{"description": "Prefer installation of 64-bit operating systems when the CPU supports it.", "rationale": "Use of a 64-bit operating system offers a few advantages, like a larger address space range for\nAddress Space Layout Randomization (ASLR) and systematic presence of No eXecute and Execute Disable (NX/XD) protection bits.", "severity": "medium", "references": {"anssi": ["R1"]}, "control_references": {"anssi": ["R1"]}, "components": [], "identifiers": {}, "ocil_clause": "the installed operating system is 32-bit but the CPU supports operation in 64-bit", "ocil": "To check if the installed Operating System is 64-bit, run the following command:\n<pre>$ uname -m</pre>\nThe output should be one of the following: <tt>x86_64</tt>, <tt>aarch64</tt>, <tt>ppc64le</tt> or <tt>s390x</tt>.\nIf the output is <tt>i686</tt> or <tt>i386</tt> the operating system is 32-bit.\nCheck if the installed CPU supports 64-bit operating systems by running the following command:\n<pre>$ lscpu | grep \"CPU op-mode\"</pre>\nIf the output contains <tt>64bit</tt>, the CPU supports 64-bit operating systems.", "oval_external_content": null, "fixtext": "", "checktext": "", "vuldiscussion": "", "srg_requirement": "", "warnings": [{"general": "There is no remediation besides installing a 64-bit operating system."}], "conflicts": [], "requires": [], "policy_specific_content": {}, "platform": null, "platforms": [], "sce_metadata": {}, "inherited_platforms": [], "cpe_platform_names": [], "inherited_cpe_platform_names": [], "bash_conditional": null, "fixes": {}, "title": "Prefer to use a 64-bit Operating System when supported", "definition_location": "/aptdata/openscap/scap-security-guide/linux_os/guide/system/software/prefer_64bit_os/rule.yml", "template": null}