product: rhel10
full_name: Red Hat Enterprise Linux 10
type: platform

families:
  - rhel
  - rhel-like

major_version_ordinal: 10

benchmark_id: RHEL-10
benchmark_root: "../../linux_os/guide"
components_root: "../../components"

profiles_root: "./profiles"

pkg_manager: "dnf"

init_system: "systemd"

# EFI and non-EFI configs are stored in same path, see https://fedoraproject.org/wiki/Changes/UnifyGrubConfig

sshd_distributed_config: "true"
bootable_containers_supported: "true"

dconf_gdm_dir: "distro.d"

faillock_path: "/var/log/faillock"

# The fingerprints below are retrieved from https://access.redhat.com/security/team/key
pkg_release: "4ae0493b"
pkg_version: "fd431d51"
aux_pkg_release: "6229229e"
aux_pkg_version: "5a6340b3"
pqc_pkg_release: "68e6a1f3"
pqc_pkg_version: "05707a62"

release_key_fingerprint: "567E347AD0044ADE55BA8A5F199E2F91FD431D51"
auxiliary_key_fingerprint: "7E4624258C406535D56D6F135054E4A45A6340B3"
pqc_key_fingerprint: "FCD355B305707A62DA143AB6E422397E50FE8467A2A95343D246D6276AFEDF8F"

cpes_root: "../../shared/applicability"
cpes:
  - rhel10:
      name: "cpe:/o:redhat:enterprise_linux:10"
      title: "Red Hat Enterprise Linux 10"
      check_id: installed_OS_is_rhel10

# Mapping of CPE platform to package
platform_package_overrides:
  login_defs: "shadow-utils"

reference_uris:
  cis: 'https://www.cisecurity.org/benchmark/red_hat_linux/'


journald_conf_dir_path: /etc/systemd/journald.conf.d
audit_watches_style: modern
rsyslog_cafile: /etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem
