Script combine_ovals.py from SCAP Security Guide ssg: [0, 1, 80], python: 3.10.12 5.11.2 2026-01-21T21:18:05 Ubuntu 22.04 Bootable container or bootc system Alibaba Cloud Linux 2 Ubuntu 22.04 The operating system installed on the system is Alibaba Cloud Linux 2 Alibaba Cloud Linux 3 Ubuntu 22.04 The operating system installed on the system is Alibaba Cloud Linux 3 Anolis OS 8 Ubuntu 22.04 The operating system installed on the system is Anolis OS 8 Debian Linux 11 Ubuntu 22.04 The operating system installed on the system is Debian 11 Debian Linux 12 Ubuntu 22.04 The operating system installed on the system is Debian 12 Debian Linux 13 Ubuntu 22.04 The operating system installed on the system is Debian 13 Red Hat Virtualization 4 Ubuntu 22.04 The application installed on the system is Red Hat Virtualization 4. Package grub2 is installed Ubuntu 22.04 Checks if package grub2-common is installed. Package providing /etc/login.defs is installed Ubuntu 22.04 Checks if package providing /etc/login.defs and is installed. Check if the system doesn't act as an oVirt host or manager Ubuntu 22.04 Check if the system has neither ovirt-host nor ovirt-engine installed. Check if the system acts as an oVirt host or manager Ubuntu 22.04 Check if the system has ovirt-host or ovirt-engine installed WiFi interface is present Ubuntu 22.04 Checks if any wifi interface is present. Check if the scan target is a container Ubuntu 22.04 Check for presence of files characterizing container filesystems. Check if the scan target is a machine Ubuntu 22.04 Check for absence of files characterizing container filesystems. System runs on UEK kernel Ubuntu 22.04 Check if System is running on UEK kernel. Kerberos server is older than 1.17-18 Ubuntu 22.04 Check if version of Kerberos server is lesser than 1.17-18 Kerberos workstation is older than 1.17-18 Ubuntu 22.04 Check if version of Kerberos workstation is lesser than 1.17-18 Remote NFS file system mount is defined Ubuntu 22.04 At least one remote NFS file system mount is defined in /etc/fstab Test that the architecture is aarch64 Ubuntu 22.04 Check that architecture of kernel in /proc/sys/kernel is aarch64 Test for different architecture than aarch64 Ubuntu 22.04 Check that architecture of kernel in /proc/sys/kernel/osrelease is not aarch64 Test for different architecture than s390x Ubuntu 22.04 Check that architecture of kernel in /proc/sys/kernel/osrelease is not s390x Test that the architecture is ppc64le Ubuntu 22.04 Check that architecture of kernel in /proc/sys/kernel is ppc64le Test that the architecture is s390x Ubuntu 22.04 Check that architecture of kernel in /proc/sys/kernel is s390x Test that the architecture is x86_64 Ubuntu 22.04 Check that architecture of kernel in /proc/sys/kernel is x86_64 Running kernel has fips mode enabled Ubuntu 22.04 Check if sysctl crypto.fips_enabled = 1 Secure Boot status check Ubuntu 22.04 Check if System has Secure Boot enabled. SELinux status check Ubuntu 22.04 Check if System has SELinux enabled. SSSD is configured to use LDAP Ubuntu 22.04 Identification provider is not set to ad within /etc/sssd/sssd.conf Non-UEFI system boot mode check Ubuntu 22.04 Check if System boot mode is non-UEFI. UEFI system boot mode check Ubuntu 22.04 Check if system boot mode is UEFI. Ubuntu 22.04 The kernel is installed Check pam_faillock Existence in system-auth Ubuntu 22.04 Check that pam_faillock.so exists in system-auth Check pam_pwquality Existence in system-auth Ubuntu 22.04 Check that pam_pwquality.so exists in system-auth Test if auditctl is in use for audit rules Ubuntu 22.04 Test if auditctl is in use for audit rules. Test if augenrules is enabled for audit rules Ubuntu 22.04 Test if augenrules is enabled for audit rules. Record Events that Modify the System's Network Environment Ubuntu 22.04 The network environment should not be modified by anything other than administrator action. Any change to network parameters should be audited. Record Events that Modify the System's Network Environment Ubuntu 22.04 The network environment should not be modified by anything other than administrator action. Any change to network parameters should be audited. 'log_file' Not Set In /etc/audit/auditd.conf Ubuntu 22.04 Verify 'log_file' is not set in /etc/audit/auditd.conf. 'log_group' Not Set To 'root' In /etc/audit/auditd.conf Ubuntu 22.04 Verify 'log_group' is not set to 'root' in /etc/audit/auditd.conf. Verify GRUB_DISABLE_RECOVERY Set to true Ubuntu 22.04 GRUB_DISABLE_RECOVERY set to 'true' in /etc/default/grub Specify Multiple Remote chronyd NTP Servers for Time Data Ubuntu 22.04 Multiple chronyd NTP Servers for time synchronization should be specified. GRUB_CMDLINE_LINUX_DEFAULT existance check Ubuntu 22.04 Check if GRUB_CMDLINE_LINUX_DEFAULT exists in /etc/default/grub. Use $kernelopts in /boot/loader/entries/*.conf Ubuntu 22.04 Ensure that grubenv-defined kernel options are referenced in individual boot loader entries Amazon Linux 2023 Ubuntu 22.04 The operating system installed on the system is Amazon Linux 2023 AlmaLinux OS 9 Ubuntu 22.04 The operating system installed on the system is AlmaLinux OS 9 Anolis OS 23 Ubuntu 22.04 The operating system installed on the system is Anolis OS 23 CentOS Stream 10 Ubuntu 22.04 The operating system installed on the system is CentOS Stream 10 CentOS 8 Ubuntu 22.04 The operating system installed on the system is CentOS 8 CentOS Stream 9 Ubuntu 22.04 The operating system installed on the system is CentOS Stream 9 Debian Ubuntu 22.04 The operating system installed is a Debian System Installed operating system is Fedora Ubuntu 22.04 The operating system installed on the system is Fedora Kylin Server 10 Ubuntu 22.04 The operating system installed on the system is Kylin Server 10. OE Harden Ubuntu 22.04 The operating system installed is an OE Harden based System Ubuntu 22.04 Installed OS is OL Oracle Linux 10 Ubuntu 22.04 The operating system installed on the system is Oracle Linux 10 Oracle Linux 7 Ubuntu 22.04 The operating system installed on the system is Oracle Linux 7 Oracle Linux 8 Ubuntu 22.04 The operating system installed on the system is Oracle Linux 8 Oracle Linux 9 Ubuntu 22.04 The operating system installed on the system is Oracle Linux 9 OpenEmbedded Ubuntu 22.04 The operating system installed is an OpenEmbedded based system openEuler 22.03 LTS Ubuntu 22.04 The operating system installed on the system is openEuler 22.03 LTS. openSUSE Ubuntu 22.04 The operating system installed on the system is openSUSE. openSUSE Leap 15 Ubuntu 22.04 The operating system installed on the system is openSUSE Leap 15. openSUSE Leap 16 Ubuntu 22.04 The operating system installed on the system is openSUSE Leap 16. Installed operating system is part of the Unix family Ubuntu 22.04 The operating system installed on the system is part of the Unix OS family Petalinux Ubuntu 22.04 The operating system installed is a Petalinux based System Poky Ubuntu 22.04 The operating system installed is a Poky based System Red Hat Enterprise Linux CoreOS Ubuntu 22.04 The operating system installed on the system is Red Hat Enterprise Linux CoreOS release 4 Red Hat Enterprise Linux CoreOS RHEL8 Based Ubuntu 22.04 The operating system installed on the system is Red Hat Enterprise Linux CoreOS RHEL8 Based Red Hat Enterprise Linux CoreOS RHEL9 Based Ubuntu 22.04 The operating system installed on the system is Red Hat Enterprise Linux CoreOS RHEL9 Based Red Hat Enterprise Linux CoreOS RHEL10 Based Ubuntu 22.04 The operating system installed on the system is Red Hat Enterprise Linux CoreOS RHEL10 Based Ubuntu 22.04 Installed OS is RHEL Red Hat Enterprise Linux 10 Ubuntu 22.04 The operating system installed on the system is Red Hat Enterprise Linux 10 Red Hat Enterprise Linux 8 Ubuntu 22.04 The operating system installed on the system is Red Hat Enterprise Linux 8 Red Hat Enterprise Linux 8.0 Ubuntu 22.04 The operating system installed on the system is Red Hat Enterprise Linux 8.0 Red Hat Enterprise Linux 8.1 Ubuntu 22.04 The operating system installed on the system is Red Hat Enterprise Linux 8.1 Red Hat Enterprise Linux 8.2 Ubuntu 22.04 The operating system installed on the system is Red Hat Enterprise Linux 8.2 Red Hat Enterprise Linux 8.3 Ubuntu 22.04 The operating system installed on the system is Red Hat Enterprise Linux 8.3 Red Hat Enterprise Linux 8.4 Ubuntu 22.04 The operating system installed on the system is Red Hat Enterprise Linux 8.4 Red Hat Enterprise Linux 8.5 Ubuntu 22.04 The operating system installed on the system is Red Hat Enterprise Linux 8.5 Red Hat Enterprise Linux 8.6 Ubuntu 22.04 The operating system installed on the system is Red Hat Enterprise Linux 8.6 Red Hat Enterprise Linux 8.7 Ubuntu 22.04 The operating system installed on the system is Red Hat Enterprise Linux 8.7 Red Hat Enterprise Linux 8.8 Ubuntu 22.04 The operating system installed on the system is Red Hat Enterprise Linux 8.8 Red Hat Enterprise Linux 8.9 Ubuntu 22.04 The operating system installed on the system is Red Hat Enterprise Linux 8.9 Red Hat Enterprise Linux 8.10 Ubuntu 22.04 The operating system installed on the system is Red Hat Enterprise Linux 8.10 Red Hat Enterprise Linux 9 Ubuntu 22.04 The operating system installed on the system is Red Hat Enterprise Linux 9 Red Hat Virtualization 4 Ubuntu 22.04 The operating system installed on the system is Red Hat Virtualization Host 4.4+ or Red Hat Enterprise Host. SUSE Linux Enterprise 12 Ubuntu 22.04 The operating system installed on the system is SUSE Linux Enterprise 12. SUSE Linux Enterprise 15 Ubuntu 22.04 The operating system installed on the system is SUSE Linux Enterprise 15. SUSE Linux Enterprise 16 Ubuntu 22.04 The operating system installed on the system is SUSE Linux Enterprise Server 16. SUSE Linux Enterprise Micro Ubuntu 22.04 The operating system installed on the system is SUSE Linux Enterprise Micro. SUSE Linux Enterprise Micro Ubuntu 22.04 The operating system installed on the system is SUSE Linux Micro. TencentOS Server 4 Ubuntu 22.04 The operating system installed on the system is TencentOS Server 4 Ubuntu Ubuntu 22.04 The operating system installed is an Ubuntu System Ubuntu 22.04 LTS Ubuntu 22.04 The operating system installed on the system is Ubuntu 22.04 LTS Ubuntu 24.04 LTS Ubuntu 22.04 The operating system installed on the system is Ubuntu 24.04 LTS System uses zIPL Ubuntu 22.04 Checks if system uses zIPL bootloader. Check if the environment is a OSBuild pipeline Ubuntu 22.04 Check the value of environment variable container. No CD/DVD drive is configured to automount in /etc/fstab Ubuntu 22.04 Check the /etc/fstab and check if a CD/DVD drive is not configured for automount. Device Files for Removable Media Partitions Does Not Exist on the System Ubuntu 22.04 Verify if device file representing removable partitions exist on the system SSHD is not required to be installed or requirement not set Ubuntu 22.04 If SSHD is not required, we check it is not installed. If SSH requirement is unset, we are good. SSHD is required to be installed or requirement not set Ubuntu 22.04 If SSHD is required, we check it is installed. If SSH requirement is unset, we are good. It doesn't matter if sshd is installed or not Ubuntu 22.04 Test if value sshd_required is 0. OpenSSH Server is 7.4 or newer Ubuntu 22.04 Check if version of OpenSSH Server is equal or higher than 7.4 Kernel Runtime Parameter IPv6 Check Ubuntu 22.04 Disables IPv6 for all network interfaces. Test for 64-bit Architecture Ubuntu 22.04 Generic test for 64-bit architectures to be used by other tests Test for aarch_64 Architecture Ubuntu 22.04 Generic test for aarch_64 architecture to be used by other tests Test for PPC and PPCLE Architecture Ubuntu 22.04 Generic test for PPC PPC64LE architecture to be used by other tests Test for s390_64 Architecture Ubuntu 22.04 Generic test for s390_64 architecture to be used by other tests Test for x86 Architecture Ubuntu 22.04 Generic test for x86 architecture to be used by other tests Test for x86_64 Architecture Ubuntu 22.04 Generic test for x86_64 architecture to be used by other tests Ubuntu 22.04 Check /etc/tmux.conf is readable by others Check that file storing USBGuard rules exists and is not empty Ubuntu 22.04 Check that file storing USBGuard rules at /etc/usbguard/rules.conf exists and is not empty Value of 'var_accounts_user_umask' variable represented as octal number Ubuntu 22.04 Value of 'var_accounts_user_umask' variable represented as octal number Value of 'var_removable_partition' variable is set to '/dev/cdrom' Ubuntu 22.04 Verify if value of 'var_removable_partition' variable is set to '/dev/cdrom' Value of 'var_umask_for_daemons' variable represented as octal number Ubuntu 22.04 Value of 'var_umask_for_daemons' variable represented as octal number IPv6 is enabled on system Ubuntu 22.04 Mountpoint /boot/efi is active (mounted) or configured in /etc/fstab Ubuntu 22.04 Mountpoint /home is active (mounted) or configured in /etc/fstab Ubuntu 22.04 Mountpoint /opt is active (mounted) or configured in /etc/fstab Ubuntu 22.04 Mountpoint /srv is active (mounted) or configured in /etc/fstab Ubuntu 22.04 Mountpoint /tmp is active (mounted) or configured in /etc/fstab Ubuntu 22.04 Mountpoint /var/log/audit is active (mounted) or configured in /etc/fstab Ubuntu 22.04 Mountpoint /var/log is active (mounted) or configured in /etc/fstab Ubuntu 22.04 Mountpoint /var/tmp is active (mounted) or configured in /etc/fstab Ubuntu 22.04 Mountpoint /var is active (mounted) or configured in /etc/fstab Ubuntu 22.04 Operating System is ol Ubuntu 22.04 The installed operating system is Oracle Linux Operating System is ol Ubuntu 22.04 The installed operating system is Oracle Linux Operating System is rhel Ubuntu 22.04 The installed operating system is Red Hat Enterprise Linux Operating System is rhel Ubuntu 22.04 The installed operating system is Red Hat Enterprise Linux Operating System is rhel Ubuntu 22.04 The installed operating system is Red Hat Enterprise Linux Operating System is rhel Ubuntu 22.04 The installed operating system is Red Hat Enterprise Linux Operating System is sles Ubuntu 22.04 The installed operating system is SUSE Linux Enterprise Server Package aide is installed Ubuntu 22.04 The DPKG package aide should be installed. Package apparmor is installed Ubuntu 22.04 The DPKG package apparmor should be installed. Package apport is installed Ubuntu 22.04 The DPKG package apport should be installed. Package apt is installed Ubuntu 22.04 The DPKG package apt should be installed. Package auditd is installed Ubuntu 22.04 The DPKG package auditd should be installed. Package autofs is installed Ubuntu 22.04 The DPKG package autofs should be installed. Package avahi-daemon is installed Ubuntu 22.04 The DPKG package avahi-daemon should be installed. Package bash is installed Ubuntu 22.04 The DPKG package bash should be installed. Package bind is installed Ubuntu 22.04 The DPKG package bind should be installed. Package chrony is installed Ubuntu 22.04 The DPKG package chrony should be installed. Package firewalld is installed Ubuntu 22.04 The DPKG package firewalld should be installed. Package gdm3 is installed Ubuntu 22.04 The DPKG package gdm3 should be installed. Package iptables is installed Ubuntu 22.04 The DPKG package iptables should be installed. Package libpwquality1 is installed Ubuntu 22.04 The DPKG package libpwquality1 should be installed. Package libreswan is installed Ubuntu 22.04 The DPKG package libreswan should be installed. Package libuser is installed Ubuntu 22.04 The DPKG package libuser should be installed. Package logrotate is installed Ubuntu 22.04 The DPKG package logrotate should be installed. Package snmp is installed Ubuntu 22.04 The DPKG package snmp should be installed. Package network-manager is installed Ubuntu 22.04 The DPKG package network-manager should be installed. Package nftables is installed Ubuntu 22.04 The DPKG package nftables should be installed. Package libpam-ldapd is installed Ubuntu 22.04 The DPKG package libpam-ldapd should be installed. Package ntp is installed Ubuntu 22.04 The DPKG package ntp should be installed. Package openssh-server is installed Ubuntu 22.04 The DPKG package openssh-server version less than 7.0 should be installed. Package openssh-server is installed Ubuntu 22.04 The DPKG package openssh-server version less than 7.5 should be installed. Package openssh is installed Ubuntu 22.04 The DPKG package openssh should be installed. Package libpam-runtime is installed Ubuntu 22.04 The DPKG package libpam-runtime should be installed. Package pam_apparmor is installed Ubuntu 22.04 The DPKG package pam_apparmor should be installed. Package polkit is installed Ubuntu 22.04 The DPKG package polkit should be installed. Package postfix is installed Ubuntu 22.04 The DPKG package postfix should be installed. Package rootfiles is installed Ubuntu 22.04 The DPKG package rootfiles should be installed. Package rsh-server is installed Ubuntu 22.04 The DPKG package rsh-server should be installed. Package rsyslog is installed Ubuntu 22.04 The DPKG package rsyslog should be installed. Package login is installed Ubuntu 22.04 The DPKG package login should be installed. Package net-snmp is installed Ubuntu 22.04 The DPKG package net-snmp should be installed. Package squid is installed Ubuntu 22.04 The DPKG package squid should be installed. Package sssd is installed Ubuntu 22.04 The DPKG package sssd should be installed. Package sudo is installed Ubuntu 22.04 The DPKG package sudo should be installed. Package systemd-journal-remote is installed Ubuntu 22.04 The DPKG package systemd-journal-remote should be installed. Package systemd-timesyncd is installed Ubuntu 22.04 The DPKG package systemd-timesyncd should be installed. Package systemd is installed Ubuntu 22.04 The DPKG package systemd should be installed. Package telnet-server is installed Ubuntu 22.04 The DPKG package telnet-server should be installed. Package tftp-server is installed Ubuntu 22.04 The DPKG package tftp-server should be installed. Package tmux is installed Ubuntu 22.04 The DPKG package tmux should be installed. Package ufw is installed Ubuntu 22.04 The DPKG package ufw should be installed. Package usbguard is installed Ubuntu 22.04 The DPKG package usbguard should be installed. The firewalld is disabled on the system Ubuntu 22.04 The firewalld service should be disabled. The iptables is disabled on the system Ubuntu 22.04 The iptables service should be disabled. The nftables is disabled on the system Ubuntu 22.04 The nftables service should be disabled. The rsyslog is disabled on the system Ubuntu 22.04 The rsyslog service should be disabled. The ufw is disabled on the system Ubuntu 22.04 The ufw service should be disabled. kernel rpm-ostree bootc openshift-kubelet /run/ostree-booted /ostree alinux-release alinux-release anolis-release /etc/debian_version ^11.[0-9]+$ 1 /etc/debian_version ^12.[0-9]+$ 1 /etc/debian_version ^13.[0-9]+$ 1 rhvm-appliance grub2-common /sys/firmware/opal login ovirt-host ovirt-engine /proc/net/wireless /.dockerenv /run/.containerenv krb5-server krb5-workstation /etc/fstab ^\s*\[?[\.\w:-]+\]?[:=][/\w-]+\s+[/\w\\-]+\s+nfs[4]?\s+(.*)$ 1 ^/proc/sys/kernel/(osrelease|arch) ^.*\.aarch64$|^aarch64$ 1 ^/proc/sys/kernel/(osrelease|arch) ^.*\.ppc64le$|^ppc64le$ 1 ^/proc/sys/kernel/(osrelease|arch) ^.*\.s390x$|^s390x$ 1 ^/proc/sys/kernel/(osrelease|arch) ^.*\.x86_64$|^x86_64$ 1 crypto.fips_enabled ^/sys/firmware/efi/efivars/SecureBoot-.* SHA-256 /etc/selinux/config ^SELINUX=(.*)$ 1 /sys/fs/selinux /etc/sssd/sssd.conf ^[\s]*\[domain\/[^]]*]([^\n\[\]]*\n+)+?[\s]*id_provider[ \t]*=[ \t]*((?i)ldap)[ \t]*$ 1 /sys/firmware/efi linux-base /etc/pam.d/system-auth ^\s*password\s+(?:(?:required)|(?:requisite))\s+pam_faillock\.so.*$ 1 ^\s*password\s+(?:(?:required)|(?:requisite))\s+pam_pwquality\.so.*$ 1 /usr/lib/systemd/system/auditd.service ^ExecStartPost=\-\/sbin\/auditctl.*$ 1 /usr/lib/systemd/system/auditd.service ^(ExecStartPost=\-\/sbin\/augenrules.*$|Requires=augenrules.service) 1 ^/etc/audit/rules\.d/.*\.rules$ ^[\s]*-a[\s]+always,exit[\s]+(?:.*-F[\s]+arch=b32[\s]+)(?:.*(-S[\s]+setdomainname[\s]+|([\s]+|[,])setdomainname([\s]+|[,]))).*(-k[\s]+|-F[\s]+key=)[\S]+[\s]*$ 1 ^/etc/audit/rules\.d/.*\.rules$ ^[\s]*-a[\s]+always,exit[\s]+(?:.*-F[\s]+arch=b64[\s]+)(?:.*(-S[\s]+setdomainname[\s]+|([\s]+|[,])setdomainname([\s]+|[,]))).*(-k[\s]+|-F[\s]+key=)[\S]+[\s]*$ 1 /etc/audit/audit.rules ^[\s]*-a[\s]+always,exit[\s]+(?:.*-F[\s]+arch=b32[\s]+)(?:.*(-S[\s]+setdomainname[\s]+|([\s]+|[,])setdomainname([\s]+|[,]))).*(-k[\s]+|-F[\s]+key=)[\S]+[\s]*$ 1 /etc/audit/audit.rules ^[\s]*-a[\s]+always,exit[\s]+(?:.*-F[\s]+arch=b64[\s]+)(?:.*(-S[\s]+setdomainname[\s]+|([\s]+|[,])setdomainname([\s]+|[,]))).*(-k[\s]+|-F[\s]+key=)[\S]+[\s]*$ 1 ^/etc/audit/rules\.d/.*\.rules$ ^[\s]*-a[\s]+always,exit[\s]+(?:.*-F[\s]+arch=b32[\s]+)(?:.*(-S[\s]+sethostname[\s]+|([\s]+|[,])sethostname([\s]+|[,]))).*(-k[\s]+|-F[\s]+key=)[\S]+[\s]*$ 1 ^/etc/audit/rules\.d/.*\.rules$ ^[\s]*-a[\s]+always,exit[\s]+(?:.*-F[\s]+arch=b64[\s]+)(?:.*(-S[\s]+sethostname[\s]+|([\s]+|[,])sethostname([\s]+|[,]))).*(-k[\s]+|-F[\s]+key=)[\S]+[\s]*$ 1 /etc/audit/audit.rules ^[\s]*-a[\s]+always,exit[\s]+(?:.*-F[\s]+arch=b32[\s]+)(?:.*(-S[\s]+sethostname[\s]+|([\s]+|[,])sethostname([\s]+|[,]))).*(-k[\s]+|-F[\s]+key=)[\S]+[\s]*$ 1 /etc/audit/audit.rules ^[\s]*-a[\s]+always,exit[\s]+(?:.*-F[\s]+arch=b64[\s]+)(?:.*(-S[\s]+sethostname[\s]+|([\s]+|[,])sethostname([\s]+|[,]))).*(-k[\s]+|-F[\s]+key=)[\S]+[\s]*$ 1 /etc/audit/auditd.conf ^(log_file\s*=\s*.*)$ 1 /etc/audit/auditd.conf ^[ ]*log_group[ ]+=[ ]+root[ ]*$ 1 /etc/audit/auditd.conf ^[ ]*log_group[ ]+=.*$ 1 ^/etc/default/grub(\.d/[^/]+\.cfg)?$ ^\s*GRUB_DISABLE_RECOVERY=(.*)$ 1 ^/etc/chrony\.(conf|d/.+\.conf)$ ^([\s]*server[\s]+.+$){2,}$ 1 /etc/default/grub ^\s*GRUB_CMDLINE_LINUX_DEFAULT=.*$ 1 /boot/loader/entries/ ^.*\.conf$ ^options(?:\s+.*)?\s+\$kernelopts\b.*$ 1 /etc/os-release ^ID=\"(\w+)\"$ 1 /etc/os-release ^VERSION_ID=\"(\w+)\"$ 1 /etc/almalinux-release /etc/almalinux-release ^AlmaLinux release 9.[0-9]+ .*$ 1 anolis-release /etc/os-release ^ID="(\w+)"$ 1 /etc/os-release ^VERSION_ID="(\d+)"$ 1 /etc/os-release ^ID="(\w+)"$ 1 /etc/os-release ^VERSION_ID="(\d)"$ 1 /etc/os-release ^ID="(\w+)"$ 1 /etc/os-release ^VERSION_ID="(\d)"$ 1 /etc/debian_version fedora-release.* /etc/system-release-cpe ^cpe:\/o:fedoraproject:fedora:[\d]+$ 1 kylin-release /etc/os-release /etc/os-release ^ID=harden$ 1 /etc/os-release ^ID=["']?(\w+)["']?$ 1 oraclelinux-release oraclelinux-release oraclelinux-release oraclelinux-release /etc/os-release /etc/os-release ^ID=nodistro$ 1 openEuler-release openSUSE-release openSUSE-release Leap-release /etc/os-release /etc/os-release ^ID=petalinux$ 1 /etc/os-release /etc/os-release ^ID=poky$ 1 /etc/os-release ^ID="(\w+)"$ 1 /etc/os-release ^VARIANT_ID=(\S+)$ 1 /etc/os-release ^VERSION_ID="(\d+\.\d+)"$ 1 /etc/os-release ^VERSION_ID="(\d+\.\d+)"$ 1 /etc/os-release ^OPENSHIFT_VERSION="(\d)\.\d+"$ 1 /etc/os-release ^RHEL_VERSION="?(\d+\.?\d*)"?$ 1 /etc/os-release ^ID="(\w+)"$ 1 /etc/os-release ^RHEL_VERSION="?(\d+\.?\d*)"?$ 1 /etc/os-release ^ID=["']?(\w+)["']?$ 1 redhat-release /etc/redhat-release ^Red Hat Enterprise Linux release (\d)\.\d+$ 1 redhat-release redhat-release redhat-release redhat-release redhat-release redhat-release redhat-release redhat-release redhat-release redhat-release redhat-release redhat-release /etc/redhat-release ^Red Hat Enterprise Linux release (\d)\.\d+$ 1 redhat-release /etc/redhat-release ^Red Hat Enterprise Linux release (\d)\.\d+$ 1 redhat-release-virtualization-host sled-release sles-release SLES_SAP-release sled-release sles-release SLES_SAP-release SUSE-Manager-Server-release SLE_HPC-release SLES-release SLES_SAP-release sle-ha-release SUSE-MicroOS-release SLE-Micro-release SL-Micro-release tencentos-release /etc/lsb-release /etc/lsb-release ^DISTRIB_ID=Ubuntu$ 1 /etc/lsb-release ^DISTRIB_CODENAME=jammy$ 1 /etc/lsb-release ^DISTRIB_CODENAME=noble$ 1 s390utils-base container /etc/fstab 1 sshd_required sshd_required sshd_required openssh-server /etc/tmux.conf ^/etc/usbguard/(rules|rules\.d/.*)\.conf$ ^.*\S+.*$ 1 var_accounts_user_umask_umask_as_number var_removable_partition var_umask_for_daemons_umask_as_number /etc/default/grub ^\s*GRUB_CMDLINE_LINUX=".*ipv6\.disable=(\d).*$ 1 /boot/efi /etc/fstab ^[\s]*[\S]+[\s]+/boot/efi[\s]+[\S]+[\s]+([\S]+) 1 /home /etc/fstab ^[\s]*[\S]+[\s]+/home[\s]+[\S]+[\s]+([\S]+) 1 /opt /etc/fstab ^[\s]*[\S]+[\s]+/opt[\s]+[\S]+[\s]+([\S]+) 1 /srv /etc/fstab ^[\s]*[\S]+[\s]+/srv[\s]+[\S]+[\s]+([\S]+) 1 /tmp /etc/fstab ^[\s]*[\S]+[\s]+/tmp[\s]+[\S]+[\s]+([\S]+) 1 /var/log/audit /etc/fstab ^[\s]*[\S]+[\s]+/var/log/audit[\s]+[\S]+[\s]+([\S]+) 1 /var/log /etc/fstab ^[\s]*[\S]+[\s]+/var/log[\s]+[\S]+[\s]+([\S]+) 1 /var/tmp /etc/fstab ^[\s]*[\S]+[\s]+/var/tmp[\s]+[\S]+[\s]+([\S]+) 1 /var /etc/fstab ^[\s]*[\S]+[\s]+/var[\s]+[\S]+[\s]+([\S]+) 1 /etc/os-release ^ID=["']?(\w+)["']?$ 1 /etc/os-release ^VERSION_ID=["']?([\w.]+)["']?$ 1 /etc/os-release ^ID=["']?(\w+)["']?$ 1 /etc/os-release ^VERSION_ID=["']?([\w.]+)["']?$ 1 /etc/os-release ^ID=["']?(\w+)["']?$ 1 /etc/os-release ^VERSION_ID=["']?([\w.]+)["']?$ 1 /etc/os-release ^ID=["']?(\w+)["']?$ 1 /etc/os-release ^VERSION_ID=["']?([\w.]+)["']?$ 1 /etc/os-release ^ID=["']?(\w+)["']?$ 1 /etc/os-release ^VERSION_ID=["']?([\w.]+)["']?$ 1 /etc/os-release ^ID=["']?(\w+)["']?$ 1 /etc/os-release ^VERSION_ID=["']?([\w.]+)["']?$ 1 /etc/os-release ^ID=["']?(\w+)["']?$ 1 /etc/os-release ^VERSION_ID=["']?([\w.]+)["']?$ 1 aide apparmor apport apt auditd autofs avahi-daemon bash bind chrony firewalld gdm3 iptables libpwquality1 libreswan libuser logrotate snmp network-manager nftables libpam-ldapd ntp openssh-server openssh-server openssh libpam-runtime pam_apparmor polkit postfix rootfiles rsh-server rsyslog login net-snmp squid sssd sudo systemd-journal-remote systemd-timesyncd systemd telnet-server tftp-server tmux ufw usbguard ^firewalld\.(service|socket)$ ActiveState ^firewalld\.(service|socket)$ LoadState firewalld ^iptables\.(service|socket)$ ActiveState ^iptables\.(service|socket)$ LoadState iptables ^nftables\.(service|socket)$ ActiveState ^nftables\.(service|socket)$ LoadState nftables ^rsyslog\.(service|socket)$ ActiveState ^rsyslog\.(service|socket)$ LoadState rsyslog ^ufw\.(service|socket)$ ActiveState ^ufw\.(service|socket)$ LoadState ufw /ostree symbolic link ^2.*$ ^3.*$ ^8.*$ ^4.*$ ^.*uek.* 0:1.17-18 0:1.17-18 1 b401b4bd7e4f321db95fcae00d274ab8aa2cf1852d1495c382356d981f63d771 ^(enforcing|permissive)$ ^(true|"true")$ amzn 2023 ^23.*$ centos 10 centos 8 centos 9 ^10.*$ ol ^10.*$ ^7.*$ ^8.*$ ^9.*$ ^22\.03.*$ openSUSE-release ^15.*$ ^16.*$ unix rhcos coreos ^9\. ^10\. 4 ^8\. rhel ^9\. rhel unix ^10.*$ 10 unix ^8\.\d{1,2}$ ^8.0*$ ^8.1*$ ^8.2*$ ^8.3*$ ^8.4*$ ^8.5*$ ^8.6*$ ^8.7*$ ^8.8*$ ^8.9*$ ^8.10*$ 8 unix ^9.*$ 9 0:4.4 unix ^12.*$ ^12.*$ ^12.*$ unix ^15.*$ ^15.*$ ^15.*$ ^4.*$ ^15.*$ unix ^16.*$ ^16.*$ ^16.*$ unix ^5.*$ ^5.*$ unix ^6.*$ ^4.*$ bwrap-osbuild 1 2 0 0:7.4 aarch64 ppc64 ppc64le s390x i686 x86_64 true /dev/cdrom 0 ol 8.7 ol 9.0 rhel 8.7 rhel 9.0 rhel 8.4 rhel 9.0 sles 15 0:7.0-0 0:7.5-0 inactive|failed masked not-found inactive|failed masked not-found inactive|failed masked not-found inactive|failed masked not-found inactive|failed masked not-found /etc/pam.d/common-password /dev/cdrom /dev/dvd /dev/scd0 /dev/sr0 64 8 64 8