diff --git a/stig/linux/config/CentOS74.mof b/stig/linux/config/CentOS74.mof index ff50b9f..3d1ae01 100644 --- a/stig/linux/config/CentOS74.mof +++ b/stig/linux/config/CentOS74.mof @@ -1,2118 +1,1829 @@ -/* -@TargetNode='CentOS74' -@GeneratedBy=Microsoft -@GenerationDate=06/30/2022 11:38:45 -@GenerationHost=Microsoft -*/ - -instance of MSFT_nxPackageResource as $MSFT_nxPackageResource1ref -{ -ResourceID = "[nxPackage][V-204442][high][SRG-OS-000095-GPOS-00049]::[RHEL]Baseline"; - Ensure = "Absent"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxPackage.ps1::8::5::nxPackage"; - Name = "rsh-server"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxPackageResource as $MSFT_nxPackageResource2ref -{ -ResourceID = "[nxPackage][V-204443][high][SRG-OS-000095-GPOS-00049]::[RHEL]Baseline"; - Ensure = "Absent"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxPackage.ps1::8::5::nxPackage"; - Name = "ypserv"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxPackageResource as $MSFT_nxPackageResource3ref -{ -ResourceID = "[nxPackage][V-204497][high][SRG-OS-000033-GPOS-00014]::[RHEL]Baseline"; - Ensure = "Present"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxPackage.ps1::8::5::nxPackage"; - Name = "dracut-fips"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxPackageResource as $MSFT_nxPackageResource4ref -{ -ResourceID = "[nxPackage][V-204498][low][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; - Ensure = "Present"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxPackage.ps1::8::5::nxPackage"; - Name = "aide"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxPackageResource as $MSFT_nxPackageResource5ref -{ -ResourceID = "[nxPackage][V-204502][high][SRG-OS-000095-GPOS-00049]::[RHEL]Baseline"; - Ensure = "Absent"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxPackage.ps1::8::5::nxPackage"; - Name = "telnet-server"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxPackageResource as $MSFT_nxPackageResource6ref -{ -ResourceID = "[nxPackage][V-204585][medium][SRG-OS-000423-GPOS-00187]::[RHEL]Baseline"; - Ensure = "Present"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxPackage.ps1::8::5::nxPackage"; - Name = "openssh-server"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxPackageResource as $MSFT_nxPackageResource7ref -{ -ResourceID = "[nxPackage][V-204604.a][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; - Ensure = "Present"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxPackage.ps1::8::5::nxPackage"; - Name = "firewalld"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxPackageResource as $MSFT_nxPackageResource8ref -{ -ResourceID = "[nxPackage][V-204620][high][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; - Ensure = "Absent"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxPackage.ps1::8::5::nxPackage"; - Name = "vsftpd"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxPackageResource as $MSFT_nxPackageResource9ref -{ -ResourceID = "[nxPackage][V-204621][high][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; - Ensure = "Absent"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxPackage.ps1::8::5::nxPackage"; - Name = "tftp-server"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxPackageResource as $MSFT_nxPackageResource10ref -{ -ResourceID = "[nxPackage][V-204631][medium][SRG-OS-000375-GPOS-00160]::[RHEL]Baseline"; - Ensure = "Present"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxPackage.ps1::8::5::nxPackage"; - Name = "pam_pkcs11"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileResource as $MSFT_nxFileResource1ref -{ -ResourceID = "[nxFile][V-204395][medium][SRG-OS-000023-GPOS-00006]::[RHEL]Baseline"; - Contents = "You are accessing a U.S. Government (USG) Information System (IS) that is provided for USG-authorized use only.\n\nBy using this IS (which includes any device attached to this IS), you consent to the following conditions:\n\n-The USG routinely intercepts and monitors communications on this IS for purposes including, but not limited to, penetration testing, COMSEC monitoring, network operations and defense, personnel misconduct (PM), law enforcement (LE), and counterintelligence (CI) investigations.\n\n-At any time, the USG may inspect and seize data stored on this IS.\n\n-Communications using, or data stored on, this IS are not private, are subject to routine monitoring, interception, and search, and may be disclosed or used for any USG-authorized purpose.\n\n-This IS includes security measures (e.g., authentication and access controls) to protect USG interests--not for your personal benefit or privacy.\n\n-Notwithstanding the above, using this IS does not constitute consent to PM, LE or CI investigative searching or monitoring of the content of privileged communications, or work product, related to personal representation or services by attorneys, psychotherapists, or clergy, and their assistants. Such communications and work product are private and confidential. See User Agreement for details."; - DestinationPath = "/etc/issue"; - ModuleName = "nx"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; - ModuleVersion = "1.0"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileResource as $MSFT_nxFileResource2ref -{ -ResourceID = "[nxFile][V-204449.a][medium][SRG-OS-000114-GPOS-00059]::[RHEL]Baseline"; - Contents = ""; - DestinationPath = "/etc/modprobe.d/usb-storage.conf"; - ModuleName = "nx"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; - ModuleVersion = "1.0"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileResource as $MSFT_nxFileResource3ref -{ -ResourceID = "[nxFile][V-204449.b][medium][SRG-OS-000114-GPOS-00059]::[RHEL]Baseline"; - Contents = ""; - DestinationPath = "/etc/modprobe.d/blacklist.conf"; - ModuleName = "nx"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; - ModuleVersion = "1.0"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileResource as $MSFT_nxFileResource4ref -{ -ResourceID = "[nxFile][V-204450.a][medium][SRG-OS-000378-GPOS-00163]::[RHEL]Baseline"; - Contents = ""; - DestinationPath = "/etc/modprobe.d/dccp.conf"; - ModuleName = "nx"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; - ModuleVersion = "1.0"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileResource as $MSFT_nxFileResource5ref -{ -ResourceID = "[nxFile][V-204576][low][SRG-OS-000027-GPOS-00008]::[RHEL]Baseline"; - Contents = "* hard maxlogins 10"; - DestinationPath = "/etc/security/limits.d/204576-powerstig.conf"; - ModuleName = "nx"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; - ModuleVersion = "1.0"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileResource as $MSFT_nxFileResource6ref -{ -ResourceID = "[nxFile][V-204579.a][medium][SRG-OS-000163-GPOS-00072]::[RHEL]Baseline"; - Contents = ""; - DestinationPath = "/etc/profile.d/tmout.sh"; - ModuleName = "nx"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; - ModuleVersion = "1.0"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileResource as $MSFT_nxFileResource7ref -{ -ResourceID = "[nxFile][V-204584][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; - Contents = "kernel.randomize_va_space = 2"; - DestinationPath = "/etc/sysctl.d/204584-powerstig.conf"; - ModuleName = "nx"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; - ModuleVersion = "1.0"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileResource as $MSFT_nxFileResource8ref -{ -ResourceID = "[nxFile][V-204609][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; - Contents = "net.ipv4.conf.all.accept_source_route = 0"; - DestinationPath = "/etc/sysctl.d/204609-powerstig.conf"; - ModuleName = "nx"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; - ModuleVersion = "1.0"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileResource as $MSFT_nxFileResource9ref -{ -ResourceID = "[nxFile][V-204610][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; - Contents = "net.ipv4.conf.all.rp_filter = 1"; - DestinationPath = "/etc/sysctl.d/204610-powerstig.conf"; - ModuleName = "nx"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; - ModuleVersion = "1.0"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileResource as $MSFT_nxFileResource10ref -{ -ResourceID = "[nxFile][V-204611][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; - Contents = "net.ipv4.conf.default.rp_filter = 1"; - DestinationPath = "/etc/sysctl.d/204611-powerstig.conf"; - ModuleName = "nx"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; - ModuleVersion = "1.0"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileResource as $MSFT_nxFileResource11ref -{ -ResourceID = "[nxFile][V-204612][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; - Contents = "net.ipv4.conf.default.accept_source_route = 0"; - DestinationPath = "/etc/sysctl.d/204612-powerstig.conf"; - ModuleName = "nx"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; - ModuleVersion = "1.0"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileResource as $MSFT_nxFileResource12ref -{ -ResourceID = "[nxFile][V-204613][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; - Contents = "net.ipv4.icmp_echo_ignore_broadcasts = 1"; - DestinationPath = "/etc/sysctl.d/204613-powerstig.conf"; - ModuleName = "nx"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; - ModuleVersion = "1.0"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileResource as $MSFT_nxFileResource13ref -{ -ResourceID = "[nxFile][V-204614][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; - Contents = "net.ipv4.conf.default.accept_redirects = 0"; - DestinationPath = "/etc/sysctl.d/204614-powerstig.conf"; - ModuleName = "nx"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; - ModuleVersion = "1.0"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileResource as $MSFT_nxFileResource14ref -{ -ResourceID = "[nxFile][V-204615][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; - Contents = "net.ipv4.conf.all.accept_redirects = 0"; - DestinationPath = "/etc/sysctl.d/204615-powerstig.conf"; - ModuleName = "nx"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; - ModuleVersion = "1.0"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileResource as $MSFT_nxFileResource15ref -{ -ResourceID = "[nxFile][V-204616][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; - Contents = "net.ipv4.conf.default.send_redirects = 0"; - DestinationPath = "/etc/sysctl.d/204616-powerstig.conf"; - ModuleName = "nx"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; - ModuleVersion = "1.0"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileResource as $MSFT_nxFileResource16ref -{ -ResourceID = "[nxFile][V-204617][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; - Contents = "net.ipv4.conf.all.send_redirects = 0"; - DestinationPath = "/etc/sysctl.d/204617-powerstig.conf"; - ModuleName = "nx"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; - ModuleVersion = "1.0"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileResource as $MSFT_nxFileResource17ref -{ -ResourceID = "[nxFile][V-204625][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; - Contents = "net.ipv4.ip_forward = 0"; - DestinationPath = "/etc/sysctl.d/204625-powerstig.conf"; - ModuleName = "nx"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; - ModuleVersion = "1.0"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileResource as $MSFT_nxFileResource18ref -{ -ResourceID = "[nxFile][V-204630][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; - Contents = "net.ipv6.conf.all.accept_source_route = 0"; - DestinationPath = "/etc/sysctl.d/204630-powerstig.conf"; - ModuleName = "nx"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; - ModuleVersion = "1.0"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileResource as $MSFT_nxFileResource19ref -{ -ResourceID = "[nxFile][V-237634.a][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; - Contents = "Defaults !targetpw"; - DestinationPath = "/etc/sudoers.d/237634a-powerstig.conf"; - ModuleName = "nx"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; - ModuleVersion = "1.0"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileResource as $MSFT_nxFileResource20ref -{ -ResourceID = "[nxFile][V-237634.b][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; - Contents = "Defaults !rootpw"; - DestinationPath = "/etc/sudoers.d/237634b-powerstig.conf"; - ModuleName = "nx"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; - ModuleVersion = "1.0"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileResource as $MSFT_nxFileResource21ref -{ -ResourceID = "[nxFile][V-237634.c][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; - Contents = "Defaults !runaspw"; - DestinationPath = "/etc/sudoers.d/237634c-powerstig.conf"; - ModuleName = "nx"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; - ModuleVersion = "1.0"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileResource as $MSFT_nxFileResource22ref -{ -ResourceID = "[nxFile][V-237635][medium][SRG-OS-000373-GPOS-00156]::[RHEL]Baseline"; - Contents = "Defaults timestamp_timeout=0"; - DestinationPath = "/etc/sudoers.d/237635-powerstig.conf"; - ModuleName = "nx"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; - ModuleVersion = "1.0"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileResource as $MSFT_nxFileResource23ref -{ -ResourceID = "[nxFile][V-250314][medium][SRG-OS-000324-GPOS-00125]::[RHEL]Baseline"; - Contents = "%wheel ALL=(ALL) TYPE=sysadm_t ROLE=sysadm_r ALL"; - DestinationPath = "/etc/sudoers.d/250314-powerstig.conf"; - ModuleName = "nx"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; - ModuleVersion = "1.0"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource1ref -{ -ResourceID = "[nxFileLine][V-204405][medium][SRG-OS-000069-GPOS-00037]::[RHEL]Baseline"; - ContainsLine = "password substack system-auth"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/pam.d/passwd"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "^\\s*password(?:\\t*|\\s*)substack\\tsystem-auth\\s*$|^#\\s*password\\s*substack\\s*system-auth.*"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource2ref -{ -ResourceID = "[nxFileLine][V-204407][medium][SRG-OS-000069-GPOS-00037]::[RHEL]Baseline"; - ContainsLine = "ucredit = -1"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/security/pwquality.conf"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "^#\\s*ucredit.*$|^ucredit\\s*=\\s*(?!-1\\b)\\w*$"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource3ref -{ -ResourceID = "[nxFileLine][V-204408][medium][SRG-OS-000070-GPOS-00038]::[RHEL]Baseline"; - ContainsLine = "lcredit = -1"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/security/pwquality.conf"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "^#\\s*lcredit.*$|^lcredit\\s*=\\s*(?!-1\\b)\\w*$"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource4ref -{ -ResourceID = "[nxFileLine][V-204409][medium][SRG-OS-000071-GPOS-00039]::[RHEL]Baseline"; - ContainsLine = "dcredit = -1"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/security/pwquality.conf"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "^#\\s*dcredit.*$|^dcredit\\s*=\\s*(?!-1\\b)\\w*$"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource5ref -{ -ResourceID = "[nxFileLine][V-204410][medium][SRG-OS-000266-GPOS-00101]::[RHEL]Baseline"; - ContainsLine = "ocredit=-1"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/security/pwquality.conf"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "^#\\s*ocredit.*$|^ocredit\\s*=\\s*(?!-1)\\w*$"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource6ref -{ -ResourceID = "[nxFileLine][V-204411][medium][SRG-OS-000072-GPOS-00040]::[RHEL]Baseline"; - ContainsLine = "difok = 8"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/security/pwquality.conf"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*difok\\s*=.*|^\\s*difok\\s*=\\s*(-|)[0-7]$"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource7ref -{ -ResourceID = "[nxFileLine][V-204412][medium][SRG-OS-000072-GPOS-00040]::[RHEL]Baseline"; - ContainsLine = "minclass = 4"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/security/pwquality.conf"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "^#\\s*minclass\\s*=.*|^\\s*minclass\\s*=\\s*(?!\\d{2,})[1-3]"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource8ref -{ -ResourceID = "[nxFileLine][V-204413][medium][SRG-OS-000072-GPOS-00040]::[RHEL]Baseline"; - ContainsLine = "maxrepeat = 3"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/security/pwquality.conf"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "^#\\s*maxrepeat\\s*=.*|^\\s*maxrepeat\\s*=\\s*(?:\\d{2,}|[4-9])"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource9ref -{ -ResourceID = "[nxFileLine][V-204414][medium][SRG-OS-000072-GPOS-00040]::[RHEL]Baseline"; - ContainsLine = "maxclassrepeat = 4"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/security/pwquality.conf"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "^#\\s*maxclassrepeat\\s*=.*|^\\s*maxclassrepeat\\s*=\\s*(?:\\d{2,}|[1-3|5-9])"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource10ref -{ -ResourceID = "[nxFileLine][V-204416][medium][SRG-OS-000073-GPOS-00041]::[RHEL]Baseline"; - ContainsLine = "ENCRYPT_METHOD SHA512"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/login.defs"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*ENCRYPT_METHOD\\s*SHA512"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource11ref -{ -ResourceID = "[nxFileLine][V-204418][medium][SRG-OS-000075-GPOS-00043]::[RHEL]Baseline"; - ContainsLine = "PASS_MIN_DAYS 1"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/login.defs"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "^\\s*PASS_MIN_DAYS\\s*[0]*$|#\\s*PASS_MIN_DAYS.*"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource12ref -{ -ResourceID = "[nxFileLine][V-204420][medium][SRG-OS-000076-GPOS-00044]::[RHEL]Baseline"; - ContainsLine = "PASS_MAX_DAYS 60"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/login.defs"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "^\\s*PASS_MAX_DAYS\\s*([6][1-9]|[7-9][0-9]|\\d{3,})$|#\\s*PASS_MAX_DAYS.*"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource13ref -{ -ResourceID = "[nxFileLine][V-204423][medium][SRG-OS-000078-GPOS-00046]::[RHEL]Baseline"; - ContainsLine = "minlen = 15"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/security/pwquality.conf"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "^\\s*minlen\\s*=\\s*([0-9]|[1][1-4])$|#\\s*minlen.*"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource14ref -{ -ResourceID = "[nxFileLine][V-204425][high][SRG-OS-000106-GPOS-00053]::[RHEL]Baseline"; - ContainsLine = "PermitEmptyPasswords no"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/ssh/sshd_config"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "^#\\s*PermitEmptyPasswords.*$|^PermitEmptyPasswords\\s*(?!no\\b)\\w*$"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource15ref -{ -ResourceID = "[nxFileLine][V-204426][medium][SRG-OS-000118-GPOS-00060]::[RHEL]Baseline"; - ContainsLine = "INACTIVE=35"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/default/useradd"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "^#\\s*INACTIVE\\s*=.*|^\\s*INACTIVE\\s*=\\s*(3[5-9]|[4-9]\\d+|\\d{3,})"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource16ref -{ -ResourceID = "[nxFileLine][V-204431][medium][SRG-OS-000480-GPOS-00226]::[RHEL]Baseline"; - ContainsLine = "FAIL_DELAY 4"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/login.defs"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "^#\\s*FAIL_DELAY.*|^FAIL_DELAY\\s*(?!\\d{2,})[1-3]"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource17ref -{ -ResourceID = "[nxFileLine][V-204434][medium][SRG-OS-000480-GPOS-00229]::[RHEL]Baseline"; - ContainsLine = "PermitUserEnvironment no"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/ssh/sshd_config"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "^#\\s*PermitUserEnvironment.*$|^PermitUserEnvironment\\s*(?!no\\b)\\w*$"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource18ref -{ -ResourceID = "[nxFileLine][V-204435][medium][SRG-OS-000480-GPOS-00229]::[RHEL]Baseline"; - ContainsLine = "HostbasedAuthentication no"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/ssh/sshd_config"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "^#\\s*HostbasedAuthentication.*$|^HostbasedAuthentication\\s*(?!no\\b)\\w*$"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource19ref -{ -ResourceID = "[nxFileLine][V-204447][high][SRG-OS-000366-GPOS-00153]::[RHEL]Baseline"; - ContainsLine = "gpgcheck=1"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/yum.conf"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*gpgcheck\\s*=\\s*1"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource20ref -{ -ResourceID = "[nxFileLine][V-204448][high][SRG-OS-000366-GPOS-00153]::[RHEL]Baseline"; - ContainsLine = "localpkg_gpgcheck=1"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/yum.conf"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*localpkg_gpgcheck\\s*=\\s*1"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource21ref -{ -ResourceID = "[nxFileLine][V-204449.c][medium][SRG-OS-000114-GPOS-00059]::[RHEL]Baseline"; - ContainsLine = "install usb-storage /bin/true"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/modprobe.d/usb-storage.conf"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*install\\s*usb-storage\\s*/bin/true"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource22ref -{ -ResourceID = "[nxFileLine][V-204449.d][medium][SRG-OS-000114-GPOS-00059]::[RHEL]Baseline"; - ContainsLine = "blacklist usb-storage"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/modprobe.d/blacklist.conf"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*blacklist\\s*usb-storage"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource23ref -{ -ResourceID = "[nxFileLine][V-204450.b][medium][SRG-OS-000378-GPOS-00163]::[RHEL]Baseline"; - ContainsLine = "install dccp /bin/true"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/modprobe.d/dccp.conf"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*install\\s*dccp\\s*/bin/true"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource24ref -{ -ResourceID = "[nxFileLine][V-204450.c][medium][SRG-OS-000378-GPOS-00163]::[RHEL]Baseline"; - ContainsLine = "blacklist dccp"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/modprobe.d/blacklist.conf"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*blacklist\\s*dccp"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource25ref -{ -ResourceID = "[nxFileLine][V-204452][low][SRG-OS-000437-GPOS-00194]::[RHEL]Baseline"; - ContainsLine = "clean_requirements_on_remove=1"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/yum.conf"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*clean_requirements_on_remove\\s*=\\s*1"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource26ref -{ -ResourceID = "[nxFileLine][V-204453][medium][SRG-OS-000445-GPOS-00199]::[RHEL]Baseline"; - ContainsLine = "SELINUX=enforcing"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/selinux/config"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "^#\\s*SELINUX.*$|^SELINUX\\s*=\\s*(?!enforcing)\\w*$"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource27ref -{ -ResourceID = "[nxFileLine][V-204454][medium][SRG-OS-000445-GPOS-00199]::[RHEL]Baseline"; - ContainsLine = "SELINUXTYPE=targeted"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/selinux/config"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "^#\\s*SELINUXTYPE.*$|^SELINUXTYPE\\s*=\\s*(?!targeted\\b)\\w*$"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource28ref -{ -ResourceID = "[nxFileLine][V-204457][medium][SRG-OS-000480-GPOS-00228]::[RHEL]Baseline"; - ContainsLine = "UMASK 077"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/login.defs"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "^\\s*UMASK(?!\\s077\\b)\\s*\\d*\\s*$|^#\\s*UMASK.*"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource29ref -{ -ResourceID = "[nxFileLine][V-204466][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; - ContainsLine = "CREATE_HOME yes"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/login.defs"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "^#\\s*CREATE_HOME.*$|^CREATE_HOME\\s*(?!yes\\b)\\w*$|^CREATE_HOME\\t.*"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource30ref -{ -ResourceID = "[nxFileLine][V-204504][medium][SRG-OS-000046-GPOS-00022]::[RHEL]Baseline"; - ContainsLine = "-f 2"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "^#\\s*-f\\s+2|^\\s*-f\\s*1"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileResource as $MSFT_nxFileResource24ref -{ -SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::29::9::nxFile"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - ResourceID = "[nxFile][V-204506.a][medium][SRG-OS-000342-GPOS-00133]::[RHEL]Baseline"; - DestinationPath = "/etc/audisp/plugins.d/au-remote.conf"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource31ref -{ -ResourceID = "[nxFileLine][V-204506.a][medium][SRG-OS-000342-GPOS-00133]::[RHEL]Baseline"; - ContainsLine = "active = yes"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audisp/plugins.d/au-remote.conf"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "\\s*active\\s*=\\s*no|active=yes|#\\s*active\\s*=.*"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource32ref -{ -ResourceID = "[nxFileLine][V-204506.b][medium][SRG-OS-000342-GPOS-00133]::[RHEL]Baseline"; - ContainsLine = "direction = out"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audisp/plugins.d/au-remote.conf"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*direction\\s*=\\s*out"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource33ref -{ -ResourceID = "[nxFileLine][V-204506.c][medium][SRG-OS-000342-GPOS-00133]::[RHEL]Baseline"; - ContainsLine = "path = /sbin/audisp-remote"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audisp/plugins.d/au-remote.conf"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*path\\s*=\\s*/sbin/audisp-remote"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource34ref -{ -ResourceID = "[nxFileLine][V-204506.d][medium][SRG-OS-000342-GPOS-00133]::[RHEL]Baseline"; - ContainsLine = "type = always"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audisp/plugins.d/au-remote.conf"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*type\\s*=\\s*always"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource35ref -{ -ResourceID = "[nxFileLine][V-204507][medium][SRG-OS-000342-GPOS-00133]::[RHEL]Baseline"; - ContainsLine = "overflow_action = syslog"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audisp/audispd.conf"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "^#\\s*overflow_action.*$|^overflow_action\\s*=\\s*(?!syslog$)\\w*$"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource36ref -{ -ResourceID = "[nxFileLine][V-204508][medium][SRG-OS-000342-GPOS-00133]::[RHEL]Baseline"; - ContainsLine = "name_format = hostname"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audisp/audispd.conf"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "^#\\s*name_format.*$|^name_format\\s*=\\s*(?!hostname$)\\w*$"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileResource as $MSFT_nxFileResource25ref -{ -SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::19::9::nxFile"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - ResourceID = "[nxFile][V-204510][medium][SRG-OS-000342-GPOS-00133]::[RHEL]Baseline"; - DestinationPath = "/etc/audisp/audisp-remote.conf"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource37ref -{ -ResourceID = "[nxFileLine][V-204510][medium][SRG-OS-000342-GPOS-00133]::[RHEL]Baseline"; - ContainsLine = "enable_krb5 = yes"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audisp/audisp-remote.conf"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*enable_krb5\\s*=\\s*yes"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource38ref -{ -ResourceID = "[nxFileLine][V-204511][medium][SRG-OS-000342-GPOS-00133]::[RHEL]Baseline"; - ContainsLine = "disk_full_action = single"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audisp/audisp-remote.conf"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "^#\\s*disk_full_action\\s*=.*|^disk_full_action\\s*=\\s*(?!halt\\b|single\\b|syslog\\b)\\w+"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource39ref -{ -ResourceID = "[nxFileLine][V-204512][medium][SRG-OS-000342-GPOS-00133]::[RHEL]Baseline"; - ContainsLine = "network_failure_action = syslog"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audisp/audisp-remote.conf"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "^#\\s*network_failure_action\\s*=.*|^network_failure_action\\s*=\\s*(?!halt\\b|single\\b|syslog\\b)\\w+"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource40ref -{ -ResourceID = "[nxFileLine][V-204514][medium][SRG-OS-000343-GPOS-00134]::[RHEL]Baseline"; - ContainsLine = "space_left_action = email"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/auditd.conf"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "^#\\s*space_left_action.*$|^space_left_action\\s*=\\s*(?!email$)\\w*$"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource41ref -{ -ResourceID = "[nxFileLine][V-204515][medium][SRG-OS-000343-GPOS-00134]::[RHEL]Baseline"; - ContainsLine = "action_mail_acct = root"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/auditd.conf"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "^#\\s*action_mail_acct.*|^action_mail_acct\\s*=\\s*(?!root\\b)\\w+"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource42ref -{ -ResourceID = "[nxFileLine][V-204516.a][medium][SRG-OS-000327-GPOS-00127]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S execve -C uid!=euid -F euid=0 -k setuid"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*execve\\s*-C\\s*uid!\\s*=\\s*euid\\s*-F\\s*euid\\s*=\\s*0\\s*-k\\s*setuid"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource43ref -{ -ResourceID = "[nxFileLine][V-204516.b][medium][SRG-OS-000327-GPOS-00127]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S execve -C uid!=euid -F euid=0 -k setuid"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*execve\\s*-C\\s*uid!\\s*=\\s*euid\\s*-F\\s*euid\\s*=\\s*0\\s*-k\\s*setuid"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource44ref -{ -ResourceID = "[nxFileLine][V-204516.c][medium][SRG-OS-000327-GPOS-00127]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S execve -C gid!=egid -F egid=0 -k setgid"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*execve\\s*-C\\s*gid!\\s*=\\s*egid\\s*-F\\s*egid\\s*=\\s*0\\s*-k\\s*setgid"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource45ref -{ -ResourceID = "[nxFileLine][V-204516.d][medium][SRG-OS-000327-GPOS-00127]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S execve -C gid!=egid -F egid=0 -k setgid"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*execve\\s*-C\\s*gid!\\s*=\\s*egid\\s*-F\\s*egid\\s*=\\s*0\\s*-k\\s*setgid"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource46ref -{ -ResourceID = "[nxFileLine][V-204517.a][medium][SRG-OS-000064-GPOS-00033]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S chown,fchown,fchownat,lchown -F auid>=1000 -F auid!=unset -k perm_mod"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*chown,fchown,fchownat,lchown\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*perm_mod"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource47ref -{ -ResourceID = "[nxFileLine][V-204517.b][medium][SRG-OS-000064-GPOS-00033]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S chown,fchown,fchownat,lchown -F auid>=1000 -F auid!=unset -k perm_mod"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*chown,fchown,fchownat,lchown\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*perm_mod"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource48ref -{ -ResourceID = "[nxFileLine][V-204521.a][medium][SRG-OS-000458-GPOS-00203]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S chmod,fchmod,fchmodat -F auid>=1000 -F auid!=unset -k perm_mod"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*chmod,fchmod,fchmodat\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*perm_mod"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource49ref -{ -ResourceID = "[nxFileLine][V-204521.b][medium][SRG-OS-000458-GPOS-00203]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S chmod,fchmod,fchmodat -F auid>=1000 -F auid!=unset -k perm_mod"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*chmod,fchmod,fchmodat\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*perm_mod"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource50ref -{ -ResourceID = "[nxFileLine][V-204524.a][medium][SRG-OS-000458-GPOS-00203]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S setxattr,fsetxattr,lsetxattr,removexattr,fremovexattr,lremovexattr -F auid>=1000 -F auid!=unset -k perm_mod"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*setxattr,fsetxattr,lsetxattr,removexattr,fremovexattr,lremovexattr\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*perm_mod"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource51ref -{ -ResourceID = "[nxFileLine][V-204524.b][medium][SRG-OS-000458-GPOS-00203]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S setxattr,fsetxattr,lsetxattr,removexattr,fremovexattr,lremovexattr -F auid>=1000 -F auid!=unset -k perm_mod"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*setxattr,fsetxattr,lsetxattr,removexattr,fremovexattr,lremovexattr\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*perm_mod"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource52ref -{ -ResourceID = "[nxFileLine][V-204531.a][medium][SRG-OS-000064-GPOS-00033]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S creat,open,openat,open_by_handle_at,truncate,ftruncate -F exit=-EPERM -F auid>=1000 -F auid!=unset -k access"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*creat,open,openat,open_by_handle_at,truncate,ftruncate\\s*-F\\s*exit\\s*=\\s*-EPERM\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*access"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource53ref -{ -ResourceID = "[nxFileLine][V-204531.b][medium][SRG-OS-000064-GPOS-00033]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S creat,open,openat,open_by_handle_at,truncate,ftruncate -F exit=-EACCES -F auid>=1000 -F auid!=unset -k access"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*creat,open,openat,open_by_handle_at,truncate,ftruncate\\s*-F\\s*exit\\s*=\\s*-EACCES\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*access"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource54ref -{ -ResourceID = "[nxFileLine][V-204531.c][medium][SRG-OS-000064-GPOS-00033]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S creat,open,openat,open_by_handle_at,truncate,ftruncate -F exit=-EPERM -F auid>=1000 -F auid!=unset -k access"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*creat,open,openat,open_by_handle_at,truncate,ftruncate\\s*-F\\s*exit\\s*=\\s*-EPERM\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*access"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource55ref -{ -ResourceID = "[nxFileLine][V-204531.d][medium][SRG-OS-000064-GPOS-00033]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S creat,open,openat,open_by_handle_at,truncate,ftruncate -F exit=-EACCES -F auid>=1000 -F auid!=unset -k access"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*creat,open,openat,open_by_handle_at,truncate,ftruncate\\s*-F\\s*exit\\s*=\\s*-EACCES\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*access"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource56ref -{ -ResourceID = "[nxFileLine][V-204536][medium][SRG-OS-000392-GPOS-00172]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F path=/usr/sbin/semanage -F auid>=1000 -F auid!=unset -k privileged-priv_change"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/sbin/semanage\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-priv_change"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource57ref -{ -ResourceID = "[nxFileLine][V-204537][medium][SRG-OS-000392-GPOS-00172]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F path=/usr/sbin/setsebool -F auid>=1000 -F auid!=unset -k privileged-priv_change"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/sbin/setsebool\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-priv_change"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource58ref -{ -ResourceID = "[nxFileLine][V-204538][medium][SRG-OS-000392-GPOS-00172]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F path=/usr/bin/chcon -F auid>=1000 -F auid!=unset -k privileged-priv_change"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/bin/chcon\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-priv_change"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource59ref -{ -ResourceID = "[nxFileLine][V-204539][medium][SRG-OS-000392-GPOS-00172]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F path=/usr/sbin/setfiles -F auid>=1000 -F auid!=unset -k privileged-priv_change"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/sbin/setfiles\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-priv_change"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource60ref -{ -ResourceID = "[nxFileLine][V-204540][medium][SRG-OS-000392-GPOS-00172]::[RHEL]Baseline"; - ContainsLine = "-w /var/run/faillock -p wa -k logins"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-w\\s*/var/run/faillock\\s*-p\\s*wa\\s*-k\\s*logins"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource61ref -{ -ResourceID = "[nxFileLine][V-204541][medium][SRG-OS-000392-GPOS-00172]::[RHEL]Baseline"; - ContainsLine = "-w /var/log/lastlog -p wa -k logins"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-w\\s*/var/log/lastlog\\s*-p\\s*wa\\s*-k\\s*logins"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource62ref -{ -ResourceID = "[nxFileLine][V-204542][medium][SRG-OS-000042-GPOS-00020]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F path=/usr/bin/passwd -F auid>=1000 -F auid!=unset -k privileged-passwd"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/bin/passwd\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-passwd"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource63ref -{ -ResourceID = "[nxFileLine][V-204543][medium][SRG-OS-000042-GPOS-00020]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F path=/usr/sbin/unix_chkpwd -F auid>=1000 -F auid!=unset -k privileged-passwd"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/sbin/unix_chkpwd\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-passwd"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource64ref -{ -ResourceID = "[nxFileLine][V-204544][medium][SRG-OS-000042-GPOS-00020]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F path=/usr/bin/gpasswd -F auid>=1000 -F auid!=unset -k privileged-passwd"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/bin/gpasswd\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-passwd"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource65ref -{ -ResourceID = "[nxFileLine][V-204545][medium][SRG-OS-000042-GPOS-00020]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F path=/usr/bin/chage -F auid>=1000 -F auid!=unset -k privileged-passwd"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/bin/chage\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-passwd"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource66ref -{ -ResourceID = "[nxFileLine][V-204546][medium][SRG-OS-000042-GPOS-00020]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F path=/usr/sbin/userhelper -F auid>=1000 -F auid!=unset -k privileged-passwd"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/sbin/userhelper\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-passwd"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource67ref -{ -ResourceID = "[nxFileLine][V-204547][medium][SRG-OS-000037-GPOS-00015]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F path=/usr/bin/su -F auid>=1000 -F auid!=unset -k privileged-priv_change"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/bin/su\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-priv_change"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource68ref -{ -ResourceID = "[nxFileLine][V-204548][medium][SRG-OS-000037-GPOS-00015]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F path=/usr/bin/sudo -F auid>=1000 -F auid!=unset -k privileged-priv_change"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/bin/sudo\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-priv_change"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource69ref -{ -ResourceID = "[nxFileLine][V-204549.a][medium][SRG-OS-000037-GPOS-00015]::[RHEL]Baseline"; - ContainsLine = "-w /etc/sudoers -p wa -k privileged-actions"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-w /etc/sudoers -p wa -k privileged-actions"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource70ref -{ -ResourceID = "[nxFileLine][V-204549.b][medium][SRG-OS-000037-GPOS-00015]::[RHEL]Baseline"; - ContainsLine = "-w /etc/sudoers.d/ -p wa -k privileged-actions"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-w /etc/sudoers.d/ -p wa -k privileged-actions"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource71ref -{ -ResourceID = "[nxFileLine][V-204550][medium][SRG-OS-000037-GPOS-00015]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F path=/usr/bin/newgrp -F auid>=1000 -F auid!=unset -k privileged-priv_change"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/bin/newgrp\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-priv_change"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource72ref -{ -ResourceID = "[nxFileLine][V-204551][medium][SRG-OS-000037-GPOS-00015]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F path=/usr/bin/chsh -F auid>=1000 -F auid!=unset -k privileged-priv_change"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/bin/chsh\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-priv_change"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource73ref -{ -ResourceID = "[nxFileLine][V-204552.a][medium][SRG-OS-000042-GPOS-00020]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S mount -F auid>=1000 -F auid!=unset -k privileged-mount"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*mount\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-mount"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource74ref -{ -ResourceID = "[nxFileLine][V-204552.b][medium][SRG-OS-000042-GPOS-00020]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S mount -F auid>=1000 -F auid!=unset -k privileged-mount"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*mount\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-mount"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource75ref -{ -ResourceID = "[nxFileLine][V-204552.c][medium][SRG-OS-000042-GPOS-00020]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F path=/usr/bin/mount -F auid>=1000 -F auid!=unset -k privileged-mount"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/bin/mount\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-mount"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource76ref -{ -ResourceID = "[nxFileLine][V-204553][medium][SRG-OS-000042-GPOS-00020]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F path=/usr/bin/umount -F auid>=1000 -F auid!=unset -k privileged-mount"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/bin/umount\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-mount"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource77ref -{ -ResourceID = "[nxFileLine][V-204554][medium][SRG-OS-000042-GPOS-00020]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F path=/usr/sbin/postdrop -F auid>=1000 -F auid!=unset -k privileged-postfix"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/sbin/postdrop\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-postfix"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource78ref -{ -ResourceID = "[nxFileLine][V-204555][medium][SRG-OS-000042-GPOS-00020]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F path=/usr/sbin/postqueue -F auid>=1000 -F auid!=unset -k privileged-postfix"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/sbin/postqueue\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-postfix"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource79ref -{ -ResourceID = "[nxFileLine][V-204556][medium][SRG-OS-000042-GPOS-00020]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F path=/usr/libexec/openssh/ssh-keysign -F auid>=1000 -F auid!=unset -k privileged-ssh"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/libexec/openssh/ssh-keysign\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-ssh"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource80ref -{ -ResourceID = "[nxFileLine][V-204557][medium][SRG-OS-000042-GPOS-00020]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F path=/usr/bin/crontab -F auid>=1000 -F auid!=unset -k privileged-cron"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/bin/crontab\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-cron"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource81ref -{ -ResourceID = "[nxFileLine][V-204558][medium][SRG-OS-000471-GPOS-00215]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F path=/usr/sbin/pam_timestamp_check -F auid>=1000 -F auid!=unset -k privileged-pam"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/sbin/pam_timestamp_check\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-pam"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource82ref -{ -ResourceID = "[nxFileLine][V-204559.a][medium][SRG-OS-000471-GPOS-00216]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S create_module -k module-change"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*create_module\\s*-k\\s*module-change"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource83ref -{ -ResourceID = "[nxFileLine][V-204559.b][medium][SRG-OS-000471-GPOS-00216]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S create_module -k module-change"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*create_module\\s*-k\\s*module-change"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource84ref -{ -ResourceID = "[nxFileLine][V-204560.a][medium][SRG-OS-000471-GPOS-00216]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S init_module,finit_module -k modulechange"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*init_module,finit_module\\s*-k\\s*modulechange"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource85ref -{ -ResourceID = "[nxFileLine][V-204560.b][medium][SRG-OS-000471-GPOS-00216]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S init_module,finit_module -k modulechange"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*init_module,finit_module\\s*-k\\s*modulechange"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource86ref -{ -ResourceID = "[nxFileLine][V-204562.a][medium][SRG-OS-000471-GPOS-00216]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S delete_module -k module-change"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*delete_module\\s*-k\\s*module-change"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource87ref -{ -ResourceID = "[nxFileLine][V-204562.b][medium][SRG-OS-000471-GPOS-00216]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S delete_module -k module-change"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*delete_module\\s*-k\\s*module-change"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource88ref -{ -ResourceID = "[nxFileLine][V-204563][medium][SRG-OS-000471-GPOS-00216]::[RHEL]Baseline"; - ContainsLine = "-w /usr/bin/kmod -p x -F auid!=unset -k module-change"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-w\\s*/usr/bin/kmod\\s*-p\\s*x\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*module-change"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource89ref -{ -ResourceID = "[nxFileLine][V-204564][medium][SRG-OS-000004-GPOS-00004]::[RHEL]Baseline"; - ContainsLine = "-w /etc/passwd -p wa -k identity"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-w\\s*/etc/passwd\\s*-p\\s*wa\\s*-k\\s*identity"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource90ref -{ -ResourceID = "[nxFileLine][V-204565][medium][SRG-OS-000004-GPOS-00004]::[RHEL]Baseline"; - ContainsLine = "-w /etc/group -p wa -k identity"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-w\\s*/etc/group\\s*-p\\s*wa\\s*-k\\s*identity"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource91ref -{ -ResourceID = "[nxFileLine][V-204566][medium][SRG-OS-000004-GPOS-00004]::[RHEL]Baseline"; - ContainsLine = "-w /etc/gshadow -p wa -k identity"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-w\\s*/etc/gshadow\\s*-p\\s*wa\\s*-k\\s*identity"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource92ref -{ -ResourceID = "[nxFileLine][V-204567][medium][SRG-OS-000004-GPOS-00004]::[RHEL]Baseline"; - ContainsLine = "-w /etc/shadow -p wa -k identity"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-w\\s*/etc/shadow\\s*-p\\s*wa\\s*-k\\s*identity"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource93ref -{ -ResourceID = "[nxFileLine][V-204568][medium][SRG-OS-000004-GPOS-00004]::[RHEL]Baseline"; - ContainsLine = "-w /etc/security/opasswd -p wa -k identity"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-w\\s*/etc/security/opasswd\\s*-p\\s*wa\\s*-k\\s*identity"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource94ref -{ -ResourceID = "[nxFileLine][V-204572.a][medium][SRG-OS-000466-GPOS-00210]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S unlink,unlinkat,rename,renameat,rmdir -F auid>=1000 -F auid!=unset -k delete"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*unlink,unlinkat,rename,renameat,rmdir\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*delete"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource95ref -{ -ResourceID = "[nxFileLine][V-204572.b][medium][SRG-OS-000466-GPOS-00210]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S unlink,unlinkat,rename,renameat,rmdir -F auid>=1000 -F auid!=unset -k delete"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*unlink,unlinkat,rename,renameat,rmdir\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*delete"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource96ref -{ -ResourceID = "[nxFileLine][V-204578][medium][SRG-OS-000033-GPOS-00014]::[RHEL]Baseline"; - ContainsLine = "Ciphers aes256-ctr,aes192-ctr,aes128-ctr"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/ssh/sshd_config"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "^#\\s*Ciphers.*|^\\s*Ciphers\\s*aes128-ctr.*|^\\s*Ciphers\\s*aes192-ctr.*"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource97ref -{ -ResourceID = "[nxFileLine][V-204579.b][medium][SRG-OS-000163-GPOS-00072]::[RHEL]Baseline"; - ContainsLine = "declare -xr TMOUT=900"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/profile.d/tmout.sh"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "^\\s*TMOUT\\s*=\\s*[0-8]?[0-9]?[0-9]?$|^#\\s*TMOUT.*"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource98ref -{ -ResourceID = "[nxFileLine][V-204580][medium][SRG-OS-000023-GPOS-00006]::[RHEL]Baseline"; - ContainsLine = "banner /etc/issue"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/ssh/sshd_config"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*banner\\s*/etc/issue"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource99ref -{ -ResourceID = "[nxFileLine][V-204587][medium][SRG-OS-000163-GPOS-00072]::[RHEL]Baseline"; - ContainsLine = "ClientAliveInterval 600"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/ssh/sshd_config"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "^\\s*ClientAliveInterval\\s*[0-5]?[0-9]?[0-9]?\\s*$|^#\\s*ClientAliveInterval.*|^\\s*ClientAliveInterval\\s*$"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource100ref -{ -ResourceID = "[nxFileLine][V-204588][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; - ContainsLine = "RhostsRSAAuthentication no"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/ssh/sshd_config"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "^#\\s*RhostsRSAAuthentication.*$|^RhostsRSAAuthentication\\s*(?!no\\b)\\w*$"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource101ref -{ -ResourceID = "[nxFileLine][V-204589][medium][SRG-OS-000163-GPOS-00072]::[RHEL]Baseline"; - ContainsLine = "ClientAliveCountMax 0"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/ssh/sshd_config"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "^#\\s*ClientAliveCountMax.*$|^ClientAliveCountMax\\s*(?!0\\b)\\w*$"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource102ref -{ -ResourceID = "[nxFileLine][V-204590][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; - ContainsLine = "IgnoreRhosts yes"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/ssh/sshd_config"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "^#\\s*IgnoreRhosts.*$|^IgnoreRhosts\\s*(?!yes\\b)\\w*$"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource103ref -{ -ResourceID = "[nxFileLine][V-204591][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; - ContainsLine = "PrintLastLog yes"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/ssh/sshd_config"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "^#\\s*PrintLastLog.*$|^PrintLastLog\\s*(?!yes\\b)\\w*$"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource104ref -{ -ResourceID = "[nxFileLine][V-204592][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; - ContainsLine = "PermitRootLogin no"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/ssh/sshd_config"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "^#\\s*PermitRootLogin.*$|^PermitRootLogin\\s*(?!no\\b)\\w*$"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource105ref -{ -ResourceID = "[nxFileLine][V-204593][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; - ContainsLine = "IgnoreUserKnownHosts yes"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/ssh/sshd_config"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "^#\\s*IgnoreUserKnownHosts.*$|^IgnoreUserKnownHosts\\s*(?!yes\\b)\\w*$"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource106ref -{ -ResourceID = "[nxFileLine][V-204594][high][SRG-OS-000074-GPOS-00042]::[RHEL]Baseline"; - ContainsLine = "Protocol 2"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/ssh/sshd_config"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "^#\\s*Protocol.*$|^Protocol\\s*(?!2\\b)\\w*$"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource107ref -{ -ResourceID = "[nxFileLine][V-204595][medium][SRG-OS-000250-GPOS-00093]::[RHEL]Baseline"; - ContainsLine = "MACs hmac-sha2-512,hmac-sha2-256"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/ssh/sshd_config"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*MACs.*|\\s*MACs\\s*hmac-(?!sha2-512).*"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource108ref -{ -ResourceID = "[nxFileLine][V-204598][medium][SRG-OS-000364-GPOS-00151]::[RHEL]Baseline"; - ContainsLine = "GSSAPIAuthentication no"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/ssh/sshd_config"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "^#\\s*GSSAPIAuthentication.*$|^GSSAPIAuthentication\\s*(?!no\\b)\\w*$"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource109ref -{ -ResourceID = "[nxFileLine][V-204599][medium][SRG-OS-000364-GPOS-00151]::[RHEL]Baseline"; - ContainsLine = "KerberosAuthentication no"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/ssh/sshd_config"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "^#\\s*KerberosAuthentication.*$|^KerberosAuthentication\\s*(?!no\\b)\\w*$"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource110ref -{ -ResourceID = "[nxFileLine][V-204600][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; - ContainsLine = "StrictModes yes"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/ssh/sshd_config"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "^#\\s*StrictModes.*$|^StrictModes\\s*(?!yes\\b)\\w*$"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource111ref -{ -ResourceID = "[nxFileLine][V-204601][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; - ContainsLine = "UsePrivilegeSeparation sandbox"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/ssh/sshd_config"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "^#\\s*UsePrivilegeSeparation.*$|^UsePrivilegeSeparation\\s*(?!sandbox\\b)\\w*$"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource112ref -{ -ResourceID = "[nxFileLine][V-204602][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; - ContainsLine = "Compression delayed"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/ssh/sshd_config"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "^#\\s*Compression.*$|^Compression\\s*(?!delayed\\b)\\w*$"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource113ref -{ -ResourceID = "[nxFileLine][V-204622][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; - ContainsLine = "X11Forwarding no"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/ssh/sshd_config"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "^#\\s*X11Forwarding.*$|^X11Forwarding\\s*(?!no\\b)\\w*$"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource114ref -{ -ResourceID = "[nxFileLine][V-233307][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; - ContainsLine = "X11UseLocalhost yes"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/ssh/sshd_config"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*X11UseLocalhost\\s*yes"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxServiceResource as $MSFT_nxServiceResource1ref -{ -ResourceID = "[nxService][V-204451][medium][SRG-OS-000114-GPOS-00059]::[RHEL]Baseline"; - Controller = "systemd"; - Enabled = False; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxService.ps1::13::9::nxService"; - Name = "autofs"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxServiceResource as $MSFT_nxServiceResource2ref -{ -ResourceID = "[nxService][V-204492][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; - Controller = "systemd"; - Enabled = False; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxService.ps1::13::9::nxService"; - Name = "kdump"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxServiceResource as $MSFT_nxServiceResource3ref -{ -ResourceID = "[nxService][V-204503][medium][SRG-OS-000038-GPOS-00016]::[RHEL]Baseline"; - Controller = "systemd"; - State = "Running"; - Enabled = True; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxService.ps1::22::9::nxService"; - Name = "auditd"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxServiceResource as $MSFT_nxServiceResource4ref -{ -ResourceID = "[nxService][V-204586][medium][SRG-OS-000423-GPOS-00187]::[RHEL]Baseline"; - Controller = "systemd"; - State = "Running"; - Enabled = True; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxService.ps1::22::9::nxService"; - Name = "sshd"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxServiceResource as $MSFT_nxServiceResource5ref -{ -ResourceID = "[nxService][V-204604.b][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; - Controller = "systemd"; - State = "Running"; - Enabled = True; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxService.ps1::22::9::nxService"; - Name = "firewalld"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxScriptResource as $MSFT_nxScriptResource1ref -{ -ResourceID = "[nxScript][V-204399.b][medium][[Skip] SRG-OS-000029-GPOS-00010]::[RHEL]Baseline"; - GetScript = "#!/bin/bash\necho [V-204399.b][medium][[Skip] SRG-OS-000029-GPOS-00010]"; - TestScript = "#!/bin/bash\nexit 0"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxScript.skip.ps1::10::5::nxScript"; - SetScript = "#!/bin/bash"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxScriptResource as $MSFT_nxScriptResource2ref -{ -ResourceID = "[nxScript][V-204400][medium][[Skip] SRG-OS-000029-GPOS-00010]::[RHEL]Baseline"; - GetScript = "#!/bin/bash\necho [V-204400][medium][[Skip] SRG-OS-000029-GPOS-00010]"; - TestScript = "#!/bin/bash\nexit 0"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxScript.skip.ps1::10::5::nxScript"; - SetScript = "#!/bin/bash"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxScriptResource as $MSFT_nxScriptResource3ref -{ -ResourceID = "[nxScript][V-204403][medium][[Skip] SRG-OS-000029-GPOS-00010]::[RHEL]Baseline"; - GetScript = "#!/bin/bash\necho [V-204403][medium][[Skip] SRG-OS-000029-GPOS-00010]"; - TestScript = "#!/bin/bash\nexit 0"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxScript.skip.ps1::10::5::nxScript"; - SetScript = "#!/bin/bash"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxScriptResource as $MSFT_nxScriptResource4ref -{ -ResourceID = "[nxScript][V-204509][medium][[Skip] SRG-OS-000342-GPOS-00133]::[RHEL]Baseline"; - GetScript = "#!/bin/bash\necho [V-204509][medium][[Skip] SRG-OS-000342-GPOS-00133]"; - TestScript = "#!/bin/bash\nexit 0"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxScript.skip.ps1::10::5::nxScript"; - SetScript = "#!/bin/bash"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxScriptResource as $MSFT_nxScriptResource5ref -{ -ResourceID = "[nxScript][V-204513][medium][[Skip] SRG-OS-000343-GPOS-00134]::[RHEL]Baseline"; - GetScript = "#!/bin/bash\necho [V-204513][medium][[Skip] SRG-OS-000343-GPOS-00134]"; - TestScript = "#!/bin/bash\nexit 0"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxScript.skip.ps1::10::5::nxScript"; - SetScript = "#!/bin/bash"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxScriptResource as $MSFT_nxScriptResource6ref -{ -ResourceID = "[nxScript][V-204623][medium][[Skip] SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; - GetScript = "#!/bin/bash\necho [V-204623][medium][[Skip] SRG-OS-000480-GPOS-00227]"; - TestScript = "#!/bin/bash\nexit 0"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxScript.skip.ps1::10::5::nxScript"; - SetScript = "#!/bin/bash"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxScriptResource as $MSFT_nxScriptResource7ref -{ -ResourceID = "[nxScript][V-244557][medium][[Skip] SRG-OS-000080-GPOS-00048]::[RHEL]Baseline"; - GetScript = "#!/bin/bash\necho [V-244557][medium][[Skip] SRG-OS-000080-GPOS-00048]"; - TestScript = "#!/bin/bash\nexit 0"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxScript.skip.ps1::10::5::nxScript"; - SetScript = "#!/bin/bash"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxScriptResource as $MSFT_nxScriptResource8ref -{ -ResourceID = "[nxScript][V-244558][medium][[Skip] SRG-OS-000080-GPOS-00048]::[RHEL]Baseline"; - GetScript = "#!/bin/bash\necho [V-244558][medium][[Skip] SRG-OS-000080-GPOS-00048]"; - TestScript = "#!/bin/bash\nexit 0"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxScript.skip.ps1::10::5::nxScript"; - SetScript = "#!/bin/bash"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxScriptResource as $MSFT_nxScriptResource9ref -{ -ResourceID = "[nxScript][V-204399.a][medium][[Skip] SRG-OS-000029-GPOS-00010]::[RHEL]Baseline"; - GetScript = "#!/bin/bash\necho [V-204399.a][medium][[Skip] SRG-OS-000029-GPOS-00010]"; - TestScript = "#!/bin/bash\nexit 0"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxScript.skip.ps1::10::5::nxScript"; - SetScript = "#!/bin/bash"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of OMI_ConfigurationDocument - - - { - Version="2.0.0"; - - - MinimumCompatibleVersion = "1.0.0"; - - - CompatibleVersionAdditionalProperties= {"Omi_BaseResource:ConfigurationName"}; - - - Author="Microsoft"; - - - GenerationDate="06/30/2022 11:38:45"; - - - GenerationHost="Microsoft"; - - - Name="LinuxBaseLine"; - - - }; +/* +@TargetNode='CentOS74' +@GeneratedBy=Microsoft +@GenerationDate=03/09/2023 14:17:33 +@GenerationHost=Microsoft +*/ + +instance of MSFT_nxPackageResource as $MSFT_nxPackageResource1ref +{ +ResourceID = "[nxPackage][V-204442][high][SRG-OS-000095-GPOS-00049]::[RHEL]Baseline"; + Ensure = "Absent"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxPackage.ps1::8::5::nxPackage"; + Name = "rsh-server"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxPackageResource as $MSFT_nxPackageResource2ref +{ +ResourceID = "[nxPackage][V-204443][high][SRG-OS-000095-GPOS-00049]::[RHEL]Baseline"; + Ensure = "Absent"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxPackage.ps1::8::5::nxPackage"; + Name = "ypserv"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxPackageResource as $MSFT_nxPackageResource3ref +{ +ResourceID = "[nxPackage][V-204497][high][SRG-OS-000033-GPOS-00014]::[RHEL]Baseline"; + Ensure = "Present"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxPackage.ps1::8::5::nxPackage"; + Name = "dracut-fips"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxPackageResource as $MSFT_nxPackageResource4ref +{ +ResourceID = "[nxPackage][V-204498][low][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; + Ensure = "Present"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxPackage.ps1::8::5::nxPackage"; + Name = "aide"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxPackageResource as $MSFT_nxPackageResource5ref +{ +ResourceID = "[nxPackage][V-204502][high][SRG-OS-000095-GPOS-00049]::[RHEL]Baseline"; + Ensure = "Absent"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxPackage.ps1::8::5::nxPackage"; + Name = "telnet-server"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxPackageResource as $MSFT_nxPackageResource6ref +{ +ResourceID = "[nxPackage][V-204585][medium][SRG-OS-000423-GPOS-00187]::[RHEL]Baseline"; + Ensure = "Present"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxPackage.ps1::8::5::nxPackage"; + Name = "openssh-server"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxPackageResource as $MSFT_nxPackageResource7ref +{ +ResourceID = "[nxPackage][V-204604.a][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; + Ensure = "Present"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxPackage.ps1::8::5::nxPackage"; + Name = "firewalld"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxPackageResource as $MSFT_nxPackageResource8ref +{ +ResourceID = "[nxPackage][V-204620][high][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; + Ensure = "Absent"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxPackage.ps1::8::5::nxPackage"; + Name = "vsftpd"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxPackageResource as $MSFT_nxPackageResource9ref +{ +ResourceID = "[nxPackage][V-204621][high][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; + Ensure = "Absent"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxPackage.ps1::8::5::nxPackage"; + Name = "tftp-server"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxPackageResource as $MSFT_nxPackageResource10ref +{ +ResourceID = "[nxPackage][V-204631][medium][SRG-OS-000375-GPOS-00160]::[RHEL]Baseline"; + Ensure = "Present"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxPackage.ps1::8::5::nxPackage"; + Name = "pam_pkcs11"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileResource as $MSFT_nxFileResource1ref +{ +ResourceID = "[nxFile][V-204395][medium][SRG-OS-000023-GPOS-00006]::[RHEL]Baseline"; + Contents = "You are accessing a U.S. Government (USG) Information System (IS) that is provided for USG-authorized use only.\n\nBy using this IS (which includes any device attached to this IS), you consent to the following conditions:\n\n-The USG routinely intercepts and monitors communications on this IS for purposes including, but not limited to, penetration testing, COMSEC monitoring, network operations and defense, personnel misconduct (PM), law enforcement (LE), and counterintelligence (CI) investigations.\n\n-At any time, the USG may inspect and seize data stored on this IS.\n\n-Communications using, or data stored on, this IS are not private, are subject to routine monitoring, interception, and search, and may be disclosed or used for any USG-authorized purpose.\n\n-This IS includes security measures (e.g., authentication and access controls) to protect USG interests--not for your personal benefit or privacy.\n\n-Notwithstanding the above, using this IS does not constitute consent to PM, LE or CI investigative searching or monitoring of the content of privileged communications, or work product, related to personal representation or services by attorneys, psychotherapists, or clergy, and their assistants. Such communications and work product are private and confidential. See User Agreement for details."; + DestinationPath = "/etc/issue"; + ModuleName = "nx"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; + ModuleVersion = "1.0"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileResource as $MSFT_nxFileResource2ref +{ +ResourceID = "[nxFile][V-204449.a][medium][SRG-OS-000114-GPOS-00059]::[RHEL]Baseline"; + Contents = ""; + DestinationPath = "/etc/modprobe.d/usb-storage.conf"; + ModuleName = "nx"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; + ModuleVersion = "1.0"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileResource as $MSFT_nxFileResource3ref +{ +ResourceID = "[nxFile][V-204449.b][medium][SRG-OS-000114-GPOS-00059]::[RHEL]Baseline"; + Contents = ""; + DestinationPath = "/etc/modprobe.d/blacklist.conf"; + ModuleName = "nx"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; + ModuleVersion = "1.0"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileResource as $MSFT_nxFileResource4ref +{ +ResourceID = "[nxFile][V-204450.a][medium][SRG-OS-000378-GPOS-00163]::[RHEL]Baseline"; + Contents = ""; + DestinationPath = "/etc/modprobe.d/dccp.conf"; + ModuleName = "nx"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; + ModuleVersion = "1.0"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileResource as $MSFT_nxFileResource5ref +{ +ResourceID = "[nxFile][V-204576][low][SRG-OS-000027-GPOS-00008]::[RHEL]Baseline"; + Contents = "* hard maxlogins 10"; + DestinationPath = "/etc/security/limits.d/204576-powerstig.conf"; + ModuleName = "nx"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; + ModuleVersion = "1.0"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileResource as $MSFT_nxFileResource6ref +{ +ResourceID = "[nxFile][V-204579.a][medium][SRG-OS-000163-GPOS-00072]::[RHEL]Baseline"; + Contents = ""; + DestinationPath = "/etc/profile.d/tmout.sh"; + ModuleName = "nx"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; + ModuleVersion = "1.0"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileResource as $MSFT_nxFileResource7ref +{ +ResourceID = "[nxFile][V-204584][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; + Contents = "kernel.randomize_va_space = 2"; + DestinationPath = "/etc/sysctl.d/204584-powerstig.conf"; + ModuleName = "nx"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; + ModuleVersion = "1.0"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileResource as $MSFT_nxFileResource8ref +{ +ResourceID = "[nxFile][V-204609][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; + Contents = "net.ipv4.conf.all.accept_source_route = 0"; + DestinationPath = "/etc/sysctl.d/204609-powerstig.conf"; + ModuleName = "nx"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; + ModuleVersion = "1.0"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileResource as $MSFT_nxFileResource9ref +{ +ResourceID = "[nxFile][V-204610][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; + Contents = "net.ipv4.conf.all.rp_filter = 1"; + DestinationPath = "/etc/sysctl.d/204610-powerstig.conf"; + ModuleName = "nx"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; + ModuleVersion = "1.0"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileResource as $MSFT_nxFileResource10ref +{ +ResourceID = "[nxFile][V-204611][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; + Contents = "net.ipv4.conf.default.rp_filter = 1"; + DestinationPath = "/etc/sysctl.d/204611-powerstig.conf"; + ModuleName = "nx"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; + ModuleVersion = "1.0"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileResource as $MSFT_nxFileResource11ref +{ +ResourceID = "[nxFile][V-204612][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; + Contents = "net.ipv4.conf.default.accept_source_route = 0"; + DestinationPath = "/etc/sysctl.d/204612-powerstig.conf"; + ModuleName = "nx"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; + ModuleVersion = "1.0"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileResource as $MSFT_nxFileResource12ref +{ +ResourceID = "[nxFile][V-204613][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; + Contents = "net.ipv4.icmp_echo_ignore_broadcasts = 1"; + DestinationPath = "/etc/sysctl.d/204613-powerstig.conf"; + ModuleName = "nx"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; + ModuleVersion = "1.0"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileResource as $MSFT_nxFileResource13ref +{ +ResourceID = "[nxFile][V-204614][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; + Contents = "net.ipv4.conf.default.accept_redirects = 0"; + DestinationPath = "/etc/sysctl.d/204614-powerstig.conf"; + ModuleName = "nx"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; + ModuleVersion = "1.0"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileResource as $MSFT_nxFileResource14ref +{ +ResourceID = "[nxFile][V-204615][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; + Contents = "net.ipv4.conf.all.accept_redirects = 0"; + DestinationPath = "/etc/sysctl.d/204615-powerstig.conf"; + ModuleName = "nx"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; + ModuleVersion = "1.0"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileResource as $MSFT_nxFileResource15ref +{ +ResourceID = "[nxFile][V-204616][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; + Contents = "net.ipv4.conf.default.send_redirects = 0"; + DestinationPath = "/etc/sysctl.d/204616-powerstig.conf"; + ModuleName = "nx"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; + ModuleVersion = "1.0"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileResource as $MSFT_nxFileResource16ref +{ +ResourceID = "[nxFile][V-204617][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; + Contents = "net.ipv4.conf.all.send_redirects = 0"; + DestinationPath = "/etc/sysctl.d/204617-powerstig.conf"; + ModuleName = "nx"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; + ModuleVersion = "1.0"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileResource as $MSFT_nxFileResource17ref +{ +ResourceID = "[nxFile][V-204625][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; + Contents = "net.ipv4.ip_forward = 0"; + DestinationPath = "/etc/sysctl.d/204625-powerstig.conf"; + ModuleName = "nx"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; + ModuleVersion = "1.0"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileResource as $MSFT_nxFileResource18ref +{ +ResourceID = "[nxFile][V-204630][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; + Contents = "net.ipv6.conf.all.accept_source_route = 0"; + DestinationPath = "/etc/sysctl.d/204630-powerstig.conf"; + ModuleName = "nx"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; + ModuleVersion = "1.0"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileResource as $MSFT_nxFileResource19ref +{ +ResourceID = "[nxFile][V-237634.a][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; + Contents = "Defaults !targetpw"; + DestinationPath = "/etc/sudoers.d/237634a-powerstig.conf"; + ModuleName = "nx"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; + ModuleVersion = "1.0"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileResource as $MSFT_nxFileResource20ref +{ +ResourceID = "[nxFile][V-237634.b][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; + Contents = "Defaults !rootpw"; + DestinationPath = "/etc/sudoers.d/237634b-powerstig.conf"; + ModuleName = "nx"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; + ModuleVersion = "1.0"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileResource as $MSFT_nxFileResource21ref +{ +ResourceID = "[nxFile][V-237634.c][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; + Contents = "Defaults !runaspw"; + DestinationPath = "/etc/sudoers.d/237634c-powerstig.conf"; + ModuleName = "nx"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; + ModuleVersion = "1.0"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileResource as $MSFT_nxFileResource22ref +{ +ResourceID = "[nxFile][V-237635][medium][SRG-OS-000373-GPOS-00156]::[RHEL]Baseline"; + Contents = "Defaults timestamp_timeout=0"; + DestinationPath = "/etc/sudoers.d/237635-powerstig.conf"; + ModuleName = "nx"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; + ModuleVersion = "1.0"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileResource as $MSFT_nxFileResource23ref +{ +ResourceID = "[nxFile][V-250314][medium][SRG-OS-000324-GPOS-00125]::[RHEL]Baseline"; + Contents = "%wheel ALL=(ALL) TYPE=sysadm_t ROLE=sysadm_r ALL"; + DestinationPath = "/etc/sudoers.d/250314-powerstig.conf"; + ModuleName = "nx"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; + ModuleVersion = "1.0"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource1ref +{ +ResourceID = "[nxFileLine][V-204405][medium][SRG-OS-000069-GPOS-00037]::[RHEL]Baseline"; + ContainsLine = "password substack system-auth"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/pam.d/passwd"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "^\\s*password(?:\\t*|\\s*)substack\\tsystem-auth\\s*$|^#\\s*password\\s*substack\\s*system-auth.*"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource2ref +{ +ResourceID = "[nxFileLine][V-204407][medium][SRG-OS-000069-GPOS-00037]::[RHEL]Baseline"; + ContainsLine = "ucredit = -1"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/security/pwquality.conf"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "^#\\s*ucredit.*$|^ucredit\\s*=\\s*(?!-1\\b)\\w*$"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource3ref +{ +ResourceID = "[nxFileLine][V-204408][medium][SRG-OS-000070-GPOS-00038]::[RHEL]Baseline"; + ContainsLine = "lcredit = -1"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/security/pwquality.conf"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "^#\\s*lcredit.*$|^lcredit\\s*=\\s*(?!-1\\b)\\w*$"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource4ref +{ +ResourceID = "[nxFileLine][V-204409][medium][SRG-OS-000071-GPOS-00039]::[RHEL]Baseline"; + ContainsLine = "dcredit = -1"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/security/pwquality.conf"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "^#\\s*dcredit.*$|^dcredit\\s*=\\s*(?!-1\\b)\\w*$"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource5ref +{ +ResourceID = "[nxFileLine][V-204410][medium][SRG-OS-000266-GPOS-00101]::[RHEL]Baseline"; + ContainsLine = "ocredit=-1"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/security/pwquality.conf"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "^#\\s*ocredit.*$|^ocredit\\s*=\\s*(?!-1)\\w*$"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource6ref +{ +ResourceID = "[nxFileLine][V-204411][medium][SRG-OS-000072-GPOS-00040]::[RHEL]Baseline"; + ContainsLine = "difok = 8"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/security/pwquality.conf"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*difok\\s*=.*|^\\s*difok\\s*=\\s*(-|)[0-7]$"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource7ref +{ +ResourceID = "[nxFileLine][V-204412][medium][SRG-OS-000072-GPOS-00040]::[RHEL]Baseline"; + ContainsLine = "minclass = 4"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/security/pwquality.conf"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "^#\\s*minclass\\s*=.*|^\\s*minclass\\s*=\\s*(?!\\d{2,})[1-3]"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource8ref +{ +ResourceID = "[nxFileLine][V-204413][medium][SRG-OS-000072-GPOS-00040]::[RHEL]Baseline"; + ContainsLine = "maxrepeat = 3"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/security/pwquality.conf"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "^#\\s*maxrepeat\\s*=.*|^\\s*maxrepeat\\s*=\\s*(?:\\d{2,}|[4-9])"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource9ref +{ +ResourceID = "[nxFileLine][V-204414][medium][SRG-OS-000072-GPOS-00040]::[RHEL]Baseline"; + ContainsLine = "maxclassrepeat = 4"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/security/pwquality.conf"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "^#\\s*maxclassrepeat\\s*=.*|^\\s*maxclassrepeat\\s*=\\s*(?:\\d{2,}|[1-3|5-9])"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource10ref +{ +ResourceID = "[nxFileLine][V-204416][medium][SRG-OS-000073-GPOS-00041]::[RHEL]Baseline"; + ContainsLine = "ENCRYPT_METHOD SHA512"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/login.defs"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*ENCRYPT_METHOD\\s*SHA512"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource11ref +{ +ResourceID = "[nxFileLine][V-204418][medium][SRG-OS-000075-GPOS-00043]::[RHEL]Baseline"; + ContainsLine = "PASS_MIN_DAYS 1"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/login.defs"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "^\\s*PASS_MIN_DAYS\\s*[0]*$|#\\s*PASS_MIN_DAYS.*"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource12ref +{ +ResourceID = "[nxFileLine][V-204420][medium][SRG-OS-000076-GPOS-00044]::[RHEL]Baseline"; + ContainsLine = "PASS_MAX_DAYS 60"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/login.defs"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "^\\s*PASS_MAX_DAYS\\s*([6][1-9]|[7-9][0-9]|\\d{3,})$|#\\s*PASS_MAX_DAYS.*"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource13ref +{ +ResourceID = "[nxFileLine][V-204423][medium][SRG-OS-000078-GPOS-00046]::[RHEL]Baseline"; + ContainsLine = "minlen = 15"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/security/pwquality.conf"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "^\\s*minlen\\s*=\\s*([0-9]|[1][1-4])$|#\\s*minlen.*"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource14ref +{ +ResourceID = "[nxFileLine][V-204425][high][SRG-OS-000106-GPOS-00053]::[RHEL]Baseline"; + ContainsLine = "PermitEmptyPasswords no"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/ssh/sshd_config"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "^#\\s*PermitEmptyPasswords.*$|^PermitEmptyPasswords\\s*(?!no\\b)\\w*$"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource15ref +{ +ResourceID = "[nxFileLine][V-204426][medium][SRG-OS-000118-GPOS-00060]::[RHEL]Baseline"; + ContainsLine = "INACTIVE=35"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/default/useradd"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "^#\\s*INACTIVE\\s*=.*|^\\s*INACTIVE\\s*=\\s*(3[5-9]|[4-9]\\d+|\\d{3,})"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource16ref +{ +ResourceID = "[nxFileLine][V-204431][medium][SRG-OS-000480-GPOS-00226]::[RHEL]Baseline"; + ContainsLine = "FAIL_DELAY 4"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/login.defs"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "^#\\s*FAIL_DELAY.*|^FAIL_DELAY\\s*(?!\\d{2,})[1-3]"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource17ref +{ +ResourceID = "[nxFileLine][V-204434][medium][SRG-OS-000480-GPOS-00229]::[RHEL]Baseline"; + ContainsLine = "PermitUserEnvironment no"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/ssh/sshd_config"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "^#\\s*PermitUserEnvironment.*$|^PermitUserEnvironment\\s*(?!no\\b)\\w*$"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource18ref +{ +ResourceID = "[nxFileLine][V-204435][medium][SRG-OS-000480-GPOS-00229]::[RHEL]Baseline"; + ContainsLine = "HostbasedAuthentication no"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/ssh/sshd_config"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "^#\\s*HostbasedAuthentication.*$|^HostbasedAuthentication\\s*(?!no\\b)\\w*$"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource19ref +{ +ResourceID = "[nxFileLine][V-204447][high][SRG-OS-000366-GPOS-00153]::[RHEL]Baseline"; + ContainsLine = "gpgcheck=1"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/yum.conf"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*gpgcheck\\s*=\\s*1"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource20ref +{ +ResourceID = "[nxFileLine][V-204448][high][SRG-OS-000366-GPOS-00153]::[RHEL]Baseline"; + ContainsLine = "localpkg_gpgcheck=1"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/yum.conf"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*localpkg_gpgcheck\\s*=\\s*1"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource21ref +{ +ResourceID = "[nxFileLine][V-204449.c][medium][SRG-OS-000114-GPOS-00059]::[RHEL]Baseline"; + ContainsLine = "install usb-storage /bin/true"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/modprobe.d/usb-storage.conf"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*install\\s*usb-storage\\s*/bin/true"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource22ref +{ +ResourceID = "[nxFileLine][V-204449.d][medium][SRG-OS-000114-GPOS-00059]::[RHEL]Baseline"; + ContainsLine = "blacklist usb-storage"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/modprobe.d/blacklist.conf"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*blacklist\\s*usb-storage"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource23ref +{ +ResourceID = "[nxFileLine][V-204450.b][medium][SRG-OS-000378-GPOS-00163]::[RHEL]Baseline"; + ContainsLine = "install dccp /bin/true"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/modprobe.d/dccp.conf"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*install\\s*dccp\\s*/bin/true"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource24ref +{ +ResourceID = "[nxFileLine][V-204450.c][medium][SRG-OS-000378-GPOS-00163]::[RHEL]Baseline"; + ContainsLine = "blacklist dccp"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/modprobe.d/blacklist.conf"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*blacklist\\s*dccp"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource25ref +{ +ResourceID = "[nxFileLine][V-204452][low][SRG-OS-000437-GPOS-00194]::[RHEL]Baseline"; + ContainsLine = "clean_requirements_on_remove=1"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/yum.conf"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*clean_requirements_on_remove\\s*=\\s*1"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource26ref +{ +ResourceID = "[nxFileLine][V-204453][medium][SRG-OS-000445-GPOS-00199]::[RHEL]Baseline"; + ContainsLine = "SELINUX=enforcing"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/selinux/config"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "^#\\s*SELINUX.*$|^SELINUX\\s*=\\s*(?!enforcing)\\w*$"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource27ref +{ +ResourceID = "[nxFileLine][V-204454][medium][SRG-OS-000445-GPOS-00199]::[RHEL]Baseline"; + ContainsLine = "SELINUXTYPE=targeted"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/selinux/config"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "^#\\s*SELINUXTYPE.*$|^SELINUXTYPE\\s*=\\s*(?!targeted\\b)\\w*$"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource28ref +{ +ResourceID = "[nxFileLine][V-204457][medium][SRG-OS-000480-GPOS-00228]::[RHEL]Baseline"; + ContainsLine = "UMASK 077"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/login.defs"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "^\\s*UMASK(?!\\s077\\b)\\s*\\d*\\s*$|^#\\s*UMASK.*"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource29ref +{ +ResourceID = "[nxFileLine][V-204466][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; + ContainsLine = "CREATE_HOME yes"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/login.defs"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "^#\\s*CREATE_HOME.*$|^CREATE_HOME\\s*(?!yes\\b)\\w*$|^CREATE_HOME\\t.*"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource30ref +{ +ResourceID = "[nxFileLine][V-204504][medium][SRG-OS-000046-GPOS-00022]::[RHEL]Baseline"; + ContainsLine = "-f 2"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "^#\\s*-f\\s+2|^\\s*-f\\s*1"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileResource as $MSFT_nxFileResource24ref +{ +SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::29::9::nxFile"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + ResourceID = "[nxFile][V-204506.a][medium][SRG-OS-000342-GPOS-00133]::[RHEL]Baseline"; + DestinationPath = "/etc/audisp/plugins.d/au-remote.conf"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource31ref +{ +ResourceID = "[nxFileLine][V-204506.a][medium][SRG-OS-000342-GPOS-00133]::[RHEL]Baseline"; + ContainsLine = "active = yes"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audisp/plugins.d/au-remote.conf"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "\\s*active\\s*=\\s*no|active=yes|#\\s*active\\s*=.*"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource32ref +{ +ResourceID = "[nxFileLine][V-204506.b][medium][SRG-OS-000342-GPOS-00133]::[RHEL]Baseline"; + ContainsLine = "direction = out"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audisp/plugins.d/au-remote.conf"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*direction\\s*=\\s*out"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource33ref +{ +ResourceID = "[nxFileLine][V-204506.c][medium][SRG-OS-000342-GPOS-00133]::[RHEL]Baseline"; + ContainsLine = "path = /sbin/audisp-remote"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audisp/plugins.d/au-remote.conf"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*path\\s*=\\s*/sbin/audisp-remote"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource34ref +{ +ResourceID = "[nxFileLine][V-204506.d][medium][SRG-OS-000342-GPOS-00133]::[RHEL]Baseline"; + ContainsLine = "type = always"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audisp/plugins.d/au-remote.conf"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*type\\s*=\\s*always"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource35ref +{ +ResourceID = "[nxFileLine][V-204507][medium][SRG-OS-000342-GPOS-00133]::[RHEL]Baseline"; + ContainsLine = "overflow_action = syslog"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audisp/audispd.conf"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "^#\\s*overflow_action.*$|^overflow_action\\s*=\\s*(?!syslog$)\\w*$"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource36ref +{ +ResourceID = "[nxFileLine][V-204508][medium][SRG-OS-000342-GPOS-00133]::[RHEL]Baseline"; + ContainsLine = "name_format = hostname"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audisp/audispd.conf"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "^#\\s*name_format.*$|^name_format\\s*=\\s*(?!hostname$)\\w*$"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileResource as $MSFT_nxFileResource25ref +{ +SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::19::9::nxFile"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + ResourceID = "[nxFile][V-204510][medium][SRG-OS-000342-GPOS-00133]::[RHEL]Baseline"; + DestinationPath = "/etc/audisp/audisp-remote.conf"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource37ref +{ +ResourceID = "[nxFileLine][V-204510][medium][SRG-OS-000342-GPOS-00133]::[RHEL]Baseline"; + ContainsLine = "enable_krb5 = yes"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audisp/audisp-remote.conf"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*enable_krb5\\s*=\\s*yes"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource38ref +{ +ResourceID = "[nxFileLine][V-204511][medium][SRG-OS-000342-GPOS-00133]::[RHEL]Baseline"; + ContainsLine = "disk_full_action = single"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audisp/audisp-remote.conf"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "^#\\s*disk_full_action\\s*=.*|^disk_full_action\\s*=\\s*(?!halt\\b|single\\b|syslog\\b)\\w+"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource39ref +{ +ResourceID = "[nxFileLine][V-204512][medium][SRG-OS-000342-GPOS-00133]::[RHEL]Baseline"; + ContainsLine = "network_failure_action = syslog"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audisp/audisp-remote.conf"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "^#\\s*network_failure_action\\s*=.*|^network_failure_action\\s*=\\s*(?!halt\\b|single\\b|syslog\\b)\\w+"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource40ref +{ +ResourceID = "[nxFileLine][V-204514][medium][SRG-OS-000343-GPOS-00134]::[RHEL]Baseline"; + ContainsLine = "space_left_action = email"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/auditd.conf"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "^#\\s*space_left_action.*$|^space_left_action\\s*=\\s*(?!email$)\\w*$"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource41ref +{ +ResourceID = "[nxFileLine][V-204515][medium][SRG-OS-000343-GPOS-00134]::[RHEL]Baseline"; + ContainsLine = "action_mail_acct = root"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/auditd.conf"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "^#\\s*action_mail_acct.*|^action_mail_acct\\s*=\\s*(?!root\\b)\\w+"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource42ref +{ +ResourceID = "[nxFileLine][V-204516.a][medium][SRG-OS-000327-GPOS-00127]::[RHEL]Baseline"; + ContainsLine = "-a always,exit -F arch=b32 -S execve -C uid!=euid -F euid=0 -k setuid"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*execve\\s*-C\\s*uid!\\s*=\\s*euid\\s*-F\\s*euid\\s*=\\s*0\\s*-k\\s*setuid"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource43ref +{ +ResourceID = "[nxFileLine][V-204516.b][medium][SRG-OS-000327-GPOS-00127]::[RHEL]Baseline"; + ContainsLine = "-a always,exit -F arch=b64 -S execve -C uid!=euid -F euid=0 -k setuid"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*execve\\s*-C\\s*uid!\\s*=\\s*euid\\s*-F\\s*euid\\s*=\\s*0\\s*-k\\s*setuid"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource44ref +{ +ResourceID = "[nxFileLine][V-204516.c][medium][SRG-OS-000327-GPOS-00127]::[RHEL]Baseline"; + ContainsLine = "-a always,exit -F arch=b32 -S execve -C gid!=egid -F egid=0 -k setgid"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*execve\\s*-C\\s*gid!\\s*=\\s*egid\\s*-F\\s*egid\\s*=\\s*0\\s*-k\\s*setgid"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource45ref +{ +ResourceID = "[nxFileLine][V-204516.d][medium][SRG-OS-000327-GPOS-00127]::[RHEL]Baseline"; + ContainsLine = "-a always,exit -F arch=b64 -S execve -C gid!=egid -F egid=0 -k setgid"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*execve\\s*-C\\s*gid!\\s*=\\s*egid\\s*-F\\s*egid\\s*=\\s*0\\s*-k\\s*setgid"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource46ref +{ +ResourceID = "[nxFileLine][V-204517.a][medium][SRG-OS-000064-GPOS-00033]::[RHEL]Baseline"; + ContainsLine = "-a always,exit -F arch=b32 -S chown,fchown,fchownat,lchown -F auid>=1000 -F auid!=unset -k perm_mod"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*chown,fchown,fchownat,lchown\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*perm_mod"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource47ref +{ +ResourceID = "[nxFileLine][V-204517.b][medium][SRG-OS-000064-GPOS-00033]::[RHEL]Baseline"; + ContainsLine = "-a always,exit -F arch=b64 -S chown,fchown,fchownat,lchown -F auid>=1000 -F auid!=unset -k perm_mod"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*chown,fchown,fchownat,lchown\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*perm_mod"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource48ref +{ +ResourceID = "[nxFileLine][V-204521.a][medium][SRG-OS-000458-GPOS-00203]::[RHEL]Baseline"; + ContainsLine = "-a always,exit -F arch=b32 -S chmod,fchmod,fchmodat -F auid>=1000 -F auid!=unset -k perm_mod"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*chmod,fchmod,fchmodat\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*perm_mod"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource49ref +{ +ResourceID = "[nxFileLine][V-204521.b][medium][SRG-OS-000458-GPOS-00203]::[RHEL]Baseline"; + ContainsLine = "-a always,exit -F arch=b64 -S chmod,fchmod,fchmodat -F auid>=1000 -F auid!=unset -k perm_mod"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*chmod,fchmod,fchmodat\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*perm_mod"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource50ref +{ +ResourceID = "[nxFileLine][V-204524.a][medium][SRG-OS-000458-GPOS-00203]::[RHEL]Baseline"; + ContainsLine = "-a always,exit -F arch=b32 -S setxattr,fsetxattr,lsetxattr,removexattr,fremovexattr,lremovexattr -F auid>=1000 -F auid!=unset -k perm_mod"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*setxattr,fsetxattr,lsetxattr,removexattr,fremovexattr,lremovexattr\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*perm_mod"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource51ref +{ +ResourceID = "[nxFileLine][V-204524.b][medium][SRG-OS-000458-GPOS-00203]::[RHEL]Baseline"; + ContainsLine = "-a always,exit -F arch=b64 -S setxattr,fsetxattr,lsetxattr,removexattr,fremovexattr,lremovexattr -F auid>=1000 -F auid!=unset -k perm_mod"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*setxattr,fsetxattr,lsetxattr,removexattr,fremovexattr,lremovexattr\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*perm_mod"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource52ref +{ +ResourceID = "[nxFileLine][V-204531.a][medium][SRG-OS-000064-GPOS-00033]::[RHEL]Baseline"; + ContainsLine = "-a always,exit -F arch=b32 -S creat,open,openat,open_by_handle_at,truncate,ftruncate -F exit=-EPERM -F auid>=1000 -F auid!=unset -k access"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*creat,open,openat,open_by_handle_at,truncate,ftruncate\\s*-F\\s*exit\\s*=\\s*-EPERM\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*access"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource53ref +{ +ResourceID = "[nxFileLine][V-204531.b][medium][SRG-OS-000064-GPOS-00033]::[RHEL]Baseline"; + ContainsLine = "-a always,exit -F arch=b32 -S creat,open,openat,open_by_handle_at,truncate,ftruncate -F exit=-EACCES -F auid>=1000 -F auid!=unset -k access"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*creat,open,openat,open_by_handle_at,truncate,ftruncate\\s*-F\\s*exit\\s*=\\s*-EACCES\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*access"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource54ref +{ +ResourceID = "[nxFileLine][V-204531.c][medium][SRG-OS-000064-GPOS-00033]::[RHEL]Baseline"; + ContainsLine = "-a always,exit -F arch=b64 -S creat,open,openat,open_by_handle_at,truncate,ftruncate -F exit=-EPERM -F auid>=1000 -F auid!=unset -k access"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*creat,open,openat,open_by_handle_at,truncate,ftruncate\\s*-F\\s*exit\\s*=\\s*-EPERM\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*access"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource55ref +{ +ResourceID = "[nxFileLine][V-204531.d][medium][SRG-OS-000064-GPOS-00033]::[RHEL]Baseline"; + ContainsLine = "-a always,exit -F arch=b64 -S creat,open,openat,open_by_handle_at,truncate,ftruncate -F exit=-EACCES -F auid>=1000 -F auid!=unset -k access"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*creat,open,openat,open_by_handle_at,truncate,ftruncate\\s*-F\\s*exit\\s*=\\s*-EACCES\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*access"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource56ref +{ +ResourceID = "[nxFileLine][V-204536][medium][SRG-OS-000392-GPOS-00172]::[RHEL]Baseline"; + ContainsLine = "-a always,exit -F path=/usr/sbin/semanage -F perm=x -F auid>=1000 -F auid!=unset -k privileged-priv_change"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/sbin/semanage\\s*-F\\s*perm\\s*=\\s*x\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-priv_change"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource57ref +{ +ResourceID = "[nxFileLine][V-204537][medium][SRG-OS-000392-GPOS-00172]::[RHEL]Baseline"; + ContainsLine = "-a always,exit -F path=/usr/sbin/setsebool -F perm=x -F auid>=1000 -F auid!=unset -k privileged-priv_change"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/sbin/setsebool\\s*-F\\s*perm\\s*=\\s*x\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-priv_change"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource58ref +{ +ResourceID = "[nxFileLine][V-204538][medium][SRG-OS-000392-GPOS-00172]::[RHEL]Baseline"; + ContainsLine = "-a always,exit -F path=/usr/bin/chcon -F perm=x -F auid>=1000 -F auid!=unset -k privileged-priv_change"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/bin/chcon\\s*-F\\s*perm\\s*=\\s*x\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-priv_change"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource59ref +{ +ResourceID = "[nxFileLine][V-204539][medium][SRG-OS-000392-GPOS-00172]::[RHEL]Baseline"; + ContainsLine = "-a always,exit -F path=/usr/sbin/setfiles -F perm=x -F auid>=1000 -F auid!=unset -k privileged-priv_change"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/sbin/setfiles\\s*-F\\s*perm\\s*=\\s*x\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-priv_change"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource60ref +{ +ResourceID = "[nxFileLine][V-204540][medium][SRG-OS-000392-GPOS-00172]::[RHEL]Baseline"; + ContainsLine = "-w /var/run/faillock -p wa -k logins"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-w\\s*/var/run/faillock\\s*-p\\s*wa\\s*-k\\s*logins"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource61ref +{ +ResourceID = "[nxFileLine][V-204541][medium][SRG-OS-000392-GPOS-00172]::[RHEL]Baseline"; + ContainsLine = "-w /var/log/lastlog -p wa -k logins"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-w\\s*/var/log/lastlog\\s*-p\\s*wa\\s*-k\\s*logins"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource62ref +{ +ResourceID = "[nxFileLine][V-204542][medium][SRG-OS-000042-GPOS-00020]::[RHEL]Baseline"; + ContainsLine = "-a always,exit -F path=/usr/bin/passwd -F perm=x -F auid>=1000 -F auid!=unset -k privileged-passwd"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/bin/passwd\\s*-F\\s*perm\\s*=\\s*x\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-passwd"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource63ref +{ +ResourceID = "[nxFileLine][V-204543][medium][SRG-OS-000042-GPOS-00020]::[RHEL]Baseline"; + ContainsLine = "-a always,exit -F path=/usr/sbin/unix_chkpwd -F perm=x -F auid>=1000 -F auid!=unset -k privileged-passwd"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/sbin/unix_chkpwd\\s*-F\\s*perm\\s*=\\s*x\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-passwd"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource64ref +{ +ResourceID = "[nxFileLine][V-204544][medium][SRG-OS-000042-GPOS-00020]::[RHEL]Baseline"; + ContainsLine = "-a always,exit -F path=/usr/bin/gpasswd -F perm=x -F auid>=1000 -F auid!=unset -k privileged-passwd"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/bin/gpasswd\\s*-F\\s*perm\\s*=\\s*x\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-passwd"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource65ref +{ +ResourceID = "[nxFileLine][V-204545][medium][SRG-OS-000042-GPOS-00020]::[RHEL]Baseline"; + ContainsLine = "-a always,exit -F path=/usr/bin/chage -F perm=x -F auid>=1000 -F auid!=unset -k privileged-passwd"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/bin/chage\\s*-F\\s*perm\\s*=\\s*x\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-passwd"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource66ref +{ +ResourceID = "[nxFileLine][V-204546][medium][SRG-OS-000042-GPOS-00020]::[RHEL]Baseline"; + ContainsLine = "-a always,exit -F path=/usr/sbin/userhelper -F perm=x -F auid>=1000 -F auid!=unset -k privileged-passwd"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/sbin/userhelper\\s*-F\\s*perm\\s*=\\s*x\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-passwd"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource67ref +{ +ResourceID = "[nxFileLine][V-204547][medium][SRG-OS-000037-GPOS-00015]::[RHEL]Baseline"; + ContainsLine = "-a always,exit -F path=/usr/bin/su -F perm=x -F auid>=1000 -F auid!=unset -k privileged-priv_change"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/bin/su\\s*-F\\s*perm\\s*=\\s*x\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-priv_change"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource68ref +{ +ResourceID = "[nxFileLine][V-204548][medium][SRG-OS-000037-GPOS-00015]::[RHEL]Baseline"; + ContainsLine = "-a always,exit -F path=/usr/bin/sudo -F perm=x -F auid>=1000 -F auid!=unset -k privileged-priv_change"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/bin/sudo\\s*-F\\s*perm\\s*=\\s*x\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-priv_change"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource69ref +{ +ResourceID = "[nxFileLine][V-204549.a][medium][SRG-OS-000037-GPOS-00015]::[RHEL]Baseline"; + ContainsLine = "-w /etc/sudoers -p wa -k privileged-actions"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-w /etc/sudoers -p wa -k privileged-actions"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource70ref +{ +ResourceID = "[nxFileLine][V-204549.b][medium][SRG-OS-000037-GPOS-00015]::[RHEL]Baseline"; + ContainsLine = "-w /etc/sudoers.d/ -p wa -k privileged-actions"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-w /etc/sudoers.d/ -p wa -k privileged-actions"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource71ref +{ +ResourceID = "[nxFileLine][V-204550][medium][SRG-OS-000037-GPOS-00015]::[RHEL]Baseline"; + ContainsLine = "-a always,exit -F path=/usr/bin/newgrp -F perm=x -F auid>=1000 -F auid!=unset -k privileged-priv_change"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/bin/newgrp\\s*-F\\s*perm\\s*=\\s*x\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-priv_change"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource72ref +{ +ResourceID = "[nxFileLine][V-204551][medium][SRG-OS-000037-GPOS-00015]::[RHEL]Baseline"; + ContainsLine = "-a always,exit -F path=/usr/bin/chsh -F perm=x -F auid>=1000 -F auid!=unset -k privileged-priv_change"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/bin/chsh\\s*-F\\s*perm\\s*=\\s*x\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-priv_change"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource73ref +{ +ResourceID = "[nxFileLine][V-204552.a][medium][SRG-OS-000042-GPOS-00020]::[RHEL]Baseline"; + ContainsLine = "-a always,exit -F arch=b32 -S mount -F auid>=1000 -F auid!=unset -k privileged-mount"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*mount\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-mount"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource74ref +{ +ResourceID = "[nxFileLine][V-204552.b][medium][SRG-OS-000042-GPOS-00020]::[RHEL]Baseline"; + ContainsLine = "-a always,exit -F arch=b64 -S mount -F auid>=1000 -F auid!=unset -k privileged-mount"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*mount\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-mount"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource75ref +{ +ResourceID = "[nxFileLine][V-204552.c][medium][SRG-OS-000042-GPOS-00020]::[RHEL]Baseline"; + ContainsLine = "-a always,exit -F path=/usr/bin/mount -F perm=x -F auid>=1000 -F auid!=unset -k privileged-mount"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/bin/mount\\s*-F\\s*perm\\s*=\\s*x\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-mount"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource76ref +{ +ResourceID = "[nxFileLine][V-204553][medium][SRG-OS-000042-GPOS-00020]::[RHEL]Baseline"; + ContainsLine = "-a always,exit -F path=/usr/bin/umount -F perm=x -F auid>=1000 -F auid!=unset -k privileged-mount"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/bin/umount\\s*-F\\s*perm\\s*=\\s*x\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-mount"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource77ref +{ +ResourceID = "[nxFileLine][V-204554][medium][SRG-OS-000042-GPOS-00020]::[RHEL]Baseline"; + ContainsLine = "-a always,exit -F path=/usr/sbin/postdrop -F perm=x -F auid>=1000 -F auid!=unset -k privileged-postfix"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/sbin/postdrop\\s*-F\\s*perm\\s*=\\s*x\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-postfix"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource78ref +{ +ResourceID = "[nxFileLine][V-204555][medium][SRG-OS-000042-GPOS-00020]::[RHEL]Baseline"; + ContainsLine = "-a always,exit -F path=/usr/sbin/postqueue -F perm=x -F auid>=1000 -F auid!=unset -k privileged-postfix"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/sbin/postqueue\\s*-F\\s*perm\\s*=\\s*x\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-postfix"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource79ref +{ +ResourceID = "[nxFileLine][V-204556][medium][SRG-OS-000042-GPOS-00020]::[RHEL]Baseline"; + ContainsLine = "-a always,exit -F path=/usr/libexec/openssh/ssh-keysign -F perm=x -F auid>=1000 -F auid!=unset -k privileged-ssh"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/libexec/openssh/ssh-keysign\\s*-F\\s*perm\\s*=\\s*x\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-ssh"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource80ref +{ +ResourceID = "[nxFileLine][V-204557][medium][SRG-OS-000042-GPOS-00020]::[RHEL]Baseline"; + ContainsLine = "-a always,exit -F path=/usr/bin/crontab -F perm=x -F auid>=1000 -F auid!=unset -k privileged-cron"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/bin/crontab\\s*-F\\s*perm\\s*=\\s*x\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-cron"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource81ref +{ +ResourceID = "[nxFileLine][V-204558][medium][SRG-OS-000471-GPOS-00215]::[RHEL]Baseline"; + ContainsLine = "-a always,exit -F path=/usr/sbin/pam_timestamp_check -F perm=x -F auid>=1000 -F auid!=unset -k privileged-pam"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/sbin/pam_timestamp_check\\s*-F\\s*perm\\s*=\\s*x\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-pam"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource82ref +{ +ResourceID = "[nxFileLine][V-204559.a][medium][SRG-OS-000471-GPOS-00216]::[RHEL]Baseline"; + ContainsLine = "-a always,exit -F arch=b32 -S create_module -F auid>=1000 -F auid!=unset -k module-change"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*create_module\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*module-change"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource83ref +{ +ResourceID = "[nxFileLine][V-204559.b][medium][SRG-OS-000471-GPOS-00216]::[RHEL]Baseline"; + ContainsLine = "-a always,exit -F arch=b64 -S create_module -F auid>=1000 -F auid!=unset -k module-change"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*create_module\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*module-change"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource84ref +{ +ResourceID = "[nxFileLine][V-204560.a][medium][SRG-OS-000471-GPOS-00216]::[RHEL]Baseline"; + ContainsLine = "-a always,exit -F arch=b32 -S init_module,finit_module -F auid>=1000 -F auid!=unset -k modulechange"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*init_module,finit_module\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*modulechange"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource85ref +{ +ResourceID = "[nxFileLine][V-204560.b][medium][SRG-OS-000471-GPOS-00216]::[RHEL]Baseline"; + ContainsLine = "-a always,exit -F arch=b64 -S init_module,finit_module -F auid>=1000 -F auid!=unset -k modulechange"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*init_module,finit_module\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*modulechange"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource86ref +{ +ResourceID = "[nxFileLine][V-204562.a][medium][SRG-OS-000471-GPOS-00216]::[RHEL]Baseline"; + ContainsLine = "-a always,exit -F arch=b32 -S delete_module -F auid>=1000 -F auid!=unset -k module-change"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*delete_module\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*module-change"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource87ref +{ +ResourceID = "[nxFileLine][V-204562.b][medium][SRG-OS-000471-GPOS-00216]::[RHEL]Baseline"; + ContainsLine = "-a always,exit -F arch=b64 -S delete_module -F auid>=1000 -F auid!=unset -k module-change"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*delete_module\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*module-change"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource88ref +{ +ResourceID = "[nxFileLine][V-204563][medium][SRG-OS-000471-GPOS-00216]::[RHEL]Baseline"; + ContainsLine = "-a always,exit -F path=/usr/bin/kmod -F perm=x -F auid>=1000 -F auid!=unset -k modules"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/bin/kmod\\s*-F\\s*perm\\s*=\\s*x\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*modules"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource89ref +{ +ResourceID = "[nxFileLine][V-204564][medium][SRG-OS-000004-GPOS-00004]::[RHEL]Baseline"; + ContainsLine = "-w /etc/passwd -p wa -k identity"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-w\\s*/etc/passwd\\s*-p\\s*wa\\s*-k\\s*identity"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource90ref +{ +ResourceID = "[nxFileLine][V-204565][medium][SRG-OS-000004-GPOS-00004]::[RHEL]Baseline"; + ContainsLine = "-w /etc/group -p wa -k identity"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-w\\s*/etc/group\\s*-p\\s*wa\\s*-k\\s*identity"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource91ref +{ +ResourceID = "[nxFileLine][V-204566][medium][SRG-OS-000004-GPOS-00004]::[RHEL]Baseline"; + ContainsLine = "-w /etc/gshadow -p wa -k identity"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-w\\s*/etc/gshadow\\s*-p\\s*wa\\s*-k\\s*identity"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource92ref +{ +ResourceID = "[nxFileLine][V-204567][medium][SRG-OS-000004-GPOS-00004]::[RHEL]Baseline"; + ContainsLine = "-w /etc/shadow -p wa -k identity"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-w\\s*/etc/shadow\\s*-p\\s*wa\\s*-k\\s*identity"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource93ref +{ +ResourceID = "[nxFileLine][V-204568][medium][SRG-OS-000004-GPOS-00004]::[RHEL]Baseline"; + ContainsLine = "-w /etc/security/opasswd -p wa -k identity"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-w\\s*/etc/security/opasswd\\s*-p\\s*wa\\s*-k\\s*identity"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource94ref +{ +ResourceID = "[nxFileLine][V-204572.a][medium][SRG-OS-000466-GPOS-00210]::[RHEL]Baseline"; + ContainsLine = "-a always,exit -F arch=b32 -S unlink,unlinkat,rename,renameat,rmdir -F auid>=1000 -F auid!=unset -k delete"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*unlink,unlinkat,rename,renameat,rmdir\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*delete"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource95ref +{ +ResourceID = "[nxFileLine][V-204572.b][medium][SRG-OS-000466-GPOS-00210]::[RHEL]Baseline"; + ContainsLine = "-a always,exit -F arch=b64 -S unlink,unlinkat,rename,renameat,rmdir -F auid>=1000 -F auid!=unset -k delete"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*unlink,unlinkat,rename,renameat,rmdir\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*delete"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource96ref +{ +ResourceID = "[nxFileLine][V-204578][medium][SRG-OS-000033-GPOS-00014]::[RHEL]Baseline"; + ContainsLine = "Ciphers aes256-ctr,aes192-ctr,aes128-ctr"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/ssh/sshd_config"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "^#\\s*Ciphers.*|^\\s*Ciphers\\s*aes128-ctr.*|^\\s*Ciphers\\s*aes192-ctr.*"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource97ref +{ +ResourceID = "[nxFileLine][V-204579.b][medium][SRG-OS-000163-GPOS-00072]::[RHEL]Baseline"; + ContainsLine = "declare -xr TMOUT=900"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/profile.d/tmout.sh"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "^\\s*TMOUT\\s*=\\s*[0-8]?[0-9]?[0-9]?$|^#\\s*TMOUT.*"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource98ref +{ +ResourceID = "[nxFileLine][V-204579.c][medium][SRG-OS-000163-GPOS-00072]::[RHEL]Baseline"; + ContainsLine = "declare -xr TMOUT=900"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/bashrc"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "^\\s*TMOUT\\s*=\\s*[0-8]?[0-9]?[0-9]?$|^#\\s*TMOUT.*"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource99ref +{ +ResourceID = "[nxFileLine][V-204579.d][medium][SRG-OS-000163-GPOS-00072]::[RHEL]Baseline"; + ContainsLine = "declare -xr TMOUT=900"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/profile"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "^\\s*TMOUT\\s*=\\s*[0-8]?[0-9]?[0-9]?$|^#\\s*TMOUT.*"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource100ref +{ +ResourceID = "[nxFileLine][V-204580][medium][SRG-OS-000023-GPOS-00006]::[RHEL]Baseline"; + ContainsLine = "banner /etc/issue"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/ssh/sshd_config"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*banner\\s*/etc/issue"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource101ref +{ +ResourceID = "[nxFileLine][V-204587][medium][SRG-OS-000163-GPOS-00072]::[RHEL]Baseline"; + ContainsLine = "ClientAliveInterval 600"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/ssh/sshd_config"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "^\\s*ClientAliveInterval\\s*[0-5]?[0-9]?[0-9]?\\s*$|^#\\s*ClientAliveInterval.*|^\\s*ClientAliveInterval\\s*$"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource102ref +{ +ResourceID = "[nxFileLine][V-204588][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; + ContainsLine = "RhostsRSAAuthentication no"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/ssh/sshd_config"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "^#\\s*RhostsRSAAuthentication.*$|^RhostsRSAAuthentication\\s*(?!no\\b)\\w*$"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource103ref +{ +ResourceID = "[nxFileLine][V-204589][medium][SRG-OS-000163-GPOS-00072]::[RHEL]Baseline"; + ContainsLine = "ClientAliveCountMax 0"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/ssh/sshd_config"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "^#\\s*ClientAliveCountMax.*$|^ClientAliveCountMax\\s*(?!0\\b)\\w*$"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource104ref +{ +ResourceID = "[nxFileLine][V-204590][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; + ContainsLine = "IgnoreRhosts yes"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/ssh/sshd_config"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "^#\\s*IgnoreRhosts.*$|^IgnoreRhosts\\s*(?!yes\\b)\\w*$"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource105ref +{ +ResourceID = "[nxFileLine][V-204591][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; + ContainsLine = "PrintLastLog yes"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/ssh/sshd_config"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "^#\\s*PrintLastLog.*$|^PrintLastLog\\s*(?!yes\\b)\\w*$"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource106ref +{ +ResourceID = "[nxFileLine][V-204592][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; + ContainsLine = "PermitRootLogin no"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/ssh/sshd_config"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "^#\\s*PermitRootLogin.*$|^PermitRootLogin\\s*(?!no\\b)\\w*$"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource107ref +{ +ResourceID = "[nxFileLine][V-204593][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; + ContainsLine = "IgnoreUserKnownHosts yes"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/ssh/sshd_config"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "^#\\s*IgnoreUserKnownHosts.*$|^IgnoreUserKnownHosts\\s*(?!yes\\b)\\w*$"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource108ref +{ +ResourceID = "[nxFileLine][V-204594][high][SRG-OS-000074-GPOS-00042]::[RHEL]Baseline"; + ContainsLine = "Protocol 2"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/ssh/sshd_config"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "^#\\s*Protocol.*$|^Protocol\\s*(?!2\\b)\\w*$"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource109ref +{ +ResourceID = "[nxFileLine][V-204595][medium][SRG-OS-000250-GPOS-00093]::[RHEL]Baseline"; + ContainsLine = "MACs hmac-sha2-512,hmac-sha2-256"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/ssh/sshd_config"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*MACs.*|\\s*MACs\\s*hmac-(?!sha2-512).*"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource110ref +{ +ResourceID = "[nxFileLine][V-204598][medium][SRG-OS-000364-GPOS-00151]::[RHEL]Baseline"; + ContainsLine = "GSSAPIAuthentication no"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/ssh/sshd_config"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "^#\\s*GSSAPIAuthentication.*$|^GSSAPIAuthentication\\s*(?!no\\b)\\w*$"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource111ref +{ +ResourceID = "[nxFileLine][V-204599][medium][SRG-OS-000364-GPOS-00151]::[RHEL]Baseline"; + ContainsLine = "KerberosAuthentication no"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/ssh/sshd_config"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "^#\\s*KerberosAuthentication.*$|^KerberosAuthentication\\s*(?!no\\b)\\w*$"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource112ref +{ +ResourceID = "[nxFileLine][V-204600][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; + ContainsLine = "StrictModes yes"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/ssh/sshd_config"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "^#\\s*StrictModes.*$|^StrictModes\\s*(?!yes\\b)\\w*$"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource113ref +{ +ResourceID = "[nxFileLine][V-204601][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; + ContainsLine = "UsePrivilegeSeparation sandbox"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/ssh/sshd_config"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "^#\\s*UsePrivilegeSeparation.*$|^UsePrivilegeSeparation\\s*(?!sandbox\\b)\\w*$"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource114ref +{ +ResourceID = "[nxFileLine][V-204602][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; + ContainsLine = "Compression delayed"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/ssh/sshd_config"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "^#\\s*Compression.*$|^Compression\\s*(?!delayed\\b)\\w*$"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource115ref +{ +ResourceID = "[nxFileLine][V-204622][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; + ContainsLine = "X11Forwarding no"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/ssh/sshd_config"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "^#\\s*X11Forwarding.*$|^X11Forwarding\\s*(?!no\\b)\\w*$"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource116ref +{ +ResourceID = "[nxFileLine][V-233307][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; + ContainsLine = "X11UseLocalhost yes"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/ssh/sshd_config"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*X11UseLocalhost\\s*yes"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource117ref +{ +ResourceID = "[nxFileLine][V-255925][medium][SRG-OS-000033-GPOS-00014]::[RHEL]Baseline"; + ContainsLine = "KexAlgorithms ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/ssh/sshd_config"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*KexAlgorithms\\s*ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxServiceResource as $MSFT_nxServiceResource1ref +{ +ResourceID = "[nxService][V-204451][medium][SRG-OS-000114-GPOS-00059]::[RHEL]Baseline"; + Controller = "systemd"; + Enabled = False; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxService.ps1::13::9::nxService"; + Name = "autofs"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxServiceResource as $MSFT_nxServiceResource2ref +{ +ResourceID = "[nxService][V-204492][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; + Controller = "systemd"; + Enabled = False; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxService.ps1::13::9::nxService"; + Name = "kdump"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxServiceResource as $MSFT_nxServiceResource3ref +{ +ResourceID = "[nxService][V-204503][medium][SRG-OS-000038-GPOS-00016]::[RHEL]Baseline"; + Controller = "systemd"; + State = "Running"; + Enabled = True; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxService.ps1::22::9::nxService"; + Name = "auditd"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxServiceResource as $MSFT_nxServiceResource4ref +{ +ResourceID = "[nxService][V-204586][medium][SRG-OS-000423-GPOS-00187]::[RHEL]Baseline"; + Controller = "systemd"; + State = "Running"; + Enabled = True; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxService.ps1::22::9::nxService"; + Name = "sshd"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxServiceResource as $MSFT_nxServiceResource5ref +{ +ResourceID = "[nxService][V-204604.b][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; + Controller = "systemd"; + State = "Running"; + Enabled = True; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxService.ps1::22::9::nxService"; + Name = "firewalld"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxScriptResource as $MSFT_nxScriptResource1ref +{ +ResourceID = "[nxScript][V-204399.b][medium][[Skip] SRG-OS-000029-GPOS-00010]::[RHEL]Baseline"; + GetScript = "#!/bin/bash\necho [V-204399.b][medium][[Skip] SRG-OS-000029-GPOS-00010]"; + TestScript = "#!/bin/bash\nexit 0"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxScript.skip.ps1::10::5::nxScript"; + SetScript = "#!/bin/bash"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxScriptResource as $MSFT_nxScriptResource2ref +{ +ResourceID = "[nxScript][V-204400][medium][[Skip] SRG-OS-000029-GPOS-00010]::[RHEL]Baseline"; + GetScript = "#!/bin/bash\necho [V-204400][medium][[Skip] SRG-OS-000029-GPOS-00010]"; + TestScript = "#!/bin/bash\nexit 0"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxScript.skip.ps1::10::5::nxScript"; + SetScript = "#!/bin/bash"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxScriptResource as $MSFT_nxScriptResource3ref +{ +ResourceID = "[nxScript][V-204403][medium][[Skip] SRG-OS-000029-GPOS-00010]::[RHEL]Baseline"; + GetScript = "#!/bin/bash\necho [V-204403][medium][[Skip] SRG-OS-000029-GPOS-00010]"; + TestScript = "#!/bin/bash\nexit 0"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxScript.skip.ps1::10::5::nxScript"; + SetScript = "#!/bin/bash"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxScriptResource as $MSFT_nxScriptResource4ref +{ +ResourceID = "[nxScript][V-204509][medium][[Skip] SRG-OS-000342-GPOS-00133]::[RHEL]Baseline"; + GetScript = "#!/bin/bash\necho [V-204509][medium][[Skip] SRG-OS-000342-GPOS-00133]"; + TestScript = "#!/bin/bash\nexit 0"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxScript.skip.ps1::10::5::nxScript"; + SetScript = "#!/bin/bash"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxScriptResource as $MSFT_nxScriptResource5ref +{ +ResourceID = "[nxScript][V-204513][medium][[Skip] SRG-OS-000343-GPOS-00134]::[RHEL]Baseline"; + GetScript = "#!/bin/bash\necho [V-204513][medium][[Skip] SRG-OS-000343-GPOS-00134]"; + TestScript = "#!/bin/bash\nexit 0"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxScript.skip.ps1::10::5::nxScript"; + SetScript = "#!/bin/bash"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxScriptResource as $MSFT_nxScriptResource6ref +{ +ResourceID = "[nxScript][V-204623][medium][[Skip] SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; + GetScript = "#!/bin/bash\necho [V-204623][medium][[Skip] SRG-OS-000480-GPOS-00227]"; + TestScript = "#!/bin/bash\nexit 0"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxScript.skip.ps1::10::5::nxScript"; + SetScript = "#!/bin/bash"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxScriptResource as $MSFT_nxScriptResource7ref +{ +ResourceID = "[nxScript][V-244557][medium][[Skip] SRG-OS-000080-GPOS-00048]::[RHEL]Baseline"; + GetScript = "#!/bin/bash\necho [V-244557][medium][[Skip] SRG-OS-000080-GPOS-00048]"; + TestScript = "#!/bin/bash\nexit 0"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxScript.skip.ps1::10::5::nxScript"; + SetScript = "#!/bin/bash"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxScriptResource as $MSFT_nxScriptResource8ref +{ +ResourceID = "[nxScript][V-244558][medium][[Skip] SRG-OS-000080-GPOS-00048]::[RHEL]Baseline"; + GetScript = "#!/bin/bash\necho [V-244558][medium][[Skip] SRG-OS-000080-GPOS-00048]"; + TestScript = "#!/bin/bash\nexit 0"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxScript.skip.ps1::10::5::nxScript"; + SetScript = "#!/bin/bash"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxScriptResource as $MSFT_nxScriptResource9ref +{ +ResourceID = "[nxScript][V-204399.a][medium][[Skip] SRG-OS-000029-GPOS-00010]::[RHEL]Baseline"; + GetScript = "#!/bin/bash\necho [V-204399.a][medium][[Skip] SRG-OS-000029-GPOS-00010]"; + TestScript = "#!/bin/bash\nexit 0"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxScript.skip.ps1::10::5::nxScript"; + SetScript = "#!/bin/bash"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxScriptResource as $MSFT_nxScriptResource10ref +{ +ResourceID = "[nxScript][V-255926][medium][[Skip] SRG-OS-000029-GPOS-00010]::[RHEL]Baseline"; + GetScript = "#!/bin/bash\necho [V-255926][medium][[Skip] SRG-OS-000029-GPOS-00010]"; + TestScript = "#!/bin/bash\nexit 0"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxScript.skip.ps1::10::5::nxScript"; + SetScript = "#!/bin/bash"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of OMI_ConfigurationDocument + + { + Version="2.0.0"; + + MinimumCompatibleVersion = "1.0.0"; + + CompatibleVersionAdditionalProperties= {"Omi_BaseResource:ConfigurationName"}; + + Author="Microsoft"; + + GenerationDate="03/09/2023 14:17:33"; + + GenerationHost="Microsoft"; + + Name="LinuxBaseLine"; + + }; + diff --git a/stig/linux/config/CentOS75.mof b/stig/linux/config/CentOS75.mof index e413d5c..3e2d3af 100644 --- a/stig/linux/config/CentOS75.mof +++ b/stig/linux/config/CentOS75.mof @@ -1,2118 +1,1829 @@ -/* -@TargetNode='CentOS75' -@GeneratedBy=Microsoft -@GenerationDate=06/30/2022 11:38:45 -@GenerationHost=Microsoft -*/ - -instance of MSFT_nxPackageResource as $MSFT_nxPackageResource1ref -{ -ResourceID = "[nxPackage][V-204442][high][SRG-OS-000095-GPOS-00049]::[RHEL]Baseline"; - Ensure = "Absent"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxPackage.ps1::8::5::nxPackage"; - Name = "rsh-server"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxPackageResource as $MSFT_nxPackageResource2ref -{ -ResourceID = "[nxPackage][V-204443][high][SRG-OS-000095-GPOS-00049]::[RHEL]Baseline"; - Ensure = "Absent"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxPackage.ps1::8::5::nxPackage"; - Name = "ypserv"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxPackageResource as $MSFT_nxPackageResource3ref -{ -ResourceID = "[nxPackage][V-204497][high][SRG-OS-000033-GPOS-00014]::[RHEL]Baseline"; - Ensure = "Present"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxPackage.ps1::8::5::nxPackage"; - Name = "dracut-fips"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxPackageResource as $MSFT_nxPackageResource4ref -{ -ResourceID = "[nxPackage][V-204498][low][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; - Ensure = "Present"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxPackage.ps1::8::5::nxPackage"; - Name = "aide"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxPackageResource as $MSFT_nxPackageResource5ref -{ -ResourceID = "[nxPackage][V-204502][high][SRG-OS-000095-GPOS-00049]::[RHEL]Baseline"; - Ensure = "Absent"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxPackage.ps1::8::5::nxPackage"; - Name = "telnet-server"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxPackageResource as $MSFT_nxPackageResource6ref -{ -ResourceID = "[nxPackage][V-204585][medium][SRG-OS-000423-GPOS-00187]::[RHEL]Baseline"; - Ensure = "Present"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxPackage.ps1::8::5::nxPackage"; - Name = "openssh-server"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxPackageResource as $MSFT_nxPackageResource7ref -{ -ResourceID = "[nxPackage][V-204604.a][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; - Ensure = "Present"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxPackage.ps1::8::5::nxPackage"; - Name = "firewalld"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxPackageResource as $MSFT_nxPackageResource8ref -{ -ResourceID = "[nxPackage][V-204620][high][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; - Ensure = "Absent"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxPackage.ps1::8::5::nxPackage"; - Name = "vsftpd"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxPackageResource as $MSFT_nxPackageResource9ref -{ -ResourceID = "[nxPackage][V-204621][high][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; - Ensure = "Absent"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxPackage.ps1::8::5::nxPackage"; - Name = "tftp-server"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxPackageResource as $MSFT_nxPackageResource10ref -{ -ResourceID = "[nxPackage][V-204631][medium][SRG-OS-000375-GPOS-00160]::[RHEL]Baseline"; - Ensure = "Present"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxPackage.ps1::8::5::nxPackage"; - Name = "pam_pkcs11"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileResource as $MSFT_nxFileResource1ref -{ -ResourceID = "[nxFile][V-204395][medium][SRG-OS-000023-GPOS-00006]::[RHEL]Baseline"; - Contents = "You are accessing a U.S. Government (USG) Information System (IS) that is provided for USG-authorized use only.\n\nBy using this IS (which includes any device attached to this IS), you consent to the following conditions:\n\n-The USG routinely intercepts and monitors communications on this IS for purposes including, but not limited to, penetration testing, COMSEC monitoring, network operations and defense, personnel misconduct (PM), law enforcement (LE), and counterintelligence (CI) investigations.\n\n-At any time, the USG may inspect and seize data stored on this IS.\n\n-Communications using, or data stored on, this IS are not private, are subject to routine monitoring, interception, and search, and may be disclosed or used for any USG-authorized purpose.\n\n-This IS includes security measures (e.g., authentication and access controls) to protect USG interests--not for your personal benefit or privacy.\n\n-Notwithstanding the above, using this IS does not constitute consent to PM, LE or CI investigative searching or monitoring of the content of privileged communications, or work product, related to personal representation or services by attorneys, psychotherapists, or clergy, and their assistants. Such communications and work product are private and confidential. See User Agreement for details."; - DestinationPath = "/etc/issue"; - ModuleName = "nx"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; - ModuleVersion = "1.0"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileResource as $MSFT_nxFileResource2ref -{ -ResourceID = "[nxFile][V-204449.a][medium][SRG-OS-000114-GPOS-00059]::[RHEL]Baseline"; - Contents = ""; - DestinationPath = "/etc/modprobe.d/usb-storage.conf"; - ModuleName = "nx"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; - ModuleVersion = "1.0"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileResource as $MSFT_nxFileResource3ref -{ -ResourceID = "[nxFile][V-204449.b][medium][SRG-OS-000114-GPOS-00059]::[RHEL]Baseline"; - Contents = ""; - DestinationPath = "/etc/modprobe.d/blacklist.conf"; - ModuleName = "nx"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; - ModuleVersion = "1.0"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileResource as $MSFT_nxFileResource4ref -{ -ResourceID = "[nxFile][V-204450.a][medium][SRG-OS-000378-GPOS-00163]::[RHEL]Baseline"; - Contents = ""; - DestinationPath = "/etc/modprobe.d/dccp.conf"; - ModuleName = "nx"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; - ModuleVersion = "1.0"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileResource as $MSFT_nxFileResource5ref -{ -ResourceID = "[nxFile][V-204576][low][SRG-OS-000027-GPOS-00008]::[RHEL]Baseline"; - Contents = "* hard maxlogins 10"; - DestinationPath = "/etc/security/limits.d/204576-powerstig.conf"; - ModuleName = "nx"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; - ModuleVersion = "1.0"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileResource as $MSFT_nxFileResource6ref -{ -ResourceID = "[nxFile][V-204579.a][medium][SRG-OS-000163-GPOS-00072]::[RHEL]Baseline"; - Contents = ""; - DestinationPath = "/etc/profile.d/tmout.sh"; - ModuleName = "nx"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; - ModuleVersion = "1.0"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileResource as $MSFT_nxFileResource7ref -{ -ResourceID = "[nxFile][V-204584][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; - Contents = "kernel.randomize_va_space = 2"; - DestinationPath = "/etc/sysctl.d/204584-powerstig.conf"; - ModuleName = "nx"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; - ModuleVersion = "1.0"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileResource as $MSFT_nxFileResource8ref -{ -ResourceID = "[nxFile][V-204609][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; - Contents = "net.ipv4.conf.all.accept_source_route = 0"; - DestinationPath = "/etc/sysctl.d/204609-powerstig.conf"; - ModuleName = "nx"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; - ModuleVersion = "1.0"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileResource as $MSFT_nxFileResource9ref -{ -ResourceID = "[nxFile][V-204610][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; - Contents = "net.ipv4.conf.all.rp_filter = 1"; - DestinationPath = "/etc/sysctl.d/204610-powerstig.conf"; - ModuleName = "nx"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; - ModuleVersion = "1.0"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileResource as $MSFT_nxFileResource10ref -{ -ResourceID = "[nxFile][V-204611][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; - Contents = "net.ipv4.conf.default.rp_filter = 1"; - DestinationPath = "/etc/sysctl.d/204611-powerstig.conf"; - ModuleName = "nx"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; - ModuleVersion = "1.0"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileResource as $MSFT_nxFileResource11ref -{ -ResourceID = "[nxFile][V-204612][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; - Contents = "net.ipv4.conf.default.accept_source_route = 0"; - DestinationPath = "/etc/sysctl.d/204612-powerstig.conf"; - ModuleName = "nx"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; - ModuleVersion = "1.0"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileResource as $MSFT_nxFileResource12ref -{ -ResourceID = "[nxFile][V-204613][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; - Contents = "net.ipv4.icmp_echo_ignore_broadcasts = 1"; - DestinationPath = "/etc/sysctl.d/204613-powerstig.conf"; - ModuleName = "nx"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; - ModuleVersion = "1.0"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileResource as $MSFT_nxFileResource13ref -{ -ResourceID = "[nxFile][V-204614][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; - Contents = "net.ipv4.conf.default.accept_redirects = 0"; - DestinationPath = "/etc/sysctl.d/204614-powerstig.conf"; - ModuleName = "nx"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; - ModuleVersion = "1.0"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileResource as $MSFT_nxFileResource14ref -{ -ResourceID = "[nxFile][V-204615][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; - Contents = "net.ipv4.conf.all.accept_redirects = 0"; - DestinationPath = "/etc/sysctl.d/204615-powerstig.conf"; - ModuleName = "nx"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; - ModuleVersion = "1.0"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileResource as $MSFT_nxFileResource15ref -{ -ResourceID = "[nxFile][V-204616][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; - Contents = "net.ipv4.conf.default.send_redirects = 0"; - DestinationPath = "/etc/sysctl.d/204616-powerstig.conf"; - ModuleName = "nx"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; - ModuleVersion = "1.0"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileResource as $MSFT_nxFileResource16ref -{ -ResourceID = "[nxFile][V-204617][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; - Contents = "net.ipv4.conf.all.send_redirects = 0"; - DestinationPath = "/etc/sysctl.d/204617-powerstig.conf"; - ModuleName = "nx"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; - ModuleVersion = "1.0"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileResource as $MSFT_nxFileResource17ref -{ -ResourceID = "[nxFile][V-204625][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; - Contents = "net.ipv4.ip_forward = 0"; - DestinationPath = "/etc/sysctl.d/204625-powerstig.conf"; - ModuleName = "nx"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; - ModuleVersion = "1.0"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileResource as $MSFT_nxFileResource18ref -{ -ResourceID = "[nxFile][V-204630][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; - Contents = "net.ipv6.conf.all.accept_source_route = 0"; - DestinationPath = "/etc/sysctl.d/204630-powerstig.conf"; - ModuleName = "nx"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; - ModuleVersion = "1.0"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileResource as $MSFT_nxFileResource19ref -{ -ResourceID = "[nxFile][V-237634.a][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; - Contents = "Defaults !targetpw"; - DestinationPath = "/etc/sudoers.d/237634a-powerstig.conf"; - ModuleName = "nx"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; - ModuleVersion = "1.0"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileResource as $MSFT_nxFileResource20ref -{ -ResourceID = "[nxFile][V-237634.b][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; - Contents = "Defaults !rootpw"; - DestinationPath = "/etc/sudoers.d/237634b-powerstig.conf"; - ModuleName = "nx"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; - ModuleVersion = "1.0"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileResource as $MSFT_nxFileResource21ref -{ -ResourceID = "[nxFile][V-237634.c][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; - Contents = "Defaults !runaspw"; - DestinationPath = "/etc/sudoers.d/237634c-powerstig.conf"; - ModuleName = "nx"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; - ModuleVersion = "1.0"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileResource as $MSFT_nxFileResource22ref -{ -ResourceID = "[nxFile][V-237635][medium][SRG-OS-000373-GPOS-00156]::[RHEL]Baseline"; - Contents = "Defaults timestamp_timeout=0"; - DestinationPath = "/etc/sudoers.d/237635-powerstig.conf"; - ModuleName = "nx"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; - ModuleVersion = "1.0"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileResource as $MSFT_nxFileResource23ref -{ -ResourceID = "[nxFile][V-250314][medium][SRG-OS-000324-GPOS-00125]::[RHEL]Baseline"; - Contents = "%wheel ALL=(ALL) TYPE=sysadm_t ROLE=sysadm_r ALL"; - DestinationPath = "/etc/sudoers.d/250314-powerstig.conf"; - ModuleName = "nx"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; - ModuleVersion = "1.0"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource1ref -{ -ResourceID = "[nxFileLine][V-204405][medium][SRG-OS-000069-GPOS-00037]::[RHEL]Baseline"; - ContainsLine = "password substack system-auth"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/pam.d/passwd"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "^\\s*password(?:\\t*|\\s*)substack\\tsystem-auth\\s*$|^#\\s*password\\s*substack\\s*system-auth.*"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource2ref -{ -ResourceID = "[nxFileLine][V-204407][medium][SRG-OS-000069-GPOS-00037]::[RHEL]Baseline"; - ContainsLine = "ucredit = -1"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/security/pwquality.conf"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "^#\\s*ucredit.*$|^ucredit\\s*=\\s*(?!-1\\b)\\w*$"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource3ref -{ -ResourceID = "[nxFileLine][V-204408][medium][SRG-OS-000070-GPOS-00038]::[RHEL]Baseline"; - ContainsLine = "lcredit = -1"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/security/pwquality.conf"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "^#\\s*lcredit.*$|^lcredit\\s*=\\s*(?!-1\\b)\\w*$"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource4ref -{ -ResourceID = "[nxFileLine][V-204409][medium][SRG-OS-000071-GPOS-00039]::[RHEL]Baseline"; - ContainsLine = "dcredit = -1"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/security/pwquality.conf"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "^#\\s*dcredit.*$|^dcredit\\s*=\\s*(?!-1\\b)\\w*$"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource5ref -{ -ResourceID = "[nxFileLine][V-204410][medium][SRG-OS-000266-GPOS-00101]::[RHEL]Baseline"; - ContainsLine = "ocredit=-1"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/security/pwquality.conf"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "^#\\s*ocredit.*$|^ocredit\\s*=\\s*(?!-1)\\w*$"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource6ref -{ -ResourceID = "[nxFileLine][V-204411][medium][SRG-OS-000072-GPOS-00040]::[RHEL]Baseline"; - ContainsLine = "difok = 8"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/security/pwquality.conf"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*difok\\s*=.*|^\\s*difok\\s*=\\s*(-|)[0-7]$"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource7ref -{ -ResourceID = "[nxFileLine][V-204412][medium][SRG-OS-000072-GPOS-00040]::[RHEL]Baseline"; - ContainsLine = "minclass = 4"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/security/pwquality.conf"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "^#\\s*minclass\\s*=.*|^\\s*minclass\\s*=\\s*(?!\\d{2,})[1-3]"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource8ref -{ -ResourceID = "[nxFileLine][V-204413][medium][SRG-OS-000072-GPOS-00040]::[RHEL]Baseline"; - ContainsLine = "maxrepeat = 3"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/security/pwquality.conf"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "^#\\s*maxrepeat\\s*=.*|^\\s*maxrepeat\\s*=\\s*(?:\\d{2,}|[4-9])"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource9ref -{ -ResourceID = "[nxFileLine][V-204414][medium][SRG-OS-000072-GPOS-00040]::[RHEL]Baseline"; - ContainsLine = "maxclassrepeat = 4"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/security/pwquality.conf"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "^#\\s*maxclassrepeat\\s*=.*|^\\s*maxclassrepeat\\s*=\\s*(?:\\d{2,}|[1-3|5-9])"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource10ref -{ -ResourceID = "[nxFileLine][V-204416][medium][SRG-OS-000073-GPOS-00041]::[RHEL]Baseline"; - ContainsLine = "ENCRYPT_METHOD SHA512"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/login.defs"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*ENCRYPT_METHOD\\s*SHA512"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource11ref -{ -ResourceID = "[nxFileLine][V-204418][medium][SRG-OS-000075-GPOS-00043]::[RHEL]Baseline"; - ContainsLine = "PASS_MIN_DAYS 1"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/login.defs"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "^\\s*PASS_MIN_DAYS\\s*[0]*$|#\\s*PASS_MIN_DAYS.*"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource12ref -{ -ResourceID = "[nxFileLine][V-204420][medium][SRG-OS-000076-GPOS-00044]::[RHEL]Baseline"; - ContainsLine = "PASS_MAX_DAYS 60"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/login.defs"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "^\\s*PASS_MAX_DAYS\\s*([6][1-9]|[7-9][0-9]|\\d{3,})$|#\\s*PASS_MAX_DAYS.*"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource13ref -{ -ResourceID = "[nxFileLine][V-204423][medium][SRG-OS-000078-GPOS-00046]::[RHEL]Baseline"; - ContainsLine = "minlen = 15"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/security/pwquality.conf"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "^\\s*minlen\\s*=\\s*([0-9]|[1][1-4])$|#\\s*minlen.*"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource14ref -{ -ResourceID = "[nxFileLine][V-204425][high][SRG-OS-000106-GPOS-00053]::[RHEL]Baseline"; - ContainsLine = "PermitEmptyPasswords no"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/ssh/sshd_config"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "^#\\s*PermitEmptyPasswords.*$|^PermitEmptyPasswords\\s*(?!no\\b)\\w*$"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource15ref -{ -ResourceID = "[nxFileLine][V-204426][medium][SRG-OS-000118-GPOS-00060]::[RHEL]Baseline"; - ContainsLine = "INACTIVE=35"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/default/useradd"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "^#\\s*INACTIVE\\s*=.*|^\\s*INACTIVE\\s*=\\s*(3[5-9]|[4-9]\\d+|\\d{3,})"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource16ref -{ -ResourceID = "[nxFileLine][V-204431][medium][SRG-OS-000480-GPOS-00226]::[RHEL]Baseline"; - ContainsLine = "FAIL_DELAY 4"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/login.defs"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "^#\\s*FAIL_DELAY.*|^FAIL_DELAY\\s*(?!\\d{2,})[1-3]"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource17ref -{ -ResourceID = "[nxFileLine][V-204434][medium][SRG-OS-000480-GPOS-00229]::[RHEL]Baseline"; - ContainsLine = "PermitUserEnvironment no"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/ssh/sshd_config"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "^#\\s*PermitUserEnvironment.*$|^PermitUserEnvironment\\s*(?!no\\b)\\w*$"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource18ref -{ -ResourceID = "[nxFileLine][V-204435][medium][SRG-OS-000480-GPOS-00229]::[RHEL]Baseline"; - ContainsLine = "HostbasedAuthentication no"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/ssh/sshd_config"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "^#\\s*HostbasedAuthentication.*$|^HostbasedAuthentication\\s*(?!no\\b)\\w*$"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource19ref -{ -ResourceID = "[nxFileLine][V-204447][high][SRG-OS-000366-GPOS-00153]::[RHEL]Baseline"; - ContainsLine = "gpgcheck=1"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/yum.conf"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*gpgcheck\\s*=\\s*1"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource20ref -{ -ResourceID = "[nxFileLine][V-204448][high][SRG-OS-000366-GPOS-00153]::[RHEL]Baseline"; - ContainsLine = "localpkg_gpgcheck=1"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/yum.conf"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*localpkg_gpgcheck\\s*=\\s*1"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource21ref -{ -ResourceID = "[nxFileLine][V-204449.c][medium][SRG-OS-000114-GPOS-00059]::[RHEL]Baseline"; - ContainsLine = "install usb-storage /bin/true"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/modprobe.d/usb-storage.conf"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*install\\s*usb-storage\\s*/bin/true"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource22ref -{ -ResourceID = "[nxFileLine][V-204449.d][medium][SRG-OS-000114-GPOS-00059]::[RHEL]Baseline"; - ContainsLine = "blacklist usb-storage"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/modprobe.d/blacklist.conf"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*blacklist\\s*usb-storage"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource23ref -{ -ResourceID = "[nxFileLine][V-204450.b][medium][SRG-OS-000378-GPOS-00163]::[RHEL]Baseline"; - ContainsLine = "install dccp /bin/true"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/modprobe.d/dccp.conf"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*install\\s*dccp\\s*/bin/true"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource24ref -{ -ResourceID = "[nxFileLine][V-204450.c][medium][SRG-OS-000378-GPOS-00163]::[RHEL]Baseline"; - ContainsLine = "blacklist dccp"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/modprobe.d/blacklist.conf"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*blacklist\\s*dccp"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource25ref -{ -ResourceID = "[nxFileLine][V-204452][low][SRG-OS-000437-GPOS-00194]::[RHEL]Baseline"; - ContainsLine = "clean_requirements_on_remove=1"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/yum.conf"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*clean_requirements_on_remove\\s*=\\s*1"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource26ref -{ -ResourceID = "[nxFileLine][V-204453][medium][SRG-OS-000445-GPOS-00199]::[RHEL]Baseline"; - ContainsLine = "SELINUX=enforcing"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/selinux/config"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "^#\\s*SELINUX.*$|^SELINUX\\s*=\\s*(?!enforcing)\\w*$"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource27ref -{ -ResourceID = "[nxFileLine][V-204454][medium][SRG-OS-000445-GPOS-00199]::[RHEL]Baseline"; - ContainsLine = "SELINUXTYPE=targeted"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/selinux/config"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "^#\\s*SELINUXTYPE.*$|^SELINUXTYPE\\s*=\\s*(?!targeted\\b)\\w*$"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource28ref -{ -ResourceID = "[nxFileLine][V-204457][medium][SRG-OS-000480-GPOS-00228]::[RHEL]Baseline"; - ContainsLine = "UMASK 077"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/login.defs"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "^\\s*UMASK(?!\\s077\\b)\\s*\\d*\\s*$|^#\\s*UMASK.*"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource29ref -{ -ResourceID = "[nxFileLine][V-204466][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; - ContainsLine = "CREATE_HOME yes"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/login.defs"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "^#\\s*CREATE_HOME.*$|^CREATE_HOME\\s*(?!yes\\b)\\w*$|^CREATE_HOME\\t.*"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource30ref -{ -ResourceID = "[nxFileLine][V-204504][medium][SRG-OS-000046-GPOS-00022]::[RHEL]Baseline"; - ContainsLine = "-f 2"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "^#\\s*-f\\s+2|^\\s*-f\\s*1"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileResource as $MSFT_nxFileResource24ref -{ -SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::29::9::nxFile"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - ResourceID = "[nxFile][V-204506.a][medium][SRG-OS-000342-GPOS-00133]::[RHEL]Baseline"; - DestinationPath = "/etc/audisp/plugins.d/au-remote.conf"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource31ref -{ -ResourceID = "[nxFileLine][V-204506.a][medium][SRG-OS-000342-GPOS-00133]::[RHEL]Baseline"; - ContainsLine = "active = yes"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audisp/plugins.d/au-remote.conf"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "\\s*active\\s*=\\s*no|active=yes|#\\s*active\\s*=.*"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource32ref -{ -ResourceID = "[nxFileLine][V-204506.b][medium][SRG-OS-000342-GPOS-00133]::[RHEL]Baseline"; - ContainsLine = "direction = out"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audisp/plugins.d/au-remote.conf"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*direction\\s*=\\s*out"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource33ref -{ -ResourceID = "[nxFileLine][V-204506.c][medium][SRG-OS-000342-GPOS-00133]::[RHEL]Baseline"; - ContainsLine = "path = /sbin/audisp-remote"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audisp/plugins.d/au-remote.conf"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*path\\s*=\\s*/sbin/audisp-remote"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource34ref -{ -ResourceID = "[nxFileLine][V-204506.d][medium][SRG-OS-000342-GPOS-00133]::[RHEL]Baseline"; - ContainsLine = "type = always"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audisp/plugins.d/au-remote.conf"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*type\\s*=\\s*always"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource35ref -{ -ResourceID = "[nxFileLine][V-204507][medium][SRG-OS-000342-GPOS-00133]::[RHEL]Baseline"; - ContainsLine = "overflow_action = syslog"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audisp/audispd.conf"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "^#\\s*overflow_action.*$|^overflow_action\\s*=\\s*(?!syslog$)\\w*$"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource36ref -{ -ResourceID = "[nxFileLine][V-204508][medium][SRG-OS-000342-GPOS-00133]::[RHEL]Baseline"; - ContainsLine = "name_format = hostname"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audisp/audispd.conf"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "^#\\s*name_format.*$|^name_format\\s*=\\s*(?!hostname$)\\w*$"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileResource as $MSFT_nxFileResource25ref -{ -SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::19::9::nxFile"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - ResourceID = "[nxFile][V-204510][medium][SRG-OS-000342-GPOS-00133]::[RHEL]Baseline"; - DestinationPath = "/etc/audisp/audisp-remote.conf"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource37ref -{ -ResourceID = "[nxFileLine][V-204510][medium][SRG-OS-000342-GPOS-00133]::[RHEL]Baseline"; - ContainsLine = "enable_krb5 = yes"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audisp/audisp-remote.conf"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*enable_krb5\\s*=\\s*yes"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource38ref -{ -ResourceID = "[nxFileLine][V-204511][medium][SRG-OS-000342-GPOS-00133]::[RHEL]Baseline"; - ContainsLine = "disk_full_action = single"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audisp/audisp-remote.conf"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "^#\\s*disk_full_action\\s*=.*|^disk_full_action\\s*=\\s*(?!halt\\b|single\\b|syslog\\b)\\w+"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource39ref -{ -ResourceID = "[nxFileLine][V-204512][medium][SRG-OS-000342-GPOS-00133]::[RHEL]Baseline"; - ContainsLine = "network_failure_action = syslog"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audisp/audisp-remote.conf"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "^#\\s*network_failure_action\\s*=.*|^network_failure_action\\s*=\\s*(?!halt\\b|single\\b|syslog\\b)\\w+"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource40ref -{ -ResourceID = "[nxFileLine][V-204514][medium][SRG-OS-000343-GPOS-00134]::[RHEL]Baseline"; - ContainsLine = "space_left_action = email"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/auditd.conf"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "^#\\s*space_left_action.*$|^space_left_action\\s*=\\s*(?!email$)\\w*$"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource41ref -{ -ResourceID = "[nxFileLine][V-204515][medium][SRG-OS-000343-GPOS-00134]::[RHEL]Baseline"; - ContainsLine = "action_mail_acct = root"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/auditd.conf"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "^#\\s*action_mail_acct.*|^action_mail_acct\\s*=\\s*(?!root\\b)\\w+"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource42ref -{ -ResourceID = "[nxFileLine][V-204516.a][medium][SRG-OS-000327-GPOS-00127]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S execve -C uid!=euid -F euid=0 -k setuid"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*execve\\s*-C\\s*uid!\\s*=\\s*euid\\s*-F\\s*euid\\s*=\\s*0\\s*-k\\s*setuid"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource43ref -{ -ResourceID = "[nxFileLine][V-204516.b][medium][SRG-OS-000327-GPOS-00127]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S execve -C uid!=euid -F euid=0 -k setuid"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*execve\\s*-C\\s*uid!\\s*=\\s*euid\\s*-F\\s*euid\\s*=\\s*0\\s*-k\\s*setuid"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource44ref -{ -ResourceID = "[nxFileLine][V-204516.c][medium][SRG-OS-000327-GPOS-00127]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S execve -C gid!=egid -F egid=0 -k setgid"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*execve\\s*-C\\s*gid!\\s*=\\s*egid\\s*-F\\s*egid\\s*=\\s*0\\s*-k\\s*setgid"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource45ref -{ -ResourceID = "[nxFileLine][V-204516.d][medium][SRG-OS-000327-GPOS-00127]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S execve -C gid!=egid -F egid=0 -k setgid"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*execve\\s*-C\\s*gid!\\s*=\\s*egid\\s*-F\\s*egid\\s*=\\s*0\\s*-k\\s*setgid"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource46ref -{ -ResourceID = "[nxFileLine][V-204517.a][medium][SRG-OS-000064-GPOS-00033]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S chown,fchown,fchownat,lchown -F auid>=1000 -F auid!=unset -k perm_mod"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*chown,fchown,fchownat,lchown\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*perm_mod"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource47ref -{ -ResourceID = "[nxFileLine][V-204517.b][medium][SRG-OS-000064-GPOS-00033]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S chown,fchown,fchownat,lchown -F auid>=1000 -F auid!=unset -k perm_mod"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*chown,fchown,fchownat,lchown\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*perm_mod"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource48ref -{ -ResourceID = "[nxFileLine][V-204521.a][medium][SRG-OS-000458-GPOS-00203]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S chmod,fchmod,fchmodat -F auid>=1000 -F auid!=unset -k perm_mod"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*chmod,fchmod,fchmodat\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*perm_mod"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource49ref -{ -ResourceID = "[nxFileLine][V-204521.b][medium][SRG-OS-000458-GPOS-00203]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S chmod,fchmod,fchmodat -F auid>=1000 -F auid!=unset -k perm_mod"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*chmod,fchmod,fchmodat\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*perm_mod"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource50ref -{ -ResourceID = "[nxFileLine][V-204524.a][medium][SRG-OS-000458-GPOS-00203]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S setxattr,fsetxattr,lsetxattr,removexattr,fremovexattr,lremovexattr -F auid>=1000 -F auid!=unset -k perm_mod"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*setxattr,fsetxattr,lsetxattr,removexattr,fremovexattr,lremovexattr\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*perm_mod"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource51ref -{ -ResourceID = "[nxFileLine][V-204524.b][medium][SRG-OS-000458-GPOS-00203]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S setxattr,fsetxattr,lsetxattr,removexattr,fremovexattr,lremovexattr -F auid>=1000 -F auid!=unset -k perm_mod"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*setxattr,fsetxattr,lsetxattr,removexattr,fremovexattr,lremovexattr\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*perm_mod"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource52ref -{ -ResourceID = "[nxFileLine][V-204531.a][medium][SRG-OS-000064-GPOS-00033]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S creat,open,openat,open_by_handle_at,truncate,ftruncate -F exit=-EPERM -F auid>=1000 -F auid!=unset -k access"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*creat,open,openat,open_by_handle_at,truncate,ftruncate\\s*-F\\s*exit\\s*=\\s*-EPERM\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*access"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource53ref -{ -ResourceID = "[nxFileLine][V-204531.b][medium][SRG-OS-000064-GPOS-00033]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S creat,open,openat,open_by_handle_at,truncate,ftruncate -F exit=-EACCES -F auid>=1000 -F auid!=unset -k access"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*creat,open,openat,open_by_handle_at,truncate,ftruncate\\s*-F\\s*exit\\s*=\\s*-EACCES\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*access"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource54ref -{ -ResourceID = "[nxFileLine][V-204531.c][medium][SRG-OS-000064-GPOS-00033]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S creat,open,openat,open_by_handle_at,truncate,ftruncate -F exit=-EPERM -F auid>=1000 -F auid!=unset -k access"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*creat,open,openat,open_by_handle_at,truncate,ftruncate\\s*-F\\s*exit\\s*=\\s*-EPERM\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*access"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource55ref -{ -ResourceID = "[nxFileLine][V-204531.d][medium][SRG-OS-000064-GPOS-00033]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S creat,open,openat,open_by_handle_at,truncate,ftruncate -F exit=-EACCES -F auid>=1000 -F auid!=unset -k access"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*creat,open,openat,open_by_handle_at,truncate,ftruncate\\s*-F\\s*exit\\s*=\\s*-EACCES\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*access"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource56ref -{ -ResourceID = "[nxFileLine][V-204536][medium][SRG-OS-000392-GPOS-00172]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F path=/usr/sbin/semanage -F auid>=1000 -F auid!=unset -k privileged-priv_change"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/sbin/semanage\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-priv_change"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource57ref -{ -ResourceID = "[nxFileLine][V-204537][medium][SRG-OS-000392-GPOS-00172]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F path=/usr/sbin/setsebool -F auid>=1000 -F auid!=unset -k privileged-priv_change"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/sbin/setsebool\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-priv_change"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource58ref -{ -ResourceID = "[nxFileLine][V-204538][medium][SRG-OS-000392-GPOS-00172]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F path=/usr/bin/chcon -F auid>=1000 -F auid!=unset -k privileged-priv_change"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/bin/chcon\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-priv_change"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource59ref -{ -ResourceID = "[nxFileLine][V-204539][medium][SRG-OS-000392-GPOS-00172]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F path=/usr/sbin/setfiles -F auid>=1000 -F auid!=unset -k privileged-priv_change"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/sbin/setfiles\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-priv_change"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource60ref -{ -ResourceID = "[nxFileLine][V-204540][medium][SRG-OS-000392-GPOS-00172]::[RHEL]Baseline"; - ContainsLine = "-w /var/run/faillock -p wa -k logins"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-w\\s*/var/run/faillock\\s*-p\\s*wa\\s*-k\\s*logins"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource61ref -{ -ResourceID = "[nxFileLine][V-204541][medium][SRG-OS-000392-GPOS-00172]::[RHEL]Baseline"; - ContainsLine = "-w /var/log/lastlog -p wa -k logins"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-w\\s*/var/log/lastlog\\s*-p\\s*wa\\s*-k\\s*logins"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource62ref -{ -ResourceID = "[nxFileLine][V-204542][medium][SRG-OS-000042-GPOS-00020]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F path=/usr/bin/passwd -F auid>=1000 -F auid!=unset -k privileged-passwd"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/bin/passwd\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-passwd"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource63ref -{ -ResourceID = "[nxFileLine][V-204543][medium][SRG-OS-000042-GPOS-00020]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F path=/usr/sbin/unix_chkpwd -F auid>=1000 -F auid!=unset -k privileged-passwd"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/sbin/unix_chkpwd\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-passwd"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource64ref -{ -ResourceID = "[nxFileLine][V-204544][medium][SRG-OS-000042-GPOS-00020]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F path=/usr/bin/gpasswd -F auid>=1000 -F auid!=unset -k privileged-passwd"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/bin/gpasswd\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-passwd"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource65ref -{ -ResourceID = "[nxFileLine][V-204545][medium][SRG-OS-000042-GPOS-00020]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F path=/usr/bin/chage -F auid>=1000 -F auid!=unset -k privileged-passwd"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/bin/chage\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-passwd"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource66ref -{ -ResourceID = "[nxFileLine][V-204546][medium][SRG-OS-000042-GPOS-00020]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F path=/usr/sbin/userhelper -F auid>=1000 -F auid!=unset -k privileged-passwd"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/sbin/userhelper\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-passwd"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource67ref -{ -ResourceID = "[nxFileLine][V-204547][medium][SRG-OS-000037-GPOS-00015]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F path=/usr/bin/su -F auid>=1000 -F auid!=unset -k privileged-priv_change"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/bin/su\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-priv_change"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource68ref -{ -ResourceID = "[nxFileLine][V-204548][medium][SRG-OS-000037-GPOS-00015]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F path=/usr/bin/sudo -F auid>=1000 -F auid!=unset -k privileged-priv_change"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/bin/sudo\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-priv_change"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource69ref -{ -ResourceID = "[nxFileLine][V-204549.a][medium][SRG-OS-000037-GPOS-00015]::[RHEL]Baseline"; - ContainsLine = "-w /etc/sudoers -p wa -k privileged-actions"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-w /etc/sudoers -p wa -k privileged-actions"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource70ref -{ -ResourceID = "[nxFileLine][V-204549.b][medium][SRG-OS-000037-GPOS-00015]::[RHEL]Baseline"; - ContainsLine = "-w /etc/sudoers.d/ -p wa -k privileged-actions"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-w /etc/sudoers.d/ -p wa -k privileged-actions"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource71ref -{ -ResourceID = "[nxFileLine][V-204550][medium][SRG-OS-000037-GPOS-00015]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F path=/usr/bin/newgrp -F auid>=1000 -F auid!=unset -k privileged-priv_change"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/bin/newgrp\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-priv_change"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource72ref -{ -ResourceID = "[nxFileLine][V-204551][medium][SRG-OS-000037-GPOS-00015]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F path=/usr/bin/chsh -F auid>=1000 -F auid!=unset -k privileged-priv_change"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/bin/chsh\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-priv_change"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource73ref -{ -ResourceID = "[nxFileLine][V-204552.a][medium][SRG-OS-000042-GPOS-00020]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S mount -F auid>=1000 -F auid!=unset -k privileged-mount"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*mount\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-mount"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource74ref -{ -ResourceID = "[nxFileLine][V-204552.b][medium][SRG-OS-000042-GPOS-00020]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S mount -F auid>=1000 -F auid!=unset -k privileged-mount"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*mount\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-mount"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource75ref -{ -ResourceID = "[nxFileLine][V-204552.c][medium][SRG-OS-000042-GPOS-00020]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F path=/usr/bin/mount -F auid>=1000 -F auid!=unset -k privileged-mount"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/bin/mount\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-mount"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource76ref -{ -ResourceID = "[nxFileLine][V-204553][medium][SRG-OS-000042-GPOS-00020]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F path=/usr/bin/umount -F auid>=1000 -F auid!=unset -k privileged-mount"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/bin/umount\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-mount"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource77ref -{ -ResourceID = "[nxFileLine][V-204554][medium][SRG-OS-000042-GPOS-00020]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F path=/usr/sbin/postdrop -F auid>=1000 -F auid!=unset -k privileged-postfix"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/sbin/postdrop\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-postfix"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource78ref -{ -ResourceID = "[nxFileLine][V-204555][medium][SRG-OS-000042-GPOS-00020]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F path=/usr/sbin/postqueue -F auid>=1000 -F auid!=unset -k privileged-postfix"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/sbin/postqueue\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-postfix"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource79ref -{ -ResourceID = "[nxFileLine][V-204556][medium][SRG-OS-000042-GPOS-00020]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F path=/usr/libexec/openssh/ssh-keysign -F auid>=1000 -F auid!=unset -k privileged-ssh"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/libexec/openssh/ssh-keysign\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-ssh"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource80ref -{ -ResourceID = "[nxFileLine][V-204557][medium][SRG-OS-000042-GPOS-00020]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F path=/usr/bin/crontab -F auid>=1000 -F auid!=unset -k privileged-cron"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/bin/crontab\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-cron"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource81ref -{ -ResourceID = "[nxFileLine][V-204558][medium][SRG-OS-000471-GPOS-00215]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F path=/usr/sbin/pam_timestamp_check -F auid>=1000 -F auid!=unset -k privileged-pam"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/sbin/pam_timestamp_check\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-pam"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource82ref -{ -ResourceID = "[nxFileLine][V-204559.a][medium][SRG-OS-000471-GPOS-00216]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S create_module -k module-change"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*create_module\\s*-k\\s*module-change"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource83ref -{ -ResourceID = "[nxFileLine][V-204559.b][medium][SRG-OS-000471-GPOS-00216]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S create_module -k module-change"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*create_module\\s*-k\\s*module-change"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource84ref -{ -ResourceID = "[nxFileLine][V-204560.a][medium][SRG-OS-000471-GPOS-00216]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S init_module,finit_module -k modulechange"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*init_module,finit_module\\s*-k\\s*modulechange"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource85ref -{ -ResourceID = "[nxFileLine][V-204560.b][medium][SRG-OS-000471-GPOS-00216]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S init_module,finit_module -k modulechange"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*init_module,finit_module\\s*-k\\s*modulechange"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource86ref -{ -ResourceID = "[nxFileLine][V-204562.a][medium][SRG-OS-000471-GPOS-00216]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S delete_module -k module-change"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*delete_module\\s*-k\\s*module-change"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource87ref -{ -ResourceID = "[nxFileLine][V-204562.b][medium][SRG-OS-000471-GPOS-00216]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S delete_module -k module-change"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*delete_module\\s*-k\\s*module-change"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource88ref -{ -ResourceID = "[nxFileLine][V-204563][medium][SRG-OS-000471-GPOS-00216]::[RHEL]Baseline"; - ContainsLine = "-w /usr/bin/kmod -p x -F auid!=unset -k module-change"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-w\\s*/usr/bin/kmod\\s*-p\\s*x\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*module-change"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource89ref -{ -ResourceID = "[nxFileLine][V-204564][medium][SRG-OS-000004-GPOS-00004]::[RHEL]Baseline"; - ContainsLine = "-w /etc/passwd -p wa -k identity"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-w\\s*/etc/passwd\\s*-p\\s*wa\\s*-k\\s*identity"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource90ref -{ -ResourceID = "[nxFileLine][V-204565][medium][SRG-OS-000004-GPOS-00004]::[RHEL]Baseline"; - ContainsLine = "-w /etc/group -p wa -k identity"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-w\\s*/etc/group\\s*-p\\s*wa\\s*-k\\s*identity"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource91ref -{ -ResourceID = "[nxFileLine][V-204566][medium][SRG-OS-000004-GPOS-00004]::[RHEL]Baseline"; - ContainsLine = "-w /etc/gshadow -p wa -k identity"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-w\\s*/etc/gshadow\\s*-p\\s*wa\\s*-k\\s*identity"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource92ref -{ -ResourceID = "[nxFileLine][V-204567][medium][SRG-OS-000004-GPOS-00004]::[RHEL]Baseline"; - ContainsLine = "-w /etc/shadow -p wa -k identity"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-w\\s*/etc/shadow\\s*-p\\s*wa\\s*-k\\s*identity"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource93ref -{ -ResourceID = "[nxFileLine][V-204568][medium][SRG-OS-000004-GPOS-00004]::[RHEL]Baseline"; - ContainsLine = "-w /etc/security/opasswd -p wa -k identity"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-w\\s*/etc/security/opasswd\\s*-p\\s*wa\\s*-k\\s*identity"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource94ref -{ -ResourceID = "[nxFileLine][V-204572.a][medium][SRG-OS-000466-GPOS-00210]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S unlink,unlinkat,rename,renameat,rmdir -F auid>=1000 -F auid!=unset -k delete"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*unlink,unlinkat,rename,renameat,rmdir\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*delete"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource95ref -{ -ResourceID = "[nxFileLine][V-204572.b][medium][SRG-OS-000466-GPOS-00210]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S unlink,unlinkat,rename,renameat,rmdir -F auid>=1000 -F auid!=unset -k delete"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*unlink,unlinkat,rename,renameat,rmdir\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*delete"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource96ref -{ -ResourceID = "[nxFileLine][V-204578][medium][SRG-OS-000033-GPOS-00014]::[RHEL]Baseline"; - ContainsLine = "Ciphers aes256-ctr,aes192-ctr,aes128-ctr"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/ssh/sshd_config"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "^#\\s*Ciphers.*|^\\s*Ciphers\\s*aes128-ctr.*|^\\s*Ciphers\\s*aes192-ctr.*"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource97ref -{ -ResourceID = "[nxFileLine][V-204579.b][medium][SRG-OS-000163-GPOS-00072]::[RHEL]Baseline"; - ContainsLine = "declare -xr TMOUT=900"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/profile.d/tmout.sh"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "^\\s*TMOUT\\s*=\\s*[0-8]?[0-9]?[0-9]?$|^#\\s*TMOUT.*"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource98ref -{ -ResourceID = "[nxFileLine][V-204580][medium][SRG-OS-000023-GPOS-00006]::[RHEL]Baseline"; - ContainsLine = "banner /etc/issue"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/ssh/sshd_config"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*banner\\s*/etc/issue"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource99ref -{ -ResourceID = "[nxFileLine][V-204587][medium][SRG-OS-000163-GPOS-00072]::[RHEL]Baseline"; - ContainsLine = "ClientAliveInterval 600"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/ssh/sshd_config"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "^\\s*ClientAliveInterval\\s*[0-5]?[0-9]?[0-9]?\\s*$|^#\\s*ClientAliveInterval.*|^\\s*ClientAliveInterval\\s*$"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource100ref -{ -ResourceID = "[nxFileLine][V-204588][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; - ContainsLine = "RhostsRSAAuthentication no"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/ssh/sshd_config"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "^#\\s*RhostsRSAAuthentication.*$|^RhostsRSAAuthentication\\s*(?!no\\b)\\w*$"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource101ref -{ -ResourceID = "[nxFileLine][V-204589][medium][SRG-OS-000163-GPOS-00072]::[RHEL]Baseline"; - ContainsLine = "ClientAliveCountMax 0"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/ssh/sshd_config"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "^#\\s*ClientAliveCountMax.*$|^ClientAliveCountMax\\s*(?!0\\b)\\w*$"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource102ref -{ -ResourceID = "[nxFileLine][V-204590][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; - ContainsLine = "IgnoreRhosts yes"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/ssh/sshd_config"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "^#\\s*IgnoreRhosts.*$|^IgnoreRhosts\\s*(?!yes\\b)\\w*$"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource103ref -{ -ResourceID = "[nxFileLine][V-204591][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; - ContainsLine = "PrintLastLog yes"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/ssh/sshd_config"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "^#\\s*PrintLastLog.*$|^PrintLastLog\\s*(?!yes\\b)\\w*$"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource104ref -{ -ResourceID = "[nxFileLine][V-204592][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; - ContainsLine = "PermitRootLogin no"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/ssh/sshd_config"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "^#\\s*PermitRootLogin.*$|^PermitRootLogin\\s*(?!no\\b)\\w*$"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource105ref -{ -ResourceID = "[nxFileLine][V-204593][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; - ContainsLine = "IgnoreUserKnownHosts yes"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/ssh/sshd_config"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "^#\\s*IgnoreUserKnownHosts.*$|^IgnoreUserKnownHosts\\s*(?!yes\\b)\\w*$"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource106ref -{ -ResourceID = "[nxFileLine][V-204594][high][SRG-OS-000074-GPOS-00042]::[RHEL]Baseline"; - ContainsLine = "Protocol 2"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/ssh/sshd_config"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "^#\\s*Protocol.*$|^Protocol\\s*(?!2\\b)\\w*$"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource107ref -{ -ResourceID = "[nxFileLine][V-204595][medium][SRG-OS-000250-GPOS-00093]::[RHEL]Baseline"; - ContainsLine = "MACs hmac-sha2-512,hmac-sha2-256"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/ssh/sshd_config"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*MACs.*|\\s*MACs\\s*hmac-(?!sha2-512).*"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource108ref -{ -ResourceID = "[nxFileLine][V-204598][medium][SRG-OS-000364-GPOS-00151]::[RHEL]Baseline"; - ContainsLine = "GSSAPIAuthentication no"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/ssh/sshd_config"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "^#\\s*GSSAPIAuthentication.*$|^GSSAPIAuthentication\\s*(?!no\\b)\\w*$"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource109ref -{ -ResourceID = "[nxFileLine][V-204599][medium][SRG-OS-000364-GPOS-00151]::[RHEL]Baseline"; - ContainsLine = "KerberosAuthentication no"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/ssh/sshd_config"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "^#\\s*KerberosAuthentication.*$|^KerberosAuthentication\\s*(?!no\\b)\\w*$"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource110ref -{ -ResourceID = "[nxFileLine][V-204600][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; - ContainsLine = "StrictModes yes"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/ssh/sshd_config"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "^#\\s*StrictModes.*$|^StrictModes\\s*(?!yes\\b)\\w*$"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource111ref -{ -ResourceID = "[nxFileLine][V-204601][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; - ContainsLine = "UsePrivilegeSeparation sandbox"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/ssh/sshd_config"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "^#\\s*UsePrivilegeSeparation.*$|^UsePrivilegeSeparation\\s*(?!sandbox\\b)\\w*$"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource112ref -{ -ResourceID = "[nxFileLine][V-204602][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; - ContainsLine = "Compression delayed"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/ssh/sshd_config"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "^#\\s*Compression.*$|^Compression\\s*(?!delayed\\b)\\w*$"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource113ref -{ -ResourceID = "[nxFileLine][V-204622][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; - ContainsLine = "X11Forwarding no"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/ssh/sshd_config"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "^#\\s*X11Forwarding.*$|^X11Forwarding\\s*(?!no\\b)\\w*$"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource114ref -{ -ResourceID = "[nxFileLine][V-233307][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; - ContainsLine = "X11UseLocalhost yes"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/ssh/sshd_config"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*X11UseLocalhost\\s*yes"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxServiceResource as $MSFT_nxServiceResource1ref -{ -ResourceID = "[nxService][V-204451][medium][SRG-OS-000114-GPOS-00059]::[RHEL]Baseline"; - Controller = "systemd"; - Enabled = False; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxService.ps1::13::9::nxService"; - Name = "autofs"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxServiceResource as $MSFT_nxServiceResource2ref -{ -ResourceID = "[nxService][V-204492][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; - Controller = "systemd"; - Enabled = False; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxService.ps1::13::9::nxService"; - Name = "kdump"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxServiceResource as $MSFT_nxServiceResource3ref -{ -ResourceID = "[nxService][V-204503][medium][SRG-OS-000038-GPOS-00016]::[RHEL]Baseline"; - Controller = "systemd"; - State = "Running"; - Enabled = True; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxService.ps1::22::9::nxService"; - Name = "auditd"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxServiceResource as $MSFT_nxServiceResource4ref -{ -ResourceID = "[nxService][V-204586][medium][SRG-OS-000423-GPOS-00187]::[RHEL]Baseline"; - Controller = "systemd"; - State = "Running"; - Enabled = True; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxService.ps1::22::9::nxService"; - Name = "sshd"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxServiceResource as $MSFT_nxServiceResource5ref -{ -ResourceID = "[nxService][V-204604.b][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; - Controller = "systemd"; - State = "Running"; - Enabled = True; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxService.ps1::22::9::nxService"; - Name = "firewalld"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxScriptResource as $MSFT_nxScriptResource1ref -{ -ResourceID = "[nxScript][V-204399.b][medium][[Skip] SRG-OS-000029-GPOS-00010]::[RHEL]Baseline"; - GetScript = "#!/bin/bash\necho [V-204399.b][medium][[Skip] SRG-OS-000029-GPOS-00010]"; - TestScript = "#!/bin/bash\nexit 0"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxScript.skip.ps1::10::5::nxScript"; - SetScript = "#!/bin/bash"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxScriptResource as $MSFT_nxScriptResource2ref -{ -ResourceID = "[nxScript][V-204400][medium][[Skip] SRG-OS-000029-GPOS-00010]::[RHEL]Baseline"; - GetScript = "#!/bin/bash\necho [V-204400][medium][[Skip] SRG-OS-000029-GPOS-00010]"; - TestScript = "#!/bin/bash\nexit 0"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxScript.skip.ps1::10::5::nxScript"; - SetScript = "#!/bin/bash"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxScriptResource as $MSFT_nxScriptResource3ref -{ -ResourceID = "[nxScript][V-204403][medium][[Skip] SRG-OS-000029-GPOS-00010]::[RHEL]Baseline"; - GetScript = "#!/bin/bash\necho [V-204403][medium][[Skip] SRG-OS-000029-GPOS-00010]"; - TestScript = "#!/bin/bash\nexit 0"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxScript.skip.ps1::10::5::nxScript"; - SetScript = "#!/bin/bash"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxScriptResource as $MSFT_nxScriptResource4ref -{ -ResourceID = "[nxScript][V-204509][medium][[Skip] SRG-OS-000342-GPOS-00133]::[RHEL]Baseline"; - GetScript = "#!/bin/bash\necho [V-204509][medium][[Skip] SRG-OS-000342-GPOS-00133]"; - TestScript = "#!/bin/bash\nexit 0"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxScript.skip.ps1::10::5::nxScript"; - SetScript = "#!/bin/bash"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxScriptResource as $MSFT_nxScriptResource5ref -{ -ResourceID = "[nxScript][V-204513][medium][[Skip] SRG-OS-000343-GPOS-00134]::[RHEL]Baseline"; - GetScript = "#!/bin/bash\necho [V-204513][medium][[Skip] SRG-OS-000343-GPOS-00134]"; - TestScript = "#!/bin/bash\nexit 0"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxScript.skip.ps1::10::5::nxScript"; - SetScript = "#!/bin/bash"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxScriptResource as $MSFT_nxScriptResource6ref -{ -ResourceID = "[nxScript][V-204623][medium][[Skip] SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; - GetScript = "#!/bin/bash\necho [V-204623][medium][[Skip] SRG-OS-000480-GPOS-00227]"; - TestScript = "#!/bin/bash\nexit 0"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxScript.skip.ps1::10::5::nxScript"; - SetScript = "#!/bin/bash"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxScriptResource as $MSFT_nxScriptResource7ref -{ -ResourceID = "[nxScript][V-244557][medium][[Skip] SRG-OS-000080-GPOS-00048]::[RHEL]Baseline"; - GetScript = "#!/bin/bash\necho [V-244557][medium][[Skip] SRG-OS-000080-GPOS-00048]"; - TestScript = "#!/bin/bash\nexit 0"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxScript.skip.ps1::10::5::nxScript"; - SetScript = "#!/bin/bash"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxScriptResource as $MSFT_nxScriptResource8ref -{ -ResourceID = "[nxScript][V-244558][medium][[Skip] SRG-OS-000080-GPOS-00048]::[RHEL]Baseline"; - GetScript = "#!/bin/bash\necho [V-244558][medium][[Skip] SRG-OS-000080-GPOS-00048]"; - TestScript = "#!/bin/bash\nexit 0"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxScript.skip.ps1::10::5::nxScript"; - SetScript = "#!/bin/bash"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxScriptResource as $MSFT_nxScriptResource9ref -{ -ResourceID = "[nxScript][V-204399.a][medium][[Skip] SRG-OS-000029-GPOS-00010]::[RHEL]Baseline"; - GetScript = "#!/bin/bash\necho [V-204399.a][medium][[Skip] SRG-OS-000029-GPOS-00010]"; - TestScript = "#!/bin/bash\nexit 0"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxScript.skip.ps1::10::5::nxScript"; - SetScript = "#!/bin/bash"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of OMI_ConfigurationDocument - - - { - Version="2.0.0"; - - - MinimumCompatibleVersion = "1.0.0"; - - - CompatibleVersionAdditionalProperties= {"Omi_BaseResource:ConfigurationName"}; - - - Author="Microsoft"; - - - GenerationDate="06/30/2022 11:38:45"; - - - GenerationHost="Microsoft"; - - - Name="LinuxBaseLine"; - - - }; +/* +@TargetNode='CentOS75' +@GeneratedBy=Microsoft +@GenerationDate=03/09/2023 14:17:33 +@GenerationHost=Microsoft +*/ + +instance of MSFT_nxPackageResource as $MSFT_nxPackageResource1ref +{ +ResourceID = "[nxPackage][V-204442][high][SRG-OS-000095-GPOS-00049]::[RHEL]Baseline"; + Ensure = "Absent"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxPackage.ps1::8::5::nxPackage"; + Name = "rsh-server"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxPackageResource as $MSFT_nxPackageResource2ref +{ +ResourceID = "[nxPackage][V-204443][high][SRG-OS-000095-GPOS-00049]::[RHEL]Baseline"; + Ensure = "Absent"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxPackage.ps1::8::5::nxPackage"; + Name = "ypserv"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxPackageResource as $MSFT_nxPackageResource3ref +{ +ResourceID = "[nxPackage][V-204497][high][SRG-OS-000033-GPOS-00014]::[RHEL]Baseline"; + Ensure = "Present"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxPackage.ps1::8::5::nxPackage"; + Name = "dracut-fips"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxPackageResource as $MSFT_nxPackageResource4ref +{ +ResourceID = "[nxPackage][V-204498][low][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; + Ensure = "Present"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxPackage.ps1::8::5::nxPackage"; + Name = "aide"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxPackageResource as $MSFT_nxPackageResource5ref +{ +ResourceID = "[nxPackage][V-204502][high][SRG-OS-000095-GPOS-00049]::[RHEL]Baseline"; + Ensure = "Absent"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxPackage.ps1::8::5::nxPackage"; + Name = "telnet-server"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxPackageResource as $MSFT_nxPackageResource6ref +{ +ResourceID = "[nxPackage][V-204585][medium][SRG-OS-000423-GPOS-00187]::[RHEL]Baseline"; + Ensure = "Present"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxPackage.ps1::8::5::nxPackage"; + Name = "openssh-server"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxPackageResource as $MSFT_nxPackageResource7ref +{ +ResourceID = "[nxPackage][V-204604.a][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; + Ensure = "Present"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxPackage.ps1::8::5::nxPackage"; + Name = "firewalld"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxPackageResource as $MSFT_nxPackageResource8ref +{ +ResourceID = "[nxPackage][V-204620][high][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; + Ensure = "Absent"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxPackage.ps1::8::5::nxPackage"; + Name = "vsftpd"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxPackageResource as $MSFT_nxPackageResource9ref +{ +ResourceID = "[nxPackage][V-204621][high][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; + Ensure = "Absent"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxPackage.ps1::8::5::nxPackage"; + Name = "tftp-server"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxPackageResource as $MSFT_nxPackageResource10ref +{ +ResourceID = "[nxPackage][V-204631][medium][SRG-OS-000375-GPOS-00160]::[RHEL]Baseline"; + Ensure = "Present"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxPackage.ps1::8::5::nxPackage"; + Name = "pam_pkcs11"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileResource as $MSFT_nxFileResource1ref +{ +ResourceID = "[nxFile][V-204395][medium][SRG-OS-000023-GPOS-00006]::[RHEL]Baseline"; + Contents = "You are accessing a U.S. Government (USG) Information System (IS) that is provided for USG-authorized use only.\n\nBy using this IS (which includes any device attached to this IS), you consent to the following conditions:\n\n-The USG routinely intercepts and monitors communications on this IS for purposes including, but not limited to, penetration testing, COMSEC monitoring, network operations and defense, personnel misconduct (PM), law enforcement (LE), and counterintelligence (CI) investigations.\n\n-At any time, the USG may inspect and seize data stored on this IS.\n\n-Communications using, or data stored on, this IS are not private, are subject to routine monitoring, interception, and search, and may be disclosed or used for any USG-authorized purpose.\n\n-This IS includes security measures (e.g., authentication and access controls) to protect USG interests--not for your personal benefit or privacy.\n\n-Notwithstanding the above, using this IS does not constitute consent to PM, LE or CI investigative searching or monitoring of the content of privileged communications, or work product, related to personal representation or services by attorneys, psychotherapists, or clergy, and their assistants. Such communications and work product are private and confidential. See User Agreement for details."; + DestinationPath = "/etc/issue"; + ModuleName = "nx"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; + ModuleVersion = "1.0"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileResource as $MSFT_nxFileResource2ref +{ +ResourceID = "[nxFile][V-204449.a][medium][SRG-OS-000114-GPOS-00059]::[RHEL]Baseline"; + Contents = ""; + DestinationPath = "/etc/modprobe.d/usb-storage.conf"; + ModuleName = "nx"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; + ModuleVersion = "1.0"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileResource as $MSFT_nxFileResource3ref +{ +ResourceID = "[nxFile][V-204449.b][medium][SRG-OS-000114-GPOS-00059]::[RHEL]Baseline"; + Contents = ""; + DestinationPath = "/etc/modprobe.d/blacklist.conf"; + ModuleName = "nx"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; + ModuleVersion = "1.0"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileResource as $MSFT_nxFileResource4ref +{ +ResourceID = "[nxFile][V-204450.a][medium][SRG-OS-000378-GPOS-00163]::[RHEL]Baseline"; + Contents = ""; + DestinationPath = "/etc/modprobe.d/dccp.conf"; + ModuleName = "nx"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; + ModuleVersion = "1.0"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileResource as $MSFT_nxFileResource5ref +{ +ResourceID = "[nxFile][V-204576][low][SRG-OS-000027-GPOS-00008]::[RHEL]Baseline"; + Contents = "* hard maxlogins 10"; + DestinationPath = "/etc/security/limits.d/204576-powerstig.conf"; + ModuleName = "nx"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; + ModuleVersion = "1.0"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileResource as $MSFT_nxFileResource6ref +{ +ResourceID = "[nxFile][V-204579.a][medium][SRG-OS-000163-GPOS-00072]::[RHEL]Baseline"; + Contents = ""; + DestinationPath = "/etc/profile.d/tmout.sh"; + ModuleName = "nx"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; + ModuleVersion = "1.0"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileResource as $MSFT_nxFileResource7ref +{ +ResourceID = "[nxFile][V-204584][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; + Contents = "kernel.randomize_va_space = 2"; + DestinationPath = "/etc/sysctl.d/204584-powerstig.conf"; + ModuleName = "nx"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; + ModuleVersion = "1.0"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileResource as $MSFT_nxFileResource8ref +{ +ResourceID = "[nxFile][V-204609][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; + Contents = "net.ipv4.conf.all.accept_source_route = 0"; + DestinationPath = "/etc/sysctl.d/204609-powerstig.conf"; + ModuleName = "nx"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; + ModuleVersion = "1.0"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileResource as $MSFT_nxFileResource9ref +{ +ResourceID = "[nxFile][V-204610][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; + Contents = "net.ipv4.conf.all.rp_filter = 1"; + DestinationPath = "/etc/sysctl.d/204610-powerstig.conf"; + ModuleName = "nx"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; + ModuleVersion = "1.0"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileResource as $MSFT_nxFileResource10ref +{ +ResourceID = "[nxFile][V-204611][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; + Contents = "net.ipv4.conf.default.rp_filter = 1"; + DestinationPath = "/etc/sysctl.d/204611-powerstig.conf"; + ModuleName = "nx"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; + ModuleVersion = "1.0"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileResource as $MSFT_nxFileResource11ref +{ +ResourceID = "[nxFile][V-204612][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; + Contents = "net.ipv4.conf.default.accept_source_route = 0"; + DestinationPath = "/etc/sysctl.d/204612-powerstig.conf"; + ModuleName = "nx"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; + ModuleVersion = "1.0"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileResource as $MSFT_nxFileResource12ref +{ +ResourceID = "[nxFile][V-204613][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; + Contents = "net.ipv4.icmp_echo_ignore_broadcasts = 1"; + DestinationPath = "/etc/sysctl.d/204613-powerstig.conf"; + ModuleName = "nx"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; + ModuleVersion = "1.0"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileResource as $MSFT_nxFileResource13ref +{ +ResourceID = "[nxFile][V-204614][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; + Contents = "net.ipv4.conf.default.accept_redirects = 0"; + DestinationPath = "/etc/sysctl.d/204614-powerstig.conf"; + ModuleName = "nx"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; + ModuleVersion = "1.0"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileResource as $MSFT_nxFileResource14ref +{ +ResourceID = "[nxFile][V-204615][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; + Contents = "net.ipv4.conf.all.accept_redirects = 0"; + DestinationPath = "/etc/sysctl.d/204615-powerstig.conf"; + ModuleName = "nx"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; + ModuleVersion = "1.0"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileResource as $MSFT_nxFileResource15ref +{ +ResourceID = "[nxFile][V-204616][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; + Contents = "net.ipv4.conf.default.send_redirects = 0"; + DestinationPath = "/etc/sysctl.d/204616-powerstig.conf"; + ModuleName = "nx"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; + ModuleVersion = "1.0"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileResource as $MSFT_nxFileResource16ref +{ +ResourceID = "[nxFile][V-204617][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; + Contents = "net.ipv4.conf.all.send_redirects = 0"; + DestinationPath = "/etc/sysctl.d/204617-powerstig.conf"; + ModuleName = "nx"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; + ModuleVersion = "1.0"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileResource as $MSFT_nxFileResource17ref +{ +ResourceID = "[nxFile][V-204625][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; + Contents = "net.ipv4.ip_forward = 0"; + DestinationPath = "/etc/sysctl.d/204625-powerstig.conf"; + ModuleName = "nx"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; + ModuleVersion = "1.0"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileResource as $MSFT_nxFileResource18ref +{ +ResourceID = "[nxFile][V-204630][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; + Contents = "net.ipv6.conf.all.accept_source_route = 0"; + DestinationPath = "/etc/sysctl.d/204630-powerstig.conf"; + ModuleName = "nx"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; + ModuleVersion = "1.0"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileResource as $MSFT_nxFileResource19ref +{ +ResourceID = "[nxFile][V-237634.a][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; + Contents = "Defaults !targetpw"; + DestinationPath = "/etc/sudoers.d/237634a-powerstig.conf"; + ModuleName = "nx"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; + ModuleVersion = "1.0"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileResource as $MSFT_nxFileResource20ref +{ +ResourceID = "[nxFile][V-237634.b][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; + Contents = "Defaults !rootpw"; + DestinationPath = "/etc/sudoers.d/237634b-powerstig.conf"; + ModuleName = "nx"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; + ModuleVersion = "1.0"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileResource as $MSFT_nxFileResource21ref +{ +ResourceID = "[nxFile][V-237634.c][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; + Contents = "Defaults !runaspw"; + DestinationPath = "/etc/sudoers.d/237634c-powerstig.conf"; + ModuleName = "nx"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; + ModuleVersion = "1.0"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileResource as $MSFT_nxFileResource22ref +{ +ResourceID = "[nxFile][V-237635][medium][SRG-OS-000373-GPOS-00156]::[RHEL]Baseline"; + Contents = "Defaults timestamp_timeout=0"; + DestinationPath = "/etc/sudoers.d/237635-powerstig.conf"; + ModuleName = "nx"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; + ModuleVersion = "1.0"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileResource as $MSFT_nxFileResource23ref +{ +ResourceID = "[nxFile][V-250314][medium][SRG-OS-000324-GPOS-00125]::[RHEL]Baseline"; + Contents = "%wheel ALL=(ALL) TYPE=sysadm_t ROLE=sysadm_r ALL"; + DestinationPath = "/etc/sudoers.d/250314-powerstig.conf"; + ModuleName = "nx"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; + ModuleVersion = "1.0"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource1ref +{ +ResourceID = "[nxFileLine][V-204405][medium][SRG-OS-000069-GPOS-00037]::[RHEL]Baseline"; + ContainsLine = "password substack system-auth"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/pam.d/passwd"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "^\\s*password(?:\\t*|\\s*)substack\\tsystem-auth\\s*$|^#\\s*password\\s*substack\\s*system-auth.*"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource2ref +{ +ResourceID = "[nxFileLine][V-204407][medium][SRG-OS-000069-GPOS-00037]::[RHEL]Baseline"; + ContainsLine = "ucredit = -1"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/security/pwquality.conf"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "^#\\s*ucredit.*$|^ucredit\\s*=\\s*(?!-1\\b)\\w*$"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource3ref +{ +ResourceID = "[nxFileLine][V-204408][medium][SRG-OS-000070-GPOS-00038]::[RHEL]Baseline"; + ContainsLine = "lcredit = -1"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/security/pwquality.conf"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "^#\\s*lcredit.*$|^lcredit\\s*=\\s*(?!-1\\b)\\w*$"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource4ref +{ +ResourceID = "[nxFileLine][V-204409][medium][SRG-OS-000071-GPOS-00039]::[RHEL]Baseline"; + ContainsLine = "dcredit = -1"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/security/pwquality.conf"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "^#\\s*dcredit.*$|^dcredit\\s*=\\s*(?!-1\\b)\\w*$"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource5ref +{ +ResourceID = "[nxFileLine][V-204410][medium][SRG-OS-000266-GPOS-00101]::[RHEL]Baseline"; + ContainsLine = "ocredit=-1"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/security/pwquality.conf"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "^#\\s*ocredit.*$|^ocredit\\s*=\\s*(?!-1)\\w*$"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource6ref +{ +ResourceID = "[nxFileLine][V-204411][medium][SRG-OS-000072-GPOS-00040]::[RHEL]Baseline"; + ContainsLine = "difok = 8"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/security/pwquality.conf"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*difok\\s*=.*|^\\s*difok\\s*=\\s*(-|)[0-7]$"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource7ref +{ +ResourceID = "[nxFileLine][V-204412][medium][SRG-OS-000072-GPOS-00040]::[RHEL]Baseline"; + ContainsLine = "minclass = 4"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/security/pwquality.conf"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "^#\\s*minclass\\s*=.*|^\\s*minclass\\s*=\\s*(?!\\d{2,})[1-3]"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource8ref +{ +ResourceID = "[nxFileLine][V-204413][medium][SRG-OS-000072-GPOS-00040]::[RHEL]Baseline"; + ContainsLine = "maxrepeat = 3"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/security/pwquality.conf"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "^#\\s*maxrepeat\\s*=.*|^\\s*maxrepeat\\s*=\\s*(?:\\d{2,}|[4-9])"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource9ref +{ +ResourceID = "[nxFileLine][V-204414][medium][SRG-OS-000072-GPOS-00040]::[RHEL]Baseline"; + ContainsLine = "maxclassrepeat = 4"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/security/pwquality.conf"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "^#\\s*maxclassrepeat\\s*=.*|^\\s*maxclassrepeat\\s*=\\s*(?:\\d{2,}|[1-3|5-9])"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource10ref +{ +ResourceID = "[nxFileLine][V-204416][medium][SRG-OS-000073-GPOS-00041]::[RHEL]Baseline"; + ContainsLine = "ENCRYPT_METHOD SHA512"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/login.defs"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*ENCRYPT_METHOD\\s*SHA512"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource11ref +{ +ResourceID = "[nxFileLine][V-204418][medium][SRG-OS-000075-GPOS-00043]::[RHEL]Baseline"; + ContainsLine = "PASS_MIN_DAYS 1"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/login.defs"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "^\\s*PASS_MIN_DAYS\\s*[0]*$|#\\s*PASS_MIN_DAYS.*"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource12ref +{ +ResourceID = "[nxFileLine][V-204420][medium][SRG-OS-000076-GPOS-00044]::[RHEL]Baseline"; + ContainsLine = "PASS_MAX_DAYS 60"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/login.defs"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "^\\s*PASS_MAX_DAYS\\s*([6][1-9]|[7-9][0-9]|\\d{3,})$|#\\s*PASS_MAX_DAYS.*"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource13ref +{ +ResourceID = "[nxFileLine][V-204423][medium][SRG-OS-000078-GPOS-00046]::[RHEL]Baseline"; + ContainsLine = "minlen = 15"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/security/pwquality.conf"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "^\\s*minlen\\s*=\\s*([0-9]|[1][1-4])$|#\\s*minlen.*"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource14ref +{ +ResourceID = "[nxFileLine][V-204425][high][SRG-OS-000106-GPOS-00053]::[RHEL]Baseline"; + ContainsLine = "PermitEmptyPasswords no"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/ssh/sshd_config"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "^#\\s*PermitEmptyPasswords.*$|^PermitEmptyPasswords\\s*(?!no\\b)\\w*$"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource15ref +{ +ResourceID = "[nxFileLine][V-204426][medium][SRG-OS-000118-GPOS-00060]::[RHEL]Baseline"; + ContainsLine = "INACTIVE=35"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/default/useradd"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "^#\\s*INACTIVE\\s*=.*|^\\s*INACTIVE\\s*=\\s*(3[5-9]|[4-9]\\d+|\\d{3,})"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource16ref +{ +ResourceID = "[nxFileLine][V-204431][medium][SRG-OS-000480-GPOS-00226]::[RHEL]Baseline"; + ContainsLine = "FAIL_DELAY 4"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/login.defs"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "^#\\s*FAIL_DELAY.*|^FAIL_DELAY\\s*(?!\\d{2,})[1-3]"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource17ref +{ +ResourceID = "[nxFileLine][V-204434][medium][SRG-OS-000480-GPOS-00229]::[RHEL]Baseline"; + ContainsLine = "PermitUserEnvironment no"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/ssh/sshd_config"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "^#\\s*PermitUserEnvironment.*$|^PermitUserEnvironment\\s*(?!no\\b)\\w*$"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource18ref +{ +ResourceID = "[nxFileLine][V-204435][medium][SRG-OS-000480-GPOS-00229]::[RHEL]Baseline"; + ContainsLine = "HostbasedAuthentication no"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/ssh/sshd_config"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "^#\\s*HostbasedAuthentication.*$|^HostbasedAuthentication\\s*(?!no\\b)\\w*$"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource19ref +{ +ResourceID = "[nxFileLine][V-204447][high][SRG-OS-000366-GPOS-00153]::[RHEL]Baseline"; + ContainsLine = "gpgcheck=1"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/yum.conf"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*gpgcheck\\s*=\\s*1"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource20ref +{ +ResourceID = "[nxFileLine][V-204448][high][SRG-OS-000366-GPOS-00153]::[RHEL]Baseline"; + ContainsLine = "localpkg_gpgcheck=1"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/yum.conf"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*localpkg_gpgcheck\\s*=\\s*1"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource21ref +{ +ResourceID = "[nxFileLine][V-204449.c][medium][SRG-OS-000114-GPOS-00059]::[RHEL]Baseline"; + ContainsLine = "install usb-storage /bin/true"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/modprobe.d/usb-storage.conf"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*install\\s*usb-storage\\s*/bin/true"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource22ref +{ +ResourceID = "[nxFileLine][V-204449.d][medium][SRG-OS-000114-GPOS-00059]::[RHEL]Baseline"; + ContainsLine = "blacklist usb-storage"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/modprobe.d/blacklist.conf"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*blacklist\\s*usb-storage"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource23ref +{ +ResourceID = "[nxFileLine][V-204450.b][medium][SRG-OS-000378-GPOS-00163]::[RHEL]Baseline"; + ContainsLine = "install dccp /bin/true"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/modprobe.d/dccp.conf"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*install\\s*dccp\\s*/bin/true"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource24ref +{ +ResourceID = "[nxFileLine][V-204450.c][medium][SRG-OS-000378-GPOS-00163]::[RHEL]Baseline"; + ContainsLine = "blacklist dccp"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/modprobe.d/blacklist.conf"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*blacklist\\s*dccp"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource25ref +{ +ResourceID = "[nxFileLine][V-204452][low][SRG-OS-000437-GPOS-00194]::[RHEL]Baseline"; + ContainsLine = "clean_requirements_on_remove=1"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/yum.conf"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*clean_requirements_on_remove\\s*=\\s*1"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource26ref +{ +ResourceID = "[nxFileLine][V-204453][medium][SRG-OS-000445-GPOS-00199]::[RHEL]Baseline"; + ContainsLine = "SELINUX=enforcing"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/selinux/config"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "^#\\s*SELINUX.*$|^SELINUX\\s*=\\s*(?!enforcing)\\w*$"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource27ref +{ +ResourceID = "[nxFileLine][V-204454][medium][SRG-OS-000445-GPOS-00199]::[RHEL]Baseline"; + ContainsLine = "SELINUXTYPE=targeted"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/selinux/config"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "^#\\s*SELINUXTYPE.*$|^SELINUXTYPE\\s*=\\s*(?!targeted\\b)\\w*$"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource28ref +{ +ResourceID = "[nxFileLine][V-204457][medium][SRG-OS-000480-GPOS-00228]::[RHEL]Baseline"; + ContainsLine = "UMASK 077"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/login.defs"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "^\\s*UMASK(?!\\s077\\b)\\s*\\d*\\s*$|^#\\s*UMASK.*"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource29ref +{ +ResourceID = "[nxFileLine][V-204466][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; + ContainsLine = "CREATE_HOME yes"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/login.defs"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "^#\\s*CREATE_HOME.*$|^CREATE_HOME\\s*(?!yes\\b)\\w*$|^CREATE_HOME\\t.*"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource30ref +{ +ResourceID = "[nxFileLine][V-204504][medium][SRG-OS-000046-GPOS-00022]::[RHEL]Baseline"; + ContainsLine = "-f 2"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "^#\\s*-f\\s+2|^\\s*-f\\s*1"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileResource as $MSFT_nxFileResource24ref +{ +SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::29::9::nxFile"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + ResourceID = "[nxFile][V-204506.a][medium][SRG-OS-000342-GPOS-00133]::[RHEL]Baseline"; + DestinationPath = "/etc/audisp/plugins.d/au-remote.conf"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource31ref +{ +ResourceID = "[nxFileLine][V-204506.a][medium][SRG-OS-000342-GPOS-00133]::[RHEL]Baseline"; + ContainsLine = "active = yes"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audisp/plugins.d/au-remote.conf"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "\\s*active\\s*=\\s*no|active=yes|#\\s*active\\s*=.*"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource32ref +{ +ResourceID = "[nxFileLine][V-204506.b][medium][SRG-OS-000342-GPOS-00133]::[RHEL]Baseline"; + ContainsLine = "direction = out"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audisp/plugins.d/au-remote.conf"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*direction\\s*=\\s*out"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource33ref +{ +ResourceID = "[nxFileLine][V-204506.c][medium][SRG-OS-000342-GPOS-00133]::[RHEL]Baseline"; + ContainsLine = "path = /sbin/audisp-remote"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audisp/plugins.d/au-remote.conf"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*path\\s*=\\s*/sbin/audisp-remote"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource34ref +{ +ResourceID = "[nxFileLine][V-204506.d][medium][SRG-OS-000342-GPOS-00133]::[RHEL]Baseline"; + ContainsLine = "type = always"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audisp/plugins.d/au-remote.conf"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*type\\s*=\\s*always"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource35ref +{ +ResourceID = "[nxFileLine][V-204507][medium][SRG-OS-000342-GPOS-00133]::[RHEL]Baseline"; + ContainsLine = "overflow_action = syslog"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audisp/audispd.conf"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "^#\\s*overflow_action.*$|^overflow_action\\s*=\\s*(?!syslog$)\\w*$"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource36ref +{ +ResourceID = "[nxFileLine][V-204508][medium][SRG-OS-000342-GPOS-00133]::[RHEL]Baseline"; + ContainsLine = "name_format = hostname"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audisp/audispd.conf"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "^#\\s*name_format.*$|^name_format\\s*=\\s*(?!hostname$)\\w*$"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileResource as $MSFT_nxFileResource25ref +{ +SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::19::9::nxFile"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + ResourceID = "[nxFile][V-204510][medium][SRG-OS-000342-GPOS-00133]::[RHEL]Baseline"; + DestinationPath = "/etc/audisp/audisp-remote.conf"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource37ref +{ +ResourceID = "[nxFileLine][V-204510][medium][SRG-OS-000342-GPOS-00133]::[RHEL]Baseline"; + ContainsLine = "enable_krb5 = yes"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audisp/audisp-remote.conf"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*enable_krb5\\s*=\\s*yes"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource38ref +{ +ResourceID = "[nxFileLine][V-204511][medium][SRG-OS-000342-GPOS-00133]::[RHEL]Baseline"; + ContainsLine = "disk_full_action = single"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audisp/audisp-remote.conf"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "^#\\s*disk_full_action\\s*=.*|^disk_full_action\\s*=\\s*(?!halt\\b|single\\b|syslog\\b)\\w+"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource39ref +{ +ResourceID = "[nxFileLine][V-204512][medium][SRG-OS-000342-GPOS-00133]::[RHEL]Baseline"; + ContainsLine = "network_failure_action = syslog"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audisp/audisp-remote.conf"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "^#\\s*network_failure_action\\s*=.*|^network_failure_action\\s*=\\s*(?!halt\\b|single\\b|syslog\\b)\\w+"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource40ref +{ +ResourceID = "[nxFileLine][V-204514][medium][SRG-OS-000343-GPOS-00134]::[RHEL]Baseline"; + ContainsLine = "space_left_action = email"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/auditd.conf"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "^#\\s*space_left_action.*$|^space_left_action\\s*=\\s*(?!email$)\\w*$"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource41ref +{ +ResourceID = "[nxFileLine][V-204515][medium][SRG-OS-000343-GPOS-00134]::[RHEL]Baseline"; + ContainsLine = "action_mail_acct = root"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/auditd.conf"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "^#\\s*action_mail_acct.*|^action_mail_acct\\s*=\\s*(?!root\\b)\\w+"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource42ref +{ +ResourceID = "[nxFileLine][V-204516.a][medium][SRG-OS-000327-GPOS-00127]::[RHEL]Baseline"; + ContainsLine = "-a always,exit -F arch=b32 -S execve -C uid!=euid -F euid=0 -k setuid"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*execve\\s*-C\\s*uid!\\s*=\\s*euid\\s*-F\\s*euid\\s*=\\s*0\\s*-k\\s*setuid"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource43ref +{ +ResourceID = "[nxFileLine][V-204516.b][medium][SRG-OS-000327-GPOS-00127]::[RHEL]Baseline"; + ContainsLine = "-a always,exit -F arch=b64 -S execve -C uid!=euid -F euid=0 -k setuid"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*execve\\s*-C\\s*uid!\\s*=\\s*euid\\s*-F\\s*euid\\s*=\\s*0\\s*-k\\s*setuid"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource44ref +{ +ResourceID = "[nxFileLine][V-204516.c][medium][SRG-OS-000327-GPOS-00127]::[RHEL]Baseline"; + ContainsLine = "-a always,exit -F arch=b32 -S execve -C gid!=egid -F egid=0 -k setgid"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*execve\\s*-C\\s*gid!\\s*=\\s*egid\\s*-F\\s*egid\\s*=\\s*0\\s*-k\\s*setgid"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource45ref +{ +ResourceID = "[nxFileLine][V-204516.d][medium][SRG-OS-000327-GPOS-00127]::[RHEL]Baseline"; + ContainsLine = "-a always,exit -F arch=b64 -S execve -C gid!=egid -F egid=0 -k setgid"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*execve\\s*-C\\s*gid!\\s*=\\s*egid\\s*-F\\s*egid\\s*=\\s*0\\s*-k\\s*setgid"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource46ref +{ +ResourceID = "[nxFileLine][V-204517.a][medium][SRG-OS-000064-GPOS-00033]::[RHEL]Baseline"; + ContainsLine = "-a always,exit -F arch=b32 -S chown,fchown,fchownat,lchown -F auid>=1000 -F auid!=unset -k perm_mod"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*chown,fchown,fchownat,lchown\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*perm_mod"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource47ref +{ +ResourceID = "[nxFileLine][V-204517.b][medium][SRG-OS-000064-GPOS-00033]::[RHEL]Baseline"; + ContainsLine = "-a always,exit -F arch=b64 -S chown,fchown,fchownat,lchown -F auid>=1000 -F auid!=unset -k perm_mod"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*chown,fchown,fchownat,lchown\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*perm_mod"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource48ref +{ +ResourceID = "[nxFileLine][V-204521.a][medium][SRG-OS-000458-GPOS-00203]::[RHEL]Baseline"; + ContainsLine = "-a always,exit -F arch=b32 -S chmod,fchmod,fchmodat -F auid>=1000 -F auid!=unset -k perm_mod"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*chmod,fchmod,fchmodat\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*perm_mod"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource49ref +{ +ResourceID = "[nxFileLine][V-204521.b][medium][SRG-OS-000458-GPOS-00203]::[RHEL]Baseline"; + ContainsLine = "-a always,exit -F arch=b64 -S chmod,fchmod,fchmodat -F auid>=1000 -F auid!=unset -k perm_mod"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*chmod,fchmod,fchmodat\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*perm_mod"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource50ref +{ +ResourceID = "[nxFileLine][V-204524.a][medium][SRG-OS-000458-GPOS-00203]::[RHEL]Baseline"; + ContainsLine = "-a always,exit -F arch=b32 -S setxattr,fsetxattr,lsetxattr,removexattr,fremovexattr,lremovexattr -F auid>=1000 -F auid!=unset -k perm_mod"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*setxattr,fsetxattr,lsetxattr,removexattr,fremovexattr,lremovexattr\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*perm_mod"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource51ref +{ +ResourceID = "[nxFileLine][V-204524.b][medium][SRG-OS-000458-GPOS-00203]::[RHEL]Baseline"; + ContainsLine = "-a always,exit -F arch=b64 -S setxattr,fsetxattr,lsetxattr,removexattr,fremovexattr,lremovexattr -F auid>=1000 -F auid!=unset -k perm_mod"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*setxattr,fsetxattr,lsetxattr,removexattr,fremovexattr,lremovexattr\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*perm_mod"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource52ref +{ +ResourceID = "[nxFileLine][V-204531.a][medium][SRG-OS-000064-GPOS-00033]::[RHEL]Baseline"; + ContainsLine = "-a always,exit -F arch=b32 -S creat,open,openat,open_by_handle_at,truncate,ftruncate -F exit=-EPERM -F auid>=1000 -F auid!=unset -k access"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*creat,open,openat,open_by_handle_at,truncate,ftruncate\\s*-F\\s*exit\\s*=\\s*-EPERM\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*access"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource53ref +{ +ResourceID = "[nxFileLine][V-204531.b][medium][SRG-OS-000064-GPOS-00033]::[RHEL]Baseline"; + ContainsLine = "-a always,exit -F arch=b32 -S creat,open,openat,open_by_handle_at,truncate,ftruncate -F exit=-EACCES -F auid>=1000 -F auid!=unset -k access"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*creat,open,openat,open_by_handle_at,truncate,ftruncate\\s*-F\\s*exit\\s*=\\s*-EACCES\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*access"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource54ref +{ +ResourceID = "[nxFileLine][V-204531.c][medium][SRG-OS-000064-GPOS-00033]::[RHEL]Baseline"; + ContainsLine = "-a always,exit -F arch=b64 -S creat,open,openat,open_by_handle_at,truncate,ftruncate -F exit=-EPERM -F auid>=1000 -F auid!=unset -k access"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*creat,open,openat,open_by_handle_at,truncate,ftruncate\\s*-F\\s*exit\\s*=\\s*-EPERM\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*access"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource55ref +{ +ResourceID = "[nxFileLine][V-204531.d][medium][SRG-OS-000064-GPOS-00033]::[RHEL]Baseline"; + ContainsLine = "-a always,exit -F arch=b64 -S creat,open,openat,open_by_handle_at,truncate,ftruncate -F exit=-EACCES -F auid>=1000 -F auid!=unset -k access"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*creat,open,openat,open_by_handle_at,truncate,ftruncate\\s*-F\\s*exit\\s*=\\s*-EACCES\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*access"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource56ref +{ +ResourceID = "[nxFileLine][V-204536][medium][SRG-OS-000392-GPOS-00172]::[RHEL]Baseline"; + ContainsLine = "-a always,exit -F path=/usr/sbin/semanage -F perm=x -F auid>=1000 -F auid!=unset -k privileged-priv_change"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/sbin/semanage\\s*-F\\s*perm\\s*=\\s*x\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-priv_change"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource57ref +{ +ResourceID = "[nxFileLine][V-204537][medium][SRG-OS-000392-GPOS-00172]::[RHEL]Baseline"; + ContainsLine = "-a always,exit -F path=/usr/sbin/setsebool -F perm=x -F auid>=1000 -F auid!=unset -k privileged-priv_change"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/sbin/setsebool\\s*-F\\s*perm\\s*=\\s*x\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-priv_change"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource58ref +{ +ResourceID = "[nxFileLine][V-204538][medium][SRG-OS-000392-GPOS-00172]::[RHEL]Baseline"; + ContainsLine = "-a always,exit -F path=/usr/bin/chcon -F perm=x -F auid>=1000 -F auid!=unset -k privileged-priv_change"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/bin/chcon\\s*-F\\s*perm\\s*=\\s*x\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-priv_change"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource59ref +{ +ResourceID = "[nxFileLine][V-204539][medium][SRG-OS-000392-GPOS-00172]::[RHEL]Baseline"; + ContainsLine = "-a always,exit -F path=/usr/sbin/setfiles -F perm=x -F auid>=1000 -F auid!=unset -k privileged-priv_change"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/sbin/setfiles\\s*-F\\s*perm\\s*=\\s*x\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-priv_change"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource60ref +{ +ResourceID = "[nxFileLine][V-204540][medium][SRG-OS-000392-GPOS-00172]::[RHEL]Baseline"; + ContainsLine = "-w /var/run/faillock -p wa -k logins"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-w\\s*/var/run/faillock\\s*-p\\s*wa\\s*-k\\s*logins"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource61ref +{ +ResourceID = "[nxFileLine][V-204541][medium][SRG-OS-000392-GPOS-00172]::[RHEL]Baseline"; + ContainsLine = "-w /var/log/lastlog -p wa -k logins"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-w\\s*/var/log/lastlog\\s*-p\\s*wa\\s*-k\\s*logins"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource62ref +{ +ResourceID = "[nxFileLine][V-204542][medium][SRG-OS-000042-GPOS-00020]::[RHEL]Baseline"; + ContainsLine = "-a always,exit -F path=/usr/bin/passwd -F perm=x -F auid>=1000 -F auid!=unset -k privileged-passwd"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/bin/passwd\\s*-F\\s*perm\\s*=\\s*x\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-passwd"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource63ref +{ +ResourceID = "[nxFileLine][V-204543][medium][SRG-OS-000042-GPOS-00020]::[RHEL]Baseline"; + ContainsLine = "-a always,exit -F path=/usr/sbin/unix_chkpwd -F perm=x -F auid>=1000 -F auid!=unset -k privileged-passwd"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/sbin/unix_chkpwd\\s*-F\\s*perm\\s*=\\s*x\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-passwd"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource64ref +{ +ResourceID = "[nxFileLine][V-204544][medium][SRG-OS-000042-GPOS-00020]::[RHEL]Baseline"; + ContainsLine = "-a always,exit -F path=/usr/bin/gpasswd -F perm=x -F auid>=1000 -F auid!=unset -k privileged-passwd"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/bin/gpasswd\\s*-F\\s*perm\\s*=\\s*x\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-passwd"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource65ref +{ +ResourceID = "[nxFileLine][V-204545][medium][SRG-OS-000042-GPOS-00020]::[RHEL]Baseline"; + ContainsLine = "-a always,exit -F path=/usr/bin/chage -F perm=x -F auid>=1000 -F auid!=unset -k privileged-passwd"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/bin/chage\\s*-F\\s*perm\\s*=\\s*x\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-passwd"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource66ref +{ +ResourceID = "[nxFileLine][V-204546][medium][SRG-OS-000042-GPOS-00020]::[RHEL]Baseline"; + ContainsLine = "-a always,exit -F path=/usr/sbin/userhelper -F perm=x -F auid>=1000 -F auid!=unset -k privileged-passwd"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/sbin/userhelper\\s*-F\\s*perm\\s*=\\s*x\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-passwd"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource67ref +{ +ResourceID = "[nxFileLine][V-204547][medium][SRG-OS-000037-GPOS-00015]::[RHEL]Baseline"; + ContainsLine = "-a always,exit -F path=/usr/bin/su -F perm=x -F auid>=1000 -F auid!=unset -k privileged-priv_change"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/bin/su\\s*-F\\s*perm\\s*=\\s*x\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-priv_change"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource68ref +{ +ResourceID = "[nxFileLine][V-204548][medium][SRG-OS-000037-GPOS-00015]::[RHEL]Baseline"; + ContainsLine = "-a always,exit -F path=/usr/bin/sudo -F perm=x -F auid>=1000 -F auid!=unset -k privileged-priv_change"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/bin/sudo\\s*-F\\s*perm\\s*=\\s*x\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-priv_change"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource69ref +{ +ResourceID = "[nxFileLine][V-204549.a][medium][SRG-OS-000037-GPOS-00015]::[RHEL]Baseline"; + ContainsLine = "-w /etc/sudoers -p wa -k privileged-actions"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-w /etc/sudoers -p wa -k privileged-actions"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource70ref +{ +ResourceID = "[nxFileLine][V-204549.b][medium][SRG-OS-000037-GPOS-00015]::[RHEL]Baseline"; + ContainsLine = "-w /etc/sudoers.d/ -p wa -k privileged-actions"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-w /etc/sudoers.d/ -p wa -k privileged-actions"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource71ref +{ +ResourceID = "[nxFileLine][V-204550][medium][SRG-OS-000037-GPOS-00015]::[RHEL]Baseline"; + ContainsLine = "-a always,exit -F path=/usr/bin/newgrp -F perm=x -F auid>=1000 -F auid!=unset -k privileged-priv_change"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/bin/newgrp\\s*-F\\s*perm\\s*=\\s*x\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-priv_change"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource72ref +{ +ResourceID = "[nxFileLine][V-204551][medium][SRG-OS-000037-GPOS-00015]::[RHEL]Baseline"; + ContainsLine = "-a always,exit -F path=/usr/bin/chsh -F perm=x -F auid>=1000 -F auid!=unset -k privileged-priv_change"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/bin/chsh\\s*-F\\s*perm\\s*=\\s*x\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-priv_change"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource73ref +{ +ResourceID = "[nxFileLine][V-204552.a][medium][SRG-OS-000042-GPOS-00020]::[RHEL]Baseline"; + ContainsLine = "-a always,exit -F arch=b32 -S mount -F auid>=1000 -F auid!=unset -k privileged-mount"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*mount\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-mount"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource74ref +{ +ResourceID = "[nxFileLine][V-204552.b][medium][SRG-OS-000042-GPOS-00020]::[RHEL]Baseline"; + ContainsLine = "-a always,exit -F arch=b64 -S mount -F auid>=1000 -F auid!=unset -k privileged-mount"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*mount\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-mount"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource75ref +{ +ResourceID = "[nxFileLine][V-204552.c][medium][SRG-OS-000042-GPOS-00020]::[RHEL]Baseline"; + ContainsLine = "-a always,exit -F path=/usr/bin/mount -F perm=x -F auid>=1000 -F auid!=unset -k privileged-mount"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/bin/mount\\s*-F\\s*perm\\s*=\\s*x\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-mount"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource76ref +{ +ResourceID = "[nxFileLine][V-204553][medium][SRG-OS-000042-GPOS-00020]::[RHEL]Baseline"; + ContainsLine = "-a always,exit -F path=/usr/bin/umount -F perm=x -F auid>=1000 -F auid!=unset -k privileged-mount"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/bin/umount\\s*-F\\s*perm\\s*=\\s*x\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-mount"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource77ref +{ +ResourceID = "[nxFileLine][V-204554][medium][SRG-OS-000042-GPOS-00020]::[RHEL]Baseline"; + ContainsLine = "-a always,exit -F path=/usr/sbin/postdrop -F perm=x -F auid>=1000 -F auid!=unset -k privileged-postfix"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/sbin/postdrop\\s*-F\\s*perm\\s*=\\s*x\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-postfix"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource78ref +{ +ResourceID = "[nxFileLine][V-204555][medium][SRG-OS-000042-GPOS-00020]::[RHEL]Baseline"; + ContainsLine = "-a always,exit -F path=/usr/sbin/postqueue -F perm=x -F auid>=1000 -F auid!=unset -k privileged-postfix"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/sbin/postqueue\\s*-F\\s*perm\\s*=\\s*x\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-postfix"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource79ref +{ +ResourceID = "[nxFileLine][V-204556][medium][SRG-OS-000042-GPOS-00020]::[RHEL]Baseline"; + ContainsLine = "-a always,exit -F path=/usr/libexec/openssh/ssh-keysign -F perm=x -F auid>=1000 -F auid!=unset -k privileged-ssh"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/libexec/openssh/ssh-keysign\\s*-F\\s*perm\\s*=\\s*x\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-ssh"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource80ref +{ +ResourceID = "[nxFileLine][V-204557][medium][SRG-OS-000042-GPOS-00020]::[RHEL]Baseline"; + ContainsLine = "-a always,exit -F path=/usr/bin/crontab -F perm=x -F auid>=1000 -F auid!=unset -k privileged-cron"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/bin/crontab\\s*-F\\s*perm\\s*=\\s*x\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-cron"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource81ref +{ +ResourceID = "[nxFileLine][V-204558][medium][SRG-OS-000471-GPOS-00215]::[RHEL]Baseline"; + ContainsLine = "-a always,exit -F path=/usr/sbin/pam_timestamp_check -F perm=x -F auid>=1000 -F auid!=unset -k privileged-pam"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/sbin/pam_timestamp_check\\s*-F\\s*perm\\s*=\\s*x\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-pam"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource82ref +{ +ResourceID = "[nxFileLine][V-204559.a][medium][SRG-OS-000471-GPOS-00216]::[RHEL]Baseline"; + ContainsLine = "-a always,exit -F arch=b32 -S create_module -F auid>=1000 -F auid!=unset -k module-change"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*create_module\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*module-change"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource83ref +{ +ResourceID = "[nxFileLine][V-204559.b][medium][SRG-OS-000471-GPOS-00216]::[RHEL]Baseline"; + ContainsLine = "-a always,exit -F arch=b64 -S create_module -F auid>=1000 -F auid!=unset -k module-change"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*create_module\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*module-change"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource84ref +{ +ResourceID = "[nxFileLine][V-204560.a][medium][SRG-OS-000471-GPOS-00216]::[RHEL]Baseline"; + ContainsLine = "-a always,exit -F arch=b32 -S init_module,finit_module -F auid>=1000 -F auid!=unset -k modulechange"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*init_module,finit_module\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*modulechange"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource85ref +{ +ResourceID = "[nxFileLine][V-204560.b][medium][SRG-OS-000471-GPOS-00216]::[RHEL]Baseline"; + ContainsLine = "-a always,exit -F arch=b64 -S init_module,finit_module -F auid>=1000 -F auid!=unset -k modulechange"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*init_module,finit_module\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*modulechange"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource86ref +{ +ResourceID = "[nxFileLine][V-204562.a][medium][SRG-OS-000471-GPOS-00216]::[RHEL]Baseline"; + ContainsLine = "-a always,exit -F arch=b32 -S delete_module -F auid>=1000 -F auid!=unset -k module-change"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*delete_module\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*module-change"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource87ref +{ +ResourceID = "[nxFileLine][V-204562.b][medium][SRG-OS-000471-GPOS-00216]::[RHEL]Baseline"; + ContainsLine = "-a always,exit -F arch=b64 -S delete_module -F auid>=1000 -F auid!=unset -k module-change"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*delete_module\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*module-change"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource88ref +{ +ResourceID = "[nxFileLine][V-204563][medium][SRG-OS-000471-GPOS-00216]::[RHEL]Baseline"; + ContainsLine = "-a always,exit -F path=/usr/bin/kmod -F perm=x -F auid>=1000 -F auid!=unset -k modules"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/bin/kmod\\s*-F\\s*perm\\s*=\\s*x\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*modules"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource89ref +{ +ResourceID = "[nxFileLine][V-204564][medium][SRG-OS-000004-GPOS-00004]::[RHEL]Baseline"; + ContainsLine = "-w /etc/passwd -p wa -k identity"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-w\\s*/etc/passwd\\s*-p\\s*wa\\s*-k\\s*identity"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource90ref +{ +ResourceID = "[nxFileLine][V-204565][medium][SRG-OS-000004-GPOS-00004]::[RHEL]Baseline"; + ContainsLine = "-w /etc/group -p wa -k identity"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-w\\s*/etc/group\\s*-p\\s*wa\\s*-k\\s*identity"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource91ref +{ +ResourceID = "[nxFileLine][V-204566][medium][SRG-OS-000004-GPOS-00004]::[RHEL]Baseline"; + ContainsLine = "-w /etc/gshadow -p wa -k identity"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-w\\s*/etc/gshadow\\s*-p\\s*wa\\s*-k\\s*identity"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource92ref +{ +ResourceID = "[nxFileLine][V-204567][medium][SRG-OS-000004-GPOS-00004]::[RHEL]Baseline"; + ContainsLine = "-w /etc/shadow -p wa -k identity"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-w\\s*/etc/shadow\\s*-p\\s*wa\\s*-k\\s*identity"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource93ref +{ +ResourceID = "[nxFileLine][V-204568][medium][SRG-OS-000004-GPOS-00004]::[RHEL]Baseline"; + ContainsLine = "-w /etc/security/opasswd -p wa -k identity"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-w\\s*/etc/security/opasswd\\s*-p\\s*wa\\s*-k\\s*identity"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource94ref +{ +ResourceID = "[nxFileLine][V-204572.a][medium][SRG-OS-000466-GPOS-00210]::[RHEL]Baseline"; + ContainsLine = "-a always,exit -F arch=b32 -S unlink,unlinkat,rename,renameat,rmdir -F auid>=1000 -F auid!=unset -k delete"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*unlink,unlinkat,rename,renameat,rmdir\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*delete"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource95ref +{ +ResourceID = "[nxFileLine][V-204572.b][medium][SRG-OS-000466-GPOS-00210]::[RHEL]Baseline"; + ContainsLine = "-a always,exit -F arch=b64 -S unlink,unlinkat,rename,renameat,rmdir -F auid>=1000 -F auid!=unset -k delete"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*unlink,unlinkat,rename,renameat,rmdir\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*delete"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource96ref +{ +ResourceID = "[nxFileLine][V-204578][medium][SRG-OS-000033-GPOS-00014]::[RHEL]Baseline"; + ContainsLine = "Ciphers aes256-ctr,aes192-ctr,aes128-ctr"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/ssh/sshd_config"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "^#\\s*Ciphers.*|^\\s*Ciphers\\s*aes128-ctr.*|^\\s*Ciphers\\s*aes192-ctr.*"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource97ref +{ +ResourceID = "[nxFileLine][V-204579.b][medium][SRG-OS-000163-GPOS-00072]::[RHEL]Baseline"; + ContainsLine = "declare -xr TMOUT=900"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/profile.d/tmout.sh"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "^\\s*TMOUT\\s*=\\s*[0-8]?[0-9]?[0-9]?$|^#\\s*TMOUT.*"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource98ref +{ +ResourceID = "[nxFileLine][V-204579.c][medium][SRG-OS-000163-GPOS-00072]::[RHEL]Baseline"; + ContainsLine = "declare -xr TMOUT=900"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/bashrc"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "^\\s*TMOUT\\s*=\\s*[0-8]?[0-9]?[0-9]?$|^#\\s*TMOUT.*"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource99ref +{ +ResourceID = "[nxFileLine][V-204579.d][medium][SRG-OS-000163-GPOS-00072]::[RHEL]Baseline"; + ContainsLine = "declare -xr TMOUT=900"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/profile"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "^\\s*TMOUT\\s*=\\s*[0-8]?[0-9]?[0-9]?$|^#\\s*TMOUT.*"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource100ref +{ +ResourceID = "[nxFileLine][V-204580][medium][SRG-OS-000023-GPOS-00006]::[RHEL]Baseline"; + ContainsLine = "banner /etc/issue"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/ssh/sshd_config"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*banner\\s*/etc/issue"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource101ref +{ +ResourceID = "[nxFileLine][V-204587][medium][SRG-OS-000163-GPOS-00072]::[RHEL]Baseline"; + ContainsLine = "ClientAliveInterval 600"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/ssh/sshd_config"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "^\\s*ClientAliveInterval\\s*[0-5]?[0-9]?[0-9]?\\s*$|^#\\s*ClientAliveInterval.*|^\\s*ClientAliveInterval\\s*$"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource102ref +{ +ResourceID = "[nxFileLine][V-204588][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; + ContainsLine = "RhostsRSAAuthentication no"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/ssh/sshd_config"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "^#\\s*RhostsRSAAuthentication.*$|^RhostsRSAAuthentication\\s*(?!no\\b)\\w*$"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource103ref +{ +ResourceID = "[nxFileLine][V-204589][medium][SRG-OS-000163-GPOS-00072]::[RHEL]Baseline"; + ContainsLine = "ClientAliveCountMax 0"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/ssh/sshd_config"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "^#\\s*ClientAliveCountMax.*$|^ClientAliveCountMax\\s*(?!0\\b)\\w*$"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource104ref +{ +ResourceID = "[nxFileLine][V-204590][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; + ContainsLine = "IgnoreRhosts yes"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/ssh/sshd_config"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "^#\\s*IgnoreRhosts.*$|^IgnoreRhosts\\s*(?!yes\\b)\\w*$"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource105ref +{ +ResourceID = "[nxFileLine][V-204591][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; + ContainsLine = "PrintLastLog yes"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/ssh/sshd_config"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "^#\\s*PrintLastLog.*$|^PrintLastLog\\s*(?!yes\\b)\\w*$"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource106ref +{ +ResourceID = "[nxFileLine][V-204592][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; + ContainsLine = "PermitRootLogin no"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/ssh/sshd_config"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "^#\\s*PermitRootLogin.*$|^PermitRootLogin\\s*(?!no\\b)\\w*$"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource107ref +{ +ResourceID = "[nxFileLine][V-204593][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; + ContainsLine = "IgnoreUserKnownHosts yes"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/ssh/sshd_config"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "^#\\s*IgnoreUserKnownHosts.*$|^IgnoreUserKnownHosts\\s*(?!yes\\b)\\w*$"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource108ref +{ +ResourceID = "[nxFileLine][V-204594][high][SRG-OS-000074-GPOS-00042]::[RHEL]Baseline"; + ContainsLine = "Protocol 2"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/ssh/sshd_config"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "^#\\s*Protocol.*$|^Protocol\\s*(?!2\\b)\\w*$"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource109ref +{ +ResourceID = "[nxFileLine][V-204595][medium][SRG-OS-000250-GPOS-00093]::[RHEL]Baseline"; + ContainsLine = "MACs hmac-sha2-512,hmac-sha2-256"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/ssh/sshd_config"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*MACs.*|\\s*MACs\\s*hmac-(?!sha2-512).*"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource110ref +{ +ResourceID = "[nxFileLine][V-204598][medium][SRG-OS-000364-GPOS-00151]::[RHEL]Baseline"; + ContainsLine = "GSSAPIAuthentication no"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/ssh/sshd_config"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "^#\\s*GSSAPIAuthentication.*$|^GSSAPIAuthentication\\s*(?!no\\b)\\w*$"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource111ref +{ +ResourceID = "[nxFileLine][V-204599][medium][SRG-OS-000364-GPOS-00151]::[RHEL]Baseline"; + ContainsLine = "KerberosAuthentication no"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/ssh/sshd_config"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "^#\\s*KerberosAuthentication.*$|^KerberosAuthentication\\s*(?!no\\b)\\w*$"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource112ref +{ +ResourceID = "[nxFileLine][V-204600][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; + ContainsLine = "StrictModes yes"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/ssh/sshd_config"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "^#\\s*StrictModes.*$|^StrictModes\\s*(?!yes\\b)\\w*$"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource113ref +{ +ResourceID = "[nxFileLine][V-204601][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; + ContainsLine = "UsePrivilegeSeparation sandbox"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/ssh/sshd_config"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "^#\\s*UsePrivilegeSeparation.*$|^UsePrivilegeSeparation\\s*(?!sandbox\\b)\\w*$"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource114ref +{ +ResourceID = "[nxFileLine][V-204602][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; + ContainsLine = "Compression delayed"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/ssh/sshd_config"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "^#\\s*Compression.*$|^Compression\\s*(?!delayed\\b)\\w*$"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource115ref +{ +ResourceID = "[nxFileLine][V-204622][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; + ContainsLine = "X11Forwarding no"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/ssh/sshd_config"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "^#\\s*X11Forwarding.*$|^X11Forwarding\\s*(?!no\\b)\\w*$"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource116ref +{ +ResourceID = "[nxFileLine][V-233307][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; + ContainsLine = "X11UseLocalhost yes"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/ssh/sshd_config"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*X11UseLocalhost\\s*yes"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource117ref +{ +ResourceID = "[nxFileLine][V-255925][medium][SRG-OS-000033-GPOS-00014]::[RHEL]Baseline"; + ContainsLine = "KexAlgorithms ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/ssh/sshd_config"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*KexAlgorithms\\s*ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxServiceResource as $MSFT_nxServiceResource1ref +{ +ResourceID = "[nxService][V-204451][medium][SRG-OS-000114-GPOS-00059]::[RHEL]Baseline"; + Controller = "systemd"; + Enabled = False; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxService.ps1::13::9::nxService"; + Name = "autofs"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxServiceResource as $MSFT_nxServiceResource2ref +{ +ResourceID = "[nxService][V-204492][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; + Controller = "systemd"; + Enabled = False; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxService.ps1::13::9::nxService"; + Name = "kdump"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxServiceResource as $MSFT_nxServiceResource3ref +{ +ResourceID = "[nxService][V-204503][medium][SRG-OS-000038-GPOS-00016]::[RHEL]Baseline"; + Controller = "systemd"; + State = "Running"; + Enabled = True; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxService.ps1::22::9::nxService"; + Name = "auditd"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxServiceResource as $MSFT_nxServiceResource4ref +{ +ResourceID = "[nxService][V-204586][medium][SRG-OS-000423-GPOS-00187]::[RHEL]Baseline"; + Controller = "systemd"; + State = "Running"; + Enabled = True; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxService.ps1::22::9::nxService"; + Name = "sshd"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxServiceResource as $MSFT_nxServiceResource5ref +{ +ResourceID = "[nxService][V-204604.b][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; + Controller = "systemd"; + State = "Running"; + Enabled = True; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxService.ps1::22::9::nxService"; + Name = "firewalld"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxScriptResource as $MSFT_nxScriptResource1ref +{ +ResourceID = "[nxScript][V-204399.b][medium][[Skip] SRG-OS-000029-GPOS-00010]::[RHEL]Baseline"; + GetScript = "#!/bin/bash\necho [V-204399.b][medium][[Skip] SRG-OS-000029-GPOS-00010]"; + TestScript = "#!/bin/bash\nexit 0"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxScript.skip.ps1::10::5::nxScript"; + SetScript = "#!/bin/bash"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxScriptResource as $MSFT_nxScriptResource2ref +{ +ResourceID = "[nxScript][V-204400][medium][[Skip] SRG-OS-000029-GPOS-00010]::[RHEL]Baseline"; + GetScript = "#!/bin/bash\necho [V-204400][medium][[Skip] SRG-OS-000029-GPOS-00010]"; + TestScript = "#!/bin/bash\nexit 0"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxScript.skip.ps1::10::5::nxScript"; + SetScript = "#!/bin/bash"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxScriptResource as $MSFT_nxScriptResource3ref +{ +ResourceID = "[nxScript][V-204403][medium][[Skip] SRG-OS-000029-GPOS-00010]::[RHEL]Baseline"; + GetScript = "#!/bin/bash\necho [V-204403][medium][[Skip] SRG-OS-000029-GPOS-00010]"; + TestScript = "#!/bin/bash\nexit 0"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxScript.skip.ps1::10::5::nxScript"; + SetScript = "#!/bin/bash"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxScriptResource as $MSFT_nxScriptResource4ref +{ +ResourceID = "[nxScript][V-204509][medium][[Skip] SRG-OS-000342-GPOS-00133]::[RHEL]Baseline"; + GetScript = "#!/bin/bash\necho [V-204509][medium][[Skip] SRG-OS-000342-GPOS-00133]"; + TestScript = "#!/bin/bash\nexit 0"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxScript.skip.ps1::10::5::nxScript"; + SetScript = "#!/bin/bash"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxScriptResource as $MSFT_nxScriptResource5ref +{ +ResourceID = "[nxScript][V-204513][medium][[Skip] SRG-OS-000343-GPOS-00134]::[RHEL]Baseline"; + GetScript = "#!/bin/bash\necho [V-204513][medium][[Skip] SRG-OS-000343-GPOS-00134]"; + TestScript = "#!/bin/bash\nexit 0"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxScript.skip.ps1::10::5::nxScript"; + SetScript = "#!/bin/bash"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxScriptResource as $MSFT_nxScriptResource6ref +{ +ResourceID = "[nxScript][V-204623][medium][[Skip] SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; + GetScript = "#!/bin/bash\necho [V-204623][medium][[Skip] SRG-OS-000480-GPOS-00227]"; + TestScript = "#!/bin/bash\nexit 0"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxScript.skip.ps1::10::5::nxScript"; + SetScript = "#!/bin/bash"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxScriptResource as $MSFT_nxScriptResource7ref +{ +ResourceID = "[nxScript][V-244557][medium][[Skip] SRG-OS-000080-GPOS-00048]::[RHEL]Baseline"; + GetScript = "#!/bin/bash\necho [V-244557][medium][[Skip] SRG-OS-000080-GPOS-00048]"; + TestScript = "#!/bin/bash\nexit 0"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxScript.skip.ps1::10::5::nxScript"; + SetScript = "#!/bin/bash"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxScriptResource as $MSFT_nxScriptResource8ref +{ +ResourceID = "[nxScript][V-244558][medium][[Skip] SRG-OS-000080-GPOS-00048]::[RHEL]Baseline"; + GetScript = "#!/bin/bash\necho [V-244558][medium][[Skip] SRG-OS-000080-GPOS-00048]"; + TestScript = "#!/bin/bash\nexit 0"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxScript.skip.ps1::10::5::nxScript"; + SetScript = "#!/bin/bash"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxScriptResource as $MSFT_nxScriptResource9ref +{ +ResourceID = "[nxScript][V-204399.a][medium][[Skip] SRG-OS-000029-GPOS-00010]::[RHEL]Baseline"; + GetScript = "#!/bin/bash\necho [V-204399.a][medium][[Skip] SRG-OS-000029-GPOS-00010]"; + TestScript = "#!/bin/bash\nexit 0"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxScript.skip.ps1::10::5::nxScript"; + SetScript = "#!/bin/bash"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxScriptResource as $MSFT_nxScriptResource10ref +{ +ResourceID = "[nxScript][V-255926][medium][[Skip] SRG-OS-000029-GPOS-00010]::[RHEL]Baseline"; + GetScript = "#!/bin/bash\necho [V-255926][medium][[Skip] SRG-OS-000029-GPOS-00010]"; + TestScript = "#!/bin/bash\nexit 0"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxScript.skip.ps1::10::5::nxScript"; + SetScript = "#!/bin/bash"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of OMI_ConfigurationDocument + + { + Version="2.0.0"; + + MinimumCompatibleVersion = "1.0.0"; + + CompatibleVersionAdditionalProperties= {"Omi_BaseResource:ConfigurationName"}; + + Author="Microsoft"; + + GenerationDate="03/09/2023 14:17:33"; + + GenerationHost="Microsoft"; + + Name="LinuxBaseLine"; + + }; + diff --git a/stig/linux/config/CentOS76.mof b/stig/linux/config/CentOS76.mof index e25f8c0..4bee910 100644 --- a/stig/linux/config/CentOS76.mof +++ b/stig/linux/config/CentOS76.mof @@ -1,2118 +1,1829 @@ -/* -@TargetNode='CentOS76' -@GeneratedBy=Microsoft -@GenerationDate=06/30/2022 11:38:45 -@GenerationHost=Microsoft -*/ - -instance of MSFT_nxPackageResource as $MSFT_nxPackageResource1ref -{ -ResourceID = "[nxPackage][V-204442][high][SRG-OS-000095-GPOS-00049]::[RHEL]Baseline"; - Ensure = "Absent"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxPackage.ps1::8::5::nxPackage"; - Name = "rsh-server"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxPackageResource as $MSFT_nxPackageResource2ref -{ -ResourceID = "[nxPackage][V-204443][high][SRG-OS-000095-GPOS-00049]::[RHEL]Baseline"; - Ensure = "Absent"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxPackage.ps1::8::5::nxPackage"; - Name = "ypserv"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxPackageResource as $MSFT_nxPackageResource3ref -{ -ResourceID = "[nxPackage][V-204497][high][SRG-OS-000033-GPOS-00014]::[RHEL]Baseline"; - Ensure = "Present"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxPackage.ps1::8::5::nxPackage"; - Name = "dracut-fips"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxPackageResource as $MSFT_nxPackageResource4ref -{ -ResourceID = "[nxPackage][V-204498][low][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; - Ensure = "Present"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxPackage.ps1::8::5::nxPackage"; - Name = "aide"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxPackageResource as $MSFT_nxPackageResource5ref -{ -ResourceID = "[nxPackage][V-204502][high][SRG-OS-000095-GPOS-00049]::[RHEL]Baseline"; - Ensure = "Absent"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxPackage.ps1::8::5::nxPackage"; - Name = "telnet-server"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxPackageResource as $MSFT_nxPackageResource6ref -{ -ResourceID = "[nxPackage][V-204585][medium][SRG-OS-000423-GPOS-00187]::[RHEL]Baseline"; - Ensure = "Present"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxPackage.ps1::8::5::nxPackage"; - Name = "openssh-server"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxPackageResource as $MSFT_nxPackageResource7ref -{ -ResourceID = "[nxPackage][V-204604.a][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; - Ensure = "Present"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxPackage.ps1::8::5::nxPackage"; - Name = "firewalld"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxPackageResource as $MSFT_nxPackageResource8ref -{ -ResourceID = "[nxPackage][V-204620][high][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; - Ensure = "Absent"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxPackage.ps1::8::5::nxPackage"; - Name = "vsftpd"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxPackageResource as $MSFT_nxPackageResource9ref -{ -ResourceID = "[nxPackage][V-204621][high][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; - Ensure = "Absent"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxPackage.ps1::8::5::nxPackage"; - Name = "tftp-server"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxPackageResource as $MSFT_nxPackageResource10ref -{ -ResourceID = "[nxPackage][V-204631][medium][SRG-OS-000375-GPOS-00160]::[RHEL]Baseline"; - Ensure = "Present"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxPackage.ps1::8::5::nxPackage"; - Name = "pam_pkcs11"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileResource as $MSFT_nxFileResource1ref -{ -ResourceID = "[nxFile][V-204395][medium][SRG-OS-000023-GPOS-00006]::[RHEL]Baseline"; - Contents = "You are accessing a U.S. Government (USG) Information System (IS) that is provided for USG-authorized use only.\n\nBy using this IS (which includes any device attached to this IS), you consent to the following conditions:\n\n-The USG routinely intercepts and monitors communications on this IS for purposes including, but not limited to, penetration testing, COMSEC monitoring, network operations and defense, personnel misconduct (PM), law enforcement (LE), and counterintelligence (CI) investigations.\n\n-At any time, the USG may inspect and seize data stored on this IS.\n\n-Communications using, or data stored on, this IS are not private, are subject to routine monitoring, interception, and search, and may be disclosed or used for any USG-authorized purpose.\n\n-This IS includes security measures (e.g., authentication and access controls) to protect USG interests--not for your personal benefit or privacy.\n\n-Notwithstanding the above, using this IS does not constitute consent to PM, LE or CI investigative searching or monitoring of the content of privileged communications, or work product, related to personal representation or services by attorneys, psychotherapists, or clergy, and their assistants. Such communications and work product are private and confidential. See User Agreement for details."; - DestinationPath = "/etc/issue"; - ModuleName = "nx"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; - ModuleVersion = "1.0"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileResource as $MSFT_nxFileResource2ref -{ -ResourceID = "[nxFile][V-204449.a][medium][SRG-OS-000114-GPOS-00059]::[RHEL]Baseline"; - Contents = ""; - DestinationPath = "/etc/modprobe.d/usb-storage.conf"; - ModuleName = "nx"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; - ModuleVersion = "1.0"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileResource as $MSFT_nxFileResource3ref -{ -ResourceID = "[nxFile][V-204449.b][medium][SRG-OS-000114-GPOS-00059]::[RHEL]Baseline"; - Contents = ""; - DestinationPath = "/etc/modprobe.d/blacklist.conf"; - ModuleName = "nx"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; - ModuleVersion = "1.0"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileResource as $MSFT_nxFileResource4ref -{ -ResourceID = "[nxFile][V-204450.a][medium][SRG-OS-000378-GPOS-00163]::[RHEL]Baseline"; - Contents = ""; - DestinationPath = "/etc/modprobe.d/dccp.conf"; - ModuleName = "nx"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; - ModuleVersion = "1.0"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileResource as $MSFT_nxFileResource5ref -{ -ResourceID = "[nxFile][V-204576][low][SRG-OS-000027-GPOS-00008]::[RHEL]Baseline"; - Contents = "* hard maxlogins 10"; - DestinationPath = "/etc/security/limits.d/204576-powerstig.conf"; - ModuleName = "nx"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; - ModuleVersion = "1.0"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileResource as $MSFT_nxFileResource6ref -{ -ResourceID = "[nxFile][V-204579.a][medium][SRG-OS-000163-GPOS-00072]::[RHEL]Baseline"; - Contents = ""; - DestinationPath = "/etc/profile.d/tmout.sh"; - ModuleName = "nx"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; - ModuleVersion = "1.0"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileResource as $MSFT_nxFileResource7ref -{ -ResourceID = "[nxFile][V-204584][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; - Contents = "kernel.randomize_va_space = 2"; - DestinationPath = "/etc/sysctl.d/204584-powerstig.conf"; - ModuleName = "nx"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; - ModuleVersion = "1.0"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileResource as $MSFT_nxFileResource8ref -{ -ResourceID = "[nxFile][V-204609][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; - Contents = "net.ipv4.conf.all.accept_source_route = 0"; - DestinationPath = "/etc/sysctl.d/204609-powerstig.conf"; - ModuleName = "nx"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; - ModuleVersion = "1.0"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileResource as $MSFT_nxFileResource9ref -{ -ResourceID = "[nxFile][V-204610][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; - Contents = "net.ipv4.conf.all.rp_filter = 1"; - DestinationPath = "/etc/sysctl.d/204610-powerstig.conf"; - ModuleName = "nx"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; - ModuleVersion = "1.0"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileResource as $MSFT_nxFileResource10ref -{ -ResourceID = "[nxFile][V-204611][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; - Contents = "net.ipv4.conf.default.rp_filter = 1"; - DestinationPath = "/etc/sysctl.d/204611-powerstig.conf"; - ModuleName = "nx"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; - ModuleVersion = "1.0"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileResource as $MSFT_nxFileResource11ref -{ -ResourceID = "[nxFile][V-204612][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; - Contents = "net.ipv4.conf.default.accept_source_route = 0"; - DestinationPath = "/etc/sysctl.d/204612-powerstig.conf"; - ModuleName = "nx"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; - ModuleVersion = "1.0"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileResource as $MSFT_nxFileResource12ref -{ -ResourceID = "[nxFile][V-204613][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; - Contents = "net.ipv4.icmp_echo_ignore_broadcasts = 1"; - DestinationPath = "/etc/sysctl.d/204613-powerstig.conf"; - ModuleName = "nx"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; - ModuleVersion = "1.0"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileResource as $MSFT_nxFileResource13ref -{ -ResourceID = "[nxFile][V-204614][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; - Contents = "net.ipv4.conf.default.accept_redirects = 0"; - DestinationPath = "/etc/sysctl.d/204614-powerstig.conf"; - ModuleName = "nx"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; - ModuleVersion = "1.0"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileResource as $MSFT_nxFileResource14ref -{ -ResourceID = "[nxFile][V-204615][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; - Contents = "net.ipv4.conf.all.accept_redirects = 0"; - DestinationPath = "/etc/sysctl.d/204615-powerstig.conf"; - ModuleName = "nx"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; - ModuleVersion = "1.0"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileResource as $MSFT_nxFileResource15ref -{ -ResourceID = "[nxFile][V-204616][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; - Contents = "net.ipv4.conf.default.send_redirects = 0"; - DestinationPath = "/etc/sysctl.d/204616-powerstig.conf"; - ModuleName = "nx"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; - ModuleVersion = "1.0"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileResource as $MSFT_nxFileResource16ref -{ -ResourceID = "[nxFile][V-204617][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; - Contents = "net.ipv4.conf.all.send_redirects = 0"; - DestinationPath = "/etc/sysctl.d/204617-powerstig.conf"; - ModuleName = "nx"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; - ModuleVersion = "1.0"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileResource as $MSFT_nxFileResource17ref -{ -ResourceID = "[nxFile][V-204625][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; - Contents = "net.ipv4.ip_forward = 0"; - DestinationPath = "/etc/sysctl.d/204625-powerstig.conf"; - ModuleName = "nx"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; - ModuleVersion = "1.0"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileResource as $MSFT_nxFileResource18ref -{ -ResourceID = "[nxFile][V-204630][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; - Contents = "net.ipv6.conf.all.accept_source_route = 0"; - DestinationPath = "/etc/sysctl.d/204630-powerstig.conf"; - ModuleName = "nx"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; - ModuleVersion = "1.0"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileResource as $MSFT_nxFileResource19ref -{ -ResourceID = "[nxFile][V-237634.a][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; - Contents = "Defaults !targetpw"; - DestinationPath = "/etc/sudoers.d/237634a-powerstig.conf"; - ModuleName = "nx"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; - ModuleVersion = "1.0"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileResource as $MSFT_nxFileResource20ref -{ -ResourceID = "[nxFile][V-237634.b][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; - Contents = "Defaults !rootpw"; - DestinationPath = "/etc/sudoers.d/237634b-powerstig.conf"; - ModuleName = "nx"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; - ModuleVersion = "1.0"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileResource as $MSFT_nxFileResource21ref -{ -ResourceID = "[nxFile][V-237634.c][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; - Contents = "Defaults !runaspw"; - DestinationPath = "/etc/sudoers.d/237634c-powerstig.conf"; - ModuleName = "nx"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; - ModuleVersion = "1.0"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileResource as $MSFT_nxFileResource22ref -{ -ResourceID = "[nxFile][V-237635][medium][SRG-OS-000373-GPOS-00156]::[RHEL]Baseline"; - Contents = "Defaults timestamp_timeout=0"; - DestinationPath = "/etc/sudoers.d/237635-powerstig.conf"; - ModuleName = "nx"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; - ModuleVersion = "1.0"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileResource as $MSFT_nxFileResource23ref -{ -ResourceID = "[nxFile][V-250314][medium][SRG-OS-000324-GPOS-00125]::[RHEL]Baseline"; - Contents = "%wheel ALL=(ALL) TYPE=sysadm_t ROLE=sysadm_r ALL"; - DestinationPath = "/etc/sudoers.d/250314-powerstig.conf"; - ModuleName = "nx"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; - ModuleVersion = "1.0"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource1ref -{ -ResourceID = "[nxFileLine][V-204405][medium][SRG-OS-000069-GPOS-00037]::[RHEL]Baseline"; - ContainsLine = "password substack system-auth"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/pam.d/passwd"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "^\\s*password(?:\\t*|\\s*)substack\\tsystem-auth\\s*$|^#\\s*password\\s*substack\\s*system-auth.*"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource2ref -{ -ResourceID = "[nxFileLine][V-204407][medium][SRG-OS-000069-GPOS-00037]::[RHEL]Baseline"; - ContainsLine = "ucredit = -1"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/security/pwquality.conf"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "^#\\s*ucredit.*$|^ucredit\\s*=\\s*(?!-1\\b)\\w*$"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource3ref -{ -ResourceID = "[nxFileLine][V-204408][medium][SRG-OS-000070-GPOS-00038]::[RHEL]Baseline"; - ContainsLine = "lcredit = -1"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/security/pwquality.conf"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "^#\\s*lcredit.*$|^lcredit\\s*=\\s*(?!-1\\b)\\w*$"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource4ref -{ -ResourceID = "[nxFileLine][V-204409][medium][SRG-OS-000071-GPOS-00039]::[RHEL]Baseline"; - ContainsLine = "dcredit = -1"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/security/pwquality.conf"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "^#\\s*dcredit.*$|^dcredit\\s*=\\s*(?!-1\\b)\\w*$"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource5ref -{ -ResourceID = "[nxFileLine][V-204410][medium][SRG-OS-000266-GPOS-00101]::[RHEL]Baseline"; - ContainsLine = "ocredit=-1"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/security/pwquality.conf"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "^#\\s*ocredit.*$|^ocredit\\s*=\\s*(?!-1)\\w*$"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource6ref -{ -ResourceID = "[nxFileLine][V-204411][medium][SRG-OS-000072-GPOS-00040]::[RHEL]Baseline"; - ContainsLine = "difok = 8"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/security/pwquality.conf"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*difok\\s*=.*|^\\s*difok\\s*=\\s*(-|)[0-7]$"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource7ref -{ -ResourceID = "[nxFileLine][V-204412][medium][SRG-OS-000072-GPOS-00040]::[RHEL]Baseline"; - ContainsLine = "minclass = 4"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/security/pwquality.conf"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "^#\\s*minclass\\s*=.*|^\\s*minclass\\s*=\\s*(?!\\d{2,})[1-3]"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource8ref -{ -ResourceID = "[nxFileLine][V-204413][medium][SRG-OS-000072-GPOS-00040]::[RHEL]Baseline"; - ContainsLine = "maxrepeat = 3"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/security/pwquality.conf"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "^#\\s*maxrepeat\\s*=.*|^\\s*maxrepeat\\s*=\\s*(?:\\d{2,}|[4-9])"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource9ref -{ -ResourceID = "[nxFileLine][V-204414][medium][SRG-OS-000072-GPOS-00040]::[RHEL]Baseline"; - ContainsLine = "maxclassrepeat = 4"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/security/pwquality.conf"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "^#\\s*maxclassrepeat\\s*=.*|^\\s*maxclassrepeat\\s*=\\s*(?:\\d{2,}|[1-3|5-9])"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource10ref -{ -ResourceID = "[nxFileLine][V-204416][medium][SRG-OS-000073-GPOS-00041]::[RHEL]Baseline"; - ContainsLine = "ENCRYPT_METHOD SHA512"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/login.defs"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*ENCRYPT_METHOD\\s*SHA512"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource11ref -{ -ResourceID = "[nxFileLine][V-204418][medium][SRG-OS-000075-GPOS-00043]::[RHEL]Baseline"; - ContainsLine = "PASS_MIN_DAYS 1"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/login.defs"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "^\\s*PASS_MIN_DAYS\\s*[0]*$|#\\s*PASS_MIN_DAYS.*"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource12ref -{ -ResourceID = "[nxFileLine][V-204420][medium][SRG-OS-000076-GPOS-00044]::[RHEL]Baseline"; - ContainsLine = "PASS_MAX_DAYS 60"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/login.defs"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "^\\s*PASS_MAX_DAYS\\s*([6][1-9]|[7-9][0-9]|\\d{3,})$|#\\s*PASS_MAX_DAYS.*"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource13ref -{ -ResourceID = "[nxFileLine][V-204423][medium][SRG-OS-000078-GPOS-00046]::[RHEL]Baseline"; - ContainsLine = "minlen = 15"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/security/pwquality.conf"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "^\\s*minlen\\s*=\\s*([0-9]|[1][1-4])$|#\\s*minlen.*"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource14ref -{ -ResourceID = "[nxFileLine][V-204425][high][SRG-OS-000106-GPOS-00053]::[RHEL]Baseline"; - ContainsLine = "PermitEmptyPasswords no"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/ssh/sshd_config"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "^#\\s*PermitEmptyPasswords.*$|^PermitEmptyPasswords\\s*(?!no\\b)\\w*$"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource15ref -{ -ResourceID = "[nxFileLine][V-204426][medium][SRG-OS-000118-GPOS-00060]::[RHEL]Baseline"; - ContainsLine = "INACTIVE=35"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/default/useradd"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "^#\\s*INACTIVE\\s*=.*|^\\s*INACTIVE\\s*=\\s*(3[5-9]|[4-9]\\d+|\\d{3,})"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource16ref -{ -ResourceID = "[nxFileLine][V-204431][medium][SRG-OS-000480-GPOS-00226]::[RHEL]Baseline"; - ContainsLine = "FAIL_DELAY 4"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/login.defs"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "^#\\s*FAIL_DELAY.*|^FAIL_DELAY\\s*(?!\\d{2,})[1-3]"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource17ref -{ -ResourceID = "[nxFileLine][V-204434][medium][SRG-OS-000480-GPOS-00229]::[RHEL]Baseline"; - ContainsLine = "PermitUserEnvironment no"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/ssh/sshd_config"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "^#\\s*PermitUserEnvironment.*$|^PermitUserEnvironment\\s*(?!no\\b)\\w*$"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource18ref -{ -ResourceID = "[nxFileLine][V-204435][medium][SRG-OS-000480-GPOS-00229]::[RHEL]Baseline"; - ContainsLine = "HostbasedAuthentication no"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/ssh/sshd_config"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "^#\\s*HostbasedAuthentication.*$|^HostbasedAuthentication\\s*(?!no\\b)\\w*$"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource19ref -{ -ResourceID = "[nxFileLine][V-204447][high][SRG-OS-000366-GPOS-00153]::[RHEL]Baseline"; - ContainsLine = "gpgcheck=1"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/yum.conf"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*gpgcheck\\s*=\\s*1"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource20ref -{ -ResourceID = "[nxFileLine][V-204448][high][SRG-OS-000366-GPOS-00153]::[RHEL]Baseline"; - ContainsLine = "localpkg_gpgcheck=1"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/yum.conf"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*localpkg_gpgcheck\\s*=\\s*1"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource21ref -{ -ResourceID = "[nxFileLine][V-204449.c][medium][SRG-OS-000114-GPOS-00059]::[RHEL]Baseline"; - ContainsLine = "install usb-storage /bin/true"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/modprobe.d/usb-storage.conf"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*install\\s*usb-storage\\s*/bin/true"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource22ref -{ -ResourceID = "[nxFileLine][V-204449.d][medium][SRG-OS-000114-GPOS-00059]::[RHEL]Baseline"; - ContainsLine = "blacklist usb-storage"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/modprobe.d/blacklist.conf"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*blacklist\\s*usb-storage"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource23ref -{ -ResourceID = "[nxFileLine][V-204450.b][medium][SRG-OS-000378-GPOS-00163]::[RHEL]Baseline"; - ContainsLine = "install dccp /bin/true"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/modprobe.d/dccp.conf"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*install\\s*dccp\\s*/bin/true"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource24ref -{ -ResourceID = "[nxFileLine][V-204450.c][medium][SRG-OS-000378-GPOS-00163]::[RHEL]Baseline"; - ContainsLine = "blacklist dccp"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/modprobe.d/blacklist.conf"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*blacklist\\s*dccp"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource25ref -{ -ResourceID = "[nxFileLine][V-204452][low][SRG-OS-000437-GPOS-00194]::[RHEL]Baseline"; - ContainsLine = "clean_requirements_on_remove=1"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/yum.conf"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*clean_requirements_on_remove\\s*=\\s*1"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource26ref -{ -ResourceID = "[nxFileLine][V-204453][medium][SRG-OS-000445-GPOS-00199]::[RHEL]Baseline"; - ContainsLine = "SELINUX=enforcing"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/selinux/config"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "^#\\s*SELINUX.*$|^SELINUX\\s*=\\s*(?!enforcing)\\w*$"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource27ref -{ -ResourceID = "[nxFileLine][V-204454][medium][SRG-OS-000445-GPOS-00199]::[RHEL]Baseline"; - ContainsLine = "SELINUXTYPE=targeted"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/selinux/config"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "^#\\s*SELINUXTYPE.*$|^SELINUXTYPE\\s*=\\s*(?!targeted\\b)\\w*$"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource28ref -{ -ResourceID = "[nxFileLine][V-204457][medium][SRG-OS-000480-GPOS-00228]::[RHEL]Baseline"; - ContainsLine = "UMASK 077"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/login.defs"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "^\\s*UMASK(?!\\s077\\b)\\s*\\d*\\s*$|^#\\s*UMASK.*"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource29ref -{ -ResourceID = "[nxFileLine][V-204466][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; - ContainsLine = "CREATE_HOME yes"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/login.defs"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "^#\\s*CREATE_HOME.*$|^CREATE_HOME\\s*(?!yes\\b)\\w*$|^CREATE_HOME\\t.*"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource30ref -{ -ResourceID = "[nxFileLine][V-204504][medium][SRG-OS-000046-GPOS-00022]::[RHEL]Baseline"; - ContainsLine = "-f 2"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "^#\\s*-f\\s+2|^\\s*-f\\s*1"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileResource as $MSFT_nxFileResource24ref -{ -SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::29::9::nxFile"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - ResourceID = "[nxFile][V-204506.a][medium][SRG-OS-000342-GPOS-00133]::[RHEL]Baseline"; - DestinationPath = "/etc/audisp/plugins.d/au-remote.conf"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource31ref -{ -ResourceID = "[nxFileLine][V-204506.a][medium][SRG-OS-000342-GPOS-00133]::[RHEL]Baseline"; - ContainsLine = "active = yes"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audisp/plugins.d/au-remote.conf"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "\\s*active\\s*=\\s*no|active=yes|#\\s*active\\s*=.*"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource32ref -{ -ResourceID = "[nxFileLine][V-204506.b][medium][SRG-OS-000342-GPOS-00133]::[RHEL]Baseline"; - ContainsLine = "direction = out"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audisp/plugins.d/au-remote.conf"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*direction\\s*=\\s*out"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource33ref -{ -ResourceID = "[nxFileLine][V-204506.c][medium][SRG-OS-000342-GPOS-00133]::[RHEL]Baseline"; - ContainsLine = "path = /sbin/audisp-remote"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audisp/plugins.d/au-remote.conf"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*path\\s*=\\s*/sbin/audisp-remote"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource34ref -{ -ResourceID = "[nxFileLine][V-204506.d][medium][SRG-OS-000342-GPOS-00133]::[RHEL]Baseline"; - ContainsLine = "type = always"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audisp/plugins.d/au-remote.conf"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*type\\s*=\\s*always"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource35ref -{ -ResourceID = "[nxFileLine][V-204507][medium][SRG-OS-000342-GPOS-00133]::[RHEL]Baseline"; - ContainsLine = "overflow_action = syslog"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audisp/audispd.conf"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "^#\\s*overflow_action.*$|^overflow_action\\s*=\\s*(?!syslog$)\\w*$"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource36ref -{ -ResourceID = "[nxFileLine][V-204508][medium][SRG-OS-000342-GPOS-00133]::[RHEL]Baseline"; - ContainsLine = "name_format = hostname"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audisp/audispd.conf"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "^#\\s*name_format.*$|^name_format\\s*=\\s*(?!hostname$)\\w*$"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileResource as $MSFT_nxFileResource25ref -{ -SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::19::9::nxFile"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - ResourceID = "[nxFile][V-204510][medium][SRG-OS-000342-GPOS-00133]::[RHEL]Baseline"; - DestinationPath = "/etc/audisp/audisp-remote.conf"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource37ref -{ -ResourceID = "[nxFileLine][V-204510][medium][SRG-OS-000342-GPOS-00133]::[RHEL]Baseline"; - ContainsLine = "enable_krb5 = yes"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audisp/audisp-remote.conf"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*enable_krb5\\s*=\\s*yes"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource38ref -{ -ResourceID = "[nxFileLine][V-204511][medium][SRG-OS-000342-GPOS-00133]::[RHEL]Baseline"; - ContainsLine = "disk_full_action = single"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audisp/audisp-remote.conf"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "^#\\s*disk_full_action\\s*=.*|^disk_full_action\\s*=\\s*(?!halt\\b|single\\b|syslog\\b)\\w+"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource39ref -{ -ResourceID = "[nxFileLine][V-204512][medium][SRG-OS-000342-GPOS-00133]::[RHEL]Baseline"; - ContainsLine = "network_failure_action = syslog"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audisp/audisp-remote.conf"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "^#\\s*network_failure_action\\s*=.*|^network_failure_action\\s*=\\s*(?!halt\\b|single\\b|syslog\\b)\\w+"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource40ref -{ -ResourceID = "[nxFileLine][V-204514][medium][SRG-OS-000343-GPOS-00134]::[RHEL]Baseline"; - ContainsLine = "space_left_action = email"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/auditd.conf"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "^#\\s*space_left_action.*$|^space_left_action\\s*=\\s*(?!email$)\\w*$"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource41ref -{ -ResourceID = "[nxFileLine][V-204515][medium][SRG-OS-000343-GPOS-00134]::[RHEL]Baseline"; - ContainsLine = "action_mail_acct = root"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/auditd.conf"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "^#\\s*action_mail_acct.*|^action_mail_acct\\s*=\\s*(?!root\\b)\\w+"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource42ref -{ -ResourceID = "[nxFileLine][V-204516.a][medium][SRG-OS-000327-GPOS-00127]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S execve -C uid!=euid -F euid=0 -k setuid"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*execve\\s*-C\\s*uid!\\s*=\\s*euid\\s*-F\\s*euid\\s*=\\s*0\\s*-k\\s*setuid"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource43ref -{ -ResourceID = "[nxFileLine][V-204516.b][medium][SRG-OS-000327-GPOS-00127]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S execve -C uid!=euid -F euid=0 -k setuid"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*execve\\s*-C\\s*uid!\\s*=\\s*euid\\s*-F\\s*euid\\s*=\\s*0\\s*-k\\s*setuid"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource44ref -{ -ResourceID = "[nxFileLine][V-204516.c][medium][SRG-OS-000327-GPOS-00127]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S execve -C gid!=egid -F egid=0 -k setgid"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*execve\\s*-C\\s*gid!\\s*=\\s*egid\\s*-F\\s*egid\\s*=\\s*0\\s*-k\\s*setgid"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource45ref -{ -ResourceID = "[nxFileLine][V-204516.d][medium][SRG-OS-000327-GPOS-00127]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S execve -C gid!=egid -F egid=0 -k setgid"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*execve\\s*-C\\s*gid!\\s*=\\s*egid\\s*-F\\s*egid\\s*=\\s*0\\s*-k\\s*setgid"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource46ref -{ -ResourceID = "[nxFileLine][V-204517.a][medium][SRG-OS-000064-GPOS-00033]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S chown,fchown,fchownat,lchown -F auid>=1000 -F auid!=unset -k perm_mod"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*chown,fchown,fchownat,lchown\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*perm_mod"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource47ref -{ -ResourceID = "[nxFileLine][V-204517.b][medium][SRG-OS-000064-GPOS-00033]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S chown,fchown,fchownat,lchown -F auid>=1000 -F auid!=unset -k perm_mod"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*chown,fchown,fchownat,lchown\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*perm_mod"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource48ref -{ -ResourceID = "[nxFileLine][V-204521.a][medium][SRG-OS-000458-GPOS-00203]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S chmod,fchmod,fchmodat -F auid>=1000 -F auid!=unset -k perm_mod"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*chmod,fchmod,fchmodat\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*perm_mod"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource49ref -{ -ResourceID = "[nxFileLine][V-204521.b][medium][SRG-OS-000458-GPOS-00203]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S chmod,fchmod,fchmodat -F auid>=1000 -F auid!=unset -k perm_mod"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*chmod,fchmod,fchmodat\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*perm_mod"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource50ref -{ -ResourceID = "[nxFileLine][V-204524.a][medium][SRG-OS-000458-GPOS-00203]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S setxattr,fsetxattr,lsetxattr,removexattr,fremovexattr,lremovexattr -F auid>=1000 -F auid!=unset -k perm_mod"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*setxattr,fsetxattr,lsetxattr,removexattr,fremovexattr,lremovexattr\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*perm_mod"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource51ref -{ -ResourceID = "[nxFileLine][V-204524.b][medium][SRG-OS-000458-GPOS-00203]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S setxattr,fsetxattr,lsetxattr,removexattr,fremovexattr,lremovexattr -F auid>=1000 -F auid!=unset -k perm_mod"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*setxattr,fsetxattr,lsetxattr,removexattr,fremovexattr,lremovexattr\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*perm_mod"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource52ref -{ -ResourceID = "[nxFileLine][V-204531.a][medium][SRG-OS-000064-GPOS-00033]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S creat,open,openat,open_by_handle_at,truncate,ftruncate -F exit=-EPERM -F auid>=1000 -F auid!=unset -k access"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*creat,open,openat,open_by_handle_at,truncate,ftruncate\\s*-F\\s*exit\\s*=\\s*-EPERM\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*access"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource53ref -{ -ResourceID = "[nxFileLine][V-204531.b][medium][SRG-OS-000064-GPOS-00033]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S creat,open,openat,open_by_handle_at,truncate,ftruncate -F exit=-EACCES -F auid>=1000 -F auid!=unset -k access"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*creat,open,openat,open_by_handle_at,truncate,ftruncate\\s*-F\\s*exit\\s*=\\s*-EACCES\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*access"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource54ref -{ -ResourceID = "[nxFileLine][V-204531.c][medium][SRG-OS-000064-GPOS-00033]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S creat,open,openat,open_by_handle_at,truncate,ftruncate -F exit=-EPERM -F auid>=1000 -F auid!=unset -k access"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*creat,open,openat,open_by_handle_at,truncate,ftruncate\\s*-F\\s*exit\\s*=\\s*-EPERM\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*access"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource55ref -{ -ResourceID = "[nxFileLine][V-204531.d][medium][SRG-OS-000064-GPOS-00033]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S creat,open,openat,open_by_handle_at,truncate,ftruncate -F exit=-EACCES -F auid>=1000 -F auid!=unset -k access"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*creat,open,openat,open_by_handle_at,truncate,ftruncate\\s*-F\\s*exit\\s*=\\s*-EACCES\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*access"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource56ref -{ -ResourceID = "[nxFileLine][V-204536][medium][SRG-OS-000392-GPOS-00172]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F path=/usr/sbin/semanage -F auid>=1000 -F auid!=unset -k privileged-priv_change"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/sbin/semanage\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-priv_change"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource57ref -{ -ResourceID = "[nxFileLine][V-204537][medium][SRG-OS-000392-GPOS-00172]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F path=/usr/sbin/setsebool -F auid>=1000 -F auid!=unset -k privileged-priv_change"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/sbin/setsebool\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-priv_change"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource58ref -{ -ResourceID = "[nxFileLine][V-204538][medium][SRG-OS-000392-GPOS-00172]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F path=/usr/bin/chcon -F auid>=1000 -F auid!=unset -k privileged-priv_change"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/bin/chcon\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-priv_change"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource59ref -{ -ResourceID = "[nxFileLine][V-204539][medium][SRG-OS-000392-GPOS-00172]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F path=/usr/sbin/setfiles -F auid>=1000 -F auid!=unset -k privileged-priv_change"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/sbin/setfiles\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-priv_change"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource60ref -{ -ResourceID = "[nxFileLine][V-204540][medium][SRG-OS-000392-GPOS-00172]::[RHEL]Baseline"; - ContainsLine = "-w /var/run/faillock -p wa -k logins"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-w\\s*/var/run/faillock\\s*-p\\s*wa\\s*-k\\s*logins"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource61ref -{ -ResourceID = "[nxFileLine][V-204541][medium][SRG-OS-000392-GPOS-00172]::[RHEL]Baseline"; - ContainsLine = "-w /var/log/lastlog -p wa -k logins"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-w\\s*/var/log/lastlog\\s*-p\\s*wa\\s*-k\\s*logins"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource62ref -{ -ResourceID = "[nxFileLine][V-204542][medium][SRG-OS-000042-GPOS-00020]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F path=/usr/bin/passwd -F auid>=1000 -F auid!=unset -k privileged-passwd"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/bin/passwd\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-passwd"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource63ref -{ -ResourceID = "[nxFileLine][V-204543][medium][SRG-OS-000042-GPOS-00020]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F path=/usr/sbin/unix_chkpwd -F auid>=1000 -F auid!=unset -k privileged-passwd"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/sbin/unix_chkpwd\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-passwd"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource64ref -{ -ResourceID = "[nxFileLine][V-204544][medium][SRG-OS-000042-GPOS-00020]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F path=/usr/bin/gpasswd -F auid>=1000 -F auid!=unset -k privileged-passwd"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/bin/gpasswd\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-passwd"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource65ref -{ -ResourceID = "[nxFileLine][V-204545][medium][SRG-OS-000042-GPOS-00020]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F path=/usr/bin/chage -F auid>=1000 -F auid!=unset -k privileged-passwd"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/bin/chage\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-passwd"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource66ref -{ -ResourceID = "[nxFileLine][V-204546][medium][SRG-OS-000042-GPOS-00020]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F path=/usr/sbin/userhelper -F auid>=1000 -F auid!=unset -k privileged-passwd"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/sbin/userhelper\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-passwd"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource67ref -{ -ResourceID = "[nxFileLine][V-204547][medium][SRG-OS-000037-GPOS-00015]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F path=/usr/bin/su -F auid>=1000 -F auid!=unset -k privileged-priv_change"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/bin/su\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-priv_change"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource68ref -{ -ResourceID = "[nxFileLine][V-204548][medium][SRG-OS-000037-GPOS-00015]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F path=/usr/bin/sudo -F auid>=1000 -F auid!=unset -k privileged-priv_change"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/bin/sudo\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-priv_change"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource69ref -{ -ResourceID = "[nxFileLine][V-204549.a][medium][SRG-OS-000037-GPOS-00015]::[RHEL]Baseline"; - ContainsLine = "-w /etc/sudoers -p wa -k privileged-actions"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-w /etc/sudoers -p wa -k privileged-actions"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource70ref -{ -ResourceID = "[nxFileLine][V-204549.b][medium][SRG-OS-000037-GPOS-00015]::[RHEL]Baseline"; - ContainsLine = "-w /etc/sudoers.d/ -p wa -k privileged-actions"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-w /etc/sudoers.d/ -p wa -k privileged-actions"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource71ref -{ -ResourceID = "[nxFileLine][V-204550][medium][SRG-OS-000037-GPOS-00015]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F path=/usr/bin/newgrp -F auid>=1000 -F auid!=unset -k privileged-priv_change"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/bin/newgrp\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-priv_change"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource72ref -{ -ResourceID = "[nxFileLine][V-204551][medium][SRG-OS-000037-GPOS-00015]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F path=/usr/bin/chsh -F auid>=1000 -F auid!=unset -k privileged-priv_change"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/bin/chsh\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-priv_change"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource73ref -{ -ResourceID = "[nxFileLine][V-204552.a][medium][SRG-OS-000042-GPOS-00020]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S mount -F auid>=1000 -F auid!=unset -k privileged-mount"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*mount\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-mount"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource74ref -{ -ResourceID = "[nxFileLine][V-204552.b][medium][SRG-OS-000042-GPOS-00020]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S mount -F auid>=1000 -F auid!=unset -k privileged-mount"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*mount\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-mount"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource75ref -{ -ResourceID = "[nxFileLine][V-204552.c][medium][SRG-OS-000042-GPOS-00020]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F path=/usr/bin/mount -F auid>=1000 -F auid!=unset -k privileged-mount"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/bin/mount\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-mount"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource76ref -{ -ResourceID = "[nxFileLine][V-204553][medium][SRG-OS-000042-GPOS-00020]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F path=/usr/bin/umount -F auid>=1000 -F auid!=unset -k privileged-mount"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/bin/umount\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-mount"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource77ref -{ -ResourceID = "[nxFileLine][V-204554][medium][SRG-OS-000042-GPOS-00020]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F path=/usr/sbin/postdrop -F auid>=1000 -F auid!=unset -k privileged-postfix"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/sbin/postdrop\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-postfix"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource78ref -{ -ResourceID = "[nxFileLine][V-204555][medium][SRG-OS-000042-GPOS-00020]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F path=/usr/sbin/postqueue -F auid>=1000 -F auid!=unset -k privileged-postfix"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/sbin/postqueue\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-postfix"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource79ref -{ -ResourceID = "[nxFileLine][V-204556][medium][SRG-OS-000042-GPOS-00020]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F path=/usr/libexec/openssh/ssh-keysign -F auid>=1000 -F auid!=unset -k privileged-ssh"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/libexec/openssh/ssh-keysign\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-ssh"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource80ref -{ -ResourceID = "[nxFileLine][V-204557][medium][SRG-OS-000042-GPOS-00020]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F path=/usr/bin/crontab -F auid>=1000 -F auid!=unset -k privileged-cron"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/bin/crontab\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-cron"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource81ref -{ -ResourceID = "[nxFileLine][V-204558][medium][SRG-OS-000471-GPOS-00215]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F path=/usr/sbin/pam_timestamp_check -F auid>=1000 -F auid!=unset -k privileged-pam"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/sbin/pam_timestamp_check\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-pam"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource82ref -{ -ResourceID = "[nxFileLine][V-204559.a][medium][SRG-OS-000471-GPOS-00216]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S create_module -k module-change"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*create_module\\s*-k\\s*module-change"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource83ref -{ -ResourceID = "[nxFileLine][V-204559.b][medium][SRG-OS-000471-GPOS-00216]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S create_module -k module-change"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*create_module\\s*-k\\s*module-change"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource84ref -{ -ResourceID = "[nxFileLine][V-204560.a][medium][SRG-OS-000471-GPOS-00216]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S init_module,finit_module -k modulechange"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*init_module,finit_module\\s*-k\\s*modulechange"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource85ref -{ -ResourceID = "[nxFileLine][V-204560.b][medium][SRG-OS-000471-GPOS-00216]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S init_module,finit_module -k modulechange"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*init_module,finit_module\\s*-k\\s*modulechange"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource86ref -{ -ResourceID = "[nxFileLine][V-204562.a][medium][SRG-OS-000471-GPOS-00216]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S delete_module -k module-change"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*delete_module\\s*-k\\s*module-change"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource87ref -{ -ResourceID = "[nxFileLine][V-204562.b][medium][SRG-OS-000471-GPOS-00216]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S delete_module -k module-change"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*delete_module\\s*-k\\s*module-change"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource88ref -{ -ResourceID = "[nxFileLine][V-204563][medium][SRG-OS-000471-GPOS-00216]::[RHEL]Baseline"; - ContainsLine = "-w /usr/bin/kmod -p x -F auid!=unset -k module-change"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-w\\s*/usr/bin/kmod\\s*-p\\s*x\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*module-change"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource89ref -{ -ResourceID = "[nxFileLine][V-204564][medium][SRG-OS-000004-GPOS-00004]::[RHEL]Baseline"; - ContainsLine = "-w /etc/passwd -p wa -k identity"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-w\\s*/etc/passwd\\s*-p\\s*wa\\s*-k\\s*identity"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource90ref -{ -ResourceID = "[nxFileLine][V-204565][medium][SRG-OS-000004-GPOS-00004]::[RHEL]Baseline"; - ContainsLine = "-w /etc/group -p wa -k identity"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-w\\s*/etc/group\\s*-p\\s*wa\\s*-k\\s*identity"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource91ref -{ -ResourceID = "[nxFileLine][V-204566][medium][SRG-OS-000004-GPOS-00004]::[RHEL]Baseline"; - ContainsLine = "-w /etc/gshadow -p wa -k identity"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-w\\s*/etc/gshadow\\s*-p\\s*wa\\s*-k\\s*identity"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource92ref -{ -ResourceID = "[nxFileLine][V-204567][medium][SRG-OS-000004-GPOS-00004]::[RHEL]Baseline"; - ContainsLine = "-w /etc/shadow -p wa -k identity"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-w\\s*/etc/shadow\\s*-p\\s*wa\\s*-k\\s*identity"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource93ref -{ -ResourceID = "[nxFileLine][V-204568][medium][SRG-OS-000004-GPOS-00004]::[RHEL]Baseline"; - ContainsLine = "-w /etc/security/opasswd -p wa -k identity"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-w\\s*/etc/security/opasswd\\s*-p\\s*wa\\s*-k\\s*identity"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource94ref -{ -ResourceID = "[nxFileLine][V-204572.a][medium][SRG-OS-000466-GPOS-00210]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S unlink,unlinkat,rename,renameat,rmdir -F auid>=1000 -F auid!=unset -k delete"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*unlink,unlinkat,rename,renameat,rmdir\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*delete"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource95ref -{ -ResourceID = "[nxFileLine][V-204572.b][medium][SRG-OS-000466-GPOS-00210]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S unlink,unlinkat,rename,renameat,rmdir -F auid>=1000 -F auid!=unset -k delete"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*unlink,unlinkat,rename,renameat,rmdir\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*delete"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource96ref -{ -ResourceID = "[nxFileLine][V-204578][medium][SRG-OS-000033-GPOS-00014]::[RHEL]Baseline"; - ContainsLine = "Ciphers aes256-ctr,aes192-ctr,aes128-ctr"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/ssh/sshd_config"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "^#\\s*Ciphers.*|^\\s*Ciphers\\s*aes128-ctr.*|^\\s*Ciphers\\s*aes192-ctr.*"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource97ref -{ -ResourceID = "[nxFileLine][V-204579.b][medium][SRG-OS-000163-GPOS-00072]::[RHEL]Baseline"; - ContainsLine = "declare -xr TMOUT=900"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/profile.d/tmout.sh"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "^\\s*TMOUT\\s*=\\s*[0-8]?[0-9]?[0-9]?$|^#\\s*TMOUT.*"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource98ref -{ -ResourceID = "[nxFileLine][V-204580][medium][SRG-OS-000023-GPOS-00006]::[RHEL]Baseline"; - ContainsLine = "banner /etc/issue"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/ssh/sshd_config"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*banner\\s*/etc/issue"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource99ref -{ -ResourceID = "[nxFileLine][V-204587][medium][SRG-OS-000163-GPOS-00072]::[RHEL]Baseline"; - ContainsLine = "ClientAliveInterval 600"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/ssh/sshd_config"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "^\\s*ClientAliveInterval\\s*[0-5]?[0-9]?[0-9]?\\s*$|^#\\s*ClientAliveInterval.*|^\\s*ClientAliveInterval\\s*$"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource100ref -{ -ResourceID = "[nxFileLine][V-204588][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; - ContainsLine = "RhostsRSAAuthentication no"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/ssh/sshd_config"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "^#\\s*RhostsRSAAuthentication.*$|^RhostsRSAAuthentication\\s*(?!no\\b)\\w*$"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource101ref -{ -ResourceID = "[nxFileLine][V-204589][medium][SRG-OS-000163-GPOS-00072]::[RHEL]Baseline"; - ContainsLine = "ClientAliveCountMax 0"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/ssh/sshd_config"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "^#\\s*ClientAliveCountMax.*$|^ClientAliveCountMax\\s*(?!0\\b)\\w*$"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource102ref -{ -ResourceID = "[nxFileLine][V-204590][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; - ContainsLine = "IgnoreRhosts yes"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/ssh/sshd_config"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "^#\\s*IgnoreRhosts.*$|^IgnoreRhosts\\s*(?!yes\\b)\\w*$"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource103ref -{ -ResourceID = "[nxFileLine][V-204591][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; - ContainsLine = "PrintLastLog yes"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/ssh/sshd_config"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "^#\\s*PrintLastLog.*$|^PrintLastLog\\s*(?!yes\\b)\\w*$"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource104ref -{ -ResourceID = "[nxFileLine][V-204592][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; - ContainsLine = "PermitRootLogin no"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/ssh/sshd_config"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "^#\\s*PermitRootLogin.*$|^PermitRootLogin\\s*(?!no\\b)\\w*$"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource105ref -{ -ResourceID = "[nxFileLine][V-204593][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; - ContainsLine = "IgnoreUserKnownHosts yes"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/ssh/sshd_config"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "^#\\s*IgnoreUserKnownHosts.*$|^IgnoreUserKnownHosts\\s*(?!yes\\b)\\w*$"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource106ref -{ -ResourceID = "[nxFileLine][V-204594][high][SRG-OS-000074-GPOS-00042]::[RHEL]Baseline"; - ContainsLine = "Protocol 2"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/ssh/sshd_config"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "^#\\s*Protocol.*$|^Protocol\\s*(?!2\\b)\\w*$"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource107ref -{ -ResourceID = "[nxFileLine][V-204595][medium][SRG-OS-000250-GPOS-00093]::[RHEL]Baseline"; - ContainsLine = "MACs hmac-sha2-512,hmac-sha2-256"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/ssh/sshd_config"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*MACs.*|\\s*MACs\\s*hmac-(?!sha2-512).*"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource108ref -{ -ResourceID = "[nxFileLine][V-204598][medium][SRG-OS-000364-GPOS-00151]::[RHEL]Baseline"; - ContainsLine = "GSSAPIAuthentication no"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/ssh/sshd_config"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "^#\\s*GSSAPIAuthentication.*$|^GSSAPIAuthentication\\s*(?!no\\b)\\w*$"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource109ref -{ -ResourceID = "[nxFileLine][V-204599][medium][SRG-OS-000364-GPOS-00151]::[RHEL]Baseline"; - ContainsLine = "KerberosAuthentication no"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/ssh/sshd_config"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "^#\\s*KerberosAuthentication.*$|^KerberosAuthentication\\s*(?!no\\b)\\w*$"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource110ref -{ -ResourceID = "[nxFileLine][V-204600][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; - ContainsLine = "StrictModes yes"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/ssh/sshd_config"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "^#\\s*StrictModes.*$|^StrictModes\\s*(?!yes\\b)\\w*$"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource111ref -{ -ResourceID = "[nxFileLine][V-204601][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; - ContainsLine = "UsePrivilegeSeparation sandbox"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/ssh/sshd_config"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "^#\\s*UsePrivilegeSeparation.*$|^UsePrivilegeSeparation\\s*(?!sandbox\\b)\\w*$"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource112ref -{ -ResourceID = "[nxFileLine][V-204602][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; - ContainsLine = "Compression delayed"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/ssh/sshd_config"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "^#\\s*Compression.*$|^Compression\\s*(?!delayed\\b)\\w*$"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource113ref -{ -ResourceID = "[nxFileLine][V-204622][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; - ContainsLine = "X11Forwarding no"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/ssh/sshd_config"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "^#\\s*X11Forwarding.*$|^X11Forwarding\\s*(?!no\\b)\\w*$"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource114ref -{ -ResourceID = "[nxFileLine][V-233307][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; - ContainsLine = "X11UseLocalhost yes"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/ssh/sshd_config"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*X11UseLocalhost\\s*yes"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxServiceResource as $MSFT_nxServiceResource1ref -{ -ResourceID = "[nxService][V-204451][medium][SRG-OS-000114-GPOS-00059]::[RHEL]Baseline"; - Controller = "systemd"; - Enabled = False; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxService.ps1::13::9::nxService"; - Name = "autofs"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxServiceResource as $MSFT_nxServiceResource2ref -{ -ResourceID = "[nxService][V-204492][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; - Controller = "systemd"; - Enabled = False; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxService.ps1::13::9::nxService"; - Name = "kdump"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxServiceResource as $MSFT_nxServiceResource3ref -{ -ResourceID = "[nxService][V-204503][medium][SRG-OS-000038-GPOS-00016]::[RHEL]Baseline"; - Controller = "systemd"; - State = "Running"; - Enabled = True; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxService.ps1::22::9::nxService"; - Name = "auditd"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxServiceResource as $MSFT_nxServiceResource4ref -{ -ResourceID = "[nxService][V-204586][medium][SRG-OS-000423-GPOS-00187]::[RHEL]Baseline"; - Controller = "systemd"; - State = "Running"; - Enabled = True; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxService.ps1::22::9::nxService"; - Name = "sshd"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxServiceResource as $MSFT_nxServiceResource5ref -{ -ResourceID = "[nxService][V-204604.b][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; - Controller = "systemd"; - State = "Running"; - Enabled = True; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxService.ps1::22::9::nxService"; - Name = "firewalld"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxScriptResource as $MSFT_nxScriptResource1ref -{ -ResourceID = "[nxScript][V-204399.b][medium][[Skip] SRG-OS-000029-GPOS-00010]::[RHEL]Baseline"; - GetScript = "#!/bin/bash\necho [V-204399.b][medium][[Skip] SRG-OS-000029-GPOS-00010]"; - TestScript = "#!/bin/bash\nexit 0"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxScript.skip.ps1::10::5::nxScript"; - SetScript = "#!/bin/bash"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxScriptResource as $MSFT_nxScriptResource2ref -{ -ResourceID = "[nxScript][V-204400][medium][[Skip] SRG-OS-000029-GPOS-00010]::[RHEL]Baseline"; - GetScript = "#!/bin/bash\necho [V-204400][medium][[Skip] SRG-OS-000029-GPOS-00010]"; - TestScript = "#!/bin/bash\nexit 0"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxScript.skip.ps1::10::5::nxScript"; - SetScript = "#!/bin/bash"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxScriptResource as $MSFT_nxScriptResource3ref -{ -ResourceID = "[nxScript][V-204403][medium][[Skip] SRG-OS-000029-GPOS-00010]::[RHEL]Baseline"; - GetScript = "#!/bin/bash\necho [V-204403][medium][[Skip] SRG-OS-000029-GPOS-00010]"; - TestScript = "#!/bin/bash\nexit 0"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxScript.skip.ps1::10::5::nxScript"; - SetScript = "#!/bin/bash"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxScriptResource as $MSFT_nxScriptResource4ref -{ -ResourceID = "[nxScript][V-204509][medium][[Skip] SRG-OS-000342-GPOS-00133]::[RHEL]Baseline"; - GetScript = "#!/bin/bash\necho [V-204509][medium][[Skip] SRG-OS-000342-GPOS-00133]"; - TestScript = "#!/bin/bash\nexit 0"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxScript.skip.ps1::10::5::nxScript"; - SetScript = "#!/bin/bash"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxScriptResource as $MSFT_nxScriptResource5ref -{ -ResourceID = "[nxScript][V-204513][medium][[Skip] SRG-OS-000343-GPOS-00134]::[RHEL]Baseline"; - GetScript = "#!/bin/bash\necho [V-204513][medium][[Skip] SRG-OS-000343-GPOS-00134]"; - TestScript = "#!/bin/bash\nexit 0"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxScript.skip.ps1::10::5::nxScript"; - SetScript = "#!/bin/bash"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxScriptResource as $MSFT_nxScriptResource6ref -{ -ResourceID = "[nxScript][V-204623][medium][[Skip] SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; - GetScript = "#!/bin/bash\necho [V-204623][medium][[Skip] SRG-OS-000480-GPOS-00227]"; - TestScript = "#!/bin/bash\nexit 0"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxScript.skip.ps1::10::5::nxScript"; - SetScript = "#!/bin/bash"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxScriptResource as $MSFT_nxScriptResource7ref -{ -ResourceID = "[nxScript][V-244557][medium][[Skip] SRG-OS-000080-GPOS-00048]::[RHEL]Baseline"; - GetScript = "#!/bin/bash\necho [V-244557][medium][[Skip] SRG-OS-000080-GPOS-00048]"; - TestScript = "#!/bin/bash\nexit 0"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxScript.skip.ps1::10::5::nxScript"; - SetScript = "#!/bin/bash"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxScriptResource as $MSFT_nxScriptResource8ref -{ -ResourceID = "[nxScript][V-244558][medium][[Skip] SRG-OS-000080-GPOS-00048]::[RHEL]Baseline"; - GetScript = "#!/bin/bash\necho [V-244558][medium][[Skip] SRG-OS-000080-GPOS-00048]"; - TestScript = "#!/bin/bash\nexit 0"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxScript.skip.ps1::10::5::nxScript"; - SetScript = "#!/bin/bash"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxScriptResource as $MSFT_nxScriptResource9ref -{ -ResourceID = "[nxScript][V-204399.a][medium][[Skip] SRG-OS-000029-GPOS-00010]::[RHEL]Baseline"; - GetScript = "#!/bin/bash\necho [V-204399.a][medium][[Skip] SRG-OS-000029-GPOS-00010]"; - TestScript = "#!/bin/bash\nexit 0"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxScript.skip.ps1::10::5::nxScript"; - SetScript = "#!/bin/bash"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of OMI_ConfigurationDocument - - - { - Version="2.0.0"; - - - MinimumCompatibleVersion = "1.0.0"; - - - CompatibleVersionAdditionalProperties= {"Omi_BaseResource:ConfigurationName"}; - - - Author="Microsoft"; - - - GenerationDate="06/30/2022 11:38:45"; - - - GenerationHost="Microsoft"; - - - Name="LinuxBaseLine"; - - - }; +/* +@TargetNode='CentOS76' +@GeneratedBy=Microsoft +@GenerationDate=03/09/2023 14:17:33 +@GenerationHost=Microsoft +*/ + +instance of MSFT_nxPackageResource as $MSFT_nxPackageResource1ref +{ +ResourceID = "[nxPackage][V-204442][high][SRG-OS-000095-GPOS-00049]::[RHEL]Baseline"; + Ensure = "Absent"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxPackage.ps1::8::5::nxPackage"; + Name = "rsh-server"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxPackageResource as $MSFT_nxPackageResource2ref +{ +ResourceID = "[nxPackage][V-204443][high][SRG-OS-000095-GPOS-00049]::[RHEL]Baseline"; + Ensure = "Absent"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxPackage.ps1::8::5::nxPackage"; + Name = "ypserv"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxPackageResource as $MSFT_nxPackageResource3ref +{ +ResourceID = "[nxPackage][V-204497][high][SRG-OS-000033-GPOS-00014]::[RHEL]Baseline"; + Ensure = "Present"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxPackage.ps1::8::5::nxPackage"; + Name = "dracut-fips"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxPackageResource as $MSFT_nxPackageResource4ref +{ +ResourceID = "[nxPackage][V-204498][low][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; + Ensure = "Present"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxPackage.ps1::8::5::nxPackage"; + Name = "aide"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxPackageResource as $MSFT_nxPackageResource5ref +{ +ResourceID = "[nxPackage][V-204502][high][SRG-OS-000095-GPOS-00049]::[RHEL]Baseline"; + Ensure = "Absent"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxPackage.ps1::8::5::nxPackage"; + Name = "telnet-server"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxPackageResource as $MSFT_nxPackageResource6ref +{ +ResourceID = "[nxPackage][V-204585][medium][SRG-OS-000423-GPOS-00187]::[RHEL]Baseline"; + Ensure = "Present"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxPackage.ps1::8::5::nxPackage"; + Name = "openssh-server"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxPackageResource as $MSFT_nxPackageResource7ref +{ +ResourceID = "[nxPackage][V-204604.a][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; + Ensure = "Present"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxPackage.ps1::8::5::nxPackage"; + Name = "firewalld"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxPackageResource as $MSFT_nxPackageResource8ref +{ +ResourceID = "[nxPackage][V-204620][high][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; + Ensure = "Absent"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxPackage.ps1::8::5::nxPackage"; + Name = "vsftpd"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxPackageResource as $MSFT_nxPackageResource9ref +{ +ResourceID = "[nxPackage][V-204621][high][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; + Ensure = "Absent"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxPackage.ps1::8::5::nxPackage"; + Name = "tftp-server"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxPackageResource as $MSFT_nxPackageResource10ref +{ +ResourceID = "[nxPackage][V-204631][medium][SRG-OS-000375-GPOS-00160]::[RHEL]Baseline"; + Ensure = "Present"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxPackage.ps1::8::5::nxPackage"; + Name = "pam_pkcs11"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileResource as $MSFT_nxFileResource1ref +{ +ResourceID = "[nxFile][V-204395][medium][SRG-OS-000023-GPOS-00006]::[RHEL]Baseline"; + Contents = "You are accessing a U.S. Government (USG) Information System (IS) that is provided for USG-authorized use only.\n\nBy using this IS (which includes any device attached to this IS), you consent to the following conditions:\n\n-The USG routinely intercepts and monitors communications on this IS for purposes including, but not limited to, penetration testing, COMSEC monitoring, network operations and defense, personnel misconduct (PM), law enforcement (LE), and counterintelligence (CI) investigations.\n\n-At any time, the USG may inspect and seize data stored on this IS.\n\n-Communications using, or data stored on, this IS are not private, are subject to routine monitoring, interception, and search, and may be disclosed or used for any USG-authorized purpose.\n\n-This IS includes security measures (e.g., authentication and access controls) to protect USG interests--not for your personal benefit or privacy.\n\n-Notwithstanding the above, using this IS does not constitute consent to PM, LE or CI investigative searching or monitoring of the content of privileged communications, or work product, related to personal representation or services by attorneys, psychotherapists, or clergy, and their assistants. Such communications and work product are private and confidential. See User Agreement for details."; + DestinationPath = "/etc/issue"; + ModuleName = "nx"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; + ModuleVersion = "1.0"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileResource as $MSFT_nxFileResource2ref +{ +ResourceID = "[nxFile][V-204449.a][medium][SRG-OS-000114-GPOS-00059]::[RHEL]Baseline"; + Contents = ""; + DestinationPath = "/etc/modprobe.d/usb-storage.conf"; + ModuleName = "nx"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; + ModuleVersion = "1.0"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileResource as $MSFT_nxFileResource3ref +{ +ResourceID = "[nxFile][V-204449.b][medium][SRG-OS-000114-GPOS-00059]::[RHEL]Baseline"; + Contents = ""; + DestinationPath = "/etc/modprobe.d/blacklist.conf"; + ModuleName = "nx"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; + ModuleVersion = "1.0"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileResource as $MSFT_nxFileResource4ref +{ +ResourceID = "[nxFile][V-204450.a][medium][SRG-OS-000378-GPOS-00163]::[RHEL]Baseline"; + Contents = ""; + DestinationPath = "/etc/modprobe.d/dccp.conf"; + ModuleName = "nx"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; + ModuleVersion = "1.0"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileResource as $MSFT_nxFileResource5ref +{ +ResourceID = "[nxFile][V-204576][low][SRG-OS-000027-GPOS-00008]::[RHEL]Baseline"; + Contents = "* hard maxlogins 10"; + DestinationPath = "/etc/security/limits.d/204576-powerstig.conf"; + ModuleName = "nx"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; + ModuleVersion = "1.0"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileResource as $MSFT_nxFileResource6ref +{ +ResourceID = "[nxFile][V-204579.a][medium][SRG-OS-000163-GPOS-00072]::[RHEL]Baseline"; + Contents = ""; + DestinationPath = "/etc/profile.d/tmout.sh"; + ModuleName = "nx"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; + ModuleVersion = "1.0"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileResource as $MSFT_nxFileResource7ref +{ +ResourceID = "[nxFile][V-204584][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; + Contents = "kernel.randomize_va_space = 2"; + DestinationPath = "/etc/sysctl.d/204584-powerstig.conf"; + ModuleName = "nx"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; + ModuleVersion = "1.0"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileResource as $MSFT_nxFileResource8ref +{ +ResourceID = "[nxFile][V-204609][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; + Contents = "net.ipv4.conf.all.accept_source_route = 0"; + DestinationPath = "/etc/sysctl.d/204609-powerstig.conf"; + ModuleName = "nx"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; + ModuleVersion = "1.0"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileResource as $MSFT_nxFileResource9ref +{ +ResourceID = "[nxFile][V-204610][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; + Contents = "net.ipv4.conf.all.rp_filter = 1"; + DestinationPath = "/etc/sysctl.d/204610-powerstig.conf"; + ModuleName = "nx"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; + ModuleVersion = "1.0"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileResource as $MSFT_nxFileResource10ref +{ +ResourceID = "[nxFile][V-204611][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; + Contents = "net.ipv4.conf.default.rp_filter = 1"; + DestinationPath = "/etc/sysctl.d/204611-powerstig.conf"; + ModuleName = "nx"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; + ModuleVersion = "1.0"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileResource as $MSFT_nxFileResource11ref +{ +ResourceID = "[nxFile][V-204612][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; + Contents = "net.ipv4.conf.default.accept_source_route = 0"; + DestinationPath = "/etc/sysctl.d/204612-powerstig.conf"; + ModuleName = "nx"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; + ModuleVersion = "1.0"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileResource as $MSFT_nxFileResource12ref +{ +ResourceID = "[nxFile][V-204613][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; + Contents = "net.ipv4.icmp_echo_ignore_broadcasts = 1"; + DestinationPath = "/etc/sysctl.d/204613-powerstig.conf"; + ModuleName = "nx"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; + ModuleVersion = "1.0"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileResource as $MSFT_nxFileResource13ref +{ +ResourceID = "[nxFile][V-204614][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; + Contents = "net.ipv4.conf.default.accept_redirects = 0"; + DestinationPath = "/etc/sysctl.d/204614-powerstig.conf"; + ModuleName = "nx"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; + ModuleVersion = "1.0"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileResource as $MSFT_nxFileResource14ref +{ +ResourceID = "[nxFile][V-204615][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; + Contents = "net.ipv4.conf.all.accept_redirects = 0"; + DestinationPath = "/etc/sysctl.d/204615-powerstig.conf"; + ModuleName = "nx"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; + ModuleVersion = "1.0"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileResource as $MSFT_nxFileResource15ref +{ +ResourceID = "[nxFile][V-204616][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; + Contents = "net.ipv4.conf.default.send_redirects = 0"; + DestinationPath = "/etc/sysctl.d/204616-powerstig.conf"; + ModuleName = "nx"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; + ModuleVersion = "1.0"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileResource as $MSFT_nxFileResource16ref +{ +ResourceID = "[nxFile][V-204617][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; + Contents = "net.ipv4.conf.all.send_redirects = 0"; + DestinationPath = "/etc/sysctl.d/204617-powerstig.conf"; + ModuleName = "nx"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; + ModuleVersion = "1.0"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileResource as $MSFT_nxFileResource17ref +{ +ResourceID = "[nxFile][V-204625][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; + Contents = "net.ipv4.ip_forward = 0"; + DestinationPath = "/etc/sysctl.d/204625-powerstig.conf"; + ModuleName = "nx"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; + ModuleVersion = "1.0"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileResource as $MSFT_nxFileResource18ref +{ +ResourceID = "[nxFile][V-204630][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; + Contents = "net.ipv6.conf.all.accept_source_route = 0"; + DestinationPath = "/etc/sysctl.d/204630-powerstig.conf"; + ModuleName = "nx"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; + ModuleVersion = "1.0"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileResource as $MSFT_nxFileResource19ref +{ +ResourceID = "[nxFile][V-237634.a][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; + Contents = "Defaults !targetpw"; + DestinationPath = "/etc/sudoers.d/237634a-powerstig.conf"; + ModuleName = "nx"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; + ModuleVersion = "1.0"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileResource as $MSFT_nxFileResource20ref +{ +ResourceID = "[nxFile][V-237634.b][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; + Contents = "Defaults !rootpw"; + DestinationPath = "/etc/sudoers.d/237634b-powerstig.conf"; + ModuleName = "nx"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; + ModuleVersion = "1.0"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileResource as $MSFT_nxFileResource21ref +{ +ResourceID = "[nxFile][V-237634.c][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; + Contents = "Defaults !runaspw"; + DestinationPath = "/etc/sudoers.d/237634c-powerstig.conf"; + ModuleName = "nx"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; + ModuleVersion = "1.0"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileResource as $MSFT_nxFileResource22ref +{ +ResourceID = "[nxFile][V-237635][medium][SRG-OS-000373-GPOS-00156]::[RHEL]Baseline"; + Contents = "Defaults timestamp_timeout=0"; + DestinationPath = "/etc/sudoers.d/237635-powerstig.conf"; + ModuleName = "nx"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; + ModuleVersion = "1.0"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileResource as $MSFT_nxFileResource23ref +{ +ResourceID = "[nxFile][V-250314][medium][SRG-OS-000324-GPOS-00125]::[RHEL]Baseline"; + Contents = "%wheel ALL=(ALL) TYPE=sysadm_t ROLE=sysadm_r ALL"; + DestinationPath = "/etc/sudoers.d/250314-powerstig.conf"; + ModuleName = "nx"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; + ModuleVersion = "1.0"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource1ref +{ +ResourceID = "[nxFileLine][V-204405][medium][SRG-OS-000069-GPOS-00037]::[RHEL]Baseline"; + ContainsLine = "password substack system-auth"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/pam.d/passwd"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "^\\s*password(?:\\t*|\\s*)substack\\tsystem-auth\\s*$|^#\\s*password\\s*substack\\s*system-auth.*"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource2ref +{ +ResourceID = "[nxFileLine][V-204407][medium][SRG-OS-000069-GPOS-00037]::[RHEL]Baseline"; + ContainsLine = "ucredit = -1"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/security/pwquality.conf"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "^#\\s*ucredit.*$|^ucredit\\s*=\\s*(?!-1\\b)\\w*$"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource3ref +{ +ResourceID = "[nxFileLine][V-204408][medium][SRG-OS-000070-GPOS-00038]::[RHEL]Baseline"; + ContainsLine = "lcredit = -1"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/security/pwquality.conf"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "^#\\s*lcredit.*$|^lcredit\\s*=\\s*(?!-1\\b)\\w*$"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource4ref +{ +ResourceID = "[nxFileLine][V-204409][medium][SRG-OS-000071-GPOS-00039]::[RHEL]Baseline"; + ContainsLine = "dcredit = -1"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/security/pwquality.conf"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "^#\\s*dcredit.*$|^dcredit\\s*=\\s*(?!-1\\b)\\w*$"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource5ref +{ +ResourceID = "[nxFileLine][V-204410][medium][SRG-OS-000266-GPOS-00101]::[RHEL]Baseline"; + ContainsLine = "ocredit=-1"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/security/pwquality.conf"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "^#\\s*ocredit.*$|^ocredit\\s*=\\s*(?!-1)\\w*$"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource6ref +{ +ResourceID = "[nxFileLine][V-204411][medium][SRG-OS-000072-GPOS-00040]::[RHEL]Baseline"; + ContainsLine = "difok = 8"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/security/pwquality.conf"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*difok\\s*=.*|^\\s*difok\\s*=\\s*(-|)[0-7]$"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource7ref +{ +ResourceID = "[nxFileLine][V-204412][medium][SRG-OS-000072-GPOS-00040]::[RHEL]Baseline"; + ContainsLine = "minclass = 4"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/security/pwquality.conf"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "^#\\s*minclass\\s*=.*|^\\s*minclass\\s*=\\s*(?!\\d{2,})[1-3]"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource8ref +{ +ResourceID = "[nxFileLine][V-204413][medium][SRG-OS-000072-GPOS-00040]::[RHEL]Baseline"; + ContainsLine = "maxrepeat = 3"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/security/pwquality.conf"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "^#\\s*maxrepeat\\s*=.*|^\\s*maxrepeat\\s*=\\s*(?:\\d{2,}|[4-9])"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource9ref +{ +ResourceID = "[nxFileLine][V-204414][medium][SRG-OS-000072-GPOS-00040]::[RHEL]Baseline"; + ContainsLine = "maxclassrepeat = 4"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/security/pwquality.conf"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "^#\\s*maxclassrepeat\\s*=.*|^\\s*maxclassrepeat\\s*=\\s*(?:\\d{2,}|[1-3|5-9])"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource10ref +{ +ResourceID = "[nxFileLine][V-204416][medium][SRG-OS-000073-GPOS-00041]::[RHEL]Baseline"; + ContainsLine = "ENCRYPT_METHOD SHA512"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/login.defs"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*ENCRYPT_METHOD\\s*SHA512"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource11ref +{ +ResourceID = "[nxFileLine][V-204418][medium][SRG-OS-000075-GPOS-00043]::[RHEL]Baseline"; + ContainsLine = "PASS_MIN_DAYS 1"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/login.defs"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "^\\s*PASS_MIN_DAYS\\s*[0]*$|#\\s*PASS_MIN_DAYS.*"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource12ref +{ +ResourceID = "[nxFileLine][V-204420][medium][SRG-OS-000076-GPOS-00044]::[RHEL]Baseline"; + ContainsLine = "PASS_MAX_DAYS 60"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/login.defs"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "^\\s*PASS_MAX_DAYS\\s*([6][1-9]|[7-9][0-9]|\\d{3,})$|#\\s*PASS_MAX_DAYS.*"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource13ref +{ +ResourceID = "[nxFileLine][V-204423][medium][SRG-OS-000078-GPOS-00046]::[RHEL]Baseline"; + ContainsLine = "minlen = 15"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/security/pwquality.conf"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "^\\s*minlen\\s*=\\s*([0-9]|[1][1-4])$|#\\s*minlen.*"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource14ref +{ +ResourceID = "[nxFileLine][V-204425][high][SRG-OS-000106-GPOS-00053]::[RHEL]Baseline"; + ContainsLine = "PermitEmptyPasswords no"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/ssh/sshd_config"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "^#\\s*PermitEmptyPasswords.*$|^PermitEmptyPasswords\\s*(?!no\\b)\\w*$"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource15ref +{ +ResourceID = "[nxFileLine][V-204426][medium][SRG-OS-000118-GPOS-00060]::[RHEL]Baseline"; + ContainsLine = "INACTIVE=35"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/default/useradd"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "^#\\s*INACTIVE\\s*=.*|^\\s*INACTIVE\\s*=\\s*(3[5-9]|[4-9]\\d+|\\d{3,})"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource16ref +{ +ResourceID = "[nxFileLine][V-204431][medium][SRG-OS-000480-GPOS-00226]::[RHEL]Baseline"; + ContainsLine = "FAIL_DELAY 4"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/login.defs"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "^#\\s*FAIL_DELAY.*|^FAIL_DELAY\\s*(?!\\d{2,})[1-3]"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource17ref +{ +ResourceID = "[nxFileLine][V-204434][medium][SRG-OS-000480-GPOS-00229]::[RHEL]Baseline"; + ContainsLine = "PermitUserEnvironment no"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/ssh/sshd_config"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "^#\\s*PermitUserEnvironment.*$|^PermitUserEnvironment\\s*(?!no\\b)\\w*$"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource18ref +{ +ResourceID = "[nxFileLine][V-204435][medium][SRG-OS-000480-GPOS-00229]::[RHEL]Baseline"; + ContainsLine = "HostbasedAuthentication no"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/ssh/sshd_config"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "^#\\s*HostbasedAuthentication.*$|^HostbasedAuthentication\\s*(?!no\\b)\\w*$"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource19ref +{ +ResourceID = "[nxFileLine][V-204447][high][SRG-OS-000366-GPOS-00153]::[RHEL]Baseline"; + ContainsLine = "gpgcheck=1"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/yum.conf"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*gpgcheck\\s*=\\s*1"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource20ref +{ +ResourceID = "[nxFileLine][V-204448][high][SRG-OS-000366-GPOS-00153]::[RHEL]Baseline"; + ContainsLine = "localpkg_gpgcheck=1"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/yum.conf"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*localpkg_gpgcheck\\s*=\\s*1"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource21ref +{ +ResourceID = "[nxFileLine][V-204449.c][medium][SRG-OS-000114-GPOS-00059]::[RHEL]Baseline"; + ContainsLine = "install usb-storage /bin/true"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/modprobe.d/usb-storage.conf"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*install\\s*usb-storage\\s*/bin/true"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource22ref +{ +ResourceID = "[nxFileLine][V-204449.d][medium][SRG-OS-000114-GPOS-00059]::[RHEL]Baseline"; + ContainsLine = "blacklist usb-storage"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/modprobe.d/blacklist.conf"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*blacklist\\s*usb-storage"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource23ref +{ +ResourceID = "[nxFileLine][V-204450.b][medium][SRG-OS-000378-GPOS-00163]::[RHEL]Baseline"; + ContainsLine = "install dccp /bin/true"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/modprobe.d/dccp.conf"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*install\\s*dccp\\s*/bin/true"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource24ref +{ +ResourceID = "[nxFileLine][V-204450.c][medium][SRG-OS-000378-GPOS-00163]::[RHEL]Baseline"; + ContainsLine = "blacklist dccp"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/modprobe.d/blacklist.conf"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*blacklist\\s*dccp"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource25ref +{ +ResourceID = "[nxFileLine][V-204452][low][SRG-OS-000437-GPOS-00194]::[RHEL]Baseline"; + ContainsLine = "clean_requirements_on_remove=1"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/yum.conf"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*clean_requirements_on_remove\\s*=\\s*1"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource26ref +{ +ResourceID = "[nxFileLine][V-204453][medium][SRG-OS-000445-GPOS-00199]::[RHEL]Baseline"; + ContainsLine = "SELINUX=enforcing"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/selinux/config"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "^#\\s*SELINUX.*$|^SELINUX\\s*=\\s*(?!enforcing)\\w*$"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource27ref +{ +ResourceID = "[nxFileLine][V-204454][medium][SRG-OS-000445-GPOS-00199]::[RHEL]Baseline"; + ContainsLine = "SELINUXTYPE=targeted"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/selinux/config"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "^#\\s*SELINUXTYPE.*$|^SELINUXTYPE\\s*=\\s*(?!targeted\\b)\\w*$"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource28ref +{ +ResourceID = "[nxFileLine][V-204457][medium][SRG-OS-000480-GPOS-00228]::[RHEL]Baseline"; + ContainsLine = "UMASK 077"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/login.defs"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "^\\s*UMASK(?!\\s077\\b)\\s*\\d*\\s*$|^#\\s*UMASK.*"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource29ref +{ +ResourceID = "[nxFileLine][V-204466][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; + ContainsLine = "CREATE_HOME yes"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/login.defs"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "^#\\s*CREATE_HOME.*$|^CREATE_HOME\\s*(?!yes\\b)\\w*$|^CREATE_HOME\\t.*"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource30ref +{ +ResourceID = "[nxFileLine][V-204504][medium][SRG-OS-000046-GPOS-00022]::[RHEL]Baseline"; + ContainsLine = "-f 2"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "^#\\s*-f\\s+2|^\\s*-f\\s*1"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileResource as $MSFT_nxFileResource24ref +{ +SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::29::9::nxFile"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + ResourceID = "[nxFile][V-204506.a][medium][SRG-OS-000342-GPOS-00133]::[RHEL]Baseline"; + DestinationPath = "/etc/audisp/plugins.d/au-remote.conf"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource31ref +{ +ResourceID = "[nxFileLine][V-204506.a][medium][SRG-OS-000342-GPOS-00133]::[RHEL]Baseline"; + ContainsLine = "active = yes"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audisp/plugins.d/au-remote.conf"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "\\s*active\\s*=\\s*no|active=yes|#\\s*active\\s*=.*"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource32ref +{ +ResourceID = "[nxFileLine][V-204506.b][medium][SRG-OS-000342-GPOS-00133]::[RHEL]Baseline"; + ContainsLine = "direction = out"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audisp/plugins.d/au-remote.conf"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*direction\\s*=\\s*out"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource33ref +{ +ResourceID = "[nxFileLine][V-204506.c][medium][SRG-OS-000342-GPOS-00133]::[RHEL]Baseline"; + ContainsLine = "path = /sbin/audisp-remote"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audisp/plugins.d/au-remote.conf"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*path\\s*=\\s*/sbin/audisp-remote"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource34ref +{ +ResourceID = "[nxFileLine][V-204506.d][medium][SRG-OS-000342-GPOS-00133]::[RHEL]Baseline"; + ContainsLine = "type = always"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audisp/plugins.d/au-remote.conf"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*type\\s*=\\s*always"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource35ref +{ +ResourceID = "[nxFileLine][V-204507][medium][SRG-OS-000342-GPOS-00133]::[RHEL]Baseline"; + ContainsLine = "overflow_action = syslog"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audisp/audispd.conf"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "^#\\s*overflow_action.*$|^overflow_action\\s*=\\s*(?!syslog$)\\w*$"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource36ref +{ +ResourceID = "[nxFileLine][V-204508][medium][SRG-OS-000342-GPOS-00133]::[RHEL]Baseline"; + ContainsLine = "name_format = hostname"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audisp/audispd.conf"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "^#\\s*name_format.*$|^name_format\\s*=\\s*(?!hostname$)\\w*$"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileResource as $MSFT_nxFileResource25ref +{ +SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::19::9::nxFile"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + ResourceID = "[nxFile][V-204510][medium][SRG-OS-000342-GPOS-00133]::[RHEL]Baseline"; + DestinationPath = "/etc/audisp/audisp-remote.conf"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource37ref +{ +ResourceID = "[nxFileLine][V-204510][medium][SRG-OS-000342-GPOS-00133]::[RHEL]Baseline"; + ContainsLine = "enable_krb5 = yes"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audisp/audisp-remote.conf"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*enable_krb5\\s*=\\s*yes"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource38ref +{ +ResourceID = "[nxFileLine][V-204511][medium][SRG-OS-000342-GPOS-00133]::[RHEL]Baseline"; + ContainsLine = "disk_full_action = single"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audisp/audisp-remote.conf"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "^#\\s*disk_full_action\\s*=.*|^disk_full_action\\s*=\\s*(?!halt\\b|single\\b|syslog\\b)\\w+"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource39ref +{ +ResourceID = "[nxFileLine][V-204512][medium][SRG-OS-000342-GPOS-00133]::[RHEL]Baseline"; + ContainsLine = "network_failure_action = syslog"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audisp/audisp-remote.conf"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "^#\\s*network_failure_action\\s*=.*|^network_failure_action\\s*=\\s*(?!halt\\b|single\\b|syslog\\b)\\w+"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource40ref +{ +ResourceID = "[nxFileLine][V-204514][medium][SRG-OS-000343-GPOS-00134]::[RHEL]Baseline"; + ContainsLine = "space_left_action = email"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/auditd.conf"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "^#\\s*space_left_action.*$|^space_left_action\\s*=\\s*(?!email$)\\w*$"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource41ref +{ +ResourceID = "[nxFileLine][V-204515][medium][SRG-OS-000343-GPOS-00134]::[RHEL]Baseline"; + ContainsLine = "action_mail_acct = root"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/auditd.conf"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "^#\\s*action_mail_acct.*|^action_mail_acct\\s*=\\s*(?!root\\b)\\w+"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource42ref +{ +ResourceID = "[nxFileLine][V-204516.a][medium][SRG-OS-000327-GPOS-00127]::[RHEL]Baseline"; + ContainsLine = "-a always,exit -F arch=b32 -S execve -C uid!=euid -F euid=0 -k setuid"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*execve\\s*-C\\s*uid!\\s*=\\s*euid\\s*-F\\s*euid\\s*=\\s*0\\s*-k\\s*setuid"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource43ref +{ +ResourceID = "[nxFileLine][V-204516.b][medium][SRG-OS-000327-GPOS-00127]::[RHEL]Baseline"; + ContainsLine = "-a always,exit -F arch=b64 -S execve -C uid!=euid -F euid=0 -k setuid"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*execve\\s*-C\\s*uid!\\s*=\\s*euid\\s*-F\\s*euid\\s*=\\s*0\\s*-k\\s*setuid"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource44ref +{ +ResourceID = "[nxFileLine][V-204516.c][medium][SRG-OS-000327-GPOS-00127]::[RHEL]Baseline"; + ContainsLine = "-a always,exit -F arch=b32 -S execve -C gid!=egid -F egid=0 -k setgid"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*execve\\s*-C\\s*gid!\\s*=\\s*egid\\s*-F\\s*egid\\s*=\\s*0\\s*-k\\s*setgid"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource45ref +{ +ResourceID = "[nxFileLine][V-204516.d][medium][SRG-OS-000327-GPOS-00127]::[RHEL]Baseline"; + ContainsLine = "-a always,exit -F arch=b64 -S execve -C gid!=egid -F egid=0 -k setgid"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*execve\\s*-C\\s*gid!\\s*=\\s*egid\\s*-F\\s*egid\\s*=\\s*0\\s*-k\\s*setgid"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource46ref +{ +ResourceID = "[nxFileLine][V-204517.a][medium][SRG-OS-000064-GPOS-00033]::[RHEL]Baseline"; + ContainsLine = "-a always,exit -F arch=b32 -S chown,fchown,fchownat,lchown -F auid>=1000 -F auid!=unset -k perm_mod"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*chown,fchown,fchownat,lchown\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*perm_mod"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource47ref +{ +ResourceID = "[nxFileLine][V-204517.b][medium][SRG-OS-000064-GPOS-00033]::[RHEL]Baseline"; + ContainsLine = "-a always,exit -F arch=b64 -S chown,fchown,fchownat,lchown -F auid>=1000 -F auid!=unset -k perm_mod"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*chown,fchown,fchownat,lchown\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*perm_mod"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource48ref +{ +ResourceID = "[nxFileLine][V-204521.a][medium][SRG-OS-000458-GPOS-00203]::[RHEL]Baseline"; + ContainsLine = "-a always,exit -F arch=b32 -S chmod,fchmod,fchmodat -F auid>=1000 -F auid!=unset -k perm_mod"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*chmod,fchmod,fchmodat\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*perm_mod"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource49ref +{ +ResourceID = "[nxFileLine][V-204521.b][medium][SRG-OS-000458-GPOS-00203]::[RHEL]Baseline"; + ContainsLine = "-a always,exit -F arch=b64 -S chmod,fchmod,fchmodat -F auid>=1000 -F auid!=unset -k perm_mod"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*chmod,fchmod,fchmodat\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*perm_mod"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource50ref +{ +ResourceID = "[nxFileLine][V-204524.a][medium][SRG-OS-000458-GPOS-00203]::[RHEL]Baseline"; + ContainsLine = "-a always,exit -F arch=b32 -S setxattr,fsetxattr,lsetxattr,removexattr,fremovexattr,lremovexattr -F auid>=1000 -F auid!=unset -k perm_mod"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*setxattr,fsetxattr,lsetxattr,removexattr,fremovexattr,lremovexattr\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*perm_mod"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource51ref +{ +ResourceID = "[nxFileLine][V-204524.b][medium][SRG-OS-000458-GPOS-00203]::[RHEL]Baseline"; + ContainsLine = "-a always,exit -F arch=b64 -S setxattr,fsetxattr,lsetxattr,removexattr,fremovexattr,lremovexattr -F auid>=1000 -F auid!=unset -k perm_mod"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*setxattr,fsetxattr,lsetxattr,removexattr,fremovexattr,lremovexattr\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*perm_mod"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource52ref +{ +ResourceID = "[nxFileLine][V-204531.a][medium][SRG-OS-000064-GPOS-00033]::[RHEL]Baseline"; + ContainsLine = "-a always,exit -F arch=b32 -S creat,open,openat,open_by_handle_at,truncate,ftruncate -F exit=-EPERM -F auid>=1000 -F auid!=unset -k access"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*creat,open,openat,open_by_handle_at,truncate,ftruncate\\s*-F\\s*exit\\s*=\\s*-EPERM\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*access"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource53ref +{ +ResourceID = "[nxFileLine][V-204531.b][medium][SRG-OS-000064-GPOS-00033]::[RHEL]Baseline"; + ContainsLine = "-a always,exit -F arch=b32 -S creat,open,openat,open_by_handle_at,truncate,ftruncate -F exit=-EACCES -F auid>=1000 -F auid!=unset -k access"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*creat,open,openat,open_by_handle_at,truncate,ftruncate\\s*-F\\s*exit\\s*=\\s*-EACCES\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*access"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource54ref +{ +ResourceID = "[nxFileLine][V-204531.c][medium][SRG-OS-000064-GPOS-00033]::[RHEL]Baseline"; + ContainsLine = "-a always,exit -F arch=b64 -S creat,open,openat,open_by_handle_at,truncate,ftruncate -F exit=-EPERM -F auid>=1000 -F auid!=unset -k access"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*creat,open,openat,open_by_handle_at,truncate,ftruncate\\s*-F\\s*exit\\s*=\\s*-EPERM\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*access"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource55ref +{ +ResourceID = "[nxFileLine][V-204531.d][medium][SRG-OS-000064-GPOS-00033]::[RHEL]Baseline"; + ContainsLine = "-a always,exit -F arch=b64 -S creat,open,openat,open_by_handle_at,truncate,ftruncate -F exit=-EACCES -F auid>=1000 -F auid!=unset -k access"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*creat,open,openat,open_by_handle_at,truncate,ftruncate\\s*-F\\s*exit\\s*=\\s*-EACCES\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*access"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource56ref +{ +ResourceID = "[nxFileLine][V-204536][medium][SRG-OS-000392-GPOS-00172]::[RHEL]Baseline"; + ContainsLine = "-a always,exit -F path=/usr/sbin/semanage -F perm=x -F auid>=1000 -F auid!=unset -k privileged-priv_change"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/sbin/semanage\\s*-F\\s*perm\\s*=\\s*x\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-priv_change"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource57ref +{ +ResourceID = "[nxFileLine][V-204537][medium][SRG-OS-000392-GPOS-00172]::[RHEL]Baseline"; + ContainsLine = "-a always,exit -F path=/usr/sbin/setsebool -F perm=x -F auid>=1000 -F auid!=unset -k privileged-priv_change"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/sbin/setsebool\\s*-F\\s*perm\\s*=\\s*x\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-priv_change"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource58ref +{ +ResourceID = "[nxFileLine][V-204538][medium][SRG-OS-000392-GPOS-00172]::[RHEL]Baseline"; + ContainsLine = "-a always,exit -F path=/usr/bin/chcon -F perm=x -F auid>=1000 -F auid!=unset -k privileged-priv_change"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/bin/chcon\\s*-F\\s*perm\\s*=\\s*x\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-priv_change"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource59ref +{ +ResourceID = "[nxFileLine][V-204539][medium][SRG-OS-000392-GPOS-00172]::[RHEL]Baseline"; + ContainsLine = "-a always,exit -F path=/usr/sbin/setfiles -F perm=x -F auid>=1000 -F auid!=unset -k privileged-priv_change"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/sbin/setfiles\\s*-F\\s*perm\\s*=\\s*x\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-priv_change"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource60ref +{ +ResourceID = "[nxFileLine][V-204540][medium][SRG-OS-000392-GPOS-00172]::[RHEL]Baseline"; + ContainsLine = "-w /var/run/faillock -p wa -k logins"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-w\\s*/var/run/faillock\\s*-p\\s*wa\\s*-k\\s*logins"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource61ref +{ +ResourceID = "[nxFileLine][V-204541][medium][SRG-OS-000392-GPOS-00172]::[RHEL]Baseline"; + ContainsLine = "-w /var/log/lastlog -p wa -k logins"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-w\\s*/var/log/lastlog\\s*-p\\s*wa\\s*-k\\s*logins"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource62ref +{ +ResourceID = "[nxFileLine][V-204542][medium][SRG-OS-000042-GPOS-00020]::[RHEL]Baseline"; + ContainsLine = "-a always,exit -F path=/usr/bin/passwd -F perm=x -F auid>=1000 -F auid!=unset -k privileged-passwd"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/bin/passwd\\s*-F\\s*perm\\s*=\\s*x\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-passwd"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource63ref +{ +ResourceID = "[nxFileLine][V-204543][medium][SRG-OS-000042-GPOS-00020]::[RHEL]Baseline"; + ContainsLine = "-a always,exit -F path=/usr/sbin/unix_chkpwd -F perm=x -F auid>=1000 -F auid!=unset -k privileged-passwd"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/sbin/unix_chkpwd\\s*-F\\s*perm\\s*=\\s*x\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-passwd"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource64ref +{ +ResourceID = "[nxFileLine][V-204544][medium][SRG-OS-000042-GPOS-00020]::[RHEL]Baseline"; + ContainsLine = "-a always,exit -F path=/usr/bin/gpasswd -F perm=x -F auid>=1000 -F auid!=unset -k privileged-passwd"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/bin/gpasswd\\s*-F\\s*perm\\s*=\\s*x\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-passwd"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource65ref +{ +ResourceID = "[nxFileLine][V-204545][medium][SRG-OS-000042-GPOS-00020]::[RHEL]Baseline"; + ContainsLine = "-a always,exit -F path=/usr/bin/chage -F perm=x -F auid>=1000 -F auid!=unset -k privileged-passwd"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/bin/chage\\s*-F\\s*perm\\s*=\\s*x\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-passwd"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource66ref +{ +ResourceID = "[nxFileLine][V-204546][medium][SRG-OS-000042-GPOS-00020]::[RHEL]Baseline"; + ContainsLine = "-a always,exit -F path=/usr/sbin/userhelper -F perm=x -F auid>=1000 -F auid!=unset -k privileged-passwd"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/sbin/userhelper\\s*-F\\s*perm\\s*=\\s*x\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-passwd"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource67ref +{ +ResourceID = "[nxFileLine][V-204547][medium][SRG-OS-000037-GPOS-00015]::[RHEL]Baseline"; + ContainsLine = "-a always,exit -F path=/usr/bin/su -F perm=x -F auid>=1000 -F auid!=unset -k privileged-priv_change"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/bin/su\\s*-F\\s*perm\\s*=\\s*x\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-priv_change"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource68ref +{ +ResourceID = "[nxFileLine][V-204548][medium][SRG-OS-000037-GPOS-00015]::[RHEL]Baseline"; + ContainsLine = "-a always,exit -F path=/usr/bin/sudo -F perm=x -F auid>=1000 -F auid!=unset -k privileged-priv_change"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/bin/sudo\\s*-F\\s*perm\\s*=\\s*x\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-priv_change"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource69ref +{ +ResourceID = "[nxFileLine][V-204549.a][medium][SRG-OS-000037-GPOS-00015]::[RHEL]Baseline"; + ContainsLine = "-w /etc/sudoers -p wa -k privileged-actions"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-w /etc/sudoers -p wa -k privileged-actions"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource70ref +{ +ResourceID = "[nxFileLine][V-204549.b][medium][SRG-OS-000037-GPOS-00015]::[RHEL]Baseline"; + ContainsLine = "-w /etc/sudoers.d/ -p wa -k privileged-actions"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-w /etc/sudoers.d/ -p wa -k privileged-actions"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource71ref +{ +ResourceID = "[nxFileLine][V-204550][medium][SRG-OS-000037-GPOS-00015]::[RHEL]Baseline"; + ContainsLine = "-a always,exit -F path=/usr/bin/newgrp -F perm=x -F auid>=1000 -F auid!=unset -k privileged-priv_change"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/bin/newgrp\\s*-F\\s*perm\\s*=\\s*x\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-priv_change"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource72ref +{ +ResourceID = "[nxFileLine][V-204551][medium][SRG-OS-000037-GPOS-00015]::[RHEL]Baseline"; + ContainsLine = "-a always,exit -F path=/usr/bin/chsh -F perm=x -F auid>=1000 -F auid!=unset -k privileged-priv_change"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/bin/chsh\\s*-F\\s*perm\\s*=\\s*x\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-priv_change"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource73ref +{ +ResourceID = "[nxFileLine][V-204552.a][medium][SRG-OS-000042-GPOS-00020]::[RHEL]Baseline"; + ContainsLine = "-a always,exit -F arch=b32 -S mount -F auid>=1000 -F auid!=unset -k privileged-mount"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*mount\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-mount"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource74ref +{ +ResourceID = "[nxFileLine][V-204552.b][medium][SRG-OS-000042-GPOS-00020]::[RHEL]Baseline"; + ContainsLine = "-a always,exit -F arch=b64 -S mount -F auid>=1000 -F auid!=unset -k privileged-mount"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*mount\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-mount"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource75ref +{ +ResourceID = "[nxFileLine][V-204552.c][medium][SRG-OS-000042-GPOS-00020]::[RHEL]Baseline"; + ContainsLine = "-a always,exit -F path=/usr/bin/mount -F perm=x -F auid>=1000 -F auid!=unset -k privileged-mount"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/bin/mount\\s*-F\\s*perm\\s*=\\s*x\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-mount"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource76ref +{ +ResourceID = "[nxFileLine][V-204553][medium][SRG-OS-000042-GPOS-00020]::[RHEL]Baseline"; + ContainsLine = "-a always,exit -F path=/usr/bin/umount -F perm=x -F auid>=1000 -F auid!=unset -k privileged-mount"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/bin/umount\\s*-F\\s*perm\\s*=\\s*x\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-mount"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource77ref +{ +ResourceID = "[nxFileLine][V-204554][medium][SRG-OS-000042-GPOS-00020]::[RHEL]Baseline"; + ContainsLine = "-a always,exit -F path=/usr/sbin/postdrop -F perm=x -F auid>=1000 -F auid!=unset -k privileged-postfix"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/sbin/postdrop\\s*-F\\s*perm\\s*=\\s*x\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-postfix"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource78ref +{ +ResourceID = "[nxFileLine][V-204555][medium][SRG-OS-000042-GPOS-00020]::[RHEL]Baseline"; + ContainsLine = "-a always,exit -F path=/usr/sbin/postqueue -F perm=x -F auid>=1000 -F auid!=unset -k privileged-postfix"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/sbin/postqueue\\s*-F\\s*perm\\s*=\\s*x\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-postfix"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource79ref +{ +ResourceID = "[nxFileLine][V-204556][medium][SRG-OS-000042-GPOS-00020]::[RHEL]Baseline"; + ContainsLine = "-a always,exit -F path=/usr/libexec/openssh/ssh-keysign -F perm=x -F auid>=1000 -F auid!=unset -k privileged-ssh"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/libexec/openssh/ssh-keysign\\s*-F\\s*perm\\s*=\\s*x\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-ssh"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource80ref +{ +ResourceID = "[nxFileLine][V-204557][medium][SRG-OS-000042-GPOS-00020]::[RHEL]Baseline"; + ContainsLine = "-a always,exit -F path=/usr/bin/crontab -F perm=x -F auid>=1000 -F auid!=unset -k privileged-cron"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/bin/crontab\\s*-F\\s*perm\\s*=\\s*x\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-cron"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource81ref +{ +ResourceID = "[nxFileLine][V-204558][medium][SRG-OS-000471-GPOS-00215]::[RHEL]Baseline"; + ContainsLine = "-a always,exit -F path=/usr/sbin/pam_timestamp_check -F perm=x -F auid>=1000 -F auid!=unset -k privileged-pam"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/sbin/pam_timestamp_check\\s*-F\\s*perm\\s*=\\s*x\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-pam"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource82ref +{ +ResourceID = "[nxFileLine][V-204559.a][medium][SRG-OS-000471-GPOS-00216]::[RHEL]Baseline"; + ContainsLine = "-a always,exit -F arch=b32 -S create_module -F auid>=1000 -F auid!=unset -k module-change"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*create_module\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*module-change"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource83ref +{ +ResourceID = "[nxFileLine][V-204559.b][medium][SRG-OS-000471-GPOS-00216]::[RHEL]Baseline"; + ContainsLine = "-a always,exit -F arch=b64 -S create_module -F auid>=1000 -F auid!=unset -k module-change"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*create_module\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*module-change"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource84ref +{ +ResourceID = "[nxFileLine][V-204560.a][medium][SRG-OS-000471-GPOS-00216]::[RHEL]Baseline"; + ContainsLine = "-a always,exit -F arch=b32 -S init_module,finit_module -F auid>=1000 -F auid!=unset -k modulechange"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*init_module,finit_module\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*modulechange"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource85ref +{ +ResourceID = "[nxFileLine][V-204560.b][medium][SRG-OS-000471-GPOS-00216]::[RHEL]Baseline"; + ContainsLine = "-a always,exit -F arch=b64 -S init_module,finit_module -F auid>=1000 -F auid!=unset -k modulechange"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*init_module,finit_module\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*modulechange"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource86ref +{ +ResourceID = "[nxFileLine][V-204562.a][medium][SRG-OS-000471-GPOS-00216]::[RHEL]Baseline"; + ContainsLine = "-a always,exit -F arch=b32 -S delete_module -F auid>=1000 -F auid!=unset -k module-change"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*delete_module\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*module-change"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource87ref +{ +ResourceID = "[nxFileLine][V-204562.b][medium][SRG-OS-000471-GPOS-00216]::[RHEL]Baseline"; + ContainsLine = "-a always,exit -F arch=b64 -S delete_module -F auid>=1000 -F auid!=unset -k module-change"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*delete_module\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*module-change"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource88ref +{ +ResourceID = "[nxFileLine][V-204563][medium][SRG-OS-000471-GPOS-00216]::[RHEL]Baseline"; + ContainsLine = "-a always,exit -F path=/usr/bin/kmod -F perm=x -F auid>=1000 -F auid!=unset -k modules"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/bin/kmod\\s*-F\\s*perm\\s*=\\s*x\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*modules"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource89ref +{ +ResourceID = "[nxFileLine][V-204564][medium][SRG-OS-000004-GPOS-00004]::[RHEL]Baseline"; + ContainsLine = "-w /etc/passwd -p wa -k identity"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-w\\s*/etc/passwd\\s*-p\\s*wa\\s*-k\\s*identity"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource90ref +{ +ResourceID = "[nxFileLine][V-204565][medium][SRG-OS-000004-GPOS-00004]::[RHEL]Baseline"; + ContainsLine = "-w /etc/group -p wa -k identity"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-w\\s*/etc/group\\s*-p\\s*wa\\s*-k\\s*identity"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource91ref +{ +ResourceID = "[nxFileLine][V-204566][medium][SRG-OS-000004-GPOS-00004]::[RHEL]Baseline"; + ContainsLine = "-w /etc/gshadow -p wa -k identity"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-w\\s*/etc/gshadow\\s*-p\\s*wa\\s*-k\\s*identity"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource92ref +{ +ResourceID = "[nxFileLine][V-204567][medium][SRG-OS-000004-GPOS-00004]::[RHEL]Baseline"; + ContainsLine = "-w /etc/shadow -p wa -k identity"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-w\\s*/etc/shadow\\s*-p\\s*wa\\s*-k\\s*identity"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource93ref +{ +ResourceID = "[nxFileLine][V-204568][medium][SRG-OS-000004-GPOS-00004]::[RHEL]Baseline"; + ContainsLine = "-w /etc/security/opasswd -p wa -k identity"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-w\\s*/etc/security/opasswd\\s*-p\\s*wa\\s*-k\\s*identity"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource94ref +{ +ResourceID = "[nxFileLine][V-204572.a][medium][SRG-OS-000466-GPOS-00210]::[RHEL]Baseline"; + ContainsLine = "-a always,exit -F arch=b32 -S unlink,unlinkat,rename,renameat,rmdir -F auid>=1000 -F auid!=unset -k delete"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*unlink,unlinkat,rename,renameat,rmdir\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*delete"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource95ref +{ +ResourceID = "[nxFileLine][V-204572.b][medium][SRG-OS-000466-GPOS-00210]::[RHEL]Baseline"; + ContainsLine = "-a always,exit -F arch=b64 -S unlink,unlinkat,rename,renameat,rmdir -F auid>=1000 -F auid!=unset -k delete"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*unlink,unlinkat,rename,renameat,rmdir\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*delete"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource96ref +{ +ResourceID = "[nxFileLine][V-204578][medium][SRG-OS-000033-GPOS-00014]::[RHEL]Baseline"; + ContainsLine = "Ciphers aes256-ctr,aes192-ctr,aes128-ctr"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/ssh/sshd_config"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "^#\\s*Ciphers.*|^\\s*Ciphers\\s*aes128-ctr.*|^\\s*Ciphers\\s*aes192-ctr.*"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource97ref +{ +ResourceID = "[nxFileLine][V-204579.b][medium][SRG-OS-000163-GPOS-00072]::[RHEL]Baseline"; + ContainsLine = "declare -xr TMOUT=900"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/profile.d/tmout.sh"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "^\\s*TMOUT\\s*=\\s*[0-8]?[0-9]?[0-9]?$|^#\\s*TMOUT.*"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource98ref +{ +ResourceID = "[nxFileLine][V-204579.c][medium][SRG-OS-000163-GPOS-00072]::[RHEL]Baseline"; + ContainsLine = "declare -xr TMOUT=900"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/bashrc"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "^\\s*TMOUT\\s*=\\s*[0-8]?[0-9]?[0-9]?$|^#\\s*TMOUT.*"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource99ref +{ +ResourceID = "[nxFileLine][V-204579.d][medium][SRG-OS-000163-GPOS-00072]::[RHEL]Baseline"; + ContainsLine = "declare -xr TMOUT=900"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/profile"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "^\\s*TMOUT\\s*=\\s*[0-8]?[0-9]?[0-9]?$|^#\\s*TMOUT.*"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource100ref +{ +ResourceID = "[nxFileLine][V-204580][medium][SRG-OS-000023-GPOS-00006]::[RHEL]Baseline"; + ContainsLine = "banner /etc/issue"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/ssh/sshd_config"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*banner\\s*/etc/issue"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource101ref +{ +ResourceID = "[nxFileLine][V-204587][medium][SRG-OS-000163-GPOS-00072]::[RHEL]Baseline"; + ContainsLine = "ClientAliveInterval 600"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/ssh/sshd_config"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "^\\s*ClientAliveInterval\\s*[0-5]?[0-9]?[0-9]?\\s*$|^#\\s*ClientAliveInterval.*|^\\s*ClientAliveInterval\\s*$"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource102ref +{ +ResourceID = "[nxFileLine][V-204588][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; + ContainsLine = "RhostsRSAAuthentication no"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/ssh/sshd_config"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "^#\\s*RhostsRSAAuthentication.*$|^RhostsRSAAuthentication\\s*(?!no\\b)\\w*$"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource103ref +{ +ResourceID = "[nxFileLine][V-204589][medium][SRG-OS-000163-GPOS-00072]::[RHEL]Baseline"; + ContainsLine = "ClientAliveCountMax 0"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/ssh/sshd_config"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "^#\\s*ClientAliveCountMax.*$|^ClientAliveCountMax\\s*(?!0\\b)\\w*$"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource104ref +{ +ResourceID = "[nxFileLine][V-204590][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; + ContainsLine = "IgnoreRhosts yes"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/ssh/sshd_config"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "^#\\s*IgnoreRhosts.*$|^IgnoreRhosts\\s*(?!yes\\b)\\w*$"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource105ref +{ +ResourceID = "[nxFileLine][V-204591][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; + ContainsLine = "PrintLastLog yes"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/ssh/sshd_config"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "^#\\s*PrintLastLog.*$|^PrintLastLog\\s*(?!yes\\b)\\w*$"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource106ref +{ +ResourceID = "[nxFileLine][V-204592][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; + ContainsLine = "PermitRootLogin no"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/ssh/sshd_config"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "^#\\s*PermitRootLogin.*$|^PermitRootLogin\\s*(?!no\\b)\\w*$"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource107ref +{ +ResourceID = "[nxFileLine][V-204593][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; + ContainsLine = "IgnoreUserKnownHosts yes"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/ssh/sshd_config"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "^#\\s*IgnoreUserKnownHosts.*$|^IgnoreUserKnownHosts\\s*(?!yes\\b)\\w*$"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource108ref +{ +ResourceID = "[nxFileLine][V-204594][high][SRG-OS-000074-GPOS-00042]::[RHEL]Baseline"; + ContainsLine = "Protocol 2"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/ssh/sshd_config"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "^#\\s*Protocol.*$|^Protocol\\s*(?!2\\b)\\w*$"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource109ref +{ +ResourceID = "[nxFileLine][V-204595][medium][SRG-OS-000250-GPOS-00093]::[RHEL]Baseline"; + ContainsLine = "MACs hmac-sha2-512,hmac-sha2-256"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/ssh/sshd_config"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*MACs.*|\\s*MACs\\s*hmac-(?!sha2-512).*"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource110ref +{ +ResourceID = "[nxFileLine][V-204598][medium][SRG-OS-000364-GPOS-00151]::[RHEL]Baseline"; + ContainsLine = "GSSAPIAuthentication no"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/ssh/sshd_config"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "^#\\s*GSSAPIAuthentication.*$|^GSSAPIAuthentication\\s*(?!no\\b)\\w*$"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource111ref +{ +ResourceID = "[nxFileLine][V-204599][medium][SRG-OS-000364-GPOS-00151]::[RHEL]Baseline"; + ContainsLine = "KerberosAuthentication no"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/ssh/sshd_config"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "^#\\s*KerberosAuthentication.*$|^KerberosAuthentication\\s*(?!no\\b)\\w*$"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource112ref +{ +ResourceID = "[nxFileLine][V-204600][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; + ContainsLine = "StrictModes yes"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/ssh/sshd_config"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "^#\\s*StrictModes.*$|^StrictModes\\s*(?!yes\\b)\\w*$"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource113ref +{ +ResourceID = "[nxFileLine][V-204601][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; + ContainsLine = "UsePrivilegeSeparation sandbox"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/ssh/sshd_config"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "^#\\s*UsePrivilegeSeparation.*$|^UsePrivilegeSeparation\\s*(?!sandbox\\b)\\w*$"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource114ref +{ +ResourceID = "[nxFileLine][V-204602][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; + ContainsLine = "Compression delayed"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/ssh/sshd_config"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "^#\\s*Compression.*$|^Compression\\s*(?!delayed\\b)\\w*$"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource115ref +{ +ResourceID = "[nxFileLine][V-204622][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; + ContainsLine = "X11Forwarding no"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/ssh/sshd_config"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "^#\\s*X11Forwarding.*$|^X11Forwarding\\s*(?!no\\b)\\w*$"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource116ref +{ +ResourceID = "[nxFileLine][V-233307][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; + ContainsLine = "X11UseLocalhost yes"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/ssh/sshd_config"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*X11UseLocalhost\\s*yes"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource117ref +{ +ResourceID = "[nxFileLine][V-255925][medium][SRG-OS-000033-GPOS-00014]::[RHEL]Baseline"; + ContainsLine = "KexAlgorithms ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/ssh/sshd_config"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*KexAlgorithms\\s*ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxServiceResource as $MSFT_nxServiceResource1ref +{ +ResourceID = "[nxService][V-204451][medium][SRG-OS-000114-GPOS-00059]::[RHEL]Baseline"; + Controller = "systemd"; + Enabled = False; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxService.ps1::13::9::nxService"; + Name = "autofs"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxServiceResource as $MSFT_nxServiceResource2ref +{ +ResourceID = "[nxService][V-204492][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; + Controller = "systemd"; + Enabled = False; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxService.ps1::13::9::nxService"; + Name = "kdump"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxServiceResource as $MSFT_nxServiceResource3ref +{ +ResourceID = "[nxService][V-204503][medium][SRG-OS-000038-GPOS-00016]::[RHEL]Baseline"; + Controller = "systemd"; + State = "Running"; + Enabled = True; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxService.ps1::22::9::nxService"; + Name = "auditd"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxServiceResource as $MSFT_nxServiceResource4ref +{ +ResourceID = "[nxService][V-204586][medium][SRG-OS-000423-GPOS-00187]::[RHEL]Baseline"; + Controller = "systemd"; + State = "Running"; + Enabled = True; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxService.ps1::22::9::nxService"; + Name = "sshd"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxServiceResource as $MSFT_nxServiceResource5ref +{ +ResourceID = "[nxService][V-204604.b][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; + Controller = "systemd"; + State = "Running"; + Enabled = True; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxService.ps1::22::9::nxService"; + Name = "firewalld"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxScriptResource as $MSFT_nxScriptResource1ref +{ +ResourceID = "[nxScript][V-204399.b][medium][[Skip] SRG-OS-000029-GPOS-00010]::[RHEL]Baseline"; + GetScript = "#!/bin/bash\necho [V-204399.b][medium][[Skip] SRG-OS-000029-GPOS-00010]"; + TestScript = "#!/bin/bash\nexit 0"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxScript.skip.ps1::10::5::nxScript"; + SetScript = "#!/bin/bash"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxScriptResource as $MSFT_nxScriptResource2ref +{ +ResourceID = "[nxScript][V-204400][medium][[Skip] SRG-OS-000029-GPOS-00010]::[RHEL]Baseline"; + GetScript = "#!/bin/bash\necho [V-204400][medium][[Skip] SRG-OS-000029-GPOS-00010]"; + TestScript = "#!/bin/bash\nexit 0"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxScript.skip.ps1::10::5::nxScript"; + SetScript = "#!/bin/bash"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxScriptResource as $MSFT_nxScriptResource3ref +{ +ResourceID = "[nxScript][V-204403][medium][[Skip] SRG-OS-000029-GPOS-00010]::[RHEL]Baseline"; + GetScript = "#!/bin/bash\necho [V-204403][medium][[Skip] SRG-OS-000029-GPOS-00010]"; + TestScript = "#!/bin/bash\nexit 0"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxScript.skip.ps1::10::5::nxScript"; + SetScript = "#!/bin/bash"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxScriptResource as $MSFT_nxScriptResource4ref +{ +ResourceID = "[nxScript][V-204509][medium][[Skip] SRG-OS-000342-GPOS-00133]::[RHEL]Baseline"; + GetScript = "#!/bin/bash\necho [V-204509][medium][[Skip] SRG-OS-000342-GPOS-00133]"; + TestScript = "#!/bin/bash\nexit 0"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxScript.skip.ps1::10::5::nxScript"; + SetScript = "#!/bin/bash"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxScriptResource as $MSFT_nxScriptResource5ref +{ +ResourceID = "[nxScript][V-204513][medium][[Skip] SRG-OS-000343-GPOS-00134]::[RHEL]Baseline"; + GetScript = "#!/bin/bash\necho [V-204513][medium][[Skip] SRG-OS-000343-GPOS-00134]"; + TestScript = "#!/bin/bash\nexit 0"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxScript.skip.ps1::10::5::nxScript"; + SetScript = "#!/bin/bash"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxScriptResource as $MSFT_nxScriptResource6ref +{ +ResourceID = "[nxScript][V-204623][medium][[Skip] SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; + GetScript = "#!/bin/bash\necho [V-204623][medium][[Skip] SRG-OS-000480-GPOS-00227]"; + TestScript = "#!/bin/bash\nexit 0"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxScript.skip.ps1::10::5::nxScript"; + SetScript = "#!/bin/bash"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxScriptResource as $MSFT_nxScriptResource7ref +{ +ResourceID = "[nxScript][V-244557][medium][[Skip] SRG-OS-000080-GPOS-00048]::[RHEL]Baseline"; + GetScript = "#!/bin/bash\necho [V-244557][medium][[Skip] SRG-OS-000080-GPOS-00048]"; + TestScript = "#!/bin/bash\nexit 0"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxScript.skip.ps1::10::5::nxScript"; + SetScript = "#!/bin/bash"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxScriptResource as $MSFT_nxScriptResource8ref +{ +ResourceID = "[nxScript][V-244558][medium][[Skip] SRG-OS-000080-GPOS-00048]::[RHEL]Baseline"; + GetScript = "#!/bin/bash\necho [V-244558][medium][[Skip] SRG-OS-000080-GPOS-00048]"; + TestScript = "#!/bin/bash\nexit 0"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxScript.skip.ps1::10::5::nxScript"; + SetScript = "#!/bin/bash"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxScriptResource as $MSFT_nxScriptResource9ref +{ +ResourceID = "[nxScript][V-204399.a][medium][[Skip] SRG-OS-000029-GPOS-00010]::[RHEL]Baseline"; + GetScript = "#!/bin/bash\necho [V-204399.a][medium][[Skip] SRG-OS-000029-GPOS-00010]"; + TestScript = "#!/bin/bash\nexit 0"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxScript.skip.ps1::10::5::nxScript"; + SetScript = "#!/bin/bash"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxScriptResource as $MSFT_nxScriptResource10ref +{ +ResourceID = "[nxScript][V-255926][medium][[Skip] SRG-OS-000029-GPOS-00010]::[RHEL]Baseline"; + GetScript = "#!/bin/bash\necho [V-255926][medium][[Skip] SRG-OS-000029-GPOS-00010]"; + TestScript = "#!/bin/bash\nexit 0"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxScript.skip.ps1::10::5::nxScript"; + SetScript = "#!/bin/bash"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of OMI_ConfigurationDocument + + { + Version="2.0.0"; + + MinimumCompatibleVersion = "1.0.0"; + + CompatibleVersionAdditionalProperties= {"Omi_BaseResource:ConfigurationName"}; + + Author="Microsoft"; + + GenerationDate="03/09/2023 14:17:33"; + + GenerationHost="Microsoft"; + + Name="LinuxBaseLine"; + + }; + diff --git a/stig/linux/config/CentOS77.mof b/stig/linux/config/CentOS77.mof index 8bd3ad9..1b83202 100644 --- a/stig/linux/config/CentOS77.mof +++ b/stig/linux/config/CentOS77.mof @@ -1,2118 +1,1829 @@ -/* -@TargetNode='CentOS77' -@GeneratedBy=Microsoft -@GenerationDate=06/30/2022 11:38:45 -@GenerationHost=Microsoft -*/ - -instance of MSFT_nxPackageResource as $MSFT_nxPackageResource1ref -{ -ResourceID = "[nxPackage][V-204442][high][SRG-OS-000095-GPOS-00049]::[RHEL]Baseline"; - Ensure = "Absent"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxPackage.ps1::8::5::nxPackage"; - Name = "rsh-server"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxPackageResource as $MSFT_nxPackageResource2ref -{ -ResourceID = "[nxPackage][V-204443][high][SRG-OS-000095-GPOS-00049]::[RHEL]Baseline"; - Ensure = "Absent"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxPackage.ps1::8::5::nxPackage"; - Name = "ypserv"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxPackageResource as $MSFT_nxPackageResource3ref -{ -ResourceID = "[nxPackage][V-204497][high][SRG-OS-000033-GPOS-00014]::[RHEL]Baseline"; - Ensure = "Present"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxPackage.ps1::8::5::nxPackage"; - Name = "dracut-fips"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxPackageResource as $MSFT_nxPackageResource4ref -{ -ResourceID = "[nxPackage][V-204498][low][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; - Ensure = "Present"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxPackage.ps1::8::5::nxPackage"; - Name = "aide"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxPackageResource as $MSFT_nxPackageResource5ref -{ -ResourceID = "[nxPackage][V-204502][high][SRG-OS-000095-GPOS-00049]::[RHEL]Baseline"; - Ensure = "Absent"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxPackage.ps1::8::5::nxPackage"; - Name = "telnet-server"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxPackageResource as $MSFT_nxPackageResource6ref -{ -ResourceID = "[nxPackage][V-204585][medium][SRG-OS-000423-GPOS-00187]::[RHEL]Baseline"; - Ensure = "Present"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxPackage.ps1::8::5::nxPackage"; - Name = "openssh-server"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxPackageResource as $MSFT_nxPackageResource7ref -{ -ResourceID = "[nxPackage][V-204604.a][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; - Ensure = "Present"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxPackage.ps1::8::5::nxPackage"; - Name = "firewalld"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxPackageResource as $MSFT_nxPackageResource8ref -{ -ResourceID = "[nxPackage][V-204620][high][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; - Ensure = "Absent"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxPackage.ps1::8::5::nxPackage"; - Name = "vsftpd"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxPackageResource as $MSFT_nxPackageResource9ref -{ -ResourceID = "[nxPackage][V-204621][high][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; - Ensure = "Absent"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxPackage.ps1::8::5::nxPackage"; - Name = "tftp-server"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxPackageResource as $MSFT_nxPackageResource10ref -{ -ResourceID = "[nxPackage][V-204631][medium][SRG-OS-000375-GPOS-00160]::[RHEL]Baseline"; - Ensure = "Present"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxPackage.ps1::8::5::nxPackage"; - Name = "pam_pkcs11"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileResource as $MSFT_nxFileResource1ref -{ -ResourceID = "[nxFile][V-204395][medium][SRG-OS-000023-GPOS-00006]::[RHEL]Baseline"; - Contents = "You are accessing a U.S. Government (USG) Information System (IS) that is provided for USG-authorized use only.\n\nBy using this IS (which includes any device attached to this IS), you consent to the following conditions:\n\n-The USG routinely intercepts and monitors communications on this IS for purposes including, but not limited to, penetration testing, COMSEC monitoring, network operations and defense, personnel misconduct (PM), law enforcement (LE), and counterintelligence (CI) investigations.\n\n-At any time, the USG may inspect and seize data stored on this IS.\n\n-Communications using, or data stored on, this IS are not private, are subject to routine monitoring, interception, and search, and may be disclosed or used for any USG-authorized purpose.\n\n-This IS includes security measures (e.g., authentication and access controls) to protect USG interests--not for your personal benefit or privacy.\n\n-Notwithstanding the above, using this IS does not constitute consent to PM, LE or CI investigative searching or monitoring of the content of privileged communications, or work product, related to personal representation or services by attorneys, psychotherapists, or clergy, and their assistants. Such communications and work product are private and confidential. See User Agreement for details."; - DestinationPath = "/etc/issue"; - ModuleName = "nx"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; - ModuleVersion = "1.0"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileResource as $MSFT_nxFileResource2ref -{ -ResourceID = "[nxFile][V-204449.a][medium][SRG-OS-000114-GPOS-00059]::[RHEL]Baseline"; - Contents = ""; - DestinationPath = "/etc/modprobe.d/usb-storage.conf"; - ModuleName = "nx"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; - ModuleVersion = "1.0"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileResource as $MSFT_nxFileResource3ref -{ -ResourceID = "[nxFile][V-204449.b][medium][SRG-OS-000114-GPOS-00059]::[RHEL]Baseline"; - Contents = ""; - DestinationPath = "/etc/modprobe.d/blacklist.conf"; - ModuleName = "nx"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; - ModuleVersion = "1.0"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileResource as $MSFT_nxFileResource4ref -{ -ResourceID = "[nxFile][V-204450.a][medium][SRG-OS-000378-GPOS-00163]::[RHEL]Baseline"; - Contents = ""; - DestinationPath = "/etc/modprobe.d/dccp.conf"; - ModuleName = "nx"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; - ModuleVersion = "1.0"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileResource as $MSFT_nxFileResource5ref -{ -ResourceID = "[nxFile][V-204576][low][SRG-OS-000027-GPOS-00008]::[RHEL]Baseline"; - Contents = "* hard maxlogins 10"; - DestinationPath = "/etc/security/limits.d/204576-powerstig.conf"; - ModuleName = "nx"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; - ModuleVersion = "1.0"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileResource as $MSFT_nxFileResource6ref -{ -ResourceID = "[nxFile][V-204579.a][medium][SRG-OS-000163-GPOS-00072]::[RHEL]Baseline"; - Contents = ""; - DestinationPath = "/etc/profile.d/tmout.sh"; - ModuleName = "nx"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; - ModuleVersion = "1.0"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileResource as $MSFT_nxFileResource7ref -{ -ResourceID = "[nxFile][V-204584][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; - Contents = "kernel.randomize_va_space = 2"; - DestinationPath = "/etc/sysctl.d/204584-powerstig.conf"; - ModuleName = "nx"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; - ModuleVersion = "1.0"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileResource as $MSFT_nxFileResource8ref -{ -ResourceID = "[nxFile][V-204609][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; - Contents = "net.ipv4.conf.all.accept_source_route = 0"; - DestinationPath = "/etc/sysctl.d/204609-powerstig.conf"; - ModuleName = "nx"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; - ModuleVersion = "1.0"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileResource as $MSFT_nxFileResource9ref -{ -ResourceID = "[nxFile][V-204610][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; - Contents = "net.ipv4.conf.all.rp_filter = 1"; - DestinationPath = "/etc/sysctl.d/204610-powerstig.conf"; - ModuleName = "nx"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; - ModuleVersion = "1.0"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileResource as $MSFT_nxFileResource10ref -{ -ResourceID = "[nxFile][V-204611][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; - Contents = "net.ipv4.conf.default.rp_filter = 1"; - DestinationPath = "/etc/sysctl.d/204611-powerstig.conf"; - ModuleName = "nx"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; - ModuleVersion = "1.0"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileResource as $MSFT_nxFileResource11ref -{ -ResourceID = "[nxFile][V-204612][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; - Contents = "net.ipv4.conf.default.accept_source_route = 0"; - DestinationPath = "/etc/sysctl.d/204612-powerstig.conf"; - ModuleName = "nx"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; - ModuleVersion = "1.0"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileResource as $MSFT_nxFileResource12ref -{ -ResourceID = "[nxFile][V-204613][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; - Contents = "net.ipv4.icmp_echo_ignore_broadcasts = 1"; - DestinationPath = "/etc/sysctl.d/204613-powerstig.conf"; - ModuleName = "nx"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; - ModuleVersion = "1.0"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileResource as $MSFT_nxFileResource13ref -{ -ResourceID = "[nxFile][V-204614][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; - Contents = "net.ipv4.conf.default.accept_redirects = 0"; - DestinationPath = "/etc/sysctl.d/204614-powerstig.conf"; - ModuleName = "nx"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; - ModuleVersion = "1.0"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileResource as $MSFT_nxFileResource14ref -{ -ResourceID = "[nxFile][V-204615][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; - Contents = "net.ipv4.conf.all.accept_redirects = 0"; - DestinationPath = "/etc/sysctl.d/204615-powerstig.conf"; - ModuleName = "nx"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; - ModuleVersion = "1.0"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileResource as $MSFT_nxFileResource15ref -{ -ResourceID = "[nxFile][V-204616][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; - Contents = "net.ipv4.conf.default.send_redirects = 0"; - DestinationPath = "/etc/sysctl.d/204616-powerstig.conf"; - ModuleName = "nx"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; - ModuleVersion = "1.0"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileResource as $MSFT_nxFileResource16ref -{ -ResourceID = "[nxFile][V-204617][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; - Contents = "net.ipv4.conf.all.send_redirects = 0"; - DestinationPath = "/etc/sysctl.d/204617-powerstig.conf"; - ModuleName = "nx"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; - ModuleVersion = "1.0"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileResource as $MSFT_nxFileResource17ref -{ -ResourceID = "[nxFile][V-204625][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; - Contents = "net.ipv4.ip_forward = 0"; - DestinationPath = "/etc/sysctl.d/204625-powerstig.conf"; - ModuleName = "nx"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; - ModuleVersion = "1.0"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileResource as $MSFT_nxFileResource18ref -{ -ResourceID = "[nxFile][V-204630][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; - Contents = "net.ipv6.conf.all.accept_source_route = 0"; - DestinationPath = "/etc/sysctl.d/204630-powerstig.conf"; - ModuleName = "nx"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; - ModuleVersion = "1.0"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileResource as $MSFT_nxFileResource19ref -{ -ResourceID = "[nxFile][V-237634.a][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; - Contents = "Defaults !targetpw"; - DestinationPath = "/etc/sudoers.d/237634a-powerstig.conf"; - ModuleName = "nx"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; - ModuleVersion = "1.0"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileResource as $MSFT_nxFileResource20ref -{ -ResourceID = "[nxFile][V-237634.b][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; - Contents = "Defaults !rootpw"; - DestinationPath = "/etc/sudoers.d/237634b-powerstig.conf"; - ModuleName = "nx"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; - ModuleVersion = "1.0"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileResource as $MSFT_nxFileResource21ref -{ -ResourceID = "[nxFile][V-237634.c][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; - Contents = "Defaults !runaspw"; - DestinationPath = "/etc/sudoers.d/237634c-powerstig.conf"; - ModuleName = "nx"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; - ModuleVersion = "1.0"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileResource as $MSFT_nxFileResource22ref -{ -ResourceID = "[nxFile][V-237635][medium][SRG-OS-000373-GPOS-00156]::[RHEL]Baseline"; - Contents = "Defaults timestamp_timeout=0"; - DestinationPath = "/etc/sudoers.d/237635-powerstig.conf"; - ModuleName = "nx"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; - ModuleVersion = "1.0"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileResource as $MSFT_nxFileResource23ref -{ -ResourceID = "[nxFile][V-250314][medium][SRG-OS-000324-GPOS-00125]::[RHEL]Baseline"; - Contents = "%wheel ALL=(ALL) TYPE=sysadm_t ROLE=sysadm_r ALL"; - DestinationPath = "/etc/sudoers.d/250314-powerstig.conf"; - ModuleName = "nx"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; - ModuleVersion = "1.0"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource1ref -{ -ResourceID = "[nxFileLine][V-204405][medium][SRG-OS-000069-GPOS-00037]::[RHEL]Baseline"; - ContainsLine = "password substack system-auth"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/pam.d/passwd"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "^\\s*password(?:\\t*|\\s*)substack\\tsystem-auth\\s*$|^#\\s*password\\s*substack\\s*system-auth.*"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource2ref -{ -ResourceID = "[nxFileLine][V-204407][medium][SRG-OS-000069-GPOS-00037]::[RHEL]Baseline"; - ContainsLine = "ucredit = -1"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/security/pwquality.conf"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "^#\\s*ucredit.*$|^ucredit\\s*=\\s*(?!-1\\b)\\w*$"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource3ref -{ -ResourceID = "[nxFileLine][V-204408][medium][SRG-OS-000070-GPOS-00038]::[RHEL]Baseline"; - ContainsLine = "lcredit = -1"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/security/pwquality.conf"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "^#\\s*lcredit.*$|^lcredit\\s*=\\s*(?!-1\\b)\\w*$"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource4ref -{ -ResourceID = "[nxFileLine][V-204409][medium][SRG-OS-000071-GPOS-00039]::[RHEL]Baseline"; - ContainsLine = "dcredit = -1"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/security/pwquality.conf"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "^#\\s*dcredit.*$|^dcredit\\s*=\\s*(?!-1\\b)\\w*$"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource5ref -{ -ResourceID = "[nxFileLine][V-204410][medium][SRG-OS-000266-GPOS-00101]::[RHEL]Baseline"; - ContainsLine = "ocredit=-1"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/security/pwquality.conf"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "^#\\s*ocredit.*$|^ocredit\\s*=\\s*(?!-1)\\w*$"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource6ref -{ -ResourceID = "[nxFileLine][V-204411][medium][SRG-OS-000072-GPOS-00040]::[RHEL]Baseline"; - ContainsLine = "difok = 8"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/security/pwquality.conf"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*difok\\s*=.*|^\\s*difok\\s*=\\s*(-|)[0-7]$"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource7ref -{ -ResourceID = "[nxFileLine][V-204412][medium][SRG-OS-000072-GPOS-00040]::[RHEL]Baseline"; - ContainsLine = "minclass = 4"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/security/pwquality.conf"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "^#\\s*minclass\\s*=.*|^\\s*minclass\\s*=\\s*(?!\\d{2,})[1-3]"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource8ref -{ -ResourceID = "[nxFileLine][V-204413][medium][SRG-OS-000072-GPOS-00040]::[RHEL]Baseline"; - ContainsLine = "maxrepeat = 3"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/security/pwquality.conf"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "^#\\s*maxrepeat\\s*=.*|^\\s*maxrepeat\\s*=\\s*(?:\\d{2,}|[4-9])"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource9ref -{ -ResourceID = "[nxFileLine][V-204414][medium][SRG-OS-000072-GPOS-00040]::[RHEL]Baseline"; - ContainsLine = "maxclassrepeat = 4"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/security/pwquality.conf"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "^#\\s*maxclassrepeat\\s*=.*|^\\s*maxclassrepeat\\s*=\\s*(?:\\d{2,}|[1-3|5-9])"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource10ref -{ -ResourceID = "[nxFileLine][V-204416][medium][SRG-OS-000073-GPOS-00041]::[RHEL]Baseline"; - ContainsLine = "ENCRYPT_METHOD SHA512"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/login.defs"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*ENCRYPT_METHOD\\s*SHA512"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource11ref -{ -ResourceID = "[nxFileLine][V-204418][medium][SRG-OS-000075-GPOS-00043]::[RHEL]Baseline"; - ContainsLine = "PASS_MIN_DAYS 1"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/login.defs"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "^\\s*PASS_MIN_DAYS\\s*[0]*$|#\\s*PASS_MIN_DAYS.*"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource12ref -{ -ResourceID = "[nxFileLine][V-204420][medium][SRG-OS-000076-GPOS-00044]::[RHEL]Baseline"; - ContainsLine = "PASS_MAX_DAYS 60"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/login.defs"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "^\\s*PASS_MAX_DAYS\\s*([6][1-9]|[7-9][0-9]|\\d{3,})$|#\\s*PASS_MAX_DAYS.*"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource13ref -{ -ResourceID = "[nxFileLine][V-204423][medium][SRG-OS-000078-GPOS-00046]::[RHEL]Baseline"; - ContainsLine = "minlen = 15"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/security/pwquality.conf"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "^\\s*minlen\\s*=\\s*([0-9]|[1][1-4])$|#\\s*minlen.*"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource14ref -{ -ResourceID = "[nxFileLine][V-204425][high][SRG-OS-000106-GPOS-00053]::[RHEL]Baseline"; - ContainsLine = "PermitEmptyPasswords no"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/ssh/sshd_config"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "^#\\s*PermitEmptyPasswords.*$|^PermitEmptyPasswords\\s*(?!no\\b)\\w*$"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource15ref -{ -ResourceID = "[nxFileLine][V-204426][medium][SRG-OS-000118-GPOS-00060]::[RHEL]Baseline"; - ContainsLine = "INACTIVE=35"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/default/useradd"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "^#\\s*INACTIVE\\s*=.*|^\\s*INACTIVE\\s*=\\s*(3[5-9]|[4-9]\\d+|\\d{3,})"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource16ref -{ -ResourceID = "[nxFileLine][V-204431][medium][SRG-OS-000480-GPOS-00226]::[RHEL]Baseline"; - ContainsLine = "FAIL_DELAY 4"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/login.defs"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "^#\\s*FAIL_DELAY.*|^FAIL_DELAY\\s*(?!\\d{2,})[1-3]"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource17ref -{ -ResourceID = "[nxFileLine][V-204434][medium][SRG-OS-000480-GPOS-00229]::[RHEL]Baseline"; - ContainsLine = "PermitUserEnvironment no"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/ssh/sshd_config"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "^#\\s*PermitUserEnvironment.*$|^PermitUserEnvironment\\s*(?!no\\b)\\w*$"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource18ref -{ -ResourceID = "[nxFileLine][V-204435][medium][SRG-OS-000480-GPOS-00229]::[RHEL]Baseline"; - ContainsLine = "HostbasedAuthentication no"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/ssh/sshd_config"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "^#\\s*HostbasedAuthentication.*$|^HostbasedAuthentication\\s*(?!no\\b)\\w*$"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource19ref -{ -ResourceID = "[nxFileLine][V-204447][high][SRG-OS-000366-GPOS-00153]::[RHEL]Baseline"; - ContainsLine = "gpgcheck=1"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/yum.conf"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*gpgcheck\\s*=\\s*1"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource20ref -{ -ResourceID = "[nxFileLine][V-204448][high][SRG-OS-000366-GPOS-00153]::[RHEL]Baseline"; - ContainsLine = "localpkg_gpgcheck=1"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/yum.conf"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*localpkg_gpgcheck\\s*=\\s*1"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource21ref -{ -ResourceID = "[nxFileLine][V-204449.c][medium][SRG-OS-000114-GPOS-00059]::[RHEL]Baseline"; - ContainsLine = "install usb-storage /bin/true"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/modprobe.d/usb-storage.conf"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*install\\s*usb-storage\\s*/bin/true"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource22ref -{ -ResourceID = "[nxFileLine][V-204449.d][medium][SRG-OS-000114-GPOS-00059]::[RHEL]Baseline"; - ContainsLine = "blacklist usb-storage"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/modprobe.d/blacklist.conf"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*blacklist\\s*usb-storage"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource23ref -{ -ResourceID = "[nxFileLine][V-204450.b][medium][SRG-OS-000378-GPOS-00163]::[RHEL]Baseline"; - ContainsLine = "install dccp /bin/true"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/modprobe.d/dccp.conf"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*install\\s*dccp\\s*/bin/true"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource24ref -{ -ResourceID = "[nxFileLine][V-204450.c][medium][SRG-OS-000378-GPOS-00163]::[RHEL]Baseline"; - ContainsLine = "blacklist dccp"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/modprobe.d/blacklist.conf"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*blacklist\\s*dccp"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource25ref -{ -ResourceID = "[nxFileLine][V-204452][low][SRG-OS-000437-GPOS-00194]::[RHEL]Baseline"; - ContainsLine = "clean_requirements_on_remove=1"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/yum.conf"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*clean_requirements_on_remove\\s*=\\s*1"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource26ref -{ -ResourceID = "[nxFileLine][V-204453][medium][SRG-OS-000445-GPOS-00199]::[RHEL]Baseline"; - ContainsLine = "SELINUX=enforcing"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/selinux/config"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "^#\\s*SELINUX.*$|^SELINUX\\s*=\\s*(?!enforcing)\\w*$"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource27ref -{ -ResourceID = "[nxFileLine][V-204454][medium][SRG-OS-000445-GPOS-00199]::[RHEL]Baseline"; - ContainsLine = "SELINUXTYPE=targeted"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/selinux/config"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "^#\\s*SELINUXTYPE.*$|^SELINUXTYPE\\s*=\\s*(?!targeted\\b)\\w*$"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource28ref -{ -ResourceID = "[nxFileLine][V-204457][medium][SRG-OS-000480-GPOS-00228]::[RHEL]Baseline"; - ContainsLine = "UMASK 077"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/login.defs"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "^\\s*UMASK(?!\\s077\\b)\\s*\\d*\\s*$|^#\\s*UMASK.*"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource29ref -{ -ResourceID = "[nxFileLine][V-204466][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; - ContainsLine = "CREATE_HOME yes"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/login.defs"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "^#\\s*CREATE_HOME.*$|^CREATE_HOME\\s*(?!yes\\b)\\w*$|^CREATE_HOME\\t.*"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource30ref -{ -ResourceID = "[nxFileLine][V-204504][medium][SRG-OS-000046-GPOS-00022]::[RHEL]Baseline"; - ContainsLine = "-f 2"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "^#\\s*-f\\s+2|^\\s*-f\\s*1"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileResource as $MSFT_nxFileResource24ref -{ -SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::29::9::nxFile"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - ResourceID = "[nxFile][V-204506.a][medium][SRG-OS-000342-GPOS-00133]::[RHEL]Baseline"; - DestinationPath = "/etc/audisp/plugins.d/au-remote.conf"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource31ref -{ -ResourceID = "[nxFileLine][V-204506.a][medium][SRG-OS-000342-GPOS-00133]::[RHEL]Baseline"; - ContainsLine = "active = yes"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audisp/plugins.d/au-remote.conf"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "\\s*active\\s*=\\s*no|active=yes|#\\s*active\\s*=.*"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource32ref -{ -ResourceID = "[nxFileLine][V-204506.b][medium][SRG-OS-000342-GPOS-00133]::[RHEL]Baseline"; - ContainsLine = "direction = out"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audisp/plugins.d/au-remote.conf"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*direction\\s*=\\s*out"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource33ref -{ -ResourceID = "[nxFileLine][V-204506.c][medium][SRG-OS-000342-GPOS-00133]::[RHEL]Baseline"; - ContainsLine = "path = /sbin/audisp-remote"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audisp/plugins.d/au-remote.conf"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*path\\s*=\\s*/sbin/audisp-remote"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource34ref -{ -ResourceID = "[nxFileLine][V-204506.d][medium][SRG-OS-000342-GPOS-00133]::[RHEL]Baseline"; - ContainsLine = "type = always"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audisp/plugins.d/au-remote.conf"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*type\\s*=\\s*always"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource35ref -{ -ResourceID = "[nxFileLine][V-204507][medium][SRG-OS-000342-GPOS-00133]::[RHEL]Baseline"; - ContainsLine = "overflow_action = syslog"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audisp/audispd.conf"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "^#\\s*overflow_action.*$|^overflow_action\\s*=\\s*(?!syslog$)\\w*$"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource36ref -{ -ResourceID = "[nxFileLine][V-204508][medium][SRG-OS-000342-GPOS-00133]::[RHEL]Baseline"; - ContainsLine = "name_format = hostname"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audisp/audispd.conf"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "^#\\s*name_format.*$|^name_format\\s*=\\s*(?!hostname$)\\w*$"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileResource as $MSFT_nxFileResource25ref -{ -SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::19::9::nxFile"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - ResourceID = "[nxFile][V-204510][medium][SRG-OS-000342-GPOS-00133]::[RHEL]Baseline"; - DestinationPath = "/etc/audisp/audisp-remote.conf"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource37ref -{ -ResourceID = "[nxFileLine][V-204510][medium][SRG-OS-000342-GPOS-00133]::[RHEL]Baseline"; - ContainsLine = "enable_krb5 = yes"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audisp/audisp-remote.conf"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*enable_krb5\\s*=\\s*yes"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource38ref -{ -ResourceID = "[nxFileLine][V-204511][medium][SRG-OS-000342-GPOS-00133]::[RHEL]Baseline"; - ContainsLine = "disk_full_action = single"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audisp/audisp-remote.conf"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "^#\\s*disk_full_action\\s*=.*|^disk_full_action\\s*=\\s*(?!halt\\b|single\\b|syslog\\b)\\w+"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource39ref -{ -ResourceID = "[nxFileLine][V-204512][medium][SRG-OS-000342-GPOS-00133]::[RHEL]Baseline"; - ContainsLine = "network_failure_action = syslog"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audisp/audisp-remote.conf"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "^#\\s*network_failure_action\\s*=.*|^network_failure_action\\s*=\\s*(?!halt\\b|single\\b|syslog\\b)\\w+"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource40ref -{ -ResourceID = "[nxFileLine][V-204514][medium][SRG-OS-000343-GPOS-00134]::[RHEL]Baseline"; - ContainsLine = "space_left_action = email"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/auditd.conf"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "^#\\s*space_left_action.*$|^space_left_action\\s*=\\s*(?!email$)\\w*$"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource41ref -{ -ResourceID = "[nxFileLine][V-204515][medium][SRG-OS-000343-GPOS-00134]::[RHEL]Baseline"; - ContainsLine = "action_mail_acct = root"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/auditd.conf"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "^#\\s*action_mail_acct.*|^action_mail_acct\\s*=\\s*(?!root\\b)\\w+"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource42ref -{ -ResourceID = "[nxFileLine][V-204516.a][medium][SRG-OS-000327-GPOS-00127]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S execve -C uid!=euid -F euid=0 -k setuid"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*execve\\s*-C\\s*uid!\\s*=\\s*euid\\s*-F\\s*euid\\s*=\\s*0\\s*-k\\s*setuid"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource43ref -{ -ResourceID = "[nxFileLine][V-204516.b][medium][SRG-OS-000327-GPOS-00127]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S execve -C uid!=euid -F euid=0 -k setuid"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*execve\\s*-C\\s*uid!\\s*=\\s*euid\\s*-F\\s*euid\\s*=\\s*0\\s*-k\\s*setuid"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource44ref -{ -ResourceID = "[nxFileLine][V-204516.c][medium][SRG-OS-000327-GPOS-00127]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S execve -C gid!=egid -F egid=0 -k setgid"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*execve\\s*-C\\s*gid!\\s*=\\s*egid\\s*-F\\s*egid\\s*=\\s*0\\s*-k\\s*setgid"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource45ref -{ -ResourceID = "[nxFileLine][V-204516.d][medium][SRG-OS-000327-GPOS-00127]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S execve -C gid!=egid -F egid=0 -k setgid"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*execve\\s*-C\\s*gid!\\s*=\\s*egid\\s*-F\\s*egid\\s*=\\s*0\\s*-k\\s*setgid"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource46ref -{ -ResourceID = "[nxFileLine][V-204517.a][medium][SRG-OS-000064-GPOS-00033]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S chown,fchown,fchownat,lchown -F auid>=1000 -F auid!=unset -k perm_mod"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*chown,fchown,fchownat,lchown\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*perm_mod"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource47ref -{ -ResourceID = "[nxFileLine][V-204517.b][medium][SRG-OS-000064-GPOS-00033]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S chown,fchown,fchownat,lchown -F auid>=1000 -F auid!=unset -k perm_mod"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*chown,fchown,fchownat,lchown\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*perm_mod"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource48ref -{ -ResourceID = "[nxFileLine][V-204521.a][medium][SRG-OS-000458-GPOS-00203]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S chmod,fchmod,fchmodat -F auid>=1000 -F auid!=unset -k perm_mod"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*chmod,fchmod,fchmodat\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*perm_mod"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource49ref -{ -ResourceID = "[nxFileLine][V-204521.b][medium][SRG-OS-000458-GPOS-00203]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S chmod,fchmod,fchmodat -F auid>=1000 -F auid!=unset -k perm_mod"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*chmod,fchmod,fchmodat\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*perm_mod"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource50ref -{ -ResourceID = "[nxFileLine][V-204524.a][medium][SRG-OS-000458-GPOS-00203]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S setxattr,fsetxattr,lsetxattr,removexattr,fremovexattr,lremovexattr -F auid>=1000 -F auid!=unset -k perm_mod"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*setxattr,fsetxattr,lsetxattr,removexattr,fremovexattr,lremovexattr\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*perm_mod"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource51ref -{ -ResourceID = "[nxFileLine][V-204524.b][medium][SRG-OS-000458-GPOS-00203]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S setxattr,fsetxattr,lsetxattr,removexattr,fremovexattr,lremovexattr -F auid>=1000 -F auid!=unset -k perm_mod"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*setxattr,fsetxattr,lsetxattr,removexattr,fremovexattr,lremovexattr\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*perm_mod"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource52ref -{ -ResourceID = "[nxFileLine][V-204531.a][medium][SRG-OS-000064-GPOS-00033]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S creat,open,openat,open_by_handle_at,truncate,ftruncate -F exit=-EPERM -F auid>=1000 -F auid!=unset -k access"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*creat,open,openat,open_by_handle_at,truncate,ftruncate\\s*-F\\s*exit\\s*=\\s*-EPERM\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*access"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource53ref -{ -ResourceID = "[nxFileLine][V-204531.b][medium][SRG-OS-000064-GPOS-00033]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S creat,open,openat,open_by_handle_at,truncate,ftruncate -F exit=-EACCES -F auid>=1000 -F auid!=unset -k access"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*creat,open,openat,open_by_handle_at,truncate,ftruncate\\s*-F\\s*exit\\s*=\\s*-EACCES\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*access"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource54ref -{ -ResourceID = "[nxFileLine][V-204531.c][medium][SRG-OS-000064-GPOS-00033]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S creat,open,openat,open_by_handle_at,truncate,ftruncate -F exit=-EPERM -F auid>=1000 -F auid!=unset -k access"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*creat,open,openat,open_by_handle_at,truncate,ftruncate\\s*-F\\s*exit\\s*=\\s*-EPERM\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*access"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource55ref -{ -ResourceID = "[nxFileLine][V-204531.d][medium][SRG-OS-000064-GPOS-00033]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S creat,open,openat,open_by_handle_at,truncate,ftruncate -F exit=-EACCES -F auid>=1000 -F auid!=unset -k access"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*creat,open,openat,open_by_handle_at,truncate,ftruncate\\s*-F\\s*exit\\s*=\\s*-EACCES\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*access"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource56ref -{ -ResourceID = "[nxFileLine][V-204536][medium][SRG-OS-000392-GPOS-00172]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F path=/usr/sbin/semanage -F auid>=1000 -F auid!=unset -k privileged-priv_change"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/sbin/semanage\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-priv_change"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource57ref -{ -ResourceID = "[nxFileLine][V-204537][medium][SRG-OS-000392-GPOS-00172]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F path=/usr/sbin/setsebool -F auid>=1000 -F auid!=unset -k privileged-priv_change"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/sbin/setsebool\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-priv_change"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource58ref -{ -ResourceID = "[nxFileLine][V-204538][medium][SRG-OS-000392-GPOS-00172]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F path=/usr/bin/chcon -F auid>=1000 -F auid!=unset -k privileged-priv_change"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/bin/chcon\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-priv_change"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource59ref -{ -ResourceID = "[nxFileLine][V-204539][medium][SRG-OS-000392-GPOS-00172]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F path=/usr/sbin/setfiles -F auid>=1000 -F auid!=unset -k privileged-priv_change"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/sbin/setfiles\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-priv_change"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource60ref -{ -ResourceID = "[nxFileLine][V-204540][medium][SRG-OS-000392-GPOS-00172]::[RHEL]Baseline"; - ContainsLine = "-w /var/run/faillock -p wa -k logins"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-w\\s*/var/run/faillock\\s*-p\\s*wa\\s*-k\\s*logins"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource61ref -{ -ResourceID = "[nxFileLine][V-204541][medium][SRG-OS-000392-GPOS-00172]::[RHEL]Baseline"; - ContainsLine = "-w /var/log/lastlog -p wa -k logins"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-w\\s*/var/log/lastlog\\s*-p\\s*wa\\s*-k\\s*logins"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource62ref -{ -ResourceID = "[nxFileLine][V-204542][medium][SRG-OS-000042-GPOS-00020]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F path=/usr/bin/passwd -F auid>=1000 -F auid!=unset -k privileged-passwd"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/bin/passwd\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-passwd"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource63ref -{ -ResourceID = "[nxFileLine][V-204543][medium][SRG-OS-000042-GPOS-00020]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F path=/usr/sbin/unix_chkpwd -F auid>=1000 -F auid!=unset -k privileged-passwd"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/sbin/unix_chkpwd\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-passwd"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource64ref -{ -ResourceID = "[nxFileLine][V-204544][medium][SRG-OS-000042-GPOS-00020]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F path=/usr/bin/gpasswd -F auid>=1000 -F auid!=unset -k privileged-passwd"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/bin/gpasswd\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-passwd"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource65ref -{ -ResourceID = "[nxFileLine][V-204545][medium][SRG-OS-000042-GPOS-00020]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F path=/usr/bin/chage -F auid>=1000 -F auid!=unset -k privileged-passwd"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/bin/chage\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-passwd"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource66ref -{ -ResourceID = "[nxFileLine][V-204546][medium][SRG-OS-000042-GPOS-00020]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F path=/usr/sbin/userhelper -F auid>=1000 -F auid!=unset -k privileged-passwd"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/sbin/userhelper\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-passwd"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource67ref -{ -ResourceID = "[nxFileLine][V-204547][medium][SRG-OS-000037-GPOS-00015]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F path=/usr/bin/su -F auid>=1000 -F auid!=unset -k privileged-priv_change"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/bin/su\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-priv_change"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource68ref -{ -ResourceID = "[nxFileLine][V-204548][medium][SRG-OS-000037-GPOS-00015]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F path=/usr/bin/sudo -F auid>=1000 -F auid!=unset -k privileged-priv_change"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/bin/sudo\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-priv_change"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource69ref -{ -ResourceID = "[nxFileLine][V-204549.a][medium][SRG-OS-000037-GPOS-00015]::[RHEL]Baseline"; - ContainsLine = "-w /etc/sudoers -p wa -k privileged-actions"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-w /etc/sudoers -p wa -k privileged-actions"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource70ref -{ -ResourceID = "[nxFileLine][V-204549.b][medium][SRG-OS-000037-GPOS-00015]::[RHEL]Baseline"; - ContainsLine = "-w /etc/sudoers.d/ -p wa -k privileged-actions"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-w /etc/sudoers.d/ -p wa -k privileged-actions"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource71ref -{ -ResourceID = "[nxFileLine][V-204550][medium][SRG-OS-000037-GPOS-00015]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F path=/usr/bin/newgrp -F auid>=1000 -F auid!=unset -k privileged-priv_change"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/bin/newgrp\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-priv_change"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource72ref -{ -ResourceID = "[nxFileLine][V-204551][medium][SRG-OS-000037-GPOS-00015]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F path=/usr/bin/chsh -F auid>=1000 -F auid!=unset -k privileged-priv_change"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/bin/chsh\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-priv_change"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource73ref -{ -ResourceID = "[nxFileLine][V-204552.a][medium][SRG-OS-000042-GPOS-00020]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S mount -F auid>=1000 -F auid!=unset -k privileged-mount"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*mount\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-mount"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource74ref -{ -ResourceID = "[nxFileLine][V-204552.b][medium][SRG-OS-000042-GPOS-00020]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S mount -F auid>=1000 -F auid!=unset -k privileged-mount"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*mount\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-mount"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource75ref -{ -ResourceID = "[nxFileLine][V-204552.c][medium][SRG-OS-000042-GPOS-00020]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F path=/usr/bin/mount -F auid>=1000 -F auid!=unset -k privileged-mount"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/bin/mount\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-mount"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource76ref -{ -ResourceID = "[nxFileLine][V-204553][medium][SRG-OS-000042-GPOS-00020]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F path=/usr/bin/umount -F auid>=1000 -F auid!=unset -k privileged-mount"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/bin/umount\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-mount"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource77ref -{ -ResourceID = "[nxFileLine][V-204554][medium][SRG-OS-000042-GPOS-00020]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F path=/usr/sbin/postdrop -F auid>=1000 -F auid!=unset -k privileged-postfix"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/sbin/postdrop\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-postfix"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource78ref -{ -ResourceID = "[nxFileLine][V-204555][medium][SRG-OS-000042-GPOS-00020]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F path=/usr/sbin/postqueue -F auid>=1000 -F auid!=unset -k privileged-postfix"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/sbin/postqueue\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-postfix"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource79ref -{ -ResourceID = "[nxFileLine][V-204556][medium][SRG-OS-000042-GPOS-00020]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F path=/usr/libexec/openssh/ssh-keysign -F auid>=1000 -F auid!=unset -k privileged-ssh"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/libexec/openssh/ssh-keysign\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-ssh"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource80ref -{ -ResourceID = "[nxFileLine][V-204557][medium][SRG-OS-000042-GPOS-00020]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F path=/usr/bin/crontab -F auid>=1000 -F auid!=unset -k privileged-cron"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/bin/crontab\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-cron"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource81ref -{ -ResourceID = "[nxFileLine][V-204558][medium][SRG-OS-000471-GPOS-00215]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F path=/usr/sbin/pam_timestamp_check -F auid>=1000 -F auid!=unset -k privileged-pam"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/sbin/pam_timestamp_check\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-pam"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource82ref -{ -ResourceID = "[nxFileLine][V-204559.a][medium][SRG-OS-000471-GPOS-00216]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S create_module -k module-change"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*create_module\\s*-k\\s*module-change"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource83ref -{ -ResourceID = "[nxFileLine][V-204559.b][medium][SRG-OS-000471-GPOS-00216]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S create_module -k module-change"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*create_module\\s*-k\\s*module-change"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource84ref -{ -ResourceID = "[nxFileLine][V-204560.a][medium][SRG-OS-000471-GPOS-00216]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S init_module,finit_module -k modulechange"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*init_module,finit_module\\s*-k\\s*modulechange"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource85ref -{ -ResourceID = "[nxFileLine][V-204560.b][medium][SRG-OS-000471-GPOS-00216]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S init_module,finit_module -k modulechange"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*init_module,finit_module\\s*-k\\s*modulechange"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource86ref -{ -ResourceID = "[nxFileLine][V-204562.a][medium][SRG-OS-000471-GPOS-00216]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S delete_module -k module-change"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*delete_module\\s*-k\\s*module-change"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource87ref -{ -ResourceID = "[nxFileLine][V-204562.b][medium][SRG-OS-000471-GPOS-00216]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S delete_module -k module-change"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*delete_module\\s*-k\\s*module-change"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource88ref -{ -ResourceID = "[nxFileLine][V-204563][medium][SRG-OS-000471-GPOS-00216]::[RHEL]Baseline"; - ContainsLine = "-w /usr/bin/kmod -p x -F auid!=unset -k module-change"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-w\\s*/usr/bin/kmod\\s*-p\\s*x\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*module-change"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource89ref -{ -ResourceID = "[nxFileLine][V-204564][medium][SRG-OS-000004-GPOS-00004]::[RHEL]Baseline"; - ContainsLine = "-w /etc/passwd -p wa -k identity"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-w\\s*/etc/passwd\\s*-p\\s*wa\\s*-k\\s*identity"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource90ref -{ -ResourceID = "[nxFileLine][V-204565][medium][SRG-OS-000004-GPOS-00004]::[RHEL]Baseline"; - ContainsLine = "-w /etc/group -p wa -k identity"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-w\\s*/etc/group\\s*-p\\s*wa\\s*-k\\s*identity"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource91ref -{ -ResourceID = "[nxFileLine][V-204566][medium][SRG-OS-000004-GPOS-00004]::[RHEL]Baseline"; - ContainsLine = "-w /etc/gshadow -p wa -k identity"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-w\\s*/etc/gshadow\\s*-p\\s*wa\\s*-k\\s*identity"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource92ref -{ -ResourceID = "[nxFileLine][V-204567][medium][SRG-OS-000004-GPOS-00004]::[RHEL]Baseline"; - ContainsLine = "-w /etc/shadow -p wa -k identity"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-w\\s*/etc/shadow\\s*-p\\s*wa\\s*-k\\s*identity"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource93ref -{ -ResourceID = "[nxFileLine][V-204568][medium][SRG-OS-000004-GPOS-00004]::[RHEL]Baseline"; - ContainsLine = "-w /etc/security/opasswd -p wa -k identity"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-w\\s*/etc/security/opasswd\\s*-p\\s*wa\\s*-k\\s*identity"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource94ref -{ -ResourceID = "[nxFileLine][V-204572.a][medium][SRG-OS-000466-GPOS-00210]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S unlink,unlinkat,rename,renameat,rmdir -F auid>=1000 -F auid!=unset -k delete"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*unlink,unlinkat,rename,renameat,rmdir\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*delete"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource95ref -{ -ResourceID = "[nxFileLine][V-204572.b][medium][SRG-OS-000466-GPOS-00210]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S unlink,unlinkat,rename,renameat,rmdir -F auid>=1000 -F auid!=unset -k delete"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*unlink,unlinkat,rename,renameat,rmdir\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*delete"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource96ref -{ -ResourceID = "[nxFileLine][V-204578][medium][SRG-OS-000033-GPOS-00014]::[RHEL]Baseline"; - ContainsLine = "Ciphers aes256-ctr,aes192-ctr,aes128-ctr"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/ssh/sshd_config"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "^#\\s*Ciphers.*|^\\s*Ciphers\\s*aes128-ctr.*|^\\s*Ciphers\\s*aes192-ctr.*"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource97ref -{ -ResourceID = "[nxFileLine][V-204579.b][medium][SRG-OS-000163-GPOS-00072]::[RHEL]Baseline"; - ContainsLine = "declare -xr TMOUT=900"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/profile.d/tmout.sh"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "^\\s*TMOUT\\s*=\\s*[0-8]?[0-9]?[0-9]?$|^#\\s*TMOUT.*"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource98ref -{ -ResourceID = "[nxFileLine][V-204580][medium][SRG-OS-000023-GPOS-00006]::[RHEL]Baseline"; - ContainsLine = "banner /etc/issue"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/ssh/sshd_config"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*banner\\s*/etc/issue"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource99ref -{ -ResourceID = "[nxFileLine][V-204587][medium][SRG-OS-000163-GPOS-00072]::[RHEL]Baseline"; - ContainsLine = "ClientAliveInterval 600"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/ssh/sshd_config"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "^\\s*ClientAliveInterval\\s*[0-5]?[0-9]?[0-9]?\\s*$|^#\\s*ClientAliveInterval.*|^\\s*ClientAliveInterval\\s*$"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource100ref -{ -ResourceID = "[nxFileLine][V-204588][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; - ContainsLine = "RhostsRSAAuthentication no"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/ssh/sshd_config"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "^#\\s*RhostsRSAAuthentication.*$|^RhostsRSAAuthentication\\s*(?!no\\b)\\w*$"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource101ref -{ -ResourceID = "[nxFileLine][V-204589][medium][SRG-OS-000163-GPOS-00072]::[RHEL]Baseline"; - ContainsLine = "ClientAliveCountMax 0"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/ssh/sshd_config"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "^#\\s*ClientAliveCountMax.*$|^ClientAliveCountMax\\s*(?!0\\b)\\w*$"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource102ref -{ -ResourceID = "[nxFileLine][V-204590][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; - ContainsLine = "IgnoreRhosts yes"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/ssh/sshd_config"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "^#\\s*IgnoreRhosts.*$|^IgnoreRhosts\\s*(?!yes\\b)\\w*$"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource103ref -{ -ResourceID = "[nxFileLine][V-204591][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; - ContainsLine = "PrintLastLog yes"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/ssh/sshd_config"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "^#\\s*PrintLastLog.*$|^PrintLastLog\\s*(?!yes\\b)\\w*$"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource104ref -{ -ResourceID = "[nxFileLine][V-204592][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; - ContainsLine = "PermitRootLogin no"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/ssh/sshd_config"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "^#\\s*PermitRootLogin.*$|^PermitRootLogin\\s*(?!no\\b)\\w*$"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource105ref -{ -ResourceID = "[nxFileLine][V-204593][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; - ContainsLine = "IgnoreUserKnownHosts yes"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/ssh/sshd_config"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "^#\\s*IgnoreUserKnownHosts.*$|^IgnoreUserKnownHosts\\s*(?!yes\\b)\\w*$"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource106ref -{ -ResourceID = "[nxFileLine][V-204594][high][SRG-OS-000074-GPOS-00042]::[RHEL]Baseline"; - ContainsLine = "Protocol 2"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/ssh/sshd_config"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "^#\\s*Protocol.*$|^Protocol\\s*(?!2\\b)\\w*$"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource107ref -{ -ResourceID = "[nxFileLine][V-204595][medium][SRG-OS-000250-GPOS-00093]::[RHEL]Baseline"; - ContainsLine = "MACs hmac-sha2-512,hmac-sha2-256"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/ssh/sshd_config"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*MACs.*|\\s*MACs\\s*hmac-(?!sha2-512).*"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource108ref -{ -ResourceID = "[nxFileLine][V-204598][medium][SRG-OS-000364-GPOS-00151]::[RHEL]Baseline"; - ContainsLine = "GSSAPIAuthentication no"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/ssh/sshd_config"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "^#\\s*GSSAPIAuthentication.*$|^GSSAPIAuthentication\\s*(?!no\\b)\\w*$"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource109ref -{ -ResourceID = "[nxFileLine][V-204599][medium][SRG-OS-000364-GPOS-00151]::[RHEL]Baseline"; - ContainsLine = "KerberosAuthentication no"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/ssh/sshd_config"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "^#\\s*KerberosAuthentication.*$|^KerberosAuthentication\\s*(?!no\\b)\\w*$"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource110ref -{ -ResourceID = "[nxFileLine][V-204600][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; - ContainsLine = "StrictModes yes"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/ssh/sshd_config"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "^#\\s*StrictModes.*$|^StrictModes\\s*(?!yes\\b)\\w*$"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource111ref -{ -ResourceID = "[nxFileLine][V-204601][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; - ContainsLine = "UsePrivilegeSeparation sandbox"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/ssh/sshd_config"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "^#\\s*UsePrivilegeSeparation.*$|^UsePrivilegeSeparation\\s*(?!sandbox\\b)\\w*$"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource112ref -{ -ResourceID = "[nxFileLine][V-204602][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; - ContainsLine = "Compression delayed"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/ssh/sshd_config"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "^#\\s*Compression.*$|^Compression\\s*(?!delayed\\b)\\w*$"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource113ref -{ -ResourceID = "[nxFileLine][V-204622][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; - ContainsLine = "X11Forwarding no"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/ssh/sshd_config"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "^#\\s*X11Forwarding.*$|^X11Forwarding\\s*(?!no\\b)\\w*$"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource114ref -{ -ResourceID = "[nxFileLine][V-233307][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; - ContainsLine = "X11UseLocalhost yes"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/ssh/sshd_config"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*X11UseLocalhost\\s*yes"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxServiceResource as $MSFT_nxServiceResource1ref -{ -ResourceID = "[nxService][V-204451][medium][SRG-OS-000114-GPOS-00059]::[RHEL]Baseline"; - Controller = "systemd"; - Enabled = False; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxService.ps1::13::9::nxService"; - Name = "autofs"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxServiceResource as $MSFT_nxServiceResource2ref -{ -ResourceID = "[nxService][V-204492][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; - Controller = "systemd"; - Enabled = False; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxService.ps1::13::9::nxService"; - Name = "kdump"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxServiceResource as $MSFT_nxServiceResource3ref -{ -ResourceID = "[nxService][V-204503][medium][SRG-OS-000038-GPOS-00016]::[RHEL]Baseline"; - Controller = "systemd"; - State = "Running"; - Enabled = True; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxService.ps1::22::9::nxService"; - Name = "auditd"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxServiceResource as $MSFT_nxServiceResource4ref -{ -ResourceID = "[nxService][V-204586][medium][SRG-OS-000423-GPOS-00187]::[RHEL]Baseline"; - Controller = "systemd"; - State = "Running"; - Enabled = True; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxService.ps1::22::9::nxService"; - Name = "sshd"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxServiceResource as $MSFT_nxServiceResource5ref -{ -ResourceID = "[nxService][V-204604.b][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; - Controller = "systemd"; - State = "Running"; - Enabled = True; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxService.ps1::22::9::nxService"; - Name = "firewalld"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxScriptResource as $MSFT_nxScriptResource1ref -{ -ResourceID = "[nxScript][V-204399.b][medium][[Skip] SRG-OS-000029-GPOS-00010]::[RHEL]Baseline"; - GetScript = "#!/bin/bash\necho [V-204399.b][medium][[Skip] SRG-OS-000029-GPOS-00010]"; - TestScript = "#!/bin/bash\nexit 0"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxScript.skip.ps1::10::5::nxScript"; - SetScript = "#!/bin/bash"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxScriptResource as $MSFT_nxScriptResource2ref -{ -ResourceID = "[nxScript][V-204400][medium][[Skip] SRG-OS-000029-GPOS-00010]::[RHEL]Baseline"; - GetScript = "#!/bin/bash\necho [V-204400][medium][[Skip] SRG-OS-000029-GPOS-00010]"; - TestScript = "#!/bin/bash\nexit 0"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxScript.skip.ps1::10::5::nxScript"; - SetScript = "#!/bin/bash"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxScriptResource as $MSFT_nxScriptResource3ref -{ -ResourceID = "[nxScript][V-204403][medium][[Skip] SRG-OS-000029-GPOS-00010]::[RHEL]Baseline"; - GetScript = "#!/bin/bash\necho [V-204403][medium][[Skip] SRG-OS-000029-GPOS-00010]"; - TestScript = "#!/bin/bash\nexit 0"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxScript.skip.ps1::10::5::nxScript"; - SetScript = "#!/bin/bash"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxScriptResource as $MSFT_nxScriptResource4ref -{ -ResourceID = "[nxScript][V-204509][medium][[Skip] SRG-OS-000342-GPOS-00133]::[RHEL]Baseline"; - GetScript = "#!/bin/bash\necho [V-204509][medium][[Skip] SRG-OS-000342-GPOS-00133]"; - TestScript = "#!/bin/bash\nexit 0"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxScript.skip.ps1::10::5::nxScript"; - SetScript = "#!/bin/bash"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxScriptResource as $MSFT_nxScriptResource5ref -{ -ResourceID = "[nxScript][V-204513][medium][[Skip] SRG-OS-000343-GPOS-00134]::[RHEL]Baseline"; - GetScript = "#!/bin/bash\necho [V-204513][medium][[Skip] SRG-OS-000343-GPOS-00134]"; - TestScript = "#!/bin/bash\nexit 0"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxScript.skip.ps1::10::5::nxScript"; - SetScript = "#!/bin/bash"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxScriptResource as $MSFT_nxScriptResource6ref -{ -ResourceID = "[nxScript][V-204623][medium][[Skip] SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; - GetScript = "#!/bin/bash\necho [V-204623][medium][[Skip] SRG-OS-000480-GPOS-00227]"; - TestScript = "#!/bin/bash\nexit 0"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxScript.skip.ps1::10::5::nxScript"; - SetScript = "#!/bin/bash"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxScriptResource as $MSFT_nxScriptResource7ref -{ -ResourceID = "[nxScript][V-244557][medium][[Skip] SRG-OS-000080-GPOS-00048]::[RHEL]Baseline"; - GetScript = "#!/bin/bash\necho [V-244557][medium][[Skip] SRG-OS-000080-GPOS-00048]"; - TestScript = "#!/bin/bash\nexit 0"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxScript.skip.ps1::10::5::nxScript"; - SetScript = "#!/bin/bash"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxScriptResource as $MSFT_nxScriptResource8ref -{ -ResourceID = "[nxScript][V-244558][medium][[Skip] SRG-OS-000080-GPOS-00048]::[RHEL]Baseline"; - GetScript = "#!/bin/bash\necho [V-244558][medium][[Skip] SRG-OS-000080-GPOS-00048]"; - TestScript = "#!/bin/bash\nexit 0"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxScript.skip.ps1::10::5::nxScript"; - SetScript = "#!/bin/bash"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxScriptResource as $MSFT_nxScriptResource9ref -{ -ResourceID = "[nxScript][V-204399.a][medium][[Skip] SRG-OS-000029-GPOS-00010]::[RHEL]Baseline"; - GetScript = "#!/bin/bash\necho [V-204399.a][medium][[Skip] SRG-OS-000029-GPOS-00010]"; - TestScript = "#!/bin/bash\nexit 0"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxScript.skip.ps1::10::5::nxScript"; - SetScript = "#!/bin/bash"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of OMI_ConfigurationDocument - - - { - Version="2.0.0"; - - - MinimumCompatibleVersion = "1.0.0"; - - - CompatibleVersionAdditionalProperties= {"Omi_BaseResource:ConfigurationName"}; - - - Author="Microsoft"; - - - GenerationDate="06/30/2022 11:38:45"; - - - GenerationHost="Microsoft"; - - - Name="LinuxBaseLine"; - - - }; +/* +@TargetNode='CentOS77' +@GeneratedBy=Microsoft +@GenerationDate=03/09/2023 14:17:33 +@GenerationHost=Microsoft +*/ + +instance of MSFT_nxPackageResource as $MSFT_nxPackageResource1ref +{ +ResourceID = "[nxPackage][V-204442][high][SRG-OS-000095-GPOS-00049]::[RHEL]Baseline"; + Ensure = "Absent"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxPackage.ps1::8::5::nxPackage"; + Name = "rsh-server"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxPackageResource as $MSFT_nxPackageResource2ref +{ +ResourceID = "[nxPackage][V-204443][high][SRG-OS-000095-GPOS-00049]::[RHEL]Baseline"; + Ensure = "Absent"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxPackage.ps1::8::5::nxPackage"; + Name = "ypserv"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxPackageResource as $MSFT_nxPackageResource3ref +{ +ResourceID = "[nxPackage][V-204497][high][SRG-OS-000033-GPOS-00014]::[RHEL]Baseline"; + Ensure = "Present"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxPackage.ps1::8::5::nxPackage"; + Name = "dracut-fips"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxPackageResource as $MSFT_nxPackageResource4ref +{ +ResourceID = "[nxPackage][V-204498][low][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; + Ensure = "Present"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxPackage.ps1::8::5::nxPackage"; + Name = "aide"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxPackageResource as $MSFT_nxPackageResource5ref +{ +ResourceID = "[nxPackage][V-204502][high][SRG-OS-000095-GPOS-00049]::[RHEL]Baseline"; + Ensure = "Absent"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxPackage.ps1::8::5::nxPackage"; + Name = "telnet-server"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxPackageResource as $MSFT_nxPackageResource6ref +{ +ResourceID = "[nxPackage][V-204585][medium][SRG-OS-000423-GPOS-00187]::[RHEL]Baseline"; + Ensure = "Present"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxPackage.ps1::8::5::nxPackage"; + Name = "openssh-server"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxPackageResource as $MSFT_nxPackageResource7ref +{ +ResourceID = "[nxPackage][V-204604.a][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; + Ensure = "Present"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxPackage.ps1::8::5::nxPackage"; + Name = "firewalld"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxPackageResource as $MSFT_nxPackageResource8ref +{ +ResourceID = "[nxPackage][V-204620][high][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; + Ensure = "Absent"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxPackage.ps1::8::5::nxPackage"; + Name = "vsftpd"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxPackageResource as $MSFT_nxPackageResource9ref +{ +ResourceID = "[nxPackage][V-204621][high][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; + Ensure = "Absent"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxPackage.ps1::8::5::nxPackage"; + Name = "tftp-server"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxPackageResource as $MSFT_nxPackageResource10ref +{ +ResourceID = "[nxPackage][V-204631][medium][SRG-OS-000375-GPOS-00160]::[RHEL]Baseline"; + Ensure = "Present"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxPackage.ps1::8::5::nxPackage"; + Name = "pam_pkcs11"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileResource as $MSFT_nxFileResource1ref +{ +ResourceID = "[nxFile][V-204395][medium][SRG-OS-000023-GPOS-00006]::[RHEL]Baseline"; + Contents = "You are accessing a U.S. Government (USG) Information System (IS) that is provided for USG-authorized use only.\n\nBy using this IS (which includes any device attached to this IS), you consent to the following conditions:\n\n-The USG routinely intercepts and monitors communications on this IS for purposes including, but not limited to, penetration testing, COMSEC monitoring, network operations and defense, personnel misconduct (PM), law enforcement (LE), and counterintelligence (CI) investigations.\n\n-At any time, the USG may inspect and seize data stored on this IS.\n\n-Communications using, or data stored on, this IS are not private, are subject to routine monitoring, interception, and search, and may be disclosed or used for any USG-authorized purpose.\n\n-This IS includes security measures (e.g., authentication and access controls) to protect USG interests--not for your personal benefit or privacy.\n\n-Notwithstanding the above, using this IS does not constitute consent to PM, LE or CI investigative searching or monitoring of the content of privileged communications, or work product, related to personal representation or services by attorneys, psychotherapists, or clergy, and their assistants. Such communications and work product are private and confidential. See User Agreement for details."; + DestinationPath = "/etc/issue"; + ModuleName = "nx"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; + ModuleVersion = "1.0"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileResource as $MSFT_nxFileResource2ref +{ +ResourceID = "[nxFile][V-204449.a][medium][SRG-OS-000114-GPOS-00059]::[RHEL]Baseline"; + Contents = ""; + DestinationPath = "/etc/modprobe.d/usb-storage.conf"; + ModuleName = "nx"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; + ModuleVersion = "1.0"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileResource as $MSFT_nxFileResource3ref +{ +ResourceID = "[nxFile][V-204449.b][medium][SRG-OS-000114-GPOS-00059]::[RHEL]Baseline"; + Contents = ""; + DestinationPath = "/etc/modprobe.d/blacklist.conf"; + ModuleName = "nx"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; + ModuleVersion = "1.0"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileResource as $MSFT_nxFileResource4ref +{ +ResourceID = "[nxFile][V-204450.a][medium][SRG-OS-000378-GPOS-00163]::[RHEL]Baseline"; + Contents = ""; + DestinationPath = "/etc/modprobe.d/dccp.conf"; + ModuleName = "nx"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; + ModuleVersion = "1.0"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileResource as $MSFT_nxFileResource5ref +{ +ResourceID = "[nxFile][V-204576][low][SRG-OS-000027-GPOS-00008]::[RHEL]Baseline"; + Contents = "* hard maxlogins 10"; + DestinationPath = "/etc/security/limits.d/204576-powerstig.conf"; + ModuleName = "nx"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; + ModuleVersion = "1.0"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileResource as $MSFT_nxFileResource6ref +{ +ResourceID = "[nxFile][V-204579.a][medium][SRG-OS-000163-GPOS-00072]::[RHEL]Baseline"; + Contents = ""; + DestinationPath = "/etc/profile.d/tmout.sh"; + ModuleName = "nx"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; + ModuleVersion = "1.0"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileResource as $MSFT_nxFileResource7ref +{ +ResourceID = "[nxFile][V-204584][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; + Contents = "kernel.randomize_va_space = 2"; + DestinationPath = "/etc/sysctl.d/204584-powerstig.conf"; + ModuleName = "nx"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; + ModuleVersion = "1.0"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileResource as $MSFT_nxFileResource8ref +{ +ResourceID = "[nxFile][V-204609][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; + Contents = "net.ipv4.conf.all.accept_source_route = 0"; + DestinationPath = "/etc/sysctl.d/204609-powerstig.conf"; + ModuleName = "nx"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; + ModuleVersion = "1.0"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileResource as $MSFT_nxFileResource9ref +{ +ResourceID = "[nxFile][V-204610][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; + Contents = "net.ipv4.conf.all.rp_filter = 1"; + DestinationPath = "/etc/sysctl.d/204610-powerstig.conf"; + ModuleName = "nx"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; + ModuleVersion = "1.0"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileResource as $MSFT_nxFileResource10ref +{ +ResourceID = "[nxFile][V-204611][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; + Contents = "net.ipv4.conf.default.rp_filter = 1"; + DestinationPath = "/etc/sysctl.d/204611-powerstig.conf"; + ModuleName = "nx"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; + ModuleVersion = "1.0"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileResource as $MSFT_nxFileResource11ref +{ +ResourceID = "[nxFile][V-204612][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; + Contents = "net.ipv4.conf.default.accept_source_route = 0"; + DestinationPath = "/etc/sysctl.d/204612-powerstig.conf"; + ModuleName = "nx"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; + ModuleVersion = "1.0"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileResource as $MSFT_nxFileResource12ref +{ +ResourceID = "[nxFile][V-204613][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; + Contents = "net.ipv4.icmp_echo_ignore_broadcasts = 1"; + DestinationPath = "/etc/sysctl.d/204613-powerstig.conf"; + ModuleName = "nx"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; + ModuleVersion = "1.0"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileResource as $MSFT_nxFileResource13ref +{ +ResourceID = "[nxFile][V-204614][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; + Contents = "net.ipv4.conf.default.accept_redirects = 0"; + DestinationPath = "/etc/sysctl.d/204614-powerstig.conf"; + ModuleName = "nx"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; + ModuleVersion = "1.0"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileResource as $MSFT_nxFileResource14ref +{ +ResourceID = "[nxFile][V-204615][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; + Contents = "net.ipv4.conf.all.accept_redirects = 0"; + DestinationPath = "/etc/sysctl.d/204615-powerstig.conf"; + ModuleName = "nx"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; + ModuleVersion = "1.0"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileResource as $MSFT_nxFileResource15ref +{ +ResourceID = "[nxFile][V-204616][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; + Contents = "net.ipv4.conf.default.send_redirects = 0"; + DestinationPath = "/etc/sysctl.d/204616-powerstig.conf"; + ModuleName = "nx"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; + ModuleVersion = "1.0"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileResource as $MSFT_nxFileResource16ref +{ +ResourceID = "[nxFile][V-204617][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; + Contents = "net.ipv4.conf.all.send_redirects = 0"; + DestinationPath = "/etc/sysctl.d/204617-powerstig.conf"; + ModuleName = "nx"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; + ModuleVersion = "1.0"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileResource as $MSFT_nxFileResource17ref +{ +ResourceID = "[nxFile][V-204625][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; + Contents = "net.ipv4.ip_forward = 0"; + DestinationPath = "/etc/sysctl.d/204625-powerstig.conf"; + ModuleName = "nx"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; + ModuleVersion = "1.0"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileResource as $MSFT_nxFileResource18ref +{ +ResourceID = "[nxFile][V-204630][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; + Contents = "net.ipv6.conf.all.accept_source_route = 0"; + DestinationPath = "/etc/sysctl.d/204630-powerstig.conf"; + ModuleName = "nx"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; + ModuleVersion = "1.0"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileResource as $MSFT_nxFileResource19ref +{ +ResourceID = "[nxFile][V-237634.a][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; + Contents = "Defaults !targetpw"; + DestinationPath = "/etc/sudoers.d/237634a-powerstig.conf"; + ModuleName = "nx"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; + ModuleVersion = "1.0"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileResource as $MSFT_nxFileResource20ref +{ +ResourceID = "[nxFile][V-237634.b][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; + Contents = "Defaults !rootpw"; + DestinationPath = "/etc/sudoers.d/237634b-powerstig.conf"; + ModuleName = "nx"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; + ModuleVersion = "1.0"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileResource as $MSFT_nxFileResource21ref +{ +ResourceID = "[nxFile][V-237634.c][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; + Contents = "Defaults !runaspw"; + DestinationPath = "/etc/sudoers.d/237634c-powerstig.conf"; + ModuleName = "nx"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; + ModuleVersion = "1.0"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileResource as $MSFT_nxFileResource22ref +{ +ResourceID = "[nxFile][V-237635][medium][SRG-OS-000373-GPOS-00156]::[RHEL]Baseline"; + Contents = "Defaults timestamp_timeout=0"; + DestinationPath = "/etc/sudoers.d/237635-powerstig.conf"; + ModuleName = "nx"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; + ModuleVersion = "1.0"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileResource as $MSFT_nxFileResource23ref +{ +ResourceID = "[nxFile][V-250314][medium][SRG-OS-000324-GPOS-00125]::[RHEL]Baseline"; + Contents = "%wheel ALL=(ALL) TYPE=sysadm_t ROLE=sysadm_r ALL"; + DestinationPath = "/etc/sudoers.d/250314-powerstig.conf"; + ModuleName = "nx"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; + ModuleVersion = "1.0"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource1ref +{ +ResourceID = "[nxFileLine][V-204405][medium][SRG-OS-000069-GPOS-00037]::[RHEL]Baseline"; + ContainsLine = "password substack system-auth"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/pam.d/passwd"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "^\\s*password(?:\\t*|\\s*)substack\\tsystem-auth\\s*$|^#\\s*password\\s*substack\\s*system-auth.*"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource2ref +{ +ResourceID = "[nxFileLine][V-204407][medium][SRG-OS-000069-GPOS-00037]::[RHEL]Baseline"; + ContainsLine = "ucredit = -1"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/security/pwquality.conf"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "^#\\s*ucredit.*$|^ucredit\\s*=\\s*(?!-1\\b)\\w*$"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource3ref +{ +ResourceID = "[nxFileLine][V-204408][medium][SRG-OS-000070-GPOS-00038]::[RHEL]Baseline"; + ContainsLine = "lcredit = -1"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/security/pwquality.conf"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "^#\\s*lcredit.*$|^lcredit\\s*=\\s*(?!-1\\b)\\w*$"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource4ref +{ +ResourceID = "[nxFileLine][V-204409][medium][SRG-OS-000071-GPOS-00039]::[RHEL]Baseline"; + ContainsLine = "dcredit = -1"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/security/pwquality.conf"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "^#\\s*dcredit.*$|^dcredit\\s*=\\s*(?!-1\\b)\\w*$"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource5ref +{ +ResourceID = "[nxFileLine][V-204410][medium][SRG-OS-000266-GPOS-00101]::[RHEL]Baseline"; + ContainsLine = "ocredit=-1"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/security/pwquality.conf"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "^#\\s*ocredit.*$|^ocredit\\s*=\\s*(?!-1)\\w*$"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource6ref +{ +ResourceID = "[nxFileLine][V-204411][medium][SRG-OS-000072-GPOS-00040]::[RHEL]Baseline"; + ContainsLine = "difok = 8"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/security/pwquality.conf"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*difok\\s*=.*|^\\s*difok\\s*=\\s*(-|)[0-7]$"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource7ref +{ +ResourceID = "[nxFileLine][V-204412][medium][SRG-OS-000072-GPOS-00040]::[RHEL]Baseline"; + ContainsLine = "minclass = 4"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/security/pwquality.conf"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "^#\\s*minclass\\s*=.*|^\\s*minclass\\s*=\\s*(?!\\d{2,})[1-3]"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource8ref +{ +ResourceID = "[nxFileLine][V-204413][medium][SRG-OS-000072-GPOS-00040]::[RHEL]Baseline"; + ContainsLine = "maxrepeat = 3"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/security/pwquality.conf"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "^#\\s*maxrepeat\\s*=.*|^\\s*maxrepeat\\s*=\\s*(?:\\d{2,}|[4-9])"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource9ref +{ +ResourceID = "[nxFileLine][V-204414][medium][SRG-OS-000072-GPOS-00040]::[RHEL]Baseline"; + ContainsLine = "maxclassrepeat = 4"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/security/pwquality.conf"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "^#\\s*maxclassrepeat\\s*=.*|^\\s*maxclassrepeat\\s*=\\s*(?:\\d{2,}|[1-3|5-9])"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource10ref +{ +ResourceID = "[nxFileLine][V-204416][medium][SRG-OS-000073-GPOS-00041]::[RHEL]Baseline"; + ContainsLine = "ENCRYPT_METHOD SHA512"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/login.defs"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*ENCRYPT_METHOD\\s*SHA512"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource11ref +{ +ResourceID = "[nxFileLine][V-204418][medium][SRG-OS-000075-GPOS-00043]::[RHEL]Baseline"; + ContainsLine = "PASS_MIN_DAYS 1"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/login.defs"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "^\\s*PASS_MIN_DAYS\\s*[0]*$|#\\s*PASS_MIN_DAYS.*"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource12ref +{ +ResourceID = "[nxFileLine][V-204420][medium][SRG-OS-000076-GPOS-00044]::[RHEL]Baseline"; + ContainsLine = "PASS_MAX_DAYS 60"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/login.defs"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "^\\s*PASS_MAX_DAYS\\s*([6][1-9]|[7-9][0-9]|\\d{3,})$|#\\s*PASS_MAX_DAYS.*"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource13ref +{ +ResourceID = "[nxFileLine][V-204423][medium][SRG-OS-000078-GPOS-00046]::[RHEL]Baseline"; + ContainsLine = "minlen = 15"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/security/pwquality.conf"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "^\\s*minlen\\s*=\\s*([0-9]|[1][1-4])$|#\\s*minlen.*"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource14ref +{ +ResourceID = "[nxFileLine][V-204425][high][SRG-OS-000106-GPOS-00053]::[RHEL]Baseline"; + ContainsLine = "PermitEmptyPasswords no"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/ssh/sshd_config"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "^#\\s*PermitEmptyPasswords.*$|^PermitEmptyPasswords\\s*(?!no\\b)\\w*$"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource15ref +{ +ResourceID = "[nxFileLine][V-204426][medium][SRG-OS-000118-GPOS-00060]::[RHEL]Baseline"; + ContainsLine = "INACTIVE=35"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/default/useradd"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "^#\\s*INACTIVE\\s*=.*|^\\s*INACTIVE\\s*=\\s*(3[5-9]|[4-9]\\d+|\\d{3,})"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource16ref +{ +ResourceID = "[nxFileLine][V-204431][medium][SRG-OS-000480-GPOS-00226]::[RHEL]Baseline"; + ContainsLine = "FAIL_DELAY 4"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/login.defs"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "^#\\s*FAIL_DELAY.*|^FAIL_DELAY\\s*(?!\\d{2,})[1-3]"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource17ref +{ +ResourceID = "[nxFileLine][V-204434][medium][SRG-OS-000480-GPOS-00229]::[RHEL]Baseline"; + ContainsLine = "PermitUserEnvironment no"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/ssh/sshd_config"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "^#\\s*PermitUserEnvironment.*$|^PermitUserEnvironment\\s*(?!no\\b)\\w*$"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource18ref +{ +ResourceID = "[nxFileLine][V-204435][medium][SRG-OS-000480-GPOS-00229]::[RHEL]Baseline"; + ContainsLine = "HostbasedAuthentication no"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/ssh/sshd_config"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "^#\\s*HostbasedAuthentication.*$|^HostbasedAuthentication\\s*(?!no\\b)\\w*$"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource19ref +{ +ResourceID = "[nxFileLine][V-204447][high][SRG-OS-000366-GPOS-00153]::[RHEL]Baseline"; + ContainsLine = "gpgcheck=1"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/yum.conf"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*gpgcheck\\s*=\\s*1"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource20ref +{ +ResourceID = "[nxFileLine][V-204448][high][SRG-OS-000366-GPOS-00153]::[RHEL]Baseline"; + ContainsLine = "localpkg_gpgcheck=1"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/yum.conf"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*localpkg_gpgcheck\\s*=\\s*1"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource21ref +{ +ResourceID = "[nxFileLine][V-204449.c][medium][SRG-OS-000114-GPOS-00059]::[RHEL]Baseline"; + ContainsLine = "install usb-storage /bin/true"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/modprobe.d/usb-storage.conf"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*install\\s*usb-storage\\s*/bin/true"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource22ref +{ +ResourceID = "[nxFileLine][V-204449.d][medium][SRG-OS-000114-GPOS-00059]::[RHEL]Baseline"; + ContainsLine = "blacklist usb-storage"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/modprobe.d/blacklist.conf"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*blacklist\\s*usb-storage"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource23ref +{ +ResourceID = "[nxFileLine][V-204450.b][medium][SRG-OS-000378-GPOS-00163]::[RHEL]Baseline"; + ContainsLine = "install dccp /bin/true"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/modprobe.d/dccp.conf"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*install\\s*dccp\\s*/bin/true"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource24ref +{ +ResourceID = "[nxFileLine][V-204450.c][medium][SRG-OS-000378-GPOS-00163]::[RHEL]Baseline"; + ContainsLine = "blacklist dccp"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/modprobe.d/blacklist.conf"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*blacklist\\s*dccp"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource25ref +{ +ResourceID = "[nxFileLine][V-204452][low][SRG-OS-000437-GPOS-00194]::[RHEL]Baseline"; + ContainsLine = "clean_requirements_on_remove=1"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/yum.conf"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*clean_requirements_on_remove\\s*=\\s*1"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource26ref +{ +ResourceID = "[nxFileLine][V-204453][medium][SRG-OS-000445-GPOS-00199]::[RHEL]Baseline"; + ContainsLine = "SELINUX=enforcing"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/selinux/config"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "^#\\s*SELINUX.*$|^SELINUX\\s*=\\s*(?!enforcing)\\w*$"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource27ref +{ +ResourceID = "[nxFileLine][V-204454][medium][SRG-OS-000445-GPOS-00199]::[RHEL]Baseline"; + ContainsLine = "SELINUXTYPE=targeted"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/selinux/config"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "^#\\s*SELINUXTYPE.*$|^SELINUXTYPE\\s*=\\s*(?!targeted\\b)\\w*$"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource28ref +{ +ResourceID = "[nxFileLine][V-204457][medium][SRG-OS-000480-GPOS-00228]::[RHEL]Baseline"; + ContainsLine = "UMASK 077"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/login.defs"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "^\\s*UMASK(?!\\s077\\b)\\s*\\d*\\s*$|^#\\s*UMASK.*"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource29ref +{ +ResourceID = "[nxFileLine][V-204466][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; + ContainsLine = "CREATE_HOME yes"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/login.defs"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "^#\\s*CREATE_HOME.*$|^CREATE_HOME\\s*(?!yes\\b)\\w*$|^CREATE_HOME\\t.*"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource30ref +{ +ResourceID = "[nxFileLine][V-204504][medium][SRG-OS-000046-GPOS-00022]::[RHEL]Baseline"; + ContainsLine = "-f 2"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "^#\\s*-f\\s+2|^\\s*-f\\s*1"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileResource as $MSFT_nxFileResource24ref +{ +SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::29::9::nxFile"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + ResourceID = "[nxFile][V-204506.a][medium][SRG-OS-000342-GPOS-00133]::[RHEL]Baseline"; + DestinationPath = "/etc/audisp/plugins.d/au-remote.conf"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource31ref +{ +ResourceID = "[nxFileLine][V-204506.a][medium][SRG-OS-000342-GPOS-00133]::[RHEL]Baseline"; + ContainsLine = "active = yes"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audisp/plugins.d/au-remote.conf"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "\\s*active\\s*=\\s*no|active=yes|#\\s*active\\s*=.*"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource32ref +{ +ResourceID = "[nxFileLine][V-204506.b][medium][SRG-OS-000342-GPOS-00133]::[RHEL]Baseline"; + ContainsLine = "direction = out"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audisp/plugins.d/au-remote.conf"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*direction\\s*=\\s*out"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource33ref +{ +ResourceID = "[nxFileLine][V-204506.c][medium][SRG-OS-000342-GPOS-00133]::[RHEL]Baseline"; + ContainsLine = "path = /sbin/audisp-remote"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audisp/plugins.d/au-remote.conf"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*path\\s*=\\s*/sbin/audisp-remote"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource34ref +{ +ResourceID = "[nxFileLine][V-204506.d][medium][SRG-OS-000342-GPOS-00133]::[RHEL]Baseline"; + ContainsLine = "type = always"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audisp/plugins.d/au-remote.conf"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*type\\s*=\\s*always"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource35ref +{ +ResourceID = "[nxFileLine][V-204507][medium][SRG-OS-000342-GPOS-00133]::[RHEL]Baseline"; + ContainsLine = "overflow_action = syslog"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audisp/audispd.conf"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "^#\\s*overflow_action.*$|^overflow_action\\s*=\\s*(?!syslog$)\\w*$"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource36ref +{ +ResourceID = "[nxFileLine][V-204508][medium][SRG-OS-000342-GPOS-00133]::[RHEL]Baseline"; + ContainsLine = "name_format = hostname"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audisp/audispd.conf"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "^#\\s*name_format.*$|^name_format\\s*=\\s*(?!hostname$)\\w*$"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileResource as $MSFT_nxFileResource25ref +{ +SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::19::9::nxFile"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + ResourceID = "[nxFile][V-204510][medium][SRG-OS-000342-GPOS-00133]::[RHEL]Baseline"; + DestinationPath = "/etc/audisp/audisp-remote.conf"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource37ref +{ +ResourceID = "[nxFileLine][V-204510][medium][SRG-OS-000342-GPOS-00133]::[RHEL]Baseline"; + ContainsLine = "enable_krb5 = yes"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audisp/audisp-remote.conf"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*enable_krb5\\s*=\\s*yes"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource38ref +{ +ResourceID = "[nxFileLine][V-204511][medium][SRG-OS-000342-GPOS-00133]::[RHEL]Baseline"; + ContainsLine = "disk_full_action = single"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audisp/audisp-remote.conf"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "^#\\s*disk_full_action\\s*=.*|^disk_full_action\\s*=\\s*(?!halt\\b|single\\b|syslog\\b)\\w+"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource39ref +{ +ResourceID = "[nxFileLine][V-204512][medium][SRG-OS-000342-GPOS-00133]::[RHEL]Baseline"; + ContainsLine = "network_failure_action = syslog"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audisp/audisp-remote.conf"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "^#\\s*network_failure_action\\s*=.*|^network_failure_action\\s*=\\s*(?!halt\\b|single\\b|syslog\\b)\\w+"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource40ref +{ +ResourceID = "[nxFileLine][V-204514][medium][SRG-OS-000343-GPOS-00134]::[RHEL]Baseline"; + ContainsLine = "space_left_action = email"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/auditd.conf"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "^#\\s*space_left_action.*$|^space_left_action\\s*=\\s*(?!email$)\\w*$"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource41ref +{ +ResourceID = "[nxFileLine][V-204515][medium][SRG-OS-000343-GPOS-00134]::[RHEL]Baseline"; + ContainsLine = "action_mail_acct = root"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/auditd.conf"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "^#\\s*action_mail_acct.*|^action_mail_acct\\s*=\\s*(?!root\\b)\\w+"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource42ref +{ +ResourceID = "[nxFileLine][V-204516.a][medium][SRG-OS-000327-GPOS-00127]::[RHEL]Baseline"; + ContainsLine = "-a always,exit -F arch=b32 -S execve -C uid!=euid -F euid=0 -k setuid"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*execve\\s*-C\\s*uid!\\s*=\\s*euid\\s*-F\\s*euid\\s*=\\s*0\\s*-k\\s*setuid"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource43ref +{ +ResourceID = "[nxFileLine][V-204516.b][medium][SRG-OS-000327-GPOS-00127]::[RHEL]Baseline"; + ContainsLine = "-a always,exit -F arch=b64 -S execve -C uid!=euid -F euid=0 -k setuid"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*execve\\s*-C\\s*uid!\\s*=\\s*euid\\s*-F\\s*euid\\s*=\\s*0\\s*-k\\s*setuid"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource44ref +{ +ResourceID = "[nxFileLine][V-204516.c][medium][SRG-OS-000327-GPOS-00127]::[RHEL]Baseline"; + ContainsLine = "-a always,exit -F arch=b32 -S execve -C gid!=egid -F egid=0 -k setgid"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*execve\\s*-C\\s*gid!\\s*=\\s*egid\\s*-F\\s*egid\\s*=\\s*0\\s*-k\\s*setgid"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource45ref +{ +ResourceID = "[nxFileLine][V-204516.d][medium][SRG-OS-000327-GPOS-00127]::[RHEL]Baseline"; + ContainsLine = "-a always,exit -F arch=b64 -S execve -C gid!=egid -F egid=0 -k setgid"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*execve\\s*-C\\s*gid!\\s*=\\s*egid\\s*-F\\s*egid\\s*=\\s*0\\s*-k\\s*setgid"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource46ref +{ +ResourceID = "[nxFileLine][V-204517.a][medium][SRG-OS-000064-GPOS-00033]::[RHEL]Baseline"; + ContainsLine = "-a always,exit -F arch=b32 -S chown,fchown,fchownat,lchown -F auid>=1000 -F auid!=unset -k perm_mod"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*chown,fchown,fchownat,lchown\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*perm_mod"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource47ref +{ +ResourceID = "[nxFileLine][V-204517.b][medium][SRG-OS-000064-GPOS-00033]::[RHEL]Baseline"; + ContainsLine = "-a always,exit -F arch=b64 -S chown,fchown,fchownat,lchown -F auid>=1000 -F auid!=unset -k perm_mod"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*chown,fchown,fchownat,lchown\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*perm_mod"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource48ref +{ +ResourceID = "[nxFileLine][V-204521.a][medium][SRG-OS-000458-GPOS-00203]::[RHEL]Baseline"; + ContainsLine = "-a always,exit -F arch=b32 -S chmod,fchmod,fchmodat -F auid>=1000 -F auid!=unset -k perm_mod"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*chmod,fchmod,fchmodat\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*perm_mod"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource49ref +{ +ResourceID = "[nxFileLine][V-204521.b][medium][SRG-OS-000458-GPOS-00203]::[RHEL]Baseline"; + ContainsLine = "-a always,exit -F arch=b64 -S chmod,fchmod,fchmodat -F auid>=1000 -F auid!=unset -k perm_mod"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*chmod,fchmod,fchmodat\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*perm_mod"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource50ref +{ +ResourceID = "[nxFileLine][V-204524.a][medium][SRG-OS-000458-GPOS-00203]::[RHEL]Baseline"; + ContainsLine = "-a always,exit -F arch=b32 -S setxattr,fsetxattr,lsetxattr,removexattr,fremovexattr,lremovexattr -F auid>=1000 -F auid!=unset -k perm_mod"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*setxattr,fsetxattr,lsetxattr,removexattr,fremovexattr,lremovexattr\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*perm_mod"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource51ref +{ +ResourceID = "[nxFileLine][V-204524.b][medium][SRG-OS-000458-GPOS-00203]::[RHEL]Baseline"; + ContainsLine = "-a always,exit -F arch=b64 -S setxattr,fsetxattr,lsetxattr,removexattr,fremovexattr,lremovexattr -F auid>=1000 -F auid!=unset -k perm_mod"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*setxattr,fsetxattr,lsetxattr,removexattr,fremovexattr,lremovexattr\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*perm_mod"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource52ref +{ +ResourceID = "[nxFileLine][V-204531.a][medium][SRG-OS-000064-GPOS-00033]::[RHEL]Baseline"; + ContainsLine = "-a always,exit -F arch=b32 -S creat,open,openat,open_by_handle_at,truncate,ftruncate -F exit=-EPERM -F auid>=1000 -F auid!=unset -k access"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*creat,open,openat,open_by_handle_at,truncate,ftruncate\\s*-F\\s*exit\\s*=\\s*-EPERM\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*access"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource53ref +{ +ResourceID = "[nxFileLine][V-204531.b][medium][SRG-OS-000064-GPOS-00033]::[RHEL]Baseline"; + ContainsLine = "-a always,exit -F arch=b32 -S creat,open,openat,open_by_handle_at,truncate,ftruncate -F exit=-EACCES -F auid>=1000 -F auid!=unset -k access"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*creat,open,openat,open_by_handle_at,truncate,ftruncate\\s*-F\\s*exit\\s*=\\s*-EACCES\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*access"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource54ref +{ +ResourceID = "[nxFileLine][V-204531.c][medium][SRG-OS-000064-GPOS-00033]::[RHEL]Baseline"; + ContainsLine = "-a always,exit -F arch=b64 -S creat,open,openat,open_by_handle_at,truncate,ftruncate -F exit=-EPERM -F auid>=1000 -F auid!=unset -k access"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*creat,open,openat,open_by_handle_at,truncate,ftruncate\\s*-F\\s*exit\\s*=\\s*-EPERM\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*access"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource55ref +{ +ResourceID = "[nxFileLine][V-204531.d][medium][SRG-OS-000064-GPOS-00033]::[RHEL]Baseline"; + ContainsLine = "-a always,exit -F arch=b64 -S creat,open,openat,open_by_handle_at,truncate,ftruncate -F exit=-EACCES -F auid>=1000 -F auid!=unset -k access"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*creat,open,openat,open_by_handle_at,truncate,ftruncate\\s*-F\\s*exit\\s*=\\s*-EACCES\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*access"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource56ref +{ +ResourceID = "[nxFileLine][V-204536][medium][SRG-OS-000392-GPOS-00172]::[RHEL]Baseline"; + ContainsLine = "-a always,exit -F path=/usr/sbin/semanage -F perm=x -F auid>=1000 -F auid!=unset -k privileged-priv_change"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/sbin/semanage\\s*-F\\s*perm\\s*=\\s*x\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-priv_change"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource57ref +{ +ResourceID = "[nxFileLine][V-204537][medium][SRG-OS-000392-GPOS-00172]::[RHEL]Baseline"; + ContainsLine = "-a always,exit -F path=/usr/sbin/setsebool -F perm=x -F auid>=1000 -F auid!=unset -k privileged-priv_change"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/sbin/setsebool\\s*-F\\s*perm\\s*=\\s*x\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-priv_change"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource58ref +{ +ResourceID = "[nxFileLine][V-204538][medium][SRG-OS-000392-GPOS-00172]::[RHEL]Baseline"; + ContainsLine = "-a always,exit -F path=/usr/bin/chcon -F perm=x -F auid>=1000 -F auid!=unset -k privileged-priv_change"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/bin/chcon\\s*-F\\s*perm\\s*=\\s*x\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-priv_change"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource59ref +{ +ResourceID = "[nxFileLine][V-204539][medium][SRG-OS-000392-GPOS-00172]::[RHEL]Baseline"; + ContainsLine = "-a always,exit -F path=/usr/sbin/setfiles -F perm=x -F auid>=1000 -F auid!=unset -k privileged-priv_change"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/sbin/setfiles\\s*-F\\s*perm\\s*=\\s*x\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-priv_change"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource60ref +{ +ResourceID = "[nxFileLine][V-204540][medium][SRG-OS-000392-GPOS-00172]::[RHEL]Baseline"; + ContainsLine = "-w /var/run/faillock -p wa -k logins"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-w\\s*/var/run/faillock\\s*-p\\s*wa\\s*-k\\s*logins"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource61ref +{ +ResourceID = "[nxFileLine][V-204541][medium][SRG-OS-000392-GPOS-00172]::[RHEL]Baseline"; + ContainsLine = "-w /var/log/lastlog -p wa -k logins"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-w\\s*/var/log/lastlog\\s*-p\\s*wa\\s*-k\\s*logins"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource62ref +{ +ResourceID = "[nxFileLine][V-204542][medium][SRG-OS-000042-GPOS-00020]::[RHEL]Baseline"; + ContainsLine = "-a always,exit -F path=/usr/bin/passwd -F perm=x -F auid>=1000 -F auid!=unset -k privileged-passwd"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/bin/passwd\\s*-F\\s*perm\\s*=\\s*x\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-passwd"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource63ref +{ +ResourceID = "[nxFileLine][V-204543][medium][SRG-OS-000042-GPOS-00020]::[RHEL]Baseline"; + ContainsLine = "-a always,exit -F path=/usr/sbin/unix_chkpwd -F perm=x -F auid>=1000 -F auid!=unset -k privileged-passwd"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/sbin/unix_chkpwd\\s*-F\\s*perm\\s*=\\s*x\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-passwd"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource64ref +{ +ResourceID = "[nxFileLine][V-204544][medium][SRG-OS-000042-GPOS-00020]::[RHEL]Baseline"; + ContainsLine = "-a always,exit -F path=/usr/bin/gpasswd -F perm=x -F auid>=1000 -F auid!=unset -k privileged-passwd"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/bin/gpasswd\\s*-F\\s*perm\\s*=\\s*x\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-passwd"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource65ref +{ +ResourceID = "[nxFileLine][V-204545][medium][SRG-OS-000042-GPOS-00020]::[RHEL]Baseline"; + ContainsLine = "-a always,exit -F path=/usr/bin/chage -F perm=x -F auid>=1000 -F auid!=unset -k privileged-passwd"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/bin/chage\\s*-F\\s*perm\\s*=\\s*x\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-passwd"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource66ref +{ +ResourceID = "[nxFileLine][V-204546][medium][SRG-OS-000042-GPOS-00020]::[RHEL]Baseline"; + ContainsLine = "-a always,exit -F path=/usr/sbin/userhelper -F perm=x -F auid>=1000 -F auid!=unset -k privileged-passwd"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/sbin/userhelper\\s*-F\\s*perm\\s*=\\s*x\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-passwd"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource67ref +{ +ResourceID = "[nxFileLine][V-204547][medium][SRG-OS-000037-GPOS-00015]::[RHEL]Baseline"; + ContainsLine = "-a always,exit -F path=/usr/bin/su -F perm=x -F auid>=1000 -F auid!=unset -k privileged-priv_change"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/bin/su\\s*-F\\s*perm\\s*=\\s*x\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-priv_change"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource68ref +{ +ResourceID = "[nxFileLine][V-204548][medium][SRG-OS-000037-GPOS-00015]::[RHEL]Baseline"; + ContainsLine = "-a always,exit -F path=/usr/bin/sudo -F perm=x -F auid>=1000 -F auid!=unset -k privileged-priv_change"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/bin/sudo\\s*-F\\s*perm\\s*=\\s*x\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-priv_change"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource69ref +{ +ResourceID = "[nxFileLine][V-204549.a][medium][SRG-OS-000037-GPOS-00015]::[RHEL]Baseline"; + ContainsLine = "-w /etc/sudoers -p wa -k privileged-actions"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-w /etc/sudoers -p wa -k privileged-actions"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource70ref +{ +ResourceID = "[nxFileLine][V-204549.b][medium][SRG-OS-000037-GPOS-00015]::[RHEL]Baseline"; + ContainsLine = "-w /etc/sudoers.d/ -p wa -k privileged-actions"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-w /etc/sudoers.d/ -p wa -k privileged-actions"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource71ref +{ +ResourceID = "[nxFileLine][V-204550][medium][SRG-OS-000037-GPOS-00015]::[RHEL]Baseline"; + ContainsLine = "-a always,exit -F path=/usr/bin/newgrp -F perm=x -F auid>=1000 -F auid!=unset -k privileged-priv_change"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/bin/newgrp\\s*-F\\s*perm\\s*=\\s*x\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-priv_change"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource72ref +{ +ResourceID = "[nxFileLine][V-204551][medium][SRG-OS-000037-GPOS-00015]::[RHEL]Baseline"; + ContainsLine = "-a always,exit -F path=/usr/bin/chsh -F perm=x -F auid>=1000 -F auid!=unset -k privileged-priv_change"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/bin/chsh\\s*-F\\s*perm\\s*=\\s*x\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-priv_change"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource73ref +{ +ResourceID = "[nxFileLine][V-204552.a][medium][SRG-OS-000042-GPOS-00020]::[RHEL]Baseline"; + ContainsLine = "-a always,exit -F arch=b32 -S mount -F auid>=1000 -F auid!=unset -k privileged-mount"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*mount\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-mount"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource74ref +{ +ResourceID = "[nxFileLine][V-204552.b][medium][SRG-OS-000042-GPOS-00020]::[RHEL]Baseline"; + ContainsLine = "-a always,exit -F arch=b64 -S mount -F auid>=1000 -F auid!=unset -k privileged-mount"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*mount\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-mount"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource75ref +{ +ResourceID = "[nxFileLine][V-204552.c][medium][SRG-OS-000042-GPOS-00020]::[RHEL]Baseline"; + ContainsLine = "-a always,exit -F path=/usr/bin/mount -F perm=x -F auid>=1000 -F auid!=unset -k privileged-mount"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/bin/mount\\s*-F\\s*perm\\s*=\\s*x\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-mount"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource76ref +{ +ResourceID = "[nxFileLine][V-204553][medium][SRG-OS-000042-GPOS-00020]::[RHEL]Baseline"; + ContainsLine = "-a always,exit -F path=/usr/bin/umount -F perm=x -F auid>=1000 -F auid!=unset -k privileged-mount"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/bin/umount\\s*-F\\s*perm\\s*=\\s*x\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-mount"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource77ref +{ +ResourceID = "[nxFileLine][V-204554][medium][SRG-OS-000042-GPOS-00020]::[RHEL]Baseline"; + ContainsLine = "-a always,exit -F path=/usr/sbin/postdrop -F perm=x -F auid>=1000 -F auid!=unset -k privileged-postfix"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/sbin/postdrop\\s*-F\\s*perm\\s*=\\s*x\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-postfix"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource78ref +{ +ResourceID = "[nxFileLine][V-204555][medium][SRG-OS-000042-GPOS-00020]::[RHEL]Baseline"; + ContainsLine = "-a always,exit -F path=/usr/sbin/postqueue -F perm=x -F auid>=1000 -F auid!=unset -k privileged-postfix"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/sbin/postqueue\\s*-F\\s*perm\\s*=\\s*x\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-postfix"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource79ref +{ +ResourceID = "[nxFileLine][V-204556][medium][SRG-OS-000042-GPOS-00020]::[RHEL]Baseline"; + ContainsLine = "-a always,exit -F path=/usr/libexec/openssh/ssh-keysign -F perm=x -F auid>=1000 -F auid!=unset -k privileged-ssh"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/libexec/openssh/ssh-keysign\\s*-F\\s*perm\\s*=\\s*x\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-ssh"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource80ref +{ +ResourceID = "[nxFileLine][V-204557][medium][SRG-OS-000042-GPOS-00020]::[RHEL]Baseline"; + ContainsLine = "-a always,exit -F path=/usr/bin/crontab -F perm=x -F auid>=1000 -F auid!=unset -k privileged-cron"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/bin/crontab\\s*-F\\s*perm\\s*=\\s*x\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-cron"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource81ref +{ +ResourceID = "[nxFileLine][V-204558][medium][SRG-OS-000471-GPOS-00215]::[RHEL]Baseline"; + ContainsLine = "-a always,exit -F path=/usr/sbin/pam_timestamp_check -F perm=x -F auid>=1000 -F auid!=unset -k privileged-pam"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/sbin/pam_timestamp_check\\s*-F\\s*perm\\s*=\\s*x\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-pam"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource82ref +{ +ResourceID = "[nxFileLine][V-204559.a][medium][SRG-OS-000471-GPOS-00216]::[RHEL]Baseline"; + ContainsLine = "-a always,exit -F arch=b32 -S create_module -F auid>=1000 -F auid!=unset -k module-change"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*create_module\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*module-change"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource83ref +{ +ResourceID = "[nxFileLine][V-204559.b][medium][SRG-OS-000471-GPOS-00216]::[RHEL]Baseline"; + ContainsLine = "-a always,exit -F arch=b64 -S create_module -F auid>=1000 -F auid!=unset -k module-change"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*create_module\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*module-change"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource84ref +{ +ResourceID = "[nxFileLine][V-204560.a][medium][SRG-OS-000471-GPOS-00216]::[RHEL]Baseline"; + ContainsLine = "-a always,exit -F arch=b32 -S init_module,finit_module -F auid>=1000 -F auid!=unset -k modulechange"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*init_module,finit_module\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*modulechange"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource85ref +{ +ResourceID = "[nxFileLine][V-204560.b][medium][SRG-OS-000471-GPOS-00216]::[RHEL]Baseline"; + ContainsLine = "-a always,exit -F arch=b64 -S init_module,finit_module -F auid>=1000 -F auid!=unset -k modulechange"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*init_module,finit_module\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*modulechange"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource86ref +{ +ResourceID = "[nxFileLine][V-204562.a][medium][SRG-OS-000471-GPOS-00216]::[RHEL]Baseline"; + ContainsLine = "-a always,exit -F arch=b32 -S delete_module -F auid>=1000 -F auid!=unset -k module-change"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*delete_module\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*module-change"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource87ref +{ +ResourceID = "[nxFileLine][V-204562.b][medium][SRG-OS-000471-GPOS-00216]::[RHEL]Baseline"; + ContainsLine = "-a always,exit -F arch=b64 -S delete_module -F auid>=1000 -F auid!=unset -k module-change"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*delete_module\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*module-change"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource88ref +{ +ResourceID = "[nxFileLine][V-204563][medium][SRG-OS-000471-GPOS-00216]::[RHEL]Baseline"; + ContainsLine = "-a always,exit -F path=/usr/bin/kmod -F perm=x -F auid>=1000 -F auid!=unset -k modules"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/bin/kmod\\s*-F\\s*perm\\s*=\\s*x\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*modules"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource89ref +{ +ResourceID = "[nxFileLine][V-204564][medium][SRG-OS-000004-GPOS-00004]::[RHEL]Baseline"; + ContainsLine = "-w /etc/passwd -p wa -k identity"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-w\\s*/etc/passwd\\s*-p\\s*wa\\s*-k\\s*identity"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource90ref +{ +ResourceID = "[nxFileLine][V-204565][medium][SRG-OS-000004-GPOS-00004]::[RHEL]Baseline"; + ContainsLine = "-w /etc/group -p wa -k identity"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-w\\s*/etc/group\\s*-p\\s*wa\\s*-k\\s*identity"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource91ref +{ +ResourceID = "[nxFileLine][V-204566][medium][SRG-OS-000004-GPOS-00004]::[RHEL]Baseline"; + ContainsLine = "-w /etc/gshadow -p wa -k identity"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-w\\s*/etc/gshadow\\s*-p\\s*wa\\s*-k\\s*identity"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource92ref +{ +ResourceID = "[nxFileLine][V-204567][medium][SRG-OS-000004-GPOS-00004]::[RHEL]Baseline"; + ContainsLine = "-w /etc/shadow -p wa -k identity"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-w\\s*/etc/shadow\\s*-p\\s*wa\\s*-k\\s*identity"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource93ref +{ +ResourceID = "[nxFileLine][V-204568][medium][SRG-OS-000004-GPOS-00004]::[RHEL]Baseline"; + ContainsLine = "-w /etc/security/opasswd -p wa -k identity"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-w\\s*/etc/security/opasswd\\s*-p\\s*wa\\s*-k\\s*identity"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource94ref +{ +ResourceID = "[nxFileLine][V-204572.a][medium][SRG-OS-000466-GPOS-00210]::[RHEL]Baseline"; + ContainsLine = "-a always,exit -F arch=b32 -S unlink,unlinkat,rename,renameat,rmdir -F auid>=1000 -F auid!=unset -k delete"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*unlink,unlinkat,rename,renameat,rmdir\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*delete"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource95ref +{ +ResourceID = "[nxFileLine][V-204572.b][medium][SRG-OS-000466-GPOS-00210]::[RHEL]Baseline"; + ContainsLine = "-a always,exit -F arch=b64 -S unlink,unlinkat,rename,renameat,rmdir -F auid>=1000 -F auid!=unset -k delete"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*unlink,unlinkat,rename,renameat,rmdir\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*delete"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource96ref +{ +ResourceID = "[nxFileLine][V-204578][medium][SRG-OS-000033-GPOS-00014]::[RHEL]Baseline"; + ContainsLine = "Ciphers aes256-ctr,aes192-ctr,aes128-ctr"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/ssh/sshd_config"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "^#\\s*Ciphers.*|^\\s*Ciphers\\s*aes128-ctr.*|^\\s*Ciphers\\s*aes192-ctr.*"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource97ref +{ +ResourceID = "[nxFileLine][V-204579.b][medium][SRG-OS-000163-GPOS-00072]::[RHEL]Baseline"; + ContainsLine = "declare -xr TMOUT=900"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/profile.d/tmout.sh"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "^\\s*TMOUT\\s*=\\s*[0-8]?[0-9]?[0-9]?$|^#\\s*TMOUT.*"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource98ref +{ +ResourceID = "[nxFileLine][V-204579.c][medium][SRG-OS-000163-GPOS-00072]::[RHEL]Baseline"; + ContainsLine = "declare -xr TMOUT=900"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/bashrc"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "^\\s*TMOUT\\s*=\\s*[0-8]?[0-9]?[0-9]?$|^#\\s*TMOUT.*"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource99ref +{ +ResourceID = "[nxFileLine][V-204579.d][medium][SRG-OS-000163-GPOS-00072]::[RHEL]Baseline"; + ContainsLine = "declare -xr TMOUT=900"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/profile"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "^\\s*TMOUT\\s*=\\s*[0-8]?[0-9]?[0-9]?$|^#\\s*TMOUT.*"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource100ref +{ +ResourceID = "[nxFileLine][V-204580][medium][SRG-OS-000023-GPOS-00006]::[RHEL]Baseline"; + ContainsLine = "banner /etc/issue"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/ssh/sshd_config"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*banner\\s*/etc/issue"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource101ref +{ +ResourceID = "[nxFileLine][V-204587][medium][SRG-OS-000163-GPOS-00072]::[RHEL]Baseline"; + ContainsLine = "ClientAliveInterval 600"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/ssh/sshd_config"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "^\\s*ClientAliveInterval\\s*[0-5]?[0-9]?[0-9]?\\s*$|^#\\s*ClientAliveInterval.*|^\\s*ClientAliveInterval\\s*$"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource102ref +{ +ResourceID = "[nxFileLine][V-204588][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; + ContainsLine = "RhostsRSAAuthentication no"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/ssh/sshd_config"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "^#\\s*RhostsRSAAuthentication.*$|^RhostsRSAAuthentication\\s*(?!no\\b)\\w*$"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource103ref +{ +ResourceID = "[nxFileLine][V-204589][medium][SRG-OS-000163-GPOS-00072]::[RHEL]Baseline"; + ContainsLine = "ClientAliveCountMax 0"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/ssh/sshd_config"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "^#\\s*ClientAliveCountMax.*$|^ClientAliveCountMax\\s*(?!0\\b)\\w*$"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource104ref +{ +ResourceID = "[nxFileLine][V-204590][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; + ContainsLine = "IgnoreRhosts yes"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/ssh/sshd_config"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "^#\\s*IgnoreRhosts.*$|^IgnoreRhosts\\s*(?!yes\\b)\\w*$"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource105ref +{ +ResourceID = "[nxFileLine][V-204591][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; + ContainsLine = "PrintLastLog yes"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/ssh/sshd_config"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "^#\\s*PrintLastLog.*$|^PrintLastLog\\s*(?!yes\\b)\\w*$"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource106ref +{ +ResourceID = "[nxFileLine][V-204592][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; + ContainsLine = "PermitRootLogin no"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/ssh/sshd_config"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "^#\\s*PermitRootLogin.*$|^PermitRootLogin\\s*(?!no\\b)\\w*$"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource107ref +{ +ResourceID = "[nxFileLine][V-204593][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; + ContainsLine = "IgnoreUserKnownHosts yes"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/ssh/sshd_config"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "^#\\s*IgnoreUserKnownHosts.*$|^IgnoreUserKnownHosts\\s*(?!yes\\b)\\w*$"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource108ref +{ +ResourceID = "[nxFileLine][V-204594][high][SRG-OS-000074-GPOS-00042]::[RHEL]Baseline"; + ContainsLine = "Protocol 2"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/ssh/sshd_config"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "^#\\s*Protocol.*$|^Protocol\\s*(?!2\\b)\\w*$"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource109ref +{ +ResourceID = "[nxFileLine][V-204595][medium][SRG-OS-000250-GPOS-00093]::[RHEL]Baseline"; + ContainsLine = "MACs hmac-sha2-512,hmac-sha2-256"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/ssh/sshd_config"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*MACs.*|\\s*MACs\\s*hmac-(?!sha2-512).*"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource110ref +{ +ResourceID = "[nxFileLine][V-204598][medium][SRG-OS-000364-GPOS-00151]::[RHEL]Baseline"; + ContainsLine = "GSSAPIAuthentication no"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/ssh/sshd_config"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "^#\\s*GSSAPIAuthentication.*$|^GSSAPIAuthentication\\s*(?!no\\b)\\w*$"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource111ref +{ +ResourceID = "[nxFileLine][V-204599][medium][SRG-OS-000364-GPOS-00151]::[RHEL]Baseline"; + ContainsLine = "KerberosAuthentication no"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/ssh/sshd_config"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "^#\\s*KerberosAuthentication.*$|^KerberosAuthentication\\s*(?!no\\b)\\w*$"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource112ref +{ +ResourceID = "[nxFileLine][V-204600][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; + ContainsLine = "StrictModes yes"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/ssh/sshd_config"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "^#\\s*StrictModes.*$|^StrictModes\\s*(?!yes\\b)\\w*$"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource113ref +{ +ResourceID = "[nxFileLine][V-204601][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; + ContainsLine = "UsePrivilegeSeparation sandbox"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/ssh/sshd_config"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "^#\\s*UsePrivilegeSeparation.*$|^UsePrivilegeSeparation\\s*(?!sandbox\\b)\\w*$"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource114ref +{ +ResourceID = "[nxFileLine][V-204602][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; + ContainsLine = "Compression delayed"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/ssh/sshd_config"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "^#\\s*Compression.*$|^Compression\\s*(?!delayed\\b)\\w*$"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource115ref +{ +ResourceID = "[nxFileLine][V-204622][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; + ContainsLine = "X11Forwarding no"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/ssh/sshd_config"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "^#\\s*X11Forwarding.*$|^X11Forwarding\\s*(?!no\\b)\\w*$"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource116ref +{ +ResourceID = "[nxFileLine][V-233307][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; + ContainsLine = "X11UseLocalhost yes"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/ssh/sshd_config"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*X11UseLocalhost\\s*yes"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource117ref +{ +ResourceID = "[nxFileLine][V-255925][medium][SRG-OS-000033-GPOS-00014]::[RHEL]Baseline"; + ContainsLine = "KexAlgorithms ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/ssh/sshd_config"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*KexAlgorithms\\s*ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxServiceResource as $MSFT_nxServiceResource1ref +{ +ResourceID = "[nxService][V-204451][medium][SRG-OS-000114-GPOS-00059]::[RHEL]Baseline"; + Controller = "systemd"; + Enabled = False; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxService.ps1::13::9::nxService"; + Name = "autofs"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxServiceResource as $MSFT_nxServiceResource2ref +{ +ResourceID = "[nxService][V-204492][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; + Controller = "systemd"; + Enabled = False; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxService.ps1::13::9::nxService"; + Name = "kdump"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxServiceResource as $MSFT_nxServiceResource3ref +{ +ResourceID = "[nxService][V-204503][medium][SRG-OS-000038-GPOS-00016]::[RHEL]Baseline"; + Controller = "systemd"; + State = "Running"; + Enabled = True; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxService.ps1::22::9::nxService"; + Name = "auditd"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxServiceResource as $MSFT_nxServiceResource4ref +{ +ResourceID = "[nxService][V-204586][medium][SRG-OS-000423-GPOS-00187]::[RHEL]Baseline"; + Controller = "systemd"; + State = "Running"; + Enabled = True; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxService.ps1::22::9::nxService"; + Name = "sshd"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxServiceResource as $MSFT_nxServiceResource5ref +{ +ResourceID = "[nxService][V-204604.b][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; + Controller = "systemd"; + State = "Running"; + Enabled = True; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxService.ps1::22::9::nxService"; + Name = "firewalld"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxScriptResource as $MSFT_nxScriptResource1ref +{ +ResourceID = "[nxScript][V-204399.b][medium][[Skip] SRG-OS-000029-GPOS-00010]::[RHEL]Baseline"; + GetScript = "#!/bin/bash\necho [V-204399.b][medium][[Skip] SRG-OS-000029-GPOS-00010]"; + TestScript = "#!/bin/bash\nexit 0"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxScript.skip.ps1::10::5::nxScript"; + SetScript = "#!/bin/bash"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxScriptResource as $MSFT_nxScriptResource2ref +{ +ResourceID = "[nxScript][V-204400][medium][[Skip] SRG-OS-000029-GPOS-00010]::[RHEL]Baseline"; + GetScript = "#!/bin/bash\necho [V-204400][medium][[Skip] SRG-OS-000029-GPOS-00010]"; + TestScript = "#!/bin/bash\nexit 0"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxScript.skip.ps1::10::5::nxScript"; + SetScript = "#!/bin/bash"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxScriptResource as $MSFT_nxScriptResource3ref +{ +ResourceID = "[nxScript][V-204403][medium][[Skip] SRG-OS-000029-GPOS-00010]::[RHEL]Baseline"; + GetScript = "#!/bin/bash\necho [V-204403][medium][[Skip] SRG-OS-000029-GPOS-00010]"; + TestScript = "#!/bin/bash\nexit 0"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxScript.skip.ps1::10::5::nxScript"; + SetScript = "#!/bin/bash"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxScriptResource as $MSFT_nxScriptResource4ref +{ +ResourceID = "[nxScript][V-204509][medium][[Skip] SRG-OS-000342-GPOS-00133]::[RHEL]Baseline"; + GetScript = "#!/bin/bash\necho [V-204509][medium][[Skip] SRG-OS-000342-GPOS-00133]"; + TestScript = "#!/bin/bash\nexit 0"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxScript.skip.ps1::10::5::nxScript"; + SetScript = "#!/bin/bash"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxScriptResource as $MSFT_nxScriptResource5ref +{ +ResourceID = "[nxScript][V-204513][medium][[Skip] SRG-OS-000343-GPOS-00134]::[RHEL]Baseline"; + GetScript = "#!/bin/bash\necho [V-204513][medium][[Skip] SRG-OS-000343-GPOS-00134]"; + TestScript = "#!/bin/bash\nexit 0"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxScript.skip.ps1::10::5::nxScript"; + SetScript = "#!/bin/bash"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxScriptResource as $MSFT_nxScriptResource6ref +{ +ResourceID = "[nxScript][V-204623][medium][[Skip] SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; + GetScript = "#!/bin/bash\necho [V-204623][medium][[Skip] SRG-OS-000480-GPOS-00227]"; + TestScript = "#!/bin/bash\nexit 0"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxScript.skip.ps1::10::5::nxScript"; + SetScript = "#!/bin/bash"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxScriptResource as $MSFT_nxScriptResource7ref +{ +ResourceID = "[nxScript][V-244557][medium][[Skip] SRG-OS-000080-GPOS-00048]::[RHEL]Baseline"; + GetScript = "#!/bin/bash\necho [V-244557][medium][[Skip] SRG-OS-000080-GPOS-00048]"; + TestScript = "#!/bin/bash\nexit 0"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxScript.skip.ps1::10::5::nxScript"; + SetScript = "#!/bin/bash"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxScriptResource as $MSFT_nxScriptResource8ref +{ +ResourceID = "[nxScript][V-244558][medium][[Skip] SRG-OS-000080-GPOS-00048]::[RHEL]Baseline"; + GetScript = "#!/bin/bash\necho [V-244558][medium][[Skip] SRG-OS-000080-GPOS-00048]"; + TestScript = "#!/bin/bash\nexit 0"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxScript.skip.ps1::10::5::nxScript"; + SetScript = "#!/bin/bash"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxScriptResource as $MSFT_nxScriptResource9ref +{ +ResourceID = "[nxScript][V-204399.a][medium][[Skip] SRG-OS-000029-GPOS-00010]::[RHEL]Baseline"; + GetScript = "#!/bin/bash\necho [V-204399.a][medium][[Skip] SRG-OS-000029-GPOS-00010]"; + TestScript = "#!/bin/bash\nexit 0"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxScript.skip.ps1::10::5::nxScript"; + SetScript = "#!/bin/bash"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxScriptResource as $MSFT_nxScriptResource10ref +{ +ResourceID = "[nxScript][V-255926][medium][[Skip] SRG-OS-000029-GPOS-00010]::[RHEL]Baseline"; + GetScript = "#!/bin/bash\necho [V-255926][medium][[Skip] SRG-OS-000029-GPOS-00010]"; + TestScript = "#!/bin/bash\nexit 0"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxScript.skip.ps1::10::5::nxScript"; + SetScript = "#!/bin/bash"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of OMI_ConfigurationDocument + + { + Version="2.0.0"; + + MinimumCompatibleVersion = "1.0.0"; + + CompatibleVersionAdditionalProperties= {"Omi_BaseResource:ConfigurationName"}; + + Author="Microsoft"; + + GenerationDate="03/09/2023 14:17:33"; + + GenerationHost="Microsoft"; + + Name="LinuxBaseLine"; + + }; + diff --git a/stig/linux/config/CentOS78.mof b/stig/linux/config/CentOS78.mof index aea3180..5070209 100644 --- a/stig/linux/config/CentOS78.mof +++ b/stig/linux/config/CentOS78.mof @@ -1,2118 +1,1829 @@ -/* -@TargetNode='CentOS78' -@GeneratedBy=Microsoft -@GenerationDate=06/30/2022 11:38:45 -@GenerationHost=Microsoft -*/ - -instance of MSFT_nxPackageResource as $MSFT_nxPackageResource1ref -{ -ResourceID = "[nxPackage][V-204442][high][SRG-OS-000095-GPOS-00049]::[RHEL]Baseline"; - Ensure = "Absent"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxPackage.ps1::8::5::nxPackage"; - Name = "rsh-server"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxPackageResource as $MSFT_nxPackageResource2ref -{ -ResourceID = "[nxPackage][V-204443][high][SRG-OS-000095-GPOS-00049]::[RHEL]Baseline"; - Ensure = "Absent"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxPackage.ps1::8::5::nxPackage"; - Name = "ypserv"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxPackageResource as $MSFT_nxPackageResource3ref -{ -ResourceID = "[nxPackage][V-204497][high][SRG-OS-000033-GPOS-00014]::[RHEL]Baseline"; - Ensure = "Present"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxPackage.ps1::8::5::nxPackage"; - Name = "dracut-fips"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxPackageResource as $MSFT_nxPackageResource4ref -{ -ResourceID = "[nxPackage][V-204498][low][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; - Ensure = "Present"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxPackage.ps1::8::5::nxPackage"; - Name = "aide"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxPackageResource as $MSFT_nxPackageResource5ref -{ -ResourceID = "[nxPackage][V-204502][high][SRG-OS-000095-GPOS-00049]::[RHEL]Baseline"; - Ensure = "Absent"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxPackage.ps1::8::5::nxPackage"; - Name = "telnet-server"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxPackageResource as $MSFT_nxPackageResource6ref -{ -ResourceID = "[nxPackage][V-204585][medium][SRG-OS-000423-GPOS-00187]::[RHEL]Baseline"; - Ensure = "Present"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxPackage.ps1::8::5::nxPackage"; - Name = "openssh-server"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxPackageResource as $MSFT_nxPackageResource7ref -{ -ResourceID = "[nxPackage][V-204604.a][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; - Ensure = "Present"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxPackage.ps1::8::5::nxPackage"; - Name = "firewalld"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxPackageResource as $MSFT_nxPackageResource8ref -{ -ResourceID = "[nxPackage][V-204620][high][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; - Ensure = "Absent"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxPackage.ps1::8::5::nxPackage"; - Name = "vsftpd"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxPackageResource as $MSFT_nxPackageResource9ref -{ -ResourceID = "[nxPackage][V-204621][high][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; - Ensure = "Absent"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxPackage.ps1::8::5::nxPackage"; - Name = "tftp-server"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxPackageResource as $MSFT_nxPackageResource10ref -{ -ResourceID = "[nxPackage][V-204631][medium][SRG-OS-000375-GPOS-00160]::[RHEL]Baseline"; - Ensure = "Present"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxPackage.ps1::8::5::nxPackage"; - Name = "pam_pkcs11"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileResource as $MSFT_nxFileResource1ref -{ -ResourceID = "[nxFile][V-204395][medium][SRG-OS-000023-GPOS-00006]::[RHEL]Baseline"; - Contents = "You are accessing a U.S. Government (USG) Information System (IS) that is provided for USG-authorized use only.\n\nBy using this IS (which includes any device attached to this IS), you consent to the following conditions:\n\n-The USG routinely intercepts and monitors communications on this IS for purposes including, but not limited to, penetration testing, COMSEC monitoring, network operations and defense, personnel misconduct (PM), law enforcement (LE), and counterintelligence (CI) investigations.\n\n-At any time, the USG may inspect and seize data stored on this IS.\n\n-Communications using, or data stored on, this IS are not private, are subject to routine monitoring, interception, and search, and may be disclosed or used for any USG-authorized purpose.\n\n-This IS includes security measures (e.g., authentication and access controls) to protect USG interests--not for your personal benefit or privacy.\n\n-Notwithstanding the above, using this IS does not constitute consent to PM, LE or CI investigative searching or monitoring of the content of privileged communications, or work product, related to personal representation or services by attorneys, psychotherapists, or clergy, and their assistants. Such communications and work product are private and confidential. See User Agreement for details."; - DestinationPath = "/etc/issue"; - ModuleName = "nx"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; - ModuleVersion = "1.0"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileResource as $MSFT_nxFileResource2ref -{ -ResourceID = "[nxFile][V-204449.a][medium][SRG-OS-000114-GPOS-00059]::[RHEL]Baseline"; - Contents = ""; - DestinationPath = "/etc/modprobe.d/usb-storage.conf"; - ModuleName = "nx"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; - ModuleVersion = "1.0"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileResource as $MSFT_nxFileResource3ref -{ -ResourceID = "[nxFile][V-204449.b][medium][SRG-OS-000114-GPOS-00059]::[RHEL]Baseline"; - Contents = ""; - DestinationPath = "/etc/modprobe.d/blacklist.conf"; - ModuleName = "nx"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; - ModuleVersion = "1.0"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileResource as $MSFT_nxFileResource4ref -{ -ResourceID = "[nxFile][V-204450.a][medium][SRG-OS-000378-GPOS-00163]::[RHEL]Baseline"; - Contents = ""; - DestinationPath = "/etc/modprobe.d/dccp.conf"; - ModuleName = "nx"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; - ModuleVersion = "1.0"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileResource as $MSFT_nxFileResource5ref -{ -ResourceID = "[nxFile][V-204576][low][SRG-OS-000027-GPOS-00008]::[RHEL]Baseline"; - Contents = "* hard maxlogins 10"; - DestinationPath = "/etc/security/limits.d/204576-powerstig.conf"; - ModuleName = "nx"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; - ModuleVersion = "1.0"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileResource as $MSFT_nxFileResource6ref -{ -ResourceID = "[nxFile][V-204579.a][medium][SRG-OS-000163-GPOS-00072]::[RHEL]Baseline"; - Contents = ""; - DestinationPath = "/etc/profile.d/tmout.sh"; - ModuleName = "nx"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; - ModuleVersion = "1.0"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileResource as $MSFT_nxFileResource7ref -{ -ResourceID = "[nxFile][V-204584][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; - Contents = "kernel.randomize_va_space = 2"; - DestinationPath = "/etc/sysctl.d/204584-powerstig.conf"; - ModuleName = "nx"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; - ModuleVersion = "1.0"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileResource as $MSFT_nxFileResource8ref -{ -ResourceID = "[nxFile][V-204609][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; - Contents = "net.ipv4.conf.all.accept_source_route = 0"; - DestinationPath = "/etc/sysctl.d/204609-powerstig.conf"; - ModuleName = "nx"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; - ModuleVersion = "1.0"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileResource as $MSFT_nxFileResource9ref -{ -ResourceID = "[nxFile][V-204610][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; - Contents = "net.ipv4.conf.all.rp_filter = 1"; - DestinationPath = "/etc/sysctl.d/204610-powerstig.conf"; - ModuleName = "nx"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; - ModuleVersion = "1.0"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileResource as $MSFT_nxFileResource10ref -{ -ResourceID = "[nxFile][V-204611][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; - Contents = "net.ipv4.conf.default.rp_filter = 1"; - DestinationPath = "/etc/sysctl.d/204611-powerstig.conf"; - ModuleName = "nx"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; - ModuleVersion = "1.0"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileResource as $MSFT_nxFileResource11ref -{ -ResourceID = "[nxFile][V-204612][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; - Contents = "net.ipv4.conf.default.accept_source_route = 0"; - DestinationPath = "/etc/sysctl.d/204612-powerstig.conf"; - ModuleName = "nx"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; - ModuleVersion = "1.0"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileResource as $MSFT_nxFileResource12ref -{ -ResourceID = "[nxFile][V-204613][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; - Contents = "net.ipv4.icmp_echo_ignore_broadcasts = 1"; - DestinationPath = "/etc/sysctl.d/204613-powerstig.conf"; - ModuleName = "nx"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; - ModuleVersion = "1.0"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileResource as $MSFT_nxFileResource13ref -{ -ResourceID = "[nxFile][V-204614][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; - Contents = "net.ipv4.conf.default.accept_redirects = 0"; - DestinationPath = "/etc/sysctl.d/204614-powerstig.conf"; - ModuleName = "nx"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; - ModuleVersion = "1.0"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileResource as $MSFT_nxFileResource14ref -{ -ResourceID = "[nxFile][V-204615][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; - Contents = "net.ipv4.conf.all.accept_redirects = 0"; - DestinationPath = "/etc/sysctl.d/204615-powerstig.conf"; - ModuleName = "nx"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; - ModuleVersion = "1.0"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileResource as $MSFT_nxFileResource15ref -{ -ResourceID = "[nxFile][V-204616][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; - Contents = "net.ipv4.conf.default.send_redirects = 0"; - DestinationPath = "/etc/sysctl.d/204616-powerstig.conf"; - ModuleName = "nx"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; - ModuleVersion = "1.0"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileResource as $MSFT_nxFileResource16ref -{ -ResourceID = "[nxFile][V-204617][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; - Contents = "net.ipv4.conf.all.send_redirects = 0"; - DestinationPath = "/etc/sysctl.d/204617-powerstig.conf"; - ModuleName = "nx"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; - ModuleVersion = "1.0"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileResource as $MSFT_nxFileResource17ref -{ -ResourceID = "[nxFile][V-204625][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; - Contents = "net.ipv4.ip_forward = 0"; - DestinationPath = "/etc/sysctl.d/204625-powerstig.conf"; - ModuleName = "nx"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; - ModuleVersion = "1.0"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileResource as $MSFT_nxFileResource18ref -{ -ResourceID = "[nxFile][V-204630][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; - Contents = "net.ipv6.conf.all.accept_source_route = 0"; - DestinationPath = "/etc/sysctl.d/204630-powerstig.conf"; - ModuleName = "nx"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; - ModuleVersion = "1.0"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileResource as $MSFT_nxFileResource19ref -{ -ResourceID = "[nxFile][V-237634.a][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; - Contents = "Defaults !targetpw"; - DestinationPath = "/etc/sudoers.d/237634a-powerstig.conf"; - ModuleName = "nx"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; - ModuleVersion = "1.0"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileResource as $MSFT_nxFileResource20ref -{ -ResourceID = "[nxFile][V-237634.b][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; - Contents = "Defaults !rootpw"; - DestinationPath = "/etc/sudoers.d/237634b-powerstig.conf"; - ModuleName = "nx"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; - ModuleVersion = "1.0"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileResource as $MSFT_nxFileResource21ref -{ -ResourceID = "[nxFile][V-237634.c][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; - Contents = "Defaults !runaspw"; - DestinationPath = "/etc/sudoers.d/237634c-powerstig.conf"; - ModuleName = "nx"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; - ModuleVersion = "1.0"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileResource as $MSFT_nxFileResource22ref -{ -ResourceID = "[nxFile][V-237635][medium][SRG-OS-000373-GPOS-00156]::[RHEL]Baseline"; - Contents = "Defaults timestamp_timeout=0"; - DestinationPath = "/etc/sudoers.d/237635-powerstig.conf"; - ModuleName = "nx"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; - ModuleVersion = "1.0"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileResource as $MSFT_nxFileResource23ref -{ -ResourceID = "[nxFile][V-250314][medium][SRG-OS-000324-GPOS-00125]::[RHEL]Baseline"; - Contents = "%wheel ALL=(ALL) TYPE=sysadm_t ROLE=sysadm_r ALL"; - DestinationPath = "/etc/sudoers.d/250314-powerstig.conf"; - ModuleName = "nx"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; - ModuleVersion = "1.0"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource1ref -{ -ResourceID = "[nxFileLine][V-204405][medium][SRG-OS-000069-GPOS-00037]::[RHEL]Baseline"; - ContainsLine = "password substack system-auth"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/pam.d/passwd"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "^\\s*password(?:\\t*|\\s*)substack\\tsystem-auth\\s*$|^#\\s*password\\s*substack\\s*system-auth.*"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource2ref -{ -ResourceID = "[nxFileLine][V-204407][medium][SRG-OS-000069-GPOS-00037]::[RHEL]Baseline"; - ContainsLine = "ucredit = -1"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/security/pwquality.conf"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "^#\\s*ucredit.*$|^ucredit\\s*=\\s*(?!-1\\b)\\w*$"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource3ref -{ -ResourceID = "[nxFileLine][V-204408][medium][SRG-OS-000070-GPOS-00038]::[RHEL]Baseline"; - ContainsLine = "lcredit = -1"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/security/pwquality.conf"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "^#\\s*lcredit.*$|^lcredit\\s*=\\s*(?!-1\\b)\\w*$"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource4ref -{ -ResourceID = "[nxFileLine][V-204409][medium][SRG-OS-000071-GPOS-00039]::[RHEL]Baseline"; - ContainsLine = "dcredit = -1"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/security/pwquality.conf"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "^#\\s*dcredit.*$|^dcredit\\s*=\\s*(?!-1\\b)\\w*$"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource5ref -{ -ResourceID = "[nxFileLine][V-204410][medium][SRG-OS-000266-GPOS-00101]::[RHEL]Baseline"; - ContainsLine = "ocredit=-1"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/security/pwquality.conf"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "^#\\s*ocredit.*$|^ocredit\\s*=\\s*(?!-1)\\w*$"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource6ref -{ -ResourceID = "[nxFileLine][V-204411][medium][SRG-OS-000072-GPOS-00040]::[RHEL]Baseline"; - ContainsLine = "difok = 8"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/security/pwquality.conf"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*difok\\s*=.*|^\\s*difok\\s*=\\s*(-|)[0-7]$"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource7ref -{ -ResourceID = "[nxFileLine][V-204412][medium][SRG-OS-000072-GPOS-00040]::[RHEL]Baseline"; - ContainsLine = "minclass = 4"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/security/pwquality.conf"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "^#\\s*minclass\\s*=.*|^\\s*minclass\\s*=\\s*(?!\\d{2,})[1-3]"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource8ref -{ -ResourceID = "[nxFileLine][V-204413][medium][SRG-OS-000072-GPOS-00040]::[RHEL]Baseline"; - ContainsLine = "maxrepeat = 3"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/security/pwquality.conf"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "^#\\s*maxrepeat\\s*=.*|^\\s*maxrepeat\\s*=\\s*(?:\\d{2,}|[4-9])"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource9ref -{ -ResourceID = "[nxFileLine][V-204414][medium][SRG-OS-000072-GPOS-00040]::[RHEL]Baseline"; - ContainsLine = "maxclassrepeat = 4"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/security/pwquality.conf"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "^#\\s*maxclassrepeat\\s*=.*|^\\s*maxclassrepeat\\s*=\\s*(?:\\d{2,}|[1-3|5-9])"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource10ref -{ -ResourceID = "[nxFileLine][V-204416][medium][SRG-OS-000073-GPOS-00041]::[RHEL]Baseline"; - ContainsLine = "ENCRYPT_METHOD SHA512"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/login.defs"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*ENCRYPT_METHOD\\s*SHA512"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource11ref -{ -ResourceID = "[nxFileLine][V-204418][medium][SRG-OS-000075-GPOS-00043]::[RHEL]Baseline"; - ContainsLine = "PASS_MIN_DAYS 1"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/login.defs"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "^\\s*PASS_MIN_DAYS\\s*[0]*$|#\\s*PASS_MIN_DAYS.*"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource12ref -{ -ResourceID = "[nxFileLine][V-204420][medium][SRG-OS-000076-GPOS-00044]::[RHEL]Baseline"; - ContainsLine = "PASS_MAX_DAYS 60"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/login.defs"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "^\\s*PASS_MAX_DAYS\\s*([6][1-9]|[7-9][0-9]|\\d{3,})$|#\\s*PASS_MAX_DAYS.*"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource13ref -{ -ResourceID = "[nxFileLine][V-204423][medium][SRG-OS-000078-GPOS-00046]::[RHEL]Baseline"; - ContainsLine = "minlen = 15"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/security/pwquality.conf"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "^\\s*minlen\\s*=\\s*([0-9]|[1][1-4])$|#\\s*minlen.*"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource14ref -{ -ResourceID = "[nxFileLine][V-204425][high][SRG-OS-000106-GPOS-00053]::[RHEL]Baseline"; - ContainsLine = "PermitEmptyPasswords no"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/ssh/sshd_config"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "^#\\s*PermitEmptyPasswords.*$|^PermitEmptyPasswords\\s*(?!no\\b)\\w*$"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource15ref -{ -ResourceID = "[nxFileLine][V-204426][medium][SRG-OS-000118-GPOS-00060]::[RHEL]Baseline"; - ContainsLine = "INACTIVE=35"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/default/useradd"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "^#\\s*INACTIVE\\s*=.*|^\\s*INACTIVE\\s*=\\s*(3[5-9]|[4-9]\\d+|\\d{3,})"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource16ref -{ -ResourceID = "[nxFileLine][V-204431][medium][SRG-OS-000480-GPOS-00226]::[RHEL]Baseline"; - ContainsLine = "FAIL_DELAY 4"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/login.defs"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "^#\\s*FAIL_DELAY.*|^FAIL_DELAY\\s*(?!\\d{2,})[1-3]"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource17ref -{ -ResourceID = "[nxFileLine][V-204434][medium][SRG-OS-000480-GPOS-00229]::[RHEL]Baseline"; - ContainsLine = "PermitUserEnvironment no"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/ssh/sshd_config"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "^#\\s*PermitUserEnvironment.*$|^PermitUserEnvironment\\s*(?!no\\b)\\w*$"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource18ref -{ -ResourceID = "[nxFileLine][V-204435][medium][SRG-OS-000480-GPOS-00229]::[RHEL]Baseline"; - ContainsLine = "HostbasedAuthentication no"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/ssh/sshd_config"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "^#\\s*HostbasedAuthentication.*$|^HostbasedAuthentication\\s*(?!no\\b)\\w*$"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource19ref -{ -ResourceID = "[nxFileLine][V-204447][high][SRG-OS-000366-GPOS-00153]::[RHEL]Baseline"; - ContainsLine = "gpgcheck=1"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/yum.conf"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*gpgcheck\\s*=\\s*1"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource20ref -{ -ResourceID = "[nxFileLine][V-204448][high][SRG-OS-000366-GPOS-00153]::[RHEL]Baseline"; - ContainsLine = "localpkg_gpgcheck=1"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/yum.conf"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*localpkg_gpgcheck\\s*=\\s*1"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource21ref -{ -ResourceID = "[nxFileLine][V-204449.c][medium][SRG-OS-000114-GPOS-00059]::[RHEL]Baseline"; - ContainsLine = "install usb-storage /bin/true"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/modprobe.d/usb-storage.conf"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*install\\s*usb-storage\\s*/bin/true"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource22ref -{ -ResourceID = "[nxFileLine][V-204449.d][medium][SRG-OS-000114-GPOS-00059]::[RHEL]Baseline"; - ContainsLine = "blacklist usb-storage"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/modprobe.d/blacklist.conf"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*blacklist\\s*usb-storage"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource23ref -{ -ResourceID = "[nxFileLine][V-204450.b][medium][SRG-OS-000378-GPOS-00163]::[RHEL]Baseline"; - ContainsLine = "install dccp /bin/true"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/modprobe.d/dccp.conf"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*install\\s*dccp\\s*/bin/true"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource24ref -{ -ResourceID = "[nxFileLine][V-204450.c][medium][SRG-OS-000378-GPOS-00163]::[RHEL]Baseline"; - ContainsLine = "blacklist dccp"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/modprobe.d/blacklist.conf"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*blacklist\\s*dccp"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource25ref -{ -ResourceID = "[nxFileLine][V-204452][low][SRG-OS-000437-GPOS-00194]::[RHEL]Baseline"; - ContainsLine = "clean_requirements_on_remove=1"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/yum.conf"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*clean_requirements_on_remove\\s*=\\s*1"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource26ref -{ -ResourceID = "[nxFileLine][V-204453][medium][SRG-OS-000445-GPOS-00199]::[RHEL]Baseline"; - ContainsLine = "SELINUX=enforcing"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/selinux/config"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "^#\\s*SELINUX.*$|^SELINUX\\s*=\\s*(?!enforcing)\\w*$"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource27ref -{ -ResourceID = "[nxFileLine][V-204454][medium][SRG-OS-000445-GPOS-00199]::[RHEL]Baseline"; - ContainsLine = "SELINUXTYPE=targeted"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/selinux/config"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "^#\\s*SELINUXTYPE.*$|^SELINUXTYPE\\s*=\\s*(?!targeted\\b)\\w*$"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource28ref -{ -ResourceID = "[nxFileLine][V-204457][medium][SRG-OS-000480-GPOS-00228]::[RHEL]Baseline"; - ContainsLine = "UMASK 077"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/login.defs"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "^\\s*UMASK(?!\\s077\\b)\\s*\\d*\\s*$|^#\\s*UMASK.*"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource29ref -{ -ResourceID = "[nxFileLine][V-204466][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; - ContainsLine = "CREATE_HOME yes"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/login.defs"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "^#\\s*CREATE_HOME.*$|^CREATE_HOME\\s*(?!yes\\b)\\w*$|^CREATE_HOME\\t.*"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource30ref -{ -ResourceID = "[nxFileLine][V-204504][medium][SRG-OS-000046-GPOS-00022]::[RHEL]Baseline"; - ContainsLine = "-f 2"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "^#\\s*-f\\s+2|^\\s*-f\\s*1"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileResource as $MSFT_nxFileResource24ref -{ -SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::29::9::nxFile"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - ResourceID = "[nxFile][V-204506.a][medium][SRG-OS-000342-GPOS-00133]::[RHEL]Baseline"; - DestinationPath = "/etc/audisp/plugins.d/au-remote.conf"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource31ref -{ -ResourceID = "[nxFileLine][V-204506.a][medium][SRG-OS-000342-GPOS-00133]::[RHEL]Baseline"; - ContainsLine = "active = yes"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audisp/plugins.d/au-remote.conf"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "\\s*active\\s*=\\s*no|active=yes|#\\s*active\\s*=.*"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource32ref -{ -ResourceID = "[nxFileLine][V-204506.b][medium][SRG-OS-000342-GPOS-00133]::[RHEL]Baseline"; - ContainsLine = "direction = out"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audisp/plugins.d/au-remote.conf"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*direction\\s*=\\s*out"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource33ref -{ -ResourceID = "[nxFileLine][V-204506.c][medium][SRG-OS-000342-GPOS-00133]::[RHEL]Baseline"; - ContainsLine = "path = /sbin/audisp-remote"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audisp/plugins.d/au-remote.conf"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*path\\s*=\\s*/sbin/audisp-remote"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource34ref -{ -ResourceID = "[nxFileLine][V-204506.d][medium][SRG-OS-000342-GPOS-00133]::[RHEL]Baseline"; - ContainsLine = "type = always"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audisp/plugins.d/au-remote.conf"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*type\\s*=\\s*always"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource35ref -{ -ResourceID = "[nxFileLine][V-204507][medium][SRG-OS-000342-GPOS-00133]::[RHEL]Baseline"; - ContainsLine = "overflow_action = syslog"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audisp/audispd.conf"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "^#\\s*overflow_action.*$|^overflow_action\\s*=\\s*(?!syslog$)\\w*$"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource36ref -{ -ResourceID = "[nxFileLine][V-204508][medium][SRG-OS-000342-GPOS-00133]::[RHEL]Baseline"; - ContainsLine = "name_format = hostname"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audisp/audispd.conf"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "^#\\s*name_format.*$|^name_format\\s*=\\s*(?!hostname$)\\w*$"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileResource as $MSFT_nxFileResource25ref -{ -SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::19::9::nxFile"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - ResourceID = "[nxFile][V-204510][medium][SRG-OS-000342-GPOS-00133]::[RHEL]Baseline"; - DestinationPath = "/etc/audisp/audisp-remote.conf"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource37ref -{ -ResourceID = "[nxFileLine][V-204510][medium][SRG-OS-000342-GPOS-00133]::[RHEL]Baseline"; - ContainsLine = "enable_krb5 = yes"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audisp/audisp-remote.conf"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*enable_krb5\\s*=\\s*yes"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource38ref -{ -ResourceID = "[nxFileLine][V-204511][medium][SRG-OS-000342-GPOS-00133]::[RHEL]Baseline"; - ContainsLine = "disk_full_action = single"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audisp/audisp-remote.conf"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "^#\\s*disk_full_action\\s*=.*|^disk_full_action\\s*=\\s*(?!halt\\b|single\\b|syslog\\b)\\w+"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource39ref -{ -ResourceID = "[nxFileLine][V-204512][medium][SRG-OS-000342-GPOS-00133]::[RHEL]Baseline"; - ContainsLine = "network_failure_action = syslog"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audisp/audisp-remote.conf"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "^#\\s*network_failure_action\\s*=.*|^network_failure_action\\s*=\\s*(?!halt\\b|single\\b|syslog\\b)\\w+"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource40ref -{ -ResourceID = "[nxFileLine][V-204514][medium][SRG-OS-000343-GPOS-00134]::[RHEL]Baseline"; - ContainsLine = "space_left_action = email"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/auditd.conf"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "^#\\s*space_left_action.*$|^space_left_action\\s*=\\s*(?!email$)\\w*$"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource41ref -{ -ResourceID = "[nxFileLine][V-204515][medium][SRG-OS-000343-GPOS-00134]::[RHEL]Baseline"; - ContainsLine = "action_mail_acct = root"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/auditd.conf"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "^#\\s*action_mail_acct.*|^action_mail_acct\\s*=\\s*(?!root\\b)\\w+"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource42ref -{ -ResourceID = "[nxFileLine][V-204516.a][medium][SRG-OS-000327-GPOS-00127]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S execve -C uid!=euid -F euid=0 -k setuid"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*execve\\s*-C\\s*uid!\\s*=\\s*euid\\s*-F\\s*euid\\s*=\\s*0\\s*-k\\s*setuid"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource43ref -{ -ResourceID = "[nxFileLine][V-204516.b][medium][SRG-OS-000327-GPOS-00127]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S execve -C uid!=euid -F euid=0 -k setuid"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*execve\\s*-C\\s*uid!\\s*=\\s*euid\\s*-F\\s*euid\\s*=\\s*0\\s*-k\\s*setuid"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource44ref -{ -ResourceID = "[nxFileLine][V-204516.c][medium][SRG-OS-000327-GPOS-00127]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S execve -C gid!=egid -F egid=0 -k setgid"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*execve\\s*-C\\s*gid!\\s*=\\s*egid\\s*-F\\s*egid\\s*=\\s*0\\s*-k\\s*setgid"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource45ref -{ -ResourceID = "[nxFileLine][V-204516.d][medium][SRG-OS-000327-GPOS-00127]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S execve -C gid!=egid -F egid=0 -k setgid"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*execve\\s*-C\\s*gid!\\s*=\\s*egid\\s*-F\\s*egid\\s*=\\s*0\\s*-k\\s*setgid"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource46ref -{ -ResourceID = "[nxFileLine][V-204517.a][medium][SRG-OS-000064-GPOS-00033]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S chown,fchown,fchownat,lchown -F auid>=1000 -F auid!=unset -k perm_mod"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*chown,fchown,fchownat,lchown\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*perm_mod"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource47ref -{ -ResourceID = "[nxFileLine][V-204517.b][medium][SRG-OS-000064-GPOS-00033]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S chown,fchown,fchownat,lchown -F auid>=1000 -F auid!=unset -k perm_mod"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*chown,fchown,fchownat,lchown\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*perm_mod"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource48ref -{ -ResourceID = "[nxFileLine][V-204521.a][medium][SRG-OS-000458-GPOS-00203]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S chmod,fchmod,fchmodat -F auid>=1000 -F auid!=unset -k perm_mod"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*chmod,fchmod,fchmodat\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*perm_mod"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource49ref -{ -ResourceID = "[nxFileLine][V-204521.b][medium][SRG-OS-000458-GPOS-00203]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S chmod,fchmod,fchmodat -F auid>=1000 -F auid!=unset -k perm_mod"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*chmod,fchmod,fchmodat\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*perm_mod"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource50ref -{ -ResourceID = "[nxFileLine][V-204524.a][medium][SRG-OS-000458-GPOS-00203]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S setxattr,fsetxattr,lsetxattr,removexattr,fremovexattr,lremovexattr -F auid>=1000 -F auid!=unset -k perm_mod"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*setxattr,fsetxattr,lsetxattr,removexattr,fremovexattr,lremovexattr\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*perm_mod"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource51ref -{ -ResourceID = "[nxFileLine][V-204524.b][medium][SRG-OS-000458-GPOS-00203]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S setxattr,fsetxattr,lsetxattr,removexattr,fremovexattr,lremovexattr -F auid>=1000 -F auid!=unset -k perm_mod"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*setxattr,fsetxattr,lsetxattr,removexattr,fremovexattr,lremovexattr\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*perm_mod"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource52ref -{ -ResourceID = "[nxFileLine][V-204531.a][medium][SRG-OS-000064-GPOS-00033]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S creat,open,openat,open_by_handle_at,truncate,ftruncate -F exit=-EPERM -F auid>=1000 -F auid!=unset -k access"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*creat,open,openat,open_by_handle_at,truncate,ftruncate\\s*-F\\s*exit\\s*=\\s*-EPERM\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*access"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource53ref -{ -ResourceID = "[nxFileLine][V-204531.b][medium][SRG-OS-000064-GPOS-00033]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S creat,open,openat,open_by_handle_at,truncate,ftruncate -F exit=-EACCES -F auid>=1000 -F auid!=unset -k access"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*creat,open,openat,open_by_handle_at,truncate,ftruncate\\s*-F\\s*exit\\s*=\\s*-EACCES\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*access"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource54ref -{ -ResourceID = "[nxFileLine][V-204531.c][medium][SRG-OS-000064-GPOS-00033]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S creat,open,openat,open_by_handle_at,truncate,ftruncate -F exit=-EPERM -F auid>=1000 -F auid!=unset -k access"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*creat,open,openat,open_by_handle_at,truncate,ftruncate\\s*-F\\s*exit\\s*=\\s*-EPERM\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*access"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource55ref -{ -ResourceID = "[nxFileLine][V-204531.d][medium][SRG-OS-000064-GPOS-00033]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S creat,open,openat,open_by_handle_at,truncate,ftruncate -F exit=-EACCES -F auid>=1000 -F auid!=unset -k access"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*creat,open,openat,open_by_handle_at,truncate,ftruncate\\s*-F\\s*exit\\s*=\\s*-EACCES\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*access"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource56ref -{ -ResourceID = "[nxFileLine][V-204536][medium][SRG-OS-000392-GPOS-00172]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F path=/usr/sbin/semanage -F auid>=1000 -F auid!=unset -k privileged-priv_change"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/sbin/semanage\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-priv_change"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource57ref -{ -ResourceID = "[nxFileLine][V-204537][medium][SRG-OS-000392-GPOS-00172]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F path=/usr/sbin/setsebool -F auid>=1000 -F auid!=unset -k privileged-priv_change"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/sbin/setsebool\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-priv_change"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource58ref -{ -ResourceID = "[nxFileLine][V-204538][medium][SRG-OS-000392-GPOS-00172]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F path=/usr/bin/chcon -F auid>=1000 -F auid!=unset -k privileged-priv_change"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/bin/chcon\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-priv_change"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource59ref -{ -ResourceID = "[nxFileLine][V-204539][medium][SRG-OS-000392-GPOS-00172]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F path=/usr/sbin/setfiles -F auid>=1000 -F auid!=unset -k privileged-priv_change"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/sbin/setfiles\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-priv_change"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource60ref -{ -ResourceID = "[nxFileLine][V-204540][medium][SRG-OS-000392-GPOS-00172]::[RHEL]Baseline"; - ContainsLine = "-w /var/run/faillock -p wa -k logins"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-w\\s*/var/run/faillock\\s*-p\\s*wa\\s*-k\\s*logins"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource61ref -{ -ResourceID = "[nxFileLine][V-204541][medium][SRG-OS-000392-GPOS-00172]::[RHEL]Baseline"; - ContainsLine = "-w /var/log/lastlog -p wa -k logins"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-w\\s*/var/log/lastlog\\s*-p\\s*wa\\s*-k\\s*logins"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource62ref -{ -ResourceID = "[nxFileLine][V-204542][medium][SRG-OS-000042-GPOS-00020]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F path=/usr/bin/passwd -F auid>=1000 -F auid!=unset -k privileged-passwd"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/bin/passwd\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-passwd"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource63ref -{ -ResourceID = "[nxFileLine][V-204543][medium][SRG-OS-000042-GPOS-00020]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F path=/usr/sbin/unix_chkpwd -F auid>=1000 -F auid!=unset -k privileged-passwd"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/sbin/unix_chkpwd\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-passwd"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource64ref -{ -ResourceID = "[nxFileLine][V-204544][medium][SRG-OS-000042-GPOS-00020]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F path=/usr/bin/gpasswd -F auid>=1000 -F auid!=unset -k privileged-passwd"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/bin/gpasswd\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-passwd"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource65ref -{ -ResourceID = "[nxFileLine][V-204545][medium][SRG-OS-000042-GPOS-00020]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F path=/usr/bin/chage -F auid>=1000 -F auid!=unset -k privileged-passwd"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/bin/chage\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-passwd"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource66ref -{ -ResourceID = "[nxFileLine][V-204546][medium][SRG-OS-000042-GPOS-00020]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F path=/usr/sbin/userhelper -F auid>=1000 -F auid!=unset -k privileged-passwd"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/sbin/userhelper\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-passwd"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource67ref -{ -ResourceID = "[nxFileLine][V-204547][medium][SRG-OS-000037-GPOS-00015]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F path=/usr/bin/su -F auid>=1000 -F auid!=unset -k privileged-priv_change"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/bin/su\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-priv_change"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource68ref -{ -ResourceID = "[nxFileLine][V-204548][medium][SRG-OS-000037-GPOS-00015]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F path=/usr/bin/sudo -F auid>=1000 -F auid!=unset -k privileged-priv_change"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/bin/sudo\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-priv_change"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource69ref -{ -ResourceID = "[nxFileLine][V-204549.a][medium][SRG-OS-000037-GPOS-00015]::[RHEL]Baseline"; - ContainsLine = "-w /etc/sudoers -p wa -k privileged-actions"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-w /etc/sudoers -p wa -k privileged-actions"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource70ref -{ -ResourceID = "[nxFileLine][V-204549.b][medium][SRG-OS-000037-GPOS-00015]::[RHEL]Baseline"; - ContainsLine = "-w /etc/sudoers.d/ -p wa -k privileged-actions"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-w /etc/sudoers.d/ -p wa -k privileged-actions"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource71ref -{ -ResourceID = "[nxFileLine][V-204550][medium][SRG-OS-000037-GPOS-00015]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F path=/usr/bin/newgrp -F auid>=1000 -F auid!=unset -k privileged-priv_change"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/bin/newgrp\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-priv_change"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource72ref -{ -ResourceID = "[nxFileLine][V-204551][medium][SRG-OS-000037-GPOS-00015]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F path=/usr/bin/chsh -F auid>=1000 -F auid!=unset -k privileged-priv_change"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/bin/chsh\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-priv_change"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource73ref -{ -ResourceID = "[nxFileLine][V-204552.a][medium][SRG-OS-000042-GPOS-00020]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S mount -F auid>=1000 -F auid!=unset -k privileged-mount"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*mount\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-mount"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource74ref -{ -ResourceID = "[nxFileLine][V-204552.b][medium][SRG-OS-000042-GPOS-00020]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S mount -F auid>=1000 -F auid!=unset -k privileged-mount"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*mount\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-mount"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource75ref -{ -ResourceID = "[nxFileLine][V-204552.c][medium][SRG-OS-000042-GPOS-00020]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F path=/usr/bin/mount -F auid>=1000 -F auid!=unset -k privileged-mount"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/bin/mount\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-mount"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource76ref -{ -ResourceID = "[nxFileLine][V-204553][medium][SRG-OS-000042-GPOS-00020]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F path=/usr/bin/umount -F auid>=1000 -F auid!=unset -k privileged-mount"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/bin/umount\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-mount"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource77ref -{ -ResourceID = "[nxFileLine][V-204554][medium][SRG-OS-000042-GPOS-00020]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F path=/usr/sbin/postdrop -F auid>=1000 -F auid!=unset -k privileged-postfix"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/sbin/postdrop\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-postfix"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource78ref -{ -ResourceID = "[nxFileLine][V-204555][medium][SRG-OS-000042-GPOS-00020]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F path=/usr/sbin/postqueue -F auid>=1000 -F auid!=unset -k privileged-postfix"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/sbin/postqueue\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-postfix"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource79ref -{ -ResourceID = "[nxFileLine][V-204556][medium][SRG-OS-000042-GPOS-00020]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F path=/usr/libexec/openssh/ssh-keysign -F auid>=1000 -F auid!=unset -k privileged-ssh"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/libexec/openssh/ssh-keysign\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-ssh"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource80ref -{ -ResourceID = "[nxFileLine][V-204557][medium][SRG-OS-000042-GPOS-00020]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F path=/usr/bin/crontab -F auid>=1000 -F auid!=unset -k privileged-cron"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/bin/crontab\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-cron"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource81ref -{ -ResourceID = "[nxFileLine][V-204558][medium][SRG-OS-000471-GPOS-00215]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F path=/usr/sbin/pam_timestamp_check -F auid>=1000 -F auid!=unset -k privileged-pam"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/sbin/pam_timestamp_check\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-pam"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource82ref -{ -ResourceID = "[nxFileLine][V-204559.a][medium][SRG-OS-000471-GPOS-00216]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S create_module -k module-change"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*create_module\\s*-k\\s*module-change"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource83ref -{ -ResourceID = "[nxFileLine][V-204559.b][medium][SRG-OS-000471-GPOS-00216]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S create_module -k module-change"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*create_module\\s*-k\\s*module-change"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource84ref -{ -ResourceID = "[nxFileLine][V-204560.a][medium][SRG-OS-000471-GPOS-00216]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S init_module,finit_module -k modulechange"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*init_module,finit_module\\s*-k\\s*modulechange"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource85ref -{ -ResourceID = "[nxFileLine][V-204560.b][medium][SRG-OS-000471-GPOS-00216]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S init_module,finit_module -k modulechange"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*init_module,finit_module\\s*-k\\s*modulechange"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource86ref -{ -ResourceID = "[nxFileLine][V-204562.a][medium][SRG-OS-000471-GPOS-00216]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S delete_module -k module-change"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*delete_module\\s*-k\\s*module-change"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource87ref -{ -ResourceID = "[nxFileLine][V-204562.b][medium][SRG-OS-000471-GPOS-00216]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S delete_module -k module-change"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*delete_module\\s*-k\\s*module-change"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource88ref -{ -ResourceID = "[nxFileLine][V-204563][medium][SRG-OS-000471-GPOS-00216]::[RHEL]Baseline"; - ContainsLine = "-w /usr/bin/kmod -p x -F auid!=unset -k module-change"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-w\\s*/usr/bin/kmod\\s*-p\\s*x\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*module-change"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource89ref -{ -ResourceID = "[nxFileLine][V-204564][medium][SRG-OS-000004-GPOS-00004]::[RHEL]Baseline"; - ContainsLine = "-w /etc/passwd -p wa -k identity"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-w\\s*/etc/passwd\\s*-p\\s*wa\\s*-k\\s*identity"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource90ref -{ -ResourceID = "[nxFileLine][V-204565][medium][SRG-OS-000004-GPOS-00004]::[RHEL]Baseline"; - ContainsLine = "-w /etc/group -p wa -k identity"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-w\\s*/etc/group\\s*-p\\s*wa\\s*-k\\s*identity"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource91ref -{ -ResourceID = "[nxFileLine][V-204566][medium][SRG-OS-000004-GPOS-00004]::[RHEL]Baseline"; - ContainsLine = "-w /etc/gshadow -p wa -k identity"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-w\\s*/etc/gshadow\\s*-p\\s*wa\\s*-k\\s*identity"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource92ref -{ -ResourceID = "[nxFileLine][V-204567][medium][SRG-OS-000004-GPOS-00004]::[RHEL]Baseline"; - ContainsLine = "-w /etc/shadow -p wa -k identity"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-w\\s*/etc/shadow\\s*-p\\s*wa\\s*-k\\s*identity"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource93ref -{ -ResourceID = "[nxFileLine][V-204568][medium][SRG-OS-000004-GPOS-00004]::[RHEL]Baseline"; - ContainsLine = "-w /etc/security/opasswd -p wa -k identity"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-w\\s*/etc/security/opasswd\\s*-p\\s*wa\\s*-k\\s*identity"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource94ref -{ -ResourceID = "[nxFileLine][V-204572.a][medium][SRG-OS-000466-GPOS-00210]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S unlink,unlinkat,rename,renameat,rmdir -F auid>=1000 -F auid!=unset -k delete"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*unlink,unlinkat,rename,renameat,rmdir\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*delete"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource95ref -{ -ResourceID = "[nxFileLine][V-204572.b][medium][SRG-OS-000466-GPOS-00210]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S unlink,unlinkat,rename,renameat,rmdir -F auid>=1000 -F auid!=unset -k delete"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*unlink,unlinkat,rename,renameat,rmdir\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*delete"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource96ref -{ -ResourceID = "[nxFileLine][V-204578][medium][SRG-OS-000033-GPOS-00014]::[RHEL]Baseline"; - ContainsLine = "Ciphers aes256-ctr,aes192-ctr,aes128-ctr"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/ssh/sshd_config"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "^#\\s*Ciphers.*|^\\s*Ciphers\\s*aes128-ctr.*|^\\s*Ciphers\\s*aes192-ctr.*"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource97ref -{ -ResourceID = "[nxFileLine][V-204579.b][medium][SRG-OS-000163-GPOS-00072]::[RHEL]Baseline"; - ContainsLine = "declare -xr TMOUT=900"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/profile.d/tmout.sh"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "^\\s*TMOUT\\s*=\\s*[0-8]?[0-9]?[0-9]?$|^#\\s*TMOUT.*"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource98ref -{ -ResourceID = "[nxFileLine][V-204580][medium][SRG-OS-000023-GPOS-00006]::[RHEL]Baseline"; - ContainsLine = "banner /etc/issue"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/ssh/sshd_config"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*banner\\s*/etc/issue"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource99ref -{ -ResourceID = "[nxFileLine][V-204587][medium][SRG-OS-000163-GPOS-00072]::[RHEL]Baseline"; - ContainsLine = "ClientAliveInterval 600"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/ssh/sshd_config"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "^\\s*ClientAliveInterval\\s*[0-5]?[0-9]?[0-9]?\\s*$|^#\\s*ClientAliveInterval.*|^\\s*ClientAliveInterval\\s*$"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource100ref -{ -ResourceID = "[nxFileLine][V-204588][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; - ContainsLine = "RhostsRSAAuthentication no"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/ssh/sshd_config"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "^#\\s*RhostsRSAAuthentication.*$|^RhostsRSAAuthentication\\s*(?!no\\b)\\w*$"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource101ref -{ -ResourceID = "[nxFileLine][V-204589][medium][SRG-OS-000163-GPOS-00072]::[RHEL]Baseline"; - ContainsLine = "ClientAliveCountMax 0"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/ssh/sshd_config"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "^#\\s*ClientAliveCountMax.*$|^ClientAliveCountMax\\s*(?!0\\b)\\w*$"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource102ref -{ -ResourceID = "[nxFileLine][V-204590][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; - ContainsLine = "IgnoreRhosts yes"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/ssh/sshd_config"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "^#\\s*IgnoreRhosts.*$|^IgnoreRhosts\\s*(?!yes\\b)\\w*$"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource103ref -{ -ResourceID = "[nxFileLine][V-204591][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; - ContainsLine = "PrintLastLog yes"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/ssh/sshd_config"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "^#\\s*PrintLastLog.*$|^PrintLastLog\\s*(?!yes\\b)\\w*$"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource104ref -{ -ResourceID = "[nxFileLine][V-204592][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; - ContainsLine = "PermitRootLogin no"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/ssh/sshd_config"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "^#\\s*PermitRootLogin.*$|^PermitRootLogin\\s*(?!no\\b)\\w*$"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource105ref -{ -ResourceID = "[nxFileLine][V-204593][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; - ContainsLine = "IgnoreUserKnownHosts yes"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/ssh/sshd_config"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "^#\\s*IgnoreUserKnownHosts.*$|^IgnoreUserKnownHosts\\s*(?!yes\\b)\\w*$"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource106ref -{ -ResourceID = "[nxFileLine][V-204594][high][SRG-OS-000074-GPOS-00042]::[RHEL]Baseline"; - ContainsLine = "Protocol 2"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/ssh/sshd_config"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "^#\\s*Protocol.*$|^Protocol\\s*(?!2\\b)\\w*$"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource107ref -{ -ResourceID = "[nxFileLine][V-204595][medium][SRG-OS-000250-GPOS-00093]::[RHEL]Baseline"; - ContainsLine = "MACs hmac-sha2-512,hmac-sha2-256"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/ssh/sshd_config"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*MACs.*|\\s*MACs\\s*hmac-(?!sha2-512).*"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource108ref -{ -ResourceID = "[nxFileLine][V-204598][medium][SRG-OS-000364-GPOS-00151]::[RHEL]Baseline"; - ContainsLine = "GSSAPIAuthentication no"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/ssh/sshd_config"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "^#\\s*GSSAPIAuthentication.*$|^GSSAPIAuthentication\\s*(?!no\\b)\\w*$"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource109ref -{ -ResourceID = "[nxFileLine][V-204599][medium][SRG-OS-000364-GPOS-00151]::[RHEL]Baseline"; - ContainsLine = "KerberosAuthentication no"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/ssh/sshd_config"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "^#\\s*KerberosAuthentication.*$|^KerberosAuthentication\\s*(?!no\\b)\\w*$"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource110ref -{ -ResourceID = "[nxFileLine][V-204600][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; - ContainsLine = "StrictModes yes"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/ssh/sshd_config"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "^#\\s*StrictModes.*$|^StrictModes\\s*(?!yes\\b)\\w*$"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource111ref -{ -ResourceID = "[nxFileLine][V-204601][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; - ContainsLine = "UsePrivilegeSeparation sandbox"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/ssh/sshd_config"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "^#\\s*UsePrivilegeSeparation.*$|^UsePrivilegeSeparation\\s*(?!sandbox\\b)\\w*$"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource112ref -{ -ResourceID = "[nxFileLine][V-204602][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; - ContainsLine = "Compression delayed"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/ssh/sshd_config"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "^#\\s*Compression.*$|^Compression\\s*(?!delayed\\b)\\w*$"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource113ref -{ -ResourceID = "[nxFileLine][V-204622][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; - ContainsLine = "X11Forwarding no"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/ssh/sshd_config"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "^#\\s*X11Forwarding.*$|^X11Forwarding\\s*(?!no\\b)\\w*$"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource114ref -{ -ResourceID = "[nxFileLine][V-233307][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; - ContainsLine = "X11UseLocalhost yes"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/ssh/sshd_config"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*X11UseLocalhost\\s*yes"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxServiceResource as $MSFT_nxServiceResource1ref -{ -ResourceID = "[nxService][V-204451][medium][SRG-OS-000114-GPOS-00059]::[RHEL]Baseline"; - Controller = "systemd"; - Enabled = False; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxService.ps1::13::9::nxService"; - Name = "autofs"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxServiceResource as $MSFT_nxServiceResource2ref -{ -ResourceID = "[nxService][V-204492][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; - Controller = "systemd"; - Enabled = False; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxService.ps1::13::9::nxService"; - Name = "kdump"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxServiceResource as $MSFT_nxServiceResource3ref -{ -ResourceID = "[nxService][V-204503][medium][SRG-OS-000038-GPOS-00016]::[RHEL]Baseline"; - Controller = "systemd"; - State = "Running"; - Enabled = True; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxService.ps1::22::9::nxService"; - Name = "auditd"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxServiceResource as $MSFT_nxServiceResource4ref -{ -ResourceID = "[nxService][V-204586][medium][SRG-OS-000423-GPOS-00187]::[RHEL]Baseline"; - Controller = "systemd"; - State = "Running"; - Enabled = True; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxService.ps1::22::9::nxService"; - Name = "sshd"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxServiceResource as $MSFT_nxServiceResource5ref -{ -ResourceID = "[nxService][V-204604.b][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; - Controller = "systemd"; - State = "Running"; - Enabled = True; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxService.ps1::22::9::nxService"; - Name = "firewalld"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxScriptResource as $MSFT_nxScriptResource1ref -{ -ResourceID = "[nxScript][V-204399.b][medium][[Skip] SRG-OS-000029-GPOS-00010]::[RHEL]Baseline"; - GetScript = "#!/bin/bash\necho [V-204399.b][medium][[Skip] SRG-OS-000029-GPOS-00010]"; - TestScript = "#!/bin/bash\nexit 0"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxScript.skip.ps1::10::5::nxScript"; - SetScript = "#!/bin/bash"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxScriptResource as $MSFT_nxScriptResource2ref -{ -ResourceID = "[nxScript][V-204400][medium][[Skip] SRG-OS-000029-GPOS-00010]::[RHEL]Baseline"; - GetScript = "#!/bin/bash\necho [V-204400][medium][[Skip] SRG-OS-000029-GPOS-00010]"; - TestScript = "#!/bin/bash\nexit 0"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxScript.skip.ps1::10::5::nxScript"; - SetScript = "#!/bin/bash"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxScriptResource as $MSFT_nxScriptResource3ref -{ -ResourceID = "[nxScript][V-204403][medium][[Skip] SRG-OS-000029-GPOS-00010]::[RHEL]Baseline"; - GetScript = "#!/bin/bash\necho [V-204403][medium][[Skip] SRG-OS-000029-GPOS-00010]"; - TestScript = "#!/bin/bash\nexit 0"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxScript.skip.ps1::10::5::nxScript"; - SetScript = "#!/bin/bash"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxScriptResource as $MSFT_nxScriptResource4ref -{ -ResourceID = "[nxScript][V-204509][medium][[Skip] SRG-OS-000342-GPOS-00133]::[RHEL]Baseline"; - GetScript = "#!/bin/bash\necho [V-204509][medium][[Skip] SRG-OS-000342-GPOS-00133]"; - TestScript = "#!/bin/bash\nexit 0"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxScript.skip.ps1::10::5::nxScript"; - SetScript = "#!/bin/bash"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxScriptResource as $MSFT_nxScriptResource5ref -{ -ResourceID = "[nxScript][V-204513][medium][[Skip] SRG-OS-000343-GPOS-00134]::[RHEL]Baseline"; - GetScript = "#!/bin/bash\necho [V-204513][medium][[Skip] SRG-OS-000343-GPOS-00134]"; - TestScript = "#!/bin/bash\nexit 0"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxScript.skip.ps1::10::5::nxScript"; - SetScript = "#!/bin/bash"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxScriptResource as $MSFT_nxScriptResource6ref -{ -ResourceID = "[nxScript][V-204623][medium][[Skip] SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; - GetScript = "#!/bin/bash\necho [V-204623][medium][[Skip] SRG-OS-000480-GPOS-00227]"; - TestScript = "#!/bin/bash\nexit 0"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxScript.skip.ps1::10::5::nxScript"; - SetScript = "#!/bin/bash"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxScriptResource as $MSFT_nxScriptResource7ref -{ -ResourceID = "[nxScript][V-244557][medium][[Skip] SRG-OS-000080-GPOS-00048]::[RHEL]Baseline"; - GetScript = "#!/bin/bash\necho [V-244557][medium][[Skip] SRG-OS-000080-GPOS-00048]"; - TestScript = "#!/bin/bash\nexit 0"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxScript.skip.ps1::10::5::nxScript"; - SetScript = "#!/bin/bash"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxScriptResource as $MSFT_nxScriptResource8ref -{ -ResourceID = "[nxScript][V-244558][medium][[Skip] SRG-OS-000080-GPOS-00048]::[RHEL]Baseline"; - GetScript = "#!/bin/bash\necho [V-244558][medium][[Skip] SRG-OS-000080-GPOS-00048]"; - TestScript = "#!/bin/bash\nexit 0"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxScript.skip.ps1::10::5::nxScript"; - SetScript = "#!/bin/bash"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxScriptResource as $MSFT_nxScriptResource9ref -{ -ResourceID = "[nxScript][V-204399.a][medium][[Skip] SRG-OS-000029-GPOS-00010]::[RHEL]Baseline"; - GetScript = "#!/bin/bash\necho [V-204399.a][medium][[Skip] SRG-OS-000029-GPOS-00010]"; - TestScript = "#!/bin/bash\nexit 0"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxScript.skip.ps1::10::5::nxScript"; - SetScript = "#!/bin/bash"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of OMI_ConfigurationDocument - - - { - Version="2.0.0"; - - - MinimumCompatibleVersion = "1.0.0"; - - - CompatibleVersionAdditionalProperties= {"Omi_BaseResource:ConfigurationName"}; - - - Author="Microsoft"; - - - GenerationDate="06/30/2022 11:38:45"; - - - GenerationHost="Microsoft"; - - - Name="LinuxBaseLine"; - - - }; +/* +@TargetNode='CentOS78' +@GeneratedBy=Microsoft +@GenerationDate=03/09/2023 14:17:33 +@GenerationHost=Microsoft +*/ + +instance of MSFT_nxPackageResource as $MSFT_nxPackageResource1ref +{ +ResourceID = "[nxPackage][V-204442][high][SRG-OS-000095-GPOS-00049]::[RHEL]Baseline"; + Ensure = "Absent"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxPackage.ps1::8::5::nxPackage"; + Name = "rsh-server"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxPackageResource as $MSFT_nxPackageResource2ref +{ +ResourceID = "[nxPackage][V-204443][high][SRG-OS-000095-GPOS-00049]::[RHEL]Baseline"; + Ensure = "Absent"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxPackage.ps1::8::5::nxPackage"; + Name = "ypserv"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxPackageResource as $MSFT_nxPackageResource3ref +{ +ResourceID = "[nxPackage][V-204497][high][SRG-OS-000033-GPOS-00014]::[RHEL]Baseline"; + Ensure = "Present"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxPackage.ps1::8::5::nxPackage"; + Name = "dracut-fips"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxPackageResource as $MSFT_nxPackageResource4ref +{ +ResourceID = "[nxPackage][V-204498][low][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; + Ensure = "Present"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxPackage.ps1::8::5::nxPackage"; + Name = "aide"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxPackageResource as $MSFT_nxPackageResource5ref +{ +ResourceID = "[nxPackage][V-204502][high][SRG-OS-000095-GPOS-00049]::[RHEL]Baseline"; + Ensure = "Absent"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxPackage.ps1::8::5::nxPackage"; + Name = "telnet-server"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxPackageResource as $MSFT_nxPackageResource6ref +{ +ResourceID = "[nxPackage][V-204585][medium][SRG-OS-000423-GPOS-00187]::[RHEL]Baseline"; + Ensure = "Present"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxPackage.ps1::8::5::nxPackage"; + Name = "openssh-server"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxPackageResource as $MSFT_nxPackageResource7ref +{ +ResourceID = "[nxPackage][V-204604.a][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; + Ensure = "Present"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxPackage.ps1::8::5::nxPackage"; + Name = "firewalld"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxPackageResource as $MSFT_nxPackageResource8ref +{ +ResourceID = "[nxPackage][V-204620][high][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; + Ensure = "Absent"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxPackage.ps1::8::5::nxPackage"; + Name = "vsftpd"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxPackageResource as $MSFT_nxPackageResource9ref +{ +ResourceID = "[nxPackage][V-204621][high][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; + Ensure = "Absent"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxPackage.ps1::8::5::nxPackage"; + Name = "tftp-server"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxPackageResource as $MSFT_nxPackageResource10ref +{ +ResourceID = "[nxPackage][V-204631][medium][SRG-OS-000375-GPOS-00160]::[RHEL]Baseline"; + Ensure = "Present"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxPackage.ps1::8::5::nxPackage"; + Name = "pam_pkcs11"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileResource as $MSFT_nxFileResource1ref +{ +ResourceID = "[nxFile][V-204395][medium][SRG-OS-000023-GPOS-00006]::[RHEL]Baseline"; + Contents = "You are accessing a U.S. Government (USG) Information System (IS) that is provided for USG-authorized use only.\n\nBy using this IS (which includes any device attached to this IS), you consent to the following conditions:\n\n-The USG routinely intercepts and monitors communications on this IS for purposes including, but not limited to, penetration testing, COMSEC monitoring, network operations and defense, personnel misconduct (PM), law enforcement (LE), and counterintelligence (CI) investigations.\n\n-At any time, the USG may inspect and seize data stored on this IS.\n\n-Communications using, or data stored on, this IS are not private, are subject to routine monitoring, interception, and search, and may be disclosed or used for any USG-authorized purpose.\n\n-This IS includes security measures (e.g., authentication and access controls) to protect USG interests--not for your personal benefit or privacy.\n\n-Notwithstanding the above, using this IS does not constitute consent to PM, LE or CI investigative searching or monitoring of the content of privileged communications, or work product, related to personal representation or services by attorneys, psychotherapists, or clergy, and their assistants. Such communications and work product are private and confidential. See User Agreement for details."; + DestinationPath = "/etc/issue"; + ModuleName = "nx"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; + ModuleVersion = "1.0"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileResource as $MSFT_nxFileResource2ref +{ +ResourceID = "[nxFile][V-204449.a][medium][SRG-OS-000114-GPOS-00059]::[RHEL]Baseline"; + Contents = ""; + DestinationPath = "/etc/modprobe.d/usb-storage.conf"; + ModuleName = "nx"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; + ModuleVersion = "1.0"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileResource as $MSFT_nxFileResource3ref +{ +ResourceID = "[nxFile][V-204449.b][medium][SRG-OS-000114-GPOS-00059]::[RHEL]Baseline"; + Contents = ""; + DestinationPath = "/etc/modprobe.d/blacklist.conf"; + ModuleName = "nx"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; + ModuleVersion = "1.0"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileResource as $MSFT_nxFileResource4ref +{ +ResourceID = "[nxFile][V-204450.a][medium][SRG-OS-000378-GPOS-00163]::[RHEL]Baseline"; + Contents = ""; + DestinationPath = "/etc/modprobe.d/dccp.conf"; + ModuleName = "nx"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; + ModuleVersion = "1.0"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileResource as $MSFT_nxFileResource5ref +{ +ResourceID = "[nxFile][V-204576][low][SRG-OS-000027-GPOS-00008]::[RHEL]Baseline"; + Contents = "* hard maxlogins 10"; + DestinationPath = "/etc/security/limits.d/204576-powerstig.conf"; + ModuleName = "nx"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; + ModuleVersion = "1.0"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileResource as $MSFT_nxFileResource6ref +{ +ResourceID = "[nxFile][V-204579.a][medium][SRG-OS-000163-GPOS-00072]::[RHEL]Baseline"; + Contents = ""; + DestinationPath = "/etc/profile.d/tmout.sh"; + ModuleName = "nx"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; + ModuleVersion = "1.0"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileResource as $MSFT_nxFileResource7ref +{ +ResourceID = "[nxFile][V-204584][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; + Contents = "kernel.randomize_va_space = 2"; + DestinationPath = "/etc/sysctl.d/204584-powerstig.conf"; + ModuleName = "nx"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; + ModuleVersion = "1.0"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileResource as $MSFT_nxFileResource8ref +{ +ResourceID = "[nxFile][V-204609][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; + Contents = "net.ipv4.conf.all.accept_source_route = 0"; + DestinationPath = "/etc/sysctl.d/204609-powerstig.conf"; + ModuleName = "nx"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; + ModuleVersion = "1.0"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileResource as $MSFT_nxFileResource9ref +{ +ResourceID = "[nxFile][V-204610][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; + Contents = "net.ipv4.conf.all.rp_filter = 1"; + DestinationPath = "/etc/sysctl.d/204610-powerstig.conf"; + ModuleName = "nx"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; + ModuleVersion = "1.0"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileResource as $MSFT_nxFileResource10ref +{ +ResourceID = "[nxFile][V-204611][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; + Contents = "net.ipv4.conf.default.rp_filter = 1"; + DestinationPath = "/etc/sysctl.d/204611-powerstig.conf"; + ModuleName = "nx"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; + ModuleVersion = "1.0"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileResource as $MSFT_nxFileResource11ref +{ +ResourceID = "[nxFile][V-204612][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; + Contents = "net.ipv4.conf.default.accept_source_route = 0"; + DestinationPath = "/etc/sysctl.d/204612-powerstig.conf"; + ModuleName = "nx"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; + ModuleVersion = "1.0"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileResource as $MSFT_nxFileResource12ref +{ +ResourceID = "[nxFile][V-204613][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; + Contents = "net.ipv4.icmp_echo_ignore_broadcasts = 1"; + DestinationPath = "/etc/sysctl.d/204613-powerstig.conf"; + ModuleName = "nx"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; + ModuleVersion = "1.0"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileResource as $MSFT_nxFileResource13ref +{ +ResourceID = "[nxFile][V-204614][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; + Contents = "net.ipv4.conf.default.accept_redirects = 0"; + DestinationPath = "/etc/sysctl.d/204614-powerstig.conf"; + ModuleName = "nx"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; + ModuleVersion = "1.0"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileResource as $MSFT_nxFileResource14ref +{ +ResourceID = "[nxFile][V-204615][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; + Contents = "net.ipv4.conf.all.accept_redirects = 0"; + DestinationPath = "/etc/sysctl.d/204615-powerstig.conf"; + ModuleName = "nx"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; + ModuleVersion = "1.0"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileResource as $MSFT_nxFileResource15ref +{ +ResourceID = "[nxFile][V-204616][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; + Contents = "net.ipv4.conf.default.send_redirects = 0"; + DestinationPath = "/etc/sysctl.d/204616-powerstig.conf"; + ModuleName = "nx"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; + ModuleVersion = "1.0"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileResource as $MSFT_nxFileResource16ref +{ +ResourceID = "[nxFile][V-204617][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; + Contents = "net.ipv4.conf.all.send_redirects = 0"; + DestinationPath = "/etc/sysctl.d/204617-powerstig.conf"; + ModuleName = "nx"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; + ModuleVersion = "1.0"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileResource as $MSFT_nxFileResource17ref +{ +ResourceID = "[nxFile][V-204625][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; + Contents = "net.ipv4.ip_forward = 0"; + DestinationPath = "/etc/sysctl.d/204625-powerstig.conf"; + ModuleName = "nx"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; + ModuleVersion = "1.0"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileResource as $MSFT_nxFileResource18ref +{ +ResourceID = "[nxFile][V-204630][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; + Contents = "net.ipv6.conf.all.accept_source_route = 0"; + DestinationPath = "/etc/sysctl.d/204630-powerstig.conf"; + ModuleName = "nx"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; + ModuleVersion = "1.0"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileResource as $MSFT_nxFileResource19ref +{ +ResourceID = "[nxFile][V-237634.a][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; + Contents = "Defaults !targetpw"; + DestinationPath = "/etc/sudoers.d/237634a-powerstig.conf"; + ModuleName = "nx"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; + ModuleVersion = "1.0"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileResource as $MSFT_nxFileResource20ref +{ +ResourceID = "[nxFile][V-237634.b][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; + Contents = "Defaults !rootpw"; + DestinationPath = "/etc/sudoers.d/237634b-powerstig.conf"; + ModuleName = "nx"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; + ModuleVersion = "1.0"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileResource as $MSFT_nxFileResource21ref +{ +ResourceID = "[nxFile][V-237634.c][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; + Contents = "Defaults !runaspw"; + DestinationPath = "/etc/sudoers.d/237634c-powerstig.conf"; + ModuleName = "nx"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; + ModuleVersion = "1.0"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileResource as $MSFT_nxFileResource22ref +{ +ResourceID = "[nxFile][V-237635][medium][SRG-OS-000373-GPOS-00156]::[RHEL]Baseline"; + Contents = "Defaults timestamp_timeout=0"; + DestinationPath = "/etc/sudoers.d/237635-powerstig.conf"; + ModuleName = "nx"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; + ModuleVersion = "1.0"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileResource as $MSFT_nxFileResource23ref +{ +ResourceID = "[nxFile][V-250314][medium][SRG-OS-000324-GPOS-00125]::[RHEL]Baseline"; + Contents = "%wheel ALL=(ALL) TYPE=sysadm_t ROLE=sysadm_r ALL"; + DestinationPath = "/etc/sudoers.d/250314-powerstig.conf"; + ModuleName = "nx"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; + ModuleVersion = "1.0"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource1ref +{ +ResourceID = "[nxFileLine][V-204405][medium][SRG-OS-000069-GPOS-00037]::[RHEL]Baseline"; + ContainsLine = "password substack system-auth"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/pam.d/passwd"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "^\\s*password(?:\\t*|\\s*)substack\\tsystem-auth\\s*$|^#\\s*password\\s*substack\\s*system-auth.*"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource2ref +{ +ResourceID = "[nxFileLine][V-204407][medium][SRG-OS-000069-GPOS-00037]::[RHEL]Baseline"; + ContainsLine = "ucredit = -1"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/security/pwquality.conf"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "^#\\s*ucredit.*$|^ucredit\\s*=\\s*(?!-1\\b)\\w*$"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource3ref +{ +ResourceID = "[nxFileLine][V-204408][medium][SRG-OS-000070-GPOS-00038]::[RHEL]Baseline"; + ContainsLine = "lcredit = -1"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/security/pwquality.conf"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "^#\\s*lcredit.*$|^lcredit\\s*=\\s*(?!-1\\b)\\w*$"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource4ref +{ +ResourceID = "[nxFileLine][V-204409][medium][SRG-OS-000071-GPOS-00039]::[RHEL]Baseline"; + ContainsLine = "dcredit = -1"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/security/pwquality.conf"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "^#\\s*dcredit.*$|^dcredit\\s*=\\s*(?!-1\\b)\\w*$"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource5ref +{ +ResourceID = "[nxFileLine][V-204410][medium][SRG-OS-000266-GPOS-00101]::[RHEL]Baseline"; + ContainsLine = "ocredit=-1"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/security/pwquality.conf"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "^#\\s*ocredit.*$|^ocredit\\s*=\\s*(?!-1)\\w*$"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource6ref +{ +ResourceID = "[nxFileLine][V-204411][medium][SRG-OS-000072-GPOS-00040]::[RHEL]Baseline"; + ContainsLine = "difok = 8"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/security/pwquality.conf"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*difok\\s*=.*|^\\s*difok\\s*=\\s*(-|)[0-7]$"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource7ref +{ +ResourceID = "[nxFileLine][V-204412][medium][SRG-OS-000072-GPOS-00040]::[RHEL]Baseline"; + ContainsLine = "minclass = 4"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/security/pwquality.conf"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "^#\\s*minclass\\s*=.*|^\\s*minclass\\s*=\\s*(?!\\d{2,})[1-3]"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource8ref +{ +ResourceID = "[nxFileLine][V-204413][medium][SRG-OS-000072-GPOS-00040]::[RHEL]Baseline"; + ContainsLine = "maxrepeat = 3"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/security/pwquality.conf"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "^#\\s*maxrepeat\\s*=.*|^\\s*maxrepeat\\s*=\\s*(?:\\d{2,}|[4-9])"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource9ref +{ +ResourceID = "[nxFileLine][V-204414][medium][SRG-OS-000072-GPOS-00040]::[RHEL]Baseline"; + ContainsLine = "maxclassrepeat = 4"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/security/pwquality.conf"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "^#\\s*maxclassrepeat\\s*=.*|^\\s*maxclassrepeat\\s*=\\s*(?:\\d{2,}|[1-3|5-9])"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource10ref +{ +ResourceID = "[nxFileLine][V-204416][medium][SRG-OS-000073-GPOS-00041]::[RHEL]Baseline"; + ContainsLine = "ENCRYPT_METHOD SHA512"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/login.defs"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*ENCRYPT_METHOD\\s*SHA512"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource11ref +{ +ResourceID = "[nxFileLine][V-204418][medium][SRG-OS-000075-GPOS-00043]::[RHEL]Baseline"; + ContainsLine = "PASS_MIN_DAYS 1"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/login.defs"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "^\\s*PASS_MIN_DAYS\\s*[0]*$|#\\s*PASS_MIN_DAYS.*"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource12ref +{ +ResourceID = "[nxFileLine][V-204420][medium][SRG-OS-000076-GPOS-00044]::[RHEL]Baseline"; + ContainsLine = "PASS_MAX_DAYS 60"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/login.defs"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "^\\s*PASS_MAX_DAYS\\s*([6][1-9]|[7-9][0-9]|\\d{3,})$|#\\s*PASS_MAX_DAYS.*"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource13ref +{ +ResourceID = "[nxFileLine][V-204423][medium][SRG-OS-000078-GPOS-00046]::[RHEL]Baseline"; + ContainsLine = "minlen = 15"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/security/pwquality.conf"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "^\\s*minlen\\s*=\\s*([0-9]|[1][1-4])$|#\\s*minlen.*"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource14ref +{ +ResourceID = "[nxFileLine][V-204425][high][SRG-OS-000106-GPOS-00053]::[RHEL]Baseline"; + ContainsLine = "PermitEmptyPasswords no"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/ssh/sshd_config"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "^#\\s*PermitEmptyPasswords.*$|^PermitEmptyPasswords\\s*(?!no\\b)\\w*$"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource15ref +{ +ResourceID = "[nxFileLine][V-204426][medium][SRG-OS-000118-GPOS-00060]::[RHEL]Baseline"; + ContainsLine = "INACTIVE=35"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/default/useradd"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "^#\\s*INACTIVE\\s*=.*|^\\s*INACTIVE\\s*=\\s*(3[5-9]|[4-9]\\d+|\\d{3,})"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource16ref +{ +ResourceID = "[nxFileLine][V-204431][medium][SRG-OS-000480-GPOS-00226]::[RHEL]Baseline"; + ContainsLine = "FAIL_DELAY 4"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/login.defs"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "^#\\s*FAIL_DELAY.*|^FAIL_DELAY\\s*(?!\\d{2,})[1-3]"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource17ref +{ +ResourceID = "[nxFileLine][V-204434][medium][SRG-OS-000480-GPOS-00229]::[RHEL]Baseline"; + ContainsLine = "PermitUserEnvironment no"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/ssh/sshd_config"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "^#\\s*PermitUserEnvironment.*$|^PermitUserEnvironment\\s*(?!no\\b)\\w*$"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource18ref +{ +ResourceID = "[nxFileLine][V-204435][medium][SRG-OS-000480-GPOS-00229]::[RHEL]Baseline"; + ContainsLine = "HostbasedAuthentication no"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/ssh/sshd_config"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "^#\\s*HostbasedAuthentication.*$|^HostbasedAuthentication\\s*(?!no\\b)\\w*$"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource19ref +{ +ResourceID = "[nxFileLine][V-204447][high][SRG-OS-000366-GPOS-00153]::[RHEL]Baseline"; + ContainsLine = "gpgcheck=1"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/yum.conf"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*gpgcheck\\s*=\\s*1"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource20ref +{ +ResourceID = "[nxFileLine][V-204448][high][SRG-OS-000366-GPOS-00153]::[RHEL]Baseline"; + ContainsLine = "localpkg_gpgcheck=1"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/yum.conf"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*localpkg_gpgcheck\\s*=\\s*1"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource21ref +{ +ResourceID = "[nxFileLine][V-204449.c][medium][SRG-OS-000114-GPOS-00059]::[RHEL]Baseline"; + ContainsLine = "install usb-storage /bin/true"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/modprobe.d/usb-storage.conf"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*install\\s*usb-storage\\s*/bin/true"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource22ref +{ +ResourceID = "[nxFileLine][V-204449.d][medium][SRG-OS-000114-GPOS-00059]::[RHEL]Baseline"; + ContainsLine = "blacklist usb-storage"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/modprobe.d/blacklist.conf"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*blacklist\\s*usb-storage"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource23ref +{ +ResourceID = "[nxFileLine][V-204450.b][medium][SRG-OS-000378-GPOS-00163]::[RHEL]Baseline"; + ContainsLine = "install dccp /bin/true"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/modprobe.d/dccp.conf"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*install\\s*dccp\\s*/bin/true"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource24ref +{ +ResourceID = "[nxFileLine][V-204450.c][medium][SRG-OS-000378-GPOS-00163]::[RHEL]Baseline"; + ContainsLine = "blacklist dccp"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/modprobe.d/blacklist.conf"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*blacklist\\s*dccp"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource25ref +{ +ResourceID = "[nxFileLine][V-204452][low][SRG-OS-000437-GPOS-00194]::[RHEL]Baseline"; + ContainsLine = "clean_requirements_on_remove=1"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/yum.conf"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*clean_requirements_on_remove\\s*=\\s*1"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource26ref +{ +ResourceID = "[nxFileLine][V-204453][medium][SRG-OS-000445-GPOS-00199]::[RHEL]Baseline"; + ContainsLine = "SELINUX=enforcing"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/selinux/config"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "^#\\s*SELINUX.*$|^SELINUX\\s*=\\s*(?!enforcing)\\w*$"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource27ref +{ +ResourceID = "[nxFileLine][V-204454][medium][SRG-OS-000445-GPOS-00199]::[RHEL]Baseline"; + ContainsLine = "SELINUXTYPE=targeted"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/selinux/config"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "^#\\s*SELINUXTYPE.*$|^SELINUXTYPE\\s*=\\s*(?!targeted\\b)\\w*$"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource28ref +{ +ResourceID = "[nxFileLine][V-204457][medium][SRG-OS-000480-GPOS-00228]::[RHEL]Baseline"; + ContainsLine = "UMASK 077"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/login.defs"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "^\\s*UMASK(?!\\s077\\b)\\s*\\d*\\s*$|^#\\s*UMASK.*"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource29ref +{ +ResourceID = "[nxFileLine][V-204466][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; + ContainsLine = "CREATE_HOME yes"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/login.defs"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "^#\\s*CREATE_HOME.*$|^CREATE_HOME\\s*(?!yes\\b)\\w*$|^CREATE_HOME\\t.*"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource30ref +{ +ResourceID = "[nxFileLine][V-204504][medium][SRG-OS-000046-GPOS-00022]::[RHEL]Baseline"; + ContainsLine = "-f 2"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "^#\\s*-f\\s+2|^\\s*-f\\s*1"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileResource as $MSFT_nxFileResource24ref +{ +SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::29::9::nxFile"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + ResourceID = "[nxFile][V-204506.a][medium][SRG-OS-000342-GPOS-00133]::[RHEL]Baseline"; + DestinationPath = "/etc/audisp/plugins.d/au-remote.conf"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource31ref +{ +ResourceID = "[nxFileLine][V-204506.a][medium][SRG-OS-000342-GPOS-00133]::[RHEL]Baseline"; + ContainsLine = "active = yes"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audisp/plugins.d/au-remote.conf"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "\\s*active\\s*=\\s*no|active=yes|#\\s*active\\s*=.*"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource32ref +{ +ResourceID = "[nxFileLine][V-204506.b][medium][SRG-OS-000342-GPOS-00133]::[RHEL]Baseline"; + ContainsLine = "direction = out"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audisp/plugins.d/au-remote.conf"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*direction\\s*=\\s*out"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource33ref +{ +ResourceID = "[nxFileLine][V-204506.c][medium][SRG-OS-000342-GPOS-00133]::[RHEL]Baseline"; + ContainsLine = "path = /sbin/audisp-remote"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audisp/plugins.d/au-remote.conf"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*path\\s*=\\s*/sbin/audisp-remote"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource34ref +{ +ResourceID = "[nxFileLine][V-204506.d][medium][SRG-OS-000342-GPOS-00133]::[RHEL]Baseline"; + ContainsLine = "type = always"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audisp/plugins.d/au-remote.conf"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*type\\s*=\\s*always"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource35ref +{ +ResourceID = "[nxFileLine][V-204507][medium][SRG-OS-000342-GPOS-00133]::[RHEL]Baseline"; + ContainsLine = "overflow_action = syslog"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audisp/audispd.conf"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "^#\\s*overflow_action.*$|^overflow_action\\s*=\\s*(?!syslog$)\\w*$"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource36ref +{ +ResourceID = "[nxFileLine][V-204508][medium][SRG-OS-000342-GPOS-00133]::[RHEL]Baseline"; + ContainsLine = "name_format = hostname"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audisp/audispd.conf"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "^#\\s*name_format.*$|^name_format\\s*=\\s*(?!hostname$)\\w*$"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileResource as $MSFT_nxFileResource25ref +{ +SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::19::9::nxFile"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + ResourceID = "[nxFile][V-204510][medium][SRG-OS-000342-GPOS-00133]::[RHEL]Baseline"; + DestinationPath = "/etc/audisp/audisp-remote.conf"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource37ref +{ +ResourceID = "[nxFileLine][V-204510][medium][SRG-OS-000342-GPOS-00133]::[RHEL]Baseline"; + ContainsLine = "enable_krb5 = yes"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audisp/audisp-remote.conf"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*enable_krb5\\s*=\\s*yes"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource38ref +{ +ResourceID = "[nxFileLine][V-204511][medium][SRG-OS-000342-GPOS-00133]::[RHEL]Baseline"; + ContainsLine = "disk_full_action = single"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audisp/audisp-remote.conf"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "^#\\s*disk_full_action\\s*=.*|^disk_full_action\\s*=\\s*(?!halt\\b|single\\b|syslog\\b)\\w+"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource39ref +{ +ResourceID = "[nxFileLine][V-204512][medium][SRG-OS-000342-GPOS-00133]::[RHEL]Baseline"; + ContainsLine = "network_failure_action = syslog"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audisp/audisp-remote.conf"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "^#\\s*network_failure_action\\s*=.*|^network_failure_action\\s*=\\s*(?!halt\\b|single\\b|syslog\\b)\\w+"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource40ref +{ +ResourceID = "[nxFileLine][V-204514][medium][SRG-OS-000343-GPOS-00134]::[RHEL]Baseline"; + ContainsLine = "space_left_action = email"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/auditd.conf"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "^#\\s*space_left_action.*$|^space_left_action\\s*=\\s*(?!email$)\\w*$"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource41ref +{ +ResourceID = "[nxFileLine][V-204515][medium][SRG-OS-000343-GPOS-00134]::[RHEL]Baseline"; + ContainsLine = "action_mail_acct = root"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/auditd.conf"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "^#\\s*action_mail_acct.*|^action_mail_acct\\s*=\\s*(?!root\\b)\\w+"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource42ref +{ +ResourceID = "[nxFileLine][V-204516.a][medium][SRG-OS-000327-GPOS-00127]::[RHEL]Baseline"; + ContainsLine = "-a always,exit -F arch=b32 -S execve -C uid!=euid -F euid=0 -k setuid"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*execve\\s*-C\\s*uid!\\s*=\\s*euid\\s*-F\\s*euid\\s*=\\s*0\\s*-k\\s*setuid"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource43ref +{ +ResourceID = "[nxFileLine][V-204516.b][medium][SRG-OS-000327-GPOS-00127]::[RHEL]Baseline"; + ContainsLine = "-a always,exit -F arch=b64 -S execve -C uid!=euid -F euid=0 -k setuid"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*execve\\s*-C\\s*uid!\\s*=\\s*euid\\s*-F\\s*euid\\s*=\\s*0\\s*-k\\s*setuid"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource44ref +{ +ResourceID = "[nxFileLine][V-204516.c][medium][SRG-OS-000327-GPOS-00127]::[RHEL]Baseline"; + ContainsLine = "-a always,exit -F arch=b32 -S execve -C gid!=egid -F egid=0 -k setgid"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*execve\\s*-C\\s*gid!\\s*=\\s*egid\\s*-F\\s*egid\\s*=\\s*0\\s*-k\\s*setgid"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource45ref +{ +ResourceID = "[nxFileLine][V-204516.d][medium][SRG-OS-000327-GPOS-00127]::[RHEL]Baseline"; + ContainsLine = "-a always,exit -F arch=b64 -S execve -C gid!=egid -F egid=0 -k setgid"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*execve\\s*-C\\s*gid!\\s*=\\s*egid\\s*-F\\s*egid\\s*=\\s*0\\s*-k\\s*setgid"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource46ref +{ +ResourceID = "[nxFileLine][V-204517.a][medium][SRG-OS-000064-GPOS-00033]::[RHEL]Baseline"; + ContainsLine = "-a always,exit -F arch=b32 -S chown,fchown,fchownat,lchown -F auid>=1000 -F auid!=unset -k perm_mod"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*chown,fchown,fchownat,lchown\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*perm_mod"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource47ref +{ +ResourceID = "[nxFileLine][V-204517.b][medium][SRG-OS-000064-GPOS-00033]::[RHEL]Baseline"; + ContainsLine = "-a always,exit -F arch=b64 -S chown,fchown,fchownat,lchown -F auid>=1000 -F auid!=unset -k perm_mod"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*chown,fchown,fchownat,lchown\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*perm_mod"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource48ref +{ +ResourceID = "[nxFileLine][V-204521.a][medium][SRG-OS-000458-GPOS-00203]::[RHEL]Baseline"; + ContainsLine = "-a always,exit -F arch=b32 -S chmod,fchmod,fchmodat -F auid>=1000 -F auid!=unset -k perm_mod"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*chmod,fchmod,fchmodat\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*perm_mod"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource49ref +{ +ResourceID = "[nxFileLine][V-204521.b][medium][SRG-OS-000458-GPOS-00203]::[RHEL]Baseline"; + ContainsLine = "-a always,exit -F arch=b64 -S chmod,fchmod,fchmodat -F auid>=1000 -F auid!=unset -k perm_mod"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*chmod,fchmod,fchmodat\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*perm_mod"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource50ref +{ +ResourceID = "[nxFileLine][V-204524.a][medium][SRG-OS-000458-GPOS-00203]::[RHEL]Baseline"; + ContainsLine = "-a always,exit -F arch=b32 -S setxattr,fsetxattr,lsetxattr,removexattr,fremovexattr,lremovexattr -F auid>=1000 -F auid!=unset -k perm_mod"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*setxattr,fsetxattr,lsetxattr,removexattr,fremovexattr,lremovexattr\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*perm_mod"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource51ref +{ +ResourceID = "[nxFileLine][V-204524.b][medium][SRG-OS-000458-GPOS-00203]::[RHEL]Baseline"; + ContainsLine = "-a always,exit -F arch=b64 -S setxattr,fsetxattr,lsetxattr,removexattr,fremovexattr,lremovexattr -F auid>=1000 -F auid!=unset -k perm_mod"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*setxattr,fsetxattr,lsetxattr,removexattr,fremovexattr,lremovexattr\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*perm_mod"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource52ref +{ +ResourceID = "[nxFileLine][V-204531.a][medium][SRG-OS-000064-GPOS-00033]::[RHEL]Baseline"; + ContainsLine = "-a always,exit -F arch=b32 -S creat,open,openat,open_by_handle_at,truncate,ftruncate -F exit=-EPERM -F auid>=1000 -F auid!=unset -k access"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*creat,open,openat,open_by_handle_at,truncate,ftruncate\\s*-F\\s*exit\\s*=\\s*-EPERM\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*access"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource53ref +{ +ResourceID = "[nxFileLine][V-204531.b][medium][SRG-OS-000064-GPOS-00033]::[RHEL]Baseline"; + ContainsLine = "-a always,exit -F arch=b32 -S creat,open,openat,open_by_handle_at,truncate,ftruncate -F exit=-EACCES -F auid>=1000 -F auid!=unset -k access"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*creat,open,openat,open_by_handle_at,truncate,ftruncate\\s*-F\\s*exit\\s*=\\s*-EACCES\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*access"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource54ref +{ +ResourceID = "[nxFileLine][V-204531.c][medium][SRG-OS-000064-GPOS-00033]::[RHEL]Baseline"; + ContainsLine = "-a always,exit -F arch=b64 -S creat,open,openat,open_by_handle_at,truncate,ftruncate -F exit=-EPERM -F auid>=1000 -F auid!=unset -k access"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*creat,open,openat,open_by_handle_at,truncate,ftruncate\\s*-F\\s*exit\\s*=\\s*-EPERM\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*access"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource55ref +{ +ResourceID = "[nxFileLine][V-204531.d][medium][SRG-OS-000064-GPOS-00033]::[RHEL]Baseline"; + ContainsLine = "-a always,exit -F arch=b64 -S creat,open,openat,open_by_handle_at,truncate,ftruncate -F exit=-EACCES -F auid>=1000 -F auid!=unset -k access"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*creat,open,openat,open_by_handle_at,truncate,ftruncate\\s*-F\\s*exit\\s*=\\s*-EACCES\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*access"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource56ref +{ +ResourceID = "[nxFileLine][V-204536][medium][SRG-OS-000392-GPOS-00172]::[RHEL]Baseline"; + ContainsLine = "-a always,exit -F path=/usr/sbin/semanage -F perm=x -F auid>=1000 -F auid!=unset -k privileged-priv_change"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/sbin/semanage\\s*-F\\s*perm\\s*=\\s*x\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-priv_change"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource57ref +{ +ResourceID = "[nxFileLine][V-204537][medium][SRG-OS-000392-GPOS-00172]::[RHEL]Baseline"; + ContainsLine = "-a always,exit -F path=/usr/sbin/setsebool -F perm=x -F auid>=1000 -F auid!=unset -k privileged-priv_change"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/sbin/setsebool\\s*-F\\s*perm\\s*=\\s*x\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-priv_change"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource58ref +{ +ResourceID = "[nxFileLine][V-204538][medium][SRG-OS-000392-GPOS-00172]::[RHEL]Baseline"; + ContainsLine = "-a always,exit -F path=/usr/bin/chcon -F perm=x -F auid>=1000 -F auid!=unset -k privileged-priv_change"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/bin/chcon\\s*-F\\s*perm\\s*=\\s*x\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-priv_change"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource59ref +{ +ResourceID = "[nxFileLine][V-204539][medium][SRG-OS-000392-GPOS-00172]::[RHEL]Baseline"; + ContainsLine = "-a always,exit -F path=/usr/sbin/setfiles -F perm=x -F auid>=1000 -F auid!=unset -k privileged-priv_change"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/sbin/setfiles\\s*-F\\s*perm\\s*=\\s*x\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-priv_change"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource60ref +{ +ResourceID = "[nxFileLine][V-204540][medium][SRG-OS-000392-GPOS-00172]::[RHEL]Baseline"; + ContainsLine = "-w /var/run/faillock -p wa -k logins"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-w\\s*/var/run/faillock\\s*-p\\s*wa\\s*-k\\s*logins"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource61ref +{ +ResourceID = "[nxFileLine][V-204541][medium][SRG-OS-000392-GPOS-00172]::[RHEL]Baseline"; + ContainsLine = "-w /var/log/lastlog -p wa -k logins"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-w\\s*/var/log/lastlog\\s*-p\\s*wa\\s*-k\\s*logins"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource62ref +{ +ResourceID = "[nxFileLine][V-204542][medium][SRG-OS-000042-GPOS-00020]::[RHEL]Baseline"; + ContainsLine = "-a always,exit -F path=/usr/bin/passwd -F perm=x -F auid>=1000 -F auid!=unset -k privileged-passwd"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/bin/passwd\\s*-F\\s*perm\\s*=\\s*x\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-passwd"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource63ref +{ +ResourceID = "[nxFileLine][V-204543][medium][SRG-OS-000042-GPOS-00020]::[RHEL]Baseline"; + ContainsLine = "-a always,exit -F path=/usr/sbin/unix_chkpwd -F perm=x -F auid>=1000 -F auid!=unset -k privileged-passwd"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/sbin/unix_chkpwd\\s*-F\\s*perm\\s*=\\s*x\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-passwd"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource64ref +{ +ResourceID = "[nxFileLine][V-204544][medium][SRG-OS-000042-GPOS-00020]::[RHEL]Baseline"; + ContainsLine = "-a always,exit -F path=/usr/bin/gpasswd -F perm=x -F auid>=1000 -F auid!=unset -k privileged-passwd"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/bin/gpasswd\\s*-F\\s*perm\\s*=\\s*x\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-passwd"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource65ref +{ +ResourceID = "[nxFileLine][V-204545][medium][SRG-OS-000042-GPOS-00020]::[RHEL]Baseline"; + ContainsLine = "-a always,exit -F path=/usr/bin/chage -F perm=x -F auid>=1000 -F auid!=unset -k privileged-passwd"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/bin/chage\\s*-F\\s*perm\\s*=\\s*x\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-passwd"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource66ref +{ +ResourceID = "[nxFileLine][V-204546][medium][SRG-OS-000042-GPOS-00020]::[RHEL]Baseline"; + ContainsLine = "-a always,exit -F path=/usr/sbin/userhelper -F perm=x -F auid>=1000 -F auid!=unset -k privileged-passwd"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/sbin/userhelper\\s*-F\\s*perm\\s*=\\s*x\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-passwd"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource67ref +{ +ResourceID = "[nxFileLine][V-204547][medium][SRG-OS-000037-GPOS-00015]::[RHEL]Baseline"; + ContainsLine = "-a always,exit -F path=/usr/bin/su -F perm=x -F auid>=1000 -F auid!=unset -k privileged-priv_change"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/bin/su\\s*-F\\s*perm\\s*=\\s*x\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-priv_change"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource68ref +{ +ResourceID = "[nxFileLine][V-204548][medium][SRG-OS-000037-GPOS-00015]::[RHEL]Baseline"; + ContainsLine = "-a always,exit -F path=/usr/bin/sudo -F perm=x -F auid>=1000 -F auid!=unset -k privileged-priv_change"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/bin/sudo\\s*-F\\s*perm\\s*=\\s*x\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-priv_change"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource69ref +{ +ResourceID = "[nxFileLine][V-204549.a][medium][SRG-OS-000037-GPOS-00015]::[RHEL]Baseline"; + ContainsLine = "-w /etc/sudoers -p wa -k privileged-actions"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-w /etc/sudoers -p wa -k privileged-actions"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource70ref +{ +ResourceID = "[nxFileLine][V-204549.b][medium][SRG-OS-000037-GPOS-00015]::[RHEL]Baseline"; + ContainsLine = "-w /etc/sudoers.d/ -p wa -k privileged-actions"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-w /etc/sudoers.d/ -p wa -k privileged-actions"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource71ref +{ +ResourceID = "[nxFileLine][V-204550][medium][SRG-OS-000037-GPOS-00015]::[RHEL]Baseline"; + ContainsLine = "-a always,exit -F path=/usr/bin/newgrp -F perm=x -F auid>=1000 -F auid!=unset -k privileged-priv_change"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/bin/newgrp\\s*-F\\s*perm\\s*=\\s*x\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-priv_change"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource72ref +{ +ResourceID = "[nxFileLine][V-204551][medium][SRG-OS-000037-GPOS-00015]::[RHEL]Baseline"; + ContainsLine = "-a always,exit -F path=/usr/bin/chsh -F perm=x -F auid>=1000 -F auid!=unset -k privileged-priv_change"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/bin/chsh\\s*-F\\s*perm\\s*=\\s*x\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-priv_change"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource73ref +{ +ResourceID = "[nxFileLine][V-204552.a][medium][SRG-OS-000042-GPOS-00020]::[RHEL]Baseline"; + ContainsLine = "-a always,exit -F arch=b32 -S mount -F auid>=1000 -F auid!=unset -k privileged-mount"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*mount\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-mount"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource74ref +{ +ResourceID = "[nxFileLine][V-204552.b][medium][SRG-OS-000042-GPOS-00020]::[RHEL]Baseline"; + ContainsLine = "-a always,exit -F arch=b64 -S mount -F auid>=1000 -F auid!=unset -k privileged-mount"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*mount\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-mount"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource75ref +{ +ResourceID = "[nxFileLine][V-204552.c][medium][SRG-OS-000042-GPOS-00020]::[RHEL]Baseline"; + ContainsLine = "-a always,exit -F path=/usr/bin/mount -F perm=x -F auid>=1000 -F auid!=unset -k privileged-mount"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/bin/mount\\s*-F\\s*perm\\s*=\\s*x\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-mount"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource76ref +{ +ResourceID = "[nxFileLine][V-204553][medium][SRG-OS-000042-GPOS-00020]::[RHEL]Baseline"; + ContainsLine = "-a always,exit -F path=/usr/bin/umount -F perm=x -F auid>=1000 -F auid!=unset -k privileged-mount"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/bin/umount\\s*-F\\s*perm\\s*=\\s*x\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-mount"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource77ref +{ +ResourceID = "[nxFileLine][V-204554][medium][SRG-OS-000042-GPOS-00020]::[RHEL]Baseline"; + ContainsLine = "-a always,exit -F path=/usr/sbin/postdrop -F perm=x -F auid>=1000 -F auid!=unset -k privileged-postfix"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/sbin/postdrop\\s*-F\\s*perm\\s*=\\s*x\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-postfix"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource78ref +{ +ResourceID = "[nxFileLine][V-204555][medium][SRG-OS-000042-GPOS-00020]::[RHEL]Baseline"; + ContainsLine = "-a always,exit -F path=/usr/sbin/postqueue -F perm=x -F auid>=1000 -F auid!=unset -k privileged-postfix"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/sbin/postqueue\\s*-F\\s*perm\\s*=\\s*x\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-postfix"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource79ref +{ +ResourceID = "[nxFileLine][V-204556][medium][SRG-OS-000042-GPOS-00020]::[RHEL]Baseline"; + ContainsLine = "-a always,exit -F path=/usr/libexec/openssh/ssh-keysign -F perm=x -F auid>=1000 -F auid!=unset -k privileged-ssh"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/libexec/openssh/ssh-keysign\\s*-F\\s*perm\\s*=\\s*x\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-ssh"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource80ref +{ +ResourceID = "[nxFileLine][V-204557][medium][SRG-OS-000042-GPOS-00020]::[RHEL]Baseline"; + ContainsLine = "-a always,exit -F path=/usr/bin/crontab -F perm=x -F auid>=1000 -F auid!=unset -k privileged-cron"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/bin/crontab\\s*-F\\s*perm\\s*=\\s*x\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-cron"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource81ref +{ +ResourceID = "[nxFileLine][V-204558][medium][SRG-OS-000471-GPOS-00215]::[RHEL]Baseline"; + ContainsLine = "-a always,exit -F path=/usr/sbin/pam_timestamp_check -F perm=x -F auid>=1000 -F auid!=unset -k privileged-pam"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/sbin/pam_timestamp_check\\s*-F\\s*perm\\s*=\\s*x\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-pam"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource82ref +{ +ResourceID = "[nxFileLine][V-204559.a][medium][SRG-OS-000471-GPOS-00216]::[RHEL]Baseline"; + ContainsLine = "-a always,exit -F arch=b32 -S create_module -F auid>=1000 -F auid!=unset -k module-change"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*create_module\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*module-change"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource83ref +{ +ResourceID = "[nxFileLine][V-204559.b][medium][SRG-OS-000471-GPOS-00216]::[RHEL]Baseline"; + ContainsLine = "-a always,exit -F arch=b64 -S create_module -F auid>=1000 -F auid!=unset -k module-change"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*create_module\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*module-change"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource84ref +{ +ResourceID = "[nxFileLine][V-204560.a][medium][SRG-OS-000471-GPOS-00216]::[RHEL]Baseline"; + ContainsLine = "-a always,exit -F arch=b32 -S init_module,finit_module -F auid>=1000 -F auid!=unset -k modulechange"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*init_module,finit_module\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*modulechange"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource85ref +{ +ResourceID = "[nxFileLine][V-204560.b][medium][SRG-OS-000471-GPOS-00216]::[RHEL]Baseline"; + ContainsLine = "-a always,exit -F arch=b64 -S init_module,finit_module -F auid>=1000 -F auid!=unset -k modulechange"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*init_module,finit_module\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*modulechange"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource86ref +{ +ResourceID = "[nxFileLine][V-204562.a][medium][SRG-OS-000471-GPOS-00216]::[RHEL]Baseline"; + ContainsLine = "-a always,exit -F arch=b32 -S delete_module -F auid>=1000 -F auid!=unset -k module-change"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*delete_module\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*module-change"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource87ref +{ +ResourceID = "[nxFileLine][V-204562.b][medium][SRG-OS-000471-GPOS-00216]::[RHEL]Baseline"; + ContainsLine = "-a always,exit -F arch=b64 -S delete_module -F auid>=1000 -F auid!=unset -k module-change"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*delete_module\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*module-change"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource88ref +{ +ResourceID = "[nxFileLine][V-204563][medium][SRG-OS-000471-GPOS-00216]::[RHEL]Baseline"; + ContainsLine = "-a always,exit -F path=/usr/bin/kmod -F perm=x -F auid>=1000 -F auid!=unset -k modules"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/bin/kmod\\s*-F\\s*perm\\s*=\\s*x\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*modules"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource89ref +{ +ResourceID = "[nxFileLine][V-204564][medium][SRG-OS-000004-GPOS-00004]::[RHEL]Baseline"; + ContainsLine = "-w /etc/passwd -p wa -k identity"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-w\\s*/etc/passwd\\s*-p\\s*wa\\s*-k\\s*identity"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource90ref +{ +ResourceID = "[nxFileLine][V-204565][medium][SRG-OS-000004-GPOS-00004]::[RHEL]Baseline"; + ContainsLine = "-w /etc/group -p wa -k identity"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-w\\s*/etc/group\\s*-p\\s*wa\\s*-k\\s*identity"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource91ref +{ +ResourceID = "[nxFileLine][V-204566][medium][SRG-OS-000004-GPOS-00004]::[RHEL]Baseline"; + ContainsLine = "-w /etc/gshadow -p wa -k identity"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-w\\s*/etc/gshadow\\s*-p\\s*wa\\s*-k\\s*identity"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource92ref +{ +ResourceID = "[nxFileLine][V-204567][medium][SRG-OS-000004-GPOS-00004]::[RHEL]Baseline"; + ContainsLine = "-w /etc/shadow -p wa -k identity"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-w\\s*/etc/shadow\\s*-p\\s*wa\\s*-k\\s*identity"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource93ref +{ +ResourceID = "[nxFileLine][V-204568][medium][SRG-OS-000004-GPOS-00004]::[RHEL]Baseline"; + ContainsLine = "-w /etc/security/opasswd -p wa -k identity"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-w\\s*/etc/security/opasswd\\s*-p\\s*wa\\s*-k\\s*identity"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource94ref +{ +ResourceID = "[nxFileLine][V-204572.a][medium][SRG-OS-000466-GPOS-00210]::[RHEL]Baseline"; + ContainsLine = "-a always,exit -F arch=b32 -S unlink,unlinkat,rename,renameat,rmdir -F auid>=1000 -F auid!=unset -k delete"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*unlink,unlinkat,rename,renameat,rmdir\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*delete"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource95ref +{ +ResourceID = "[nxFileLine][V-204572.b][medium][SRG-OS-000466-GPOS-00210]::[RHEL]Baseline"; + ContainsLine = "-a always,exit -F arch=b64 -S unlink,unlinkat,rename,renameat,rmdir -F auid>=1000 -F auid!=unset -k delete"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*unlink,unlinkat,rename,renameat,rmdir\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*delete"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource96ref +{ +ResourceID = "[nxFileLine][V-204578][medium][SRG-OS-000033-GPOS-00014]::[RHEL]Baseline"; + ContainsLine = "Ciphers aes256-ctr,aes192-ctr,aes128-ctr"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/ssh/sshd_config"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "^#\\s*Ciphers.*|^\\s*Ciphers\\s*aes128-ctr.*|^\\s*Ciphers\\s*aes192-ctr.*"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource97ref +{ +ResourceID = "[nxFileLine][V-204579.b][medium][SRG-OS-000163-GPOS-00072]::[RHEL]Baseline"; + ContainsLine = "declare -xr TMOUT=900"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/profile.d/tmout.sh"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "^\\s*TMOUT\\s*=\\s*[0-8]?[0-9]?[0-9]?$|^#\\s*TMOUT.*"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource98ref +{ +ResourceID = "[nxFileLine][V-204579.c][medium][SRG-OS-000163-GPOS-00072]::[RHEL]Baseline"; + ContainsLine = "declare -xr TMOUT=900"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/bashrc"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "^\\s*TMOUT\\s*=\\s*[0-8]?[0-9]?[0-9]?$|^#\\s*TMOUT.*"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource99ref +{ +ResourceID = "[nxFileLine][V-204579.d][medium][SRG-OS-000163-GPOS-00072]::[RHEL]Baseline"; + ContainsLine = "declare -xr TMOUT=900"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/profile"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "^\\s*TMOUT\\s*=\\s*[0-8]?[0-9]?[0-9]?$|^#\\s*TMOUT.*"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource100ref +{ +ResourceID = "[nxFileLine][V-204580][medium][SRG-OS-000023-GPOS-00006]::[RHEL]Baseline"; + ContainsLine = "banner /etc/issue"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/ssh/sshd_config"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*banner\\s*/etc/issue"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource101ref +{ +ResourceID = "[nxFileLine][V-204587][medium][SRG-OS-000163-GPOS-00072]::[RHEL]Baseline"; + ContainsLine = "ClientAliveInterval 600"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/ssh/sshd_config"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "^\\s*ClientAliveInterval\\s*[0-5]?[0-9]?[0-9]?\\s*$|^#\\s*ClientAliveInterval.*|^\\s*ClientAliveInterval\\s*$"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource102ref +{ +ResourceID = "[nxFileLine][V-204588][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; + ContainsLine = "RhostsRSAAuthentication no"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/ssh/sshd_config"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "^#\\s*RhostsRSAAuthentication.*$|^RhostsRSAAuthentication\\s*(?!no\\b)\\w*$"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource103ref +{ +ResourceID = "[nxFileLine][V-204589][medium][SRG-OS-000163-GPOS-00072]::[RHEL]Baseline"; + ContainsLine = "ClientAliveCountMax 0"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/ssh/sshd_config"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "^#\\s*ClientAliveCountMax.*$|^ClientAliveCountMax\\s*(?!0\\b)\\w*$"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource104ref +{ +ResourceID = "[nxFileLine][V-204590][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; + ContainsLine = "IgnoreRhosts yes"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/ssh/sshd_config"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "^#\\s*IgnoreRhosts.*$|^IgnoreRhosts\\s*(?!yes\\b)\\w*$"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource105ref +{ +ResourceID = "[nxFileLine][V-204591][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; + ContainsLine = "PrintLastLog yes"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/ssh/sshd_config"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "^#\\s*PrintLastLog.*$|^PrintLastLog\\s*(?!yes\\b)\\w*$"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource106ref +{ +ResourceID = "[nxFileLine][V-204592][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; + ContainsLine = "PermitRootLogin no"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/ssh/sshd_config"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "^#\\s*PermitRootLogin.*$|^PermitRootLogin\\s*(?!no\\b)\\w*$"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource107ref +{ +ResourceID = "[nxFileLine][V-204593][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; + ContainsLine = "IgnoreUserKnownHosts yes"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/ssh/sshd_config"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "^#\\s*IgnoreUserKnownHosts.*$|^IgnoreUserKnownHosts\\s*(?!yes\\b)\\w*$"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource108ref +{ +ResourceID = "[nxFileLine][V-204594][high][SRG-OS-000074-GPOS-00042]::[RHEL]Baseline"; + ContainsLine = "Protocol 2"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/ssh/sshd_config"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "^#\\s*Protocol.*$|^Protocol\\s*(?!2\\b)\\w*$"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource109ref +{ +ResourceID = "[nxFileLine][V-204595][medium][SRG-OS-000250-GPOS-00093]::[RHEL]Baseline"; + ContainsLine = "MACs hmac-sha2-512,hmac-sha2-256"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/ssh/sshd_config"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*MACs.*|\\s*MACs\\s*hmac-(?!sha2-512).*"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource110ref +{ +ResourceID = "[nxFileLine][V-204598][medium][SRG-OS-000364-GPOS-00151]::[RHEL]Baseline"; + ContainsLine = "GSSAPIAuthentication no"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/ssh/sshd_config"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "^#\\s*GSSAPIAuthentication.*$|^GSSAPIAuthentication\\s*(?!no\\b)\\w*$"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource111ref +{ +ResourceID = "[nxFileLine][V-204599][medium][SRG-OS-000364-GPOS-00151]::[RHEL]Baseline"; + ContainsLine = "KerberosAuthentication no"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/ssh/sshd_config"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "^#\\s*KerberosAuthentication.*$|^KerberosAuthentication\\s*(?!no\\b)\\w*$"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource112ref +{ +ResourceID = "[nxFileLine][V-204600][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; + ContainsLine = "StrictModes yes"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/ssh/sshd_config"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "^#\\s*StrictModes.*$|^StrictModes\\s*(?!yes\\b)\\w*$"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource113ref +{ +ResourceID = "[nxFileLine][V-204601][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; + ContainsLine = "UsePrivilegeSeparation sandbox"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/ssh/sshd_config"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "^#\\s*UsePrivilegeSeparation.*$|^UsePrivilegeSeparation\\s*(?!sandbox\\b)\\w*$"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource114ref +{ +ResourceID = "[nxFileLine][V-204602][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; + ContainsLine = "Compression delayed"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/ssh/sshd_config"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "^#\\s*Compression.*$|^Compression\\s*(?!delayed\\b)\\w*$"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource115ref +{ +ResourceID = "[nxFileLine][V-204622][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; + ContainsLine = "X11Forwarding no"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/ssh/sshd_config"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "^#\\s*X11Forwarding.*$|^X11Forwarding\\s*(?!no\\b)\\w*$"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource116ref +{ +ResourceID = "[nxFileLine][V-233307][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; + ContainsLine = "X11UseLocalhost yes"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/ssh/sshd_config"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*X11UseLocalhost\\s*yes"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource117ref +{ +ResourceID = "[nxFileLine][V-255925][medium][SRG-OS-000033-GPOS-00014]::[RHEL]Baseline"; + ContainsLine = "KexAlgorithms ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/ssh/sshd_config"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*KexAlgorithms\\s*ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxServiceResource as $MSFT_nxServiceResource1ref +{ +ResourceID = "[nxService][V-204451][medium][SRG-OS-000114-GPOS-00059]::[RHEL]Baseline"; + Controller = "systemd"; + Enabled = False; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxService.ps1::13::9::nxService"; + Name = "autofs"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxServiceResource as $MSFT_nxServiceResource2ref +{ +ResourceID = "[nxService][V-204492][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; + Controller = "systemd"; + Enabled = False; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxService.ps1::13::9::nxService"; + Name = "kdump"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxServiceResource as $MSFT_nxServiceResource3ref +{ +ResourceID = "[nxService][V-204503][medium][SRG-OS-000038-GPOS-00016]::[RHEL]Baseline"; + Controller = "systemd"; + State = "Running"; + Enabled = True; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxService.ps1::22::9::nxService"; + Name = "auditd"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxServiceResource as $MSFT_nxServiceResource4ref +{ +ResourceID = "[nxService][V-204586][medium][SRG-OS-000423-GPOS-00187]::[RHEL]Baseline"; + Controller = "systemd"; + State = "Running"; + Enabled = True; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxService.ps1::22::9::nxService"; + Name = "sshd"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxServiceResource as $MSFT_nxServiceResource5ref +{ +ResourceID = "[nxService][V-204604.b][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; + Controller = "systemd"; + State = "Running"; + Enabled = True; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxService.ps1::22::9::nxService"; + Name = "firewalld"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxScriptResource as $MSFT_nxScriptResource1ref +{ +ResourceID = "[nxScript][V-204399.b][medium][[Skip] SRG-OS-000029-GPOS-00010]::[RHEL]Baseline"; + GetScript = "#!/bin/bash\necho [V-204399.b][medium][[Skip] SRG-OS-000029-GPOS-00010]"; + TestScript = "#!/bin/bash\nexit 0"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxScript.skip.ps1::10::5::nxScript"; + SetScript = "#!/bin/bash"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxScriptResource as $MSFT_nxScriptResource2ref +{ +ResourceID = "[nxScript][V-204400][medium][[Skip] SRG-OS-000029-GPOS-00010]::[RHEL]Baseline"; + GetScript = "#!/bin/bash\necho [V-204400][medium][[Skip] SRG-OS-000029-GPOS-00010]"; + TestScript = "#!/bin/bash\nexit 0"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxScript.skip.ps1::10::5::nxScript"; + SetScript = "#!/bin/bash"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxScriptResource as $MSFT_nxScriptResource3ref +{ +ResourceID = "[nxScript][V-204403][medium][[Skip] SRG-OS-000029-GPOS-00010]::[RHEL]Baseline"; + GetScript = "#!/bin/bash\necho [V-204403][medium][[Skip] SRG-OS-000029-GPOS-00010]"; + TestScript = "#!/bin/bash\nexit 0"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxScript.skip.ps1::10::5::nxScript"; + SetScript = "#!/bin/bash"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxScriptResource as $MSFT_nxScriptResource4ref +{ +ResourceID = "[nxScript][V-204509][medium][[Skip] SRG-OS-000342-GPOS-00133]::[RHEL]Baseline"; + GetScript = "#!/bin/bash\necho [V-204509][medium][[Skip] SRG-OS-000342-GPOS-00133]"; + TestScript = "#!/bin/bash\nexit 0"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxScript.skip.ps1::10::5::nxScript"; + SetScript = "#!/bin/bash"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxScriptResource as $MSFT_nxScriptResource5ref +{ +ResourceID = "[nxScript][V-204513][medium][[Skip] SRG-OS-000343-GPOS-00134]::[RHEL]Baseline"; + GetScript = "#!/bin/bash\necho [V-204513][medium][[Skip] SRG-OS-000343-GPOS-00134]"; + TestScript = "#!/bin/bash\nexit 0"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxScript.skip.ps1::10::5::nxScript"; + SetScript = "#!/bin/bash"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxScriptResource as $MSFT_nxScriptResource6ref +{ +ResourceID = "[nxScript][V-204623][medium][[Skip] SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; + GetScript = "#!/bin/bash\necho [V-204623][medium][[Skip] SRG-OS-000480-GPOS-00227]"; + TestScript = "#!/bin/bash\nexit 0"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxScript.skip.ps1::10::5::nxScript"; + SetScript = "#!/bin/bash"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxScriptResource as $MSFT_nxScriptResource7ref +{ +ResourceID = "[nxScript][V-244557][medium][[Skip] SRG-OS-000080-GPOS-00048]::[RHEL]Baseline"; + GetScript = "#!/bin/bash\necho [V-244557][medium][[Skip] SRG-OS-000080-GPOS-00048]"; + TestScript = "#!/bin/bash\nexit 0"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxScript.skip.ps1::10::5::nxScript"; + SetScript = "#!/bin/bash"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxScriptResource as $MSFT_nxScriptResource8ref +{ +ResourceID = "[nxScript][V-244558][medium][[Skip] SRG-OS-000080-GPOS-00048]::[RHEL]Baseline"; + GetScript = "#!/bin/bash\necho [V-244558][medium][[Skip] SRG-OS-000080-GPOS-00048]"; + TestScript = "#!/bin/bash\nexit 0"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxScript.skip.ps1::10::5::nxScript"; + SetScript = "#!/bin/bash"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxScriptResource as $MSFT_nxScriptResource9ref +{ +ResourceID = "[nxScript][V-204399.a][medium][[Skip] SRG-OS-000029-GPOS-00010]::[RHEL]Baseline"; + GetScript = "#!/bin/bash\necho [V-204399.a][medium][[Skip] SRG-OS-000029-GPOS-00010]"; + TestScript = "#!/bin/bash\nexit 0"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxScript.skip.ps1::10::5::nxScript"; + SetScript = "#!/bin/bash"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxScriptResource as $MSFT_nxScriptResource10ref +{ +ResourceID = "[nxScript][V-255926][medium][[Skip] SRG-OS-000029-GPOS-00010]::[RHEL]Baseline"; + GetScript = "#!/bin/bash\necho [V-255926][medium][[Skip] SRG-OS-000029-GPOS-00010]"; + TestScript = "#!/bin/bash\nexit 0"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxScript.skip.ps1::10::5::nxScript"; + SetScript = "#!/bin/bash"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of OMI_ConfigurationDocument + + { + Version="2.0.0"; + + MinimumCompatibleVersion = "1.0.0"; + + CompatibleVersionAdditionalProperties= {"Omi_BaseResource:ConfigurationName"}; + + Author="Microsoft"; + + GenerationDate="03/09/2023 14:17:33"; + + GenerationHost="Microsoft"; + + Name="LinuxBaseLine"; + + }; + diff --git a/stig/linux/config/CentOS79.mof b/stig/linux/config/CentOS79.mof index 1d6128f..b667d17 100644 --- a/stig/linux/config/CentOS79.mof +++ b/stig/linux/config/CentOS79.mof @@ -1,2118 +1,1829 @@ -/* -@TargetNode='CentOS79' -@GeneratedBy=Microsoft -@GenerationDate=06/30/2022 11:38:45 -@GenerationHost=Microsoft -*/ - -instance of MSFT_nxPackageResource as $MSFT_nxPackageResource1ref -{ -ResourceID = "[nxPackage][V-204442][high][SRG-OS-000095-GPOS-00049]::[RHEL]Baseline"; - Ensure = "Absent"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxPackage.ps1::8::5::nxPackage"; - Name = "rsh-server"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxPackageResource as $MSFT_nxPackageResource2ref -{ -ResourceID = "[nxPackage][V-204443][high][SRG-OS-000095-GPOS-00049]::[RHEL]Baseline"; - Ensure = "Absent"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxPackage.ps1::8::5::nxPackage"; - Name = "ypserv"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxPackageResource as $MSFT_nxPackageResource3ref -{ -ResourceID = "[nxPackage][V-204497][high][SRG-OS-000033-GPOS-00014]::[RHEL]Baseline"; - Ensure = "Present"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxPackage.ps1::8::5::nxPackage"; - Name = "dracut-fips"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxPackageResource as $MSFT_nxPackageResource4ref -{ -ResourceID = "[nxPackage][V-204498][low][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; - Ensure = "Present"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxPackage.ps1::8::5::nxPackage"; - Name = "aide"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxPackageResource as $MSFT_nxPackageResource5ref -{ -ResourceID = "[nxPackage][V-204502][high][SRG-OS-000095-GPOS-00049]::[RHEL]Baseline"; - Ensure = "Absent"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxPackage.ps1::8::5::nxPackage"; - Name = "telnet-server"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxPackageResource as $MSFT_nxPackageResource6ref -{ -ResourceID = "[nxPackage][V-204585][medium][SRG-OS-000423-GPOS-00187]::[RHEL]Baseline"; - Ensure = "Present"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxPackage.ps1::8::5::nxPackage"; - Name = "openssh-server"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxPackageResource as $MSFT_nxPackageResource7ref -{ -ResourceID = "[nxPackage][V-204604.a][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; - Ensure = "Present"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxPackage.ps1::8::5::nxPackage"; - Name = "firewalld"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxPackageResource as $MSFT_nxPackageResource8ref -{ -ResourceID = "[nxPackage][V-204620][high][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; - Ensure = "Absent"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxPackage.ps1::8::5::nxPackage"; - Name = "vsftpd"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxPackageResource as $MSFT_nxPackageResource9ref -{ -ResourceID = "[nxPackage][V-204621][high][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; - Ensure = "Absent"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxPackage.ps1::8::5::nxPackage"; - Name = "tftp-server"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxPackageResource as $MSFT_nxPackageResource10ref -{ -ResourceID = "[nxPackage][V-204631][medium][SRG-OS-000375-GPOS-00160]::[RHEL]Baseline"; - Ensure = "Present"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxPackage.ps1::8::5::nxPackage"; - Name = "pam_pkcs11"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileResource as $MSFT_nxFileResource1ref -{ -ResourceID = "[nxFile][V-204395][medium][SRG-OS-000023-GPOS-00006]::[RHEL]Baseline"; - Contents = "You are accessing a U.S. Government (USG) Information System (IS) that is provided for USG-authorized use only.\n\nBy using this IS (which includes any device attached to this IS), you consent to the following conditions:\n\n-The USG routinely intercepts and monitors communications on this IS for purposes including, but not limited to, penetration testing, COMSEC monitoring, network operations and defense, personnel misconduct (PM), law enforcement (LE), and counterintelligence (CI) investigations.\n\n-At any time, the USG may inspect and seize data stored on this IS.\n\n-Communications using, or data stored on, this IS are not private, are subject to routine monitoring, interception, and search, and may be disclosed or used for any USG-authorized purpose.\n\n-This IS includes security measures (e.g., authentication and access controls) to protect USG interests--not for your personal benefit or privacy.\n\n-Notwithstanding the above, using this IS does not constitute consent to PM, LE or CI investigative searching or monitoring of the content of privileged communications, or work product, related to personal representation or services by attorneys, psychotherapists, or clergy, and their assistants. Such communications and work product are private and confidential. See User Agreement for details."; - DestinationPath = "/etc/issue"; - ModuleName = "nx"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; - ModuleVersion = "1.0"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileResource as $MSFT_nxFileResource2ref -{ -ResourceID = "[nxFile][V-204449.a][medium][SRG-OS-000114-GPOS-00059]::[RHEL]Baseline"; - Contents = ""; - DestinationPath = "/etc/modprobe.d/usb-storage.conf"; - ModuleName = "nx"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; - ModuleVersion = "1.0"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileResource as $MSFT_nxFileResource3ref -{ -ResourceID = "[nxFile][V-204449.b][medium][SRG-OS-000114-GPOS-00059]::[RHEL]Baseline"; - Contents = ""; - DestinationPath = "/etc/modprobe.d/blacklist.conf"; - ModuleName = "nx"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; - ModuleVersion = "1.0"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileResource as $MSFT_nxFileResource4ref -{ -ResourceID = "[nxFile][V-204450.a][medium][SRG-OS-000378-GPOS-00163]::[RHEL]Baseline"; - Contents = ""; - DestinationPath = "/etc/modprobe.d/dccp.conf"; - ModuleName = "nx"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; - ModuleVersion = "1.0"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileResource as $MSFT_nxFileResource5ref -{ -ResourceID = "[nxFile][V-204576][low][SRG-OS-000027-GPOS-00008]::[RHEL]Baseline"; - Contents = "* hard maxlogins 10"; - DestinationPath = "/etc/security/limits.d/204576-powerstig.conf"; - ModuleName = "nx"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; - ModuleVersion = "1.0"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileResource as $MSFT_nxFileResource6ref -{ -ResourceID = "[nxFile][V-204579.a][medium][SRG-OS-000163-GPOS-00072]::[RHEL]Baseline"; - Contents = ""; - DestinationPath = "/etc/profile.d/tmout.sh"; - ModuleName = "nx"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; - ModuleVersion = "1.0"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileResource as $MSFT_nxFileResource7ref -{ -ResourceID = "[nxFile][V-204584][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; - Contents = "kernel.randomize_va_space = 2"; - DestinationPath = "/etc/sysctl.d/204584-powerstig.conf"; - ModuleName = "nx"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; - ModuleVersion = "1.0"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileResource as $MSFT_nxFileResource8ref -{ -ResourceID = "[nxFile][V-204609][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; - Contents = "net.ipv4.conf.all.accept_source_route = 0"; - DestinationPath = "/etc/sysctl.d/204609-powerstig.conf"; - ModuleName = "nx"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; - ModuleVersion = "1.0"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileResource as $MSFT_nxFileResource9ref -{ -ResourceID = "[nxFile][V-204610][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; - Contents = "net.ipv4.conf.all.rp_filter = 1"; - DestinationPath = "/etc/sysctl.d/204610-powerstig.conf"; - ModuleName = "nx"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; - ModuleVersion = "1.0"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileResource as $MSFT_nxFileResource10ref -{ -ResourceID = "[nxFile][V-204611][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; - Contents = "net.ipv4.conf.default.rp_filter = 1"; - DestinationPath = "/etc/sysctl.d/204611-powerstig.conf"; - ModuleName = "nx"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; - ModuleVersion = "1.0"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileResource as $MSFT_nxFileResource11ref -{ -ResourceID = "[nxFile][V-204612][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; - Contents = "net.ipv4.conf.default.accept_source_route = 0"; - DestinationPath = "/etc/sysctl.d/204612-powerstig.conf"; - ModuleName = "nx"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; - ModuleVersion = "1.0"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileResource as $MSFT_nxFileResource12ref -{ -ResourceID = "[nxFile][V-204613][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; - Contents = "net.ipv4.icmp_echo_ignore_broadcasts = 1"; - DestinationPath = "/etc/sysctl.d/204613-powerstig.conf"; - ModuleName = "nx"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; - ModuleVersion = "1.0"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileResource as $MSFT_nxFileResource13ref -{ -ResourceID = "[nxFile][V-204614][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; - Contents = "net.ipv4.conf.default.accept_redirects = 0"; - DestinationPath = "/etc/sysctl.d/204614-powerstig.conf"; - ModuleName = "nx"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; - ModuleVersion = "1.0"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileResource as $MSFT_nxFileResource14ref -{ -ResourceID = "[nxFile][V-204615][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; - Contents = "net.ipv4.conf.all.accept_redirects = 0"; - DestinationPath = "/etc/sysctl.d/204615-powerstig.conf"; - ModuleName = "nx"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; - ModuleVersion = "1.0"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileResource as $MSFT_nxFileResource15ref -{ -ResourceID = "[nxFile][V-204616][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; - Contents = "net.ipv4.conf.default.send_redirects = 0"; - DestinationPath = "/etc/sysctl.d/204616-powerstig.conf"; - ModuleName = "nx"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; - ModuleVersion = "1.0"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileResource as $MSFT_nxFileResource16ref -{ -ResourceID = "[nxFile][V-204617][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; - Contents = "net.ipv4.conf.all.send_redirects = 0"; - DestinationPath = "/etc/sysctl.d/204617-powerstig.conf"; - ModuleName = "nx"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; - ModuleVersion = "1.0"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileResource as $MSFT_nxFileResource17ref -{ -ResourceID = "[nxFile][V-204625][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; - Contents = "net.ipv4.ip_forward = 0"; - DestinationPath = "/etc/sysctl.d/204625-powerstig.conf"; - ModuleName = "nx"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; - ModuleVersion = "1.0"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileResource as $MSFT_nxFileResource18ref -{ -ResourceID = "[nxFile][V-204630][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; - Contents = "net.ipv6.conf.all.accept_source_route = 0"; - DestinationPath = "/etc/sysctl.d/204630-powerstig.conf"; - ModuleName = "nx"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; - ModuleVersion = "1.0"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileResource as $MSFT_nxFileResource19ref -{ -ResourceID = "[nxFile][V-237634.a][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; - Contents = "Defaults !targetpw"; - DestinationPath = "/etc/sudoers.d/237634a-powerstig.conf"; - ModuleName = "nx"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; - ModuleVersion = "1.0"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileResource as $MSFT_nxFileResource20ref -{ -ResourceID = "[nxFile][V-237634.b][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; - Contents = "Defaults !rootpw"; - DestinationPath = "/etc/sudoers.d/237634b-powerstig.conf"; - ModuleName = "nx"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; - ModuleVersion = "1.0"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileResource as $MSFT_nxFileResource21ref -{ -ResourceID = "[nxFile][V-237634.c][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; - Contents = "Defaults !runaspw"; - DestinationPath = "/etc/sudoers.d/237634c-powerstig.conf"; - ModuleName = "nx"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; - ModuleVersion = "1.0"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileResource as $MSFT_nxFileResource22ref -{ -ResourceID = "[nxFile][V-237635][medium][SRG-OS-000373-GPOS-00156]::[RHEL]Baseline"; - Contents = "Defaults timestamp_timeout=0"; - DestinationPath = "/etc/sudoers.d/237635-powerstig.conf"; - ModuleName = "nx"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; - ModuleVersion = "1.0"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileResource as $MSFT_nxFileResource23ref -{ -ResourceID = "[nxFile][V-250314][medium][SRG-OS-000324-GPOS-00125]::[RHEL]Baseline"; - Contents = "%wheel ALL=(ALL) TYPE=sysadm_t ROLE=sysadm_r ALL"; - DestinationPath = "/etc/sudoers.d/250314-powerstig.conf"; - ModuleName = "nx"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; - ModuleVersion = "1.0"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource1ref -{ -ResourceID = "[nxFileLine][V-204405][medium][SRG-OS-000069-GPOS-00037]::[RHEL]Baseline"; - ContainsLine = "password substack system-auth"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/pam.d/passwd"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "^\\s*password(?:\\t*|\\s*)substack\\tsystem-auth\\s*$|^#\\s*password\\s*substack\\s*system-auth.*"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource2ref -{ -ResourceID = "[nxFileLine][V-204407][medium][SRG-OS-000069-GPOS-00037]::[RHEL]Baseline"; - ContainsLine = "ucredit = -1"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/security/pwquality.conf"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "^#\\s*ucredit.*$|^ucredit\\s*=\\s*(?!-1\\b)\\w*$"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource3ref -{ -ResourceID = "[nxFileLine][V-204408][medium][SRG-OS-000070-GPOS-00038]::[RHEL]Baseline"; - ContainsLine = "lcredit = -1"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/security/pwquality.conf"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "^#\\s*lcredit.*$|^lcredit\\s*=\\s*(?!-1\\b)\\w*$"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource4ref -{ -ResourceID = "[nxFileLine][V-204409][medium][SRG-OS-000071-GPOS-00039]::[RHEL]Baseline"; - ContainsLine = "dcredit = -1"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/security/pwquality.conf"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "^#\\s*dcredit.*$|^dcredit\\s*=\\s*(?!-1\\b)\\w*$"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource5ref -{ -ResourceID = "[nxFileLine][V-204410][medium][SRG-OS-000266-GPOS-00101]::[RHEL]Baseline"; - ContainsLine = "ocredit=-1"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/security/pwquality.conf"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "^#\\s*ocredit.*$|^ocredit\\s*=\\s*(?!-1)\\w*$"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource6ref -{ -ResourceID = "[nxFileLine][V-204411][medium][SRG-OS-000072-GPOS-00040]::[RHEL]Baseline"; - ContainsLine = "difok = 8"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/security/pwquality.conf"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*difok\\s*=.*|^\\s*difok\\s*=\\s*(-|)[0-7]$"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource7ref -{ -ResourceID = "[nxFileLine][V-204412][medium][SRG-OS-000072-GPOS-00040]::[RHEL]Baseline"; - ContainsLine = "minclass = 4"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/security/pwquality.conf"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "^#\\s*minclass\\s*=.*|^\\s*minclass\\s*=\\s*(?!\\d{2,})[1-3]"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource8ref -{ -ResourceID = "[nxFileLine][V-204413][medium][SRG-OS-000072-GPOS-00040]::[RHEL]Baseline"; - ContainsLine = "maxrepeat = 3"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/security/pwquality.conf"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "^#\\s*maxrepeat\\s*=.*|^\\s*maxrepeat\\s*=\\s*(?:\\d{2,}|[4-9])"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource9ref -{ -ResourceID = "[nxFileLine][V-204414][medium][SRG-OS-000072-GPOS-00040]::[RHEL]Baseline"; - ContainsLine = "maxclassrepeat = 4"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/security/pwquality.conf"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "^#\\s*maxclassrepeat\\s*=.*|^\\s*maxclassrepeat\\s*=\\s*(?:\\d{2,}|[1-3|5-9])"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource10ref -{ -ResourceID = "[nxFileLine][V-204416][medium][SRG-OS-000073-GPOS-00041]::[RHEL]Baseline"; - ContainsLine = "ENCRYPT_METHOD SHA512"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/login.defs"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*ENCRYPT_METHOD\\s*SHA512"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource11ref -{ -ResourceID = "[nxFileLine][V-204418][medium][SRG-OS-000075-GPOS-00043]::[RHEL]Baseline"; - ContainsLine = "PASS_MIN_DAYS 1"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/login.defs"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "^\\s*PASS_MIN_DAYS\\s*[0]*$|#\\s*PASS_MIN_DAYS.*"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource12ref -{ -ResourceID = "[nxFileLine][V-204420][medium][SRG-OS-000076-GPOS-00044]::[RHEL]Baseline"; - ContainsLine = "PASS_MAX_DAYS 60"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/login.defs"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "^\\s*PASS_MAX_DAYS\\s*([6][1-9]|[7-9][0-9]|\\d{3,})$|#\\s*PASS_MAX_DAYS.*"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource13ref -{ -ResourceID = "[nxFileLine][V-204423][medium][SRG-OS-000078-GPOS-00046]::[RHEL]Baseline"; - ContainsLine = "minlen = 15"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/security/pwquality.conf"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "^\\s*minlen\\s*=\\s*([0-9]|[1][1-4])$|#\\s*minlen.*"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource14ref -{ -ResourceID = "[nxFileLine][V-204425][high][SRG-OS-000106-GPOS-00053]::[RHEL]Baseline"; - ContainsLine = "PermitEmptyPasswords no"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/ssh/sshd_config"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "^#\\s*PermitEmptyPasswords.*$|^PermitEmptyPasswords\\s*(?!no\\b)\\w*$"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource15ref -{ -ResourceID = "[nxFileLine][V-204426][medium][SRG-OS-000118-GPOS-00060]::[RHEL]Baseline"; - ContainsLine = "INACTIVE=35"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/default/useradd"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "^#\\s*INACTIVE\\s*=.*|^\\s*INACTIVE\\s*=\\s*(3[5-9]|[4-9]\\d+|\\d{3,})"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource16ref -{ -ResourceID = "[nxFileLine][V-204431][medium][SRG-OS-000480-GPOS-00226]::[RHEL]Baseline"; - ContainsLine = "FAIL_DELAY 4"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/login.defs"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "^#\\s*FAIL_DELAY.*|^FAIL_DELAY\\s*(?!\\d{2,})[1-3]"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource17ref -{ -ResourceID = "[nxFileLine][V-204434][medium][SRG-OS-000480-GPOS-00229]::[RHEL]Baseline"; - ContainsLine = "PermitUserEnvironment no"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/ssh/sshd_config"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "^#\\s*PermitUserEnvironment.*$|^PermitUserEnvironment\\s*(?!no\\b)\\w*$"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource18ref -{ -ResourceID = "[nxFileLine][V-204435][medium][SRG-OS-000480-GPOS-00229]::[RHEL]Baseline"; - ContainsLine = "HostbasedAuthentication no"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/ssh/sshd_config"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "^#\\s*HostbasedAuthentication.*$|^HostbasedAuthentication\\s*(?!no\\b)\\w*$"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource19ref -{ -ResourceID = "[nxFileLine][V-204447][high][SRG-OS-000366-GPOS-00153]::[RHEL]Baseline"; - ContainsLine = "gpgcheck=1"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/yum.conf"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*gpgcheck\\s*=\\s*1"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource20ref -{ -ResourceID = "[nxFileLine][V-204448][high][SRG-OS-000366-GPOS-00153]::[RHEL]Baseline"; - ContainsLine = "localpkg_gpgcheck=1"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/yum.conf"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*localpkg_gpgcheck\\s*=\\s*1"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource21ref -{ -ResourceID = "[nxFileLine][V-204449.c][medium][SRG-OS-000114-GPOS-00059]::[RHEL]Baseline"; - ContainsLine = "install usb-storage /bin/true"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/modprobe.d/usb-storage.conf"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*install\\s*usb-storage\\s*/bin/true"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource22ref -{ -ResourceID = "[nxFileLine][V-204449.d][medium][SRG-OS-000114-GPOS-00059]::[RHEL]Baseline"; - ContainsLine = "blacklist usb-storage"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/modprobe.d/blacklist.conf"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*blacklist\\s*usb-storage"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource23ref -{ -ResourceID = "[nxFileLine][V-204450.b][medium][SRG-OS-000378-GPOS-00163]::[RHEL]Baseline"; - ContainsLine = "install dccp /bin/true"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/modprobe.d/dccp.conf"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*install\\s*dccp\\s*/bin/true"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource24ref -{ -ResourceID = "[nxFileLine][V-204450.c][medium][SRG-OS-000378-GPOS-00163]::[RHEL]Baseline"; - ContainsLine = "blacklist dccp"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/modprobe.d/blacklist.conf"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*blacklist\\s*dccp"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource25ref -{ -ResourceID = "[nxFileLine][V-204452][low][SRG-OS-000437-GPOS-00194]::[RHEL]Baseline"; - ContainsLine = "clean_requirements_on_remove=1"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/yum.conf"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*clean_requirements_on_remove\\s*=\\s*1"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource26ref -{ -ResourceID = "[nxFileLine][V-204453][medium][SRG-OS-000445-GPOS-00199]::[RHEL]Baseline"; - ContainsLine = "SELINUX=enforcing"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/selinux/config"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "^#\\s*SELINUX.*$|^SELINUX\\s*=\\s*(?!enforcing)\\w*$"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource27ref -{ -ResourceID = "[nxFileLine][V-204454][medium][SRG-OS-000445-GPOS-00199]::[RHEL]Baseline"; - ContainsLine = "SELINUXTYPE=targeted"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/selinux/config"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "^#\\s*SELINUXTYPE.*$|^SELINUXTYPE\\s*=\\s*(?!targeted\\b)\\w*$"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource28ref -{ -ResourceID = "[nxFileLine][V-204457][medium][SRG-OS-000480-GPOS-00228]::[RHEL]Baseline"; - ContainsLine = "UMASK 077"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/login.defs"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "^\\s*UMASK(?!\\s077\\b)\\s*\\d*\\s*$|^#\\s*UMASK.*"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource29ref -{ -ResourceID = "[nxFileLine][V-204466][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; - ContainsLine = "CREATE_HOME yes"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/login.defs"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "^#\\s*CREATE_HOME.*$|^CREATE_HOME\\s*(?!yes\\b)\\w*$|^CREATE_HOME\\t.*"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource30ref -{ -ResourceID = "[nxFileLine][V-204504][medium][SRG-OS-000046-GPOS-00022]::[RHEL]Baseline"; - ContainsLine = "-f 2"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "^#\\s*-f\\s+2|^\\s*-f\\s*1"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileResource as $MSFT_nxFileResource24ref -{ -SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::29::9::nxFile"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - ResourceID = "[nxFile][V-204506.a][medium][SRG-OS-000342-GPOS-00133]::[RHEL]Baseline"; - DestinationPath = "/etc/audisp/plugins.d/au-remote.conf"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource31ref -{ -ResourceID = "[nxFileLine][V-204506.a][medium][SRG-OS-000342-GPOS-00133]::[RHEL]Baseline"; - ContainsLine = "active = yes"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audisp/plugins.d/au-remote.conf"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "\\s*active\\s*=\\s*no|active=yes|#\\s*active\\s*=.*"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource32ref -{ -ResourceID = "[nxFileLine][V-204506.b][medium][SRG-OS-000342-GPOS-00133]::[RHEL]Baseline"; - ContainsLine = "direction = out"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audisp/plugins.d/au-remote.conf"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*direction\\s*=\\s*out"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource33ref -{ -ResourceID = "[nxFileLine][V-204506.c][medium][SRG-OS-000342-GPOS-00133]::[RHEL]Baseline"; - ContainsLine = "path = /sbin/audisp-remote"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audisp/plugins.d/au-remote.conf"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*path\\s*=\\s*/sbin/audisp-remote"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource34ref -{ -ResourceID = "[nxFileLine][V-204506.d][medium][SRG-OS-000342-GPOS-00133]::[RHEL]Baseline"; - ContainsLine = "type = always"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audisp/plugins.d/au-remote.conf"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*type\\s*=\\s*always"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource35ref -{ -ResourceID = "[nxFileLine][V-204507][medium][SRG-OS-000342-GPOS-00133]::[RHEL]Baseline"; - ContainsLine = "overflow_action = syslog"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audisp/audispd.conf"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "^#\\s*overflow_action.*$|^overflow_action\\s*=\\s*(?!syslog$)\\w*$"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource36ref -{ -ResourceID = "[nxFileLine][V-204508][medium][SRG-OS-000342-GPOS-00133]::[RHEL]Baseline"; - ContainsLine = "name_format = hostname"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audisp/audispd.conf"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "^#\\s*name_format.*$|^name_format\\s*=\\s*(?!hostname$)\\w*$"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileResource as $MSFT_nxFileResource25ref -{ -SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::19::9::nxFile"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - ResourceID = "[nxFile][V-204510][medium][SRG-OS-000342-GPOS-00133]::[RHEL]Baseline"; - DestinationPath = "/etc/audisp/audisp-remote.conf"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource37ref -{ -ResourceID = "[nxFileLine][V-204510][medium][SRG-OS-000342-GPOS-00133]::[RHEL]Baseline"; - ContainsLine = "enable_krb5 = yes"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audisp/audisp-remote.conf"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*enable_krb5\\s*=\\s*yes"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource38ref -{ -ResourceID = "[nxFileLine][V-204511][medium][SRG-OS-000342-GPOS-00133]::[RHEL]Baseline"; - ContainsLine = "disk_full_action = single"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audisp/audisp-remote.conf"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "^#\\s*disk_full_action\\s*=.*|^disk_full_action\\s*=\\s*(?!halt\\b|single\\b|syslog\\b)\\w+"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource39ref -{ -ResourceID = "[nxFileLine][V-204512][medium][SRG-OS-000342-GPOS-00133]::[RHEL]Baseline"; - ContainsLine = "network_failure_action = syslog"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audisp/audisp-remote.conf"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "^#\\s*network_failure_action\\s*=.*|^network_failure_action\\s*=\\s*(?!halt\\b|single\\b|syslog\\b)\\w+"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource40ref -{ -ResourceID = "[nxFileLine][V-204514][medium][SRG-OS-000343-GPOS-00134]::[RHEL]Baseline"; - ContainsLine = "space_left_action = email"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/auditd.conf"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "^#\\s*space_left_action.*$|^space_left_action\\s*=\\s*(?!email$)\\w*$"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource41ref -{ -ResourceID = "[nxFileLine][V-204515][medium][SRG-OS-000343-GPOS-00134]::[RHEL]Baseline"; - ContainsLine = "action_mail_acct = root"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/auditd.conf"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "^#\\s*action_mail_acct.*|^action_mail_acct\\s*=\\s*(?!root\\b)\\w+"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource42ref -{ -ResourceID = "[nxFileLine][V-204516.a][medium][SRG-OS-000327-GPOS-00127]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S execve -C uid!=euid -F euid=0 -k setuid"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*execve\\s*-C\\s*uid!\\s*=\\s*euid\\s*-F\\s*euid\\s*=\\s*0\\s*-k\\s*setuid"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource43ref -{ -ResourceID = "[nxFileLine][V-204516.b][medium][SRG-OS-000327-GPOS-00127]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S execve -C uid!=euid -F euid=0 -k setuid"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*execve\\s*-C\\s*uid!\\s*=\\s*euid\\s*-F\\s*euid\\s*=\\s*0\\s*-k\\s*setuid"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource44ref -{ -ResourceID = "[nxFileLine][V-204516.c][medium][SRG-OS-000327-GPOS-00127]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S execve -C gid!=egid -F egid=0 -k setgid"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*execve\\s*-C\\s*gid!\\s*=\\s*egid\\s*-F\\s*egid\\s*=\\s*0\\s*-k\\s*setgid"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource45ref -{ -ResourceID = "[nxFileLine][V-204516.d][medium][SRG-OS-000327-GPOS-00127]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S execve -C gid!=egid -F egid=0 -k setgid"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*execve\\s*-C\\s*gid!\\s*=\\s*egid\\s*-F\\s*egid\\s*=\\s*0\\s*-k\\s*setgid"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource46ref -{ -ResourceID = "[nxFileLine][V-204517.a][medium][SRG-OS-000064-GPOS-00033]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S chown,fchown,fchownat,lchown -F auid>=1000 -F auid!=unset -k perm_mod"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*chown,fchown,fchownat,lchown\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*perm_mod"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource47ref -{ -ResourceID = "[nxFileLine][V-204517.b][medium][SRG-OS-000064-GPOS-00033]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S chown,fchown,fchownat,lchown -F auid>=1000 -F auid!=unset -k perm_mod"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*chown,fchown,fchownat,lchown\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*perm_mod"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource48ref -{ -ResourceID = "[nxFileLine][V-204521.a][medium][SRG-OS-000458-GPOS-00203]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S chmod,fchmod,fchmodat -F auid>=1000 -F auid!=unset -k perm_mod"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*chmod,fchmod,fchmodat\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*perm_mod"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource49ref -{ -ResourceID = "[nxFileLine][V-204521.b][medium][SRG-OS-000458-GPOS-00203]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S chmod,fchmod,fchmodat -F auid>=1000 -F auid!=unset -k perm_mod"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*chmod,fchmod,fchmodat\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*perm_mod"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource50ref -{ -ResourceID = "[nxFileLine][V-204524.a][medium][SRG-OS-000458-GPOS-00203]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S setxattr,fsetxattr,lsetxattr,removexattr,fremovexattr,lremovexattr -F auid>=1000 -F auid!=unset -k perm_mod"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*setxattr,fsetxattr,lsetxattr,removexattr,fremovexattr,lremovexattr\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*perm_mod"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource51ref -{ -ResourceID = "[nxFileLine][V-204524.b][medium][SRG-OS-000458-GPOS-00203]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S setxattr,fsetxattr,lsetxattr,removexattr,fremovexattr,lremovexattr -F auid>=1000 -F auid!=unset -k perm_mod"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*setxattr,fsetxattr,lsetxattr,removexattr,fremovexattr,lremovexattr\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*perm_mod"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource52ref -{ -ResourceID = "[nxFileLine][V-204531.a][medium][SRG-OS-000064-GPOS-00033]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S creat,open,openat,open_by_handle_at,truncate,ftruncate -F exit=-EPERM -F auid>=1000 -F auid!=unset -k access"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*creat,open,openat,open_by_handle_at,truncate,ftruncate\\s*-F\\s*exit\\s*=\\s*-EPERM\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*access"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource53ref -{ -ResourceID = "[nxFileLine][V-204531.b][medium][SRG-OS-000064-GPOS-00033]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S creat,open,openat,open_by_handle_at,truncate,ftruncate -F exit=-EACCES -F auid>=1000 -F auid!=unset -k access"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*creat,open,openat,open_by_handle_at,truncate,ftruncate\\s*-F\\s*exit\\s*=\\s*-EACCES\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*access"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource54ref -{ -ResourceID = "[nxFileLine][V-204531.c][medium][SRG-OS-000064-GPOS-00033]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S creat,open,openat,open_by_handle_at,truncate,ftruncate -F exit=-EPERM -F auid>=1000 -F auid!=unset -k access"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*creat,open,openat,open_by_handle_at,truncate,ftruncate\\s*-F\\s*exit\\s*=\\s*-EPERM\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*access"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource55ref -{ -ResourceID = "[nxFileLine][V-204531.d][medium][SRG-OS-000064-GPOS-00033]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S creat,open,openat,open_by_handle_at,truncate,ftruncate -F exit=-EACCES -F auid>=1000 -F auid!=unset -k access"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*creat,open,openat,open_by_handle_at,truncate,ftruncate\\s*-F\\s*exit\\s*=\\s*-EACCES\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*access"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource56ref -{ -ResourceID = "[nxFileLine][V-204536][medium][SRG-OS-000392-GPOS-00172]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F path=/usr/sbin/semanage -F auid>=1000 -F auid!=unset -k privileged-priv_change"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/sbin/semanage\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-priv_change"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource57ref -{ -ResourceID = "[nxFileLine][V-204537][medium][SRG-OS-000392-GPOS-00172]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F path=/usr/sbin/setsebool -F auid>=1000 -F auid!=unset -k privileged-priv_change"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/sbin/setsebool\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-priv_change"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource58ref -{ -ResourceID = "[nxFileLine][V-204538][medium][SRG-OS-000392-GPOS-00172]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F path=/usr/bin/chcon -F auid>=1000 -F auid!=unset -k privileged-priv_change"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/bin/chcon\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-priv_change"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource59ref -{ -ResourceID = "[nxFileLine][V-204539][medium][SRG-OS-000392-GPOS-00172]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F path=/usr/sbin/setfiles -F auid>=1000 -F auid!=unset -k privileged-priv_change"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/sbin/setfiles\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-priv_change"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource60ref -{ -ResourceID = "[nxFileLine][V-204540][medium][SRG-OS-000392-GPOS-00172]::[RHEL]Baseline"; - ContainsLine = "-w /var/run/faillock -p wa -k logins"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-w\\s*/var/run/faillock\\s*-p\\s*wa\\s*-k\\s*logins"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource61ref -{ -ResourceID = "[nxFileLine][V-204541][medium][SRG-OS-000392-GPOS-00172]::[RHEL]Baseline"; - ContainsLine = "-w /var/log/lastlog -p wa -k logins"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-w\\s*/var/log/lastlog\\s*-p\\s*wa\\s*-k\\s*logins"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource62ref -{ -ResourceID = "[nxFileLine][V-204542][medium][SRG-OS-000042-GPOS-00020]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F path=/usr/bin/passwd -F auid>=1000 -F auid!=unset -k privileged-passwd"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/bin/passwd\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-passwd"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource63ref -{ -ResourceID = "[nxFileLine][V-204543][medium][SRG-OS-000042-GPOS-00020]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F path=/usr/sbin/unix_chkpwd -F auid>=1000 -F auid!=unset -k privileged-passwd"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/sbin/unix_chkpwd\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-passwd"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource64ref -{ -ResourceID = "[nxFileLine][V-204544][medium][SRG-OS-000042-GPOS-00020]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F path=/usr/bin/gpasswd -F auid>=1000 -F auid!=unset -k privileged-passwd"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/bin/gpasswd\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-passwd"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource65ref -{ -ResourceID = "[nxFileLine][V-204545][medium][SRG-OS-000042-GPOS-00020]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F path=/usr/bin/chage -F auid>=1000 -F auid!=unset -k privileged-passwd"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/bin/chage\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-passwd"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource66ref -{ -ResourceID = "[nxFileLine][V-204546][medium][SRG-OS-000042-GPOS-00020]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F path=/usr/sbin/userhelper -F auid>=1000 -F auid!=unset -k privileged-passwd"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/sbin/userhelper\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-passwd"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource67ref -{ -ResourceID = "[nxFileLine][V-204547][medium][SRG-OS-000037-GPOS-00015]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F path=/usr/bin/su -F auid>=1000 -F auid!=unset -k privileged-priv_change"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/bin/su\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-priv_change"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource68ref -{ -ResourceID = "[nxFileLine][V-204548][medium][SRG-OS-000037-GPOS-00015]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F path=/usr/bin/sudo -F auid>=1000 -F auid!=unset -k privileged-priv_change"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/bin/sudo\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-priv_change"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource69ref -{ -ResourceID = "[nxFileLine][V-204549.a][medium][SRG-OS-000037-GPOS-00015]::[RHEL]Baseline"; - ContainsLine = "-w /etc/sudoers -p wa -k privileged-actions"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-w /etc/sudoers -p wa -k privileged-actions"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource70ref -{ -ResourceID = "[nxFileLine][V-204549.b][medium][SRG-OS-000037-GPOS-00015]::[RHEL]Baseline"; - ContainsLine = "-w /etc/sudoers.d/ -p wa -k privileged-actions"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-w /etc/sudoers.d/ -p wa -k privileged-actions"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource71ref -{ -ResourceID = "[nxFileLine][V-204550][medium][SRG-OS-000037-GPOS-00015]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F path=/usr/bin/newgrp -F auid>=1000 -F auid!=unset -k privileged-priv_change"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/bin/newgrp\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-priv_change"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource72ref -{ -ResourceID = "[nxFileLine][V-204551][medium][SRG-OS-000037-GPOS-00015]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F path=/usr/bin/chsh -F auid>=1000 -F auid!=unset -k privileged-priv_change"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/bin/chsh\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-priv_change"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource73ref -{ -ResourceID = "[nxFileLine][V-204552.a][medium][SRG-OS-000042-GPOS-00020]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S mount -F auid>=1000 -F auid!=unset -k privileged-mount"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*mount\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-mount"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource74ref -{ -ResourceID = "[nxFileLine][V-204552.b][medium][SRG-OS-000042-GPOS-00020]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S mount -F auid>=1000 -F auid!=unset -k privileged-mount"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*mount\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-mount"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource75ref -{ -ResourceID = "[nxFileLine][V-204552.c][medium][SRG-OS-000042-GPOS-00020]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F path=/usr/bin/mount -F auid>=1000 -F auid!=unset -k privileged-mount"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/bin/mount\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-mount"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource76ref -{ -ResourceID = "[nxFileLine][V-204553][medium][SRG-OS-000042-GPOS-00020]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F path=/usr/bin/umount -F auid>=1000 -F auid!=unset -k privileged-mount"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/bin/umount\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-mount"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource77ref -{ -ResourceID = "[nxFileLine][V-204554][medium][SRG-OS-000042-GPOS-00020]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F path=/usr/sbin/postdrop -F auid>=1000 -F auid!=unset -k privileged-postfix"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/sbin/postdrop\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-postfix"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource78ref -{ -ResourceID = "[nxFileLine][V-204555][medium][SRG-OS-000042-GPOS-00020]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F path=/usr/sbin/postqueue -F auid>=1000 -F auid!=unset -k privileged-postfix"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/sbin/postqueue\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-postfix"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource79ref -{ -ResourceID = "[nxFileLine][V-204556][medium][SRG-OS-000042-GPOS-00020]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F path=/usr/libexec/openssh/ssh-keysign -F auid>=1000 -F auid!=unset -k privileged-ssh"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/libexec/openssh/ssh-keysign\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-ssh"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource80ref -{ -ResourceID = "[nxFileLine][V-204557][medium][SRG-OS-000042-GPOS-00020]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F path=/usr/bin/crontab -F auid>=1000 -F auid!=unset -k privileged-cron"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/bin/crontab\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-cron"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource81ref -{ -ResourceID = "[nxFileLine][V-204558][medium][SRG-OS-000471-GPOS-00215]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F path=/usr/sbin/pam_timestamp_check -F auid>=1000 -F auid!=unset -k privileged-pam"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/sbin/pam_timestamp_check\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-pam"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource82ref -{ -ResourceID = "[nxFileLine][V-204559.a][medium][SRG-OS-000471-GPOS-00216]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S create_module -k module-change"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*create_module\\s*-k\\s*module-change"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource83ref -{ -ResourceID = "[nxFileLine][V-204559.b][medium][SRG-OS-000471-GPOS-00216]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S create_module -k module-change"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*create_module\\s*-k\\s*module-change"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource84ref -{ -ResourceID = "[nxFileLine][V-204560.a][medium][SRG-OS-000471-GPOS-00216]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S init_module,finit_module -k modulechange"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*init_module,finit_module\\s*-k\\s*modulechange"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource85ref -{ -ResourceID = "[nxFileLine][V-204560.b][medium][SRG-OS-000471-GPOS-00216]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S init_module,finit_module -k modulechange"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*init_module,finit_module\\s*-k\\s*modulechange"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource86ref -{ -ResourceID = "[nxFileLine][V-204562.a][medium][SRG-OS-000471-GPOS-00216]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S delete_module -k module-change"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*delete_module\\s*-k\\s*module-change"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource87ref -{ -ResourceID = "[nxFileLine][V-204562.b][medium][SRG-OS-000471-GPOS-00216]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S delete_module -k module-change"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*delete_module\\s*-k\\s*module-change"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource88ref -{ -ResourceID = "[nxFileLine][V-204563][medium][SRG-OS-000471-GPOS-00216]::[RHEL]Baseline"; - ContainsLine = "-w /usr/bin/kmod -p x -F auid!=unset -k module-change"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-w\\s*/usr/bin/kmod\\s*-p\\s*x\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*module-change"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource89ref -{ -ResourceID = "[nxFileLine][V-204564][medium][SRG-OS-000004-GPOS-00004]::[RHEL]Baseline"; - ContainsLine = "-w /etc/passwd -p wa -k identity"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-w\\s*/etc/passwd\\s*-p\\s*wa\\s*-k\\s*identity"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource90ref -{ -ResourceID = "[nxFileLine][V-204565][medium][SRG-OS-000004-GPOS-00004]::[RHEL]Baseline"; - ContainsLine = "-w /etc/group -p wa -k identity"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-w\\s*/etc/group\\s*-p\\s*wa\\s*-k\\s*identity"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource91ref -{ -ResourceID = "[nxFileLine][V-204566][medium][SRG-OS-000004-GPOS-00004]::[RHEL]Baseline"; - ContainsLine = "-w /etc/gshadow -p wa -k identity"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-w\\s*/etc/gshadow\\s*-p\\s*wa\\s*-k\\s*identity"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource92ref -{ -ResourceID = "[nxFileLine][V-204567][medium][SRG-OS-000004-GPOS-00004]::[RHEL]Baseline"; - ContainsLine = "-w /etc/shadow -p wa -k identity"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-w\\s*/etc/shadow\\s*-p\\s*wa\\s*-k\\s*identity"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource93ref -{ -ResourceID = "[nxFileLine][V-204568][medium][SRG-OS-000004-GPOS-00004]::[RHEL]Baseline"; - ContainsLine = "-w /etc/security/opasswd -p wa -k identity"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-w\\s*/etc/security/opasswd\\s*-p\\s*wa\\s*-k\\s*identity"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource94ref -{ -ResourceID = "[nxFileLine][V-204572.a][medium][SRG-OS-000466-GPOS-00210]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S unlink,unlinkat,rename,renameat,rmdir -F auid>=1000 -F auid!=unset -k delete"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*unlink,unlinkat,rename,renameat,rmdir\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*delete"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource95ref -{ -ResourceID = "[nxFileLine][V-204572.b][medium][SRG-OS-000466-GPOS-00210]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S unlink,unlinkat,rename,renameat,rmdir -F auid>=1000 -F auid!=unset -k delete"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*unlink,unlinkat,rename,renameat,rmdir\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*delete"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource96ref -{ -ResourceID = "[nxFileLine][V-204578][medium][SRG-OS-000033-GPOS-00014]::[RHEL]Baseline"; - ContainsLine = "Ciphers aes256-ctr,aes192-ctr,aes128-ctr"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/ssh/sshd_config"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "^#\\s*Ciphers.*|^\\s*Ciphers\\s*aes128-ctr.*|^\\s*Ciphers\\s*aes192-ctr.*"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource97ref -{ -ResourceID = "[nxFileLine][V-204579.b][medium][SRG-OS-000163-GPOS-00072]::[RHEL]Baseline"; - ContainsLine = "declare -xr TMOUT=900"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/profile.d/tmout.sh"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "^\\s*TMOUT\\s*=\\s*[0-8]?[0-9]?[0-9]?$|^#\\s*TMOUT.*"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource98ref -{ -ResourceID = "[nxFileLine][V-204580][medium][SRG-OS-000023-GPOS-00006]::[RHEL]Baseline"; - ContainsLine = "banner /etc/issue"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/ssh/sshd_config"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*banner\\s*/etc/issue"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource99ref -{ -ResourceID = "[nxFileLine][V-204587][medium][SRG-OS-000163-GPOS-00072]::[RHEL]Baseline"; - ContainsLine = "ClientAliveInterval 600"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/ssh/sshd_config"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "^\\s*ClientAliveInterval\\s*[0-5]?[0-9]?[0-9]?\\s*$|^#\\s*ClientAliveInterval.*|^\\s*ClientAliveInterval\\s*$"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource100ref -{ -ResourceID = "[nxFileLine][V-204588][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; - ContainsLine = "RhostsRSAAuthentication no"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/ssh/sshd_config"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "^#\\s*RhostsRSAAuthentication.*$|^RhostsRSAAuthentication\\s*(?!no\\b)\\w*$"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource101ref -{ -ResourceID = "[nxFileLine][V-204589][medium][SRG-OS-000163-GPOS-00072]::[RHEL]Baseline"; - ContainsLine = "ClientAliveCountMax 0"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/ssh/sshd_config"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "^#\\s*ClientAliveCountMax.*$|^ClientAliveCountMax\\s*(?!0\\b)\\w*$"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource102ref -{ -ResourceID = "[nxFileLine][V-204590][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; - ContainsLine = "IgnoreRhosts yes"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/ssh/sshd_config"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "^#\\s*IgnoreRhosts.*$|^IgnoreRhosts\\s*(?!yes\\b)\\w*$"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource103ref -{ -ResourceID = "[nxFileLine][V-204591][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; - ContainsLine = "PrintLastLog yes"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/ssh/sshd_config"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "^#\\s*PrintLastLog.*$|^PrintLastLog\\s*(?!yes\\b)\\w*$"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource104ref -{ -ResourceID = "[nxFileLine][V-204592][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; - ContainsLine = "PermitRootLogin no"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/ssh/sshd_config"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "^#\\s*PermitRootLogin.*$|^PermitRootLogin\\s*(?!no\\b)\\w*$"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource105ref -{ -ResourceID = "[nxFileLine][V-204593][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; - ContainsLine = "IgnoreUserKnownHosts yes"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/ssh/sshd_config"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "^#\\s*IgnoreUserKnownHosts.*$|^IgnoreUserKnownHosts\\s*(?!yes\\b)\\w*$"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource106ref -{ -ResourceID = "[nxFileLine][V-204594][high][SRG-OS-000074-GPOS-00042]::[RHEL]Baseline"; - ContainsLine = "Protocol 2"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/ssh/sshd_config"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "^#\\s*Protocol.*$|^Protocol\\s*(?!2\\b)\\w*$"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource107ref -{ -ResourceID = "[nxFileLine][V-204595][medium][SRG-OS-000250-GPOS-00093]::[RHEL]Baseline"; - ContainsLine = "MACs hmac-sha2-512,hmac-sha2-256"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/ssh/sshd_config"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*MACs.*|\\s*MACs\\s*hmac-(?!sha2-512).*"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource108ref -{ -ResourceID = "[nxFileLine][V-204598][medium][SRG-OS-000364-GPOS-00151]::[RHEL]Baseline"; - ContainsLine = "GSSAPIAuthentication no"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/ssh/sshd_config"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "^#\\s*GSSAPIAuthentication.*$|^GSSAPIAuthentication\\s*(?!no\\b)\\w*$"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource109ref -{ -ResourceID = "[nxFileLine][V-204599][medium][SRG-OS-000364-GPOS-00151]::[RHEL]Baseline"; - ContainsLine = "KerberosAuthentication no"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/ssh/sshd_config"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "^#\\s*KerberosAuthentication.*$|^KerberosAuthentication\\s*(?!no\\b)\\w*$"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource110ref -{ -ResourceID = "[nxFileLine][V-204600][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; - ContainsLine = "StrictModes yes"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/ssh/sshd_config"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "^#\\s*StrictModes.*$|^StrictModes\\s*(?!yes\\b)\\w*$"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource111ref -{ -ResourceID = "[nxFileLine][V-204601][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; - ContainsLine = "UsePrivilegeSeparation sandbox"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/ssh/sshd_config"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "^#\\s*UsePrivilegeSeparation.*$|^UsePrivilegeSeparation\\s*(?!sandbox\\b)\\w*$"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource112ref -{ -ResourceID = "[nxFileLine][V-204602][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; - ContainsLine = "Compression delayed"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/ssh/sshd_config"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "^#\\s*Compression.*$|^Compression\\s*(?!delayed\\b)\\w*$"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource113ref -{ -ResourceID = "[nxFileLine][V-204622][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; - ContainsLine = "X11Forwarding no"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/ssh/sshd_config"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "^#\\s*X11Forwarding.*$|^X11Forwarding\\s*(?!no\\b)\\w*$"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource114ref -{ -ResourceID = "[nxFileLine][V-233307][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; - ContainsLine = "X11UseLocalhost yes"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/ssh/sshd_config"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*X11UseLocalhost\\s*yes"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxServiceResource as $MSFT_nxServiceResource1ref -{ -ResourceID = "[nxService][V-204451][medium][SRG-OS-000114-GPOS-00059]::[RHEL]Baseline"; - Controller = "systemd"; - Enabled = False; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxService.ps1::13::9::nxService"; - Name = "autofs"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxServiceResource as $MSFT_nxServiceResource2ref -{ -ResourceID = "[nxService][V-204492][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; - Controller = "systemd"; - Enabled = False; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxService.ps1::13::9::nxService"; - Name = "kdump"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxServiceResource as $MSFT_nxServiceResource3ref -{ -ResourceID = "[nxService][V-204503][medium][SRG-OS-000038-GPOS-00016]::[RHEL]Baseline"; - Controller = "systemd"; - State = "Running"; - Enabled = True; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxService.ps1::22::9::nxService"; - Name = "auditd"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxServiceResource as $MSFT_nxServiceResource4ref -{ -ResourceID = "[nxService][V-204586][medium][SRG-OS-000423-GPOS-00187]::[RHEL]Baseline"; - Controller = "systemd"; - State = "Running"; - Enabled = True; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxService.ps1::22::9::nxService"; - Name = "sshd"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxServiceResource as $MSFT_nxServiceResource5ref -{ -ResourceID = "[nxService][V-204604.b][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; - Controller = "systemd"; - State = "Running"; - Enabled = True; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxService.ps1::22::9::nxService"; - Name = "firewalld"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxScriptResource as $MSFT_nxScriptResource1ref -{ -ResourceID = "[nxScript][V-204399.b][medium][[Skip] SRG-OS-000029-GPOS-00010]::[RHEL]Baseline"; - GetScript = "#!/bin/bash\necho [V-204399.b][medium][[Skip] SRG-OS-000029-GPOS-00010]"; - TestScript = "#!/bin/bash\nexit 0"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxScript.skip.ps1::10::5::nxScript"; - SetScript = "#!/bin/bash"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxScriptResource as $MSFT_nxScriptResource2ref -{ -ResourceID = "[nxScript][V-204400][medium][[Skip] SRG-OS-000029-GPOS-00010]::[RHEL]Baseline"; - GetScript = "#!/bin/bash\necho [V-204400][medium][[Skip] SRG-OS-000029-GPOS-00010]"; - TestScript = "#!/bin/bash\nexit 0"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxScript.skip.ps1::10::5::nxScript"; - SetScript = "#!/bin/bash"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxScriptResource as $MSFT_nxScriptResource3ref -{ -ResourceID = "[nxScript][V-204403][medium][[Skip] SRG-OS-000029-GPOS-00010]::[RHEL]Baseline"; - GetScript = "#!/bin/bash\necho [V-204403][medium][[Skip] SRG-OS-000029-GPOS-00010]"; - TestScript = "#!/bin/bash\nexit 0"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxScript.skip.ps1::10::5::nxScript"; - SetScript = "#!/bin/bash"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxScriptResource as $MSFT_nxScriptResource4ref -{ -ResourceID = "[nxScript][V-204509][medium][[Skip] SRG-OS-000342-GPOS-00133]::[RHEL]Baseline"; - GetScript = "#!/bin/bash\necho [V-204509][medium][[Skip] SRG-OS-000342-GPOS-00133]"; - TestScript = "#!/bin/bash\nexit 0"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxScript.skip.ps1::10::5::nxScript"; - SetScript = "#!/bin/bash"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxScriptResource as $MSFT_nxScriptResource5ref -{ -ResourceID = "[nxScript][V-204513][medium][[Skip] SRG-OS-000343-GPOS-00134]::[RHEL]Baseline"; - GetScript = "#!/bin/bash\necho [V-204513][medium][[Skip] SRG-OS-000343-GPOS-00134]"; - TestScript = "#!/bin/bash\nexit 0"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxScript.skip.ps1::10::5::nxScript"; - SetScript = "#!/bin/bash"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxScriptResource as $MSFT_nxScriptResource6ref -{ -ResourceID = "[nxScript][V-204623][medium][[Skip] SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; - GetScript = "#!/bin/bash\necho [V-204623][medium][[Skip] SRG-OS-000480-GPOS-00227]"; - TestScript = "#!/bin/bash\nexit 0"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxScript.skip.ps1::10::5::nxScript"; - SetScript = "#!/bin/bash"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxScriptResource as $MSFT_nxScriptResource7ref -{ -ResourceID = "[nxScript][V-244557][medium][[Skip] SRG-OS-000080-GPOS-00048]::[RHEL]Baseline"; - GetScript = "#!/bin/bash\necho [V-244557][medium][[Skip] SRG-OS-000080-GPOS-00048]"; - TestScript = "#!/bin/bash\nexit 0"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxScript.skip.ps1::10::5::nxScript"; - SetScript = "#!/bin/bash"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxScriptResource as $MSFT_nxScriptResource8ref -{ -ResourceID = "[nxScript][V-244558][medium][[Skip] SRG-OS-000080-GPOS-00048]::[RHEL]Baseline"; - GetScript = "#!/bin/bash\necho [V-244558][medium][[Skip] SRG-OS-000080-GPOS-00048]"; - TestScript = "#!/bin/bash\nexit 0"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxScript.skip.ps1::10::5::nxScript"; - SetScript = "#!/bin/bash"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxScriptResource as $MSFT_nxScriptResource9ref -{ -ResourceID = "[nxScript][V-204399.a][medium][[Skip] SRG-OS-000029-GPOS-00010]::[RHEL]Baseline"; - GetScript = "#!/bin/bash\necho [V-204399.a][medium][[Skip] SRG-OS-000029-GPOS-00010]"; - TestScript = "#!/bin/bash\nexit 0"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxScript.skip.ps1::10::5::nxScript"; - SetScript = "#!/bin/bash"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of OMI_ConfigurationDocument - - - { - Version="2.0.0"; - - - MinimumCompatibleVersion = "1.0.0"; - - - CompatibleVersionAdditionalProperties= {"Omi_BaseResource:ConfigurationName"}; - - - Author="Microsoft"; - - - GenerationDate="06/30/2022 11:38:45"; - - - GenerationHost="Microsoft"; - - - Name="LinuxBaseLine"; - - - }; +/* +@TargetNode='CentOS79' +@GeneratedBy=Microsoft +@GenerationDate=03/09/2023 14:17:33 +@GenerationHost=Microsoft +*/ + +instance of MSFT_nxPackageResource as $MSFT_nxPackageResource1ref +{ +ResourceID = "[nxPackage][V-204442][high][SRG-OS-000095-GPOS-00049]::[RHEL]Baseline"; + Ensure = "Absent"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxPackage.ps1::8::5::nxPackage"; + Name = "rsh-server"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxPackageResource as $MSFT_nxPackageResource2ref +{ +ResourceID = "[nxPackage][V-204443][high][SRG-OS-000095-GPOS-00049]::[RHEL]Baseline"; + Ensure = "Absent"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxPackage.ps1::8::5::nxPackage"; + Name = "ypserv"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxPackageResource as $MSFT_nxPackageResource3ref +{ +ResourceID = "[nxPackage][V-204497][high][SRG-OS-000033-GPOS-00014]::[RHEL]Baseline"; + Ensure = "Present"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxPackage.ps1::8::5::nxPackage"; + Name = "dracut-fips"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxPackageResource as $MSFT_nxPackageResource4ref +{ +ResourceID = "[nxPackage][V-204498][low][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; + Ensure = "Present"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxPackage.ps1::8::5::nxPackage"; + Name = "aide"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxPackageResource as $MSFT_nxPackageResource5ref +{ +ResourceID = "[nxPackage][V-204502][high][SRG-OS-000095-GPOS-00049]::[RHEL]Baseline"; + Ensure = "Absent"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxPackage.ps1::8::5::nxPackage"; + Name = "telnet-server"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxPackageResource as $MSFT_nxPackageResource6ref +{ +ResourceID = "[nxPackage][V-204585][medium][SRG-OS-000423-GPOS-00187]::[RHEL]Baseline"; + Ensure = "Present"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxPackage.ps1::8::5::nxPackage"; + Name = "openssh-server"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxPackageResource as $MSFT_nxPackageResource7ref +{ +ResourceID = "[nxPackage][V-204604.a][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; + Ensure = "Present"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxPackage.ps1::8::5::nxPackage"; + Name = "firewalld"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxPackageResource as $MSFT_nxPackageResource8ref +{ +ResourceID = "[nxPackage][V-204620][high][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; + Ensure = "Absent"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxPackage.ps1::8::5::nxPackage"; + Name = "vsftpd"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxPackageResource as $MSFT_nxPackageResource9ref +{ +ResourceID = "[nxPackage][V-204621][high][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; + Ensure = "Absent"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxPackage.ps1::8::5::nxPackage"; + Name = "tftp-server"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxPackageResource as $MSFT_nxPackageResource10ref +{ +ResourceID = "[nxPackage][V-204631][medium][SRG-OS-000375-GPOS-00160]::[RHEL]Baseline"; + Ensure = "Present"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxPackage.ps1::8::5::nxPackage"; + Name = "pam_pkcs11"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileResource as $MSFT_nxFileResource1ref +{ +ResourceID = "[nxFile][V-204395][medium][SRG-OS-000023-GPOS-00006]::[RHEL]Baseline"; + Contents = "You are accessing a U.S. Government (USG) Information System (IS) that is provided for USG-authorized use only.\n\nBy using this IS (which includes any device attached to this IS), you consent to the following conditions:\n\n-The USG routinely intercepts and monitors communications on this IS for purposes including, but not limited to, penetration testing, COMSEC monitoring, network operations and defense, personnel misconduct (PM), law enforcement (LE), and counterintelligence (CI) investigations.\n\n-At any time, the USG may inspect and seize data stored on this IS.\n\n-Communications using, or data stored on, this IS are not private, are subject to routine monitoring, interception, and search, and may be disclosed or used for any USG-authorized purpose.\n\n-This IS includes security measures (e.g., authentication and access controls) to protect USG interests--not for your personal benefit or privacy.\n\n-Notwithstanding the above, using this IS does not constitute consent to PM, LE or CI investigative searching or monitoring of the content of privileged communications, or work product, related to personal representation or services by attorneys, psychotherapists, or clergy, and their assistants. Such communications and work product are private and confidential. See User Agreement for details."; + DestinationPath = "/etc/issue"; + ModuleName = "nx"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; + ModuleVersion = "1.0"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileResource as $MSFT_nxFileResource2ref +{ +ResourceID = "[nxFile][V-204449.a][medium][SRG-OS-000114-GPOS-00059]::[RHEL]Baseline"; + Contents = ""; + DestinationPath = "/etc/modprobe.d/usb-storage.conf"; + ModuleName = "nx"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; + ModuleVersion = "1.0"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileResource as $MSFT_nxFileResource3ref +{ +ResourceID = "[nxFile][V-204449.b][medium][SRG-OS-000114-GPOS-00059]::[RHEL]Baseline"; + Contents = ""; + DestinationPath = "/etc/modprobe.d/blacklist.conf"; + ModuleName = "nx"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; + ModuleVersion = "1.0"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileResource as $MSFT_nxFileResource4ref +{ +ResourceID = "[nxFile][V-204450.a][medium][SRG-OS-000378-GPOS-00163]::[RHEL]Baseline"; + Contents = ""; + DestinationPath = "/etc/modprobe.d/dccp.conf"; + ModuleName = "nx"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; + ModuleVersion = "1.0"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileResource as $MSFT_nxFileResource5ref +{ +ResourceID = "[nxFile][V-204576][low][SRG-OS-000027-GPOS-00008]::[RHEL]Baseline"; + Contents = "* hard maxlogins 10"; + DestinationPath = "/etc/security/limits.d/204576-powerstig.conf"; + ModuleName = "nx"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; + ModuleVersion = "1.0"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileResource as $MSFT_nxFileResource6ref +{ +ResourceID = "[nxFile][V-204579.a][medium][SRG-OS-000163-GPOS-00072]::[RHEL]Baseline"; + Contents = ""; + DestinationPath = "/etc/profile.d/tmout.sh"; + ModuleName = "nx"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; + ModuleVersion = "1.0"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileResource as $MSFT_nxFileResource7ref +{ +ResourceID = "[nxFile][V-204584][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; + Contents = "kernel.randomize_va_space = 2"; + DestinationPath = "/etc/sysctl.d/204584-powerstig.conf"; + ModuleName = "nx"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; + ModuleVersion = "1.0"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileResource as $MSFT_nxFileResource8ref +{ +ResourceID = "[nxFile][V-204609][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; + Contents = "net.ipv4.conf.all.accept_source_route = 0"; + DestinationPath = "/etc/sysctl.d/204609-powerstig.conf"; + ModuleName = "nx"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; + ModuleVersion = "1.0"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileResource as $MSFT_nxFileResource9ref +{ +ResourceID = "[nxFile][V-204610][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; + Contents = "net.ipv4.conf.all.rp_filter = 1"; + DestinationPath = "/etc/sysctl.d/204610-powerstig.conf"; + ModuleName = "nx"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; + ModuleVersion = "1.0"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileResource as $MSFT_nxFileResource10ref +{ +ResourceID = "[nxFile][V-204611][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; + Contents = "net.ipv4.conf.default.rp_filter = 1"; + DestinationPath = "/etc/sysctl.d/204611-powerstig.conf"; + ModuleName = "nx"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; + ModuleVersion = "1.0"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileResource as $MSFT_nxFileResource11ref +{ +ResourceID = "[nxFile][V-204612][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; + Contents = "net.ipv4.conf.default.accept_source_route = 0"; + DestinationPath = "/etc/sysctl.d/204612-powerstig.conf"; + ModuleName = "nx"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; + ModuleVersion = "1.0"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileResource as $MSFT_nxFileResource12ref +{ +ResourceID = "[nxFile][V-204613][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; + Contents = "net.ipv4.icmp_echo_ignore_broadcasts = 1"; + DestinationPath = "/etc/sysctl.d/204613-powerstig.conf"; + ModuleName = "nx"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; + ModuleVersion = "1.0"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileResource as $MSFT_nxFileResource13ref +{ +ResourceID = "[nxFile][V-204614][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; + Contents = "net.ipv4.conf.default.accept_redirects = 0"; + DestinationPath = "/etc/sysctl.d/204614-powerstig.conf"; + ModuleName = "nx"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; + ModuleVersion = "1.0"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileResource as $MSFT_nxFileResource14ref +{ +ResourceID = "[nxFile][V-204615][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; + Contents = "net.ipv4.conf.all.accept_redirects = 0"; + DestinationPath = "/etc/sysctl.d/204615-powerstig.conf"; + ModuleName = "nx"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; + ModuleVersion = "1.0"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileResource as $MSFT_nxFileResource15ref +{ +ResourceID = "[nxFile][V-204616][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; + Contents = "net.ipv4.conf.default.send_redirects = 0"; + DestinationPath = "/etc/sysctl.d/204616-powerstig.conf"; + ModuleName = "nx"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; + ModuleVersion = "1.0"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileResource as $MSFT_nxFileResource16ref +{ +ResourceID = "[nxFile][V-204617][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; + Contents = "net.ipv4.conf.all.send_redirects = 0"; + DestinationPath = "/etc/sysctl.d/204617-powerstig.conf"; + ModuleName = "nx"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; + ModuleVersion = "1.0"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileResource as $MSFT_nxFileResource17ref +{ +ResourceID = "[nxFile][V-204625][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; + Contents = "net.ipv4.ip_forward = 0"; + DestinationPath = "/etc/sysctl.d/204625-powerstig.conf"; + ModuleName = "nx"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; + ModuleVersion = "1.0"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileResource as $MSFT_nxFileResource18ref +{ +ResourceID = "[nxFile][V-204630][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; + Contents = "net.ipv6.conf.all.accept_source_route = 0"; + DestinationPath = "/etc/sysctl.d/204630-powerstig.conf"; + ModuleName = "nx"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; + ModuleVersion = "1.0"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileResource as $MSFT_nxFileResource19ref +{ +ResourceID = "[nxFile][V-237634.a][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; + Contents = "Defaults !targetpw"; + DestinationPath = "/etc/sudoers.d/237634a-powerstig.conf"; + ModuleName = "nx"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; + ModuleVersion = "1.0"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileResource as $MSFT_nxFileResource20ref +{ +ResourceID = "[nxFile][V-237634.b][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; + Contents = "Defaults !rootpw"; + DestinationPath = "/etc/sudoers.d/237634b-powerstig.conf"; + ModuleName = "nx"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; + ModuleVersion = "1.0"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileResource as $MSFT_nxFileResource21ref +{ +ResourceID = "[nxFile][V-237634.c][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; + Contents = "Defaults !runaspw"; + DestinationPath = "/etc/sudoers.d/237634c-powerstig.conf"; + ModuleName = "nx"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; + ModuleVersion = "1.0"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileResource as $MSFT_nxFileResource22ref +{ +ResourceID = "[nxFile][V-237635][medium][SRG-OS-000373-GPOS-00156]::[RHEL]Baseline"; + Contents = "Defaults timestamp_timeout=0"; + DestinationPath = "/etc/sudoers.d/237635-powerstig.conf"; + ModuleName = "nx"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; + ModuleVersion = "1.0"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileResource as $MSFT_nxFileResource23ref +{ +ResourceID = "[nxFile][V-250314][medium][SRG-OS-000324-GPOS-00125]::[RHEL]Baseline"; + Contents = "%wheel ALL=(ALL) TYPE=sysadm_t ROLE=sysadm_r ALL"; + DestinationPath = "/etc/sudoers.d/250314-powerstig.conf"; + ModuleName = "nx"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; + ModuleVersion = "1.0"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource1ref +{ +ResourceID = "[nxFileLine][V-204405][medium][SRG-OS-000069-GPOS-00037]::[RHEL]Baseline"; + ContainsLine = "password substack system-auth"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/pam.d/passwd"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "^\\s*password(?:\\t*|\\s*)substack\\tsystem-auth\\s*$|^#\\s*password\\s*substack\\s*system-auth.*"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource2ref +{ +ResourceID = "[nxFileLine][V-204407][medium][SRG-OS-000069-GPOS-00037]::[RHEL]Baseline"; + ContainsLine = "ucredit = -1"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/security/pwquality.conf"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "^#\\s*ucredit.*$|^ucredit\\s*=\\s*(?!-1\\b)\\w*$"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource3ref +{ +ResourceID = "[nxFileLine][V-204408][medium][SRG-OS-000070-GPOS-00038]::[RHEL]Baseline"; + ContainsLine = "lcredit = -1"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/security/pwquality.conf"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "^#\\s*lcredit.*$|^lcredit\\s*=\\s*(?!-1\\b)\\w*$"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource4ref +{ +ResourceID = "[nxFileLine][V-204409][medium][SRG-OS-000071-GPOS-00039]::[RHEL]Baseline"; + ContainsLine = "dcredit = -1"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/security/pwquality.conf"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "^#\\s*dcredit.*$|^dcredit\\s*=\\s*(?!-1\\b)\\w*$"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource5ref +{ +ResourceID = "[nxFileLine][V-204410][medium][SRG-OS-000266-GPOS-00101]::[RHEL]Baseline"; + ContainsLine = "ocredit=-1"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/security/pwquality.conf"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "^#\\s*ocredit.*$|^ocredit\\s*=\\s*(?!-1)\\w*$"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource6ref +{ +ResourceID = "[nxFileLine][V-204411][medium][SRG-OS-000072-GPOS-00040]::[RHEL]Baseline"; + ContainsLine = "difok = 8"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/security/pwquality.conf"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*difok\\s*=.*|^\\s*difok\\s*=\\s*(-|)[0-7]$"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource7ref +{ +ResourceID = "[nxFileLine][V-204412][medium][SRG-OS-000072-GPOS-00040]::[RHEL]Baseline"; + ContainsLine = "minclass = 4"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/security/pwquality.conf"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "^#\\s*minclass\\s*=.*|^\\s*minclass\\s*=\\s*(?!\\d{2,})[1-3]"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource8ref +{ +ResourceID = "[nxFileLine][V-204413][medium][SRG-OS-000072-GPOS-00040]::[RHEL]Baseline"; + ContainsLine = "maxrepeat = 3"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/security/pwquality.conf"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "^#\\s*maxrepeat\\s*=.*|^\\s*maxrepeat\\s*=\\s*(?:\\d{2,}|[4-9])"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource9ref +{ +ResourceID = "[nxFileLine][V-204414][medium][SRG-OS-000072-GPOS-00040]::[RHEL]Baseline"; + ContainsLine = "maxclassrepeat = 4"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/security/pwquality.conf"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "^#\\s*maxclassrepeat\\s*=.*|^\\s*maxclassrepeat\\s*=\\s*(?:\\d{2,}|[1-3|5-9])"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource10ref +{ +ResourceID = "[nxFileLine][V-204416][medium][SRG-OS-000073-GPOS-00041]::[RHEL]Baseline"; + ContainsLine = "ENCRYPT_METHOD SHA512"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/login.defs"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*ENCRYPT_METHOD\\s*SHA512"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource11ref +{ +ResourceID = "[nxFileLine][V-204418][medium][SRG-OS-000075-GPOS-00043]::[RHEL]Baseline"; + ContainsLine = "PASS_MIN_DAYS 1"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/login.defs"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "^\\s*PASS_MIN_DAYS\\s*[0]*$|#\\s*PASS_MIN_DAYS.*"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource12ref +{ +ResourceID = "[nxFileLine][V-204420][medium][SRG-OS-000076-GPOS-00044]::[RHEL]Baseline"; + ContainsLine = "PASS_MAX_DAYS 60"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/login.defs"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "^\\s*PASS_MAX_DAYS\\s*([6][1-9]|[7-9][0-9]|\\d{3,})$|#\\s*PASS_MAX_DAYS.*"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource13ref +{ +ResourceID = "[nxFileLine][V-204423][medium][SRG-OS-000078-GPOS-00046]::[RHEL]Baseline"; + ContainsLine = "minlen = 15"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/security/pwquality.conf"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "^\\s*minlen\\s*=\\s*([0-9]|[1][1-4])$|#\\s*minlen.*"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource14ref +{ +ResourceID = "[nxFileLine][V-204425][high][SRG-OS-000106-GPOS-00053]::[RHEL]Baseline"; + ContainsLine = "PermitEmptyPasswords no"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/ssh/sshd_config"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "^#\\s*PermitEmptyPasswords.*$|^PermitEmptyPasswords\\s*(?!no\\b)\\w*$"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource15ref +{ +ResourceID = "[nxFileLine][V-204426][medium][SRG-OS-000118-GPOS-00060]::[RHEL]Baseline"; + ContainsLine = "INACTIVE=35"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/default/useradd"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "^#\\s*INACTIVE\\s*=.*|^\\s*INACTIVE\\s*=\\s*(3[5-9]|[4-9]\\d+|\\d{3,})"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource16ref +{ +ResourceID = "[nxFileLine][V-204431][medium][SRG-OS-000480-GPOS-00226]::[RHEL]Baseline"; + ContainsLine = "FAIL_DELAY 4"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/login.defs"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "^#\\s*FAIL_DELAY.*|^FAIL_DELAY\\s*(?!\\d{2,})[1-3]"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource17ref +{ +ResourceID = "[nxFileLine][V-204434][medium][SRG-OS-000480-GPOS-00229]::[RHEL]Baseline"; + ContainsLine = "PermitUserEnvironment no"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/ssh/sshd_config"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "^#\\s*PermitUserEnvironment.*$|^PermitUserEnvironment\\s*(?!no\\b)\\w*$"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource18ref +{ +ResourceID = "[nxFileLine][V-204435][medium][SRG-OS-000480-GPOS-00229]::[RHEL]Baseline"; + ContainsLine = "HostbasedAuthentication no"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/ssh/sshd_config"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "^#\\s*HostbasedAuthentication.*$|^HostbasedAuthentication\\s*(?!no\\b)\\w*$"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource19ref +{ +ResourceID = "[nxFileLine][V-204447][high][SRG-OS-000366-GPOS-00153]::[RHEL]Baseline"; + ContainsLine = "gpgcheck=1"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/yum.conf"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*gpgcheck\\s*=\\s*1"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource20ref +{ +ResourceID = "[nxFileLine][V-204448][high][SRG-OS-000366-GPOS-00153]::[RHEL]Baseline"; + ContainsLine = "localpkg_gpgcheck=1"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/yum.conf"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*localpkg_gpgcheck\\s*=\\s*1"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource21ref +{ +ResourceID = "[nxFileLine][V-204449.c][medium][SRG-OS-000114-GPOS-00059]::[RHEL]Baseline"; + ContainsLine = "install usb-storage /bin/true"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/modprobe.d/usb-storage.conf"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*install\\s*usb-storage\\s*/bin/true"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource22ref +{ +ResourceID = "[nxFileLine][V-204449.d][medium][SRG-OS-000114-GPOS-00059]::[RHEL]Baseline"; + ContainsLine = "blacklist usb-storage"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/modprobe.d/blacklist.conf"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*blacklist\\s*usb-storage"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource23ref +{ +ResourceID = "[nxFileLine][V-204450.b][medium][SRG-OS-000378-GPOS-00163]::[RHEL]Baseline"; + ContainsLine = "install dccp /bin/true"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/modprobe.d/dccp.conf"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*install\\s*dccp\\s*/bin/true"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource24ref +{ +ResourceID = "[nxFileLine][V-204450.c][medium][SRG-OS-000378-GPOS-00163]::[RHEL]Baseline"; + ContainsLine = "blacklist dccp"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/modprobe.d/blacklist.conf"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*blacklist\\s*dccp"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource25ref +{ +ResourceID = "[nxFileLine][V-204452][low][SRG-OS-000437-GPOS-00194]::[RHEL]Baseline"; + ContainsLine = "clean_requirements_on_remove=1"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/yum.conf"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*clean_requirements_on_remove\\s*=\\s*1"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource26ref +{ +ResourceID = "[nxFileLine][V-204453][medium][SRG-OS-000445-GPOS-00199]::[RHEL]Baseline"; + ContainsLine = "SELINUX=enforcing"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/selinux/config"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "^#\\s*SELINUX.*$|^SELINUX\\s*=\\s*(?!enforcing)\\w*$"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource27ref +{ +ResourceID = "[nxFileLine][V-204454][medium][SRG-OS-000445-GPOS-00199]::[RHEL]Baseline"; + ContainsLine = "SELINUXTYPE=targeted"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/selinux/config"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "^#\\s*SELINUXTYPE.*$|^SELINUXTYPE\\s*=\\s*(?!targeted\\b)\\w*$"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource28ref +{ +ResourceID = "[nxFileLine][V-204457][medium][SRG-OS-000480-GPOS-00228]::[RHEL]Baseline"; + ContainsLine = "UMASK 077"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/login.defs"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "^\\s*UMASK(?!\\s077\\b)\\s*\\d*\\s*$|^#\\s*UMASK.*"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource29ref +{ +ResourceID = "[nxFileLine][V-204466][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; + ContainsLine = "CREATE_HOME yes"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/login.defs"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "^#\\s*CREATE_HOME.*$|^CREATE_HOME\\s*(?!yes\\b)\\w*$|^CREATE_HOME\\t.*"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource30ref +{ +ResourceID = "[nxFileLine][V-204504][medium][SRG-OS-000046-GPOS-00022]::[RHEL]Baseline"; + ContainsLine = "-f 2"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "^#\\s*-f\\s+2|^\\s*-f\\s*1"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileResource as $MSFT_nxFileResource24ref +{ +SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::29::9::nxFile"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + ResourceID = "[nxFile][V-204506.a][medium][SRG-OS-000342-GPOS-00133]::[RHEL]Baseline"; + DestinationPath = "/etc/audisp/plugins.d/au-remote.conf"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource31ref +{ +ResourceID = "[nxFileLine][V-204506.a][medium][SRG-OS-000342-GPOS-00133]::[RHEL]Baseline"; + ContainsLine = "active = yes"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audisp/plugins.d/au-remote.conf"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "\\s*active\\s*=\\s*no|active=yes|#\\s*active\\s*=.*"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource32ref +{ +ResourceID = "[nxFileLine][V-204506.b][medium][SRG-OS-000342-GPOS-00133]::[RHEL]Baseline"; + ContainsLine = "direction = out"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audisp/plugins.d/au-remote.conf"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*direction\\s*=\\s*out"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource33ref +{ +ResourceID = "[nxFileLine][V-204506.c][medium][SRG-OS-000342-GPOS-00133]::[RHEL]Baseline"; + ContainsLine = "path = /sbin/audisp-remote"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audisp/plugins.d/au-remote.conf"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*path\\s*=\\s*/sbin/audisp-remote"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource34ref +{ +ResourceID = "[nxFileLine][V-204506.d][medium][SRG-OS-000342-GPOS-00133]::[RHEL]Baseline"; + ContainsLine = "type = always"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audisp/plugins.d/au-remote.conf"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*type\\s*=\\s*always"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource35ref +{ +ResourceID = "[nxFileLine][V-204507][medium][SRG-OS-000342-GPOS-00133]::[RHEL]Baseline"; + ContainsLine = "overflow_action = syslog"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audisp/audispd.conf"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "^#\\s*overflow_action.*$|^overflow_action\\s*=\\s*(?!syslog$)\\w*$"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource36ref +{ +ResourceID = "[nxFileLine][V-204508][medium][SRG-OS-000342-GPOS-00133]::[RHEL]Baseline"; + ContainsLine = "name_format = hostname"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audisp/audispd.conf"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "^#\\s*name_format.*$|^name_format\\s*=\\s*(?!hostname$)\\w*$"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileResource as $MSFT_nxFileResource25ref +{ +SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::19::9::nxFile"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + ResourceID = "[nxFile][V-204510][medium][SRG-OS-000342-GPOS-00133]::[RHEL]Baseline"; + DestinationPath = "/etc/audisp/audisp-remote.conf"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource37ref +{ +ResourceID = "[nxFileLine][V-204510][medium][SRG-OS-000342-GPOS-00133]::[RHEL]Baseline"; + ContainsLine = "enable_krb5 = yes"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audisp/audisp-remote.conf"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*enable_krb5\\s*=\\s*yes"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource38ref +{ +ResourceID = "[nxFileLine][V-204511][medium][SRG-OS-000342-GPOS-00133]::[RHEL]Baseline"; + ContainsLine = "disk_full_action = single"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audisp/audisp-remote.conf"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "^#\\s*disk_full_action\\s*=.*|^disk_full_action\\s*=\\s*(?!halt\\b|single\\b|syslog\\b)\\w+"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource39ref +{ +ResourceID = "[nxFileLine][V-204512][medium][SRG-OS-000342-GPOS-00133]::[RHEL]Baseline"; + ContainsLine = "network_failure_action = syslog"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audisp/audisp-remote.conf"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "^#\\s*network_failure_action\\s*=.*|^network_failure_action\\s*=\\s*(?!halt\\b|single\\b|syslog\\b)\\w+"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource40ref +{ +ResourceID = "[nxFileLine][V-204514][medium][SRG-OS-000343-GPOS-00134]::[RHEL]Baseline"; + ContainsLine = "space_left_action = email"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/auditd.conf"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "^#\\s*space_left_action.*$|^space_left_action\\s*=\\s*(?!email$)\\w*$"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource41ref +{ +ResourceID = "[nxFileLine][V-204515][medium][SRG-OS-000343-GPOS-00134]::[RHEL]Baseline"; + ContainsLine = "action_mail_acct = root"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/auditd.conf"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "^#\\s*action_mail_acct.*|^action_mail_acct\\s*=\\s*(?!root\\b)\\w+"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource42ref +{ +ResourceID = "[nxFileLine][V-204516.a][medium][SRG-OS-000327-GPOS-00127]::[RHEL]Baseline"; + ContainsLine = "-a always,exit -F arch=b32 -S execve -C uid!=euid -F euid=0 -k setuid"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*execve\\s*-C\\s*uid!\\s*=\\s*euid\\s*-F\\s*euid\\s*=\\s*0\\s*-k\\s*setuid"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource43ref +{ +ResourceID = "[nxFileLine][V-204516.b][medium][SRG-OS-000327-GPOS-00127]::[RHEL]Baseline"; + ContainsLine = "-a always,exit -F arch=b64 -S execve -C uid!=euid -F euid=0 -k setuid"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*execve\\s*-C\\s*uid!\\s*=\\s*euid\\s*-F\\s*euid\\s*=\\s*0\\s*-k\\s*setuid"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource44ref +{ +ResourceID = "[nxFileLine][V-204516.c][medium][SRG-OS-000327-GPOS-00127]::[RHEL]Baseline"; + ContainsLine = "-a always,exit -F arch=b32 -S execve -C gid!=egid -F egid=0 -k setgid"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*execve\\s*-C\\s*gid!\\s*=\\s*egid\\s*-F\\s*egid\\s*=\\s*0\\s*-k\\s*setgid"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource45ref +{ +ResourceID = "[nxFileLine][V-204516.d][medium][SRG-OS-000327-GPOS-00127]::[RHEL]Baseline"; + ContainsLine = "-a always,exit -F arch=b64 -S execve -C gid!=egid -F egid=0 -k setgid"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*execve\\s*-C\\s*gid!\\s*=\\s*egid\\s*-F\\s*egid\\s*=\\s*0\\s*-k\\s*setgid"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource46ref +{ +ResourceID = "[nxFileLine][V-204517.a][medium][SRG-OS-000064-GPOS-00033]::[RHEL]Baseline"; + ContainsLine = "-a always,exit -F arch=b32 -S chown,fchown,fchownat,lchown -F auid>=1000 -F auid!=unset -k perm_mod"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*chown,fchown,fchownat,lchown\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*perm_mod"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource47ref +{ +ResourceID = "[nxFileLine][V-204517.b][medium][SRG-OS-000064-GPOS-00033]::[RHEL]Baseline"; + ContainsLine = "-a always,exit -F arch=b64 -S chown,fchown,fchownat,lchown -F auid>=1000 -F auid!=unset -k perm_mod"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*chown,fchown,fchownat,lchown\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*perm_mod"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource48ref +{ +ResourceID = "[nxFileLine][V-204521.a][medium][SRG-OS-000458-GPOS-00203]::[RHEL]Baseline"; + ContainsLine = "-a always,exit -F arch=b32 -S chmod,fchmod,fchmodat -F auid>=1000 -F auid!=unset -k perm_mod"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*chmod,fchmod,fchmodat\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*perm_mod"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource49ref +{ +ResourceID = "[nxFileLine][V-204521.b][medium][SRG-OS-000458-GPOS-00203]::[RHEL]Baseline"; + ContainsLine = "-a always,exit -F arch=b64 -S chmod,fchmod,fchmodat -F auid>=1000 -F auid!=unset -k perm_mod"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*chmod,fchmod,fchmodat\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*perm_mod"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource50ref +{ +ResourceID = "[nxFileLine][V-204524.a][medium][SRG-OS-000458-GPOS-00203]::[RHEL]Baseline"; + ContainsLine = "-a always,exit -F arch=b32 -S setxattr,fsetxattr,lsetxattr,removexattr,fremovexattr,lremovexattr -F auid>=1000 -F auid!=unset -k perm_mod"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*setxattr,fsetxattr,lsetxattr,removexattr,fremovexattr,lremovexattr\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*perm_mod"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource51ref +{ +ResourceID = "[nxFileLine][V-204524.b][medium][SRG-OS-000458-GPOS-00203]::[RHEL]Baseline"; + ContainsLine = "-a always,exit -F arch=b64 -S setxattr,fsetxattr,lsetxattr,removexattr,fremovexattr,lremovexattr -F auid>=1000 -F auid!=unset -k perm_mod"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*setxattr,fsetxattr,lsetxattr,removexattr,fremovexattr,lremovexattr\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*perm_mod"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource52ref +{ +ResourceID = "[nxFileLine][V-204531.a][medium][SRG-OS-000064-GPOS-00033]::[RHEL]Baseline"; + ContainsLine = "-a always,exit -F arch=b32 -S creat,open,openat,open_by_handle_at,truncate,ftruncate -F exit=-EPERM -F auid>=1000 -F auid!=unset -k access"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*creat,open,openat,open_by_handle_at,truncate,ftruncate\\s*-F\\s*exit\\s*=\\s*-EPERM\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*access"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource53ref +{ +ResourceID = "[nxFileLine][V-204531.b][medium][SRG-OS-000064-GPOS-00033]::[RHEL]Baseline"; + ContainsLine = "-a always,exit -F arch=b32 -S creat,open,openat,open_by_handle_at,truncate,ftruncate -F exit=-EACCES -F auid>=1000 -F auid!=unset -k access"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*creat,open,openat,open_by_handle_at,truncate,ftruncate\\s*-F\\s*exit\\s*=\\s*-EACCES\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*access"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource54ref +{ +ResourceID = "[nxFileLine][V-204531.c][medium][SRG-OS-000064-GPOS-00033]::[RHEL]Baseline"; + ContainsLine = "-a always,exit -F arch=b64 -S creat,open,openat,open_by_handle_at,truncate,ftruncate -F exit=-EPERM -F auid>=1000 -F auid!=unset -k access"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*creat,open,openat,open_by_handle_at,truncate,ftruncate\\s*-F\\s*exit\\s*=\\s*-EPERM\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*access"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource55ref +{ +ResourceID = "[nxFileLine][V-204531.d][medium][SRG-OS-000064-GPOS-00033]::[RHEL]Baseline"; + ContainsLine = "-a always,exit -F arch=b64 -S creat,open,openat,open_by_handle_at,truncate,ftruncate -F exit=-EACCES -F auid>=1000 -F auid!=unset -k access"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*creat,open,openat,open_by_handle_at,truncate,ftruncate\\s*-F\\s*exit\\s*=\\s*-EACCES\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*access"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource56ref +{ +ResourceID = "[nxFileLine][V-204536][medium][SRG-OS-000392-GPOS-00172]::[RHEL]Baseline"; + ContainsLine = "-a always,exit -F path=/usr/sbin/semanage -F perm=x -F auid>=1000 -F auid!=unset -k privileged-priv_change"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/sbin/semanage\\s*-F\\s*perm\\s*=\\s*x\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-priv_change"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource57ref +{ +ResourceID = "[nxFileLine][V-204537][medium][SRG-OS-000392-GPOS-00172]::[RHEL]Baseline"; + ContainsLine = "-a always,exit -F path=/usr/sbin/setsebool -F perm=x -F auid>=1000 -F auid!=unset -k privileged-priv_change"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/sbin/setsebool\\s*-F\\s*perm\\s*=\\s*x\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-priv_change"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource58ref +{ +ResourceID = "[nxFileLine][V-204538][medium][SRG-OS-000392-GPOS-00172]::[RHEL]Baseline"; + ContainsLine = "-a always,exit -F path=/usr/bin/chcon -F perm=x -F auid>=1000 -F auid!=unset -k privileged-priv_change"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/bin/chcon\\s*-F\\s*perm\\s*=\\s*x\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-priv_change"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource59ref +{ +ResourceID = "[nxFileLine][V-204539][medium][SRG-OS-000392-GPOS-00172]::[RHEL]Baseline"; + ContainsLine = "-a always,exit -F path=/usr/sbin/setfiles -F perm=x -F auid>=1000 -F auid!=unset -k privileged-priv_change"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/sbin/setfiles\\s*-F\\s*perm\\s*=\\s*x\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-priv_change"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource60ref +{ +ResourceID = "[nxFileLine][V-204540][medium][SRG-OS-000392-GPOS-00172]::[RHEL]Baseline"; + ContainsLine = "-w /var/run/faillock -p wa -k logins"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-w\\s*/var/run/faillock\\s*-p\\s*wa\\s*-k\\s*logins"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource61ref +{ +ResourceID = "[nxFileLine][V-204541][medium][SRG-OS-000392-GPOS-00172]::[RHEL]Baseline"; + ContainsLine = "-w /var/log/lastlog -p wa -k logins"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-w\\s*/var/log/lastlog\\s*-p\\s*wa\\s*-k\\s*logins"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource62ref +{ +ResourceID = "[nxFileLine][V-204542][medium][SRG-OS-000042-GPOS-00020]::[RHEL]Baseline"; + ContainsLine = "-a always,exit -F path=/usr/bin/passwd -F perm=x -F auid>=1000 -F auid!=unset -k privileged-passwd"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/bin/passwd\\s*-F\\s*perm\\s*=\\s*x\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-passwd"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource63ref +{ +ResourceID = "[nxFileLine][V-204543][medium][SRG-OS-000042-GPOS-00020]::[RHEL]Baseline"; + ContainsLine = "-a always,exit -F path=/usr/sbin/unix_chkpwd -F perm=x -F auid>=1000 -F auid!=unset -k privileged-passwd"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/sbin/unix_chkpwd\\s*-F\\s*perm\\s*=\\s*x\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-passwd"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource64ref +{ +ResourceID = "[nxFileLine][V-204544][medium][SRG-OS-000042-GPOS-00020]::[RHEL]Baseline"; + ContainsLine = "-a always,exit -F path=/usr/bin/gpasswd -F perm=x -F auid>=1000 -F auid!=unset -k privileged-passwd"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/bin/gpasswd\\s*-F\\s*perm\\s*=\\s*x\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-passwd"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource65ref +{ +ResourceID = "[nxFileLine][V-204545][medium][SRG-OS-000042-GPOS-00020]::[RHEL]Baseline"; + ContainsLine = "-a always,exit -F path=/usr/bin/chage -F perm=x -F auid>=1000 -F auid!=unset -k privileged-passwd"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/bin/chage\\s*-F\\s*perm\\s*=\\s*x\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-passwd"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource66ref +{ +ResourceID = "[nxFileLine][V-204546][medium][SRG-OS-000042-GPOS-00020]::[RHEL]Baseline"; + ContainsLine = "-a always,exit -F path=/usr/sbin/userhelper -F perm=x -F auid>=1000 -F auid!=unset -k privileged-passwd"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/sbin/userhelper\\s*-F\\s*perm\\s*=\\s*x\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-passwd"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource67ref +{ +ResourceID = "[nxFileLine][V-204547][medium][SRG-OS-000037-GPOS-00015]::[RHEL]Baseline"; + ContainsLine = "-a always,exit -F path=/usr/bin/su -F perm=x -F auid>=1000 -F auid!=unset -k privileged-priv_change"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/bin/su\\s*-F\\s*perm\\s*=\\s*x\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-priv_change"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource68ref +{ +ResourceID = "[nxFileLine][V-204548][medium][SRG-OS-000037-GPOS-00015]::[RHEL]Baseline"; + ContainsLine = "-a always,exit -F path=/usr/bin/sudo -F perm=x -F auid>=1000 -F auid!=unset -k privileged-priv_change"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/bin/sudo\\s*-F\\s*perm\\s*=\\s*x\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-priv_change"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource69ref +{ +ResourceID = "[nxFileLine][V-204549.a][medium][SRG-OS-000037-GPOS-00015]::[RHEL]Baseline"; + ContainsLine = "-w /etc/sudoers -p wa -k privileged-actions"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-w /etc/sudoers -p wa -k privileged-actions"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource70ref +{ +ResourceID = "[nxFileLine][V-204549.b][medium][SRG-OS-000037-GPOS-00015]::[RHEL]Baseline"; + ContainsLine = "-w /etc/sudoers.d/ -p wa -k privileged-actions"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-w /etc/sudoers.d/ -p wa -k privileged-actions"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource71ref +{ +ResourceID = "[nxFileLine][V-204550][medium][SRG-OS-000037-GPOS-00015]::[RHEL]Baseline"; + ContainsLine = "-a always,exit -F path=/usr/bin/newgrp -F perm=x -F auid>=1000 -F auid!=unset -k privileged-priv_change"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/bin/newgrp\\s*-F\\s*perm\\s*=\\s*x\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-priv_change"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource72ref +{ +ResourceID = "[nxFileLine][V-204551][medium][SRG-OS-000037-GPOS-00015]::[RHEL]Baseline"; + ContainsLine = "-a always,exit -F path=/usr/bin/chsh -F perm=x -F auid>=1000 -F auid!=unset -k privileged-priv_change"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/bin/chsh\\s*-F\\s*perm\\s*=\\s*x\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-priv_change"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource73ref +{ +ResourceID = "[nxFileLine][V-204552.a][medium][SRG-OS-000042-GPOS-00020]::[RHEL]Baseline"; + ContainsLine = "-a always,exit -F arch=b32 -S mount -F auid>=1000 -F auid!=unset -k privileged-mount"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*mount\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-mount"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource74ref +{ +ResourceID = "[nxFileLine][V-204552.b][medium][SRG-OS-000042-GPOS-00020]::[RHEL]Baseline"; + ContainsLine = "-a always,exit -F arch=b64 -S mount -F auid>=1000 -F auid!=unset -k privileged-mount"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*mount\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-mount"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource75ref +{ +ResourceID = "[nxFileLine][V-204552.c][medium][SRG-OS-000042-GPOS-00020]::[RHEL]Baseline"; + ContainsLine = "-a always,exit -F path=/usr/bin/mount -F perm=x -F auid>=1000 -F auid!=unset -k privileged-mount"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/bin/mount\\s*-F\\s*perm\\s*=\\s*x\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-mount"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource76ref +{ +ResourceID = "[nxFileLine][V-204553][medium][SRG-OS-000042-GPOS-00020]::[RHEL]Baseline"; + ContainsLine = "-a always,exit -F path=/usr/bin/umount -F perm=x -F auid>=1000 -F auid!=unset -k privileged-mount"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/bin/umount\\s*-F\\s*perm\\s*=\\s*x\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-mount"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource77ref +{ +ResourceID = "[nxFileLine][V-204554][medium][SRG-OS-000042-GPOS-00020]::[RHEL]Baseline"; + ContainsLine = "-a always,exit -F path=/usr/sbin/postdrop -F perm=x -F auid>=1000 -F auid!=unset -k privileged-postfix"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/sbin/postdrop\\s*-F\\s*perm\\s*=\\s*x\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-postfix"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource78ref +{ +ResourceID = "[nxFileLine][V-204555][medium][SRG-OS-000042-GPOS-00020]::[RHEL]Baseline"; + ContainsLine = "-a always,exit -F path=/usr/sbin/postqueue -F perm=x -F auid>=1000 -F auid!=unset -k privileged-postfix"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/sbin/postqueue\\s*-F\\s*perm\\s*=\\s*x\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-postfix"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource79ref +{ +ResourceID = "[nxFileLine][V-204556][medium][SRG-OS-000042-GPOS-00020]::[RHEL]Baseline"; + ContainsLine = "-a always,exit -F path=/usr/libexec/openssh/ssh-keysign -F perm=x -F auid>=1000 -F auid!=unset -k privileged-ssh"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/libexec/openssh/ssh-keysign\\s*-F\\s*perm\\s*=\\s*x\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-ssh"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource80ref +{ +ResourceID = "[nxFileLine][V-204557][medium][SRG-OS-000042-GPOS-00020]::[RHEL]Baseline"; + ContainsLine = "-a always,exit -F path=/usr/bin/crontab -F perm=x -F auid>=1000 -F auid!=unset -k privileged-cron"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/bin/crontab\\s*-F\\s*perm\\s*=\\s*x\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-cron"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource81ref +{ +ResourceID = "[nxFileLine][V-204558][medium][SRG-OS-000471-GPOS-00215]::[RHEL]Baseline"; + ContainsLine = "-a always,exit -F path=/usr/sbin/pam_timestamp_check -F perm=x -F auid>=1000 -F auid!=unset -k privileged-pam"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/sbin/pam_timestamp_check\\s*-F\\s*perm\\s*=\\s*x\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-pam"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource82ref +{ +ResourceID = "[nxFileLine][V-204559.a][medium][SRG-OS-000471-GPOS-00216]::[RHEL]Baseline"; + ContainsLine = "-a always,exit -F arch=b32 -S create_module -F auid>=1000 -F auid!=unset -k module-change"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*create_module\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*module-change"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource83ref +{ +ResourceID = "[nxFileLine][V-204559.b][medium][SRG-OS-000471-GPOS-00216]::[RHEL]Baseline"; + ContainsLine = "-a always,exit -F arch=b64 -S create_module -F auid>=1000 -F auid!=unset -k module-change"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*create_module\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*module-change"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource84ref +{ +ResourceID = "[nxFileLine][V-204560.a][medium][SRG-OS-000471-GPOS-00216]::[RHEL]Baseline"; + ContainsLine = "-a always,exit -F arch=b32 -S init_module,finit_module -F auid>=1000 -F auid!=unset -k modulechange"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*init_module,finit_module\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*modulechange"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource85ref +{ +ResourceID = "[nxFileLine][V-204560.b][medium][SRG-OS-000471-GPOS-00216]::[RHEL]Baseline"; + ContainsLine = "-a always,exit -F arch=b64 -S init_module,finit_module -F auid>=1000 -F auid!=unset -k modulechange"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*init_module,finit_module\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*modulechange"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource86ref +{ +ResourceID = "[nxFileLine][V-204562.a][medium][SRG-OS-000471-GPOS-00216]::[RHEL]Baseline"; + ContainsLine = "-a always,exit -F arch=b32 -S delete_module -F auid>=1000 -F auid!=unset -k module-change"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*delete_module\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*module-change"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource87ref +{ +ResourceID = "[nxFileLine][V-204562.b][medium][SRG-OS-000471-GPOS-00216]::[RHEL]Baseline"; + ContainsLine = "-a always,exit -F arch=b64 -S delete_module -F auid>=1000 -F auid!=unset -k module-change"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*delete_module\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*module-change"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource88ref +{ +ResourceID = "[nxFileLine][V-204563][medium][SRG-OS-000471-GPOS-00216]::[RHEL]Baseline"; + ContainsLine = "-a always,exit -F path=/usr/bin/kmod -F perm=x -F auid>=1000 -F auid!=unset -k modules"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/bin/kmod\\s*-F\\s*perm\\s*=\\s*x\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*modules"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource89ref +{ +ResourceID = "[nxFileLine][V-204564][medium][SRG-OS-000004-GPOS-00004]::[RHEL]Baseline"; + ContainsLine = "-w /etc/passwd -p wa -k identity"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-w\\s*/etc/passwd\\s*-p\\s*wa\\s*-k\\s*identity"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource90ref +{ +ResourceID = "[nxFileLine][V-204565][medium][SRG-OS-000004-GPOS-00004]::[RHEL]Baseline"; + ContainsLine = "-w /etc/group -p wa -k identity"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-w\\s*/etc/group\\s*-p\\s*wa\\s*-k\\s*identity"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource91ref +{ +ResourceID = "[nxFileLine][V-204566][medium][SRG-OS-000004-GPOS-00004]::[RHEL]Baseline"; + ContainsLine = "-w /etc/gshadow -p wa -k identity"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-w\\s*/etc/gshadow\\s*-p\\s*wa\\s*-k\\s*identity"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource92ref +{ +ResourceID = "[nxFileLine][V-204567][medium][SRG-OS-000004-GPOS-00004]::[RHEL]Baseline"; + ContainsLine = "-w /etc/shadow -p wa -k identity"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-w\\s*/etc/shadow\\s*-p\\s*wa\\s*-k\\s*identity"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource93ref +{ +ResourceID = "[nxFileLine][V-204568][medium][SRG-OS-000004-GPOS-00004]::[RHEL]Baseline"; + ContainsLine = "-w /etc/security/opasswd -p wa -k identity"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-w\\s*/etc/security/opasswd\\s*-p\\s*wa\\s*-k\\s*identity"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource94ref +{ +ResourceID = "[nxFileLine][V-204572.a][medium][SRG-OS-000466-GPOS-00210]::[RHEL]Baseline"; + ContainsLine = "-a always,exit -F arch=b32 -S unlink,unlinkat,rename,renameat,rmdir -F auid>=1000 -F auid!=unset -k delete"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*unlink,unlinkat,rename,renameat,rmdir\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*delete"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource95ref +{ +ResourceID = "[nxFileLine][V-204572.b][medium][SRG-OS-000466-GPOS-00210]::[RHEL]Baseline"; + ContainsLine = "-a always,exit -F arch=b64 -S unlink,unlinkat,rename,renameat,rmdir -F auid>=1000 -F auid!=unset -k delete"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*unlink,unlinkat,rename,renameat,rmdir\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*delete"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource96ref +{ +ResourceID = "[nxFileLine][V-204578][medium][SRG-OS-000033-GPOS-00014]::[RHEL]Baseline"; + ContainsLine = "Ciphers aes256-ctr,aes192-ctr,aes128-ctr"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/ssh/sshd_config"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "^#\\s*Ciphers.*|^\\s*Ciphers\\s*aes128-ctr.*|^\\s*Ciphers\\s*aes192-ctr.*"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource97ref +{ +ResourceID = "[nxFileLine][V-204579.b][medium][SRG-OS-000163-GPOS-00072]::[RHEL]Baseline"; + ContainsLine = "declare -xr TMOUT=900"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/profile.d/tmout.sh"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "^\\s*TMOUT\\s*=\\s*[0-8]?[0-9]?[0-9]?$|^#\\s*TMOUT.*"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource98ref +{ +ResourceID = "[nxFileLine][V-204579.c][medium][SRG-OS-000163-GPOS-00072]::[RHEL]Baseline"; + ContainsLine = "declare -xr TMOUT=900"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/bashrc"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "^\\s*TMOUT\\s*=\\s*[0-8]?[0-9]?[0-9]?$|^#\\s*TMOUT.*"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource99ref +{ +ResourceID = "[nxFileLine][V-204579.d][medium][SRG-OS-000163-GPOS-00072]::[RHEL]Baseline"; + ContainsLine = "declare -xr TMOUT=900"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/profile"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "^\\s*TMOUT\\s*=\\s*[0-8]?[0-9]?[0-9]?$|^#\\s*TMOUT.*"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource100ref +{ +ResourceID = "[nxFileLine][V-204580][medium][SRG-OS-000023-GPOS-00006]::[RHEL]Baseline"; + ContainsLine = "banner /etc/issue"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/ssh/sshd_config"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*banner\\s*/etc/issue"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource101ref +{ +ResourceID = "[nxFileLine][V-204587][medium][SRG-OS-000163-GPOS-00072]::[RHEL]Baseline"; + ContainsLine = "ClientAliveInterval 600"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/ssh/sshd_config"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "^\\s*ClientAliveInterval\\s*[0-5]?[0-9]?[0-9]?\\s*$|^#\\s*ClientAliveInterval.*|^\\s*ClientAliveInterval\\s*$"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource102ref +{ +ResourceID = "[nxFileLine][V-204588][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; + ContainsLine = "RhostsRSAAuthentication no"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/ssh/sshd_config"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "^#\\s*RhostsRSAAuthentication.*$|^RhostsRSAAuthentication\\s*(?!no\\b)\\w*$"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource103ref +{ +ResourceID = "[nxFileLine][V-204589][medium][SRG-OS-000163-GPOS-00072]::[RHEL]Baseline"; + ContainsLine = "ClientAliveCountMax 0"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/ssh/sshd_config"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "^#\\s*ClientAliveCountMax.*$|^ClientAliveCountMax\\s*(?!0\\b)\\w*$"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource104ref +{ +ResourceID = "[nxFileLine][V-204590][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; + ContainsLine = "IgnoreRhosts yes"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/ssh/sshd_config"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "^#\\s*IgnoreRhosts.*$|^IgnoreRhosts\\s*(?!yes\\b)\\w*$"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource105ref +{ +ResourceID = "[nxFileLine][V-204591][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; + ContainsLine = "PrintLastLog yes"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/ssh/sshd_config"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "^#\\s*PrintLastLog.*$|^PrintLastLog\\s*(?!yes\\b)\\w*$"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource106ref +{ +ResourceID = "[nxFileLine][V-204592][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; + ContainsLine = "PermitRootLogin no"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/ssh/sshd_config"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "^#\\s*PermitRootLogin.*$|^PermitRootLogin\\s*(?!no\\b)\\w*$"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource107ref +{ +ResourceID = "[nxFileLine][V-204593][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; + ContainsLine = "IgnoreUserKnownHosts yes"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/ssh/sshd_config"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "^#\\s*IgnoreUserKnownHosts.*$|^IgnoreUserKnownHosts\\s*(?!yes\\b)\\w*$"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource108ref +{ +ResourceID = "[nxFileLine][V-204594][high][SRG-OS-000074-GPOS-00042]::[RHEL]Baseline"; + ContainsLine = "Protocol 2"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/ssh/sshd_config"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "^#\\s*Protocol.*$|^Protocol\\s*(?!2\\b)\\w*$"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource109ref +{ +ResourceID = "[nxFileLine][V-204595][medium][SRG-OS-000250-GPOS-00093]::[RHEL]Baseline"; + ContainsLine = "MACs hmac-sha2-512,hmac-sha2-256"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/ssh/sshd_config"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*MACs.*|\\s*MACs\\s*hmac-(?!sha2-512).*"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource110ref +{ +ResourceID = "[nxFileLine][V-204598][medium][SRG-OS-000364-GPOS-00151]::[RHEL]Baseline"; + ContainsLine = "GSSAPIAuthentication no"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/ssh/sshd_config"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "^#\\s*GSSAPIAuthentication.*$|^GSSAPIAuthentication\\s*(?!no\\b)\\w*$"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource111ref +{ +ResourceID = "[nxFileLine][V-204599][medium][SRG-OS-000364-GPOS-00151]::[RHEL]Baseline"; + ContainsLine = "KerberosAuthentication no"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/ssh/sshd_config"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "^#\\s*KerberosAuthentication.*$|^KerberosAuthentication\\s*(?!no\\b)\\w*$"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource112ref +{ +ResourceID = "[nxFileLine][V-204600][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; + ContainsLine = "StrictModes yes"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/ssh/sshd_config"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "^#\\s*StrictModes.*$|^StrictModes\\s*(?!yes\\b)\\w*$"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource113ref +{ +ResourceID = "[nxFileLine][V-204601][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; + ContainsLine = "UsePrivilegeSeparation sandbox"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/ssh/sshd_config"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "^#\\s*UsePrivilegeSeparation.*$|^UsePrivilegeSeparation\\s*(?!sandbox\\b)\\w*$"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource114ref +{ +ResourceID = "[nxFileLine][V-204602][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; + ContainsLine = "Compression delayed"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/ssh/sshd_config"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "^#\\s*Compression.*$|^Compression\\s*(?!delayed\\b)\\w*$"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource115ref +{ +ResourceID = "[nxFileLine][V-204622][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; + ContainsLine = "X11Forwarding no"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/ssh/sshd_config"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "^#\\s*X11Forwarding.*$|^X11Forwarding\\s*(?!no\\b)\\w*$"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource116ref +{ +ResourceID = "[nxFileLine][V-233307][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; + ContainsLine = "X11UseLocalhost yes"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/ssh/sshd_config"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*X11UseLocalhost\\s*yes"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource117ref +{ +ResourceID = "[nxFileLine][V-255925][medium][SRG-OS-000033-GPOS-00014]::[RHEL]Baseline"; + ContainsLine = "KexAlgorithms ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/ssh/sshd_config"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*KexAlgorithms\\s*ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxServiceResource as $MSFT_nxServiceResource1ref +{ +ResourceID = "[nxService][V-204451][medium][SRG-OS-000114-GPOS-00059]::[RHEL]Baseline"; + Controller = "systemd"; + Enabled = False; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxService.ps1::13::9::nxService"; + Name = "autofs"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxServiceResource as $MSFT_nxServiceResource2ref +{ +ResourceID = "[nxService][V-204492][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; + Controller = "systemd"; + Enabled = False; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxService.ps1::13::9::nxService"; + Name = "kdump"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxServiceResource as $MSFT_nxServiceResource3ref +{ +ResourceID = "[nxService][V-204503][medium][SRG-OS-000038-GPOS-00016]::[RHEL]Baseline"; + Controller = "systemd"; + State = "Running"; + Enabled = True; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxService.ps1::22::9::nxService"; + Name = "auditd"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxServiceResource as $MSFT_nxServiceResource4ref +{ +ResourceID = "[nxService][V-204586][medium][SRG-OS-000423-GPOS-00187]::[RHEL]Baseline"; + Controller = "systemd"; + State = "Running"; + Enabled = True; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxService.ps1::22::9::nxService"; + Name = "sshd"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxServiceResource as $MSFT_nxServiceResource5ref +{ +ResourceID = "[nxService][V-204604.b][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; + Controller = "systemd"; + State = "Running"; + Enabled = True; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxService.ps1::22::9::nxService"; + Name = "firewalld"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxScriptResource as $MSFT_nxScriptResource1ref +{ +ResourceID = "[nxScript][V-204399.b][medium][[Skip] SRG-OS-000029-GPOS-00010]::[RHEL]Baseline"; + GetScript = "#!/bin/bash\necho [V-204399.b][medium][[Skip] SRG-OS-000029-GPOS-00010]"; + TestScript = "#!/bin/bash\nexit 0"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxScript.skip.ps1::10::5::nxScript"; + SetScript = "#!/bin/bash"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxScriptResource as $MSFT_nxScriptResource2ref +{ +ResourceID = "[nxScript][V-204400][medium][[Skip] SRG-OS-000029-GPOS-00010]::[RHEL]Baseline"; + GetScript = "#!/bin/bash\necho [V-204400][medium][[Skip] SRG-OS-000029-GPOS-00010]"; + TestScript = "#!/bin/bash\nexit 0"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxScript.skip.ps1::10::5::nxScript"; + SetScript = "#!/bin/bash"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxScriptResource as $MSFT_nxScriptResource3ref +{ +ResourceID = "[nxScript][V-204403][medium][[Skip] SRG-OS-000029-GPOS-00010]::[RHEL]Baseline"; + GetScript = "#!/bin/bash\necho [V-204403][medium][[Skip] SRG-OS-000029-GPOS-00010]"; + TestScript = "#!/bin/bash\nexit 0"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxScript.skip.ps1::10::5::nxScript"; + SetScript = "#!/bin/bash"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxScriptResource as $MSFT_nxScriptResource4ref +{ +ResourceID = "[nxScript][V-204509][medium][[Skip] SRG-OS-000342-GPOS-00133]::[RHEL]Baseline"; + GetScript = "#!/bin/bash\necho [V-204509][medium][[Skip] SRG-OS-000342-GPOS-00133]"; + TestScript = "#!/bin/bash\nexit 0"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxScript.skip.ps1::10::5::nxScript"; + SetScript = "#!/bin/bash"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxScriptResource as $MSFT_nxScriptResource5ref +{ +ResourceID = "[nxScript][V-204513][medium][[Skip] SRG-OS-000343-GPOS-00134]::[RHEL]Baseline"; + GetScript = "#!/bin/bash\necho [V-204513][medium][[Skip] SRG-OS-000343-GPOS-00134]"; + TestScript = "#!/bin/bash\nexit 0"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxScript.skip.ps1::10::5::nxScript"; + SetScript = "#!/bin/bash"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxScriptResource as $MSFT_nxScriptResource6ref +{ +ResourceID = "[nxScript][V-204623][medium][[Skip] SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; + GetScript = "#!/bin/bash\necho [V-204623][medium][[Skip] SRG-OS-000480-GPOS-00227]"; + TestScript = "#!/bin/bash\nexit 0"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxScript.skip.ps1::10::5::nxScript"; + SetScript = "#!/bin/bash"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxScriptResource as $MSFT_nxScriptResource7ref +{ +ResourceID = "[nxScript][V-244557][medium][[Skip] SRG-OS-000080-GPOS-00048]::[RHEL]Baseline"; + GetScript = "#!/bin/bash\necho [V-244557][medium][[Skip] SRG-OS-000080-GPOS-00048]"; + TestScript = "#!/bin/bash\nexit 0"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxScript.skip.ps1::10::5::nxScript"; + SetScript = "#!/bin/bash"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxScriptResource as $MSFT_nxScriptResource8ref +{ +ResourceID = "[nxScript][V-244558][medium][[Skip] SRG-OS-000080-GPOS-00048]::[RHEL]Baseline"; + GetScript = "#!/bin/bash\necho [V-244558][medium][[Skip] SRG-OS-000080-GPOS-00048]"; + TestScript = "#!/bin/bash\nexit 0"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxScript.skip.ps1::10::5::nxScript"; + SetScript = "#!/bin/bash"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxScriptResource as $MSFT_nxScriptResource9ref +{ +ResourceID = "[nxScript][V-204399.a][medium][[Skip] SRG-OS-000029-GPOS-00010]::[RHEL]Baseline"; + GetScript = "#!/bin/bash\necho [V-204399.a][medium][[Skip] SRG-OS-000029-GPOS-00010]"; + TestScript = "#!/bin/bash\nexit 0"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxScript.skip.ps1::10::5::nxScript"; + SetScript = "#!/bin/bash"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxScriptResource as $MSFT_nxScriptResource10ref +{ +ResourceID = "[nxScript][V-255926][medium][[Skip] SRG-OS-000029-GPOS-00010]::[RHEL]Baseline"; + GetScript = "#!/bin/bash\necho [V-255926][medium][[Skip] SRG-OS-000029-GPOS-00010]"; + TestScript = "#!/bin/bash\nexit 0"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxScript.skip.ps1::10::5::nxScript"; + SetScript = "#!/bin/bash"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of OMI_ConfigurationDocument + + { + Version="2.0.0"; + + MinimumCompatibleVersion = "1.0.0"; + + CompatibleVersionAdditionalProperties= {"Omi_BaseResource:ConfigurationName"}; + + Author="Microsoft"; + + GenerationDate="03/09/2023 14:17:33"; + + GenerationHost="Microsoft"; + + Name="LinuxBaseLine"; + + }; + diff --git a/stig/linux/config/RHEL74.mof b/stig/linux/config/RHEL74.mof index b2d2469..f523aad 100644 --- a/stig/linux/config/RHEL74.mof +++ b/stig/linux/config/RHEL74.mof @@ -1,2118 +1,1829 @@ -/* -@TargetNode='RHEL74' -@GeneratedBy=Microsoft -@GenerationDate=06/30/2022 11:38:45 -@GenerationHost=Microsoft -*/ - -instance of MSFT_nxPackageResource as $MSFT_nxPackageResource1ref -{ -ResourceID = "[nxPackage][V-204442][high][SRG-OS-000095-GPOS-00049]::[RHEL]Baseline"; - Ensure = "Absent"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxPackage.ps1::8::5::nxPackage"; - Name = "rsh-server"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxPackageResource as $MSFT_nxPackageResource2ref -{ -ResourceID = "[nxPackage][V-204443][high][SRG-OS-000095-GPOS-00049]::[RHEL]Baseline"; - Ensure = "Absent"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxPackage.ps1::8::5::nxPackage"; - Name = "ypserv"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxPackageResource as $MSFT_nxPackageResource3ref -{ -ResourceID = "[nxPackage][V-204497][high][SRG-OS-000033-GPOS-00014]::[RHEL]Baseline"; - Ensure = "Present"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxPackage.ps1::8::5::nxPackage"; - Name = "dracut-fips"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxPackageResource as $MSFT_nxPackageResource4ref -{ -ResourceID = "[nxPackage][V-204498][low][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; - Ensure = "Present"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxPackage.ps1::8::5::nxPackage"; - Name = "aide"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxPackageResource as $MSFT_nxPackageResource5ref -{ -ResourceID = "[nxPackage][V-204502][high][SRG-OS-000095-GPOS-00049]::[RHEL]Baseline"; - Ensure = "Absent"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxPackage.ps1::8::5::nxPackage"; - Name = "telnet-server"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxPackageResource as $MSFT_nxPackageResource6ref -{ -ResourceID = "[nxPackage][V-204585][medium][SRG-OS-000423-GPOS-00187]::[RHEL]Baseline"; - Ensure = "Present"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxPackage.ps1::8::5::nxPackage"; - Name = "openssh-server"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxPackageResource as $MSFT_nxPackageResource7ref -{ -ResourceID = "[nxPackage][V-204604.a][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; - Ensure = "Present"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxPackage.ps1::8::5::nxPackage"; - Name = "firewalld"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxPackageResource as $MSFT_nxPackageResource8ref -{ -ResourceID = "[nxPackage][V-204620][high][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; - Ensure = "Absent"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxPackage.ps1::8::5::nxPackage"; - Name = "vsftpd"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxPackageResource as $MSFT_nxPackageResource9ref -{ -ResourceID = "[nxPackage][V-204621][high][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; - Ensure = "Absent"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxPackage.ps1::8::5::nxPackage"; - Name = "tftp-server"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxPackageResource as $MSFT_nxPackageResource10ref -{ -ResourceID = "[nxPackage][V-204631][medium][SRG-OS-000375-GPOS-00160]::[RHEL]Baseline"; - Ensure = "Present"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxPackage.ps1::8::5::nxPackage"; - Name = "pam_pkcs11"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileResource as $MSFT_nxFileResource1ref -{ -ResourceID = "[nxFile][V-204395][medium][SRG-OS-000023-GPOS-00006]::[RHEL]Baseline"; - Contents = "You are accessing a U.S. Government (USG) Information System (IS) that is provided for USG-authorized use only.\n\nBy using this IS (which includes any device attached to this IS), you consent to the following conditions:\n\n-The USG routinely intercepts and monitors communications on this IS for purposes including, but not limited to, penetration testing, COMSEC monitoring, network operations and defense, personnel misconduct (PM), law enforcement (LE), and counterintelligence (CI) investigations.\n\n-At any time, the USG may inspect and seize data stored on this IS.\n\n-Communications using, or data stored on, this IS are not private, are subject to routine monitoring, interception, and search, and may be disclosed or used for any USG-authorized purpose.\n\n-This IS includes security measures (e.g., authentication and access controls) to protect USG interests--not for your personal benefit or privacy.\n\n-Notwithstanding the above, using this IS does not constitute consent to PM, LE or CI investigative searching or monitoring of the content of privileged communications, or work product, related to personal representation or services by attorneys, psychotherapists, or clergy, and their assistants. Such communications and work product are private and confidential. See User Agreement for details."; - DestinationPath = "/etc/issue"; - ModuleName = "nx"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; - ModuleVersion = "1.0"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileResource as $MSFT_nxFileResource2ref -{ -ResourceID = "[nxFile][V-204449.a][medium][SRG-OS-000114-GPOS-00059]::[RHEL]Baseline"; - Contents = ""; - DestinationPath = "/etc/modprobe.d/usb-storage.conf"; - ModuleName = "nx"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; - ModuleVersion = "1.0"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileResource as $MSFT_nxFileResource3ref -{ -ResourceID = "[nxFile][V-204449.b][medium][SRG-OS-000114-GPOS-00059]::[RHEL]Baseline"; - Contents = ""; - DestinationPath = "/etc/modprobe.d/blacklist.conf"; - ModuleName = "nx"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; - ModuleVersion = "1.0"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileResource as $MSFT_nxFileResource4ref -{ -ResourceID = "[nxFile][V-204450.a][medium][SRG-OS-000378-GPOS-00163]::[RHEL]Baseline"; - Contents = ""; - DestinationPath = "/etc/modprobe.d/dccp.conf"; - ModuleName = "nx"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; - ModuleVersion = "1.0"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileResource as $MSFT_nxFileResource5ref -{ -ResourceID = "[nxFile][V-204576][low][SRG-OS-000027-GPOS-00008]::[RHEL]Baseline"; - Contents = "* hard maxlogins 10"; - DestinationPath = "/etc/security/limits.d/204576-powerstig.conf"; - ModuleName = "nx"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; - ModuleVersion = "1.0"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileResource as $MSFT_nxFileResource6ref -{ -ResourceID = "[nxFile][V-204579.a][medium][SRG-OS-000163-GPOS-00072]::[RHEL]Baseline"; - Contents = ""; - DestinationPath = "/etc/profile.d/tmout.sh"; - ModuleName = "nx"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; - ModuleVersion = "1.0"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileResource as $MSFT_nxFileResource7ref -{ -ResourceID = "[nxFile][V-204584][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; - Contents = "kernel.randomize_va_space = 2"; - DestinationPath = "/etc/sysctl.d/204584-powerstig.conf"; - ModuleName = "nx"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; - ModuleVersion = "1.0"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileResource as $MSFT_nxFileResource8ref -{ -ResourceID = "[nxFile][V-204609][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; - Contents = "net.ipv4.conf.all.accept_source_route = 0"; - DestinationPath = "/etc/sysctl.d/204609-powerstig.conf"; - ModuleName = "nx"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; - ModuleVersion = "1.0"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileResource as $MSFT_nxFileResource9ref -{ -ResourceID = "[nxFile][V-204610][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; - Contents = "net.ipv4.conf.all.rp_filter = 1"; - DestinationPath = "/etc/sysctl.d/204610-powerstig.conf"; - ModuleName = "nx"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; - ModuleVersion = "1.0"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileResource as $MSFT_nxFileResource10ref -{ -ResourceID = "[nxFile][V-204611][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; - Contents = "net.ipv4.conf.default.rp_filter = 1"; - DestinationPath = "/etc/sysctl.d/204611-powerstig.conf"; - ModuleName = "nx"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; - ModuleVersion = "1.0"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileResource as $MSFT_nxFileResource11ref -{ -ResourceID = "[nxFile][V-204612][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; - Contents = "net.ipv4.conf.default.accept_source_route = 0"; - DestinationPath = "/etc/sysctl.d/204612-powerstig.conf"; - ModuleName = "nx"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; - ModuleVersion = "1.0"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileResource as $MSFT_nxFileResource12ref -{ -ResourceID = "[nxFile][V-204613][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; - Contents = "net.ipv4.icmp_echo_ignore_broadcasts = 1"; - DestinationPath = "/etc/sysctl.d/204613-powerstig.conf"; - ModuleName = "nx"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; - ModuleVersion = "1.0"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileResource as $MSFT_nxFileResource13ref -{ -ResourceID = "[nxFile][V-204614][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; - Contents = "net.ipv4.conf.default.accept_redirects = 0"; - DestinationPath = "/etc/sysctl.d/204614-powerstig.conf"; - ModuleName = "nx"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; - ModuleVersion = "1.0"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileResource as $MSFT_nxFileResource14ref -{ -ResourceID = "[nxFile][V-204615][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; - Contents = "net.ipv4.conf.all.accept_redirects = 0"; - DestinationPath = "/etc/sysctl.d/204615-powerstig.conf"; - ModuleName = "nx"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; - ModuleVersion = "1.0"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileResource as $MSFT_nxFileResource15ref -{ -ResourceID = "[nxFile][V-204616][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; - Contents = "net.ipv4.conf.default.send_redirects = 0"; - DestinationPath = "/etc/sysctl.d/204616-powerstig.conf"; - ModuleName = "nx"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; - ModuleVersion = "1.0"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileResource as $MSFT_nxFileResource16ref -{ -ResourceID = "[nxFile][V-204617][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; - Contents = "net.ipv4.conf.all.send_redirects = 0"; - DestinationPath = "/etc/sysctl.d/204617-powerstig.conf"; - ModuleName = "nx"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; - ModuleVersion = "1.0"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileResource as $MSFT_nxFileResource17ref -{ -ResourceID = "[nxFile][V-204625][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; - Contents = "net.ipv4.ip_forward = 0"; - DestinationPath = "/etc/sysctl.d/204625-powerstig.conf"; - ModuleName = "nx"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; - ModuleVersion = "1.0"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileResource as $MSFT_nxFileResource18ref -{ -ResourceID = "[nxFile][V-204630][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; - Contents = "net.ipv6.conf.all.accept_source_route = 0"; - DestinationPath = "/etc/sysctl.d/204630-powerstig.conf"; - ModuleName = "nx"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; - ModuleVersion = "1.0"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileResource as $MSFT_nxFileResource19ref -{ -ResourceID = "[nxFile][V-237634.a][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; - Contents = "Defaults !targetpw"; - DestinationPath = "/etc/sudoers.d/237634a-powerstig.conf"; - ModuleName = "nx"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; - ModuleVersion = "1.0"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileResource as $MSFT_nxFileResource20ref -{ -ResourceID = "[nxFile][V-237634.b][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; - Contents = "Defaults !rootpw"; - DestinationPath = "/etc/sudoers.d/237634b-powerstig.conf"; - ModuleName = "nx"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; - ModuleVersion = "1.0"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileResource as $MSFT_nxFileResource21ref -{ -ResourceID = "[nxFile][V-237634.c][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; - Contents = "Defaults !runaspw"; - DestinationPath = "/etc/sudoers.d/237634c-powerstig.conf"; - ModuleName = "nx"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; - ModuleVersion = "1.0"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileResource as $MSFT_nxFileResource22ref -{ -ResourceID = "[nxFile][V-237635][medium][SRG-OS-000373-GPOS-00156]::[RHEL]Baseline"; - Contents = "Defaults timestamp_timeout=0"; - DestinationPath = "/etc/sudoers.d/237635-powerstig.conf"; - ModuleName = "nx"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; - ModuleVersion = "1.0"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileResource as $MSFT_nxFileResource23ref -{ -ResourceID = "[nxFile][V-250314][medium][SRG-OS-000324-GPOS-00125]::[RHEL]Baseline"; - Contents = "%wheel ALL=(ALL) TYPE=sysadm_t ROLE=sysadm_r ALL"; - DestinationPath = "/etc/sudoers.d/250314-powerstig.conf"; - ModuleName = "nx"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; - ModuleVersion = "1.0"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource1ref -{ -ResourceID = "[nxFileLine][V-204405][medium][SRG-OS-000069-GPOS-00037]::[RHEL]Baseline"; - ContainsLine = "password substack system-auth"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/pam.d/passwd"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "^\\s*password(?:\\t*|\\s*)substack\\tsystem-auth\\s*$|^#\\s*password\\s*substack\\s*system-auth.*"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource2ref -{ -ResourceID = "[nxFileLine][V-204407][medium][SRG-OS-000069-GPOS-00037]::[RHEL]Baseline"; - ContainsLine = "ucredit = -1"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/security/pwquality.conf"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "^#\\s*ucredit.*$|^ucredit\\s*=\\s*(?!-1\\b)\\w*$"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource3ref -{ -ResourceID = "[nxFileLine][V-204408][medium][SRG-OS-000070-GPOS-00038]::[RHEL]Baseline"; - ContainsLine = "lcredit = -1"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/security/pwquality.conf"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "^#\\s*lcredit.*$|^lcredit\\s*=\\s*(?!-1\\b)\\w*$"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource4ref -{ -ResourceID = "[nxFileLine][V-204409][medium][SRG-OS-000071-GPOS-00039]::[RHEL]Baseline"; - ContainsLine = "dcredit = -1"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/security/pwquality.conf"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "^#\\s*dcredit.*$|^dcredit\\s*=\\s*(?!-1\\b)\\w*$"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource5ref -{ -ResourceID = "[nxFileLine][V-204410][medium][SRG-OS-000266-GPOS-00101]::[RHEL]Baseline"; - ContainsLine = "ocredit=-1"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/security/pwquality.conf"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "^#\\s*ocredit.*$|^ocredit\\s*=\\s*(?!-1)\\w*$"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource6ref -{ -ResourceID = "[nxFileLine][V-204411][medium][SRG-OS-000072-GPOS-00040]::[RHEL]Baseline"; - ContainsLine = "difok = 8"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/security/pwquality.conf"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*difok\\s*=.*|^\\s*difok\\s*=\\s*(-|)[0-7]$"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource7ref -{ -ResourceID = "[nxFileLine][V-204412][medium][SRG-OS-000072-GPOS-00040]::[RHEL]Baseline"; - ContainsLine = "minclass = 4"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/security/pwquality.conf"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "^#\\s*minclass\\s*=.*|^\\s*minclass\\s*=\\s*(?!\\d{2,})[1-3]"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource8ref -{ -ResourceID = "[nxFileLine][V-204413][medium][SRG-OS-000072-GPOS-00040]::[RHEL]Baseline"; - ContainsLine = "maxrepeat = 3"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/security/pwquality.conf"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "^#\\s*maxrepeat\\s*=.*|^\\s*maxrepeat\\s*=\\s*(?:\\d{2,}|[4-9])"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource9ref -{ -ResourceID = "[nxFileLine][V-204414][medium][SRG-OS-000072-GPOS-00040]::[RHEL]Baseline"; - ContainsLine = "maxclassrepeat = 4"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/security/pwquality.conf"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "^#\\s*maxclassrepeat\\s*=.*|^\\s*maxclassrepeat\\s*=\\s*(?:\\d{2,}|[1-3|5-9])"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource10ref -{ -ResourceID = "[nxFileLine][V-204416][medium][SRG-OS-000073-GPOS-00041]::[RHEL]Baseline"; - ContainsLine = "ENCRYPT_METHOD SHA512"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/login.defs"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*ENCRYPT_METHOD\\s*SHA512"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource11ref -{ -ResourceID = "[nxFileLine][V-204418][medium][SRG-OS-000075-GPOS-00043]::[RHEL]Baseline"; - ContainsLine = "PASS_MIN_DAYS 1"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/login.defs"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "^\\s*PASS_MIN_DAYS\\s*[0]*$|#\\s*PASS_MIN_DAYS.*"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource12ref -{ -ResourceID = "[nxFileLine][V-204420][medium][SRG-OS-000076-GPOS-00044]::[RHEL]Baseline"; - ContainsLine = "PASS_MAX_DAYS 60"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/login.defs"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "^\\s*PASS_MAX_DAYS\\s*([6][1-9]|[7-9][0-9]|\\d{3,})$|#\\s*PASS_MAX_DAYS.*"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource13ref -{ -ResourceID = "[nxFileLine][V-204423][medium][SRG-OS-000078-GPOS-00046]::[RHEL]Baseline"; - ContainsLine = "minlen = 15"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/security/pwquality.conf"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "^\\s*minlen\\s*=\\s*([0-9]|[1][1-4])$|#\\s*minlen.*"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource14ref -{ -ResourceID = "[nxFileLine][V-204425][high][SRG-OS-000106-GPOS-00053]::[RHEL]Baseline"; - ContainsLine = "PermitEmptyPasswords no"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/ssh/sshd_config"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "^#\\s*PermitEmptyPasswords.*$|^PermitEmptyPasswords\\s*(?!no\\b)\\w*$"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource15ref -{ -ResourceID = "[nxFileLine][V-204426][medium][SRG-OS-000118-GPOS-00060]::[RHEL]Baseline"; - ContainsLine = "INACTIVE=35"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/default/useradd"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "^#\\s*INACTIVE\\s*=.*|^\\s*INACTIVE\\s*=\\s*(3[5-9]|[4-9]\\d+|\\d{3,})"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource16ref -{ -ResourceID = "[nxFileLine][V-204431][medium][SRG-OS-000480-GPOS-00226]::[RHEL]Baseline"; - ContainsLine = "FAIL_DELAY 4"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/login.defs"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "^#\\s*FAIL_DELAY.*|^FAIL_DELAY\\s*(?!\\d{2,})[1-3]"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource17ref -{ -ResourceID = "[nxFileLine][V-204434][medium][SRG-OS-000480-GPOS-00229]::[RHEL]Baseline"; - ContainsLine = "PermitUserEnvironment no"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/ssh/sshd_config"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "^#\\s*PermitUserEnvironment.*$|^PermitUserEnvironment\\s*(?!no\\b)\\w*$"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource18ref -{ -ResourceID = "[nxFileLine][V-204435][medium][SRG-OS-000480-GPOS-00229]::[RHEL]Baseline"; - ContainsLine = "HostbasedAuthentication no"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/ssh/sshd_config"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "^#\\s*HostbasedAuthentication.*$|^HostbasedAuthentication\\s*(?!no\\b)\\w*$"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource19ref -{ -ResourceID = "[nxFileLine][V-204447][high][SRG-OS-000366-GPOS-00153]::[RHEL]Baseline"; - ContainsLine = "gpgcheck=1"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/yum.conf"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*gpgcheck\\s*=\\s*1"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource20ref -{ -ResourceID = "[nxFileLine][V-204448][high][SRG-OS-000366-GPOS-00153]::[RHEL]Baseline"; - ContainsLine = "localpkg_gpgcheck=1"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/yum.conf"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*localpkg_gpgcheck\\s*=\\s*1"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource21ref -{ -ResourceID = "[nxFileLine][V-204449.c][medium][SRG-OS-000114-GPOS-00059]::[RHEL]Baseline"; - ContainsLine = "install usb-storage /bin/true"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/modprobe.d/usb-storage.conf"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*install\\s*usb-storage\\s*/bin/true"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource22ref -{ -ResourceID = "[nxFileLine][V-204449.d][medium][SRG-OS-000114-GPOS-00059]::[RHEL]Baseline"; - ContainsLine = "blacklist usb-storage"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/modprobe.d/blacklist.conf"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*blacklist\\s*usb-storage"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource23ref -{ -ResourceID = "[nxFileLine][V-204450.b][medium][SRG-OS-000378-GPOS-00163]::[RHEL]Baseline"; - ContainsLine = "install dccp /bin/true"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/modprobe.d/dccp.conf"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*install\\s*dccp\\s*/bin/true"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource24ref -{ -ResourceID = "[nxFileLine][V-204450.c][medium][SRG-OS-000378-GPOS-00163]::[RHEL]Baseline"; - ContainsLine = "blacklist dccp"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/modprobe.d/blacklist.conf"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*blacklist\\s*dccp"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource25ref -{ -ResourceID = "[nxFileLine][V-204452][low][SRG-OS-000437-GPOS-00194]::[RHEL]Baseline"; - ContainsLine = "clean_requirements_on_remove=1"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/yum.conf"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*clean_requirements_on_remove\\s*=\\s*1"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource26ref -{ -ResourceID = "[nxFileLine][V-204453][medium][SRG-OS-000445-GPOS-00199]::[RHEL]Baseline"; - ContainsLine = "SELINUX=enforcing"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/selinux/config"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "^#\\s*SELINUX.*$|^SELINUX\\s*=\\s*(?!enforcing)\\w*$"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource27ref -{ -ResourceID = "[nxFileLine][V-204454][medium][SRG-OS-000445-GPOS-00199]::[RHEL]Baseline"; - ContainsLine = "SELINUXTYPE=targeted"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/selinux/config"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "^#\\s*SELINUXTYPE.*$|^SELINUXTYPE\\s*=\\s*(?!targeted\\b)\\w*$"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource28ref -{ -ResourceID = "[nxFileLine][V-204457][medium][SRG-OS-000480-GPOS-00228]::[RHEL]Baseline"; - ContainsLine = "UMASK 077"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/login.defs"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "^\\s*UMASK(?!\\s077\\b)\\s*\\d*\\s*$|^#\\s*UMASK.*"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource29ref -{ -ResourceID = "[nxFileLine][V-204466][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; - ContainsLine = "CREATE_HOME yes"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/login.defs"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "^#\\s*CREATE_HOME.*$|^CREATE_HOME\\s*(?!yes\\b)\\w*$|^CREATE_HOME\\t.*"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource30ref -{ -ResourceID = "[nxFileLine][V-204504][medium][SRG-OS-000046-GPOS-00022]::[RHEL]Baseline"; - ContainsLine = "-f 2"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "^#\\s*-f\\s+2|^\\s*-f\\s*1"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileResource as $MSFT_nxFileResource24ref -{ -SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::29::9::nxFile"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - ResourceID = "[nxFile][V-204506.a][medium][SRG-OS-000342-GPOS-00133]::[RHEL]Baseline"; - DestinationPath = "/etc/audisp/plugins.d/au-remote.conf"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource31ref -{ -ResourceID = "[nxFileLine][V-204506.a][medium][SRG-OS-000342-GPOS-00133]::[RHEL]Baseline"; - ContainsLine = "active = yes"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audisp/plugins.d/au-remote.conf"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "\\s*active\\s*=\\s*no|active=yes|#\\s*active\\s*=.*"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource32ref -{ -ResourceID = "[nxFileLine][V-204506.b][medium][SRG-OS-000342-GPOS-00133]::[RHEL]Baseline"; - ContainsLine = "direction = out"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audisp/plugins.d/au-remote.conf"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*direction\\s*=\\s*out"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource33ref -{ -ResourceID = "[nxFileLine][V-204506.c][medium][SRG-OS-000342-GPOS-00133]::[RHEL]Baseline"; - ContainsLine = "path = /sbin/audisp-remote"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audisp/plugins.d/au-remote.conf"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*path\\s*=\\s*/sbin/audisp-remote"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource34ref -{ -ResourceID = "[nxFileLine][V-204506.d][medium][SRG-OS-000342-GPOS-00133]::[RHEL]Baseline"; - ContainsLine = "type = always"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audisp/plugins.d/au-remote.conf"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*type\\s*=\\s*always"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource35ref -{ -ResourceID = "[nxFileLine][V-204507][medium][SRG-OS-000342-GPOS-00133]::[RHEL]Baseline"; - ContainsLine = "overflow_action = syslog"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audisp/audispd.conf"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "^#\\s*overflow_action.*$|^overflow_action\\s*=\\s*(?!syslog$)\\w*$"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource36ref -{ -ResourceID = "[nxFileLine][V-204508][medium][SRG-OS-000342-GPOS-00133]::[RHEL]Baseline"; - ContainsLine = "name_format = hostname"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audisp/audispd.conf"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "^#\\s*name_format.*$|^name_format\\s*=\\s*(?!hostname$)\\w*$"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileResource as $MSFT_nxFileResource25ref -{ -SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::19::9::nxFile"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - ResourceID = "[nxFile][V-204510][medium][SRG-OS-000342-GPOS-00133]::[RHEL]Baseline"; - DestinationPath = "/etc/audisp/audisp-remote.conf"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource37ref -{ -ResourceID = "[nxFileLine][V-204510][medium][SRG-OS-000342-GPOS-00133]::[RHEL]Baseline"; - ContainsLine = "enable_krb5 = yes"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audisp/audisp-remote.conf"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*enable_krb5\\s*=\\s*yes"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource38ref -{ -ResourceID = "[nxFileLine][V-204511][medium][SRG-OS-000342-GPOS-00133]::[RHEL]Baseline"; - ContainsLine = "disk_full_action = single"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audisp/audisp-remote.conf"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "^#\\s*disk_full_action\\s*=.*|^disk_full_action\\s*=\\s*(?!halt\\b|single\\b|syslog\\b)\\w+"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource39ref -{ -ResourceID = "[nxFileLine][V-204512][medium][SRG-OS-000342-GPOS-00133]::[RHEL]Baseline"; - ContainsLine = "network_failure_action = syslog"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audisp/audisp-remote.conf"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "^#\\s*network_failure_action\\s*=.*|^network_failure_action\\s*=\\s*(?!halt\\b|single\\b|syslog\\b)\\w+"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource40ref -{ -ResourceID = "[nxFileLine][V-204514][medium][SRG-OS-000343-GPOS-00134]::[RHEL]Baseline"; - ContainsLine = "space_left_action = email"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/auditd.conf"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "^#\\s*space_left_action.*$|^space_left_action\\s*=\\s*(?!email$)\\w*$"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource41ref -{ -ResourceID = "[nxFileLine][V-204515][medium][SRG-OS-000343-GPOS-00134]::[RHEL]Baseline"; - ContainsLine = "action_mail_acct = root"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/auditd.conf"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "^#\\s*action_mail_acct.*|^action_mail_acct\\s*=\\s*(?!root\\b)\\w+"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource42ref -{ -ResourceID = "[nxFileLine][V-204516.a][medium][SRG-OS-000327-GPOS-00127]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S execve -C uid!=euid -F euid=0 -k setuid"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*execve\\s*-C\\s*uid!\\s*=\\s*euid\\s*-F\\s*euid\\s*=\\s*0\\s*-k\\s*setuid"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource43ref -{ -ResourceID = "[nxFileLine][V-204516.b][medium][SRG-OS-000327-GPOS-00127]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S execve -C uid!=euid -F euid=0 -k setuid"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*execve\\s*-C\\s*uid!\\s*=\\s*euid\\s*-F\\s*euid\\s*=\\s*0\\s*-k\\s*setuid"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource44ref -{ -ResourceID = "[nxFileLine][V-204516.c][medium][SRG-OS-000327-GPOS-00127]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S execve -C gid!=egid -F egid=0 -k setgid"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*execve\\s*-C\\s*gid!\\s*=\\s*egid\\s*-F\\s*egid\\s*=\\s*0\\s*-k\\s*setgid"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource45ref -{ -ResourceID = "[nxFileLine][V-204516.d][medium][SRG-OS-000327-GPOS-00127]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S execve -C gid!=egid -F egid=0 -k setgid"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*execve\\s*-C\\s*gid!\\s*=\\s*egid\\s*-F\\s*egid\\s*=\\s*0\\s*-k\\s*setgid"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource46ref -{ -ResourceID = "[nxFileLine][V-204517.a][medium][SRG-OS-000064-GPOS-00033]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S chown,fchown,fchownat,lchown -F auid>=1000 -F auid!=unset -k perm_mod"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*chown,fchown,fchownat,lchown\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*perm_mod"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource47ref -{ -ResourceID = "[nxFileLine][V-204517.b][medium][SRG-OS-000064-GPOS-00033]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S chown,fchown,fchownat,lchown -F auid>=1000 -F auid!=unset -k perm_mod"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*chown,fchown,fchownat,lchown\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*perm_mod"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource48ref -{ -ResourceID = "[nxFileLine][V-204521.a][medium][SRG-OS-000458-GPOS-00203]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S chmod,fchmod,fchmodat -F auid>=1000 -F auid!=unset -k perm_mod"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*chmod,fchmod,fchmodat\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*perm_mod"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource49ref -{ -ResourceID = "[nxFileLine][V-204521.b][medium][SRG-OS-000458-GPOS-00203]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S chmod,fchmod,fchmodat -F auid>=1000 -F auid!=unset -k perm_mod"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*chmod,fchmod,fchmodat\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*perm_mod"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource50ref -{ -ResourceID = "[nxFileLine][V-204524.a][medium][SRG-OS-000458-GPOS-00203]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S setxattr,fsetxattr,lsetxattr,removexattr,fremovexattr,lremovexattr -F auid>=1000 -F auid!=unset -k perm_mod"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*setxattr,fsetxattr,lsetxattr,removexattr,fremovexattr,lremovexattr\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*perm_mod"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource51ref -{ -ResourceID = "[nxFileLine][V-204524.b][medium][SRG-OS-000458-GPOS-00203]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S setxattr,fsetxattr,lsetxattr,removexattr,fremovexattr,lremovexattr -F auid>=1000 -F auid!=unset -k perm_mod"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*setxattr,fsetxattr,lsetxattr,removexattr,fremovexattr,lremovexattr\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*perm_mod"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource52ref -{ -ResourceID = "[nxFileLine][V-204531.a][medium][SRG-OS-000064-GPOS-00033]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S creat,open,openat,open_by_handle_at,truncate,ftruncate -F exit=-EPERM -F auid>=1000 -F auid!=unset -k access"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*creat,open,openat,open_by_handle_at,truncate,ftruncate\\s*-F\\s*exit\\s*=\\s*-EPERM\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*access"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource53ref -{ -ResourceID = "[nxFileLine][V-204531.b][medium][SRG-OS-000064-GPOS-00033]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S creat,open,openat,open_by_handle_at,truncate,ftruncate -F exit=-EACCES -F auid>=1000 -F auid!=unset -k access"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*creat,open,openat,open_by_handle_at,truncate,ftruncate\\s*-F\\s*exit\\s*=\\s*-EACCES\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*access"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource54ref -{ -ResourceID = "[nxFileLine][V-204531.c][medium][SRG-OS-000064-GPOS-00033]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S creat,open,openat,open_by_handle_at,truncate,ftruncate -F exit=-EPERM -F auid>=1000 -F auid!=unset -k access"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*creat,open,openat,open_by_handle_at,truncate,ftruncate\\s*-F\\s*exit\\s*=\\s*-EPERM\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*access"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource55ref -{ -ResourceID = "[nxFileLine][V-204531.d][medium][SRG-OS-000064-GPOS-00033]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S creat,open,openat,open_by_handle_at,truncate,ftruncate -F exit=-EACCES -F auid>=1000 -F auid!=unset -k access"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*creat,open,openat,open_by_handle_at,truncate,ftruncate\\s*-F\\s*exit\\s*=\\s*-EACCES\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*access"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource56ref -{ -ResourceID = "[nxFileLine][V-204536][medium][SRG-OS-000392-GPOS-00172]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F path=/usr/sbin/semanage -F auid>=1000 -F auid!=unset -k privileged-priv_change"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/sbin/semanage\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-priv_change"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource57ref -{ -ResourceID = "[nxFileLine][V-204537][medium][SRG-OS-000392-GPOS-00172]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F path=/usr/sbin/setsebool -F auid>=1000 -F auid!=unset -k privileged-priv_change"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/sbin/setsebool\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-priv_change"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource58ref -{ -ResourceID = "[nxFileLine][V-204538][medium][SRG-OS-000392-GPOS-00172]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F path=/usr/bin/chcon -F auid>=1000 -F auid!=unset -k privileged-priv_change"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/bin/chcon\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-priv_change"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource59ref -{ -ResourceID = "[nxFileLine][V-204539][medium][SRG-OS-000392-GPOS-00172]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F path=/usr/sbin/setfiles -F auid>=1000 -F auid!=unset -k privileged-priv_change"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/sbin/setfiles\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-priv_change"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource60ref -{ -ResourceID = "[nxFileLine][V-204540][medium][SRG-OS-000392-GPOS-00172]::[RHEL]Baseline"; - ContainsLine = "-w /var/run/faillock -p wa -k logins"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-w\\s*/var/run/faillock\\s*-p\\s*wa\\s*-k\\s*logins"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource61ref -{ -ResourceID = "[nxFileLine][V-204541][medium][SRG-OS-000392-GPOS-00172]::[RHEL]Baseline"; - ContainsLine = "-w /var/log/lastlog -p wa -k logins"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-w\\s*/var/log/lastlog\\s*-p\\s*wa\\s*-k\\s*logins"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource62ref -{ -ResourceID = "[nxFileLine][V-204542][medium][SRG-OS-000042-GPOS-00020]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F path=/usr/bin/passwd -F auid>=1000 -F auid!=unset -k privileged-passwd"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/bin/passwd\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-passwd"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource63ref -{ -ResourceID = "[nxFileLine][V-204543][medium][SRG-OS-000042-GPOS-00020]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F path=/usr/sbin/unix_chkpwd -F auid>=1000 -F auid!=unset -k privileged-passwd"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/sbin/unix_chkpwd\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-passwd"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource64ref -{ -ResourceID = "[nxFileLine][V-204544][medium][SRG-OS-000042-GPOS-00020]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F path=/usr/bin/gpasswd -F auid>=1000 -F auid!=unset -k privileged-passwd"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/bin/gpasswd\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-passwd"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource65ref -{ -ResourceID = "[nxFileLine][V-204545][medium][SRG-OS-000042-GPOS-00020]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F path=/usr/bin/chage -F auid>=1000 -F auid!=unset -k privileged-passwd"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/bin/chage\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-passwd"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource66ref -{ -ResourceID = "[nxFileLine][V-204546][medium][SRG-OS-000042-GPOS-00020]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F path=/usr/sbin/userhelper -F auid>=1000 -F auid!=unset -k privileged-passwd"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/sbin/userhelper\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-passwd"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource67ref -{ -ResourceID = "[nxFileLine][V-204547][medium][SRG-OS-000037-GPOS-00015]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F path=/usr/bin/su -F auid>=1000 -F auid!=unset -k privileged-priv_change"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/bin/su\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-priv_change"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource68ref -{ -ResourceID = "[nxFileLine][V-204548][medium][SRG-OS-000037-GPOS-00015]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F path=/usr/bin/sudo -F auid>=1000 -F auid!=unset -k privileged-priv_change"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/bin/sudo\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-priv_change"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource69ref -{ -ResourceID = "[nxFileLine][V-204549.a][medium][SRG-OS-000037-GPOS-00015]::[RHEL]Baseline"; - ContainsLine = "-w /etc/sudoers -p wa -k privileged-actions"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-w /etc/sudoers -p wa -k privileged-actions"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource70ref -{ -ResourceID = "[nxFileLine][V-204549.b][medium][SRG-OS-000037-GPOS-00015]::[RHEL]Baseline"; - ContainsLine = "-w /etc/sudoers.d/ -p wa -k privileged-actions"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-w /etc/sudoers.d/ -p wa -k privileged-actions"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource71ref -{ -ResourceID = "[nxFileLine][V-204550][medium][SRG-OS-000037-GPOS-00015]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F path=/usr/bin/newgrp -F auid>=1000 -F auid!=unset -k privileged-priv_change"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/bin/newgrp\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-priv_change"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource72ref -{ -ResourceID = "[nxFileLine][V-204551][medium][SRG-OS-000037-GPOS-00015]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F path=/usr/bin/chsh -F auid>=1000 -F auid!=unset -k privileged-priv_change"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/bin/chsh\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-priv_change"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource73ref -{ -ResourceID = "[nxFileLine][V-204552.a][medium][SRG-OS-000042-GPOS-00020]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S mount -F auid>=1000 -F auid!=unset -k privileged-mount"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*mount\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-mount"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource74ref -{ -ResourceID = "[nxFileLine][V-204552.b][medium][SRG-OS-000042-GPOS-00020]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S mount -F auid>=1000 -F auid!=unset -k privileged-mount"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*mount\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-mount"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource75ref -{ -ResourceID = "[nxFileLine][V-204552.c][medium][SRG-OS-000042-GPOS-00020]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F path=/usr/bin/mount -F auid>=1000 -F auid!=unset -k privileged-mount"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/bin/mount\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-mount"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource76ref -{ -ResourceID = "[nxFileLine][V-204553][medium][SRG-OS-000042-GPOS-00020]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F path=/usr/bin/umount -F auid>=1000 -F auid!=unset -k privileged-mount"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/bin/umount\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-mount"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource77ref -{ -ResourceID = "[nxFileLine][V-204554][medium][SRG-OS-000042-GPOS-00020]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F path=/usr/sbin/postdrop -F auid>=1000 -F auid!=unset -k privileged-postfix"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/sbin/postdrop\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-postfix"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource78ref -{ -ResourceID = "[nxFileLine][V-204555][medium][SRG-OS-000042-GPOS-00020]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F path=/usr/sbin/postqueue -F auid>=1000 -F auid!=unset -k privileged-postfix"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/sbin/postqueue\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-postfix"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource79ref -{ -ResourceID = "[nxFileLine][V-204556][medium][SRG-OS-000042-GPOS-00020]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F path=/usr/libexec/openssh/ssh-keysign -F auid>=1000 -F auid!=unset -k privileged-ssh"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/libexec/openssh/ssh-keysign\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-ssh"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource80ref -{ -ResourceID = "[nxFileLine][V-204557][medium][SRG-OS-000042-GPOS-00020]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F path=/usr/bin/crontab -F auid>=1000 -F auid!=unset -k privileged-cron"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/bin/crontab\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-cron"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource81ref -{ -ResourceID = "[nxFileLine][V-204558][medium][SRG-OS-000471-GPOS-00215]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F path=/usr/sbin/pam_timestamp_check -F auid>=1000 -F auid!=unset -k privileged-pam"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/sbin/pam_timestamp_check\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-pam"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource82ref -{ -ResourceID = "[nxFileLine][V-204559.a][medium][SRG-OS-000471-GPOS-00216]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S create_module -k module-change"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*create_module\\s*-k\\s*module-change"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource83ref -{ -ResourceID = "[nxFileLine][V-204559.b][medium][SRG-OS-000471-GPOS-00216]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S create_module -k module-change"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*create_module\\s*-k\\s*module-change"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource84ref -{ -ResourceID = "[nxFileLine][V-204560.a][medium][SRG-OS-000471-GPOS-00216]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S init_module,finit_module -k modulechange"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*init_module,finit_module\\s*-k\\s*modulechange"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource85ref -{ -ResourceID = "[nxFileLine][V-204560.b][medium][SRG-OS-000471-GPOS-00216]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S init_module,finit_module -k modulechange"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*init_module,finit_module\\s*-k\\s*modulechange"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource86ref -{ -ResourceID = "[nxFileLine][V-204562.a][medium][SRG-OS-000471-GPOS-00216]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S delete_module -k module-change"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*delete_module\\s*-k\\s*module-change"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource87ref -{ -ResourceID = "[nxFileLine][V-204562.b][medium][SRG-OS-000471-GPOS-00216]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S delete_module -k module-change"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*delete_module\\s*-k\\s*module-change"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource88ref -{ -ResourceID = "[nxFileLine][V-204563][medium][SRG-OS-000471-GPOS-00216]::[RHEL]Baseline"; - ContainsLine = "-w /usr/bin/kmod -p x -F auid!=unset -k module-change"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-w\\s*/usr/bin/kmod\\s*-p\\s*x\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*module-change"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource89ref -{ -ResourceID = "[nxFileLine][V-204564][medium][SRG-OS-000004-GPOS-00004]::[RHEL]Baseline"; - ContainsLine = "-w /etc/passwd -p wa -k identity"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-w\\s*/etc/passwd\\s*-p\\s*wa\\s*-k\\s*identity"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource90ref -{ -ResourceID = "[nxFileLine][V-204565][medium][SRG-OS-000004-GPOS-00004]::[RHEL]Baseline"; - ContainsLine = "-w /etc/group -p wa -k identity"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-w\\s*/etc/group\\s*-p\\s*wa\\s*-k\\s*identity"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource91ref -{ -ResourceID = "[nxFileLine][V-204566][medium][SRG-OS-000004-GPOS-00004]::[RHEL]Baseline"; - ContainsLine = "-w /etc/gshadow -p wa -k identity"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-w\\s*/etc/gshadow\\s*-p\\s*wa\\s*-k\\s*identity"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource92ref -{ -ResourceID = "[nxFileLine][V-204567][medium][SRG-OS-000004-GPOS-00004]::[RHEL]Baseline"; - ContainsLine = "-w /etc/shadow -p wa -k identity"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-w\\s*/etc/shadow\\s*-p\\s*wa\\s*-k\\s*identity"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource93ref -{ -ResourceID = "[nxFileLine][V-204568][medium][SRG-OS-000004-GPOS-00004]::[RHEL]Baseline"; - ContainsLine = "-w /etc/security/opasswd -p wa -k identity"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-w\\s*/etc/security/opasswd\\s*-p\\s*wa\\s*-k\\s*identity"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource94ref -{ -ResourceID = "[nxFileLine][V-204572.a][medium][SRG-OS-000466-GPOS-00210]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S unlink,unlinkat,rename,renameat,rmdir -F auid>=1000 -F auid!=unset -k delete"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*unlink,unlinkat,rename,renameat,rmdir\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*delete"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource95ref -{ -ResourceID = "[nxFileLine][V-204572.b][medium][SRG-OS-000466-GPOS-00210]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S unlink,unlinkat,rename,renameat,rmdir -F auid>=1000 -F auid!=unset -k delete"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*unlink,unlinkat,rename,renameat,rmdir\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*delete"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource96ref -{ -ResourceID = "[nxFileLine][V-204578][medium][SRG-OS-000033-GPOS-00014]::[RHEL]Baseline"; - ContainsLine = "Ciphers aes256-ctr,aes192-ctr,aes128-ctr"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/ssh/sshd_config"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "^#\\s*Ciphers.*|^\\s*Ciphers\\s*aes128-ctr.*|^\\s*Ciphers\\s*aes192-ctr.*"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource97ref -{ -ResourceID = "[nxFileLine][V-204579.b][medium][SRG-OS-000163-GPOS-00072]::[RHEL]Baseline"; - ContainsLine = "declare -xr TMOUT=900"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/profile.d/tmout.sh"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "^\\s*TMOUT\\s*=\\s*[0-8]?[0-9]?[0-9]?$|^#\\s*TMOUT.*"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource98ref -{ -ResourceID = "[nxFileLine][V-204580][medium][SRG-OS-000023-GPOS-00006]::[RHEL]Baseline"; - ContainsLine = "banner /etc/issue"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/ssh/sshd_config"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*banner\\s*/etc/issue"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource99ref -{ -ResourceID = "[nxFileLine][V-204587][medium][SRG-OS-000163-GPOS-00072]::[RHEL]Baseline"; - ContainsLine = "ClientAliveInterval 600"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/ssh/sshd_config"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "^\\s*ClientAliveInterval\\s*[0-5]?[0-9]?[0-9]?\\s*$|^#\\s*ClientAliveInterval.*|^\\s*ClientAliveInterval\\s*$"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource100ref -{ -ResourceID = "[nxFileLine][V-204588][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; - ContainsLine = "RhostsRSAAuthentication no"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/ssh/sshd_config"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "^#\\s*RhostsRSAAuthentication.*$|^RhostsRSAAuthentication\\s*(?!no\\b)\\w*$"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource101ref -{ -ResourceID = "[nxFileLine][V-204589][medium][SRG-OS-000163-GPOS-00072]::[RHEL]Baseline"; - ContainsLine = "ClientAliveCountMax 0"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/ssh/sshd_config"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "^#\\s*ClientAliveCountMax.*$|^ClientAliveCountMax\\s*(?!0\\b)\\w*$"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource102ref -{ -ResourceID = "[nxFileLine][V-204590][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; - ContainsLine = "IgnoreRhosts yes"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/ssh/sshd_config"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "^#\\s*IgnoreRhosts.*$|^IgnoreRhosts\\s*(?!yes\\b)\\w*$"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource103ref -{ -ResourceID = "[nxFileLine][V-204591][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; - ContainsLine = "PrintLastLog yes"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/ssh/sshd_config"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "^#\\s*PrintLastLog.*$|^PrintLastLog\\s*(?!yes\\b)\\w*$"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource104ref -{ -ResourceID = "[nxFileLine][V-204592][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; - ContainsLine = "PermitRootLogin no"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/ssh/sshd_config"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "^#\\s*PermitRootLogin.*$|^PermitRootLogin\\s*(?!no\\b)\\w*$"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource105ref -{ -ResourceID = "[nxFileLine][V-204593][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; - ContainsLine = "IgnoreUserKnownHosts yes"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/ssh/sshd_config"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "^#\\s*IgnoreUserKnownHosts.*$|^IgnoreUserKnownHosts\\s*(?!yes\\b)\\w*$"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource106ref -{ -ResourceID = "[nxFileLine][V-204594][high][SRG-OS-000074-GPOS-00042]::[RHEL]Baseline"; - ContainsLine = "Protocol 2"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/ssh/sshd_config"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "^#\\s*Protocol.*$|^Protocol\\s*(?!2\\b)\\w*$"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource107ref -{ -ResourceID = "[nxFileLine][V-204595][medium][SRG-OS-000250-GPOS-00093]::[RHEL]Baseline"; - ContainsLine = "MACs hmac-sha2-512,hmac-sha2-256"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/ssh/sshd_config"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*MACs.*|\\s*MACs\\s*hmac-(?!sha2-512).*"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource108ref -{ -ResourceID = "[nxFileLine][V-204598][medium][SRG-OS-000364-GPOS-00151]::[RHEL]Baseline"; - ContainsLine = "GSSAPIAuthentication no"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/ssh/sshd_config"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "^#\\s*GSSAPIAuthentication.*$|^GSSAPIAuthentication\\s*(?!no\\b)\\w*$"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource109ref -{ -ResourceID = "[nxFileLine][V-204599][medium][SRG-OS-000364-GPOS-00151]::[RHEL]Baseline"; - ContainsLine = "KerberosAuthentication no"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/ssh/sshd_config"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "^#\\s*KerberosAuthentication.*$|^KerberosAuthentication\\s*(?!no\\b)\\w*$"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource110ref -{ -ResourceID = "[nxFileLine][V-204600][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; - ContainsLine = "StrictModes yes"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/ssh/sshd_config"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "^#\\s*StrictModes.*$|^StrictModes\\s*(?!yes\\b)\\w*$"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource111ref -{ -ResourceID = "[nxFileLine][V-204601][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; - ContainsLine = "UsePrivilegeSeparation sandbox"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/ssh/sshd_config"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "^#\\s*UsePrivilegeSeparation.*$|^UsePrivilegeSeparation\\s*(?!sandbox\\b)\\w*$"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource112ref -{ -ResourceID = "[nxFileLine][V-204602][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; - ContainsLine = "Compression delayed"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/ssh/sshd_config"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "^#\\s*Compression.*$|^Compression\\s*(?!delayed\\b)\\w*$"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource113ref -{ -ResourceID = "[nxFileLine][V-204622][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; - ContainsLine = "X11Forwarding no"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/ssh/sshd_config"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "^#\\s*X11Forwarding.*$|^X11Forwarding\\s*(?!no\\b)\\w*$"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource114ref -{ -ResourceID = "[nxFileLine][V-233307][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; - ContainsLine = "X11UseLocalhost yes"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/ssh/sshd_config"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*X11UseLocalhost\\s*yes"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxServiceResource as $MSFT_nxServiceResource1ref -{ -ResourceID = "[nxService][V-204451][medium][SRG-OS-000114-GPOS-00059]::[RHEL]Baseline"; - Controller = "systemd"; - Enabled = False; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxService.ps1::13::9::nxService"; - Name = "autofs"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxServiceResource as $MSFT_nxServiceResource2ref -{ -ResourceID = "[nxService][V-204492][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; - Controller = "systemd"; - Enabled = False; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxService.ps1::13::9::nxService"; - Name = "kdump"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxServiceResource as $MSFT_nxServiceResource3ref -{ -ResourceID = "[nxService][V-204503][medium][SRG-OS-000038-GPOS-00016]::[RHEL]Baseline"; - Controller = "systemd"; - State = "Running"; - Enabled = True; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxService.ps1::22::9::nxService"; - Name = "auditd"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxServiceResource as $MSFT_nxServiceResource4ref -{ -ResourceID = "[nxService][V-204586][medium][SRG-OS-000423-GPOS-00187]::[RHEL]Baseline"; - Controller = "systemd"; - State = "Running"; - Enabled = True; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxService.ps1::22::9::nxService"; - Name = "sshd"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxServiceResource as $MSFT_nxServiceResource5ref -{ -ResourceID = "[nxService][V-204604.b][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; - Controller = "systemd"; - State = "Running"; - Enabled = True; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxService.ps1::22::9::nxService"; - Name = "firewalld"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxScriptResource as $MSFT_nxScriptResource1ref -{ -ResourceID = "[nxScript][V-204399.b][medium][[Skip] SRG-OS-000029-GPOS-00010]::[RHEL]Baseline"; - GetScript = "#!/bin/bash\necho [V-204399.b][medium][[Skip] SRG-OS-000029-GPOS-00010]"; - TestScript = "#!/bin/bash\nexit 0"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxScript.skip.ps1::10::5::nxScript"; - SetScript = "#!/bin/bash"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxScriptResource as $MSFT_nxScriptResource2ref -{ -ResourceID = "[nxScript][V-204400][medium][[Skip] SRG-OS-000029-GPOS-00010]::[RHEL]Baseline"; - GetScript = "#!/bin/bash\necho [V-204400][medium][[Skip] SRG-OS-000029-GPOS-00010]"; - TestScript = "#!/bin/bash\nexit 0"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxScript.skip.ps1::10::5::nxScript"; - SetScript = "#!/bin/bash"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxScriptResource as $MSFT_nxScriptResource3ref -{ -ResourceID = "[nxScript][V-204403][medium][[Skip] SRG-OS-000029-GPOS-00010]::[RHEL]Baseline"; - GetScript = "#!/bin/bash\necho [V-204403][medium][[Skip] SRG-OS-000029-GPOS-00010]"; - TestScript = "#!/bin/bash\nexit 0"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxScript.skip.ps1::10::5::nxScript"; - SetScript = "#!/bin/bash"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxScriptResource as $MSFT_nxScriptResource4ref -{ -ResourceID = "[nxScript][V-204509][medium][[Skip] SRG-OS-000342-GPOS-00133]::[RHEL]Baseline"; - GetScript = "#!/bin/bash\necho [V-204509][medium][[Skip] SRG-OS-000342-GPOS-00133]"; - TestScript = "#!/bin/bash\nexit 0"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxScript.skip.ps1::10::5::nxScript"; - SetScript = "#!/bin/bash"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxScriptResource as $MSFT_nxScriptResource5ref -{ -ResourceID = "[nxScript][V-204513][medium][[Skip] SRG-OS-000343-GPOS-00134]::[RHEL]Baseline"; - GetScript = "#!/bin/bash\necho [V-204513][medium][[Skip] SRG-OS-000343-GPOS-00134]"; - TestScript = "#!/bin/bash\nexit 0"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxScript.skip.ps1::10::5::nxScript"; - SetScript = "#!/bin/bash"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxScriptResource as $MSFT_nxScriptResource6ref -{ -ResourceID = "[nxScript][V-204623][medium][[Skip] SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; - GetScript = "#!/bin/bash\necho [V-204623][medium][[Skip] SRG-OS-000480-GPOS-00227]"; - TestScript = "#!/bin/bash\nexit 0"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxScript.skip.ps1::10::5::nxScript"; - SetScript = "#!/bin/bash"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxScriptResource as $MSFT_nxScriptResource7ref -{ -ResourceID = "[nxScript][V-244557][medium][[Skip] SRG-OS-000080-GPOS-00048]::[RHEL]Baseline"; - GetScript = "#!/bin/bash\necho [V-244557][medium][[Skip] SRG-OS-000080-GPOS-00048]"; - TestScript = "#!/bin/bash\nexit 0"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxScript.skip.ps1::10::5::nxScript"; - SetScript = "#!/bin/bash"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxScriptResource as $MSFT_nxScriptResource8ref -{ -ResourceID = "[nxScript][V-244558][medium][[Skip] SRG-OS-000080-GPOS-00048]::[RHEL]Baseline"; - GetScript = "#!/bin/bash\necho [V-244558][medium][[Skip] SRG-OS-000080-GPOS-00048]"; - TestScript = "#!/bin/bash\nexit 0"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxScript.skip.ps1::10::5::nxScript"; - SetScript = "#!/bin/bash"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxScriptResource as $MSFT_nxScriptResource9ref -{ -ResourceID = "[nxScript][V-204399.a][medium][[Skip] SRG-OS-000029-GPOS-00010]::[RHEL]Baseline"; - GetScript = "#!/bin/bash\necho [V-204399.a][medium][[Skip] SRG-OS-000029-GPOS-00010]"; - TestScript = "#!/bin/bash\nexit 0"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxScript.skip.ps1::10::5::nxScript"; - SetScript = "#!/bin/bash"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of OMI_ConfigurationDocument - - - { - Version="2.0.0"; - - - MinimumCompatibleVersion = "1.0.0"; - - - CompatibleVersionAdditionalProperties= {"Omi_BaseResource:ConfigurationName"}; - - - Author="Microsoft"; - - - GenerationDate="06/30/2022 11:38:45"; - - - GenerationHost="Microsoft"; - - - Name="LinuxBaseLine"; - - - }; +/* +@TargetNode='RHEL74' +@GeneratedBy=Microsoft +@GenerationDate=03/09/2023 14:17:33 +@GenerationHost=Microsoft +*/ + +instance of MSFT_nxPackageResource as $MSFT_nxPackageResource1ref +{ +ResourceID = "[nxPackage][V-204442][high][SRG-OS-000095-GPOS-00049]::[RHEL]Baseline"; + Ensure = "Absent"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxPackage.ps1::8::5::nxPackage"; + Name = "rsh-server"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxPackageResource as $MSFT_nxPackageResource2ref +{ +ResourceID = "[nxPackage][V-204443][high][SRG-OS-000095-GPOS-00049]::[RHEL]Baseline"; + Ensure = "Absent"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxPackage.ps1::8::5::nxPackage"; + Name = "ypserv"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxPackageResource as $MSFT_nxPackageResource3ref +{ +ResourceID = "[nxPackage][V-204497][high][SRG-OS-000033-GPOS-00014]::[RHEL]Baseline"; + Ensure = "Present"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxPackage.ps1::8::5::nxPackage"; + Name = "dracut-fips"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxPackageResource as $MSFT_nxPackageResource4ref +{ +ResourceID = "[nxPackage][V-204498][low][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; + Ensure = "Present"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxPackage.ps1::8::5::nxPackage"; + Name = "aide"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxPackageResource as $MSFT_nxPackageResource5ref +{ +ResourceID = "[nxPackage][V-204502][high][SRG-OS-000095-GPOS-00049]::[RHEL]Baseline"; + Ensure = "Absent"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxPackage.ps1::8::5::nxPackage"; + Name = "telnet-server"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxPackageResource as $MSFT_nxPackageResource6ref +{ +ResourceID = "[nxPackage][V-204585][medium][SRG-OS-000423-GPOS-00187]::[RHEL]Baseline"; + Ensure = "Present"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxPackage.ps1::8::5::nxPackage"; + Name = "openssh-server"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxPackageResource as $MSFT_nxPackageResource7ref +{ +ResourceID = "[nxPackage][V-204604.a][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; + Ensure = "Present"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxPackage.ps1::8::5::nxPackage"; + Name = "firewalld"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxPackageResource as $MSFT_nxPackageResource8ref +{ +ResourceID = "[nxPackage][V-204620][high][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; + Ensure = "Absent"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxPackage.ps1::8::5::nxPackage"; + Name = "vsftpd"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxPackageResource as $MSFT_nxPackageResource9ref +{ +ResourceID = "[nxPackage][V-204621][high][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; + Ensure = "Absent"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxPackage.ps1::8::5::nxPackage"; + Name = "tftp-server"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxPackageResource as $MSFT_nxPackageResource10ref +{ +ResourceID = "[nxPackage][V-204631][medium][SRG-OS-000375-GPOS-00160]::[RHEL]Baseline"; + Ensure = "Present"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxPackage.ps1::8::5::nxPackage"; + Name = "pam_pkcs11"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileResource as $MSFT_nxFileResource1ref +{ +ResourceID = "[nxFile][V-204395][medium][SRG-OS-000023-GPOS-00006]::[RHEL]Baseline"; + Contents = "You are accessing a U.S. Government (USG) Information System (IS) that is provided for USG-authorized use only.\n\nBy using this IS (which includes any device attached to this IS), you consent to the following conditions:\n\n-The USG routinely intercepts and monitors communications on this IS for purposes including, but not limited to, penetration testing, COMSEC monitoring, network operations and defense, personnel misconduct (PM), law enforcement (LE), and counterintelligence (CI) investigations.\n\n-At any time, the USG may inspect and seize data stored on this IS.\n\n-Communications using, or data stored on, this IS are not private, are subject to routine monitoring, interception, and search, and may be disclosed or used for any USG-authorized purpose.\n\n-This IS includes security measures (e.g., authentication and access controls) to protect USG interests--not for your personal benefit or privacy.\n\n-Notwithstanding the above, using this IS does not constitute consent to PM, LE or CI investigative searching or monitoring of the content of privileged communications, or work product, related to personal representation or services by attorneys, psychotherapists, or clergy, and their assistants. Such communications and work product are private and confidential. See User Agreement for details."; + DestinationPath = "/etc/issue"; + ModuleName = "nx"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; + ModuleVersion = "1.0"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileResource as $MSFT_nxFileResource2ref +{ +ResourceID = "[nxFile][V-204449.a][medium][SRG-OS-000114-GPOS-00059]::[RHEL]Baseline"; + Contents = ""; + DestinationPath = "/etc/modprobe.d/usb-storage.conf"; + ModuleName = "nx"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; + ModuleVersion = "1.0"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileResource as $MSFT_nxFileResource3ref +{ +ResourceID = "[nxFile][V-204449.b][medium][SRG-OS-000114-GPOS-00059]::[RHEL]Baseline"; + Contents = ""; + DestinationPath = "/etc/modprobe.d/blacklist.conf"; + ModuleName = "nx"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; + ModuleVersion = "1.0"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileResource as $MSFT_nxFileResource4ref +{ +ResourceID = "[nxFile][V-204450.a][medium][SRG-OS-000378-GPOS-00163]::[RHEL]Baseline"; + Contents = ""; + DestinationPath = "/etc/modprobe.d/dccp.conf"; + ModuleName = "nx"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; + ModuleVersion = "1.0"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileResource as $MSFT_nxFileResource5ref +{ +ResourceID = "[nxFile][V-204576][low][SRG-OS-000027-GPOS-00008]::[RHEL]Baseline"; + Contents = "* hard maxlogins 10"; + DestinationPath = "/etc/security/limits.d/204576-powerstig.conf"; + ModuleName = "nx"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; + ModuleVersion = "1.0"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileResource as $MSFT_nxFileResource6ref +{ +ResourceID = "[nxFile][V-204579.a][medium][SRG-OS-000163-GPOS-00072]::[RHEL]Baseline"; + Contents = ""; + DestinationPath = "/etc/profile.d/tmout.sh"; + ModuleName = "nx"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; + ModuleVersion = "1.0"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileResource as $MSFT_nxFileResource7ref +{ +ResourceID = "[nxFile][V-204584][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; + Contents = "kernel.randomize_va_space = 2"; + DestinationPath = "/etc/sysctl.d/204584-powerstig.conf"; + ModuleName = "nx"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; + ModuleVersion = "1.0"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileResource as $MSFT_nxFileResource8ref +{ +ResourceID = "[nxFile][V-204609][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; + Contents = "net.ipv4.conf.all.accept_source_route = 0"; + DestinationPath = "/etc/sysctl.d/204609-powerstig.conf"; + ModuleName = "nx"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; + ModuleVersion = "1.0"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileResource as $MSFT_nxFileResource9ref +{ +ResourceID = "[nxFile][V-204610][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; + Contents = "net.ipv4.conf.all.rp_filter = 1"; + DestinationPath = "/etc/sysctl.d/204610-powerstig.conf"; + ModuleName = "nx"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; + ModuleVersion = "1.0"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileResource as $MSFT_nxFileResource10ref +{ +ResourceID = "[nxFile][V-204611][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; + Contents = "net.ipv4.conf.default.rp_filter = 1"; + DestinationPath = "/etc/sysctl.d/204611-powerstig.conf"; + ModuleName = "nx"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; + ModuleVersion = "1.0"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileResource as $MSFT_nxFileResource11ref +{ +ResourceID = "[nxFile][V-204612][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; + Contents = "net.ipv4.conf.default.accept_source_route = 0"; + DestinationPath = "/etc/sysctl.d/204612-powerstig.conf"; + ModuleName = "nx"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; + ModuleVersion = "1.0"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileResource as $MSFT_nxFileResource12ref +{ +ResourceID = "[nxFile][V-204613][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; + Contents = "net.ipv4.icmp_echo_ignore_broadcasts = 1"; + DestinationPath = "/etc/sysctl.d/204613-powerstig.conf"; + ModuleName = "nx"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; + ModuleVersion = "1.0"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileResource as $MSFT_nxFileResource13ref +{ +ResourceID = "[nxFile][V-204614][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; + Contents = "net.ipv4.conf.default.accept_redirects = 0"; + DestinationPath = "/etc/sysctl.d/204614-powerstig.conf"; + ModuleName = "nx"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; + ModuleVersion = "1.0"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileResource as $MSFT_nxFileResource14ref +{ +ResourceID = "[nxFile][V-204615][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; + Contents = "net.ipv4.conf.all.accept_redirects = 0"; + DestinationPath = "/etc/sysctl.d/204615-powerstig.conf"; + ModuleName = "nx"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; + ModuleVersion = "1.0"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileResource as $MSFT_nxFileResource15ref +{ +ResourceID = "[nxFile][V-204616][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; + Contents = "net.ipv4.conf.default.send_redirects = 0"; + DestinationPath = "/etc/sysctl.d/204616-powerstig.conf"; + ModuleName = "nx"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; + ModuleVersion = "1.0"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileResource as $MSFT_nxFileResource16ref +{ +ResourceID = "[nxFile][V-204617][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; + Contents = "net.ipv4.conf.all.send_redirects = 0"; + DestinationPath = "/etc/sysctl.d/204617-powerstig.conf"; + ModuleName = "nx"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; + ModuleVersion = "1.0"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileResource as $MSFT_nxFileResource17ref +{ +ResourceID = "[nxFile][V-204625][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; + Contents = "net.ipv4.ip_forward = 0"; + DestinationPath = "/etc/sysctl.d/204625-powerstig.conf"; + ModuleName = "nx"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; + ModuleVersion = "1.0"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileResource as $MSFT_nxFileResource18ref +{ +ResourceID = "[nxFile][V-204630][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; + Contents = "net.ipv6.conf.all.accept_source_route = 0"; + DestinationPath = "/etc/sysctl.d/204630-powerstig.conf"; + ModuleName = "nx"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; + ModuleVersion = "1.0"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileResource as $MSFT_nxFileResource19ref +{ +ResourceID = "[nxFile][V-237634.a][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; + Contents = "Defaults !targetpw"; + DestinationPath = "/etc/sudoers.d/237634a-powerstig.conf"; + ModuleName = "nx"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; + ModuleVersion = "1.0"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileResource as $MSFT_nxFileResource20ref +{ +ResourceID = "[nxFile][V-237634.b][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; + Contents = "Defaults !rootpw"; + DestinationPath = "/etc/sudoers.d/237634b-powerstig.conf"; + ModuleName = "nx"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; + ModuleVersion = "1.0"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileResource as $MSFT_nxFileResource21ref +{ +ResourceID = "[nxFile][V-237634.c][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; + Contents = "Defaults !runaspw"; + DestinationPath = "/etc/sudoers.d/237634c-powerstig.conf"; + ModuleName = "nx"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; + ModuleVersion = "1.0"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileResource as $MSFT_nxFileResource22ref +{ +ResourceID = "[nxFile][V-237635][medium][SRG-OS-000373-GPOS-00156]::[RHEL]Baseline"; + Contents = "Defaults timestamp_timeout=0"; + DestinationPath = "/etc/sudoers.d/237635-powerstig.conf"; + ModuleName = "nx"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; + ModuleVersion = "1.0"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileResource as $MSFT_nxFileResource23ref +{ +ResourceID = "[nxFile][V-250314][medium][SRG-OS-000324-GPOS-00125]::[RHEL]Baseline"; + Contents = "%wheel ALL=(ALL) TYPE=sysadm_t ROLE=sysadm_r ALL"; + DestinationPath = "/etc/sudoers.d/250314-powerstig.conf"; + ModuleName = "nx"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; + ModuleVersion = "1.0"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource1ref +{ +ResourceID = "[nxFileLine][V-204405][medium][SRG-OS-000069-GPOS-00037]::[RHEL]Baseline"; + ContainsLine = "password substack system-auth"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/pam.d/passwd"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "^\\s*password(?:\\t*|\\s*)substack\\tsystem-auth\\s*$|^#\\s*password\\s*substack\\s*system-auth.*"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource2ref +{ +ResourceID = "[nxFileLine][V-204407][medium][SRG-OS-000069-GPOS-00037]::[RHEL]Baseline"; + ContainsLine = "ucredit = -1"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/security/pwquality.conf"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "^#\\s*ucredit.*$|^ucredit\\s*=\\s*(?!-1\\b)\\w*$"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource3ref +{ +ResourceID = "[nxFileLine][V-204408][medium][SRG-OS-000070-GPOS-00038]::[RHEL]Baseline"; + ContainsLine = "lcredit = -1"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/security/pwquality.conf"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "^#\\s*lcredit.*$|^lcredit\\s*=\\s*(?!-1\\b)\\w*$"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource4ref +{ +ResourceID = "[nxFileLine][V-204409][medium][SRG-OS-000071-GPOS-00039]::[RHEL]Baseline"; + ContainsLine = "dcredit = -1"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/security/pwquality.conf"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "^#\\s*dcredit.*$|^dcredit\\s*=\\s*(?!-1\\b)\\w*$"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource5ref +{ +ResourceID = "[nxFileLine][V-204410][medium][SRG-OS-000266-GPOS-00101]::[RHEL]Baseline"; + ContainsLine = "ocredit=-1"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/security/pwquality.conf"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "^#\\s*ocredit.*$|^ocredit\\s*=\\s*(?!-1)\\w*$"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource6ref +{ +ResourceID = "[nxFileLine][V-204411][medium][SRG-OS-000072-GPOS-00040]::[RHEL]Baseline"; + ContainsLine = "difok = 8"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/security/pwquality.conf"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*difok\\s*=.*|^\\s*difok\\s*=\\s*(-|)[0-7]$"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource7ref +{ +ResourceID = "[nxFileLine][V-204412][medium][SRG-OS-000072-GPOS-00040]::[RHEL]Baseline"; + ContainsLine = "minclass = 4"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/security/pwquality.conf"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "^#\\s*minclass\\s*=.*|^\\s*minclass\\s*=\\s*(?!\\d{2,})[1-3]"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource8ref +{ +ResourceID = "[nxFileLine][V-204413][medium][SRG-OS-000072-GPOS-00040]::[RHEL]Baseline"; + ContainsLine = "maxrepeat = 3"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/security/pwquality.conf"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "^#\\s*maxrepeat\\s*=.*|^\\s*maxrepeat\\s*=\\s*(?:\\d{2,}|[4-9])"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource9ref +{ +ResourceID = "[nxFileLine][V-204414][medium][SRG-OS-000072-GPOS-00040]::[RHEL]Baseline"; + ContainsLine = "maxclassrepeat = 4"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/security/pwquality.conf"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "^#\\s*maxclassrepeat\\s*=.*|^\\s*maxclassrepeat\\s*=\\s*(?:\\d{2,}|[1-3|5-9])"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource10ref +{ +ResourceID = "[nxFileLine][V-204416][medium][SRG-OS-000073-GPOS-00041]::[RHEL]Baseline"; + ContainsLine = "ENCRYPT_METHOD SHA512"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/login.defs"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*ENCRYPT_METHOD\\s*SHA512"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource11ref +{ +ResourceID = "[nxFileLine][V-204418][medium][SRG-OS-000075-GPOS-00043]::[RHEL]Baseline"; + ContainsLine = "PASS_MIN_DAYS 1"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/login.defs"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "^\\s*PASS_MIN_DAYS\\s*[0]*$|#\\s*PASS_MIN_DAYS.*"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource12ref +{ +ResourceID = "[nxFileLine][V-204420][medium][SRG-OS-000076-GPOS-00044]::[RHEL]Baseline"; + ContainsLine = "PASS_MAX_DAYS 60"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/login.defs"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "^\\s*PASS_MAX_DAYS\\s*([6][1-9]|[7-9][0-9]|\\d{3,})$|#\\s*PASS_MAX_DAYS.*"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource13ref +{ +ResourceID = "[nxFileLine][V-204423][medium][SRG-OS-000078-GPOS-00046]::[RHEL]Baseline"; + ContainsLine = "minlen = 15"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/security/pwquality.conf"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "^\\s*minlen\\s*=\\s*([0-9]|[1][1-4])$|#\\s*minlen.*"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource14ref +{ +ResourceID = "[nxFileLine][V-204425][high][SRG-OS-000106-GPOS-00053]::[RHEL]Baseline"; + ContainsLine = "PermitEmptyPasswords no"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/ssh/sshd_config"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "^#\\s*PermitEmptyPasswords.*$|^PermitEmptyPasswords\\s*(?!no\\b)\\w*$"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource15ref +{ +ResourceID = "[nxFileLine][V-204426][medium][SRG-OS-000118-GPOS-00060]::[RHEL]Baseline"; + ContainsLine = "INACTIVE=35"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/default/useradd"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "^#\\s*INACTIVE\\s*=.*|^\\s*INACTIVE\\s*=\\s*(3[5-9]|[4-9]\\d+|\\d{3,})"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource16ref +{ +ResourceID = "[nxFileLine][V-204431][medium][SRG-OS-000480-GPOS-00226]::[RHEL]Baseline"; + ContainsLine = "FAIL_DELAY 4"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/login.defs"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "^#\\s*FAIL_DELAY.*|^FAIL_DELAY\\s*(?!\\d{2,})[1-3]"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource17ref +{ +ResourceID = "[nxFileLine][V-204434][medium][SRG-OS-000480-GPOS-00229]::[RHEL]Baseline"; + ContainsLine = "PermitUserEnvironment no"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/ssh/sshd_config"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "^#\\s*PermitUserEnvironment.*$|^PermitUserEnvironment\\s*(?!no\\b)\\w*$"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource18ref +{ +ResourceID = "[nxFileLine][V-204435][medium][SRG-OS-000480-GPOS-00229]::[RHEL]Baseline"; + ContainsLine = "HostbasedAuthentication no"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/ssh/sshd_config"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "^#\\s*HostbasedAuthentication.*$|^HostbasedAuthentication\\s*(?!no\\b)\\w*$"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource19ref +{ +ResourceID = "[nxFileLine][V-204447][high][SRG-OS-000366-GPOS-00153]::[RHEL]Baseline"; + ContainsLine = "gpgcheck=1"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/yum.conf"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*gpgcheck\\s*=\\s*1"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource20ref +{ +ResourceID = "[nxFileLine][V-204448][high][SRG-OS-000366-GPOS-00153]::[RHEL]Baseline"; + ContainsLine = "localpkg_gpgcheck=1"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/yum.conf"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*localpkg_gpgcheck\\s*=\\s*1"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource21ref +{ +ResourceID = "[nxFileLine][V-204449.c][medium][SRG-OS-000114-GPOS-00059]::[RHEL]Baseline"; + ContainsLine = "install usb-storage /bin/true"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/modprobe.d/usb-storage.conf"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*install\\s*usb-storage\\s*/bin/true"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource22ref +{ +ResourceID = "[nxFileLine][V-204449.d][medium][SRG-OS-000114-GPOS-00059]::[RHEL]Baseline"; + ContainsLine = "blacklist usb-storage"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/modprobe.d/blacklist.conf"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*blacklist\\s*usb-storage"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource23ref +{ +ResourceID = "[nxFileLine][V-204450.b][medium][SRG-OS-000378-GPOS-00163]::[RHEL]Baseline"; + ContainsLine = "install dccp /bin/true"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/modprobe.d/dccp.conf"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*install\\s*dccp\\s*/bin/true"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource24ref +{ +ResourceID = "[nxFileLine][V-204450.c][medium][SRG-OS-000378-GPOS-00163]::[RHEL]Baseline"; + ContainsLine = "blacklist dccp"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/modprobe.d/blacklist.conf"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*blacklist\\s*dccp"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource25ref +{ +ResourceID = "[nxFileLine][V-204452][low][SRG-OS-000437-GPOS-00194]::[RHEL]Baseline"; + ContainsLine = "clean_requirements_on_remove=1"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/yum.conf"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*clean_requirements_on_remove\\s*=\\s*1"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource26ref +{ +ResourceID = "[nxFileLine][V-204453][medium][SRG-OS-000445-GPOS-00199]::[RHEL]Baseline"; + ContainsLine = "SELINUX=enforcing"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/selinux/config"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "^#\\s*SELINUX.*$|^SELINUX\\s*=\\s*(?!enforcing)\\w*$"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource27ref +{ +ResourceID = "[nxFileLine][V-204454][medium][SRG-OS-000445-GPOS-00199]::[RHEL]Baseline"; + ContainsLine = "SELINUXTYPE=targeted"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/selinux/config"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "^#\\s*SELINUXTYPE.*$|^SELINUXTYPE\\s*=\\s*(?!targeted\\b)\\w*$"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource28ref +{ +ResourceID = "[nxFileLine][V-204457][medium][SRG-OS-000480-GPOS-00228]::[RHEL]Baseline"; + ContainsLine = "UMASK 077"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/login.defs"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "^\\s*UMASK(?!\\s077\\b)\\s*\\d*\\s*$|^#\\s*UMASK.*"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource29ref +{ +ResourceID = "[nxFileLine][V-204466][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; + ContainsLine = "CREATE_HOME yes"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/login.defs"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "^#\\s*CREATE_HOME.*$|^CREATE_HOME\\s*(?!yes\\b)\\w*$|^CREATE_HOME\\t.*"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource30ref +{ +ResourceID = "[nxFileLine][V-204504][medium][SRG-OS-000046-GPOS-00022]::[RHEL]Baseline"; + ContainsLine = "-f 2"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "^#\\s*-f\\s+2|^\\s*-f\\s*1"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileResource as $MSFT_nxFileResource24ref +{ +SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::29::9::nxFile"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + ResourceID = "[nxFile][V-204506.a][medium][SRG-OS-000342-GPOS-00133]::[RHEL]Baseline"; + DestinationPath = "/etc/audisp/plugins.d/au-remote.conf"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource31ref +{ +ResourceID = "[nxFileLine][V-204506.a][medium][SRG-OS-000342-GPOS-00133]::[RHEL]Baseline"; + ContainsLine = "active = yes"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audisp/plugins.d/au-remote.conf"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "\\s*active\\s*=\\s*no|active=yes|#\\s*active\\s*=.*"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource32ref +{ +ResourceID = "[nxFileLine][V-204506.b][medium][SRG-OS-000342-GPOS-00133]::[RHEL]Baseline"; + ContainsLine = "direction = out"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audisp/plugins.d/au-remote.conf"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*direction\\s*=\\s*out"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource33ref +{ +ResourceID = "[nxFileLine][V-204506.c][medium][SRG-OS-000342-GPOS-00133]::[RHEL]Baseline"; + ContainsLine = "path = /sbin/audisp-remote"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audisp/plugins.d/au-remote.conf"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*path\\s*=\\s*/sbin/audisp-remote"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource34ref +{ +ResourceID = "[nxFileLine][V-204506.d][medium][SRG-OS-000342-GPOS-00133]::[RHEL]Baseline"; + ContainsLine = "type = always"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audisp/plugins.d/au-remote.conf"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*type\\s*=\\s*always"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource35ref +{ +ResourceID = "[nxFileLine][V-204507][medium][SRG-OS-000342-GPOS-00133]::[RHEL]Baseline"; + ContainsLine = "overflow_action = syslog"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audisp/audispd.conf"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "^#\\s*overflow_action.*$|^overflow_action\\s*=\\s*(?!syslog$)\\w*$"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource36ref +{ +ResourceID = "[nxFileLine][V-204508][medium][SRG-OS-000342-GPOS-00133]::[RHEL]Baseline"; + ContainsLine = "name_format = hostname"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audisp/audispd.conf"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "^#\\s*name_format.*$|^name_format\\s*=\\s*(?!hostname$)\\w*$"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileResource as $MSFT_nxFileResource25ref +{ +SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::19::9::nxFile"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + ResourceID = "[nxFile][V-204510][medium][SRG-OS-000342-GPOS-00133]::[RHEL]Baseline"; + DestinationPath = "/etc/audisp/audisp-remote.conf"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource37ref +{ +ResourceID = "[nxFileLine][V-204510][medium][SRG-OS-000342-GPOS-00133]::[RHEL]Baseline"; + ContainsLine = "enable_krb5 = yes"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audisp/audisp-remote.conf"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*enable_krb5\\s*=\\s*yes"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource38ref +{ +ResourceID = "[nxFileLine][V-204511][medium][SRG-OS-000342-GPOS-00133]::[RHEL]Baseline"; + ContainsLine = "disk_full_action = single"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audisp/audisp-remote.conf"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "^#\\s*disk_full_action\\s*=.*|^disk_full_action\\s*=\\s*(?!halt\\b|single\\b|syslog\\b)\\w+"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource39ref +{ +ResourceID = "[nxFileLine][V-204512][medium][SRG-OS-000342-GPOS-00133]::[RHEL]Baseline"; + ContainsLine = "network_failure_action = syslog"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audisp/audisp-remote.conf"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "^#\\s*network_failure_action\\s*=.*|^network_failure_action\\s*=\\s*(?!halt\\b|single\\b|syslog\\b)\\w+"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource40ref +{ +ResourceID = "[nxFileLine][V-204514][medium][SRG-OS-000343-GPOS-00134]::[RHEL]Baseline"; + ContainsLine = "space_left_action = email"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/auditd.conf"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "^#\\s*space_left_action.*$|^space_left_action\\s*=\\s*(?!email$)\\w*$"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource41ref +{ +ResourceID = "[nxFileLine][V-204515][medium][SRG-OS-000343-GPOS-00134]::[RHEL]Baseline"; + ContainsLine = "action_mail_acct = root"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/auditd.conf"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "^#\\s*action_mail_acct.*|^action_mail_acct\\s*=\\s*(?!root\\b)\\w+"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource42ref +{ +ResourceID = "[nxFileLine][V-204516.a][medium][SRG-OS-000327-GPOS-00127]::[RHEL]Baseline"; + ContainsLine = "-a always,exit -F arch=b32 -S execve -C uid!=euid -F euid=0 -k setuid"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*execve\\s*-C\\s*uid!\\s*=\\s*euid\\s*-F\\s*euid\\s*=\\s*0\\s*-k\\s*setuid"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource43ref +{ +ResourceID = "[nxFileLine][V-204516.b][medium][SRG-OS-000327-GPOS-00127]::[RHEL]Baseline"; + ContainsLine = "-a always,exit -F arch=b64 -S execve -C uid!=euid -F euid=0 -k setuid"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*execve\\s*-C\\s*uid!\\s*=\\s*euid\\s*-F\\s*euid\\s*=\\s*0\\s*-k\\s*setuid"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource44ref +{ +ResourceID = "[nxFileLine][V-204516.c][medium][SRG-OS-000327-GPOS-00127]::[RHEL]Baseline"; + ContainsLine = "-a always,exit -F arch=b32 -S execve -C gid!=egid -F egid=0 -k setgid"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*execve\\s*-C\\s*gid!\\s*=\\s*egid\\s*-F\\s*egid\\s*=\\s*0\\s*-k\\s*setgid"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource45ref +{ +ResourceID = "[nxFileLine][V-204516.d][medium][SRG-OS-000327-GPOS-00127]::[RHEL]Baseline"; + ContainsLine = "-a always,exit -F arch=b64 -S execve -C gid!=egid -F egid=0 -k setgid"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*execve\\s*-C\\s*gid!\\s*=\\s*egid\\s*-F\\s*egid\\s*=\\s*0\\s*-k\\s*setgid"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource46ref +{ +ResourceID = "[nxFileLine][V-204517.a][medium][SRG-OS-000064-GPOS-00033]::[RHEL]Baseline"; + ContainsLine = "-a always,exit -F arch=b32 -S chown,fchown,fchownat,lchown -F auid>=1000 -F auid!=unset -k perm_mod"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*chown,fchown,fchownat,lchown\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*perm_mod"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource47ref +{ +ResourceID = "[nxFileLine][V-204517.b][medium][SRG-OS-000064-GPOS-00033]::[RHEL]Baseline"; + ContainsLine = "-a always,exit -F arch=b64 -S chown,fchown,fchownat,lchown -F auid>=1000 -F auid!=unset -k perm_mod"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*chown,fchown,fchownat,lchown\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*perm_mod"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource48ref +{ +ResourceID = "[nxFileLine][V-204521.a][medium][SRG-OS-000458-GPOS-00203]::[RHEL]Baseline"; + ContainsLine = "-a always,exit -F arch=b32 -S chmod,fchmod,fchmodat -F auid>=1000 -F auid!=unset -k perm_mod"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*chmod,fchmod,fchmodat\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*perm_mod"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource49ref +{ +ResourceID = "[nxFileLine][V-204521.b][medium][SRG-OS-000458-GPOS-00203]::[RHEL]Baseline"; + ContainsLine = "-a always,exit -F arch=b64 -S chmod,fchmod,fchmodat -F auid>=1000 -F auid!=unset -k perm_mod"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*chmod,fchmod,fchmodat\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*perm_mod"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource50ref +{ +ResourceID = "[nxFileLine][V-204524.a][medium][SRG-OS-000458-GPOS-00203]::[RHEL]Baseline"; + ContainsLine = "-a always,exit -F arch=b32 -S setxattr,fsetxattr,lsetxattr,removexattr,fremovexattr,lremovexattr -F auid>=1000 -F auid!=unset -k perm_mod"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*setxattr,fsetxattr,lsetxattr,removexattr,fremovexattr,lremovexattr\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*perm_mod"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource51ref +{ +ResourceID = "[nxFileLine][V-204524.b][medium][SRG-OS-000458-GPOS-00203]::[RHEL]Baseline"; + ContainsLine = "-a always,exit -F arch=b64 -S setxattr,fsetxattr,lsetxattr,removexattr,fremovexattr,lremovexattr -F auid>=1000 -F auid!=unset -k perm_mod"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*setxattr,fsetxattr,lsetxattr,removexattr,fremovexattr,lremovexattr\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*perm_mod"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource52ref +{ +ResourceID = "[nxFileLine][V-204531.a][medium][SRG-OS-000064-GPOS-00033]::[RHEL]Baseline"; + ContainsLine = "-a always,exit -F arch=b32 -S creat,open,openat,open_by_handle_at,truncate,ftruncate -F exit=-EPERM -F auid>=1000 -F auid!=unset -k access"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*creat,open,openat,open_by_handle_at,truncate,ftruncate\\s*-F\\s*exit\\s*=\\s*-EPERM\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*access"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource53ref +{ +ResourceID = "[nxFileLine][V-204531.b][medium][SRG-OS-000064-GPOS-00033]::[RHEL]Baseline"; + ContainsLine = "-a always,exit -F arch=b32 -S creat,open,openat,open_by_handle_at,truncate,ftruncate -F exit=-EACCES -F auid>=1000 -F auid!=unset -k access"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*creat,open,openat,open_by_handle_at,truncate,ftruncate\\s*-F\\s*exit\\s*=\\s*-EACCES\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*access"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource54ref +{ +ResourceID = "[nxFileLine][V-204531.c][medium][SRG-OS-000064-GPOS-00033]::[RHEL]Baseline"; + ContainsLine = "-a always,exit -F arch=b64 -S creat,open,openat,open_by_handle_at,truncate,ftruncate -F exit=-EPERM -F auid>=1000 -F auid!=unset -k access"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*creat,open,openat,open_by_handle_at,truncate,ftruncate\\s*-F\\s*exit\\s*=\\s*-EPERM\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*access"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource55ref +{ +ResourceID = "[nxFileLine][V-204531.d][medium][SRG-OS-000064-GPOS-00033]::[RHEL]Baseline"; + ContainsLine = "-a always,exit -F arch=b64 -S creat,open,openat,open_by_handle_at,truncate,ftruncate -F exit=-EACCES -F auid>=1000 -F auid!=unset -k access"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*creat,open,openat,open_by_handle_at,truncate,ftruncate\\s*-F\\s*exit\\s*=\\s*-EACCES\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*access"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource56ref +{ +ResourceID = "[nxFileLine][V-204536][medium][SRG-OS-000392-GPOS-00172]::[RHEL]Baseline"; + ContainsLine = "-a always,exit -F path=/usr/sbin/semanage -F perm=x -F auid>=1000 -F auid!=unset -k privileged-priv_change"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/sbin/semanage\\s*-F\\s*perm\\s*=\\s*x\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-priv_change"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource57ref +{ +ResourceID = "[nxFileLine][V-204537][medium][SRG-OS-000392-GPOS-00172]::[RHEL]Baseline"; + ContainsLine = "-a always,exit -F path=/usr/sbin/setsebool -F perm=x -F auid>=1000 -F auid!=unset -k privileged-priv_change"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/sbin/setsebool\\s*-F\\s*perm\\s*=\\s*x\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-priv_change"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource58ref +{ +ResourceID = "[nxFileLine][V-204538][medium][SRG-OS-000392-GPOS-00172]::[RHEL]Baseline"; + ContainsLine = "-a always,exit -F path=/usr/bin/chcon -F perm=x -F auid>=1000 -F auid!=unset -k privileged-priv_change"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/bin/chcon\\s*-F\\s*perm\\s*=\\s*x\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-priv_change"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource59ref +{ +ResourceID = "[nxFileLine][V-204539][medium][SRG-OS-000392-GPOS-00172]::[RHEL]Baseline"; + ContainsLine = "-a always,exit -F path=/usr/sbin/setfiles -F perm=x -F auid>=1000 -F auid!=unset -k privileged-priv_change"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/sbin/setfiles\\s*-F\\s*perm\\s*=\\s*x\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-priv_change"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource60ref +{ +ResourceID = "[nxFileLine][V-204540][medium][SRG-OS-000392-GPOS-00172]::[RHEL]Baseline"; + ContainsLine = "-w /var/run/faillock -p wa -k logins"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-w\\s*/var/run/faillock\\s*-p\\s*wa\\s*-k\\s*logins"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource61ref +{ +ResourceID = "[nxFileLine][V-204541][medium][SRG-OS-000392-GPOS-00172]::[RHEL]Baseline"; + ContainsLine = "-w /var/log/lastlog -p wa -k logins"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-w\\s*/var/log/lastlog\\s*-p\\s*wa\\s*-k\\s*logins"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource62ref +{ +ResourceID = "[nxFileLine][V-204542][medium][SRG-OS-000042-GPOS-00020]::[RHEL]Baseline"; + ContainsLine = "-a always,exit -F path=/usr/bin/passwd -F perm=x -F auid>=1000 -F auid!=unset -k privileged-passwd"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/bin/passwd\\s*-F\\s*perm\\s*=\\s*x\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-passwd"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource63ref +{ +ResourceID = "[nxFileLine][V-204543][medium][SRG-OS-000042-GPOS-00020]::[RHEL]Baseline"; + ContainsLine = "-a always,exit -F path=/usr/sbin/unix_chkpwd -F perm=x -F auid>=1000 -F auid!=unset -k privileged-passwd"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/sbin/unix_chkpwd\\s*-F\\s*perm\\s*=\\s*x\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-passwd"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource64ref +{ +ResourceID = "[nxFileLine][V-204544][medium][SRG-OS-000042-GPOS-00020]::[RHEL]Baseline"; + ContainsLine = "-a always,exit -F path=/usr/bin/gpasswd -F perm=x -F auid>=1000 -F auid!=unset -k privileged-passwd"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/bin/gpasswd\\s*-F\\s*perm\\s*=\\s*x\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-passwd"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource65ref +{ +ResourceID = "[nxFileLine][V-204545][medium][SRG-OS-000042-GPOS-00020]::[RHEL]Baseline"; + ContainsLine = "-a always,exit -F path=/usr/bin/chage -F perm=x -F auid>=1000 -F auid!=unset -k privileged-passwd"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/bin/chage\\s*-F\\s*perm\\s*=\\s*x\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-passwd"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource66ref +{ +ResourceID = "[nxFileLine][V-204546][medium][SRG-OS-000042-GPOS-00020]::[RHEL]Baseline"; + ContainsLine = "-a always,exit -F path=/usr/sbin/userhelper -F perm=x -F auid>=1000 -F auid!=unset -k privileged-passwd"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/sbin/userhelper\\s*-F\\s*perm\\s*=\\s*x\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-passwd"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource67ref +{ +ResourceID = "[nxFileLine][V-204547][medium][SRG-OS-000037-GPOS-00015]::[RHEL]Baseline"; + ContainsLine = "-a always,exit -F path=/usr/bin/su -F perm=x -F auid>=1000 -F auid!=unset -k privileged-priv_change"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/bin/su\\s*-F\\s*perm\\s*=\\s*x\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-priv_change"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource68ref +{ +ResourceID = "[nxFileLine][V-204548][medium][SRG-OS-000037-GPOS-00015]::[RHEL]Baseline"; + ContainsLine = "-a always,exit -F path=/usr/bin/sudo -F perm=x -F auid>=1000 -F auid!=unset -k privileged-priv_change"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/bin/sudo\\s*-F\\s*perm\\s*=\\s*x\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-priv_change"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource69ref +{ +ResourceID = "[nxFileLine][V-204549.a][medium][SRG-OS-000037-GPOS-00015]::[RHEL]Baseline"; + ContainsLine = "-w /etc/sudoers -p wa -k privileged-actions"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-w /etc/sudoers -p wa -k privileged-actions"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource70ref +{ +ResourceID = "[nxFileLine][V-204549.b][medium][SRG-OS-000037-GPOS-00015]::[RHEL]Baseline"; + ContainsLine = "-w /etc/sudoers.d/ -p wa -k privileged-actions"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-w /etc/sudoers.d/ -p wa -k privileged-actions"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource71ref +{ +ResourceID = "[nxFileLine][V-204550][medium][SRG-OS-000037-GPOS-00015]::[RHEL]Baseline"; + ContainsLine = "-a always,exit -F path=/usr/bin/newgrp -F perm=x -F auid>=1000 -F auid!=unset -k privileged-priv_change"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/bin/newgrp\\s*-F\\s*perm\\s*=\\s*x\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-priv_change"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource72ref +{ +ResourceID = "[nxFileLine][V-204551][medium][SRG-OS-000037-GPOS-00015]::[RHEL]Baseline"; + ContainsLine = "-a always,exit -F path=/usr/bin/chsh -F perm=x -F auid>=1000 -F auid!=unset -k privileged-priv_change"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/bin/chsh\\s*-F\\s*perm\\s*=\\s*x\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-priv_change"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource73ref +{ +ResourceID = "[nxFileLine][V-204552.a][medium][SRG-OS-000042-GPOS-00020]::[RHEL]Baseline"; + ContainsLine = "-a always,exit -F arch=b32 -S mount -F auid>=1000 -F auid!=unset -k privileged-mount"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*mount\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-mount"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource74ref +{ +ResourceID = "[nxFileLine][V-204552.b][medium][SRG-OS-000042-GPOS-00020]::[RHEL]Baseline"; + ContainsLine = "-a always,exit -F arch=b64 -S mount -F auid>=1000 -F auid!=unset -k privileged-mount"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*mount\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-mount"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource75ref +{ +ResourceID = "[nxFileLine][V-204552.c][medium][SRG-OS-000042-GPOS-00020]::[RHEL]Baseline"; + ContainsLine = "-a always,exit -F path=/usr/bin/mount -F perm=x -F auid>=1000 -F auid!=unset -k privileged-mount"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/bin/mount\\s*-F\\s*perm\\s*=\\s*x\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-mount"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource76ref +{ +ResourceID = "[nxFileLine][V-204553][medium][SRG-OS-000042-GPOS-00020]::[RHEL]Baseline"; + ContainsLine = "-a always,exit -F path=/usr/bin/umount -F perm=x -F auid>=1000 -F auid!=unset -k privileged-mount"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/bin/umount\\s*-F\\s*perm\\s*=\\s*x\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-mount"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource77ref +{ +ResourceID = "[nxFileLine][V-204554][medium][SRG-OS-000042-GPOS-00020]::[RHEL]Baseline"; + ContainsLine = "-a always,exit -F path=/usr/sbin/postdrop -F perm=x -F auid>=1000 -F auid!=unset -k privileged-postfix"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/sbin/postdrop\\s*-F\\s*perm\\s*=\\s*x\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-postfix"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource78ref +{ +ResourceID = "[nxFileLine][V-204555][medium][SRG-OS-000042-GPOS-00020]::[RHEL]Baseline"; + ContainsLine = "-a always,exit -F path=/usr/sbin/postqueue -F perm=x -F auid>=1000 -F auid!=unset -k privileged-postfix"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/sbin/postqueue\\s*-F\\s*perm\\s*=\\s*x\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-postfix"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource79ref +{ +ResourceID = "[nxFileLine][V-204556][medium][SRG-OS-000042-GPOS-00020]::[RHEL]Baseline"; + ContainsLine = "-a always,exit -F path=/usr/libexec/openssh/ssh-keysign -F perm=x -F auid>=1000 -F auid!=unset -k privileged-ssh"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/libexec/openssh/ssh-keysign\\s*-F\\s*perm\\s*=\\s*x\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-ssh"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource80ref +{ +ResourceID = "[nxFileLine][V-204557][medium][SRG-OS-000042-GPOS-00020]::[RHEL]Baseline"; + ContainsLine = "-a always,exit -F path=/usr/bin/crontab -F perm=x -F auid>=1000 -F auid!=unset -k privileged-cron"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/bin/crontab\\s*-F\\s*perm\\s*=\\s*x\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-cron"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource81ref +{ +ResourceID = "[nxFileLine][V-204558][medium][SRG-OS-000471-GPOS-00215]::[RHEL]Baseline"; + ContainsLine = "-a always,exit -F path=/usr/sbin/pam_timestamp_check -F perm=x -F auid>=1000 -F auid!=unset -k privileged-pam"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/sbin/pam_timestamp_check\\s*-F\\s*perm\\s*=\\s*x\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-pam"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource82ref +{ +ResourceID = "[nxFileLine][V-204559.a][medium][SRG-OS-000471-GPOS-00216]::[RHEL]Baseline"; + ContainsLine = "-a always,exit -F arch=b32 -S create_module -F auid>=1000 -F auid!=unset -k module-change"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*create_module\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*module-change"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource83ref +{ +ResourceID = "[nxFileLine][V-204559.b][medium][SRG-OS-000471-GPOS-00216]::[RHEL]Baseline"; + ContainsLine = "-a always,exit -F arch=b64 -S create_module -F auid>=1000 -F auid!=unset -k module-change"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*create_module\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*module-change"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource84ref +{ +ResourceID = "[nxFileLine][V-204560.a][medium][SRG-OS-000471-GPOS-00216]::[RHEL]Baseline"; + ContainsLine = "-a always,exit -F arch=b32 -S init_module,finit_module -F auid>=1000 -F auid!=unset -k modulechange"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*init_module,finit_module\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*modulechange"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource85ref +{ +ResourceID = "[nxFileLine][V-204560.b][medium][SRG-OS-000471-GPOS-00216]::[RHEL]Baseline"; + ContainsLine = "-a always,exit -F arch=b64 -S init_module,finit_module -F auid>=1000 -F auid!=unset -k modulechange"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*init_module,finit_module\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*modulechange"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource86ref +{ +ResourceID = "[nxFileLine][V-204562.a][medium][SRG-OS-000471-GPOS-00216]::[RHEL]Baseline"; + ContainsLine = "-a always,exit -F arch=b32 -S delete_module -F auid>=1000 -F auid!=unset -k module-change"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*delete_module\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*module-change"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource87ref +{ +ResourceID = "[nxFileLine][V-204562.b][medium][SRG-OS-000471-GPOS-00216]::[RHEL]Baseline"; + ContainsLine = "-a always,exit -F arch=b64 -S delete_module -F auid>=1000 -F auid!=unset -k module-change"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*delete_module\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*module-change"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource88ref +{ +ResourceID = "[nxFileLine][V-204563][medium][SRG-OS-000471-GPOS-00216]::[RHEL]Baseline"; + ContainsLine = "-a always,exit -F path=/usr/bin/kmod -F perm=x -F auid>=1000 -F auid!=unset -k modules"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/bin/kmod\\s*-F\\s*perm\\s*=\\s*x\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*modules"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource89ref +{ +ResourceID = "[nxFileLine][V-204564][medium][SRG-OS-000004-GPOS-00004]::[RHEL]Baseline"; + ContainsLine = "-w /etc/passwd -p wa -k identity"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-w\\s*/etc/passwd\\s*-p\\s*wa\\s*-k\\s*identity"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource90ref +{ +ResourceID = "[nxFileLine][V-204565][medium][SRG-OS-000004-GPOS-00004]::[RHEL]Baseline"; + ContainsLine = "-w /etc/group -p wa -k identity"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-w\\s*/etc/group\\s*-p\\s*wa\\s*-k\\s*identity"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource91ref +{ +ResourceID = "[nxFileLine][V-204566][medium][SRG-OS-000004-GPOS-00004]::[RHEL]Baseline"; + ContainsLine = "-w /etc/gshadow -p wa -k identity"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-w\\s*/etc/gshadow\\s*-p\\s*wa\\s*-k\\s*identity"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource92ref +{ +ResourceID = "[nxFileLine][V-204567][medium][SRG-OS-000004-GPOS-00004]::[RHEL]Baseline"; + ContainsLine = "-w /etc/shadow -p wa -k identity"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-w\\s*/etc/shadow\\s*-p\\s*wa\\s*-k\\s*identity"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource93ref +{ +ResourceID = "[nxFileLine][V-204568][medium][SRG-OS-000004-GPOS-00004]::[RHEL]Baseline"; + ContainsLine = "-w /etc/security/opasswd -p wa -k identity"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-w\\s*/etc/security/opasswd\\s*-p\\s*wa\\s*-k\\s*identity"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource94ref +{ +ResourceID = "[nxFileLine][V-204572.a][medium][SRG-OS-000466-GPOS-00210]::[RHEL]Baseline"; + ContainsLine = "-a always,exit -F arch=b32 -S unlink,unlinkat,rename,renameat,rmdir -F auid>=1000 -F auid!=unset -k delete"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*unlink,unlinkat,rename,renameat,rmdir\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*delete"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource95ref +{ +ResourceID = "[nxFileLine][V-204572.b][medium][SRG-OS-000466-GPOS-00210]::[RHEL]Baseline"; + ContainsLine = "-a always,exit -F arch=b64 -S unlink,unlinkat,rename,renameat,rmdir -F auid>=1000 -F auid!=unset -k delete"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*unlink,unlinkat,rename,renameat,rmdir\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*delete"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource96ref +{ +ResourceID = "[nxFileLine][V-204578][medium][SRG-OS-000033-GPOS-00014]::[RHEL]Baseline"; + ContainsLine = "Ciphers aes256-ctr,aes192-ctr,aes128-ctr"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/ssh/sshd_config"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "^#\\s*Ciphers.*|^\\s*Ciphers\\s*aes128-ctr.*|^\\s*Ciphers\\s*aes192-ctr.*"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource97ref +{ +ResourceID = "[nxFileLine][V-204579.b][medium][SRG-OS-000163-GPOS-00072]::[RHEL]Baseline"; + ContainsLine = "declare -xr TMOUT=900"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/profile.d/tmout.sh"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "^\\s*TMOUT\\s*=\\s*[0-8]?[0-9]?[0-9]?$|^#\\s*TMOUT.*"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource98ref +{ +ResourceID = "[nxFileLine][V-204579.c][medium][SRG-OS-000163-GPOS-00072]::[RHEL]Baseline"; + ContainsLine = "declare -xr TMOUT=900"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/bashrc"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "^\\s*TMOUT\\s*=\\s*[0-8]?[0-9]?[0-9]?$|^#\\s*TMOUT.*"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource99ref +{ +ResourceID = "[nxFileLine][V-204579.d][medium][SRG-OS-000163-GPOS-00072]::[RHEL]Baseline"; + ContainsLine = "declare -xr TMOUT=900"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/profile"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "^\\s*TMOUT\\s*=\\s*[0-8]?[0-9]?[0-9]?$|^#\\s*TMOUT.*"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource100ref +{ +ResourceID = "[nxFileLine][V-204580][medium][SRG-OS-000023-GPOS-00006]::[RHEL]Baseline"; + ContainsLine = "banner /etc/issue"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/ssh/sshd_config"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*banner\\s*/etc/issue"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource101ref +{ +ResourceID = "[nxFileLine][V-204587][medium][SRG-OS-000163-GPOS-00072]::[RHEL]Baseline"; + ContainsLine = "ClientAliveInterval 600"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/ssh/sshd_config"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "^\\s*ClientAliveInterval\\s*[0-5]?[0-9]?[0-9]?\\s*$|^#\\s*ClientAliveInterval.*|^\\s*ClientAliveInterval\\s*$"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource102ref +{ +ResourceID = "[nxFileLine][V-204588][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; + ContainsLine = "RhostsRSAAuthentication no"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/ssh/sshd_config"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "^#\\s*RhostsRSAAuthentication.*$|^RhostsRSAAuthentication\\s*(?!no\\b)\\w*$"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource103ref +{ +ResourceID = "[nxFileLine][V-204589][medium][SRG-OS-000163-GPOS-00072]::[RHEL]Baseline"; + ContainsLine = "ClientAliveCountMax 0"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/ssh/sshd_config"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "^#\\s*ClientAliveCountMax.*$|^ClientAliveCountMax\\s*(?!0\\b)\\w*$"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource104ref +{ +ResourceID = "[nxFileLine][V-204590][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; + ContainsLine = "IgnoreRhosts yes"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/ssh/sshd_config"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "^#\\s*IgnoreRhosts.*$|^IgnoreRhosts\\s*(?!yes\\b)\\w*$"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource105ref +{ +ResourceID = "[nxFileLine][V-204591][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; + ContainsLine = "PrintLastLog yes"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/ssh/sshd_config"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "^#\\s*PrintLastLog.*$|^PrintLastLog\\s*(?!yes\\b)\\w*$"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource106ref +{ +ResourceID = "[nxFileLine][V-204592][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; + ContainsLine = "PermitRootLogin no"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/ssh/sshd_config"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "^#\\s*PermitRootLogin.*$|^PermitRootLogin\\s*(?!no\\b)\\w*$"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource107ref +{ +ResourceID = "[nxFileLine][V-204593][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; + ContainsLine = "IgnoreUserKnownHosts yes"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/ssh/sshd_config"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "^#\\s*IgnoreUserKnownHosts.*$|^IgnoreUserKnownHosts\\s*(?!yes\\b)\\w*$"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource108ref +{ +ResourceID = "[nxFileLine][V-204594][high][SRG-OS-000074-GPOS-00042]::[RHEL]Baseline"; + ContainsLine = "Protocol 2"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/ssh/sshd_config"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "^#\\s*Protocol.*$|^Protocol\\s*(?!2\\b)\\w*$"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource109ref +{ +ResourceID = "[nxFileLine][V-204595][medium][SRG-OS-000250-GPOS-00093]::[RHEL]Baseline"; + ContainsLine = "MACs hmac-sha2-512,hmac-sha2-256"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/ssh/sshd_config"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*MACs.*|\\s*MACs\\s*hmac-(?!sha2-512).*"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource110ref +{ +ResourceID = "[nxFileLine][V-204598][medium][SRG-OS-000364-GPOS-00151]::[RHEL]Baseline"; + ContainsLine = "GSSAPIAuthentication no"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/ssh/sshd_config"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "^#\\s*GSSAPIAuthentication.*$|^GSSAPIAuthentication\\s*(?!no\\b)\\w*$"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource111ref +{ +ResourceID = "[nxFileLine][V-204599][medium][SRG-OS-000364-GPOS-00151]::[RHEL]Baseline"; + ContainsLine = "KerberosAuthentication no"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/ssh/sshd_config"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "^#\\s*KerberosAuthentication.*$|^KerberosAuthentication\\s*(?!no\\b)\\w*$"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource112ref +{ +ResourceID = "[nxFileLine][V-204600][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; + ContainsLine = "StrictModes yes"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/ssh/sshd_config"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "^#\\s*StrictModes.*$|^StrictModes\\s*(?!yes\\b)\\w*$"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource113ref +{ +ResourceID = "[nxFileLine][V-204601][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; + ContainsLine = "UsePrivilegeSeparation sandbox"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/ssh/sshd_config"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "^#\\s*UsePrivilegeSeparation.*$|^UsePrivilegeSeparation\\s*(?!sandbox\\b)\\w*$"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource114ref +{ +ResourceID = "[nxFileLine][V-204602][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; + ContainsLine = "Compression delayed"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/ssh/sshd_config"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "^#\\s*Compression.*$|^Compression\\s*(?!delayed\\b)\\w*$"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource115ref +{ +ResourceID = "[nxFileLine][V-204622][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; + ContainsLine = "X11Forwarding no"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/ssh/sshd_config"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "^#\\s*X11Forwarding.*$|^X11Forwarding\\s*(?!no\\b)\\w*$"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource116ref +{ +ResourceID = "[nxFileLine][V-233307][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; + ContainsLine = "X11UseLocalhost yes"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/ssh/sshd_config"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*X11UseLocalhost\\s*yes"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource117ref +{ +ResourceID = "[nxFileLine][V-255925][medium][SRG-OS-000033-GPOS-00014]::[RHEL]Baseline"; + ContainsLine = "KexAlgorithms ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/ssh/sshd_config"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*KexAlgorithms\\s*ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxServiceResource as $MSFT_nxServiceResource1ref +{ +ResourceID = "[nxService][V-204451][medium][SRG-OS-000114-GPOS-00059]::[RHEL]Baseline"; + Controller = "systemd"; + Enabled = False; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxService.ps1::13::9::nxService"; + Name = "autofs"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxServiceResource as $MSFT_nxServiceResource2ref +{ +ResourceID = "[nxService][V-204492][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; + Controller = "systemd"; + Enabled = False; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxService.ps1::13::9::nxService"; + Name = "kdump"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxServiceResource as $MSFT_nxServiceResource3ref +{ +ResourceID = "[nxService][V-204503][medium][SRG-OS-000038-GPOS-00016]::[RHEL]Baseline"; + Controller = "systemd"; + State = "Running"; + Enabled = True; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxService.ps1::22::9::nxService"; + Name = "auditd"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxServiceResource as $MSFT_nxServiceResource4ref +{ +ResourceID = "[nxService][V-204586][medium][SRG-OS-000423-GPOS-00187]::[RHEL]Baseline"; + Controller = "systemd"; + State = "Running"; + Enabled = True; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxService.ps1::22::9::nxService"; + Name = "sshd"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxServiceResource as $MSFT_nxServiceResource5ref +{ +ResourceID = "[nxService][V-204604.b][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; + Controller = "systemd"; + State = "Running"; + Enabled = True; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxService.ps1::22::9::nxService"; + Name = "firewalld"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxScriptResource as $MSFT_nxScriptResource1ref +{ +ResourceID = "[nxScript][V-204399.b][medium][[Skip] SRG-OS-000029-GPOS-00010]::[RHEL]Baseline"; + GetScript = "#!/bin/bash\necho [V-204399.b][medium][[Skip] SRG-OS-000029-GPOS-00010]"; + TestScript = "#!/bin/bash\nexit 0"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxScript.skip.ps1::10::5::nxScript"; + SetScript = "#!/bin/bash"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxScriptResource as $MSFT_nxScriptResource2ref +{ +ResourceID = "[nxScript][V-204400][medium][[Skip] SRG-OS-000029-GPOS-00010]::[RHEL]Baseline"; + GetScript = "#!/bin/bash\necho [V-204400][medium][[Skip] SRG-OS-000029-GPOS-00010]"; + TestScript = "#!/bin/bash\nexit 0"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxScript.skip.ps1::10::5::nxScript"; + SetScript = "#!/bin/bash"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxScriptResource as $MSFT_nxScriptResource3ref +{ +ResourceID = "[nxScript][V-204403][medium][[Skip] SRG-OS-000029-GPOS-00010]::[RHEL]Baseline"; + GetScript = "#!/bin/bash\necho [V-204403][medium][[Skip] SRG-OS-000029-GPOS-00010]"; + TestScript = "#!/bin/bash\nexit 0"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxScript.skip.ps1::10::5::nxScript"; + SetScript = "#!/bin/bash"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxScriptResource as $MSFT_nxScriptResource4ref +{ +ResourceID = "[nxScript][V-204509][medium][[Skip] SRG-OS-000342-GPOS-00133]::[RHEL]Baseline"; + GetScript = "#!/bin/bash\necho [V-204509][medium][[Skip] SRG-OS-000342-GPOS-00133]"; + TestScript = "#!/bin/bash\nexit 0"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxScript.skip.ps1::10::5::nxScript"; + SetScript = "#!/bin/bash"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxScriptResource as $MSFT_nxScriptResource5ref +{ +ResourceID = "[nxScript][V-204513][medium][[Skip] SRG-OS-000343-GPOS-00134]::[RHEL]Baseline"; + GetScript = "#!/bin/bash\necho [V-204513][medium][[Skip] SRG-OS-000343-GPOS-00134]"; + TestScript = "#!/bin/bash\nexit 0"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxScript.skip.ps1::10::5::nxScript"; + SetScript = "#!/bin/bash"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxScriptResource as $MSFT_nxScriptResource6ref +{ +ResourceID = "[nxScript][V-204623][medium][[Skip] SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; + GetScript = "#!/bin/bash\necho [V-204623][medium][[Skip] SRG-OS-000480-GPOS-00227]"; + TestScript = "#!/bin/bash\nexit 0"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxScript.skip.ps1::10::5::nxScript"; + SetScript = "#!/bin/bash"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxScriptResource as $MSFT_nxScriptResource7ref +{ +ResourceID = "[nxScript][V-244557][medium][[Skip] SRG-OS-000080-GPOS-00048]::[RHEL]Baseline"; + GetScript = "#!/bin/bash\necho [V-244557][medium][[Skip] SRG-OS-000080-GPOS-00048]"; + TestScript = "#!/bin/bash\nexit 0"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxScript.skip.ps1::10::5::nxScript"; + SetScript = "#!/bin/bash"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxScriptResource as $MSFT_nxScriptResource8ref +{ +ResourceID = "[nxScript][V-244558][medium][[Skip] SRG-OS-000080-GPOS-00048]::[RHEL]Baseline"; + GetScript = "#!/bin/bash\necho [V-244558][medium][[Skip] SRG-OS-000080-GPOS-00048]"; + TestScript = "#!/bin/bash\nexit 0"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxScript.skip.ps1::10::5::nxScript"; + SetScript = "#!/bin/bash"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxScriptResource as $MSFT_nxScriptResource9ref +{ +ResourceID = "[nxScript][V-204399.a][medium][[Skip] SRG-OS-000029-GPOS-00010]::[RHEL]Baseline"; + GetScript = "#!/bin/bash\necho [V-204399.a][medium][[Skip] SRG-OS-000029-GPOS-00010]"; + TestScript = "#!/bin/bash\nexit 0"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxScript.skip.ps1::10::5::nxScript"; + SetScript = "#!/bin/bash"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxScriptResource as $MSFT_nxScriptResource10ref +{ +ResourceID = "[nxScript][V-255926][medium][[Skip] SRG-OS-000029-GPOS-00010]::[RHEL]Baseline"; + GetScript = "#!/bin/bash\necho [V-255926][medium][[Skip] SRG-OS-000029-GPOS-00010]"; + TestScript = "#!/bin/bash\nexit 0"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxScript.skip.ps1::10::5::nxScript"; + SetScript = "#!/bin/bash"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of OMI_ConfigurationDocument + + { + Version="2.0.0"; + + MinimumCompatibleVersion = "1.0.0"; + + CompatibleVersionAdditionalProperties= {"Omi_BaseResource:ConfigurationName"}; + + Author="Microsoft"; + + GenerationDate="03/09/2023 14:17:33"; + + GenerationHost="Microsoft"; + + Name="LinuxBaseLine"; + + }; + diff --git a/stig/linux/config/RHEL75.mof b/stig/linux/config/RHEL75.mof index 1a03f1f..aeddc62 100644 --- a/stig/linux/config/RHEL75.mof +++ b/stig/linux/config/RHEL75.mof @@ -1,2118 +1,1829 @@ -/* -@TargetNode='RHEL75' -@GeneratedBy=Microsoft -@GenerationDate=06/30/2022 11:38:45 -@GenerationHost=Microsoft -*/ - -instance of MSFT_nxPackageResource as $MSFT_nxPackageResource1ref -{ -ResourceID = "[nxPackage][V-204442][high][SRG-OS-000095-GPOS-00049]::[RHEL]Baseline"; - Ensure = "Absent"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxPackage.ps1::8::5::nxPackage"; - Name = "rsh-server"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxPackageResource as $MSFT_nxPackageResource2ref -{ -ResourceID = "[nxPackage][V-204443][high][SRG-OS-000095-GPOS-00049]::[RHEL]Baseline"; - Ensure = "Absent"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxPackage.ps1::8::5::nxPackage"; - Name = "ypserv"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxPackageResource as $MSFT_nxPackageResource3ref -{ -ResourceID = "[nxPackage][V-204497][high][SRG-OS-000033-GPOS-00014]::[RHEL]Baseline"; - Ensure = "Present"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxPackage.ps1::8::5::nxPackage"; - Name = "dracut-fips"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxPackageResource as $MSFT_nxPackageResource4ref -{ -ResourceID = "[nxPackage][V-204498][low][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; - Ensure = "Present"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxPackage.ps1::8::5::nxPackage"; - Name = "aide"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxPackageResource as $MSFT_nxPackageResource5ref -{ -ResourceID = "[nxPackage][V-204502][high][SRG-OS-000095-GPOS-00049]::[RHEL]Baseline"; - Ensure = "Absent"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxPackage.ps1::8::5::nxPackage"; - Name = "telnet-server"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxPackageResource as $MSFT_nxPackageResource6ref -{ -ResourceID = "[nxPackage][V-204585][medium][SRG-OS-000423-GPOS-00187]::[RHEL]Baseline"; - Ensure = "Present"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxPackage.ps1::8::5::nxPackage"; - Name = "openssh-server"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxPackageResource as $MSFT_nxPackageResource7ref -{ -ResourceID = "[nxPackage][V-204604.a][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; - Ensure = "Present"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxPackage.ps1::8::5::nxPackage"; - Name = "firewalld"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxPackageResource as $MSFT_nxPackageResource8ref -{ -ResourceID = "[nxPackage][V-204620][high][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; - Ensure = "Absent"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxPackage.ps1::8::5::nxPackage"; - Name = "vsftpd"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxPackageResource as $MSFT_nxPackageResource9ref -{ -ResourceID = "[nxPackage][V-204621][high][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; - Ensure = "Absent"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxPackage.ps1::8::5::nxPackage"; - Name = "tftp-server"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxPackageResource as $MSFT_nxPackageResource10ref -{ -ResourceID = "[nxPackage][V-204631][medium][SRG-OS-000375-GPOS-00160]::[RHEL]Baseline"; - Ensure = "Present"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxPackage.ps1::8::5::nxPackage"; - Name = "pam_pkcs11"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileResource as $MSFT_nxFileResource1ref -{ -ResourceID = "[nxFile][V-204395][medium][SRG-OS-000023-GPOS-00006]::[RHEL]Baseline"; - Contents = "You are accessing a U.S. Government (USG) Information System (IS) that is provided for USG-authorized use only.\n\nBy using this IS (which includes any device attached to this IS), you consent to the following conditions:\n\n-The USG routinely intercepts and monitors communications on this IS for purposes including, but not limited to, penetration testing, COMSEC monitoring, network operations and defense, personnel misconduct (PM), law enforcement (LE), and counterintelligence (CI) investigations.\n\n-At any time, the USG may inspect and seize data stored on this IS.\n\n-Communications using, or data stored on, this IS are not private, are subject to routine monitoring, interception, and search, and may be disclosed or used for any USG-authorized purpose.\n\n-This IS includes security measures (e.g., authentication and access controls) to protect USG interests--not for your personal benefit or privacy.\n\n-Notwithstanding the above, using this IS does not constitute consent to PM, LE or CI investigative searching or monitoring of the content of privileged communications, or work product, related to personal representation or services by attorneys, psychotherapists, or clergy, and their assistants. Such communications and work product are private and confidential. See User Agreement for details."; - DestinationPath = "/etc/issue"; - ModuleName = "nx"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; - ModuleVersion = "1.0"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileResource as $MSFT_nxFileResource2ref -{ -ResourceID = "[nxFile][V-204449.a][medium][SRG-OS-000114-GPOS-00059]::[RHEL]Baseline"; - Contents = ""; - DestinationPath = "/etc/modprobe.d/usb-storage.conf"; - ModuleName = "nx"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; - ModuleVersion = "1.0"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileResource as $MSFT_nxFileResource3ref -{ -ResourceID = "[nxFile][V-204449.b][medium][SRG-OS-000114-GPOS-00059]::[RHEL]Baseline"; - Contents = ""; - DestinationPath = "/etc/modprobe.d/blacklist.conf"; - ModuleName = "nx"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; - ModuleVersion = "1.0"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileResource as $MSFT_nxFileResource4ref -{ -ResourceID = "[nxFile][V-204450.a][medium][SRG-OS-000378-GPOS-00163]::[RHEL]Baseline"; - Contents = ""; - DestinationPath = "/etc/modprobe.d/dccp.conf"; - ModuleName = "nx"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; - ModuleVersion = "1.0"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileResource as $MSFT_nxFileResource5ref -{ -ResourceID = "[nxFile][V-204576][low][SRG-OS-000027-GPOS-00008]::[RHEL]Baseline"; - Contents = "* hard maxlogins 10"; - DestinationPath = "/etc/security/limits.d/204576-powerstig.conf"; - ModuleName = "nx"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; - ModuleVersion = "1.0"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileResource as $MSFT_nxFileResource6ref -{ -ResourceID = "[nxFile][V-204579.a][medium][SRG-OS-000163-GPOS-00072]::[RHEL]Baseline"; - Contents = ""; - DestinationPath = "/etc/profile.d/tmout.sh"; - ModuleName = "nx"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; - ModuleVersion = "1.0"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileResource as $MSFT_nxFileResource7ref -{ -ResourceID = "[nxFile][V-204584][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; - Contents = "kernel.randomize_va_space = 2"; - DestinationPath = "/etc/sysctl.d/204584-powerstig.conf"; - ModuleName = "nx"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; - ModuleVersion = "1.0"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileResource as $MSFT_nxFileResource8ref -{ -ResourceID = "[nxFile][V-204609][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; - Contents = "net.ipv4.conf.all.accept_source_route = 0"; - DestinationPath = "/etc/sysctl.d/204609-powerstig.conf"; - ModuleName = "nx"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; - ModuleVersion = "1.0"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileResource as $MSFT_nxFileResource9ref -{ -ResourceID = "[nxFile][V-204610][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; - Contents = "net.ipv4.conf.all.rp_filter = 1"; - DestinationPath = "/etc/sysctl.d/204610-powerstig.conf"; - ModuleName = "nx"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; - ModuleVersion = "1.0"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileResource as $MSFT_nxFileResource10ref -{ -ResourceID = "[nxFile][V-204611][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; - Contents = "net.ipv4.conf.default.rp_filter = 1"; - DestinationPath = "/etc/sysctl.d/204611-powerstig.conf"; - ModuleName = "nx"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; - ModuleVersion = "1.0"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileResource as $MSFT_nxFileResource11ref -{ -ResourceID = "[nxFile][V-204612][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; - Contents = "net.ipv4.conf.default.accept_source_route = 0"; - DestinationPath = "/etc/sysctl.d/204612-powerstig.conf"; - ModuleName = "nx"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; - ModuleVersion = "1.0"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileResource as $MSFT_nxFileResource12ref -{ -ResourceID = "[nxFile][V-204613][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; - Contents = "net.ipv4.icmp_echo_ignore_broadcasts = 1"; - DestinationPath = "/etc/sysctl.d/204613-powerstig.conf"; - ModuleName = "nx"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; - ModuleVersion = "1.0"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileResource as $MSFT_nxFileResource13ref -{ -ResourceID = "[nxFile][V-204614][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; - Contents = "net.ipv4.conf.default.accept_redirects = 0"; - DestinationPath = "/etc/sysctl.d/204614-powerstig.conf"; - ModuleName = "nx"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; - ModuleVersion = "1.0"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileResource as $MSFT_nxFileResource14ref -{ -ResourceID = "[nxFile][V-204615][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; - Contents = "net.ipv4.conf.all.accept_redirects = 0"; - DestinationPath = "/etc/sysctl.d/204615-powerstig.conf"; - ModuleName = "nx"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; - ModuleVersion = "1.0"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileResource as $MSFT_nxFileResource15ref -{ -ResourceID = "[nxFile][V-204616][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; - Contents = "net.ipv4.conf.default.send_redirects = 0"; - DestinationPath = "/etc/sysctl.d/204616-powerstig.conf"; - ModuleName = "nx"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; - ModuleVersion = "1.0"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileResource as $MSFT_nxFileResource16ref -{ -ResourceID = "[nxFile][V-204617][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; - Contents = "net.ipv4.conf.all.send_redirects = 0"; - DestinationPath = "/etc/sysctl.d/204617-powerstig.conf"; - ModuleName = "nx"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; - ModuleVersion = "1.0"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileResource as $MSFT_nxFileResource17ref -{ -ResourceID = "[nxFile][V-204625][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; - Contents = "net.ipv4.ip_forward = 0"; - DestinationPath = "/etc/sysctl.d/204625-powerstig.conf"; - ModuleName = "nx"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; - ModuleVersion = "1.0"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileResource as $MSFT_nxFileResource18ref -{ -ResourceID = "[nxFile][V-204630][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; - Contents = "net.ipv6.conf.all.accept_source_route = 0"; - DestinationPath = "/etc/sysctl.d/204630-powerstig.conf"; - ModuleName = "nx"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; - ModuleVersion = "1.0"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileResource as $MSFT_nxFileResource19ref -{ -ResourceID = "[nxFile][V-237634.a][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; - Contents = "Defaults !targetpw"; - DestinationPath = "/etc/sudoers.d/237634a-powerstig.conf"; - ModuleName = "nx"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; - ModuleVersion = "1.0"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileResource as $MSFT_nxFileResource20ref -{ -ResourceID = "[nxFile][V-237634.b][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; - Contents = "Defaults !rootpw"; - DestinationPath = "/etc/sudoers.d/237634b-powerstig.conf"; - ModuleName = "nx"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; - ModuleVersion = "1.0"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileResource as $MSFT_nxFileResource21ref -{ -ResourceID = "[nxFile][V-237634.c][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; - Contents = "Defaults !runaspw"; - DestinationPath = "/etc/sudoers.d/237634c-powerstig.conf"; - ModuleName = "nx"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; - ModuleVersion = "1.0"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileResource as $MSFT_nxFileResource22ref -{ -ResourceID = "[nxFile][V-237635][medium][SRG-OS-000373-GPOS-00156]::[RHEL]Baseline"; - Contents = "Defaults timestamp_timeout=0"; - DestinationPath = "/etc/sudoers.d/237635-powerstig.conf"; - ModuleName = "nx"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; - ModuleVersion = "1.0"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileResource as $MSFT_nxFileResource23ref -{ -ResourceID = "[nxFile][V-250314][medium][SRG-OS-000324-GPOS-00125]::[RHEL]Baseline"; - Contents = "%wheel ALL=(ALL) TYPE=sysadm_t ROLE=sysadm_r ALL"; - DestinationPath = "/etc/sudoers.d/250314-powerstig.conf"; - ModuleName = "nx"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; - ModuleVersion = "1.0"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource1ref -{ -ResourceID = "[nxFileLine][V-204405][medium][SRG-OS-000069-GPOS-00037]::[RHEL]Baseline"; - ContainsLine = "password substack system-auth"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/pam.d/passwd"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "^\\s*password(?:\\t*|\\s*)substack\\tsystem-auth\\s*$|^#\\s*password\\s*substack\\s*system-auth.*"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource2ref -{ -ResourceID = "[nxFileLine][V-204407][medium][SRG-OS-000069-GPOS-00037]::[RHEL]Baseline"; - ContainsLine = "ucredit = -1"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/security/pwquality.conf"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "^#\\s*ucredit.*$|^ucredit\\s*=\\s*(?!-1\\b)\\w*$"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource3ref -{ -ResourceID = "[nxFileLine][V-204408][medium][SRG-OS-000070-GPOS-00038]::[RHEL]Baseline"; - ContainsLine = "lcredit = -1"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/security/pwquality.conf"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "^#\\s*lcredit.*$|^lcredit\\s*=\\s*(?!-1\\b)\\w*$"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource4ref -{ -ResourceID = "[nxFileLine][V-204409][medium][SRG-OS-000071-GPOS-00039]::[RHEL]Baseline"; - ContainsLine = "dcredit = -1"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/security/pwquality.conf"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "^#\\s*dcredit.*$|^dcredit\\s*=\\s*(?!-1\\b)\\w*$"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource5ref -{ -ResourceID = "[nxFileLine][V-204410][medium][SRG-OS-000266-GPOS-00101]::[RHEL]Baseline"; - ContainsLine = "ocredit=-1"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/security/pwquality.conf"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "^#\\s*ocredit.*$|^ocredit\\s*=\\s*(?!-1)\\w*$"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource6ref -{ -ResourceID = "[nxFileLine][V-204411][medium][SRG-OS-000072-GPOS-00040]::[RHEL]Baseline"; - ContainsLine = "difok = 8"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/security/pwquality.conf"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*difok\\s*=.*|^\\s*difok\\s*=\\s*(-|)[0-7]$"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource7ref -{ -ResourceID = "[nxFileLine][V-204412][medium][SRG-OS-000072-GPOS-00040]::[RHEL]Baseline"; - ContainsLine = "minclass = 4"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/security/pwquality.conf"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "^#\\s*minclass\\s*=.*|^\\s*minclass\\s*=\\s*(?!\\d{2,})[1-3]"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource8ref -{ -ResourceID = "[nxFileLine][V-204413][medium][SRG-OS-000072-GPOS-00040]::[RHEL]Baseline"; - ContainsLine = "maxrepeat = 3"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/security/pwquality.conf"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "^#\\s*maxrepeat\\s*=.*|^\\s*maxrepeat\\s*=\\s*(?:\\d{2,}|[4-9])"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource9ref -{ -ResourceID = "[nxFileLine][V-204414][medium][SRG-OS-000072-GPOS-00040]::[RHEL]Baseline"; - ContainsLine = "maxclassrepeat = 4"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/security/pwquality.conf"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "^#\\s*maxclassrepeat\\s*=.*|^\\s*maxclassrepeat\\s*=\\s*(?:\\d{2,}|[1-3|5-9])"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource10ref -{ -ResourceID = "[nxFileLine][V-204416][medium][SRG-OS-000073-GPOS-00041]::[RHEL]Baseline"; - ContainsLine = "ENCRYPT_METHOD SHA512"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/login.defs"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*ENCRYPT_METHOD\\s*SHA512"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource11ref -{ -ResourceID = "[nxFileLine][V-204418][medium][SRG-OS-000075-GPOS-00043]::[RHEL]Baseline"; - ContainsLine = "PASS_MIN_DAYS 1"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/login.defs"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "^\\s*PASS_MIN_DAYS\\s*[0]*$|#\\s*PASS_MIN_DAYS.*"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource12ref -{ -ResourceID = "[nxFileLine][V-204420][medium][SRG-OS-000076-GPOS-00044]::[RHEL]Baseline"; - ContainsLine = "PASS_MAX_DAYS 60"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/login.defs"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "^\\s*PASS_MAX_DAYS\\s*([6][1-9]|[7-9][0-9]|\\d{3,})$|#\\s*PASS_MAX_DAYS.*"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource13ref -{ -ResourceID = "[nxFileLine][V-204423][medium][SRG-OS-000078-GPOS-00046]::[RHEL]Baseline"; - ContainsLine = "minlen = 15"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/security/pwquality.conf"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "^\\s*minlen\\s*=\\s*([0-9]|[1][1-4])$|#\\s*minlen.*"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource14ref -{ -ResourceID = "[nxFileLine][V-204425][high][SRG-OS-000106-GPOS-00053]::[RHEL]Baseline"; - ContainsLine = "PermitEmptyPasswords no"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/ssh/sshd_config"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "^#\\s*PermitEmptyPasswords.*$|^PermitEmptyPasswords\\s*(?!no\\b)\\w*$"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource15ref -{ -ResourceID = "[nxFileLine][V-204426][medium][SRG-OS-000118-GPOS-00060]::[RHEL]Baseline"; - ContainsLine = "INACTIVE=35"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/default/useradd"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "^#\\s*INACTIVE\\s*=.*|^\\s*INACTIVE\\s*=\\s*(3[5-9]|[4-9]\\d+|\\d{3,})"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource16ref -{ -ResourceID = "[nxFileLine][V-204431][medium][SRG-OS-000480-GPOS-00226]::[RHEL]Baseline"; - ContainsLine = "FAIL_DELAY 4"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/login.defs"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "^#\\s*FAIL_DELAY.*|^FAIL_DELAY\\s*(?!\\d{2,})[1-3]"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource17ref -{ -ResourceID = "[nxFileLine][V-204434][medium][SRG-OS-000480-GPOS-00229]::[RHEL]Baseline"; - ContainsLine = "PermitUserEnvironment no"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/ssh/sshd_config"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "^#\\s*PermitUserEnvironment.*$|^PermitUserEnvironment\\s*(?!no\\b)\\w*$"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource18ref -{ -ResourceID = "[nxFileLine][V-204435][medium][SRG-OS-000480-GPOS-00229]::[RHEL]Baseline"; - ContainsLine = "HostbasedAuthentication no"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/ssh/sshd_config"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "^#\\s*HostbasedAuthentication.*$|^HostbasedAuthentication\\s*(?!no\\b)\\w*$"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource19ref -{ -ResourceID = "[nxFileLine][V-204447][high][SRG-OS-000366-GPOS-00153]::[RHEL]Baseline"; - ContainsLine = "gpgcheck=1"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/yum.conf"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*gpgcheck\\s*=\\s*1"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource20ref -{ -ResourceID = "[nxFileLine][V-204448][high][SRG-OS-000366-GPOS-00153]::[RHEL]Baseline"; - ContainsLine = "localpkg_gpgcheck=1"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/yum.conf"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*localpkg_gpgcheck\\s*=\\s*1"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource21ref -{ -ResourceID = "[nxFileLine][V-204449.c][medium][SRG-OS-000114-GPOS-00059]::[RHEL]Baseline"; - ContainsLine = "install usb-storage /bin/true"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/modprobe.d/usb-storage.conf"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*install\\s*usb-storage\\s*/bin/true"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource22ref -{ -ResourceID = "[nxFileLine][V-204449.d][medium][SRG-OS-000114-GPOS-00059]::[RHEL]Baseline"; - ContainsLine = "blacklist usb-storage"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/modprobe.d/blacklist.conf"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*blacklist\\s*usb-storage"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource23ref -{ -ResourceID = "[nxFileLine][V-204450.b][medium][SRG-OS-000378-GPOS-00163]::[RHEL]Baseline"; - ContainsLine = "install dccp /bin/true"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/modprobe.d/dccp.conf"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*install\\s*dccp\\s*/bin/true"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource24ref -{ -ResourceID = "[nxFileLine][V-204450.c][medium][SRG-OS-000378-GPOS-00163]::[RHEL]Baseline"; - ContainsLine = "blacklist dccp"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/modprobe.d/blacklist.conf"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*blacklist\\s*dccp"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource25ref -{ -ResourceID = "[nxFileLine][V-204452][low][SRG-OS-000437-GPOS-00194]::[RHEL]Baseline"; - ContainsLine = "clean_requirements_on_remove=1"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/yum.conf"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*clean_requirements_on_remove\\s*=\\s*1"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource26ref -{ -ResourceID = "[nxFileLine][V-204453][medium][SRG-OS-000445-GPOS-00199]::[RHEL]Baseline"; - ContainsLine = "SELINUX=enforcing"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/selinux/config"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "^#\\s*SELINUX.*$|^SELINUX\\s*=\\s*(?!enforcing)\\w*$"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource27ref -{ -ResourceID = "[nxFileLine][V-204454][medium][SRG-OS-000445-GPOS-00199]::[RHEL]Baseline"; - ContainsLine = "SELINUXTYPE=targeted"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/selinux/config"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "^#\\s*SELINUXTYPE.*$|^SELINUXTYPE\\s*=\\s*(?!targeted\\b)\\w*$"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource28ref -{ -ResourceID = "[nxFileLine][V-204457][medium][SRG-OS-000480-GPOS-00228]::[RHEL]Baseline"; - ContainsLine = "UMASK 077"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/login.defs"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "^\\s*UMASK(?!\\s077\\b)\\s*\\d*\\s*$|^#\\s*UMASK.*"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource29ref -{ -ResourceID = "[nxFileLine][V-204466][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; - ContainsLine = "CREATE_HOME yes"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/login.defs"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "^#\\s*CREATE_HOME.*$|^CREATE_HOME\\s*(?!yes\\b)\\w*$|^CREATE_HOME\\t.*"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource30ref -{ -ResourceID = "[nxFileLine][V-204504][medium][SRG-OS-000046-GPOS-00022]::[RHEL]Baseline"; - ContainsLine = "-f 2"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "^#\\s*-f\\s+2|^\\s*-f\\s*1"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileResource as $MSFT_nxFileResource24ref -{ -SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::29::9::nxFile"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - ResourceID = "[nxFile][V-204506.a][medium][SRG-OS-000342-GPOS-00133]::[RHEL]Baseline"; - DestinationPath = "/etc/audisp/plugins.d/au-remote.conf"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource31ref -{ -ResourceID = "[nxFileLine][V-204506.a][medium][SRG-OS-000342-GPOS-00133]::[RHEL]Baseline"; - ContainsLine = "active = yes"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audisp/plugins.d/au-remote.conf"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "\\s*active\\s*=\\s*no|active=yes|#\\s*active\\s*=.*"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource32ref -{ -ResourceID = "[nxFileLine][V-204506.b][medium][SRG-OS-000342-GPOS-00133]::[RHEL]Baseline"; - ContainsLine = "direction = out"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audisp/plugins.d/au-remote.conf"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*direction\\s*=\\s*out"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource33ref -{ -ResourceID = "[nxFileLine][V-204506.c][medium][SRG-OS-000342-GPOS-00133]::[RHEL]Baseline"; - ContainsLine = "path = /sbin/audisp-remote"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audisp/plugins.d/au-remote.conf"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*path\\s*=\\s*/sbin/audisp-remote"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource34ref -{ -ResourceID = "[nxFileLine][V-204506.d][medium][SRG-OS-000342-GPOS-00133]::[RHEL]Baseline"; - ContainsLine = "type = always"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audisp/plugins.d/au-remote.conf"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*type\\s*=\\s*always"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource35ref -{ -ResourceID = "[nxFileLine][V-204507][medium][SRG-OS-000342-GPOS-00133]::[RHEL]Baseline"; - ContainsLine = "overflow_action = syslog"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audisp/audispd.conf"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "^#\\s*overflow_action.*$|^overflow_action\\s*=\\s*(?!syslog$)\\w*$"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource36ref -{ -ResourceID = "[nxFileLine][V-204508][medium][SRG-OS-000342-GPOS-00133]::[RHEL]Baseline"; - ContainsLine = "name_format = hostname"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audisp/audispd.conf"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "^#\\s*name_format.*$|^name_format\\s*=\\s*(?!hostname$)\\w*$"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileResource as $MSFT_nxFileResource25ref -{ -SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::19::9::nxFile"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - ResourceID = "[nxFile][V-204510][medium][SRG-OS-000342-GPOS-00133]::[RHEL]Baseline"; - DestinationPath = "/etc/audisp/audisp-remote.conf"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource37ref -{ -ResourceID = "[nxFileLine][V-204510][medium][SRG-OS-000342-GPOS-00133]::[RHEL]Baseline"; - ContainsLine = "enable_krb5 = yes"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audisp/audisp-remote.conf"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*enable_krb5\\s*=\\s*yes"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource38ref -{ -ResourceID = "[nxFileLine][V-204511][medium][SRG-OS-000342-GPOS-00133]::[RHEL]Baseline"; - ContainsLine = "disk_full_action = single"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audisp/audisp-remote.conf"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "^#\\s*disk_full_action\\s*=.*|^disk_full_action\\s*=\\s*(?!halt\\b|single\\b|syslog\\b)\\w+"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource39ref -{ -ResourceID = "[nxFileLine][V-204512][medium][SRG-OS-000342-GPOS-00133]::[RHEL]Baseline"; - ContainsLine = "network_failure_action = syslog"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audisp/audisp-remote.conf"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "^#\\s*network_failure_action\\s*=.*|^network_failure_action\\s*=\\s*(?!halt\\b|single\\b|syslog\\b)\\w+"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource40ref -{ -ResourceID = "[nxFileLine][V-204514][medium][SRG-OS-000343-GPOS-00134]::[RHEL]Baseline"; - ContainsLine = "space_left_action = email"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/auditd.conf"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "^#\\s*space_left_action.*$|^space_left_action\\s*=\\s*(?!email$)\\w*$"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource41ref -{ -ResourceID = "[nxFileLine][V-204515][medium][SRG-OS-000343-GPOS-00134]::[RHEL]Baseline"; - ContainsLine = "action_mail_acct = root"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/auditd.conf"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "^#\\s*action_mail_acct.*|^action_mail_acct\\s*=\\s*(?!root\\b)\\w+"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource42ref -{ -ResourceID = "[nxFileLine][V-204516.a][medium][SRG-OS-000327-GPOS-00127]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S execve -C uid!=euid -F euid=0 -k setuid"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*execve\\s*-C\\s*uid!\\s*=\\s*euid\\s*-F\\s*euid\\s*=\\s*0\\s*-k\\s*setuid"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource43ref -{ -ResourceID = "[nxFileLine][V-204516.b][medium][SRG-OS-000327-GPOS-00127]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S execve -C uid!=euid -F euid=0 -k setuid"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*execve\\s*-C\\s*uid!\\s*=\\s*euid\\s*-F\\s*euid\\s*=\\s*0\\s*-k\\s*setuid"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource44ref -{ -ResourceID = "[nxFileLine][V-204516.c][medium][SRG-OS-000327-GPOS-00127]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S execve -C gid!=egid -F egid=0 -k setgid"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*execve\\s*-C\\s*gid!\\s*=\\s*egid\\s*-F\\s*egid\\s*=\\s*0\\s*-k\\s*setgid"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource45ref -{ -ResourceID = "[nxFileLine][V-204516.d][medium][SRG-OS-000327-GPOS-00127]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S execve -C gid!=egid -F egid=0 -k setgid"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*execve\\s*-C\\s*gid!\\s*=\\s*egid\\s*-F\\s*egid\\s*=\\s*0\\s*-k\\s*setgid"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource46ref -{ -ResourceID = "[nxFileLine][V-204517.a][medium][SRG-OS-000064-GPOS-00033]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S chown,fchown,fchownat,lchown -F auid>=1000 -F auid!=unset -k perm_mod"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*chown,fchown,fchownat,lchown\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*perm_mod"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource47ref -{ -ResourceID = "[nxFileLine][V-204517.b][medium][SRG-OS-000064-GPOS-00033]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S chown,fchown,fchownat,lchown -F auid>=1000 -F auid!=unset -k perm_mod"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*chown,fchown,fchownat,lchown\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*perm_mod"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource48ref -{ -ResourceID = "[nxFileLine][V-204521.a][medium][SRG-OS-000458-GPOS-00203]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S chmod,fchmod,fchmodat -F auid>=1000 -F auid!=unset -k perm_mod"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*chmod,fchmod,fchmodat\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*perm_mod"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource49ref -{ -ResourceID = "[nxFileLine][V-204521.b][medium][SRG-OS-000458-GPOS-00203]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S chmod,fchmod,fchmodat -F auid>=1000 -F auid!=unset -k perm_mod"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*chmod,fchmod,fchmodat\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*perm_mod"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource50ref -{ -ResourceID = "[nxFileLine][V-204524.a][medium][SRG-OS-000458-GPOS-00203]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S setxattr,fsetxattr,lsetxattr,removexattr,fremovexattr,lremovexattr -F auid>=1000 -F auid!=unset -k perm_mod"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*setxattr,fsetxattr,lsetxattr,removexattr,fremovexattr,lremovexattr\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*perm_mod"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource51ref -{ -ResourceID = "[nxFileLine][V-204524.b][medium][SRG-OS-000458-GPOS-00203]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S setxattr,fsetxattr,lsetxattr,removexattr,fremovexattr,lremovexattr -F auid>=1000 -F auid!=unset -k perm_mod"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*setxattr,fsetxattr,lsetxattr,removexattr,fremovexattr,lremovexattr\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*perm_mod"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource52ref -{ -ResourceID = "[nxFileLine][V-204531.a][medium][SRG-OS-000064-GPOS-00033]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S creat,open,openat,open_by_handle_at,truncate,ftruncate -F exit=-EPERM -F auid>=1000 -F auid!=unset -k access"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*creat,open,openat,open_by_handle_at,truncate,ftruncate\\s*-F\\s*exit\\s*=\\s*-EPERM\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*access"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource53ref -{ -ResourceID = "[nxFileLine][V-204531.b][medium][SRG-OS-000064-GPOS-00033]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S creat,open,openat,open_by_handle_at,truncate,ftruncate -F exit=-EACCES -F auid>=1000 -F auid!=unset -k access"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*creat,open,openat,open_by_handle_at,truncate,ftruncate\\s*-F\\s*exit\\s*=\\s*-EACCES\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*access"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource54ref -{ -ResourceID = "[nxFileLine][V-204531.c][medium][SRG-OS-000064-GPOS-00033]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S creat,open,openat,open_by_handle_at,truncate,ftruncate -F exit=-EPERM -F auid>=1000 -F auid!=unset -k access"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*creat,open,openat,open_by_handle_at,truncate,ftruncate\\s*-F\\s*exit\\s*=\\s*-EPERM\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*access"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource55ref -{ -ResourceID = "[nxFileLine][V-204531.d][medium][SRG-OS-000064-GPOS-00033]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S creat,open,openat,open_by_handle_at,truncate,ftruncate -F exit=-EACCES -F auid>=1000 -F auid!=unset -k access"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*creat,open,openat,open_by_handle_at,truncate,ftruncate\\s*-F\\s*exit\\s*=\\s*-EACCES\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*access"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource56ref -{ -ResourceID = "[nxFileLine][V-204536][medium][SRG-OS-000392-GPOS-00172]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F path=/usr/sbin/semanage -F auid>=1000 -F auid!=unset -k privileged-priv_change"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/sbin/semanage\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-priv_change"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource57ref -{ -ResourceID = "[nxFileLine][V-204537][medium][SRG-OS-000392-GPOS-00172]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F path=/usr/sbin/setsebool -F auid>=1000 -F auid!=unset -k privileged-priv_change"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/sbin/setsebool\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-priv_change"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource58ref -{ -ResourceID = "[nxFileLine][V-204538][medium][SRG-OS-000392-GPOS-00172]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F path=/usr/bin/chcon -F auid>=1000 -F auid!=unset -k privileged-priv_change"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/bin/chcon\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-priv_change"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource59ref -{ -ResourceID = "[nxFileLine][V-204539][medium][SRG-OS-000392-GPOS-00172]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F path=/usr/sbin/setfiles -F auid>=1000 -F auid!=unset -k privileged-priv_change"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/sbin/setfiles\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-priv_change"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource60ref -{ -ResourceID = "[nxFileLine][V-204540][medium][SRG-OS-000392-GPOS-00172]::[RHEL]Baseline"; - ContainsLine = "-w /var/run/faillock -p wa -k logins"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-w\\s*/var/run/faillock\\s*-p\\s*wa\\s*-k\\s*logins"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource61ref -{ -ResourceID = "[nxFileLine][V-204541][medium][SRG-OS-000392-GPOS-00172]::[RHEL]Baseline"; - ContainsLine = "-w /var/log/lastlog -p wa -k logins"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-w\\s*/var/log/lastlog\\s*-p\\s*wa\\s*-k\\s*logins"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource62ref -{ -ResourceID = "[nxFileLine][V-204542][medium][SRG-OS-000042-GPOS-00020]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F path=/usr/bin/passwd -F auid>=1000 -F auid!=unset -k privileged-passwd"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/bin/passwd\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-passwd"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource63ref -{ -ResourceID = "[nxFileLine][V-204543][medium][SRG-OS-000042-GPOS-00020]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F path=/usr/sbin/unix_chkpwd -F auid>=1000 -F auid!=unset -k privileged-passwd"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/sbin/unix_chkpwd\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-passwd"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource64ref -{ -ResourceID = "[nxFileLine][V-204544][medium][SRG-OS-000042-GPOS-00020]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F path=/usr/bin/gpasswd -F auid>=1000 -F auid!=unset -k privileged-passwd"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/bin/gpasswd\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-passwd"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource65ref -{ -ResourceID = "[nxFileLine][V-204545][medium][SRG-OS-000042-GPOS-00020]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F path=/usr/bin/chage -F auid>=1000 -F auid!=unset -k privileged-passwd"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/bin/chage\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-passwd"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource66ref -{ -ResourceID = "[nxFileLine][V-204546][medium][SRG-OS-000042-GPOS-00020]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F path=/usr/sbin/userhelper -F auid>=1000 -F auid!=unset -k privileged-passwd"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/sbin/userhelper\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-passwd"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource67ref -{ -ResourceID = "[nxFileLine][V-204547][medium][SRG-OS-000037-GPOS-00015]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F path=/usr/bin/su -F auid>=1000 -F auid!=unset -k privileged-priv_change"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/bin/su\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-priv_change"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource68ref -{ -ResourceID = "[nxFileLine][V-204548][medium][SRG-OS-000037-GPOS-00015]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F path=/usr/bin/sudo -F auid>=1000 -F auid!=unset -k privileged-priv_change"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/bin/sudo\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-priv_change"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource69ref -{ -ResourceID = "[nxFileLine][V-204549.a][medium][SRG-OS-000037-GPOS-00015]::[RHEL]Baseline"; - ContainsLine = "-w /etc/sudoers -p wa -k privileged-actions"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-w /etc/sudoers -p wa -k privileged-actions"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource70ref -{ -ResourceID = "[nxFileLine][V-204549.b][medium][SRG-OS-000037-GPOS-00015]::[RHEL]Baseline"; - ContainsLine = "-w /etc/sudoers.d/ -p wa -k privileged-actions"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-w /etc/sudoers.d/ -p wa -k privileged-actions"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource71ref -{ -ResourceID = "[nxFileLine][V-204550][medium][SRG-OS-000037-GPOS-00015]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F path=/usr/bin/newgrp -F auid>=1000 -F auid!=unset -k privileged-priv_change"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/bin/newgrp\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-priv_change"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource72ref -{ -ResourceID = "[nxFileLine][V-204551][medium][SRG-OS-000037-GPOS-00015]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F path=/usr/bin/chsh -F auid>=1000 -F auid!=unset -k privileged-priv_change"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/bin/chsh\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-priv_change"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource73ref -{ -ResourceID = "[nxFileLine][V-204552.a][medium][SRG-OS-000042-GPOS-00020]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S mount -F auid>=1000 -F auid!=unset -k privileged-mount"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*mount\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-mount"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource74ref -{ -ResourceID = "[nxFileLine][V-204552.b][medium][SRG-OS-000042-GPOS-00020]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S mount -F auid>=1000 -F auid!=unset -k privileged-mount"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*mount\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-mount"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource75ref -{ -ResourceID = "[nxFileLine][V-204552.c][medium][SRG-OS-000042-GPOS-00020]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F path=/usr/bin/mount -F auid>=1000 -F auid!=unset -k privileged-mount"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/bin/mount\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-mount"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource76ref -{ -ResourceID = "[nxFileLine][V-204553][medium][SRG-OS-000042-GPOS-00020]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F path=/usr/bin/umount -F auid>=1000 -F auid!=unset -k privileged-mount"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/bin/umount\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-mount"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource77ref -{ -ResourceID = "[nxFileLine][V-204554][medium][SRG-OS-000042-GPOS-00020]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F path=/usr/sbin/postdrop -F auid>=1000 -F auid!=unset -k privileged-postfix"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/sbin/postdrop\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-postfix"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource78ref -{ -ResourceID = "[nxFileLine][V-204555][medium][SRG-OS-000042-GPOS-00020]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F path=/usr/sbin/postqueue -F auid>=1000 -F auid!=unset -k privileged-postfix"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/sbin/postqueue\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-postfix"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource79ref -{ -ResourceID = "[nxFileLine][V-204556][medium][SRG-OS-000042-GPOS-00020]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F path=/usr/libexec/openssh/ssh-keysign -F auid>=1000 -F auid!=unset -k privileged-ssh"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/libexec/openssh/ssh-keysign\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-ssh"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource80ref -{ -ResourceID = "[nxFileLine][V-204557][medium][SRG-OS-000042-GPOS-00020]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F path=/usr/bin/crontab -F auid>=1000 -F auid!=unset -k privileged-cron"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/bin/crontab\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-cron"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource81ref -{ -ResourceID = "[nxFileLine][V-204558][medium][SRG-OS-000471-GPOS-00215]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F path=/usr/sbin/pam_timestamp_check -F auid>=1000 -F auid!=unset -k privileged-pam"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/sbin/pam_timestamp_check\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-pam"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource82ref -{ -ResourceID = "[nxFileLine][V-204559.a][medium][SRG-OS-000471-GPOS-00216]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S create_module -k module-change"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*create_module\\s*-k\\s*module-change"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource83ref -{ -ResourceID = "[nxFileLine][V-204559.b][medium][SRG-OS-000471-GPOS-00216]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S create_module -k module-change"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*create_module\\s*-k\\s*module-change"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource84ref -{ -ResourceID = "[nxFileLine][V-204560.a][medium][SRG-OS-000471-GPOS-00216]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S init_module,finit_module -k modulechange"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*init_module,finit_module\\s*-k\\s*modulechange"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource85ref -{ -ResourceID = "[nxFileLine][V-204560.b][medium][SRG-OS-000471-GPOS-00216]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S init_module,finit_module -k modulechange"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*init_module,finit_module\\s*-k\\s*modulechange"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource86ref -{ -ResourceID = "[nxFileLine][V-204562.a][medium][SRG-OS-000471-GPOS-00216]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S delete_module -k module-change"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*delete_module\\s*-k\\s*module-change"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource87ref -{ -ResourceID = "[nxFileLine][V-204562.b][medium][SRG-OS-000471-GPOS-00216]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S delete_module -k module-change"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*delete_module\\s*-k\\s*module-change"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource88ref -{ -ResourceID = "[nxFileLine][V-204563][medium][SRG-OS-000471-GPOS-00216]::[RHEL]Baseline"; - ContainsLine = "-w /usr/bin/kmod -p x -F auid!=unset -k module-change"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-w\\s*/usr/bin/kmod\\s*-p\\s*x\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*module-change"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource89ref -{ -ResourceID = "[nxFileLine][V-204564][medium][SRG-OS-000004-GPOS-00004]::[RHEL]Baseline"; - ContainsLine = "-w /etc/passwd -p wa -k identity"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-w\\s*/etc/passwd\\s*-p\\s*wa\\s*-k\\s*identity"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource90ref -{ -ResourceID = "[nxFileLine][V-204565][medium][SRG-OS-000004-GPOS-00004]::[RHEL]Baseline"; - ContainsLine = "-w /etc/group -p wa -k identity"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-w\\s*/etc/group\\s*-p\\s*wa\\s*-k\\s*identity"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource91ref -{ -ResourceID = "[nxFileLine][V-204566][medium][SRG-OS-000004-GPOS-00004]::[RHEL]Baseline"; - ContainsLine = "-w /etc/gshadow -p wa -k identity"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-w\\s*/etc/gshadow\\s*-p\\s*wa\\s*-k\\s*identity"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource92ref -{ -ResourceID = "[nxFileLine][V-204567][medium][SRG-OS-000004-GPOS-00004]::[RHEL]Baseline"; - ContainsLine = "-w /etc/shadow -p wa -k identity"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-w\\s*/etc/shadow\\s*-p\\s*wa\\s*-k\\s*identity"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource93ref -{ -ResourceID = "[nxFileLine][V-204568][medium][SRG-OS-000004-GPOS-00004]::[RHEL]Baseline"; - ContainsLine = "-w /etc/security/opasswd -p wa -k identity"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-w\\s*/etc/security/opasswd\\s*-p\\s*wa\\s*-k\\s*identity"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource94ref -{ -ResourceID = "[nxFileLine][V-204572.a][medium][SRG-OS-000466-GPOS-00210]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S unlink,unlinkat,rename,renameat,rmdir -F auid>=1000 -F auid!=unset -k delete"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*unlink,unlinkat,rename,renameat,rmdir\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*delete"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource95ref -{ -ResourceID = "[nxFileLine][V-204572.b][medium][SRG-OS-000466-GPOS-00210]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S unlink,unlinkat,rename,renameat,rmdir -F auid>=1000 -F auid!=unset -k delete"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*unlink,unlinkat,rename,renameat,rmdir\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*delete"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource96ref -{ -ResourceID = "[nxFileLine][V-204578][medium][SRG-OS-000033-GPOS-00014]::[RHEL]Baseline"; - ContainsLine = "Ciphers aes256-ctr,aes192-ctr,aes128-ctr"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/ssh/sshd_config"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "^#\\s*Ciphers.*|^\\s*Ciphers\\s*aes128-ctr.*|^\\s*Ciphers\\s*aes192-ctr.*"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource97ref -{ -ResourceID = "[nxFileLine][V-204579.b][medium][SRG-OS-000163-GPOS-00072]::[RHEL]Baseline"; - ContainsLine = "declare -xr TMOUT=900"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/profile.d/tmout.sh"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "^\\s*TMOUT\\s*=\\s*[0-8]?[0-9]?[0-9]?$|^#\\s*TMOUT.*"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource98ref -{ -ResourceID = "[nxFileLine][V-204580][medium][SRG-OS-000023-GPOS-00006]::[RHEL]Baseline"; - ContainsLine = "banner /etc/issue"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/ssh/sshd_config"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*banner\\s*/etc/issue"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource99ref -{ -ResourceID = "[nxFileLine][V-204587][medium][SRG-OS-000163-GPOS-00072]::[RHEL]Baseline"; - ContainsLine = "ClientAliveInterval 600"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/ssh/sshd_config"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "^\\s*ClientAliveInterval\\s*[0-5]?[0-9]?[0-9]?\\s*$|^#\\s*ClientAliveInterval.*|^\\s*ClientAliveInterval\\s*$"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource100ref -{ -ResourceID = "[nxFileLine][V-204588][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; - ContainsLine = "RhostsRSAAuthentication no"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/ssh/sshd_config"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "^#\\s*RhostsRSAAuthentication.*$|^RhostsRSAAuthentication\\s*(?!no\\b)\\w*$"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource101ref -{ -ResourceID = "[nxFileLine][V-204589][medium][SRG-OS-000163-GPOS-00072]::[RHEL]Baseline"; - ContainsLine = "ClientAliveCountMax 0"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/ssh/sshd_config"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "^#\\s*ClientAliveCountMax.*$|^ClientAliveCountMax\\s*(?!0\\b)\\w*$"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource102ref -{ -ResourceID = "[nxFileLine][V-204590][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; - ContainsLine = "IgnoreRhosts yes"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/ssh/sshd_config"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "^#\\s*IgnoreRhosts.*$|^IgnoreRhosts\\s*(?!yes\\b)\\w*$"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource103ref -{ -ResourceID = "[nxFileLine][V-204591][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; - ContainsLine = "PrintLastLog yes"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/ssh/sshd_config"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "^#\\s*PrintLastLog.*$|^PrintLastLog\\s*(?!yes\\b)\\w*$"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource104ref -{ -ResourceID = "[nxFileLine][V-204592][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; - ContainsLine = "PermitRootLogin no"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/ssh/sshd_config"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "^#\\s*PermitRootLogin.*$|^PermitRootLogin\\s*(?!no\\b)\\w*$"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource105ref -{ -ResourceID = "[nxFileLine][V-204593][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; - ContainsLine = "IgnoreUserKnownHosts yes"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/ssh/sshd_config"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "^#\\s*IgnoreUserKnownHosts.*$|^IgnoreUserKnownHosts\\s*(?!yes\\b)\\w*$"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource106ref -{ -ResourceID = "[nxFileLine][V-204594][high][SRG-OS-000074-GPOS-00042]::[RHEL]Baseline"; - ContainsLine = "Protocol 2"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/ssh/sshd_config"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "^#\\s*Protocol.*$|^Protocol\\s*(?!2\\b)\\w*$"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource107ref -{ -ResourceID = "[nxFileLine][V-204595][medium][SRG-OS-000250-GPOS-00093]::[RHEL]Baseline"; - ContainsLine = "MACs hmac-sha2-512,hmac-sha2-256"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/ssh/sshd_config"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*MACs.*|\\s*MACs\\s*hmac-(?!sha2-512).*"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource108ref -{ -ResourceID = "[nxFileLine][V-204598][medium][SRG-OS-000364-GPOS-00151]::[RHEL]Baseline"; - ContainsLine = "GSSAPIAuthentication no"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/ssh/sshd_config"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "^#\\s*GSSAPIAuthentication.*$|^GSSAPIAuthentication\\s*(?!no\\b)\\w*$"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource109ref -{ -ResourceID = "[nxFileLine][V-204599][medium][SRG-OS-000364-GPOS-00151]::[RHEL]Baseline"; - ContainsLine = "KerberosAuthentication no"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/ssh/sshd_config"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "^#\\s*KerberosAuthentication.*$|^KerberosAuthentication\\s*(?!no\\b)\\w*$"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource110ref -{ -ResourceID = "[nxFileLine][V-204600][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; - ContainsLine = "StrictModes yes"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/ssh/sshd_config"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "^#\\s*StrictModes.*$|^StrictModes\\s*(?!yes\\b)\\w*$"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource111ref -{ -ResourceID = "[nxFileLine][V-204601][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; - ContainsLine = "UsePrivilegeSeparation sandbox"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/ssh/sshd_config"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "^#\\s*UsePrivilegeSeparation.*$|^UsePrivilegeSeparation\\s*(?!sandbox\\b)\\w*$"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource112ref -{ -ResourceID = "[nxFileLine][V-204602][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; - ContainsLine = "Compression delayed"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/ssh/sshd_config"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "^#\\s*Compression.*$|^Compression\\s*(?!delayed\\b)\\w*$"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource113ref -{ -ResourceID = "[nxFileLine][V-204622][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; - ContainsLine = "X11Forwarding no"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/ssh/sshd_config"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "^#\\s*X11Forwarding.*$|^X11Forwarding\\s*(?!no\\b)\\w*$"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource114ref -{ -ResourceID = "[nxFileLine][V-233307][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; - ContainsLine = "X11UseLocalhost yes"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/ssh/sshd_config"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*X11UseLocalhost\\s*yes"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxServiceResource as $MSFT_nxServiceResource1ref -{ -ResourceID = "[nxService][V-204451][medium][SRG-OS-000114-GPOS-00059]::[RHEL]Baseline"; - Controller = "systemd"; - Enabled = False; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxService.ps1::13::9::nxService"; - Name = "autofs"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxServiceResource as $MSFT_nxServiceResource2ref -{ -ResourceID = "[nxService][V-204492][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; - Controller = "systemd"; - Enabled = False; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxService.ps1::13::9::nxService"; - Name = "kdump"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxServiceResource as $MSFT_nxServiceResource3ref -{ -ResourceID = "[nxService][V-204503][medium][SRG-OS-000038-GPOS-00016]::[RHEL]Baseline"; - Controller = "systemd"; - State = "Running"; - Enabled = True; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxService.ps1::22::9::nxService"; - Name = "auditd"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxServiceResource as $MSFT_nxServiceResource4ref -{ -ResourceID = "[nxService][V-204586][medium][SRG-OS-000423-GPOS-00187]::[RHEL]Baseline"; - Controller = "systemd"; - State = "Running"; - Enabled = True; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxService.ps1::22::9::nxService"; - Name = "sshd"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxServiceResource as $MSFT_nxServiceResource5ref -{ -ResourceID = "[nxService][V-204604.b][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; - Controller = "systemd"; - State = "Running"; - Enabled = True; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxService.ps1::22::9::nxService"; - Name = "firewalld"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxScriptResource as $MSFT_nxScriptResource1ref -{ -ResourceID = "[nxScript][V-204399.b][medium][[Skip] SRG-OS-000029-GPOS-00010]::[RHEL]Baseline"; - GetScript = "#!/bin/bash\necho [V-204399.b][medium][[Skip] SRG-OS-000029-GPOS-00010]"; - TestScript = "#!/bin/bash\nexit 0"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxScript.skip.ps1::10::5::nxScript"; - SetScript = "#!/bin/bash"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxScriptResource as $MSFT_nxScriptResource2ref -{ -ResourceID = "[nxScript][V-204400][medium][[Skip] SRG-OS-000029-GPOS-00010]::[RHEL]Baseline"; - GetScript = "#!/bin/bash\necho [V-204400][medium][[Skip] SRG-OS-000029-GPOS-00010]"; - TestScript = "#!/bin/bash\nexit 0"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxScript.skip.ps1::10::5::nxScript"; - SetScript = "#!/bin/bash"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxScriptResource as $MSFT_nxScriptResource3ref -{ -ResourceID = "[nxScript][V-204403][medium][[Skip] SRG-OS-000029-GPOS-00010]::[RHEL]Baseline"; - GetScript = "#!/bin/bash\necho [V-204403][medium][[Skip] SRG-OS-000029-GPOS-00010]"; - TestScript = "#!/bin/bash\nexit 0"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxScript.skip.ps1::10::5::nxScript"; - SetScript = "#!/bin/bash"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxScriptResource as $MSFT_nxScriptResource4ref -{ -ResourceID = "[nxScript][V-204509][medium][[Skip] SRG-OS-000342-GPOS-00133]::[RHEL]Baseline"; - GetScript = "#!/bin/bash\necho [V-204509][medium][[Skip] SRG-OS-000342-GPOS-00133]"; - TestScript = "#!/bin/bash\nexit 0"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxScript.skip.ps1::10::5::nxScript"; - SetScript = "#!/bin/bash"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxScriptResource as $MSFT_nxScriptResource5ref -{ -ResourceID = "[nxScript][V-204513][medium][[Skip] SRG-OS-000343-GPOS-00134]::[RHEL]Baseline"; - GetScript = "#!/bin/bash\necho [V-204513][medium][[Skip] SRG-OS-000343-GPOS-00134]"; - TestScript = "#!/bin/bash\nexit 0"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxScript.skip.ps1::10::5::nxScript"; - SetScript = "#!/bin/bash"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxScriptResource as $MSFT_nxScriptResource6ref -{ -ResourceID = "[nxScript][V-204623][medium][[Skip] SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; - GetScript = "#!/bin/bash\necho [V-204623][medium][[Skip] SRG-OS-000480-GPOS-00227]"; - TestScript = "#!/bin/bash\nexit 0"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxScript.skip.ps1::10::5::nxScript"; - SetScript = "#!/bin/bash"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxScriptResource as $MSFT_nxScriptResource7ref -{ -ResourceID = "[nxScript][V-244557][medium][[Skip] SRG-OS-000080-GPOS-00048]::[RHEL]Baseline"; - GetScript = "#!/bin/bash\necho [V-244557][medium][[Skip] SRG-OS-000080-GPOS-00048]"; - TestScript = "#!/bin/bash\nexit 0"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxScript.skip.ps1::10::5::nxScript"; - SetScript = "#!/bin/bash"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxScriptResource as $MSFT_nxScriptResource8ref -{ -ResourceID = "[nxScript][V-244558][medium][[Skip] SRG-OS-000080-GPOS-00048]::[RHEL]Baseline"; - GetScript = "#!/bin/bash\necho [V-244558][medium][[Skip] SRG-OS-000080-GPOS-00048]"; - TestScript = "#!/bin/bash\nexit 0"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxScript.skip.ps1::10::5::nxScript"; - SetScript = "#!/bin/bash"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxScriptResource as $MSFT_nxScriptResource9ref -{ -ResourceID = "[nxScript][V-204399.a][medium][[Skip] SRG-OS-000029-GPOS-00010]::[RHEL]Baseline"; - GetScript = "#!/bin/bash\necho [V-204399.a][medium][[Skip] SRG-OS-000029-GPOS-00010]"; - TestScript = "#!/bin/bash\nexit 0"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxScript.skip.ps1::10::5::nxScript"; - SetScript = "#!/bin/bash"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of OMI_ConfigurationDocument - - - { - Version="2.0.0"; - - - MinimumCompatibleVersion = "1.0.0"; - - - CompatibleVersionAdditionalProperties= {"Omi_BaseResource:ConfigurationName"}; - - - Author="Microsoft"; - - - GenerationDate="06/30/2022 11:38:45"; - - - GenerationHost="Microsoft"; - - - Name="LinuxBaseLine"; - - - }; +/* +@TargetNode='RHEL75' +@GeneratedBy=Microsoft +@GenerationDate=03/09/2023 14:17:33 +@GenerationHost=Microsoft +*/ + +instance of MSFT_nxPackageResource as $MSFT_nxPackageResource1ref +{ +ResourceID = "[nxPackage][V-204442][high][SRG-OS-000095-GPOS-00049]::[RHEL]Baseline"; + Ensure = "Absent"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxPackage.ps1::8::5::nxPackage"; + Name = "rsh-server"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxPackageResource as $MSFT_nxPackageResource2ref +{ +ResourceID = "[nxPackage][V-204443][high][SRG-OS-000095-GPOS-00049]::[RHEL]Baseline"; + Ensure = "Absent"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxPackage.ps1::8::5::nxPackage"; + Name = "ypserv"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxPackageResource as $MSFT_nxPackageResource3ref +{ +ResourceID = "[nxPackage][V-204497][high][SRG-OS-000033-GPOS-00014]::[RHEL]Baseline"; + Ensure = "Present"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxPackage.ps1::8::5::nxPackage"; + Name = "dracut-fips"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxPackageResource as $MSFT_nxPackageResource4ref +{ +ResourceID = "[nxPackage][V-204498][low][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; + Ensure = "Present"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxPackage.ps1::8::5::nxPackage"; + Name = "aide"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxPackageResource as $MSFT_nxPackageResource5ref +{ +ResourceID = "[nxPackage][V-204502][high][SRG-OS-000095-GPOS-00049]::[RHEL]Baseline"; + Ensure = "Absent"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxPackage.ps1::8::5::nxPackage"; + Name = "telnet-server"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxPackageResource as $MSFT_nxPackageResource6ref +{ +ResourceID = "[nxPackage][V-204585][medium][SRG-OS-000423-GPOS-00187]::[RHEL]Baseline"; + Ensure = "Present"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxPackage.ps1::8::5::nxPackage"; + Name = "openssh-server"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxPackageResource as $MSFT_nxPackageResource7ref +{ +ResourceID = "[nxPackage][V-204604.a][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; + Ensure = "Present"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxPackage.ps1::8::5::nxPackage"; + Name = "firewalld"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxPackageResource as $MSFT_nxPackageResource8ref +{ +ResourceID = "[nxPackage][V-204620][high][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; + Ensure = "Absent"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxPackage.ps1::8::5::nxPackage"; + Name = "vsftpd"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxPackageResource as $MSFT_nxPackageResource9ref +{ +ResourceID = "[nxPackage][V-204621][high][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; + Ensure = "Absent"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxPackage.ps1::8::5::nxPackage"; + Name = "tftp-server"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxPackageResource as $MSFT_nxPackageResource10ref +{ +ResourceID = "[nxPackage][V-204631][medium][SRG-OS-000375-GPOS-00160]::[RHEL]Baseline"; + Ensure = "Present"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxPackage.ps1::8::5::nxPackage"; + Name = "pam_pkcs11"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileResource as $MSFT_nxFileResource1ref +{ +ResourceID = "[nxFile][V-204395][medium][SRG-OS-000023-GPOS-00006]::[RHEL]Baseline"; + Contents = "You are accessing a U.S. Government (USG) Information System (IS) that is provided for USG-authorized use only.\n\nBy using this IS (which includes any device attached to this IS), you consent to the following conditions:\n\n-The USG routinely intercepts and monitors communications on this IS for purposes including, but not limited to, penetration testing, COMSEC monitoring, network operations and defense, personnel misconduct (PM), law enforcement (LE), and counterintelligence (CI) investigations.\n\n-At any time, the USG may inspect and seize data stored on this IS.\n\n-Communications using, or data stored on, this IS are not private, are subject to routine monitoring, interception, and search, and may be disclosed or used for any USG-authorized purpose.\n\n-This IS includes security measures (e.g., authentication and access controls) to protect USG interests--not for your personal benefit or privacy.\n\n-Notwithstanding the above, using this IS does not constitute consent to PM, LE or CI investigative searching or monitoring of the content of privileged communications, or work product, related to personal representation or services by attorneys, psychotherapists, or clergy, and their assistants. Such communications and work product are private and confidential. See User Agreement for details."; + DestinationPath = "/etc/issue"; + ModuleName = "nx"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; + ModuleVersion = "1.0"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileResource as $MSFT_nxFileResource2ref +{ +ResourceID = "[nxFile][V-204449.a][medium][SRG-OS-000114-GPOS-00059]::[RHEL]Baseline"; + Contents = ""; + DestinationPath = "/etc/modprobe.d/usb-storage.conf"; + ModuleName = "nx"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; + ModuleVersion = "1.0"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileResource as $MSFT_nxFileResource3ref +{ +ResourceID = "[nxFile][V-204449.b][medium][SRG-OS-000114-GPOS-00059]::[RHEL]Baseline"; + Contents = ""; + DestinationPath = "/etc/modprobe.d/blacklist.conf"; + ModuleName = "nx"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; + ModuleVersion = "1.0"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileResource as $MSFT_nxFileResource4ref +{ +ResourceID = "[nxFile][V-204450.a][medium][SRG-OS-000378-GPOS-00163]::[RHEL]Baseline"; + Contents = ""; + DestinationPath = "/etc/modprobe.d/dccp.conf"; + ModuleName = "nx"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; + ModuleVersion = "1.0"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileResource as $MSFT_nxFileResource5ref +{ +ResourceID = "[nxFile][V-204576][low][SRG-OS-000027-GPOS-00008]::[RHEL]Baseline"; + Contents = "* hard maxlogins 10"; + DestinationPath = "/etc/security/limits.d/204576-powerstig.conf"; + ModuleName = "nx"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; + ModuleVersion = "1.0"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileResource as $MSFT_nxFileResource6ref +{ +ResourceID = "[nxFile][V-204579.a][medium][SRG-OS-000163-GPOS-00072]::[RHEL]Baseline"; + Contents = ""; + DestinationPath = "/etc/profile.d/tmout.sh"; + ModuleName = "nx"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; + ModuleVersion = "1.0"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileResource as $MSFT_nxFileResource7ref +{ +ResourceID = "[nxFile][V-204584][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; + Contents = "kernel.randomize_va_space = 2"; + DestinationPath = "/etc/sysctl.d/204584-powerstig.conf"; + ModuleName = "nx"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; + ModuleVersion = "1.0"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileResource as $MSFT_nxFileResource8ref +{ +ResourceID = "[nxFile][V-204609][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; + Contents = "net.ipv4.conf.all.accept_source_route = 0"; + DestinationPath = "/etc/sysctl.d/204609-powerstig.conf"; + ModuleName = "nx"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; + ModuleVersion = "1.0"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileResource as $MSFT_nxFileResource9ref +{ +ResourceID = "[nxFile][V-204610][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; + Contents = "net.ipv4.conf.all.rp_filter = 1"; + DestinationPath = "/etc/sysctl.d/204610-powerstig.conf"; + ModuleName = "nx"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; + ModuleVersion = "1.0"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileResource as $MSFT_nxFileResource10ref +{ +ResourceID = "[nxFile][V-204611][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; + Contents = "net.ipv4.conf.default.rp_filter = 1"; + DestinationPath = "/etc/sysctl.d/204611-powerstig.conf"; + ModuleName = "nx"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; + ModuleVersion = "1.0"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileResource as $MSFT_nxFileResource11ref +{ +ResourceID = "[nxFile][V-204612][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; + Contents = "net.ipv4.conf.default.accept_source_route = 0"; + DestinationPath = "/etc/sysctl.d/204612-powerstig.conf"; + ModuleName = "nx"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; + ModuleVersion = "1.0"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileResource as $MSFT_nxFileResource12ref +{ +ResourceID = "[nxFile][V-204613][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; + Contents = "net.ipv4.icmp_echo_ignore_broadcasts = 1"; + DestinationPath = "/etc/sysctl.d/204613-powerstig.conf"; + ModuleName = "nx"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; + ModuleVersion = "1.0"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileResource as $MSFT_nxFileResource13ref +{ +ResourceID = "[nxFile][V-204614][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; + Contents = "net.ipv4.conf.default.accept_redirects = 0"; + DestinationPath = "/etc/sysctl.d/204614-powerstig.conf"; + ModuleName = "nx"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; + ModuleVersion = "1.0"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileResource as $MSFT_nxFileResource14ref +{ +ResourceID = "[nxFile][V-204615][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; + Contents = "net.ipv4.conf.all.accept_redirects = 0"; + DestinationPath = "/etc/sysctl.d/204615-powerstig.conf"; + ModuleName = "nx"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; + ModuleVersion = "1.0"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileResource as $MSFT_nxFileResource15ref +{ +ResourceID = "[nxFile][V-204616][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; + Contents = "net.ipv4.conf.default.send_redirects = 0"; + DestinationPath = "/etc/sysctl.d/204616-powerstig.conf"; + ModuleName = "nx"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; + ModuleVersion = "1.0"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileResource as $MSFT_nxFileResource16ref +{ +ResourceID = "[nxFile][V-204617][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; + Contents = "net.ipv4.conf.all.send_redirects = 0"; + DestinationPath = "/etc/sysctl.d/204617-powerstig.conf"; + ModuleName = "nx"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; + ModuleVersion = "1.0"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileResource as $MSFT_nxFileResource17ref +{ +ResourceID = "[nxFile][V-204625][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; + Contents = "net.ipv4.ip_forward = 0"; + DestinationPath = "/etc/sysctl.d/204625-powerstig.conf"; + ModuleName = "nx"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; + ModuleVersion = "1.0"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileResource as $MSFT_nxFileResource18ref +{ +ResourceID = "[nxFile][V-204630][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; + Contents = "net.ipv6.conf.all.accept_source_route = 0"; + DestinationPath = "/etc/sysctl.d/204630-powerstig.conf"; + ModuleName = "nx"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; + ModuleVersion = "1.0"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileResource as $MSFT_nxFileResource19ref +{ +ResourceID = "[nxFile][V-237634.a][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; + Contents = "Defaults !targetpw"; + DestinationPath = "/etc/sudoers.d/237634a-powerstig.conf"; + ModuleName = "nx"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; + ModuleVersion = "1.0"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileResource as $MSFT_nxFileResource20ref +{ +ResourceID = "[nxFile][V-237634.b][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; + Contents = "Defaults !rootpw"; + DestinationPath = "/etc/sudoers.d/237634b-powerstig.conf"; + ModuleName = "nx"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; + ModuleVersion = "1.0"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileResource as $MSFT_nxFileResource21ref +{ +ResourceID = "[nxFile][V-237634.c][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; + Contents = "Defaults !runaspw"; + DestinationPath = "/etc/sudoers.d/237634c-powerstig.conf"; + ModuleName = "nx"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; + ModuleVersion = "1.0"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileResource as $MSFT_nxFileResource22ref +{ +ResourceID = "[nxFile][V-237635][medium][SRG-OS-000373-GPOS-00156]::[RHEL]Baseline"; + Contents = "Defaults timestamp_timeout=0"; + DestinationPath = "/etc/sudoers.d/237635-powerstig.conf"; + ModuleName = "nx"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; + ModuleVersion = "1.0"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileResource as $MSFT_nxFileResource23ref +{ +ResourceID = "[nxFile][V-250314][medium][SRG-OS-000324-GPOS-00125]::[RHEL]Baseline"; + Contents = "%wheel ALL=(ALL) TYPE=sysadm_t ROLE=sysadm_r ALL"; + DestinationPath = "/etc/sudoers.d/250314-powerstig.conf"; + ModuleName = "nx"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; + ModuleVersion = "1.0"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource1ref +{ +ResourceID = "[nxFileLine][V-204405][medium][SRG-OS-000069-GPOS-00037]::[RHEL]Baseline"; + ContainsLine = "password substack system-auth"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/pam.d/passwd"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "^\\s*password(?:\\t*|\\s*)substack\\tsystem-auth\\s*$|^#\\s*password\\s*substack\\s*system-auth.*"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource2ref +{ +ResourceID = "[nxFileLine][V-204407][medium][SRG-OS-000069-GPOS-00037]::[RHEL]Baseline"; + ContainsLine = "ucredit = -1"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/security/pwquality.conf"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "^#\\s*ucredit.*$|^ucredit\\s*=\\s*(?!-1\\b)\\w*$"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource3ref +{ +ResourceID = "[nxFileLine][V-204408][medium][SRG-OS-000070-GPOS-00038]::[RHEL]Baseline"; + ContainsLine = "lcredit = -1"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/security/pwquality.conf"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "^#\\s*lcredit.*$|^lcredit\\s*=\\s*(?!-1\\b)\\w*$"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource4ref +{ +ResourceID = "[nxFileLine][V-204409][medium][SRG-OS-000071-GPOS-00039]::[RHEL]Baseline"; + ContainsLine = "dcredit = -1"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/security/pwquality.conf"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "^#\\s*dcredit.*$|^dcredit\\s*=\\s*(?!-1\\b)\\w*$"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource5ref +{ +ResourceID = "[nxFileLine][V-204410][medium][SRG-OS-000266-GPOS-00101]::[RHEL]Baseline"; + ContainsLine = "ocredit=-1"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/security/pwquality.conf"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "^#\\s*ocredit.*$|^ocredit\\s*=\\s*(?!-1)\\w*$"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource6ref +{ +ResourceID = "[nxFileLine][V-204411][medium][SRG-OS-000072-GPOS-00040]::[RHEL]Baseline"; + ContainsLine = "difok = 8"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/security/pwquality.conf"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*difok\\s*=.*|^\\s*difok\\s*=\\s*(-|)[0-7]$"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource7ref +{ +ResourceID = "[nxFileLine][V-204412][medium][SRG-OS-000072-GPOS-00040]::[RHEL]Baseline"; + ContainsLine = "minclass = 4"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/security/pwquality.conf"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "^#\\s*minclass\\s*=.*|^\\s*minclass\\s*=\\s*(?!\\d{2,})[1-3]"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource8ref +{ +ResourceID = "[nxFileLine][V-204413][medium][SRG-OS-000072-GPOS-00040]::[RHEL]Baseline"; + ContainsLine = "maxrepeat = 3"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/security/pwquality.conf"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "^#\\s*maxrepeat\\s*=.*|^\\s*maxrepeat\\s*=\\s*(?:\\d{2,}|[4-9])"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource9ref +{ +ResourceID = "[nxFileLine][V-204414][medium][SRG-OS-000072-GPOS-00040]::[RHEL]Baseline"; + ContainsLine = "maxclassrepeat = 4"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/security/pwquality.conf"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "^#\\s*maxclassrepeat\\s*=.*|^\\s*maxclassrepeat\\s*=\\s*(?:\\d{2,}|[1-3|5-9])"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource10ref +{ +ResourceID = "[nxFileLine][V-204416][medium][SRG-OS-000073-GPOS-00041]::[RHEL]Baseline"; + ContainsLine = "ENCRYPT_METHOD SHA512"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/login.defs"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*ENCRYPT_METHOD\\s*SHA512"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource11ref +{ +ResourceID = "[nxFileLine][V-204418][medium][SRG-OS-000075-GPOS-00043]::[RHEL]Baseline"; + ContainsLine = "PASS_MIN_DAYS 1"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/login.defs"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "^\\s*PASS_MIN_DAYS\\s*[0]*$|#\\s*PASS_MIN_DAYS.*"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource12ref +{ +ResourceID = "[nxFileLine][V-204420][medium][SRG-OS-000076-GPOS-00044]::[RHEL]Baseline"; + ContainsLine = "PASS_MAX_DAYS 60"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/login.defs"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "^\\s*PASS_MAX_DAYS\\s*([6][1-9]|[7-9][0-9]|\\d{3,})$|#\\s*PASS_MAX_DAYS.*"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource13ref +{ +ResourceID = "[nxFileLine][V-204423][medium][SRG-OS-000078-GPOS-00046]::[RHEL]Baseline"; + ContainsLine = "minlen = 15"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/security/pwquality.conf"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "^\\s*minlen\\s*=\\s*([0-9]|[1][1-4])$|#\\s*minlen.*"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource14ref +{ +ResourceID = "[nxFileLine][V-204425][high][SRG-OS-000106-GPOS-00053]::[RHEL]Baseline"; + ContainsLine = "PermitEmptyPasswords no"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/ssh/sshd_config"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "^#\\s*PermitEmptyPasswords.*$|^PermitEmptyPasswords\\s*(?!no\\b)\\w*$"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource15ref +{ +ResourceID = "[nxFileLine][V-204426][medium][SRG-OS-000118-GPOS-00060]::[RHEL]Baseline"; + ContainsLine = "INACTIVE=35"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/default/useradd"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "^#\\s*INACTIVE\\s*=.*|^\\s*INACTIVE\\s*=\\s*(3[5-9]|[4-9]\\d+|\\d{3,})"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource16ref +{ +ResourceID = "[nxFileLine][V-204431][medium][SRG-OS-000480-GPOS-00226]::[RHEL]Baseline"; + ContainsLine = "FAIL_DELAY 4"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/login.defs"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "^#\\s*FAIL_DELAY.*|^FAIL_DELAY\\s*(?!\\d{2,})[1-3]"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource17ref +{ +ResourceID = "[nxFileLine][V-204434][medium][SRG-OS-000480-GPOS-00229]::[RHEL]Baseline"; + ContainsLine = "PermitUserEnvironment no"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/ssh/sshd_config"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "^#\\s*PermitUserEnvironment.*$|^PermitUserEnvironment\\s*(?!no\\b)\\w*$"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource18ref +{ +ResourceID = "[nxFileLine][V-204435][medium][SRG-OS-000480-GPOS-00229]::[RHEL]Baseline"; + ContainsLine = "HostbasedAuthentication no"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/ssh/sshd_config"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "^#\\s*HostbasedAuthentication.*$|^HostbasedAuthentication\\s*(?!no\\b)\\w*$"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource19ref +{ +ResourceID = "[nxFileLine][V-204447][high][SRG-OS-000366-GPOS-00153]::[RHEL]Baseline"; + ContainsLine = "gpgcheck=1"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/yum.conf"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*gpgcheck\\s*=\\s*1"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource20ref +{ +ResourceID = "[nxFileLine][V-204448][high][SRG-OS-000366-GPOS-00153]::[RHEL]Baseline"; + ContainsLine = "localpkg_gpgcheck=1"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/yum.conf"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*localpkg_gpgcheck\\s*=\\s*1"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource21ref +{ +ResourceID = "[nxFileLine][V-204449.c][medium][SRG-OS-000114-GPOS-00059]::[RHEL]Baseline"; + ContainsLine = "install usb-storage /bin/true"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/modprobe.d/usb-storage.conf"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*install\\s*usb-storage\\s*/bin/true"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource22ref +{ +ResourceID = "[nxFileLine][V-204449.d][medium][SRG-OS-000114-GPOS-00059]::[RHEL]Baseline"; + ContainsLine = "blacklist usb-storage"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/modprobe.d/blacklist.conf"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*blacklist\\s*usb-storage"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource23ref +{ +ResourceID = "[nxFileLine][V-204450.b][medium][SRG-OS-000378-GPOS-00163]::[RHEL]Baseline"; + ContainsLine = "install dccp /bin/true"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/modprobe.d/dccp.conf"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*install\\s*dccp\\s*/bin/true"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource24ref +{ +ResourceID = "[nxFileLine][V-204450.c][medium][SRG-OS-000378-GPOS-00163]::[RHEL]Baseline"; + ContainsLine = "blacklist dccp"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/modprobe.d/blacklist.conf"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*blacklist\\s*dccp"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource25ref +{ +ResourceID = "[nxFileLine][V-204452][low][SRG-OS-000437-GPOS-00194]::[RHEL]Baseline"; + ContainsLine = "clean_requirements_on_remove=1"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/yum.conf"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*clean_requirements_on_remove\\s*=\\s*1"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource26ref +{ +ResourceID = "[nxFileLine][V-204453][medium][SRG-OS-000445-GPOS-00199]::[RHEL]Baseline"; + ContainsLine = "SELINUX=enforcing"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/selinux/config"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "^#\\s*SELINUX.*$|^SELINUX\\s*=\\s*(?!enforcing)\\w*$"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource27ref +{ +ResourceID = "[nxFileLine][V-204454][medium][SRG-OS-000445-GPOS-00199]::[RHEL]Baseline"; + ContainsLine = "SELINUXTYPE=targeted"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/selinux/config"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "^#\\s*SELINUXTYPE.*$|^SELINUXTYPE\\s*=\\s*(?!targeted\\b)\\w*$"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource28ref +{ +ResourceID = "[nxFileLine][V-204457][medium][SRG-OS-000480-GPOS-00228]::[RHEL]Baseline"; + ContainsLine = "UMASK 077"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/login.defs"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "^\\s*UMASK(?!\\s077\\b)\\s*\\d*\\s*$|^#\\s*UMASK.*"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource29ref +{ +ResourceID = "[nxFileLine][V-204466][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; + ContainsLine = "CREATE_HOME yes"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/login.defs"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "^#\\s*CREATE_HOME.*$|^CREATE_HOME\\s*(?!yes\\b)\\w*$|^CREATE_HOME\\t.*"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource30ref +{ +ResourceID = "[nxFileLine][V-204504][medium][SRG-OS-000046-GPOS-00022]::[RHEL]Baseline"; + ContainsLine = "-f 2"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "^#\\s*-f\\s+2|^\\s*-f\\s*1"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileResource as $MSFT_nxFileResource24ref +{ +SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::29::9::nxFile"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + ResourceID = "[nxFile][V-204506.a][medium][SRG-OS-000342-GPOS-00133]::[RHEL]Baseline"; + DestinationPath = "/etc/audisp/plugins.d/au-remote.conf"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource31ref +{ +ResourceID = "[nxFileLine][V-204506.a][medium][SRG-OS-000342-GPOS-00133]::[RHEL]Baseline"; + ContainsLine = "active = yes"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audisp/plugins.d/au-remote.conf"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "\\s*active\\s*=\\s*no|active=yes|#\\s*active\\s*=.*"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource32ref +{ +ResourceID = "[nxFileLine][V-204506.b][medium][SRG-OS-000342-GPOS-00133]::[RHEL]Baseline"; + ContainsLine = "direction = out"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audisp/plugins.d/au-remote.conf"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*direction\\s*=\\s*out"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource33ref +{ +ResourceID = "[nxFileLine][V-204506.c][medium][SRG-OS-000342-GPOS-00133]::[RHEL]Baseline"; + ContainsLine = "path = /sbin/audisp-remote"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audisp/plugins.d/au-remote.conf"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*path\\s*=\\s*/sbin/audisp-remote"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource34ref +{ +ResourceID = "[nxFileLine][V-204506.d][medium][SRG-OS-000342-GPOS-00133]::[RHEL]Baseline"; + ContainsLine = "type = always"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audisp/plugins.d/au-remote.conf"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*type\\s*=\\s*always"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource35ref +{ +ResourceID = "[nxFileLine][V-204507][medium][SRG-OS-000342-GPOS-00133]::[RHEL]Baseline"; + ContainsLine = "overflow_action = syslog"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audisp/audispd.conf"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "^#\\s*overflow_action.*$|^overflow_action\\s*=\\s*(?!syslog$)\\w*$"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource36ref +{ +ResourceID = "[nxFileLine][V-204508][medium][SRG-OS-000342-GPOS-00133]::[RHEL]Baseline"; + ContainsLine = "name_format = hostname"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audisp/audispd.conf"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "^#\\s*name_format.*$|^name_format\\s*=\\s*(?!hostname$)\\w*$"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileResource as $MSFT_nxFileResource25ref +{ +SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::19::9::nxFile"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + ResourceID = "[nxFile][V-204510][medium][SRG-OS-000342-GPOS-00133]::[RHEL]Baseline"; + DestinationPath = "/etc/audisp/audisp-remote.conf"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource37ref +{ +ResourceID = "[nxFileLine][V-204510][medium][SRG-OS-000342-GPOS-00133]::[RHEL]Baseline"; + ContainsLine = "enable_krb5 = yes"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audisp/audisp-remote.conf"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*enable_krb5\\s*=\\s*yes"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource38ref +{ +ResourceID = "[nxFileLine][V-204511][medium][SRG-OS-000342-GPOS-00133]::[RHEL]Baseline"; + ContainsLine = "disk_full_action = single"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audisp/audisp-remote.conf"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "^#\\s*disk_full_action\\s*=.*|^disk_full_action\\s*=\\s*(?!halt\\b|single\\b|syslog\\b)\\w+"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource39ref +{ +ResourceID = "[nxFileLine][V-204512][medium][SRG-OS-000342-GPOS-00133]::[RHEL]Baseline"; + ContainsLine = "network_failure_action = syslog"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audisp/audisp-remote.conf"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "^#\\s*network_failure_action\\s*=.*|^network_failure_action\\s*=\\s*(?!halt\\b|single\\b|syslog\\b)\\w+"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource40ref +{ +ResourceID = "[nxFileLine][V-204514][medium][SRG-OS-000343-GPOS-00134]::[RHEL]Baseline"; + ContainsLine = "space_left_action = email"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/auditd.conf"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "^#\\s*space_left_action.*$|^space_left_action\\s*=\\s*(?!email$)\\w*$"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource41ref +{ +ResourceID = "[nxFileLine][V-204515][medium][SRG-OS-000343-GPOS-00134]::[RHEL]Baseline"; + ContainsLine = "action_mail_acct = root"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/auditd.conf"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "^#\\s*action_mail_acct.*|^action_mail_acct\\s*=\\s*(?!root\\b)\\w+"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource42ref +{ +ResourceID = "[nxFileLine][V-204516.a][medium][SRG-OS-000327-GPOS-00127]::[RHEL]Baseline"; + ContainsLine = "-a always,exit -F arch=b32 -S execve -C uid!=euid -F euid=0 -k setuid"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*execve\\s*-C\\s*uid!\\s*=\\s*euid\\s*-F\\s*euid\\s*=\\s*0\\s*-k\\s*setuid"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource43ref +{ +ResourceID = "[nxFileLine][V-204516.b][medium][SRG-OS-000327-GPOS-00127]::[RHEL]Baseline"; + ContainsLine = "-a always,exit -F arch=b64 -S execve -C uid!=euid -F euid=0 -k setuid"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*execve\\s*-C\\s*uid!\\s*=\\s*euid\\s*-F\\s*euid\\s*=\\s*0\\s*-k\\s*setuid"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource44ref +{ +ResourceID = "[nxFileLine][V-204516.c][medium][SRG-OS-000327-GPOS-00127]::[RHEL]Baseline"; + ContainsLine = "-a always,exit -F arch=b32 -S execve -C gid!=egid -F egid=0 -k setgid"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*execve\\s*-C\\s*gid!\\s*=\\s*egid\\s*-F\\s*egid\\s*=\\s*0\\s*-k\\s*setgid"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource45ref +{ +ResourceID = "[nxFileLine][V-204516.d][medium][SRG-OS-000327-GPOS-00127]::[RHEL]Baseline"; + ContainsLine = "-a always,exit -F arch=b64 -S execve -C gid!=egid -F egid=0 -k setgid"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*execve\\s*-C\\s*gid!\\s*=\\s*egid\\s*-F\\s*egid\\s*=\\s*0\\s*-k\\s*setgid"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource46ref +{ +ResourceID = "[nxFileLine][V-204517.a][medium][SRG-OS-000064-GPOS-00033]::[RHEL]Baseline"; + ContainsLine = "-a always,exit -F arch=b32 -S chown,fchown,fchownat,lchown -F auid>=1000 -F auid!=unset -k perm_mod"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*chown,fchown,fchownat,lchown\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*perm_mod"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource47ref +{ +ResourceID = "[nxFileLine][V-204517.b][medium][SRG-OS-000064-GPOS-00033]::[RHEL]Baseline"; + ContainsLine = "-a always,exit -F arch=b64 -S chown,fchown,fchownat,lchown -F auid>=1000 -F auid!=unset -k perm_mod"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*chown,fchown,fchownat,lchown\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*perm_mod"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource48ref +{ +ResourceID = "[nxFileLine][V-204521.a][medium][SRG-OS-000458-GPOS-00203]::[RHEL]Baseline"; + ContainsLine = "-a always,exit -F arch=b32 -S chmod,fchmod,fchmodat -F auid>=1000 -F auid!=unset -k perm_mod"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*chmod,fchmod,fchmodat\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*perm_mod"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource49ref +{ +ResourceID = "[nxFileLine][V-204521.b][medium][SRG-OS-000458-GPOS-00203]::[RHEL]Baseline"; + ContainsLine = "-a always,exit -F arch=b64 -S chmod,fchmod,fchmodat -F auid>=1000 -F auid!=unset -k perm_mod"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*chmod,fchmod,fchmodat\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*perm_mod"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource50ref +{ +ResourceID = "[nxFileLine][V-204524.a][medium][SRG-OS-000458-GPOS-00203]::[RHEL]Baseline"; + ContainsLine = "-a always,exit -F arch=b32 -S setxattr,fsetxattr,lsetxattr,removexattr,fremovexattr,lremovexattr -F auid>=1000 -F auid!=unset -k perm_mod"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*setxattr,fsetxattr,lsetxattr,removexattr,fremovexattr,lremovexattr\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*perm_mod"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource51ref +{ +ResourceID = "[nxFileLine][V-204524.b][medium][SRG-OS-000458-GPOS-00203]::[RHEL]Baseline"; + ContainsLine = "-a always,exit -F arch=b64 -S setxattr,fsetxattr,lsetxattr,removexattr,fremovexattr,lremovexattr -F auid>=1000 -F auid!=unset -k perm_mod"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*setxattr,fsetxattr,lsetxattr,removexattr,fremovexattr,lremovexattr\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*perm_mod"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource52ref +{ +ResourceID = "[nxFileLine][V-204531.a][medium][SRG-OS-000064-GPOS-00033]::[RHEL]Baseline"; + ContainsLine = "-a always,exit -F arch=b32 -S creat,open,openat,open_by_handle_at,truncate,ftruncate -F exit=-EPERM -F auid>=1000 -F auid!=unset -k access"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*creat,open,openat,open_by_handle_at,truncate,ftruncate\\s*-F\\s*exit\\s*=\\s*-EPERM\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*access"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource53ref +{ +ResourceID = "[nxFileLine][V-204531.b][medium][SRG-OS-000064-GPOS-00033]::[RHEL]Baseline"; + ContainsLine = "-a always,exit -F arch=b32 -S creat,open,openat,open_by_handle_at,truncate,ftruncate -F exit=-EACCES -F auid>=1000 -F auid!=unset -k access"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*creat,open,openat,open_by_handle_at,truncate,ftruncate\\s*-F\\s*exit\\s*=\\s*-EACCES\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*access"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource54ref +{ +ResourceID = "[nxFileLine][V-204531.c][medium][SRG-OS-000064-GPOS-00033]::[RHEL]Baseline"; + ContainsLine = "-a always,exit -F arch=b64 -S creat,open,openat,open_by_handle_at,truncate,ftruncate -F exit=-EPERM -F auid>=1000 -F auid!=unset -k access"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*creat,open,openat,open_by_handle_at,truncate,ftruncate\\s*-F\\s*exit\\s*=\\s*-EPERM\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*access"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource55ref +{ +ResourceID = "[nxFileLine][V-204531.d][medium][SRG-OS-000064-GPOS-00033]::[RHEL]Baseline"; + ContainsLine = "-a always,exit -F arch=b64 -S creat,open,openat,open_by_handle_at,truncate,ftruncate -F exit=-EACCES -F auid>=1000 -F auid!=unset -k access"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*creat,open,openat,open_by_handle_at,truncate,ftruncate\\s*-F\\s*exit\\s*=\\s*-EACCES\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*access"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource56ref +{ +ResourceID = "[nxFileLine][V-204536][medium][SRG-OS-000392-GPOS-00172]::[RHEL]Baseline"; + ContainsLine = "-a always,exit -F path=/usr/sbin/semanage -F perm=x -F auid>=1000 -F auid!=unset -k privileged-priv_change"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/sbin/semanage\\s*-F\\s*perm\\s*=\\s*x\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-priv_change"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource57ref +{ +ResourceID = "[nxFileLine][V-204537][medium][SRG-OS-000392-GPOS-00172]::[RHEL]Baseline"; + ContainsLine = "-a always,exit -F path=/usr/sbin/setsebool -F perm=x -F auid>=1000 -F auid!=unset -k privileged-priv_change"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/sbin/setsebool\\s*-F\\s*perm\\s*=\\s*x\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-priv_change"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource58ref +{ +ResourceID = "[nxFileLine][V-204538][medium][SRG-OS-000392-GPOS-00172]::[RHEL]Baseline"; + ContainsLine = "-a always,exit -F path=/usr/bin/chcon -F perm=x -F auid>=1000 -F auid!=unset -k privileged-priv_change"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/bin/chcon\\s*-F\\s*perm\\s*=\\s*x\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-priv_change"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource59ref +{ +ResourceID = "[nxFileLine][V-204539][medium][SRG-OS-000392-GPOS-00172]::[RHEL]Baseline"; + ContainsLine = "-a always,exit -F path=/usr/sbin/setfiles -F perm=x -F auid>=1000 -F auid!=unset -k privileged-priv_change"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/sbin/setfiles\\s*-F\\s*perm\\s*=\\s*x\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-priv_change"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource60ref +{ +ResourceID = "[nxFileLine][V-204540][medium][SRG-OS-000392-GPOS-00172]::[RHEL]Baseline"; + ContainsLine = "-w /var/run/faillock -p wa -k logins"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-w\\s*/var/run/faillock\\s*-p\\s*wa\\s*-k\\s*logins"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource61ref +{ +ResourceID = "[nxFileLine][V-204541][medium][SRG-OS-000392-GPOS-00172]::[RHEL]Baseline"; + ContainsLine = "-w /var/log/lastlog -p wa -k logins"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-w\\s*/var/log/lastlog\\s*-p\\s*wa\\s*-k\\s*logins"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource62ref +{ +ResourceID = "[nxFileLine][V-204542][medium][SRG-OS-000042-GPOS-00020]::[RHEL]Baseline"; + ContainsLine = "-a always,exit -F path=/usr/bin/passwd -F perm=x -F auid>=1000 -F auid!=unset -k privileged-passwd"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/bin/passwd\\s*-F\\s*perm\\s*=\\s*x\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-passwd"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource63ref +{ +ResourceID = "[nxFileLine][V-204543][medium][SRG-OS-000042-GPOS-00020]::[RHEL]Baseline"; + ContainsLine = "-a always,exit -F path=/usr/sbin/unix_chkpwd -F perm=x -F auid>=1000 -F auid!=unset -k privileged-passwd"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/sbin/unix_chkpwd\\s*-F\\s*perm\\s*=\\s*x\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-passwd"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource64ref +{ +ResourceID = "[nxFileLine][V-204544][medium][SRG-OS-000042-GPOS-00020]::[RHEL]Baseline"; + ContainsLine = "-a always,exit -F path=/usr/bin/gpasswd -F perm=x -F auid>=1000 -F auid!=unset -k privileged-passwd"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/bin/gpasswd\\s*-F\\s*perm\\s*=\\s*x\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-passwd"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource65ref +{ +ResourceID = "[nxFileLine][V-204545][medium][SRG-OS-000042-GPOS-00020]::[RHEL]Baseline"; + ContainsLine = "-a always,exit -F path=/usr/bin/chage -F perm=x -F auid>=1000 -F auid!=unset -k privileged-passwd"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/bin/chage\\s*-F\\s*perm\\s*=\\s*x\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-passwd"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource66ref +{ +ResourceID = "[nxFileLine][V-204546][medium][SRG-OS-000042-GPOS-00020]::[RHEL]Baseline"; + ContainsLine = "-a always,exit -F path=/usr/sbin/userhelper -F perm=x -F auid>=1000 -F auid!=unset -k privileged-passwd"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/sbin/userhelper\\s*-F\\s*perm\\s*=\\s*x\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-passwd"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource67ref +{ +ResourceID = "[nxFileLine][V-204547][medium][SRG-OS-000037-GPOS-00015]::[RHEL]Baseline"; + ContainsLine = "-a always,exit -F path=/usr/bin/su -F perm=x -F auid>=1000 -F auid!=unset -k privileged-priv_change"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/bin/su\\s*-F\\s*perm\\s*=\\s*x\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-priv_change"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource68ref +{ +ResourceID = "[nxFileLine][V-204548][medium][SRG-OS-000037-GPOS-00015]::[RHEL]Baseline"; + ContainsLine = "-a always,exit -F path=/usr/bin/sudo -F perm=x -F auid>=1000 -F auid!=unset -k privileged-priv_change"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/bin/sudo\\s*-F\\s*perm\\s*=\\s*x\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-priv_change"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource69ref +{ +ResourceID = "[nxFileLine][V-204549.a][medium][SRG-OS-000037-GPOS-00015]::[RHEL]Baseline"; + ContainsLine = "-w /etc/sudoers -p wa -k privileged-actions"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-w /etc/sudoers -p wa -k privileged-actions"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource70ref +{ +ResourceID = "[nxFileLine][V-204549.b][medium][SRG-OS-000037-GPOS-00015]::[RHEL]Baseline"; + ContainsLine = "-w /etc/sudoers.d/ -p wa -k privileged-actions"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-w /etc/sudoers.d/ -p wa -k privileged-actions"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource71ref +{ +ResourceID = "[nxFileLine][V-204550][medium][SRG-OS-000037-GPOS-00015]::[RHEL]Baseline"; + ContainsLine = "-a always,exit -F path=/usr/bin/newgrp -F perm=x -F auid>=1000 -F auid!=unset -k privileged-priv_change"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/bin/newgrp\\s*-F\\s*perm\\s*=\\s*x\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-priv_change"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource72ref +{ +ResourceID = "[nxFileLine][V-204551][medium][SRG-OS-000037-GPOS-00015]::[RHEL]Baseline"; + ContainsLine = "-a always,exit -F path=/usr/bin/chsh -F perm=x -F auid>=1000 -F auid!=unset -k privileged-priv_change"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/bin/chsh\\s*-F\\s*perm\\s*=\\s*x\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-priv_change"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource73ref +{ +ResourceID = "[nxFileLine][V-204552.a][medium][SRG-OS-000042-GPOS-00020]::[RHEL]Baseline"; + ContainsLine = "-a always,exit -F arch=b32 -S mount -F auid>=1000 -F auid!=unset -k privileged-mount"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*mount\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-mount"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource74ref +{ +ResourceID = "[nxFileLine][V-204552.b][medium][SRG-OS-000042-GPOS-00020]::[RHEL]Baseline"; + ContainsLine = "-a always,exit -F arch=b64 -S mount -F auid>=1000 -F auid!=unset -k privileged-mount"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*mount\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-mount"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource75ref +{ +ResourceID = "[nxFileLine][V-204552.c][medium][SRG-OS-000042-GPOS-00020]::[RHEL]Baseline"; + ContainsLine = "-a always,exit -F path=/usr/bin/mount -F perm=x -F auid>=1000 -F auid!=unset -k privileged-mount"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/bin/mount\\s*-F\\s*perm\\s*=\\s*x\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-mount"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource76ref +{ +ResourceID = "[nxFileLine][V-204553][medium][SRG-OS-000042-GPOS-00020]::[RHEL]Baseline"; + ContainsLine = "-a always,exit -F path=/usr/bin/umount -F perm=x -F auid>=1000 -F auid!=unset -k privileged-mount"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/bin/umount\\s*-F\\s*perm\\s*=\\s*x\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-mount"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource77ref +{ +ResourceID = "[nxFileLine][V-204554][medium][SRG-OS-000042-GPOS-00020]::[RHEL]Baseline"; + ContainsLine = "-a always,exit -F path=/usr/sbin/postdrop -F perm=x -F auid>=1000 -F auid!=unset -k privileged-postfix"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/sbin/postdrop\\s*-F\\s*perm\\s*=\\s*x\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-postfix"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource78ref +{ +ResourceID = "[nxFileLine][V-204555][medium][SRG-OS-000042-GPOS-00020]::[RHEL]Baseline"; + ContainsLine = "-a always,exit -F path=/usr/sbin/postqueue -F perm=x -F auid>=1000 -F auid!=unset -k privileged-postfix"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/sbin/postqueue\\s*-F\\s*perm\\s*=\\s*x\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-postfix"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource79ref +{ +ResourceID = "[nxFileLine][V-204556][medium][SRG-OS-000042-GPOS-00020]::[RHEL]Baseline"; + ContainsLine = "-a always,exit -F path=/usr/libexec/openssh/ssh-keysign -F perm=x -F auid>=1000 -F auid!=unset -k privileged-ssh"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/libexec/openssh/ssh-keysign\\s*-F\\s*perm\\s*=\\s*x\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-ssh"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource80ref +{ +ResourceID = "[nxFileLine][V-204557][medium][SRG-OS-000042-GPOS-00020]::[RHEL]Baseline"; + ContainsLine = "-a always,exit -F path=/usr/bin/crontab -F perm=x -F auid>=1000 -F auid!=unset -k privileged-cron"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/bin/crontab\\s*-F\\s*perm\\s*=\\s*x\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-cron"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource81ref +{ +ResourceID = "[nxFileLine][V-204558][medium][SRG-OS-000471-GPOS-00215]::[RHEL]Baseline"; + ContainsLine = "-a always,exit -F path=/usr/sbin/pam_timestamp_check -F perm=x -F auid>=1000 -F auid!=unset -k privileged-pam"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/sbin/pam_timestamp_check\\s*-F\\s*perm\\s*=\\s*x\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-pam"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource82ref +{ +ResourceID = "[nxFileLine][V-204559.a][medium][SRG-OS-000471-GPOS-00216]::[RHEL]Baseline"; + ContainsLine = "-a always,exit -F arch=b32 -S create_module -F auid>=1000 -F auid!=unset -k module-change"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*create_module\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*module-change"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource83ref +{ +ResourceID = "[nxFileLine][V-204559.b][medium][SRG-OS-000471-GPOS-00216]::[RHEL]Baseline"; + ContainsLine = "-a always,exit -F arch=b64 -S create_module -F auid>=1000 -F auid!=unset -k module-change"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*create_module\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*module-change"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource84ref +{ +ResourceID = "[nxFileLine][V-204560.a][medium][SRG-OS-000471-GPOS-00216]::[RHEL]Baseline"; + ContainsLine = "-a always,exit -F arch=b32 -S init_module,finit_module -F auid>=1000 -F auid!=unset -k modulechange"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*init_module,finit_module\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*modulechange"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource85ref +{ +ResourceID = "[nxFileLine][V-204560.b][medium][SRG-OS-000471-GPOS-00216]::[RHEL]Baseline"; + ContainsLine = "-a always,exit -F arch=b64 -S init_module,finit_module -F auid>=1000 -F auid!=unset -k modulechange"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*init_module,finit_module\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*modulechange"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource86ref +{ +ResourceID = "[nxFileLine][V-204562.a][medium][SRG-OS-000471-GPOS-00216]::[RHEL]Baseline"; + ContainsLine = "-a always,exit -F arch=b32 -S delete_module -F auid>=1000 -F auid!=unset -k module-change"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*delete_module\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*module-change"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource87ref +{ +ResourceID = "[nxFileLine][V-204562.b][medium][SRG-OS-000471-GPOS-00216]::[RHEL]Baseline"; + ContainsLine = "-a always,exit -F arch=b64 -S delete_module -F auid>=1000 -F auid!=unset -k module-change"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*delete_module\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*module-change"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource88ref +{ +ResourceID = "[nxFileLine][V-204563][medium][SRG-OS-000471-GPOS-00216]::[RHEL]Baseline"; + ContainsLine = "-a always,exit -F path=/usr/bin/kmod -F perm=x -F auid>=1000 -F auid!=unset -k modules"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/bin/kmod\\s*-F\\s*perm\\s*=\\s*x\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*modules"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource89ref +{ +ResourceID = "[nxFileLine][V-204564][medium][SRG-OS-000004-GPOS-00004]::[RHEL]Baseline"; + ContainsLine = "-w /etc/passwd -p wa -k identity"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-w\\s*/etc/passwd\\s*-p\\s*wa\\s*-k\\s*identity"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource90ref +{ +ResourceID = "[nxFileLine][V-204565][medium][SRG-OS-000004-GPOS-00004]::[RHEL]Baseline"; + ContainsLine = "-w /etc/group -p wa -k identity"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-w\\s*/etc/group\\s*-p\\s*wa\\s*-k\\s*identity"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource91ref +{ +ResourceID = "[nxFileLine][V-204566][medium][SRG-OS-000004-GPOS-00004]::[RHEL]Baseline"; + ContainsLine = "-w /etc/gshadow -p wa -k identity"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-w\\s*/etc/gshadow\\s*-p\\s*wa\\s*-k\\s*identity"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource92ref +{ +ResourceID = "[nxFileLine][V-204567][medium][SRG-OS-000004-GPOS-00004]::[RHEL]Baseline"; + ContainsLine = "-w /etc/shadow -p wa -k identity"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-w\\s*/etc/shadow\\s*-p\\s*wa\\s*-k\\s*identity"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource93ref +{ +ResourceID = "[nxFileLine][V-204568][medium][SRG-OS-000004-GPOS-00004]::[RHEL]Baseline"; + ContainsLine = "-w /etc/security/opasswd -p wa -k identity"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-w\\s*/etc/security/opasswd\\s*-p\\s*wa\\s*-k\\s*identity"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource94ref +{ +ResourceID = "[nxFileLine][V-204572.a][medium][SRG-OS-000466-GPOS-00210]::[RHEL]Baseline"; + ContainsLine = "-a always,exit -F arch=b32 -S unlink,unlinkat,rename,renameat,rmdir -F auid>=1000 -F auid!=unset -k delete"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*unlink,unlinkat,rename,renameat,rmdir\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*delete"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource95ref +{ +ResourceID = "[nxFileLine][V-204572.b][medium][SRG-OS-000466-GPOS-00210]::[RHEL]Baseline"; + ContainsLine = "-a always,exit -F arch=b64 -S unlink,unlinkat,rename,renameat,rmdir -F auid>=1000 -F auid!=unset -k delete"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*unlink,unlinkat,rename,renameat,rmdir\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*delete"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource96ref +{ +ResourceID = "[nxFileLine][V-204578][medium][SRG-OS-000033-GPOS-00014]::[RHEL]Baseline"; + ContainsLine = "Ciphers aes256-ctr,aes192-ctr,aes128-ctr"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/ssh/sshd_config"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "^#\\s*Ciphers.*|^\\s*Ciphers\\s*aes128-ctr.*|^\\s*Ciphers\\s*aes192-ctr.*"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource97ref +{ +ResourceID = "[nxFileLine][V-204579.b][medium][SRG-OS-000163-GPOS-00072]::[RHEL]Baseline"; + ContainsLine = "declare -xr TMOUT=900"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/profile.d/tmout.sh"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "^\\s*TMOUT\\s*=\\s*[0-8]?[0-9]?[0-9]?$|^#\\s*TMOUT.*"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource98ref +{ +ResourceID = "[nxFileLine][V-204579.c][medium][SRG-OS-000163-GPOS-00072]::[RHEL]Baseline"; + ContainsLine = "declare -xr TMOUT=900"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/bashrc"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "^\\s*TMOUT\\s*=\\s*[0-8]?[0-9]?[0-9]?$|^#\\s*TMOUT.*"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource99ref +{ +ResourceID = "[nxFileLine][V-204579.d][medium][SRG-OS-000163-GPOS-00072]::[RHEL]Baseline"; + ContainsLine = "declare -xr TMOUT=900"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/profile"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "^\\s*TMOUT\\s*=\\s*[0-8]?[0-9]?[0-9]?$|^#\\s*TMOUT.*"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource100ref +{ +ResourceID = "[nxFileLine][V-204580][medium][SRG-OS-000023-GPOS-00006]::[RHEL]Baseline"; + ContainsLine = "banner /etc/issue"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/ssh/sshd_config"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*banner\\s*/etc/issue"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource101ref +{ +ResourceID = "[nxFileLine][V-204587][medium][SRG-OS-000163-GPOS-00072]::[RHEL]Baseline"; + ContainsLine = "ClientAliveInterval 600"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/ssh/sshd_config"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "^\\s*ClientAliveInterval\\s*[0-5]?[0-9]?[0-9]?\\s*$|^#\\s*ClientAliveInterval.*|^\\s*ClientAliveInterval\\s*$"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource102ref +{ +ResourceID = "[nxFileLine][V-204588][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; + ContainsLine = "RhostsRSAAuthentication no"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/ssh/sshd_config"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "^#\\s*RhostsRSAAuthentication.*$|^RhostsRSAAuthentication\\s*(?!no\\b)\\w*$"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource103ref +{ +ResourceID = "[nxFileLine][V-204589][medium][SRG-OS-000163-GPOS-00072]::[RHEL]Baseline"; + ContainsLine = "ClientAliveCountMax 0"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/ssh/sshd_config"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "^#\\s*ClientAliveCountMax.*$|^ClientAliveCountMax\\s*(?!0\\b)\\w*$"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource104ref +{ +ResourceID = "[nxFileLine][V-204590][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; + ContainsLine = "IgnoreRhosts yes"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/ssh/sshd_config"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "^#\\s*IgnoreRhosts.*$|^IgnoreRhosts\\s*(?!yes\\b)\\w*$"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource105ref +{ +ResourceID = "[nxFileLine][V-204591][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; + ContainsLine = "PrintLastLog yes"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/ssh/sshd_config"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "^#\\s*PrintLastLog.*$|^PrintLastLog\\s*(?!yes\\b)\\w*$"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource106ref +{ +ResourceID = "[nxFileLine][V-204592][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; + ContainsLine = "PermitRootLogin no"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/ssh/sshd_config"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "^#\\s*PermitRootLogin.*$|^PermitRootLogin\\s*(?!no\\b)\\w*$"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource107ref +{ +ResourceID = "[nxFileLine][V-204593][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; + ContainsLine = "IgnoreUserKnownHosts yes"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/ssh/sshd_config"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "^#\\s*IgnoreUserKnownHosts.*$|^IgnoreUserKnownHosts\\s*(?!yes\\b)\\w*$"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource108ref +{ +ResourceID = "[nxFileLine][V-204594][high][SRG-OS-000074-GPOS-00042]::[RHEL]Baseline"; + ContainsLine = "Protocol 2"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/ssh/sshd_config"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "^#\\s*Protocol.*$|^Protocol\\s*(?!2\\b)\\w*$"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource109ref +{ +ResourceID = "[nxFileLine][V-204595][medium][SRG-OS-000250-GPOS-00093]::[RHEL]Baseline"; + ContainsLine = "MACs hmac-sha2-512,hmac-sha2-256"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/ssh/sshd_config"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*MACs.*|\\s*MACs\\s*hmac-(?!sha2-512).*"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource110ref +{ +ResourceID = "[nxFileLine][V-204598][medium][SRG-OS-000364-GPOS-00151]::[RHEL]Baseline"; + ContainsLine = "GSSAPIAuthentication no"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/ssh/sshd_config"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "^#\\s*GSSAPIAuthentication.*$|^GSSAPIAuthentication\\s*(?!no\\b)\\w*$"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource111ref +{ +ResourceID = "[nxFileLine][V-204599][medium][SRG-OS-000364-GPOS-00151]::[RHEL]Baseline"; + ContainsLine = "KerberosAuthentication no"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/ssh/sshd_config"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "^#\\s*KerberosAuthentication.*$|^KerberosAuthentication\\s*(?!no\\b)\\w*$"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource112ref +{ +ResourceID = "[nxFileLine][V-204600][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; + ContainsLine = "StrictModes yes"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/ssh/sshd_config"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "^#\\s*StrictModes.*$|^StrictModes\\s*(?!yes\\b)\\w*$"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource113ref +{ +ResourceID = "[nxFileLine][V-204601][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; + ContainsLine = "UsePrivilegeSeparation sandbox"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/ssh/sshd_config"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "^#\\s*UsePrivilegeSeparation.*$|^UsePrivilegeSeparation\\s*(?!sandbox\\b)\\w*$"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource114ref +{ +ResourceID = "[nxFileLine][V-204602][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; + ContainsLine = "Compression delayed"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/ssh/sshd_config"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "^#\\s*Compression.*$|^Compression\\s*(?!delayed\\b)\\w*$"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource115ref +{ +ResourceID = "[nxFileLine][V-204622][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; + ContainsLine = "X11Forwarding no"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/ssh/sshd_config"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "^#\\s*X11Forwarding.*$|^X11Forwarding\\s*(?!no\\b)\\w*$"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource116ref +{ +ResourceID = "[nxFileLine][V-233307][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; + ContainsLine = "X11UseLocalhost yes"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/ssh/sshd_config"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*X11UseLocalhost\\s*yes"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource117ref +{ +ResourceID = "[nxFileLine][V-255925][medium][SRG-OS-000033-GPOS-00014]::[RHEL]Baseline"; + ContainsLine = "KexAlgorithms ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/ssh/sshd_config"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*KexAlgorithms\\s*ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxServiceResource as $MSFT_nxServiceResource1ref +{ +ResourceID = "[nxService][V-204451][medium][SRG-OS-000114-GPOS-00059]::[RHEL]Baseline"; + Controller = "systemd"; + Enabled = False; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxService.ps1::13::9::nxService"; + Name = "autofs"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxServiceResource as $MSFT_nxServiceResource2ref +{ +ResourceID = "[nxService][V-204492][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; + Controller = "systemd"; + Enabled = False; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxService.ps1::13::9::nxService"; + Name = "kdump"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxServiceResource as $MSFT_nxServiceResource3ref +{ +ResourceID = "[nxService][V-204503][medium][SRG-OS-000038-GPOS-00016]::[RHEL]Baseline"; + Controller = "systemd"; + State = "Running"; + Enabled = True; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxService.ps1::22::9::nxService"; + Name = "auditd"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxServiceResource as $MSFT_nxServiceResource4ref +{ +ResourceID = "[nxService][V-204586][medium][SRG-OS-000423-GPOS-00187]::[RHEL]Baseline"; + Controller = "systemd"; + State = "Running"; + Enabled = True; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxService.ps1::22::9::nxService"; + Name = "sshd"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxServiceResource as $MSFT_nxServiceResource5ref +{ +ResourceID = "[nxService][V-204604.b][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; + Controller = "systemd"; + State = "Running"; + Enabled = True; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxService.ps1::22::9::nxService"; + Name = "firewalld"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxScriptResource as $MSFT_nxScriptResource1ref +{ +ResourceID = "[nxScript][V-204399.b][medium][[Skip] SRG-OS-000029-GPOS-00010]::[RHEL]Baseline"; + GetScript = "#!/bin/bash\necho [V-204399.b][medium][[Skip] SRG-OS-000029-GPOS-00010]"; + TestScript = "#!/bin/bash\nexit 0"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxScript.skip.ps1::10::5::nxScript"; + SetScript = "#!/bin/bash"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxScriptResource as $MSFT_nxScriptResource2ref +{ +ResourceID = "[nxScript][V-204400][medium][[Skip] SRG-OS-000029-GPOS-00010]::[RHEL]Baseline"; + GetScript = "#!/bin/bash\necho [V-204400][medium][[Skip] SRG-OS-000029-GPOS-00010]"; + TestScript = "#!/bin/bash\nexit 0"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxScript.skip.ps1::10::5::nxScript"; + SetScript = "#!/bin/bash"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxScriptResource as $MSFT_nxScriptResource3ref +{ +ResourceID = "[nxScript][V-204403][medium][[Skip] SRG-OS-000029-GPOS-00010]::[RHEL]Baseline"; + GetScript = "#!/bin/bash\necho [V-204403][medium][[Skip] SRG-OS-000029-GPOS-00010]"; + TestScript = "#!/bin/bash\nexit 0"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxScript.skip.ps1::10::5::nxScript"; + SetScript = "#!/bin/bash"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxScriptResource as $MSFT_nxScriptResource4ref +{ +ResourceID = "[nxScript][V-204509][medium][[Skip] SRG-OS-000342-GPOS-00133]::[RHEL]Baseline"; + GetScript = "#!/bin/bash\necho [V-204509][medium][[Skip] SRG-OS-000342-GPOS-00133]"; + TestScript = "#!/bin/bash\nexit 0"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxScript.skip.ps1::10::5::nxScript"; + SetScript = "#!/bin/bash"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxScriptResource as $MSFT_nxScriptResource5ref +{ +ResourceID = "[nxScript][V-204513][medium][[Skip] SRG-OS-000343-GPOS-00134]::[RHEL]Baseline"; + GetScript = "#!/bin/bash\necho [V-204513][medium][[Skip] SRG-OS-000343-GPOS-00134]"; + TestScript = "#!/bin/bash\nexit 0"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxScript.skip.ps1::10::5::nxScript"; + SetScript = "#!/bin/bash"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxScriptResource as $MSFT_nxScriptResource6ref +{ +ResourceID = "[nxScript][V-204623][medium][[Skip] SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; + GetScript = "#!/bin/bash\necho [V-204623][medium][[Skip] SRG-OS-000480-GPOS-00227]"; + TestScript = "#!/bin/bash\nexit 0"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxScript.skip.ps1::10::5::nxScript"; + SetScript = "#!/bin/bash"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxScriptResource as $MSFT_nxScriptResource7ref +{ +ResourceID = "[nxScript][V-244557][medium][[Skip] SRG-OS-000080-GPOS-00048]::[RHEL]Baseline"; + GetScript = "#!/bin/bash\necho [V-244557][medium][[Skip] SRG-OS-000080-GPOS-00048]"; + TestScript = "#!/bin/bash\nexit 0"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxScript.skip.ps1::10::5::nxScript"; + SetScript = "#!/bin/bash"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxScriptResource as $MSFT_nxScriptResource8ref +{ +ResourceID = "[nxScript][V-244558][medium][[Skip] SRG-OS-000080-GPOS-00048]::[RHEL]Baseline"; + GetScript = "#!/bin/bash\necho [V-244558][medium][[Skip] SRG-OS-000080-GPOS-00048]"; + TestScript = "#!/bin/bash\nexit 0"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxScript.skip.ps1::10::5::nxScript"; + SetScript = "#!/bin/bash"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxScriptResource as $MSFT_nxScriptResource9ref +{ +ResourceID = "[nxScript][V-204399.a][medium][[Skip] SRG-OS-000029-GPOS-00010]::[RHEL]Baseline"; + GetScript = "#!/bin/bash\necho [V-204399.a][medium][[Skip] SRG-OS-000029-GPOS-00010]"; + TestScript = "#!/bin/bash\nexit 0"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxScript.skip.ps1::10::5::nxScript"; + SetScript = "#!/bin/bash"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxScriptResource as $MSFT_nxScriptResource10ref +{ +ResourceID = "[nxScript][V-255926][medium][[Skip] SRG-OS-000029-GPOS-00010]::[RHEL]Baseline"; + GetScript = "#!/bin/bash\necho [V-255926][medium][[Skip] SRG-OS-000029-GPOS-00010]"; + TestScript = "#!/bin/bash\nexit 0"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxScript.skip.ps1::10::5::nxScript"; + SetScript = "#!/bin/bash"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of OMI_ConfigurationDocument + + { + Version="2.0.0"; + + MinimumCompatibleVersion = "1.0.0"; + + CompatibleVersionAdditionalProperties= {"Omi_BaseResource:ConfigurationName"}; + + Author="Microsoft"; + + GenerationDate="03/09/2023 14:17:33"; + + GenerationHost="Microsoft"; + + Name="LinuxBaseLine"; + + }; + diff --git a/stig/linux/config/RHEL77.mof b/stig/linux/config/RHEL77.mof index 58d42fc..08dbf37 100644 --- a/stig/linux/config/RHEL77.mof +++ b/stig/linux/config/RHEL77.mof @@ -1,2118 +1,1829 @@ -/* -@TargetNode='RHEL77' -@GeneratedBy=Microsoft -@GenerationDate=06/30/2022 11:38:45 -@GenerationHost=Microsoft -*/ - -instance of MSFT_nxPackageResource as $MSFT_nxPackageResource1ref -{ -ResourceID = "[nxPackage][V-204442][high][SRG-OS-000095-GPOS-00049]::[RHEL]Baseline"; - Ensure = "Absent"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxPackage.ps1::8::5::nxPackage"; - Name = "rsh-server"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxPackageResource as $MSFT_nxPackageResource2ref -{ -ResourceID = "[nxPackage][V-204443][high][SRG-OS-000095-GPOS-00049]::[RHEL]Baseline"; - Ensure = "Absent"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxPackage.ps1::8::5::nxPackage"; - Name = "ypserv"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxPackageResource as $MSFT_nxPackageResource3ref -{ -ResourceID = "[nxPackage][V-204497][high][SRG-OS-000033-GPOS-00014]::[RHEL]Baseline"; - Ensure = "Present"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxPackage.ps1::8::5::nxPackage"; - Name = "dracut-fips"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxPackageResource as $MSFT_nxPackageResource4ref -{ -ResourceID = "[nxPackage][V-204498][low][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; - Ensure = "Present"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxPackage.ps1::8::5::nxPackage"; - Name = "aide"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxPackageResource as $MSFT_nxPackageResource5ref -{ -ResourceID = "[nxPackage][V-204502][high][SRG-OS-000095-GPOS-00049]::[RHEL]Baseline"; - Ensure = "Absent"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxPackage.ps1::8::5::nxPackage"; - Name = "telnet-server"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxPackageResource as $MSFT_nxPackageResource6ref -{ -ResourceID = "[nxPackage][V-204585][medium][SRG-OS-000423-GPOS-00187]::[RHEL]Baseline"; - Ensure = "Present"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxPackage.ps1::8::5::nxPackage"; - Name = "openssh-server"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxPackageResource as $MSFT_nxPackageResource7ref -{ -ResourceID = "[nxPackage][V-204604.a][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; - Ensure = "Present"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxPackage.ps1::8::5::nxPackage"; - Name = "firewalld"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxPackageResource as $MSFT_nxPackageResource8ref -{ -ResourceID = "[nxPackage][V-204620][high][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; - Ensure = "Absent"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxPackage.ps1::8::5::nxPackage"; - Name = "vsftpd"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxPackageResource as $MSFT_nxPackageResource9ref -{ -ResourceID = "[nxPackage][V-204621][high][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; - Ensure = "Absent"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxPackage.ps1::8::5::nxPackage"; - Name = "tftp-server"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxPackageResource as $MSFT_nxPackageResource10ref -{ -ResourceID = "[nxPackage][V-204631][medium][SRG-OS-000375-GPOS-00160]::[RHEL]Baseline"; - Ensure = "Present"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxPackage.ps1::8::5::nxPackage"; - Name = "pam_pkcs11"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileResource as $MSFT_nxFileResource1ref -{ -ResourceID = "[nxFile][V-204395][medium][SRG-OS-000023-GPOS-00006]::[RHEL]Baseline"; - Contents = "You are accessing a U.S. Government (USG) Information System (IS) that is provided for USG-authorized use only.\n\nBy using this IS (which includes any device attached to this IS), you consent to the following conditions:\n\n-The USG routinely intercepts and monitors communications on this IS for purposes including, but not limited to, penetration testing, COMSEC monitoring, network operations and defense, personnel misconduct (PM), law enforcement (LE), and counterintelligence (CI) investigations.\n\n-At any time, the USG may inspect and seize data stored on this IS.\n\n-Communications using, or data stored on, this IS are not private, are subject to routine monitoring, interception, and search, and may be disclosed or used for any USG-authorized purpose.\n\n-This IS includes security measures (e.g., authentication and access controls) to protect USG interests--not for your personal benefit or privacy.\n\n-Notwithstanding the above, using this IS does not constitute consent to PM, LE or CI investigative searching or monitoring of the content of privileged communications, or work product, related to personal representation or services by attorneys, psychotherapists, or clergy, and their assistants. Such communications and work product are private and confidential. See User Agreement for details."; - DestinationPath = "/etc/issue"; - ModuleName = "nx"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; - ModuleVersion = "1.0"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileResource as $MSFT_nxFileResource2ref -{ -ResourceID = "[nxFile][V-204449.a][medium][SRG-OS-000114-GPOS-00059]::[RHEL]Baseline"; - Contents = ""; - DestinationPath = "/etc/modprobe.d/usb-storage.conf"; - ModuleName = "nx"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; - ModuleVersion = "1.0"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileResource as $MSFT_nxFileResource3ref -{ -ResourceID = "[nxFile][V-204449.b][medium][SRG-OS-000114-GPOS-00059]::[RHEL]Baseline"; - Contents = ""; - DestinationPath = "/etc/modprobe.d/blacklist.conf"; - ModuleName = "nx"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; - ModuleVersion = "1.0"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileResource as $MSFT_nxFileResource4ref -{ -ResourceID = "[nxFile][V-204450.a][medium][SRG-OS-000378-GPOS-00163]::[RHEL]Baseline"; - Contents = ""; - DestinationPath = "/etc/modprobe.d/dccp.conf"; - ModuleName = "nx"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; - ModuleVersion = "1.0"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileResource as $MSFT_nxFileResource5ref -{ -ResourceID = "[nxFile][V-204576][low][SRG-OS-000027-GPOS-00008]::[RHEL]Baseline"; - Contents = "* hard maxlogins 10"; - DestinationPath = "/etc/security/limits.d/204576-powerstig.conf"; - ModuleName = "nx"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; - ModuleVersion = "1.0"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileResource as $MSFT_nxFileResource6ref -{ -ResourceID = "[nxFile][V-204579.a][medium][SRG-OS-000163-GPOS-00072]::[RHEL]Baseline"; - Contents = ""; - DestinationPath = "/etc/profile.d/tmout.sh"; - ModuleName = "nx"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; - ModuleVersion = "1.0"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileResource as $MSFT_nxFileResource7ref -{ -ResourceID = "[nxFile][V-204584][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; - Contents = "kernel.randomize_va_space = 2"; - DestinationPath = "/etc/sysctl.d/204584-powerstig.conf"; - ModuleName = "nx"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; - ModuleVersion = "1.0"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileResource as $MSFT_nxFileResource8ref -{ -ResourceID = "[nxFile][V-204609][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; - Contents = "net.ipv4.conf.all.accept_source_route = 0"; - DestinationPath = "/etc/sysctl.d/204609-powerstig.conf"; - ModuleName = "nx"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; - ModuleVersion = "1.0"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileResource as $MSFT_nxFileResource9ref -{ -ResourceID = "[nxFile][V-204610][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; - Contents = "net.ipv4.conf.all.rp_filter = 1"; - DestinationPath = "/etc/sysctl.d/204610-powerstig.conf"; - ModuleName = "nx"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; - ModuleVersion = "1.0"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileResource as $MSFT_nxFileResource10ref -{ -ResourceID = "[nxFile][V-204611][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; - Contents = "net.ipv4.conf.default.rp_filter = 1"; - DestinationPath = "/etc/sysctl.d/204611-powerstig.conf"; - ModuleName = "nx"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; - ModuleVersion = "1.0"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileResource as $MSFT_nxFileResource11ref -{ -ResourceID = "[nxFile][V-204612][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; - Contents = "net.ipv4.conf.default.accept_source_route = 0"; - DestinationPath = "/etc/sysctl.d/204612-powerstig.conf"; - ModuleName = "nx"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; - ModuleVersion = "1.0"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileResource as $MSFT_nxFileResource12ref -{ -ResourceID = "[nxFile][V-204613][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; - Contents = "net.ipv4.icmp_echo_ignore_broadcasts = 1"; - DestinationPath = "/etc/sysctl.d/204613-powerstig.conf"; - ModuleName = "nx"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; - ModuleVersion = "1.0"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileResource as $MSFT_nxFileResource13ref -{ -ResourceID = "[nxFile][V-204614][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; - Contents = "net.ipv4.conf.default.accept_redirects = 0"; - DestinationPath = "/etc/sysctl.d/204614-powerstig.conf"; - ModuleName = "nx"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; - ModuleVersion = "1.0"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileResource as $MSFT_nxFileResource14ref -{ -ResourceID = "[nxFile][V-204615][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; - Contents = "net.ipv4.conf.all.accept_redirects = 0"; - DestinationPath = "/etc/sysctl.d/204615-powerstig.conf"; - ModuleName = "nx"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; - ModuleVersion = "1.0"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileResource as $MSFT_nxFileResource15ref -{ -ResourceID = "[nxFile][V-204616][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; - Contents = "net.ipv4.conf.default.send_redirects = 0"; - DestinationPath = "/etc/sysctl.d/204616-powerstig.conf"; - ModuleName = "nx"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; - ModuleVersion = "1.0"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileResource as $MSFT_nxFileResource16ref -{ -ResourceID = "[nxFile][V-204617][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; - Contents = "net.ipv4.conf.all.send_redirects = 0"; - DestinationPath = "/etc/sysctl.d/204617-powerstig.conf"; - ModuleName = "nx"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; - ModuleVersion = "1.0"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileResource as $MSFT_nxFileResource17ref -{ -ResourceID = "[nxFile][V-204625][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; - Contents = "net.ipv4.ip_forward = 0"; - DestinationPath = "/etc/sysctl.d/204625-powerstig.conf"; - ModuleName = "nx"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; - ModuleVersion = "1.0"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileResource as $MSFT_nxFileResource18ref -{ -ResourceID = "[nxFile][V-204630][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; - Contents = "net.ipv6.conf.all.accept_source_route = 0"; - DestinationPath = "/etc/sysctl.d/204630-powerstig.conf"; - ModuleName = "nx"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; - ModuleVersion = "1.0"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileResource as $MSFT_nxFileResource19ref -{ -ResourceID = "[nxFile][V-237634.a][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; - Contents = "Defaults !targetpw"; - DestinationPath = "/etc/sudoers.d/237634a-powerstig.conf"; - ModuleName = "nx"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; - ModuleVersion = "1.0"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileResource as $MSFT_nxFileResource20ref -{ -ResourceID = "[nxFile][V-237634.b][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; - Contents = "Defaults !rootpw"; - DestinationPath = "/etc/sudoers.d/237634b-powerstig.conf"; - ModuleName = "nx"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; - ModuleVersion = "1.0"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileResource as $MSFT_nxFileResource21ref -{ -ResourceID = "[nxFile][V-237634.c][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; - Contents = "Defaults !runaspw"; - DestinationPath = "/etc/sudoers.d/237634c-powerstig.conf"; - ModuleName = "nx"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; - ModuleVersion = "1.0"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileResource as $MSFT_nxFileResource22ref -{ -ResourceID = "[nxFile][V-237635][medium][SRG-OS-000373-GPOS-00156]::[RHEL]Baseline"; - Contents = "Defaults timestamp_timeout=0"; - DestinationPath = "/etc/sudoers.d/237635-powerstig.conf"; - ModuleName = "nx"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; - ModuleVersion = "1.0"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileResource as $MSFT_nxFileResource23ref -{ -ResourceID = "[nxFile][V-250314][medium][SRG-OS-000324-GPOS-00125]::[RHEL]Baseline"; - Contents = "%wheel ALL=(ALL) TYPE=sysadm_t ROLE=sysadm_r ALL"; - DestinationPath = "/etc/sudoers.d/250314-powerstig.conf"; - ModuleName = "nx"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; - ModuleVersion = "1.0"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource1ref -{ -ResourceID = "[nxFileLine][V-204405][medium][SRG-OS-000069-GPOS-00037]::[RHEL]Baseline"; - ContainsLine = "password substack system-auth"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/pam.d/passwd"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "^\\s*password(?:\\t*|\\s*)substack\\tsystem-auth\\s*$|^#\\s*password\\s*substack\\s*system-auth.*"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource2ref -{ -ResourceID = "[nxFileLine][V-204407][medium][SRG-OS-000069-GPOS-00037]::[RHEL]Baseline"; - ContainsLine = "ucredit = -1"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/security/pwquality.conf"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "^#\\s*ucredit.*$|^ucredit\\s*=\\s*(?!-1\\b)\\w*$"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource3ref -{ -ResourceID = "[nxFileLine][V-204408][medium][SRG-OS-000070-GPOS-00038]::[RHEL]Baseline"; - ContainsLine = "lcredit = -1"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/security/pwquality.conf"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "^#\\s*lcredit.*$|^lcredit\\s*=\\s*(?!-1\\b)\\w*$"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource4ref -{ -ResourceID = "[nxFileLine][V-204409][medium][SRG-OS-000071-GPOS-00039]::[RHEL]Baseline"; - ContainsLine = "dcredit = -1"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/security/pwquality.conf"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "^#\\s*dcredit.*$|^dcredit\\s*=\\s*(?!-1\\b)\\w*$"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource5ref -{ -ResourceID = "[nxFileLine][V-204410][medium][SRG-OS-000266-GPOS-00101]::[RHEL]Baseline"; - ContainsLine = "ocredit=-1"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/security/pwquality.conf"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "^#\\s*ocredit.*$|^ocredit\\s*=\\s*(?!-1)\\w*$"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource6ref -{ -ResourceID = "[nxFileLine][V-204411][medium][SRG-OS-000072-GPOS-00040]::[RHEL]Baseline"; - ContainsLine = "difok = 8"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/security/pwquality.conf"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*difok\\s*=.*|^\\s*difok\\s*=\\s*(-|)[0-7]$"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource7ref -{ -ResourceID = "[nxFileLine][V-204412][medium][SRG-OS-000072-GPOS-00040]::[RHEL]Baseline"; - ContainsLine = "minclass = 4"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/security/pwquality.conf"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "^#\\s*minclass\\s*=.*|^\\s*minclass\\s*=\\s*(?!\\d{2,})[1-3]"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource8ref -{ -ResourceID = "[nxFileLine][V-204413][medium][SRG-OS-000072-GPOS-00040]::[RHEL]Baseline"; - ContainsLine = "maxrepeat = 3"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/security/pwquality.conf"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "^#\\s*maxrepeat\\s*=.*|^\\s*maxrepeat\\s*=\\s*(?:\\d{2,}|[4-9])"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource9ref -{ -ResourceID = "[nxFileLine][V-204414][medium][SRG-OS-000072-GPOS-00040]::[RHEL]Baseline"; - ContainsLine = "maxclassrepeat = 4"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/security/pwquality.conf"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "^#\\s*maxclassrepeat\\s*=.*|^\\s*maxclassrepeat\\s*=\\s*(?:\\d{2,}|[1-3|5-9])"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource10ref -{ -ResourceID = "[nxFileLine][V-204416][medium][SRG-OS-000073-GPOS-00041]::[RHEL]Baseline"; - ContainsLine = "ENCRYPT_METHOD SHA512"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/login.defs"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*ENCRYPT_METHOD\\s*SHA512"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource11ref -{ -ResourceID = "[nxFileLine][V-204418][medium][SRG-OS-000075-GPOS-00043]::[RHEL]Baseline"; - ContainsLine = "PASS_MIN_DAYS 1"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/login.defs"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "^\\s*PASS_MIN_DAYS\\s*[0]*$|#\\s*PASS_MIN_DAYS.*"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource12ref -{ -ResourceID = "[nxFileLine][V-204420][medium][SRG-OS-000076-GPOS-00044]::[RHEL]Baseline"; - ContainsLine = "PASS_MAX_DAYS 60"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/login.defs"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "^\\s*PASS_MAX_DAYS\\s*([6][1-9]|[7-9][0-9]|\\d{3,})$|#\\s*PASS_MAX_DAYS.*"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource13ref -{ -ResourceID = "[nxFileLine][V-204423][medium][SRG-OS-000078-GPOS-00046]::[RHEL]Baseline"; - ContainsLine = "minlen = 15"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/security/pwquality.conf"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "^\\s*minlen\\s*=\\s*([0-9]|[1][1-4])$|#\\s*minlen.*"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource14ref -{ -ResourceID = "[nxFileLine][V-204425][high][SRG-OS-000106-GPOS-00053]::[RHEL]Baseline"; - ContainsLine = "PermitEmptyPasswords no"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/ssh/sshd_config"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "^#\\s*PermitEmptyPasswords.*$|^PermitEmptyPasswords\\s*(?!no\\b)\\w*$"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource15ref -{ -ResourceID = "[nxFileLine][V-204426][medium][SRG-OS-000118-GPOS-00060]::[RHEL]Baseline"; - ContainsLine = "INACTIVE=35"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/default/useradd"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "^#\\s*INACTIVE\\s*=.*|^\\s*INACTIVE\\s*=\\s*(3[5-9]|[4-9]\\d+|\\d{3,})"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource16ref -{ -ResourceID = "[nxFileLine][V-204431][medium][SRG-OS-000480-GPOS-00226]::[RHEL]Baseline"; - ContainsLine = "FAIL_DELAY 4"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/login.defs"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "^#\\s*FAIL_DELAY.*|^FAIL_DELAY\\s*(?!\\d{2,})[1-3]"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource17ref -{ -ResourceID = "[nxFileLine][V-204434][medium][SRG-OS-000480-GPOS-00229]::[RHEL]Baseline"; - ContainsLine = "PermitUserEnvironment no"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/ssh/sshd_config"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "^#\\s*PermitUserEnvironment.*$|^PermitUserEnvironment\\s*(?!no\\b)\\w*$"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource18ref -{ -ResourceID = "[nxFileLine][V-204435][medium][SRG-OS-000480-GPOS-00229]::[RHEL]Baseline"; - ContainsLine = "HostbasedAuthentication no"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/ssh/sshd_config"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "^#\\s*HostbasedAuthentication.*$|^HostbasedAuthentication\\s*(?!no\\b)\\w*$"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource19ref -{ -ResourceID = "[nxFileLine][V-204447][high][SRG-OS-000366-GPOS-00153]::[RHEL]Baseline"; - ContainsLine = "gpgcheck=1"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/yum.conf"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*gpgcheck\\s*=\\s*1"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource20ref -{ -ResourceID = "[nxFileLine][V-204448][high][SRG-OS-000366-GPOS-00153]::[RHEL]Baseline"; - ContainsLine = "localpkg_gpgcheck=1"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/yum.conf"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*localpkg_gpgcheck\\s*=\\s*1"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource21ref -{ -ResourceID = "[nxFileLine][V-204449.c][medium][SRG-OS-000114-GPOS-00059]::[RHEL]Baseline"; - ContainsLine = "install usb-storage /bin/true"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/modprobe.d/usb-storage.conf"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*install\\s*usb-storage\\s*/bin/true"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource22ref -{ -ResourceID = "[nxFileLine][V-204449.d][medium][SRG-OS-000114-GPOS-00059]::[RHEL]Baseline"; - ContainsLine = "blacklist usb-storage"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/modprobe.d/blacklist.conf"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*blacklist\\s*usb-storage"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource23ref -{ -ResourceID = "[nxFileLine][V-204450.b][medium][SRG-OS-000378-GPOS-00163]::[RHEL]Baseline"; - ContainsLine = "install dccp /bin/true"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/modprobe.d/dccp.conf"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*install\\s*dccp\\s*/bin/true"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource24ref -{ -ResourceID = "[nxFileLine][V-204450.c][medium][SRG-OS-000378-GPOS-00163]::[RHEL]Baseline"; - ContainsLine = "blacklist dccp"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/modprobe.d/blacklist.conf"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*blacklist\\s*dccp"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource25ref -{ -ResourceID = "[nxFileLine][V-204452][low][SRG-OS-000437-GPOS-00194]::[RHEL]Baseline"; - ContainsLine = "clean_requirements_on_remove=1"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/yum.conf"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*clean_requirements_on_remove\\s*=\\s*1"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource26ref -{ -ResourceID = "[nxFileLine][V-204453][medium][SRG-OS-000445-GPOS-00199]::[RHEL]Baseline"; - ContainsLine = "SELINUX=enforcing"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/selinux/config"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "^#\\s*SELINUX.*$|^SELINUX\\s*=\\s*(?!enforcing)\\w*$"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource27ref -{ -ResourceID = "[nxFileLine][V-204454][medium][SRG-OS-000445-GPOS-00199]::[RHEL]Baseline"; - ContainsLine = "SELINUXTYPE=targeted"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/selinux/config"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "^#\\s*SELINUXTYPE.*$|^SELINUXTYPE\\s*=\\s*(?!targeted\\b)\\w*$"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource28ref -{ -ResourceID = "[nxFileLine][V-204457][medium][SRG-OS-000480-GPOS-00228]::[RHEL]Baseline"; - ContainsLine = "UMASK 077"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/login.defs"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "^\\s*UMASK(?!\\s077\\b)\\s*\\d*\\s*$|^#\\s*UMASK.*"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource29ref -{ -ResourceID = "[nxFileLine][V-204466][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; - ContainsLine = "CREATE_HOME yes"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/login.defs"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "^#\\s*CREATE_HOME.*$|^CREATE_HOME\\s*(?!yes\\b)\\w*$|^CREATE_HOME\\t.*"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource30ref -{ -ResourceID = "[nxFileLine][V-204504][medium][SRG-OS-000046-GPOS-00022]::[RHEL]Baseline"; - ContainsLine = "-f 2"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "^#\\s*-f\\s+2|^\\s*-f\\s*1"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileResource as $MSFT_nxFileResource24ref -{ -SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::29::9::nxFile"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - ResourceID = "[nxFile][V-204506.a][medium][SRG-OS-000342-GPOS-00133]::[RHEL]Baseline"; - DestinationPath = "/etc/audisp/plugins.d/au-remote.conf"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource31ref -{ -ResourceID = "[nxFileLine][V-204506.a][medium][SRG-OS-000342-GPOS-00133]::[RHEL]Baseline"; - ContainsLine = "active = yes"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audisp/plugins.d/au-remote.conf"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "\\s*active\\s*=\\s*no|active=yes|#\\s*active\\s*=.*"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource32ref -{ -ResourceID = "[nxFileLine][V-204506.b][medium][SRG-OS-000342-GPOS-00133]::[RHEL]Baseline"; - ContainsLine = "direction = out"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audisp/plugins.d/au-remote.conf"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*direction\\s*=\\s*out"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource33ref -{ -ResourceID = "[nxFileLine][V-204506.c][medium][SRG-OS-000342-GPOS-00133]::[RHEL]Baseline"; - ContainsLine = "path = /sbin/audisp-remote"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audisp/plugins.d/au-remote.conf"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*path\\s*=\\s*/sbin/audisp-remote"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource34ref -{ -ResourceID = "[nxFileLine][V-204506.d][medium][SRG-OS-000342-GPOS-00133]::[RHEL]Baseline"; - ContainsLine = "type = always"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audisp/plugins.d/au-remote.conf"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*type\\s*=\\s*always"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource35ref -{ -ResourceID = "[nxFileLine][V-204507][medium][SRG-OS-000342-GPOS-00133]::[RHEL]Baseline"; - ContainsLine = "overflow_action = syslog"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audisp/audispd.conf"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "^#\\s*overflow_action.*$|^overflow_action\\s*=\\s*(?!syslog$)\\w*$"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource36ref -{ -ResourceID = "[nxFileLine][V-204508][medium][SRG-OS-000342-GPOS-00133]::[RHEL]Baseline"; - ContainsLine = "name_format = hostname"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audisp/audispd.conf"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "^#\\s*name_format.*$|^name_format\\s*=\\s*(?!hostname$)\\w*$"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileResource as $MSFT_nxFileResource25ref -{ -SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::19::9::nxFile"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - ResourceID = "[nxFile][V-204510][medium][SRG-OS-000342-GPOS-00133]::[RHEL]Baseline"; - DestinationPath = "/etc/audisp/audisp-remote.conf"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource37ref -{ -ResourceID = "[nxFileLine][V-204510][medium][SRG-OS-000342-GPOS-00133]::[RHEL]Baseline"; - ContainsLine = "enable_krb5 = yes"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audisp/audisp-remote.conf"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*enable_krb5\\s*=\\s*yes"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource38ref -{ -ResourceID = "[nxFileLine][V-204511][medium][SRG-OS-000342-GPOS-00133]::[RHEL]Baseline"; - ContainsLine = "disk_full_action = single"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audisp/audisp-remote.conf"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "^#\\s*disk_full_action\\s*=.*|^disk_full_action\\s*=\\s*(?!halt\\b|single\\b|syslog\\b)\\w+"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource39ref -{ -ResourceID = "[nxFileLine][V-204512][medium][SRG-OS-000342-GPOS-00133]::[RHEL]Baseline"; - ContainsLine = "network_failure_action = syslog"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audisp/audisp-remote.conf"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "^#\\s*network_failure_action\\s*=.*|^network_failure_action\\s*=\\s*(?!halt\\b|single\\b|syslog\\b)\\w+"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource40ref -{ -ResourceID = "[nxFileLine][V-204514][medium][SRG-OS-000343-GPOS-00134]::[RHEL]Baseline"; - ContainsLine = "space_left_action = email"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/auditd.conf"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "^#\\s*space_left_action.*$|^space_left_action\\s*=\\s*(?!email$)\\w*$"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource41ref -{ -ResourceID = "[nxFileLine][V-204515][medium][SRG-OS-000343-GPOS-00134]::[RHEL]Baseline"; - ContainsLine = "action_mail_acct = root"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/auditd.conf"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "^#\\s*action_mail_acct.*|^action_mail_acct\\s*=\\s*(?!root\\b)\\w+"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource42ref -{ -ResourceID = "[nxFileLine][V-204516.a][medium][SRG-OS-000327-GPOS-00127]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S execve -C uid!=euid -F euid=0 -k setuid"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*execve\\s*-C\\s*uid!\\s*=\\s*euid\\s*-F\\s*euid\\s*=\\s*0\\s*-k\\s*setuid"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource43ref -{ -ResourceID = "[nxFileLine][V-204516.b][medium][SRG-OS-000327-GPOS-00127]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S execve -C uid!=euid -F euid=0 -k setuid"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*execve\\s*-C\\s*uid!\\s*=\\s*euid\\s*-F\\s*euid\\s*=\\s*0\\s*-k\\s*setuid"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource44ref -{ -ResourceID = "[nxFileLine][V-204516.c][medium][SRG-OS-000327-GPOS-00127]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S execve -C gid!=egid -F egid=0 -k setgid"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*execve\\s*-C\\s*gid!\\s*=\\s*egid\\s*-F\\s*egid\\s*=\\s*0\\s*-k\\s*setgid"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource45ref -{ -ResourceID = "[nxFileLine][V-204516.d][medium][SRG-OS-000327-GPOS-00127]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S execve -C gid!=egid -F egid=0 -k setgid"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*execve\\s*-C\\s*gid!\\s*=\\s*egid\\s*-F\\s*egid\\s*=\\s*0\\s*-k\\s*setgid"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource46ref -{ -ResourceID = "[nxFileLine][V-204517.a][medium][SRG-OS-000064-GPOS-00033]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S chown,fchown,fchownat,lchown -F auid>=1000 -F auid!=unset -k perm_mod"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*chown,fchown,fchownat,lchown\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*perm_mod"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource47ref -{ -ResourceID = "[nxFileLine][V-204517.b][medium][SRG-OS-000064-GPOS-00033]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S chown,fchown,fchownat,lchown -F auid>=1000 -F auid!=unset -k perm_mod"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*chown,fchown,fchownat,lchown\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*perm_mod"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource48ref -{ -ResourceID = "[nxFileLine][V-204521.a][medium][SRG-OS-000458-GPOS-00203]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S chmod,fchmod,fchmodat -F auid>=1000 -F auid!=unset -k perm_mod"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*chmod,fchmod,fchmodat\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*perm_mod"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource49ref -{ -ResourceID = "[nxFileLine][V-204521.b][medium][SRG-OS-000458-GPOS-00203]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S chmod,fchmod,fchmodat -F auid>=1000 -F auid!=unset -k perm_mod"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*chmod,fchmod,fchmodat\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*perm_mod"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource50ref -{ -ResourceID = "[nxFileLine][V-204524.a][medium][SRG-OS-000458-GPOS-00203]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S setxattr,fsetxattr,lsetxattr,removexattr,fremovexattr,lremovexattr -F auid>=1000 -F auid!=unset -k perm_mod"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*setxattr,fsetxattr,lsetxattr,removexattr,fremovexattr,lremovexattr\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*perm_mod"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource51ref -{ -ResourceID = "[nxFileLine][V-204524.b][medium][SRG-OS-000458-GPOS-00203]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S setxattr,fsetxattr,lsetxattr,removexattr,fremovexattr,lremovexattr -F auid>=1000 -F auid!=unset -k perm_mod"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*setxattr,fsetxattr,lsetxattr,removexattr,fremovexattr,lremovexattr\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*perm_mod"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource52ref -{ -ResourceID = "[nxFileLine][V-204531.a][medium][SRG-OS-000064-GPOS-00033]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S creat,open,openat,open_by_handle_at,truncate,ftruncate -F exit=-EPERM -F auid>=1000 -F auid!=unset -k access"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*creat,open,openat,open_by_handle_at,truncate,ftruncate\\s*-F\\s*exit\\s*=\\s*-EPERM\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*access"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource53ref -{ -ResourceID = "[nxFileLine][V-204531.b][medium][SRG-OS-000064-GPOS-00033]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S creat,open,openat,open_by_handle_at,truncate,ftruncate -F exit=-EACCES -F auid>=1000 -F auid!=unset -k access"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*creat,open,openat,open_by_handle_at,truncate,ftruncate\\s*-F\\s*exit\\s*=\\s*-EACCES\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*access"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource54ref -{ -ResourceID = "[nxFileLine][V-204531.c][medium][SRG-OS-000064-GPOS-00033]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S creat,open,openat,open_by_handle_at,truncate,ftruncate -F exit=-EPERM -F auid>=1000 -F auid!=unset -k access"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*creat,open,openat,open_by_handle_at,truncate,ftruncate\\s*-F\\s*exit\\s*=\\s*-EPERM\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*access"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource55ref -{ -ResourceID = "[nxFileLine][V-204531.d][medium][SRG-OS-000064-GPOS-00033]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S creat,open,openat,open_by_handle_at,truncate,ftruncate -F exit=-EACCES -F auid>=1000 -F auid!=unset -k access"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*creat,open,openat,open_by_handle_at,truncate,ftruncate\\s*-F\\s*exit\\s*=\\s*-EACCES\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*access"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource56ref -{ -ResourceID = "[nxFileLine][V-204536][medium][SRG-OS-000392-GPOS-00172]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F path=/usr/sbin/semanage -F auid>=1000 -F auid!=unset -k privileged-priv_change"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/sbin/semanage\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-priv_change"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource57ref -{ -ResourceID = "[nxFileLine][V-204537][medium][SRG-OS-000392-GPOS-00172]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F path=/usr/sbin/setsebool -F auid>=1000 -F auid!=unset -k privileged-priv_change"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/sbin/setsebool\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-priv_change"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource58ref -{ -ResourceID = "[nxFileLine][V-204538][medium][SRG-OS-000392-GPOS-00172]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F path=/usr/bin/chcon -F auid>=1000 -F auid!=unset -k privileged-priv_change"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/bin/chcon\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-priv_change"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource59ref -{ -ResourceID = "[nxFileLine][V-204539][medium][SRG-OS-000392-GPOS-00172]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F path=/usr/sbin/setfiles -F auid>=1000 -F auid!=unset -k privileged-priv_change"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/sbin/setfiles\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-priv_change"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource60ref -{ -ResourceID = "[nxFileLine][V-204540][medium][SRG-OS-000392-GPOS-00172]::[RHEL]Baseline"; - ContainsLine = "-w /var/run/faillock -p wa -k logins"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-w\\s*/var/run/faillock\\s*-p\\s*wa\\s*-k\\s*logins"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource61ref -{ -ResourceID = "[nxFileLine][V-204541][medium][SRG-OS-000392-GPOS-00172]::[RHEL]Baseline"; - ContainsLine = "-w /var/log/lastlog -p wa -k logins"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-w\\s*/var/log/lastlog\\s*-p\\s*wa\\s*-k\\s*logins"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource62ref -{ -ResourceID = "[nxFileLine][V-204542][medium][SRG-OS-000042-GPOS-00020]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F path=/usr/bin/passwd -F auid>=1000 -F auid!=unset -k privileged-passwd"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/bin/passwd\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-passwd"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource63ref -{ -ResourceID = "[nxFileLine][V-204543][medium][SRG-OS-000042-GPOS-00020]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F path=/usr/sbin/unix_chkpwd -F auid>=1000 -F auid!=unset -k privileged-passwd"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/sbin/unix_chkpwd\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-passwd"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource64ref -{ -ResourceID = "[nxFileLine][V-204544][medium][SRG-OS-000042-GPOS-00020]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F path=/usr/bin/gpasswd -F auid>=1000 -F auid!=unset -k privileged-passwd"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/bin/gpasswd\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-passwd"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource65ref -{ -ResourceID = "[nxFileLine][V-204545][medium][SRG-OS-000042-GPOS-00020]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F path=/usr/bin/chage -F auid>=1000 -F auid!=unset -k privileged-passwd"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/bin/chage\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-passwd"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource66ref -{ -ResourceID = "[nxFileLine][V-204546][medium][SRG-OS-000042-GPOS-00020]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F path=/usr/sbin/userhelper -F auid>=1000 -F auid!=unset -k privileged-passwd"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/sbin/userhelper\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-passwd"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource67ref -{ -ResourceID = "[nxFileLine][V-204547][medium][SRG-OS-000037-GPOS-00015]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F path=/usr/bin/su -F auid>=1000 -F auid!=unset -k privileged-priv_change"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/bin/su\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-priv_change"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource68ref -{ -ResourceID = "[nxFileLine][V-204548][medium][SRG-OS-000037-GPOS-00015]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F path=/usr/bin/sudo -F auid>=1000 -F auid!=unset -k privileged-priv_change"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/bin/sudo\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-priv_change"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource69ref -{ -ResourceID = "[nxFileLine][V-204549.a][medium][SRG-OS-000037-GPOS-00015]::[RHEL]Baseline"; - ContainsLine = "-w /etc/sudoers -p wa -k privileged-actions"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-w /etc/sudoers -p wa -k privileged-actions"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource70ref -{ -ResourceID = "[nxFileLine][V-204549.b][medium][SRG-OS-000037-GPOS-00015]::[RHEL]Baseline"; - ContainsLine = "-w /etc/sudoers.d/ -p wa -k privileged-actions"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-w /etc/sudoers.d/ -p wa -k privileged-actions"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource71ref -{ -ResourceID = "[nxFileLine][V-204550][medium][SRG-OS-000037-GPOS-00015]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F path=/usr/bin/newgrp -F auid>=1000 -F auid!=unset -k privileged-priv_change"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/bin/newgrp\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-priv_change"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource72ref -{ -ResourceID = "[nxFileLine][V-204551][medium][SRG-OS-000037-GPOS-00015]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F path=/usr/bin/chsh -F auid>=1000 -F auid!=unset -k privileged-priv_change"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/bin/chsh\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-priv_change"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource73ref -{ -ResourceID = "[nxFileLine][V-204552.a][medium][SRG-OS-000042-GPOS-00020]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S mount -F auid>=1000 -F auid!=unset -k privileged-mount"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*mount\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-mount"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource74ref -{ -ResourceID = "[nxFileLine][V-204552.b][medium][SRG-OS-000042-GPOS-00020]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S mount -F auid>=1000 -F auid!=unset -k privileged-mount"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*mount\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-mount"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource75ref -{ -ResourceID = "[nxFileLine][V-204552.c][medium][SRG-OS-000042-GPOS-00020]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F path=/usr/bin/mount -F auid>=1000 -F auid!=unset -k privileged-mount"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/bin/mount\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-mount"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource76ref -{ -ResourceID = "[nxFileLine][V-204553][medium][SRG-OS-000042-GPOS-00020]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F path=/usr/bin/umount -F auid>=1000 -F auid!=unset -k privileged-mount"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/bin/umount\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-mount"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource77ref -{ -ResourceID = "[nxFileLine][V-204554][medium][SRG-OS-000042-GPOS-00020]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F path=/usr/sbin/postdrop -F auid>=1000 -F auid!=unset -k privileged-postfix"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/sbin/postdrop\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-postfix"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource78ref -{ -ResourceID = "[nxFileLine][V-204555][medium][SRG-OS-000042-GPOS-00020]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F path=/usr/sbin/postqueue -F auid>=1000 -F auid!=unset -k privileged-postfix"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/sbin/postqueue\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-postfix"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource79ref -{ -ResourceID = "[nxFileLine][V-204556][medium][SRG-OS-000042-GPOS-00020]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F path=/usr/libexec/openssh/ssh-keysign -F auid>=1000 -F auid!=unset -k privileged-ssh"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/libexec/openssh/ssh-keysign\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-ssh"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource80ref -{ -ResourceID = "[nxFileLine][V-204557][medium][SRG-OS-000042-GPOS-00020]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F path=/usr/bin/crontab -F auid>=1000 -F auid!=unset -k privileged-cron"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/bin/crontab\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-cron"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource81ref -{ -ResourceID = "[nxFileLine][V-204558][medium][SRG-OS-000471-GPOS-00215]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F path=/usr/sbin/pam_timestamp_check -F auid>=1000 -F auid!=unset -k privileged-pam"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/sbin/pam_timestamp_check\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-pam"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource82ref -{ -ResourceID = "[nxFileLine][V-204559.a][medium][SRG-OS-000471-GPOS-00216]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S create_module -k module-change"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*create_module\\s*-k\\s*module-change"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource83ref -{ -ResourceID = "[nxFileLine][V-204559.b][medium][SRG-OS-000471-GPOS-00216]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S create_module -k module-change"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*create_module\\s*-k\\s*module-change"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource84ref -{ -ResourceID = "[nxFileLine][V-204560.a][medium][SRG-OS-000471-GPOS-00216]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S init_module,finit_module -k modulechange"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*init_module,finit_module\\s*-k\\s*modulechange"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource85ref -{ -ResourceID = "[nxFileLine][V-204560.b][medium][SRG-OS-000471-GPOS-00216]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S init_module,finit_module -k modulechange"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*init_module,finit_module\\s*-k\\s*modulechange"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource86ref -{ -ResourceID = "[nxFileLine][V-204562.a][medium][SRG-OS-000471-GPOS-00216]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S delete_module -k module-change"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*delete_module\\s*-k\\s*module-change"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource87ref -{ -ResourceID = "[nxFileLine][V-204562.b][medium][SRG-OS-000471-GPOS-00216]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S delete_module -k module-change"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*delete_module\\s*-k\\s*module-change"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource88ref -{ -ResourceID = "[nxFileLine][V-204563][medium][SRG-OS-000471-GPOS-00216]::[RHEL]Baseline"; - ContainsLine = "-w /usr/bin/kmod -p x -F auid!=unset -k module-change"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-w\\s*/usr/bin/kmod\\s*-p\\s*x\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*module-change"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource89ref -{ -ResourceID = "[nxFileLine][V-204564][medium][SRG-OS-000004-GPOS-00004]::[RHEL]Baseline"; - ContainsLine = "-w /etc/passwd -p wa -k identity"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-w\\s*/etc/passwd\\s*-p\\s*wa\\s*-k\\s*identity"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource90ref -{ -ResourceID = "[nxFileLine][V-204565][medium][SRG-OS-000004-GPOS-00004]::[RHEL]Baseline"; - ContainsLine = "-w /etc/group -p wa -k identity"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-w\\s*/etc/group\\s*-p\\s*wa\\s*-k\\s*identity"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource91ref -{ -ResourceID = "[nxFileLine][V-204566][medium][SRG-OS-000004-GPOS-00004]::[RHEL]Baseline"; - ContainsLine = "-w /etc/gshadow -p wa -k identity"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-w\\s*/etc/gshadow\\s*-p\\s*wa\\s*-k\\s*identity"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource92ref -{ -ResourceID = "[nxFileLine][V-204567][medium][SRG-OS-000004-GPOS-00004]::[RHEL]Baseline"; - ContainsLine = "-w /etc/shadow -p wa -k identity"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-w\\s*/etc/shadow\\s*-p\\s*wa\\s*-k\\s*identity"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource93ref -{ -ResourceID = "[nxFileLine][V-204568][medium][SRG-OS-000004-GPOS-00004]::[RHEL]Baseline"; - ContainsLine = "-w /etc/security/opasswd -p wa -k identity"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-w\\s*/etc/security/opasswd\\s*-p\\s*wa\\s*-k\\s*identity"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource94ref -{ -ResourceID = "[nxFileLine][V-204572.a][medium][SRG-OS-000466-GPOS-00210]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S unlink,unlinkat,rename,renameat,rmdir -F auid>=1000 -F auid!=unset -k delete"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*unlink,unlinkat,rename,renameat,rmdir\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*delete"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource95ref -{ -ResourceID = "[nxFileLine][V-204572.b][medium][SRG-OS-000466-GPOS-00210]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S unlink,unlinkat,rename,renameat,rmdir -F auid>=1000 -F auid!=unset -k delete"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*unlink,unlinkat,rename,renameat,rmdir\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*delete"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource96ref -{ -ResourceID = "[nxFileLine][V-204578][medium][SRG-OS-000033-GPOS-00014]::[RHEL]Baseline"; - ContainsLine = "Ciphers aes256-ctr,aes192-ctr,aes128-ctr"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/ssh/sshd_config"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "^#\\s*Ciphers.*|^\\s*Ciphers\\s*aes128-ctr.*|^\\s*Ciphers\\s*aes192-ctr.*"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource97ref -{ -ResourceID = "[nxFileLine][V-204579.b][medium][SRG-OS-000163-GPOS-00072]::[RHEL]Baseline"; - ContainsLine = "declare -xr TMOUT=900"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/profile.d/tmout.sh"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "^\\s*TMOUT\\s*=\\s*[0-8]?[0-9]?[0-9]?$|^#\\s*TMOUT.*"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource98ref -{ -ResourceID = "[nxFileLine][V-204580][medium][SRG-OS-000023-GPOS-00006]::[RHEL]Baseline"; - ContainsLine = "banner /etc/issue"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/ssh/sshd_config"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*banner\\s*/etc/issue"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource99ref -{ -ResourceID = "[nxFileLine][V-204587][medium][SRG-OS-000163-GPOS-00072]::[RHEL]Baseline"; - ContainsLine = "ClientAliveInterval 600"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/ssh/sshd_config"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "^\\s*ClientAliveInterval\\s*[0-5]?[0-9]?[0-9]?\\s*$|^#\\s*ClientAliveInterval.*|^\\s*ClientAliveInterval\\s*$"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource100ref -{ -ResourceID = "[nxFileLine][V-204588][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; - ContainsLine = "RhostsRSAAuthentication no"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/ssh/sshd_config"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "^#\\s*RhostsRSAAuthentication.*$|^RhostsRSAAuthentication\\s*(?!no\\b)\\w*$"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource101ref -{ -ResourceID = "[nxFileLine][V-204589][medium][SRG-OS-000163-GPOS-00072]::[RHEL]Baseline"; - ContainsLine = "ClientAliveCountMax 0"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/ssh/sshd_config"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "^#\\s*ClientAliveCountMax.*$|^ClientAliveCountMax\\s*(?!0\\b)\\w*$"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource102ref -{ -ResourceID = "[nxFileLine][V-204590][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; - ContainsLine = "IgnoreRhosts yes"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/ssh/sshd_config"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "^#\\s*IgnoreRhosts.*$|^IgnoreRhosts\\s*(?!yes\\b)\\w*$"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource103ref -{ -ResourceID = "[nxFileLine][V-204591][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; - ContainsLine = "PrintLastLog yes"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/ssh/sshd_config"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "^#\\s*PrintLastLog.*$|^PrintLastLog\\s*(?!yes\\b)\\w*$"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource104ref -{ -ResourceID = "[nxFileLine][V-204592][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; - ContainsLine = "PermitRootLogin no"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/ssh/sshd_config"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "^#\\s*PermitRootLogin.*$|^PermitRootLogin\\s*(?!no\\b)\\w*$"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource105ref -{ -ResourceID = "[nxFileLine][V-204593][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; - ContainsLine = "IgnoreUserKnownHosts yes"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/ssh/sshd_config"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "^#\\s*IgnoreUserKnownHosts.*$|^IgnoreUserKnownHosts\\s*(?!yes\\b)\\w*$"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource106ref -{ -ResourceID = "[nxFileLine][V-204594][high][SRG-OS-000074-GPOS-00042]::[RHEL]Baseline"; - ContainsLine = "Protocol 2"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/ssh/sshd_config"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "^#\\s*Protocol.*$|^Protocol\\s*(?!2\\b)\\w*$"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource107ref -{ -ResourceID = "[nxFileLine][V-204595][medium][SRG-OS-000250-GPOS-00093]::[RHEL]Baseline"; - ContainsLine = "MACs hmac-sha2-512,hmac-sha2-256"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/ssh/sshd_config"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*MACs.*|\\s*MACs\\s*hmac-(?!sha2-512).*"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource108ref -{ -ResourceID = "[nxFileLine][V-204598][medium][SRG-OS-000364-GPOS-00151]::[RHEL]Baseline"; - ContainsLine = "GSSAPIAuthentication no"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/ssh/sshd_config"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "^#\\s*GSSAPIAuthentication.*$|^GSSAPIAuthentication\\s*(?!no\\b)\\w*$"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource109ref -{ -ResourceID = "[nxFileLine][V-204599][medium][SRG-OS-000364-GPOS-00151]::[RHEL]Baseline"; - ContainsLine = "KerberosAuthentication no"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/ssh/sshd_config"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "^#\\s*KerberosAuthentication.*$|^KerberosAuthentication\\s*(?!no\\b)\\w*$"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource110ref -{ -ResourceID = "[nxFileLine][V-204600][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; - ContainsLine = "StrictModes yes"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/ssh/sshd_config"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "^#\\s*StrictModes.*$|^StrictModes\\s*(?!yes\\b)\\w*$"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource111ref -{ -ResourceID = "[nxFileLine][V-204601][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; - ContainsLine = "UsePrivilegeSeparation sandbox"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/ssh/sshd_config"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "^#\\s*UsePrivilegeSeparation.*$|^UsePrivilegeSeparation\\s*(?!sandbox\\b)\\w*$"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource112ref -{ -ResourceID = "[nxFileLine][V-204602][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; - ContainsLine = "Compression delayed"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/ssh/sshd_config"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "^#\\s*Compression.*$|^Compression\\s*(?!delayed\\b)\\w*$"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource113ref -{ -ResourceID = "[nxFileLine][V-204622][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; - ContainsLine = "X11Forwarding no"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/ssh/sshd_config"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "^#\\s*X11Forwarding.*$|^X11Forwarding\\s*(?!no\\b)\\w*$"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource114ref -{ -ResourceID = "[nxFileLine][V-233307][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; - ContainsLine = "X11UseLocalhost yes"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/ssh/sshd_config"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*X11UseLocalhost\\s*yes"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxServiceResource as $MSFT_nxServiceResource1ref -{ -ResourceID = "[nxService][V-204451][medium][SRG-OS-000114-GPOS-00059]::[RHEL]Baseline"; - Controller = "systemd"; - Enabled = False; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxService.ps1::13::9::nxService"; - Name = "autofs"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxServiceResource as $MSFT_nxServiceResource2ref -{ -ResourceID = "[nxService][V-204492][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; - Controller = "systemd"; - Enabled = False; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxService.ps1::13::9::nxService"; - Name = "kdump"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxServiceResource as $MSFT_nxServiceResource3ref -{ -ResourceID = "[nxService][V-204503][medium][SRG-OS-000038-GPOS-00016]::[RHEL]Baseline"; - Controller = "systemd"; - State = "Running"; - Enabled = True; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxService.ps1::22::9::nxService"; - Name = "auditd"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxServiceResource as $MSFT_nxServiceResource4ref -{ -ResourceID = "[nxService][V-204586][medium][SRG-OS-000423-GPOS-00187]::[RHEL]Baseline"; - Controller = "systemd"; - State = "Running"; - Enabled = True; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxService.ps1::22::9::nxService"; - Name = "sshd"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxServiceResource as $MSFT_nxServiceResource5ref -{ -ResourceID = "[nxService][V-204604.b][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; - Controller = "systemd"; - State = "Running"; - Enabled = True; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxService.ps1::22::9::nxService"; - Name = "firewalld"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxScriptResource as $MSFT_nxScriptResource1ref -{ -ResourceID = "[nxScript][V-204399.b][medium][[Skip] SRG-OS-000029-GPOS-00010]::[RHEL]Baseline"; - GetScript = "#!/bin/bash\necho [V-204399.b][medium][[Skip] SRG-OS-000029-GPOS-00010]"; - TestScript = "#!/bin/bash\nexit 0"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxScript.skip.ps1::10::5::nxScript"; - SetScript = "#!/bin/bash"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxScriptResource as $MSFT_nxScriptResource2ref -{ -ResourceID = "[nxScript][V-204400][medium][[Skip] SRG-OS-000029-GPOS-00010]::[RHEL]Baseline"; - GetScript = "#!/bin/bash\necho [V-204400][medium][[Skip] SRG-OS-000029-GPOS-00010]"; - TestScript = "#!/bin/bash\nexit 0"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxScript.skip.ps1::10::5::nxScript"; - SetScript = "#!/bin/bash"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxScriptResource as $MSFT_nxScriptResource3ref -{ -ResourceID = "[nxScript][V-204403][medium][[Skip] SRG-OS-000029-GPOS-00010]::[RHEL]Baseline"; - GetScript = "#!/bin/bash\necho [V-204403][medium][[Skip] SRG-OS-000029-GPOS-00010]"; - TestScript = "#!/bin/bash\nexit 0"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxScript.skip.ps1::10::5::nxScript"; - SetScript = "#!/bin/bash"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxScriptResource as $MSFT_nxScriptResource4ref -{ -ResourceID = "[nxScript][V-204509][medium][[Skip] SRG-OS-000342-GPOS-00133]::[RHEL]Baseline"; - GetScript = "#!/bin/bash\necho [V-204509][medium][[Skip] SRG-OS-000342-GPOS-00133]"; - TestScript = "#!/bin/bash\nexit 0"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxScript.skip.ps1::10::5::nxScript"; - SetScript = "#!/bin/bash"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxScriptResource as $MSFT_nxScriptResource5ref -{ -ResourceID = "[nxScript][V-204513][medium][[Skip] SRG-OS-000343-GPOS-00134]::[RHEL]Baseline"; - GetScript = "#!/bin/bash\necho [V-204513][medium][[Skip] SRG-OS-000343-GPOS-00134]"; - TestScript = "#!/bin/bash\nexit 0"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxScript.skip.ps1::10::5::nxScript"; - SetScript = "#!/bin/bash"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxScriptResource as $MSFT_nxScriptResource6ref -{ -ResourceID = "[nxScript][V-204623][medium][[Skip] SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; - GetScript = "#!/bin/bash\necho [V-204623][medium][[Skip] SRG-OS-000480-GPOS-00227]"; - TestScript = "#!/bin/bash\nexit 0"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxScript.skip.ps1::10::5::nxScript"; - SetScript = "#!/bin/bash"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxScriptResource as $MSFT_nxScriptResource7ref -{ -ResourceID = "[nxScript][V-244557][medium][[Skip] SRG-OS-000080-GPOS-00048]::[RHEL]Baseline"; - GetScript = "#!/bin/bash\necho [V-244557][medium][[Skip] SRG-OS-000080-GPOS-00048]"; - TestScript = "#!/bin/bash\nexit 0"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxScript.skip.ps1::10::5::nxScript"; - SetScript = "#!/bin/bash"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxScriptResource as $MSFT_nxScriptResource8ref -{ -ResourceID = "[nxScript][V-244558][medium][[Skip] SRG-OS-000080-GPOS-00048]::[RHEL]Baseline"; - GetScript = "#!/bin/bash\necho [V-244558][medium][[Skip] SRG-OS-000080-GPOS-00048]"; - TestScript = "#!/bin/bash\nexit 0"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxScript.skip.ps1::10::5::nxScript"; - SetScript = "#!/bin/bash"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxScriptResource as $MSFT_nxScriptResource9ref -{ -ResourceID = "[nxScript][V-204399.a][medium][[Skip] SRG-OS-000029-GPOS-00010]::[RHEL]Baseline"; - GetScript = "#!/bin/bash\necho [V-204399.a][medium][[Skip] SRG-OS-000029-GPOS-00010]"; - TestScript = "#!/bin/bash\nexit 0"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxScript.skip.ps1::10::5::nxScript"; - SetScript = "#!/bin/bash"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of OMI_ConfigurationDocument - - - { - Version="2.0.0"; - - - MinimumCompatibleVersion = "1.0.0"; - - - CompatibleVersionAdditionalProperties= {"Omi_BaseResource:ConfigurationName"}; - - - Author="Microsoft"; - - - GenerationDate="06/30/2022 11:38:45"; - - - GenerationHost="Microsoft"; - - - Name="LinuxBaseLine"; - - - }; +/* +@TargetNode='RHEL77' +@GeneratedBy=Microsoft +@GenerationDate=03/09/2023 14:17:33 +@GenerationHost=Microsoft +*/ + +instance of MSFT_nxPackageResource as $MSFT_nxPackageResource1ref +{ +ResourceID = "[nxPackage][V-204442][high][SRG-OS-000095-GPOS-00049]::[RHEL]Baseline"; + Ensure = "Absent"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxPackage.ps1::8::5::nxPackage"; + Name = "rsh-server"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxPackageResource as $MSFT_nxPackageResource2ref +{ +ResourceID = "[nxPackage][V-204443][high][SRG-OS-000095-GPOS-00049]::[RHEL]Baseline"; + Ensure = "Absent"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxPackage.ps1::8::5::nxPackage"; + Name = "ypserv"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxPackageResource as $MSFT_nxPackageResource3ref +{ +ResourceID = "[nxPackage][V-204497][high][SRG-OS-000033-GPOS-00014]::[RHEL]Baseline"; + Ensure = "Present"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxPackage.ps1::8::5::nxPackage"; + Name = "dracut-fips"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxPackageResource as $MSFT_nxPackageResource4ref +{ +ResourceID = "[nxPackage][V-204498][low][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; + Ensure = "Present"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxPackage.ps1::8::5::nxPackage"; + Name = "aide"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxPackageResource as $MSFT_nxPackageResource5ref +{ +ResourceID = "[nxPackage][V-204502][high][SRG-OS-000095-GPOS-00049]::[RHEL]Baseline"; + Ensure = "Absent"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxPackage.ps1::8::5::nxPackage"; + Name = "telnet-server"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxPackageResource as $MSFT_nxPackageResource6ref +{ +ResourceID = "[nxPackage][V-204585][medium][SRG-OS-000423-GPOS-00187]::[RHEL]Baseline"; + Ensure = "Present"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxPackage.ps1::8::5::nxPackage"; + Name = "openssh-server"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxPackageResource as $MSFT_nxPackageResource7ref +{ +ResourceID = "[nxPackage][V-204604.a][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; + Ensure = "Present"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxPackage.ps1::8::5::nxPackage"; + Name = "firewalld"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxPackageResource as $MSFT_nxPackageResource8ref +{ +ResourceID = "[nxPackage][V-204620][high][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; + Ensure = "Absent"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxPackage.ps1::8::5::nxPackage"; + Name = "vsftpd"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxPackageResource as $MSFT_nxPackageResource9ref +{ +ResourceID = "[nxPackage][V-204621][high][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; + Ensure = "Absent"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxPackage.ps1::8::5::nxPackage"; + Name = "tftp-server"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxPackageResource as $MSFT_nxPackageResource10ref +{ +ResourceID = "[nxPackage][V-204631][medium][SRG-OS-000375-GPOS-00160]::[RHEL]Baseline"; + Ensure = "Present"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxPackage.ps1::8::5::nxPackage"; + Name = "pam_pkcs11"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileResource as $MSFT_nxFileResource1ref +{ +ResourceID = "[nxFile][V-204395][medium][SRG-OS-000023-GPOS-00006]::[RHEL]Baseline"; + Contents = "You are accessing a U.S. Government (USG) Information System (IS) that is provided for USG-authorized use only.\n\nBy using this IS (which includes any device attached to this IS), you consent to the following conditions:\n\n-The USG routinely intercepts and monitors communications on this IS for purposes including, but not limited to, penetration testing, COMSEC monitoring, network operations and defense, personnel misconduct (PM), law enforcement (LE), and counterintelligence (CI) investigations.\n\n-At any time, the USG may inspect and seize data stored on this IS.\n\n-Communications using, or data stored on, this IS are not private, are subject to routine monitoring, interception, and search, and may be disclosed or used for any USG-authorized purpose.\n\n-This IS includes security measures (e.g., authentication and access controls) to protect USG interests--not for your personal benefit or privacy.\n\n-Notwithstanding the above, using this IS does not constitute consent to PM, LE or CI investigative searching or monitoring of the content of privileged communications, or work product, related to personal representation or services by attorneys, psychotherapists, or clergy, and their assistants. Such communications and work product are private and confidential. See User Agreement for details."; + DestinationPath = "/etc/issue"; + ModuleName = "nx"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; + ModuleVersion = "1.0"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileResource as $MSFT_nxFileResource2ref +{ +ResourceID = "[nxFile][V-204449.a][medium][SRG-OS-000114-GPOS-00059]::[RHEL]Baseline"; + Contents = ""; + DestinationPath = "/etc/modprobe.d/usb-storage.conf"; + ModuleName = "nx"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; + ModuleVersion = "1.0"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileResource as $MSFT_nxFileResource3ref +{ +ResourceID = "[nxFile][V-204449.b][medium][SRG-OS-000114-GPOS-00059]::[RHEL]Baseline"; + Contents = ""; + DestinationPath = "/etc/modprobe.d/blacklist.conf"; + ModuleName = "nx"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; + ModuleVersion = "1.0"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileResource as $MSFT_nxFileResource4ref +{ +ResourceID = "[nxFile][V-204450.a][medium][SRG-OS-000378-GPOS-00163]::[RHEL]Baseline"; + Contents = ""; + DestinationPath = "/etc/modprobe.d/dccp.conf"; + ModuleName = "nx"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; + ModuleVersion = "1.0"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileResource as $MSFT_nxFileResource5ref +{ +ResourceID = "[nxFile][V-204576][low][SRG-OS-000027-GPOS-00008]::[RHEL]Baseline"; + Contents = "* hard maxlogins 10"; + DestinationPath = "/etc/security/limits.d/204576-powerstig.conf"; + ModuleName = "nx"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; + ModuleVersion = "1.0"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileResource as $MSFT_nxFileResource6ref +{ +ResourceID = "[nxFile][V-204579.a][medium][SRG-OS-000163-GPOS-00072]::[RHEL]Baseline"; + Contents = ""; + DestinationPath = "/etc/profile.d/tmout.sh"; + ModuleName = "nx"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; + ModuleVersion = "1.0"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileResource as $MSFT_nxFileResource7ref +{ +ResourceID = "[nxFile][V-204584][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; + Contents = "kernel.randomize_va_space = 2"; + DestinationPath = "/etc/sysctl.d/204584-powerstig.conf"; + ModuleName = "nx"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; + ModuleVersion = "1.0"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileResource as $MSFT_nxFileResource8ref +{ +ResourceID = "[nxFile][V-204609][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; + Contents = "net.ipv4.conf.all.accept_source_route = 0"; + DestinationPath = "/etc/sysctl.d/204609-powerstig.conf"; + ModuleName = "nx"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; + ModuleVersion = "1.0"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileResource as $MSFT_nxFileResource9ref +{ +ResourceID = "[nxFile][V-204610][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; + Contents = "net.ipv4.conf.all.rp_filter = 1"; + DestinationPath = "/etc/sysctl.d/204610-powerstig.conf"; + ModuleName = "nx"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; + ModuleVersion = "1.0"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileResource as $MSFT_nxFileResource10ref +{ +ResourceID = "[nxFile][V-204611][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; + Contents = "net.ipv4.conf.default.rp_filter = 1"; + DestinationPath = "/etc/sysctl.d/204611-powerstig.conf"; + ModuleName = "nx"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; + ModuleVersion = "1.0"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileResource as $MSFT_nxFileResource11ref +{ +ResourceID = "[nxFile][V-204612][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; + Contents = "net.ipv4.conf.default.accept_source_route = 0"; + DestinationPath = "/etc/sysctl.d/204612-powerstig.conf"; + ModuleName = "nx"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; + ModuleVersion = "1.0"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileResource as $MSFT_nxFileResource12ref +{ +ResourceID = "[nxFile][V-204613][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; + Contents = "net.ipv4.icmp_echo_ignore_broadcasts = 1"; + DestinationPath = "/etc/sysctl.d/204613-powerstig.conf"; + ModuleName = "nx"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; + ModuleVersion = "1.0"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileResource as $MSFT_nxFileResource13ref +{ +ResourceID = "[nxFile][V-204614][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; + Contents = "net.ipv4.conf.default.accept_redirects = 0"; + DestinationPath = "/etc/sysctl.d/204614-powerstig.conf"; + ModuleName = "nx"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; + ModuleVersion = "1.0"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileResource as $MSFT_nxFileResource14ref +{ +ResourceID = "[nxFile][V-204615][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; + Contents = "net.ipv4.conf.all.accept_redirects = 0"; + DestinationPath = "/etc/sysctl.d/204615-powerstig.conf"; + ModuleName = "nx"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; + ModuleVersion = "1.0"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileResource as $MSFT_nxFileResource15ref +{ +ResourceID = "[nxFile][V-204616][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; + Contents = "net.ipv4.conf.default.send_redirects = 0"; + DestinationPath = "/etc/sysctl.d/204616-powerstig.conf"; + ModuleName = "nx"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; + ModuleVersion = "1.0"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileResource as $MSFT_nxFileResource16ref +{ +ResourceID = "[nxFile][V-204617][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; + Contents = "net.ipv4.conf.all.send_redirects = 0"; + DestinationPath = "/etc/sysctl.d/204617-powerstig.conf"; + ModuleName = "nx"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; + ModuleVersion = "1.0"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileResource as $MSFT_nxFileResource17ref +{ +ResourceID = "[nxFile][V-204625][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; + Contents = "net.ipv4.ip_forward = 0"; + DestinationPath = "/etc/sysctl.d/204625-powerstig.conf"; + ModuleName = "nx"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; + ModuleVersion = "1.0"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileResource as $MSFT_nxFileResource18ref +{ +ResourceID = "[nxFile][V-204630][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; + Contents = "net.ipv6.conf.all.accept_source_route = 0"; + DestinationPath = "/etc/sysctl.d/204630-powerstig.conf"; + ModuleName = "nx"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; + ModuleVersion = "1.0"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileResource as $MSFT_nxFileResource19ref +{ +ResourceID = "[nxFile][V-237634.a][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; + Contents = "Defaults !targetpw"; + DestinationPath = "/etc/sudoers.d/237634a-powerstig.conf"; + ModuleName = "nx"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; + ModuleVersion = "1.0"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileResource as $MSFT_nxFileResource20ref +{ +ResourceID = "[nxFile][V-237634.b][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; + Contents = "Defaults !rootpw"; + DestinationPath = "/etc/sudoers.d/237634b-powerstig.conf"; + ModuleName = "nx"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; + ModuleVersion = "1.0"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileResource as $MSFT_nxFileResource21ref +{ +ResourceID = "[nxFile][V-237634.c][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; + Contents = "Defaults !runaspw"; + DestinationPath = "/etc/sudoers.d/237634c-powerstig.conf"; + ModuleName = "nx"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; + ModuleVersion = "1.0"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileResource as $MSFT_nxFileResource22ref +{ +ResourceID = "[nxFile][V-237635][medium][SRG-OS-000373-GPOS-00156]::[RHEL]Baseline"; + Contents = "Defaults timestamp_timeout=0"; + DestinationPath = "/etc/sudoers.d/237635-powerstig.conf"; + ModuleName = "nx"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; + ModuleVersion = "1.0"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileResource as $MSFT_nxFileResource23ref +{ +ResourceID = "[nxFile][V-250314][medium][SRG-OS-000324-GPOS-00125]::[RHEL]Baseline"; + Contents = "%wheel ALL=(ALL) TYPE=sysadm_t ROLE=sysadm_r ALL"; + DestinationPath = "/etc/sudoers.d/250314-powerstig.conf"; + ModuleName = "nx"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; + ModuleVersion = "1.0"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource1ref +{ +ResourceID = "[nxFileLine][V-204405][medium][SRG-OS-000069-GPOS-00037]::[RHEL]Baseline"; + ContainsLine = "password substack system-auth"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/pam.d/passwd"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "^\\s*password(?:\\t*|\\s*)substack\\tsystem-auth\\s*$|^#\\s*password\\s*substack\\s*system-auth.*"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource2ref +{ +ResourceID = "[nxFileLine][V-204407][medium][SRG-OS-000069-GPOS-00037]::[RHEL]Baseline"; + ContainsLine = "ucredit = -1"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/security/pwquality.conf"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "^#\\s*ucredit.*$|^ucredit\\s*=\\s*(?!-1\\b)\\w*$"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource3ref +{ +ResourceID = "[nxFileLine][V-204408][medium][SRG-OS-000070-GPOS-00038]::[RHEL]Baseline"; + ContainsLine = "lcredit = -1"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/security/pwquality.conf"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "^#\\s*lcredit.*$|^lcredit\\s*=\\s*(?!-1\\b)\\w*$"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource4ref +{ +ResourceID = "[nxFileLine][V-204409][medium][SRG-OS-000071-GPOS-00039]::[RHEL]Baseline"; + ContainsLine = "dcredit = -1"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/security/pwquality.conf"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "^#\\s*dcredit.*$|^dcredit\\s*=\\s*(?!-1\\b)\\w*$"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource5ref +{ +ResourceID = "[nxFileLine][V-204410][medium][SRG-OS-000266-GPOS-00101]::[RHEL]Baseline"; + ContainsLine = "ocredit=-1"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/security/pwquality.conf"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "^#\\s*ocredit.*$|^ocredit\\s*=\\s*(?!-1)\\w*$"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource6ref +{ +ResourceID = "[nxFileLine][V-204411][medium][SRG-OS-000072-GPOS-00040]::[RHEL]Baseline"; + ContainsLine = "difok = 8"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/security/pwquality.conf"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*difok\\s*=.*|^\\s*difok\\s*=\\s*(-|)[0-7]$"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource7ref +{ +ResourceID = "[nxFileLine][V-204412][medium][SRG-OS-000072-GPOS-00040]::[RHEL]Baseline"; + ContainsLine = "minclass = 4"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/security/pwquality.conf"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "^#\\s*minclass\\s*=.*|^\\s*minclass\\s*=\\s*(?!\\d{2,})[1-3]"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource8ref +{ +ResourceID = "[nxFileLine][V-204413][medium][SRG-OS-000072-GPOS-00040]::[RHEL]Baseline"; + ContainsLine = "maxrepeat = 3"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/security/pwquality.conf"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "^#\\s*maxrepeat\\s*=.*|^\\s*maxrepeat\\s*=\\s*(?:\\d{2,}|[4-9])"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource9ref +{ +ResourceID = "[nxFileLine][V-204414][medium][SRG-OS-000072-GPOS-00040]::[RHEL]Baseline"; + ContainsLine = "maxclassrepeat = 4"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/security/pwquality.conf"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "^#\\s*maxclassrepeat\\s*=.*|^\\s*maxclassrepeat\\s*=\\s*(?:\\d{2,}|[1-3|5-9])"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource10ref +{ +ResourceID = "[nxFileLine][V-204416][medium][SRG-OS-000073-GPOS-00041]::[RHEL]Baseline"; + ContainsLine = "ENCRYPT_METHOD SHA512"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/login.defs"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*ENCRYPT_METHOD\\s*SHA512"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource11ref +{ +ResourceID = "[nxFileLine][V-204418][medium][SRG-OS-000075-GPOS-00043]::[RHEL]Baseline"; + ContainsLine = "PASS_MIN_DAYS 1"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/login.defs"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "^\\s*PASS_MIN_DAYS\\s*[0]*$|#\\s*PASS_MIN_DAYS.*"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource12ref +{ +ResourceID = "[nxFileLine][V-204420][medium][SRG-OS-000076-GPOS-00044]::[RHEL]Baseline"; + ContainsLine = "PASS_MAX_DAYS 60"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/login.defs"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "^\\s*PASS_MAX_DAYS\\s*([6][1-9]|[7-9][0-9]|\\d{3,})$|#\\s*PASS_MAX_DAYS.*"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource13ref +{ +ResourceID = "[nxFileLine][V-204423][medium][SRG-OS-000078-GPOS-00046]::[RHEL]Baseline"; + ContainsLine = "minlen = 15"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/security/pwquality.conf"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "^\\s*minlen\\s*=\\s*([0-9]|[1][1-4])$|#\\s*minlen.*"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource14ref +{ +ResourceID = "[nxFileLine][V-204425][high][SRG-OS-000106-GPOS-00053]::[RHEL]Baseline"; + ContainsLine = "PermitEmptyPasswords no"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/ssh/sshd_config"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "^#\\s*PermitEmptyPasswords.*$|^PermitEmptyPasswords\\s*(?!no\\b)\\w*$"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource15ref +{ +ResourceID = "[nxFileLine][V-204426][medium][SRG-OS-000118-GPOS-00060]::[RHEL]Baseline"; + ContainsLine = "INACTIVE=35"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/default/useradd"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "^#\\s*INACTIVE\\s*=.*|^\\s*INACTIVE\\s*=\\s*(3[5-9]|[4-9]\\d+|\\d{3,})"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource16ref +{ +ResourceID = "[nxFileLine][V-204431][medium][SRG-OS-000480-GPOS-00226]::[RHEL]Baseline"; + ContainsLine = "FAIL_DELAY 4"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/login.defs"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "^#\\s*FAIL_DELAY.*|^FAIL_DELAY\\s*(?!\\d{2,})[1-3]"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource17ref +{ +ResourceID = "[nxFileLine][V-204434][medium][SRG-OS-000480-GPOS-00229]::[RHEL]Baseline"; + ContainsLine = "PermitUserEnvironment no"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/ssh/sshd_config"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "^#\\s*PermitUserEnvironment.*$|^PermitUserEnvironment\\s*(?!no\\b)\\w*$"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource18ref +{ +ResourceID = "[nxFileLine][V-204435][medium][SRG-OS-000480-GPOS-00229]::[RHEL]Baseline"; + ContainsLine = "HostbasedAuthentication no"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/ssh/sshd_config"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "^#\\s*HostbasedAuthentication.*$|^HostbasedAuthentication\\s*(?!no\\b)\\w*$"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource19ref +{ +ResourceID = "[nxFileLine][V-204447][high][SRG-OS-000366-GPOS-00153]::[RHEL]Baseline"; + ContainsLine = "gpgcheck=1"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/yum.conf"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*gpgcheck\\s*=\\s*1"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource20ref +{ +ResourceID = "[nxFileLine][V-204448][high][SRG-OS-000366-GPOS-00153]::[RHEL]Baseline"; + ContainsLine = "localpkg_gpgcheck=1"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/yum.conf"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*localpkg_gpgcheck\\s*=\\s*1"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource21ref +{ +ResourceID = "[nxFileLine][V-204449.c][medium][SRG-OS-000114-GPOS-00059]::[RHEL]Baseline"; + ContainsLine = "install usb-storage /bin/true"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/modprobe.d/usb-storage.conf"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*install\\s*usb-storage\\s*/bin/true"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource22ref +{ +ResourceID = "[nxFileLine][V-204449.d][medium][SRG-OS-000114-GPOS-00059]::[RHEL]Baseline"; + ContainsLine = "blacklist usb-storage"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/modprobe.d/blacklist.conf"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*blacklist\\s*usb-storage"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource23ref +{ +ResourceID = "[nxFileLine][V-204450.b][medium][SRG-OS-000378-GPOS-00163]::[RHEL]Baseline"; + ContainsLine = "install dccp /bin/true"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/modprobe.d/dccp.conf"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*install\\s*dccp\\s*/bin/true"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource24ref +{ +ResourceID = "[nxFileLine][V-204450.c][medium][SRG-OS-000378-GPOS-00163]::[RHEL]Baseline"; + ContainsLine = "blacklist dccp"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/modprobe.d/blacklist.conf"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*blacklist\\s*dccp"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource25ref +{ +ResourceID = "[nxFileLine][V-204452][low][SRG-OS-000437-GPOS-00194]::[RHEL]Baseline"; + ContainsLine = "clean_requirements_on_remove=1"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/yum.conf"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*clean_requirements_on_remove\\s*=\\s*1"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource26ref +{ +ResourceID = "[nxFileLine][V-204453][medium][SRG-OS-000445-GPOS-00199]::[RHEL]Baseline"; + ContainsLine = "SELINUX=enforcing"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/selinux/config"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "^#\\s*SELINUX.*$|^SELINUX\\s*=\\s*(?!enforcing)\\w*$"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource27ref +{ +ResourceID = "[nxFileLine][V-204454][medium][SRG-OS-000445-GPOS-00199]::[RHEL]Baseline"; + ContainsLine = "SELINUXTYPE=targeted"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/selinux/config"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "^#\\s*SELINUXTYPE.*$|^SELINUXTYPE\\s*=\\s*(?!targeted\\b)\\w*$"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource28ref +{ +ResourceID = "[nxFileLine][V-204457][medium][SRG-OS-000480-GPOS-00228]::[RHEL]Baseline"; + ContainsLine = "UMASK 077"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/login.defs"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "^\\s*UMASK(?!\\s077\\b)\\s*\\d*\\s*$|^#\\s*UMASK.*"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource29ref +{ +ResourceID = "[nxFileLine][V-204466][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; + ContainsLine = "CREATE_HOME yes"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/login.defs"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "^#\\s*CREATE_HOME.*$|^CREATE_HOME\\s*(?!yes\\b)\\w*$|^CREATE_HOME\\t.*"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource30ref +{ +ResourceID = "[nxFileLine][V-204504][medium][SRG-OS-000046-GPOS-00022]::[RHEL]Baseline"; + ContainsLine = "-f 2"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "^#\\s*-f\\s+2|^\\s*-f\\s*1"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileResource as $MSFT_nxFileResource24ref +{ +SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::29::9::nxFile"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + ResourceID = "[nxFile][V-204506.a][medium][SRG-OS-000342-GPOS-00133]::[RHEL]Baseline"; + DestinationPath = "/etc/audisp/plugins.d/au-remote.conf"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource31ref +{ +ResourceID = "[nxFileLine][V-204506.a][medium][SRG-OS-000342-GPOS-00133]::[RHEL]Baseline"; + ContainsLine = "active = yes"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audisp/plugins.d/au-remote.conf"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "\\s*active\\s*=\\s*no|active=yes|#\\s*active\\s*=.*"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource32ref +{ +ResourceID = "[nxFileLine][V-204506.b][medium][SRG-OS-000342-GPOS-00133]::[RHEL]Baseline"; + ContainsLine = "direction = out"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audisp/plugins.d/au-remote.conf"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*direction\\s*=\\s*out"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource33ref +{ +ResourceID = "[nxFileLine][V-204506.c][medium][SRG-OS-000342-GPOS-00133]::[RHEL]Baseline"; + ContainsLine = "path = /sbin/audisp-remote"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audisp/plugins.d/au-remote.conf"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*path\\s*=\\s*/sbin/audisp-remote"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource34ref +{ +ResourceID = "[nxFileLine][V-204506.d][medium][SRG-OS-000342-GPOS-00133]::[RHEL]Baseline"; + ContainsLine = "type = always"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audisp/plugins.d/au-remote.conf"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*type\\s*=\\s*always"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource35ref +{ +ResourceID = "[nxFileLine][V-204507][medium][SRG-OS-000342-GPOS-00133]::[RHEL]Baseline"; + ContainsLine = "overflow_action = syslog"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audisp/audispd.conf"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "^#\\s*overflow_action.*$|^overflow_action\\s*=\\s*(?!syslog$)\\w*$"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource36ref +{ +ResourceID = "[nxFileLine][V-204508][medium][SRG-OS-000342-GPOS-00133]::[RHEL]Baseline"; + ContainsLine = "name_format = hostname"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audisp/audispd.conf"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "^#\\s*name_format.*$|^name_format\\s*=\\s*(?!hostname$)\\w*$"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileResource as $MSFT_nxFileResource25ref +{ +SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::19::9::nxFile"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + ResourceID = "[nxFile][V-204510][medium][SRG-OS-000342-GPOS-00133]::[RHEL]Baseline"; + DestinationPath = "/etc/audisp/audisp-remote.conf"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource37ref +{ +ResourceID = "[nxFileLine][V-204510][medium][SRG-OS-000342-GPOS-00133]::[RHEL]Baseline"; + ContainsLine = "enable_krb5 = yes"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audisp/audisp-remote.conf"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*enable_krb5\\s*=\\s*yes"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource38ref +{ +ResourceID = "[nxFileLine][V-204511][medium][SRG-OS-000342-GPOS-00133]::[RHEL]Baseline"; + ContainsLine = "disk_full_action = single"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audisp/audisp-remote.conf"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "^#\\s*disk_full_action\\s*=.*|^disk_full_action\\s*=\\s*(?!halt\\b|single\\b|syslog\\b)\\w+"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource39ref +{ +ResourceID = "[nxFileLine][V-204512][medium][SRG-OS-000342-GPOS-00133]::[RHEL]Baseline"; + ContainsLine = "network_failure_action = syslog"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audisp/audisp-remote.conf"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "^#\\s*network_failure_action\\s*=.*|^network_failure_action\\s*=\\s*(?!halt\\b|single\\b|syslog\\b)\\w+"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource40ref +{ +ResourceID = "[nxFileLine][V-204514][medium][SRG-OS-000343-GPOS-00134]::[RHEL]Baseline"; + ContainsLine = "space_left_action = email"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/auditd.conf"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "^#\\s*space_left_action.*$|^space_left_action\\s*=\\s*(?!email$)\\w*$"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource41ref +{ +ResourceID = "[nxFileLine][V-204515][medium][SRG-OS-000343-GPOS-00134]::[RHEL]Baseline"; + ContainsLine = "action_mail_acct = root"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/auditd.conf"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "^#\\s*action_mail_acct.*|^action_mail_acct\\s*=\\s*(?!root\\b)\\w+"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource42ref +{ +ResourceID = "[nxFileLine][V-204516.a][medium][SRG-OS-000327-GPOS-00127]::[RHEL]Baseline"; + ContainsLine = "-a always,exit -F arch=b32 -S execve -C uid!=euid -F euid=0 -k setuid"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*execve\\s*-C\\s*uid!\\s*=\\s*euid\\s*-F\\s*euid\\s*=\\s*0\\s*-k\\s*setuid"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource43ref +{ +ResourceID = "[nxFileLine][V-204516.b][medium][SRG-OS-000327-GPOS-00127]::[RHEL]Baseline"; + ContainsLine = "-a always,exit -F arch=b64 -S execve -C uid!=euid -F euid=0 -k setuid"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*execve\\s*-C\\s*uid!\\s*=\\s*euid\\s*-F\\s*euid\\s*=\\s*0\\s*-k\\s*setuid"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource44ref +{ +ResourceID = "[nxFileLine][V-204516.c][medium][SRG-OS-000327-GPOS-00127]::[RHEL]Baseline"; + ContainsLine = "-a always,exit -F arch=b32 -S execve -C gid!=egid -F egid=0 -k setgid"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*execve\\s*-C\\s*gid!\\s*=\\s*egid\\s*-F\\s*egid\\s*=\\s*0\\s*-k\\s*setgid"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource45ref +{ +ResourceID = "[nxFileLine][V-204516.d][medium][SRG-OS-000327-GPOS-00127]::[RHEL]Baseline"; + ContainsLine = "-a always,exit -F arch=b64 -S execve -C gid!=egid -F egid=0 -k setgid"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*execve\\s*-C\\s*gid!\\s*=\\s*egid\\s*-F\\s*egid\\s*=\\s*0\\s*-k\\s*setgid"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource46ref +{ +ResourceID = "[nxFileLine][V-204517.a][medium][SRG-OS-000064-GPOS-00033]::[RHEL]Baseline"; + ContainsLine = "-a always,exit -F arch=b32 -S chown,fchown,fchownat,lchown -F auid>=1000 -F auid!=unset -k perm_mod"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*chown,fchown,fchownat,lchown\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*perm_mod"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource47ref +{ +ResourceID = "[nxFileLine][V-204517.b][medium][SRG-OS-000064-GPOS-00033]::[RHEL]Baseline"; + ContainsLine = "-a always,exit -F arch=b64 -S chown,fchown,fchownat,lchown -F auid>=1000 -F auid!=unset -k perm_mod"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*chown,fchown,fchownat,lchown\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*perm_mod"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource48ref +{ +ResourceID = "[nxFileLine][V-204521.a][medium][SRG-OS-000458-GPOS-00203]::[RHEL]Baseline"; + ContainsLine = "-a always,exit -F arch=b32 -S chmod,fchmod,fchmodat -F auid>=1000 -F auid!=unset -k perm_mod"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*chmod,fchmod,fchmodat\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*perm_mod"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource49ref +{ +ResourceID = "[nxFileLine][V-204521.b][medium][SRG-OS-000458-GPOS-00203]::[RHEL]Baseline"; + ContainsLine = "-a always,exit -F arch=b64 -S chmod,fchmod,fchmodat -F auid>=1000 -F auid!=unset -k perm_mod"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*chmod,fchmod,fchmodat\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*perm_mod"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource50ref +{ +ResourceID = "[nxFileLine][V-204524.a][medium][SRG-OS-000458-GPOS-00203]::[RHEL]Baseline"; + ContainsLine = "-a always,exit -F arch=b32 -S setxattr,fsetxattr,lsetxattr,removexattr,fremovexattr,lremovexattr -F auid>=1000 -F auid!=unset -k perm_mod"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*setxattr,fsetxattr,lsetxattr,removexattr,fremovexattr,lremovexattr\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*perm_mod"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource51ref +{ +ResourceID = "[nxFileLine][V-204524.b][medium][SRG-OS-000458-GPOS-00203]::[RHEL]Baseline"; + ContainsLine = "-a always,exit -F arch=b64 -S setxattr,fsetxattr,lsetxattr,removexattr,fremovexattr,lremovexattr -F auid>=1000 -F auid!=unset -k perm_mod"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*setxattr,fsetxattr,lsetxattr,removexattr,fremovexattr,lremovexattr\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*perm_mod"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource52ref +{ +ResourceID = "[nxFileLine][V-204531.a][medium][SRG-OS-000064-GPOS-00033]::[RHEL]Baseline"; + ContainsLine = "-a always,exit -F arch=b32 -S creat,open,openat,open_by_handle_at,truncate,ftruncate -F exit=-EPERM -F auid>=1000 -F auid!=unset -k access"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*creat,open,openat,open_by_handle_at,truncate,ftruncate\\s*-F\\s*exit\\s*=\\s*-EPERM\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*access"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource53ref +{ +ResourceID = "[nxFileLine][V-204531.b][medium][SRG-OS-000064-GPOS-00033]::[RHEL]Baseline"; + ContainsLine = "-a always,exit -F arch=b32 -S creat,open,openat,open_by_handle_at,truncate,ftruncate -F exit=-EACCES -F auid>=1000 -F auid!=unset -k access"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*creat,open,openat,open_by_handle_at,truncate,ftruncate\\s*-F\\s*exit\\s*=\\s*-EACCES\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*access"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource54ref +{ +ResourceID = "[nxFileLine][V-204531.c][medium][SRG-OS-000064-GPOS-00033]::[RHEL]Baseline"; + ContainsLine = "-a always,exit -F arch=b64 -S creat,open,openat,open_by_handle_at,truncate,ftruncate -F exit=-EPERM -F auid>=1000 -F auid!=unset -k access"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*creat,open,openat,open_by_handle_at,truncate,ftruncate\\s*-F\\s*exit\\s*=\\s*-EPERM\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*access"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource55ref +{ +ResourceID = "[nxFileLine][V-204531.d][medium][SRG-OS-000064-GPOS-00033]::[RHEL]Baseline"; + ContainsLine = "-a always,exit -F arch=b64 -S creat,open,openat,open_by_handle_at,truncate,ftruncate -F exit=-EACCES -F auid>=1000 -F auid!=unset -k access"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*creat,open,openat,open_by_handle_at,truncate,ftruncate\\s*-F\\s*exit\\s*=\\s*-EACCES\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*access"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource56ref +{ +ResourceID = "[nxFileLine][V-204536][medium][SRG-OS-000392-GPOS-00172]::[RHEL]Baseline"; + ContainsLine = "-a always,exit -F path=/usr/sbin/semanage -F perm=x -F auid>=1000 -F auid!=unset -k privileged-priv_change"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/sbin/semanage\\s*-F\\s*perm\\s*=\\s*x\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-priv_change"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource57ref +{ +ResourceID = "[nxFileLine][V-204537][medium][SRG-OS-000392-GPOS-00172]::[RHEL]Baseline"; + ContainsLine = "-a always,exit -F path=/usr/sbin/setsebool -F perm=x -F auid>=1000 -F auid!=unset -k privileged-priv_change"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/sbin/setsebool\\s*-F\\s*perm\\s*=\\s*x\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-priv_change"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource58ref +{ +ResourceID = "[nxFileLine][V-204538][medium][SRG-OS-000392-GPOS-00172]::[RHEL]Baseline"; + ContainsLine = "-a always,exit -F path=/usr/bin/chcon -F perm=x -F auid>=1000 -F auid!=unset -k privileged-priv_change"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/bin/chcon\\s*-F\\s*perm\\s*=\\s*x\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-priv_change"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource59ref +{ +ResourceID = "[nxFileLine][V-204539][medium][SRG-OS-000392-GPOS-00172]::[RHEL]Baseline"; + ContainsLine = "-a always,exit -F path=/usr/sbin/setfiles -F perm=x -F auid>=1000 -F auid!=unset -k privileged-priv_change"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/sbin/setfiles\\s*-F\\s*perm\\s*=\\s*x\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-priv_change"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource60ref +{ +ResourceID = "[nxFileLine][V-204540][medium][SRG-OS-000392-GPOS-00172]::[RHEL]Baseline"; + ContainsLine = "-w /var/run/faillock -p wa -k logins"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-w\\s*/var/run/faillock\\s*-p\\s*wa\\s*-k\\s*logins"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource61ref +{ +ResourceID = "[nxFileLine][V-204541][medium][SRG-OS-000392-GPOS-00172]::[RHEL]Baseline"; + ContainsLine = "-w /var/log/lastlog -p wa -k logins"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-w\\s*/var/log/lastlog\\s*-p\\s*wa\\s*-k\\s*logins"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource62ref +{ +ResourceID = "[nxFileLine][V-204542][medium][SRG-OS-000042-GPOS-00020]::[RHEL]Baseline"; + ContainsLine = "-a always,exit -F path=/usr/bin/passwd -F perm=x -F auid>=1000 -F auid!=unset -k privileged-passwd"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/bin/passwd\\s*-F\\s*perm\\s*=\\s*x\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-passwd"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource63ref +{ +ResourceID = "[nxFileLine][V-204543][medium][SRG-OS-000042-GPOS-00020]::[RHEL]Baseline"; + ContainsLine = "-a always,exit -F path=/usr/sbin/unix_chkpwd -F perm=x -F auid>=1000 -F auid!=unset -k privileged-passwd"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/sbin/unix_chkpwd\\s*-F\\s*perm\\s*=\\s*x\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-passwd"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource64ref +{ +ResourceID = "[nxFileLine][V-204544][medium][SRG-OS-000042-GPOS-00020]::[RHEL]Baseline"; + ContainsLine = "-a always,exit -F path=/usr/bin/gpasswd -F perm=x -F auid>=1000 -F auid!=unset -k privileged-passwd"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/bin/gpasswd\\s*-F\\s*perm\\s*=\\s*x\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-passwd"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource65ref +{ +ResourceID = "[nxFileLine][V-204545][medium][SRG-OS-000042-GPOS-00020]::[RHEL]Baseline"; + ContainsLine = "-a always,exit -F path=/usr/bin/chage -F perm=x -F auid>=1000 -F auid!=unset -k privileged-passwd"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/bin/chage\\s*-F\\s*perm\\s*=\\s*x\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-passwd"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource66ref +{ +ResourceID = "[nxFileLine][V-204546][medium][SRG-OS-000042-GPOS-00020]::[RHEL]Baseline"; + ContainsLine = "-a always,exit -F path=/usr/sbin/userhelper -F perm=x -F auid>=1000 -F auid!=unset -k privileged-passwd"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/sbin/userhelper\\s*-F\\s*perm\\s*=\\s*x\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-passwd"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource67ref +{ +ResourceID = "[nxFileLine][V-204547][medium][SRG-OS-000037-GPOS-00015]::[RHEL]Baseline"; + ContainsLine = "-a always,exit -F path=/usr/bin/su -F perm=x -F auid>=1000 -F auid!=unset -k privileged-priv_change"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/bin/su\\s*-F\\s*perm\\s*=\\s*x\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-priv_change"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource68ref +{ +ResourceID = "[nxFileLine][V-204548][medium][SRG-OS-000037-GPOS-00015]::[RHEL]Baseline"; + ContainsLine = "-a always,exit -F path=/usr/bin/sudo -F perm=x -F auid>=1000 -F auid!=unset -k privileged-priv_change"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/bin/sudo\\s*-F\\s*perm\\s*=\\s*x\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-priv_change"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource69ref +{ +ResourceID = "[nxFileLine][V-204549.a][medium][SRG-OS-000037-GPOS-00015]::[RHEL]Baseline"; + ContainsLine = "-w /etc/sudoers -p wa -k privileged-actions"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-w /etc/sudoers -p wa -k privileged-actions"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource70ref +{ +ResourceID = "[nxFileLine][V-204549.b][medium][SRG-OS-000037-GPOS-00015]::[RHEL]Baseline"; + ContainsLine = "-w /etc/sudoers.d/ -p wa -k privileged-actions"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-w /etc/sudoers.d/ -p wa -k privileged-actions"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource71ref +{ +ResourceID = "[nxFileLine][V-204550][medium][SRG-OS-000037-GPOS-00015]::[RHEL]Baseline"; + ContainsLine = "-a always,exit -F path=/usr/bin/newgrp -F perm=x -F auid>=1000 -F auid!=unset -k privileged-priv_change"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/bin/newgrp\\s*-F\\s*perm\\s*=\\s*x\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-priv_change"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource72ref +{ +ResourceID = "[nxFileLine][V-204551][medium][SRG-OS-000037-GPOS-00015]::[RHEL]Baseline"; + ContainsLine = "-a always,exit -F path=/usr/bin/chsh -F perm=x -F auid>=1000 -F auid!=unset -k privileged-priv_change"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/bin/chsh\\s*-F\\s*perm\\s*=\\s*x\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-priv_change"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource73ref +{ +ResourceID = "[nxFileLine][V-204552.a][medium][SRG-OS-000042-GPOS-00020]::[RHEL]Baseline"; + ContainsLine = "-a always,exit -F arch=b32 -S mount -F auid>=1000 -F auid!=unset -k privileged-mount"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*mount\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-mount"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource74ref +{ +ResourceID = "[nxFileLine][V-204552.b][medium][SRG-OS-000042-GPOS-00020]::[RHEL]Baseline"; + ContainsLine = "-a always,exit -F arch=b64 -S mount -F auid>=1000 -F auid!=unset -k privileged-mount"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*mount\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-mount"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource75ref +{ +ResourceID = "[nxFileLine][V-204552.c][medium][SRG-OS-000042-GPOS-00020]::[RHEL]Baseline"; + ContainsLine = "-a always,exit -F path=/usr/bin/mount -F perm=x -F auid>=1000 -F auid!=unset -k privileged-mount"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/bin/mount\\s*-F\\s*perm\\s*=\\s*x\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-mount"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource76ref +{ +ResourceID = "[nxFileLine][V-204553][medium][SRG-OS-000042-GPOS-00020]::[RHEL]Baseline"; + ContainsLine = "-a always,exit -F path=/usr/bin/umount -F perm=x -F auid>=1000 -F auid!=unset -k privileged-mount"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/bin/umount\\s*-F\\s*perm\\s*=\\s*x\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-mount"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource77ref +{ +ResourceID = "[nxFileLine][V-204554][medium][SRG-OS-000042-GPOS-00020]::[RHEL]Baseline"; + ContainsLine = "-a always,exit -F path=/usr/sbin/postdrop -F perm=x -F auid>=1000 -F auid!=unset -k privileged-postfix"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/sbin/postdrop\\s*-F\\s*perm\\s*=\\s*x\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-postfix"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource78ref +{ +ResourceID = "[nxFileLine][V-204555][medium][SRG-OS-000042-GPOS-00020]::[RHEL]Baseline"; + ContainsLine = "-a always,exit -F path=/usr/sbin/postqueue -F perm=x -F auid>=1000 -F auid!=unset -k privileged-postfix"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/sbin/postqueue\\s*-F\\s*perm\\s*=\\s*x\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-postfix"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource79ref +{ +ResourceID = "[nxFileLine][V-204556][medium][SRG-OS-000042-GPOS-00020]::[RHEL]Baseline"; + ContainsLine = "-a always,exit -F path=/usr/libexec/openssh/ssh-keysign -F perm=x -F auid>=1000 -F auid!=unset -k privileged-ssh"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/libexec/openssh/ssh-keysign\\s*-F\\s*perm\\s*=\\s*x\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-ssh"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource80ref +{ +ResourceID = "[nxFileLine][V-204557][medium][SRG-OS-000042-GPOS-00020]::[RHEL]Baseline"; + ContainsLine = "-a always,exit -F path=/usr/bin/crontab -F perm=x -F auid>=1000 -F auid!=unset -k privileged-cron"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/bin/crontab\\s*-F\\s*perm\\s*=\\s*x\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-cron"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource81ref +{ +ResourceID = "[nxFileLine][V-204558][medium][SRG-OS-000471-GPOS-00215]::[RHEL]Baseline"; + ContainsLine = "-a always,exit -F path=/usr/sbin/pam_timestamp_check -F perm=x -F auid>=1000 -F auid!=unset -k privileged-pam"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/sbin/pam_timestamp_check\\s*-F\\s*perm\\s*=\\s*x\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-pam"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource82ref +{ +ResourceID = "[nxFileLine][V-204559.a][medium][SRG-OS-000471-GPOS-00216]::[RHEL]Baseline"; + ContainsLine = "-a always,exit -F arch=b32 -S create_module -F auid>=1000 -F auid!=unset -k module-change"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*create_module\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*module-change"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource83ref +{ +ResourceID = "[nxFileLine][V-204559.b][medium][SRG-OS-000471-GPOS-00216]::[RHEL]Baseline"; + ContainsLine = "-a always,exit -F arch=b64 -S create_module -F auid>=1000 -F auid!=unset -k module-change"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*create_module\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*module-change"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource84ref +{ +ResourceID = "[nxFileLine][V-204560.a][medium][SRG-OS-000471-GPOS-00216]::[RHEL]Baseline"; + ContainsLine = "-a always,exit -F arch=b32 -S init_module,finit_module -F auid>=1000 -F auid!=unset -k modulechange"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*init_module,finit_module\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*modulechange"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource85ref +{ +ResourceID = "[nxFileLine][V-204560.b][medium][SRG-OS-000471-GPOS-00216]::[RHEL]Baseline"; + ContainsLine = "-a always,exit -F arch=b64 -S init_module,finit_module -F auid>=1000 -F auid!=unset -k modulechange"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*init_module,finit_module\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*modulechange"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource86ref +{ +ResourceID = "[nxFileLine][V-204562.a][medium][SRG-OS-000471-GPOS-00216]::[RHEL]Baseline"; + ContainsLine = "-a always,exit -F arch=b32 -S delete_module -F auid>=1000 -F auid!=unset -k module-change"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*delete_module\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*module-change"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource87ref +{ +ResourceID = "[nxFileLine][V-204562.b][medium][SRG-OS-000471-GPOS-00216]::[RHEL]Baseline"; + ContainsLine = "-a always,exit -F arch=b64 -S delete_module -F auid>=1000 -F auid!=unset -k module-change"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*delete_module\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*module-change"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource88ref +{ +ResourceID = "[nxFileLine][V-204563][medium][SRG-OS-000471-GPOS-00216]::[RHEL]Baseline"; + ContainsLine = "-a always,exit -F path=/usr/bin/kmod -F perm=x -F auid>=1000 -F auid!=unset -k modules"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/bin/kmod\\s*-F\\s*perm\\s*=\\s*x\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*modules"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource89ref +{ +ResourceID = "[nxFileLine][V-204564][medium][SRG-OS-000004-GPOS-00004]::[RHEL]Baseline"; + ContainsLine = "-w /etc/passwd -p wa -k identity"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-w\\s*/etc/passwd\\s*-p\\s*wa\\s*-k\\s*identity"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource90ref +{ +ResourceID = "[nxFileLine][V-204565][medium][SRG-OS-000004-GPOS-00004]::[RHEL]Baseline"; + ContainsLine = "-w /etc/group -p wa -k identity"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-w\\s*/etc/group\\s*-p\\s*wa\\s*-k\\s*identity"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource91ref +{ +ResourceID = "[nxFileLine][V-204566][medium][SRG-OS-000004-GPOS-00004]::[RHEL]Baseline"; + ContainsLine = "-w /etc/gshadow -p wa -k identity"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-w\\s*/etc/gshadow\\s*-p\\s*wa\\s*-k\\s*identity"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource92ref +{ +ResourceID = "[nxFileLine][V-204567][medium][SRG-OS-000004-GPOS-00004]::[RHEL]Baseline"; + ContainsLine = "-w /etc/shadow -p wa -k identity"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-w\\s*/etc/shadow\\s*-p\\s*wa\\s*-k\\s*identity"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource93ref +{ +ResourceID = "[nxFileLine][V-204568][medium][SRG-OS-000004-GPOS-00004]::[RHEL]Baseline"; + ContainsLine = "-w /etc/security/opasswd -p wa -k identity"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-w\\s*/etc/security/opasswd\\s*-p\\s*wa\\s*-k\\s*identity"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource94ref +{ +ResourceID = "[nxFileLine][V-204572.a][medium][SRG-OS-000466-GPOS-00210]::[RHEL]Baseline"; + ContainsLine = "-a always,exit -F arch=b32 -S unlink,unlinkat,rename,renameat,rmdir -F auid>=1000 -F auid!=unset -k delete"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*unlink,unlinkat,rename,renameat,rmdir\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*delete"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource95ref +{ +ResourceID = "[nxFileLine][V-204572.b][medium][SRG-OS-000466-GPOS-00210]::[RHEL]Baseline"; + ContainsLine = "-a always,exit -F arch=b64 -S unlink,unlinkat,rename,renameat,rmdir -F auid>=1000 -F auid!=unset -k delete"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*unlink,unlinkat,rename,renameat,rmdir\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*delete"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource96ref +{ +ResourceID = "[nxFileLine][V-204578][medium][SRG-OS-000033-GPOS-00014]::[RHEL]Baseline"; + ContainsLine = "Ciphers aes256-ctr,aes192-ctr,aes128-ctr"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/ssh/sshd_config"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "^#\\s*Ciphers.*|^\\s*Ciphers\\s*aes128-ctr.*|^\\s*Ciphers\\s*aes192-ctr.*"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource97ref +{ +ResourceID = "[nxFileLine][V-204579.b][medium][SRG-OS-000163-GPOS-00072]::[RHEL]Baseline"; + ContainsLine = "declare -xr TMOUT=900"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/profile.d/tmout.sh"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "^\\s*TMOUT\\s*=\\s*[0-8]?[0-9]?[0-9]?$|^#\\s*TMOUT.*"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource98ref +{ +ResourceID = "[nxFileLine][V-204579.c][medium][SRG-OS-000163-GPOS-00072]::[RHEL]Baseline"; + ContainsLine = "declare -xr TMOUT=900"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/bashrc"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "^\\s*TMOUT\\s*=\\s*[0-8]?[0-9]?[0-9]?$|^#\\s*TMOUT.*"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource99ref +{ +ResourceID = "[nxFileLine][V-204579.d][medium][SRG-OS-000163-GPOS-00072]::[RHEL]Baseline"; + ContainsLine = "declare -xr TMOUT=900"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/profile"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "^\\s*TMOUT\\s*=\\s*[0-8]?[0-9]?[0-9]?$|^#\\s*TMOUT.*"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource100ref +{ +ResourceID = "[nxFileLine][V-204580][medium][SRG-OS-000023-GPOS-00006]::[RHEL]Baseline"; + ContainsLine = "banner /etc/issue"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/ssh/sshd_config"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*banner\\s*/etc/issue"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource101ref +{ +ResourceID = "[nxFileLine][V-204587][medium][SRG-OS-000163-GPOS-00072]::[RHEL]Baseline"; + ContainsLine = "ClientAliveInterval 600"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/ssh/sshd_config"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "^\\s*ClientAliveInterval\\s*[0-5]?[0-9]?[0-9]?\\s*$|^#\\s*ClientAliveInterval.*|^\\s*ClientAliveInterval\\s*$"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource102ref +{ +ResourceID = "[nxFileLine][V-204588][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; + ContainsLine = "RhostsRSAAuthentication no"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/ssh/sshd_config"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "^#\\s*RhostsRSAAuthentication.*$|^RhostsRSAAuthentication\\s*(?!no\\b)\\w*$"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource103ref +{ +ResourceID = "[nxFileLine][V-204589][medium][SRG-OS-000163-GPOS-00072]::[RHEL]Baseline"; + ContainsLine = "ClientAliveCountMax 0"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/ssh/sshd_config"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "^#\\s*ClientAliveCountMax.*$|^ClientAliveCountMax\\s*(?!0\\b)\\w*$"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource104ref +{ +ResourceID = "[nxFileLine][V-204590][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; + ContainsLine = "IgnoreRhosts yes"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/ssh/sshd_config"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "^#\\s*IgnoreRhosts.*$|^IgnoreRhosts\\s*(?!yes\\b)\\w*$"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource105ref +{ +ResourceID = "[nxFileLine][V-204591][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; + ContainsLine = "PrintLastLog yes"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/ssh/sshd_config"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "^#\\s*PrintLastLog.*$|^PrintLastLog\\s*(?!yes\\b)\\w*$"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource106ref +{ +ResourceID = "[nxFileLine][V-204592][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; + ContainsLine = "PermitRootLogin no"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/ssh/sshd_config"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "^#\\s*PermitRootLogin.*$|^PermitRootLogin\\s*(?!no\\b)\\w*$"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource107ref +{ +ResourceID = "[nxFileLine][V-204593][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; + ContainsLine = "IgnoreUserKnownHosts yes"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/ssh/sshd_config"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "^#\\s*IgnoreUserKnownHosts.*$|^IgnoreUserKnownHosts\\s*(?!yes\\b)\\w*$"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource108ref +{ +ResourceID = "[nxFileLine][V-204594][high][SRG-OS-000074-GPOS-00042]::[RHEL]Baseline"; + ContainsLine = "Protocol 2"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/ssh/sshd_config"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "^#\\s*Protocol.*$|^Protocol\\s*(?!2\\b)\\w*$"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource109ref +{ +ResourceID = "[nxFileLine][V-204595][medium][SRG-OS-000250-GPOS-00093]::[RHEL]Baseline"; + ContainsLine = "MACs hmac-sha2-512,hmac-sha2-256"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/ssh/sshd_config"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*MACs.*|\\s*MACs\\s*hmac-(?!sha2-512).*"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource110ref +{ +ResourceID = "[nxFileLine][V-204598][medium][SRG-OS-000364-GPOS-00151]::[RHEL]Baseline"; + ContainsLine = "GSSAPIAuthentication no"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/ssh/sshd_config"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "^#\\s*GSSAPIAuthentication.*$|^GSSAPIAuthentication\\s*(?!no\\b)\\w*$"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource111ref +{ +ResourceID = "[nxFileLine][V-204599][medium][SRG-OS-000364-GPOS-00151]::[RHEL]Baseline"; + ContainsLine = "KerberosAuthentication no"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/ssh/sshd_config"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "^#\\s*KerberosAuthentication.*$|^KerberosAuthentication\\s*(?!no\\b)\\w*$"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource112ref +{ +ResourceID = "[nxFileLine][V-204600][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; + ContainsLine = "StrictModes yes"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/ssh/sshd_config"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "^#\\s*StrictModes.*$|^StrictModes\\s*(?!yes\\b)\\w*$"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource113ref +{ +ResourceID = "[nxFileLine][V-204601][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; + ContainsLine = "UsePrivilegeSeparation sandbox"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/ssh/sshd_config"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "^#\\s*UsePrivilegeSeparation.*$|^UsePrivilegeSeparation\\s*(?!sandbox\\b)\\w*$"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource114ref +{ +ResourceID = "[nxFileLine][V-204602][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; + ContainsLine = "Compression delayed"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/ssh/sshd_config"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "^#\\s*Compression.*$|^Compression\\s*(?!delayed\\b)\\w*$"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource115ref +{ +ResourceID = "[nxFileLine][V-204622][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; + ContainsLine = "X11Forwarding no"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/ssh/sshd_config"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "^#\\s*X11Forwarding.*$|^X11Forwarding\\s*(?!no\\b)\\w*$"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource116ref +{ +ResourceID = "[nxFileLine][V-233307][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; + ContainsLine = "X11UseLocalhost yes"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/ssh/sshd_config"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*X11UseLocalhost\\s*yes"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource117ref +{ +ResourceID = "[nxFileLine][V-255925][medium][SRG-OS-000033-GPOS-00014]::[RHEL]Baseline"; + ContainsLine = "KexAlgorithms ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/ssh/sshd_config"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*KexAlgorithms\\s*ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxServiceResource as $MSFT_nxServiceResource1ref +{ +ResourceID = "[nxService][V-204451][medium][SRG-OS-000114-GPOS-00059]::[RHEL]Baseline"; + Controller = "systemd"; + Enabled = False; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxService.ps1::13::9::nxService"; + Name = "autofs"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxServiceResource as $MSFT_nxServiceResource2ref +{ +ResourceID = "[nxService][V-204492][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; + Controller = "systemd"; + Enabled = False; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxService.ps1::13::9::nxService"; + Name = "kdump"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxServiceResource as $MSFT_nxServiceResource3ref +{ +ResourceID = "[nxService][V-204503][medium][SRG-OS-000038-GPOS-00016]::[RHEL]Baseline"; + Controller = "systemd"; + State = "Running"; + Enabled = True; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxService.ps1::22::9::nxService"; + Name = "auditd"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxServiceResource as $MSFT_nxServiceResource4ref +{ +ResourceID = "[nxService][V-204586][medium][SRG-OS-000423-GPOS-00187]::[RHEL]Baseline"; + Controller = "systemd"; + State = "Running"; + Enabled = True; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxService.ps1::22::9::nxService"; + Name = "sshd"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxServiceResource as $MSFT_nxServiceResource5ref +{ +ResourceID = "[nxService][V-204604.b][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; + Controller = "systemd"; + State = "Running"; + Enabled = True; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxService.ps1::22::9::nxService"; + Name = "firewalld"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxScriptResource as $MSFT_nxScriptResource1ref +{ +ResourceID = "[nxScript][V-204399.b][medium][[Skip] SRG-OS-000029-GPOS-00010]::[RHEL]Baseline"; + GetScript = "#!/bin/bash\necho [V-204399.b][medium][[Skip] SRG-OS-000029-GPOS-00010]"; + TestScript = "#!/bin/bash\nexit 0"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxScript.skip.ps1::10::5::nxScript"; + SetScript = "#!/bin/bash"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxScriptResource as $MSFT_nxScriptResource2ref +{ +ResourceID = "[nxScript][V-204400][medium][[Skip] SRG-OS-000029-GPOS-00010]::[RHEL]Baseline"; + GetScript = "#!/bin/bash\necho [V-204400][medium][[Skip] SRG-OS-000029-GPOS-00010]"; + TestScript = "#!/bin/bash\nexit 0"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxScript.skip.ps1::10::5::nxScript"; + SetScript = "#!/bin/bash"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxScriptResource as $MSFT_nxScriptResource3ref +{ +ResourceID = "[nxScript][V-204403][medium][[Skip] SRG-OS-000029-GPOS-00010]::[RHEL]Baseline"; + GetScript = "#!/bin/bash\necho [V-204403][medium][[Skip] SRG-OS-000029-GPOS-00010]"; + TestScript = "#!/bin/bash\nexit 0"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxScript.skip.ps1::10::5::nxScript"; + SetScript = "#!/bin/bash"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxScriptResource as $MSFT_nxScriptResource4ref +{ +ResourceID = "[nxScript][V-204509][medium][[Skip] SRG-OS-000342-GPOS-00133]::[RHEL]Baseline"; + GetScript = "#!/bin/bash\necho [V-204509][medium][[Skip] SRG-OS-000342-GPOS-00133]"; + TestScript = "#!/bin/bash\nexit 0"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxScript.skip.ps1::10::5::nxScript"; + SetScript = "#!/bin/bash"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxScriptResource as $MSFT_nxScriptResource5ref +{ +ResourceID = "[nxScript][V-204513][medium][[Skip] SRG-OS-000343-GPOS-00134]::[RHEL]Baseline"; + GetScript = "#!/bin/bash\necho [V-204513][medium][[Skip] SRG-OS-000343-GPOS-00134]"; + TestScript = "#!/bin/bash\nexit 0"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxScript.skip.ps1::10::5::nxScript"; + SetScript = "#!/bin/bash"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxScriptResource as $MSFT_nxScriptResource6ref +{ +ResourceID = "[nxScript][V-204623][medium][[Skip] SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; + GetScript = "#!/bin/bash\necho [V-204623][medium][[Skip] SRG-OS-000480-GPOS-00227]"; + TestScript = "#!/bin/bash\nexit 0"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxScript.skip.ps1::10::5::nxScript"; + SetScript = "#!/bin/bash"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxScriptResource as $MSFT_nxScriptResource7ref +{ +ResourceID = "[nxScript][V-244557][medium][[Skip] SRG-OS-000080-GPOS-00048]::[RHEL]Baseline"; + GetScript = "#!/bin/bash\necho [V-244557][medium][[Skip] SRG-OS-000080-GPOS-00048]"; + TestScript = "#!/bin/bash\nexit 0"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxScript.skip.ps1::10::5::nxScript"; + SetScript = "#!/bin/bash"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxScriptResource as $MSFT_nxScriptResource8ref +{ +ResourceID = "[nxScript][V-244558][medium][[Skip] SRG-OS-000080-GPOS-00048]::[RHEL]Baseline"; + GetScript = "#!/bin/bash\necho [V-244558][medium][[Skip] SRG-OS-000080-GPOS-00048]"; + TestScript = "#!/bin/bash\nexit 0"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxScript.skip.ps1::10::5::nxScript"; + SetScript = "#!/bin/bash"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxScriptResource as $MSFT_nxScriptResource9ref +{ +ResourceID = "[nxScript][V-204399.a][medium][[Skip] SRG-OS-000029-GPOS-00010]::[RHEL]Baseline"; + GetScript = "#!/bin/bash\necho [V-204399.a][medium][[Skip] SRG-OS-000029-GPOS-00010]"; + TestScript = "#!/bin/bash\nexit 0"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxScript.skip.ps1::10::5::nxScript"; + SetScript = "#!/bin/bash"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxScriptResource as $MSFT_nxScriptResource10ref +{ +ResourceID = "[nxScript][V-255926][medium][[Skip] SRG-OS-000029-GPOS-00010]::[RHEL]Baseline"; + GetScript = "#!/bin/bash\necho [V-255926][medium][[Skip] SRG-OS-000029-GPOS-00010]"; + TestScript = "#!/bin/bash\nexit 0"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxScript.skip.ps1::10::5::nxScript"; + SetScript = "#!/bin/bash"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of OMI_ConfigurationDocument + + { + Version="2.0.0"; + + MinimumCompatibleVersion = "1.0.0"; + + CompatibleVersionAdditionalProperties= {"Omi_BaseResource:ConfigurationName"}; + + Author="Microsoft"; + + GenerationDate="03/09/2023 14:17:33"; + + GenerationHost="Microsoft"; + + Name="LinuxBaseLine"; + + }; + diff --git a/stig/linux/config/RHEL78.mof b/stig/linux/config/RHEL78.mof index fa34c8a..f70a9df 100644 --- a/stig/linux/config/RHEL78.mof +++ b/stig/linux/config/RHEL78.mof @@ -1,2118 +1,1829 @@ -/* -@TargetNode='RHEL78' -@GeneratedBy=Microsoft -@GenerationDate=06/30/2022 11:38:45 -@GenerationHost=Microsoft -*/ - -instance of MSFT_nxPackageResource as $MSFT_nxPackageResource1ref -{ -ResourceID = "[nxPackage][V-204442][high][SRG-OS-000095-GPOS-00049]::[RHEL]Baseline"; - Ensure = "Absent"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxPackage.ps1::8::5::nxPackage"; - Name = "rsh-server"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxPackageResource as $MSFT_nxPackageResource2ref -{ -ResourceID = "[nxPackage][V-204443][high][SRG-OS-000095-GPOS-00049]::[RHEL]Baseline"; - Ensure = "Absent"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxPackage.ps1::8::5::nxPackage"; - Name = "ypserv"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxPackageResource as $MSFT_nxPackageResource3ref -{ -ResourceID = "[nxPackage][V-204497][high][SRG-OS-000033-GPOS-00014]::[RHEL]Baseline"; - Ensure = "Present"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxPackage.ps1::8::5::nxPackage"; - Name = "dracut-fips"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxPackageResource as $MSFT_nxPackageResource4ref -{ -ResourceID = "[nxPackage][V-204498][low][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; - Ensure = "Present"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxPackage.ps1::8::5::nxPackage"; - Name = "aide"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxPackageResource as $MSFT_nxPackageResource5ref -{ -ResourceID = "[nxPackage][V-204502][high][SRG-OS-000095-GPOS-00049]::[RHEL]Baseline"; - Ensure = "Absent"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxPackage.ps1::8::5::nxPackage"; - Name = "telnet-server"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxPackageResource as $MSFT_nxPackageResource6ref -{ -ResourceID = "[nxPackage][V-204585][medium][SRG-OS-000423-GPOS-00187]::[RHEL]Baseline"; - Ensure = "Present"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxPackage.ps1::8::5::nxPackage"; - Name = "openssh-server"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxPackageResource as $MSFT_nxPackageResource7ref -{ -ResourceID = "[nxPackage][V-204604.a][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; - Ensure = "Present"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxPackage.ps1::8::5::nxPackage"; - Name = "firewalld"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxPackageResource as $MSFT_nxPackageResource8ref -{ -ResourceID = "[nxPackage][V-204620][high][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; - Ensure = "Absent"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxPackage.ps1::8::5::nxPackage"; - Name = "vsftpd"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxPackageResource as $MSFT_nxPackageResource9ref -{ -ResourceID = "[nxPackage][V-204621][high][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; - Ensure = "Absent"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxPackage.ps1::8::5::nxPackage"; - Name = "tftp-server"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxPackageResource as $MSFT_nxPackageResource10ref -{ -ResourceID = "[nxPackage][V-204631][medium][SRG-OS-000375-GPOS-00160]::[RHEL]Baseline"; - Ensure = "Present"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxPackage.ps1::8::5::nxPackage"; - Name = "pam_pkcs11"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileResource as $MSFT_nxFileResource1ref -{ -ResourceID = "[nxFile][V-204395][medium][SRG-OS-000023-GPOS-00006]::[RHEL]Baseline"; - Contents = "You are accessing a U.S. Government (USG) Information System (IS) that is provided for USG-authorized use only.\n\nBy using this IS (which includes any device attached to this IS), you consent to the following conditions:\n\n-The USG routinely intercepts and monitors communications on this IS for purposes including, but not limited to, penetration testing, COMSEC monitoring, network operations and defense, personnel misconduct (PM), law enforcement (LE), and counterintelligence (CI) investigations.\n\n-At any time, the USG may inspect and seize data stored on this IS.\n\n-Communications using, or data stored on, this IS are not private, are subject to routine monitoring, interception, and search, and may be disclosed or used for any USG-authorized purpose.\n\n-This IS includes security measures (e.g., authentication and access controls) to protect USG interests--not for your personal benefit or privacy.\n\n-Notwithstanding the above, using this IS does not constitute consent to PM, LE or CI investigative searching or monitoring of the content of privileged communications, or work product, related to personal representation or services by attorneys, psychotherapists, or clergy, and their assistants. Such communications and work product are private and confidential. See User Agreement for details."; - DestinationPath = "/etc/issue"; - ModuleName = "nx"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; - ModuleVersion = "1.0"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileResource as $MSFT_nxFileResource2ref -{ -ResourceID = "[nxFile][V-204449.a][medium][SRG-OS-000114-GPOS-00059]::[RHEL]Baseline"; - Contents = ""; - DestinationPath = "/etc/modprobe.d/usb-storage.conf"; - ModuleName = "nx"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; - ModuleVersion = "1.0"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileResource as $MSFT_nxFileResource3ref -{ -ResourceID = "[nxFile][V-204449.b][medium][SRG-OS-000114-GPOS-00059]::[RHEL]Baseline"; - Contents = ""; - DestinationPath = "/etc/modprobe.d/blacklist.conf"; - ModuleName = "nx"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; - ModuleVersion = "1.0"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileResource as $MSFT_nxFileResource4ref -{ -ResourceID = "[nxFile][V-204450.a][medium][SRG-OS-000378-GPOS-00163]::[RHEL]Baseline"; - Contents = ""; - DestinationPath = "/etc/modprobe.d/dccp.conf"; - ModuleName = "nx"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; - ModuleVersion = "1.0"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileResource as $MSFT_nxFileResource5ref -{ -ResourceID = "[nxFile][V-204576][low][SRG-OS-000027-GPOS-00008]::[RHEL]Baseline"; - Contents = "* hard maxlogins 10"; - DestinationPath = "/etc/security/limits.d/204576-powerstig.conf"; - ModuleName = "nx"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; - ModuleVersion = "1.0"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileResource as $MSFT_nxFileResource6ref -{ -ResourceID = "[nxFile][V-204579.a][medium][SRG-OS-000163-GPOS-00072]::[RHEL]Baseline"; - Contents = ""; - DestinationPath = "/etc/profile.d/tmout.sh"; - ModuleName = "nx"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; - ModuleVersion = "1.0"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileResource as $MSFT_nxFileResource7ref -{ -ResourceID = "[nxFile][V-204584][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; - Contents = "kernel.randomize_va_space = 2"; - DestinationPath = "/etc/sysctl.d/204584-powerstig.conf"; - ModuleName = "nx"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; - ModuleVersion = "1.0"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileResource as $MSFT_nxFileResource8ref -{ -ResourceID = "[nxFile][V-204609][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; - Contents = "net.ipv4.conf.all.accept_source_route = 0"; - DestinationPath = "/etc/sysctl.d/204609-powerstig.conf"; - ModuleName = "nx"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; - ModuleVersion = "1.0"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileResource as $MSFT_nxFileResource9ref -{ -ResourceID = "[nxFile][V-204610][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; - Contents = "net.ipv4.conf.all.rp_filter = 1"; - DestinationPath = "/etc/sysctl.d/204610-powerstig.conf"; - ModuleName = "nx"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; - ModuleVersion = "1.0"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileResource as $MSFT_nxFileResource10ref -{ -ResourceID = "[nxFile][V-204611][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; - Contents = "net.ipv4.conf.default.rp_filter = 1"; - DestinationPath = "/etc/sysctl.d/204611-powerstig.conf"; - ModuleName = "nx"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; - ModuleVersion = "1.0"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileResource as $MSFT_nxFileResource11ref -{ -ResourceID = "[nxFile][V-204612][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; - Contents = "net.ipv4.conf.default.accept_source_route = 0"; - DestinationPath = "/etc/sysctl.d/204612-powerstig.conf"; - ModuleName = "nx"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; - ModuleVersion = "1.0"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileResource as $MSFT_nxFileResource12ref -{ -ResourceID = "[nxFile][V-204613][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; - Contents = "net.ipv4.icmp_echo_ignore_broadcasts = 1"; - DestinationPath = "/etc/sysctl.d/204613-powerstig.conf"; - ModuleName = "nx"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; - ModuleVersion = "1.0"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileResource as $MSFT_nxFileResource13ref -{ -ResourceID = "[nxFile][V-204614][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; - Contents = "net.ipv4.conf.default.accept_redirects = 0"; - DestinationPath = "/etc/sysctl.d/204614-powerstig.conf"; - ModuleName = "nx"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; - ModuleVersion = "1.0"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileResource as $MSFT_nxFileResource14ref -{ -ResourceID = "[nxFile][V-204615][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; - Contents = "net.ipv4.conf.all.accept_redirects = 0"; - DestinationPath = "/etc/sysctl.d/204615-powerstig.conf"; - ModuleName = "nx"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; - ModuleVersion = "1.0"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileResource as $MSFT_nxFileResource15ref -{ -ResourceID = "[nxFile][V-204616][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; - Contents = "net.ipv4.conf.default.send_redirects = 0"; - DestinationPath = "/etc/sysctl.d/204616-powerstig.conf"; - ModuleName = "nx"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; - ModuleVersion = "1.0"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileResource as $MSFT_nxFileResource16ref -{ -ResourceID = "[nxFile][V-204617][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; - Contents = "net.ipv4.conf.all.send_redirects = 0"; - DestinationPath = "/etc/sysctl.d/204617-powerstig.conf"; - ModuleName = "nx"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; - ModuleVersion = "1.0"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileResource as $MSFT_nxFileResource17ref -{ -ResourceID = "[nxFile][V-204625][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; - Contents = "net.ipv4.ip_forward = 0"; - DestinationPath = "/etc/sysctl.d/204625-powerstig.conf"; - ModuleName = "nx"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; - ModuleVersion = "1.0"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileResource as $MSFT_nxFileResource18ref -{ -ResourceID = "[nxFile][V-204630][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; - Contents = "net.ipv6.conf.all.accept_source_route = 0"; - DestinationPath = "/etc/sysctl.d/204630-powerstig.conf"; - ModuleName = "nx"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; - ModuleVersion = "1.0"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileResource as $MSFT_nxFileResource19ref -{ -ResourceID = "[nxFile][V-237634.a][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; - Contents = "Defaults !targetpw"; - DestinationPath = "/etc/sudoers.d/237634a-powerstig.conf"; - ModuleName = "nx"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; - ModuleVersion = "1.0"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileResource as $MSFT_nxFileResource20ref -{ -ResourceID = "[nxFile][V-237634.b][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; - Contents = "Defaults !rootpw"; - DestinationPath = "/etc/sudoers.d/237634b-powerstig.conf"; - ModuleName = "nx"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; - ModuleVersion = "1.0"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileResource as $MSFT_nxFileResource21ref -{ -ResourceID = "[nxFile][V-237634.c][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; - Contents = "Defaults !runaspw"; - DestinationPath = "/etc/sudoers.d/237634c-powerstig.conf"; - ModuleName = "nx"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; - ModuleVersion = "1.0"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileResource as $MSFT_nxFileResource22ref -{ -ResourceID = "[nxFile][V-237635][medium][SRG-OS-000373-GPOS-00156]::[RHEL]Baseline"; - Contents = "Defaults timestamp_timeout=0"; - DestinationPath = "/etc/sudoers.d/237635-powerstig.conf"; - ModuleName = "nx"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; - ModuleVersion = "1.0"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileResource as $MSFT_nxFileResource23ref -{ -ResourceID = "[nxFile][V-250314][medium][SRG-OS-000324-GPOS-00125]::[RHEL]Baseline"; - Contents = "%wheel ALL=(ALL) TYPE=sysadm_t ROLE=sysadm_r ALL"; - DestinationPath = "/etc/sudoers.d/250314-powerstig.conf"; - ModuleName = "nx"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; - ModuleVersion = "1.0"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource1ref -{ -ResourceID = "[nxFileLine][V-204405][medium][SRG-OS-000069-GPOS-00037]::[RHEL]Baseline"; - ContainsLine = "password substack system-auth"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/pam.d/passwd"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "^\\s*password(?:\\t*|\\s*)substack\\tsystem-auth\\s*$|^#\\s*password\\s*substack\\s*system-auth.*"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource2ref -{ -ResourceID = "[nxFileLine][V-204407][medium][SRG-OS-000069-GPOS-00037]::[RHEL]Baseline"; - ContainsLine = "ucredit = -1"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/security/pwquality.conf"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "^#\\s*ucredit.*$|^ucredit\\s*=\\s*(?!-1\\b)\\w*$"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource3ref -{ -ResourceID = "[nxFileLine][V-204408][medium][SRG-OS-000070-GPOS-00038]::[RHEL]Baseline"; - ContainsLine = "lcredit = -1"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/security/pwquality.conf"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "^#\\s*lcredit.*$|^lcredit\\s*=\\s*(?!-1\\b)\\w*$"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource4ref -{ -ResourceID = "[nxFileLine][V-204409][medium][SRG-OS-000071-GPOS-00039]::[RHEL]Baseline"; - ContainsLine = "dcredit = -1"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/security/pwquality.conf"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "^#\\s*dcredit.*$|^dcredit\\s*=\\s*(?!-1\\b)\\w*$"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource5ref -{ -ResourceID = "[nxFileLine][V-204410][medium][SRG-OS-000266-GPOS-00101]::[RHEL]Baseline"; - ContainsLine = "ocredit=-1"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/security/pwquality.conf"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "^#\\s*ocredit.*$|^ocredit\\s*=\\s*(?!-1)\\w*$"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource6ref -{ -ResourceID = "[nxFileLine][V-204411][medium][SRG-OS-000072-GPOS-00040]::[RHEL]Baseline"; - ContainsLine = "difok = 8"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/security/pwquality.conf"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*difok\\s*=.*|^\\s*difok\\s*=\\s*(-|)[0-7]$"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource7ref -{ -ResourceID = "[nxFileLine][V-204412][medium][SRG-OS-000072-GPOS-00040]::[RHEL]Baseline"; - ContainsLine = "minclass = 4"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/security/pwquality.conf"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "^#\\s*minclass\\s*=.*|^\\s*minclass\\s*=\\s*(?!\\d{2,})[1-3]"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource8ref -{ -ResourceID = "[nxFileLine][V-204413][medium][SRG-OS-000072-GPOS-00040]::[RHEL]Baseline"; - ContainsLine = "maxrepeat = 3"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/security/pwquality.conf"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "^#\\s*maxrepeat\\s*=.*|^\\s*maxrepeat\\s*=\\s*(?:\\d{2,}|[4-9])"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource9ref -{ -ResourceID = "[nxFileLine][V-204414][medium][SRG-OS-000072-GPOS-00040]::[RHEL]Baseline"; - ContainsLine = "maxclassrepeat = 4"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/security/pwquality.conf"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "^#\\s*maxclassrepeat\\s*=.*|^\\s*maxclassrepeat\\s*=\\s*(?:\\d{2,}|[1-3|5-9])"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource10ref -{ -ResourceID = "[nxFileLine][V-204416][medium][SRG-OS-000073-GPOS-00041]::[RHEL]Baseline"; - ContainsLine = "ENCRYPT_METHOD SHA512"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/login.defs"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*ENCRYPT_METHOD\\s*SHA512"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource11ref -{ -ResourceID = "[nxFileLine][V-204418][medium][SRG-OS-000075-GPOS-00043]::[RHEL]Baseline"; - ContainsLine = "PASS_MIN_DAYS 1"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/login.defs"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "^\\s*PASS_MIN_DAYS\\s*[0]*$|#\\s*PASS_MIN_DAYS.*"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource12ref -{ -ResourceID = "[nxFileLine][V-204420][medium][SRG-OS-000076-GPOS-00044]::[RHEL]Baseline"; - ContainsLine = "PASS_MAX_DAYS 60"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/login.defs"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "^\\s*PASS_MAX_DAYS\\s*([6][1-9]|[7-9][0-9]|\\d{3,})$|#\\s*PASS_MAX_DAYS.*"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource13ref -{ -ResourceID = "[nxFileLine][V-204423][medium][SRG-OS-000078-GPOS-00046]::[RHEL]Baseline"; - ContainsLine = "minlen = 15"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/security/pwquality.conf"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "^\\s*minlen\\s*=\\s*([0-9]|[1][1-4])$|#\\s*minlen.*"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource14ref -{ -ResourceID = "[nxFileLine][V-204425][high][SRG-OS-000106-GPOS-00053]::[RHEL]Baseline"; - ContainsLine = "PermitEmptyPasswords no"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/ssh/sshd_config"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "^#\\s*PermitEmptyPasswords.*$|^PermitEmptyPasswords\\s*(?!no\\b)\\w*$"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource15ref -{ -ResourceID = "[nxFileLine][V-204426][medium][SRG-OS-000118-GPOS-00060]::[RHEL]Baseline"; - ContainsLine = "INACTIVE=35"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/default/useradd"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "^#\\s*INACTIVE\\s*=.*|^\\s*INACTIVE\\s*=\\s*(3[5-9]|[4-9]\\d+|\\d{3,})"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource16ref -{ -ResourceID = "[nxFileLine][V-204431][medium][SRG-OS-000480-GPOS-00226]::[RHEL]Baseline"; - ContainsLine = "FAIL_DELAY 4"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/login.defs"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "^#\\s*FAIL_DELAY.*|^FAIL_DELAY\\s*(?!\\d{2,})[1-3]"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource17ref -{ -ResourceID = "[nxFileLine][V-204434][medium][SRG-OS-000480-GPOS-00229]::[RHEL]Baseline"; - ContainsLine = "PermitUserEnvironment no"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/ssh/sshd_config"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "^#\\s*PermitUserEnvironment.*$|^PermitUserEnvironment\\s*(?!no\\b)\\w*$"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource18ref -{ -ResourceID = "[nxFileLine][V-204435][medium][SRG-OS-000480-GPOS-00229]::[RHEL]Baseline"; - ContainsLine = "HostbasedAuthentication no"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/ssh/sshd_config"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "^#\\s*HostbasedAuthentication.*$|^HostbasedAuthentication\\s*(?!no\\b)\\w*$"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource19ref -{ -ResourceID = "[nxFileLine][V-204447][high][SRG-OS-000366-GPOS-00153]::[RHEL]Baseline"; - ContainsLine = "gpgcheck=1"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/yum.conf"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*gpgcheck\\s*=\\s*1"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource20ref -{ -ResourceID = "[nxFileLine][V-204448][high][SRG-OS-000366-GPOS-00153]::[RHEL]Baseline"; - ContainsLine = "localpkg_gpgcheck=1"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/yum.conf"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*localpkg_gpgcheck\\s*=\\s*1"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource21ref -{ -ResourceID = "[nxFileLine][V-204449.c][medium][SRG-OS-000114-GPOS-00059]::[RHEL]Baseline"; - ContainsLine = "install usb-storage /bin/true"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/modprobe.d/usb-storage.conf"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*install\\s*usb-storage\\s*/bin/true"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource22ref -{ -ResourceID = "[nxFileLine][V-204449.d][medium][SRG-OS-000114-GPOS-00059]::[RHEL]Baseline"; - ContainsLine = "blacklist usb-storage"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/modprobe.d/blacklist.conf"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*blacklist\\s*usb-storage"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource23ref -{ -ResourceID = "[nxFileLine][V-204450.b][medium][SRG-OS-000378-GPOS-00163]::[RHEL]Baseline"; - ContainsLine = "install dccp /bin/true"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/modprobe.d/dccp.conf"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*install\\s*dccp\\s*/bin/true"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource24ref -{ -ResourceID = "[nxFileLine][V-204450.c][medium][SRG-OS-000378-GPOS-00163]::[RHEL]Baseline"; - ContainsLine = "blacklist dccp"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/modprobe.d/blacklist.conf"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*blacklist\\s*dccp"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource25ref -{ -ResourceID = "[nxFileLine][V-204452][low][SRG-OS-000437-GPOS-00194]::[RHEL]Baseline"; - ContainsLine = "clean_requirements_on_remove=1"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/yum.conf"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*clean_requirements_on_remove\\s*=\\s*1"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource26ref -{ -ResourceID = "[nxFileLine][V-204453][medium][SRG-OS-000445-GPOS-00199]::[RHEL]Baseline"; - ContainsLine = "SELINUX=enforcing"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/selinux/config"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "^#\\s*SELINUX.*$|^SELINUX\\s*=\\s*(?!enforcing)\\w*$"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource27ref -{ -ResourceID = "[nxFileLine][V-204454][medium][SRG-OS-000445-GPOS-00199]::[RHEL]Baseline"; - ContainsLine = "SELINUXTYPE=targeted"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/selinux/config"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "^#\\s*SELINUXTYPE.*$|^SELINUXTYPE\\s*=\\s*(?!targeted\\b)\\w*$"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource28ref -{ -ResourceID = "[nxFileLine][V-204457][medium][SRG-OS-000480-GPOS-00228]::[RHEL]Baseline"; - ContainsLine = "UMASK 077"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/login.defs"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "^\\s*UMASK(?!\\s077\\b)\\s*\\d*\\s*$|^#\\s*UMASK.*"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource29ref -{ -ResourceID = "[nxFileLine][V-204466][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; - ContainsLine = "CREATE_HOME yes"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/login.defs"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "^#\\s*CREATE_HOME.*$|^CREATE_HOME\\s*(?!yes\\b)\\w*$|^CREATE_HOME\\t.*"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource30ref -{ -ResourceID = "[nxFileLine][V-204504][medium][SRG-OS-000046-GPOS-00022]::[RHEL]Baseline"; - ContainsLine = "-f 2"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "^#\\s*-f\\s+2|^\\s*-f\\s*1"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileResource as $MSFT_nxFileResource24ref -{ -SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::29::9::nxFile"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - ResourceID = "[nxFile][V-204506.a][medium][SRG-OS-000342-GPOS-00133]::[RHEL]Baseline"; - DestinationPath = "/etc/audisp/plugins.d/au-remote.conf"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource31ref -{ -ResourceID = "[nxFileLine][V-204506.a][medium][SRG-OS-000342-GPOS-00133]::[RHEL]Baseline"; - ContainsLine = "active = yes"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audisp/plugins.d/au-remote.conf"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "\\s*active\\s*=\\s*no|active=yes|#\\s*active\\s*=.*"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource32ref -{ -ResourceID = "[nxFileLine][V-204506.b][medium][SRG-OS-000342-GPOS-00133]::[RHEL]Baseline"; - ContainsLine = "direction = out"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audisp/plugins.d/au-remote.conf"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*direction\\s*=\\s*out"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource33ref -{ -ResourceID = "[nxFileLine][V-204506.c][medium][SRG-OS-000342-GPOS-00133]::[RHEL]Baseline"; - ContainsLine = "path = /sbin/audisp-remote"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audisp/plugins.d/au-remote.conf"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*path\\s*=\\s*/sbin/audisp-remote"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource34ref -{ -ResourceID = "[nxFileLine][V-204506.d][medium][SRG-OS-000342-GPOS-00133]::[RHEL]Baseline"; - ContainsLine = "type = always"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audisp/plugins.d/au-remote.conf"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*type\\s*=\\s*always"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource35ref -{ -ResourceID = "[nxFileLine][V-204507][medium][SRG-OS-000342-GPOS-00133]::[RHEL]Baseline"; - ContainsLine = "overflow_action = syslog"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audisp/audispd.conf"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "^#\\s*overflow_action.*$|^overflow_action\\s*=\\s*(?!syslog$)\\w*$"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource36ref -{ -ResourceID = "[nxFileLine][V-204508][medium][SRG-OS-000342-GPOS-00133]::[RHEL]Baseline"; - ContainsLine = "name_format = hostname"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audisp/audispd.conf"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "^#\\s*name_format.*$|^name_format\\s*=\\s*(?!hostname$)\\w*$"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileResource as $MSFT_nxFileResource25ref -{ -SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::19::9::nxFile"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - ResourceID = "[nxFile][V-204510][medium][SRG-OS-000342-GPOS-00133]::[RHEL]Baseline"; - DestinationPath = "/etc/audisp/audisp-remote.conf"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource37ref -{ -ResourceID = "[nxFileLine][V-204510][medium][SRG-OS-000342-GPOS-00133]::[RHEL]Baseline"; - ContainsLine = "enable_krb5 = yes"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audisp/audisp-remote.conf"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*enable_krb5\\s*=\\s*yes"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource38ref -{ -ResourceID = "[nxFileLine][V-204511][medium][SRG-OS-000342-GPOS-00133]::[RHEL]Baseline"; - ContainsLine = "disk_full_action = single"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audisp/audisp-remote.conf"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "^#\\s*disk_full_action\\s*=.*|^disk_full_action\\s*=\\s*(?!halt\\b|single\\b|syslog\\b)\\w+"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource39ref -{ -ResourceID = "[nxFileLine][V-204512][medium][SRG-OS-000342-GPOS-00133]::[RHEL]Baseline"; - ContainsLine = "network_failure_action = syslog"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audisp/audisp-remote.conf"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "^#\\s*network_failure_action\\s*=.*|^network_failure_action\\s*=\\s*(?!halt\\b|single\\b|syslog\\b)\\w+"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource40ref -{ -ResourceID = "[nxFileLine][V-204514][medium][SRG-OS-000343-GPOS-00134]::[RHEL]Baseline"; - ContainsLine = "space_left_action = email"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/auditd.conf"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "^#\\s*space_left_action.*$|^space_left_action\\s*=\\s*(?!email$)\\w*$"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource41ref -{ -ResourceID = "[nxFileLine][V-204515][medium][SRG-OS-000343-GPOS-00134]::[RHEL]Baseline"; - ContainsLine = "action_mail_acct = root"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/auditd.conf"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "^#\\s*action_mail_acct.*|^action_mail_acct\\s*=\\s*(?!root\\b)\\w+"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource42ref -{ -ResourceID = "[nxFileLine][V-204516.a][medium][SRG-OS-000327-GPOS-00127]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S execve -C uid!=euid -F euid=0 -k setuid"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*execve\\s*-C\\s*uid!\\s*=\\s*euid\\s*-F\\s*euid\\s*=\\s*0\\s*-k\\s*setuid"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource43ref -{ -ResourceID = "[nxFileLine][V-204516.b][medium][SRG-OS-000327-GPOS-00127]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S execve -C uid!=euid -F euid=0 -k setuid"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*execve\\s*-C\\s*uid!\\s*=\\s*euid\\s*-F\\s*euid\\s*=\\s*0\\s*-k\\s*setuid"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource44ref -{ -ResourceID = "[nxFileLine][V-204516.c][medium][SRG-OS-000327-GPOS-00127]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S execve -C gid!=egid -F egid=0 -k setgid"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*execve\\s*-C\\s*gid!\\s*=\\s*egid\\s*-F\\s*egid\\s*=\\s*0\\s*-k\\s*setgid"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource45ref -{ -ResourceID = "[nxFileLine][V-204516.d][medium][SRG-OS-000327-GPOS-00127]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S execve -C gid!=egid -F egid=0 -k setgid"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*execve\\s*-C\\s*gid!\\s*=\\s*egid\\s*-F\\s*egid\\s*=\\s*0\\s*-k\\s*setgid"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource46ref -{ -ResourceID = "[nxFileLine][V-204517.a][medium][SRG-OS-000064-GPOS-00033]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S chown,fchown,fchownat,lchown -F auid>=1000 -F auid!=unset -k perm_mod"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*chown,fchown,fchownat,lchown\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*perm_mod"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource47ref -{ -ResourceID = "[nxFileLine][V-204517.b][medium][SRG-OS-000064-GPOS-00033]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S chown,fchown,fchownat,lchown -F auid>=1000 -F auid!=unset -k perm_mod"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*chown,fchown,fchownat,lchown\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*perm_mod"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource48ref -{ -ResourceID = "[nxFileLine][V-204521.a][medium][SRG-OS-000458-GPOS-00203]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S chmod,fchmod,fchmodat -F auid>=1000 -F auid!=unset -k perm_mod"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*chmod,fchmod,fchmodat\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*perm_mod"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource49ref -{ -ResourceID = "[nxFileLine][V-204521.b][medium][SRG-OS-000458-GPOS-00203]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S chmod,fchmod,fchmodat -F auid>=1000 -F auid!=unset -k perm_mod"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*chmod,fchmod,fchmodat\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*perm_mod"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource50ref -{ -ResourceID = "[nxFileLine][V-204524.a][medium][SRG-OS-000458-GPOS-00203]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S setxattr,fsetxattr,lsetxattr,removexattr,fremovexattr,lremovexattr -F auid>=1000 -F auid!=unset -k perm_mod"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*setxattr,fsetxattr,lsetxattr,removexattr,fremovexattr,lremovexattr\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*perm_mod"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource51ref -{ -ResourceID = "[nxFileLine][V-204524.b][medium][SRG-OS-000458-GPOS-00203]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S setxattr,fsetxattr,lsetxattr,removexattr,fremovexattr,lremovexattr -F auid>=1000 -F auid!=unset -k perm_mod"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*setxattr,fsetxattr,lsetxattr,removexattr,fremovexattr,lremovexattr\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*perm_mod"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource52ref -{ -ResourceID = "[nxFileLine][V-204531.a][medium][SRG-OS-000064-GPOS-00033]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S creat,open,openat,open_by_handle_at,truncate,ftruncate -F exit=-EPERM -F auid>=1000 -F auid!=unset -k access"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*creat,open,openat,open_by_handle_at,truncate,ftruncate\\s*-F\\s*exit\\s*=\\s*-EPERM\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*access"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource53ref -{ -ResourceID = "[nxFileLine][V-204531.b][medium][SRG-OS-000064-GPOS-00033]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S creat,open,openat,open_by_handle_at,truncate,ftruncate -F exit=-EACCES -F auid>=1000 -F auid!=unset -k access"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*creat,open,openat,open_by_handle_at,truncate,ftruncate\\s*-F\\s*exit\\s*=\\s*-EACCES\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*access"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource54ref -{ -ResourceID = "[nxFileLine][V-204531.c][medium][SRG-OS-000064-GPOS-00033]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S creat,open,openat,open_by_handle_at,truncate,ftruncate -F exit=-EPERM -F auid>=1000 -F auid!=unset -k access"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*creat,open,openat,open_by_handle_at,truncate,ftruncate\\s*-F\\s*exit\\s*=\\s*-EPERM\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*access"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource55ref -{ -ResourceID = "[nxFileLine][V-204531.d][medium][SRG-OS-000064-GPOS-00033]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S creat,open,openat,open_by_handle_at,truncate,ftruncate -F exit=-EACCES -F auid>=1000 -F auid!=unset -k access"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*creat,open,openat,open_by_handle_at,truncate,ftruncate\\s*-F\\s*exit\\s*=\\s*-EACCES\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*access"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource56ref -{ -ResourceID = "[nxFileLine][V-204536][medium][SRG-OS-000392-GPOS-00172]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F path=/usr/sbin/semanage -F auid>=1000 -F auid!=unset -k privileged-priv_change"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/sbin/semanage\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-priv_change"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource57ref -{ -ResourceID = "[nxFileLine][V-204537][medium][SRG-OS-000392-GPOS-00172]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F path=/usr/sbin/setsebool -F auid>=1000 -F auid!=unset -k privileged-priv_change"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/sbin/setsebool\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-priv_change"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource58ref -{ -ResourceID = "[nxFileLine][V-204538][medium][SRG-OS-000392-GPOS-00172]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F path=/usr/bin/chcon -F auid>=1000 -F auid!=unset -k privileged-priv_change"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/bin/chcon\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-priv_change"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource59ref -{ -ResourceID = "[nxFileLine][V-204539][medium][SRG-OS-000392-GPOS-00172]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F path=/usr/sbin/setfiles -F auid>=1000 -F auid!=unset -k privileged-priv_change"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/sbin/setfiles\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-priv_change"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource60ref -{ -ResourceID = "[nxFileLine][V-204540][medium][SRG-OS-000392-GPOS-00172]::[RHEL]Baseline"; - ContainsLine = "-w /var/run/faillock -p wa -k logins"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-w\\s*/var/run/faillock\\s*-p\\s*wa\\s*-k\\s*logins"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource61ref -{ -ResourceID = "[nxFileLine][V-204541][medium][SRG-OS-000392-GPOS-00172]::[RHEL]Baseline"; - ContainsLine = "-w /var/log/lastlog -p wa -k logins"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-w\\s*/var/log/lastlog\\s*-p\\s*wa\\s*-k\\s*logins"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource62ref -{ -ResourceID = "[nxFileLine][V-204542][medium][SRG-OS-000042-GPOS-00020]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F path=/usr/bin/passwd -F auid>=1000 -F auid!=unset -k privileged-passwd"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/bin/passwd\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-passwd"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource63ref -{ -ResourceID = "[nxFileLine][V-204543][medium][SRG-OS-000042-GPOS-00020]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F path=/usr/sbin/unix_chkpwd -F auid>=1000 -F auid!=unset -k privileged-passwd"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/sbin/unix_chkpwd\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-passwd"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource64ref -{ -ResourceID = "[nxFileLine][V-204544][medium][SRG-OS-000042-GPOS-00020]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F path=/usr/bin/gpasswd -F auid>=1000 -F auid!=unset -k privileged-passwd"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/bin/gpasswd\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-passwd"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource65ref -{ -ResourceID = "[nxFileLine][V-204545][medium][SRG-OS-000042-GPOS-00020]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F path=/usr/bin/chage -F auid>=1000 -F auid!=unset -k privileged-passwd"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/bin/chage\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-passwd"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource66ref -{ -ResourceID = "[nxFileLine][V-204546][medium][SRG-OS-000042-GPOS-00020]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F path=/usr/sbin/userhelper -F auid>=1000 -F auid!=unset -k privileged-passwd"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/sbin/userhelper\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-passwd"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource67ref -{ -ResourceID = "[nxFileLine][V-204547][medium][SRG-OS-000037-GPOS-00015]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F path=/usr/bin/su -F auid>=1000 -F auid!=unset -k privileged-priv_change"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/bin/su\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-priv_change"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource68ref -{ -ResourceID = "[nxFileLine][V-204548][medium][SRG-OS-000037-GPOS-00015]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F path=/usr/bin/sudo -F auid>=1000 -F auid!=unset -k privileged-priv_change"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/bin/sudo\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-priv_change"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource69ref -{ -ResourceID = "[nxFileLine][V-204549.a][medium][SRG-OS-000037-GPOS-00015]::[RHEL]Baseline"; - ContainsLine = "-w /etc/sudoers -p wa -k privileged-actions"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-w /etc/sudoers -p wa -k privileged-actions"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource70ref -{ -ResourceID = "[nxFileLine][V-204549.b][medium][SRG-OS-000037-GPOS-00015]::[RHEL]Baseline"; - ContainsLine = "-w /etc/sudoers.d/ -p wa -k privileged-actions"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-w /etc/sudoers.d/ -p wa -k privileged-actions"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource71ref -{ -ResourceID = "[nxFileLine][V-204550][medium][SRG-OS-000037-GPOS-00015]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F path=/usr/bin/newgrp -F auid>=1000 -F auid!=unset -k privileged-priv_change"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/bin/newgrp\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-priv_change"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource72ref -{ -ResourceID = "[nxFileLine][V-204551][medium][SRG-OS-000037-GPOS-00015]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F path=/usr/bin/chsh -F auid>=1000 -F auid!=unset -k privileged-priv_change"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/bin/chsh\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-priv_change"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource73ref -{ -ResourceID = "[nxFileLine][V-204552.a][medium][SRG-OS-000042-GPOS-00020]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S mount -F auid>=1000 -F auid!=unset -k privileged-mount"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*mount\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-mount"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource74ref -{ -ResourceID = "[nxFileLine][V-204552.b][medium][SRG-OS-000042-GPOS-00020]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S mount -F auid>=1000 -F auid!=unset -k privileged-mount"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*mount\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-mount"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource75ref -{ -ResourceID = "[nxFileLine][V-204552.c][medium][SRG-OS-000042-GPOS-00020]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F path=/usr/bin/mount -F auid>=1000 -F auid!=unset -k privileged-mount"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/bin/mount\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-mount"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource76ref -{ -ResourceID = "[nxFileLine][V-204553][medium][SRG-OS-000042-GPOS-00020]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F path=/usr/bin/umount -F auid>=1000 -F auid!=unset -k privileged-mount"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/bin/umount\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-mount"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource77ref -{ -ResourceID = "[nxFileLine][V-204554][medium][SRG-OS-000042-GPOS-00020]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F path=/usr/sbin/postdrop -F auid>=1000 -F auid!=unset -k privileged-postfix"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/sbin/postdrop\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-postfix"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource78ref -{ -ResourceID = "[nxFileLine][V-204555][medium][SRG-OS-000042-GPOS-00020]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F path=/usr/sbin/postqueue -F auid>=1000 -F auid!=unset -k privileged-postfix"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/sbin/postqueue\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-postfix"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource79ref -{ -ResourceID = "[nxFileLine][V-204556][medium][SRG-OS-000042-GPOS-00020]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F path=/usr/libexec/openssh/ssh-keysign -F auid>=1000 -F auid!=unset -k privileged-ssh"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/libexec/openssh/ssh-keysign\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-ssh"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource80ref -{ -ResourceID = "[nxFileLine][V-204557][medium][SRG-OS-000042-GPOS-00020]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F path=/usr/bin/crontab -F auid>=1000 -F auid!=unset -k privileged-cron"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/bin/crontab\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-cron"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource81ref -{ -ResourceID = "[nxFileLine][V-204558][medium][SRG-OS-000471-GPOS-00215]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F path=/usr/sbin/pam_timestamp_check -F auid>=1000 -F auid!=unset -k privileged-pam"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/sbin/pam_timestamp_check\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-pam"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource82ref -{ -ResourceID = "[nxFileLine][V-204559.a][medium][SRG-OS-000471-GPOS-00216]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S create_module -k module-change"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*create_module\\s*-k\\s*module-change"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource83ref -{ -ResourceID = "[nxFileLine][V-204559.b][medium][SRG-OS-000471-GPOS-00216]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S create_module -k module-change"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*create_module\\s*-k\\s*module-change"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource84ref -{ -ResourceID = "[nxFileLine][V-204560.a][medium][SRG-OS-000471-GPOS-00216]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S init_module,finit_module -k modulechange"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*init_module,finit_module\\s*-k\\s*modulechange"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource85ref -{ -ResourceID = "[nxFileLine][V-204560.b][medium][SRG-OS-000471-GPOS-00216]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S init_module,finit_module -k modulechange"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*init_module,finit_module\\s*-k\\s*modulechange"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource86ref -{ -ResourceID = "[nxFileLine][V-204562.a][medium][SRG-OS-000471-GPOS-00216]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S delete_module -k module-change"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*delete_module\\s*-k\\s*module-change"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource87ref -{ -ResourceID = "[nxFileLine][V-204562.b][medium][SRG-OS-000471-GPOS-00216]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S delete_module -k module-change"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*delete_module\\s*-k\\s*module-change"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource88ref -{ -ResourceID = "[nxFileLine][V-204563][medium][SRG-OS-000471-GPOS-00216]::[RHEL]Baseline"; - ContainsLine = "-w /usr/bin/kmod -p x -F auid!=unset -k module-change"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-w\\s*/usr/bin/kmod\\s*-p\\s*x\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*module-change"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource89ref -{ -ResourceID = "[nxFileLine][V-204564][medium][SRG-OS-000004-GPOS-00004]::[RHEL]Baseline"; - ContainsLine = "-w /etc/passwd -p wa -k identity"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-w\\s*/etc/passwd\\s*-p\\s*wa\\s*-k\\s*identity"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource90ref -{ -ResourceID = "[nxFileLine][V-204565][medium][SRG-OS-000004-GPOS-00004]::[RHEL]Baseline"; - ContainsLine = "-w /etc/group -p wa -k identity"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-w\\s*/etc/group\\s*-p\\s*wa\\s*-k\\s*identity"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource91ref -{ -ResourceID = "[nxFileLine][V-204566][medium][SRG-OS-000004-GPOS-00004]::[RHEL]Baseline"; - ContainsLine = "-w /etc/gshadow -p wa -k identity"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-w\\s*/etc/gshadow\\s*-p\\s*wa\\s*-k\\s*identity"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource92ref -{ -ResourceID = "[nxFileLine][V-204567][medium][SRG-OS-000004-GPOS-00004]::[RHEL]Baseline"; - ContainsLine = "-w /etc/shadow -p wa -k identity"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-w\\s*/etc/shadow\\s*-p\\s*wa\\s*-k\\s*identity"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource93ref -{ -ResourceID = "[nxFileLine][V-204568][medium][SRG-OS-000004-GPOS-00004]::[RHEL]Baseline"; - ContainsLine = "-w /etc/security/opasswd -p wa -k identity"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-w\\s*/etc/security/opasswd\\s*-p\\s*wa\\s*-k\\s*identity"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource94ref -{ -ResourceID = "[nxFileLine][V-204572.a][medium][SRG-OS-000466-GPOS-00210]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S unlink,unlinkat,rename,renameat,rmdir -F auid>=1000 -F auid!=unset -k delete"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*unlink,unlinkat,rename,renameat,rmdir\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*delete"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource95ref -{ -ResourceID = "[nxFileLine][V-204572.b][medium][SRG-OS-000466-GPOS-00210]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S unlink,unlinkat,rename,renameat,rmdir -F auid>=1000 -F auid!=unset -k delete"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*unlink,unlinkat,rename,renameat,rmdir\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*delete"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource96ref -{ -ResourceID = "[nxFileLine][V-204578][medium][SRG-OS-000033-GPOS-00014]::[RHEL]Baseline"; - ContainsLine = "Ciphers aes256-ctr,aes192-ctr,aes128-ctr"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/ssh/sshd_config"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "^#\\s*Ciphers.*|^\\s*Ciphers\\s*aes128-ctr.*|^\\s*Ciphers\\s*aes192-ctr.*"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource97ref -{ -ResourceID = "[nxFileLine][V-204579.b][medium][SRG-OS-000163-GPOS-00072]::[RHEL]Baseline"; - ContainsLine = "declare -xr TMOUT=900"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/profile.d/tmout.sh"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "^\\s*TMOUT\\s*=\\s*[0-8]?[0-9]?[0-9]?$|^#\\s*TMOUT.*"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource98ref -{ -ResourceID = "[nxFileLine][V-204580][medium][SRG-OS-000023-GPOS-00006]::[RHEL]Baseline"; - ContainsLine = "banner /etc/issue"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/ssh/sshd_config"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*banner\\s*/etc/issue"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource99ref -{ -ResourceID = "[nxFileLine][V-204587][medium][SRG-OS-000163-GPOS-00072]::[RHEL]Baseline"; - ContainsLine = "ClientAliveInterval 600"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/ssh/sshd_config"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "^\\s*ClientAliveInterval\\s*[0-5]?[0-9]?[0-9]?\\s*$|^#\\s*ClientAliveInterval.*|^\\s*ClientAliveInterval\\s*$"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource100ref -{ -ResourceID = "[nxFileLine][V-204588][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; - ContainsLine = "RhostsRSAAuthentication no"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/ssh/sshd_config"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "^#\\s*RhostsRSAAuthentication.*$|^RhostsRSAAuthentication\\s*(?!no\\b)\\w*$"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource101ref -{ -ResourceID = "[nxFileLine][V-204589][medium][SRG-OS-000163-GPOS-00072]::[RHEL]Baseline"; - ContainsLine = "ClientAliveCountMax 0"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/ssh/sshd_config"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "^#\\s*ClientAliveCountMax.*$|^ClientAliveCountMax\\s*(?!0\\b)\\w*$"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource102ref -{ -ResourceID = "[nxFileLine][V-204590][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; - ContainsLine = "IgnoreRhosts yes"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/ssh/sshd_config"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "^#\\s*IgnoreRhosts.*$|^IgnoreRhosts\\s*(?!yes\\b)\\w*$"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource103ref -{ -ResourceID = "[nxFileLine][V-204591][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; - ContainsLine = "PrintLastLog yes"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/ssh/sshd_config"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "^#\\s*PrintLastLog.*$|^PrintLastLog\\s*(?!yes\\b)\\w*$"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource104ref -{ -ResourceID = "[nxFileLine][V-204592][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; - ContainsLine = "PermitRootLogin no"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/ssh/sshd_config"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "^#\\s*PermitRootLogin.*$|^PermitRootLogin\\s*(?!no\\b)\\w*$"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource105ref -{ -ResourceID = "[nxFileLine][V-204593][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; - ContainsLine = "IgnoreUserKnownHosts yes"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/ssh/sshd_config"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "^#\\s*IgnoreUserKnownHosts.*$|^IgnoreUserKnownHosts\\s*(?!yes\\b)\\w*$"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource106ref -{ -ResourceID = "[nxFileLine][V-204594][high][SRG-OS-000074-GPOS-00042]::[RHEL]Baseline"; - ContainsLine = "Protocol 2"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/ssh/sshd_config"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "^#\\s*Protocol.*$|^Protocol\\s*(?!2\\b)\\w*$"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource107ref -{ -ResourceID = "[nxFileLine][V-204595][medium][SRG-OS-000250-GPOS-00093]::[RHEL]Baseline"; - ContainsLine = "MACs hmac-sha2-512,hmac-sha2-256"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/ssh/sshd_config"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*MACs.*|\\s*MACs\\s*hmac-(?!sha2-512).*"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource108ref -{ -ResourceID = "[nxFileLine][V-204598][medium][SRG-OS-000364-GPOS-00151]::[RHEL]Baseline"; - ContainsLine = "GSSAPIAuthentication no"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/ssh/sshd_config"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "^#\\s*GSSAPIAuthentication.*$|^GSSAPIAuthentication\\s*(?!no\\b)\\w*$"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource109ref -{ -ResourceID = "[nxFileLine][V-204599][medium][SRG-OS-000364-GPOS-00151]::[RHEL]Baseline"; - ContainsLine = "KerberosAuthentication no"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/ssh/sshd_config"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "^#\\s*KerberosAuthentication.*$|^KerberosAuthentication\\s*(?!no\\b)\\w*$"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource110ref -{ -ResourceID = "[nxFileLine][V-204600][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; - ContainsLine = "StrictModes yes"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/ssh/sshd_config"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "^#\\s*StrictModes.*$|^StrictModes\\s*(?!yes\\b)\\w*$"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource111ref -{ -ResourceID = "[nxFileLine][V-204601][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; - ContainsLine = "UsePrivilegeSeparation sandbox"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/ssh/sshd_config"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "^#\\s*UsePrivilegeSeparation.*$|^UsePrivilegeSeparation\\s*(?!sandbox\\b)\\w*$"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource112ref -{ -ResourceID = "[nxFileLine][V-204602][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; - ContainsLine = "Compression delayed"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/ssh/sshd_config"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "^#\\s*Compression.*$|^Compression\\s*(?!delayed\\b)\\w*$"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource113ref -{ -ResourceID = "[nxFileLine][V-204622][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; - ContainsLine = "X11Forwarding no"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/ssh/sshd_config"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "^#\\s*X11Forwarding.*$|^X11Forwarding\\s*(?!no\\b)\\w*$"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource114ref -{ -ResourceID = "[nxFileLine][V-233307][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; - ContainsLine = "X11UseLocalhost yes"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/ssh/sshd_config"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*X11UseLocalhost\\s*yes"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxServiceResource as $MSFT_nxServiceResource1ref -{ -ResourceID = "[nxService][V-204451][medium][SRG-OS-000114-GPOS-00059]::[RHEL]Baseline"; - Controller = "systemd"; - Enabled = False; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxService.ps1::13::9::nxService"; - Name = "autofs"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxServiceResource as $MSFT_nxServiceResource2ref -{ -ResourceID = "[nxService][V-204492][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; - Controller = "systemd"; - Enabled = False; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxService.ps1::13::9::nxService"; - Name = "kdump"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxServiceResource as $MSFT_nxServiceResource3ref -{ -ResourceID = "[nxService][V-204503][medium][SRG-OS-000038-GPOS-00016]::[RHEL]Baseline"; - Controller = "systemd"; - State = "Running"; - Enabled = True; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxService.ps1::22::9::nxService"; - Name = "auditd"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxServiceResource as $MSFT_nxServiceResource4ref -{ -ResourceID = "[nxService][V-204586][medium][SRG-OS-000423-GPOS-00187]::[RHEL]Baseline"; - Controller = "systemd"; - State = "Running"; - Enabled = True; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxService.ps1::22::9::nxService"; - Name = "sshd"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxServiceResource as $MSFT_nxServiceResource5ref -{ -ResourceID = "[nxService][V-204604.b][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; - Controller = "systemd"; - State = "Running"; - Enabled = True; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxService.ps1::22::9::nxService"; - Name = "firewalld"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxScriptResource as $MSFT_nxScriptResource1ref -{ -ResourceID = "[nxScript][V-204399.b][medium][[Skip] SRG-OS-000029-GPOS-00010]::[RHEL]Baseline"; - GetScript = "#!/bin/bash\necho [V-204399.b][medium][[Skip] SRG-OS-000029-GPOS-00010]"; - TestScript = "#!/bin/bash\nexit 0"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxScript.skip.ps1::10::5::nxScript"; - SetScript = "#!/bin/bash"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxScriptResource as $MSFT_nxScriptResource2ref -{ -ResourceID = "[nxScript][V-204400][medium][[Skip] SRG-OS-000029-GPOS-00010]::[RHEL]Baseline"; - GetScript = "#!/bin/bash\necho [V-204400][medium][[Skip] SRG-OS-000029-GPOS-00010]"; - TestScript = "#!/bin/bash\nexit 0"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxScript.skip.ps1::10::5::nxScript"; - SetScript = "#!/bin/bash"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxScriptResource as $MSFT_nxScriptResource3ref -{ -ResourceID = "[nxScript][V-204403][medium][[Skip] SRG-OS-000029-GPOS-00010]::[RHEL]Baseline"; - GetScript = "#!/bin/bash\necho [V-204403][medium][[Skip] SRG-OS-000029-GPOS-00010]"; - TestScript = "#!/bin/bash\nexit 0"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxScript.skip.ps1::10::5::nxScript"; - SetScript = "#!/bin/bash"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxScriptResource as $MSFT_nxScriptResource4ref -{ -ResourceID = "[nxScript][V-204509][medium][[Skip] SRG-OS-000342-GPOS-00133]::[RHEL]Baseline"; - GetScript = "#!/bin/bash\necho [V-204509][medium][[Skip] SRG-OS-000342-GPOS-00133]"; - TestScript = "#!/bin/bash\nexit 0"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxScript.skip.ps1::10::5::nxScript"; - SetScript = "#!/bin/bash"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxScriptResource as $MSFT_nxScriptResource5ref -{ -ResourceID = "[nxScript][V-204513][medium][[Skip] SRG-OS-000343-GPOS-00134]::[RHEL]Baseline"; - GetScript = "#!/bin/bash\necho [V-204513][medium][[Skip] SRG-OS-000343-GPOS-00134]"; - TestScript = "#!/bin/bash\nexit 0"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxScript.skip.ps1::10::5::nxScript"; - SetScript = "#!/bin/bash"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxScriptResource as $MSFT_nxScriptResource6ref -{ -ResourceID = "[nxScript][V-204623][medium][[Skip] SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; - GetScript = "#!/bin/bash\necho [V-204623][medium][[Skip] SRG-OS-000480-GPOS-00227]"; - TestScript = "#!/bin/bash\nexit 0"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxScript.skip.ps1::10::5::nxScript"; - SetScript = "#!/bin/bash"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxScriptResource as $MSFT_nxScriptResource7ref -{ -ResourceID = "[nxScript][V-244557][medium][[Skip] SRG-OS-000080-GPOS-00048]::[RHEL]Baseline"; - GetScript = "#!/bin/bash\necho [V-244557][medium][[Skip] SRG-OS-000080-GPOS-00048]"; - TestScript = "#!/bin/bash\nexit 0"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxScript.skip.ps1::10::5::nxScript"; - SetScript = "#!/bin/bash"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxScriptResource as $MSFT_nxScriptResource8ref -{ -ResourceID = "[nxScript][V-244558][medium][[Skip] SRG-OS-000080-GPOS-00048]::[RHEL]Baseline"; - GetScript = "#!/bin/bash\necho [V-244558][medium][[Skip] SRG-OS-000080-GPOS-00048]"; - TestScript = "#!/bin/bash\nexit 0"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxScript.skip.ps1::10::5::nxScript"; - SetScript = "#!/bin/bash"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxScriptResource as $MSFT_nxScriptResource9ref -{ -ResourceID = "[nxScript][V-204399.a][medium][[Skip] SRG-OS-000029-GPOS-00010]::[RHEL]Baseline"; - GetScript = "#!/bin/bash\necho [V-204399.a][medium][[Skip] SRG-OS-000029-GPOS-00010]"; - TestScript = "#!/bin/bash\nexit 0"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxScript.skip.ps1::10::5::nxScript"; - SetScript = "#!/bin/bash"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of OMI_ConfigurationDocument - - - { - Version="2.0.0"; - - - MinimumCompatibleVersion = "1.0.0"; - - - CompatibleVersionAdditionalProperties= {"Omi_BaseResource:ConfigurationName"}; - - - Author="Microsoft"; - - - GenerationDate="06/30/2022 11:38:45"; - - - GenerationHost="Microsoft"; - - - Name="LinuxBaseLine"; - - - }; +/* +@TargetNode='RHEL78' +@GeneratedBy=Microsoft +@GenerationDate=03/09/2023 14:17:33 +@GenerationHost=Microsoft +*/ + +instance of MSFT_nxPackageResource as $MSFT_nxPackageResource1ref +{ +ResourceID = "[nxPackage][V-204442][high][SRG-OS-000095-GPOS-00049]::[RHEL]Baseline"; + Ensure = "Absent"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxPackage.ps1::8::5::nxPackage"; + Name = "rsh-server"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxPackageResource as $MSFT_nxPackageResource2ref +{ +ResourceID = "[nxPackage][V-204443][high][SRG-OS-000095-GPOS-00049]::[RHEL]Baseline"; + Ensure = "Absent"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxPackage.ps1::8::5::nxPackage"; + Name = "ypserv"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxPackageResource as $MSFT_nxPackageResource3ref +{ +ResourceID = "[nxPackage][V-204497][high][SRG-OS-000033-GPOS-00014]::[RHEL]Baseline"; + Ensure = "Present"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxPackage.ps1::8::5::nxPackage"; + Name = "dracut-fips"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxPackageResource as $MSFT_nxPackageResource4ref +{ +ResourceID = "[nxPackage][V-204498][low][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; + Ensure = "Present"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxPackage.ps1::8::5::nxPackage"; + Name = "aide"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxPackageResource as $MSFT_nxPackageResource5ref +{ +ResourceID = "[nxPackage][V-204502][high][SRG-OS-000095-GPOS-00049]::[RHEL]Baseline"; + Ensure = "Absent"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxPackage.ps1::8::5::nxPackage"; + Name = "telnet-server"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxPackageResource as $MSFT_nxPackageResource6ref +{ +ResourceID = "[nxPackage][V-204585][medium][SRG-OS-000423-GPOS-00187]::[RHEL]Baseline"; + Ensure = "Present"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxPackage.ps1::8::5::nxPackage"; + Name = "openssh-server"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxPackageResource as $MSFT_nxPackageResource7ref +{ +ResourceID = "[nxPackage][V-204604.a][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; + Ensure = "Present"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxPackage.ps1::8::5::nxPackage"; + Name = "firewalld"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxPackageResource as $MSFT_nxPackageResource8ref +{ +ResourceID = "[nxPackage][V-204620][high][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; + Ensure = "Absent"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxPackage.ps1::8::5::nxPackage"; + Name = "vsftpd"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxPackageResource as $MSFT_nxPackageResource9ref +{ +ResourceID = "[nxPackage][V-204621][high][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; + Ensure = "Absent"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxPackage.ps1::8::5::nxPackage"; + Name = "tftp-server"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxPackageResource as $MSFT_nxPackageResource10ref +{ +ResourceID = "[nxPackage][V-204631][medium][SRG-OS-000375-GPOS-00160]::[RHEL]Baseline"; + Ensure = "Present"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxPackage.ps1::8::5::nxPackage"; + Name = "pam_pkcs11"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileResource as $MSFT_nxFileResource1ref +{ +ResourceID = "[nxFile][V-204395][medium][SRG-OS-000023-GPOS-00006]::[RHEL]Baseline"; + Contents = "You are accessing a U.S. Government (USG) Information System (IS) that is provided for USG-authorized use only.\n\nBy using this IS (which includes any device attached to this IS), you consent to the following conditions:\n\n-The USG routinely intercepts and monitors communications on this IS for purposes including, but not limited to, penetration testing, COMSEC monitoring, network operations and defense, personnel misconduct (PM), law enforcement (LE), and counterintelligence (CI) investigations.\n\n-At any time, the USG may inspect and seize data stored on this IS.\n\n-Communications using, or data stored on, this IS are not private, are subject to routine monitoring, interception, and search, and may be disclosed or used for any USG-authorized purpose.\n\n-This IS includes security measures (e.g., authentication and access controls) to protect USG interests--not for your personal benefit or privacy.\n\n-Notwithstanding the above, using this IS does not constitute consent to PM, LE or CI investigative searching or monitoring of the content of privileged communications, or work product, related to personal representation or services by attorneys, psychotherapists, or clergy, and their assistants. Such communications and work product are private and confidential. See User Agreement for details."; + DestinationPath = "/etc/issue"; + ModuleName = "nx"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; + ModuleVersion = "1.0"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileResource as $MSFT_nxFileResource2ref +{ +ResourceID = "[nxFile][V-204449.a][medium][SRG-OS-000114-GPOS-00059]::[RHEL]Baseline"; + Contents = ""; + DestinationPath = "/etc/modprobe.d/usb-storage.conf"; + ModuleName = "nx"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; + ModuleVersion = "1.0"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileResource as $MSFT_nxFileResource3ref +{ +ResourceID = "[nxFile][V-204449.b][medium][SRG-OS-000114-GPOS-00059]::[RHEL]Baseline"; + Contents = ""; + DestinationPath = "/etc/modprobe.d/blacklist.conf"; + ModuleName = "nx"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; + ModuleVersion = "1.0"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileResource as $MSFT_nxFileResource4ref +{ +ResourceID = "[nxFile][V-204450.a][medium][SRG-OS-000378-GPOS-00163]::[RHEL]Baseline"; + Contents = ""; + DestinationPath = "/etc/modprobe.d/dccp.conf"; + ModuleName = "nx"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; + ModuleVersion = "1.0"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileResource as $MSFT_nxFileResource5ref +{ +ResourceID = "[nxFile][V-204576][low][SRG-OS-000027-GPOS-00008]::[RHEL]Baseline"; + Contents = "* hard maxlogins 10"; + DestinationPath = "/etc/security/limits.d/204576-powerstig.conf"; + ModuleName = "nx"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; + ModuleVersion = "1.0"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileResource as $MSFT_nxFileResource6ref +{ +ResourceID = "[nxFile][V-204579.a][medium][SRG-OS-000163-GPOS-00072]::[RHEL]Baseline"; + Contents = ""; + DestinationPath = "/etc/profile.d/tmout.sh"; + ModuleName = "nx"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; + ModuleVersion = "1.0"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileResource as $MSFT_nxFileResource7ref +{ +ResourceID = "[nxFile][V-204584][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; + Contents = "kernel.randomize_va_space = 2"; + DestinationPath = "/etc/sysctl.d/204584-powerstig.conf"; + ModuleName = "nx"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; + ModuleVersion = "1.0"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileResource as $MSFT_nxFileResource8ref +{ +ResourceID = "[nxFile][V-204609][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; + Contents = "net.ipv4.conf.all.accept_source_route = 0"; + DestinationPath = "/etc/sysctl.d/204609-powerstig.conf"; + ModuleName = "nx"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; + ModuleVersion = "1.0"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileResource as $MSFT_nxFileResource9ref +{ +ResourceID = "[nxFile][V-204610][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; + Contents = "net.ipv4.conf.all.rp_filter = 1"; + DestinationPath = "/etc/sysctl.d/204610-powerstig.conf"; + ModuleName = "nx"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; + ModuleVersion = "1.0"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileResource as $MSFT_nxFileResource10ref +{ +ResourceID = "[nxFile][V-204611][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; + Contents = "net.ipv4.conf.default.rp_filter = 1"; + DestinationPath = "/etc/sysctl.d/204611-powerstig.conf"; + ModuleName = "nx"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; + ModuleVersion = "1.0"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileResource as $MSFT_nxFileResource11ref +{ +ResourceID = "[nxFile][V-204612][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; + Contents = "net.ipv4.conf.default.accept_source_route = 0"; + DestinationPath = "/etc/sysctl.d/204612-powerstig.conf"; + ModuleName = "nx"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; + ModuleVersion = "1.0"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileResource as $MSFT_nxFileResource12ref +{ +ResourceID = "[nxFile][V-204613][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; + Contents = "net.ipv4.icmp_echo_ignore_broadcasts = 1"; + DestinationPath = "/etc/sysctl.d/204613-powerstig.conf"; + ModuleName = "nx"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; + ModuleVersion = "1.0"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileResource as $MSFT_nxFileResource13ref +{ +ResourceID = "[nxFile][V-204614][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; + Contents = "net.ipv4.conf.default.accept_redirects = 0"; + DestinationPath = "/etc/sysctl.d/204614-powerstig.conf"; + ModuleName = "nx"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; + ModuleVersion = "1.0"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileResource as $MSFT_nxFileResource14ref +{ +ResourceID = "[nxFile][V-204615][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; + Contents = "net.ipv4.conf.all.accept_redirects = 0"; + DestinationPath = "/etc/sysctl.d/204615-powerstig.conf"; + ModuleName = "nx"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; + ModuleVersion = "1.0"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileResource as $MSFT_nxFileResource15ref +{ +ResourceID = "[nxFile][V-204616][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; + Contents = "net.ipv4.conf.default.send_redirects = 0"; + DestinationPath = "/etc/sysctl.d/204616-powerstig.conf"; + ModuleName = "nx"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; + ModuleVersion = "1.0"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileResource as $MSFT_nxFileResource16ref +{ +ResourceID = "[nxFile][V-204617][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; + Contents = "net.ipv4.conf.all.send_redirects = 0"; + DestinationPath = "/etc/sysctl.d/204617-powerstig.conf"; + ModuleName = "nx"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; + ModuleVersion = "1.0"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileResource as $MSFT_nxFileResource17ref +{ +ResourceID = "[nxFile][V-204625][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; + Contents = "net.ipv4.ip_forward = 0"; + DestinationPath = "/etc/sysctl.d/204625-powerstig.conf"; + ModuleName = "nx"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; + ModuleVersion = "1.0"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileResource as $MSFT_nxFileResource18ref +{ +ResourceID = "[nxFile][V-204630][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; + Contents = "net.ipv6.conf.all.accept_source_route = 0"; + DestinationPath = "/etc/sysctl.d/204630-powerstig.conf"; + ModuleName = "nx"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; + ModuleVersion = "1.0"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileResource as $MSFT_nxFileResource19ref +{ +ResourceID = "[nxFile][V-237634.a][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; + Contents = "Defaults !targetpw"; + DestinationPath = "/etc/sudoers.d/237634a-powerstig.conf"; + ModuleName = "nx"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; + ModuleVersion = "1.0"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileResource as $MSFT_nxFileResource20ref +{ +ResourceID = "[nxFile][V-237634.b][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; + Contents = "Defaults !rootpw"; + DestinationPath = "/etc/sudoers.d/237634b-powerstig.conf"; + ModuleName = "nx"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; + ModuleVersion = "1.0"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileResource as $MSFT_nxFileResource21ref +{ +ResourceID = "[nxFile][V-237634.c][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; + Contents = "Defaults !runaspw"; + DestinationPath = "/etc/sudoers.d/237634c-powerstig.conf"; + ModuleName = "nx"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; + ModuleVersion = "1.0"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileResource as $MSFT_nxFileResource22ref +{ +ResourceID = "[nxFile][V-237635][medium][SRG-OS-000373-GPOS-00156]::[RHEL]Baseline"; + Contents = "Defaults timestamp_timeout=0"; + DestinationPath = "/etc/sudoers.d/237635-powerstig.conf"; + ModuleName = "nx"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; + ModuleVersion = "1.0"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileResource as $MSFT_nxFileResource23ref +{ +ResourceID = "[nxFile][V-250314][medium][SRG-OS-000324-GPOS-00125]::[RHEL]Baseline"; + Contents = "%wheel ALL=(ALL) TYPE=sysadm_t ROLE=sysadm_r ALL"; + DestinationPath = "/etc/sudoers.d/250314-powerstig.conf"; + ModuleName = "nx"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; + ModuleVersion = "1.0"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource1ref +{ +ResourceID = "[nxFileLine][V-204405][medium][SRG-OS-000069-GPOS-00037]::[RHEL]Baseline"; + ContainsLine = "password substack system-auth"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/pam.d/passwd"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "^\\s*password(?:\\t*|\\s*)substack\\tsystem-auth\\s*$|^#\\s*password\\s*substack\\s*system-auth.*"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource2ref +{ +ResourceID = "[nxFileLine][V-204407][medium][SRG-OS-000069-GPOS-00037]::[RHEL]Baseline"; + ContainsLine = "ucredit = -1"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/security/pwquality.conf"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "^#\\s*ucredit.*$|^ucredit\\s*=\\s*(?!-1\\b)\\w*$"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource3ref +{ +ResourceID = "[nxFileLine][V-204408][medium][SRG-OS-000070-GPOS-00038]::[RHEL]Baseline"; + ContainsLine = "lcredit = -1"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/security/pwquality.conf"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "^#\\s*lcredit.*$|^lcredit\\s*=\\s*(?!-1\\b)\\w*$"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource4ref +{ +ResourceID = "[nxFileLine][V-204409][medium][SRG-OS-000071-GPOS-00039]::[RHEL]Baseline"; + ContainsLine = "dcredit = -1"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/security/pwquality.conf"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "^#\\s*dcredit.*$|^dcredit\\s*=\\s*(?!-1\\b)\\w*$"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource5ref +{ +ResourceID = "[nxFileLine][V-204410][medium][SRG-OS-000266-GPOS-00101]::[RHEL]Baseline"; + ContainsLine = "ocredit=-1"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/security/pwquality.conf"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "^#\\s*ocredit.*$|^ocredit\\s*=\\s*(?!-1)\\w*$"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource6ref +{ +ResourceID = "[nxFileLine][V-204411][medium][SRG-OS-000072-GPOS-00040]::[RHEL]Baseline"; + ContainsLine = "difok = 8"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/security/pwquality.conf"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*difok\\s*=.*|^\\s*difok\\s*=\\s*(-|)[0-7]$"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource7ref +{ +ResourceID = "[nxFileLine][V-204412][medium][SRG-OS-000072-GPOS-00040]::[RHEL]Baseline"; + ContainsLine = "minclass = 4"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/security/pwquality.conf"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "^#\\s*minclass\\s*=.*|^\\s*minclass\\s*=\\s*(?!\\d{2,})[1-3]"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource8ref +{ +ResourceID = "[nxFileLine][V-204413][medium][SRG-OS-000072-GPOS-00040]::[RHEL]Baseline"; + ContainsLine = "maxrepeat = 3"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/security/pwquality.conf"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "^#\\s*maxrepeat\\s*=.*|^\\s*maxrepeat\\s*=\\s*(?:\\d{2,}|[4-9])"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource9ref +{ +ResourceID = "[nxFileLine][V-204414][medium][SRG-OS-000072-GPOS-00040]::[RHEL]Baseline"; + ContainsLine = "maxclassrepeat = 4"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/security/pwquality.conf"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "^#\\s*maxclassrepeat\\s*=.*|^\\s*maxclassrepeat\\s*=\\s*(?:\\d{2,}|[1-3|5-9])"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource10ref +{ +ResourceID = "[nxFileLine][V-204416][medium][SRG-OS-000073-GPOS-00041]::[RHEL]Baseline"; + ContainsLine = "ENCRYPT_METHOD SHA512"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/login.defs"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*ENCRYPT_METHOD\\s*SHA512"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource11ref +{ +ResourceID = "[nxFileLine][V-204418][medium][SRG-OS-000075-GPOS-00043]::[RHEL]Baseline"; + ContainsLine = "PASS_MIN_DAYS 1"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/login.defs"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "^\\s*PASS_MIN_DAYS\\s*[0]*$|#\\s*PASS_MIN_DAYS.*"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource12ref +{ +ResourceID = "[nxFileLine][V-204420][medium][SRG-OS-000076-GPOS-00044]::[RHEL]Baseline"; + ContainsLine = "PASS_MAX_DAYS 60"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/login.defs"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "^\\s*PASS_MAX_DAYS\\s*([6][1-9]|[7-9][0-9]|\\d{3,})$|#\\s*PASS_MAX_DAYS.*"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource13ref +{ +ResourceID = "[nxFileLine][V-204423][medium][SRG-OS-000078-GPOS-00046]::[RHEL]Baseline"; + ContainsLine = "minlen = 15"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/security/pwquality.conf"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "^\\s*minlen\\s*=\\s*([0-9]|[1][1-4])$|#\\s*minlen.*"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource14ref +{ +ResourceID = "[nxFileLine][V-204425][high][SRG-OS-000106-GPOS-00053]::[RHEL]Baseline"; + ContainsLine = "PermitEmptyPasswords no"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/ssh/sshd_config"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "^#\\s*PermitEmptyPasswords.*$|^PermitEmptyPasswords\\s*(?!no\\b)\\w*$"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource15ref +{ +ResourceID = "[nxFileLine][V-204426][medium][SRG-OS-000118-GPOS-00060]::[RHEL]Baseline"; + ContainsLine = "INACTIVE=35"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/default/useradd"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "^#\\s*INACTIVE\\s*=.*|^\\s*INACTIVE\\s*=\\s*(3[5-9]|[4-9]\\d+|\\d{3,})"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource16ref +{ +ResourceID = "[nxFileLine][V-204431][medium][SRG-OS-000480-GPOS-00226]::[RHEL]Baseline"; + ContainsLine = "FAIL_DELAY 4"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/login.defs"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "^#\\s*FAIL_DELAY.*|^FAIL_DELAY\\s*(?!\\d{2,})[1-3]"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource17ref +{ +ResourceID = "[nxFileLine][V-204434][medium][SRG-OS-000480-GPOS-00229]::[RHEL]Baseline"; + ContainsLine = "PermitUserEnvironment no"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/ssh/sshd_config"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "^#\\s*PermitUserEnvironment.*$|^PermitUserEnvironment\\s*(?!no\\b)\\w*$"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource18ref +{ +ResourceID = "[nxFileLine][V-204435][medium][SRG-OS-000480-GPOS-00229]::[RHEL]Baseline"; + ContainsLine = "HostbasedAuthentication no"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/ssh/sshd_config"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "^#\\s*HostbasedAuthentication.*$|^HostbasedAuthentication\\s*(?!no\\b)\\w*$"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource19ref +{ +ResourceID = "[nxFileLine][V-204447][high][SRG-OS-000366-GPOS-00153]::[RHEL]Baseline"; + ContainsLine = "gpgcheck=1"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/yum.conf"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*gpgcheck\\s*=\\s*1"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource20ref +{ +ResourceID = "[nxFileLine][V-204448][high][SRG-OS-000366-GPOS-00153]::[RHEL]Baseline"; + ContainsLine = "localpkg_gpgcheck=1"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/yum.conf"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*localpkg_gpgcheck\\s*=\\s*1"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource21ref +{ +ResourceID = "[nxFileLine][V-204449.c][medium][SRG-OS-000114-GPOS-00059]::[RHEL]Baseline"; + ContainsLine = "install usb-storage /bin/true"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/modprobe.d/usb-storage.conf"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*install\\s*usb-storage\\s*/bin/true"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource22ref +{ +ResourceID = "[nxFileLine][V-204449.d][medium][SRG-OS-000114-GPOS-00059]::[RHEL]Baseline"; + ContainsLine = "blacklist usb-storage"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/modprobe.d/blacklist.conf"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*blacklist\\s*usb-storage"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource23ref +{ +ResourceID = "[nxFileLine][V-204450.b][medium][SRG-OS-000378-GPOS-00163]::[RHEL]Baseline"; + ContainsLine = "install dccp /bin/true"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/modprobe.d/dccp.conf"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*install\\s*dccp\\s*/bin/true"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource24ref +{ +ResourceID = "[nxFileLine][V-204450.c][medium][SRG-OS-000378-GPOS-00163]::[RHEL]Baseline"; + ContainsLine = "blacklist dccp"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/modprobe.d/blacklist.conf"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*blacklist\\s*dccp"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource25ref +{ +ResourceID = "[nxFileLine][V-204452][low][SRG-OS-000437-GPOS-00194]::[RHEL]Baseline"; + ContainsLine = "clean_requirements_on_remove=1"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/yum.conf"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*clean_requirements_on_remove\\s*=\\s*1"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource26ref +{ +ResourceID = "[nxFileLine][V-204453][medium][SRG-OS-000445-GPOS-00199]::[RHEL]Baseline"; + ContainsLine = "SELINUX=enforcing"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/selinux/config"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "^#\\s*SELINUX.*$|^SELINUX\\s*=\\s*(?!enforcing)\\w*$"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource27ref +{ +ResourceID = "[nxFileLine][V-204454][medium][SRG-OS-000445-GPOS-00199]::[RHEL]Baseline"; + ContainsLine = "SELINUXTYPE=targeted"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/selinux/config"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "^#\\s*SELINUXTYPE.*$|^SELINUXTYPE\\s*=\\s*(?!targeted\\b)\\w*$"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource28ref +{ +ResourceID = "[nxFileLine][V-204457][medium][SRG-OS-000480-GPOS-00228]::[RHEL]Baseline"; + ContainsLine = "UMASK 077"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/login.defs"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "^\\s*UMASK(?!\\s077\\b)\\s*\\d*\\s*$|^#\\s*UMASK.*"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource29ref +{ +ResourceID = "[nxFileLine][V-204466][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; + ContainsLine = "CREATE_HOME yes"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/login.defs"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "^#\\s*CREATE_HOME.*$|^CREATE_HOME\\s*(?!yes\\b)\\w*$|^CREATE_HOME\\t.*"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource30ref +{ +ResourceID = "[nxFileLine][V-204504][medium][SRG-OS-000046-GPOS-00022]::[RHEL]Baseline"; + ContainsLine = "-f 2"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "^#\\s*-f\\s+2|^\\s*-f\\s*1"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileResource as $MSFT_nxFileResource24ref +{ +SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::29::9::nxFile"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + ResourceID = "[nxFile][V-204506.a][medium][SRG-OS-000342-GPOS-00133]::[RHEL]Baseline"; + DestinationPath = "/etc/audisp/plugins.d/au-remote.conf"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource31ref +{ +ResourceID = "[nxFileLine][V-204506.a][medium][SRG-OS-000342-GPOS-00133]::[RHEL]Baseline"; + ContainsLine = "active = yes"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audisp/plugins.d/au-remote.conf"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "\\s*active\\s*=\\s*no|active=yes|#\\s*active\\s*=.*"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource32ref +{ +ResourceID = "[nxFileLine][V-204506.b][medium][SRG-OS-000342-GPOS-00133]::[RHEL]Baseline"; + ContainsLine = "direction = out"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audisp/plugins.d/au-remote.conf"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*direction\\s*=\\s*out"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource33ref +{ +ResourceID = "[nxFileLine][V-204506.c][medium][SRG-OS-000342-GPOS-00133]::[RHEL]Baseline"; + ContainsLine = "path = /sbin/audisp-remote"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audisp/plugins.d/au-remote.conf"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*path\\s*=\\s*/sbin/audisp-remote"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource34ref +{ +ResourceID = "[nxFileLine][V-204506.d][medium][SRG-OS-000342-GPOS-00133]::[RHEL]Baseline"; + ContainsLine = "type = always"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audisp/plugins.d/au-remote.conf"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*type\\s*=\\s*always"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource35ref +{ +ResourceID = "[nxFileLine][V-204507][medium][SRG-OS-000342-GPOS-00133]::[RHEL]Baseline"; + ContainsLine = "overflow_action = syslog"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audisp/audispd.conf"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "^#\\s*overflow_action.*$|^overflow_action\\s*=\\s*(?!syslog$)\\w*$"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource36ref +{ +ResourceID = "[nxFileLine][V-204508][medium][SRG-OS-000342-GPOS-00133]::[RHEL]Baseline"; + ContainsLine = "name_format = hostname"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audisp/audispd.conf"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "^#\\s*name_format.*$|^name_format\\s*=\\s*(?!hostname$)\\w*$"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileResource as $MSFT_nxFileResource25ref +{ +SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::19::9::nxFile"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + ResourceID = "[nxFile][V-204510][medium][SRG-OS-000342-GPOS-00133]::[RHEL]Baseline"; + DestinationPath = "/etc/audisp/audisp-remote.conf"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource37ref +{ +ResourceID = "[nxFileLine][V-204510][medium][SRG-OS-000342-GPOS-00133]::[RHEL]Baseline"; + ContainsLine = "enable_krb5 = yes"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audisp/audisp-remote.conf"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*enable_krb5\\s*=\\s*yes"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource38ref +{ +ResourceID = "[nxFileLine][V-204511][medium][SRG-OS-000342-GPOS-00133]::[RHEL]Baseline"; + ContainsLine = "disk_full_action = single"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audisp/audisp-remote.conf"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "^#\\s*disk_full_action\\s*=.*|^disk_full_action\\s*=\\s*(?!halt\\b|single\\b|syslog\\b)\\w+"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource39ref +{ +ResourceID = "[nxFileLine][V-204512][medium][SRG-OS-000342-GPOS-00133]::[RHEL]Baseline"; + ContainsLine = "network_failure_action = syslog"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audisp/audisp-remote.conf"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "^#\\s*network_failure_action\\s*=.*|^network_failure_action\\s*=\\s*(?!halt\\b|single\\b|syslog\\b)\\w+"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource40ref +{ +ResourceID = "[nxFileLine][V-204514][medium][SRG-OS-000343-GPOS-00134]::[RHEL]Baseline"; + ContainsLine = "space_left_action = email"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/auditd.conf"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "^#\\s*space_left_action.*$|^space_left_action\\s*=\\s*(?!email$)\\w*$"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource41ref +{ +ResourceID = "[nxFileLine][V-204515][medium][SRG-OS-000343-GPOS-00134]::[RHEL]Baseline"; + ContainsLine = "action_mail_acct = root"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/auditd.conf"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "^#\\s*action_mail_acct.*|^action_mail_acct\\s*=\\s*(?!root\\b)\\w+"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource42ref +{ +ResourceID = "[nxFileLine][V-204516.a][medium][SRG-OS-000327-GPOS-00127]::[RHEL]Baseline"; + ContainsLine = "-a always,exit -F arch=b32 -S execve -C uid!=euid -F euid=0 -k setuid"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*execve\\s*-C\\s*uid!\\s*=\\s*euid\\s*-F\\s*euid\\s*=\\s*0\\s*-k\\s*setuid"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource43ref +{ +ResourceID = "[nxFileLine][V-204516.b][medium][SRG-OS-000327-GPOS-00127]::[RHEL]Baseline"; + ContainsLine = "-a always,exit -F arch=b64 -S execve -C uid!=euid -F euid=0 -k setuid"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*execve\\s*-C\\s*uid!\\s*=\\s*euid\\s*-F\\s*euid\\s*=\\s*0\\s*-k\\s*setuid"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource44ref +{ +ResourceID = "[nxFileLine][V-204516.c][medium][SRG-OS-000327-GPOS-00127]::[RHEL]Baseline"; + ContainsLine = "-a always,exit -F arch=b32 -S execve -C gid!=egid -F egid=0 -k setgid"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*execve\\s*-C\\s*gid!\\s*=\\s*egid\\s*-F\\s*egid\\s*=\\s*0\\s*-k\\s*setgid"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource45ref +{ +ResourceID = "[nxFileLine][V-204516.d][medium][SRG-OS-000327-GPOS-00127]::[RHEL]Baseline"; + ContainsLine = "-a always,exit -F arch=b64 -S execve -C gid!=egid -F egid=0 -k setgid"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*execve\\s*-C\\s*gid!\\s*=\\s*egid\\s*-F\\s*egid\\s*=\\s*0\\s*-k\\s*setgid"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource46ref +{ +ResourceID = "[nxFileLine][V-204517.a][medium][SRG-OS-000064-GPOS-00033]::[RHEL]Baseline"; + ContainsLine = "-a always,exit -F arch=b32 -S chown,fchown,fchownat,lchown -F auid>=1000 -F auid!=unset -k perm_mod"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*chown,fchown,fchownat,lchown\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*perm_mod"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource47ref +{ +ResourceID = "[nxFileLine][V-204517.b][medium][SRG-OS-000064-GPOS-00033]::[RHEL]Baseline"; + ContainsLine = "-a always,exit -F arch=b64 -S chown,fchown,fchownat,lchown -F auid>=1000 -F auid!=unset -k perm_mod"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*chown,fchown,fchownat,lchown\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*perm_mod"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource48ref +{ +ResourceID = "[nxFileLine][V-204521.a][medium][SRG-OS-000458-GPOS-00203]::[RHEL]Baseline"; + ContainsLine = "-a always,exit -F arch=b32 -S chmod,fchmod,fchmodat -F auid>=1000 -F auid!=unset -k perm_mod"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*chmod,fchmod,fchmodat\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*perm_mod"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource49ref +{ +ResourceID = "[nxFileLine][V-204521.b][medium][SRG-OS-000458-GPOS-00203]::[RHEL]Baseline"; + ContainsLine = "-a always,exit -F arch=b64 -S chmod,fchmod,fchmodat -F auid>=1000 -F auid!=unset -k perm_mod"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*chmod,fchmod,fchmodat\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*perm_mod"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource50ref +{ +ResourceID = "[nxFileLine][V-204524.a][medium][SRG-OS-000458-GPOS-00203]::[RHEL]Baseline"; + ContainsLine = "-a always,exit -F arch=b32 -S setxattr,fsetxattr,lsetxattr,removexattr,fremovexattr,lremovexattr -F auid>=1000 -F auid!=unset -k perm_mod"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*setxattr,fsetxattr,lsetxattr,removexattr,fremovexattr,lremovexattr\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*perm_mod"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource51ref +{ +ResourceID = "[nxFileLine][V-204524.b][medium][SRG-OS-000458-GPOS-00203]::[RHEL]Baseline"; + ContainsLine = "-a always,exit -F arch=b64 -S setxattr,fsetxattr,lsetxattr,removexattr,fremovexattr,lremovexattr -F auid>=1000 -F auid!=unset -k perm_mod"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*setxattr,fsetxattr,lsetxattr,removexattr,fremovexattr,lremovexattr\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*perm_mod"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource52ref +{ +ResourceID = "[nxFileLine][V-204531.a][medium][SRG-OS-000064-GPOS-00033]::[RHEL]Baseline"; + ContainsLine = "-a always,exit -F arch=b32 -S creat,open,openat,open_by_handle_at,truncate,ftruncate -F exit=-EPERM -F auid>=1000 -F auid!=unset -k access"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*creat,open,openat,open_by_handle_at,truncate,ftruncate\\s*-F\\s*exit\\s*=\\s*-EPERM\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*access"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource53ref +{ +ResourceID = "[nxFileLine][V-204531.b][medium][SRG-OS-000064-GPOS-00033]::[RHEL]Baseline"; + ContainsLine = "-a always,exit -F arch=b32 -S creat,open,openat,open_by_handle_at,truncate,ftruncate -F exit=-EACCES -F auid>=1000 -F auid!=unset -k access"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*creat,open,openat,open_by_handle_at,truncate,ftruncate\\s*-F\\s*exit\\s*=\\s*-EACCES\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*access"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource54ref +{ +ResourceID = "[nxFileLine][V-204531.c][medium][SRG-OS-000064-GPOS-00033]::[RHEL]Baseline"; + ContainsLine = "-a always,exit -F arch=b64 -S creat,open,openat,open_by_handle_at,truncate,ftruncate -F exit=-EPERM -F auid>=1000 -F auid!=unset -k access"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*creat,open,openat,open_by_handle_at,truncate,ftruncate\\s*-F\\s*exit\\s*=\\s*-EPERM\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*access"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource55ref +{ +ResourceID = "[nxFileLine][V-204531.d][medium][SRG-OS-000064-GPOS-00033]::[RHEL]Baseline"; + ContainsLine = "-a always,exit -F arch=b64 -S creat,open,openat,open_by_handle_at,truncate,ftruncate -F exit=-EACCES -F auid>=1000 -F auid!=unset -k access"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*creat,open,openat,open_by_handle_at,truncate,ftruncate\\s*-F\\s*exit\\s*=\\s*-EACCES\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*access"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource56ref +{ +ResourceID = "[nxFileLine][V-204536][medium][SRG-OS-000392-GPOS-00172]::[RHEL]Baseline"; + ContainsLine = "-a always,exit -F path=/usr/sbin/semanage -F perm=x -F auid>=1000 -F auid!=unset -k privileged-priv_change"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/sbin/semanage\\s*-F\\s*perm\\s*=\\s*x\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-priv_change"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource57ref +{ +ResourceID = "[nxFileLine][V-204537][medium][SRG-OS-000392-GPOS-00172]::[RHEL]Baseline"; + ContainsLine = "-a always,exit -F path=/usr/sbin/setsebool -F perm=x -F auid>=1000 -F auid!=unset -k privileged-priv_change"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/sbin/setsebool\\s*-F\\s*perm\\s*=\\s*x\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-priv_change"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource58ref +{ +ResourceID = "[nxFileLine][V-204538][medium][SRG-OS-000392-GPOS-00172]::[RHEL]Baseline"; + ContainsLine = "-a always,exit -F path=/usr/bin/chcon -F perm=x -F auid>=1000 -F auid!=unset -k privileged-priv_change"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/bin/chcon\\s*-F\\s*perm\\s*=\\s*x\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-priv_change"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource59ref +{ +ResourceID = "[nxFileLine][V-204539][medium][SRG-OS-000392-GPOS-00172]::[RHEL]Baseline"; + ContainsLine = "-a always,exit -F path=/usr/sbin/setfiles -F perm=x -F auid>=1000 -F auid!=unset -k privileged-priv_change"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/sbin/setfiles\\s*-F\\s*perm\\s*=\\s*x\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-priv_change"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource60ref +{ +ResourceID = "[nxFileLine][V-204540][medium][SRG-OS-000392-GPOS-00172]::[RHEL]Baseline"; + ContainsLine = "-w /var/run/faillock -p wa -k logins"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-w\\s*/var/run/faillock\\s*-p\\s*wa\\s*-k\\s*logins"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource61ref +{ +ResourceID = "[nxFileLine][V-204541][medium][SRG-OS-000392-GPOS-00172]::[RHEL]Baseline"; + ContainsLine = "-w /var/log/lastlog -p wa -k logins"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-w\\s*/var/log/lastlog\\s*-p\\s*wa\\s*-k\\s*logins"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource62ref +{ +ResourceID = "[nxFileLine][V-204542][medium][SRG-OS-000042-GPOS-00020]::[RHEL]Baseline"; + ContainsLine = "-a always,exit -F path=/usr/bin/passwd -F perm=x -F auid>=1000 -F auid!=unset -k privileged-passwd"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/bin/passwd\\s*-F\\s*perm\\s*=\\s*x\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-passwd"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource63ref +{ +ResourceID = "[nxFileLine][V-204543][medium][SRG-OS-000042-GPOS-00020]::[RHEL]Baseline"; + ContainsLine = "-a always,exit -F path=/usr/sbin/unix_chkpwd -F perm=x -F auid>=1000 -F auid!=unset -k privileged-passwd"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/sbin/unix_chkpwd\\s*-F\\s*perm\\s*=\\s*x\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-passwd"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource64ref +{ +ResourceID = "[nxFileLine][V-204544][medium][SRG-OS-000042-GPOS-00020]::[RHEL]Baseline"; + ContainsLine = "-a always,exit -F path=/usr/bin/gpasswd -F perm=x -F auid>=1000 -F auid!=unset -k privileged-passwd"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/bin/gpasswd\\s*-F\\s*perm\\s*=\\s*x\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-passwd"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource65ref +{ +ResourceID = "[nxFileLine][V-204545][medium][SRG-OS-000042-GPOS-00020]::[RHEL]Baseline"; + ContainsLine = "-a always,exit -F path=/usr/bin/chage -F perm=x -F auid>=1000 -F auid!=unset -k privileged-passwd"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/bin/chage\\s*-F\\s*perm\\s*=\\s*x\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-passwd"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource66ref +{ +ResourceID = "[nxFileLine][V-204546][medium][SRG-OS-000042-GPOS-00020]::[RHEL]Baseline"; + ContainsLine = "-a always,exit -F path=/usr/sbin/userhelper -F perm=x -F auid>=1000 -F auid!=unset -k privileged-passwd"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/sbin/userhelper\\s*-F\\s*perm\\s*=\\s*x\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-passwd"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource67ref +{ +ResourceID = "[nxFileLine][V-204547][medium][SRG-OS-000037-GPOS-00015]::[RHEL]Baseline"; + ContainsLine = "-a always,exit -F path=/usr/bin/su -F perm=x -F auid>=1000 -F auid!=unset -k privileged-priv_change"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/bin/su\\s*-F\\s*perm\\s*=\\s*x\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-priv_change"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource68ref +{ +ResourceID = "[nxFileLine][V-204548][medium][SRG-OS-000037-GPOS-00015]::[RHEL]Baseline"; + ContainsLine = "-a always,exit -F path=/usr/bin/sudo -F perm=x -F auid>=1000 -F auid!=unset -k privileged-priv_change"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/bin/sudo\\s*-F\\s*perm\\s*=\\s*x\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-priv_change"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource69ref +{ +ResourceID = "[nxFileLine][V-204549.a][medium][SRG-OS-000037-GPOS-00015]::[RHEL]Baseline"; + ContainsLine = "-w /etc/sudoers -p wa -k privileged-actions"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-w /etc/sudoers -p wa -k privileged-actions"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource70ref +{ +ResourceID = "[nxFileLine][V-204549.b][medium][SRG-OS-000037-GPOS-00015]::[RHEL]Baseline"; + ContainsLine = "-w /etc/sudoers.d/ -p wa -k privileged-actions"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-w /etc/sudoers.d/ -p wa -k privileged-actions"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource71ref +{ +ResourceID = "[nxFileLine][V-204550][medium][SRG-OS-000037-GPOS-00015]::[RHEL]Baseline"; + ContainsLine = "-a always,exit -F path=/usr/bin/newgrp -F perm=x -F auid>=1000 -F auid!=unset -k privileged-priv_change"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/bin/newgrp\\s*-F\\s*perm\\s*=\\s*x\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-priv_change"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource72ref +{ +ResourceID = "[nxFileLine][V-204551][medium][SRG-OS-000037-GPOS-00015]::[RHEL]Baseline"; + ContainsLine = "-a always,exit -F path=/usr/bin/chsh -F perm=x -F auid>=1000 -F auid!=unset -k privileged-priv_change"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/bin/chsh\\s*-F\\s*perm\\s*=\\s*x\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-priv_change"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource73ref +{ +ResourceID = "[nxFileLine][V-204552.a][medium][SRG-OS-000042-GPOS-00020]::[RHEL]Baseline"; + ContainsLine = "-a always,exit -F arch=b32 -S mount -F auid>=1000 -F auid!=unset -k privileged-mount"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*mount\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-mount"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource74ref +{ +ResourceID = "[nxFileLine][V-204552.b][medium][SRG-OS-000042-GPOS-00020]::[RHEL]Baseline"; + ContainsLine = "-a always,exit -F arch=b64 -S mount -F auid>=1000 -F auid!=unset -k privileged-mount"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*mount\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-mount"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource75ref +{ +ResourceID = "[nxFileLine][V-204552.c][medium][SRG-OS-000042-GPOS-00020]::[RHEL]Baseline"; + ContainsLine = "-a always,exit -F path=/usr/bin/mount -F perm=x -F auid>=1000 -F auid!=unset -k privileged-mount"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/bin/mount\\s*-F\\s*perm\\s*=\\s*x\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-mount"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource76ref +{ +ResourceID = "[nxFileLine][V-204553][medium][SRG-OS-000042-GPOS-00020]::[RHEL]Baseline"; + ContainsLine = "-a always,exit -F path=/usr/bin/umount -F perm=x -F auid>=1000 -F auid!=unset -k privileged-mount"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/bin/umount\\s*-F\\s*perm\\s*=\\s*x\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-mount"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource77ref +{ +ResourceID = "[nxFileLine][V-204554][medium][SRG-OS-000042-GPOS-00020]::[RHEL]Baseline"; + ContainsLine = "-a always,exit -F path=/usr/sbin/postdrop -F perm=x -F auid>=1000 -F auid!=unset -k privileged-postfix"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/sbin/postdrop\\s*-F\\s*perm\\s*=\\s*x\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-postfix"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource78ref +{ +ResourceID = "[nxFileLine][V-204555][medium][SRG-OS-000042-GPOS-00020]::[RHEL]Baseline"; + ContainsLine = "-a always,exit -F path=/usr/sbin/postqueue -F perm=x -F auid>=1000 -F auid!=unset -k privileged-postfix"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/sbin/postqueue\\s*-F\\s*perm\\s*=\\s*x\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-postfix"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource79ref +{ +ResourceID = "[nxFileLine][V-204556][medium][SRG-OS-000042-GPOS-00020]::[RHEL]Baseline"; + ContainsLine = "-a always,exit -F path=/usr/libexec/openssh/ssh-keysign -F perm=x -F auid>=1000 -F auid!=unset -k privileged-ssh"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/libexec/openssh/ssh-keysign\\s*-F\\s*perm\\s*=\\s*x\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-ssh"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource80ref +{ +ResourceID = "[nxFileLine][V-204557][medium][SRG-OS-000042-GPOS-00020]::[RHEL]Baseline"; + ContainsLine = "-a always,exit -F path=/usr/bin/crontab -F perm=x -F auid>=1000 -F auid!=unset -k privileged-cron"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/bin/crontab\\s*-F\\s*perm\\s*=\\s*x\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-cron"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource81ref +{ +ResourceID = "[nxFileLine][V-204558][medium][SRG-OS-000471-GPOS-00215]::[RHEL]Baseline"; + ContainsLine = "-a always,exit -F path=/usr/sbin/pam_timestamp_check -F perm=x -F auid>=1000 -F auid!=unset -k privileged-pam"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/sbin/pam_timestamp_check\\s*-F\\s*perm\\s*=\\s*x\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-pam"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource82ref +{ +ResourceID = "[nxFileLine][V-204559.a][medium][SRG-OS-000471-GPOS-00216]::[RHEL]Baseline"; + ContainsLine = "-a always,exit -F arch=b32 -S create_module -F auid>=1000 -F auid!=unset -k module-change"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*create_module\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*module-change"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource83ref +{ +ResourceID = "[nxFileLine][V-204559.b][medium][SRG-OS-000471-GPOS-00216]::[RHEL]Baseline"; + ContainsLine = "-a always,exit -F arch=b64 -S create_module -F auid>=1000 -F auid!=unset -k module-change"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*create_module\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*module-change"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource84ref +{ +ResourceID = "[nxFileLine][V-204560.a][medium][SRG-OS-000471-GPOS-00216]::[RHEL]Baseline"; + ContainsLine = "-a always,exit -F arch=b32 -S init_module,finit_module -F auid>=1000 -F auid!=unset -k modulechange"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*init_module,finit_module\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*modulechange"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource85ref +{ +ResourceID = "[nxFileLine][V-204560.b][medium][SRG-OS-000471-GPOS-00216]::[RHEL]Baseline"; + ContainsLine = "-a always,exit -F arch=b64 -S init_module,finit_module -F auid>=1000 -F auid!=unset -k modulechange"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*init_module,finit_module\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*modulechange"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource86ref +{ +ResourceID = "[nxFileLine][V-204562.a][medium][SRG-OS-000471-GPOS-00216]::[RHEL]Baseline"; + ContainsLine = "-a always,exit -F arch=b32 -S delete_module -F auid>=1000 -F auid!=unset -k module-change"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*delete_module\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*module-change"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource87ref +{ +ResourceID = "[nxFileLine][V-204562.b][medium][SRG-OS-000471-GPOS-00216]::[RHEL]Baseline"; + ContainsLine = "-a always,exit -F arch=b64 -S delete_module -F auid>=1000 -F auid!=unset -k module-change"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*delete_module\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*module-change"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource88ref +{ +ResourceID = "[nxFileLine][V-204563][medium][SRG-OS-000471-GPOS-00216]::[RHEL]Baseline"; + ContainsLine = "-a always,exit -F path=/usr/bin/kmod -F perm=x -F auid>=1000 -F auid!=unset -k modules"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/bin/kmod\\s*-F\\s*perm\\s*=\\s*x\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*modules"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource89ref +{ +ResourceID = "[nxFileLine][V-204564][medium][SRG-OS-000004-GPOS-00004]::[RHEL]Baseline"; + ContainsLine = "-w /etc/passwd -p wa -k identity"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-w\\s*/etc/passwd\\s*-p\\s*wa\\s*-k\\s*identity"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource90ref +{ +ResourceID = "[nxFileLine][V-204565][medium][SRG-OS-000004-GPOS-00004]::[RHEL]Baseline"; + ContainsLine = "-w /etc/group -p wa -k identity"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-w\\s*/etc/group\\s*-p\\s*wa\\s*-k\\s*identity"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource91ref +{ +ResourceID = "[nxFileLine][V-204566][medium][SRG-OS-000004-GPOS-00004]::[RHEL]Baseline"; + ContainsLine = "-w /etc/gshadow -p wa -k identity"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-w\\s*/etc/gshadow\\s*-p\\s*wa\\s*-k\\s*identity"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource92ref +{ +ResourceID = "[nxFileLine][V-204567][medium][SRG-OS-000004-GPOS-00004]::[RHEL]Baseline"; + ContainsLine = "-w /etc/shadow -p wa -k identity"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-w\\s*/etc/shadow\\s*-p\\s*wa\\s*-k\\s*identity"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource93ref +{ +ResourceID = "[nxFileLine][V-204568][medium][SRG-OS-000004-GPOS-00004]::[RHEL]Baseline"; + ContainsLine = "-w /etc/security/opasswd -p wa -k identity"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-w\\s*/etc/security/opasswd\\s*-p\\s*wa\\s*-k\\s*identity"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource94ref +{ +ResourceID = "[nxFileLine][V-204572.a][medium][SRG-OS-000466-GPOS-00210]::[RHEL]Baseline"; + ContainsLine = "-a always,exit -F arch=b32 -S unlink,unlinkat,rename,renameat,rmdir -F auid>=1000 -F auid!=unset -k delete"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*unlink,unlinkat,rename,renameat,rmdir\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*delete"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource95ref +{ +ResourceID = "[nxFileLine][V-204572.b][medium][SRG-OS-000466-GPOS-00210]::[RHEL]Baseline"; + ContainsLine = "-a always,exit -F arch=b64 -S unlink,unlinkat,rename,renameat,rmdir -F auid>=1000 -F auid!=unset -k delete"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*unlink,unlinkat,rename,renameat,rmdir\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*delete"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource96ref +{ +ResourceID = "[nxFileLine][V-204578][medium][SRG-OS-000033-GPOS-00014]::[RHEL]Baseline"; + ContainsLine = "Ciphers aes256-ctr,aes192-ctr,aes128-ctr"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/ssh/sshd_config"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "^#\\s*Ciphers.*|^\\s*Ciphers\\s*aes128-ctr.*|^\\s*Ciphers\\s*aes192-ctr.*"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource97ref +{ +ResourceID = "[nxFileLine][V-204579.b][medium][SRG-OS-000163-GPOS-00072]::[RHEL]Baseline"; + ContainsLine = "declare -xr TMOUT=900"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/profile.d/tmout.sh"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "^\\s*TMOUT\\s*=\\s*[0-8]?[0-9]?[0-9]?$|^#\\s*TMOUT.*"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource98ref +{ +ResourceID = "[nxFileLine][V-204579.c][medium][SRG-OS-000163-GPOS-00072]::[RHEL]Baseline"; + ContainsLine = "declare -xr TMOUT=900"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/bashrc"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "^\\s*TMOUT\\s*=\\s*[0-8]?[0-9]?[0-9]?$|^#\\s*TMOUT.*"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource99ref +{ +ResourceID = "[nxFileLine][V-204579.d][medium][SRG-OS-000163-GPOS-00072]::[RHEL]Baseline"; + ContainsLine = "declare -xr TMOUT=900"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/profile"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "^\\s*TMOUT\\s*=\\s*[0-8]?[0-9]?[0-9]?$|^#\\s*TMOUT.*"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource100ref +{ +ResourceID = "[nxFileLine][V-204580][medium][SRG-OS-000023-GPOS-00006]::[RHEL]Baseline"; + ContainsLine = "banner /etc/issue"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/ssh/sshd_config"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*banner\\s*/etc/issue"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource101ref +{ +ResourceID = "[nxFileLine][V-204587][medium][SRG-OS-000163-GPOS-00072]::[RHEL]Baseline"; + ContainsLine = "ClientAliveInterval 600"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/ssh/sshd_config"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "^\\s*ClientAliveInterval\\s*[0-5]?[0-9]?[0-9]?\\s*$|^#\\s*ClientAliveInterval.*|^\\s*ClientAliveInterval\\s*$"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource102ref +{ +ResourceID = "[nxFileLine][V-204588][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; + ContainsLine = "RhostsRSAAuthentication no"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/ssh/sshd_config"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "^#\\s*RhostsRSAAuthentication.*$|^RhostsRSAAuthentication\\s*(?!no\\b)\\w*$"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource103ref +{ +ResourceID = "[nxFileLine][V-204589][medium][SRG-OS-000163-GPOS-00072]::[RHEL]Baseline"; + ContainsLine = "ClientAliveCountMax 0"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/ssh/sshd_config"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "^#\\s*ClientAliveCountMax.*$|^ClientAliveCountMax\\s*(?!0\\b)\\w*$"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource104ref +{ +ResourceID = "[nxFileLine][V-204590][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; + ContainsLine = "IgnoreRhosts yes"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/ssh/sshd_config"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "^#\\s*IgnoreRhosts.*$|^IgnoreRhosts\\s*(?!yes\\b)\\w*$"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource105ref +{ +ResourceID = "[nxFileLine][V-204591][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; + ContainsLine = "PrintLastLog yes"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/ssh/sshd_config"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "^#\\s*PrintLastLog.*$|^PrintLastLog\\s*(?!yes\\b)\\w*$"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource106ref +{ +ResourceID = "[nxFileLine][V-204592][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; + ContainsLine = "PermitRootLogin no"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/ssh/sshd_config"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "^#\\s*PermitRootLogin.*$|^PermitRootLogin\\s*(?!no\\b)\\w*$"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource107ref +{ +ResourceID = "[nxFileLine][V-204593][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; + ContainsLine = "IgnoreUserKnownHosts yes"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/ssh/sshd_config"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "^#\\s*IgnoreUserKnownHosts.*$|^IgnoreUserKnownHosts\\s*(?!yes\\b)\\w*$"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource108ref +{ +ResourceID = "[nxFileLine][V-204594][high][SRG-OS-000074-GPOS-00042]::[RHEL]Baseline"; + ContainsLine = "Protocol 2"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/ssh/sshd_config"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "^#\\s*Protocol.*$|^Protocol\\s*(?!2\\b)\\w*$"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource109ref +{ +ResourceID = "[nxFileLine][V-204595][medium][SRG-OS-000250-GPOS-00093]::[RHEL]Baseline"; + ContainsLine = "MACs hmac-sha2-512,hmac-sha2-256"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/ssh/sshd_config"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*MACs.*|\\s*MACs\\s*hmac-(?!sha2-512).*"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource110ref +{ +ResourceID = "[nxFileLine][V-204598][medium][SRG-OS-000364-GPOS-00151]::[RHEL]Baseline"; + ContainsLine = "GSSAPIAuthentication no"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/ssh/sshd_config"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "^#\\s*GSSAPIAuthentication.*$|^GSSAPIAuthentication\\s*(?!no\\b)\\w*$"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource111ref +{ +ResourceID = "[nxFileLine][V-204599][medium][SRG-OS-000364-GPOS-00151]::[RHEL]Baseline"; + ContainsLine = "KerberosAuthentication no"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/ssh/sshd_config"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "^#\\s*KerberosAuthentication.*$|^KerberosAuthentication\\s*(?!no\\b)\\w*$"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource112ref +{ +ResourceID = "[nxFileLine][V-204600][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; + ContainsLine = "StrictModes yes"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/ssh/sshd_config"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "^#\\s*StrictModes.*$|^StrictModes\\s*(?!yes\\b)\\w*$"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource113ref +{ +ResourceID = "[nxFileLine][V-204601][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; + ContainsLine = "UsePrivilegeSeparation sandbox"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/ssh/sshd_config"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "^#\\s*UsePrivilegeSeparation.*$|^UsePrivilegeSeparation\\s*(?!sandbox\\b)\\w*$"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource114ref +{ +ResourceID = "[nxFileLine][V-204602][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; + ContainsLine = "Compression delayed"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/ssh/sshd_config"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "^#\\s*Compression.*$|^Compression\\s*(?!delayed\\b)\\w*$"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource115ref +{ +ResourceID = "[nxFileLine][V-204622][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; + ContainsLine = "X11Forwarding no"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/ssh/sshd_config"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "^#\\s*X11Forwarding.*$|^X11Forwarding\\s*(?!no\\b)\\w*$"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource116ref +{ +ResourceID = "[nxFileLine][V-233307][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; + ContainsLine = "X11UseLocalhost yes"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/ssh/sshd_config"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*X11UseLocalhost\\s*yes"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource117ref +{ +ResourceID = "[nxFileLine][V-255925][medium][SRG-OS-000033-GPOS-00014]::[RHEL]Baseline"; + ContainsLine = "KexAlgorithms ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/ssh/sshd_config"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*KexAlgorithms\\s*ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxServiceResource as $MSFT_nxServiceResource1ref +{ +ResourceID = "[nxService][V-204451][medium][SRG-OS-000114-GPOS-00059]::[RHEL]Baseline"; + Controller = "systemd"; + Enabled = False; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxService.ps1::13::9::nxService"; + Name = "autofs"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxServiceResource as $MSFT_nxServiceResource2ref +{ +ResourceID = "[nxService][V-204492][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; + Controller = "systemd"; + Enabled = False; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxService.ps1::13::9::nxService"; + Name = "kdump"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxServiceResource as $MSFT_nxServiceResource3ref +{ +ResourceID = "[nxService][V-204503][medium][SRG-OS-000038-GPOS-00016]::[RHEL]Baseline"; + Controller = "systemd"; + State = "Running"; + Enabled = True; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxService.ps1::22::9::nxService"; + Name = "auditd"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxServiceResource as $MSFT_nxServiceResource4ref +{ +ResourceID = "[nxService][V-204586][medium][SRG-OS-000423-GPOS-00187]::[RHEL]Baseline"; + Controller = "systemd"; + State = "Running"; + Enabled = True; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxService.ps1::22::9::nxService"; + Name = "sshd"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxServiceResource as $MSFT_nxServiceResource5ref +{ +ResourceID = "[nxService][V-204604.b][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; + Controller = "systemd"; + State = "Running"; + Enabled = True; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxService.ps1::22::9::nxService"; + Name = "firewalld"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxScriptResource as $MSFT_nxScriptResource1ref +{ +ResourceID = "[nxScript][V-204399.b][medium][[Skip] SRG-OS-000029-GPOS-00010]::[RHEL]Baseline"; + GetScript = "#!/bin/bash\necho [V-204399.b][medium][[Skip] SRG-OS-000029-GPOS-00010]"; + TestScript = "#!/bin/bash\nexit 0"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxScript.skip.ps1::10::5::nxScript"; + SetScript = "#!/bin/bash"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxScriptResource as $MSFT_nxScriptResource2ref +{ +ResourceID = "[nxScript][V-204400][medium][[Skip] SRG-OS-000029-GPOS-00010]::[RHEL]Baseline"; + GetScript = "#!/bin/bash\necho [V-204400][medium][[Skip] SRG-OS-000029-GPOS-00010]"; + TestScript = "#!/bin/bash\nexit 0"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxScript.skip.ps1::10::5::nxScript"; + SetScript = "#!/bin/bash"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxScriptResource as $MSFT_nxScriptResource3ref +{ +ResourceID = "[nxScript][V-204403][medium][[Skip] SRG-OS-000029-GPOS-00010]::[RHEL]Baseline"; + GetScript = "#!/bin/bash\necho [V-204403][medium][[Skip] SRG-OS-000029-GPOS-00010]"; + TestScript = "#!/bin/bash\nexit 0"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxScript.skip.ps1::10::5::nxScript"; + SetScript = "#!/bin/bash"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxScriptResource as $MSFT_nxScriptResource4ref +{ +ResourceID = "[nxScript][V-204509][medium][[Skip] SRG-OS-000342-GPOS-00133]::[RHEL]Baseline"; + GetScript = "#!/bin/bash\necho [V-204509][medium][[Skip] SRG-OS-000342-GPOS-00133]"; + TestScript = "#!/bin/bash\nexit 0"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxScript.skip.ps1::10::5::nxScript"; + SetScript = "#!/bin/bash"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxScriptResource as $MSFT_nxScriptResource5ref +{ +ResourceID = "[nxScript][V-204513][medium][[Skip] SRG-OS-000343-GPOS-00134]::[RHEL]Baseline"; + GetScript = "#!/bin/bash\necho [V-204513][medium][[Skip] SRG-OS-000343-GPOS-00134]"; + TestScript = "#!/bin/bash\nexit 0"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxScript.skip.ps1::10::5::nxScript"; + SetScript = "#!/bin/bash"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxScriptResource as $MSFT_nxScriptResource6ref +{ +ResourceID = "[nxScript][V-204623][medium][[Skip] SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; + GetScript = "#!/bin/bash\necho [V-204623][medium][[Skip] SRG-OS-000480-GPOS-00227]"; + TestScript = "#!/bin/bash\nexit 0"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxScript.skip.ps1::10::5::nxScript"; + SetScript = "#!/bin/bash"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxScriptResource as $MSFT_nxScriptResource7ref +{ +ResourceID = "[nxScript][V-244557][medium][[Skip] SRG-OS-000080-GPOS-00048]::[RHEL]Baseline"; + GetScript = "#!/bin/bash\necho [V-244557][medium][[Skip] SRG-OS-000080-GPOS-00048]"; + TestScript = "#!/bin/bash\nexit 0"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxScript.skip.ps1::10::5::nxScript"; + SetScript = "#!/bin/bash"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxScriptResource as $MSFT_nxScriptResource8ref +{ +ResourceID = "[nxScript][V-244558][medium][[Skip] SRG-OS-000080-GPOS-00048]::[RHEL]Baseline"; + GetScript = "#!/bin/bash\necho [V-244558][medium][[Skip] SRG-OS-000080-GPOS-00048]"; + TestScript = "#!/bin/bash\nexit 0"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxScript.skip.ps1::10::5::nxScript"; + SetScript = "#!/bin/bash"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxScriptResource as $MSFT_nxScriptResource9ref +{ +ResourceID = "[nxScript][V-204399.a][medium][[Skip] SRG-OS-000029-GPOS-00010]::[RHEL]Baseline"; + GetScript = "#!/bin/bash\necho [V-204399.a][medium][[Skip] SRG-OS-000029-GPOS-00010]"; + TestScript = "#!/bin/bash\nexit 0"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxScript.skip.ps1::10::5::nxScript"; + SetScript = "#!/bin/bash"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxScriptResource as $MSFT_nxScriptResource10ref +{ +ResourceID = "[nxScript][V-255926][medium][[Skip] SRG-OS-000029-GPOS-00010]::[RHEL]Baseline"; + GetScript = "#!/bin/bash\necho [V-255926][medium][[Skip] SRG-OS-000029-GPOS-00010]"; + TestScript = "#!/bin/bash\nexit 0"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxScript.skip.ps1::10::5::nxScript"; + SetScript = "#!/bin/bash"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of OMI_ConfigurationDocument + + { + Version="2.0.0"; + + MinimumCompatibleVersion = "1.0.0"; + + CompatibleVersionAdditionalProperties= {"Omi_BaseResource:ConfigurationName"}; + + Author="Microsoft"; + + GenerationDate="03/09/2023 14:17:33"; + + GenerationHost="Microsoft"; + + Name="LinuxBaseLine"; + + }; + diff --git a/stig/linux/config/RHEL79.mof b/stig/linux/config/RHEL79.mof index bde89da..a51450b 100644 --- a/stig/linux/config/RHEL79.mof +++ b/stig/linux/config/RHEL79.mof @@ -1,2118 +1,1829 @@ -/* -@TargetNode='RHEL79' -@GeneratedBy=Microsoft -@GenerationDate=06/30/2022 11:38:45 -@GenerationHost=Microsoft -*/ - -instance of MSFT_nxPackageResource as $MSFT_nxPackageResource1ref -{ -ResourceID = "[nxPackage][V-204442][high][SRG-OS-000095-GPOS-00049]::[RHEL]Baseline"; - Ensure = "Absent"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxPackage.ps1::8::5::nxPackage"; - Name = "rsh-server"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxPackageResource as $MSFT_nxPackageResource2ref -{ -ResourceID = "[nxPackage][V-204443][high][SRG-OS-000095-GPOS-00049]::[RHEL]Baseline"; - Ensure = "Absent"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxPackage.ps1::8::5::nxPackage"; - Name = "ypserv"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxPackageResource as $MSFT_nxPackageResource3ref -{ -ResourceID = "[nxPackage][V-204497][high][SRG-OS-000033-GPOS-00014]::[RHEL]Baseline"; - Ensure = "Present"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxPackage.ps1::8::5::nxPackage"; - Name = "dracut-fips"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxPackageResource as $MSFT_nxPackageResource4ref -{ -ResourceID = "[nxPackage][V-204498][low][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; - Ensure = "Present"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxPackage.ps1::8::5::nxPackage"; - Name = "aide"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxPackageResource as $MSFT_nxPackageResource5ref -{ -ResourceID = "[nxPackage][V-204502][high][SRG-OS-000095-GPOS-00049]::[RHEL]Baseline"; - Ensure = "Absent"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxPackage.ps1::8::5::nxPackage"; - Name = "telnet-server"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxPackageResource as $MSFT_nxPackageResource6ref -{ -ResourceID = "[nxPackage][V-204585][medium][SRG-OS-000423-GPOS-00187]::[RHEL]Baseline"; - Ensure = "Present"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxPackage.ps1::8::5::nxPackage"; - Name = "openssh-server"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxPackageResource as $MSFT_nxPackageResource7ref -{ -ResourceID = "[nxPackage][V-204604.a][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; - Ensure = "Present"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxPackage.ps1::8::5::nxPackage"; - Name = "firewalld"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxPackageResource as $MSFT_nxPackageResource8ref -{ -ResourceID = "[nxPackage][V-204620][high][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; - Ensure = "Absent"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxPackage.ps1::8::5::nxPackage"; - Name = "vsftpd"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxPackageResource as $MSFT_nxPackageResource9ref -{ -ResourceID = "[nxPackage][V-204621][high][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; - Ensure = "Absent"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxPackage.ps1::8::5::nxPackage"; - Name = "tftp-server"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxPackageResource as $MSFT_nxPackageResource10ref -{ -ResourceID = "[nxPackage][V-204631][medium][SRG-OS-000375-GPOS-00160]::[RHEL]Baseline"; - Ensure = "Present"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxPackage.ps1::8::5::nxPackage"; - Name = "pam_pkcs11"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileResource as $MSFT_nxFileResource1ref -{ -ResourceID = "[nxFile][V-204395][medium][SRG-OS-000023-GPOS-00006]::[RHEL]Baseline"; - Contents = "You are accessing a U.S. Government (USG) Information System (IS) that is provided for USG-authorized use only.\n\nBy using this IS (which includes any device attached to this IS), you consent to the following conditions:\n\n-The USG routinely intercepts and monitors communications on this IS for purposes including, but not limited to, penetration testing, COMSEC monitoring, network operations and defense, personnel misconduct (PM), law enforcement (LE), and counterintelligence (CI) investigations.\n\n-At any time, the USG may inspect and seize data stored on this IS.\n\n-Communications using, or data stored on, this IS are not private, are subject to routine monitoring, interception, and search, and may be disclosed or used for any USG-authorized purpose.\n\n-This IS includes security measures (e.g., authentication and access controls) to protect USG interests--not for your personal benefit or privacy.\n\n-Notwithstanding the above, using this IS does not constitute consent to PM, LE or CI investigative searching or monitoring of the content of privileged communications, or work product, related to personal representation or services by attorneys, psychotherapists, or clergy, and their assistants. Such communications and work product are private and confidential. See User Agreement for details."; - DestinationPath = "/etc/issue"; - ModuleName = "nx"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; - ModuleVersion = "1.0"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileResource as $MSFT_nxFileResource2ref -{ -ResourceID = "[nxFile][V-204449.a][medium][SRG-OS-000114-GPOS-00059]::[RHEL]Baseline"; - Contents = ""; - DestinationPath = "/etc/modprobe.d/usb-storage.conf"; - ModuleName = "nx"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; - ModuleVersion = "1.0"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileResource as $MSFT_nxFileResource3ref -{ -ResourceID = "[nxFile][V-204449.b][medium][SRG-OS-000114-GPOS-00059]::[RHEL]Baseline"; - Contents = ""; - DestinationPath = "/etc/modprobe.d/blacklist.conf"; - ModuleName = "nx"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; - ModuleVersion = "1.0"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileResource as $MSFT_nxFileResource4ref -{ -ResourceID = "[nxFile][V-204450.a][medium][SRG-OS-000378-GPOS-00163]::[RHEL]Baseline"; - Contents = ""; - DestinationPath = "/etc/modprobe.d/dccp.conf"; - ModuleName = "nx"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; - ModuleVersion = "1.0"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileResource as $MSFT_nxFileResource5ref -{ -ResourceID = "[nxFile][V-204576][low][SRG-OS-000027-GPOS-00008]::[RHEL]Baseline"; - Contents = "* hard maxlogins 10"; - DestinationPath = "/etc/security/limits.d/204576-powerstig.conf"; - ModuleName = "nx"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; - ModuleVersion = "1.0"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileResource as $MSFT_nxFileResource6ref -{ -ResourceID = "[nxFile][V-204579.a][medium][SRG-OS-000163-GPOS-00072]::[RHEL]Baseline"; - Contents = ""; - DestinationPath = "/etc/profile.d/tmout.sh"; - ModuleName = "nx"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; - ModuleVersion = "1.0"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileResource as $MSFT_nxFileResource7ref -{ -ResourceID = "[nxFile][V-204584][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; - Contents = "kernel.randomize_va_space = 2"; - DestinationPath = "/etc/sysctl.d/204584-powerstig.conf"; - ModuleName = "nx"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; - ModuleVersion = "1.0"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileResource as $MSFT_nxFileResource8ref -{ -ResourceID = "[nxFile][V-204609][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; - Contents = "net.ipv4.conf.all.accept_source_route = 0"; - DestinationPath = "/etc/sysctl.d/204609-powerstig.conf"; - ModuleName = "nx"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; - ModuleVersion = "1.0"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileResource as $MSFT_nxFileResource9ref -{ -ResourceID = "[nxFile][V-204610][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; - Contents = "net.ipv4.conf.all.rp_filter = 1"; - DestinationPath = "/etc/sysctl.d/204610-powerstig.conf"; - ModuleName = "nx"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; - ModuleVersion = "1.0"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileResource as $MSFT_nxFileResource10ref -{ -ResourceID = "[nxFile][V-204611][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; - Contents = "net.ipv4.conf.default.rp_filter = 1"; - DestinationPath = "/etc/sysctl.d/204611-powerstig.conf"; - ModuleName = "nx"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; - ModuleVersion = "1.0"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileResource as $MSFT_nxFileResource11ref -{ -ResourceID = "[nxFile][V-204612][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; - Contents = "net.ipv4.conf.default.accept_source_route = 0"; - DestinationPath = "/etc/sysctl.d/204612-powerstig.conf"; - ModuleName = "nx"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; - ModuleVersion = "1.0"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileResource as $MSFT_nxFileResource12ref -{ -ResourceID = "[nxFile][V-204613][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; - Contents = "net.ipv4.icmp_echo_ignore_broadcasts = 1"; - DestinationPath = "/etc/sysctl.d/204613-powerstig.conf"; - ModuleName = "nx"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; - ModuleVersion = "1.0"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileResource as $MSFT_nxFileResource13ref -{ -ResourceID = "[nxFile][V-204614][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; - Contents = "net.ipv4.conf.default.accept_redirects = 0"; - DestinationPath = "/etc/sysctl.d/204614-powerstig.conf"; - ModuleName = "nx"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; - ModuleVersion = "1.0"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileResource as $MSFT_nxFileResource14ref -{ -ResourceID = "[nxFile][V-204615][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; - Contents = "net.ipv4.conf.all.accept_redirects = 0"; - DestinationPath = "/etc/sysctl.d/204615-powerstig.conf"; - ModuleName = "nx"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; - ModuleVersion = "1.0"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileResource as $MSFT_nxFileResource15ref -{ -ResourceID = "[nxFile][V-204616][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; - Contents = "net.ipv4.conf.default.send_redirects = 0"; - DestinationPath = "/etc/sysctl.d/204616-powerstig.conf"; - ModuleName = "nx"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; - ModuleVersion = "1.0"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileResource as $MSFT_nxFileResource16ref -{ -ResourceID = "[nxFile][V-204617][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; - Contents = "net.ipv4.conf.all.send_redirects = 0"; - DestinationPath = "/etc/sysctl.d/204617-powerstig.conf"; - ModuleName = "nx"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; - ModuleVersion = "1.0"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileResource as $MSFT_nxFileResource17ref -{ -ResourceID = "[nxFile][V-204625][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; - Contents = "net.ipv4.ip_forward = 0"; - DestinationPath = "/etc/sysctl.d/204625-powerstig.conf"; - ModuleName = "nx"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; - ModuleVersion = "1.0"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileResource as $MSFT_nxFileResource18ref -{ -ResourceID = "[nxFile][V-204630][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; - Contents = "net.ipv6.conf.all.accept_source_route = 0"; - DestinationPath = "/etc/sysctl.d/204630-powerstig.conf"; - ModuleName = "nx"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; - ModuleVersion = "1.0"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileResource as $MSFT_nxFileResource19ref -{ -ResourceID = "[nxFile][V-237634.a][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; - Contents = "Defaults !targetpw"; - DestinationPath = "/etc/sudoers.d/237634a-powerstig.conf"; - ModuleName = "nx"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; - ModuleVersion = "1.0"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileResource as $MSFT_nxFileResource20ref -{ -ResourceID = "[nxFile][V-237634.b][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; - Contents = "Defaults !rootpw"; - DestinationPath = "/etc/sudoers.d/237634b-powerstig.conf"; - ModuleName = "nx"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; - ModuleVersion = "1.0"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileResource as $MSFT_nxFileResource21ref -{ -ResourceID = "[nxFile][V-237634.c][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; - Contents = "Defaults !runaspw"; - DestinationPath = "/etc/sudoers.d/237634c-powerstig.conf"; - ModuleName = "nx"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; - ModuleVersion = "1.0"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileResource as $MSFT_nxFileResource22ref -{ -ResourceID = "[nxFile][V-237635][medium][SRG-OS-000373-GPOS-00156]::[RHEL]Baseline"; - Contents = "Defaults timestamp_timeout=0"; - DestinationPath = "/etc/sudoers.d/237635-powerstig.conf"; - ModuleName = "nx"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; - ModuleVersion = "1.0"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileResource as $MSFT_nxFileResource23ref -{ -ResourceID = "[nxFile][V-250314][medium][SRG-OS-000324-GPOS-00125]::[RHEL]Baseline"; - Contents = "%wheel ALL=(ALL) TYPE=sysadm_t ROLE=sysadm_r ALL"; - DestinationPath = "/etc/sudoers.d/250314-powerstig.conf"; - ModuleName = "nx"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; - ModuleVersion = "1.0"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource1ref -{ -ResourceID = "[nxFileLine][V-204405][medium][SRG-OS-000069-GPOS-00037]::[RHEL]Baseline"; - ContainsLine = "password substack system-auth"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/pam.d/passwd"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "^\\s*password(?:\\t*|\\s*)substack\\tsystem-auth\\s*$|^#\\s*password\\s*substack\\s*system-auth.*"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource2ref -{ -ResourceID = "[nxFileLine][V-204407][medium][SRG-OS-000069-GPOS-00037]::[RHEL]Baseline"; - ContainsLine = "ucredit = -1"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/security/pwquality.conf"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "^#\\s*ucredit.*$|^ucredit\\s*=\\s*(?!-1\\b)\\w*$"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource3ref -{ -ResourceID = "[nxFileLine][V-204408][medium][SRG-OS-000070-GPOS-00038]::[RHEL]Baseline"; - ContainsLine = "lcredit = -1"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/security/pwquality.conf"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "^#\\s*lcredit.*$|^lcredit\\s*=\\s*(?!-1\\b)\\w*$"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource4ref -{ -ResourceID = "[nxFileLine][V-204409][medium][SRG-OS-000071-GPOS-00039]::[RHEL]Baseline"; - ContainsLine = "dcredit = -1"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/security/pwquality.conf"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "^#\\s*dcredit.*$|^dcredit\\s*=\\s*(?!-1\\b)\\w*$"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource5ref -{ -ResourceID = "[nxFileLine][V-204410][medium][SRG-OS-000266-GPOS-00101]::[RHEL]Baseline"; - ContainsLine = "ocredit=-1"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/security/pwquality.conf"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "^#\\s*ocredit.*$|^ocredit\\s*=\\s*(?!-1)\\w*$"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource6ref -{ -ResourceID = "[nxFileLine][V-204411][medium][SRG-OS-000072-GPOS-00040]::[RHEL]Baseline"; - ContainsLine = "difok = 8"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/security/pwquality.conf"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*difok\\s*=.*|^\\s*difok\\s*=\\s*(-|)[0-7]$"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource7ref -{ -ResourceID = "[nxFileLine][V-204412][medium][SRG-OS-000072-GPOS-00040]::[RHEL]Baseline"; - ContainsLine = "minclass = 4"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/security/pwquality.conf"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "^#\\s*minclass\\s*=.*|^\\s*minclass\\s*=\\s*(?!\\d{2,})[1-3]"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource8ref -{ -ResourceID = "[nxFileLine][V-204413][medium][SRG-OS-000072-GPOS-00040]::[RHEL]Baseline"; - ContainsLine = "maxrepeat = 3"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/security/pwquality.conf"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "^#\\s*maxrepeat\\s*=.*|^\\s*maxrepeat\\s*=\\s*(?:\\d{2,}|[4-9])"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource9ref -{ -ResourceID = "[nxFileLine][V-204414][medium][SRG-OS-000072-GPOS-00040]::[RHEL]Baseline"; - ContainsLine = "maxclassrepeat = 4"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/security/pwquality.conf"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "^#\\s*maxclassrepeat\\s*=.*|^\\s*maxclassrepeat\\s*=\\s*(?:\\d{2,}|[1-3|5-9])"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource10ref -{ -ResourceID = "[nxFileLine][V-204416][medium][SRG-OS-000073-GPOS-00041]::[RHEL]Baseline"; - ContainsLine = "ENCRYPT_METHOD SHA512"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/login.defs"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*ENCRYPT_METHOD\\s*SHA512"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource11ref -{ -ResourceID = "[nxFileLine][V-204418][medium][SRG-OS-000075-GPOS-00043]::[RHEL]Baseline"; - ContainsLine = "PASS_MIN_DAYS 1"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/login.defs"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "^\\s*PASS_MIN_DAYS\\s*[0]*$|#\\s*PASS_MIN_DAYS.*"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource12ref -{ -ResourceID = "[nxFileLine][V-204420][medium][SRG-OS-000076-GPOS-00044]::[RHEL]Baseline"; - ContainsLine = "PASS_MAX_DAYS 60"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/login.defs"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "^\\s*PASS_MAX_DAYS\\s*([6][1-9]|[7-9][0-9]|\\d{3,})$|#\\s*PASS_MAX_DAYS.*"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource13ref -{ -ResourceID = "[nxFileLine][V-204423][medium][SRG-OS-000078-GPOS-00046]::[RHEL]Baseline"; - ContainsLine = "minlen = 15"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/security/pwquality.conf"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "^\\s*minlen\\s*=\\s*([0-9]|[1][1-4])$|#\\s*minlen.*"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource14ref -{ -ResourceID = "[nxFileLine][V-204425][high][SRG-OS-000106-GPOS-00053]::[RHEL]Baseline"; - ContainsLine = "PermitEmptyPasswords no"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/ssh/sshd_config"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "^#\\s*PermitEmptyPasswords.*$|^PermitEmptyPasswords\\s*(?!no\\b)\\w*$"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource15ref -{ -ResourceID = "[nxFileLine][V-204426][medium][SRG-OS-000118-GPOS-00060]::[RHEL]Baseline"; - ContainsLine = "INACTIVE=35"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/default/useradd"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "^#\\s*INACTIVE\\s*=.*|^\\s*INACTIVE\\s*=\\s*(3[5-9]|[4-9]\\d+|\\d{3,})"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource16ref -{ -ResourceID = "[nxFileLine][V-204431][medium][SRG-OS-000480-GPOS-00226]::[RHEL]Baseline"; - ContainsLine = "FAIL_DELAY 4"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/login.defs"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "^#\\s*FAIL_DELAY.*|^FAIL_DELAY\\s*(?!\\d{2,})[1-3]"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource17ref -{ -ResourceID = "[nxFileLine][V-204434][medium][SRG-OS-000480-GPOS-00229]::[RHEL]Baseline"; - ContainsLine = "PermitUserEnvironment no"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/ssh/sshd_config"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "^#\\s*PermitUserEnvironment.*$|^PermitUserEnvironment\\s*(?!no\\b)\\w*$"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource18ref -{ -ResourceID = "[nxFileLine][V-204435][medium][SRG-OS-000480-GPOS-00229]::[RHEL]Baseline"; - ContainsLine = "HostbasedAuthentication no"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/ssh/sshd_config"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "^#\\s*HostbasedAuthentication.*$|^HostbasedAuthentication\\s*(?!no\\b)\\w*$"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource19ref -{ -ResourceID = "[nxFileLine][V-204447][high][SRG-OS-000366-GPOS-00153]::[RHEL]Baseline"; - ContainsLine = "gpgcheck=1"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/yum.conf"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*gpgcheck\\s*=\\s*1"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource20ref -{ -ResourceID = "[nxFileLine][V-204448][high][SRG-OS-000366-GPOS-00153]::[RHEL]Baseline"; - ContainsLine = "localpkg_gpgcheck=1"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/yum.conf"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*localpkg_gpgcheck\\s*=\\s*1"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource21ref -{ -ResourceID = "[nxFileLine][V-204449.c][medium][SRG-OS-000114-GPOS-00059]::[RHEL]Baseline"; - ContainsLine = "install usb-storage /bin/true"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/modprobe.d/usb-storage.conf"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*install\\s*usb-storage\\s*/bin/true"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource22ref -{ -ResourceID = "[nxFileLine][V-204449.d][medium][SRG-OS-000114-GPOS-00059]::[RHEL]Baseline"; - ContainsLine = "blacklist usb-storage"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/modprobe.d/blacklist.conf"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*blacklist\\s*usb-storage"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource23ref -{ -ResourceID = "[nxFileLine][V-204450.b][medium][SRG-OS-000378-GPOS-00163]::[RHEL]Baseline"; - ContainsLine = "install dccp /bin/true"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/modprobe.d/dccp.conf"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*install\\s*dccp\\s*/bin/true"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource24ref -{ -ResourceID = "[nxFileLine][V-204450.c][medium][SRG-OS-000378-GPOS-00163]::[RHEL]Baseline"; - ContainsLine = "blacklist dccp"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/modprobe.d/blacklist.conf"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*blacklist\\s*dccp"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource25ref -{ -ResourceID = "[nxFileLine][V-204452][low][SRG-OS-000437-GPOS-00194]::[RHEL]Baseline"; - ContainsLine = "clean_requirements_on_remove=1"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/yum.conf"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*clean_requirements_on_remove\\s*=\\s*1"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource26ref -{ -ResourceID = "[nxFileLine][V-204453][medium][SRG-OS-000445-GPOS-00199]::[RHEL]Baseline"; - ContainsLine = "SELINUX=enforcing"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/selinux/config"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "^#\\s*SELINUX.*$|^SELINUX\\s*=\\s*(?!enforcing)\\w*$"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource27ref -{ -ResourceID = "[nxFileLine][V-204454][medium][SRG-OS-000445-GPOS-00199]::[RHEL]Baseline"; - ContainsLine = "SELINUXTYPE=targeted"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/selinux/config"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "^#\\s*SELINUXTYPE.*$|^SELINUXTYPE\\s*=\\s*(?!targeted\\b)\\w*$"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource28ref -{ -ResourceID = "[nxFileLine][V-204457][medium][SRG-OS-000480-GPOS-00228]::[RHEL]Baseline"; - ContainsLine = "UMASK 077"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/login.defs"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "^\\s*UMASK(?!\\s077\\b)\\s*\\d*\\s*$|^#\\s*UMASK.*"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource29ref -{ -ResourceID = "[nxFileLine][V-204466][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; - ContainsLine = "CREATE_HOME yes"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/login.defs"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "^#\\s*CREATE_HOME.*$|^CREATE_HOME\\s*(?!yes\\b)\\w*$|^CREATE_HOME\\t.*"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource30ref -{ -ResourceID = "[nxFileLine][V-204504][medium][SRG-OS-000046-GPOS-00022]::[RHEL]Baseline"; - ContainsLine = "-f 2"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "^#\\s*-f\\s+2|^\\s*-f\\s*1"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileResource as $MSFT_nxFileResource24ref -{ -SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::29::9::nxFile"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - ResourceID = "[nxFile][V-204506.a][medium][SRG-OS-000342-GPOS-00133]::[RHEL]Baseline"; - DestinationPath = "/etc/audisp/plugins.d/au-remote.conf"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource31ref -{ -ResourceID = "[nxFileLine][V-204506.a][medium][SRG-OS-000342-GPOS-00133]::[RHEL]Baseline"; - ContainsLine = "active = yes"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audisp/plugins.d/au-remote.conf"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "\\s*active\\s*=\\s*no|active=yes|#\\s*active\\s*=.*"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource32ref -{ -ResourceID = "[nxFileLine][V-204506.b][medium][SRG-OS-000342-GPOS-00133]::[RHEL]Baseline"; - ContainsLine = "direction = out"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audisp/plugins.d/au-remote.conf"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*direction\\s*=\\s*out"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource33ref -{ -ResourceID = "[nxFileLine][V-204506.c][medium][SRG-OS-000342-GPOS-00133]::[RHEL]Baseline"; - ContainsLine = "path = /sbin/audisp-remote"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audisp/plugins.d/au-remote.conf"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*path\\s*=\\s*/sbin/audisp-remote"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource34ref -{ -ResourceID = "[nxFileLine][V-204506.d][medium][SRG-OS-000342-GPOS-00133]::[RHEL]Baseline"; - ContainsLine = "type = always"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audisp/plugins.d/au-remote.conf"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*type\\s*=\\s*always"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource35ref -{ -ResourceID = "[nxFileLine][V-204507][medium][SRG-OS-000342-GPOS-00133]::[RHEL]Baseline"; - ContainsLine = "overflow_action = syslog"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audisp/audispd.conf"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "^#\\s*overflow_action.*$|^overflow_action\\s*=\\s*(?!syslog$)\\w*$"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource36ref -{ -ResourceID = "[nxFileLine][V-204508][medium][SRG-OS-000342-GPOS-00133]::[RHEL]Baseline"; - ContainsLine = "name_format = hostname"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audisp/audispd.conf"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "^#\\s*name_format.*$|^name_format\\s*=\\s*(?!hostname$)\\w*$"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileResource as $MSFT_nxFileResource25ref -{ -SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::19::9::nxFile"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - ResourceID = "[nxFile][V-204510][medium][SRG-OS-000342-GPOS-00133]::[RHEL]Baseline"; - DestinationPath = "/etc/audisp/audisp-remote.conf"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource37ref -{ -ResourceID = "[nxFileLine][V-204510][medium][SRG-OS-000342-GPOS-00133]::[RHEL]Baseline"; - ContainsLine = "enable_krb5 = yes"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audisp/audisp-remote.conf"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*enable_krb5\\s*=\\s*yes"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource38ref -{ -ResourceID = "[nxFileLine][V-204511][medium][SRG-OS-000342-GPOS-00133]::[RHEL]Baseline"; - ContainsLine = "disk_full_action = single"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audisp/audisp-remote.conf"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "^#\\s*disk_full_action\\s*=.*|^disk_full_action\\s*=\\s*(?!halt\\b|single\\b|syslog\\b)\\w+"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource39ref -{ -ResourceID = "[nxFileLine][V-204512][medium][SRG-OS-000342-GPOS-00133]::[RHEL]Baseline"; - ContainsLine = "network_failure_action = syslog"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audisp/audisp-remote.conf"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "^#\\s*network_failure_action\\s*=.*|^network_failure_action\\s*=\\s*(?!halt\\b|single\\b|syslog\\b)\\w+"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource40ref -{ -ResourceID = "[nxFileLine][V-204514][medium][SRG-OS-000343-GPOS-00134]::[RHEL]Baseline"; - ContainsLine = "space_left_action = email"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/auditd.conf"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "^#\\s*space_left_action.*$|^space_left_action\\s*=\\s*(?!email$)\\w*$"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource41ref -{ -ResourceID = "[nxFileLine][V-204515][medium][SRG-OS-000343-GPOS-00134]::[RHEL]Baseline"; - ContainsLine = "action_mail_acct = root"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/auditd.conf"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "^#\\s*action_mail_acct.*|^action_mail_acct\\s*=\\s*(?!root\\b)\\w+"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource42ref -{ -ResourceID = "[nxFileLine][V-204516.a][medium][SRG-OS-000327-GPOS-00127]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S execve -C uid!=euid -F euid=0 -k setuid"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*execve\\s*-C\\s*uid!\\s*=\\s*euid\\s*-F\\s*euid\\s*=\\s*0\\s*-k\\s*setuid"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource43ref -{ -ResourceID = "[nxFileLine][V-204516.b][medium][SRG-OS-000327-GPOS-00127]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S execve -C uid!=euid -F euid=0 -k setuid"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*execve\\s*-C\\s*uid!\\s*=\\s*euid\\s*-F\\s*euid\\s*=\\s*0\\s*-k\\s*setuid"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource44ref -{ -ResourceID = "[nxFileLine][V-204516.c][medium][SRG-OS-000327-GPOS-00127]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S execve -C gid!=egid -F egid=0 -k setgid"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*execve\\s*-C\\s*gid!\\s*=\\s*egid\\s*-F\\s*egid\\s*=\\s*0\\s*-k\\s*setgid"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource45ref -{ -ResourceID = "[nxFileLine][V-204516.d][medium][SRG-OS-000327-GPOS-00127]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S execve -C gid!=egid -F egid=0 -k setgid"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*execve\\s*-C\\s*gid!\\s*=\\s*egid\\s*-F\\s*egid\\s*=\\s*0\\s*-k\\s*setgid"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource46ref -{ -ResourceID = "[nxFileLine][V-204517.a][medium][SRG-OS-000064-GPOS-00033]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S chown,fchown,fchownat,lchown -F auid>=1000 -F auid!=unset -k perm_mod"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*chown,fchown,fchownat,lchown\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*perm_mod"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource47ref -{ -ResourceID = "[nxFileLine][V-204517.b][medium][SRG-OS-000064-GPOS-00033]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S chown,fchown,fchownat,lchown -F auid>=1000 -F auid!=unset -k perm_mod"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*chown,fchown,fchownat,lchown\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*perm_mod"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource48ref -{ -ResourceID = "[nxFileLine][V-204521.a][medium][SRG-OS-000458-GPOS-00203]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S chmod,fchmod,fchmodat -F auid>=1000 -F auid!=unset -k perm_mod"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*chmod,fchmod,fchmodat\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*perm_mod"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource49ref -{ -ResourceID = "[nxFileLine][V-204521.b][medium][SRG-OS-000458-GPOS-00203]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S chmod,fchmod,fchmodat -F auid>=1000 -F auid!=unset -k perm_mod"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*chmod,fchmod,fchmodat\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*perm_mod"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource50ref -{ -ResourceID = "[nxFileLine][V-204524.a][medium][SRG-OS-000458-GPOS-00203]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S setxattr,fsetxattr,lsetxattr,removexattr,fremovexattr,lremovexattr -F auid>=1000 -F auid!=unset -k perm_mod"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*setxattr,fsetxattr,lsetxattr,removexattr,fremovexattr,lremovexattr\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*perm_mod"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource51ref -{ -ResourceID = "[nxFileLine][V-204524.b][medium][SRG-OS-000458-GPOS-00203]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S setxattr,fsetxattr,lsetxattr,removexattr,fremovexattr,lremovexattr -F auid>=1000 -F auid!=unset -k perm_mod"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*setxattr,fsetxattr,lsetxattr,removexattr,fremovexattr,lremovexattr\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*perm_mod"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource52ref -{ -ResourceID = "[nxFileLine][V-204531.a][medium][SRG-OS-000064-GPOS-00033]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S creat,open,openat,open_by_handle_at,truncate,ftruncate -F exit=-EPERM -F auid>=1000 -F auid!=unset -k access"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*creat,open,openat,open_by_handle_at,truncate,ftruncate\\s*-F\\s*exit\\s*=\\s*-EPERM\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*access"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource53ref -{ -ResourceID = "[nxFileLine][V-204531.b][medium][SRG-OS-000064-GPOS-00033]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S creat,open,openat,open_by_handle_at,truncate,ftruncate -F exit=-EACCES -F auid>=1000 -F auid!=unset -k access"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*creat,open,openat,open_by_handle_at,truncate,ftruncate\\s*-F\\s*exit\\s*=\\s*-EACCES\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*access"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource54ref -{ -ResourceID = "[nxFileLine][V-204531.c][medium][SRG-OS-000064-GPOS-00033]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S creat,open,openat,open_by_handle_at,truncate,ftruncate -F exit=-EPERM -F auid>=1000 -F auid!=unset -k access"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*creat,open,openat,open_by_handle_at,truncate,ftruncate\\s*-F\\s*exit\\s*=\\s*-EPERM\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*access"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource55ref -{ -ResourceID = "[nxFileLine][V-204531.d][medium][SRG-OS-000064-GPOS-00033]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S creat,open,openat,open_by_handle_at,truncate,ftruncate -F exit=-EACCES -F auid>=1000 -F auid!=unset -k access"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*creat,open,openat,open_by_handle_at,truncate,ftruncate\\s*-F\\s*exit\\s*=\\s*-EACCES\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*access"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource56ref -{ -ResourceID = "[nxFileLine][V-204536][medium][SRG-OS-000392-GPOS-00172]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F path=/usr/sbin/semanage -F auid>=1000 -F auid!=unset -k privileged-priv_change"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/sbin/semanage\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-priv_change"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource57ref -{ -ResourceID = "[nxFileLine][V-204537][medium][SRG-OS-000392-GPOS-00172]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F path=/usr/sbin/setsebool -F auid>=1000 -F auid!=unset -k privileged-priv_change"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/sbin/setsebool\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-priv_change"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource58ref -{ -ResourceID = "[nxFileLine][V-204538][medium][SRG-OS-000392-GPOS-00172]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F path=/usr/bin/chcon -F auid>=1000 -F auid!=unset -k privileged-priv_change"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/bin/chcon\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-priv_change"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource59ref -{ -ResourceID = "[nxFileLine][V-204539][medium][SRG-OS-000392-GPOS-00172]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F path=/usr/sbin/setfiles -F auid>=1000 -F auid!=unset -k privileged-priv_change"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/sbin/setfiles\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-priv_change"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource60ref -{ -ResourceID = "[nxFileLine][V-204540][medium][SRG-OS-000392-GPOS-00172]::[RHEL]Baseline"; - ContainsLine = "-w /var/run/faillock -p wa -k logins"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-w\\s*/var/run/faillock\\s*-p\\s*wa\\s*-k\\s*logins"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource61ref -{ -ResourceID = "[nxFileLine][V-204541][medium][SRG-OS-000392-GPOS-00172]::[RHEL]Baseline"; - ContainsLine = "-w /var/log/lastlog -p wa -k logins"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-w\\s*/var/log/lastlog\\s*-p\\s*wa\\s*-k\\s*logins"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource62ref -{ -ResourceID = "[nxFileLine][V-204542][medium][SRG-OS-000042-GPOS-00020]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F path=/usr/bin/passwd -F auid>=1000 -F auid!=unset -k privileged-passwd"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/bin/passwd\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-passwd"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource63ref -{ -ResourceID = "[nxFileLine][V-204543][medium][SRG-OS-000042-GPOS-00020]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F path=/usr/sbin/unix_chkpwd -F auid>=1000 -F auid!=unset -k privileged-passwd"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/sbin/unix_chkpwd\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-passwd"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource64ref -{ -ResourceID = "[nxFileLine][V-204544][medium][SRG-OS-000042-GPOS-00020]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F path=/usr/bin/gpasswd -F auid>=1000 -F auid!=unset -k privileged-passwd"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/bin/gpasswd\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-passwd"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource65ref -{ -ResourceID = "[nxFileLine][V-204545][medium][SRG-OS-000042-GPOS-00020]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F path=/usr/bin/chage -F auid>=1000 -F auid!=unset -k privileged-passwd"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/bin/chage\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-passwd"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource66ref -{ -ResourceID = "[nxFileLine][V-204546][medium][SRG-OS-000042-GPOS-00020]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F path=/usr/sbin/userhelper -F auid>=1000 -F auid!=unset -k privileged-passwd"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/sbin/userhelper\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-passwd"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource67ref -{ -ResourceID = "[nxFileLine][V-204547][medium][SRG-OS-000037-GPOS-00015]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F path=/usr/bin/su -F auid>=1000 -F auid!=unset -k privileged-priv_change"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/bin/su\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-priv_change"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource68ref -{ -ResourceID = "[nxFileLine][V-204548][medium][SRG-OS-000037-GPOS-00015]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F path=/usr/bin/sudo -F auid>=1000 -F auid!=unset -k privileged-priv_change"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/bin/sudo\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-priv_change"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource69ref -{ -ResourceID = "[nxFileLine][V-204549.a][medium][SRG-OS-000037-GPOS-00015]::[RHEL]Baseline"; - ContainsLine = "-w /etc/sudoers -p wa -k privileged-actions"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-w /etc/sudoers -p wa -k privileged-actions"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource70ref -{ -ResourceID = "[nxFileLine][V-204549.b][medium][SRG-OS-000037-GPOS-00015]::[RHEL]Baseline"; - ContainsLine = "-w /etc/sudoers.d/ -p wa -k privileged-actions"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-w /etc/sudoers.d/ -p wa -k privileged-actions"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource71ref -{ -ResourceID = "[nxFileLine][V-204550][medium][SRG-OS-000037-GPOS-00015]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F path=/usr/bin/newgrp -F auid>=1000 -F auid!=unset -k privileged-priv_change"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/bin/newgrp\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-priv_change"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource72ref -{ -ResourceID = "[nxFileLine][V-204551][medium][SRG-OS-000037-GPOS-00015]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F path=/usr/bin/chsh -F auid>=1000 -F auid!=unset -k privileged-priv_change"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/bin/chsh\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-priv_change"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource73ref -{ -ResourceID = "[nxFileLine][V-204552.a][medium][SRG-OS-000042-GPOS-00020]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S mount -F auid>=1000 -F auid!=unset -k privileged-mount"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*mount\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-mount"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource74ref -{ -ResourceID = "[nxFileLine][V-204552.b][medium][SRG-OS-000042-GPOS-00020]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S mount -F auid>=1000 -F auid!=unset -k privileged-mount"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*mount\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-mount"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource75ref -{ -ResourceID = "[nxFileLine][V-204552.c][medium][SRG-OS-000042-GPOS-00020]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F path=/usr/bin/mount -F auid>=1000 -F auid!=unset -k privileged-mount"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/bin/mount\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-mount"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource76ref -{ -ResourceID = "[nxFileLine][V-204553][medium][SRG-OS-000042-GPOS-00020]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F path=/usr/bin/umount -F auid>=1000 -F auid!=unset -k privileged-mount"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/bin/umount\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-mount"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource77ref -{ -ResourceID = "[nxFileLine][V-204554][medium][SRG-OS-000042-GPOS-00020]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F path=/usr/sbin/postdrop -F auid>=1000 -F auid!=unset -k privileged-postfix"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/sbin/postdrop\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-postfix"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource78ref -{ -ResourceID = "[nxFileLine][V-204555][medium][SRG-OS-000042-GPOS-00020]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F path=/usr/sbin/postqueue -F auid>=1000 -F auid!=unset -k privileged-postfix"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/sbin/postqueue\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-postfix"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource79ref -{ -ResourceID = "[nxFileLine][V-204556][medium][SRG-OS-000042-GPOS-00020]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F path=/usr/libexec/openssh/ssh-keysign -F auid>=1000 -F auid!=unset -k privileged-ssh"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/libexec/openssh/ssh-keysign\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-ssh"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource80ref -{ -ResourceID = "[nxFileLine][V-204557][medium][SRG-OS-000042-GPOS-00020]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F path=/usr/bin/crontab -F auid>=1000 -F auid!=unset -k privileged-cron"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/bin/crontab\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-cron"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource81ref -{ -ResourceID = "[nxFileLine][V-204558][medium][SRG-OS-000471-GPOS-00215]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F path=/usr/sbin/pam_timestamp_check -F auid>=1000 -F auid!=unset -k privileged-pam"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/sbin/pam_timestamp_check\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-pam"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource82ref -{ -ResourceID = "[nxFileLine][V-204559.a][medium][SRG-OS-000471-GPOS-00216]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S create_module -k module-change"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*create_module\\s*-k\\s*module-change"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource83ref -{ -ResourceID = "[nxFileLine][V-204559.b][medium][SRG-OS-000471-GPOS-00216]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S create_module -k module-change"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*create_module\\s*-k\\s*module-change"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource84ref -{ -ResourceID = "[nxFileLine][V-204560.a][medium][SRG-OS-000471-GPOS-00216]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S init_module,finit_module -k modulechange"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*init_module,finit_module\\s*-k\\s*modulechange"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource85ref -{ -ResourceID = "[nxFileLine][V-204560.b][medium][SRG-OS-000471-GPOS-00216]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S init_module,finit_module -k modulechange"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*init_module,finit_module\\s*-k\\s*modulechange"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource86ref -{ -ResourceID = "[nxFileLine][V-204562.a][medium][SRG-OS-000471-GPOS-00216]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S delete_module -k module-change"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*delete_module\\s*-k\\s*module-change"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource87ref -{ -ResourceID = "[nxFileLine][V-204562.b][medium][SRG-OS-000471-GPOS-00216]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S delete_module -k module-change"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*delete_module\\s*-k\\s*module-change"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource88ref -{ -ResourceID = "[nxFileLine][V-204563][medium][SRG-OS-000471-GPOS-00216]::[RHEL]Baseline"; - ContainsLine = "-w /usr/bin/kmod -p x -F auid!=unset -k module-change"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-w\\s*/usr/bin/kmod\\s*-p\\s*x\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*module-change"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource89ref -{ -ResourceID = "[nxFileLine][V-204564][medium][SRG-OS-000004-GPOS-00004]::[RHEL]Baseline"; - ContainsLine = "-w /etc/passwd -p wa -k identity"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-w\\s*/etc/passwd\\s*-p\\s*wa\\s*-k\\s*identity"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource90ref -{ -ResourceID = "[nxFileLine][V-204565][medium][SRG-OS-000004-GPOS-00004]::[RHEL]Baseline"; - ContainsLine = "-w /etc/group -p wa -k identity"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-w\\s*/etc/group\\s*-p\\s*wa\\s*-k\\s*identity"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource91ref -{ -ResourceID = "[nxFileLine][V-204566][medium][SRG-OS-000004-GPOS-00004]::[RHEL]Baseline"; - ContainsLine = "-w /etc/gshadow -p wa -k identity"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-w\\s*/etc/gshadow\\s*-p\\s*wa\\s*-k\\s*identity"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource92ref -{ -ResourceID = "[nxFileLine][V-204567][medium][SRG-OS-000004-GPOS-00004]::[RHEL]Baseline"; - ContainsLine = "-w /etc/shadow -p wa -k identity"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-w\\s*/etc/shadow\\s*-p\\s*wa\\s*-k\\s*identity"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource93ref -{ -ResourceID = "[nxFileLine][V-204568][medium][SRG-OS-000004-GPOS-00004]::[RHEL]Baseline"; - ContainsLine = "-w /etc/security/opasswd -p wa -k identity"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-w\\s*/etc/security/opasswd\\s*-p\\s*wa\\s*-k\\s*identity"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource94ref -{ -ResourceID = "[nxFileLine][V-204572.a][medium][SRG-OS-000466-GPOS-00210]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S unlink,unlinkat,rename,renameat,rmdir -F auid>=1000 -F auid!=unset -k delete"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*unlink,unlinkat,rename,renameat,rmdir\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*delete"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource95ref -{ -ResourceID = "[nxFileLine][V-204572.b][medium][SRG-OS-000466-GPOS-00210]::[RHEL]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S unlink,unlinkat,rename,renameat,rmdir -F auid>=1000 -F auid!=unset -k delete"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*unlink,unlinkat,rename,renameat,rmdir\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*delete"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource96ref -{ -ResourceID = "[nxFileLine][V-204578][medium][SRG-OS-000033-GPOS-00014]::[RHEL]Baseline"; - ContainsLine = "Ciphers aes256-ctr,aes192-ctr,aes128-ctr"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/ssh/sshd_config"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "^#\\s*Ciphers.*|^\\s*Ciphers\\s*aes128-ctr.*|^\\s*Ciphers\\s*aes192-ctr.*"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource97ref -{ -ResourceID = "[nxFileLine][V-204579.b][medium][SRG-OS-000163-GPOS-00072]::[RHEL]Baseline"; - ContainsLine = "declare -xr TMOUT=900"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/profile.d/tmout.sh"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "^\\s*TMOUT\\s*=\\s*[0-8]?[0-9]?[0-9]?$|^#\\s*TMOUT.*"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource98ref -{ -ResourceID = "[nxFileLine][V-204580][medium][SRG-OS-000023-GPOS-00006]::[RHEL]Baseline"; - ContainsLine = "banner /etc/issue"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/ssh/sshd_config"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*banner\\s*/etc/issue"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource99ref -{ -ResourceID = "[nxFileLine][V-204587][medium][SRG-OS-000163-GPOS-00072]::[RHEL]Baseline"; - ContainsLine = "ClientAliveInterval 600"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/ssh/sshd_config"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "^\\s*ClientAliveInterval\\s*[0-5]?[0-9]?[0-9]?\\s*$|^#\\s*ClientAliveInterval.*|^\\s*ClientAliveInterval\\s*$"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource100ref -{ -ResourceID = "[nxFileLine][V-204588][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; - ContainsLine = "RhostsRSAAuthentication no"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/ssh/sshd_config"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "^#\\s*RhostsRSAAuthentication.*$|^RhostsRSAAuthentication\\s*(?!no\\b)\\w*$"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource101ref -{ -ResourceID = "[nxFileLine][V-204589][medium][SRG-OS-000163-GPOS-00072]::[RHEL]Baseline"; - ContainsLine = "ClientAliveCountMax 0"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/ssh/sshd_config"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "^#\\s*ClientAliveCountMax.*$|^ClientAliveCountMax\\s*(?!0\\b)\\w*$"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource102ref -{ -ResourceID = "[nxFileLine][V-204590][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; - ContainsLine = "IgnoreRhosts yes"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/ssh/sshd_config"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "^#\\s*IgnoreRhosts.*$|^IgnoreRhosts\\s*(?!yes\\b)\\w*$"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource103ref -{ -ResourceID = "[nxFileLine][V-204591][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; - ContainsLine = "PrintLastLog yes"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/ssh/sshd_config"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "^#\\s*PrintLastLog.*$|^PrintLastLog\\s*(?!yes\\b)\\w*$"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource104ref -{ -ResourceID = "[nxFileLine][V-204592][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; - ContainsLine = "PermitRootLogin no"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/ssh/sshd_config"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "^#\\s*PermitRootLogin.*$|^PermitRootLogin\\s*(?!no\\b)\\w*$"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource105ref -{ -ResourceID = "[nxFileLine][V-204593][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; - ContainsLine = "IgnoreUserKnownHosts yes"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/ssh/sshd_config"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "^#\\s*IgnoreUserKnownHosts.*$|^IgnoreUserKnownHosts\\s*(?!yes\\b)\\w*$"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource106ref -{ -ResourceID = "[nxFileLine][V-204594][high][SRG-OS-000074-GPOS-00042]::[RHEL]Baseline"; - ContainsLine = "Protocol 2"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/ssh/sshd_config"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "^#\\s*Protocol.*$|^Protocol\\s*(?!2\\b)\\w*$"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource107ref -{ -ResourceID = "[nxFileLine][V-204595][medium][SRG-OS-000250-GPOS-00093]::[RHEL]Baseline"; - ContainsLine = "MACs hmac-sha2-512,hmac-sha2-256"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/ssh/sshd_config"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*MACs.*|\\s*MACs\\s*hmac-(?!sha2-512).*"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource108ref -{ -ResourceID = "[nxFileLine][V-204598][medium][SRG-OS-000364-GPOS-00151]::[RHEL]Baseline"; - ContainsLine = "GSSAPIAuthentication no"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/ssh/sshd_config"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "^#\\s*GSSAPIAuthentication.*$|^GSSAPIAuthentication\\s*(?!no\\b)\\w*$"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource109ref -{ -ResourceID = "[nxFileLine][V-204599][medium][SRG-OS-000364-GPOS-00151]::[RHEL]Baseline"; - ContainsLine = "KerberosAuthentication no"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/ssh/sshd_config"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "^#\\s*KerberosAuthentication.*$|^KerberosAuthentication\\s*(?!no\\b)\\w*$"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource110ref -{ -ResourceID = "[nxFileLine][V-204600][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; - ContainsLine = "StrictModes yes"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/ssh/sshd_config"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "^#\\s*StrictModes.*$|^StrictModes\\s*(?!yes\\b)\\w*$"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource111ref -{ -ResourceID = "[nxFileLine][V-204601][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; - ContainsLine = "UsePrivilegeSeparation sandbox"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/ssh/sshd_config"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "^#\\s*UsePrivilegeSeparation.*$|^UsePrivilegeSeparation\\s*(?!sandbox\\b)\\w*$"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource112ref -{ -ResourceID = "[nxFileLine][V-204602][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; - ContainsLine = "Compression delayed"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/ssh/sshd_config"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "^#\\s*Compression.*$|^Compression\\s*(?!delayed\\b)\\w*$"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource113ref -{ -ResourceID = "[nxFileLine][V-204622][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; - ContainsLine = "X11Forwarding no"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/ssh/sshd_config"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "^#\\s*X11Forwarding.*$|^X11Forwarding\\s*(?!no\\b)\\w*$"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource114ref -{ -ResourceID = "[nxFileLine][V-233307][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; - ContainsLine = "X11UseLocalhost yes"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/ssh/sshd_config"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*X11UseLocalhost\\s*yes"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxServiceResource as $MSFT_nxServiceResource1ref -{ -ResourceID = "[nxService][V-204451][medium][SRG-OS-000114-GPOS-00059]::[RHEL]Baseline"; - Controller = "systemd"; - Enabled = False; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxService.ps1::13::9::nxService"; - Name = "autofs"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxServiceResource as $MSFT_nxServiceResource2ref -{ -ResourceID = "[nxService][V-204492][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; - Controller = "systemd"; - Enabled = False; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxService.ps1::13::9::nxService"; - Name = "kdump"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxServiceResource as $MSFT_nxServiceResource3ref -{ -ResourceID = "[nxService][V-204503][medium][SRG-OS-000038-GPOS-00016]::[RHEL]Baseline"; - Controller = "systemd"; - State = "Running"; - Enabled = True; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxService.ps1::22::9::nxService"; - Name = "auditd"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxServiceResource as $MSFT_nxServiceResource4ref -{ -ResourceID = "[nxService][V-204586][medium][SRG-OS-000423-GPOS-00187]::[RHEL]Baseline"; - Controller = "systemd"; - State = "Running"; - Enabled = True; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxService.ps1::22::9::nxService"; - Name = "sshd"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxServiceResource as $MSFT_nxServiceResource5ref -{ -ResourceID = "[nxService][V-204604.b][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; - Controller = "systemd"; - State = "Running"; - Enabled = True; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxService.ps1::22::9::nxService"; - Name = "firewalld"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxScriptResource as $MSFT_nxScriptResource1ref -{ -ResourceID = "[nxScript][V-204399.b][medium][[Skip] SRG-OS-000029-GPOS-00010]::[RHEL]Baseline"; - GetScript = "#!/bin/bash\necho [V-204399.b][medium][[Skip] SRG-OS-000029-GPOS-00010]"; - TestScript = "#!/bin/bash\nexit 0"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxScript.skip.ps1::10::5::nxScript"; - SetScript = "#!/bin/bash"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxScriptResource as $MSFT_nxScriptResource2ref -{ -ResourceID = "[nxScript][V-204400][medium][[Skip] SRG-OS-000029-GPOS-00010]::[RHEL]Baseline"; - GetScript = "#!/bin/bash\necho [V-204400][medium][[Skip] SRG-OS-000029-GPOS-00010]"; - TestScript = "#!/bin/bash\nexit 0"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxScript.skip.ps1::10::5::nxScript"; - SetScript = "#!/bin/bash"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxScriptResource as $MSFT_nxScriptResource3ref -{ -ResourceID = "[nxScript][V-204403][medium][[Skip] SRG-OS-000029-GPOS-00010]::[RHEL]Baseline"; - GetScript = "#!/bin/bash\necho [V-204403][medium][[Skip] SRG-OS-000029-GPOS-00010]"; - TestScript = "#!/bin/bash\nexit 0"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxScript.skip.ps1::10::5::nxScript"; - SetScript = "#!/bin/bash"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxScriptResource as $MSFT_nxScriptResource4ref -{ -ResourceID = "[nxScript][V-204509][medium][[Skip] SRG-OS-000342-GPOS-00133]::[RHEL]Baseline"; - GetScript = "#!/bin/bash\necho [V-204509][medium][[Skip] SRG-OS-000342-GPOS-00133]"; - TestScript = "#!/bin/bash\nexit 0"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxScript.skip.ps1::10::5::nxScript"; - SetScript = "#!/bin/bash"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxScriptResource as $MSFT_nxScriptResource5ref -{ -ResourceID = "[nxScript][V-204513][medium][[Skip] SRG-OS-000343-GPOS-00134]::[RHEL]Baseline"; - GetScript = "#!/bin/bash\necho [V-204513][medium][[Skip] SRG-OS-000343-GPOS-00134]"; - TestScript = "#!/bin/bash\nexit 0"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxScript.skip.ps1::10::5::nxScript"; - SetScript = "#!/bin/bash"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxScriptResource as $MSFT_nxScriptResource6ref -{ -ResourceID = "[nxScript][V-204623][medium][[Skip] SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; - GetScript = "#!/bin/bash\necho [V-204623][medium][[Skip] SRG-OS-000480-GPOS-00227]"; - TestScript = "#!/bin/bash\nexit 0"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxScript.skip.ps1::10::5::nxScript"; - SetScript = "#!/bin/bash"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxScriptResource as $MSFT_nxScriptResource7ref -{ -ResourceID = "[nxScript][V-244557][medium][[Skip] SRG-OS-000080-GPOS-00048]::[RHEL]Baseline"; - GetScript = "#!/bin/bash\necho [V-244557][medium][[Skip] SRG-OS-000080-GPOS-00048]"; - TestScript = "#!/bin/bash\nexit 0"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxScript.skip.ps1::10::5::nxScript"; - SetScript = "#!/bin/bash"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxScriptResource as $MSFT_nxScriptResource8ref -{ -ResourceID = "[nxScript][V-244558][medium][[Skip] SRG-OS-000080-GPOS-00048]::[RHEL]Baseline"; - GetScript = "#!/bin/bash\necho [V-244558][medium][[Skip] SRG-OS-000080-GPOS-00048]"; - TestScript = "#!/bin/bash\nexit 0"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxScript.skip.ps1::10::5::nxScript"; - SetScript = "#!/bin/bash"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxScriptResource as $MSFT_nxScriptResource9ref -{ -ResourceID = "[nxScript][V-204399.a][medium][[Skip] SRG-OS-000029-GPOS-00010]::[RHEL]Baseline"; - GetScript = "#!/bin/bash\necho [V-204399.a][medium][[Skip] SRG-OS-000029-GPOS-00010]"; - TestScript = "#!/bin/bash\nexit 0"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxScript.skip.ps1::10::5::nxScript"; - SetScript = "#!/bin/bash"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of OMI_ConfigurationDocument - - - { - Version="2.0.0"; - - - MinimumCompatibleVersion = "1.0.0"; - - - CompatibleVersionAdditionalProperties= {"Omi_BaseResource:ConfigurationName"}; - - - Author="Microsoft"; - - - GenerationDate="06/30/2022 11:38:45"; - - - GenerationHost="Microsoft"; - - - Name="LinuxBaseLine"; - - - }; +/* +@TargetNode='RHEL79' +@GeneratedBy=Microsoft +@GenerationDate=03/09/2023 14:17:33 +@GenerationHost=Microsoft +*/ + +instance of MSFT_nxPackageResource as $MSFT_nxPackageResource1ref +{ +ResourceID = "[nxPackage][V-204442][high][SRG-OS-000095-GPOS-00049]::[RHEL]Baseline"; + Ensure = "Absent"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxPackage.ps1::8::5::nxPackage"; + Name = "rsh-server"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxPackageResource as $MSFT_nxPackageResource2ref +{ +ResourceID = "[nxPackage][V-204443][high][SRG-OS-000095-GPOS-00049]::[RHEL]Baseline"; + Ensure = "Absent"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxPackage.ps1::8::5::nxPackage"; + Name = "ypserv"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxPackageResource as $MSFT_nxPackageResource3ref +{ +ResourceID = "[nxPackage][V-204497][high][SRG-OS-000033-GPOS-00014]::[RHEL]Baseline"; + Ensure = "Present"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxPackage.ps1::8::5::nxPackage"; + Name = "dracut-fips"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxPackageResource as $MSFT_nxPackageResource4ref +{ +ResourceID = "[nxPackage][V-204498][low][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; + Ensure = "Present"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxPackage.ps1::8::5::nxPackage"; + Name = "aide"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxPackageResource as $MSFT_nxPackageResource5ref +{ +ResourceID = "[nxPackage][V-204502][high][SRG-OS-000095-GPOS-00049]::[RHEL]Baseline"; + Ensure = "Absent"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxPackage.ps1::8::5::nxPackage"; + Name = "telnet-server"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxPackageResource as $MSFT_nxPackageResource6ref +{ +ResourceID = "[nxPackage][V-204585][medium][SRG-OS-000423-GPOS-00187]::[RHEL]Baseline"; + Ensure = "Present"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxPackage.ps1::8::5::nxPackage"; + Name = "openssh-server"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxPackageResource as $MSFT_nxPackageResource7ref +{ +ResourceID = "[nxPackage][V-204604.a][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; + Ensure = "Present"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxPackage.ps1::8::5::nxPackage"; + Name = "firewalld"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxPackageResource as $MSFT_nxPackageResource8ref +{ +ResourceID = "[nxPackage][V-204620][high][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; + Ensure = "Absent"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxPackage.ps1::8::5::nxPackage"; + Name = "vsftpd"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxPackageResource as $MSFT_nxPackageResource9ref +{ +ResourceID = "[nxPackage][V-204621][high][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; + Ensure = "Absent"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxPackage.ps1::8::5::nxPackage"; + Name = "tftp-server"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxPackageResource as $MSFT_nxPackageResource10ref +{ +ResourceID = "[nxPackage][V-204631][medium][SRG-OS-000375-GPOS-00160]::[RHEL]Baseline"; + Ensure = "Present"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxPackage.ps1::8::5::nxPackage"; + Name = "pam_pkcs11"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileResource as $MSFT_nxFileResource1ref +{ +ResourceID = "[nxFile][V-204395][medium][SRG-OS-000023-GPOS-00006]::[RHEL]Baseline"; + Contents = "You are accessing a U.S. Government (USG) Information System (IS) that is provided for USG-authorized use only.\n\nBy using this IS (which includes any device attached to this IS), you consent to the following conditions:\n\n-The USG routinely intercepts and monitors communications on this IS for purposes including, but not limited to, penetration testing, COMSEC monitoring, network operations and defense, personnel misconduct (PM), law enforcement (LE), and counterintelligence (CI) investigations.\n\n-At any time, the USG may inspect and seize data stored on this IS.\n\n-Communications using, or data stored on, this IS are not private, are subject to routine monitoring, interception, and search, and may be disclosed or used for any USG-authorized purpose.\n\n-This IS includes security measures (e.g., authentication and access controls) to protect USG interests--not for your personal benefit or privacy.\n\n-Notwithstanding the above, using this IS does not constitute consent to PM, LE or CI investigative searching or monitoring of the content of privileged communications, or work product, related to personal representation or services by attorneys, psychotherapists, or clergy, and their assistants. Such communications and work product are private and confidential. See User Agreement for details."; + DestinationPath = "/etc/issue"; + ModuleName = "nx"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; + ModuleVersion = "1.0"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileResource as $MSFT_nxFileResource2ref +{ +ResourceID = "[nxFile][V-204449.a][medium][SRG-OS-000114-GPOS-00059]::[RHEL]Baseline"; + Contents = ""; + DestinationPath = "/etc/modprobe.d/usb-storage.conf"; + ModuleName = "nx"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; + ModuleVersion = "1.0"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileResource as $MSFT_nxFileResource3ref +{ +ResourceID = "[nxFile][V-204449.b][medium][SRG-OS-000114-GPOS-00059]::[RHEL]Baseline"; + Contents = ""; + DestinationPath = "/etc/modprobe.d/blacklist.conf"; + ModuleName = "nx"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; + ModuleVersion = "1.0"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileResource as $MSFT_nxFileResource4ref +{ +ResourceID = "[nxFile][V-204450.a][medium][SRG-OS-000378-GPOS-00163]::[RHEL]Baseline"; + Contents = ""; + DestinationPath = "/etc/modprobe.d/dccp.conf"; + ModuleName = "nx"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; + ModuleVersion = "1.0"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileResource as $MSFT_nxFileResource5ref +{ +ResourceID = "[nxFile][V-204576][low][SRG-OS-000027-GPOS-00008]::[RHEL]Baseline"; + Contents = "* hard maxlogins 10"; + DestinationPath = "/etc/security/limits.d/204576-powerstig.conf"; + ModuleName = "nx"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; + ModuleVersion = "1.0"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileResource as $MSFT_nxFileResource6ref +{ +ResourceID = "[nxFile][V-204579.a][medium][SRG-OS-000163-GPOS-00072]::[RHEL]Baseline"; + Contents = ""; + DestinationPath = "/etc/profile.d/tmout.sh"; + ModuleName = "nx"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; + ModuleVersion = "1.0"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileResource as $MSFT_nxFileResource7ref +{ +ResourceID = "[nxFile][V-204584][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; + Contents = "kernel.randomize_va_space = 2"; + DestinationPath = "/etc/sysctl.d/204584-powerstig.conf"; + ModuleName = "nx"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; + ModuleVersion = "1.0"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileResource as $MSFT_nxFileResource8ref +{ +ResourceID = "[nxFile][V-204609][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; + Contents = "net.ipv4.conf.all.accept_source_route = 0"; + DestinationPath = "/etc/sysctl.d/204609-powerstig.conf"; + ModuleName = "nx"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; + ModuleVersion = "1.0"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileResource as $MSFT_nxFileResource9ref +{ +ResourceID = "[nxFile][V-204610][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; + Contents = "net.ipv4.conf.all.rp_filter = 1"; + DestinationPath = "/etc/sysctl.d/204610-powerstig.conf"; + ModuleName = "nx"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; + ModuleVersion = "1.0"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileResource as $MSFT_nxFileResource10ref +{ +ResourceID = "[nxFile][V-204611][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; + Contents = "net.ipv4.conf.default.rp_filter = 1"; + DestinationPath = "/etc/sysctl.d/204611-powerstig.conf"; + ModuleName = "nx"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; + ModuleVersion = "1.0"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileResource as $MSFT_nxFileResource11ref +{ +ResourceID = "[nxFile][V-204612][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; + Contents = "net.ipv4.conf.default.accept_source_route = 0"; + DestinationPath = "/etc/sysctl.d/204612-powerstig.conf"; + ModuleName = "nx"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; + ModuleVersion = "1.0"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileResource as $MSFT_nxFileResource12ref +{ +ResourceID = "[nxFile][V-204613][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; + Contents = "net.ipv4.icmp_echo_ignore_broadcasts = 1"; + DestinationPath = "/etc/sysctl.d/204613-powerstig.conf"; + ModuleName = "nx"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; + ModuleVersion = "1.0"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileResource as $MSFT_nxFileResource13ref +{ +ResourceID = "[nxFile][V-204614][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; + Contents = "net.ipv4.conf.default.accept_redirects = 0"; + DestinationPath = "/etc/sysctl.d/204614-powerstig.conf"; + ModuleName = "nx"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; + ModuleVersion = "1.0"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileResource as $MSFT_nxFileResource14ref +{ +ResourceID = "[nxFile][V-204615][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; + Contents = "net.ipv4.conf.all.accept_redirects = 0"; + DestinationPath = "/etc/sysctl.d/204615-powerstig.conf"; + ModuleName = "nx"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; + ModuleVersion = "1.0"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileResource as $MSFT_nxFileResource15ref +{ +ResourceID = "[nxFile][V-204616][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; + Contents = "net.ipv4.conf.default.send_redirects = 0"; + DestinationPath = "/etc/sysctl.d/204616-powerstig.conf"; + ModuleName = "nx"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; + ModuleVersion = "1.0"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileResource as $MSFT_nxFileResource16ref +{ +ResourceID = "[nxFile][V-204617][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; + Contents = "net.ipv4.conf.all.send_redirects = 0"; + DestinationPath = "/etc/sysctl.d/204617-powerstig.conf"; + ModuleName = "nx"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; + ModuleVersion = "1.0"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileResource as $MSFT_nxFileResource17ref +{ +ResourceID = "[nxFile][V-204625][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; + Contents = "net.ipv4.ip_forward = 0"; + DestinationPath = "/etc/sysctl.d/204625-powerstig.conf"; + ModuleName = "nx"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; + ModuleVersion = "1.0"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileResource as $MSFT_nxFileResource18ref +{ +ResourceID = "[nxFile][V-204630][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; + Contents = "net.ipv6.conf.all.accept_source_route = 0"; + DestinationPath = "/etc/sysctl.d/204630-powerstig.conf"; + ModuleName = "nx"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; + ModuleVersion = "1.0"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileResource as $MSFT_nxFileResource19ref +{ +ResourceID = "[nxFile][V-237634.a][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; + Contents = "Defaults !targetpw"; + DestinationPath = "/etc/sudoers.d/237634a-powerstig.conf"; + ModuleName = "nx"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; + ModuleVersion = "1.0"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileResource as $MSFT_nxFileResource20ref +{ +ResourceID = "[nxFile][V-237634.b][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; + Contents = "Defaults !rootpw"; + DestinationPath = "/etc/sudoers.d/237634b-powerstig.conf"; + ModuleName = "nx"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; + ModuleVersion = "1.0"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileResource as $MSFT_nxFileResource21ref +{ +ResourceID = "[nxFile][V-237634.c][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; + Contents = "Defaults !runaspw"; + DestinationPath = "/etc/sudoers.d/237634c-powerstig.conf"; + ModuleName = "nx"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; + ModuleVersion = "1.0"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileResource as $MSFT_nxFileResource22ref +{ +ResourceID = "[nxFile][V-237635][medium][SRG-OS-000373-GPOS-00156]::[RHEL]Baseline"; + Contents = "Defaults timestamp_timeout=0"; + DestinationPath = "/etc/sudoers.d/237635-powerstig.conf"; + ModuleName = "nx"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; + ModuleVersion = "1.0"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileResource as $MSFT_nxFileResource23ref +{ +ResourceID = "[nxFile][V-250314][medium][SRG-OS-000324-GPOS-00125]::[RHEL]Baseline"; + Contents = "%wheel ALL=(ALL) TYPE=sysadm_t ROLE=sysadm_r ALL"; + DestinationPath = "/etc/sudoers.d/250314-powerstig.conf"; + ModuleName = "nx"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; + ModuleVersion = "1.0"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource1ref +{ +ResourceID = "[nxFileLine][V-204405][medium][SRG-OS-000069-GPOS-00037]::[RHEL]Baseline"; + ContainsLine = "password substack system-auth"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/pam.d/passwd"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "^\\s*password(?:\\t*|\\s*)substack\\tsystem-auth\\s*$|^#\\s*password\\s*substack\\s*system-auth.*"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource2ref +{ +ResourceID = "[nxFileLine][V-204407][medium][SRG-OS-000069-GPOS-00037]::[RHEL]Baseline"; + ContainsLine = "ucredit = -1"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/security/pwquality.conf"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "^#\\s*ucredit.*$|^ucredit\\s*=\\s*(?!-1\\b)\\w*$"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource3ref +{ +ResourceID = "[nxFileLine][V-204408][medium][SRG-OS-000070-GPOS-00038]::[RHEL]Baseline"; + ContainsLine = "lcredit = -1"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/security/pwquality.conf"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "^#\\s*lcredit.*$|^lcredit\\s*=\\s*(?!-1\\b)\\w*$"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource4ref +{ +ResourceID = "[nxFileLine][V-204409][medium][SRG-OS-000071-GPOS-00039]::[RHEL]Baseline"; + ContainsLine = "dcredit = -1"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/security/pwquality.conf"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "^#\\s*dcredit.*$|^dcredit\\s*=\\s*(?!-1\\b)\\w*$"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource5ref +{ +ResourceID = "[nxFileLine][V-204410][medium][SRG-OS-000266-GPOS-00101]::[RHEL]Baseline"; + ContainsLine = "ocredit=-1"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/security/pwquality.conf"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "^#\\s*ocredit.*$|^ocredit\\s*=\\s*(?!-1)\\w*$"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource6ref +{ +ResourceID = "[nxFileLine][V-204411][medium][SRG-OS-000072-GPOS-00040]::[RHEL]Baseline"; + ContainsLine = "difok = 8"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/security/pwquality.conf"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*difok\\s*=.*|^\\s*difok\\s*=\\s*(-|)[0-7]$"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource7ref +{ +ResourceID = "[nxFileLine][V-204412][medium][SRG-OS-000072-GPOS-00040]::[RHEL]Baseline"; + ContainsLine = "minclass = 4"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/security/pwquality.conf"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "^#\\s*minclass\\s*=.*|^\\s*minclass\\s*=\\s*(?!\\d{2,})[1-3]"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource8ref +{ +ResourceID = "[nxFileLine][V-204413][medium][SRG-OS-000072-GPOS-00040]::[RHEL]Baseline"; + ContainsLine = "maxrepeat = 3"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/security/pwquality.conf"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "^#\\s*maxrepeat\\s*=.*|^\\s*maxrepeat\\s*=\\s*(?:\\d{2,}|[4-9])"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource9ref +{ +ResourceID = "[nxFileLine][V-204414][medium][SRG-OS-000072-GPOS-00040]::[RHEL]Baseline"; + ContainsLine = "maxclassrepeat = 4"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/security/pwquality.conf"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "^#\\s*maxclassrepeat\\s*=.*|^\\s*maxclassrepeat\\s*=\\s*(?:\\d{2,}|[1-3|5-9])"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource10ref +{ +ResourceID = "[nxFileLine][V-204416][medium][SRG-OS-000073-GPOS-00041]::[RHEL]Baseline"; + ContainsLine = "ENCRYPT_METHOD SHA512"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/login.defs"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*ENCRYPT_METHOD\\s*SHA512"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource11ref +{ +ResourceID = "[nxFileLine][V-204418][medium][SRG-OS-000075-GPOS-00043]::[RHEL]Baseline"; + ContainsLine = "PASS_MIN_DAYS 1"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/login.defs"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "^\\s*PASS_MIN_DAYS\\s*[0]*$|#\\s*PASS_MIN_DAYS.*"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource12ref +{ +ResourceID = "[nxFileLine][V-204420][medium][SRG-OS-000076-GPOS-00044]::[RHEL]Baseline"; + ContainsLine = "PASS_MAX_DAYS 60"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/login.defs"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "^\\s*PASS_MAX_DAYS\\s*([6][1-9]|[7-9][0-9]|\\d{3,})$|#\\s*PASS_MAX_DAYS.*"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource13ref +{ +ResourceID = "[nxFileLine][V-204423][medium][SRG-OS-000078-GPOS-00046]::[RHEL]Baseline"; + ContainsLine = "minlen = 15"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/security/pwquality.conf"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "^\\s*minlen\\s*=\\s*([0-9]|[1][1-4])$|#\\s*minlen.*"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource14ref +{ +ResourceID = "[nxFileLine][V-204425][high][SRG-OS-000106-GPOS-00053]::[RHEL]Baseline"; + ContainsLine = "PermitEmptyPasswords no"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/ssh/sshd_config"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "^#\\s*PermitEmptyPasswords.*$|^PermitEmptyPasswords\\s*(?!no\\b)\\w*$"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource15ref +{ +ResourceID = "[nxFileLine][V-204426][medium][SRG-OS-000118-GPOS-00060]::[RHEL]Baseline"; + ContainsLine = "INACTIVE=35"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/default/useradd"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "^#\\s*INACTIVE\\s*=.*|^\\s*INACTIVE\\s*=\\s*(3[5-9]|[4-9]\\d+|\\d{3,})"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource16ref +{ +ResourceID = "[nxFileLine][V-204431][medium][SRG-OS-000480-GPOS-00226]::[RHEL]Baseline"; + ContainsLine = "FAIL_DELAY 4"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/login.defs"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "^#\\s*FAIL_DELAY.*|^FAIL_DELAY\\s*(?!\\d{2,})[1-3]"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource17ref +{ +ResourceID = "[nxFileLine][V-204434][medium][SRG-OS-000480-GPOS-00229]::[RHEL]Baseline"; + ContainsLine = "PermitUserEnvironment no"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/ssh/sshd_config"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "^#\\s*PermitUserEnvironment.*$|^PermitUserEnvironment\\s*(?!no\\b)\\w*$"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource18ref +{ +ResourceID = "[nxFileLine][V-204435][medium][SRG-OS-000480-GPOS-00229]::[RHEL]Baseline"; + ContainsLine = "HostbasedAuthentication no"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/ssh/sshd_config"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "^#\\s*HostbasedAuthentication.*$|^HostbasedAuthentication\\s*(?!no\\b)\\w*$"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource19ref +{ +ResourceID = "[nxFileLine][V-204447][high][SRG-OS-000366-GPOS-00153]::[RHEL]Baseline"; + ContainsLine = "gpgcheck=1"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/yum.conf"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*gpgcheck\\s*=\\s*1"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource20ref +{ +ResourceID = "[nxFileLine][V-204448][high][SRG-OS-000366-GPOS-00153]::[RHEL]Baseline"; + ContainsLine = "localpkg_gpgcheck=1"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/yum.conf"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*localpkg_gpgcheck\\s*=\\s*1"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource21ref +{ +ResourceID = "[nxFileLine][V-204449.c][medium][SRG-OS-000114-GPOS-00059]::[RHEL]Baseline"; + ContainsLine = "install usb-storage /bin/true"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/modprobe.d/usb-storage.conf"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*install\\s*usb-storage\\s*/bin/true"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource22ref +{ +ResourceID = "[nxFileLine][V-204449.d][medium][SRG-OS-000114-GPOS-00059]::[RHEL]Baseline"; + ContainsLine = "blacklist usb-storage"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/modprobe.d/blacklist.conf"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*blacklist\\s*usb-storage"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource23ref +{ +ResourceID = "[nxFileLine][V-204450.b][medium][SRG-OS-000378-GPOS-00163]::[RHEL]Baseline"; + ContainsLine = "install dccp /bin/true"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/modprobe.d/dccp.conf"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*install\\s*dccp\\s*/bin/true"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource24ref +{ +ResourceID = "[nxFileLine][V-204450.c][medium][SRG-OS-000378-GPOS-00163]::[RHEL]Baseline"; + ContainsLine = "blacklist dccp"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/modprobe.d/blacklist.conf"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*blacklist\\s*dccp"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource25ref +{ +ResourceID = "[nxFileLine][V-204452][low][SRG-OS-000437-GPOS-00194]::[RHEL]Baseline"; + ContainsLine = "clean_requirements_on_remove=1"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/yum.conf"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*clean_requirements_on_remove\\s*=\\s*1"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource26ref +{ +ResourceID = "[nxFileLine][V-204453][medium][SRG-OS-000445-GPOS-00199]::[RHEL]Baseline"; + ContainsLine = "SELINUX=enforcing"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/selinux/config"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "^#\\s*SELINUX.*$|^SELINUX\\s*=\\s*(?!enforcing)\\w*$"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource27ref +{ +ResourceID = "[nxFileLine][V-204454][medium][SRG-OS-000445-GPOS-00199]::[RHEL]Baseline"; + ContainsLine = "SELINUXTYPE=targeted"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/selinux/config"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "^#\\s*SELINUXTYPE.*$|^SELINUXTYPE\\s*=\\s*(?!targeted\\b)\\w*$"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource28ref +{ +ResourceID = "[nxFileLine][V-204457][medium][SRG-OS-000480-GPOS-00228]::[RHEL]Baseline"; + ContainsLine = "UMASK 077"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/login.defs"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "^\\s*UMASK(?!\\s077\\b)\\s*\\d*\\s*$|^#\\s*UMASK.*"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource29ref +{ +ResourceID = "[nxFileLine][V-204466][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; + ContainsLine = "CREATE_HOME yes"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/login.defs"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "^#\\s*CREATE_HOME.*$|^CREATE_HOME\\s*(?!yes\\b)\\w*$|^CREATE_HOME\\t.*"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource30ref +{ +ResourceID = "[nxFileLine][V-204504][medium][SRG-OS-000046-GPOS-00022]::[RHEL]Baseline"; + ContainsLine = "-f 2"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "^#\\s*-f\\s+2|^\\s*-f\\s*1"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileResource as $MSFT_nxFileResource24ref +{ +SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::29::9::nxFile"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + ResourceID = "[nxFile][V-204506.a][medium][SRG-OS-000342-GPOS-00133]::[RHEL]Baseline"; + DestinationPath = "/etc/audisp/plugins.d/au-remote.conf"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource31ref +{ +ResourceID = "[nxFileLine][V-204506.a][medium][SRG-OS-000342-GPOS-00133]::[RHEL]Baseline"; + ContainsLine = "active = yes"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audisp/plugins.d/au-remote.conf"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "\\s*active\\s*=\\s*no|active=yes|#\\s*active\\s*=.*"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource32ref +{ +ResourceID = "[nxFileLine][V-204506.b][medium][SRG-OS-000342-GPOS-00133]::[RHEL]Baseline"; + ContainsLine = "direction = out"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audisp/plugins.d/au-remote.conf"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*direction\\s*=\\s*out"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource33ref +{ +ResourceID = "[nxFileLine][V-204506.c][medium][SRG-OS-000342-GPOS-00133]::[RHEL]Baseline"; + ContainsLine = "path = /sbin/audisp-remote"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audisp/plugins.d/au-remote.conf"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*path\\s*=\\s*/sbin/audisp-remote"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource34ref +{ +ResourceID = "[nxFileLine][V-204506.d][medium][SRG-OS-000342-GPOS-00133]::[RHEL]Baseline"; + ContainsLine = "type = always"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audisp/plugins.d/au-remote.conf"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*type\\s*=\\s*always"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource35ref +{ +ResourceID = "[nxFileLine][V-204507][medium][SRG-OS-000342-GPOS-00133]::[RHEL]Baseline"; + ContainsLine = "overflow_action = syslog"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audisp/audispd.conf"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "^#\\s*overflow_action.*$|^overflow_action\\s*=\\s*(?!syslog$)\\w*$"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource36ref +{ +ResourceID = "[nxFileLine][V-204508][medium][SRG-OS-000342-GPOS-00133]::[RHEL]Baseline"; + ContainsLine = "name_format = hostname"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audisp/audispd.conf"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "^#\\s*name_format.*$|^name_format\\s*=\\s*(?!hostname$)\\w*$"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileResource as $MSFT_nxFileResource25ref +{ +SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::19::9::nxFile"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + ResourceID = "[nxFile][V-204510][medium][SRG-OS-000342-GPOS-00133]::[RHEL]Baseline"; + DestinationPath = "/etc/audisp/audisp-remote.conf"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource37ref +{ +ResourceID = "[nxFileLine][V-204510][medium][SRG-OS-000342-GPOS-00133]::[RHEL]Baseline"; + ContainsLine = "enable_krb5 = yes"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audisp/audisp-remote.conf"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*enable_krb5\\s*=\\s*yes"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource38ref +{ +ResourceID = "[nxFileLine][V-204511][medium][SRG-OS-000342-GPOS-00133]::[RHEL]Baseline"; + ContainsLine = "disk_full_action = single"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audisp/audisp-remote.conf"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "^#\\s*disk_full_action\\s*=.*|^disk_full_action\\s*=\\s*(?!halt\\b|single\\b|syslog\\b)\\w+"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource39ref +{ +ResourceID = "[nxFileLine][V-204512][medium][SRG-OS-000342-GPOS-00133]::[RHEL]Baseline"; + ContainsLine = "network_failure_action = syslog"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audisp/audisp-remote.conf"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "^#\\s*network_failure_action\\s*=.*|^network_failure_action\\s*=\\s*(?!halt\\b|single\\b|syslog\\b)\\w+"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource40ref +{ +ResourceID = "[nxFileLine][V-204514][medium][SRG-OS-000343-GPOS-00134]::[RHEL]Baseline"; + ContainsLine = "space_left_action = email"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/auditd.conf"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "^#\\s*space_left_action.*$|^space_left_action\\s*=\\s*(?!email$)\\w*$"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource41ref +{ +ResourceID = "[nxFileLine][V-204515][medium][SRG-OS-000343-GPOS-00134]::[RHEL]Baseline"; + ContainsLine = "action_mail_acct = root"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/auditd.conf"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "^#\\s*action_mail_acct.*|^action_mail_acct\\s*=\\s*(?!root\\b)\\w+"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource42ref +{ +ResourceID = "[nxFileLine][V-204516.a][medium][SRG-OS-000327-GPOS-00127]::[RHEL]Baseline"; + ContainsLine = "-a always,exit -F arch=b32 -S execve -C uid!=euid -F euid=0 -k setuid"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*execve\\s*-C\\s*uid!\\s*=\\s*euid\\s*-F\\s*euid\\s*=\\s*0\\s*-k\\s*setuid"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource43ref +{ +ResourceID = "[nxFileLine][V-204516.b][medium][SRG-OS-000327-GPOS-00127]::[RHEL]Baseline"; + ContainsLine = "-a always,exit -F arch=b64 -S execve -C uid!=euid -F euid=0 -k setuid"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*execve\\s*-C\\s*uid!\\s*=\\s*euid\\s*-F\\s*euid\\s*=\\s*0\\s*-k\\s*setuid"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource44ref +{ +ResourceID = "[nxFileLine][V-204516.c][medium][SRG-OS-000327-GPOS-00127]::[RHEL]Baseline"; + ContainsLine = "-a always,exit -F arch=b32 -S execve -C gid!=egid -F egid=0 -k setgid"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*execve\\s*-C\\s*gid!\\s*=\\s*egid\\s*-F\\s*egid\\s*=\\s*0\\s*-k\\s*setgid"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource45ref +{ +ResourceID = "[nxFileLine][V-204516.d][medium][SRG-OS-000327-GPOS-00127]::[RHEL]Baseline"; + ContainsLine = "-a always,exit -F arch=b64 -S execve -C gid!=egid -F egid=0 -k setgid"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*execve\\s*-C\\s*gid!\\s*=\\s*egid\\s*-F\\s*egid\\s*=\\s*0\\s*-k\\s*setgid"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource46ref +{ +ResourceID = "[nxFileLine][V-204517.a][medium][SRG-OS-000064-GPOS-00033]::[RHEL]Baseline"; + ContainsLine = "-a always,exit -F arch=b32 -S chown,fchown,fchownat,lchown -F auid>=1000 -F auid!=unset -k perm_mod"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*chown,fchown,fchownat,lchown\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*perm_mod"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource47ref +{ +ResourceID = "[nxFileLine][V-204517.b][medium][SRG-OS-000064-GPOS-00033]::[RHEL]Baseline"; + ContainsLine = "-a always,exit -F arch=b64 -S chown,fchown,fchownat,lchown -F auid>=1000 -F auid!=unset -k perm_mod"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*chown,fchown,fchownat,lchown\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*perm_mod"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource48ref +{ +ResourceID = "[nxFileLine][V-204521.a][medium][SRG-OS-000458-GPOS-00203]::[RHEL]Baseline"; + ContainsLine = "-a always,exit -F arch=b32 -S chmod,fchmod,fchmodat -F auid>=1000 -F auid!=unset -k perm_mod"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*chmod,fchmod,fchmodat\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*perm_mod"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource49ref +{ +ResourceID = "[nxFileLine][V-204521.b][medium][SRG-OS-000458-GPOS-00203]::[RHEL]Baseline"; + ContainsLine = "-a always,exit -F arch=b64 -S chmod,fchmod,fchmodat -F auid>=1000 -F auid!=unset -k perm_mod"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*chmod,fchmod,fchmodat\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*perm_mod"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource50ref +{ +ResourceID = "[nxFileLine][V-204524.a][medium][SRG-OS-000458-GPOS-00203]::[RHEL]Baseline"; + ContainsLine = "-a always,exit -F arch=b32 -S setxattr,fsetxattr,lsetxattr,removexattr,fremovexattr,lremovexattr -F auid>=1000 -F auid!=unset -k perm_mod"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*setxattr,fsetxattr,lsetxattr,removexattr,fremovexattr,lremovexattr\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*perm_mod"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource51ref +{ +ResourceID = "[nxFileLine][V-204524.b][medium][SRG-OS-000458-GPOS-00203]::[RHEL]Baseline"; + ContainsLine = "-a always,exit -F arch=b64 -S setxattr,fsetxattr,lsetxattr,removexattr,fremovexattr,lremovexattr -F auid>=1000 -F auid!=unset -k perm_mod"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*setxattr,fsetxattr,lsetxattr,removexattr,fremovexattr,lremovexattr\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*perm_mod"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource52ref +{ +ResourceID = "[nxFileLine][V-204531.a][medium][SRG-OS-000064-GPOS-00033]::[RHEL]Baseline"; + ContainsLine = "-a always,exit -F arch=b32 -S creat,open,openat,open_by_handle_at,truncate,ftruncate -F exit=-EPERM -F auid>=1000 -F auid!=unset -k access"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*creat,open,openat,open_by_handle_at,truncate,ftruncate\\s*-F\\s*exit\\s*=\\s*-EPERM\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*access"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource53ref +{ +ResourceID = "[nxFileLine][V-204531.b][medium][SRG-OS-000064-GPOS-00033]::[RHEL]Baseline"; + ContainsLine = "-a always,exit -F arch=b32 -S creat,open,openat,open_by_handle_at,truncate,ftruncate -F exit=-EACCES -F auid>=1000 -F auid!=unset -k access"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*creat,open,openat,open_by_handle_at,truncate,ftruncate\\s*-F\\s*exit\\s*=\\s*-EACCES\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*access"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource54ref +{ +ResourceID = "[nxFileLine][V-204531.c][medium][SRG-OS-000064-GPOS-00033]::[RHEL]Baseline"; + ContainsLine = "-a always,exit -F arch=b64 -S creat,open,openat,open_by_handle_at,truncate,ftruncate -F exit=-EPERM -F auid>=1000 -F auid!=unset -k access"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*creat,open,openat,open_by_handle_at,truncate,ftruncate\\s*-F\\s*exit\\s*=\\s*-EPERM\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*access"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource55ref +{ +ResourceID = "[nxFileLine][V-204531.d][medium][SRG-OS-000064-GPOS-00033]::[RHEL]Baseline"; + ContainsLine = "-a always,exit -F arch=b64 -S creat,open,openat,open_by_handle_at,truncate,ftruncate -F exit=-EACCES -F auid>=1000 -F auid!=unset -k access"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*creat,open,openat,open_by_handle_at,truncate,ftruncate\\s*-F\\s*exit\\s*=\\s*-EACCES\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*access"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource56ref +{ +ResourceID = "[nxFileLine][V-204536][medium][SRG-OS-000392-GPOS-00172]::[RHEL]Baseline"; + ContainsLine = "-a always,exit -F path=/usr/sbin/semanage -F perm=x -F auid>=1000 -F auid!=unset -k privileged-priv_change"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/sbin/semanage\\s*-F\\s*perm\\s*=\\s*x\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-priv_change"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource57ref +{ +ResourceID = "[nxFileLine][V-204537][medium][SRG-OS-000392-GPOS-00172]::[RHEL]Baseline"; + ContainsLine = "-a always,exit -F path=/usr/sbin/setsebool -F perm=x -F auid>=1000 -F auid!=unset -k privileged-priv_change"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/sbin/setsebool\\s*-F\\s*perm\\s*=\\s*x\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-priv_change"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource58ref +{ +ResourceID = "[nxFileLine][V-204538][medium][SRG-OS-000392-GPOS-00172]::[RHEL]Baseline"; + ContainsLine = "-a always,exit -F path=/usr/bin/chcon -F perm=x -F auid>=1000 -F auid!=unset -k privileged-priv_change"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/bin/chcon\\s*-F\\s*perm\\s*=\\s*x\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-priv_change"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource59ref +{ +ResourceID = "[nxFileLine][V-204539][medium][SRG-OS-000392-GPOS-00172]::[RHEL]Baseline"; + ContainsLine = "-a always,exit -F path=/usr/sbin/setfiles -F perm=x -F auid>=1000 -F auid!=unset -k privileged-priv_change"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/sbin/setfiles\\s*-F\\s*perm\\s*=\\s*x\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-priv_change"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource60ref +{ +ResourceID = "[nxFileLine][V-204540][medium][SRG-OS-000392-GPOS-00172]::[RHEL]Baseline"; + ContainsLine = "-w /var/run/faillock -p wa -k logins"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-w\\s*/var/run/faillock\\s*-p\\s*wa\\s*-k\\s*logins"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource61ref +{ +ResourceID = "[nxFileLine][V-204541][medium][SRG-OS-000392-GPOS-00172]::[RHEL]Baseline"; + ContainsLine = "-w /var/log/lastlog -p wa -k logins"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-w\\s*/var/log/lastlog\\s*-p\\s*wa\\s*-k\\s*logins"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource62ref +{ +ResourceID = "[nxFileLine][V-204542][medium][SRG-OS-000042-GPOS-00020]::[RHEL]Baseline"; + ContainsLine = "-a always,exit -F path=/usr/bin/passwd -F perm=x -F auid>=1000 -F auid!=unset -k privileged-passwd"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/bin/passwd\\s*-F\\s*perm\\s*=\\s*x\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-passwd"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource63ref +{ +ResourceID = "[nxFileLine][V-204543][medium][SRG-OS-000042-GPOS-00020]::[RHEL]Baseline"; + ContainsLine = "-a always,exit -F path=/usr/sbin/unix_chkpwd -F perm=x -F auid>=1000 -F auid!=unset -k privileged-passwd"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/sbin/unix_chkpwd\\s*-F\\s*perm\\s*=\\s*x\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-passwd"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource64ref +{ +ResourceID = "[nxFileLine][V-204544][medium][SRG-OS-000042-GPOS-00020]::[RHEL]Baseline"; + ContainsLine = "-a always,exit -F path=/usr/bin/gpasswd -F perm=x -F auid>=1000 -F auid!=unset -k privileged-passwd"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/bin/gpasswd\\s*-F\\s*perm\\s*=\\s*x\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-passwd"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource65ref +{ +ResourceID = "[nxFileLine][V-204545][medium][SRG-OS-000042-GPOS-00020]::[RHEL]Baseline"; + ContainsLine = "-a always,exit -F path=/usr/bin/chage -F perm=x -F auid>=1000 -F auid!=unset -k privileged-passwd"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/bin/chage\\s*-F\\s*perm\\s*=\\s*x\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-passwd"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource66ref +{ +ResourceID = "[nxFileLine][V-204546][medium][SRG-OS-000042-GPOS-00020]::[RHEL]Baseline"; + ContainsLine = "-a always,exit -F path=/usr/sbin/userhelper -F perm=x -F auid>=1000 -F auid!=unset -k privileged-passwd"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/sbin/userhelper\\s*-F\\s*perm\\s*=\\s*x\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-passwd"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource67ref +{ +ResourceID = "[nxFileLine][V-204547][medium][SRG-OS-000037-GPOS-00015]::[RHEL]Baseline"; + ContainsLine = "-a always,exit -F path=/usr/bin/su -F perm=x -F auid>=1000 -F auid!=unset -k privileged-priv_change"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/bin/su\\s*-F\\s*perm\\s*=\\s*x\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-priv_change"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource68ref +{ +ResourceID = "[nxFileLine][V-204548][medium][SRG-OS-000037-GPOS-00015]::[RHEL]Baseline"; + ContainsLine = "-a always,exit -F path=/usr/bin/sudo -F perm=x -F auid>=1000 -F auid!=unset -k privileged-priv_change"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/bin/sudo\\s*-F\\s*perm\\s*=\\s*x\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-priv_change"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource69ref +{ +ResourceID = "[nxFileLine][V-204549.a][medium][SRG-OS-000037-GPOS-00015]::[RHEL]Baseline"; + ContainsLine = "-w /etc/sudoers -p wa -k privileged-actions"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-w /etc/sudoers -p wa -k privileged-actions"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource70ref +{ +ResourceID = "[nxFileLine][V-204549.b][medium][SRG-OS-000037-GPOS-00015]::[RHEL]Baseline"; + ContainsLine = "-w /etc/sudoers.d/ -p wa -k privileged-actions"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-w /etc/sudoers.d/ -p wa -k privileged-actions"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource71ref +{ +ResourceID = "[nxFileLine][V-204550][medium][SRG-OS-000037-GPOS-00015]::[RHEL]Baseline"; + ContainsLine = "-a always,exit -F path=/usr/bin/newgrp -F perm=x -F auid>=1000 -F auid!=unset -k privileged-priv_change"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/bin/newgrp\\s*-F\\s*perm\\s*=\\s*x\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-priv_change"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource72ref +{ +ResourceID = "[nxFileLine][V-204551][medium][SRG-OS-000037-GPOS-00015]::[RHEL]Baseline"; + ContainsLine = "-a always,exit -F path=/usr/bin/chsh -F perm=x -F auid>=1000 -F auid!=unset -k privileged-priv_change"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/bin/chsh\\s*-F\\s*perm\\s*=\\s*x\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-priv_change"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource73ref +{ +ResourceID = "[nxFileLine][V-204552.a][medium][SRG-OS-000042-GPOS-00020]::[RHEL]Baseline"; + ContainsLine = "-a always,exit -F arch=b32 -S mount -F auid>=1000 -F auid!=unset -k privileged-mount"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*mount\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-mount"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource74ref +{ +ResourceID = "[nxFileLine][V-204552.b][medium][SRG-OS-000042-GPOS-00020]::[RHEL]Baseline"; + ContainsLine = "-a always,exit -F arch=b64 -S mount -F auid>=1000 -F auid!=unset -k privileged-mount"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*mount\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-mount"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource75ref +{ +ResourceID = "[nxFileLine][V-204552.c][medium][SRG-OS-000042-GPOS-00020]::[RHEL]Baseline"; + ContainsLine = "-a always,exit -F path=/usr/bin/mount -F perm=x -F auid>=1000 -F auid!=unset -k privileged-mount"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/bin/mount\\s*-F\\s*perm\\s*=\\s*x\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-mount"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource76ref +{ +ResourceID = "[nxFileLine][V-204553][medium][SRG-OS-000042-GPOS-00020]::[RHEL]Baseline"; + ContainsLine = "-a always,exit -F path=/usr/bin/umount -F perm=x -F auid>=1000 -F auid!=unset -k privileged-mount"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/bin/umount\\s*-F\\s*perm\\s*=\\s*x\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-mount"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource77ref +{ +ResourceID = "[nxFileLine][V-204554][medium][SRG-OS-000042-GPOS-00020]::[RHEL]Baseline"; + ContainsLine = "-a always,exit -F path=/usr/sbin/postdrop -F perm=x -F auid>=1000 -F auid!=unset -k privileged-postfix"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/sbin/postdrop\\s*-F\\s*perm\\s*=\\s*x\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-postfix"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource78ref +{ +ResourceID = "[nxFileLine][V-204555][medium][SRG-OS-000042-GPOS-00020]::[RHEL]Baseline"; + ContainsLine = "-a always,exit -F path=/usr/sbin/postqueue -F perm=x -F auid>=1000 -F auid!=unset -k privileged-postfix"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/sbin/postqueue\\s*-F\\s*perm\\s*=\\s*x\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-postfix"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource79ref +{ +ResourceID = "[nxFileLine][V-204556][medium][SRG-OS-000042-GPOS-00020]::[RHEL]Baseline"; + ContainsLine = "-a always,exit -F path=/usr/libexec/openssh/ssh-keysign -F perm=x -F auid>=1000 -F auid!=unset -k privileged-ssh"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/libexec/openssh/ssh-keysign\\s*-F\\s*perm\\s*=\\s*x\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-ssh"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource80ref +{ +ResourceID = "[nxFileLine][V-204557][medium][SRG-OS-000042-GPOS-00020]::[RHEL]Baseline"; + ContainsLine = "-a always,exit -F path=/usr/bin/crontab -F perm=x -F auid>=1000 -F auid!=unset -k privileged-cron"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/bin/crontab\\s*-F\\s*perm\\s*=\\s*x\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-cron"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource81ref +{ +ResourceID = "[nxFileLine][V-204558][medium][SRG-OS-000471-GPOS-00215]::[RHEL]Baseline"; + ContainsLine = "-a always,exit -F path=/usr/sbin/pam_timestamp_check -F perm=x -F auid>=1000 -F auid!=unset -k privileged-pam"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/sbin/pam_timestamp_check\\s*-F\\s*perm\\s*=\\s*x\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*privileged-pam"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource82ref +{ +ResourceID = "[nxFileLine][V-204559.a][medium][SRG-OS-000471-GPOS-00216]::[RHEL]Baseline"; + ContainsLine = "-a always,exit -F arch=b32 -S create_module -F auid>=1000 -F auid!=unset -k module-change"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*create_module\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*module-change"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource83ref +{ +ResourceID = "[nxFileLine][V-204559.b][medium][SRG-OS-000471-GPOS-00216]::[RHEL]Baseline"; + ContainsLine = "-a always,exit -F arch=b64 -S create_module -F auid>=1000 -F auid!=unset -k module-change"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*create_module\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*module-change"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource84ref +{ +ResourceID = "[nxFileLine][V-204560.a][medium][SRG-OS-000471-GPOS-00216]::[RHEL]Baseline"; + ContainsLine = "-a always,exit -F arch=b32 -S init_module,finit_module -F auid>=1000 -F auid!=unset -k modulechange"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*init_module,finit_module\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*modulechange"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource85ref +{ +ResourceID = "[nxFileLine][V-204560.b][medium][SRG-OS-000471-GPOS-00216]::[RHEL]Baseline"; + ContainsLine = "-a always,exit -F arch=b64 -S init_module,finit_module -F auid>=1000 -F auid!=unset -k modulechange"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*init_module,finit_module\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*modulechange"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource86ref +{ +ResourceID = "[nxFileLine][V-204562.a][medium][SRG-OS-000471-GPOS-00216]::[RHEL]Baseline"; + ContainsLine = "-a always,exit -F arch=b32 -S delete_module -F auid>=1000 -F auid!=unset -k module-change"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*delete_module\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*module-change"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource87ref +{ +ResourceID = "[nxFileLine][V-204562.b][medium][SRG-OS-000471-GPOS-00216]::[RHEL]Baseline"; + ContainsLine = "-a always,exit -F arch=b64 -S delete_module -F auid>=1000 -F auid!=unset -k module-change"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*delete_module\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*module-change"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource88ref +{ +ResourceID = "[nxFileLine][V-204563][medium][SRG-OS-000471-GPOS-00216]::[RHEL]Baseline"; + ContainsLine = "-a always,exit -F path=/usr/bin/kmod -F perm=x -F auid>=1000 -F auid!=unset -k modules"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/bin/kmod\\s*-F\\s*perm\\s*=\\s*x\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*modules"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource89ref +{ +ResourceID = "[nxFileLine][V-204564][medium][SRG-OS-000004-GPOS-00004]::[RHEL]Baseline"; + ContainsLine = "-w /etc/passwd -p wa -k identity"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-w\\s*/etc/passwd\\s*-p\\s*wa\\s*-k\\s*identity"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource90ref +{ +ResourceID = "[nxFileLine][V-204565][medium][SRG-OS-000004-GPOS-00004]::[RHEL]Baseline"; + ContainsLine = "-w /etc/group -p wa -k identity"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-w\\s*/etc/group\\s*-p\\s*wa\\s*-k\\s*identity"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource91ref +{ +ResourceID = "[nxFileLine][V-204566][medium][SRG-OS-000004-GPOS-00004]::[RHEL]Baseline"; + ContainsLine = "-w /etc/gshadow -p wa -k identity"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-w\\s*/etc/gshadow\\s*-p\\s*wa\\s*-k\\s*identity"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource92ref +{ +ResourceID = "[nxFileLine][V-204567][medium][SRG-OS-000004-GPOS-00004]::[RHEL]Baseline"; + ContainsLine = "-w /etc/shadow -p wa -k identity"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-w\\s*/etc/shadow\\s*-p\\s*wa\\s*-k\\s*identity"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource93ref +{ +ResourceID = "[nxFileLine][V-204568][medium][SRG-OS-000004-GPOS-00004]::[RHEL]Baseline"; + ContainsLine = "-w /etc/security/opasswd -p wa -k identity"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-w\\s*/etc/security/opasswd\\s*-p\\s*wa\\s*-k\\s*identity"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource94ref +{ +ResourceID = "[nxFileLine][V-204572.a][medium][SRG-OS-000466-GPOS-00210]::[RHEL]Baseline"; + ContainsLine = "-a always,exit -F arch=b32 -S unlink,unlinkat,rename,renameat,rmdir -F auid>=1000 -F auid!=unset -k delete"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*unlink,unlinkat,rename,renameat,rmdir\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*delete"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource95ref +{ +ResourceID = "[nxFileLine][V-204572.b][medium][SRG-OS-000466-GPOS-00210]::[RHEL]Baseline"; + ContainsLine = "-a always,exit -F arch=b64 -S unlink,unlinkat,rename,renameat,rmdir -F auid>=1000 -F auid!=unset -k delete"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*unlink,unlinkat,rename,renameat,rmdir\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*unset\\s*-k\\s*delete"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource96ref +{ +ResourceID = "[nxFileLine][V-204578][medium][SRG-OS-000033-GPOS-00014]::[RHEL]Baseline"; + ContainsLine = "Ciphers aes256-ctr,aes192-ctr,aes128-ctr"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/ssh/sshd_config"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "^#\\s*Ciphers.*|^\\s*Ciphers\\s*aes128-ctr.*|^\\s*Ciphers\\s*aes192-ctr.*"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource97ref +{ +ResourceID = "[nxFileLine][V-204579.b][medium][SRG-OS-000163-GPOS-00072]::[RHEL]Baseline"; + ContainsLine = "declare -xr TMOUT=900"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/profile.d/tmout.sh"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "^\\s*TMOUT\\s*=\\s*[0-8]?[0-9]?[0-9]?$|^#\\s*TMOUT.*"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource98ref +{ +ResourceID = "[nxFileLine][V-204579.c][medium][SRG-OS-000163-GPOS-00072]::[RHEL]Baseline"; + ContainsLine = "declare -xr TMOUT=900"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/bashrc"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "^\\s*TMOUT\\s*=\\s*[0-8]?[0-9]?[0-9]?$|^#\\s*TMOUT.*"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource99ref +{ +ResourceID = "[nxFileLine][V-204579.d][medium][SRG-OS-000163-GPOS-00072]::[RHEL]Baseline"; + ContainsLine = "declare -xr TMOUT=900"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/profile"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "^\\s*TMOUT\\s*=\\s*[0-8]?[0-9]?[0-9]?$|^#\\s*TMOUT.*"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource100ref +{ +ResourceID = "[nxFileLine][V-204580][medium][SRG-OS-000023-GPOS-00006]::[RHEL]Baseline"; + ContainsLine = "banner /etc/issue"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/ssh/sshd_config"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*banner\\s*/etc/issue"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource101ref +{ +ResourceID = "[nxFileLine][V-204587][medium][SRG-OS-000163-GPOS-00072]::[RHEL]Baseline"; + ContainsLine = "ClientAliveInterval 600"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/ssh/sshd_config"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "^\\s*ClientAliveInterval\\s*[0-5]?[0-9]?[0-9]?\\s*$|^#\\s*ClientAliveInterval.*|^\\s*ClientAliveInterval\\s*$"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource102ref +{ +ResourceID = "[nxFileLine][V-204588][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; + ContainsLine = "RhostsRSAAuthentication no"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/ssh/sshd_config"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "^#\\s*RhostsRSAAuthentication.*$|^RhostsRSAAuthentication\\s*(?!no\\b)\\w*$"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource103ref +{ +ResourceID = "[nxFileLine][V-204589][medium][SRG-OS-000163-GPOS-00072]::[RHEL]Baseline"; + ContainsLine = "ClientAliveCountMax 0"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/ssh/sshd_config"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "^#\\s*ClientAliveCountMax.*$|^ClientAliveCountMax\\s*(?!0\\b)\\w*$"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource104ref +{ +ResourceID = "[nxFileLine][V-204590][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; + ContainsLine = "IgnoreRhosts yes"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/ssh/sshd_config"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "^#\\s*IgnoreRhosts.*$|^IgnoreRhosts\\s*(?!yes\\b)\\w*$"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource105ref +{ +ResourceID = "[nxFileLine][V-204591][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; + ContainsLine = "PrintLastLog yes"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/ssh/sshd_config"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "^#\\s*PrintLastLog.*$|^PrintLastLog\\s*(?!yes\\b)\\w*$"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource106ref +{ +ResourceID = "[nxFileLine][V-204592][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; + ContainsLine = "PermitRootLogin no"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/ssh/sshd_config"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "^#\\s*PermitRootLogin.*$|^PermitRootLogin\\s*(?!no\\b)\\w*$"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource107ref +{ +ResourceID = "[nxFileLine][V-204593][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; + ContainsLine = "IgnoreUserKnownHosts yes"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/ssh/sshd_config"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "^#\\s*IgnoreUserKnownHosts.*$|^IgnoreUserKnownHosts\\s*(?!yes\\b)\\w*$"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource108ref +{ +ResourceID = "[nxFileLine][V-204594][high][SRG-OS-000074-GPOS-00042]::[RHEL]Baseline"; + ContainsLine = "Protocol 2"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/ssh/sshd_config"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "^#\\s*Protocol.*$|^Protocol\\s*(?!2\\b)\\w*$"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource109ref +{ +ResourceID = "[nxFileLine][V-204595][medium][SRG-OS-000250-GPOS-00093]::[RHEL]Baseline"; + ContainsLine = "MACs hmac-sha2-512,hmac-sha2-256"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/ssh/sshd_config"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*MACs.*|\\s*MACs\\s*hmac-(?!sha2-512).*"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource110ref +{ +ResourceID = "[nxFileLine][V-204598][medium][SRG-OS-000364-GPOS-00151]::[RHEL]Baseline"; + ContainsLine = "GSSAPIAuthentication no"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/ssh/sshd_config"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "^#\\s*GSSAPIAuthentication.*$|^GSSAPIAuthentication\\s*(?!no\\b)\\w*$"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource111ref +{ +ResourceID = "[nxFileLine][V-204599][medium][SRG-OS-000364-GPOS-00151]::[RHEL]Baseline"; + ContainsLine = "KerberosAuthentication no"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/ssh/sshd_config"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "^#\\s*KerberosAuthentication.*$|^KerberosAuthentication\\s*(?!no\\b)\\w*$"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource112ref +{ +ResourceID = "[nxFileLine][V-204600][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; + ContainsLine = "StrictModes yes"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/ssh/sshd_config"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "^#\\s*StrictModes.*$|^StrictModes\\s*(?!yes\\b)\\w*$"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource113ref +{ +ResourceID = "[nxFileLine][V-204601][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; + ContainsLine = "UsePrivilegeSeparation sandbox"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/ssh/sshd_config"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "^#\\s*UsePrivilegeSeparation.*$|^UsePrivilegeSeparation\\s*(?!sandbox\\b)\\w*$"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource114ref +{ +ResourceID = "[nxFileLine][V-204602][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; + ContainsLine = "Compression delayed"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/ssh/sshd_config"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "^#\\s*Compression.*$|^Compression\\s*(?!delayed\\b)\\w*$"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource115ref +{ +ResourceID = "[nxFileLine][V-204622][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; + ContainsLine = "X11Forwarding no"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/ssh/sshd_config"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "^#\\s*X11Forwarding.*$|^X11Forwarding\\s*(?!no\\b)\\w*$"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource116ref +{ +ResourceID = "[nxFileLine][V-233307][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; + ContainsLine = "X11UseLocalhost yes"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/ssh/sshd_config"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*X11UseLocalhost\\s*yes"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource117ref +{ +ResourceID = "[nxFileLine][V-255925][medium][SRG-OS-000033-GPOS-00014]::[RHEL]Baseline"; + ContainsLine = "KexAlgorithms ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/ssh/sshd_config"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*KexAlgorithms\\s*ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxServiceResource as $MSFT_nxServiceResource1ref +{ +ResourceID = "[nxService][V-204451][medium][SRG-OS-000114-GPOS-00059]::[RHEL]Baseline"; + Controller = "systemd"; + Enabled = False; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxService.ps1::13::9::nxService"; + Name = "autofs"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxServiceResource as $MSFT_nxServiceResource2ref +{ +ResourceID = "[nxService][V-204492][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; + Controller = "systemd"; + Enabled = False; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxService.ps1::13::9::nxService"; + Name = "kdump"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxServiceResource as $MSFT_nxServiceResource3ref +{ +ResourceID = "[nxService][V-204503][medium][SRG-OS-000038-GPOS-00016]::[RHEL]Baseline"; + Controller = "systemd"; + State = "Running"; + Enabled = True; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxService.ps1::22::9::nxService"; + Name = "auditd"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxServiceResource as $MSFT_nxServiceResource4ref +{ +ResourceID = "[nxService][V-204586][medium][SRG-OS-000423-GPOS-00187]::[RHEL]Baseline"; + Controller = "systemd"; + State = "Running"; + Enabled = True; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxService.ps1::22::9::nxService"; + Name = "sshd"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxServiceResource as $MSFT_nxServiceResource5ref +{ +ResourceID = "[nxService][V-204604.b][medium][SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; + Controller = "systemd"; + State = "Running"; + Enabled = True; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxService.ps1::22::9::nxService"; + Name = "firewalld"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxScriptResource as $MSFT_nxScriptResource1ref +{ +ResourceID = "[nxScript][V-204399.b][medium][[Skip] SRG-OS-000029-GPOS-00010]::[RHEL]Baseline"; + GetScript = "#!/bin/bash\necho [V-204399.b][medium][[Skip] SRG-OS-000029-GPOS-00010]"; + TestScript = "#!/bin/bash\nexit 0"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxScript.skip.ps1::10::5::nxScript"; + SetScript = "#!/bin/bash"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxScriptResource as $MSFT_nxScriptResource2ref +{ +ResourceID = "[nxScript][V-204400][medium][[Skip] SRG-OS-000029-GPOS-00010]::[RHEL]Baseline"; + GetScript = "#!/bin/bash\necho [V-204400][medium][[Skip] SRG-OS-000029-GPOS-00010]"; + TestScript = "#!/bin/bash\nexit 0"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxScript.skip.ps1::10::5::nxScript"; + SetScript = "#!/bin/bash"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxScriptResource as $MSFT_nxScriptResource3ref +{ +ResourceID = "[nxScript][V-204403][medium][[Skip] SRG-OS-000029-GPOS-00010]::[RHEL]Baseline"; + GetScript = "#!/bin/bash\necho [V-204403][medium][[Skip] SRG-OS-000029-GPOS-00010]"; + TestScript = "#!/bin/bash\nexit 0"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxScript.skip.ps1::10::5::nxScript"; + SetScript = "#!/bin/bash"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxScriptResource as $MSFT_nxScriptResource4ref +{ +ResourceID = "[nxScript][V-204509][medium][[Skip] SRG-OS-000342-GPOS-00133]::[RHEL]Baseline"; + GetScript = "#!/bin/bash\necho [V-204509][medium][[Skip] SRG-OS-000342-GPOS-00133]"; + TestScript = "#!/bin/bash\nexit 0"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxScript.skip.ps1::10::5::nxScript"; + SetScript = "#!/bin/bash"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxScriptResource as $MSFT_nxScriptResource5ref +{ +ResourceID = "[nxScript][V-204513][medium][[Skip] SRG-OS-000343-GPOS-00134]::[RHEL]Baseline"; + GetScript = "#!/bin/bash\necho [V-204513][medium][[Skip] SRG-OS-000343-GPOS-00134]"; + TestScript = "#!/bin/bash\nexit 0"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxScript.skip.ps1::10::5::nxScript"; + SetScript = "#!/bin/bash"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxScriptResource as $MSFT_nxScriptResource6ref +{ +ResourceID = "[nxScript][V-204623][medium][[Skip] SRG-OS-000480-GPOS-00227]::[RHEL]Baseline"; + GetScript = "#!/bin/bash\necho [V-204623][medium][[Skip] SRG-OS-000480-GPOS-00227]"; + TestScript = "#!/bin/bash\nexit 0"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxScript.skip.ps1::10::5::nxScript"; + SetScript = "#!/bin/bash"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxScriptResource as $MSFT_nxScriptResource7ref +{ +ResourceID = "[nxScript][V-244557][medium][[Skip] SRG-OS-000080-GPOS-00048]::[RHEL]Baseline"; + GetScript = "#!/bin/bash\necho [V-244557][medium][[Skip] SRG-OS-000080-GPOS-00048]"; + TestScript = "#!/bin/bash\nexit 0"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxScript.skip.ps1::10::5::nxScript"; + SetScript = "#!/bin/bash"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxScriptResource as $MSFT_nxScriptResource8ref +{ +ResourceID = "[nxScript][V-244558][medium][[Skip] SRG-OS-000080-GPOS-00048]::[RHEL]Baseline"; + GetScript = "#!/bin/bash\necho [V-244558][medium][[Skip] SRG-OS-000080-GPOS-00048]"; + TestScript = "#!/bin/bash\nexit 0"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxScript.skip.ps1::10::5::nxScript"; + SetScript = "#!/bin/bash"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxScriptResource as $MSFT_nxScriptResource9ref +{ +ResourceID = "[nxScript][V-204399.a][medium][[Skip] SRG-OS-000029-GPOS-00010]::[RHEL]Baseline"; + GetScript = "#!/bin/bash\necho [V-204399.a][medium][[Skip] SRG-OS-000029-GPOS-00010]"; + TestScript = "#!/bin/bash\nexit 0"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxScript.skip.ps1::10::5::nxScript"; + SetScript = "#!/bin/bash"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxScriptResource as $MSFT_nxScriptResource10ref +{ +ResourceID = "[nxScript][V-255926][medium][[Skip] SRG-OS-000029-GPOS-00010]::[RHEL]Baseline"; + GetScript = "#!/bin/bash\necho [V-255926][medium][[Skip] SRG-OS-000029-GPOS-00010]"; + TestScript = "#!/bin/bash\nexit 0"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxScript.skip.ps1::10::5::nxScript"; + SetScript = "#!/bin/bash"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of OMI_ConfigurationDocument + + { + Version="2.0.0"; + + MinimumCompatibleVersion = "1.0.0"; + + CompatibleVersionAdditionalProperties= {"Omi_BaseResource:ConfigurationName"}; + + Author="Microsoft"; + + GenerationDate="03/09/2023 14:17:33"; + + GenerationHost="Microsoft"; + + Name="LinuxBaseLine"; + + }; + diff --git a/stig/linux/config/Ubuntu1804-DataScience.mof b/stig/linux/config/Ubuntu1804-DataScience.mof index 4add950..7167154 100644 --- a/stig/linux/config/Ubuntu1804-DataScience.mof +++ b/stig/linux/config/Ubuntu1804-DataScience.mof @@ -1,1710 +1,1443 @@ -/* -@TargetNode='Ubuntu1804-DataScience' -@GeneratedBy=Microsoft -@GenerationDate=06/30/2022 11:38:45 -@GenerationHost=Microsoft -*/ - -instance of MSFT_nxPackageResource as $MSFT_nxPackageResource1ref -{ -ResourceID = "[nxPackage][V-219153.a][low][SRG-OS-000479-GPOS-00224]::[Ubuntu]Baseline"; - Ensure = "Present"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxPackage.ps1::8::5::nxPackage"; - Name = "audispd-plugins"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxPackageResource as $MSFT_nxPackageResource2ref -{ -ResourceID = "[nxPackage][V-219157][high][SRG-OS-000095-GPOS-00049]::[Ubuntu]Baseline"; - Ensure = "Absent"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxPackage.ps1::8::5::nxPackage"; - Name = "nis"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxPackageResource as $MSFT_nxPackageResource3ref -{ -ResourceID = "[nxPackage][V-219158][high][SRG-OS-000095-GPOS-00049]::[Ubuntu]Baseline"; - Ensure = "Absent"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxPackage.ps1::8::5::nxPackage"; - Name = "rsh-server"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxPackageResource as $MSFT_nxPackageResource4ref -{ -ResourceID = "[nxPackage][V-219160.a][medium][SRG-OS-000269-GPOS-00103]::[Ubuntu]Baseline"; - Ensure = "Present"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxPackage.ps1::8::5::nxPackage"; - Name = "rsyslog"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxPackageResource as $MSFT_nxPackageResource5ref -{ -ResourceID = "[nxPackage][V-219161][medium][SRG-OS-000297-GPOS-00115]::[Ubuntu]Baseline"; - Ensure = "Present"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxPackage.ps1::8::5::nxPackage"; - Name = "ufw"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxPackageResource as $MSFT_nxPackageResource6ref -{ -ResourceID = "[nxPackage][V-219177][high][SRG-OS-000074-GPOS-00042]::[Ubuntu]Baseline"; - Ensure = "Absent"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxPackage.ps1::8::5::nxPackage"; - Name = "telnetd"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxPackageResource as $MSFT_nxPackageResource7ref -{ -ResourceID = "[nxPackage][V-219186.a][medium][SRG-OS-000480-GPOS-00225]::[Ubuntu]Baseline"; - Ensure = "Present"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxPackage.ps1::8::5::nxPackage"; - Name = "libpam-pwquality"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxPackageResource as $MSFT_nxPackageResource8ref -{ -ResourceID = "[nxPackage][V-219225.a][medium][SRG-OS-000038-GPOS-00016]::[Ubuntu]Baseline"; - Ensure = "Present"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxPackage.ps1::8::5::nxPackage"; - Name = "auditd"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxPackageResource as $MSFT_nxPackageResource9ref -{ -ResourceID = "[nxPackage][V-219304][medium][SRG-OS-000030-GPOS-00011]::[Ubuntu]Baseline"; - Ensure = "Present"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxPackage.ps1::8::5::nxPackage"; - Name = "vlock"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxPackageResource as $MSFT_nxPackageResource10ref -{ -ResourceID = "[nxPackage][V-219318][medium][SRG-OS-000375-GPOS-00160]::[Ubuntu]Baseline"; - Ensure = "Present"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxPackage.ps1::8::5::nxPackage"; - Name = "libpam-pkcs11"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxPackageResource as $MSFT_nxPackageResource11ref -{ -ResourceID = "[nxPackage][V-219319][medium][SRG-OS-000376-GPOS-00161]::[Ubuntu]Baseline"; - Ensure = "Present"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxPackage.ps1::8::5::nxPackage"; - Name = "opensc-pkcs11"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxPackageResource as $MSFT_nxPackageResource12ref -{ -ResourceID = "[nxPackage][V-219322.a][low][SRG-OS-000312-GPOS-00122]::[Ubuntu]Baseline"; - Ensure = "Present"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxPackage.ps1::8::5::nxPackage"; - Name = "libpam-apparmor"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxPackageResource as $MSFT_nxPackageResource13ref -{ -ResourceID = "[nxPackage][V-219323][medium][SRG-OS-000368-GPOS-00154]::[Ubuntu]Baseline"; - Ensure = "Present"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxPackage.ps1::8::5::nxPackage"; - Name = "apparmor"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxPackageResource as $MSFT_nxPackageResource14ref -{ -ResourceID = "[nxPackage][V-219343][medium][SRG-OS-000445-GPOS-00199]::[Ubuntu]Baseline"; - Ensure = "Present"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxPackage.ps1::8::5::nxPackage"; - Name = "aide"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileResource as $MSFT_nxFileResource1ref -{ -ResourceID = "[nxFile][V-219303.a][medium][SRG-OS-000029-GPOS-00010]::[Ubuntu]Baseline"; - Contents = ""; - DestinationPath = "/etc/profile.d/autologout.sh"; - ModuleName = "nx"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; - ModuleVersion = "1.0"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileResource as $MSFT_nxFileResource2ref -{ -ResourceID = "[nxFile][V-219339.a][medium][SRG-OS-000378-GPOS-00163]::[Ubuntu]Baseline"; - Contents = ""; - DestinationPath = "/etc/modprobe.d/DISASTIG.conf"; - ModuleName = "nx"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; - ModuleVersion = "1.0"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource1ref -{ -ResourceID = "[nxFileLine][V-219152.a][low][SRG-OS-000343-GPOS-00134]::[Ubuntu]Baseline"; - ContainsLine = "space_left_action = email"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/auditd.conf"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "^#\\s*space_left_action.*"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileResource as $MSFT_nxFileResource3ref -{ -SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::29::9::nxFile"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - ResourceID = "[nxFile][V-219153.b][low][SRG-OS-000479-GPOS-00224]::[Ubuntu]Baseline"; - DestinationPath = "/etc/audisp/plugins.d/au-remote.conf"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource2ref -{ -ResourceID = "[nxFileLine][V-219153.b][low][SRG-OS-000479-GPOS-00224]::[Ubuntu]Baseline"; - ContainsLine = "active = yes"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audisp/plugins.d/au-remote.conf"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "\\s*active\\s*=\\s*no|active=yes|#\\s*active\\s*=.*"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource3ref -{ -ResourceID = "[nxFileLine][V-219156.a][medium][SRG-OS-000437-GPOS-00194]::[Ubuntu]Baseline"; - ContainsLine = "Unattended-Upgrade::Remove-Unused-Dependencies \"true\";"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/apt/apt.conf.d/50unattended-upgrades"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "\\s*Unattended-Upgrade::Remove-Unused-Dependencies\\s*(\"false\"|false|true).*|#\\s*Unattended-Upgrade::Remove-Unused-Dependencies.*"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource4ref -{ -ResourceID = "[nxFileLine][V-219156.b][medium][SRG-OS-000437-GPOS-00194]::[Ubuntu]Baseline"; - ContainsLine = "Unattended-Upgrade::Remove-Unused-Kernel-Packages \"true\";"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/apt/apt.conf.d/50unattended-upgrades"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "\\s*Unattended-Upgrade::Remove-Unused-Kernel-Packages\\s*(\"false\"|false|true).*|#\\s*Unattended-Upgrade::Remove-Unused-Kernel-Packages.*"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource5ref -{ -ResourceID = "[nxFileLine][V-219170.a][medium][SRG-OS-000228-GPOS-00088]::[Ubuntu]Baseline"; - ContainsLine = "Banner /etc/issue"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/ssh/sshd_config"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*Banner\\s*/etc/issue"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource6ref -{ -ResourceID = "[nxFileLine][V-219170.b][medium][SRG-OS-000228-GPOS-00088]::[Ubuntu]Baseline"; - ContainsLine = "You are accessing a U.S. Government (USG) Information System (IS) that is provided for USG-authorized use only.\n\nBy using this IS (which includes any device attached to this IS), you consent to the following conditions.\n\n-The USG routinely intercepts and monitors communications on this IS for purposes including, but not limited to, penetration testing, COMSEC monitoring, network operations and defense, personnel misconduct (PM), law enforcement (LE), and counterintelligence (CI) investigations.\n\n-At any time, the USG may inspect and seize data stored on this IS.\n\n-Communications using, or data stored on, this IS are not private, are subject to routine monitoring, interception, and search, and may be disclosed or used for any USG-authorized purpose.\n\n-This IS includes security measures (e.g., authentication and access controls) to protect USG interests--not for your personal benefit or privacy.\n\n-Notwithstanding the above, using this IS does not constitute consent to PM, LE or CI investigative searching or monitoring of the content of privileged communications, or work product, related to personal representation or services by attorneys, psychotherapists, or clergy, and their assistants. Such communications and work product are private and confidential. See User Agreement for details."; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/issue"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*You\\s*are\\s*accessing\\s*a\\s*U.S.\\s*Government\\s*(USG)\\s*Information\\s*System\\s*(IS)\\s*that\\s*is\\s*provided\\s*for\\s*USG-authorized\\s*use\\s*only.\\s*By\\s*using\\s*this\\s*IS\\s*(which\\s*includes\\s*any\\s*device\\s*attached\\s*to\\s*this\\s*IS),\\s*you\\s*consent\\s*to\\s*the\\s*following\\s*conditions.\\s*-The\\s*USG\\s*routinely\\s*intercepts\\s*and\\s*monitors\\s*communications\\s*on\\s*this\\s*IS\\s*for\\s*purposes\\s*including,\\s*but\\s*not\\s*limited\\s*to,\\s*penetration\\s*testing,\\s*COMSEC\\s*monitoring,\\s*network\\s*operations\\s*and\\s*defense,\\s*personnel\\s*misconduct\\s*(PM),\\s*law\\s*enforcement\\s*(LE),\\s*and\\s*counterintelligence\\s*(CI)\\s*investigations.\\s*-At\\s*any\\s*time,\\s*the\\s*USG\\s*may\\s*inspect\\s*and\\s*seize\\s*data\\s*stored\\s*on\\s*this\\s*IS.\\s*-Communications\\s*using,\\s*or\\s*data\\s*stored\\s*on,\\s*this\\s*IS\\s*are\\s*not\\s*private,\\s*are\\s*subject\\s*to\\s*routine\\s*monitoring,\\s*interception,\\s*and\\s*search,\\s*and\\s*may\\s*be\\s*disclosed\\s*or\\s*used\\s*for\\s*any\\s*USG-authorized\\s*purpose.\\s*-This\\s*IS\\s*includes\\s*security\\s*measures\\s*(e.g.,\\s*authentication\\s*and\\s*access\\s*controls)\\s*to\\s*protect\\s*USG\\s*interests--not\\s*for\\s*your\\s*personal\\s*benefit\\s*or\\s*privacy.\\s*-Notwithstanding\\s*the\\s*above,\\s*using\\s*this\\s*IS\\s*does\\s*not\\s*constitute\\s*consent\\s*to\\s*PM,\\s*LE\\s*or\\s*CI\\s*investigative\\s*searching\\s*or\\s*monitoring\\s*of\\s*the\\s*content\\s*of\\s*privileged\\s*communications,\\s*or\\s*work\\s*product,\\s*related\\s*to\\s*personal\\s*representation\\s*or\\s*services\\s*by\\s*attorneys,\\s*psychotherapists,\\s*or\\s*clergy,\\s*and\\s*their\\s*assistants.\\s*Such\\s*communications\\s*and\\s*work\\s*product\\s*are\\s*private\\s*and\\s*confidential.\\s*See\\s*User\\s*Agreement\\s*for\\s*details."; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource7ref -{ -ResourceID = "[nxFileLine][V-219172][low][SRG-OS-000069-GPOS-00037]::[Ubuntu]Baseline"; - ContainsLine = "ucredit=-1"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/security/pwquality.conf"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "^#\\s*ucredit.*$|^ucredit\\s*=\\s*(?!-1\\b)\\w*$"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource8ref -{ -ResourceID = "[nxFileLine][V-219173][low][SRG-OS-000070-GPOS-00038]::[Ubuntu]Baseline"; - ContainsLine = "lcredit=-1"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/security/pwquality.conf"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "^#\\s*lcredit.*$|^lcredit\\s*=\\s*(?!-1\\b)\\w*$"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource9ref -{ -ResourceID = "[nxFileLine][V-219174][low][SRG-OS-000071-GPOS-00039]::[Ubuntu]Baseline"; - ContainsLine = "dcredit=-1"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/security/pwquality.conf"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "^#\\s*dcredit.*$|^dcredit\\s*=\\s*(?!-1\\b)\\w*$"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource10ref -{ -ResourceID = "[nxFileLine][V-219175][low][SRG-OS-000072-GPOS-00040]::[Ubuntu]Baseline"; - ContainsLine = "difok=8"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/security/pwquality.conf"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "^\\s*difok\\s*=\\s*(-|)[0-7]$|#\\s*difok\\s*=.*|difok\\s+=\\s+.*"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource11ref -{ -ResourceID = "[nxFileLine][V-219176][medium][SRG-OS-000073-GPOS-00041]::[Ubuntu]Baseline"; - ContainsLine = "ENCRYPT_METHOD SHA512"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/login.defs"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*ENCRYPT_METHOD\\s*SHA512"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource12ref -{ -ResourceID = "[nxFileLine][V-219178][low][SRG-OS-000075-GPOS-00043]::[Ubuntu]Baseline"; - ContainsLine = "PASS_MIN_DAYS 1"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/login.defs"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "^\\s*PASS_MIN_DAYS\\s*[0]*$|#\\s*PASS_MIN_DAYS.*"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource13ref -{ -ResourceID = "[nxFileLine][V-219179][low][SRG-OS-000076-GPOS-00044]::[Ubuntu]Baseline"; - ContainsLine = "PASS_MAX_DAYS 60"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/login.defs"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "^\\s*PASS_MAX_DAYS\\s*([6][1-9]|[7-9][0-9]|\\d{3,})$|#\\s*PASS_MAX_DAYS.*"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource14ref -{ -ResourceID = "[nxFileLine][V-219181][medium][SRG-OS-000078-GPOS-00046]::[Ubuntu]Baseline"; - ContainsLine = "minlen=15"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/security/pwquality.conf"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "^\\s*minlen\\s*=\\s*([0-9]|[1][1-4])$|#\\s*minlen.*"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource15ref -{ -ResourceID = "[nxFileLine][V-219184][medium][SRG-OS-000480-GPOS-00225]::[Ubuntu]Baseline"; - ContainsLine = "dictcheck=1"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/security/pwquality.conf"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "^\\s*dictcheck\\s*=\\s*((?!1)|[1]\\d+)\\d*$|#\\s*dictcheck.*"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource16ref -{ -ResourceID = "[nxFileLine][V-219186.b][medium][SRG-OS-000480-GPOS-00225]::[Ubuntu]Baseline"; - ContainsLine = "enforcing = 1"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/security/pwquality.conf"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "^\\s*enforcing\\s*=\\s*((?!1)|[1]\\d+)\\d*$|#\\s*enforcing.*"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource17ref -{ -ResourceID = "[nxFileLine][V-219210][low][SRG-OS-000266-GPOS-00101]::[Ubuntu]Baseline"; - ContainsLine = "ocredit=-1"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/security/pwquality.conf"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "^#\\s*ocredit.*$|^ocredit\\s*=\\s*(?!-1)\\w*$"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource18ref -{ -ResourceID = "[nxFileLine][V-219213][medium][SRG-OS-000064-GPOS-00033]::[Ubuntu]Baseline"; - ContainsLine = "-w /var/log/tallylog -p wa -k logins"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-w\\s*/var/log/tallylog\\s*-p\\s*wa\\s*-k\\s*logins"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource19ref -{ -ResourceID = "[nxFileLine][V-219214][medium][SRG-OS-000064-GPOS-00033]::[Ubuntu]Baseline"; - ContainsLine = "-w /var/log/faillog -p wa -k logins"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-w\\s*/var/log/faillog\\s*-p\\s*wa\\s*-k\\s*logins"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource20ref -{ -ResourceID = "[nxFileLine][V-219215][medium][SRG-OS-000064-GPOS-00033]::[Ubuntu]Baseline"; - ContainsLine = "-w /var/log/lastlog -p wa -k logins"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-w\\s*/var/log/lastlog\\s*-p\\s*wa\\s*-k\\s*logins"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource21ref -{ -ResourceID = "[nxFileLine][V-219216][medium][SRG-OS-000471-GPOS-00215]::[Ubuntu]Baseline"; - ContainsLine = "-w /var/log/sudo.log -p wa -k priv_actions"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-w\\s*/var/log/sudo.log\\s*-p\\s*wa\\s*-k\\s*priv_actions"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource22ref -{ -ResourceID = "[nxFileLine][V-219217][medium][SRG-OS-000472-GPOS-00217]::[Ubuntu]Baseline"; - ContainsLine = "-w /var/log/wtmp -p wa -k logins"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-w\\s*/var/log/wtmp\\s*-p\\s*wa\\s*-k\\s*logins"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource23ref -{ -ResourceID = "[nxFileLine][V-219218][medium][SRG-OS-000472-GPOS-00217]::[Ubuntu]Baseline"; - ContainsLine = "-w /var/run/utmp -p wa -k logins"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-w\\s*/var/run/utmp\\s*-p\\s*wa\\s*-k\\s*logins"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource24ref -{ -ResourceID = "[nxFileLine][V-219219][medium][SRG-OS-000472-GPOS-00217]::[Ubuntu]Baseline"; - ContainsLine = "-w /var/log/btmp -p wa -k logins"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-w\\s*/var/log/btmp\\s*-p\\s*wa\\s*-k\\s*logins"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource25ref -{ -ResourceID = "[nxFileLine][V-219220][medium][SRG-OS-000476-GPOS-00221]::[Ubuntu]Baseline"; - ContainsLine = "-w /etc/passwd -p wa -k usergroup_modification"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-w\\s*/etc/passwd\\s*-p\\s*wa\\s*-k\\s*usergroup_modification"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource26ref -{ -ResourceID = "[nxFileLine][V-219221][medium][SRG-OS-000476-GPOS-00221]::[Ubuntu]Baseline"; - ContainsLine = "-w /etc/group -p wa -k usergroup_modification"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-w\\s*/etc/group\\s*-p\\s*wa\\s*-k\\s*usergroup_modification"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource27ref -{ -ResourceID = "[nxFileLine][V-219222][medium][SRG-OS-000476-GPOS-00221]::[Ubuntu]Baseline"; - ContainsLine = "-w /etc/gshadow -p wa -k usergroup_modification"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-w\\s*/etc/gshadow\\s*-p\\s*wa\\s*-k\\s*usergroup_modification"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource28ref -{ -ResourceID = "[nxFileLine][V-219223][medium][SRG-OS-000476-GPOS-00221]::[Ubuntu]Baseline"; - ContainsLine = "-w /etc/shadow -p wa -k usergroup_modification"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-w\\s*/etc/shadow\\s*-p\\s*wa\\s*-k\\s*usergroup_modification"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource29ref -{ -ResourceID = "[nxFileLine][V-219224][medium][SRG-OS-000476-GPOS-00221]::[Ubuntu]Baseline"; - ContainsLine = "-w /etc/security/opasswd -p wa -k usergroup_modification"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-w\\s*/etc/security/opasswd\\s*-p\\s*wa\\s*-k\\s*usergroup_modification"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource30ref -{ -ResourceID = "[nxFileLine][V-219226][medium][SRG-OS-000046-GPOS-00022]::[Ubuntu]Baseline"; - ContainsLine = "action_mail_acct = root"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/auditd.conf"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*action_mail_acct\\s*=\\s*root"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource31ref -{ -ResourceID = "[nxFileLine][V-219227][medium][SRG-OS-000047-GPOS-00023]::[Ubuntu]Baseline"; - ContainsLine = "disk_full_action = HALT"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/auditd.conf"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*disk_full_action.*|^\\s*disk_full_action\\s*=\\s*(?!HALT\\b)\\w+"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource32ref -{ -ResourceID = "[nxFileLine][V-219238][medium][SRG-OS-000064-GPOS-00033]::[Ubuntu]Baseline"; - ContainsLine = "-a always,exit -F path=/bin/su -F perm=x -F auid>=1000 -F auid!=-1 -k privileged-priv_change"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/bin/su\\s*-F\\s*perm\\s*=\\s*x\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*-1\\s*-k\\s*privileged-priv_change"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource33ref -{ -ResourceID = "[nxFileLine][V-219239][medium][SRG-OS-000064-GPOS-00033]::[Ubuntu]Baseline"; - ContainsLine = "-a always,exit -F path=/usr/bin/chfn -F perm=x -F auid>=1000 -F auid!=-1 -k privileged-chfn"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/bin/chfn\\s*-F\\s*perm\\s*=\\s*x\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*-1\\s*-k\\s*privileged-chfn"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource34ref -{ -ResourceID = "[nxFileLine][V-219240][medium][SRG-OS-000064-GPOS-00033]::[Ubuntu]Baseline"; - ContainsLine = "-a always,exit -F path=/bin/mount -F perm=x -F auid>=1000 -F auid!=-1 -k privileged-mount"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/bin/mount\\s*-F\\s*perm\\s*=\\s*x\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*-1\\s*-k\\s*privileged-mount"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource35ref -{ -ResourceID = "[nxFileLine][V-219241][medium][SRG-OS-000064-GPOS-00033]::[Ubuntu]Baseline"; - ContainsLine = "-a always,exit -F path=/bin/umount -F perm=x -F auid>=1000 -F auid!=-1 -k privileged-umount"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/bin/umount\\s*-F\\s*perm\\s*=\\s*x\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*-1\\s*-k\\s*privileged-umount"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource36ref -{ -ResourceID = "[nxFileLine][V-219242][medium][SRG-OS-000064-GPOS-00033]::[Ubuntu]Baseline"; - ContainsLine = "-a always,exit -F path=/usr/bin/ssh-agent -F perm=x -F auid>=1000 -F auid!=-1 -k privileged-ssh"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/bin/ssh-agent\\s*-F\\s*perm\\s*=\\s*x\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*-1\\s*-k\\s*privileged-ssh"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource37ref -{ -ResourceID = "[nxFileLine][V-219243][medium][SRG-OS-000064-GPOS-00033]::[Ubuntu]Baseline"; - ContainsLine = "-a always,exit -F path=/usr/lib/openssh/ssh-keysign -F perm=x -F auid>=1000 -F auid!=-1 -k privileged-ssh"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/lib/openssh/ssh-keysign\\s*-F\\s*perm\\s*=\\s*x\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*-1\\s*-k\\s*privileged-ssh"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource38ref -{ -ResourceID = "[nxFileLine][V-219244.a][medium][SRG-OS-000064-GPOS-00033]::[Ubuntu]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S setxattr,fsetxattr,lsetxattr,removexattr,fremovexattr,lremovexattr -F auid>=1000 -F auid!=-1 -k perm_mod"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*setxattr,fsetxattr,lsetxattr,removexattr,fremovexattr,lremovexattr\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*-1\\s*-k\\s*perm_mod"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource39ref -{ -ResourceID = "[nxFileLine][V-219244.b][medium][SRG-OS-000064-GPOS-00033]::[Ubuntu]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S setxattr,fsetxattr,lsetxattr,removexattr,fremovexattr,lremovexattr -F auid=0 -k perm_mod"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*setxattr,fsetxattr,lsetxattr,removexattr,fremovexattr,lremovexattr\\s*-F\\s*auid\\s*=\\s*0\\s*-k\\s*perm_mod"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource40ref -{ -ResourceID = "[nxFileLine][V-219244.c][medium][SRG-OS-000064-GPOS-00033]::[Ubuntu]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S setxattr,fsetxattr,lsetxattr,removexattr,fremovexattr,lremovexattr -F auid>=1000 -F auid!=-1 -k perm_mod"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*setxattr,fsetxattr,lsetxattr,removexattr,fremovexattr,lremovexattr\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*-1\\s*-k\\s*perm_mod"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource41ref -{ -ResourceID = "[nxFileLine][V-219244.d][medium][SRG-OS-000064-GPOS-00033]::[Ubuntu]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S setxattr,fsetxattr,lsetxattr,removexattr,fremovexattr,lremovexattr -F auid=0 -k perm_mod"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*setxattr,fsetxattr,lsetxattr,removexattr,fremovexattr,lremovexattr\\s*-F\\s*auid\\s*=\\s*0\\s*-k\\s*perm_mod"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource42ref -{ -ResourceID = "[nxFileLine][V-219250.a][medium][SRG-OS-000064-GPOS-00033]::[Ubuntu]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S chown,fchown,fchownat,lchown -F auid>=1000 -F auid!=-1 -k perm_chng"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*chown,fchown,fchownat,lchown\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*-1\\s*-k\\s*perm_chng"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource43ref -{ -ResourceID = "[nxFileLine][V-219250.b][medium][SRG-OS-000064-GPOS-00033]::[Ubuntu]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S chown,fchown,fchownat,lchown -F auid>=1000 -F auid!=-1 -k perm_chng"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*chown,fchown,fchownat,lchown\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*-1\\s*-k\\s*perm_chng"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource44ref -{ -ResourceID = "[nxFileLine][V-219254.a][medium][SRG-OS-000064-GPOS-00033]::[Ubuntu]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S chmod,fchmod,fchmodat -F auid>=1000 -F auid!=-1 -k perm_chng"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*chmod,fchmod,fchmodat\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*-1\\s*-k\\s*perm_chng"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource45ref -{ -ResourceID = "[nxFileLine][V-219254.b][medium][SRG-OS-000064-GPOS-00033]::[Ubuntu]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S chmod,fchmod,fchmodat -F auid>=1000 -F auid!=-1 -k perm_chng"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*chmod,fchmod,fchmodat\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*-1\\s*-k\\s*perm_chng"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource46ref -{ -ResourceID = "[nxFileLine][V-219257.a][medium][SRG-OS-000064-GPOS-00033]::[Ubuntu]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S creat,open,openat,open_by_handle_at,truncate,ftruncate -F exit=-EPERM -F auid>=1000 -F auid!=-1 -k perm_access"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*creat,open,openat,open_by_handle_at,truncate,ftruncate\\s*-F\\s*exit\\s*=\\s*-EPERM\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*-1\\s*-k\\s*perm_access"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource47ref -{ -ResourceID = "[nxFileLine][V-219257.b][medium][SRG-OS-000064-GPOS-00033]::[Ubuntu]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S creat,open,openat,open_by_handle_at,truncate,ftruncate -F exit=-EACCES -F auid>=1000 -F auid!=-1 -k perm_access"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*creat,open,openat,open_by_handle_at,truncate,ftruncate\\s*-F\\s*exit\\s*=\\s*-EACCES\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*-1\\s*-k\\s*perm_access"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource48ref -{ -ResourceID = "[nxFileLine][V-219257.c][medium][SRG-OS-000064-GPOS-00033]::[Ubuntu]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S creat,open,openat,open_by_handle_at,truncate,ftruncate -F exit=-EPERM -F auid>=1000 -F auid!=-1 -k perm_access"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*creat,open,openat,open_by_handle_at,truncate,ftruncate\\s*-F\\s*exit\\s*=\\s*-EPERM\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*-1\\s*-k\\s*perm_access"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource49ref -{ -ResourceID = "[nxFileLine][V-219257.d][medium][SRG-OS-000064-GPOS-00033]::[Ubuntu]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S creat,open,openat,open_by_handle_at,truncate,ftruncate -F exit=-EACCES -F auid>=1000 -F auid!=-1 -k perm_access"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*creat,open,openat,open_by_handle_at,truncate,ftruncate\\s*-F\\s*exit\\s*=\\s*-EACCES\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*-1\\s*-k\\s*perm_access"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource50ref -{ -ResourceID = "[nxFileLine][V-219263][medium][SRG-OS-000064-GPOS-00033]::[Ubuntu]Baseline"; - ContainsLine = "-a always,exit -F path=/usr/bin/sudo -F perm=x -F auid>=1000 -F auid!=-1 -k priv_cmd"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/bin/sudo\\s*-F\\s*perm\\s*=\\s*x\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*-1\\s*-k\\s*priv_cmd"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource51ref -{ -ResourceID = "[nxFileLine][V-219264][medium][SRG-OS-000064-GPOS-00033]::[Ubuntu]Baseline"; - ContainsLine = "-a always,exit -F path=/usr/bin/sudoedit -F perm=x -F auid>=1000 -F auid!=-1 -k priv_cmd"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/bin/sudoedit\\s*-F\\s*perm\\s*=\\s*x\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*-1\\s*-k\\s*priv_cmd"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource52ref -{ -ResourceID = "[nxFileLine][V-219265][medium][SRG-OS-000064-GPOS-00033]::[Ubuntu]Baseline"; - ContainsLine = "-a always,exit -F path=/usr/bin/chsh -F perm=x -F auid>=1000 -F auid!=-1 -k priv_cmd"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/bin/chsh\\s*-F\\s*perm\\s*=\\s*x\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*-1\\s*-k\\s*priv_cmd"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource53ref -{ -ResourceID = "[nxFileLine][V-219266][medium][SRG-OS-000064-GPOS-00033]::[Ubuntu]Baseline"; - ContainsLine = "-a always,exit -F path=/usr/bin/newgrp -F perm=x -F auid>=1000 -F auid!=-1 -k priv_cmd"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/bin/newgrp\\s*-F\\s*perm\\s*=\\s*x\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*-1\\s*-k\\s*priv_cmd"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource54ref -{ -ResourceID = "[nxFileLine][V-219267][medium][SRG-OS-000064-GPOS-00033]::[Ubuntu]Baseline"; - ContainsLine = "-a always,exit -F path=/usr/bin/chcon -F perm=x -F auid>=1000 -F auid!=-1 -k perm_chng"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/bin/chcon\\s*-F\\s*perm\\s*=\\s*x\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*-1\\s*-k\\s*perm_chng"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource55ref -{ -ResourceID = "[nxFileLine][V-219268][medium][SRG-OS-000064-GPOS-00033]::[Ubuntu]Baseline"; - ContainsLine = "-a always,exit -F path=/sbin/apparmor_parser -F perm=x -F auid>=1000 -F auid!=-1 -k perm_chng"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/sbin/apparmor_parser\\s*-F\\s*perm\\s*=\\s*x\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*-1\\s*-k\\s*perm_chng"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource56ref -{ -ResourceID = "[nxFileLine][V-219269][medium][SRG-OS-000064-GPOS-00033]::[Ubuntu]Baseline"; - ContainsLine = "-a always,exit -F path=/usr/bin/setfacl -F perm=x -F auid>=1000 -F auid!=-1 -k perm_chng"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/bin/setfacl\\s*-F\\s*perm\\s*=\\s*x\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*-1\\s*-k\\s*perm_chng"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource57ref -{ -ResourceID = "[nxFileLine][V-219270][medium][SRG-OS-000064-GPOS-00033]::[Ubuntu]Baseline"; - ContainsLine = "-a always,exit -F path=/usr/bin/chacl -F perm=x -F auid>=1000 -F auid!=-1 -k perm_chng"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/bin/chacl\\s*-F\\s*perm\\s*=\\s*x\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*-1\\s*-k\\s*perm_chng"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource58ref -{ -ResourceID = "[nxFileLine][V-219271][medium][SRG-OS-000064-GPOS-00033]::[Ubuntu]Baseline"; - ContainsLine = "-a always,exit -F path=/usr/bin/passwd -F perm=x -F auid>=1000 -F auid!=-1 -k privileged-passwd"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/bin/passwd\\s*-F\\s*perm\\s*=\\s*x\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*-1\\s*-k\\s*privileged-passwd"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource59ref -{ -ResourceID = "[nxFileLine][V-219272][medium][SRG-OS-000064-GPOS-00033]::[Ubuntu]Baseline"; - ContainsLine = "-a always,exit -F path=/sbin/unix_update -F perm=x -F auid>=1000 -F auid!=-1 -k privileged-unix-update"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/sbin/unix_update\\s*-F\\s*perm\\s*=\\s*x\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*-1\\s*-k\\s*privileged-unix-update"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource60ref -{ -ResourceID = "[nxFileLine][V-219273][medium][SRG-OS-000064-GPOS-00033]::[Ubuntu]Baseline"; - ContainsLine = "-a always,exit -F path=/usr/bin/gpasswd -F perm=x -F auid>=1000 -F auid!=-1 -k privileged-gpasswd"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/bin/gpasswd\\s*-F\\s*perm\\s*=\\s*x\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*-1\\s*-k\\s*privileged-gpasswd"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource61ref -{ -ResourceID = "[nxFileLine][V-219274][medium][SRG-OS-000064-GPOS-00033]::[Ubuntu]Baseline"; - ContainsLine = "-a always,exit -F path=/usr/bin/chage -F perm=x -F auid>=1000 -F auid!=-1 -k privileged-chage"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/bin/chage\\s*-F\\s*perm\\s*=\\s*x\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*-1\\s*-k\\s*privileged-chage"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource62ref -{ -ResourceID = "[nxFileLine][V-219275][medium][SRG-OS-000064-GPOS-00033]::[Ubuntu]Baseline"; - ContainsLine = "-a always,exit -F path=/usr/sbin/usermod -F perm=x -F auid>=1000 -F auid!=-1 -k privileged-usermod"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/sbin/usermod\\s*-F\\s*perm\\s*=\\s*x\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*-1\\s*-k\\s*privileged-usermod"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource63ref -{ -ResourceID = "[nxFileLine][V-219276][medium][SRG-OS-000064-GPOS-00033]::[Ubuntu]Baseline"; - ContainsLine = "-a always,exit -F path=/usr/bin/crontab -F perm=x -F auid>=1000 -F auid!=-1 -k privileged-crontab"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/bin/crontab\\s*-F\\s*perm\\s*=\\s*x\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*-1\\s*-k\\s*privileged-crontab"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource64ref -{ -ResourceID = "[nxFileLine][V-219277][medium][SRG-OS-000064-GPOS-00033]::[Ubuntu]Baseline"; - ContainsLine = "-a always,exit -F path=/usr/sbin/pam_timestamp_check -F perm=x -F auid>=1000 -F auid!=-1 -k privileged-pam_timestamp_check"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/sbin/pam_timestamp_check\\s*-F\\s*perm\\s*=\\s*x\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*-1\\s*-k\\s*privileged-pam_timestamp_check"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource65ref -{ -ResourceID = "[nxFileLine][V-219279.a][medium][SRG-OS-000064-GPOS-00033]::[Ubuntu]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S finit_module -F auid>=1000 -F auid!=-1 -k module_chng"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*finit_module\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*-1\\s*-k\\s*module_chng"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource66ref -{ -ResourceID = "[nxFileLine][V-219279.b][medium][SRG-OS-000064-GPOS-00033]::[Ubuntu]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S finit_module -F auid>=1000 -F auid!=-1 -k module_chng"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*finit_module\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*-1\\s*-k\\s*module_chng"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource67ref -{ -ResourceID = "[nxFileLine][V-219281.a][medium][SRG-OS-000326-GPOS-00126]::[Ubuntu]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S execve -C uid!=euid -F euid=0 -F key=execpriv"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*execve\\s*-C\\s*uid!\\s*=\\s*euid\\s*-F\\s*euid\\s*=\\s*0\\s*-F\\s*key\\s*=\\s*execpriv"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource68ref -{ -ResourceID = "[nxFileLine][V-219281.b][medium][SRG-OS-000326-GPOS-00126]::[Ubuntu]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S execve -C gid!=egid -F egid=0 -F key=execpriv"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*execve\\s*-C\\s*gid!\\s*=\\s*egid\\s*-F\\s*egid\\s*=\\s*0\\s*-F\\s*key\\s*=\\s*execpriv"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource69ref -{ -ResourceID = "[nxFileLine][V-219281.c][medium][SRG-OS-000326-GPOS-00126]::[Ubuntu]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S execve -C uid!=euid -F euid=0 -F key=execpriv"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*execve\\s*-C\\s*uid!\\s*=\\s*euid\\s*-F\\s*euid\\s*=\\s*0\\s*-F\\s*key\\s*=\\s*execpriv"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource70ref -{ -ResourceID = "[nxFileLine][V-219281.d][medium][SRG-OS-000326-GPOS-00126]::[Ubuntu]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S execve -C gid!=egid -F egid=0 -F key=execpriv"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*execve\\s*-C\\s*gid!\\s*=\\s*egid\\s*-F\\s*egid\\s*=\\s*0\\s*-F\\s*key\\s*=\\s*execpriv"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource71ref -{ -ResourceID = "[nxFileLine][V-219287.a][medium][SRG-OS-000468-GPOS-00212]::[Ubuntu]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S unlink,unlinkat,rename,renameat,rmdir -F auid>=1000 -F auid!=-1 -k delete"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*unlink,unlinkat,rename,renameat,rmdir\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*-1\\s*-k\\s*delete"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource72ref -{ -ResourceID = "[nxFileLine][V-219287.b][medium][SRG-OS-000468-GPOS-00212]::[Ubuntu]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S unlink,unlinkat,rename,renameat,rmdir -F auid>=1000 -F auid!=-1 -k delete"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*unlink,unlinkat,rename,renameat,rmdir\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*-1\\s*-k\\s*delete"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource73ref -{ -ResourceID = "[nxFileLine][V-219291.a][medium][SRG-OS-000471-GPOS-00216]::[Ubuntu]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S init_module -S finit_module -k modules"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*init_module\\s*-S\\s*finit_module\\s*-k\\s*modules"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource74ref -{ -ResourceID = "[nxFileLine][V-219291.b][medium][SRG-OS-000471-GPOS-00216]::[Ubuntu]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S init_module -S finit_module -k modules"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*init_module\\s*-S\\s*finit_module\\s*-k\\s*modules"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource75ref -{ -ResourceID = "[nxFileLine][V-219296.a][medium][SRG-OS-000477-GPOS-00222]::[Ubuntu]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S init_module -S finit_module -F key=modules"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*init_module\\s*-S\\s*finit_module\\s*-F\\s*key\\s*=\\s*modules"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource76ref -{ -ResourceID = "[nxFileLine][V-219296.b][medium][SRG-OS-000477-GPOS-00222]::[Ubuntu]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S init_module -S finit_module -F key=modules"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*init_module\\s*-S\\s*finit_module\\s*-F\\s*key\\s*=\\s*modules"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource77ref -{ -ResourceID = "[nxFileLine][V-219297.a][medium][SRG-OS-000477-GPOS-00222]::[Ubuntu]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S delete_module -F key=modules"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*delete_module\\s*-F\\s*key\\s*=\\s*modules"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource78ref -{ -ResourceID = "[nxFileLine][V-219297.b][medium][SRG-OS-000477-GPOS-00222]::[Ubuntu]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S delete_module -F key=modules"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*delete_module\\s*-F\\s*key\\s*=\\s*modules"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource79ref -{ -ResourceID = "[nxFileLine][V-219298][medium][SRG-OS-000477-GPOS-00222]::[Ubuntu]Baseline"; - ContainsLine = "-w /sbin/modprobe -p x -k modules"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-w\\s*/sbin/modprobe\\s*-p\\s*x\\s*-k\\s*modules"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource80ref -{ -ResourceID = "[nxFileLine][V-219299][medium][SRG-OS-000477-GPOS-00222]::[Ubuntu]Baseline"; - ContainsLine = "-w /bin/kmod -p x -k module"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-w\\s*/bin/kmod\\s*-p\\s*x\\s*-k\\s*module"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource81ref -{ -ResourceID = "[nxFileLine][V-219300][medium][SRG-OS-000477-GPOS-00222]::[Ubuntu]Baseline"; - ContainsLine = "-w /sbin/fdisk -p x -k fdisk"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-w\\s*/sbin/fdisk\\s*-p\\s*x\\s*-k\\s*fdisk"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource82ref -{ -ResourceID = "[nxFileLine][V-219301][low][SRG-OS-000027-GPOS-00008]::[Ubuntu]Baseline"; - ContainsLine = "* hard maxlogins 10"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/security/limits.conf"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "^\\s*\\*\\s*hard\\s*maxlogins\\s*([1][1-9]|[2-9]\\d+|[1-9][0-9]\\d+)$|^#\\s*\\*\\s*hard\\s*maxlogins."; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource83ref -{ -ResourceID = "[nxFileLine][V-219303.b][medium][SRG-OS-000029-GPOS-00010]::[Ubuntu]Baseline"; - ContainsLine = "TMOUT=900"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/profile.d/autologout.sh"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "^\\s*TMOUT\\s*=\\s*[0-8]?[0-9]?[0-9]?$|^#\\s*TMOUT.*"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource84ref -{ -ResourceID = "[nxFileLine][V-219303.c][medium][SRG-OS-000029-GPOS-00010]::[Ubuntu]Baseline"; - ContainsLine = "readonly TMOUT"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/profile.d/autologout.sh"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "^\\s*readonly\\s+(?!TMOUT\\b).*$|^\\s*#\\s*readonly.*$"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource85ref -{ -ResourceID = "[nxFileLine][V-219303.d][medium][SRG-OS-000029-GPOS-00010]::[Ubuntu]Baseline"; - ContainsLine = "export TMOUT"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/profile.d/autologout.sh"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "^\\s*export\\s+(?!TMOUT\\b).*$|^\\s*#\\s*export.*$"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource86ref -{ -ResourceID = "[nxFileLine][V-219306.a][medium][SRG-OS-000032-GPOS-00013]::[Ubuntu]Baseline"; - ContainsLine = "auth.*,authpriv.* /var/log/secure"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/rsyslog.d/50-default.conf"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*auth\\.\\*,\\s*authpriv\\.\\*.*"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource87ref -{ -ResourceID = "[nxFileLine][V-219306.b][medium][SRG-OS-000032-GPOS-00013]::[Ubuntu]Baseline"; - ContainsLine = "daemon.notice /var/log/messages"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/rsyslog.d/50-default.conf"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*daemon.notice.*"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource88ref -{ -ResourceID = "[nxFileLine][V-219307][medium][SRG-OS-000033-GPOS-00014]::[Ubuntu]Baseline"; - ContainsLine = "Ciphers aes256-ctr,aes192-ctr,aes128-ctr"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/ssh/sshd_config"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "^#\\s*Ciphers.*|^\\s*Ciphers\\s*aes128-ctr.*|^\\s*Ciphers\\s*aes192-ctr.*"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource89ref -{ -ResourceID = "[nxFileLine][V-219308][high][SRG-OS-000112-GPOS-00057]::[Ubuntu]Baseline"; - ContainsLine = "Protocol 2"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/ssh/sshd_config"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "^#\\s*Protocol.*$|^Protocol\\s*(?!2\\b)\\w*$"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource90ref -{ -ResourceID = "[nxFileLine][V-219309][medium][SRG-OS-000125-GPOS-00065]::[Ubuntu]Baseline"; - ContainsLine = "UsePAM yes"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/ssh/sshd_config"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*UsePAM\\s*yes"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource91ref -{ -ResourceID = "[nxFileLine][V-219310][medium][SRG-OS-000126-GPOS-00066]::[Ubuntu]Baseline"; - ContainsLine = "ClientAliveCountMax 1"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/ssh/sshd_config"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "^#\\s*ClientAliveCountMax.*$|^ClientAliveCountMax\\s*(?!1\\b)\\w*$"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource92ref -{ -ResourceID = "[nxFileLine][V-219311][medium][SRG-OS-000163-GPOS-00072]::[Ubuntu]Baseline"; - ContainsLine = "ClientAliveInterval 600"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/ssh/sshd_config"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "^\\s*ClientAliveInterval\\s*[0-5]?[0-9]?[0-9]?\\s*$|^#\\s*ClientAliveInterval.*|^\\s*ClientAliveInterval\\s*$"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource93ref -{ -ResourceID = "[nxFileLine][V-219312][medium][SRG-OS-000250-GPOS-00093]::[Ubuntu]Baseline"; - ContainsLine = "MACs hmac-sha2-512,hmac-sha2-256"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/ssh/sshd_config"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*MACs.*|\\s*MACs\\s*hmac-(?!sha2-512).*"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource94ref -{ -ResourceID = "[nxFileLine][V-219314.a][high][SRG-OS-000480-GPOS-00229]::[Ubuntu]Baseline"; - ContainsLine = "PermitEmptyPasswords no"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/ssh/sshd_config"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "^#\\s*PermitEmptyPasswords.*$|^PermitEmptyPasswords\\s*(?!no\\b)\\w*$"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource95ref -{ -ResourceID = "[nxFileLine][V-219314.b][high][SRG-OS-000480-GPOS-00229]::[Ubuntu]Baseline"; - ContainsLine = "PermitUserEnvironment no"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/ssh/sshd_config"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "^#\\s*PermitUserEnvironment.*$|^PermitUserEnvironment\\s*(?!no\\b)\\w*$"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource96ref -{ -ResourceID = "[nxFileLine][V-219328][medium][SRG-OS-000480-GPOS-00228]::[Ubuntu]Baseline"; - ContainsLine = "UMASK 077"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/login.defs"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "^\\s*UMASK(?!\\s077\\b)\\s*\\d*\\s*$|^#\\s*UMASK.*"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource97ref -{ -ResourceID = "[nxFileLine][V-219339.b][medium][SRG-OS-000378-GPOS-00163]::[Ubuntu]Baseline"; - ContainsLine = "install usb-storage /bin/true"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/modprobe.d/DISASTIG.conf"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*install\\s*usb-storage\\s*/bin/true"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource98ref -{ -ResourceID = "[nxFileLine][V-219339.c][medium][SRG-OS-000378-GPOS-00163]::[Ubuntu]Baseline"; - ContainsLine = "blacklist usb-storage"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/modprobe.d/DISASTIG.conf"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*blacklist\\s*usb-storage"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource99ref -{ -ResourceID = "[nxFileLine][V-233779][medium][SRG-OS-000480-GPOS-00227]::[Ubuntu]Baseline"; - ContainsLine = "X11Forwarding no"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/ssh/sshd_config"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "^#\\s*X11Forwarding.*$|^X11Forwarding\\s*(?!no\\b)\\w*$"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource100ref -{ -ResourceID = "[nxFileLine][V-233780][medium][SRG-OS-000480-GPOS-00227]::[Ubuntu]Baseline"; - ContainsLine = "X11UseLocalhost yes"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/ssh/sshd_config"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*X11UseLocalhost\\s*yes"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxServiceResource as $MSFT_nxServiceResource1ref -{ -ResourceID = "[nxService][V-219160.b][medium][SRG-OS-000269-GPOS-00103]::[Ubuntu]Baseline"; - Controller = "systemd"; - State = "Running"; - Enabled = True; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxService.ps1::22::9::nxService"; - Name = "rsyslog"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxServiceResource as $MSFT_nxServiceResource2ref -{ -ResourceID = "[nxService][V-219225.b][medium][SRG-OS-000038-GPOS-00016]::[Ubuntu]Baseline"; - Controller = "systemd"; - State = "Running"; - Enabled = True; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxService.ps1::22::9::nxService"; - Name = "auditd"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxServiceResource as $MSFT_nxServiceResource3ref -{ -ResourceID = "[nxService][V-219313.b][high][SRG-OS-000423-GPOS-00187]::[Ubuntu]Baseline"; - Controller = "systemd"; - State = "Running"; - Enabled = True; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxService.ps1::22::9::nxService"; - Name = "sshd"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxServiceResource as $MSFT_nxServiceResource4ref -{ -ResourceID = "[nxService][V-219322.b][low][SRG-OS-000312-GPOS-00122]::[Ubuntu]Baseline"; - Controller = "systemd"; - State = "Running"; - Enabled = True; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxService.ps1::22::9::nxService"; - Name = "apparmor"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxServiceResource as $MSFT_nxServiceResource5ref -{ -ResourceID = "[nxService][V-219335][medium][SRG-OS-000184-GPOS-00078]::[Ubuntu]Baseline"; - Controller = "systemd"; - Enabled = False; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxService.ps1::13::9::nxService"; - Name = "kdump"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxServiceResource as $MSFT_nxServiceResource6ref -{ -ResourceID = "[nxService][V-219337][medium][SRG-OS-000297-GPOS-00115]::[Ubuntu]Baseline"; - Controller = "systemd"; - State = "Running"; - Enabled = True; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxService.ps1::22::9::nxService"; - Name = "ufw"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxScriptResource as $MSFT_nxScriptResource1ref -{ -ResourceID = "[nxScript][V-219152.b][low][[Skip] SRG-OS-000343-GPOS-00134]::[Ubuntu]Baseline"; - GetScript = "#!/bin/bash\necho [V-219152.b][low][[Skip] SRG-OS-000343-GPOS-00134]"; - TestScript = "#!/bin/bash\nexit 0"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxScript.skip.ps1::10::5::nxScript"; - SetScript = "#!/bin/bash"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxScriptResource as $MSFT_nxScriptResource2ref -{ -ResourceID = "[nxScript][V-219153.c][low][[Skip] SRG-OS-000479-GPOS-00224]::[Ubuntu]Baseline"; - GetScript = "#!/bin/bash\necho [V-219153.c][low][[Skip] SRG-OS-000479-GPOS-00224]"; - TestScript = "#!/bin/bash\nexit 0"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxScript.skip.ps1::10::5::nxScript"; - SetScript = "#!/bin/bash"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxScriptResource as $MSFT_nxScriptResource3ref -{ -ResourceID = "[nxScript][V-219167.a][medium][[Skip] SRG-OS-000024-GPOS-00007]::[Ubuntu]Baseline"; - GetScript = "#!/bin/bash\necho [V-219167.a][medium][[Skip] SRG-OS-000024-GPOS-00007]"; - TestScript = "#!/bin/bash\nexit 0"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxScript.skip.ps1::10::5::nxScript"; - SetScript = "#!/bin/bash"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxScriptResource as $MSFT_nxScriptResource4ref -{ -ResourceID = "[nxScript][V-219167.b][medium][[Skip] SRG-OS-000024-GPOS-00007]::[Ubuntu]Baseline"; - GetScript = "#!/bin/bash\necho [V-219167.b][medium][[Skip] SRG-OS-000024-GPOS-00007]"; - TestScript = "#!/bin/bash\nexit 0"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxScript.skip.ps1::10::5::nxScript"; - SetScript = "#!/bin/bash"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxScriptResource as $MSFT_nxScriptResource5ref -{ -ResourceID = "[nxScript][V-219167.c][medium][[Skip] SRG-OS-000024-GPOS-00007]::[Ubuntu]Baseline"; - GetScript = "#!/bin/bash\necho [V-219167.c][medium][[Skip] SRG-OS-000024-GPOS-00007]"; - TestScript = "#!/bin/bash\nexit 0"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxScript.skip.ps1::10::5::nxScript"; - SetScript = "#!/bin/bash"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxScriptResource as $MSFT_nxScriptResource6ref -{ -ResourceID = "[nxScript][V-219159][medium][[Skip] SRG-OS-000191-GPOS-00080]::[Ubuntu]Baseline"; - GetScript = "#!/bin/bash\necho [V-219159][medium][[Skip] SRG-OS-000191-GPOS-00080]"; - TestScript = "#!/bin/bash\nexit 0"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxScript.skip.ps1::10::5::nxScript"; - SetScript = "#!/bin/bash"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxScriptResource as $MSFT_nxScriptResource7ref -{ -ResourceID = "[nxScript][V-219313.a][high][[Skip] SRG-OS-000423-GPOS-00187]::[Ubuntu]Baseline"; - GetScript = "#!/bin/bash\necho [V-219313.a][high][[Skip] SRG-OS-000423-GPOS-00187]"; - TestScript = "#!/bin/bash\nexit 0"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxScript.skip.ps1::10::5::nxScript"; - SetScript = "#!/bin/bash"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of OMI_ConfigurationDocument - - - { - Version="2.0.0"; - - - MinimumCompatibleVersion = "1.0.0"; - - - CompatibleVersionAdditionalProperties= {"Omi_BaseResource:ConfigurationName"}; - - - Author="Microsoft"; - - - GenerationDate="06/30/2022 11:38:45"; - - - GenerationHost="Microsoft"; - - - Name="LinuxBaseLine"; - - - }; +/* +@TargetNode='Ubuntu1804-DataScience' +@GeneratedBy=Microsoft +@GenerationDate=03/09/2023 14:17:33 +@GenerationHost=Microsoft +*/ + +instance of MSFT_nxPackageResource as $MSFT_nxPackageResource1ref +{ +ResourceID = "[nxPackage][V-219153.a][low][SRG-OS-000479-GPOS-00224]::[Ubuntu]Baseline"; + Ensure = "Present"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxPackage.ps1::8::5::nxPackage"; + Name = "audispd-plugins"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxPackageResource as $MSFT_nxPackageResource2ref +{ +ResourceID = "[nxPackage][V-219157][high][SRG-OS-000095-GPOS-00049]::[Ubuntu]Baseline"; + Ensure = "Absent"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxPackage.ps1::8::5::nxPackage"; + Name = "nis"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxPackageResource as $MSFT_nxPackageResource3ref +{ +ResourceID = "[nxPackage][V-219158][high][SRG-OS-000095-GPOS-00049]::[Ubuntu]Baseline"; + Ensure = "Absent"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxPackage.ps1::8::5::nxPackage"; + Name = "rsh-server"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxPackageResource as $MSFT_nxPackageResource4ref +{ +ResourceID = "[nxPackage][V-219160.a][medium][SRG-OS-000269-GPOS-00103]::[Ubuntu]Baseline"; + Ensure = "Present"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxPackage.ps1::8::5::nxPackage"; + Name = "rsyslog"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxPackageResource as $MSFT_nxPackageResource5ref +{ +ResourceID = "[nxPackage][V-219161][medium][SRG-OS-000297-GPOS-00115]::[Ubuntu]Baseline"; + Ensure = "Present"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxPackage.ps1::8::5::nxPackage"; + Name = "ufw"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxPackageResource as $MSFT_nxPackageResource6ref +{ +ResourceID = "[nxPackage][V-219177][high][SRG-OS-000074-GPOS-00042]::[Ubuntu]Baseline"; + Ensure = "Absent"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxPackage.ps1::8::5::nxPackage"; + Name = "telnetd"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxPackageResource as $MSFT_nxPackageResource7ref +{ +ResourceID = "[nxPackage][V-219186.a][medium][SRG-OS-000480-GPOS-00225]::[Ubuntu]Baseline"; + Ensure = "Present"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxPackage.ps1::8::5::nxPackage"; + Name = "libpam-pwquality"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxPackageResource as $MSFT_nxPackageResource8ref +{ +ResourceID = "[nxPackage][V-219225.a][medium][SRG-OS-000038-GPOS-00016]::[Ubuntu]Baseline"; + Ensure = "Present"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxPackage.ps1::8::5::nxPackage"; + Name = "auditd"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxPackageResource as $MSFT_nxPackageResource9ref +{ +ResourceID = "[nxPackage][V-219304][medium][SRG-OS-000030-GPOS-00011]::[Ubuntu]Baseline"; + Ensure = "Present"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxPackage.ps1::8::5::nxPackage"; + Name = "vlock"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxPackageResource as $MSFT_nxPackageResource10ref +{ +ResourceID = "[nxPackage][V-219318][medium][SRG-OS-000375-GPOS-00160]::[Ubuntu]Baseline"; + Ensure = "Present"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxPackage.ps1::8::5::nxPackage"; + Name = "libpam-pkcs11"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxPackageResource as $MSFT_nxPackageResource11ref +{ +ResourceID = "[nxPackage][V-219319][medium][SRG-OS-000376-GPOS-00161]::[Ubuntu]Baseline"; + Ensure = "Present"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxPackage.ps1::8::5::nxPackage"; + Name = "opensc-pkcs11"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxPackageResource as $MSFT_nxPackageResource12ref +{ +ResourceID = "[nxPackage][V-219322.a][low][SRG-OS-000312-GPOS-00122]::[Ubuntu]Baseline"; + Ensure = "Present"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxPackage.ps1::8::5::nxPackage"; + Name = "libpam-apparmor"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxPackageResource as $MSFT_nxPackageResource13ref +{ +ResourceID = "[nxPackage][V-219323][medium][SRG-OS-000368-GPOS-00154]::[Ubuntu]Baseline"; + Ensure = "Present"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxPackage.ps1::8::5::nxPackage"; + Name = "apparmor"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxPackageResource as $MSFT_nxPackageResource14ref +{ +ResourceID = "[nxPackage][V-219343][medium][SRG-OS-000445-GPOS-00199]::[Ubuntu]Baseline"; + Ensure = "Present"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxPackage.ps1::8::5::nxPackage"; + Name = "aide"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileResource as $MSFT_nxFileResource1ref +{ +ResourceID = "[nxFile][V-219303.a][medium][SRG-OS-000029-GPOS-00010]::[Ubuntu]Baseline"; + Contents = ""; + DestinationPath = "/etc/profile.d/autologout.sh"; + ModuleName = "nx"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; + ModuleVersion = "1.0"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileResource as $MSFT_nxFileResource2ref +{ +ResourceID = "[nxFile][V-219339.a][medium][SRG-OS-000378-GPOS-00163]::[Ubuntu]Baseline"; + Contents = ""; + DestinationPath = "/etc/modprobe.d/DISASTIG.conf"; + ModuleName = "nx"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; + ModuleVersion = "1.0"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource1ref +{ +ResourceID = "[nxFileLine][V-219152.a][low][SRG-OS-000343-GPOS-00134]::[Ubuntu]Baseline"; + ContainsLine = "space_left_action = email"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/auditd.conf"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "^#\\s*space_left_action.*"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileResource as $MSFT_nxFileResource3ref +{ +SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::29::9::nxFile"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + ResourceID = "[nxFile][V-219153.b][low][SRG-OS-000479-GPOS-00224]::[Ubuntu]Baseline"; + DestinationPath = "/etc/audisp/plugins.d/au-remote.conf"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource2ref +{ +ResourceID = "[nxFileLine][V-219153.b][low][SRG-OS-000479-GPOS-00224]::[Ubuntu]Baseline"; + ContainsLine = "active = yes"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audisp/plugins.d/au-remote.conf"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "\\s*active\\s*=\\s*no|active=yes|#\\s*active\\s*=.*"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource3ref +{ +ResourceID = "[nxFileLine][V-219156.a][medium][SRG-OS-000437-GPOS-00194]::[Ubuntu]Baseline"; + ContainsLine = "Unattended-Upgrade::Remove-Unused-Dependencies \"true\";"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/apt/apt.conf.d/50unattended-upgrades"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "\\s*Unattended-Upgrade::Remove-Unused-Dependencies\\s*(\"false\"|false|true).*|#\\s*Unattended-Upgrade::Remove-Unused-Dependencies.*"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource4ref +{ +ResourceID = "[nxFileLine][V-219156.b][medium][SRG-OS-000437-GPOS-00194]::[Ubuntu]Baseline"; + ContainsLine = "Unattended-Upgrade::Remove-Unused-Kernel-Packages \"true\";"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/apt/apt.conf.d/50unattended-upgrades"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "\\s*Unattended-Upgrade::Remove-Unused-Kernel-Packages\\s*(\"false\"|false|true).*|#\\s*Unattended-Upgrade::Remove-Unused-Kernel-Packages.*"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource5ref +{ +ResourceID = "[nxFileLine][V-219170.a][medium][SRG-OS-000228-GPOS-00088]::[Ubuntu]Baseline"; + ContainsLine = "Banner /etc/issue"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/ssh/sshd_config"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*Banner\\s*/etc/issue"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource6ref +{ +ResourceID = "[nxFileLine][V-219170.b][medium][SRG-OS-000228-GPOS-00088]::[Ubuntu]Baseline"; + ContainsLine = "You are accessing a U.S. Government (USG) Information System (IS) that is provided for USG-authorized use only.\n\nBy using this IS (which includes any device attached to this IS), you consent to the following conditions:\n\n-The USG routinely intercepts and monitors communications on this IS for purposes including, but not limited to, penetration testing, COMSEC monitoring, network operations and defense, personnel misconduct (PM), law enforcement (LE), and counterintelligence (CI) investigations.\n\n-At any time, the USG may inspect and seize data stored on this IS.\n\n-Communications using, or data stored on, this IS are not private, are subject to routine monitoring, interception, and search, and may be disclosed or used for any USG-authorized purpose.\n\n-This IS includes security measures (e.g., authentication and access controls) to protect USG interests--not for your personal benefit or privacy.\n\n-Notwithstanding the above, using this IS does not constitute consent to PM, LE or CI investigative searching or monitoring of the content of privileged communications, or work product, related to personal representation or services by attorneys, psychotherapists, or clergy, and their assistants. Such communications and work product are private and confidential. See User Agreement for details."; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/issue"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*You\\s*are\\s*accessing\\s*a\\s*U.S.\\s*Government\\s*(USG)\\s*Information\\s*System\\s*(IS)\\s*that\\s*is\\s*provided\\s*for\\s*USG-authorized\\s*use\\s*only.\\s*By\\s*using\\s*this\\s*IS\\s*(which\\s*includes\\s*any\\s*device\\s*attached\\s*to\\s*this\\s*IS),\\s*you\\s*consent\\s*to\\s*the\\s*following\\s*conditions:\\s*-The\\s*USG\\s*routinely\\s*intercepts\\s*and\\s*monitors\\s*communications\\s*on\\s*this\\s*IS\\s*for\\s*purposes\\s*including,\\s*but\\s*not\\s*limited\\s*to,\\s*penetration\\s*testing,\\s*COMSEC\\s*monitoring,\\s*network\\s*operations\\s*and\\s*defense,\\s*personnel\\s*misconduct\\s*(PM),\\s*law\\s*enforcement\\s*(LE),\\s*and\\s*counterintelligence\\s*(CI)\\s*investigations.\\s*-At\\s*any\\s*time,\\s*the\\s*USG\\s*may\\s*inspect\\s*and\\s*seize\\s*data\\s*stored\\s*on\\s*this\\s*IS.\\s*-Communications\\s*using,\\s*or\\s*data\\s*stored\\s*on,\\s*this\\s*IS\\s*are\\s*not\\s*private,\\s*are\\s*subject\\s*to\\s*routine\\s*monitoring,\\s*interception,\\s*and\\s*search,\\s*and\\s*may\\s*be\\s*disclosed\\s*or\\s*used\\s*for\\s*any\\s*USG-authorized\\s*purpose.\\s*-This\\s*IS\\s*includes\\s*security\\s*measures\\s*(e.g.,\\s*authentication\\s*and\\s*access\\s*controls)\\s*to\\s*protect\\s*USG\\s*interests--not\\s*for\\s*your\\s*personal\\s*benefit\\s*or\\s*privacy.\\s*-Notwithstanding\\s*the\\s*above,\\s*using\\s*this\\s*IS\\s*does\\s*not\\s*constitute\\s*consent\\s*to\\s*PM,\\s*LE\\s*or\\s*CI\\s*investigative\\s*searching\\s*or\\s*monitoring\\s*of\\s*the\\s*content\\s*of\\s*privileged\\s*communications,\\s*or\\s*work\\s*product,\\s*related\\s*to\\s*personal\\s*representation\\s*or\\s*services\\s*by\\s*attorneys,\\s*psychotherapists,\\s*or\\s*clergy,\\s*and\\s*their\\s*assistants.\\s*Such\\s*communications\\s*and\\s*work\\s*product\\s*are\\s*private\\s*and\\s*confidential.\\s*See\\s*User\\s*Agreement\\s*for\\s*details."; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource7ref +{ +ResourceID = "[nxFileLine][V-219172][low][SRG-OS-000069-GPOS-00037]::[Ubuntu]Baseline"; + ContainsLine = "ucredit=-1"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/security/pwquality.conf"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "^#\\s*ucredit.*$|^ucredit\\s*=\\s*(?!-1\\b)\\w*$"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource8ref +{ +ResourceID = "[nxFileLine][V-219173][low][SRG-OS-000070-GPOS-00038]::[Ubuntu]Baseline"; + ContainsLine = "lcredit=-1"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/security/pwquality.conf"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "^#\\s*lcredit.*$|^lcredit\\s*=\\s*(?!-1\\b)\\w*$"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource9ref +{ +ResourceID = "[nxFileLine][V-219174][low][SRG-OS-000071-GPOS-00039]::[Ubuntu]Baseline"; + ContainsLine = "dcredit=-1"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/security/pwquality.conf"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "^#\\s*dcredit.*$|^dcredit\\s*=\\s*(?!-1\\b)\\w*$"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource10ref +{ +ResourceID = "[nxFileLine][V-219175][low][SRG-OS-000072-GPOS-00040]::[Ubuntu]Baseline"; + ContainsLine = "difok=8"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/security/pwquality.conf"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "^\\s*difok\\s*=\\s*(-|)[0-7]$|#\\s*difok\\s*=.*|difok\\s+=\\s+.*"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource11ref +{ +ResourceID = "[nxFileLine][V-219176][medium][SRG-OS-000073-GPOS-00041]::[Ubuntu]Baseline"; + ContainsLine = "ENCRYPT_METHOD SHA512"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/login.defs"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*ENCRYPT_METHOD\\s*SHA512"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource12ref +{ +ResourceID = "[nxFileLine][V-219178][low][SRG-OS-000075-GPOS-00043]::[Ubuntu]Baseline"; + ContainsLine = "PASS_MIN_DAYS 1"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/login.defs"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "^\\s*PASS_MIN_DAYS\\s*[0]*$|#\\s*PASS_MIN_DAYS.*"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource13ref +{ +ResourceID = "[nxFileLine][V-219179][low][SRG-OS-000076-GPOS-00044]::[Ubuntu]Baseline"; + ContainsLine = "PASS_MAX_DAYS 60"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/login.defs"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "^\\s*PASS_MAX_DAYS\\s*([6][1-9]|[7-9][0-9]|\\d{3,})$|#\\s*PASS_MAX_DAYS.*"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource14ref +{ +ResourceID = "[nxFileLine][V-219181][medium][SRG-OS-000078-GPOS-00046]::[Ubuntu]Baseline"; + ContainsLine = "minlen=15"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/security/pwquality.conf"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "^\\s*minlen\\s*=\\s*([0-9]|[1][1-4])$|#\\s*minlen.*"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource15ref +{ +ResourceID = "[nxFileLine][V-219184][medium][SRG-OS-000480-GPOS-00225]::[Ubuntu]Baseline"; + ContainsLine = "dictcheck=1"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/security/pwquality.conf"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "^\\s*dictcheck\\s*=\\s*((?!1)|[1]\\d+)\\d*$|#\\s*dictcheck.*"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource16ref +{ +ResourceID = "[nxFileLine][V-219186.b][medium][SRG-OS-000480-GPOS-00225]::[Ubuntu]Baseline"; + ContainsLine = "enforcing = 1"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/security/pwquality.conf"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "^\\s*enforcing\\s*=\\s*((?!1)|[1]\\d+)\\d*$|#\\s*enforcing.*"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource17ref +{ +ResourceID = "[nxFileLine][V-219210][low][SRG-OS-000266-GPOS-00101]::[Ubuntu]Baseline"; + ContainsLine = "ocredit=-1"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/security/pwquality.conf"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "^#\\s*ocredit.*$|^ocredit\\s*=\\s*(?!-1)\\w*$"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource18ref +{ +ResourceID = "[nxFileLine][V-219213][medium][SRG-OS-000064-GPOS-00033]::[Ubuntu]Baseline"; + ContainsLine = "-w /var/log/tallylog -p wa -k logins"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-w\\s*/var/log/tallylog\\s*-p\\s*wa\\s*-k\\s*logins"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource19ref +{ +ResourceID = "[nxFileLine][V-219214][medium][SRG-OS-000064-GPOS-00033]::[Ubuntu]Baseline"; + ContainsLine = "-w /var/log/faillog -p wa -k logins"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-w\\s*/var/log/faillog\\s*-p\\s*wa\\s*-k\\s*logins"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource20ref +{ +ResourceID = "[nxFileLine][V-219215][medium][SRG-OS-000064-GPOS-00033]::[Ubuntu]Baseline"; + ContainsLine = "-w /var/log/lastlog -p wa -k logins"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-w\\s*/var/log/lastlog\\s*-p\\s*wa\\s*-k\\s*logins"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource21ref +{ +ResourceID = "[nxFileLine][V-219216][medium][SRG-OS-000471-GPOS-00215]::[Ubuntu]Baseline"; + ContainsLine = "-w /var/log/sudo.log -p wa -k priv_actions"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-w\\s*/var/log/sudo.log\\s*-p\\s*wa\\s*-k\\s*priv_actions"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource22ref +{ +ResourceID = "[nxFileLine][V-219217][medium][SRG-OS-000472-GPOS-00217]::[Ubuntu]Baseline"; + ContainsLine = "-w /var/log/wtmp -p wa -k logins"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-w\\s*/var/log/wtmp\\s*-p\\s*wa\\s*-k\\s*logins"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource23ref +{ +ResourceID = "[nxFileLine][V-219218][medium][SRG-OS-000472-GPOS-00217]::[Ubuntu]Baseline"; + ContainsLine = "-w /var/run/utmp -p wa -k logins"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-w\\s*/var/run/utmp\\s*-p\\s*wa\\s*-k\\s*logins"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource24ref +{ +ResourceID = "[nxFileLine][V-219219][medium][SRG-OS-000472-GPOS-00217]::[Ubuntu]Baseline"; + ContainsLine = "-w /var/log/btmp -p wa -k logins"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-w\\s*/var/log/btmp\\s*-p\\s*wa\\s*-k\\s*logins"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource25ref +{ +ResourceID = "[nxFileLine][V-219220][medium][SRG-OS-000476-GPOS-00221]::[Ubuntu]Baseline"; + ContainsLine = "-w /etc/passwd -p wa -k usergroup_modification"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-w\\s*/etc/passwd\\s*-p\\s*wa\\s*-k\\s*usergroup_modification"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource26ref +{ +ResourceID = "[nxFileLine][V-219221][medium][SRG-OS-000476-GPOS-00221]::[Ubuntu]Baseline"; + ContainsLine = "-w /etc/group -p wa -k usergroup_modification"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-w\\s*/etc/group\\s*-p\\s*wa\\s*-k\\s*usergroup_modification"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource27ref +{ +ResourceID = "[nxFileLine][V-219222][medium][SRG-OS-000476-GPOS-00221]::[Ubuntu]Baseline"; + ContainsLine = "-w /etc/gshadow -p wa -k usergroup_modification"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-w\\s*/etc/gshadow\\s*-p\\s*wa\\s*-k\\s*usergroup_modification"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource28ref +{ +ResourceID = "[nxFileLine][V-219223][medium][SRG-OS-000476-GPOS-00221]::[Ubuntu]Baseline"; + ContainsLine = "-w /etc/shadow -p wa -k usergroup_modification"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-w\\s*/etc/shadow\\s*-p\\s*wa\\s*-k\\s*usergroup_modification"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource29ref +{ +ResourceID = "[nxFileLine][V-219224][medium][SRG-OS-000476-GPOS-00221]::[Ubuntu]Baseline"; + ContainsLine = "-w /etc/security/opasswd -p wa -k usergroup_modification"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-w\\s*/etc/security/opasswd\\s*-p\\s*wa\\s*-k\\s*usergroup_modification"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource30ref +{ +ResourceID = "[nxFileLine][V-219226][medium][SRG-OS-000046-GPOS-00022]::[Ubuntu]Baseline"; + ContainsLine = "action_mail_acct = root"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/auditd.conf"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*action_mail_acct\\s*=\\s*root"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource31ref +{ +ResourceID = "[nxFileLine][V-219227][medium][SRG-OS-000047-GPOS-00023]::[Ubuntu]Baseline"; + ContainsLine = "disk_full_action = HALT"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/auditd.conf"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*disk_full_action.*|^\\s*disk_full_action\\s*=\\s*(?!HALT\\b)\\w+"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource32ref +{ +ResourceID = "[nxFileLine][V-219238][medium][SRG-OS-000064-GPOS-00033]::[Ubuntu]Baseline"; + ContainsLine = "-a always,exit -F path=/bin/su -F perm=x -F auid>=1000 -F auid!=-1 -k privileged-priv_change"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/bin/su\\s*-F\\s*perm\\s*=\\s*x\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*-1\\s*-k\\s*privileged-priv_change"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource33ref +{ +ResourceID = "[nxFileLine][V-219239][medium][SRG-OS-000064-GPOS-00033]::[Ubuntu]Baseline"; + ContainsLine = "-a always,exit -F path=/usr/bin/chfn -F perm=x -F auid>=1000 -F auid!=-1 -k privileged-chfn"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/bin/chfn\\s*-F\\s*perm\\s*=\\s*x\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*-1\\s*-k\\s*privileged-chfn"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource34ref +{ +ResourceID = "[nxFileLine][V-219240][medium][SRG-OS-000064-GPOS-00033]::[Ubuntu]Baseline"; + ContainsLine = "-a always,exit -F path=/bin/mount -F perm=x -F auid>=1000 -F auid!=-1 -k privileged-mount"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/bin/mount\\s*-F\\s*perm\\s*=\\s*x\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*-1\\s*-k\\s*privileged-mount"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource35ref +{ +ResourceID = "[nxFileLine][V-219241][medium][SRG-OS-000064-GPOS-00033]::[Ubuntu]Baseline"; + ContainsLine = "-a always,exit -F path=/bin/umount -F perm=x -F auid>=1000 -F auid!=-1 -k privileged-umount"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/bin/umount\\s*-F\\s*perm\\s*=\\s*x\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*-1\\s*-k\\s*privileged-umount"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource36ref +{ +ResourceID = "[nxFileLine][V-219242][medium][SRG-OS-000064-GPOS-00033]::[Ubuntu]Baseline"; + ContainsLine = "-a always,exit -F path=/usr/bin/ssh-agent -F perm=x -F auid>=1000 -F auid!=-1 -k privileged-ssh"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/bin/ssh-agent\\s*-F\\s*perm\\s*=\\s*x\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*-1\\s*-k\\s*privileged-ssh"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource37ref +{ +ResourceID = "[nxFileLine][V-219243][medium][SRG-OS-000064-GPOS-00033]::[Ubuntu]Baseline"; + ContainsLine = "-a always,exit -F path=/usr/lib/openssh/ssh-keysign -F perm=x -F auid>=1000 -F auid!=-1 -k privileged-ssh"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/lib/openssh/ssh-keysign\\s*-F\\s*perm\\s*=\\s*x\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*-1\\s*-k\\s*privileged-ssh"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource38ref +{ +ResourceID = "[nxFileLine][V-219244.a][medium][SRG-OS-000064-GPOS-00033]::[Ubuntu]Baseline"; + ContainsLine = "-a always,exit -F arch=b32 -S setxattr,fsetxattr,lsetxattr,removexattr,fremovexattr,lremovexattr -F auid>=1000 -F auid!=-1 -k perm_mod"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*setxattr,fsetxattr,lsetxattr,removexattr,fremovexattr,lremovexattr\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*-1\\s*-k\\s*perm_mod"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource39ref +{ +ResourceID = "[nxFileLine][V-219244.b][medium][SRG-OS-000064-GPOS-00033]::[Ubuntu]Baseline"; + ContainsLine = "-a always,exit -F arch=b32 -S setxattr,fsetxattr,lsetxattr,removexattr,fremovexattr,lremovexattr -F auid=0 -k perm_mod"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*setxattr,fsetxattr,lsetxattr,removexattr,fremovexattr,lremovexattr\\s*-F\\s*auid\\s*=\\s*0\\s*-k\\s*perm_mod"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource40ref +{ +ResourceID = "[nxFileLine][V-219244.c][medium][SRG-OS-000064-GPOS-00033]::[Ubuntu]Baseline"; + ContainsLine = "-a always,exit -F arch=b64 -S setxattr,fsetxattr,lsetxattr,removexattr,fremovexattr,lremovexattr -F auid>=1000 -F auid!=-1 -k perm_mod"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*setxattr,fsetxattr,lsetxattr,removexattr,fremovexattr,lremovexattr\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*-1\\s*-k\\s*perm_mod"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource41ref +{ +ResourceID = "[nxFileLine][V-219244.d][medium][SRG-OS-000064-GPOS-00033]::[Ubuntu]Baseline"; + ContainsLine = "-a always,exit -F arch=b64 -S setxattr,fsetxattr,lsetxattr,removexattr,fremovexattr,lremovexattr -F auid=0 -k perm_mod"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*setxattr,fsetxattr,lsetxattr,removexattr,fremovexattr,lremovexattr\\s*-F\\s*auid\\s*=\\s*0\\s*-k\\s*perm_mod"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource42ref +{ +ResourceID = "[nxFileLine][V-219250.a][medium][SRG-OS-000064-GPOS-00033]::[Ubuntu]Baseline"; + ContainsLine = "-a always,exit -F arch=b32 -S chown,fchown,fchownat,lchown -F auid>=1000 -F auid!=-1 -k perm_chng"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*chown,fchown,fchownat,lchown\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*-1\\s*-k\\s*perm_chng"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource43ref +{ +ResourceID = "[nxFileLine][V-219250.b][medium][SRG-OS-000064-GPOS-00033]::[Ubuntu]Baseline"; + ContainsLine = "-a always,exit -F arch=b64 -S chown,fchown,fchownat,lchown -F auid>=1000 -F auid!=-1 -k perm_chng"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*chown,fchown,fchownat,lchown\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*-1\\s*-k\\s*perm_chng"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource44ref +{ +ResourceID = "[nxFileLine][V-219254.a][medium][SRG-OS-000064-GPOS-00033]::[Ubuntu]Baseline"; + ContainsLine = "-a always,exit -F arch=b32 -S chmod,fchmod,fchmodat -F auid>=1000 -F auid!=-1 -k perm_chng"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*chmod,fchmod,fchmodat\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*-1\\s*-k\\s*perm_chng"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource45ref +{ +ResourceID = "[nxFileLine][V-219254.b][medium][SRG-OS-000064-GPOS-00033]::[Ubuntu]Baseline"; + ContainsLine = "-a always,exit -F arch=b64 -S chmod,fchmod,fchmodat -F auid>=1000 -F auid!=-1 -k perm_chng"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*chmod,fchmod,fchmodat\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*-1\\s*-k\\s*perm_chng"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource46ref +{ +ResourceID = "[nxFileLine][V-219257.a][medium][SRG-OS-000064-GPOS-00033]::[Ubuntu]Baseline"; + ContainsLine = "-a always,exit -F arch=b32 -S creat,open,openat,open_by_handle_at,truncate,ftruncate -F exit=-EPERM -F auid>=1000 -F auid!=-1 -k perm_access"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*creat,open,openat,open_by_handle_at,truncate,ftruncate\\s*-F\\s*exit\\s*=\\s*-EPERM\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*-1\\s*-k\\s*perm_access"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource47ref +{ +ResourceID = "[nxFileLine][V-219257.b][medium][SRG-OS-000064-GPOS-00033]::[Ubuntu]Baseline"; + ContainsLine = "-a always,exit -F arch=b32 -S creat,open,openat,open_by_handle_at,truncate,ftruncate -F exit=-EACCES -F auid>=1000 -F auid!=-1 -k perm_access"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*creat,open,openat,open_by_handle_at,truncate,ftruncate\\s*-F\\s*exit\\s*=\\s*-EACCES\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*-1\\s*-k\\s*perm_access"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource48ref +{ +ResourceID = "[nxFileLine][V-219257.c][medium][SRG-OS-000064-GPOS-00033]::[Ubuntu]Baseline"; + ContainsLine = "-a always,exit -F arch=b64 -S creat,open,openat,open_by_handle_at,truncate,ftruncate -F exit=-EPERM -F auid>=1000 -F auid!=-1 -k perm_access"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*creat,open,openat,open_by_handle_at,truncate,ftruncate\\s*-F\\s*exit\\s*=\\s*-EPERM\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*-1\\s*-k\\s*perm_access"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource49ref +{ +ResourceID = "[nxFileLine][V-219257.d][medium][SRG-OS-000064-GPOS-00033]::[Ubuntu]Baseline"; + ContainsLine = "-a always,exit -F arch=b64 -S creat,open,openat,open_by_handle_at,truncate,ftruncate -F exit=-EACCES -F auid>=1000 -F auid!=-1 -k perm_access"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*creat,open,openat,open_by_handle_at,truncate,ftruncate\\s*-F\\s*exit\\s*=\\s*-EACCES\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*-1\\s*-k\\s*perm_access"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource50ref +{ +ResourceID = "[nxFileLine][V-219263][medium][SRG-OS-000064-GPOS-00033]::[Ubuntu]Baseline"; + ContainsLine = "-a always,exit -F path=/usr/bin/sudo -F perm=x -F auid>=1000 -F auid!=-1 -k priv_cmd"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/bin/sudo\\s*-F\\s*perm\\s*=\\s*x\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*-1\\s*-k\\s*priv_cmd"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource51ref +{ +ResourceID = "[nxFileLine][V-219264][medium][SRG-OS-000064-GPOS-00033]::[Ubuntu]Baseline"; + ContainsLine = "-a always,exit -F path=/usr/bin/sudoedit -F perm=x -F auid>=1000 -F auid!=-1 -k priv_cmd"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/bin/sudoedit\\s*-F\\s*perm\\s*=\\s*x\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*-1\\s*-k\\s*priv_cmd"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource52ref +{ +ResourceID = "[nxFileLine][V-219265][medium][SRG-OS-000064-GPOS-00033]::[Ubuntu]Baseline"; + ContainsLine = "-a always,exit -F path=/usr/bin/chsh -F perm=x -F auid>=1000 -F auid!=-1 -k priv_cmd"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/bin/chsh\\s*-F\\s*perm\\s*=\\s*x\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*-1\\s*-k\\s*priv_cmd"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource53ref +{ +ResourceID = "[nxFileLine][V-219266][medium][SRG-OS-000064-GPOS-00033]::[Ubuntu]Baseline"; + ContainsLine = "-a always,exit -F path=/usr/bin/newgrp -F perm=x -F auid>=1000 -F auid!=-1 -k priv_cmd"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/bin/newgrp\\s*-F\\s*perm\\s*=\\s*x\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*-1\\s*-k\\s*priv_cmd"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource54ref +{ +ResourceID = "[nxFileLine][V-219267][medium][SRG-OS-000064-GPOS-00033]::[Ubuntu]Baseline"; + ContainsLine = "-a always,exit -F path=/usr/bin/chcon -F perm=x -F auid>=1000 -F auid!=-1 -k perm_chng"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/bin/chcon\\s*-F\\s*perm\\s*=\\s*x\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*-1\\s*-k\\s*perm_chng"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource55ref +{ +ResourceID = "[nxFileLine][V-219268][medium][SRG-OS-000064-GPOS-00033]::[Ubuntu]Baseline"; + ContainsLine = "-a always,exit -F path=/sbin/apparmor_parser -F perm=x -F auid>=1000 -F auid!=-1 -k perm_chng"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/sbin/apparmor_parser\\s*-F\\s*perm\\s*=\\s*x\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*-1\\s*-k\\s*perm_chng"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource56ref +{ +ResourceID = "[nxFileLine][V-219269][medium][SRG-OS-000064-GPOS-00033]::[Ubuntu]Baseline"; + ContainsLine = "-a always,exit -F path=/usr/bin/setfacl -F perm=x -F auid>=1000 -F auid!=-1 -k perm_chng"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/bin/setfacl\\s*-F\\s*perm\\s*=\\s*x\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*-1\\s*-k\\s*perm_chng"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource57ref +{ +ResourceID = "[nxFileLine][V-219270][medium][SRG-OS-000064-GPOS-00033]::[Ubuntu]Baseline"; + ContainsLine = "-a always,exit -F path=/usr/bin/chacl -F perm=x -F auid>=1000 -F auid!=-1 -k perm_chng"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/bin/chacl\\s*-F\\s*perm\\s*=\\s*x\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*-1\\s*-k\\s*perm_chng"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource58ref +{ +ResourceID = "[nxFileLine][V-219271][medium][SRG-OS-000064-GPOS-00033]::[Ubuntu]Baseline"; + ContainsLine = "-a always,exit -F path=/usr/bin/passwd -F perm=x -F auid>=1000 -F auid!=-1 -k privileged-passwd"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/bin/passwd\\s*-F\\s*perm\\s*=\\s*x\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*-1\\s*-k\\s*privileged-passwd"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource59ref +{ +ResourceID = "[nxFileLine][V-219272][medium][SRG-OS-000064-GPOS-00033]::[Ubuntu]Baseline"; + ContainsLine = "-a always,exit -F path=/sbin/unix_update -F perm=x -F auid>=1000 -F auid!=-1 -k privileged-unix-update"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/sbin/unix_update\\s*-F\\s*perm\\s*=\\s*x\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*-1\\s*-k\\s*privileged-unix-update"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource60ref +{ +ResourceID = "[nxFileLine][V-219273][medium][SRG-OS-000064-GPOS-00033]::[Ubuntu]Baseline"; + ContainsLine = "-a always,exit -F path=/usr/bin/gpasswd -F perm=x -F auid>=1000 -F auid!=-1 -k privileged-gpasswd"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/bin/gpasswd\\s*-F\\s*perm\\s*=\\s*x\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*-1\\s*-k\\s*privileged-gpasswd"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource61ref +{ +ResourceID = "[nxFileLine][V-219274][medium][SRG-OS-000064-GPOS-00033]::[Ubuntu]Baseline"; + ContainsLine = "-a always,exit -F path=/usr/bin/chage -F perm=x -F auid>=1000 -F auid!=-1 -k privileged-chage"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/bin/chage\\s*-F\\s*perm\\s*=\\s*x\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*-1\\s*-k\\s*privileged-chage"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource62ref +{ +ResourceID = "[nxFileLine][V-219275][medium][SRG-OS-000064-GPOS-00033]::[Ubuntu]Baseline"; + ContainsLine = "-a always,exit -F path=/usr/sbin/usermod -F perm=x -F auid>=1000 -F auid!=-1 -k privileged-usermod"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/sbin/usermod\\s*-F\\s*perm\\s*=\\s*x\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*-1\\s*-k\\s*privileged-usermod"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource63ref +{ +ResourceID = "[nxFileLine][V-219276][medium][SRG-OS-000064-GPOS-00033]::[Ubuntu]Baseline"; + ContainsLine = "-a always,exit -F path=/usr/bin/crontab -F perm=x -F auid>=1000 -F auid!=-1 -k privileged-crontab"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/bin/crontab\\s*-F\\s*perm\\s*=\\s*x\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*-1\\s*-k\\s*privileged-crontab"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource64ref +{ +ResourceID = "[nxFileLine][V-219277][medium][SRG-OS-000064-GPOS-00033]::[Ubuntu]Baseline"; + ContainsLine = "-a always,exit -F path=/usr/sbin/pam_timestamp_check -F perm=x -F auid>=1000 -F auid!=-1 -k privileged-pam_timestamp_check"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/sbin/pam_timestamp_check\\s*-F\\s*perm\\s*=\\s*x\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*-1\\s*-k\\s*privileged-pam_timestamp_check"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource65ref +{ +ResourceID = "[nxFileLine][V-219279.a][medium][SRG-OS-000064-GPOS-00033]::[Ubuntu]Baseline"; + ContainsLine = "-a always,exit -F arch=b32 -S finit_module -F auid>=1000 -F auid!=-1 -k module_chng"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*finit_module\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*-1\\s*-k\\s*module_chng"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource66ref +{ +ResourceID = "[nxFileLine][V-219279.b][medium][SRG-OS-000064-GPOS-00033]::[Ubuntu]Baseline"; + ContainsLine = "-a always,exit -F arch=b64 -S finit_module -F auid>=1000 -F auid!=-1 -k module_chng"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*finit_module\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*-1\\s*-k\\s*module_chng"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource67ref +{ +ResourceID = "[nxFileLine][V-219281.a][medium][SRG-OS-000326-GPOS-00126]::[Ubuntu]Baseline"; + ContainsLine = "-a always,exit -F arch=b64 -S execve -C uid!=euid -F euid=0 -F key=execpriv"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*execve\\s*-C\\s*uid!\\s*=\\s*euid\\s*-F\\s*euid\\s*=\\s*0\\s*-F\\s*key\\s*=\\s*execpriv"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource68ref +{ +ResourceID = "[nxFileLine][V-219281.b][medium][SRG-OS-000326-GPOS-00126]::[Ubuntu]Baseline"; + ContainsLine = "-a always,exit -F arch=b64 -S execve -C gid!=egid -F egid=0 -F key=execpriv"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*execve\\s*-C\\s*gid!\\s*=\\s*egid\\s*-F\\s*egid\\s*=\\s*0\\s*-F\\s*key\\s*=\\s*execpriv"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource69ref +{ +ResourceID = "[nxFileLine][V-219281.c][medium][SRG-OS-000326-GPOS-00126]::[Ubuntu]Baseline"; + ContainsLine = "-a always,exit -F arch=b32 -S execve -C uid!=euid -F euid=0 -F key=execpriv"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*execve\\s*-C\\s*uid!\\s*=\\s*euid\\s*-F\\s*euid\\s*=\\s*0\\s*-F\\s*key\\s*=\\s*execpriv"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource70ref +{ +ResourceID = "[nxFileLine][V-219281.d][medium][SRG-OS-000326-GPOS-00126]::[Ubuntu]Baseline"; + ContainsLine = "-a always,exit -F arch=b32 -S execve -C gid!=egid -F egid=0 -F key=execpriv"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*execve\\s*-C\\s*gid!\\s*=\\s*egid\\s*-F\\s*egid\\s*=\\s*0\\s*-F\\s*key\\s*=\\s*execpriv"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource71ref +{ +ResourceID = "[nxFileLine][V-219287.a][medium][SRG-OS-000468-GPOS-00212]::[Ubuntu]Baseline"; + ContainsLine = "-a always,exit -F arch=b64 -S unlink,unlinkat,rename,renameat,rmdir -F auid>=1000 -F auid!=-1 -k delete"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*unlink,unlinkat,rename,renameat,rmdir\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*-1\\s*-k\\s*delete"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource72ref +{ +ResourceID = "[nxFileLine][V-219287.b][medium][SRG-OS-000468-GPOS-00212]::[Ubuntu]Baseline"; + ContainsLine = "-a always,exit -F arch=b32 -S unlink,unlinkat,rename,renameat,rmdir -F auid>=1000 -F auid!=-1 -k delete"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*unlink,unlinkat,rename,renameat,rmdir\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*-1\\s*-k\\s*delete"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource73ref +{ +ResourceID = "[nxFileLine][V-219291.a][medium][SRG-OS-000471-GPOS-00216]::[Ubuntu]Baseline"; + ContainsLine = "-a always,exit -F arch=b32 -S init_module -S finit_module -k modules"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*init_module\\s*-S\\s*finit_module\\s*-k\\s*modules"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource74ref +{ +ResourceID = "[nxFileLine][V-219291.b][medium][SRG-OS-000471-GPOS-00216]::[Ubuntu]Baseline"; + ContainsLine = "-a always,exit -F arch=b64 -S init_module -S finit_module -k modules"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*init_module\\s*-S\\s*finit_module\\s*-k\\s*modules"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource75ref +{ +ResourceID = "[nxFileLine][V-219296.a][medium][SRG-OS-000477-GPOS-00222]::[Ubuntu]Baseline"; + ContainsLine = "-a always,exit -F arch=b64 -S init_module -S finit_module -F key=modules"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*init_module\\s*-S\\s*finit_module\\s*-F\\s*key\\s*=\\s*modules"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource76ref +{ +ResourceID = "[nxFileLine][V-219296.b][medium][SRG-OS-000477-GPOS-00222]::[Ubuntu]Baseline"; + ContainsLine = "-a always,exit -F arch=b32 -S init_module -S finit_module -F key=modules"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*init_module\\s*-S\\s*finit_module\\s*-F\\s*key\\s*=\\s*modules"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource77ref +{ +ResourceID = "[nxFileLine][V-219297.a][medium][SRG-OS-000477-GPOS-00222]::[Ubuntu]Baseline"; + ContainsLine = "-a always,exit -F arch=b64 -S delete_module -F key=modules"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*delete_module\\s*-F\\s*key\\s*=\\s*modules"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource78ref +{ +ResourceID = "[nxFileLine][V-219297.b][medium][SRG-OS-000477-GPOS-00222]::[Ubuntu]Baseline"; + ContainsLine = "-a always,exit -F arch=b32 -S delete_module -F key=modules"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*delete_module\\s*-F\\s*key\\s*=\\s*modules"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource79ref +{ +ResourceID = "[nxFileLine][V-219298][medium][SRG-OS-000477-GPOS-00222]::[Ubuntu]Baseline"; + ContainsLine = "-w /sbin/modprobe -p x -k modules"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-w\\s*/sbin/modprobe\\s*-p\\s*x\\s*-k\\s*modules"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource80ref +{ +ResourceID = "[nxFileLine][V-219299][medium][SRG-OS-000477-GPOS-00222]::[Ubuntu]Baseline"; + ContainsLine = "-w /bin/kmod -p x -k module"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-w\\s*/bin/kmod\\s*-p\\s*x\\s*-k\\s*module"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource81ref +{ +ResourceID = "[nxFileLine][V-219300][medium][SRG-OS-000477-GPOS-00222]::[Ubuntu]Baseline"; + ContainsLine = "-w /sbin/fdisk -p x -k fdisk"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-w\\s*/sbin/fdisk\\s*-p\\s*x\\s*-k\\s*fdisk"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource82ref +{ +ResourceID = "[nxFileLine][V-219301][low][SRG-OS-000027-GPOS-00008]::[Ubuntu]Baseline"; + ContainsLine = "* hard maxlogins 10"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/security/limits.conf"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "^\\s*\\*\\s*hard\\s*maxlogins\\s*([1][1-9]|[2-9]\\d+|[1-9][0-9]\\d+)$|^#\\s*\\*\\s*hard\\s*maxlogins."; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource83ref +{ +ResourceID = "[nxFileLine][V-219303.b][medium][SRG-OS-000029-GPOS-00010]::[Ubuntu]Baseline"; + ContainsLine = "TMOUT=900"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/profile.d/autologout.sh"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "^\\s*TMOUT\\s*=\\s*[0-8]?[0-9]?[0-9]?$|^#\\s*TMOUT.*"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource84ref +{ +ResourceID = "[nxFileLine][V-219303.c][medium][SRG-OS-000029-GPOS-00010]::[Ubuntu]Baseline"; + ContainsLine = "readonly TMOUT"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/profile.d/autologout.sh"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "^\\s*readonly\\s+(?!TMOUT\\b).*$|^\\s*#\\s*readonly.*$"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource85ref +{ +ResourceID = "[nxFileLine][V-219303.d][medium][SRG-OS-000029-GPOS-00010]::[Ubuntu]Baseline"; + ContainsLine = "export TMOUT"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/profile.d/autologout.sh"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "^\\s*export\\s+(?!TMOUT\\b).*$|^\\s*#\\s*export.*$"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource86ref +{ +ResourceID = "[nxFileLine][V-219306.a][medium][SRG-OS-000032-GPOS-00013]::[Ubuntu]Baseline"; + ContainsLine = "auth.*,authpriv.* /var/log/secure"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/rsyslog.d/50-default.conf"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*auth\\.\\*,\\s*authpriv\\.\\*.*"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource87ref +{ +ResourceID = "[nxFileLine][V-219306.b][medium][SRG-OS-000032-GPOS-00013]::[Ubuntu]Baseline"; + ContainsLine = "daemon.notice /var/log/messages"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/rsyslog.d/50-default.conf"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\sdaemon.*"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource88ref +{ +ResourceID = "[nxFileLine][V-219307][medium][SRG-OS-000033-GPOS-00014]::[Ubuntu]Baseline"; + ContainsLine = "Ciphers aes256-ctr,aes192-ctr,aes128-ctr"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/ssh/sshd_config"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "^#\\s*Ciphers.*|^\\s*Ciphers\\s*aes128-ctr.*|^\\s*Ciphers\\s*aes192-ctr.*"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource89ref +{ +ResourceID = "[nxFileLine][V-219308][high][SRG-OS-000112-GPOS-00057]::[Ubuntu]Baseline"; + ContainsLine = "Protocol 2"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/ssh/sshd_config"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "^#\\s*Protocol.*$|^Protocol\\s*(?!2\\b)\\w*$"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource90ref +{ +ResourceID = "[nxFileLine][V-219309][medium][SRG-OS-000125-GPOS-00065]::[Ubuntu]Baseline"; + ContainsLine = "UsePAM yes"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/ssh/sshd_config"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*UsePAM\\s*yes"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource91ref +{ +ResourceID = "[nxFileLine][V-219310][medium][SRG-OS-000126-GPOS-00066]::[Ubuntu]Baseline"; + ContainsLine = "ClientAliveCountMax 1"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/ssh/sshd_config"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "^#\\s*ClientAliveCountMax.*$|^ClientAliveCountMax\\s*(?!1\\b)\\w*$"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource92ref +{ +ResourceID = "[nxFileLine][V-219311][medium][SRG-OS-000163-GPOS-00072]::[Ubuntu]Baseline"; + ContainsLine = "ClientAliveInterval 600"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/ssh/sshd_config"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "^\\s*ClientAliveInterval\\s*[0-5]?[0-9]?[0-9]?\\s*$|^#\\s*ClientAliveInterval.*|^\\s*ClientAliveInterval\\s*$"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource93ref +{ +ResourceID = "[nxFileLine][V-219312][medium][SRG-OS-000250-GPOS-00093]::[Ubuntu]Baseline"; + ContainsLine = "MACs hmac-sha2-512,hmac-sha2-256"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/ssh/sshd_config"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*MACs.*|\\s*MACs\\s*hmac-(?!sha2-512).*"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource94ref +{ +ResourceID = "[nxFileLine][V-219314.a][high][SRG-OS-000480-GPOS-00229]::[Ubuntu]Baseline"; + ContainsLine = "PermitEmptyPasswords no"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/ssh/sshd_config"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "^#\\s*PermitEmptyPasswords.*$|^PermitEmptyPasswords\\s*(?!no\\b)\\w*$"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource95ref +{ +ResourceID = "[nxFileLine][V-219314.b][high][SRG-OS-000480-GPOS-00229]::[Ubuntu]Baseline"; + ContainsLine = "PermitUserEnvironment no"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/ssh/sshd_config"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "^#\\s*PermitUserEnvironment.*$|^PermitUserEnvironment\\s*(?!no\\b)\\w*$"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource96ref +{ +ResourceID = "[nxFileLine][V-219328][medium][SRG-OS-000480-GPOS-00228]::[Ubuntu]Baseline"; + ContainsLine = "UMASK 077"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/login.defs"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "^\\s*UMASK(?!\\s077\\b)\\s*\\d*\\s*$|^#\\s*UMASK.*"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource97ref +{ +ResourceID = "[nxFileLine][V-219339.b][medium][SRG-OS-000378-GPOS-00163]::[Ubuntu]Baseline"; + ContainsLine = "install usb-storage /bin/true"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/modprobe.d/DISASTIG.conf"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*install\\s*usb-storage\\s*/bin/true"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource98ref +{ +ResourceID = "[nxFileLine][V-219339.c][medium][SRG-OS-000378-GPOS-00163]::[Ubuntu]Baseline"; + ContainsLine = "blacklist usb-storage"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/modprobe.d/DISASTIG.conf"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*blacklist\\s*usb-storage"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource99ref +{ +ResourceID = "[nxFileLine][V-233779][medium][SRG-OS-000480-GPOS-00227]::[Ubuntu]Baseline"; + ContainsLine = "X11Forwarding no"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/ssh/sshd_config"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "^#\\s*X11Forwarding.*$|^X11Forwarding\\s*(?!no\\b)\\w*$"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource100ref +{ +ResourceID = "[nxFileLine][V-233780][medium][SRG-OS-000480-GPOS-00227]::[Ubuntu]Baseline"; + ContainsLine = "X11UseLocalhost yes"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/ssh/sshd_config"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*X11UseLocalhost\\s*yes"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource101ref +{ +ResourceID = "[nxFileLine][V-255906][medium][SRG-OS-000250-GPOS-00093]::[Ubuntu]Baseline"; + ContainsLine = "KexAlgorithms ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/ssh/sshd_config"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*KexAlgorithms\\s*ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxServiceResource as $MSFT_nxServiceResource1ref +{ +ResourceID = "[nxService][V-219160.b][medium][SRG-OS-000269-GPOS-00103]::[Ubuntu]Baseline"; + Controller = "systemd"; + State = "Running"; + Enabled = True; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxService.ps1::22::9::nxService"; + Name = "rsyslog"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxServiceResource as $MSFT_nxServiceResource2ref +{ +ResourceID = "[nxService][V-219225.b][medium][SRG-OS-000038-GPOS-00016]::[Ubuntu]Baseline"; + Controller = "systemd"; + State = "Running"; + Enabled = True; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxService.ps1::22::9::nxService"; + Name = "auditd"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxServiceResource as $MSFT_nxServiceResource3ref +{ +ResourceID = "[nxService][V-219313.b][high][SRG-OS-000423-GPOS-00187]::[Ubuntu]Baseline"; + Controller = "systemd"; + State = "Running"; + Enabled = True; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxService.ps1::22::9::nxService"; + Name = "sshd"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxServiceResource as $MSFT_nxServiceResource4ref +{ +ResourceID = "[nxService][V-219322.b][low][SRG-OS-000312-GPOS-00122]::[Ubuntu]Baseline"; + Controller = "systemd"; + State = "Running"; + Enabled = True; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxService.ps1::22::9::nxService"; + Name = "apparmor"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxServiceResource as $MSFT_nxServiceResource5ref +{ +ResourceID = "[nxService][V-219335][medium][SRG-OS-000184-GPOS-00078]::[Ubuntu]Baseline"; + Controller = "systemd"; + Enabled = False; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxService.ps1::13::9::nxService"; + Name = "kdump"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxServiceResource as $MSFT_nxServiceResource6ref +{ +ResourceID = "[nxService][V-219337][medium][SRG-OS-000297-GPOS-00115]::[Ubuntu]Baseline"; + Controller = "systemd"; + State = "Running"; + Enabled = True; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxService.ps1::22::9::nxService"; + Name = "ufw"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxScriptResource as $MSFT_nxScriptResource1ref +{ +ResourceID = "[nxScript][V-219152.b][low][[Skip] SRG-OS-000343-GPOS-00134]::[Ubuntu]Baseline"; + GetScript = "#!/bin/bash\necho [V-219152.b][low][[Skip] SRG-OS-000343-GPOS-00134]"; + TestScript = "#!/bin/bash\nexit 0"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxScript.skip.ps1::10::5::nxScript"; + SetScript = "#!/bin/bash"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxScriptResource as $MSFT_nxScriptResource2ref +{ +ResourceID = "[nxScript][V-219153.c][low][[Skip] SRG-OS-000479-GPOS-00224]::[Ubuntu]Baseline"; + GetScript = "#!/bin/bash\necho [V-219153.c][low][[Skip] SRG-OS-000479-GPOS-00224]"; + TestScript = "#!/bin/bash\nexit 0"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxScript.skip.ps1::10::5::nxScript"; + SetScript = "#!/bin/bash"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxScriptResource as $MSFT_nxScriptResource3ref +{ +ResourceID = "[nxScript][V-219167.a][medium][[Skip] SRG-OS-000024-GPOS-00007]::[Ubuntu]Baseline"; + GetScript = "#!/bin/bash\necho [V-219167.a][medium][[Skip] SRG-OS-000024-GPOS-00007]"; + TestScript = "#!/bin/bash\nexit 0"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxScript.skip.ps1::10::5::nxScript"; + SetScript = "#!/bin/bash"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxScriptResource as $MSFT_nxScriptResource4ref +{ +ResourceID = "[nxScript][V-219167.b][medium][[Skip] SRG-OS-000024-GPOS-00007]::[Ubuntu]Baseline"; + GetScript = "#!/bin/bash\necho [V-219167.b][medium][[Skip] SRG-OS-000024-GPOS-00007]"; + TestScript = "#!/bin/bash\nexit 0"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxScript.skip.ps1::10::5::nxScript"; + SetScript = "#!/bin/bash"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxScriptResource as $MSFT_nxScriptResource5ref +{ +ResourceID = "[nxScript][V-219167.c][medium][[Skip] SRG-OS-000024-GPOS-00007]::[Ubuntu]Baseline"; + GetScript = "#!/bin/bash\necho [V-219167.c][medium][[Skip] SRG-OS-000024-GPOS-00007]"; + TestScript = "#!/bin/bash\nexit 0"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxScript.skip.ps1::10::5::nxScript"; + SetScript = "#!/bin/bash"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxScriptResource as $MSFT_nxScriptResource6ref +{ +ResourceID = "[nxScript][V-219313.a][high][[Skip] SRG-OS-000423-GPOS-00187]::[Ubuntu]Baseline"; + GetScript = "#!/bin/bash\necho [V-219313.a][high][[Skip] SRG-OS-000423-GPOS-00187]"; + TestScript = "#!/bin/bash\nexit 0"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxScript.skip.ps1::10::5::nxScript"; + SetScript = "#!/bin/bash"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of OMI_ConfigurationDocument + + { + Version="2.0.0"; + + MinimumCompatibleVersion = "1.0.0"; + + CompatibleVersionAdditionalProperties= {"Omi_BaseResource:ConfigurationName"}; + + Author="Microsoft"; + + GenerationDate="03/09/2023 14:17:33"; + + GenerationHost="Microsoft"; + + Name="LinuxBaseLine"; + + }; + diff --git a/stig/linux/config/Ubuntu1804.mof b/stig/linux/config/Ubuntu1804.mof index 1341de7..3f8220f 100644 --- a/stig/linux/config/Ubuntu1804.mof +++ b/stig/linux/config/Ubuntu1804.mof @@ -1,1709 +1,1442 @@ -/* -@TargetNode='Ubuntu1804' -@GeneratedBy=Microsoft -@GenerationDate=06/30/2022 11:38:45 -@GenerationHost=Microsoft -*/ - -instance of MSFT_nxPackageResource as $MSFT_nxPackageResource1ref -{ -ResourceID = "[nxPackage][V-219153.a][low][SRG-OS-000479-GPOS-00224]::[Ubuntu]Baseline"; - Ensure = "Present"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxPackage.ps1::8::5::nxPackage"; - Name = "audispd-plugins"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxPackageResource as $MSFT_nxPackageResource2ref -{ -ResourceID = "[nxPackage][V-219157][high][SRG-OS-000095-GPOS-00049]::[Ubuntu]Baseline"; - Ensure = "Absent"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxPackage.ps1::8::5::nxPackage"; - Name = "nis"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxPackageResource as $MSFT_nxPackageResource3ref -{ -ResourceID = "[nxPackage][V-219158][high][SRG-OS-000095-GPOS-00049]::[Ubuntu]Baseline"; - Ensure = "Absent"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxPackage.ps1::8::5::nxPackage"; - Name = "rsh-server"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxPackageResource as $MSFT_nxPackageResource4ref -{ -ResourceID = "[nxPackage][V-219160.a][medium][SRG-OS-000269-GPOS-00103]::[Ubuntu]Baseline"; - Ensure = "Present"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxPackage.ps1::8::5::nxPackage"; - Name = "rsyslog"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxPackageResource as $MSFT_nxPackageResource5ref -{ -ResourceID = "[nxPackage][V-219161][medium][SRG-OS-000297-GPOS-00115]::[Ubuntu]Baseline"; - Ensure = "Present"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxPackage.ps1::8::5::nxPackage"; - Name = "ufw"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxPackageResource as $MSFT_nxPackageResource6ref -{ -ResourceID = "[nxPackage][V-219177][high][SRG-OS-000074-GPOS-00042]::[Ubuntu]Baseline"; - Ensure = "Absent"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxPackage.ps1::8::5::nxPackage"; - Name = "telnetd"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxPackageResource as $MSFT_nxPackageResource7ref -{ -ResourceID = "[nxPackage][V-219186.a][medium][SRG-OS-000480-GPOS-00225]::[Ubuntu]Baseline"; - Ensure = "Present"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxPackage.ps1::8::5::nxPackage"; - Name = "libpam-pwquality"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxPackageResource as $MSFT_nxPackageResource8ref -{ -ResourceID = "[nxPackage][V-219225.a][medium][SRG-OS-000038-GPOS-00016]::[Ubuntu]Baseline"; - Ensure = "Present"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxPackage.ps1::8::5::nxPackage"; - Name = "auditd"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxPackageResource as $MSFT_nxPackageResource9ref -{ -ResourceID = "[nxPackage][V-219304][medium][SRG-OS-000030-GPOS-00011]::[Ubuntu]Baseline"; - Ensure = "Present"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxPackage.ps1::8::5::nxPackage"; - Name = "vlock"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxPackageResource as $MSFT_nxPackageResource10ref -{ -ResourceID = "[nxPackage][V-219313.a][high][SRG-OS-000423-GPOS-00187]::[Ubuntu]Baseline"; - Ensure = "Present"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxPackage.ps1::8::5::nxPackage"; - Name = "ssh"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxPackageResource as $MSFT_nxPackageResource11ref -{ -ResourceID = "[nxPackage][V-219318][medium][SRG-OS-000375-GPOS-00160]::[Ubuntu]Baseline"; - Ensure = "Present"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxPackage.ps1::8::5::nxPackage"; - Name = "libpam-pkcs11"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxPackageResource as $MSFT_nxPackageResource12ref -{ -ResourceID = "[nxPackage][V-219319][medium][SRG-OS-000376-GPOS-00161]::[Ubuntu]Baseline"; - Ensure = "Present"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxPackage.ps1::8::5::nxPackage"; - Name = "opensc-pkcs11"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxPackageResource as $MSFT_nxPackageResource13ref -{ -ResourceID = "[nxPackage][V-219322.a][low][SRG-OS-000312-GPOS-00122]::[Ubuntu]Baseline"; - Ensure = "Present"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxPackage.ps1::8::5::nxPackage"; - Name = "libpam-apparmor"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxPackageResource as $MSFT_nxPackageResource14ref -{ -ResourceID = "[nxPackage][V-219323][medium][SRG-OS-000368-GPOS-00154]::[Ubuntu]Baseline"; - Ensure = "Present"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxPackage.ps1::8::5::nxPackage"; - Name = "apparmor"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxPackageResource as $MSFT_nxPackageResource15ref -{ -ResourceID = "[nxPackage][V-219343][medium][SRG-OS-000445-GPOS-00199]::[Ubuntu]Baseline"; - Ensure = "Present"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxPackage.ps1::8::5::nxPackage"; - Name = "aide"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileResource as $MSFT_nxFileResource1ref -{ -ResourceID = "[nxFile][V-219303.a][medium][SRG-OS-000029-GPOS-00010]::[Ubuntu]Baseline"; - Contents = ""; - DestinationPath = "/etc/profile.d/autologout.sh"; - ModuleName = "nx"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; - ModuleVersion = "1.0"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileResource as $MSFT_nxFileResource2ref -{ -ResourceID = "[nxFile][V-219339.a][medium][SRG-OS-000378-GPOS-00163]::[Ubuntu]Baseline"; - Contents = ""; - DestinationPath = "/etc/modprobe.d/DISASTIG.conf"; - ModuleName = "nx"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; - ModuleVersion = "1.0"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource1ref -{ -ResourceID = "[nxFileLine][V-219152.a][low][SRG-OS-000343-GPOS-00134]::[Ubuntu]Baseline"; - ContainsLine = "space_left_action = email"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/auditd.conf"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "^#\\s*space_left_action.*"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileResource as $MSFT_nxFileResource3ref -{ -SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::29::9::nxFile"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - ResourceID = "[nxFile][V-219153.b][low][SRG-OS-000479-GPOS-00224]::[Ubuntu]Baseline"; - DestinationPath = "/etc/audisp/plugins.d/au-remote.conf"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource2ref -{ -ResourceID = "[nxFileLine][V-219153.b][low][SRG-OS-000479-GPOS-00224]::[Ubuntu]Baseline"; - ContainsLine = "active = yes"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audisp/plugins.d/au-remote.conf"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "\\s*active\\s*=\\s*no|active=yes|#\\s*active\\s*=.*"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource3ref -{ -ResourceID = "[nxFileLine][V-219156.a][medium][SRG-OS-000437-GPOS-00194]::[Ubuntu]Baseline"; - ContainsLine = "Unattended-Upgrade::Remove-Unused-Dependencies \"true\";"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/apt/apt.conf.d/50unattended-upgrades"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "\\s*Unattended-Upgrade::Remove-Unused-Dependencies\\s*(\"false\"|false|true).*|#\\s*Unattended-Upgrade::Remove-Unused-Dependencies.*"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource4ref -{ -ResourceID = "[nxFileLine][V-219156.b][medium][SRG-OS-000437-GPOS-00194]::[Ubuntu]Baseline"; - ContainsLine = "Unattended-Upgrade::Remove-Unused-Kernel-Packages \"true\";"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/apt/apt.conf.d/50unattended-upgrades"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "\\s*Unattended-Upgrade::Remove-Unused-Kernel-Packages\\s*(\"false\"|false|true).*|#\\s*Unattended-Upgrade::Remove-Unused-Kernel-Packages.*"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource5ref -{ -ResourceID = "[nxFileLine][V-219170.a][medium][SRG-OS-000228-GPOS-00088]::[Ubuntu]Baseline"; - ContainsLine = "Banner /etc/issue"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/ssh/sshd_config"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*Banner\\s*/etc/issue"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource6ref -{ -ResourceID = "[nxFileLine][V-219170.b][medium][SRG-OS-000228-GPOS-00088]::[Ubuntu]Baseline"; - ContainsLine = "You are accessing a U.S. Government (USG) Information System (IS) that is provided for USG-authorized use only.\n\nBy using this IS (which includes any device attached to this IS), you consent to the following conditions.\n\n-The USG routinely intercepts and monitors communications on this IS for purposes including, but not limited to, penetration testing, COMSEC monitoring, network operations and defense, personnel misconduct (PM), law enforcement (LE), and counterintelligence (CI) investigations.\n\n-At any time, the USG may inspect and seize data stored on this IS.\n\n-Communications using, or data stored on, this IS are not private, are subject to routine monitoring, interception, and search, and may be disclosed or used for any USG-authorized purpose.\n\n-This IS includes security measures (e.g., authentication and access controls) to protect USG interests--not for your personal benefit or privacy.\n\n-Notwithstanding the above, using this IS does not constitute consent to PM, LE or CI investigative searching or monitoring of the content of privileged communications, or work product, related to personal representation or services by attorneys, psychotherapists, or clergy, and their assistants. Such communications and work product are private and confidential. See User Agreement for details."; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/issue"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*You\\s*are\\s*accessing\\s*a\\s*U.S.\\s*Government\\s*(USG)\\s*Information\\s*System\\s*(IS)\\s*that\\s*is\\s*provided\\s*for\\s*USG-authorized\\s*use\\s*only.\\s*By\\s*using\\s*this\\s*IS\\s*(which\\s*includes\\s*any\\s*device\\s*attached\\s*to\\s*this\\s*IS),\\s*you\\s*consent\\s*to\\s*the\\s*following\\s*conditions.\\s*-The\\s*USG\\s*routinely\\s*intercepts\\s*and\\s*monitors\\s*communications\\s*on\\s*this\\s*IS\\s*for\\s*purposes\\s*including,\\s*but\\s*not\\s*limited\\s*to,\\s*penetration\\s*testing,\\s*COMSEC\\s*monitoring,\\s*network\\s*operations\\s*and\\s*defense,\\s*personnel\\s*misconduct\\s*(PM),\\s*law\\s*enforcement\\s*(LE),\\s*and\\s*counterintelligence\\s*(CI)\\s*investigations.\\s*-At\\s*any\\s*time,\\s*the\\s*USG\\s*may\\s*inspect\\s*and\\s*seize\\s*data\\s*stored\\s*on\\s*this\\s*IS.\\s*-Communications\\s*using,\\s*or\\s*data\\s*stored\\s*on,\\s*this\\s*IS\\s*are\\s*not\\s*private,\\s*are\\s*subject\\s*to\\s*routine\\s*monitoring,\\s*interception,\\s*and\\s*search,\\s*and\\s*may\\s*be\\s*disclosed\\s*or\\s*used\\s*for\\s*any\\s*USG-authorized\\s*purpose.\\s*-This\\s*IS\\s*includes\\s*security\\s*measures\\s*(e.g.,\\s*authentication\\s*and\\s*access\\s*controls)\\s*to\\s*protect\\s*USG\\s*interests--not\\s*for\\s*your\\s*personal\\s*benefit\\s*or\\s*privacy.\\s*-Notwithstanding\\s*the\\s*above,\\s*using\\s*this\\s*IS\\s*does\\s*not\\s*constitute\\s*consent\\s*to\\s*PM,\\s*LE\\s*or\\s*CI\\s*investigative\\s*searching\\s*or\\s*monitoring\\s*of\\s*the\\s*content\\s*of\\s*privileged\\s*communications,\\s*or\\s*work\\s*product,\\s*related\\s*to\\s*personal\\s*representation\\s*or\\s*services\\s*by\\s*attorneys,\\s*psychotherapists,\\s*or\\s*clergy,\\s*and\\s*their\\s*assistants.\\s*Such\\s*communications\\s*and\\s*work\\s*product\\s*are\\s*private\\s*and\\s*confidential.\\s*See\\s*User\\s*Agreement\\s*for\\s*details."; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource7ref -{ -ResourceID = "[nxFileLine][V-219172][low][SRG-OS-000069-GPOS-00037]::[Ubuntu]Baseline"; - ContainsLine = "ucredit=-1"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/security/pwquality.conf"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "^#\\s*ucredit.*$|^ucredit\\s*=\\s*(?!-1\\b)\\w*$"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource8ref -{ -ResourceID = "[nxFileLine][V-219173][low][SRG-OS-000070-GPOS-00038]::[Ubuntu]Baseline"; - ContainsLine = "lcredit=-1"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/security/pwquality.conf"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "^#\\s*lcredit.*$|^lcredit\\s*=\\s*(?!-1\\b)\\w*$"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource9ref -{ -ResourceID = "[nxFileLine][V-219174][low][SRG-OS-000071-GPOS-00039]::[Ubuntu]Baseline"; - ContainsLine = "dcredit=-1"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/security/pwquality.conf"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "^#\\s*dcredit.*$|^dcredit\\s*=\\s*(?!-1\\b)\\w*$"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource10ref -{ -ResourceID = "[nxFileLine][V-219175][low][SRG-OS-000072-GPOS-00040]::[Ubuntu]Baseline"; - ContainsLine = "difok=8"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/security/pwquality.conf"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "^\\s*difok\\s*=\\s*(-|)[0-7]$|#\\s*difok\\s*=.*|difok\\s+=\\s+.*"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource11ref -{ -ResourceID = "[nxFileLine][V-219176][medium][SRG-OS-000073-GPOS-00041]::[Ubuntu]Baseline"; - ContainsLine = "ENCRYPT_METHOD SHA512"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/login.defs"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*ENCRYPT_METHOD\\s*SHA512"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource12ref -{ -ResourceID = "[nxFileLine][V-219178][low][SRG-OS-000075-GPOS-00043]::[Ubuntu]Baseline"; - ContainsLine = "PASS_MIN_DAYS 1"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/login.defs"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "^\\s*PASS_MIN_DAYS\\s*[0]*$|#\\s*PASS_MIN_DAYS.*"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource13ref -{ -ResourceID = "[nxFileLine][V-219179][low][SRG-OS-000076-GPOS-00044]::[Ubuntu]Baseline"; - ContainsLine = "PASS_MAX_DAYS 60"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/login.defs"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "^\\s*PASS_MAX_DAYS\\s*([6][1-9]|[7-9][0-9]|\\d{3,})$|#\\s*PASS_MAX_DAYS.*"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource14ref -{ -ResourceID = "[nxFileLine][V-219181][medium][SRG-OS-000078-GPOS-00046]::[Ubuntu]Baseline"; - ContainsLine = "minlen=15"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/security/pwquality.conf"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "^\\s*minlen\\s*=\\s*([0-9]|[1][1-4])$|#\\s*minlen.*"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource15ref -{ -ResourceID = "[nxFileLine][V-219184][medium][SRG-OS-000480-GPOS-00225]::[Ubuntu]Baseline"; - ContainsLine = "dictcheck=1"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/security/pwquality.conf"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "^\\s*dictcheck\\s*=\\s*((?!1)|[1]\\d+)\\d*$|#\\s*dictcheck.*"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource16ref -{ -ResourceID = "[nxFileLine][V-219186.b][medium][SRG-OS-000480-GPOS-00225]::[Ubuntu]Baseline"; - ContainsLine = "enforcing = 1"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/security/pwquality.conf"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "^\\s*enforcing\\s*=\\s*((?!1)|[1]\\d+)\\d*$|#\\s*enforcing.*"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource17ref -{ -ResourceID = "[nxFileLine][V-219210][low][SRG-OS-000266-GPOS-00101]::[Ubuntu]Baseline"; - ContainsLine = "ocredit=-1"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/security/pwquality.conf"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "^#\\s*ocredit.*$|^ocredit\\s*=\\s*(?!-1)\\w*$"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource18ref -{ -ResourceID = "[nxFileLine][V-219213][medium][SRG-OS-000064-GPOS-00033]::[Ubuntu]Baseline"; - ContainsLine = "-w /var/log/tallylog -p wa -k logins"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-w\\s*/var/log/tallylog\\s*-p\\s*wa\\s*-k\\s*logins"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource19ref -{ -ResourceID = "[nxFileLine][V-219214][medium][SRG-OS-000064-GPOS-00033]::[Ubuntu]Baseline"; - ContainsLine = "-w /var/log/faillog -p wa -k logins"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-w\\s*/var/log/faillog\\s*-p\\s*wa\\s*-k\\s*logins"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource20ref -{ -ResourceID = "[nxFileLine][V-219215][medium][SRG-OS-000064-GPOS-00033]::[Ubuntu]Baseline"; - ContainsLine = "-w /var/log/lastlog -p wa -k logins"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-w\\s*/var/log/lastlog\\s*-p\\s*wa\\s*-k\\s*logins"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource21ref -{ -ResourceID = "[nxFileLine][V-219216][medium][SRG-OS-000471-GPOS-00215]::[Ubuntu]Baseline"; - ContainsLine = "-w /var/log/sudo.log -p wa -k priv_actions"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-w\\s*/var/log/sudo.log\\s*-p\\s*wa\\s*-k\\s*priv_actions"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource22ref -{ -ResourceID = "[nxFileLine][V-219217][medium][SRG-OS-000472-GPOS-00217]::[Ubuntu]Baseline"; - ContainsLine = "-w /var/log/wtmp -p wa -k logins"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-w\\s*/var/log/wtmp\\s*-p\\s*wa\\s*-k\\s*logins"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource23ref -{ -ResourceID = "[nxFileLine][V-219218][medium][SRG-OS-000472-GPOS-00217]::[Ubuntu]Baseline"; - ContainsLine = "-w /var/run/utmp -p wa -k logins"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-w\\s*/var/run/utmp\\s*-p\\s*wa\\s*-k\\s*logins"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource24ref -{ -ResourceID = "[nxFileLine][V-219219][medium][SRG-OS-000472-GPOS-00217]::[Ubuntu]Baseline"; - ContainsLine = "-w /var/log/btmp -p wa -k logins"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-w\\s*/var/log/btmp\\s*-p\\s*wa\\s*-k\\s*logins"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource25ref -{ -ResourceID = "[nxFileLine][V-219220][medium][SRG-OS-000476-GPOS-00221]::[Ubuntu]Baseline"; - ContainsLine = "-w /etc/passwd -p wa -k usergroup_modification"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-w\\s*/etc/passwd\\s*-p\\s*wa\\s*-k\\s*usergroup_modification"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource26ref -{ -ResourceID = "[nxFileLine][V-219221][medium][SRG-OS-000476-GPOS-00221]::[Ubuntu]Baseline"; - ContainsLine = "-w /etc/group -p wa -k usergroup_modification"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-w\\s*/etc/group\\s*-p\\s*wa\\s*-k\\s*usergroup_modification"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource27ref -{ -ResourceID = "[nxFileLine][V-219222][medium][SRG-OS-000476-GPOS-00221]::[Ubuntu]Baseline"; - ContainsLine = "-w /etc/gshadow -p wa -k usergroup_modification"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-w\\s*/etc/gshadow\\s*-p\\s*wa\\s*-k\\s*usergroup_modification"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource28ref -{ -ResourceID = "[nxFileLine][V-219223][medium][SRG-OS-000476-GPOS-00221]::[Ubuntu]Baseline"; - ContainsLine = "-w /etc/shadow -p wa -k usergroup_modification"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-w\\s*/etc/shadow\\s*-p\\s*wa\\s*-k\\s*usergroup_modification"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource29ref -{ -ResourceID = "[nxFileLine][V-219224][medium][SRG-OS-000476-GPOS-00221]::[Ubuntu]Baseline"; - ContainsLine = "-w /etc/security/opasswd -p wa -k usergroup_modification"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-w\\s*/etc/security/opasswd\\s*-p\\s*wa\\s*-k\\s*usergroup_modification"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource30ref -{ -ResourceID = "[nxFileLine][V-219226][medium][SRG-OS-000046-GPOS-00022]::[Ubuntu]Baseline"; - ContainsLine = "action_mail_acct = root"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/auditd.conf"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*action_mail_acct\\s*=\\s*root"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource31ref -{ -ResourceID = "[nxFileLine][V-219227][medium][SRG-OS-000047-GPOS-00023]::[Ubuntu]Baseline"; - ContainsLine = "disk_full_action = HALT"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/auditd.conf"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*disk_full_action.*|^\\s*disk_full_action\\s*=\\s*(?!HALT\\b)\\w+"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource32ref -{ -ResourceID = "[nxFileLine][V-219238][medium][SRG-OS-000064-GPOS-00033]::[Ubuntu]Baseline"; - ContainsLine = "-a always,exit -F path=/bin/su -F perm=x -F auid>=1000 -F auid!=-1 -k privileged-priv_change"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/bin/su\\s*-F\\s*perm\\s*=\\s*x\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*-1\\s*-k\\s*privileged-priv_change"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource33ref -{ -ResourceID = "[nxFileLine][V-219239][medium][SRG-OS-000064-GPOS-00033]::[Ubuntu]Baseline"; - ContainsLine = "-a always,exit -F path=/usr/bin/chfn -F perm=x -F auid>=1000 -F auid!=-1 -k privileged-chfn"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/bin/chfn\\s*-F\\s*perm\\s*=\\s*x\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*-1\\s*-k\\s*privileged-chfn"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource34ref -{ -ResourceID = "[nxFileLine][V-219240][medium][SRG-OS-000064-GPOS-00033]::[Ubuntu]Baseline"; - ContainsLine = "-a always,exit -F path=/bin/mount -F perm=x -F auid>=1000 -F auid!=-1 -k privileged-mount"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/bin/mount\\s*-F\\s*perm\\s*=\\s*x\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*-1\\s*-k\\s*privileged-mount"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource35ref -{ -ResourceID = "[nxFileLine][V-219241][medium][SRG-OS-000064-GPOS-00033]::[Ubuntu]Baseline"; - ContainsLine = "-a always,exit -F path=/bin/umount -F perm=x -F auid>=1000 -F auid!=-1 -k privileged-umount"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/bin/umount\\s*-F\\s*perm\\s*=\\s*x\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*-1\\s*-k\\s*privileged-umount"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource36ref -{ -ResourceID = "[nxFileLine][V-219242][medium][SRG-OS-000064-GPOS-00033]::[Ubuntu]Baseline"; - ContainsLine = "-a always,exit -F path=/usr/bin/ssh-agent -F perm=x -F auid>=1000 -F auid!=-1 -k privileged-ssh"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/bin/ssh-agent\\s*-F\\s*perm\\s*=\\s*x\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*-1\\s*-k\\s*privileged-ssh"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource37ref -{ -ResourceID = "[nxFileLine][V-219243][medium][SRG-OS-000064-GPOS-00033]::[Ubuntu]Baseline"; - ContainsLine = "-a always,exit -F path=/usr/lib/openssh/ssh-keysign -F perm=x -F auid>=1000 -F auid!=-1 -k privileged-ssh"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/lib/openssh/ssh-keysign\\s*-F\\s*perm\\s*=\\s*x\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*-1\\s*-k\\s*privileged-ssh"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource38ref -{ -ResourceID = "[nxFileLine][V-219244.a][medium][SRG-OS-000064-GPOS-00033]::[Ubuntu]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S setxattr,fsetxattr,lsetxattr,removexattr,fremovexattr,lremovexattr -F auid>=1000 -F auid!=-1 -k perm_mod"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*setxattr,fsetxattr,lsetxattr,removexattr,fremovexattr,lremovexattr\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*-1\\s*-k\\s*perm_mod"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource39ref -{ -ResourceID = "[nxFileLine][V-219244.b][medium][SRG-OS-000064-GPOS-00033]::[Ubuntu]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S setxattr,fsetxattr,lsetxattr,removexattr,fremovexattr,lremovexattr -F auid=0 -k perm_mod"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*setxattr,fsetxattr,lsetxattr,removexattr,fremovexattr,lremovexattr\\s*-F\\s*auid\\s*=\\s*0\\s*-k\\s*perm_mod"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource40ref -{ -ResourceID = "[nxFileLine][V-219244.c][medium][SRG-OS-000064-GPOS-00033]::[Ubuntu]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S setxattr,fsetxattr,lsetxattr,removexattr,fremovexattr,lremovexattr -F auid>=1000 -F auid!=-1 -k perm_mod"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*setxattr,fsetxattr,lsetxattr,removexattr,fremovexattr,lremovexattr\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*-1\\s*-k\\s*perm_mod"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource41ref -{ -ResourceID = "[nxFileLine][V-219244.d][medium][SRG-OS-000064-GPOS-00033]::[Ubuntu]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S setxattr,fsetxattr,lsetxattr,removexattr,fremovexattr,lremovexattr -F auid=0 -k perm_mod"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*setxattr,fsetxattr,lsetxattr,removexattr,fremovexattr,lremovexattr\\s*-F\\s*auid\\s*=\\s*0\\s*-k\\s*perm_mod"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource42ref -{ -ResourceID = "[nxFileLine][V-219250.a][medium][SRG-OS-000064-GPOS-00033]::[Ubuntu]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S chown,fchown,fchownat,lchown -F auid>=1000 -F auid!=-1 -k perm_chng"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*chown,fchown,fchownat,lchown\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*-1\\s*-k\\s*perm_chng"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource43ref -{ -ResourceID = "[nxFileLine][V-219250.b][medium][SRG-OS-000064-GPOS-00033]::[Ubuntu]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S chown,fchown,fchownat,lchown -F auid>=1000 -F auid!=-1 -k perm_chng"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*chown,fchown,fchownat,lchown\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*-1\\s*-k\\s*perm_chng"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource44ref -{ -ResourceID = "[nxFileLine][V-219254.a][medium][SRG-OS-000064-GPOS-00033]::[Ubuntu]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S chmod,fchmod,fchmodat -F auid>=1000 -F auid!=-1 -k perm_chng"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*chmod,fchmod,fchmodat\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*-1\\s*-k\\s*perm_chng"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource45ref -{ -ResourceID = "[nxFileLine][V-219254.b][medium][SRG-OS-000064-GPOS-00033]::[Ubuntu]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S chmod,fchmod,fchmodat -F auid>=1000 -F auid!=-1 -k perm_chng"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*chmod,fchmod,fchmodat\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*-1\\s*-k\\s*perm_chng"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource46ref -{ -ResourceID = "[nxFileLine][V-219257.a][medium][SRG-OS-000064-GPOS-00033]::[Ubuntu]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S creat,open,openat,open_by_handle_at,truncate,ftruncate -F exit=-EPERM -F auid>=1000 -F auid!=-1 -k perm_access"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*creat,open,openat,open_by_handle_at,truncate,ftruncate\\s*-F\\s*exit\\s*=\\s*-EPERM\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*-1\\s*-k\\s*perm_access"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource47ref -{ -ResourceID = "[nxFileLine][V-219257.b][medium][SRG-OS-000064-GPOS-00033]::[Ubuntu]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S creat,open,openat,open_by_handle_at,truncate,ftruncate -F exit=-EACCES -F auid>=1000 -F auid!=-1 -k perm_access"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*creat,open,openat,open_by_handle_at,truncate,ftruncate\\s*-F\\s*exit\\s*=\\s*-EACCES\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*-1\\s*-k\\s*perm_access"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource48ref -{ -ResourceID = "[nxFileLine][V-219257.c][medium][SRG-OS-000064-GPOS-00033]::[Ubuntu]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S creat,open,openat,open_by_handle_at,truncate,ftruncate -F exit=-EPERM -F auid>=1000 -F auid!=-1 -k perm_access"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*creat,open,openat,open_by_handle_at,truncate,ftruncate\\s*-F\\s*exit\\s*=\\s*-EPERM\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*-1\\s*-k\\s*perm_access"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource49ref -{ -ResourceID = "[nxFileLine][V-219257.d][medium][SRG-OS-000064-GPOS-00033]::[Ubuntu]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S creat,open,openat,open_by_handle_at,truncate,ftruncate -F exit=-EACCES -F auid>=1000 -F auid!=-1 -k perm_access"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*creat,open,openat,open_by_handle_at,truncate,ftruncate\\s*-F\\s*exit\\s*=\\s*-EACCES\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*-1\\s*-k\\s*perm_access"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource50ref -{ -ResourceID = "[nxFileLine][V-219263][medium][SRG-OS-000064-GPOS-00033]::[Ubuntu]Baseline"; - ContainsLine = "-a always,exit -F path=/usr/bin/sudo -F perm=x -F auid>=1000 -F auid!=-1 -k priv_cmd"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/bin/sudo\\s*-F\\s*perm\\s*=\\s*x\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*-1\\s*-k\\s*priv_cmd"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource51ref -{ -ResourceID = "[nxFileLine][V-219264][medium][SRG-OS-000064-GPOS-00033]::[Ubuntu]Baseline"; - ContainsLine = "-a always,exit -F path=/usr/bin/sudoedit -F perm=x -F auid>=1000 -F auid!=-1 -k priv_cmd"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/bin/sudoedit\\s*-F\\s*perm\\s*=\\s*x\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*-1\\s*-k\\s*priv_cmd"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource52ref -{ -ResourceID = "[nxFileLine][V-219265][medium][SRG-OS-000064-GPOS-00033]::[Ubuntu]Baseline"; - ContainsLine = "-a always,exit -F path=/usr/bin/chsh -F perm=x -F auid>=1000 -F auid!=-1 -k priv_cmd"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/bin/chsh\\s*-F\\s*perm\\s*=\\s*x\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*-1\\s*-k\\s*priv_cmd"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource53ref -{ -ResourceID = "[nxFileLine][V-219266][medium][SRG-OS-000064-GPOS-00033]::[Ubuntu]Baseline"; - ContainsLine = "-a always,exit -F path=/usr/bin/newgrp -F perm=x -F auid>=1000 -F auid!=-1 -k priv_cmd"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/bin/newgrp\\s*-F\\s*perm\\s*=\\s*x\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*-1\\s*-k\\s*priv_cmd"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource54ref -{ -ResourceID = "[nxFileLine][V-219267][medium][SRG-OS-000064-GPOS-00033]::[Ubuntu]Baseline"; - ContainsLine = "-a always,exit -F path=/usr/bin/chcon -F perm=x -F auid>=1000 -F auid!=-1 -k perm_chng"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/bin/chcon\\s*-F\\s*perm\\s*=\\s*x\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*-1\\s*-k\\s*perm_chng"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource55ref -{ -ResourceID = "[nxFileLine][V-219268][medium][SRG-OS-000064-GPOS-00033]::[Ubuntu]Baseline"; - ContainsLine = "-a always,exit -F path=/sbin/apparmor_parser -F perm=x -F auid>=1000 -F auid!=-1 -k perm_chng"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/sbin/apparmor_parser\\s*-F\\s*perm\\s*=\\s*x\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*-1\\s*-k\\s*perm_chng"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource56ref -{ -ResourceID = "[nxFileLine][V-219269][medium][SRG-OS-000064-GPOS-00033]::[Ubuntu]Baseline"; - ContainsLine = "-a always,exit -F path=/usr/bin/setfacl -F perm=x -F auid>=1000 -F auid!=-1 -k perm_chng"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/bin/setfacl\\s*-F\\s*perm\\s*=\\s*x\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*-1\\s*-k\\s*perm_chng"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource57ref -{ -ResourceID = "[nxFileLine][V-219270][medium][SRG-OS-000064-GPOS-00033]::[Ubuntu]Baseline"; - ContainsLine = "-a always,exit -F path=/usr/bin/chacl -F perm=x -F auid>=1000 -F auid!=-1 -k perm_chng"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/bin/chacl\\s*-F\\s*perm\\s*=\\s*x\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*-1\\s*-k\\s*perm_chng"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource58ref -{ -ResourceID = "[nxFileLine][V-219271][medium][SRG-OS-000064-GPOS-00033]::[Ubuntu]Baseline"; - ContainsLine = "-a always,exit -F path=/usr/bin/passwd -F perm=x -F auid>=1000 -F auid!=-1 -k privileged-passwd"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/bin/passwd\\s*-F\\s*perm\\s*=\\s*x\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*-1\\s*-k\\s*privileged-passwd"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource59ref -{ -ResourceID = "[nxFileLine][V-219272][medium][SRG-OS-000064-GPOS-00033]::[Ubuntu]Baseline"; - ContainsLine = "-a always,exit -F path=/sbin/unix_update -F perm=x -F auid>=1000 -F auid!=-1 -k privileged-unix-update"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/sbin/unix_update\\s*-F\\s*perm\\s*=\\s*x\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*-1\\s*-k\\s*privileged-unix-update"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource60ref -{ -ResourceID = "[nxFileLine][V-219273][medium][SRG-OS-000064-GPOS-00033]::[Ubuntu]Baseline"; - ContainsLine = "-a always,exit -F path=/usr/bin/gpasswd -F perm=x -F auid>=1000 -F auid!=-1 -k privileged-gpasswd"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/bin/gpasswd\\s*-F\\s*perm\\s*=\\s*x\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*-1\\s*-k\\s*privileged-gpasswd"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource61ref -{ -ResourceID = "[nxFileLine][V-219274][medium][SRG-OS-000064-GPOS-00033]::[Ubuntu]Baseline"; - ContainsLine = "-a always,exit -F path=/usr/bin/chage -F perm=x -F auid>=1000 -F auid!=-1 -k privileged-chage"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/bin/chage\\s*-F\\s*perm\\s*=\\s*x\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*-1\\s*-k\\s*privileged-chage"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource62ref -{ -ResourceID = "[nxFileLine][V-219275][medium][SRG-OS-000064-GPOS-00033]::[Ubuntu]Baseline"; - ContainsLine = "-a always,exit -F path=/usr/sbin/usermod -F perm=x -F auid>=1000 -F auid!=-1 -k privileged-usermod"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/sbin/usermod\\s*-F\\s*perm\\s*=\\s*x\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*-1\\s*-k\\s*privileged-usermod"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource63ref -{ -ResourceID = "[nxFileLine][V-219276][medium][SRG-OS-000064-GPOS-00033]::[Ubuntu]Baseline"; - ContainsLine = "-a always,exit -F path=/usr/bin/crontab -F perm=x -F auid>=1000 -F auid!=-1 -k privileged-crontab"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/bin/crontab\\s*-F\\s*perm\\s*=\\s*x\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*-1\\s*-k\\s*privileged-crontab"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource64ref -{ -ResourceID = "[nxFileLine][V-219277][medium][SRG-OS-000064-GPOS-00033]::[Ubuntu]Baseline"; - ContainsLine = "-a always,exit -F path=/usr/sbin/pam_timestamp_check -F perm=x -F auid>=1000 -F auid!=-1 -k privileged-pam_timestamp_check"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/sbin/pam_timestamp_check\\s*-F\\s*perm\\s*=\\s*x\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*-1\\s*-k\\s*privileged-pam_timestamp_check"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource65ref -{ -ResourceID = "[nxFileLine][V-219279.a][medium][SRG-OS-000064-GPOS-00033]::[Ubuntu]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S finit_module -F auid>=1000 -F auid!=-1 -k module_chng"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*finit_module\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*-1\\s*-k\\s*module_chng"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource66ref -{ -ResourceID = "[nxFileLine][V-219279.b][medium][SRG-OS-000064-GPOS-00033]::[Ubuntu]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S finit_module -F auid>=1000 -F auid!=-1 -k module_chng"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*finit_module\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*-1\\s*-k\\s*module_chng"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource67ref -{ -ResourceID = "[nxFileLine][V-219281.a][medium][SRG-OS-000326-GPOS-00126]::[Ubuntu]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S execve -C uid!=euid -F euid=0 -F key=execpriv"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*execve\\s*-C\\s*uid!\\s*=\\s*euid\\s*-F\\s*euid\\s*=\\s*0\\s*-F\\s*key\\s*=\\s*execpriv"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource68ref -{ -ResourceID = "[nxFileLine][V-219281.b][medium][SRG-OS-000326-GPOS-00126]::[Ubuntu]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S execve -C gid!=egid -F egid=0 -F key=execpriv"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*execve\\s*-C\\s*gid!\\s*=\\s*egid\\s*-F\\s*egid\\s*=\\s*0\\s*-F\\s*key\\s*=\\s*execpriv"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource69ref -{ -ResourceID = "[nxFileLine][V-219281.c][medium][SRG-OS-000326-GPOS-00126]::[Ubuntu]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S execve -C uid!=euid -F euid=0 -F key=execpriv"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*execve\\s*-C\\s*uid!\\s*=\\s*euid\\s*-F\\s*euid\\s*=\\s*0\\s*-F\\s*key\\s*=\\s*execpriv"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource70ref -{ -ResourceID = "[nxFileLine][V-219281.d][medium][SRG-OS-000326-GPOS-00126]::[Ubuntu]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S execve -C gid!=egid -F egid=0 -F key=execpriv"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*execve\\s*-C\\s*gid!\\s*=\\s*egid\\s*-F\\s*egid\\s*=\\s*0\\s*-F\\s*key\\s*=\\s*execpriv"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource71ref -{ -ResourceID = "[nxFileLine][V-219287.a][medium][SRG-OS-000468-GPOS-00212]::[Ubuntu]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S unlink,unlinkat,rename,renameat,rmdir -F auid>=1000 -F auid!=-1 -k delete"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*unlink,unlinkat,rename,renameat,rmdir\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*-1\\s*-k\\s*delete"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource72ref -{ -ResourceID = "[nxFileLine][V-219287.b][medium][SRG-OS-000468-GPOS-00212]::[Ubuntu]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S unlink,unlinkat,rename,renameat,rmdir -F auid>=1000 -F auid!=-1 -k delete"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*unlink,unlinkat,rename,renameat,rmdir\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*-1\\s*-k\\s*delete"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource73ref -{ -ResourceID = "[nxFileLine][V-219291.a][medium][SRG-OS-000471-GPOS-00216]::[Ubuntu]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S init_module -S finit_module -k modules"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*init_module\\s*-S\\s*finit_module\\s*-k\\s*modules"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource74ref -{ -ResourceID = "[nxFileLine][V-219291.b][medium][SRG-OS-000471-GPOS-00216]::[Ubuntu]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S init_module -S finit_module -k modules"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*init_module\\s*-S\\s*finit_module\\s*-k\\s*modules"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource75ref -{ -ResourceID = "[nxFileLine][V-219296.a][medium][SRG-OS-000477-GPOS-00222]::[Ubuntu]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S init_module -S finit_module -F key=modules"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*init_module\\s*-S\\s*finit_module\\s*-F\\s*key\\s*=\\s*modules"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource76ref -{ -ResourceID = "[nxFileLine][V-219296.b][medium][SRG-OS-000477-GPOS-00222]::[Ubuntu]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S init_module -S finit_module -F key=modules"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*init_module\\s*-S\\s*finit_module\\s*-F\\s*key\\s*=\\s*modules"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource77ref -{ -ResourceID = "[nxFileLine][V-219297.a][medium][SRG-OS-000477-GPOS-00222]::[Ubuntu]Baseline"; - ContainsLine = "-a always,exit -F arch=b64 -S delete_module -F key=modules"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*delete_module\\s*-F\\s*key\\s*=\\s*modules"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource78ref -{ -ResourceID = "[nxFileLine][V-219297.b][medium][SRG-OS-000477-GPOS-00222]::[Ubuntu]Baseline"; - ContainsLine = "-a always,exit -F arch=b32 -S delete_module -F key=modules"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*delete_module\\s*-F\\s*key\\s*=\\s*modules"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource79ref -{ -ResourceID = "[nxFileLine][V-219298][medium][SRG-OS-000477-GPOS-00222]::[Ubuntu]Baseline"; - ContainsLine = "-w /sbin/modprobe -p x -k modules"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-w\\s*/sbin/modprobe\\s*-p\\s*x\\s*-k\\s*modules"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource80ref -{ -ResourceID = "[nxFileLine][V-219299][medium][SRG-OS-000477-GPOS-00222]::[Ubuntu]Baseline"; - ContainsLine = "-w /bin/kmod -p x -k module"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-w\\s*/bin/kmod\\s*-p\\s*x\\s*-k\\s*module"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource81ref -{ -ResourceID = "[nxFileLine][V-219300][medium][SRG-OS-000477-GPOS-00222]::[Ubuntu]Baseline"; - ContainsLine = "-w /sbin/fdisk -p x -k fdisk"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/audit/rules.d/audit.rules"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*-w\\s*/sbin/fdisk\\s*-p\\s*x\\s*-k\\s*fdisk"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource82ref -{ -ResourceID = "[nxFileLine][V-219301][low][SRG-OS-000027-GPOS-00008]::[Ubuntu]Baseline"; - ContainsLine = "* hard maxlogins 10"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/security/limits.conf"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "^\\s*\\*\\s*hard\\s*maxlogins\\s*([1][1-9]|[2-9]\\d+|[1-9][0-9]\\d+)$|^#\\s*\\*\\s*hard\\s*maxlogins."; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource83ref -{ -ResourceID = "[nxFileLine][V-219303.b][medium][SRG-OS-000029-GPOS-00010]::[Ubuntu]Baseline"; - ContainsLine = "TMOUT=900"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/profile.d/autologout.sh"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "^\\s*TMOUT\\s*=\\s*[0-8]?[0-9]?[0-9]?$|^#\\s*TMOUT.*"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource84ref -{ -ResourceID = "[nxFileLine][V-219303.c][medium][SRG-OS-000029-GPOS-00010]::[Ubuntu]Baseline"; - ContainsLine = "readonly TMOUT"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/profile.d/autologout.sh"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "^\\s*readonly\\s+(?!TMOUT\\b).*$|^\\s*#\\s*readonly.*$"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource85ref -{ -ResourceID = "[nxFileLine][V-219303.d][medium][SRG-OS-000029-GPOS-00010]::[Ubuntu]Baseline"; - ContainsLine = "export TMOUT"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/profile.d/autologout.sh"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "^\\s*export\\s+(?!TMOUT\\b).*$|^\\s*#\\s*export.*$"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource86ref -{ -ResourceID = "[nxFileLine][V-219306.a][medium][SRG-OS-000032-GPOS-00013]::[Ubuntu]Baseline"; - ContainsLine = "auth.*,authpriv.* /var/log/secure"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/rsyslog.d/50-default.conf"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*auth\\.\\*,\\s*authpriv\\.\\*.*"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource87ref -{ -ResourceID = "[nxFileLine][V-219306.b][medium][SRG-OS-000032-GPOS-00013]::[Ubuntu]Baseline"; - ContainsLine = "daemon.notice /var/log/messages"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/rsyslog.d/50-default.conf"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*daemon.notice.*"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource88ref -{ -ResourceID = "[nxFileLine][V-219307][medium][SRG-OS-000033-GPOS-00014]::[Ubuntu]Baseline"; - ContainsLine = "Ciphers aes256-ctr,aes192-ctr,aes128-ctr"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/ssh/sshd_config"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "^#\\s*Ciphers.*|^\\s*Ciphers\\s*aes128-ctr.*|^\\s*Ciphers\\s*aes192-ctr.*"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource89ref -{ -ResourceID = "[nxFileLine][V-219308][high][SRG-OS-000112-GPOS-00057]::[Ubuntu]Baseline"; - ContainsLine = "Protocol 2"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/ssh/sshd_config"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "^#\\s*Protocol.*$|^Protocol\\s*(?!2\\b)\\w*$"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource90ref -{ -ResourceID = "[nxFileLine][V-219309][medium][SRG-OS-000125-GPOS-00065]::[Ubuntu]Baseline"; - ContainsLine = "UsePAM yes"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/ssh/sshd_config"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*UsePAM\\s*yes"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource91ref -{ -ResourceID = "[nxFileLine][V-219310][medium][SRG-OS-000126-GPOS-00066]::[Ubuntu]Baseline"; - ContainsLine = "ClientAliveCountMax 1"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/ssh/sshd_config"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "^#\\s*ClientAliveCountMax.*$|^ClientAliveCountMax\\s*(?!1\\b)\\w*$"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource92ref -{ -ResourceID = "[nxFileLine][V-219311][medium][SRG-OS-000163-GPOS-00072]::[Ubuntu]Baseline"; - ContainsLine = "ClientAliveInterval 600"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/ssh/sshd_config"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "^\\s*ClientAliveInterval\\s*[0-5]?[0-9]?[0-9]?\\s*$|^#\\s*ClientAliveInterval.*|^\\s*ClientAliveInterval\\s*$"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource93ref -{ -ResourceID = "[nxFileLine][V-219312][medium][SRG-OS-000250-GPOS-00093]::[Ubuntu]Baseline"; - ContainsLine = "MACs hmac-sha2-512,hmac-sha2-256"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/ssh/sshd_config"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*MACs.*|\\s*MACs\\s*hmac-(?!sha2-512).*"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource94ref -{ -ResourceID = "[nxFileLine][V-219314.a][high][SRG-OS-000480-GPOS-00229]::[Ubuntu]Baseline"; - ContainsLine = "PermitEmptyPasswords no"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/ssh/sshd_config"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "^#\\s*PermitEmptyPasswords.*$|^PermitEmptyPasswords\\s*(?!no\\b)\\w*$"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource95ref -{ -ResourceID = "[nxFileLine][V-219314.b][high][SRG-OS-000480-GPOS-00229]::[Ubuntu]Baseline"; - ContainsLine = "PermitUserEnvironment no"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/ssh/sshd_config"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "^#\\s*PermitUserEnvironment.*$|^PermitUserEnvironment\\s*(?!no\\b)\\w*$"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource96ref -{ -ResourceID = "[nxFileLine][V-219328][medium][SRG-OS-000480-GPOS-00228]::[Ubuntu]Baseline"; - ContainsLine = "UMASK 077"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/login.defs"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "^\\s*UMASK(?!\\s077\\b)\\s*\\d*\\s*$|^#\\s*UMASK.*"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource97ref -{ -ResourceID = "[nxFileLine][V-219339.b][medium][SRG-OS-000378-GPOS-00163]::[Ubuntu]Baseline"; - ContainsLine = "install usb-storage /bin/true"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/modprobe.d/DISASTIG.conf"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*install\\s*usb-storage\\s*/bin/true"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource98ref -{ -ResourceID = "[nxFileLine][V-219339.c][medium][SRG-OS-000378-GPOS-00163]::[Ubuntu]Baseline"; - ContainsLine = "blacklist usb-storage"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/modprobe.d/DISASTIG.conf"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*blacklist\\s*usb-storage"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource99ref -{ -ResourceID = "[nxFileLine][V-233779][medium][SRG-OS-000480-GPOS-00227]::[Ubuntu]Baseline"; - ContainsLine = "X11Forwarding no"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/ssh/sshd_config"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "^#\\s*X11Forwarding.*$|^X11Forwarding\\s*(?!no\\b)\\w*$"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource100ref -{ -ResourceID = "[nxFileLine][V-233780][medium][SRG-OS-000480-GPOS-00227]::[Ubuntu]Baseline"; - ContainsLine = "X11UseLocalhost yes"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; - FilePath = "/etc/ssh/sshd_config"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - DoesNotContainPattern = "#\\s*X11UseLocalhost\\s*yes"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxServiceResource as $MSFT_nxServiceResource1ref -{ -ResourceID = "[nxService][V-219160.b][medium][SRG-OS-000269-GPOS-00103]::[Ubuntu]Baseline"; - Controller = "systemd"; - State = "Running"; - Enabled = True; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxService.ps1::22::9::nxService"; - Name = "rsyslog"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxServiceResource as $MSFT_nxServiceResource2ref -{ -ResourceID = "[nxService][V-219225.b][medium][SRG-OS-000038-GPOS-00016]::[Ubuntu]Baseline"; - Controller = "systemd"; - State = "Running"; - Enabled = True; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxService.ps1::22::9::nxService"; - Name = "auditd"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxServiceResource as $MSFT_nxServiceResource3ref -{ -ResourceID = "[nxService][V-219313.b][high][SRG-OS-000423-GPOS-00187]::[Ubuntu]Baseline"; - Controller = "systemd"; - State = "Running"; - Enabled = True; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxService.ps1::22::9::nxService"; - Name = "sshd"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxServiceResource as $MSFT_nxServiceResource4ref -{ -ResourceID = "[nxService][V-219322.b][low][SRG-OS-000312-GPOS-00122]::[Ubuntu]Baseline"; - Controller = "systemd"; - State = "Running"; - Enabled = True; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxService.ps1::22::9::nxService"; - Name = "apparmor"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxServiceResource as $MSFT_nxServiceResource5ref -{ -ResourceID = "[nxService][V-219335][medium][SRG-OS-000184-GPOS-00078]::[Ubuntu]Baseline"; - Controller = "systemd"; - Enabled = False; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxService.ps1::13::9::nxService"; - Name = "kdump"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxServiceResource as $MSFT_nxServiceResource6ref -{ -ResourceID = "[nxService][V-219337][medium][SRG-OS-000297-GPOS-00115]::[Ubuntu]Baseline"; - Controller = "systemd"; - State = "Running"; - Enabled = True; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxService.ps1::22::9::nxService"; - Name = "ufw"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxScriptResource as $MSFT_nxScriptResource1ref -{ -ResourceID = "[nxScript][V-219152.b][low][[Skip] SRG-OS-000343-GPOS-00134]::[Ubuntu]Baseline"; - GetScript = "#!/bin/bash\necho [V-219152.b][low][[Skip] SRG-OS-000343-GPOS-00134]"; - TestScript = "#!/bin/bash\nexit 0"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxScript.skip.ps1::10::5::nxScript"; - SetScript = "#!/bin/bash"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxScriptResource as $MSFT_nxScriptResource2ref -{ -ResourceID = "[nxScript][V-219153.c][low][[Skip] SRG-OS-000479-GPOS-00224]::[Ubuntu]Baseline"; - GetScript = "#!/bin/bash\necho [V-219153.c][low][[Skip] SRG-OS-000479-GPOS-00224]"; - TestScript = "#!/bin/bash\nexit 0"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxScript.skip.ps1::10::5::nxScript"; - SetScript = "#!/bin/bash"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxScriptResource as $MSFT_nxScriptResource3ref -{ -ResourceID = "[nxScript][V-219167.a][medium][[Skip] SRG-OS-000024-GPOS-00007]::[Ubuntu]Baseline"; - GetScript = "#!/bin/bash\necho [V-219167.a][medium][[Skip] SRG-OS-000024-GPOS-00007]"; - TestScript = "#!/bin/bash\nexit 0"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxScript.skip.ps1::10::5::nxScript"; - SetScript = "#!/bin/bash"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxScriptResource as $MSFT_nxScriptResource4ref -{ -ResourceID = "[nxScript][V-219167.b][medium][[Skip] SRG-OS-000024-GPOS-00007]::[Ubuntu]Baseline"; - GetScript = "#!/bin/bash\necho [V-219167.b][medium][[Skip] SRG-OS-000024-GPOS-00007]"; - TestScript = "#!/bin/bash\nexit 0"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxScript.skip.ps1::10::5::nxScript"; - SetScript = "#!/bin/bash"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxScriptResource as $MSFT_nxScriptResource5ref -{ -ResourceID = "[nxScript][V-219167.c][medium][[Skip] SRG-OS-000024-GPOS-00007]::[Ubuntu]Baseline"; - GetScript = "#!/bin/bash\necho [V-219167.c][medium][[Skip] SRG-OS-000024-GPOS-00007]"; - TestScript = "#!/bin/bash\nexit 0"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxScript.skip.ps1::10::5::nxScript"; - SetScript = "#!/bin/bash"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of MSFT_nxScriptResource as $MSFT_nxScriptResource6ref -{ -ResourceID = "[nxScript][V-219159][medium][[Skip] SRG-OS-000191-GPOS-00080]::[Ubuntu]Baseline"; - GetScript = "#!/bin/bash\necho [V-219159][medium][[Skip] SRG-OS-000191-GPOS-00080]"; - TestScript = "#!/bin/bash\nexit 0"; - SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerSTIG\\4.13.1\\DSCResources\\Resources\\linux.nxScript.skip.ps1::10::5::nxScript"; - SetScript = "#!/bin/bash"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of OMI_ConfigurationDocument - - - { - Version="2.0.0"; - - - MinimumCompatibleVersion = "1.0.0"; - - - CompatibleVersionAdditionalProperties= {"Omi_BaseResource:ConfigurationName"}; - - - Author="Microsoft"; - - - GenerationDate="06/30/2022 11:38:45"; - - - GenerationHost="Microsoft"; - - - Name="LinuxBaseLine"; - - - }; +/* +@TargetNode='Ubuntu1804' +@GeneratedBy=Microsoft +@GenerationDate=03/09/2023 14:17:33 +@GenerationHost=Microsoft +*/ + +instance of MSFT_nxPackageResource as $MSFT_nxPackageResource1ref +{ +ResourceID = "[nxPackage][V-219153.a][low][SRG-OS-000479-GPOS-00224]::[Ubuntu]Baseline"; + Ensure = "Present"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxPackage.ps1::8::5::nxPackage"; + Name = "audispd-plugins"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxPackageResource as $MSFT_nxPackageResource2ref +{ +ResourceID = "[nxPackage][V-219157][high][SRG-OS-000095-GPOS-00049]::[Ubuntu]Baseline"; + Ensure = "Absent"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxPackage.ps1::8::5::nxPackage"; + Name = "nis"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxPackageResource as $MSFT_nxPackageResource3ref +{ +ResourceID = "[nxPackage][V-219158][high][SRG-OS-000095-GPOS-00049]::[Ubuntu]Baseline"; + Ensure = "Absent"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxPackage.ps1::8::5::nxPackage"; + Name = "rsh-server"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxPackageResource as $MSFT_nxPackageResource4ref +{ +ResourceID = "[nxPackage][V-219160.a][medium][SRG-OS-000269-GPOS-00103]::[Ubuntu]Baseline"; + Ensure = "Present"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxPackage.ps1::8::5::nxPackage"; + Name = "rsyslog"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxPackageResource as $MSFT_nxPackageResource5ref +{ +ResourceID = "[nxPackage][V-219161][medium][SRG-OS-000297-GPOS-00115]::[Ubuntu]Baseline"; + Ensure = "Present"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxPackage.ps1::8::5::nxPackage"; + Name = "ufw"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxPackageResource as $MSFT_nxPackageResource6ref +{ +ResourceID = "[nxPackage][V-219177][high][SRG-OS-000074-GPOS-00042]::[Ubuntu]Baseline"; + Ensure = "Absent"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxPackage.ps1::8::5::nxPackage"; + Name = "telnetd"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxPackageResource as $MSFT_nxPackageResource7ref +{ +ResourceID = "[nxPackage][V-219186.a][medium][SRG-OS-000480-GPOS-00225]::[Ubuntu]Baseline"; + Ensure = "Present"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxPackage.ps1::8::5::nxPackage"; + Name = "libpam-pwquality"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxPackageResource as $MSFT_nxPackageResource8ref +{ +ResourceID = "[nxPackage][V-219225.a][medium][SRG-OS-000038-GPOS-00016]::[Ubuntu]Baseline"; + Ensure = "Present"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxPackage.ps1::8::5::nxPackage"; + Name = "auditd"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxPackageResource as $MSFT_nxPackageResource9ref +{ +ResourceID = "[nxPackage][V-219304][medium][SRG-OS-000030-GPOS-00011]::[Ubuntu]Baseline"; + Ensure = "Present"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxPackage.ps1::8::5::nxPackage"; + Name = "vlock"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxPackageResource as $MSFT_nxPackageResource10ref +{ +ResourceID = "[nxPackage][V-219313.a][high][SRG-OS-000423-GPOS-00187]::[Ubuntu]Baseline"; + Ensure = "Present"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxPackage.ps1::8::5::nxPackage"; + Name = "ssh"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxPackageResource as $MSFT_nxPackageResource11ref +{ +ResourceID = "[nxPackage][V-219318][medium][SRG-OS-000375-GPOS-00160]::[Ubuntu]Baseline"; + Ensure = "Present"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxPackage.ps1::8::5::nxPackage"; + Name = "libpam-pkcs11"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxPackageResource as $MSFT_nxPackageResource12ref +{ +ResourceID = "[nxPackage][V-219319][medium][SRG-OS-000376-GPOS-00161]::[Ubuntu]Baseline"; + Ensure = "Present"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxPackage.ps1::8::5::nxPackage"; + Name = "opensc-pkcs11"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxPackageResource as $MSFT_nxPackageResource13ref +{ +ResourceID = "[nxPackage][V-219322.a][low][SRG-OS-000312-GPOS-00122]::[Ubuntu]Baseline"; + Ensure = "Present"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxPackage.ps1::8::5::nxPackage"; + Name = "libpam-apparmor"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxPackageResource as $MSFT_nxPackageResource14ref +{ +ResourceID = "[nxPackage][V-219323][medium][SRG-OS-000368-GPOS-00154]::[Ubuntu]Baseline"; + Ensure = "Present"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxPackage.ps1::8::5::nxPackage"; + Name = "apparmor"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxPackageResource as $MSFT_nxPackageResource15ref +{ +ResourceID = "[nxPackage][V-219343][medium][SRG-OS-000445-GPOS-00199]::[Ubuntu]Baseline"; + Ensure = "Present"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxPackage.ps1::8::5::nxPackage"; + Name = "aide"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileResource as $MSFT_nxFileResource1ref +{ +ResourceID = "[nxFile][V-219303.a][medium][SRG-OS-000029-GPOS-00010]::[Ubuntu]Baseline"; + Contents = ""; + DestinationPath = "/etc/profile.d/autologout.sh"; + ModuleName = "nx"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; + ModuleVersion = "1.0"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileResource as $MSFT_nxFileResource2ref +{ +ResourceID = "[nxFile][V-219339.a][medium][SRG-OS-000378-GPOS-00163]::[Ubuntu]Baseline"; + Contents = ""; + DestinationPath = "/etc/modprobe.d/DISASTIG.conf"; + ModuleName = "nx"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFile.ps1::8::5::nxFile"; + ModuleVersion = "1.0"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource1ref +{ +ResourceID = "[nxFileLine][V-219152.a][low][SRG-OS-000343-GPOS-00134]::[Ubuntu]Baseline"; + ContainsLine = "space_left_action = email"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/auditd.conf"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "^#\\s*space_left_action.*"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileResource as $MSFT_nxFileResource3ref +{ +SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::29::9::nxFile"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + ResourceID = "[nxFile][V-219153.b][low][SRG-OS-000479-GPOS-00224]::[Ubuntu]Baseline"; + DestinationPath = "/etc/audisp/plugins.d/au-remote.conf"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource2ref +{ +ResourceID = "[nxFileLine][V-219153.b][low][SRG-OS-000479-GPOS-00224]::[Ubuntu]Baseline"; + ContainsLine = "active = yes"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audisp/plugins.d/au-remote.conf"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "\\s*active\\s*=\\s*no|active=yes|#\\s*active\\s*=.*"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource3ref +{ +ResourceID = "[nxFileLine][V-219156.a][medium][SRG-OS-000437-GPOS-00194]::[Ubuntu]Baseline"; + ContainsLine = "Unattended-Upgrade::Remove-Unused-Dependencies \"true\";"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/apt/apt.conf.d/50unattended-upgrades"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "\\s*Unattended-Upgrade::Remove-Unused-Dependencies\\s*(\"false\"|false|true).*|#\\s*Unattended-Upgrade::Remove-Unused-Dependencies.*"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource4ref +{ +ResourceID = "[nxFileLine][V-219156.b][medium][SRG-OS-000437-GPOS-00194]::[Ubuntu]Baseline"; + ContainsLine = "Unattended-Upgrade::Remove-Unused-Kernel-Packages \"true\";"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/apt/apt.conf.d/50unattended-upgrades"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "\\s*Unattended-Upgrade::Remove-Unused-Kernel-Packages\\s*(\"false\"|false|true).*|#\\s*Unattended-Upgrade::Remove-Unused-Kernel-Packages.*"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource5ref +{ +ResourceID = "[nxFileLine][V-219170.a][medium][SRG-OS-000228-GPOS-00088]::[Ubuntu]Baseline"; + ContainsLine = "Banner /etc/issue"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/ssh/sshd_config"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*Banner\\s*/etc/issue"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource6ref +{ +ResourceID = "[nxFileLine][V-219170.b][medium][SRG-OS-000228-GPOS-00088]::[Ubuntu]Baseline"; + ContainsLine = "You are accessing a U.S. Government (USG) Information System (IS) that is provided for USG-authorized use only.\n\nBy using this IS (which includes any device attached to this IS), you consent to the following conditions:\n\n-The USG routinely intercepts and monitors communications on this IS for purposes including, but not limited to, penetration testing, COMSEC monitoring, network operations and defense, personnel misconduct (PM), law enforcement (LE), and counterintelligence (CI) investigations.\n\n-At any time, the USG may inspect and seize data stored on this IS.\n\n-Communications using, or data stored on, this IS are not private, are subject to routine monitoring, interception, and search, and may be disclosed or used for any USG-authorized purpose.\n\n-This IS includes security measures (e.g., authentication and access controls) to protect USG interests--not for your personal benefit or privacy.\n\n-Notwithstanding the above, using this IS does not constitute consent to PM, LE or CI investigative searching or monitoring of the content of privileged communications, or work product, related to personal representation or services by attorneys, psychotherapists, or clergy, and their assistants. Such communications and work product are private and confidential. See User Agreement for details."; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/issue"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*You\\s*are\\s*accessing\\s*a\\s*U.S.\\s*Government\\s*(USG)\\s*Information\\s*System\\s*(IS)\\s*that\\s*is\\s*provided\\s*for\\s*USG-authorized\\s*use\\s*only.\\s*By\\s*using\\s*this\\s*IS\\s*(which\\s*includes\\s*any\\s*device\\s*attached\\s*to\\s*this\\s*IS),\\s*you\\s*consent\\s*to\\s*the\\s*following\\s*conditions:\\s*-The\\s*USG\\s*routinely\\s*intercepts\\s*and\\s*monitors\\s*communications\\s*on\\s*this\\s*IS\\s*for\\s*purposes\\s*including,\\s*but\\s*not\\s*limited\\s*to,\\s*penetration\\s*testing,\\s*COMSEC\\s*monitoring,\\s*network\\s*operations\\s*and\\s*defense,\\s*personnel\\s*misconduct\\s*(PM),\\s*law\\s*enforcement\\s*(LE),\\s*and\\s*counterintelligence\\s*(CI)\\s*investigations.\\s*-At\\s*any\\s*time,\\s*the\\s*USG\\s*may\\s*inspect\\s*and\\s*seize\\s*data\\s*stored\\s*on\\s*this\\s*IS.\\s*-Communications\\s*using,\\s*or\\s*data\\s*stored\\s*on,\\s*this\\s*IS\\s*are\\s*not\\s*private,\\s*are\\s*subject\\s*to\\s*routine\\s*monitoring,\\s*interception,\\s*and\\s*search,\\s*and\\s*may\\s*be\\s*disclosed\\s*or\\s*used\\s*for\\s*any\\s*USG-authorized\\s*purpose.\\s*-This\\s*IS\\s*includes\\s*security\\s*measures\\s*(e.g.,\\s*authentication\\s*and\\s*access\\s*controls)\\s*to\\s*protect\\s*USG\\s*interests--not\\s*for\\s*your\\s*personal\\s*benefit\\s*or\\s*privacy.\\s*-Notwithstanding\\s*the\\s*above,\\s*using\\s*this\\s*IS\\s*does\\s*not\\s*constitute\\s*consent\\s*to\\s*PM,\\s*LE\\s*or\\s*CI\\s*investigative\\s*searching\\s*or\\s*monitoring\\s*of\\s*the\\s*content\\s*of\\s*privileged\\s*communications,\\s*or\\s*work\\s*product,\\s*related\\s*to\\s*personal\\s*representation\\s*or\\s*services\\s*by\\s*attorneys,\\s*psychotherapists,\\s*or\\s*clergy,\\s*and\\s*their\\s*assistants.\\s*Such\\s*communications\\s*and\\s*work\\s*product\\s*are\\s*private\\s*and\\s*confidential.\\s*See\\s*User\\s*Agreement\\s*for\\s*details."; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource7ref +{ +ResourceID = "[nxFileLine][V-219172][low][SRG-OS-000069-GPOS-00037]::[Ubuntu]Baseline"; + ContainsLine = "ucredit=-1"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/security/pwquality.conf"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "^#\\s*ucredit.*$|^ucredit\\s*=\\s*(?!-1\\b)\\w*$"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource8ref +{ +ResourceID = "[nxFileLine][V-219173][low][SRG-OS-000070-GPOS-00038]::[Ubuntu]Baseline"; + ContainsLine = "lcredit=-1"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/security/pwquality.conf"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "^#\\s*lcredit.*$|^lcredit\\s*=\\s*(?!-1\\b)\\w*$"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource9ref +{ +ResourceID = "[nxFileLine][V-219174][low][SRG-OS-000071-GPOS-00039]::[Ubuntu]Baseline"; + ContainsLine = "dcredit=-1"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/security/pwquality.conf"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "^#\\s*dcredit.*$|^dcredit\\s*=\\s*(?!-1\\b)\\w*$"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource10ref +{ +ResourceID = "[nxFileLine][V-219175][low][SRG-OS-000072-GPOS-00040]::[Ubuntu]Baseline"; + ContainsLine = "difok=8"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/security/pwquality.conf"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "^\\s*difok\\s*=\\s*(-|)[0-7]$|#\\s*difok\\s*=.*|difok\\s+=\\s+.*"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource11ref +{ +ResourceID = "[nxFileLine][V-219176][medium][SRG-OS-000073-GPOS-00041]::[Ubuntu]Baseline"; + ContainsLine = "ENCRYPT_METHOD SHA512"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/login.defs"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*ENCRYPT_METHOD\\s*SHA512"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource12ref +{ +ResourceID = "[nxFileLine][V-219178][low][SRG-OS-000075-GPOS-00043]::[Ubuntu]Baseline"; + ContainsLine = "PASS_MIN_DAYS 1"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/login.defs"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "^\\s*PASS_MIN_DAYS\\s*[0]*$|#\\s*PASS_MIN_DAYS.*"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource13ref +{ +ResourceID = "[nxFileLine][V-219179][low][SRG-OS-000076-GPOS-00044]::[Ubuntu]Baseline"; + ContainsLine = "PASS_MAX_DAYS 60"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/login.defs"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "^\\s*PASS_MAX_DAYS\\s*([6][1-9]|[7-9][0-9]|\\d{3,})$|#\\s*PASS_MAX_DAYS.*"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource14ref +{ +ResourceID = "[nxFileLine][V-219181][medium][SRG-OS-000078-GPOS-00046]::[Ubuntu]Baseline"; + ContainsLine = "minlen=15"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/security/pwquality.conf"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "^\\s*minlen\\s*=\\s*([0-9]|[1][1-4])$|#\\s*minlen.*"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource15ref +{ +ResourceID = "[nxFileLine][V-219184][medium][SRG-OS-000480-GPOS-00225]::[Ubuntu]Baseline"; + ContainsLine = "dictcheck=1"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/security/pwquality.conf"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "^\\s*dictcheck\\s*=\\s*((?!1)|[1]\\d+)\\d*$|#\\s*dictcheck.*"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource16ref +{ +ResourceID = "[nxFileLine][V-219186.b][medium][SRG-OS-000480-GPOS-00225]::[Ubuntu]Baseline"; + ContainsLine = "enforcing = 1"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/security/pwquality.conf"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "^\\s*enforcing\\s*=\\s*((?!1)|[1]\\d+)\\d*$|#\\s*enforcing.*"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource17ref +{ +ResourceID = "[nxFileLine][V-219210][low][SRG-OS-000266-GPOS-00101]::[Ubuntu]Baseline"; + ContainsLine = "ocredit=-1"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/security/pwquality.conf"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "^#\\s*ocredit.*$|^ocredit\\s*=\\s*(?!-1)\\w*$"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource18ref +{ +ResourceID = "[nxFileLine][V-219213][medium][SRG-OS-000064-GPOS-00033]::[Ubuntu]Baseline"; + ContainsLine = "-w /var/log/tallylog -p wa -k logins"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-w\\s*/var/log/tallylog\\s*-p\\s*wa\\s*-k\\s*logins"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource19ref +{ +ResourceID = "[nxFileLine][V-219214][medium][SRG-OS-000064-GPOS-00033]::[Ubuntu]Baseline"; + ContainsLine = "-w /var/log/faillog -p wa -k logins"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-w\\s*/var/log/faillog\\s*-p\\s*wa\\s*-k\\s*logins"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource20ref +{ +ResourceID = "[nxFileLine][V-219215][medium][SRG-OS-000064-GPOS-00033]::[Ubuntu]Baseline"; + ContainsLine = "-w /var/log/lastlog -p wa -k logins"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-w\\s*/var/log/lastlog\\s*-p\\s*wa\\s*-k\\s*logins"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource21ref +{ +ResourceID = "[nxFileLine][V-219216][medium][SRG-OS-000471-GPOS-00215]::[Ubuntu]Baseline"; + ContainsLine = "-w /var/log/sudo.log -p wa -k priv_actions"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-w\\s*/var/log/sudo.log\\s*-p\\s*wa\\s*-k\\s*priv_actions"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource22ref +{ +ResourceID = "[nxFileLine][V-219217][medium][SRG-OS-000472-GPOS-00217]::[Ubuntu]Baseline"; + ContainsLine = "-w /var/log/wtmp -p wa -k logins"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-w\\s*/var/log/wtmp\\s*-p\\s*wa\\s*-k\\s*logins"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource23ref +{ +ResourceID = "[nxFileLine][V-219218][medium][SRG-OS-000472-GPOS-00217]::[Ubuntu]Baseline"; + ContainsLine = "-w /var/run/utmp -p wa -k logins"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-w\\s*/var/run/utmp\\s*-p\\s*wa\\s*-k\\s*logins"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource24ref +{ +ResourceID = "[nxFileLine][V-219219][medium][SRG-OS-000472-GPOS-00217]::[Ubuntu]Baseline"; + ContainsLine = "-w /var/log/btmp -p wa -k logins"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-w\\s*/var/log/btmp\\s*-p\\s*wa\\s*-k\\s*logins"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource25ref +{ +ResourceID = "[nxFileLine][V-219220][medium][SRG-OS-000476-GPOS-00221]::[Ubuntu]Baseline"; + ContainsLine = "-w /etc/passwd -p wa -k usergroup_modification"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-w\\s*/etc/passwd\\s*-p\\s*wa\\s*-k\\s*usergroup_modification"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource26ref +{ +ResourceID = "[nxFileLine][V-219221][medium][SRG-OS-000476-GPOS-00221]::[Ubuntu]Baseline"; + ContainsLine = "-w /etc/group -p wa -k usergroup_modification"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-w\\s*/etc/group\\s*-p\\s*wa\\s*-k\\s*usergroup_modification"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource27ref +{ +ResourceID = "[nxFileLine][V-219222][medium][SRG-OS-000476-GPOS-00221]::[Ubuntu]Baseline"; + ContainsLine = "-w /etc/gshadow -p wa -k usergroup_modification"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-w\\s*/etc/gshadow\\s*-p\\s*wa\\s*-k\\s*usergroup_modification"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource28ref +{ +ResourceID = "[nxFileLine][V-219223][medium][SRG-OS-000476-GPOS-00221]::[Ubuntu]Baseline"; + ContainsLine = "-w /etc/shadow -p wa -k usergroup_modification"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-w\\s*/etc/shadow\\s*-p\\s*wa\\s*-k\\s*usergroup_modification"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource29ref +{ +ResourceID = "[nxFileLine][V-219224][medium][SRG-OS-000476-GPOS-00221]::[Ubuntu]Baseline"; + ContainsLine = "-w /etc/security/opasswd -p wa -k usergroup_modification"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-w\\s*/etc/security/opasswd\\s*-p\\s*wa\\s*-k\\s*usergroup_modification"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource30ref +{ +ResourceID = "[nxFileLine][V-219226][medium][SRG-OS-000046-GPOS-00022]::[Ubuntu]Baseline"; + ContainsLine = "action_mail_acct = root"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/auditd.conf"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*action_mail_acct\\s*=\\s*root"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource31ref +{ +ResourceID = "[nxFileLine][V-219227][medium][SRG-OS-000047-GPOS-00023]::[Ubuntu]Baseline"; + ContainsLine = "disk_full_action = HALT"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/auditd.conf"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*disk_full_action.*|^\\s*disk_full_action\\s*=\\s*(?!HALT\\b)\\w+"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource32ref +{ +ResourceID = "[nxFileLine][V-219238][medium][SRG-OS-000064-GPOS-00033]::[Ubuntu]Baseline"; + ContainsLine = "-a always,exit -F path=/bin/su -F perm=x -F auid>=1000 -F auid!=-1 -k privileged-priv_change"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/bin/su\\s*-F\\s*perm\\s*=\\s*x\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*-1\\s*-k\\s*privileged-priv_change"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource33ref +{ +ResourceID = "[nxFileLine][V-219239][medium][SRG-OS-000064-GPOS-00033]::[Ubuntu]Baseline"; + ContainsLine = "-a always,exit -F path=/usr/bin/chfn -F perm=x -F auid>=1000 -F auid!=-1 -k privileged-chfn"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/bin/chfn\\s*-F\\s*perm\\s*=\\s*x\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*-1\\s*-k\\s*privileged-chfn"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource34ref +{ +ResourceID = "[nxFileLine][V-219240][medium][SRG-OS-000064-GPOS-00033]::[Ubuntu]Baseline"; + ContainsLine = "-a always,exit -F path=/bin/mount -F perm=x -F auid>=1000 -F auid!=-1 -k privileged-mount"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/bin/mount\\s*-F\\s*perm\\s*=\\s*x\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*-1\\s*-k\\s*privileged-mount"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource35ref +{ +ResourceID = "[nxFileLine][V-219241][medium][SRG-OS-000064-GPOS-00033]::[Ubuntu]Baseline"; + ContainsLine = "-a always,exit -F path=/bin/umount -F perm=x -F auid>=1000 -F auid!=-1 -k privileged-umount"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/bin/umount\\s*-F\\s*perm\\s*=\\s*x\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*-1\\s*-k\\s*privileged-umount"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource36ref +{ +ResourceID = "[nxFileLine][V-219242][medium][SRG-OS-000064-GPOS-00033]::[Ubuntu]Baseline"; + ContainsLine = "-a always,exit -F path=/usr/bin/ssh-agent -F perm=x -F auid>=1000 -F auid!=-1 -k privileged-ssh"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/bin/ssh-agent\\s*-F\\s*perm\\s*=\\s*x\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*-1\\s*-k\\s*privileged-ssh"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource37ref +{ +ResourceID = "[nxFileLine][V-219243][medium][SRG-OS-000064-GPOS-00033]::[Ubuntu]Baseline"; + ContainsLine = "-a always,exit -F path=/usr/lib/openssh/ssh-keysign -F perm=x -F auid>=1000 -F auid!=-1 -k privileged-ssh"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/lib/openssh/ssh-keysign\\s*-F\\s*perm\\s*=\\s*x\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*-1\\s*-k\\s*privileged-ssh"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource38ref +{ +ResourceID = "[nxFileLine][V-219244.a][medium][SRG-OS-000064-GPOS-00033]::[Ubuntu]Baseline"; + ContainsLine = "-a always,exit -F arch=b32 -S setxattr,fsetxattr,lsetxattr,removexattr,fremovexattr,lremovexattr -F auid>=1000 -F auid!=-1 -k perm_mod"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*setxattr,fsetxattr,lsetxattr,removexattr,fremovexattr,lremovexattr\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*-1\\s*-k\\s*perm_mod"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource39ref +{ +ResourceID = "[nxFileLine][V-219244.b][medium][SRG-OS-000064-GPOS-00033]::[Ubuntu]Baseline"; + ContainsLine = "-a always,exit -F arch=b32 -S setxattr,fsetxattr,lsetxattr,removexattr,fremovexattr,lremovexattr -F auid=0 -k perm_mod"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*setxattr,fsetxattr,lsetxattr,removexattr,fremovexattr,lremovexattr\\s*-F\\s*auid\\s*=\\s*0\\s*-k\\s*perm_mod"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource40ref +{ +ResourceID = "[nxFileLine][V-219244.c][medium][SRG-OS-000064-GPOS-00033]::[Ubuntu]Baseline"; + ContainsLine = "-a always,exit -F arch=b64 -S setxattr,fsetxattr,lsetxattr,removexattr,fremovexattr,lremovexattr -F auid>=1000 -F auid!=-1 -k perm_mod"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*setxattr,fsetxattr,lsetxattr,removexattr,fremovexattr,lremovexattr\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*-1\\s*-k\\s*perm_mod"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource41ref +{ +ResourceID = "[nxFileLine][V-219244.d][medium][SRG-OS-000064-GPOS-00033]::[Ubuntu]Baseline"; + ContainsLine = "-a always,exit -F arch=b64 -S setxattr,fsetxattr,lsetxattr,removexattr,fremovexattr,lremovexattr -F auid=0 -k perm_mod"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*setxattr,fsetxattr,lsetxattr,removexattr,fremovexattr,lremovexattr\\s*-F\\s*auid\\s*=\\s*0\\s*-k\\s*perm_mod"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource42ref +{ +ResourceID = "[nxFileLine][V-219250.a][medium][SRG-OS-000064-GPOS-00033]::[Ubuntu]Baseline"; + ContainsLine = "-a always,exit -F arch=b32 -S chown,fchown,fchownat,lchown -F auid>=1000 -F auid!=-1 -k perm_chng"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*chown,fchown,fchownat,lchown\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*-1\\s*-k\\s*perm_chng"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource43ref +{ +ResourceID = "[nxFileLine][V-219250.b][medium][SRG-OS-000064-GPOS-00033]::[Ubuntu]Baseline"; + ContainsLine = "-a always,exit -F arch=b64 -S chown,fchown,fchownat,lchown -F auid>=1000 -F auid!=-1 -k perm_chng"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*chown,fchown,fchownat,lchown\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*-1\\s*-k\\s*perm_chng"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource44ref +{ +ResourceID = "[nxFileLine][V-219254.a][medium][SRG-OS-000064-GPOS-00033]::[Ubuntu]Baseline"; + ContainsLine = "-a always,exit -F arch=b32 -S chmod,fchmod,fchmodat -F auid>=1000 -F auid!=-1 -k perm_chng"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*chmod,fchmod,fchmodat\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*-1\\s*-k\\s*perm_chng"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource45ref +{ +ResourceID = "[nxFileLine][V-219254.b][medium][SRG-OS-000064-GPOS-00033]::[Ubuntu]Baseline"; + ContainsLine = "-a always,exit -F arch=b64 -S chmod,fchmod,fchmodat -F auid>=1000 -F auid!=-1 -k perm_chng"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*chmod,fchmod,fchmodat\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*-1\\s*-k\\s*perm_chng"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource46ref +{ +ResourceID = "[nxFileLine][V-219257.a][medium][SRG-OS-000064-GPOS-00033]::[Ubuntu]Baseline"; + ContainsLine = "-a always,exit -F arch=b32 -S creat,open,openat,open_by_handle_at,truncate,ftruncate -F exit=-EPERM -F auid>=1000 -F auid!=-1 -k perm_access"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*creat,open,openat,open_by_handle_at,truncate,ftruncate\\s*-F\\s*exit\\s*=\\s*-EPERM\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*-1\\s*-k\\s*perm_access"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource47ref +{ +ResourceID = "[nxFileLine][V-219257.b][medium][SRG-OS-000064-GPOS-00033]::[Ubuntu]Baseline"; + ContainsLine = "-a always,exit -F arch=b32 -S creat,open,openat,open_by_handle_at,truncate,ftruncate -F exit=-EACCES -F auid>=1000 -F auid!=-1 -k perm_access"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*creat,open,openat,open_by_handle_at,truncate,ftruncate\\s*-F\\s*exit\\s*=\\s*-EACCES\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*-1\\s*-k\\s*perm_access"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource48ref +{ +ResourceID = "[nxFileLine][V-219257.c][medium][SRG-OS-000064-GPOS-00033]::[Ubuntu]Baseline"; + ContainsLine = "-a always,exit -F arch=b64 -S creat,open,openat,open_by_handle_at,truncate,ftruncate -F exit=-EPERM -F auid>=1000 -F auid!=-1 -k perm_access"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*creat,open,openat,open_by_handle_at,truncate,ftruncate\\s*-F\\s*exit\\s*=\\s*-EPERM\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*-1\\s*-k\\s*perm_access"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource49ref +{ +ResourceID = "[nxFileLine][V-219257.d][medium][SRG-OS-000064-GPOS-00033]::[Ubuntu]Baseline"; + ContainsLine = "-a always,exit -F arch=b64 -S creat,open,openat,open_by_handle_at,truncate,ftruncate -F exit=-EACCES -F auid>=1000 -F auid!=-1 -k perm_access"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*creat,open,openat,open_by_handle_at,truncate,ftruncate\\s*-F\\s*exit\\s*=\\s*-EACCES\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*-1\\s*-k\\s*perm_access"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource50ref +{ +ResourceID = "[nxFileLine][V-219263][medium][SRG-OS-000064-GPOS-00033]::[Ubuntu]Baseline"; + ContainsLine = "-a always,exit -F path=/usr/bin/sudo -F perm=x -F auid>=1000 -F auid!=-1 -k priv_cmd"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/bin/sudo\\s*-F\\s*perm\\s*=\\s*x\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*-1\\s*-k\\s*priv_cmd"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource51ref +{ +ResourceID = "[nxFileLine][V-219264][medium][SRG-OS-000064-GPOS-00033]::[Ubuntu]Baseline"; + ContainsLine = "-a always,exit -F path=/usr/bin/sudoedit -F perm=x -F auid>=1000 -F auid!=-1 -k priv_cmd"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/bin/sudoedit\\s*-F\\s*perm\\s*=\\s*x\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*-1\\s*-k\\s*priv_cmd"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource52ref +{ +ResourceID = "[nxFileLine][V-219265][medium][SRG-OS-000064-GPOS-00033]::[Ubuntu]Baseline"; + ContainsLine = "-a always,exit -F path=/usr/bin/chsh -F perm=x -F auid>=1000 -F auid!=-1 -k priv_cmd"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/bin/chsh\\s*-F\\s*perm\\s*=\\s*x\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*-1\\s*-k\\s*priv_cmd"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource53ref +{ +ResourceID = "[nxFileLine][V-219266][medium][SRG-OS-000064-GPOS-00033]::[Ubuntu]Baseline"; + ContainsLine = "-a always,exit -F path=/usr/bin/newgrp -F perm=x -F auid>=1000 -F auid!=-1 -k priv_cmd"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/bin/newgrp\\s*-F\\s*perm\\s*=\\s*x\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*-1\\s*-k\\s*priv_cmd"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource54ref +{ +ResourceID = "[nxFileLine][V-219267][medium][SRG-OS-000064-GPOS-00033]::[Ubuntu]Baseline"; + ContainsLine = "-a always,exit -F path=/usr/bin/chcon -F perm=x -F auid>=1000 -F auid!=-1 -k perm_chng"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/bin/chcon\\s*-F\\s*perm\\s*=\\s*x\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*-1\\s*-k\\s*perm_chng"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource55ref +{ +ResourceID = "[nxFileLine][V-219268][medium][SRG-OS-000064-GPOS-00033]::[Ubuntu]Baseline"; + ContainsLine = "-a always,exit -F path=/sbin/apparmor_parser -F perm=x -F auid>=1000 -F auid!=-1 -k perm_chng"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/sbin/apparmor_parser\\s*-F\\s*perm\\s*=\\s*x\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*-1\\s*-k\\s*perm_chng"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource56ref +{ +ResourceID = "[nxFileLine][V-219269][medium][SRG-OS-000064-GPOS-00033]::[Ubuntu]Baseline"; + ContainsLine = "-a always,exit -F path=/usr/bin/setfacl -F perm=x -F auid>=1000 -F auid!=-1 -k perm_chng"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/bin/setfacl\\s*-F\\s*perm\\s*=\\s*x\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*-1\\s*-k\\s*perm_chng"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource57ref +{ +ResourceID = "[nxFileLine][V-219270][medium][SRG-OS-000064-GPOS-00033]::[Ubuntu]Baseline"; + ContainsLine = "-a always,exit -F path=/usr/bin/chacl -F perm=x -F auid>=1000 -F auid!=-1 -k perm_chng"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/bin/chacl\\s*-F\\s*perm\\s*=\\s*x\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*-1\\s*-k\\s*perm_chng"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource58ref +{ +ResourceID = "[nxFileLine][V-219271][medium][SRG-OS-000064-GPOS-00033]::[Ubuntu]Baseline"; + ContainsLine = "-a always,exit -F path=/usr/bin/passwd -F perm=x -F auid>=1000 -F auid!=-1 -k privileged-passwd"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/bin/passwd\\s*-F\\s*perm\\s*=\\s*x\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*-1\\s*-k\\s*privileged-passwd"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource59ref +{ +ResourceID = "[nxFileLine][V-219272][medium][SRG-OS-000064-GPOS-00033]::[Ubuntu]Baseline"; + ContainsLine = "-a always,exit -F path=/sbin/unix_update -F perm=x -F auid>=1000 -F auid!=-1 -k privileged-unix-update"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/sbin/unix_update\\s*-F\\s*perm\\s*=\\s*x\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*-1\\s*-k\\s*privileged-unix-update"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource60ref +{ +ResourceID = "[nxFileLine][V-219273][medium][SRG-OS-000064-GPOS-00033]::[Ubuntu]Baseline"; + ContainsLine = "-a always,exit -F path=/usr/bin/gpasswd -F perm=x -F auid>=1000 -F auid!=-1 -k privileged-gpasswd"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/bin/gpasswd\\s*-F\\s*perm\\s*=\\s*x\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*-1\\s*-k\\s*privileged-gpasswd"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource61ref +{ +ResourceID = "[nxFileLine][V-219274][medium][SRG-OS-000064-GPOS-00033]::[Ubuntu]Baseline"; + ContainsLine = "-a always,exit -F path=/usr/bin/chage -F perm=x -F auid>=1000 -F auid!=-1 -k privileged-chage"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/bin/chage\\s*-F\\s*perm\\s*=\\s*x\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*-1\\s*-k\\s*privileged-chage"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource62ref +{ +ResourceID = "[nxFileLine][V-219275][medium][SRG-OS-000064-GPOS-00033]::[Ubuntu]Baseline"; + ContainsLine = "-a always,exit -F path=/usr/sbin/usermod -F perm=x -F auid>=1000 -F auid!=-1 -k privileged-usermod"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/sbin/usermod\\s*-F\\s*perm\\s*=\\s*x\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*-1\\s*-k\\s*privileged-usermod"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource63ref +{ +ResourceID = "[nxFileLine][V-219276][medium][SRG-OS-000064-GPOS-00033]::[Ubuntu]Baseline"; + ContainsLine = "-a always,exit -F path=/usr/bin/crontab -F perm=x -F auid>=1000 -F auid!=-1 -k privileged-crontab"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/bin/crontab\\s*-F\\s*perm\\s*=\\s*x\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*-1\\s*-k\\s*privileged-crontab"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource64ref +{ +ResourceID = "[nxFileLine][V-219277][medium][SRG-OS-000064-GPOS-00033]::[Ubuntu]Baseline"; + ContainsLine = "-a always,exit -F path=/usr/sbin/pam_timestamp_check -F perm=x -F auid>=1000 -F auid!=-1 -k privileged-pam_timestamp_check"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*path\\s*=\\s*/usr/sbin/pam_timestamp_check\\s*-F\\s*perm\\s*=\\s*x\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*-1\\s*-k\\s*privileged-pam_timestamp_check"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource65ref +{ +ResourceID = "[nxFileLine][V-219279.a][medium][SRG-OS-000064-GPOS-00033]::[Ubuntu]Baseline"; + ContainsLine = "-a always,exit -F arch=b32 -S finit_module -F auid>=1000 -F auid!=-1 -k module_chng"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*finit_module\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*-1\\s*-k\\s*module_chng"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource66ref +{ +ResourceID = "[nxFileLine][V-219279.b][medium][SRG-OS-000064-GPOS-00033]::[Ubuntu]Baseline"; + ContainsLine = "-a always,exit -F arch=b64 -S finit_module -F auid>=1000 -F auid!=-1 -k module_chng"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*finit_module\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*-1\\s*-k\\s*module_chng"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource67ref +{ +ResourceID = "[nxFileLine][V-219281.a][medium][SRG-OS-000326-GPOS-00126]::[Ubuntu]Baseline"; + ContainsLine = "-a always,exit -F arch=b64 -S execve -C uid!=euid -F euid=0 -F key=execpriv"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*execve\\s*-C\\s*uid!\\s*=\\s*euid\\s*-F\\s*euid\\s*=\\s*0\\s*-F\\s*key\\s*=\\s*execpriv"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource68ref +{ +ResourceID = "[nxFileLine][V-219281.b][medium][SRG-OS-000326-GPOS-00126]::[Ubuntu]Baseline"; + ContainsLine = "-a always,exit -F arch=b64 -S execve -C gid!=egid -F egid=0 -F key=execpriv"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*execve\\s*-C\\s*gid!\\s*=\\s*egid\\s*-F\\s*egid\\s*=\\s*0\\s*-F\\s*key\\s*=\\s*execpriv"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource69ref +{ +ResourceID = "[nxFileLine][V-219281.c][medium][SRG-OS-000326-GPOS-00126]::[Ubuntu]Baseline"; + ContainsLine = "-a always,exit -F arch=b32 -S execve -C uid!=euid -F euid=0 -F key=execpriv"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*execve\\s*-C\\s*uid!\\s*=\\s*euid\\s*-F\\s*euid\\s*=\\s*0\\s*-F\\s*key\\s*=\\s*execpriv"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource70ref +{ +ResourceID = "[nxFileLine][V-219281.d][medium][SRG-OS-000326-GPOS-00126]::[Ubuntu]Baseline"; + ContainsLine = "-a always,exit -F arch=b32 -S execve -C gid!=egid -F egid=0 -F key=execpriv"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*execve\\s*-C\\s*gid!\\s*=\\s*egid\\s*-F\\s*egid\\s*=\\s*0\\s*-F\\s*key\\s*=\\s*execpriv"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource71ref +{ +ResourceID = "[nxFileLine][V-219287.a][medium][SRG-OS-000468-GPOS-00212]::[Ubuntu]Baseline"; + ContainsLine = "-a always,exit -F arch=b64 -S unlink,unlinkat,rename,renameat,rmdir -F auid>=1000 -F auid!=-1 -k delete"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*unlink,unlinkat,rename,renameat,rmdir\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*-1\\s*-k\\s*delete"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource72ref +{ +ResourceID = "[nxFileLine][V-219287.b][medium][SRG-OS-000468-GPOS-00212]::[Ubuntu]Baseline"; + ContainsLine = "-a always,exit -F arch=b32 -S unlink,unlinkat,rename,renameat,rmdir -F auid>=1000 -F auid!=-1 -k delete"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*unlink,unlinkat,rename,renameat,rmdir\\s*-F\\s*auid>\\s*=\\s*1000\\s*-F\\s*auid!\\s*=\\s*-1\\s*-k\\s*delete"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource73ref +{ +ResourceID = "[nxFileLine][V-219291.a][medium][SRG-OS-000471-GPOS-00216]::[Ubuntu]Baseline"; + ContainsLine = "-a always,exit -F arch=b32 -S init_module -S finit_module -k modules"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*init_module\\s*-S\\s*finit_module\\s*-k\\s*modules"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource74ref +{ +ResourceID = "[nxFileLine][V-219291.b][medium][SRG-OS-000471-GPOS-00216]::[Ubuntu]Baseline"; + ContainsLine = "-a always,exit -F arch=b64 -S init_module -S finit_module -k modules"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*init_module\\s*-S\\s*finit_module\\s*-k\\s*modules"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource75ref +{ +ResourceID = "[nxFileLine][V-219296.a][medium][SRG-OS-000477-GPOS-00222]::[Ubuntu]Baseline"; + ContainsLine = "-a always,exit -F arch=b64 -S init_module -S finit_module -F key=modules"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*init_module\\s*-S\\s*finit_module\\s*-F\\s*key\\s*=\\s*modules"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource76ref +{ +ResourceID = "[nxFileLine][V-219296.b][medium][SRG-OS-000477-GPOS-00222]::[Ubuntu]Baseline"; + ContainsLine = "-a always,exit -F arch=b32 -S init_module -S finit_module -F key=modules"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*init_module\\s*-S\\s*finit_module\\s*-F\\s*key\\s*=\\s*modules"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource77ref +{ +ResourceID = "[nxFileLine][V-219297.a][medium][SRG-OS-000477-GPOS-00222]::[Ubuntu]Baseline"; + ContainsLine = "-a always,exit -F arch=b64 -S delete_module -F key=modules"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b64\\s*-S\\s*delete_module\\s*-F\\s*key\\s*=\\s*modules"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource78ref +{ +ResourceID = "[nxFileLine][V-219297.b][medium][SRG-OS-000477-GPOS-00222]::[Ubuntu]Baseline"; + ContainsLine = "-a always,exit -F arch=b32 -S delete_module -F key=modules"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-a\\s*always,exit\\s*-F\\s*arch\\s*=\\s*b32\\s*-S\\s*delete_module\\s*-F\\s*key\\s*=\\s*modules"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource79ref +{ +ResourceID = "[nxFileLine][V-219298][medium][SRG-OS-000477-GPOS-00222]::[Ubuntu]Baseline"; + ContainsLine = "-w /sbin/modprobe -p x -k modules"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-w\\s*/sbin/modprobe\\s*-p\\s*x\\s*-k\\s*modules"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource80ref +{ +ResourceID = "[nxFileLine][V-219299][medium][SRG-OS-000477-GPOS-00222]::[Ubuntu]Baseline"; + ContainsLine = "-w /bin/kmod -p x -k module"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-w\\s*/bin/kmod\\s*-p\\s*x\\s*-k\\s*module"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource81ref +{ +ResourceID = "[nxFileLine][V-219300][medium][SRG-OS-000477-GPOS-00222]::[Ubuntu]Baseline"; + ContainsLine = "-w /sbin/fdisk -p x -k fdisk"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/audit/rules.d/audit.rules"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*-w\\s*/sbin/fdisk\\s*-p\\s*x\\s*-k\\s*fdisk"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource82ref +{ +ResourceID = "[nxFileLine][V-219301][low][SRG-OS-000027-GPOS-00008]::[Ubuntu]Baseline"; + ContainsLine = "* hard maxlogins 10"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/security/limits.conf"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "^\\s*\\*\\s*hard\\s*maxlogins\\s*([1][1-9]|[2-9]\\d+|[1-9][0-9]\\d+)$|^#\\s*\\*\\s*hard\\s*maxlogins."; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource83ref +{ +ResourceID = "[nxFileLine][V-219303.b][medium][SRG-OS-000029-GPOS-00010]::[Ubuntu]Baseline"; + ContainsLine = "TMOUT=900"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/profile.d/autologout.sh"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "^\\s*TMOUT\\s*=\\s*[0-8]?[0-9]?[0-9]?$|^#\\s*TMOUT.*"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource84ref +{ +ResourceID = "[nxFileLine][V-219303.c][medium][SRG-OS-000029-GPOS-00010]::[Ubuntu]Baseline"; + ContainsLine = "readonly TMOUT"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/profile.d/autologout.sh"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "^\\s*readonly\\s+(?!TMOUT\\b).*$|^\\s*#\\s*readonly.*$"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource85ref +{ +ResourceID = "[nxFileLine][V-219303.d][medium][SRG-OS-000029-GPOS-00010]::[Ubuntu]Baseline"; + ContainsLine = "export TMOUT"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/profile.d/autologout.sh"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "^\\s*export\\s+(?!TMOUT\\b).*$|^\\s*#\\s*export.*$"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource86ref +{ +ResourceID = "[nxFileLine][V-219306.a][medium][SRG-OS-000032-GPOS-00013]::[Ubuntu]Baseline"; + ContainsLine = "auth.*,authpriv.* /var/log/secure"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/rsyslog.d/50-default.conf"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*auth\\.\\*,\\s*authpriv\\.\\*.*"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource87ref +{ +ResourceID = "[nxFileLine][V-219306.b][medium][SRG-OS-000032-GPOS-00013]::[Ubuntu]Baseline"; + ContainsLine = "daemon.notice /var/log/messages"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/rsyslog.d/50-default.conf"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\sdaemon.*"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource88ref +{ +ResourceID = "[nxFileLine][V-219307][medium][SRG-OS-000033-GPOS-00014]::[Ubuntu]Baseline"; + ContainsLine = "Ciphers aes256-ctr,aes192-ctr,aes128-ctr"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/ssh/sshd_config"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "^#\\s*Ciphers.*|^\\s*Ciphers\\s*aes128-ctr.*|^\\s*Ciphers\\s*aes192-ctr.*"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource89ref +{ +ResourceID = "[nxFileLine][V-219308][high][SRG-OS-000112-GPOS-00057]::[Ubuntu]Baseline"; + ContainsLine = "Protocol 2"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/ssh/sshd_config"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "^#\\s*Protocol.*$|^Protocol\\s*(?!2\\b)\\w*$"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource90ref +{ +ResourceID = "[nxFileLine][V-219309][medium][SRG-OS-000125-GPOS-00065]::[Ubuntu]Baseline"; + ContainsLine = "UsePAM yes"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/ssh/sshd_config"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*UsePAM\\s*yes"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource91ref +{ +ResourceID = "[nxFileLine][V-219310][medium][SRG-OS-000126-GPOS-00066]::[Ubuntu]Baseline"; + ContainsLine = "ClientAliveCountMax 1"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/ssh/sshd_config"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "^#\\s*ClientAliveCountMax.*$|^ClientAliveCountMax\\s*(?!1\\b)\\w*$"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource92ref +{ +ResourceID = "[nxFileLine][V-219311][medium][SRG-OS-000163-GPOS-00072]::[Ubuntu]Baseline"; + ContainsLine = "ClientAliveInterval 600"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/ssh/sshd_config"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "^\\s*ClientAliveInterval\\s*[0-5]?[0-9]?[0-9]?\\s*$|^#\\s*ClientAliveInterval.*|^\\s*ClientAliveInterval\\s*$"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource93ref +{ +ResourceID = "[nxFileLine][V-219312][medium][SRG-OS-000250-GPOS-00093]::[Ubuntu]Baseline"; + ContainsLine = "MACs hmac-sha2-512,hmac-sha2-256"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/ssh/sshd_config"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*MACs.*|\\s*MACs\\s*hmac-(?!sha2-512).*"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource94ref +{ +ResourceID = "[nxFileLine][V-219314.a][high][SRG-OS-000480-GPOS-00229]::[Ubuntu]Baseline"; + ContainsLine = "PermitEmptyPasswords no"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/ssh/sshd_config"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "^#\\s*PermitEmptyPasswords.*$|^PermitEmptyPasswords\\s*(?!no\\b)\\w*$"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource95ref +{ +ResourceID = "[nxFileLine][V-219314.b][high][SRG-OS-000480-GPOS-00229]::[Ubuntu]Baseline"; + ContainsLine = "PermitUserEnvironment no"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/ssh/sshd_config"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "^#\\s*PermitUserEnvironment.*$|^PermitUserEnvironment\\s*(?!no\\b)\\w*$"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource96ref +{ +ResourceID = "[nxFileLine][V-219328][medium][SRG-OS-000480-GPOS-00228]::[Ubuntu]Baseline"; + ContainsLine = "UMASK 077"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/login.defs"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "^\\s*UMASK(?!\\s077\\b)\\s*\\d*\\s*$|^#\\s*UMASK.*"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource97ref +{ +ResourceID = "[nxFileLine][V-219339.b][medium][SRG-OS-000378-GPOS-00163]::[Ubuntu]Baseline"; + ContainsLine = "install usb-storage /bin/true"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/modprobe.d/DISASTIG.conf"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*install\\s*usb-storage\\s*/bin/true"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource98ref +{ +ResourceID = "[nxFileLine][V-219339.c][medium][SRG-OS-000378-GPOS-00163]::[Ubuntu]Baseline"; + ContainsLine = "blacklist usb-storage"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/modprobe.d/DISASTIG.conf"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*blacklist\\s*usb-storage"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource99ref +{ +ResourceID = "[nxFileLine][V-233779][medium][SRG-OS-000480-GPOS-00227]::[Ubuntu]Baseline"; + ContainsLine = "X11Forwarding no"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/ssh/sshd_config"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "^#\\s*X11Forwarding.*$|^X11Forwarding\\s*(?!no\\b)\\w*$"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource100ref +{ +ResourceID = "[nxFileLine][V-233780][medium][SRG-OS-000480-GPOS-00227]::[Ubuntu]Baseline"; + ContainsLine = "X11UseLocalhost yes"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/ssh/sshd_config"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*X11UseLocalhost\\s*yes"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxFileLineResource as $MSFT_nxFileLineResource101ref +{ +ResourceID = "[nxFileLine][V-255906][medium][SRG-OS-000250-GPOS-00093]::[Ubuntu]Baseline"; + ContainsLine = "KexAlgorithms ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxFileLine.ps1::39::9::nxFileLine"; + FilePath = "/etc/ssh/sshd_config"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + DoesNotContainPattern = "#\\s*KexAlgorithms\\s*ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxServiceResource as $MSFT_nxServiceResource1ref +{ +ResourceID = "[nxService][V-219160.b][medium][SRG-OS-000269-GPOS-00103]::[Ubuntu]Baseline"; + Controller = "systemd"; + State = "Running"; + Enabled = True; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxService.ps1::22::9::nxService"; + Name = "rsyslog"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxServiceResource as $MSFT_nxServiceResource2ref +{ +ResourceID = "[nxService][V-219225.b][medium][SRG-OS-000038-GPOS-00016]::[Ubuntu]Baseline"; + Controller = "systemd"; + State = "Running"; + Enabled = True; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxService.ps1::22::9::nxService"; + Name = "auditd"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxServiceResource as $MSFT_nxServiceResource3ref +{ +ResourceID = "[nxService][V-219313.b][high][SRG-OS-000423-GPOS-00187]::[Ubuntu]Baseline"; + Controller = "systemd"; + State = "Running"; + Enabled = True; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxService.ps1::22::9::nxService"; + Name = "sshd"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxServiceResource as $MSFT_nxServiceResource4ref +{ +ResourceID = "[nxService][V-219322.b][low][SRG-OS-000312-GPOS-00122]::[Ubuntu]Baseline"; + Controller = "systemd"; + State = "Running"; + Enabled = True; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxService.ps1::22::9::nxService"; + Name = "apparmor"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxServiceResource as $MSFT_nxServiceResource5ref +{ +ResourceID = "[nxService][V-219335][medium][SRG-OS-000184-GPOS-00078]::[Ubuntu]Baseline"; + Controller = "systemd"; + Enabled = False; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxService.ps1::13::9::nxService"; + Name = "kdump"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxServiceResource as $MSFT_nxServiceResource6ref +{ +ResourceID = "[nxService][V-219337][medium][SRG-OS-000297-GPOS-00115]::[Ubuntu]Baseline"; + Controller = "systemd"; + State = "Running"; + Enabled = True; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxService.ps1::22::9::nxService"; + Name = "ufw"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxScriptResource as $MSFT_nxScriptResource1ref +{ +ResourceID = "[nxScript][V-219152.b][low][[Skip] SRG-OS-000343-GPOS-00134]::[Ubuntu]Baseline"; + GetScript = "#!/bin/bash\necho [V-219152.b][low][[Skip] SRG-OS-000343-GPOS-00134]"; + TestScript = "#!/bin/bash\nexit 0"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxScript.skip.ps1::10::5::nxScript"; + SetScript = "#!/bin/bash"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxScriptResource as $MSFT_nxScriptResource2ref +{ +ResourceID = "[nxScript][V-219153.c][low][[Skip] SRG-OS-000479-GPOS-00224]::[Ubuntu]Baseline"; + GetScript = "#!/bin/bash\necho [V-219153.c][low][[Skip] SRG-OS-000479-GPOS-00224]"; + TestScript = "#!/bin/bash\nexit 0"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxScript.skip.ps1::10::5::nxScript"; + SetScript = "#!/bin/bash"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxScriptResource as $MSFT_nxScriptResource3ref +{ +ResourceID = "[nxScript][V-219167.a][medium][[Skip] SRG-OS-000024-GPOS-00007]::[Ubuntu]Baseline"; + GetScript = "#!/bin/bash\necho [V-219167.a][medium][[Skip] SRG-OS-000024-GPOS-00007]"; + TestScript = "#!/bin/bash\nexit 0"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxScript.skip.ps1::10::5::nxScript"; + SetScript = "#!/bin/bash"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxScriptResource as $MSFT_nxScriptResource4ref +{ +ResourceID = "[nxScript][V-219167.b][medium][[Skip] SRG-OS-000024-GPOS-00007]::[Ubuntu]Baseline"; + GetScript = "#!/bin/bash\necho [V-219167.b][medium][[Skip] SRG-OS-000024-GPOS-00007]"; + TestScript = "#!/bin/bash\nexit 0"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxScript.skip.ps1::10::5::nxScript"; + SetScript = "#!/bin/bash"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of MSFT_nxScriptResource as $MSFT_nxScriptResource5ref +{ +ResourceID = "[nxScript][V-219167.c][medium][[Skip] SRG-OS-000024-GPOS-00007]::[Ubuntu]Baseline"; + GetScript = "#!/bin/bash\necho [V-219167.c][medium][[Skip] SRG-OS-000024-GPOS-00007]"; + TestScript = "#!/bin/bash\nexit 0"; + SourceInfo = "C:\\Program Files\\WindowsPowerShell\\Modules\\PowerStig\\4.16.0\\DSCResources\\Resources\\linux.nxScript.skip.ps1::10::5::nxScript"; + SetScript = "#!/bin/bash"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + ConfigurationName = "LinuxBaseLine"; +}; +instance of OMI_ConfigurationDocument + + { + Version="2.0.0"; + + MinimumCompatibleVersion = "1.0.0"; + + CompatibleVersionAdditionalProperties= {"Omi_BaseResource:ConfigurationName"}; + + Author="Microsoft"; + + GenerationDate="03/09/2023 14:17:33"; + + GenerationHost="Microsoft"; + + Name="LinuxBaseLine"; + + }; + diff --git a/stig/linux/config/localhost.mof b/stig/linux/config/localhost.mof index c9e209a..cc4c763 100644 --- a/stig/linux/config/localhost.mof +++ b/stig/linux/config/localhost.mof @@ -1,46 +1,46 @@ -/* -@TargetNode='localhost' -@GeneratedBy=Microsoft -@GenerationDate=06/30/2022 11:38:45 -@GenerationHost=Microsoft -*/ - -instance of MSFT_nxScriptResource as $MSFT_nxScriptResource1ref -{ -ResourceID = "[nxScript]EmptyDsc"; - GetScript = "#!/bin/bash\necho emptyGet"; - TestScript = "#!/bin/bash\nexit 0"; - SourceInfo = "D:\\dev\\project-chairlift\\linux\\build-linux-config.ps1::105::9::nxScript"; - SetScript = "#!/bin/bash\necho emptySet"; - ModuleName = "nx"; - ModuleVersion = "1.0"; - - ConfigurationName = "LinuxBaseLine"; - -}; -instance of OMI_ConfigurationDocument - - - { - Version="2.0.0"; - - - MinimumCompatibleVersion = "1.0.0"; - - - CompatibleVersionAdditionalProperties= {"Omi_BaseResource:ConfigurationName"}; - - - Author="Microsoft"; - - - GenerationDate="06/30/2022 11:38:45"; - - - GenerationHost="Microsoft"; - - - Name="LinuxBaseLine"; - - - }; +/* +@TargetNode='localhost' +@GeneratedBy=Microsoft +@GenerationDate=03/09/2023 13:59:47 +@GenerationHost=Microsoft +*/ + +instance of MSFT_nxScriptResource as $MSFT_nxScriptResource1ref +{ +ResourceID = "[nxScript]EmptyDsc"; + GetScript = "#!/bin/bash\necho emptyGet"; + TestScript = "#!/bin/bash\nexit 0"; + SourceInfo = "D:\\build-linux-config.ps1::93::9::nxScript"; + SetScript = "#!/bin/bash\necho emptySet"; + ModuleName = "nx"; + ModuleVersion = "1.0"; + + ConfigurationName = "LinuxBaseLine"; + +}; +instance of OMI_ConfigurationDocument + + + { + Version="2.0.0"; + + + MinimumCompatibleVersion = "1.0.0"; + + + CompatibleVersionAdditionalProperties= {"Omi_BaseResource:ConfigurationName"}; + + + Author="Microsoft"; + + + GenerationDate="03/09/2023 13:59:47"; + + + GenerationHost="Microsoft"; + + + Name="LinuxBaseLine"; + + + }; diff --git a/stig/linux/config/rhel8STIG-ansible.zip b/stig/linux/config/rhel8STIG-ansible.zip index d0047f3..8220562 100644 Binary files a/stig/linux/config/rhel8STIG-ansible.zip and b/stig/linux/config/rhel8STIG-ansible.zip differ diff --git a/stig/linux/createUiDefinition.json b/stig/linux/createUiDefinition.json index 354eb74..995ff88 100644 --- a/stig/linux/createUiDefinition.json +++ b/stig/linux/createUiDefinition.json @@ -1,539 +1,542 @@ -{ - "$schema": "https://schema.management.azure.com/schemas/0.1.2-preview/CreateUIDefinition.MultiVm.json#", - "handler": "Microsoft.Azure.CreateUIDef", - "version": "0.1.2-preview", - "parameters": { - "basics": [], - "steps": [ - { - "name": "instance", - "label": "Instance", - "subLabel": { - "preValidation": "Configure the virtual machine's resources and settings", - "postValidation": "Done" - }, - "bladeTitle": "Instance", - "elements": [ - { - "name": "textBlock0", - "type": "Microsoft.Common.TextBlock", - "options": { - "text": "Instance details" - } - }, - { - "name": "vmName", - "type": "Microsoft.Common.TextBox", - "label": "Virtual machine name", - "toolTip": "Virtual machines in Azure have two distinct names: virtual machine name used as the Azure resource identifier, and in guest host name. When you create a VM in the portal, the same name is used for both the virtual machine name and the host name. The virtual machine name cannot be changed after the VM is created. You can change the host name when you log into the virtual machine.", - "constraints": { - "required": true, - "regex": "^[a-z0-9A-Z-]{3,15}$", - "validationMessage": "Virtual machine name must be between 3 and 15 characters long and contain letters, numbers and hyphens only." - } - }, - { - "name": "availabilityOptions", - "type": "Microsoft.Common.DropDown", - "label": "Availability options", - "toolTip": "Azure offers a range of options for managing availability and resiliency for your applications. Architect your solution to use replicated VMs in Availability Sets to protect your apps and data from datacenter outages and maintenance events.", - "defaultValue": "No infrastructure redundancy required", - "constraints": { - "allowedValues": [ - { - "value": "default", - "label": "No infrastructure redundancy required" - }, - { - "value": "availabilitySet", - "label": "Availability set" - } - ], - "required": true - }, - "visible": true - }, - { - "name": "availabilitySetName", - "type": "Microsoft.Common.TextBox", - "label": "Availability set name", - "toolTip": "Name of the Availability set.", - "constraints": { - "required": "[equals(steps('instance').availabilityOptions, 'availabilitySet')]", - "regex": "^[a-z0-9A-Z-]{3,15}$", - "validationMessage": "Availability set name must be between 3 and 15 characters long and contain letters, numbers and hyphens only." - }, - "visible": "[equals(steps('instance').availabilityOptions, 'availabilitySet')]" - }, - { - "name": "instanceCount", - "type": "Microsoft.Common.Slider", - "min": 1, - "max": 5, - "label": "Instance count", - "defaultValue": 2, - "showStepMarkers": false, - "toolTip": "Number of virtual machines in the availability set.", - "constraints": { - "required": false - }, - "visible": "[equals(steps('instance').availabilityOptions, 'availabilitySet')]" - }, - { - "name": "faultDomains", - "type": "Microsoft.Common.Slider", - "min": 1, - "max": 3, - "label": "Fault domains", - "defaultValue": 2, - "showStepMarkers": false, - "toolTip": "Virtual machines in the same fault domain share a common power source and physical network switch.", - "constraints": { - "required": false - }, - "visible": "[equals(steps('instance').availabilityOptions, 'availabilitySet')]" - }, - { - "name": "updateDomains", - "type": "Microsoft.Common.Slider", - "min": 1, - "max": 5, - "label": "Update domains", - "defaultValue": 3, - "showStepMarkers": true, - "toolTip": "Virtual machines in the same update domain will be restarted together during planned maintenance. Azure never restarts more than one update domain at a time.", - "constraints": { - "required": false - }, - "visible": "[equals(steps('instance').availabilityOptions, 'availabilitySet')]" - }, - { - "name": "osVersion", - "type": "Microsoft.Common.DropDown", - "label": "Linux OS version", - "toolTip": "The OS version for the VM Image", - "defaultValue": "CentOS 7.7", - "constraints": { - "allowedValues": [ - { - "value": "CentOS79", - "label": "CentOS 7.9" - }, - { - "value": "CentOS78", - "label": "CentOS 7.8" - }, - { - "value": "CentOS77", - "label": "CentOS 7.7" - }, - { - "value": "CentOS76", - "label": "CentOS 7.6" - }, - { - "value": "CentOS75", - "label": "CentOS 7.5" - }, - { - "value": "CentOS74", - "label": "CentOS 7.4" - }, - { - "value": "RHEL84", - "label": "Red Hat Enterprise Linux 8.4" - }, - { - "value": "RHEL83", - "label": "Red Hat Enterprise Linux 8.3" - }, - { - "value": "RHEL82", - "label": "Red Hat Enterprise Linux 8.2" - }, - { - "value": "RHEL81", - "label": "Red Hat Enterprise Linux 8.1" - }, - { - "value": "RHEL80", - "label": "Red Hat Enterprise Linux 8.0" - }, - { - "value": "RHEL79", - "label": "Red Hat Enterprise Linux 7.9" - }, - { - "value": "RHEL78", - "label": "Red Hat Enterprise Linux 7.8" - }, - { - "value": "RHEL77", - "label": "Red Hat Enterprise Linux 7.7" - }, - { - "value": "RHEL75", - "label": "Red Hat Enterprise Linux 7.5" - }, - { - "value": "RHEL74", - "label": "Red Hat Enterprise Linux 7.4" - }, - { - "value": "RHEL73", - "label": "Red Hat Enterprise Linux 7.3" - }, - { - "value": "RHEL72", - "label": "Red Hat Enterprise Linux 7.2" - }, - { - "value": "Ubuntu1804", - "label": "Canonical Ubuntu 18.04 LTS" - }, - { - "value": "Ubuntu1804-DataScience", - "label": "Data Science Virtual Machine - Ubuntu 18.04" - } - ], - "required": true - }, - "visible": true - }, - { - "name": "infoBox0", - "type": "Microsoft.Common.InfoBox", - "options": { - "icon": "Info", - "text": "The Ubuntu Data Science VM contains Ubuntu 18.04 STIG automation only. No additional STIG automation is provided." - }, - "visible": "[equals(steps('instance').osVersion, 'Ubuntu1804-DataScience')]" - }, - { - "name": "vmSize", - "type": "Microsoft.Compute.SizeSelector", - "label": "Size", - "toolTip": "Select a VM size to support the workload that you want to run. The size that you choose then determines factors such as processing power, memory, and storage capacity. Azure offers a wide variety of sizes to support many types of uses. Azure charges an hourly price based on the VM's size and operating system.", - "recommendedSizes": [ - "Standard_DS2_v2", - "Standard_D2s_v3" - ], - "osPlatform": "Linux", - "count": "1" - }, - { - "name": "textBlock1", - "type": "Microsoft.Common.TextBlock", - "options": { - "text": "Administrator account" - } - }, - { - "name": "adminUsername", - "type": "Microsoft.Compute.UserNameTextBox", - "label": "Username", - "defaultValue": "", - "toolTip": "Admin username for the virtual machine.", - "constraints": { - "required": true, - "regex": "^[a-z0-9A-Z]{1,30}$", - "validationMessage": "Only alphanumeric characters are allowed, and the value must be 1-30 characters long." - }, - "osPlatform": "Linux", - "visible": true - }, - { - "name": "adminCredentials", - "type": "Microsoft.Compute.CredentialsCombo", - "label": { - "authenticationType": "Authentication type", - "password": "Password", - "confirmPassword": "Confirm password", - "sshPublicKey": "SSH public key" - }, - "toolTip": { - "authenticationType": "Authentication type (password or ssh public key) to connect to the virtual machine", - "password": "Admin password for the virtual machine", - "sshPublicKey": "Admin ssh public key for the virtual machine" - }, - "constraints": { - "required": true, - "customPasswordRegex": "^(?=.*[A-Z])(?=.*[.!@#$%^&*()-_=+])(?=.*[0-9])(?=.*[a-z]).{12,40}$", - "customValidationMessage": "Password must be at least 12 characters long, and contain upper case, lower case, number and symbol" - }, - "options": { - "hideConfirmation": false, - "hidePassword": false - }, - "osPlatform": "Linux", - "visible": true - } - ] - }, - { - "name": "disk", - "label": "Disk", - "subLabel": { - "preValidation": "Configure the virtual machine's resources and settings", - "postValidation": "Done" - }, - "bladeTitle": "Disk", - "elements": [ - { - "name": "textBlock0", - "type": "Microsoft.Common.TextBlock", - "options": { - "text": "Disk options" - } - }, - { - "name": "osDiskStorageType", - "type": "Microsoft.Common.DropDown", - "label": "OS disk type", - "toolTip": "You can choose between Azure managed disks types to support your workload or scenario.", - "defaultValue": "Premium SSD", - "constraints": { - "allowedValues": [ - { - "value": "Premium_LRS", - "label": "Premium SSD" - }, - { - "value": "Standard_LRS", - "label": "Standard HDD" - }, - { - "value": "StandardSSD_LRS", - "label": "Standard SSD" - } - ], - "required": true - }, - "visible": true - }, - { - "name": "osDiskEncryptionType", - "type": "Microsoft.Common.DropDown", - "label": "Encryption type", - "toolTip": "Select the encryption type for OS disk.", - "defaultValue": "(Default) Encryption at-rest with a platform-managed key", - "constraints": { - "allowedValues": [ - { - "value": "default", - "label": "(Default) Encryption at-rest with a platform-managed key" - }, - { - "value": "EncryptionAtRestWithCustomerKey", - "label": "Encryption at-rest with a customer-managed key" - }, - { - "value": "EncryptionAtRestWithPlatformAndCustomerKeys", - "label": "Double encryption with platform-managed and customer-managed keys" - } - ], - "required": true - }, - "visible": true - }, - { - "name": "osDiskEncryptionSet", - "type": "Microsoft.Solutions.ResourceSelector", - "label": "Disk encryption set", - "resourceType": "Microsoft.Compute/diskEncryptionSets", - "toolTip": "A disk encryption set stores the customer key that a disk or snapshot will use for encrypting its data. You must choose an existing disk encryption set during this step. Disk encryption sets require access to key vault and keys.", - "options": { - "filter": { - "subscription": "onBasic", - "location": "onBasic" - } - }, - "constraints": { - "required": true - }, - "visible": "[not(equals(steps('disk').osDiskEncryptionType, 'default'))]" - } - ] - }, - { - "name": "networking", - "label": "Networking", - "subLabel": { - "preValidation": "Define network connectivity for your virtual machine by configuring network interface card (NIC) settings. You can control ports, inbound and outbound connectivity with security group rules, or place behind an existing load balancing solution.", - "postValidation": "Done" - }, - "bladeTitle": "Network interface", - "elements": [ - { - "name": "textBlock0", - "type": "Microsoft.Common.TextBlock", - "options": { - "text": "Network interface" - } - }, - { - "name": "vmVirtualNetwork", - "type": "Microsoft.Network.VirtualNetworkCombo", - "label": { - "virtualNetwork": "Virtual network", - "subnets": "Subnets" - }, - "toolTip": { - "virtualNetwork": "Virtual networks are logically isolated from each other in Azure. You can configure their IP address ranges, subnets, route tables, gateways, and security settings, much like a traditional network in your data center. Virtual machines in the same virtual network can access each other by default.", - "subnets": "A subnet is a range of IP addresses in your virtual network, which can be used to isolate virtual machines from each other or from the Internet." - }, - "defaultValue": { - "name": "[concat(resourceGroup().name, '-vnet')]", - "addressPrefixSize": "/16" - }, - "constraints": { - "minAddressPrefixSize": "/29" - }, - "options": { - "hideExisting": false - }, - "subnets": { - "subnet1": { - "label": "Subnet", - "defaultValue": { - "name": "default", - "addressPrefixSize": "/24" - }, - "constraints": { - "minAddressPrefixSize": "/29", - "minAddressCount": 6, - "requireContiguousAddresses": false - } - } - }, - "visible": true - }, - { - "name": "vmApplicationSecurityGroup", - "type": "Microsoft.Solutions.ResourceSelector", - "label": "Application security group", - "resourceType": "Microsoft.Network/applicationSecurityGroups", - "toolTip": "Application security groups enable you to configure network security as a natural extension of an application's structure, allowing you to group virtual machines and define network security policies based on those groups.", - "constraints": { - "required": false - }, - "visible": true - } - ] - }, - { - "name": "management", - "label": "Management", - "subLabel": { - "preValidation": "Configure monitoring and management options for your VM.", - "postValidation": "Done" - }, - "bladeTitle": "Management", - "elements": [ - { - "name": "textBlock0", - "type": "Microsoft.Common.TextBlock", - "options": { - "text": "Diagnostic settings" - } - }, - { - "name": "diagnosticStorageAccount", - "type": "Microsoft.Solutions.ResourceSelector", - "label": "Storage account", - "resourceType": "Microsoft.Storage/storageAccounts", - "toolTip": "Storage Account for Diagnostic Settings.", - "options": { - "filter": { - "subscription": "onBasic", - "location": "onBasic" - } - } - }, - { - "name": "logAnalyticsWorkspace", - "type": "Microsoft.Solutions.ResourceSelector", - "label": "Log Analytics workspace", - "resourceType": "Microsoft.OperationalInsights/workspaces", - "toolTip": "Log Analytics workspace for Diagnostic Settings.", - "options": { - "filter": { - "subscription": "onBasic", - "location": "onBasic" - } - } - }, - { - "name": "textBlock1", - "type": "Microsoft.Common.TextBlock", - "options": { - "text": "Custom data and cloud init" - }, - "visible": "[or(equals(steps('instance').osVersion, 'RHEL77'), equals(steps('instance').osVersion, 'RHEL78'), equals(steps('instance').osVersion, 'Ubuntu1804'), equals(steps('instance').osVersion, 'Ubuntu1804-DataScience'), equals(steps('instance').osVersion, 'CentOS77'), equals(steps('instance').osVersion, 'CentOS78'), equals(steps('instance').osVersion, 'CentOS79'))]" - }, - { - "name": "textBlock2", - "type": "Microsoft.Common.TextBlock", - "options": { - "text": "Pass a cloud-init script, configuration file, or other data into the virtual machine while it is being provisioned. The data will be saved on the VM in a known location." - }, - "visible": "[or(equals(steps('instance').osVersion, 'RHEL77'), equals(steps('instance').osVersion, 'RHEL78'), equals(steps('instance').osVersion, 'Ubuntu1804'), equals(steps('instance').osVersion, 'Ubuntu1804-DataScience'), equals(steps('instance').osVersion, 'CentOS77'), equals(steps('instance').osVersion, 'CentOS78'), equals(steps('instance').osVersion, 'CentOS79'))]" - }, - { - "name": "customData", - "type": "Microsoft.Common.TextBox", - "label": "Custom data", - "toolTip": "Custom data.", - "multiLine": true, - "constraints": { - "required": false, - "validations": [ - { - "regex": ".*", - "message": "Allows any charaters, numbers of symbols." - } - ] - }, - "visible": "[or(equals(steps('instance').osVersion, 'RHEL77'), equals(steps('instance').osVersion, 'RHEL78'), equals(steps('instance').osVersion, 'Ubuntu1804'), equals(steps('instance').osVersion, 'Ubuntu1804-DataScience'), equals(steps('instance').osVersion, 'CentOS77'), equals(steps('instance').osVersion, 'CentOS78'), equals(steps('instance').osVersion, 'CentOS79'))]" - }, - { - "name": "infoBox0", - "type": "Microsoft.Common.InfoBox", - "options": { - "icon": "Info", - "text": "Your image must have code to support consumption of custom data. If your image supports cloud-init, custom-data will be processed by cloud-init.", - "uri": "http://go.microsoft.com/fwlink/?LinkId=2125807" - }, - "visible": "[or(equals(steps('instance').osVersion, 'RHEL77'), equals(steps('instance').osVersion, 'RHEL78'), equals(steps('instance').osVersion, 'Ubuntu1804'), equals(steps('instance').osVersion, 'Ubuntu1804-DataScience'), equals(steps('instance').osVersion, 'CentOS77'), equals(steps('instance').osVersion, 'CentOS78'), equals(steps('instance').osVersion, 'CentOS79'))]" - } - ] - } - ], - "outputs": { - "location": "[location()]", - "vmName": "[steps('instance').vmName]", - "availabilityOptions": "[steps('instance').availabilityOptions]", - "availabilitySetName": "[steps('instance').availabilitySetName]", - "instanceCount": "[steps('instance').instanceCount]", - "faultDomains": "[steps('instance').faultDomains]", - "updateDomains": "[steps('instance').updateDomains]", - "osVersion": "[steps('instance').osVersion]", - "vmSize": "[steps('instance').vmSize]", - "adminUsername": "[steps('instance').adminUsername]", - "authenticationType": "[steps('instance').adminCredentials.authenticationType]", - "adminPasswordOrKey": "[if(equals(steps('instance').adminCredentials.authenticationType, 'password'), steps('instance').adminCredentials.password, steps('instance').adminCredentials.sshPublicKey)]", - "osDiskStorageType": "[steps('disk').osDiskStorageType]", - "osDiskEncryptionSetResourceId": "[steps('disk').osDiskEncryptionSet.id]", - "customData": "[if(not(empty(steps('management').customData)), steps('management').customData, '')]", - "vmVirtualNetwork": "[steps('networking').vmVirtualNetwork.name]", - "virtualNetworkNewOrExisting": "[steps('networking').vmVirtualNetwork.newOrExisting]", - "virtualNetworkResourceGroupName": "[steps('networking').vmVirtualNetwork.resourceGroup]", - "addressPrefix": "[steps('networking').vmVirtualNetwork.addressPrefix]", - "subnetPrefix": "[steps('networking').vmVirtualNetwork.subnets.subnet1.addressPrefix]", - "subnetName": "[steps('networking').vmVirtualNetwork.subnets.subnet1.name]", - "applicationSecurityGroupResourceId": "[steps('networking').vmApplicationSecurityGroup.id]", - "diagnosticStorageResourceId": "[steps('management').diagnosticStorageAccount.id]", - "logAnalyticsWorkspaceId": "[steps('management').logAnalyticsWorkspace.id]" - } - } -} +{ + "$schema": "https://schema.management.azure.com/schemas/0.1.2-preview/CreateUIDefinition.MultiVm.json#", + "handler": "Microsoft.Azure.CreateUIDef", + "version": "0.1.2-preview", + "parameters": { + "basics": [], + "steps": [ + { + "name": "instance", + "label": "Instance", + "subLabel": { + "preValidation": "Configure the virtual machine's resources and settings", + "postValidation": "Done" + }, + "bladeTitle": "Instance", + "elements": [ + { + "name": "textBlock0", + "type": "Microsoft.Common.TextBlock", + "options": { + "text": "Instance details" + } + }, + { + "name": "vmName", + "type": "Microsoft.Common.TextBox", + "label": "Virtual machine name", + "toolTip": "Virtual machines in Azure have two distinct names: virtual machine name used as the Azure resource identifier, and in guest host name. When you create a VM in the portal, the same name is used for both the virtual machine name and the host name. The virtual machine name cannot be changed after the VM is created. You can change the host name when you log into the virtual machine.", + "constraints": { + "required": true, + "regex": "^[a-z0-9A-Z-]{3,15}$", + "validationMessage": "Virtual machine name must be between 3 and 15 characters long and contain letters, numbers and hyphens only." + } + }, + { + "name": "availabilityOptions", + "type": "Microsoft.Common.DropDown", + "label": "Availability options", + "toolTip": "Azure offers a range of options for managing availability and resiliency for your applications. Architect your solution to use replicated VMs in Availability Sets to protect your apps and data from datacenter outages and maintenance events.", + "defaultValue": "No infrastructure redundancy required", + "constraints": { + "allowedValues": [ + { + "value": "default", + "label": "No infrastructure redundancy required" + }, + { + "value": "availabilitySet", + "label": "Availability set" + } + ], + "required": true + }, + "visible": true + }, + { + "name": "availabilitySetName", + "type": "Microsoft.Common.TextBox", + "label": "Availability set name", + "toolTip": "Name of the Availability set.", + "constraints": { + "required": "[equals(steps('instance').availabilityOptions, 'availabilitySet')]", + "regex": "^[a-z0-9A-Z-]{3,15}$", + "validationMessage": "Availability set name must be between 3 and 15 characters long and contain letters, numbers and hyphens only." + }, + "visible": "[equals(steps('instance').availabilityOptions, 'availabilitySet')]" + }, + { + "name": "instanceCount", + "type": "Microsoft.Common.Slider", + "min": 1, + "max": 5, + "label": "Instance count", + "defaultValue": 2, + "showStepMarkers": false, + "toolTip": "Number of virtual machines in the availability set.", + "constraints": { + "required": false + }, + "visible": "[equals(steps('instance').availabilityOptions, 'availabilitySet')]" + }, + { + "name": "faultDomains", + "type": "Microsoft.Common.Slider", + "min": 1, + "max": 3, + "label": "Fault domains", + "defaultValue": 2, + "showStepMarkers": false, + "toolTip": "Virtual machines in the same fault domain share a common power source and physical network switch.", + "constraints": { + "required": false + }, + "visible": "[equals(steps('instance').availabilityOptions, 'availabilitySet')]" + }, + { + "name": "updateDomains", + "type": "Microsoft.Common.Slider", + "min": 1, + "max": 5, + "label": "Update domains", + "defaultValue": 3, + "showStepMarkers": true, + "toolTip": "Virtual machines in the same update domain will be restarted together during planned maintenance. Azure never restarts more than one update domain at a time.", + "constraints": { + "required": false + }, + "visible": "[equals(steps('instance').availabilityOptions, 'availabilitySet')]" + }, + { + "name": "osVersion", + "type": "Microsoft.Common.DropDown", + "label": "Linux OS version", + "toolTip": "The OS version for the VM Image", + "defaultValue": "CentOS 7.7", + "constraints": { + "allowedValues": [ + { + "value": "CentOS79", + "label": "CentOS 7.9" + }, + { + "value": "CentOS78", + "label": "CentOS 7.8" + }, + { + "value": "CentOS77", + "label": "CentOS 7.7" + }, + { + "value": "CentOS76", + "label": "CentOS 7.6" + }, + { + "value": "CentOS75", + "label": "CentOS 7.5" + }, + { + "value": "CentOS74", + "label": "CentOS 7.4" + }, + { + "value": "RHEL84", + "label": "Red Hat Enterprise Linux 8.4" + }, + { + "value": "RHEL83", + "label": "Red Hat Enterprise Linux 8.3" + }, + { + "value": "RHEL82", + "label": "Red Hat Enterprise Linux 8.2" + }, + { + "value": "RHEL81", + "label": "Red Hat Enterprise Linux 8.1" + }, + { + "value": "RHEL80", + "label": "Red Hat Enterprise Linux 8.0" + }, + { + "value": "RHEL79", + "label": "Red Hat Enterprise Linux 7.9" + }, + { + "value": "RHEL78", + "label": "Red Hat Enterprise Linux 7.8" + }, + { + "value": "RHEL77", + "label": "Red Hat Enterprise Linux 7.7" + }, + { + "value": "RHEL75", + "label": "Red Hat Enterprise Linux 7.5" + }, + { + "value": "RHEL74", + "label": "Red Hat Enterprise Linux 7.4" + }, + { + "value": "Ubuntu1804", + "label": "Canonical Ubuntu 18.04 LTS" + }, + { + "value": "Ubuntu1804-DataScience", + "label": "Data Science Virtual Machine - Ubuntu 18.04" + } + ], + "required": true + }, + "visible": true + }, + { + "name": "infoBox0", + "type": "Microsoft.Common.InfoBox", + "options": { + "icon": "Info", + "text": "The Ubuntu Data Science VM contains Ubuntu 18.04 STIG automation only. No additional STIG automation is provided." + }, + "visible": "[equals(steps('instance').osVersion, 'Ubuntu1804-DataScience')]" + }, + { + "name": "vmSize", + "type": "Microsoft.Compute.SizeSelector", + "label": "Size", + "toolTip": "Select a VM size to support the workload that you want to run. The size that you choose then determines factors such as processing power, memory, and storage capacity. Azure offers a wide variety of sizes to support many types of uses. Azure charges an hourly price based on the VM's size and operating system.", + "recommendedSizes": [ + "Standard_DS2_v2", + "Standard_D2s_v3" + ], + "osPlatform": "Linux", + "count": "1" + }, + { + "name": "textBlock1", + "type": "Microsoft.Common.TextBlock", + "options": { + "text": "Administrator account" + } + }, + { + "name": "adminUsername", + "type": "Microsoft.Compute.UserNameTextBox", + "label": "Username", + "defaultValue": "", + "toolTip": "Admin username for the virtual machine.", + "constraints": { + "required": true, + "regex": "^[a-z0-9A-Z]{1,30}$", + "validationMessage": "Only alphanumeric characters are allowed, and the value must be 1-30 characters long." + }, + "osPlatform": "Linux", + "visible": true + }, + { + "name": "adminCredentials", + "type": "Microsoft.Compute.CredentialsCombo", + "label": { + "authenticationType": "Authentication type", + "password": "Password", + "confirmPassword": "Confirm password", + "sshPublicKey": "SSH public key" + }, + "toolTip": { + "authenticationType": "Authentication type (password or ssh public key) to connect to the virtual machine", + "password": "Admin password for the virtual machine", + "sshPublicKey": "Admin ssh public key for the virtual machine" + }, + "constraints": { + "required": true, + "customPasswordRegex": "^(?=.*[A-Z])(?=.*[.!@#$%^&*()-_=+])(?=.*[0-9])(?=.*[a-z]).{12,40}$", + "customValidationMessage": "Password must be at least 12 characters long, and contain upper case, lower case, number and symbol" + }, + "options": { + "hideConfirmation": false, + "hidePassword": false + }, + "osPlatform": "Linux", + "visible": true + } + ] + }, + { + "name": "disk", + "label": "Disk", + "subLabel": { + "preValidation": "Configure the virtual machine's resources and settings", + "postValidation": "Done" + }, + "bladeTitle": "Disk", + "elements": [ + { + "name": "textBlock0", + "type": "Microsoft.Common.TextBlock", + "options": { + "text": "Disk options" + } + }, + { + "name": "osDiskStorageType", + "type": "Microsoft.Common.DropDown", + "label": "OS disk type", + "toolTip": "You can choose between Azure managed disks types to support your workload or scenario.", + "defaultValue": "Premium SSD", + "constraints": { + "allowedValues": [ + { + "value": "Premium_LRS", + "label": "Premium SSD" + }, + { + "value": "Standard_LRS", + "label": "Standard HDD" + }, + { + "value": "StandardSSD_LRS", + "label": "Standard SSD" + } + ], + "required": true + }, + "visible": true + }, + { + "name": "osDiskEncryptionType", + "type": "Microsoft.Common.DropDown", + "label": "Encryption type", + "toolTip": "Select the encryption type for OS disk.", + "defaultValue": "(Default) Encryption at-rest with a platform-managed key", + "constraints": { + "allowedValues": [ + { + "value": "default", + "label": "(Default) Encryption at-rest with a platform-managed key" + }, + { + "value": "EncryptionAtRestWithCustomerKey", + "label": "Encryption at-rest with a customer-managed key" + }, + { + "value": "EncryptionAtRestWithPlatformAndCustomerKeys", + "label": "Double encryption with platform-managed and customer-managed keys" + } + ], + "required": true + }, + "visible": true + }, + { + "name": "osDiskEncryptionSet", + "type": "Microsoft.Solutions.ResourceSelector", + "label": "Disk encryption set", + "resourceType": "Microsoft.Compute/diskEncryptionSets", + "toolTip": "A disk encryption set stores the customer key that a disk or snapshot will use for encrypting its data. You must choose an existing disk encryption set during this step. Disk encryption sets require access to key vault and keys.", + "options": { + "filter": { + "subscription": "onBasic", + "location": "onBasic" + } + }, + "constraints": { + "required": true + }, + "visible": "[not(equals(steps('disk').osDiskEncryptionType, 'default'))]" + } + ] + }, + { + "name": "networking", + "label": "Networking", + "subLabel": { + "preValidation": "Define network connectivity for your virtual machine by configuring network interface card (NIC) settings. You can control ports, inbound and outbound connectivity with security group rules, or place behind an existing load balancing solution.", + "postValidation": "Done" + }, + "bladeTitle": "Network interface", + "elements": [ + { + "name": "textBlock0", + "type": "Microsoft.Common.TextBlock", + "options": { + "text": "Network interface" + } + }, + { + "name": "vmVirtualNetwork", + "type": "Microsoft.Network.VirtualNetworkCombo", + "label": { + "virtualNetwork": "Virtual network", + "subnets": "Subnets" + }, + "toolTip": { + "virtualNetwork": "Virtual networks are logically isolated from each other in Azure. You can configure their IP address ranges, subnets, route tables, gateways, and security settings, much like a traditional network in your data center. Virtual machines in the same virtual network can access each other by default.", + "subnets": "A subnet is a range of IP addresses in your virtual network, which can be used to isolate virtual machines from each other or from the Internet." + }, + "defaultValue": { + "name": "[concat(resourceGroup().name, '-vnet')]", + "addressPrefixSize": "/16" + }, + "constraints": { + "minAddressPrefixSize": "/29" + }, + "options": { + "hideExisting": false + }, + "subnets": { + "subnet1": { + "label": "Subnet", + "defaultValue": { + "name": "default", + "addressPrefixSize": "/24" + }, + "constraints": { + "minAddressPrefixSize": "/29", + "minAddressCount": 6, + "requireContiguousAddresses": false + } + } + }, + "visible": true + }, + { + "name": "vmApplicationSecurityGroup", + "type": "Microsoft.Solutions.ResourceSelector", + "label": "Application security group", + "resourceType": "Microsoft.Network/applicationSecurityGroups", + "toolTip": "Application security groups enable you to configure network security as a natural extension of an application's structure, allowing you to group virtual machines and define network security policies based on those groups.", + "constraints": { + "required": false + }, + "visible": true + } + ] + }, + { + "name": "management", + "label": "Management", + "subLabel": { + "preValidation": "Configure monitoring and management options for your VM.", + "postValidation": "Done" + }, + "bladeTitle": "Management", + "elements": [ + { + "name": "textBlock0", + "type": "Microsoft.Common.TextBlock", + "options": { + "text": "Diagnostic settings" + } + }, + { + "name": "diagnosticStorageAccount", + "type": "Microsoft.Solutions.ResourceSelector", + "label": "Storage account", + "resourceType": "Microsoft.Storage/storageAccounts", + "toolTip": "Storage Account for Diagnostic Settings.", + "options": { + "filter": { + "subscription": "onBasic", + "location": "onBasic" + } + } + }, + { + "name": "logAnalyticsWorkspace", + "type": "Microsoft.Solutions.ResourceSelector", + "label": "Log Analytics workspace", + "resourceType": "Microsoft.OperationalInsights/workspaces", + "toolTip": "Log Analytics workspace for Diagnostic Settings.", + "options": { + "filter": { + "subscription": "onBasic", + "location": "onBasic" + } + }, + "visible": "[not(equals(steps('instance').osVersion, 'Ubuntu1804-DataScience'))]" + }, + { + "name": "textBlock1", + "type": "Microsoft.Common.TextBlock", + "options": { + "text": "Custom data and cloud init" + }, + "visible": "[or(equals(steps('instance').osVersion, 'RHEL77'), equals(steps('instance').osVersion, 'RHEL78'), equals(steps('instance').osVersion, 'Ubuntu1804'), equals(steps('instance').osVersion, 'Ubuntu1804-DataScience'), equals(steps('instance').osVersion, 'CentOS77'), equals(steps('instance').osVersion, 'CentOS78'), equals(steps('instance').osVersion, 'CentOS79'))]" + }, + { + "name": "textBlock2", + "type": "Microsoft.Common.TextBlock", + "options": { + "text": "Pass a cloud-init script, configuration file, or other data into the virtual machine while it is being provisioned. The data will be saved on the VM in a known location." + }, + "visible": "[or(equals(steps('instance').osVersion, 'RHEL77'), equals(steps('instance').osVersion, 'RHEL78'), equals(steps('instance').osVersion, 'Ubuntu1804'), equals(steps('instance').osVersion, 'Ubuntu1804-DataScience'), equals(steps('instance').osVersion, 'CentOS77'), equals(steps('instance').osVersion, 'CentOS78'), equals(steps('instance').osVersion, 'CentOS79'))]" + }, + { + "name": "customData", + "type": "Microsoft.Common.TextBox", + "label": "Custom data", + "toolTip": "Custom data.", + "multiLine": true, + "constraints": { + "required": false, + "validations": [ + { + "regex": ".*", + "message": "Allows any charaters, numbers of symbols." + } + ] + }, + "visible": "[or(equals(steps('instance').osVersion, 'RHEL77'), equals(steps('instance').osVersion, 'RHEL78'), equals(steps('instance').osVersion, 'Ubuntu1804'), equals(steps('instance').osVersion, 'Ubuntu1804-DataScience'), equals(steps('instance').osVersion, 'CentOS77'), equals(steps('instance').osVersion, 'CentOS78'), equals(steps('instance').osVersion, 'CentOS79'))]" + }, + { + "name": "infoBox0", + "type": "Microsoft.Common.InfoBox", + "options": { + "icon": "Info", + "text": "Your image must have code to support consumption of custom data. If your image supports cloud-init, custom-data will be processed by cloud-init.", + "uri": "http://go.microsoft.com/fwlink/?LinkId=2125807" + }, + "visible": "[or(equals(steps('instance').osVersion, 'RHEL77'), equals(steps('instance').osVersion, 'RHEL78'), equals(steps('instance').osVersion, 'Ubuntu1804'), equals(steps('instance').osVersion, 'Ubuntu1804-DataScience'), equals(steps('instance').osVersion, 'CentOS77'), equals(steps('instance').osVersion, 'CentOS78'), equals(steps('instance').osVersion, 'CentOS79'))]" + }, + { + "name": "infoBox1", + "type": "Microsoft.Common.InfoBox", + "options": { + "icon": "Info", + "text": "Ubuntu Data Science STIG Solution Template does not currently support Log Analytics workspace configuration at deployment time. However, this can be performed after deployment by uninstalling the DSCForLinux extension, then deploying the Log Analytics agent.", + "uri": "https://learn.microsoft.com/en-us/azure/azure-government/documentation-government-stig-linux-vm" + }, + "visible": "[equals(steps('instance').osVersion, 'Ubuntu1804-DataScience')]" + } + ] + } + ], + "outputs": { + "location": "[location()]", + "vmName": "[steps('instance').vmName]", + "availabilityOptions": "[steps('instance').availabilityOptions]", + "availabilitySetName": "[steps('instance').availabilitySetName]", + "instanceCount": "[steps('instance').instanceCount]", + "faultDomains": "[steps('instance').faultDomains]", + "updateDomains": "[steps('instance').updateDomains]", + "osVersion": "[steps('instance').osVersion]", + "vmSize": "[steps('instance').vmSize]", + "adminUsername": "[steps('instance').adminUsername]", + "authenticationType": "[steps('instance').adminCredentials.authenticationType]", + "adminPasswordOrKey": "[if(equals(steps('instance').adminCredentials.authenticationType, 'password'), steps('instance').adminCredentials.password, steps('instance').adminCredentials.sshPublicKey)]", + "osDiskStorageType": "[steps('disk').osDiskStorageType]", + "osDiskEncryptionSetResourceId": "[steps('disk').osDiskEncryptionSet.id]", + "customData": "[if(not(empty(steps('management').customData)), steps('management').customData, '')]", + "vmVirtualNetwork": "[steps('networking').vmVirtualNetwork.name]", + "virtualNetworkNewOrExisting": "[steps('networking').vmVirtualNetwork.newOrExisting]", + "virtualNetworkResourceGroupName": "[steps('networking').vmVirtualNetwork.resourceGroup]", + "addressPrefix": "[steps('networking').vmVirtualNetwork.addressPrefix]", + "subnetPrefix": "[steps('networking').vmVirtualNetwork.subnets.subnet1.addressPrefix]", + "subnetName": "[steps('networking').vmVirtualNetwork.subnets.subnet1.name]", + "applicationSecurityGroupResourceId": "[steps('networking').vmApplicationSecurityGroup.id]", + "diagnosticStorageResourceId": "[steps('management').diagnosticStorageAccount.id]", + "logAnalyticsWorkspaceId": "[steps('management').logAnalyticsWorkspace.id]" + } + } +} diff --git a/stig/linux/mainTemplate.json b/stig/linux/mainTemplate.json index b8fb233..816e363 100644 --- a/stig/linux/mainTemplate.json +++ b/stig/linux/mainTemplate.json @@ -66,8 +66,6 @@ "RHEL77", "RHEL75", "RHEL74", - "RHEL73", - "RHEL72", "Ubuntu1804", "Ubuntu1804-DataScience" ], @@ -254,6 +252,7 @@ "[variables('linuxBashUri')]", "[if(contains(variables('rhel8Versions'), parameters('osVersion')), variables('rhel8FileUri'), variables('mofDscFileUri'))]" ], + "omsAutoUpgrade": "[if(contains(variables('rhel8Versions'), parameters('osVersion')), 'true', 'false')]", "images": { "CentOS79": { "reference": { @@ -399,24 +398,6 @@ }, "stigFileName": "rhel7STIG.sh" }, - "RHEL73": { - "reference": { - "publisher": "RedHat", - "offer": "RHEL", - "sku": "7.3", - "version": "latest" - }, - "stigFileName": "rhel7STIG.sh" - }, - "RHEL72": { - "reference": { - "publisher": "RedHat", - "offer": "RHEL", - "sku": "7.2", - "version": "latest" - }, - "stigFileName": "rhel7STIG.sh" - }, "Ubuntu1804": { "reference": { "publisher": "Canonical", @@ -708,7 +689,7 @@ "name": "[concat(parameters('vmName'), if(equals(variables('instanceCount'), 1), '', copyIndex()), '/Microsoft.EnterpriseCloud.Monitoring')]", "apiVersion": "2015-06-15", "location": "[parameters('location')]", - "condition": "[not(equals(parameters('logAnalyticsWorkspaceId'), ''))]", + "condition": "[and(not(equals(parameters('logAnalyticsWorkspaceId'), '')), not(equals(parameters('osVersion'), 'Ubuntu1804-DataScience')))]", "copy": { "name": "monitoringAgentLoop", "count": "[variables('instanceCount')]" @@ -720,7 +701,7 @@ "publisher": "Microsoft.EnterpriseCloud.Monitoring", "type": "OmsAgentForLinux", "typeHandlerVersion": "1.12", - "autoUpgradeMinorVersion": true, + "autoUpgradeMinorVersion": "[variables('omsAutoUpgrade')]", "settings": { "workspaceId": "[if(equals(parameters('logAnalyticsWorkspaceId'), ''), json('null'), reference(parameters('logAnalyticsWorkspaceId'),'2015-03-20').customerId)]" }, diff --git a/stig/linux/rhel8STIG.sh b/stig/linux/rhel8STIG.sh index 04688a6..702f965 100644 --- a/stig/linux/rhel8STIG.sh +++ b/stig/linux/rhel8STIG.sh @@ -1,348 +1,353 @@ -# only run once during deployment -if [ -f ./azAutomationComplete ]; then - echo "STIG Automation completed, exiting..." - exit 0 -fi - -############################################################################### -echo "Setting script variables" -############################################################################### -version=$(. /etc/os-release && echo $VERSION_ID) - -############################################################################### -echo "Automating Rule Id V-230233" -############################################################################### -sed -i "s/\(password\s*sufficient.*\)/\1 rounds=5000/g" /etc/pam.d/password-auth /etc/pam.d/system-auth -# END V-230233 - -############################################################################### -echo "Automating Rule Id V-230234" -# SCAP fails if /boot/efi/EFI/redhat/grub.cfg exists on Gen 1 Azure VM -############################################################################### -firmwarecheck=$([ -d /sys/firmware/efi ] && echo UEFI || echo BIOS) -if [ $firmwarecheck = 'BIOS' ]; then - mv /boot/efi/EFI/redhat/grub.cfg /boot/efi/EFI/redhat/grub.bak -fi -# END V-230234 - -############################################################################### -echo "Automating Rule Id V-230253" -############################################################################### -sed -i "s/^SSH_USE_STRONG_RNG=.*/SSH_USE_STRONG_RNG=32/g" /etc/sysconfig/sshd -# END V-230253 - -############################################################################### -echo "Automating Rule Id V-230257" -############################################################################### -find -L /bin /sbin /usr/bin /usr/sbin /usr/local/bin /usr/local/sbin -perm /0022 -type f -exec chmod 0755 {} \; -# END V-230257 - -############################################################################### -echo "Automating Rule Id V-230271" -############################################################################### -grep -r -l -i nopasswd /etc/sudoers.d/* /etc/sudoers | xargs sed -i 's/\s*NOPASSWD://g' 2>&1 -# END V-230271 - -############################################################################### -echo "Automating Rule Id V-230287" -############################################################################### -chmod 0600 /etc/ssh/ssh_host*key -# END V-230287 - -############################################################################### -echo "Automating Rule Id V-230301" -############################################################################### -sed -i "s/\(.*[[:space:]]\/[[:alpha:]].*defaults\)/\1,nodev/g" /etc/fstab -# END V-230301 - -############################################################################### -echo "Automating Rule Id V-230311" -############################################################################### -rm -f /usr/lib/sysctl.d/50-coredump.conf -echo "kernel.core_pattern = |/bin/false" > /etc/sysctl.d/90-azurestig-v230311.conf -# END V-230311 - -############################################################################### -echo "Automating Rule Ids V-230332, V-230334, V-230336, V-230338, V-230340, V-230342, V-230344" -############################################################################### -if [ ${version} == '8.0' ] || [ ${version} == '8.1' ]; then - authRequired='auth required' - acctRequired='account required' - spacing=' ' - authFaillockPreAuth='pam_faillock.so preauth dir=\/var\/log\/faillock silent audit deny=3 even_deny_root fail_interval=900 unlock_time=0' - authFaillockAuthFail='pam_faillock.so authfail dir=\/var\/log\/faillock unlock_time=0' - sed -i "s/\(auth.*pam_unix.so.*\)/${authRequired}${spacing}${authFaillockPreAuth}\n\1/g" /etc/pam.d/password-auth /etc/pam.d/system-auth - sed -i "s/\(auth.*pam_unix.so.*\)/\1\n${authRequired}${spacing}${authFaillockAuthFail}/g" /etc/pam.d/password-auth /etc/pam.d/system-auth - sed -i "s/\(account.*pam_unix.so\)/${acctRequired}${spacing}pam_faillock.so\n\1/g" /etc/pam.d/password-auth /etc/pam.d/system-auth -else - echo " Automation intended for 8.0 and 8.1; '$version' detected, skipping..." -fi -# END V-230332, V-230334, V-230336, V-230338, V-230340, V-230342, V-230344 - -############################################################################### -echo "Automating Rule Id V-230333" -############################################################################### -if [ ${version} == '8.0' ] || [ ${version} == '8.1' ]; then - echo " Automation intended for 8.2 and newer, '$version' detected, skipping..." -else - authRequiredFaillock='auth required pam_faillock.so' - acctRequiredFaillock='account required pam_faillock.so' - sed -i "s/\(auth.*required.*pam_env.so\)/\1\n${authRequiredFaillock} preauth/g" /etc/pam.d/password-auth /etc/pam.d/system-auth - sed -i "s/\(auth.*required.*pam_deny.so\)/${authRequiredFaillock} authfail\n\1/g" /etc/pam.d/password-auth /etc/pam.d/system-auth - sed -i "s/\(account.*required.*pam_unix.so\)/${acctRequiredFaillock}\n\1/g" /etc/pam.d/password-auth /etc/pam.d/system-auth - sed -i "s/.*deny\s*=.*/deny = 3/g" /etc/security/faillock.conf -fi -# END V-230333 - -############################################################################### -echo "Automating Rule Id V-230335" -############################################################################### -if [ ${version} == '8.0' ] || [ ${version} == '8.1' ]; then - echo " Automation intended for 8.2 and newer, '$version' detected, skipping..." -else - sed -i "s/.*fail_interval\s*=.*/fail_interval = 900/g" /etc/security/faillock.conf -fi -# END V-230335 - -############################################################################### -echo "Automating Rule Id V-230337" -############################################################################### -if [ ${version} == '8.0' ] || [ ${version} == '8.1' ]; then - echo " Automation intended for 8.2 and newer, '$version' detected, skipping..." -else - sed -i "s/^\(#\|\)[[:space:]]*unlock_time\s*=.*/unlock_time = 0/g" /etc/security/faillock.conf -fi -# END V-230337 - -############################################################################### -echo "Automating Rule Id V-230341" -############################################################################### -if [ ${version} == '8.0' ] || [ ${version} == '8.1' ]; then - echo " Automation intended for 8.2 and newer, '$version' detected, skipping..." -else - if grep -q -i silent /etc/security/faillock.conf; then - sed -i "s/.*silent.*/silent/g" /etc/security/faillock.conf - else - echo "silent" >> /etc/security/faillock.conf - fi -fi -# END V-230341 - -############################################################################### -echo "Automating Rule Id V-230343" -############################################################################### -if [ ${version} == '8.0' ] || [ ${version} == '8.1' ]; then - echo " Automation intended for 8.2 and newer, '$version' detected, skipping..." -else - if grep -q -i audit /etc/security/faillock.conf; then - sed -i "s/.*audit.*/audit/g" /etc/security/faillock.conf - else - echo "audit" >> /etc/security/faillock.conf - fi -fi -# END V-230343 - -############################################################################### -echo "Automating Rule Id V-230345" -############################################################################### -if [ ${version} == '8.0' ] || [ ${version} == '8.1' ]; then - echo " Automation intended for 8.2 and newer, '$version' detected, skipping..." -else - sed -i "s/^\(#\|\)[[:space:]]*even_deny_root.*/even_deny_root/g" /etc/security/faillock.conf -fi -# END V-230345 - -############################################################################### -echo "Automating Rule Id V-230349" -############################################################################### -echo 'if [ "$PS1" ]; then' >> /etc/profile.d/230348-customshell.sh -echo 'parent=$(ps -o ppid= -p $$)' >> /etc/profile.d/230348-customshell.sh -echo 'name=$(ps -o comm= -p $parent)' >> /etc/profile.d/230348-customshell.sh -echo 'case "$name" in (sshd|login) exec tmux ;; esac' >> /etc/profile.d/230348-customshell.sh -echo 'fi' >> /etc/profile.d/230348-customshell.sh -# END V-230349 - -############################################################################### -echo "Automating Rule Id V-230367" -############################################################################### -chage -M 60 $1 -chage -M 60 root -# END V-230367 - -############################################################################### -echo "Automating Rule Id V-230368" -############################################################################### -passwordRequired='password required' -spacing=' ' -passwordReqPwHist='pam_pwhistory.so use_authtok remember=5 retry=3' -sed -i "s/\(password.*pam_unix.so.*\)/${passwordRequired}${spacing}${passwordReqPwHist}\n\1/g" /etc/pam.d/password-auth /etc/pam.d/system-auth -# END V-230368 - -############################################################################### -echo "Automating Rule Id V-230373" -############################################################################### -useradd -D -f 35 -# END V-230373 - -############################################################################### -echo "Automating Rule Id V-230380" -############################################################################### -sed -i 's/\s*nullok\s*/ /g' /etc/pam.d/system-auth /etc/pam.d/password-auth -sed -i "s/.*PermitEmptyPasswords.*/PermitEmptyPasswords no/g" /etc/ssh/sshd_config -# END V-230380 - -############################################################################### -echo "Automating Rule Id V-230439" -############################################################################### -echo '-a always,exit -F arch=b32 -S rename,unlink,rmdir,renameat,unlinkat -F auid>=1000 -F auid!=unset -k delete' >> /etc/audit/rules.d/audit.rules -echo '-a always,exit -F arch=b64 -S rename,unlink,rmdir,renameat,unlinkat -F auid>=1000 -F auid!=unset -k delete' >> /etc/audit/rules.d/audit.rules -# END V-230439 - -############################################################################### -echo "Automating Rule Id V-230485" -############################################################################### -if ! grep -q -w 'port' /etc/chrony.conf; then - echo 'port 0' >> /etc/chrony.conf -else - sed -i 's/\(^port\|^#port\).*/port 0/g' /etc/chrony.conf -fi -# END V-230485 - -############################################################################### -echo "Automating Rule Id V-230486" -############################################################################### -if ! grep -q -w 'cmdport' /etc/chrony.conf; then - echo 'cmdport 0' >> /etc/chrony.conf -else - sed -i 's/\(^cmdport\|^#cmdport\).*/cmdport 0/g' /etc/chrony.conf -fi -# END V-230486 - -############################################################################### -echo "Automating Rule Id V-230494" -############################################################################### -echo 'install atm /bin/true' > /etc/modprobe.d/atm.conf -echo 'blacklist atm' >> /etc/modprobe.d/blacklist.conf -# END V-230494 - -############################################################################### -echo "Automating Rule Id V-230495" -############################################################################### -echo 'install can /bin/true' > /etc/modprobe.d/can.conf -echo 'blacklist can' >> /etc/modprobe.d/blacklist.conf -# END V-230495 - -############################################################################### -echo "Automating Rule Id V-230496" -############################################################################### -echo 'install sctp /bin/true' > /etc/modprobe.d/sctp.conf -echo 'blacklist sctp' >> /etc/modprobe.d/blacklist.conf -# END V-230496 - -############################################################################### -echo "Automating Rule Id V-230497" -############################################################################### -echo 'install tipc /bin/true' > /etc/modprobe.d/tipc.conf -echo 'blacklist tipc' >> /etc/modprobe.d/blacklist.conf -# END V-230497 - -############################################################################### -echo "Automating Rule Id V-230498" -############################################################################### -echo 'install cramfs /bin/true' > /etc/modprobe.d/cramfs.conf -echo 'blacklist cramfs' >> /etc/modprobe.d/blacklist.conf -# END V-230498 - -############################################################################### -echo "Automating Rule Id V-230499" -############################################################################### -echo 'install firewire-core /bin/true' > /etc/modprobe.d/firewire-core.conf -echo 'blacklist firewire-core' >> /etc/modprobe.d/blacklist.conf -# END V-230499 - -############################################################################### -echo "Automating Rule Id V-230503" -############################################################################### -echo 'install usb-storage /bin/true' > /etc/modprobe.d/usb-storage.conf -echo 'blacklist usb-storage' >> /etc/modprobe.d/blacklist.conf -# END V-230503 - -############################################################################### -echo "Automating Rule Id V-230507" -############################################################################### -echo 'install bluetooth /bin/true' > /etc/modprobe.d/bluetooth.conf -# END V-230507 - -############################################################################### -echo "Automating Rule Ids V-230508, V-230509, V-230510" -############################################################################### -echo 'tmpfs /dev/shm tmpfs defaults,nodev,nosuid,noexec 0 0' >> /etc/fstab -# END V-230508, V-230509, V-230510 - -############################################################################### -echo "Automating Rule Id V-230511, V-230512, V-230513" -############################################################################### -sed -i 's/\(\/tmp.*\)defaults.*/\1defaults,nodev,nosuid,noexec 0 0/g' /etc/fstab -# END V-230511, V-230512, V-230513 - -############################################################################### -echo "Automating Rule Id V-230546" -############################################################################### -rm -f /usr/lib/sysctl.d/10-default-yama-scope.conf -sysctl -w kernel.yama.ptrace_scope=1 -echo "kernel.yama.ptrace_scope = 1" > /etc/sysctl.d/90-azurestig-v230546.conf -# END V-230546 - -############################################################################### -echo "Automating Rule Id V-237642" -############################################################################### -echo 'Defaults !targetpw' >> /etc/sudoers.d/237642 -echo 'Defaults !rootpw' >> /etc/sudoers.d/237642 -echo 'Defaults !runaspw' >> /etc/sudoers.d/237642 -# END V-237642 - -############################################################################### -echo "Installing Ansible for STIG automation (pip3 install)..." -############################################################################### -pip3 install ansible --user - -############################################################################### -echo "Unzipping rhel8STIG-ansible.zip to ./rhel8STIG" -############################################################################### -unzip rhel8STIG-ansible.zip -d ./rhel8STIG - -############################################################################### -echo "Invoking ansible-playbook to automate STIG rules" -############################################################################### -/root/.local/bin/ansible-playbook -v -b -i /dev/null ./rhel8STIG/site.yml - - -############################################################################### -# "Automating Rule Id V-230483" 8.0 auditd.conf does not recogn. percent sign -############################################################################### -if [ ${version} == '8.0' ]; then - echo "Automating Rule Id V-230483" - sed -i 's/25%/2048/g' /etc/audit/auditd.conf -fi -# END V-230483 - -############################################################################### -echo "Automating Rule Id V-230350" -############################################################################### -sed -i 's/.*tmux.*//g' /etc/shells -echo '---------- /etc/shells content begin ----------' -cat /etc/shells -echo '---------- /etc/shells content end ----------' -# END V-230350 - -############################################################################### -echo "Automating Rule Id V-230223" -############################################################################### -fips-mode-setup --enable -# END V-230223 - -############################################################################### -echo "Restarting system to apply STIG settings..." -############################################################################### -touch ./azAutomationComplete -shutdown -r +1 2>&1 +# only run once during deployment +if [ -f ./azAutomationComplete ]; then + echo "STIG Automation completed, exiting..." + exit 0 +fi + +############################################################################### +echo "Setting script variables" +############################################################################### +version=$(. /etc/os-release && echo $VERSION_ID) + +############################################################################### +echo "Enabling Microsoft Repos" +############################################################################### +yum update -y --disablerepo='*' --enablerepo='*microsoft*' + +############################################################################### +echo "Automating Rule Id V-230233" +############################################################################### +sed -i "s/\(password\s*sufficient.*\)/\1 rounds=5000/g" /etc/pam.d/password-auth /etc/pam.d/system-auth +# END V-230233 + +############################################################################### +echo "Automating Rule Id V-230234" +# SCAP fails if /boot/efi/EFI/redhat/grub.cfg exists on Gen 1 Azure VM +############################################################################### +firmwarecheck=$([ -d /sys/firmware/efi ] && echo UEFI || echo BIOS) +if [ $firmwarecheck = 'BIOS' ]; then + mv /boot/efi/EFI/redhat/grub.cfg /boot/efi/EFI/redhat/grub.bak +fi +# END V-230234 + +############################################################################### +echo "Automating Rule Id V-230253" +############################################################################### +sed -i "s/^SSH_USE_STRONG_RNG=.*/SSH_USE_STRONG_RNG=32/g" /etc/sysconfig/sshd +# END V-230253 + +############################################################################### +echo "Automating Rule Id V-230257" +############################################################################### +find -L /bin /sbin /usr/bin /usr/sbin /usr/local/bin /usr/local/sbin -perm /0022 -type f -exec chmod 0755 {} \; +# END V-230257 + +############################################################################### +echo "Automating Rule Id V-230271" +############################################################################### +grep -r -l -i nopasswd /etc/sudoers.d/* /etc/sudoers | xargs sed -i 's/\s*NOPASSWD://g' 2>&1 +# END V-230271 + +############################################################################### +echo "Automating Rule Id V-230287" +############################################################################### +chmod 0600 /etc/ssh/ssh_host*key +# END V-230287 + +############################################################################### +echo "Automating Rule Id V-230301" +############################################################################### +sed -i "s/\(.*[[:space:]]\/[[:alpha:]].*defaults\)/\1,nodev/g" /etc/fstab +# END V-230301 + +############################################################################### +echo "Automating Rule Id V-230311" +############################################################################### +rm -f /usr/lib/sysctl.d/50-coredump.conf +echo "kernel.core_pattern = |/bin/false" > /etc/sysctl.d/90-azurestig-v230311.conf +# END V-230311 + +############################################################################### +echo "Automating Rule Ids V-230332, V-230334, V-230336, V-230338, V-230340, V-230342, V-230344" +############################################################################### +if [ ${version} == '8.0' ] || [ ${version} == '8.1' ]; then + authRequired='auth required' + acctRequired='account required' + spacing=' ' + authFaillockPreAuth='pam_faillock.so preauth dir=\/var\/log\/faillock silent audit deny=3 even_deny_root fail_interval=900 unlock_time=0' + authFaillockAuthFail='pam_faillock.so authfail dir=\/var\/log\/faillock unlock_time=0' + sed -i "s/\(auth.*pam_unix.so.*\)/${authRequired}${spacing}${authFaillockPreAuth}\n\1/g" /etc/pam.d/password-auth /etc/pam.d/system-auth + sed -i "s/\(auth.*pam_unix.so.*\)/\1\n${authRequired}${spacing}${authFaillockAuthFail}/g" /etc/pam.d/password-auth /etc/pam.d/system-auth + sed -i "s/\(account.*pam_unix.so\)/${acctRequired}${spacing}pam_faillock.so\n\1/g" /etc/pam.d/password-auth /etc/pam.d/system-auth +else + echo " Automation intended for 8.0 and 8.1; '$version' detected, skipping..." +fi +# END V-230332, V-230334, V-230336, V-230338, V-230340, V-230342, V-230344 + +############################################################################### +echo "Automating Rule Id V-230333" +############################################################################### +if [ ${version} == '8.0' ] || [ ${version} == '8.1' ]; then + echo " Automation intended for 8.2 and newer, '$version' detected, skipping..." +else + authRequiredFaillock='auth required pam_faillock.so' + acctRequiredFaillock='account required pam_faillock.so' + sed -i "s/\(auth.*required.*pam_env.so\)/\1\n${authRequiredFaillock} preauth/g" /etc/pam.d/password-auth /etc/pam.d/system-auth + sed -i "s/\(auth.*required.*pam_deny.so\)/${authRequiredFaillock} authfail\n\1/g" /etc/pam.d/password-auth /etc/pam.d/system-auth + sed -i "s/\(account.*required.*pam_unix.so\)/${acctRequiredFaillock}\n\1/g" /etc/pam.d/password-auth /etc/pam.d/system-auth + sed -i "s/.*deny\s*=.*/deny = 3/g" /etc/security/faillock.conf +fi +# END V-230333 + +############################################################################### +echo "Automating Rule Id V-230335" +############################################################################### +if [ ${version} == '8.0' ] || [ ${version} == '8.1' ]; then + echo " Automation intended for 8.2 and newer, '$version' detected, skipping..." +else + sed -i "s/.*fail_interval\s*=.*/fail_interval = 900/g" /etc/security/faillock.conf +fi +# END V-230335 + +############################################################################### +echo "Automating Rule Id V-230337" +############################################################################### +if [ ${version} == '8.0' ] || [ ${version} == '8.1' ]; then + echo " Automation intended for 8.2 and newer, '$version' detected, skipping..." +else + sed -i "s/^\(#\|\)[[:space:]]*unlock_time\s*=.*/unlock_time = 0/g" /etc/security/faillock.conf +fi +# END V-230337 + +############################################################################### +echo "Automating Rule Id V-230341" +############################################################################### +if [ ${version} == '8.0' ] || [ ${version} == '8.1' ]; then + echo " Automation intended for 8.2 and newer, '$version' detected, skipping..." +else + if grep -q -i silent /etc/security/faillock.conf; then + sed -i "s/.*silent.*/silent/g" /etc/security/faillock.conf + else + echo "silent" >> /etc/security/faillock.conf + fi +fi +# END V-230341 + +############################################################################### +echo "Automating Rule Id V-230343" +############################################################################### +if [ ${version} == '8.0' ] || [ ${version} == '8.1' ]; then + echo " Automation intended for 8.2 and newer, '$version' detected, skipping..." +else + if grep -q -i audit /etc/security/faillock.conf; then + sed -i "s/.*audit.*/audit/g" /etc/security/faillock.conf + else + echo "audit" >> /etc/security/faillock.conf + fi +fi +# END V-230343 + +############################################################################### +echo "Automating Rule Id V-230345" +############################################################################### +if [ ${version} == '8.0' ] || [ ${version} == '8.1' ]; then + echo " Automation intended for 8.2 and newer, '$version' detected, skipping..." +else + sed -i "s/^\(#\|\)[[:space:]]*even_deny_root.*/even_deny_root/g" /etc/security/faillock.conf +fi +# END V-230345 + +############################################################################### +echo "Automating Rule Id V-230349" +############################################################################### +echo 'if [ "$PS1" ]; then' >> /etc/profile.d/230348-customshell.sh +echo 'parent=$(ps -o ppid= -p $$)' >> /etc/profile.d/230348-customshell.sh +echo 'name=$(ps -o comm= -p $parent)' >> /etc/profile.d/230348-customshell.sh +echo 'case "$name" in (sshd|login) exec tmux ;; esac' >> /etc/profile.d/230348-customshell.sh +echo 'fi' >> /etc/profile.d/230348-customshell.sh +# END V-230349 + +############################################################################### +echo "Automating Rule Id V-230367" +############################################################################### +chage -M 60 $1 +chage -M 60 root +# END V-230367 + +############################################################################### +echo "Automating Rule Id V-230368" +############################################################################### +passwordRequired='password required' +spacing=' ' +passwordReqPwHist='pam_pwhistory.so use_authtok remember=5 retry=3' +sed -i "s/\(password.*pam_unix.so.*\)/${passwordRequired}${spacing}${passwordReqPwHist}\n\1/g" /etc/pam.d/password-auth /etc/pam.d/system-auth +# END V-230368 + +############################################################################### +echo "Automating Rule Id V-230373" +############################################################################### +useradd -D -f 35 +# END V-230373 + +############################################################################### +echo "Automating Rule Id V-230380" +############################################################################### +sed -i 's/\s*nullok\s*/ /g' /etc/pam.d/system-auth /etc/pam.d/password-auth +sed -i "s/.*PermitEmptyPasswords.*/PermitEmptyPasswords no/g" /etc/ssh/sshd_config +# END V-230380 + +############################################################################### +echo "Automating Rule Id V-230439" +############################################################################### +echo '-a always,exit -F arch=b32 -S rename,unlink,rmdir,renameat,unlinkat -F auid>=1000 -F auid!=unset -k delete' >> /etc/audit/rules.d/audit.rules +echo '-a always,exit -F arch=b64 -S rename,unlink,rmdir,renameat,unlinkat -F auid>=1000 -F auid!=unset -k delete' >> /etc/audit/rules.d/audit.rules +# END V-230439 + +############################################################################### +echo "Automating Rule Id V-230485" +############################################################################### +if ! grep -q -w 'port' /etc/chrony.conf; then + echo 'port 0' >> /etc/chrony.conf +else + sed -i 's/\(^port\|^#port\).*/port 0/g' /etc/chrony.conf +fi +# END V-230485 + +############################################################################### +echo "Automating Rule Id V-230486" +############################################################################### +if ! grep -q -w 'cmdport' /etc/chrony.conf; then + echo 'cmdport 0' >> /etc/chrony.conf +else + sed -i 's/\(^cmdport\|^#cmdport\).*/cmdport 0/g' /etc/chrony.conf +fi +# END V-230486 + +############################################################################### +echo "Automating Rule Id V-230494" +############################################################################### +echo 'install atm /bin/true' > /etc/modprobe.d/atm.conf +echo 'blacklist atm' >> /etc/modprobe.d/blacklist.conf +# END V-230494 + +############################################################################### +echo "Automating Rule Id V-230495" +############################################################################### +echo 'install can /bin/true' > /etc/modprobe.d/can.conf +echo 'blacklist can' >> /etc/modprobe.d/blacklist.conf +# END V-230495 + +############################################################################### +echo "Automating Rule Id V-230496" +############################################################################### +echo 'install sctp /bin/true' > /etc/modprobe.d/sctp.conf +echo 'blacklist sctp' >> /etc/modprobe.d/blacklist.conf +# END V-230496 + +############################################################################### +echo "Automating Rule Id V-230497" +############################################################################### +echo 'install tipc /bin/true' > /etc/modprobe.d/tipc.conf +echo 'blacklist tipc' >> /etc/modprobe.d/blacklist.conf +# END V-230497 + +############################################################################### +echo "Automating Rule Id V-230498" +############################################################################### +echo 'install cramfs /bin/true' > /etc/modprobe.d/cramfs.conf +echo 'blacklist cramfs' >> /etc/modprobe.d/blacklist.conf +# END V-230498 + +############################################################################### +echo "Automating Rule Id V-230499" +############################################################################### +echo 'install firewire-core /bin/true' > /etc/modprobe.d/firewire-core.conf +echo 'blacklist firewire-core' >> /etc/modprobe.d/blacklist.conf +# END V-230499 + +############################################################################### +echo "Automating Rule Id V-230503" +############################################################################### +echo 'install usb-storage /bin/true' > /etc/modprobe.d/usb-storage.conf +echo 'blacklist usb-storage' >> /etc/modprobe.d/blacklist.conf +# END V-230503 + +############################################################################### +echo "Automating Rule Id V-230507" +############################################################################### +echo 'install bluetooth /bin/true' > /etc/modprobe.d/bluetooth.conf +# END V-230507 + +############################################################################### +echo "Automating Rule Ids V-230508, V-230509, V-230510" +############################################################################### +echo 'tmpfs /dev/shm tmpfs defaults,nodev,nosuid,noexec 0 0' >> /etc/fstab +# END V-230508, V-230509, V-230510 + +############################################################################### +echo "Automating Rule Id V-230511, V-230512, V-230513" +############################################################################### +sed -i 's/\(\/tmp.*\)defaults.*/\1defaults,nodev,nosuid,noexec 0 0/g' /etc/fstab +# END V-230511, V-230512, V-230513 + +############################################################################### +echo "Automating Rule Id V-230546" +############################################################################### +rm -f /usr/lib/sysctl.d/10-default-yama-scope.conf +sysctl -w kernel.yama.ptrace_scope=1 +echo "kernel.yama.ptrace_scope = 1" > /etc/sysctl.d/90-azurestig-v230546.conf +# END V-230546 + +############################################################################### +echo "Automating Rule Id V-237642" +############################################################################### +echo 'Defaults !targetpw' >> /etc/sudoers.d/237642 +echo 'Defaults !rootpw' >> /etc/sudoers.d/237642 +echo 'Defaults !runaspw' >> /etc/sudoers.d/237642 +# END V-237642 + +############################################################################### +echo "Installing Ansible for STIG automation (pip3 install)..." +############################################################################### +pip3 install ansible --user + +############################################################################### +echo "Unzipping rhel8STIG-ansible.zip to ./rhel8STIG" +############################################################################### +unzip rhel8STIG-ansible.zip -d ./rhel8STIG + +############################################################################### +echo "Invoking ansible-playbook to automate STIG rules" +############################################################################### +/root/.local/bin/ansible-playbook -v -b -i /dev/null ./rhel8STIG/site.yml + + +############################################################################### +# "Automating Rule Id V-230483" 8.0 auditd.conf does not recogn. percent sign +############################################################################### +if [ ${version} == '8.0' ]; then + echo "Automating Rule Id V-230483" + sed -i 's/25%/2048/g' /etc/audit/auditd.conf +fi +# END V-230483 + +############################################################################### +echo "Automating Rule Id V-230350" +############################################################################### +sed -i 's/.*tmux.*//g' /etc/shells +echo '---------- /etc/shells content begin ----------' +cat /etc/shells +echo '---------- /etc/shells content end ----------' +# END V-230350 + +############################################################################### +echo "Automating Rule Id V-230223" +############################################################################### +fips-mode-setup --enable +# END V-230223 + +############################################################################### +echo "Restarting system to apply STIG settings..." +############################################################################### +touch ./azAutomationComplete +shutdown -r +1 2>&1