nxFileLine][V-219281.c][medium][SRG-OS-000326-GPOS-00126]::[Ubuntu]Baseline"; ContainsLine = "-a always,exit -F arch=b32 -S execve -C uid!=euid -F euid=0 -F key=execpriv"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*execve\\s*-C\\s*uid!\\s*=\\s*euid\\s*-F\\s*euid\\s*=\\s*0\\s*-F\\s*key\\s*=\\s*execpriv"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource108ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource70ref { ResourceID = "[nxFileLine][V-219281.d][medium][SRG-OS-000326-GPOS-00126]::[Ubuntu]Baseline"; ContainsLine = "-a always,exit -F arch=b32 -S execve -C gid!=egid -F egid=0 -F key=execpriv"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*execve\\s*-C\\s*gid!\\s*=\\s*egid\\s*-F\\s*egid\\s*=\\s*0\\s*-F\\s*key\\s*=\\s*execpriv"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource109ref -{ -ResourceID = "[nxFileLine][V-219284.a][medium][SRG-OS-000462-GPOS-00206]::[Ubuntu]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S fsetxattr -F auid>=1000 -F auid!=-1 -k perm_chng"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*fsetxattr\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*-1\\s*-k\\s*perm_chng"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource110ref -{ -ResourceID = "[nxFileLine][V-219284.b][medium][SRG-OS-000462-GPOS-00206]::[Ubuntu]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S fsetxattr -F auid>=1000 -F auid!=-1 -k perm_chng"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*fsetxattr\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*-1\\s*-k\\s*perm_chng"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource111ref -{ -ResourceID = "[nxFileLine][V-219285.a][medium][SRG-OS-000462-GPOS-00206]::[Ubuntu]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S removexattr -F auid>=1000 -F auid!=-1 -k perm_chng"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*removexattr\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*-1\\s*-k\\s*perm_chng"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource112ref -{ -ResourceID = "[nxFileLine][V-219285.b][medium][SRG-OS-000462-GPOS-00206]::[Ubuntu]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S removexattr -F auid>=1000 -F auid!=-1 -k perm_chng"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*removexattr\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*-1\\s*-k\\s*perm_chng"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource113ref -{ -ResourceID = "[nxFileLine][V-219286.a][medium][SRG-OS-000462-GPOS-00206]::[Ubuntu]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S lremovexattr -F auid>=1000 -F auid!=-1 -k perm_chng"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*lremovexattr\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*-1\\s*-k\\s*perm_chng"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource114ref -{ -ResourceID = "[nxFileLine][V-219286.b][medium][SRG-OS-000462-GPOS-00206]::[Ubuntu]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S lremovexattr -F auid>=1000 -F auid!=-1 -k perm_chng"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*lremovexattr\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*-1\\s*-k\\s*perm_chng"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource115ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource71ref { ResourceID = "[nxFileLine][V-219287.a][medium][SRG-OS-000468-GPOS-00212]::[Ubuntu]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S unlink -F auid>=1000 -F auid!=-1 -k delete"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + ContainsLine = "-a always,exit -F arch=b64 -S unlink,unlinkat,rename,renameat,rmdir -F auid>=1000 -F auid!=-1 -k delete"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*unlink\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*-1\\s*-k\\s*delete"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*unlink,unlinkat,rename,renameat,rmdir\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*-1\\s*-k\\s*delete"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource116ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource72ref { ResourceID = "[nxFileLine][V-219287.b][medium][SRG-OS-000468-GPOS-00212]::[Ubuntu]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S unlink -F auid>=1000 -F auid!=-1 -k delete"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + ContainsLine = "-a always,exit -F arch=b32 -S unlink,unlinkat,rename,renameat,rmdir -F auid>=1000 -F auid!=-1 -k delete"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*unlink\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*-1\\s*-k\\s*delete"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*unlink,unlinkat,rename,renameat,rmdir\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*-1\\s*-k\\s*delete"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource117ref -{ -ResourceID = "[nxFileLine][V-219288.a][medium][SRG-OS-000468-GPOS-00212]::[Ubuntu]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S unlinkat -F auid>=1000 -F auid!=-1 -k delete"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*unlinkat\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*-1\\s*-k\\s*delete"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource118ref -{ -ResourceID = "[nxFileLine][V-219288.b][medium][SRG-OS-000468-GPOS-00212]::[Ubuntu]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S unlinkat -F auid>=1000 -F auid!=-1 -k delete"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*unlinkat\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*-1\\s*-k\\s*delete"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource119ref -{ -ResourceID = "[nxFileLine][V-219289.a][medium][SRG-OS-000468-GPOS-00212]::[Ubuntu]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S rename -F auid>=1000 -F auid!=-1 -k delete"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*rename\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*-1\\s*-k\\s*delete"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource120ref -{ -ResourceID = "[nxFileLine][V-219289.b][medium][SRG-OS-000468-GPOS-00212]::[Ubuntu]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S rename -F auid>=1000 -F auid!=-1 -k delete"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*rename\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*-1\\s*-k\\s*delete"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource121ref -{ -ResourceID = "[nxFileLine][V-219290.a][medium][SRG-OS-000468-GPOS-00212]::[Ubuntu]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S renameat -F auid>=1000 -F auid!=-1 -k delete"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*renameat\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*-1\\s*-k\\s*delete"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource122ref -{ -ResourceID = "[nxFileLine][V-219290.b][medium][SRG-OS-000468-GPOS-00212]::[Ubuntu]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S renameat -F auid>=1000 -F auid!=-1 -k delete"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*renameat\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*-1\\s*-k\\s*delete"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource123ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource73ref { ResourceID = "[nxFileLine][V-219291.a][medium][SRG-OS-000471-GPOS-00216]::[Ubuntu]Baseline"; ContainsLine = "-a always,exit -F arch=b32 -S init_module -S finit_module -k modules"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*init_module\\s*-S\\s*finit_module\\s*-k\\s*modules"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource124ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource74ref { ResourceID = "[nxFileLine][V-219291.b][medium][SRG-OS-000471-GPOS-00216]::[Ubuntu]Baseline"; ContainsLine = "-a always,exit -F arch=b64 -S init_module -S finit_module -k modules"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*init_module\\s*-S\\s*finit_module\\s*-k\\s*modules"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource125ref -{ -ResourceID = "[nxFileLine][V-219293.a][medium][SRG-OS-000474-GPOS-00219]::[Ubuntu]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S truncate -F exit=-EPERM -F auid>=1000 -F auid!=-1 -k perm_access"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*truncate\\s*-F\\s*exit\\s*=\\s*-EPERM\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*-1\\s*-k\\s*perm_access"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource126ref -{ -ResourceID = "[nxFileLine][V-219293.b][medium][SRG-OS-000474-GPOS-00219]::[Ubuntu]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S truncate -F exit=-EACCES -F auid>=1000 -F auid!=-1 -k perm_access"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*truncate\\s*-F\\s*exit\\s*=\\s*-EACCES\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*-1\\s*-k\\s*perm_access"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource127ref -{ -ResourceID = "[nxFileLine][V-219293.c][medium][SRG-OS-000474-GPOS-00219]::[Ubuntu]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S truncate -F exit=-EPERM -F auid>=1000 -F auid!=-1 -k perm_access"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*truncate\\s*-F\\s*exit\\s*=\\s*-EPERM\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*-1\\s*-k\\s*perm_access"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource128ref -{ -ResourceID = "[nxFileLine][V-219293.d][medium][SRG-OS-000474-GPOS-00219]::[Ubuntu]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S truncate -F exit=-EACCES -F auid>=1000 -F auid!=-1 -k perm_access"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*truncate\\s*-F\\s*exit\\s*=\\s*-EACCES\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*-1\\s*-k\\s*perm_access"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource129ref -{ -ResourceID = "[nxFileLine][V-219294.a][medium][SRG-OS-000474-GPOS-00219]::[Ubuntu]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S ftruncate -F exit=-EPERM -F auid>=1000 -F auid!=-1 -k perm_access"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*ftruncate\\s*-F\\s*exit\\s*=\\s*-EPERM\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*-1\\s*-k\\s*perm_access"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource130ref -{ -ResourceID = "[nxFileLine][V-219294.b][medium][SRG-OS-000474-GPOS-00219]::[Ubuntu]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S ftruncate -F exit=-EACCES -F auid>=1000 -F auid!=-1 -k perm_access"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*ftruncate\\s*-F\\s*exit\\s*=\\s*-EACCES\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*-1\\s*-k\\s*perm_access"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource131ref -{ -ResourceID = "[nxFileLine][V-219294.c][medium][SRG-OS-000474-GPOS-00219]::[Ubuntu]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S ftruncate -F exit=-EPERM -F auid>=1000 -F auid!=-1 -k perm_access"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*ftruncate\\s*-F\\s*exit\\s*=\\s*-EPERM\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*-1\\s*-k\\s*perm_access"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource132ref -{ -ResourceID = "[nxFileLine][V-219294.d][medium][SRG-OS-000474-GPOS-00219]::[Ubuntu]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S ftruncate -F exit=-EACCES -F auid>=1000 -F auid!=-1 -k perm_access"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*ftruncate\\s*-F\\s*exit\\s*=\\s*-EACCES\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*-1\\s*-k\\s*perm_access"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource133ref -{ -ResourceID = "[nxFileLine][V-219295.a][medium][SRG-OS-000474-GPOS-00219]::[Ubuntu]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S creat -F exit=-EPERM -F auid>=1000 -F auid!=-1 -k perm_access"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*creat\\s*-F\\s*exit\\s*=\\s*-EPERM\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*-1\\s*-k\\s*perm_access"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource134ref -{ -ResourceID = "[nxFileLine][V-219295.b][medium][SRG-OS-000474-GPOS-00219]::[Ubuntu]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S creat -F exit=-EACCES -F auid>=1000 -F auid!=-1 -k perm_access"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*creat\\s*-F\\s*exit\\s*=\\s*-EACCES\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*-1\\s*-k\\s*perm_access"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource135ref -{ -ResourceID = "[nxFileLine][V-219295.c][medium][SRG-OS-000474-GPOS-00219]::[Ubuntu]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S creat -F exit=-EPERM -F auid>=1000 -F auid!=-1 -k perm_access"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*creat\\s*-F\\s*exit\\s*=\\s*-EPERM\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*-1\\s*-k\\s*perm_access"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource136ref -{ -ResourceID = "[nxFileLine][V-219295.d][medium][SRG-OS-000474-GPOS-00219]::[Ubuntu]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S creat -F exit=-EACCES -F auid>=1000 -F auid!=-1 -k perm_access"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*creat\\s*-F\\s*exit\\s*=\\s*-EACCES\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*-1\\s*-k\\s*perm_access"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource137ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource75ref { ResourceID = "[nxFileLine][V-219296.a][medium][SRG-OS-000477-GPOS-00222]::[Ubuntu]Baseline"; ContainsLine = "-a always,exit -F arch=b64 -S init_module -S finit_module -F key=modules"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*init_module\\s*-S\\s*finit_module\\s*-F\\s*key\\s*=\\s*modules"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource138ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource76ref { ResourceID = "[nxFileLine][V-219296.b][medium][SRG-OS-000477-GPOS-00222]::[Ubuntu]Baseline"; ContainsLine = "-a always,exit -F arch=b32 -S init_module -S finit_module -F key=modules"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*init_module\\s*-S\\s*finit_module\\s*-F\\s*key\\s*=\\s*modules"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource139ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource77ref { ResourceID = "[nxFileLine][V-219297.a][medium][SRG-OS-000477-GPOS-00222]::[Ubuntu]Baseline"; ContainsLine = "-a always,exit -F arch=b64 -S delete_module -F key=modules"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*delete_module\\s*-F\\s*key\\s*=\\s*modules"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource140ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource78ref { ResourceID = "[nxFileLine][V-219297.b][medium][SRG-OS-000477-GPOS-00222]::[Ubuntu]Baseline"; ContainsLine = "-a always,exit -F arch=b32 -S delete_module -F key=modules"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*delete_module\\s*-F\\s*key\\s*=\\s*modules"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource141ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource79ref { ResourceID = "[nxFileLine][V-219298][medium][SRG-OS-000477-GPOS-00222]::[Ubuntu]Baseline"; ContainsLine = "-w /sbin/modprobe -p x -k modules"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "#\\s*-w\\s*/sbin/modprobe\\s*-p\\s*x\\s*-k\\s*modules"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource142ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource80ref { ResourceID = "[nxFileLine][V-219299][medium][SRG-OS-000477-GPOS-00222]::[Ubuntu]Baseline"; ContainsLine = "-w /bin/kmod -p x -k module"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "#\\s*-w\\s*/bin/kmod\\s*-p\\s*x\\s*-k\\s*module"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource143ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource81ref { ResourceID = "[nxFileLine][V-219300][medium][SRG-OS-000477-GPOS-00222]::[Ubuntu]Baseline"; ContainsLine = "-w /sbin/fdisk -p x -k fdisk"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "#\\s*-w\\s*/sbin/fdisk\\s*-p\\s*x\\s*-k\\s*fdisk"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource144ref -{ -ResourceID = "[nxFileLine][V-219301][low][SRG-OS-000027-GPOS-00008]::[Ubuntu]Baseline"; - ContainsLine = "* hard maxlogins 10"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/security/limits.conf"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "^\\s*\\*\\s*hard\\s*maxlogins\\s*([1][1-9]|[2-9]\\d+|[1-9][0-9]\\d+)$|^#\\s*\\*\\s*hard\\s*maxlogins.*"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource145ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource82ref { ResourceID = "[nxFileLine][V-219303.b][medium][SRG-OS-000029-GPOS-00010]::[Ubuntu]Baseline"; ContainsLine = "TMOUT=900"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/profile.d/autologout.sh"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "^\\s*TMOUT\\s*=\\s*[0-8]?[0-9]?[0-9]?$|^#\\s*TMOUT.*"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource146ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource83ref { ResourceID = "[nxFileLine][V-219303.c][medium][SRG-OS-000029-GPOS-00010]::[Ubuntu]Baseline"; ContainsLine = "readonly TMOUT"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/profile.d/autologout.sh"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "^\\s*readonly\\s+(?!TMOUT\\b).*$|^\\s*#\\s*readonly.*$"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource147ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource84ref { ResourceID = "[nxFileLine][V-219303.d][medium][SRG-OS-000029-GPOS-00010]::[Ubuntu]Baseline"; ContainsLine = "export TMOUT"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/profile.d/autologout.sh"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "^\\s*export\\s+(?!TMOUT\\b).*$|^\\s*#\\s*export.*$"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource148ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource85ref { ResourceID = "[nxFileLine][V-219306.a][medium][SRG-OS-000032-GPOS-00013]::[Ubuntu]Baseline"; ContainsLine = "auth.*,authpriv.* /var/log/secure"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/rsyslog.d/50-default.conf"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "#\\s*auth\\.\\*,\\s*authpriv\\.\\*.*"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource149ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource86ref { ResourceID = "[nxFileLine][V-219306.b][medium][SRG-OS-000032-GPOS-00013]::[Ubuntu]Baseline"; ContainsLine = "daemon.notice /var/log/messages"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/rsyslog.d/50-default.conf"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "#\\s*daemon.notice.*"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource150ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource87ref { ResourceID = "[nxFileLine][V-219307][medium][SRG-OS-000033-GPOS-00014]::[Ubuntu]Baseline"; ContainsLine = "Ciphers aes256-ctr,aes192-ctr,aes128-ctr"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/ssh/sshd_config"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "^#\\s*Ciphers.*|^\\s*Ciphers\\s*aes128-ctr.*|^\\s*Ciphers\\s*aes192-ctr.*"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource151ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource88ref { ResourceID = "[nxFileLine][V-219308][high][SRG-OS-000112-GPOS-00057]::[Ubuntu]Baseline"; ContainsLine = "Protocol 2"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/ssh/sshd_config"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "^#\\s*Protocol.*$|^Protocol\\s*(?!2\\b)\\w*$"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource152ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource89ref { ResourceID = "[nxFileLine][V-219309][medium][SRG-OS-000125-GPOS-00065]::[Ubuntu]Baseline"; ContainsLine = "UsePAM yes"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/ssh/sshd_config"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "#\\s*UsePAM\\s*yes"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource153ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource90ref { ResourceID = "[nxFileLine][V-219310][medium][SRG-OS-000126-GPOS-00066]::[Ubuntu]Baseline"; ContainsLine = "ClientAliveCountMax 1"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/ssh/sshd_config"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "^#\\s*ClientAliveCountMax.*$|^ClientAliveCountMax\\s*(?!1\\b)\\w*$"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource154ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource91ref { ResourceID = "[nxFileLine][V-219311][medium][SRG-OS-000163-GPOS-00072]::[Ubuntu]Baseline"; ContainsLine = "ClientAliveInterval 600"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/ssh/sshd_config"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "^\\s*ClientAliveInterval\\s*[0-5]?[0-9]?[0-9]?\\s*$|^#\\s*ClientAliveInterval.*|^\\s*ClientAliveInterval\\s*$"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource155ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource92ref { ResourceID = "[nxFileLine][V-219312][medium][SRG-OS-000250-GPOS-00093]::[Ubuntu]Baseline"; ContainsLine = "MACs hmac-sha2-512,hmac-sha2-256"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/ssh/sshd_config"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "#\\s*MACs.*|\\s*MACs\\s*hmac-(?!sha2-512).*"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource156ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource93ref { ResourceID = "[nxFileLine][V-219314.a][high][SRG-OS-000480-GPOS-00229]::[Ubuntu]Baseline"; ContainsLine = "PermitEmptyPasswords no"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/ssh/sshd_config"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "^#\\s*PermitEmptyPasswords.*$|^PermitEmptyPasswords\\s*(?!no\\b)\\w*$"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource157ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource94ref { ResourceID = "[nxFileLine][V-219314.b][high][SRG-OS-000480-GPOS-00229]::[Ubuntu]Baseline"; ContainsLine = "PermitUserEnvironment no"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/ssh/sshd_config"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "^#\\s*PermitUserEnvironment.*$|^PermitUserEnvironment\\s*(?!no\\b)\\w*$"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource158ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource95ref { ResourceID = "[nxFileLine][V-219328][medium][SRG-OS-000480-GPOS-00228]::[Ubuntu]Baseline"; ContainsLine = "UMASK 077"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/login.defs"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "^\\s*UMASK(?!\\s077\\b)\\s*\\d*\\s*$|^#\\s*UMASK.*"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource159ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource96ref { ResourceID = "[nxFileLine][V-219339.b][medium][SRG-OS-000378-GPOS-00163]::[Ubuntu]Baseline"; ContainsLine = "install usb-storage /bin/true"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/modprobe.d/DISASTIG.conf"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "#\\s*install\\s*usb-storage\\s*/bin/true"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource160ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource97ref { ResourceID = "[nxFileLine][V-219339.c][medium][SRG-OS-000378-GPOS-00163]::[Ubuntu]Baseline"; ContainsLine = "blacklist usb-storage"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/modprobe.d/DISASTIG.conf"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "#\\s*blacklist\\s*usb-storage"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource161ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource98ref { ResourceID = "[nxFileLine][V-233779][medium][SRG-OS-000480-GPOS-00227]::[Ubuntu]Baseline"; ContainsLine = "X11Forwarding no"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/ssh/sshd_config"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "^#\\s*X11Forwarding.*$|^X11Forwarding\\s*(?!no\\b)\\w*$"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource162ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource99ref { ResourceID = "[nxFileLine][V-233780][medium][SRG-OS-000480-GPOS-00227]::[Ubuntu]Baseline"; ContainsLine = "X11UseLocalhost yes"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/ssh/sshd_config"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -1972,7 +1269,7 @@ ResourceID = "[nxService][V-219160.b][medium][SRG-OS-000269-GPOS-00103]::[Ubuntu Controller = "systemd"; State = "Running"; Enabled = True; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxService.ps1::22::9::nxService"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxService.ps1::22::9::nxService"; Name = "rsyslog"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -1984,7 +1281,7 @@ ResourceID = "[nxService][V-219225.b][medium][SRG-OS-000038-GPOS-00016]::[Ubuntu Controller = "systemd"; State = "Running"; Enabled = True; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxService.ps1::22::9::nxService"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxService.ps1::22::9::nxService"; Name = "auditd"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -1996,7 +1293,7 @@ ResourceID = "[nxService][V-219313.b][high][SRG-OS-000423-GPOS-00187]::[Ubuntu]B Controller = "systemd"; State = "Running"; Enabled = True; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxService.ps1::22::9::nxService"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxService.ps1::22::9::nxService"; Name = "sshd"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -2008,7 +1305,7 @@ ResourceID = "[nxService][V-219322.b][low][SRG-OS-000312-GPOS-00122]::[Ubuntu]Ba Controller = "systemd"; State = "Running"; Enabled = True; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxService.ps1::22::9::nxService"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxService.ps1::22::9::nxService"; Name = "apparmor"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -2019,7 +1316,7 @@ instance of MSFT_nxServiceResource as $MSFT_nxServiceResource5ref ResourceID = "[nxService][V-219335][medium][SRG-OS-000184-GPOS-00078]::[Ubuntu]Baseline"; Controller = "systemd"; Enabled = False; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxService.ps1::13::9::nxService"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxService.ps1::13::9::nxService"; Name = "kdump"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -2031,7 +1328,7 @@ ResourceID = "[nxService][V-219337][medium][SRG-OS-000297-GPOS-00115]::[Ubuntu]B Controller = "systemd"; State = "Running"; Enabled = True; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxService.ps1::22::9::nxService"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxService.ps1::22::9::nxService"; Name = "ufw"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -2042,7 +1339,7 @@ instance of MSFT_nxScriptResource as $MSFT_nxScriptResource1ref ResourceID = "[nxScript][V-219152.b][low][[Skip] SRG-OS-000343-GPOS-00134]::[Ubuntu]Baseline"; GetScript = "#!/bin/bash\necho [V-219152.b][low][[Skip] SRG-OS-000343-GPOS-00134]"; TestScript = "#!/bin/bash\nexit 0"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxScript.skip.ps1::10::5::nxScript"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxScript.skip.ps1::10::5::nxScript"; SetScript = "#!/bin/bash"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -2053,7 +1350,7 @@ instance of MSFT_nxScriptResource as $MSFT_nxScriptResource2ref ResourceID = "[nxScript][V-219153.c][low][[Skip] SRG-OS-000479-GPOS-00224]::[Ubuntu]Baseline"; GetScript = "#!/bin/bash\necho [V-219153.c][low][[Skip] SRG-OS-000479-GPOS-00224]"; TestScript = "#!/bin/bash\nexit 0"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxScript.skip.ps1::10::5::nxScript"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxScript.skip.ps1::10::5::nxScript"; SetScript = "#!/bin/bash"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -2064,7 +1361,7 @@ instance of MSFT_nxScriptResource as $MSFT_nxScriptResource3ref ResourceID = "[nxScript][V-219167.a][medium][[Skip] SRG-OS-000024-GPOS-00007]::[Ubuntu]Baseline"; GetScript = "#!/bin/bash\necho [V-219167.a][medium][[Skip] SRG-OS-000024-GPOS-00007]"; TestScript = "#!/bin/bash\nexit 0"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxScript.skip.ps1::10::5::nxScript"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxScript.skip.ps1::10::5::nxScript"; SetScript = "#!/bin/bash"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -2075,7 +1372,7 @@ instance of MSFT_nxScriptResource as $MSFT_nxScriptResource4ref ResourceID = "[nxScript][V-219167.b][medium][[Skip] SRG-OS-000024-GPOS-00007]::[Ubuntu]Baseline"; GetScript = "#!/bin/bash\necho [V-219167.b][medium][[Skip] SRG-OS-000024-GPOS-00007]"; TestScript = "#!/bin/bash\nexit 0"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxScript.skip.ps1::10::5::nxScript"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxScript.skip.ps1::10::5::nxScript"; SetScript = "#!/bin/bash"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -2086,7 +1383,7 @@ instance of MSFT_nxScriptResource as $MSFT_nxScriptResource5ref ResourceID = "[nxScript][V-219167.c][medium][[Skip] SRG-OS-000024-GPOS-00007]::[Ubuntu]Baseline"; GetScript = "#!/bin/bash\necho [V-219167.c][medium][[Skip] SRG-OS-000024-GPOS-00007]"; TestScript = "#!/bin/bash\nexit 0"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxScript.skip.ps1::10::5::nxScript"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxScript.skip.ps1::10::5::nxScript"; SetScript = "#!/bin/bash"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -2097,7 +1394,18 @@ instance of MSFT_nxScriptResource as $MSFT_nxScriptResource6ref ResourceID = "[nxScript][V-219159][medium][[Skip] SRG-OS-000191-GPOS-00080]::[Ubuntu]Baseline"; GetScript = "#!/bin/bash\necho [V-219159][medium][[Skip] SRG-OS-000191-GPOS-00080]"; TestScript = "#!/bin/bash\nexit 0"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxScript.skip.ps1::10::5::nxScript"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxScript.skip.ps1::10::5::nxScript"; + SetScript = "#!/bin/bash"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxScriptResource as $MSFT_nxScriptResource7ref +{ +ResourceID = "[nxScript][V-219313.a][high][[Skip] SRG-OS-000423-GPOS-00187]::[Ubuntu]Baseline"; + GetScript = "#!/bin/bash\necho [V-219313.a][high][[Skip] SRG-OS-000423-GPOS-00187]"; + TestScript = "#!/bin/bash\nexit 0"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxScript.skip.ps1::10::5::nxScript"; SetScript = "#!/bin/bash"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -2114,7 +1422,7 @@ instance of OMI_ConfigurationDocument Author="Microsoft"; - GenerationDate="01/31/2022 17:13:26"; + GenerationDate="05/04/2022 09:09:33"; GenerationHost="Microsoft"; diff --git a/stig/linux/config/Ubuntu1804.mof b/stig/linux/config/Ubuntu1804.mof index 4627fb3..e6206cc 100644 --- a/stig/linux/config/Ubuntu1804.mof +++ b/stig/linux/config/Ubuntu1804.mof @@ -1,7 +1,7 @@ /* @TargetNode='Ubuntu1804' @GeneratedBy=Microsoft -@GenerationDate=01/31/2022 17:13:26 +@GenerationDate=05/04/2022 09:09:33 @GenerationHost=Microsoft */ @@ -9,7 +9,7 @@ instance of MSFT_nxPackageResource as $MSFT_nxPackageResource1ref { ResourceID = "[nxPackage][V-219153.a][low][SRG-OS-000479-GPOS-00224]::[Ubuntu]Baseline"; Ensure = "Present"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxPackage.ps1::8::5::nxPackage"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxPackage.ps1::8::5::nxPackage"; Name = "audispd-plugins"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -19,7 +19,7 @@ instance of MSFT_nxPackageResource as $MSFT_nxPackageResource2ref { ResourceID = "[nxPackage][V-219157][high][SRG-OS-000095-GPOS-00049]::[Ubuntu]Baseline"; Ensure = "Absent"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxPackage.ps1::8::5::nxPackage"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxPackage.ps1::8::5::nxPackage"; Name = "nis"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -29,7 +29,7 @@ instance of MSFT_nxPackageResource as $MSFT_nxPackageResource3ref { ResourceID = "[nxPackage][V-219158][high][SRG-OS-000095-GPOS-00049]::[Ubuntu]Baseline"; Ensure = "Absent"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxPackage.ps1::8::5::nxPackage"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxPackage.ps1::8::5::nxPackage"; Name = "rsh-server"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -39,7 +39,7 @@ instance of MSFT_nxPackageResource as $MSFT_nxPackageResource4ref { ResourceID = "[nxPackage][V-219160.a][medium][SRG-OS-000269-GPOS-00103]::[Ubuntu]Baseline"; Ensure = "Present"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxPackage.ps1::8::5::nxPackage"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxPackage.ps1::8::5::nxPackage"; Name = "rsyslog"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -49,7 +49,7 @@ instance of MSFT_nxPackageResource as $MSFT_nxPackageResource5ref { ResourceID = "[nxPackage][V-219161][medium][SRG-OS-000297-GPOS-00115]::[Ubuntu]Baseline"; Ensure = "Present"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxPackage.ps1::8::5::nxPackage"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxPackage.ps1::8::5::nxPackage"; Name = "ufw"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -59,7 +59,7 @@ instance of MSFT_nxPackageResource as $MSFT_nxPackageResource6ref { ResourceID = "[nxPackage][V-219177][high][SRG-OS-000074-GPOS-00042]::[Ubuntu]Baseline"; Ensure = "Absent"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxPackage.ps1::8::5::nxPackage"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxPackage.ps1::8::5::nxPackage"; Name = "telnetd"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -69,7 +69,7 @@ instance of MSFT_nxPackageResource as $MSFT_nxPackageResource7ref { ResourceID = "[nxPackage][V-219186.a][medium][SRG-OS-000480-GPOS-00225]::[Ubuntu]Baseline"; Ensure = "Present"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxPackage.ps1::8::5::nxPackage"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxPackage.ps1::8::5::nxPackage"; Name = "libpam-pwquality"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -79,7 +79,7 @@ instance of MSFT_nxPackageResource as $MSFT_nxPackageResource8ref { ResourceID = "[nxPackage][V-219225.a][medium][SRG-OS-000038-GPOS-00016]::[Ubuntu]Baseline"; Ensure = "Present"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxPackage.ps1::8::5::nxPackage"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxPackage.ps1::8::5::nxPackage"; Name = "auditd"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -89,7 +89,7 @@ instance of MSFT_nxPackageResource as $MSFT_nxPackageResource9ref { ResourceID = "[nxPackage][V-219304][medium][SRG-OS-000030-GPOS-00011]::[Ubuntu]Baseline"; Ensure = "Present"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxPackage.ps1::8::5::nxPackage"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxPackage.ps1::8::5::nxPackage"; Name = "vlock"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -99,7 +99,7 @@ instance of MSFT_nxPackageResource as $MSFT_nxPackageResource10ref { ResourceID = "[nxPackage][V-219313.a][high][SRG-OS-000423-GPOS-00187]::[Ubuntu]Baseline"; Ensure = "Present"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxPackage.ps1::8::5::nxPackage"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxPackage.ps1::8::5::nxPackage"; Name = "ssh"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -109,7 +109,7 @@ instance of MSFT_nxPackageResource as $MSFT_nxPackageResource11ref { ResourceID = "[nxPackage][V-219318][medium][SRG-OS-000375-GPOS-00160]::[Ubuntu]Baseline"; Ensure = "Present"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxPackage.ps1::8::5::nxPackage"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxPackage.ps1::8::5::nxPackage"; Name = "libpam-pkcs11"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -119,7 +119,7 @@ instance of MSFT_nxPackageResource as $MSFT_nxPackageResource12ref { ResourceID = "[nxPackage][V-219319][medium][SRG-OS-000376-GPOS-00161]::[Ubuntu]Baseline"; Ensure = "Present"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxPackage.ps1::8::5::nxPackage"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxPackage.ps1::8::5::nxPackage"; Name = "opensc-pkcs11"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -129,7 +129,7 @@ instance of MSFT_nxPackageResource as $MSFT_nxPackageResource13ref { ResourceID = "[nxPackage][V-219322.a][low][SRG-OS-000312-GPOS-00122]::[Ubuntu]Baseline"; Ensure = "Present"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxPackage.ps1::8::5::nxPackage"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxPackage.ps1::8::5::nxPackage"; Name = "libpam-apparmor"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -139,7 +139,7 @@ instance of MSFT_nxPackageResource as $MSFT_nxPackageResource14ref { ResourceID = "[nxPackage][V-219323][medium][SRG-OS-000368-GPOS-00154]::[Ubuntu]Baseline"; Ensure = "Present"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxPackage.ps1::8::5::nxPackage"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxPackage.ps1::8::5::nxPackage"; Name = "apparmor"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -149,7 +149,7 @@ instance of MSFT_nxPackageResource as $MSFT_nxPackageResource15ref { ResourceID = "[nxPackage][V-219343][medium][SRG-OS-000445-GPOS-00199]::[Ubuntu]Baseline"; Ensure = "Present"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxPackage.ps1::8::5::nxPackage"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxPackage.ps1::8::5::nxPackage"; Name = "aide"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -161,7 +161,7 @@ ResourceID = "[nxFile][V-219303.a][medium][SRG-OS-000029-GPOS-00010]::[Ubuntu]Ba Contents = ""; DestinationPath = "/etc/profile.d/autologout.sh"; ModuleName = "nx"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; ModuleVersion = "1.0"; ConfigurationName = "LinuxBaseLine"; }; @@ -171,7 +171,7 @@ ResourceID = "[nxFile][V-219339.a][medium][SRG-OS-000378-GPOS-00163]::[Ubuntu]Ba Contents = ""; DestinationPath = "/etc/modprobe.d/DISASTIG.conf"; ModuleName = "nx"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; ModuleVersion = "1.0"; ConfigurationName = "LinuxBaseLine"; }; @@ -179,7 +179,7 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource1ref { ResourceID = "[nxFileLine][V-219152.a][low][SRG-OS-000343-GPOS-00134]::[Ubuntu]Baseline"; ContainsLine = "space_left_action = email"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/auditd.conf"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -188,7 +188,7 @@ ResourceID = "[nxFileLine][V-219152.a][low][SRG-OS-000343-GPOS-00134]::[Ubuntu]B }; instance of MSFT_nxFileResource as $MSFT_nxFileResource3ref { -SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::29::9::nxFile"; +SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::29::9::nxFile"; ModuleName = "nx"; ModuleVersion = "1.0"; ResourceID = "[nxFile][V-219153.b][low][SRG-OS-000479-GPOS-00224]::[Ubuntu]Baseline"; @@ -199,7 +199,7 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource2ref { ResourceID = "[nxFileLine][V-219153.b][low][SRG-OS-000479-GPOS-00224]::[Ubuntu]Baseline"; ContainsLine = "active = yes"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audisp/plugins.d/au-remote.conf"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -210,7 +210,7 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource3ref { ResourceID = "[nxFileLine][V-219156.a][medium][SRG-OS-000437-GPOS-00194]::[Ubuntu]Baseline"; ContainsLine = "Unattended-Upgrade::Remove-Unused-Dependencies \"true\";"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/apt/apt.conf.d/50unattended-upgrades"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -221,7 +221,7 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource4ref { ResourceID = "[nxFileLine][V-219156.b][medium][SRG-OS-000437-GPOS-00194]::[Ubuntu]Baseline"; ContainsLine = "Unattended-Upgrade::Remove-Unused-Kernel-Packages \"true\";"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/apt/apt.conf.d/50unattended-upgrades"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -232,7 +232,7 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource5ref { ResourceID = "[nxFileLine][V-219170.a][medium][SRG-OS-000228-GPOS-00088]::[Ubuntu]Baseline"; ContainsLine = "Banner /etc/issue"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/ssh/sshd_config"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -243,7 +243,7 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource6ref { ResourceID = "[nxFileLine][V-219170.b][medium][SRG-OS-000228-GPOS-00088]::[Ubuntu]Baseline"; ContainsLine = "You are accessing a U.S. Government (USG) Information System (IS) that is provided for USG-authorized use only.\n\nBy using this IS (which includes any device attached to this IS), you consent to the following conditions.\n\n-The USG routinely intercepts and monitors communications on this IS for purposes including, but not limited to, penetration testing, COMSEC monitoring, network operations and defense, personnel misconduct (PM), law enforcement (LE), and counterintelligence (CI) investigations.\n\n-At any time, the USG may inspect and seize data stored on this IS.\n\n-Communications using, or data stored on, this IS are not private, are subject to routine monitoring, interception, and search, and may be disclosed or used for any USG-authorized purpose.\n\n-This IS includes security measures (e.g., authentication and access controls) to protect USG interests--not for your personal benefit or privacy.\n\n-Notwithstanding the above, using this IS does not constitute consent to PM, LE or CI investigative searching or monitoring of the content of privileged communications, or work product, related to personal representation or services by attorneys, psychotherapists, or clergy, and their assistants. Such communications and work product are private and confidential. See User Agreement for details."; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/issue"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -254,7 +254,7 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource7ref { ResourceID = "[nxFileLine][V-219172][low][SRG-OS-000069-GPOS-00037]::[Ubuntu]Baseline"; ContainsLine = "ucredit=-1"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/security/pwquality.conf"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -265,7 +265,7 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource8ref { ResourceID = "[nxFileLine][V-219173][low][SRG-OS-000070-GPOS-00038]::[Ubuntu]Baseline"; ContainsLine = "lcredit=-1"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/security/pwquality.conf"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -276,7 +276,7 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource9ref { ResourceID = "[nxFileLine][V-219174][low][SRG-OS-000071-GPOS-00039]::[Ubuntu]Baseline"; ContainsLine = "dcredit=-1"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/security/pwquality.conf"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -287,7 +287,7 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource10ref { ResourceID = "[nxFileLine][V-219175][low][SRG-OS-000072-GPOS-00040]::[Ubuntu]Baseline"; ContainsLine = "difok=8"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/security/pwquality.conf"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -298,7 +298,7 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource11ref { ResourceID = "[nxFileLine][V-219176][medium][SRG-OS-000073-GPOS-00041]::[Ubuntu]Baseline"; ContainsLine = "ENCRYPT_METHOD SHA512"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/login.defs"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -309,7 +309,7 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource12ref { ResourceID = "[nxFileLine][V-219178][low][SRG-OS-000075-GPOS-00043]::[Ubuntu]Baseline"; ContainsLine = "PASS_MIN_DAYS 1"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/login.defs"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -320,7 +320,7 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource13ref { ResourceID = "[nxFileLine][V-219179][low][SRG-OS-000076-GPOS-00044]::[Ubuntu]Baseline"; ContainsLine = "PASS_MAX_DAYS 60"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/login.defs"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -331,7 +331,7 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource14ref { ResourceID = "[nxFileLine][V-219181][medium][SRG-OS-000078-GPOS-00046]::[Ubuntu]Baseline"; ContainsLine = "minlen=15"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/security/pwquality.conf"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -342,7 +342,7 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource15ref { ResourceID = "[nxFileLine][V-219184][medium][SRG-OS-000480-GPOS-00225]::[Ubuntu]Baseline"; ContainsLine = "dictcheck=1"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/security/pwquality.conf"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -353,7 +353,7 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource16ref { ResourceID = "[nxFileLine][V-219186.b][medium][SRG-OS-000480-GPOS-00225]::[Ubuntu]Baseline"; ContainsLine = "enforcing = 1"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/security/pwquality.conf"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -364,7 +364,7 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource17ref { ResourceID = "[nxFileLine][V-219210][low][SRG-OS-000266-GPOS-00101]::[Ubuntu]Baseline"; ContainsLine = "ocredit=-1"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/security/pwquality.conf"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -375,7 +375,7 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource18ref { ResourceID = "[nxFileLine][V-219213][medium][SRG-OS-000064-GPOS-00033]::[Ubuntu]Baseline"; ContainsLine = "-w /var/log/tallylog -p wa -k logins"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -386,7 +386,7 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource19ref { ResourceID = "[nxFileLine][V-219214][medium][SRG-OS-000064-GPOS-00033]::[Ubuntu]Baseline"; ContainsLine = "-w /var/log/faillog -p wa -k logins"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -397,7 +397,7 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource20ref { ResourceID = "[nxFileLine][V-219215][medium][SRG-OS-000064-GPOS-00033]::[Ubuntu]Baseline"; ContainsLine = "-w /var/log/lastlog -p wa -k logins"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -408,7 +408,7 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource21ref { ResourceID = "[nxFileLine][V-219216][medium][SRG-OS-000471-GPOS-00215]::[Ubuntu]Baseline"; ContainsLine = "-w /var/log/sudo.log -p wa -k priv_actions"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -419,7 +419,7 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource22ref { ResourceID = "[nxFileLine][V-219217][medium][SRG-OS-000472-GPOS-00217]::[Ubuntu]Baseline"; ContainsLine = "-w /var/log/wtmp -p wa -k logins"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -430,7 +430,7 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource23ref { ResourceID = "[nxFileLine][V-219218][medium][SRG-OS-000472-GPOS-00217]::[Ubuntu]Baseline"; ContainsLine = "-w /var/run/utmp -p wa -k logins"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -441,7 +441,7 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource24ref { ResourceID = "[nxFileLine][V-219219][medium][SRG-OS-000472-GPOS-00217]::[Ubuntu]Baseline"; ContainsLine = "-w /var/log/btmp -p wa -k logins"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -452,7 +452,7 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource25ref { ResourceID = "[nxFileLine][V-219220][medium][SRG-OS-000476-GPOS-00221]::[Ubuntu]Baseline"; ContainsLine = "-w /etc/passwd -p wa -k usergroup_modification"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -463,7 +463,7 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource26ref { ResourceID = "[nxFileLine][V-219221][medium][SRG-OS-000476-GPOS-00221]::[Ubuntu]Baseline"; ContainsLine = "-w /etc/group -p wa -k usergroup_modification"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -474,7 +474,7 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource27ref { ResourceID = "[nxFileLine][V-219222][medium][SRG-OS-000476-GPOS-00221]::[Ubuntu]Baseline"; ContainsLine = "-w /etc/gshadow -p wa -k usergroup_modification"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -485,7 +485,7 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource28ref { ResourceID = "[nxFileLine][V-219223][medium][SRG-OS-000476-GPOS-00221]::[Ubuntu]Baseline"; ContainsLine = "-w /etc/shadow -p wa -k usergroup_modification"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -496,7 +496,7 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource29ref { ResourceID = "[nxFileLine][V-219224][medium][SRG-OS-000476-GPOS-00221]::[Ubuntu]Baseline"; ContainsLine = "-w /etc/security/opasswd -p wa -k usergroup_modification"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -507,7 +507,7 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource30ref { ResourceID = "[nxFileLine][V-219226][medium][SRG-OS-000046-GPOS-00022]::[Ubuntu]Baseline"; ContainsLine = "action_mail_acct = root"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/auditd.conf"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -518,7 +518,7 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource31ref { ResourceID = "[nxFileLine][V-219227][medium][SRG-OS-000047-GPOS-00023]::[Ubuntu]Baseline"; ContainsLine = "disk_full_action = HALT"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/auditd.conf"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -529,7 +529,7 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource32ref { ResourceID = "[nxFileLine][V-219238][medium][SRG-OS-000064-GPOS-00033]::[Ubuntu]Baseline"; ContainsLine = "-a always,exit -F path=/bin/su -F perm=x -F auid>=1000 -F auid!=-1 -k privileged-priv_change"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -540,7 +540,7 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource33ref { ResourceID = "[nxFileLine][V-219239][medium][SRG-OS-000064-GPOS-00033]::[Ubuntu]Baseline"; ContainsLine = "-a always,exit -F path=/usr/bin/chfn -F perm=x -F auid>=1000 -F auid!=-1 -k privileged-chfn"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -551,7 +551,7 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource34ref { ResourceID = "[nxFileLine][V-219240][medium][SRG-OS-000064-GPOS-00033]::[Ubuntu]Baseline"; ContainsLine = "-a always,exit -F path=/bin/mount -F perm=x -F auid>=1000 -F auid!=-1 -k privileged-mount"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -562,7 +562,7 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource35ref { ResourceID = "[nxFileLine][V-219241][medium][SRG-OS-000064-GPOS-00033]::[Ubuntu]Baseline"; ContainsLine = "-a always,exit -F path=/bin/umount -F perm=x -F auid>=1000 -F auid!=-1 -k privileged-umount"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -573,7 +573,7 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource36ref { ResourceID = "[nxFileLine][V-219242][medium][SRG-OS-000064-GPOS-00033]::[Ubuntu]Baseline"; ContainsLine = "-a always,exit -F path=/usr/bin/ssh-agent -F perm=x -F auid>=1000 -F auid!=-1 -k privileged-ssh"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -584,7 +584,7 @@ instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource37ref { ResourceID = "[nxFileLine][V-219243][medium][SRG-OS-000064-GPOS-00033]::[Ubuntu]Baseline"; ContainsLine = "-a always,exit -F path=/usr/lib/openssh/ssh-keysign -F perm=x -F auid>=1000 -F auid!=-1 -k privileged-ssh"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -594,1372 +594,679 @@ ResourceID = "[nxFileLine][V-219243][medium][SRG-OS-000064-GPOS-00033]::[Ubuntu] instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource38ref { ResourceID = "[nxFileLine][V-219244.a][medium][SRG-OS-000064-GPOS-00033]::[Ubuntu]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S setxattr -F auid>=1000 -F auid!=-1 -k perm_mod"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + ContainsLine = "-a always,exit -F arch=b32 -S setxattr,fsetxattr,lsetxattr,removexattr,fremovexattr,lremovexattr -F auid>=1000 -F auid!=-1 -k perm_mod"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*setxattr\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*-1\\s*-k\\s*perm_mod"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*setxattr,fsetxattr,lsetxattr,removexattr,fremovexattr,lremovexattr\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*-1\\s*-k\\s*perm_mod"; ConfigurationName = "LinuxBaseLine"; }; instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource39ref { ResourceID = "[nxFileLine][V-219244.b][medium][SRG-OS-000064-GPOS-00033]::[Ubuntu]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S setxattr -F auid=0 -k perm_mod"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + ContainsLine = "-a always,exit -F arch=b32 -S setxattr,fsetxattr,lsetxattr,removexattr,fremovexattr,lremovexattr -F auid=0 -k perm_mod"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*setxattr\\s*-F\\s*auid\\s*=\\s*0\\s*-k\\s*perm_mod"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*setxattr,fsetxattr,lsetxattr,removexattr,fremovexattr,lremovexattr\\s*-F\\s*auid\\s*=\\s*0\\s*-k\\s*perm_mod"; ConfigurationName = "LinuxBaseLine"; }; instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource40ref { ResourceID = "[nxFileLine][V-219244.c][medium][SRG-OS-000064-GPOS-00033]::[Ubuntu]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S setxattr -F auid>=1000 -F auid!=-1 -k perm_mod"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + ContainsLine = "-a always,exit -F arch=b64 -S setxattr,fsetxattr,lsetxattr,removexattr,fremovexattr,lremovexattr -F auid>=1000 -F auid!=-1 -k perm_mod"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*setxattr\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*-1\\s*-k\\s*perm_mod"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*setxattr,fsetxattr,lsetxattr,removexattr,fremovexattr,lremovexattr\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*-1\\s*-k\\s*perm_mod"; ConfigurationName = "LinuxBaseLine"; }; instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource41ref { ResourceID = "[nxFileLine][V-219244.d][medium][SRG-OS-000064-GPOS-00033]::[Ubuntu]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S setxattr -F auid=0 -k perm_mod"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + ContainsLine = "-a always,exit -F arch=b64 -S setxattr,fsetxattr,lsetxattr,removexattr,fremovexattr,lremovexattr -F auid=0 -k perm_mod"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*setxattr\\s*-F\\s*auid\\s*=\\s*0\\s*-k\\s*perm_mod"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*setxattr,fsetxattr,lsetxattr,removexattr,fremovexattr,lremovexattr\\s*-F\\s*auid\\s*=\\s*0\\s*-k\\s*perm_mod"; ConfigurationName = "LinuxBaseLine"; }; instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource42ref { -ResourceID = "[nxFileLine][V-219245.a][medium][SRG-OS-000064-GPOS-00033]::[Ubuntu]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S lsetxattr -F auid>=1000 -F auid!=-1 -k perm_mod"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; +ResourceID = "[nxFileLine][V-219250.a][medium][SRG-OS-000064-GPOS-00033]::[Ubuntu]Baseline"; + ContainsLine = "-a always,exit -F arch=b32 -S chown,fchown,fchownat,lchown -F auid>=1000 -F auid!=-1 -k perm_chng"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*lsetxattr\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*-1\\s*-k\\s*perm_mod"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*chown,fchown,fchownat,lchown\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*-1\\s*-k\\s*perm_chng"; ConfigurationName = "LinuxBaseLine"; }; instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource43ref { -ResourceID = "[nxFileLine][V-219245.b][medium][SRG-OS-000064-GPOS-00033]::[Ubuntu]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S lsetxattr -F auid=0 -k perm_mod"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; +ResourceID = "[nxFileLine][V-219250.b][medium][SRG-OS-000064-GPOS-00033]::[Ubuntu]Baseline"; + ContainsLine = "-a always,exit -F arch=b64 -S chown,fchown,fchownat,lchown -F auid>=1000 -F auid!=-1 -k perm_chng"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*lsetxattr\\s*-F\\s*auid\\s*=\\s*0\\s*-k\\s*perm_mod"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*chown,fchown,fchownat,lchown\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*-1\\s*-k\\s*perm_chng"; ConfigurationName = "LinuxBaseLine"; }; instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource44ref { -ResourceID = "[nxFileLine][V-219245.c][medium][SRG-OS-000064-GPOS-00033]::[Ubuntu]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S lsetxattr -F auid>=1000 -F auid!=-1 -k perm_mod"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; +ResourceID = "[nxFileLine][V-219254.a][medium][SRG-OS-000064-GPOS-00033]::[Ubuntu]Baseline"; + ContainsLine = "-a always,exit -F arch=b32 -S chmod,fchmod,fchmodat -F auid>=1000 -F auid!=-1 -k perm_chng"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*lsetxattr\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*-1\\s*-k\\s*perm_mod"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*chmod,fchmod,fchmodat\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*-1\\s*-k\\s*perm_chng"; ConfigurationName = "LinuxBaseLine"; }; instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource45ref { -ResourceID = "[nxFileLine][V-219245.d][medium][SRG-OS-000064-GPOS-00033]::[Ubuntu]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S lsetxattr -F auid=0 -k perm_mod"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; +ResourceID = "[nxFileLine][V-219254.b][medium][SRG-OS-000064-GPOS-00033]::[Ubuntu]Baseline"; + ContainsLine = "-a always,exit -F arch=b64 -S chmod,fchmod,fchmodat -F auid>=1000 -F auid!=-1 -k perm_chng"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*lsetxattr\\s*-F\\s*auid\\s*=\\s*0\\s*-k\\s*perm_mod"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*chmod,fchmod,fchmodat\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*-1\\s*-k\\s*perm_chng"; ConfigurationName = "LinuxBaseLine"; }; instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource46ref { -ResourceID = "[nxFileLine][V-219246.a][medium][SRG-OS-000064-GPOS-00033]::[Ubuntu]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S fsetxattr -F auid>=1000 -F auid!=-1 -k perm_mod"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; +ResourceID = "[nxFileLine][V-219257.a][medium][SRG-OS-000064-GPOS-00033]::[Ubuntu]Baseline"; + ContainsLine = "-a always,exit -F arch=b32 -S creat,open,openat,open_by_handle_at,truncate,ftruncate -F exit=-EPERM -F auid>=1000 -F auid!=-1 -k perm_access"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*fsetxattr\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*-1\\s*-k\\s*perm_mod"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*creat,open,openat,open_by_handle_at,truncate,ftruncate\\s*-F\\s*exit\\s*=\\s*-EPERM\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*-1\\s*-k\\s*perm_access"; ConfigurationName = "LinuxBaseLine"; }; instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource47ref { -ResourceID = "[nxFileLine][V-219246.b][medium][SRG-OS-000064-GPOS-00033]::[Ubuntu]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S fsetxattr -F auid=0 -k perm_mod"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; +ResourceID = "[nxFileLine][V-219257.b][medium][SRG-OS-000064-GPOS-00033]::[Ubuntu]Baseline"; + ContainsLine = "-a always,exit -F arch=b32 -S creat,open,openat,open_by_handle_at,truncate,ftruncate -F exit=-EACCES -F auid>=1000 -F auid!=-1 -k perm_access"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*fsetxattr\\s*-F\\s*auid\\s*=\\s*0\\s*-k\\s*perm_mod"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*creat,open,openat,open_by_handle_at,truncate,ftruncate\\s*-F\\s*exit\\s*=\\s*-EACCES\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*-1\\s*-k\\s*perm_access"; ConfigurationName = "LinuxBaseLine"; }; instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource48ref { -ResourceID = "[nxFileLine][V-219246.c][medium][SRG-OS-000064-GPOS-00033]::[Ubuntu]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S fsetxattr -F auid>=1000 -F auid!=-1 -k perm_mod"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; +ResourceID = "[nxFileLine][V-219257.c][medium][SRG-OS-000064-GPOS-00033]::[Ubuntu]Baseline"; + ContainsLine = "-a always,exit -F arch=b64 -S creat,open,openat,open_by_handle_at,truncate,ftruncate -F exit=-EPERM -F auid>=1000 -F auid!=-1 -k perm_access"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*fsetxattr\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*-1\\s*-k\\s*perm_mod"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*creat,open,openat,open_by_handle_at,truncate,ftruncate\\s*-F\\s*exit\\s*=\\s*-EPERM\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*-1\\s*-k\\s*perm_access"; ConfigurationName = "LinuxBaseLine"; }; instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource49ref { -ResourceID = "[nxFileLine][V-219246.d][medium][SRG-OS-000064-GPOS-00033]::[Ubuntu]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S fsetxattr -F auid=0 -k perm_mod"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; +ResourceID = "[nxFileLine][V-219257.d][medium][SRG-OS-000064-GPOS-00033]::[Ubuntu]Baseline"; + ContainsLine = "-a always,exit -F arch=b64 -S creat,open,openat,open_by_handle_at,truncate,ftruncate -F exit=-EACCES -F auid>=1000 -F auid!=-1 -k perm_access"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*fsetxattr\\s*-F\\s*auid\\s*=\\s*0\\s*-k\\s*perm_mod"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*creat,open,openat,open_by_handle_at,truncate,ftruncate\\s*-F\\s*exit\\s*=\\s*-EACCES\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*-1\\s*-k\\s*perm_access"; ConfigurationName = "LinuxBaseLine"; }; instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource50ref { -ResourceID = "[nxFileLine][V-219247.a][medium][SRG-OS-000064-GPOS-00033]::[Ubuntu]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S removexattr -F auid>=1000 -F auid!=-1 -k perm_mod"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*removexattr\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*-1\\s*-k\\s*perm_mod"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource51ref -{ -ResourceID = "[nxFileLine][V-219247.b][medium][SRG-OS-000064-GPOS-00033]::[Ubuntu]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S removexattr -F auid=0 -k perm_mod"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*removexattr\\s*-F\\s*auid\\s*=\\s*0\\s*-k\\s*perm_mod"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource52ref -{ -ResourceID = "[nxFileLine][V-219247.c][medium][SRG-OS-000064-GPOS-00033]::[Ubuntu]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S removexattr -F auid>=1000 -F auid!=-1 -k perm_mod"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*removexattr\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*-1\\s*-k\\s*perm_mod"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource53ref -{ -ResourceID = "[nxFileLine][V-219247.d][medium][SRG-OS-000064-GPOS-00033]::[Ubuntu]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S removexattr -F auid=0 -k perm_mod"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*removexattr\\s*-F\\s*auid\\s*=\\s*0\\s*-k\\s*perm_mod"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource54ref -{ -ResourceID = "[nxFileLine][V-219248.a][medium][SRG-OS-000064-GPOS-00033]::[Ubuntu]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S lremovexattr -F auid>=1000 -F auid!=-1 -k perm_mod"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*lremovexattr\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*-1\\s*-k\\s*perm_mod"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource55ref -{ -ResourceID = "[nxFileLine][V-219248.b][medium][SRG-OS-000064-GPOS-00033]::[Ubuntu]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S lremovexattr -F auid=0 -k perm_mod"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*lremovexattr\\s*-F\\s*auid\\s*=\\s*0\\s*-k\\s*perm_mod"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource56ref -{ -ResourceID = "[nxFileLine][V-219248.c][medium][SRG-OS-000064-GPOS-00033]::[Ubuntu]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S lremovexattr -F auid>=1000 -F auid!=-1 -k perm_mod"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*lremovexattr\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*-1\\s*-k\\s*perm_mod"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource57ref -{ -ResourceID = "[nxFileLine][V-219248.d][medium][SRG-OS-000064-GPOS-00033]::[Ubuntu]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S lremovexattr -F auid=0 -k perm_mod"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*lremovexattr\\s*-F\\s*auid\\s*=\\s*0\\s*-k\\s*perm_mod"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource58ref -{ -ResourceID = "[nxFileLine][V-219249.a][medium][SRG-OS-000064-GPOS-00033]::[Ubuntu]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S fremovexattr -F auid>=1000 -F auid!=-1 -k perm_mod"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*fremovexattr\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*-1\\s*-k\\s*perm_mod"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource59ref -{ -ResourceID = "[nxFileLine][V-219249.b][medium][SRG-OS-000064-GPOS-00033]::[Ubuntu]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S fremovexattr -F auid=0 -k perm_mod"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*fremovexattr\\s*-F\\s*auid\\s*=\\s*0\\s*-k\\s*perm_mod"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource60ref -{ -ResourceID = "[nxFileLine][V-219249.c][medium][SRG-OS-000064-GPOS-00033]::[Ubuntu]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S fremovexattr -F auid>=1000 -F auid!=-1 -k perm_mod"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*fremovexattr\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*-1\\s*-k\\s*perm_mod"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource61ref -{ -ResourceID = "[nxFileLine][V-219249.d][medium][SRG-OS-000064-GPOS-00033]::[Ubuntu]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S fremovexattr -F auid=0 -k perm_mod"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*fremovexattr\\s*-F\\s*auid\\s*=\\s*0\\s*-k\\s*perm_mod"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource62ref -{ -ResourceID = "[nxFileLine][V-219250.a][medium][SRG-OS-000064-GPOS-00033]::[Ubuntu]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S chown -F auid>=1000 -F auid!=-1 -k perm_chng"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*chown\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*-1\\s*-k\\s*perm_chng"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource63ref -{ -ResourceID = "[nxFileLine][V-219250.b][medium][SRG-OS-000064-GPOS-00033]::[Ubuntu]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S chown -F auid>=1000 -F auid!=-1 -k perm_chng"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*chown\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*-1\\s*-k\\s*perm_chng"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource64ref -{ -ResourceID = "[nxFileLine][V-219251.a][medium][SRG-OS-000064-GPOS-00033]::[Ubuntu]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S fchown -F auid>=1000 -F auid!=-1 -k perm_chng"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*fchown\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*-1\\s*-k\\s*perm_chng"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource65ref -{ -ResourceID = "[nxFileLine][V-219251.b][medium][SRG-OS-000064-GPOS-00033]::[Ubuntu]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S fchown -F auid>=1000 -F auid!=-1 -k perm_chng"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*fchown\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*-1\\s*-k\\s*perm_chng"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource66ref -{ -ResourceID = "[nxFileLine][V-219252.a][medium][SRG-OS-000064-GPOS-00033]::[Ubuntu]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S fchownat -F auid>=1000 -F auid!=-1 -k perm_chng"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*fchownat\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*-1\\s*-k\\s*perm_chng"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource67ref -{ -ResourceID = "[nxFileLine][V-219252.b][medium][SRG-OS-000064-GPOS-00033]::[Ubuntu]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S fchownat -F auid>=1000 -F auid!=-1 -k perm_chng"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*fchownat\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*-1\\s*-k\\s*perm_chng"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource68ref -{ -ResourceID = "[nxFileLine][V-219253.a][medium][SRG-OS-000064-GPOS-00033]::[Ubuntu]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S lchown -F auid>=1000 -F auid!=-1 -k perm_chng"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*lchown\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*-1\\s*-k\\s*perm_chng"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource69ref -{ -ResourceID = "[nxFileLine][V-219253.b][medium][SRG-OS-000064-GPOS-00033]::[Ubuntu]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S lchown -F auid>=1000 -F auid!=-1 -k perm_chng"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*lchown\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*-1\\s*-k\\s*perm_chng"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource70ref -{ -ResourceID = "[nxFileLine][V-219254.a][medium][SRG-OS-000064-GPOS-00033]::[Ubuntu]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S chmod -F auid>=1000 -F auid!=-1 -k perm_chng"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*chmod\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*-1\\s*-k\\s*perm_chng"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource71ref -{ -ResourceID = "[nxFileLine][V-219254.b][medium][SRG-OS-000064-GPOS-00033]::[Ubuntu]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S chmod -F auid>=1000 -F auid!=-1 -k perm_chng"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*chmod\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*-1\\s*-k\\s*perm_chng"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource72ref -{ -ResourceID = "[nxFileLine][V-219255.a][medium][SRG-OS-000064-GPOS-00033]::[Ubuntu]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S fchmod -F auid>=1000 -F auid!=-1 -k perm_chng"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*fchmod\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*-1\\s*-k\\s*perm_chng"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource73ref -{ -ResourceID = "[nxFileLine][V-219255.b][medium][SRG-OS-000064-GPOS-00033]::[Ubuntu]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S fchmod -F auid>=1000 -F auid!=-1 -k perm_chng"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*fchmod\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*-1\\s*-k\\s*perm_chng"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource74ref -{ -ResourceID = "[nxFileLine][V-219256.a][medium][SRG-OS-000064-GPOS-00033]::[Ubuntu]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S fchmodat -F auid>=1000 -F auid!=-1 -k perm_chng"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*fchmodat\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*-1\\s*-k\\s*perm_chng"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource75ref -{ -ResourceID = "[nxFileLine][V-219256.b][medium][SRG-OS-000064-GPOS-00033]::[Ubuntu]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S fchmodat -F auid>=1000 -F auid!=-1 -k perm_chng"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*fchmodat\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*-1\\s*-k\\s*perm_chng"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource76ref -{ -ResourceID = "[nxFileLine][V-219257.a][medium][SRG-OS-000064-GPOS-00033]::[Ubuntu]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S open -F exit=-EPERM -F auid>=1000 -F auid!=-1 -k perm_access"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*open\\s*-F\\s*exit\\s*=\\s*-EPERM\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*-1\\s*-k\\s*perm_access"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource77ref -{ -ResourceID = "[nxFileLine][V-219257.b][medium][SRG-OS-000064-GPOS-00033]::[Ubuntu]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S open -F exit=-EACCES -F auid>=1000 -F auid!=-1 -k perm_access"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*open\\s*-F\\s*exit\\s*=\\s*-EACCES\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*-1\\s*-k\\s*perm_access"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource78ref -{ -ResourceID = "[nxFileLine][V-219257.c][medium][SRG-OS-000064-GPOS-00033]::[Ubuntu]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S open -F exit=-EPERM -F auid>=1000 -F auid!=-1 -k perm_access"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*open\\s*-F\\s*exit\\s*=\\s*-EPERM\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*-1\\s*-k\\s*perm_access"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource79ref -{ -ResourceID = "[nxFileLine][V-219257.d][medium][SRG-OS-000064-GPOS-00033]::[Ubuntu]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S open -F exit=-EACCES -F auid>=1000 -F auid!=-1 -k perm_access"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*open\\s*-F\\s*exit\\s*=\\s*-EACCES\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*-1\\s*-k\\s*perm_access"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource80ref -{ -ResourceID = "[nxFileLine][V-219261.a][medium][SRG-OS-000064-GPOS-00033]::[Ubuntu]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S openat -F exit=-EPERM -F auid>=1000 -F auid!=-1 -k perm_access"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*openat\\s*-F\\s*exit\\s*=\\s*-EPERM\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*-1\\s*-k\\s*perm_access"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource81ref -{ -ResourceID = "[nxFileLine][V-219261.b][medium][SRG-OS-000064-GPOS-00033]::[Ubuntu]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S openat -F exit=-EACCES -F auid>=1000 -F auid!=-1 -k perm_access"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*openat\\s*-F\\s*exit\\s*=\\s*-EACCES\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*-1\\s*-k\\s*perm_access"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource82ref -{ -ResourceID = "[nxFileLine][V-219261.c][medium][SRG-OS-000064-GPOS-00033]::[Ubuntu]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S openat -F exit=-EPERM -F auid>=1000 -F auid!=-1 -k perm_access"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*openat\\s*-F\\s*exit\\s*=\\s*-EPERM\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*-1\\s*-k\\s*perm_access"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource83ref -{ -ResourceID = "[nxFileLine][V-219261.d][medium][SRG-OS-000064-GPOS-00033]::[Ubuntu]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S openat -F exit=-EACCES -F auid>=1000 -F auid!=-1 -k perm_access"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*openat\\s*-F\\s*exit\\s*=\\s*-EACCES\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*-1\\s*-k\\s*perm_access"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource84ref -{ -ResourceID = "[nxFileLine][V-219262.a][medium][SRG-OS-000064-GPOS-00033]::[Ubuntu]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S open_by_handle_at -F exit=-EPERM -F auid>=1000 -F auid!=-1 -k perm_access"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*open_by_handle_at\\s*-F\\s*exit\\s*=\\s*-EPERM\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*-1\\s*-k\\s*perm_access"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource85ref -{ -ResourceID = "[nxFileLine][V-219262.b][medium][SRG-OS-000064-GPOS-00033]::[Ubuntu]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S open_by_handle_at -F exit=-EACCES -F auid>=1000 -F auid!=-1 -k perm_access"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*open_by_handle_at\\s*-F\\s*exit\\s*=\\s*-EACCES\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*-1\\s*-k\\s*perm_access"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource86ref -{ -ResourceID = "[nxFileLine][V-219262.c][medium][SRG-OS-000064-GPOS-00033]::[Ubuntu]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S open_by_handle_at -F exit=-EPERM -F auid>=1000 -F auid!=-1 -k perm_access"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*open_by_handle_at\\s*-F\\s*exit\\s*=\\s*-EPERM\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*-1\\s*-k\\s*perm_access"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource87ref -{ -ResourceID = "[nxFileLine][V-219262.d][medium][SRG-OS-000064-GPOS-00033]::[Ubuntu]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S open_by_handle_at -F exit=-EACCES -F auid>=1000 -F auid!=-1 -k perm_access"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*open_by_handle_at\\s*-F\\s*exit\\s*=\\s*-EACCES\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*-1\\s*-k\\s*perm_access"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource88ref -{ ResourceID = "[nxFileLine][V-219263][medium][SRG-OS-000064-GPOS-00033]::[Ubuntu]Baseline"; ContainsLine = "-a always,exit -F path=/usr/bin/sudo -F perm=x -F auid>=1000 -F auid!=-1 -k priv_cmd"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/bin/sudo\\s*-F\\s*perm\\s*=\\s*x\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*-1\\s*-k\\s*priv_cmd"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource89ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource51ref { ResourceID = "[nxFileLine][V-219264][medium][SRG-OS-000064-GPOS-00033]::[Ubuntu]Baseline"; ContainsLine = "-a always,exit -F path=/usr/bin/sudoedit -F perm=x -F auid>=1000 -F auid!=-1 -k priv_cmd"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/bin/sudoedit\\s*-F\\s*perm\\s*=\\s*x\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*-1\\s*-k\\s*priv_cmd"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource90ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource52ref { ResourceID = "[nxFileLine][V-219265][medium][SRG-OS-000064-GPOS-00033]::[Ubuntu]Baseline"; ContainsLine = "-a always,exit -F path=/usr/bin/chsh -F perm=x -F auid>=1000 -F auid!=-1 -k priv_cmd"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/bin/chsh\\s*-F\\s*perm\\s*=\\s*x\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*-1\\s*-k\\s*priv_cmd"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource91ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource53ref { ResourceID = "[nxFileLine][V-219266][medium][SRG-OS-000064-GPOS-00033]::[Ubuntu]Baseline"; ContainsLine = "-a always,exit -F path=/usr/bin/newgrp -F perm=x -F auid>=1000 -F auid!=-1 -k priv_cmd"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/bin/newgrp\\s*-F\\s*perm\\s*=\\s*x\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*-1\\s*-k\\s*priv_cmd"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource92ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource54ref { ResourceID = "[nxFileLine][V-219267][medium][SRG-OS-000064-GPOS-00033]::[Ubuntu]Baseline"; ContainsLine = "-a always,exit -F path=/usr/bin/chcon -F perm=x -F auid>=1000 -F auid!=-1 -k perm_chng"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/bin/chcon\\s*-F\\s*perm\\s*=\\s*x\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*-1\\s*-k\\s*perm_chng"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource93ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource55ref { ResourceID = "[nxFileLine][V-219268][medium][SRG-OS-000064-GPOS-00033]::[Ubuntu]Baseline"; ContainsLine = "-a always,exit -F path=/sbin/apparmor_parser -F perm=x -F auid>=1000 -F auid!=-1 -k perm_chng"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/sbin/apparmor_parser\\s*-F\\s*perm\\s*=\\s*x\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*-1\\s*-k\\s*perm_chng"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource94ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource56ref { ResourceID = "[nxFileLine][V-219269][medium][SRG-OS-000064-GPOS-00033]::[Ubuntu]Baseline"; ContainsLine = "-a always,exit -F path=/usr/bin/setfacl -F perm=x -F auid>=1000 -F auid!=-1 -k perm_chng"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/bin/setfacl\\s*-F\\s*perm\\s*=\\s*x\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*-1\\s*-k\\s*perm_chng"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource95ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource57ref { ResourceID = "[nxFileLine][V-219270][medium][SRG-OS-000064-GPOS-00033]::[Ubuntu]Baseline"; ContainsLine = "-a always,exit -F path=/usr/bin/chacl -F perm=x -F auid>=1000 -F auid!=-1 -k perm_chng"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/bin/chacl\\s*-F\\s*perm\\s*=\\s*x\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*-1\\s*-k\\s*perm_chng"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource96ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource58ref { ResourceID = "[nxFileLine][V-219271][medium][SRG-OS-000064-GPOS-00033]::[Ubuntu]Baseline"; ContainsLine = "-a always,exit -F path=/usr/bin/passwd -F perm=x -F auid>=1000 -F auid!=-1 -k privileged-passwd"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/bin/passwd\\s*-F\\s*perm\\s*=\\s*x\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*-1\\s*-k\\s*privileged-passwd"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource97ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource59ref { ResourceID = "[nxFileLine][V-219272][medium][SRG-OS-000064-GPOS-00033]::[Ubuntu]Baseline"; ContainsLine = "-a always,exit -F path=/sbin/unix_update -F perm=x -F auid>=1000 -F auid!=-1 -k privileged-unix-update"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/sbin/unix_update\\s*-F\\s*perm\\s*=\\s*x\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*-1\\s*-k\\s*privileged-unix-update"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource98ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource60ref { ResourceID = "[nxFileLine][V-219273][medium][SRG-OS-000064-GPOS-00033]::[Ubuntu]Baseline"; ContainsLine = "-a always,exit -F path=/usr/bin/gpasswd -F perm=x -F auid>=1000 -F auid!=-1 -k privileged-gpasswd"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/bin/gpasswd\\s*-F\\s*perm\\s*=\\s*x\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*-1\\s*-k\\s*privileged-gpasswd"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource99ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource61ref { ResourceID = "[nxFileLine][V-219274][medium][SRG-OS-000064-GPOS-00033]::[Ubuntu]Baseline"; ContainsLine = "-a always,exit -F path=/usr/bin/chage -F perm=x -F auid>=1000 -F auid!=-1 -k privileged-chage"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/bin/chage\\s*-F\\s*perm\\s*=\\s*x\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*-1\\s*-k\\s*privileged-chage"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource100ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource62ref { ResourceID = "[nxFileLine][V-219275][medium][SRG-OS-000064-GPOS-00033]::[Ubuntu]Baseline"; ContainsLine = "-a always,exit -F path=/usr/sbin/usermod -F perm=x -F auid>=1000 -F auid!=-1 -k privileged-usermod"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/sbin/usermod\\s*-F\\s*perm\\s*=\\s*x\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*-1\\s*-k\\s*privileged-usermod"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource101ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource63ref { ResourceID = "[nxFileLine][V-219276][medium][SRG-OS-000064-GPOS-00033]::[Ubuntu]Baseline"; ContainsLine = "-a always,exit -F path=/usr/bin/crontab -F perm=x -F auid>=1000 -F auid!=-1 -k privileged-crontab"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/bin/crontab\\s*-F\\s*perm\\s*=\\s*x\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*-1\\s*-k\\s*privileged-crontab"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource102ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource64ref { ResourceID = "[nxFileLine][V-219277][medium][SRG-OS-000064-GPOS-00033]::[Ubuntu]Baseline"; ContainsLine = "-a always,exit -F path=/usr/sbin/pam_timestamp_check -F perm=x -F auid>=1000 -F auid!=-1 -k privileged-pam_timestamp_check"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/sbin/pam_timestamp_check\\s*-F\\s*perm\\s*=\\s*x\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*-1\\s*-k\\s*privileged-pam_timestamp_check"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource103ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource65ref { ResourceID = "[nxFileLine][V-219279.a][medium][SRG-OS-000064-GPOS-00033]::[Ubuntu]Baseline"; ContainsLine = "-a always,exit -F arch=b32 -S finit_module -F auid>=1000 -F auid!=-1 -k module_chng"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*finit_module\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*-1\\s*-k\\s*module_chng"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource104ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource66ref { ResourceID = "[nxFileLine][V-219279.b][medium][SRG-OS-000064-GPOS-00033]::[Ubuntu]Baseline"; ContainsLine = "-a always,exit -F arch=b64 -S finit_module -F auid>=1000 -F auid!=-1 -k module_chng"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*finit_module\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*-1\\s*-k\\s*module_chng"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource105ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource67ref { ResourceID = "[nxFileLine][V-219281.a][medium][SRG-OS-000326-GPOS-00126]::[Ubuntu]Baseline"; ContainsLine = "-a always,exit -F arch=b64 -S execve -C uid!=euid -F euid=0 -F key=execpriv"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*execve\\s*-C\\s*uid!\\s*=\\s*euid\\s*-F\\s*euid\\s*=\\s*0\\s*-F\\s*key\\s*=\\s*execpriv"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource106ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource68ref { ResourceID = "[nxFileLine][V-219281.b][medium][SRG-OS-000326-GPOS-00126]::[Ubuntu]Baseline"; ContainsLine = "-a always,exit -F arch=b64 -S execve -C gid!=egid -F egid=0 -F key=execpriv"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*execve\\s*-C\\s*gid!\\s*=\\s*egid\\s*-F\\s*egid\\s*=\\s*0\\s*-F\\s*key\\s*=\\s*execpriv"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource107ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource69ref { ResourceID = "[nxFileLine][V-219281.c][medium][SRG-OS-000326-GPOS-00126]::[Ubuntu]Baseline"; ContainsLine = "-a always,exit -F arch=b32 -S execve -C uid!=euid -F euid=0 -F key=execpriv"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*execve\\s*-C\\s*uid!\\s*=\\s*euid\\s*-F\\s*euid\\s*=\\s*0\\s*-F\\s*key\\s*=\\s*execpriv"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource108ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource70ref { ResourceID = "[nxFileLine][V-219281.d][medium][SRG-OS-000326-GPOS-00126]::[Ubuntu]Baseline"; ContainsLine = "-a always,exit -F arch=b32 -S execve -C gid!=egid -F egid=0 -F key=execpriv"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*execve\\s*-C\\s*gid!\\s*=\\s*egid\\s*-F\\s*egid\\s*=\\s*0\\s*-F\\s*key\\s*=\\s*execpriv"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource109ref -{ -ResourceID = "[nxFileLine][V-219284.a][medium][SRG-OS-000462-GPOS-00206]::[Ubuntu]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S fsetxattr -F auid>=1000 -F auid!=-1 -k perm_chng"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*fsetxattr\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*-1\\s*-k\\s*perm_chng"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource110ref -{ -ResourceID = "[nxFileLine][V-219284.b][medium][SRG-OS-000462-GPOS-00206]::[Ubuntu]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S fsetxattr -F auid>=1000 -F auid!=-1 -k perm_chng"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*fsetxattr\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*-1\\s*-k\\s*perm_chng"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource111ref -{ -ResourceID = "[nxFileLine][V-219285.a][medium][SRG-OS-000462-GPOS-00206]::[Ubuntu]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S removexattr -F auid>=1000 -F auid!=-1 -k perm_chng"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*removexattr\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*-1\\s*-k\\s*perm_chng"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource112ref -{ -ResourceID = "[nxFileLine][V-219285.b][medium][SRG-OS-000462-GPOS-00206]::[Ubuntu]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S removexattr -F auid>=1000 -F auid!=-1 -k perm_chng"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*removexattr\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*-1\\s*-k\\s*perm_chng"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource113ref -{ -ResourceID = "[nxFileLine][V-219286.a][medium][SRG-OS-000462-GPOS-00206]::[Ubuntu]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S lremovexattr -F auid>=1000 -F auid!=-1 -k perm_chng"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*lremovexattr\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*-1\\s*-k\\s*perm_chng"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource114ref -{ -ResourceID = "[nxFileLine][V-219286.b][medium][SRG-OS-000462-GPOS-00206]::[Ubuntu]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S lremovexattr -F auid>=1000 -F auid!=-1 -k perm_chng"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*lremovexattr\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*-1\\s*-k\\s*perm_chng"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource115ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource71ref { ResourceID = "[nxFileLine][V-219287.a][medium][SRG-OS-000468-GPOS-00212]::[Ubuntu]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S unlink -F auid>=1000 -F auid!=-1 -k delete"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + ContainsLine = "-a always,exit -F arch=b64 -S unlink,unlinkat,rename,renameat,rmdir -F auid>=1000 -F auid!=-1 -k delete"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*unlink\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*-1\\s*-k\\s*delete"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*unlink,unlinkat,rename,renameat,rmdir\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*-1\\s*-k\\s*delete"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource116ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource72ref { ResourceID = "[nxFileLine][V-219287.b][medium][SRG-OS-000468-GPOS-00212]::[Ubuntu]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S unlink -F auid>=1000 -F auid!=-1 -k delete"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + ContainsLine = "-a always,exit -F arch=b32 -S unlink,unlinkat,rename,renameat,rmdir -F auid>=1000 -F auid!=-1 -k delete"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*unlink\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*-1\\s*-k\\s*delete"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*unlink,unlinkat,rename,renameat,rmdir\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*-1\\s*-k\\s*delete"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource117ref -{ -ResourceID = "[nxFileLine][V-219288.a][medium][SRG-OS-000468-GPOS-00212]::[Ubuntu]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S unlinkat -F auid>=1000 -F auid!=-1 -k delete"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*unlinkat\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*-1\\s*-k\\s*delete"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource118ref -{ -ResourceID = "[nxFileLine][V-219288.b][medium][SRG-OS-000468-GPOS-00212]::[Ubuntu]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S unlinkat -F auid>=1000 -F auid!=-1 -k delete"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*unlinkat\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*-1\\s*-k\\s*delete"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource119ref -{ -ResourceID = "[nxFileLine][V-219289.a][medium][SRG-OS-000468-GPOS-00212]::[Ubuntu]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S rename -F auid>=1000 -F auid!=-1 -k delete"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*rename\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*-1\\s*-k\\s*delete"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource120ref -{ -ResourceID = "[nxFileLine][V-219289.b][medium][SRG-OS-000468-GPOS-00212]::[Ubuntu]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S rename -F auid>=1000 -F auid!=-1 -k delete"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*rename\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*-1\\s*-k\\s*delete"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource121ref -{ -ResourceID = "[nxFileLine][V-219290.a][medium][SRG-OS-000468-GPOS-00212]::[Ubuntu]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S renameat -F auid>=1000 -F auid!=-1 -k delete"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*renameat\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*-1\\s*-k\\s*delete"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource122ref -{ -ResourceID = "[nxFileLine][V-219290.b][medium][SRG-OS-000468-GPOS-00212]::[Ubuntu]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S renameat -F auid>=1000 -F auid!=-1 -k delete"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*renameat\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*-1\\s*-k\\s*delete"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource123ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource73ref { ResourceID = "[nxFileLine][V-219291.a][medium][SRG-OS-000471-GPOS-00216]::[Ubuntu]Baseline"; ContainsLine = "-a always,exit -F arch=b32 -S init_module -S finit_module -k modules"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*init_module\\s*-S\\s*finit_module\\s*-k\\s*modules"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource124ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource74ref { ResourceID = "[nxFileLine][V-219291.b][medium][SRG-OS-000471-GPOS-00216]::[Ubuntu]Baseline"; ContainsLine = "-a always,exit -F arch=b64 -S init_module -S finit_module -k modules"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*init_module\\s*-S\\s*finit_module\\s*-k\\s*modules"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource125ref -{ -ResourceID = "[nxFileLine][V-219293.a][medium][SRG-OS-000474-GPOS-00219]::[Ubuntu]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S truncate -F exit=-EPERM -F auid>=1000 -F auid!=-1 -k perm_access"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*truncate\\s*-F\\s*exit\\s*=\\s*-EPERM\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*-1\\s*-k\\s*perm_access"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource126ref -{ -ResourceID = "[nxFileLine][V-219293.b][medium][SRG-OS-000474-GPOS-00219]::[Ubuntu]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S truncate -F exit=-EACCES -F auid>=1000 -F auid!=-1 -k perm_access"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*truncate\\s*-F\\s*exit\\s*=\\s*-EACCES\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*-1\\s*-k\\s*perm_access"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource127ref -{ -ResourceID = "[nxFileLine][V-219293.c][medium][SRG-OS-000474-GPOS-00219]::[Ubuntu]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S truncate -F exit=-EPERM -F auid>=1000 -F auid!=-1 -k perm_access"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*truncate\\s*-F\\s*exit\\s*=\\s*-EPERM\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*-1\\s*-k\\s*perm_access"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource128ref -{ -ResourceID = "[nxFileLine][V-219293.d][medium][SRG-OS-000474-GPOS-00219]::[Ubuntu]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S truncate -F exit=-EACCES -F auid>=1000 -F auid!=-1 -k perm_access"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*truncate\\s*-F\\s*exit\\s*=\\s*-EACCES\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*-1\\s*-k\\s*perm_access"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource129ref -{ -ResourceID = "[nxFileLine][V-219294.a][medium][SRG-OS-000474-GPOS-00219]::[Ubuntu]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S ftruncate -F exit=-EPERM -F auid>=1000 -F auid!=-1 -k perm_access"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*ftruncate\\s*-F\\s*exit\\s*=\\s*-EPERM\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*-1\\s*-k\\s*perm_access"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource130ref -{ -ResourceID = "[nxFileLine][V-219294.b][medium][SRG-OS-000474-GPOS-00219]::[Ubuntu]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S ftruncate -F exit=-EACCES -F auid>=1000 -F auid!=-1 -k perm_access"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*ftruncate\\s*-F\\s*exit\\s*=\\s*-EACCES\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*-1\\s*-k\\s*perm_access"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource131ref -{ -ResourceID = "[nxFileLine][V-219294.c][medium][SRG-OS-000474-GPOS-00219]::[Ubuntu]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S ftruncate -F exit=-EPERM -F auid>=1000 -F auid!=-1 -k perm_access"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*ftruncate\\s*-F\\s*exit\\s*=\\s*-EPERM\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*-1\\s*-k\\s*perm_access"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource132ref -{ -ResourceID = "[nxFileLine][V-219294.d][medium][SRG-OS-000474-GPOS-00219]::[Ubuntu]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S ftruncate -F exit=-EACCES -F auid>=1000 -F auid!=-1 -k perm_access"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*ftruncate\\s*-F\\s*exit\\s*=\\s*-EACCES\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*-1\\s*-k\\s*perm_access"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource133ref -{ -ResourceID = "[nxFileLine][V-219295.a][medium][SRG-OS-000474-GPOS-00219]::[Ubuntu]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S creat -F exit=-EPERM -F auid>=1000 -F auid!=-1 -k perm_access"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*creat\\s*-F\\s*exit\\s*=\\s*-EPERM\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*-1\\s*-k\\s*perm_access"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource134ref -{ -ResourceID = "[nxFileLine][V-219295.b][medium][SRG-OS-000474-GPOS-00219]::[Ubuntu]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S creat -F exit=-EACCES -F auid>=1000 -F auid!=-1 -k perm_access"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*creat\\s*-F\\s*exit\\s*=\\s*-EACCES\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*-1\\s*-k\\s*perm_access"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource135ref -{ -ResourceID = "[nxFileLine][V-219295.c][medium][SRG-OS-000474-GPOS-00219]::[Ubuntu]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S creat -F exit=-EPERM -F auid>=1000 -F auid!=-1 -k perm_access"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*creat\\s*-F\\s*exit\\s*=\\s*-EPERM\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*-1\\s*-k\\s*perm_access"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource136ref -{ -ResourceID = "[nxFileLine][V-219295.d][medium][SRG-OS-000474-GPOS-00219]::[Ubuntu]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S creat -F exit=-EACCES -F auid>=1000 -F auid!=-1 -k perm_access"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*creat\\s*-F\\s*exit\\s*=\\s*-EACCES\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*-1\\s*-k\\s*perm_access"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource137ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource75ref { ResourceID = "[nxFileLine][V-219296.a][medium][SRG-OS-000477-GPOS-00222]::[Ubuntu]Baseline"; ContainsLine = "-a always,exit -F arch=b64 -S init_module -S finit_module -F key=modules"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*init_module\\s*-S\\s*finit_module\\s*-F\\s*key\\s*=\\s*modules"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource138ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource76ref { ResourceID = "[nxFileLine][V-219296.b][medium][SRG-OS-000477-GPOS-00222]::[Ubuntu]Baseline"; ContainsLine = "-a always,exit -F arch=b32 -S init_module -S finit_module -F key=modules"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*init_module\\s*-S\\s*finit_module\\s*-F\\s*key\\s*=\\s*modules"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource139ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource77ref { ResourceID = "[nxFileLine][V-219297.a][medium][SRG-OS-000477-GPOS-00222]::[Ubuntu]Baseline"; ContainsLine = "-a always,exit -F arch=b64 -S delete_module -F key=modules"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*delete_module\\s*-F\\s*key\\s*=\\s*modules"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource140ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource78ref { ResourceID = "[nxFileLine][V-219297.b][medium][SRG-OS-000477-GPOS-00222]::[Ubuntu]Baseline"; ContainsLine = "-a always,exit -F arch=b32 -S delete_module -F key=modules"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*delete_module\\s*-F\\s*key\\s*=\\s*modules"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource141ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource79ref { ResourceID = "[nxFileLine][V-219298][medium][SRG-OS-000477-GPOS-00222]::[Ubuntu]Baseline"; ContainsLine = "-w /sbin/modprobe -p x -k modules"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "#\\s*-w\\s*/sbin/modprobe\\s*-p\\s*x\\s*-k\\s*modules"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource142ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource80ref { ResourceID = "[nxFileLine][V-219299][medium][SRG-OS-000477-GPOS-00222]::[Ubuntu]Baseline"; ContainsLine = "-w /bin/kmod -p x -k module"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "#\\s*-w\\s*/bin/kmod\\s*-p\\s*x\\s*-k\\s*module"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource143ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource81ref { ResourceID = "[nxFileLine][V-219300][medium][SRG-OS-000477-GPOS-00222]::[Ubuntu]Baseline"; ContainsLine = "-w /sbin/fdisk -p x -k fdisk"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/audit/rules.d/audit.rules"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "#\\s*-w\\s*/sbin/fdisk\\s*-p\\s*x\\s*-k\\s*fdisk"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource144ref -{ -ResourceID = "[nxFileLine][V-219301][low][SRG-OS-000027-GPOS-00008]::[Ubuntu]Baseline"; - ContainsLine = "* hard maxlogins 10"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/security/limits.conf"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "^\\s*\\*\\s*hard\\s*maxlogins\\s*([1][1-9]|[2-9]\\d+|[1-9][0-9]\\d+)$|^#\\s*\\*\\s*hard\\s*maxlogins.*"; - ConfigurationName = "LinuxBaseLine"; -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource145ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource82ref { ResourceID = "[nxFileLine][V-219303.b][medium][SRG-OS-000029-GPOS-00010]::[Ubuntu]Baseline"; ContainsLine = "TMOUT=900"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/profile.d/autologout.sh"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "^\\s*TMOUT\\s*=\\s*[0-8]?[0-9]?[0-9]?$|^#\\s*TMOUT.*"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource146ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource83ref { ResourceID = "[nxFileLine][V-219303.c][medium][SRG-OS-000029-GPOS-00010]::[Ubuntu]Baseline"; ContainsLine = "readonly TMOUT"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/profile.d/autologout.sh"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "^\\s*readonly\\s+(?!TMOUT\\b).*$|^\\s*#\\s*readonly.*$"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource147ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource84ref { ResourceID = "[nxFileLine][V-219303.d][medium][SRG-OS-000029-GPOS-00010]::[Ubuntu]Baseline"; ContainsLine = "export TMOUT"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/profile.d/autologout.sh"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "^\\s*export\\s+(?!TMOUT\\b).*$|^\\s*#\\s*export.*$"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource148ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource85ref { ResourceID = "[nxFileLine][V-219306.a][medium][SRG-OS-000032-GPOS-00013]::[Ubuntu]Baseline"; ContainsLine = "auth.*,authpriv.* /var/log/secure"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/rsyslog.d/50-default.conf"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "#\\s*auth\\.\\*,\\s*authpriv\\.\\*.*"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource149ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource86ref { ResourceID = "[nxFileLine][V-219306.b][medium][SRG-OS-000032-GPOS-00013]::[Ubuntu]Baseline"; ContainsLine = "daemon.notice /var/log/messages"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/rsyslog.d/50-default.conf"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "#\\s*daemon.notice.*"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource150ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource87ref { ResourceID = "[nxFileLine][V-219307][medium][SRG-OS-000033-GPOS-00014]::[Ubuntu]Baseline"; ContainsLine = "Ciphers aes256-ctr,aes192-ctr,aes128-ctr"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/ssh/sshd_config"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "^#\\s*Ciphers.*|^\\s*Ciphers\\s*aes128-ctr.*|^\\s*Ciphers\\s*aes192-ctr.*"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource151ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource88ref { ResourceID = "[nxFileLine][V-219308][high][SRG-OS-000112-GPOS-00057]::[Ubuntu]Baseline"; ContainsLine = "Protocol 2"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/ssh/sshd_config"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "^#\\s*Protocol.*$|^Protocol\\s*(?!2\\b)\\w*$"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource152ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource89ref { ResourceID = "[nxFileLine][V-219309][medium][SRG-OS-000125-GPOS-00065]::[Ubuntu]Baseline"; ContainsLine = "UsePAM yes"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/ssh/sshd_config"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "#\\s*UsePAM\\s*yes"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource153ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource90ref { ResourceID = "[nxFileLine][V-219310][medium][SRG-OS-000126-GPOS-00066]::[Ubuntu]Baseline"; ContainsLine = "ClientAliveCountMax 1"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/ssh/sshd_config"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "^#\\s*ClientAliveCountMax.*$|^ClientAliveCountMax\\s*(?!1\\b)\\w*$"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource154ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource91ref { ResourceID = "[nxFileLine][V-219311][medium][SRG-OS-000163-GPOS-00072]::[Ubuntu]Baseline"; ContainsLine = "ClientAliveInterval 600"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/ssh/sshd_config"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "^\\s*ClientAliveInterval\\s*[0-5]?[0-9]?[0-9]?\\s*$|^#\\s*ClientAliveInterval.*|^\\s*ClientAliveInterval\\s*$"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource155ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource92ref { ResourceID = "[nxFileLine][V-219312][medium][SRG-OS-000250-GPOS-00093]::[Ubuntu]Baseline"; ContainsLine = "MACs hmac-sha2-512,hmac-sha2-256"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/ssh/sshd_config"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "#\\s*MACs.*|\\s*MACs\\s*hmac-(?!sha2-512).*"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource156ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource93ref { ResourceID = "[nxFileLine][V-219314.a][high][SRG-OS-000480-GPOS-00229]::[Ubuntu]Baseline"; ContainsLine = "PermitEmptyPasswords no"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/ssh/sshd_config"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "^#\\s*PermitEmptyPasswords.*$|^PermitEmptyPasswords\\s*(?!no\\b)\\w*$"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource157ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource94ref { ResourceID = "[nxFileLine][V-219314.b][high][SRG-OS-000480-GPOS-00229]::[Ubuntu]Baseline"; ContainsLine = "PermitUserEnvironment no"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/ssh/sshd_config"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "^#\\s*PermitUserEnvironment.*$|^PermitUserEnvironment\\s*(?!no\\b)\\w*$"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource158ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource95ref { ResourceID = "[nxFileLine][V-219328][medium][SRG-OS-000480-GPOS-00228]::[Ubuntu]Baseline"; ContainsLine = "UMASK 077"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/login.defs"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "^\\s*UMASK(?!\\s077\\b)\\s*\\d*\\s*$|^#\\s*UMASK.*"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource159ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource96ref { ResourceID = "[nxFileLine][V-219339.b][medium][SRG-OS-000378-GPOS-00163]::[Ubuntu]Baseline"; ContainsLine = "install usb-storage /bin/true"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/modprobe.d/DISASTIG.conf"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "#\\s*install\\s*usb-storage\\s*/bin/true"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource160ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource97ref { ResourceID = "[nxFileLine][V-219339.c][medium][SRG-OS-000378-GPOS-00163]::[Ubuntu]Baseline"; ContainsLine = "blacklist usb-storage"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/modprobe.d/DISASTIG.conf"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "#\\s*blacklist\\s*usb-storage"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource161ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource98ref { ResourceID = "[nxFileLine][V-233779][medium][SRG-OS-000480-GPOS-00227]::[Ubuntu]Baseline"; ContainsLine = "X11Forwarding no"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/ssh/sshd_config"; ModuleName = "nx"; ModuleVersion = "1.0"; DoesNotContainPattern = "^#\\s*X11Forwarding.*$|^X11Forwarding\\s*(?!no\\b)\\w*$"; ConfigurationName = "LinuxBaseLine"; }; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource162ref +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource99ref { ResourceID = "[nxFileLine][V-233780][medium][SRG-OS-000480-GPOS-00227]::[Ubuntu]Baseline"; ContainsLine = "X11UseLocalhost yes"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; FilePath = "/etc/ssh/sshd_config"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -1972,7 +1279,7 @@ ResourceID = "[nxService][V-219160.b][medium][SRG-OS-000269-GPOS-00103]::[Ubuntu Controller = "systemd"; State = "Running"; Enabled = True; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxService.ps1::22::9::nxService"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxService.ps1::22::9::nxService"; Name = "rsyslog"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -1984,7 +1291,7 @@ ResourceID = "[nxService][V-219225.b][medium][SRG-OS-000038-GPOS-00016]::[Ubuntu Controller = "systemd"; State = "Running"; Enabled = True; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxService.ps1::22::9::nxService"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxService.ps1::22::9::nxService"; Name = "auditd"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -1996,7 +1303,7 @@ ResourceID = "[nxService][V-219313.b][high][SRG-OS-000423-GPOS-00187]::[Ubuntu]B Controller = "systemd"; State = "Running"; Enabled = True; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxService.ps1::22::9::nxService"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxService.ps1::22::9::nxService"; Name = "sshd"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -2008,7 +1315,7 @@ ResourceID = "[nxService][V-219322.b][low][SRG-OS-000312-GPOS-00122]::[Ubuntu]Ba Controller = "systemd"; State = "Running"; Enabled = True; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxService.ps1::22::9::nxService"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxService.ps1::22::9::nxService"; Name = "apparmor"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -2019,7 +1326,7 @@ instance of MSFT_nxServiceResource as $MSFT_nxServiceResource5ref ResourceID = "[nxService][V-219335][medium][SRG-OS-000184-GPOS-00078]::[Ubuntu]Baseline"; Controller = "systemd"; Enabled = False; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxService.ps1::13::9::nxService"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxService.ps1::13::9::nxService"; Name = "kdump"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -2031,7 +1338,7 @@ ResourceID = "[nxService][V-219337][medium][SRG-OS-000297-GPOS-00115]::[Ubuntu]B Controller = "systemd"; State = "Running"; Enabled = True; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxService.ps1::22::9::nxService"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxService.ps1::22::9::nxService"; Name = "ufw"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -2042,7 +1349,7 @@ instance of MSFT_nxScriptResource as $MSFT_nxScriptResource1ref ResourceID = "[nxScript][V-219152.b][low][[Skip] SRG-OS-000343-GPOS-00134]::[Ubuntu]Baseline"; GetScript = "#!/bin/bash\necho [V-219152.b][low][[Skip] SRG-OS-000343-GPOS-00134]"; TestScript = "#!/bin/bash\nexit 0"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxScript.skip.ps1::10::5::nxScript"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxScript.skip.ps1::10::5::nxScript"; SetScript = "#!/bin/bash"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -2053,7 +1360,7 @@ instance of MSFT_nxScriptResource as $MSFT_nxScriptResource2ref ResourceID = "[nxScript][V-219153.c][low][[Skip] SRG-OS-000479-GPOS-00224]::[Ubuntu]Baseline"; GetScript = "#!/bin/bash\necho [V-219153.c][low][[Skip] SRG-OS-000479-GPOS-00224]"; TestScript = "#!/bin/bash\nexit 0"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxScript.skip.ps1::10::5::nxScript"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxScript.skip.ps1::10::5::nxScript"; SetScript = "#!/bin/bash"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -2064,7 +1371,7 @@ instance of MSFT_nxScriptResource as $MSFT_nxScriptResource3ref ResourceID = "[nxScript][V-219167.a][medium][[Skip] SRG-OS-000024-GPOS-00007]::[Ubuntu]Baseline"; GetScript = "#!/bin/bash\necho [V-219167.a][medium][[Skip] SRG-OS-000024-GPOS-00007]"; TestScript = "#!/bin/bash\nexit 0"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxScript.skip.ps1::10::5::nxScript"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxScript.skip.ps1::10::5::nxScript"; SetScript = "#!/bin/bash"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -2075,7 +1382,7 @@ instance of MSFT_nxScriptResource as $MSFT_nxScriptResource4ref ResourceID = "[nxScript][V-219167.b][medium][[Skip] SRG-OS-000024-GPOS-00007]::[Ubuntu]Baseline"; GetScript = "#!/bin/bash\necho [V-219167.b][medium][[Skip] SRG-OS-000024-GPOS-00007]"; TestScript = "#!/bin/bash\nexit 0"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxScript.skip.ps1::10::5::nxScript"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxScript.skip.ps1::10::5::nxScript"; SetScript = "#!/bin/bash"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -2086,7 +1393,7 @@ instance of MSFT_nxScriptResource as $MSFT_nxScriptResource5ref ResourceID = "[nxScript][V-219167.c][medium][[Skip] SRG-OS-000024-GPOS-00007]::[Ubuntu]Baseline"; GetScript = "#!/bin/bash\necho [V-219167.c][medium][[Skip] SRG-OS-000024-GPOS-00007]"; TestScript = "#!/bin/bash\nexit 0"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxScript.skip.ps1::10::5::nxScript"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxScript.skip.ps1::10::5::nxScript"; SetScript = "#!/bin/bash"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -2097,7 +1404,7 @@ instance of MSFT_nxScriptResource as $MSFT_nxScriptResource6ref ResourceID = "[nxScript][V-219159][medium][[Skip] SRG-OS-000191-GPOS-00080]::[Ubuntu]Baseline"; GetScript = "#!/bin/bash\necho [V-219159][medium][[Skip] SRG-OS-000191-GPOS-00080]"; TestScript = "#!/bin/bash\nexit 0"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.11.0\\DSCResources\\Resources\\linux.nxScript.skip.ps1::10::5::nxScript"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.12.1\\DSCResources\\Resources\\linux.nxScript.skip.ps1::10::5::nxScript"; SetScript = "#!/bin/bash"; ModuleName = "nx"; ModuleVersion = "1.0"; @@ -2114,7 +1421,7 @@ instance of OMI_ConfigurationDocument Author="Microsoft"; - GenerationDate="01/31/2022 17:13:26"; + GenerationDate="05/04/2022 09:09:33"; GenerationHost="Microsoft"; diff --git a/stig/linux/config/localhost.mof b/stig/linux/config/localhost.mof index d4363af..f9d2636 100644 --- a/stig/linux/config/localhost.mof +++ b/stig/linux/config/localhost.mof @@ -1,7 +1,7 @@ /* @TargetNode='localhost' @GeneratedBy=Microsoft -@GenerationDate=01/31/2022 17:13:26 +@GenerationDate=05/04/2022 09:09:33 @GenerationHost=Microsoft */ @@ -27,7 +27,7 @@ instance of OMI_ConfigurationDocument Author="Microsoft"; - GenerationDate="01/31/2022 17:13:26"; + GenerationDate="05/04/2022 09:09:33"; GenerationHost="Microsoft"; diff --git a/stig/linux/config/rhel8STIG-ansible.zip b/stig/linux/config/rhel8STIG-ansible.zip index 509e809..d0047f3 100644 Binary files a/stig/linux/config/rhel8STIG-ansible.zip and b/stig/linux/config/rhel8STIG-ansible.zip differ