accounts_maximum_age_login_defs
accounts_minimum_age_login_defs
accounts_password_minlen_login_defs
accounts_password_pam_dcredit
accounts_password_pam_lcredit
accounts_password_pam_minlen
accounts_password_pam_ocredit
accounts_password_pam_pwhistory_remember_password_auth
accounts_password_pam_pwhistory_remember_system_auth
accounts_password_pam_retry
accounts_password_pam_ucredit
accounts_password_set_max_life_existing
accounts_password_set_min_life_existing
accounts_password_set_warn_age_existing
accounts_password_warn_age_login_defs
audit_rules_dac_modification_chmod
audit_rules_dac_modification_chown
audit_rules_dac_modification_fchmod
audit_rules_dac_modification_fchmodat
audit_rules_dac_modification_fchown
audit_rules_dac_modification_fchownat
audit_rules_dac_modification_fremovexattr
audit_rules_dac_modification_fsetxattr
audit_rules_dac_modification_lchown
audit_rules_dac_modification_lremovexattr
audit_rules_dac_modification_lsetxattr
audit_rules_dac_modification_removexattr
audit_rules_dac_modification_setxattr
audit_rules_login_events_faillock
audit_rules_login_events_lastlog
audit_rules_session_events_btmp
audit_rules_session_events_utmp
audit_rules_session_events_wtmp
audit_rules_sysadmin_actions
audit_rules_usergroup_modification_group
audit_rules_usergroup_modification_gshadow
audit_rules_usergroup_modification_opasswd
audit_rules_usergroup_modification_passwd
audit_rules_usergroup_modification_shadow
audit_sudo_log_events
auditd_data_retention_max_log_file_action
banner_etc_issue
banner_etc_issue_net
banner_etc_motd
configure_crypto_policy
dconf_db_up_to_date
dconf_gnome_banner_enabled
dconf_gnome_login_banner_text
enable_authselect
file_groupowner_grub2_cfg
file_groupowner_user_cfg
file_owner_grub2_cfg
file_owner_user_cfg
file_permissions_grub2_cfg
file_permissions_user_cfg
firewalld_loopback_traffic_restricted
firewalld_loopback_traffic_trusted
grub2_password
login_banner_text=cis_banners
mount_option_boot_efi_nosuid
mount_option_boot_nodev
mount_option_boot_noexec
mount_option_boot_nosuid
package_firewalld_installed
package_usbguard_installed
remote_login_banner_text=cis_banners
service_firewalld_enabled
service_nftables_disabled
service_usbguard_enabled
set_firewalld_default_zone
set_password_hashing_algorithm_logindefs
set_password_hashing_algorithm_passwordauth
set_password_hashing_algorithm_systemauth
sshd_enable_warning_banner_net
sshd_idle_timeout_value=15_minutes
sshd_limit_user_access
sshd_set_idle_timeout
sshd_set_keepalive
sudo_require_authentication
sudo_require_reauthentication
sysctl_fs_suid_dumpable
sysctl_net_ipv4_conf_all_accept_redirects
sysctl_net_ipv4_conf_all_accept_source_route
sysctl_net_ipv4_conf_all_log_martians
sysctl_net_ipv4_conf_all_rp_filter
sysctl_net_ipv4_conf_all_secure_redirects
sysctl_net_ipv4_conf_all_send_redirects
sysctl_net_ipv4_conf_default_accept_redirects
sysctl_net_ipv4_conf_default_accept_source_route
sysctl_net_ipv4_conf_default_log_martians
sysctl_net_ipv4_conf_default_rp_filter
sysctl_net_ipv4_conf_default_secure_redirects
sysctl_net_ipv4_conf_default_send_redirects
sysctl_net_ipv4_icmp_echo_ignore_broadcasts
sysctl_net_ipv4_icmp_ignore_bogus_error_responses
sysctl_net_ipv4_ip_forward
sysctl_net_ipv4_tcp_syncookies
sysctl_net_ipv6_conf_all_accept_ra
sysctl_net_ipv6_conf_all_accept_redirects
sysctl_net_ipv6_conf_all_accept_source_route
sysctl_net_ipv6_conf_default_accept_ra
sysctl_net_ipv6_conf_default_accept_redirects
sysctl_net_ipv6_conf_default_accept_source_route
usbguard_generate_policy
var_accounts_maximum_age_login_defs=45
var_accounts_minimum_age_login_defs=2
var_accounts_password_minlen_login_defs=12
var_accounts_password_warn_age_login_defs=10
var_auditd_max_log_file_action=rotate
var_authselect_profile=sssd
var_password_hashing_algorithm=SHA512
var_password_hashing_algorithm_pam=sha512
var_password_pam_minlen=12
var_password_pam_remember=20
var_sshd_set_keepalive=1
var_system_crypto_policy=default_policy