<Benchmark xmlns="http://checklists.nist.gov/xccdf/1.1" xmlns:cdf="http://checklists.nist.gov/xccdf/1.1" xmlns:cpe="http://cpe.mitre.org/XMLSchema/cpe/1.0" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:dsig="http://www.w3.org/2000/09/xmldsig#" xmlns:xhtml="http://www.w3.org/1999/xhtml" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" id="RHEL7CentOS7OracleLinux7PCIBenchmark" resolved="false" xml:lang="en">
  <status date="2017-06-30">accepted</status>
  <title xml:lang="en">Redhat Enterprise, CentOS and Oracle Linux 7 PCI Benchmark</title>
  <description xml:lang="en">This is the PCI Benchmark based upon the PCI DSS 3.2 compliance guidance. It is released for the operating systems Redhat Enterprise Linux 7, CentOS Linux 7 and Oracle Linux 7.
    To obtain the latest version of this guide, please visit https://www.pcisecuritystandards.org/document_library</description>
  <reference>
    <dc:title>Redhat Enterprise Linux 7, CentOS Linux 7 and Oracle Linux 7 PCI Benchmark</dc:title>
    <dc:creator>Benchmark Editor</dc:creator>
    <dc:publisher>McAfee</dc:publisher>
    <dc:identifier>http://csrc.nist.gov/</dc:identifier>
    <dc:source>compliance.mcafee.com</dc:source>
  </reference>
  <platform idref="cpe:/o:redhat:enterprise_linux:7" />
  <platform idref="cpe:/o:centos:centos:7" />
  <platform idref="cpe:/o:oracle:linux:7" />
  <version>3.2</version>
  <model system="urn:xcscoring:default" />
  <model system="urn:xcscoring:flat" />
  <Profile id="RedhatEnterpriseLinux7PCIBenchmark" abstract="false">
    <title xml:lang="en">Redhat Enterprise Linux 7 PCI Benchmark</title>
    <description xml:lang="en" />
    <platform idref="cpe:/o:redhat:enterprise_linux:7" />
    <select idref="AcceptRemoteRsyslogMessagesOnlyOnDesignatedLogHosts" selected="true" />
    <select idref="AddNodevOptionTo_Dev_shmPartition" selected="true" />
    <select idref="AddNodevOptionTo_Home" selected="true" />
    <select idref="AddNodevOptionToRemovableMediaPartitions" selected="true" />
    <select idref="AddNosuidOptionToRemovableMediaPartitions" selected="true" />
    <select idref="CheckForDuplicateGIDs" selected="true" />
    <select idref="CheckForDuplicateGroupNames" selected="true" />
    <select idref="CheckForDuplicateUIDs" selected="true" />
    <select idref="CheckForDuplicateUserNames" selected="true" />
    <select idref="CheckForPresenceOfUser.netrcFiles" selected="true" />
    <select idref="CheckForUnconfinedDaemons" selected="true" />
    <select idref="CheckPermissionsOnUserHomeDirectories" selected="true" />
    <select idref="CheckThatReservedUIDsAreAssignedToSystemAccounts" selected="true" />
    <select idref="CheckThatUsersAreAssignedValidHomeDirectories" selected="true" />
    <select idref="CheckUserDotFilePermissions" selected="true" />
    <select idref="CollectChangesToSystemAdministrationScope" selected="true" />
    <select idref="CollectDiscretionaryAccessControlPermissionModificationEvents" selected="true" />
    <select idref="CollectFileDeletionEventsByUser" selected="true" />
    <select idref="CollectKernelModuleLoadingAndUnloading" selected="true" />
    <select idref="CollectLoginAndLogoutEvents" selected="true" />
    <select idref="CollectSessionInitiationInformation" selected="true" />
    <select idref="CollectSuccessfulFileSystemMounts" selected="true" />
    <select idref="CollectSystemAdministratorActions_Sudolog_" selected="true" />
    <select idref="CollectUnsuccessfulUnauthorizedAccessAttemptsToFiles" selected="true" />
    <select idref="Configuraration_Read_onlyOptionForAllNFSExports" selected="true" />
    <select idref="Configuration_LimitRootLoginToTheLocalConsole" selected="true" />
    <select idref="Configuration-MesgNIsSetAsDefaultForAllUsers" selected="true" />
    <select idref="Configuration_RestrictLockdServiceToUseAStaticTcpPort" selected="true" />
    <select idref="Configuration_RestrictLockdServiceToUseAStaticUdpPort" selected="true" />
    <select idref="Configuration_RootAccountShouldBeDisabled" selected="true" />
    <select idref="Configuration_SendmailExpnCommandShouldBeDisabled" selected="true" />
    <select idref="Configuration_SendmailVrfyCommandShouldBeDisabled" selected="true" />
    <select idref="ConfigureAuditLogStorageSize" selected="true" />
    <select idref="ConfigureRsyslogToSendLogsToARemoteLogHost" selected="true" />
    <select idref="Create_Etc_hosts.allow" selected="true" />
    <select idref="Create_Etc_hosts.deny" selected="true" />
    <select idref="CreateThe_Etc_vsftpd_ftpusersFile" selected="true" />
    <select idref="DisableAutofsUnlessAutofsIsAbsolutelyNecessary" selected="true" />
    <select idref="DisableAvahiServerUnlessAvahiServerIsAbsolutelyNecessary" selected="true" />
    <select idref="DisableBindUnlessBindIsAbsolutelyNecessary" selected="true" />
    <select idref="DisableBluetoothUnlessBluetoothIsAbsolutelyNecessary" selected="true" />
    <select idref="DisableChargen_dgramUnlessChargen_dgramIsAbsolutelyNecessary" selected="true" />
    <select idref="DisableChargen_streamUnlessChargen_streamIsAbsolutelyNecessary" selected="true" />
    <select idref="DisableCpupowerUnlessCpupowerIsAbsolutelyNecessary" selected="true" />
    <select idref="DisableCupsUnlessCupsIsAbsolutelyNecessary" selected="true" />
    <select idref="DisableDaytime_dgramUnlessDaytime_dgramIsAbsolutelyNecessary" selected="true" />
    <select idref="DisableDaytime_streamUnlessDaytime_streamIsAbsolutelyNecessary" selected="true" />
    <select idref="DisableDCCP" selected="true" />
    <select idref="DisableDhcpdUnlessDhcpdIsAbsolutelyNecessary" selected="true" />
    <select idref="DisableDiscardTcpUnlessDiscardTcpIsAbsolutelyNecessary" selected="true" />
    <select idref="DisableDiscard_udpUnlessDiscard_udpIsAbsolutelyNecessary" selected="true" />
    <select idref="DisableDovecotUnlessDovecotIsAbsolutelyNecessary" selected="true" />
    <select idref="DisableEcho_dgramUnlessEcho_dgramIsAbsolutelyNecessary" selected="true" />
    <select idref="DisableEcho_streamUnlessEcho_streamIsAbsolutelyNecessary" selected="true" />
    <select idref="DisableFirstbootUnlessFirstbootIsAbsolutelyNecessary" selected="true" />
    <select idref="DisableFtpUnlessFtpIsAbsolutelyNecessary" selected="true" />
    <select idref="DisableGdmUnlessGdmIsAbsolutelyNecessary" selected="true" />
    <select idref="DisableIPForwarding" selected="true" />
    <select idref="DisableIp6tablesUnlessIp6tablesIsAbsolutelyNecessary" selected="true" />
    <select idref="DisableIptablesUnlessIptablesIsAbsolutelyNecessary" selected="true" />
    <select idref="DisableIPv6RouterAdvertisements_Net.ipv6.conf.default.accept_ra" selected="true" />
    <select idref="DisableIPv6RouterAdvertisements_net.ipv6.conf.all.accept_ra" selected="true" />
    <select idref="DisableIrqbalanceUnlessIrqbalanceIsAbsolutelyNecessary" selected="true" />
    <select idref="DisableKadminUnlessKadminIsAbsolutelyNecessary" selected="true" />
    <select idref="DisableKdumpUnlessKdumpIsAbsolutelyNecessary" selected="true" />
    <select idref="DisableKpropUnlessKpropIsAbsolutelyNecessary" selected="true" />
    <select idref="DisableKrb5kdcUnlessKrb5kdcIsAbsolutelyNecessary" selected="true" />
    <select idref="DisableLockdUnlessLockdIsAbsolutelyNecessary" selected="true" />
    <select idref="DisableLogonPromptsOnSerialPorts" selected="true" />
    <select idref="DisableMdmonitorUnlessMdmonitorIsAbsolutelyNecessary" selected="true" />
    <select idref="DisableMicrocodeUnlessMicrocodeIsAbsolutelyNecessary" selected="true" />
    <select idref="DisableMountdUnlessMountdIsAbsolutelyNecessary" selected="true" />
    <select idref="DisableMountingOfCramfsFilesystems" selected="true" />
    <select idref="DisableMountingOfFreevxfsFilesystems" selected="true" />
    <select idref="DisableMountingOfHfsFilesystems" selected="true" />
    <select idref="DisableMountingOfHfsplusFilesystems" selected="true" />
    <select idref="DisableMountingOfJffs2Filesystems" selected="true" />
    <select idref="DisableMountingOfSquashfsFilesystems" selected="true" />
    <select idref="DisableMountingOfUdfFilesystems" selected="true" />
    <select idref="DisableMysqldUnlessMysqldIsAbsolutelyNecessary" selected="true" />
    <select idref="DisableNamedUnlessNamedIsAbsolutelyNecessary" selected="true" />
    <select idref="DisableNetworkUnlessNetworkIsAbsolutelyNecessary" selected="true" />
    <select idref="DisableNfsUnlessNfsServiceIsAbsolutelyNecessary" selected="true" />
    <select idref="DisableNfs_serverUnlessNfs_serverIsAbsolutelyNecessary" selected="true" />
    <select idref="DisableNfslockUnlessNfslockIsAbsolutelyNecessary" selected="true" />
    <select idref="DisableNtpdUnlessNtpdIsAbsolutelyNecessary" selected="true" />
    <select idref="DisablePcscdUnlessPcscdIsAbsolutelyNecessary" selected="true" />
    <select idref="DisablePopUnlessPopIsAbsolutelyNecessary" selected="true" />
    <select idref="DisableRDS" selected="true" />
    <select idref="DisableRestorecondUnlessRestorecondIsAbsolutelyNecessary" selected="true" />
    <select idref="DisableRhnsdUnlessRhnsdIsAbsolutelyNecessary" selected="true" />
    <select idref="DisableRpcbindUnlessRpcbindIsAbsolutelyNecessary" selected="true" />
    <select idref="DisableRpcgssdUnlessRpcgssdIsAbsolutelyNecessary" selected="true" />
    <select idref="DisableRpcidmapdUnlessRpcidmapdIsAbsolutelyNecessary" selected="true" />
    <select idref="DisableRpcsvcgssdUnlessRpcsvcgssdIsAbsolutelyNecessary" selected="true" />
    <select idref="DisableRquotadUnlessRquotadIsAbsolutelyNecessary" selected="true" />
    <select idref="DisableRshUnlessRshIsAbsolutelyNecessary" selected="true" />
    <select idref="DisableRstatdUnlessRstatdIsAbsolutelyNecessary" selected="true" />
    <select idref="DisableRsyncdUnlessRsyncdIsAbsolutelyNecessary" selected="true" />
    <select idref="DisableRsyslogUnlessRsyslogIsAbsolutelyNecessary" selected="true" />
    <select idref="DisableRusersdUnlessRusersdIsAbsolutelyNecessary" selected="true" />
    <select idref="DisableSCTP" selected="true" />
    <select idref="DisableSmartdUnlessSmartdIsAbsolutelyNecessary" selected="true" />
    <select idref="DisableSmbUnlessSmbIsAbsolutelyNecessary" selected="true" />
    <select idref="DisableSnmpdUnlessSnmpdIsAbsolutelyNecessary" selected="true" />
    <select idref="DisableSourceRoutedPacketAcceptance_Net.ipv4.conf.all.accept_source_route" selected="true" />
    <select idref="DisableSourceRoutedPacketAcceptance_Net.ipv4.conf.default.accept_source_route" selected="true" />
    <select idref="DisableSSHRootLogin" selected="true" />
    <select idref="DisableSSHX11Forwarding" selected="true" />
    <select idref="DisableStatdUnlessStatdIsAbsolutelyNecessary" selected="true" />
    <select idref="DisableSystemAccounts" selected="true" />
    <select idref="DisableSystemOnAuditLogFull" selected="true" />
    <select idref="DisableTcpmux-serverUnlessTcpmux-serverIsAbsolutelyNecessary" selected="true" />
    <select idref="DisableTelnetUnlessRquotadIsAbsolutelyNecessary" selected="true" />
    <select idref="DisableTftpUnlessTftpIsAbsolutelyNecessary" selected="true" />
    <select idref="DisableTIPC" selected="true" />
    <select idref="DisableUSBstoragedevices" selected="true" />
    <select idref="DisableYpbindUnlessYpbindIsAbsolutelyNecessary" selected="true" />
    <select idref="DisableYppasswddUnlessYppasswddIsAbsolutelyNecessary" selected="true" />
    <select idref="DisableYpservUnlessYpservIsAbsolutelyNecessary" selected="true" />
    <select idref="DisableYpxfrdUnlessYpxfrdIsAbsolutelyNecessary" selected="true" />
    <select idref="DisableYum_cronUnlessYum_cronIsAbsolutelyNecessary" selected="true" />
    <select idref="DoNotAllowUsersToSetEnvironmentOptions" selected="true" />
    <select idref="EnableAnacronDaemon" selected="true" />
    <select idref="EnableAuditdService" selected="true" />
    <select idref="EnableAuditingForProcessesThatStartPriorToAuditdIn_Boot_grub2_grub.cfg" selected="true" />
    <select idref="EnableAuditingForProcessesThatStartPriorToAuditdIn_Etc_default_grub" selected="true" />
    <select idref="EnableBadErrorMessageProtection_Net.ipv4.icmp_ignore_bogus_error_responses" selected="true" />
    <select idref="EnableCrondDaemon" selected="true" />
    <select idref="EnableIgnoreBroadcastRequests_Net.ipv4.icmp_echo_ignore_broadcasts" selected="true" />
    <select idref="EnableRFC_recommendedSourceRouteValidation_Net.ipv4.conf.all.rp_filter" selected="true" />
    <select idref="EnableRFC_recommendedSourceRouteValidation_Net.ipv4.conf.default.rp_filter" selected="true" />
    <select idref="EnableSELinuxIn_Boot_grub2_grub.cfg" selected="true" />
    <select idref="EnableSELinuxIn_Boot_grub2_grub.cfg_EnforcingShouldNotBeDisabledIn_Boot_grub2_grub.cfg" selected="true" />
    <select idref="EnsurePasswordFieldsAreNotEmpty" selected="true" />
    <select idref="FTPConfiguration_EnableOrDisableAnonymousAccessViaVsftpdServiceAsAppropriate" selected="true" />
    <select idref="FTPConfiguration_EnableOrDisableFileUploadsViaVsftpdServiceAsAppropriate" selected="true" />
    <select idref="FTPConfiguration_UmaskForFtpUsers" selected="true" />
    <select idref="TestTheGroupOwnerOfTheFiles-_Var_log_boot.log_" selected="true" />
    <select idref="InstallTCPWrappers" selected="true" />
    <select idref="KeepAllAuditingInformation" selected="true" />
    <select idref="LimitAccessViaSSH" selected="true" />
    <select idref="LimitPasswordReuse" selected="true" />
    <select idref="LockInactiveUserAccounts" selected="true" />
    <select idref="LogSuspiciousPackets_Net.ipv4.conf.all.log_martians" selected="true" />
    <select idref="LogSuspiciousPackets_Net.ipv4.conf.default.log_martians" selected="true" />
    <select idref="MakeTheAuditConfigurationImmutable" selected="true" />
    <select idref="NFSConfiguration_Insecure_locksOptionRemoval_etc_exports" selected="true" />
    <select idref="TestTheOwnerOfTheFiles-_Var_log_boot.log_" selected="true" />
    <select idref="PasswordCreationRequirementParametersUsingPam_pwquality_Dcredit" selected="true" />
    <select idref="PasswordCreationRequirementParametersUsingPam_pwquality_Lcredit" selected="true" />
    <select idref="PasswordCreationRequirementParametersUsingPam_pwquality_Minlen" selected="true" />
    <select idref="PasswordCreationRequirementParametersUsingPam_pwquality_Ocredit" selected="true" />
    <select idref="PasswordCreationRequirementParametersUsingPam_pwquality_Retry" selected="true" />
    <select idref="PasswordCreationRequirementParametersUsingPam_pwquality_Try_first_pass" selected="true" />
    <select idref="PasswordCreationRequirementParametersUsingPam_pwquality_Ucredit" selected="true" />
    <select idref="PasswordSettings_NewUsersToChangeTheirPasswordOnFirstLogon" selected="true" />
    <select idref="TestThePermissionsOfTheFiles-_Var_log_boot.log_" selected="true" />
    <select idref="RecordEventsThatModifyDateAndTimeInformation" selected="true" />
    <select idref="RecordEventsThatModifyTheSystem_sMandatoryAccessControls" selected="true" />
    <select idref="RecordEventsThatModifyTheSystem_sNetworkEnvironment" selected="true" />
    <select idref="RecordEventsThatModifyUser_GroupInformation" selected="true" />
    <select idref="RemoveMCSTranslationService" selected="true" />
    <select idref="RemoveNISClient" selected="true" />
    <select idref="RemoveNISServer" selected="true" />
    <select idref="RemoveRhostsSupportUnlessAbsolutelyNecessary" selected="true" />
    <select idref="RemoveSETroubleshootService" selected="true" />
    <select idref="RemoveTelnet_serverPackage" selected="true" />
    <select idref="RemoveThe_Etc_hosts_equivFile" selected="true" />
    <select idref="RemoveUnixToUnixCopyClient" selected="true" />
    <select idref="DisableAvahiServer-RemoveZeroconf" selected="true" />
    <select idref="RestrictAccessToTheSuCommand_LimitAccessToTheRootAccountFromSu" selected="true" />
    <select idref="RestrictAccessToTheSuCommand_UsersListInTheWheelStatementIn_Etc_group" selected="true" />
    <select idref="RestrictAt_cronToAuthorizedUsers_TestTheExistenceOfTheFile_Etc_cron.deny" selected="true" />
    <select idref="RestrictCoreDumps" selected="true" />
    <select idref="RestrictCoreDumps_Fs.suid_dumpableVariableValue" selected="true" />
    <select idref="SetBootLoaderPassword" selected="true" />
    <select idref="SetDefaultGroupForRootAccount" selected="true" />
    <select idref="SetDefaultUmaskForUsers_AllTheFilesIn_Etc_profile.dDirectory" selected="true" />
    <select idref="SetGroupOwnerPermissionOn_Etc_anacrontab" selected="true" />
    <select idref="SetGroupOwnerPermissionOn_Etc_cron.dDirectory" selected="true" />
    <select idref="SetGroupOwnerPermissionOn_Etc_cron.dailyDirectory" selected="true" />
    <select idref="SetGroupOwnerPermissionOn_Etc_cron.hourlyDirectory" selected="true" />
    <select idref="SetGroupOwnerPermissionOn_Etc_cron.monthlyDirectory" selected="true" />
    <select idref="SetGroupOwnerPermissionOn_Etc_crontab" selected="true" />
    <select idref="SetIdleTimeoutIntervalForUserLogin_ClientAliveCountMax" selected="true" />
    <select idref="SetIdleTimeoutIntervalForUserLogin_ClientAliveInterval" selected="true" />
    <select idref="SetLockoutForFailedPasswordAttempts" selected="true" />
    <select idref="SetLogLevelToINFO" selected="true" />
    <select idref="SetNodevOptionFor_TmpPartition" selected="true" />
    <select idref="SetOwnerPermissionOn_Etc_anacrontab" selected="true" />
    <select idref="SetOwnerPermissionOn_Etc_cron.dDirectory" selected="true" />
    <select idref="SetOwnerPermissionOn_Etc_cron.dailyDirectory" selected="true" />
    <select idref="SetOwnerPermissionOn_Etc_cron.hourlyDirectory" selected="true" />
    <select idref="SetOwnerPermissionOn_Etc_cron.monthlyDirectory" selected="true" />
    <select idref="SetOwnerPermissionOn_Etc_crontab" selected="true" />
    <select idref="SetPasswordChangeMinimumNumberOfDays" selected="true" />
    <select idref="SetPasswordExpirationDays" selected="true" />
    <select idref="SetPasswordExpiringWarningDays" selected="true" />
    <select idref="SetPermissionOn_Etc_anacrontab" selected="true" />
    <select idref="SetPermissionsOn_Etc_cron.dailyDirectory" selected="true" />
    <select idref="SetPermissionsOn_Etc_cron.hourlyDirectory" selected="true" />
    <select idref="SetPermissionsOn_Etc_cron.monthlyDirectory" selected="true" />
    <select idref="SetPermissionsOn_Etc_cron.weeklyDirectory" selected="true" />
    <select idref="SetPermissionsOn_Etc_crontab" selected="true" />
    <select idref="SetSSHBanner" selected="true" />
    <select idref="SetSSHHostbasedAuthenticationToNo" selected="true" />
    <select idref="SetSSHIgnoreRhostsToYes" selected="true" />
    <select idref="SetSSHMaxAuthTriesTo4OrLess" selected="true" />
    <select idref="SetSSHPermitEmptyPasswordsToNo" selected="true" />
    <select idref="SetSSHProtocolTo2" selected="true" />
    <select idref="SetTheSELinuxPolicy" selected="true" />
    <select idref="SetTheSELinuxState" selected="true" />
    <select idref="TestIfAppropriateBootLoaderIsInstalled" selected="true" />
    <select idref="TestIfFileExists_Var_log_messages" selected="true" />
    <select idref="TestIfTheSystemLogonBannerIsSetCorrectly_Etc_dconf_db_gdm.d_" selected="true" />
    <select idref="TestPermissionsOnRsyslogLogFile_Var_log_daemon.log" selected="true" />
    <select idref="TestPermissionsOnRsyslogLogFile_Var_log_daemon.log_GroupOwnership" selected="true" />
    <select idref="TestPermissionsOnRsyslogLogFile_Var_log_daemon.log_Ownership" selected="true" />
    <select idref="TestPermissionsOnRsyslogLogFile_Var_log_kern.log" selected="true" />
    <select idref="TestPermissionsOnRsyslogLogFile_Var_log_kern.log_GroupOwnership" selected="true" />
    <select idref="TestPermissionsOnRsyslogLogFile_Var_log_kern.log_Ownership" selected="true" />
    <select idref="TestPermissionsOnRsyslogLogFile_Var_log_messages" selected="true" />
    <select idref="TestPermissionsOnRsyslogLogFile_Var_log_messages_GroupOwnership" selected="true" />
    <select idref="TestPermissionsOnRsyslogLogFile_Var_log_messages_Ownership" selected="true" />
    <select idref="TestPermissionsOnRsyslogLogFile_Var_log_syslog" selected="true" />
    <select idref="TestPermissionsOnRsyslogLogFile_Var_log_syslog_GroupOwnership" selected="true" />
    <select idref="TestPermissionsOnRsyslogLogFile_Var_log_syslog_Ownership" selected="true" />
    <select idref="TestPermissionsOnRsyslogLogFile_Var_log_unused.log" selected="true" />
    <select idref="TestPermissionsOnRsyslogLogFile_Var_log_unused.log_GroupOwnership" selected="true" />
    <select idref="TestPermissionsOnRsyslogLogFile_Var_log_unused.log_Ownership" selected="true" />
    <select idref="TestTheConfigurationStatusOfMailTransferAgent_MTA_ForLocal_onlyMode" selected="true" />
    <select idref="TestTheEnable_DisableStatusFor_Net.ipv4.conf.all.secure_redirects" selected="true" />
    <select idref="TestTheEnable_DisableStatusFor_Net.ipv4.conf.default.secure_redirects" selected="true" />
    <select idref="TestTheEnable_DisableStatusFor-InteractiveBoot" selected="true" />
    <select idref="TestTheExistenceOfTheFile_Etc_at.allow" selected="true" />
    <select idref="TestTheExistenceOfTheFile_Etc_cron.allow" selected="true" />
    <select idref="TestTheExistenceOfTheFile_var_run_btmp" selected="true" />
    <select idref="TestTheExistenceOfTheFile_var_run_utmp" selected="true" />
    <select idref="TestTheExistenceOfTheFiles-_Var_log_boot.log_" selected="true" />
    <select idref="TestTheGroupOwnerOfAllFilesPresentInTheDirectory_Etc_httpd_conf" selected="true" />
    <select idref="TestTheGroupOwnerOfThe_RootDirectory" selected="true" />
    <select idref="TestTheGroupOwnerOfTheDirectory_Etc_httpd_conf.d" selected="true" />
    <select idref="TestTheGroupOwnerOfTheDirectory_Etc_profile.d" selected="true" />
    <select idref="TestTheGroupOwnerOfTheDirectory_Var" selected="true" />
    <select idref="TestTheGroupOwnerOfTheDirectory_Var_adm" selected="true" />
    <select idref="TestTheGroupOwnerOfTheDirectory_Var_log_httpd" selected="true" />
    <select idref="TestTheGroupOwnerOfTheDirectory_Var_www_html" selected="true" />
    <select idref="TestTheGroupOwnerOfTheFile_Boot_grub2_grub.cfg" selected="true" />
    <select idref="TestTheGroupOwnerOfTheFile_Etc_aliases" selected="true" />
    <select idref="TestTheGroupOwnerOfTheFile_Etc_audit_audit.rules" selected="true" />
    <select idref="TestTheGroupOwnerOfTheFile_Etc_audit_auditd.conf" selected="true" />
    <select idref="TestTheGroupOwnerOfTheFile_Etc_auto.master" selected="true" />
    <select idref="TestTheGroupOwnerOfTheFile_Etc_auto.misc" selected="true" />
    <select idref="TestTheGroupOwnerOfTheFile_Etc_auto.net" selected="true" />
    <select idref="TestTheGroupOwnerOfTheFile_Etc_bashrc" selected="true" />
    <select idref="TestTheGroupOwnerOfTheFile_Etc_cron.deny" selected="true" />
    <select idref="TestTheGroupOwnerOfTheFile_Etc_exports" selected="true" />
    <select idref="TestTheGroupOwnerOfTheFile_Etc_group" selected="true" />
    <select idref="TestTheGroupOwnerOfTheFile_Etc_gshadow" selected="true" />
    <select idref="TestTheGroupOwnerOfTheFile_Etc_httpd_conf_httpd.conf" selected="true" />
    <select idref="TestTheGroupOwnerOfTheFile_Etc_login.defs" selected="true" />
    <select idref="TestTheGroupOwnerOfTheFile_Etc_named.conf" selected="true" />
    <select idref="TestTheGroupOwnerOfTheFile_Etc_profile" selected="true" />
    <select idref="TestTheGroupOwnerOfTheFile_Etc_resolv.conf" selected="true" />
    <select idref="TestTheGroupOwnerOfTheFile_Etc_samba_smb.conf" selected="true" />
    <select idref="TestTheGroupOwnerOfTheFile_Etc_securetty" selected="true" />
    <select idref="TestTheGroupOwnerOfTheFile_Etc_security_access.conf" selected="true" />
    <select idref="TestTheGroupOwnerOfTheFile_Etc_services" selected="true" />
    <select idref="TestTheGroupOwnerOfTheFile_Etc_shadow" selected="true" />
    <select idref="TestTheGroupOwnerOfTheFile_Etc_skel_.bash_logout" selected="true" />
    <select idref="TestTheGroupOwnerOfTheFile_Etc_skel_.bash_profile" selected="true" />
    <select idref="TestTheGroupOwnerOfTheFile_Etc_skel_.bashrc" selected="true" />
    <select idref="TestTheGroupOwnerOfTheFile_Etc_snmp_snmpd.conf" selected="true" />
    <select idref="TestTheGroupOwnerOfTheFile_Etc_ssh_sshd_config" selected="true" />
    <select idref="TestTheGroupOwnerOfTheFile_Etc_sysctl.conf" selected="true" />
    <select idref="TestTheGroupOwnerOfTheFile_Etc_xinetd.conf" selected="true" />
    <select idref="TestTheGroupOwnerOfTheFile_Usr_bin_at" selected="true" />
    <select idref="TestTheGroupOwnerOfTheFile_Usr_bin_htpasswd" selected="true" />
    <select idref="TestTheGroupOwnerOfTheFile_Usr_bin_traceroute" selected="true" />
    <select idref="TestTheGroupOwnerOfTheFile_Usr_sbin_httpd" selected="true" />
    <select idref="TestTheGroupOwnerOfTheFile_Usr_sbin_userhelper" selected="true" />
    <select idref="TestTheGroupOwnerOfTheFile_Var_log_audit_audit.log" selected="true" />
    <select idref="TestTheGroupOwnerOfTheFile_Var_named_chroot_etc_named.conf" selected="true" />
    <select idref="TestTheGroupOwnerOfTheFile_Etc_at.allow" selected="true" />
    <select idref="TestTheGroupOwnerOfTheFile_Etc_at.deny" selected="true" />
    <select idref="TestTheGroupOwnerOfTheFile_Etc_cron.allow" selected="true" />
    <select idref="TestTheGroupOwnerOfTheFile_Usr_bin_smbpasswd" selected="true" />
    <select idref="TestTheGroupOwnerOfTheFiles_Etc_default_._" selected="true" />
    <select idref="TestTheGroupOwnerOfTheFiles_Var_lib_ldap_._" selected="true" />
    <select idref="TestTheGroupOwnerOfTheFiles_Var_log_cron_" selected="true" />
    <select idref="TestTheGroupOwnerOfTheFiles_Var_log_secure_" selected="true" />
    <select idref="TestTheOwnerOf_Etc_xinetd.confFile" selected="true" />
    <select idref="TestTheOwnerOf_Usr_bin_smbpasswdFile" selected="true" />
    <select idref="TestTheOwnerOf_Usr_sbin_tracerouteFile" selected="true" />
    <select idref="TestTheOwnerOfAllFilesPresentInTheDirectory_Etc_httpd_conf" selected="true" />
    <select idref="TestTheOwnerOfThe_RootDirectory" selected="true" />
    <select idref="TestTheOwnerOfTheDirectory_Etc_httpd_conf.d" selected="true" />
    <select idref="TestTheOwnerOfTheDirectory_Etc_profile.d" selected="true" />
    <select idref="TestTheOwnerOfTheDirectory_Var" selected="true" />
    <select idref="TestTheOwnerOfTheDirectory_Var_adm" selected="true" />
    <select idref="TestTheOwnerOfTheDirectory_Var_log" selected="true" />
    <select idref="TestTheOwnerOfTheDirectory_Var_log_httpd" selected="true" />
    <select idref="TestTheOwnerOfTheDirectory_Var_www_html" selected="true" />
    <select idref="TestTheOwnerOfTheFile_Boot_grub2_grub.cfg" selected="true" />
    <select idref="TestTheOwnerOfTheFile_Etc_aliases" selected="true" />
    <select idref="TestTheOwnerOfTheFile_Etc_audit_audit.rules" selected="true" />
    <select idref="TestTheOwnerOfTheFile_Etc_audit_auditd.conf" selected="true" />
    <select idref="TestTheOwnerOfTheFile_Etc_auto.master" selected="true" />
    <select idref="TestTheOwnerOfTheFile_Etc_auto.misc" selected="true" />
    <select idref="TestTheOwnerOfTheFile_Etc_auto.net" selected="true" />
    <select idref="TestTheOwnerOfTheFile_Etc_bashrc" selected="true" />
    <select idref="TestTheOwnerOfTheFile_Etc_cron.deny" selected="true" />
    <select idref="TestTheOwnerOfTheFile_Etc_exports" selected="true" />
    <select idref="TestTheOwnerOfTheFile_Etc_group" selected="true" />
    <select idref="TestTheOwnerOfTheFile_Etc_gshadow" selected="true" />
    <select idref="TestTheOwnerOfTheFile_Etc_httpd_conf_httpd.conf" selected="true" />
    <select idref="TestTheOwnerOfTheFile_Etc_login.defs" selected="true" />
    <select idref="TestTheOwnerOfTheFile_Etc_named.conf" selected="true" />
    <select idref="TestTheOwnerOfTheFile_Etc_profile" selected="true" />
    <select idref="TestTheOwnerOfTheFile_Etc_resolv.conf" selected="true" />
    <select idref="TestTheOwnerOfTheFile_Etc_samba_smb.conf" selected="true" />
    <select idref="TestTheOwnerOfTheFile_Etc_securetty" selected="true" />
    <select idref="TestTheOwnerOfTheFile_Etc_security_access.conf" selected="true" />
    <select idref="TestTheOwnerOfTheFile_Etc_services" selected="true" />
    <select idref="TestTheOwnerOfTheFile_Etc_shadow" selected="true" />
    <select idref="TestTheOwnerOfTheFile_Etc_skel_.bash_logout" selected="true" />
    <select idref="TestTheOwnerOfTheFile_Etc_skel_.bash_profile" selected="true" />
    <select idref="TestTheOwnerOfTheFile_Etc_skel_.bashrc" selected="true" />
    <select idref="TestTheOwnerOfTheFile_Etc_snmp_snmpd.conf" selected="true" />
    <select idref="TestTheOwnerOfTheFile_Etc_ssh_sshd_config" selected="true" />
    <select idref="TestTheOwnerOfTheFile_Etc_sysctl.conf" selected="true" />
    <select idref="TestTheOwnerOfTheFile_Usr_bin_at" selected="true" />
    <select idref="TestTheOwnerOfTheFile_Usr_sbin_htpasswd" selected="true" />
    <select idref="TestTheOwnerOfTheFile_Usr_sbin_httpd" selected="true" />
    <select idref="TestTheOwnerOfTheFile_Usr_sbin_userhelper" selected="true" />
    <select idref="TestTheOwnerOfTheFile_Var_log_audit_audit.log" selected="true" />
    <select idref="TestTheOwnerOfTheFile_Var_named_chroot_etc_named.confFile" selected="true" />
    <select idref="TestTheOwnerOfTheFile_Etc_at.allow" selected="true" />
    <select idref="TestTheOwnerOfTheFile_Etc_at.deny" selected="true" />
    <select idref="TestTheOwnerOfTheFile_Etc_cron.allow" selected="true" />
    <select idref="TestTheOwnerOfTheFiles_Etc_default_._" selected="true" />
    <select idref="TestTheOwnerOfTheFiles_Var_lib_ldap_._" selected="true" />
    <select idref="TestTheOwnerOfTheFiles_Var_log_cron_" selected="true" />
    <select idref="TestTheOwnerOfTheFiles_Var_log_secure_" selected="true" />
    <select idref="TestThePermissionOfTheFile_Etc_cron.allow" selected="true" />
    <select idref="TestThePermissionsOfTheFile_Usr_bin_traceroute" selected="true" />
    <select idref="TestThePermissionsOfTheFile_Var_log_audit_audit.log" selected="true" />
    <select idref="TestThePermissionsOf_Etc_xinetd.conf" selected="true" />
    <select idref="TestThePermissionsOfAllFilesPresentInTheDirectory_Etc_httpd_conf" selected="true" />
    <select idref="TestThePermissionsOfAllFilesPresentInTheDirectory_Etc_pam.d_Files" selected="true" />
    <select idref="TestThePermissionsOfThe_RootDirectory" selected="true" />
    <select idref="TestThePermissionsOfTheDirectory_Etc_cron.d" selected="true" />
    <select idref="TestThePermissionsOfTheDirectory_Etc_httpd_conf.d" selected="true" />
    <select idref="TestThePermissionsOfTheDirectory_Etc_profile.d" selected="true" />
    <select idref="TestThePermissionsOfTheDirectory_Etc_security" selected="true" />
    <select idref="TestThePermissionsOfTheDirectory_Tmp" selected="true" />
    <select idref="TestThePermissionsOfTheDirectory_Var" selected="true" />
    <select idref="TestThePermissionsOfTheDirectory_Var_adm" selected="true" />
    <select idref="TestThePermissionsOfTheDirectory_Var_log_httpd" selected="true" />
    <select idref="TestThePermissionsOfTheDirectory_Var_tmp" selected="true" />
    <select idref="TestThePermissionsOfTheDirectory_Var_www_html" selected="true" />
    <select idref="TestThePermissionsOfTheFile_Bin_bash" selected="true" />
    <select idref="TestThePermissionsOfTheFile_Bin_tcsh" selected="true" />
    <select idref="TestThePermissionsOfTheFile_Boot_grub2_grub.cfg" selected="true" />
    <select idref="TestThePermissionsOfTheFile_Dev_mem" selected="true" />
    <select idref="TestThePermissionsOfTheFile_Dev_null" selected="true" />
    <select idref="TestThePermissionsOfTheFile_Etc_aliases" selected="true" />
    <select idref="TestThePermissionsOfTheFile_Etc_at.allow" selected="true" />
    <select idref="TestThePermissionsOfTheFile_Etc_at.deny" selected="true" />
    <select idref="TestThePermissionsOfTheFile_Etc_audit_audit.rules" selected="true" />
    <select idref="TestThePermissionsOfTheFile_Etc_audit_auditd.conf" selected="true" />
    <select idref="TestThePermissionsOfTheFile_Etc_auto.master" selected="true" />
    <select idref="TestThePermissionsOfTheFile_Etc_auto.misc" selected="true" />
    <select idref="TestThePermissionsOfTheFile_Etc_auto.net" selected="true" />
    <select idref="TestThePermissionsOfTheFile_Etc_bashrc" selected="true" />
    <select idref="TestThePermissionsOfTheFile_Etc_cron.deny" selected="true" />
    <select idref="TestThePermissionsOfTheFile_Etc_exports" selected="true" />
    <select idref="TestThePermissionsOfTheFile_Etc_fstab" selected="true" />
    <select idref="TestThePermissionsOfTheFile_Etc_group" selected="true" />
    <select idref="TestThePermissionsOfTheFile_Etc_gshadow" selected="true" />
    <select idref="TestThePermissionsOfTheFile_Etc_httpd_conf_httpd.conf" selected="true" />
    <select idref="TestThePermissionsOfTheFile_Etc_issue" selected="true" />
    <select idref="TestThePermissionsOfTheFile_Etc_login.defs" selected="true" />
    <select idref="TestThePermissionsOfTheFile_Etc_motd" selected="true" />
    <select idref="TestThePermissionsOfTheFile_Etc_named.conf" selected="true" />
    <select idref="TestThePermissionsOfTheFile_Etc_netconfig" selected="true" />
    <select idref="TestThePermissionsOfTheFile_Etc_passwd" selected="true" />
    <select idref="TestThePermissionsOfTheFile_Etc_profile" selected="true" />
    <select idref="TestThePermissionsOfTheFile_Etc_resolv.conf" selected="true" />
    <select idref="TestThePermissionsOfTheFile_Etc_rsyslog.conf" selected="true" />
    <select idref="TestThePermissionsOfTheFile_Etc_securetty" selected="true" />
    <select idref="TestThePermissionsOfTheFile_Etc_security_access.conf" selected="true" />
    <select idref="TestThePermissionsOfTheFile_Etc_services" selected="true" />
    <select idref="TestThePermissionsOfTheFile_Etc_shadow" selected="true" />
    <select idref="TestThePermissionsOfTheFile_Etc_snmp_snmpd.conf" selected="true" />
    <select idref="TestThePermissionsOfTheFile_Etc_ssh_sshd_config" selected="true" />
    <select idref="TestThePermissionsOfTheFile_Etc_sysctl.conf" selected="true" />
    <select idref="TestThePermissionsOfTheFile_Sbin_sendmail.sendmail" selected="true" />
    <select idref="TestThePermissionsOfTheFile_Usr_bin_at" selected="true" />
    <select idref="TestThePermissionsOfTheFile_Usr_bin_bash" selected="true" />
    <select idref="TestThePermissionsOfTheFile_Usr_bin_htpasswd" selected="true" />
    <select idref="TestThePermissionsOfTheFile_Usr_bin_smbpasswd" selected="true" />
    <select idref="TestThePermissionsOfTheFile_Usr_bin_sync" selected="true" />
    <select idref="TestThePermissionsOfTheFile_Usr_sbin_httpd" selected="true" />
    <select idref="TestThePermissionsOfTheFile_Usr_sbin_userhelper" selected="true" />
    <select idref="TestThePermissionsOfTheFile_Var_log_wtmp" selected="true" />
    <select idref="TestThePermissionsOfTheFile_Var_run_utmp" selected="true" />
    <select idref="TestThePermissionsOfTheFiles_Etc_default_._" selected="true" />
    <select idref="TestThePermissionsOfTheFiles_Var_lib_ldap_._" selected="true" />
    <select idref="TestThePermissionsOfTheFiles_Var_log_cron_" selected="true" />
    <select idref="TestThePermissionsOfTheFiles_Var_log_secure_" selected="true" />
    <select idref="TestThePermissionsOfTheFiles_Var_spool_mail_" selected="true" />
    <select idref="TestThePermissionsOfTheFiles_Var_tmp_" selected="true" />
    <select idref="TestThePermissionsOfTheScriptFile" selected="true" />
    <select idref="TestThePermissionsOnUser.forwardFiles" selected="true" />
    <select idref="TestThePermissionsOnUser.netrcFiles" selected="true" />
    <select idref="TestThePermissionsSetOnTheFile_Etc_hosts" selected="true" />
    <select idref="TestThePermissionsSetOnTheFile_Etc_skel_.bash_logout" selected="true" />
    <select idref="TestThePermissionsSetOnTheFile_Etc_skel_.bash_profile" selected="true" />
    <select idref="TestThePermissionsSetOnTheFile_Etc_skel_.bashrc" selected="true" />
    <select idref="TestTheStatusOf-RestrictionOfNFSClientsToPrivilegedPorts" selected="true" />
    <select idref="TheDynamicDnsFeatureOfTheDhcpServerShouldBeDisabled" selected="true" />
    <select idref="TheShellForTheAdmAccountShouldBeAssignedAppropriately." selected="true" />
    <select idref="TheShellForTheBinAccountShouldBeAssignedAppropriately." selected="true" />
    <select idref="TheShellForTheGdmAccountShouldBeAssignedAppropriately." selected="true" />
    <select idref="TheShellForTheListenAccountShouldBeAssignedAppropriately." selected="true" />
    <select idref="TheShellForTheLpAccountShouldBeAssignedAppropriately." selected="true" />
    <select idref="TheShellForTheNoaccessAccountShouldBeAssignedAppropriately." selected="true" />
    <select idref="TheShellForTheNobodyAccountShouldBeAssignedAppropriately." selected="true" />
    <select idref="TheShellForTheNobody4AccountShouldBeAssignedAppropriately." selected="true" />
    <select idref="TheShellForTheNuucpAccountShouldBeAssignedAppropriately." selected="true" />
    <select idref="TheShellForTheSmmspAccountShouldBeAssignedAppropriately." selected="true" />
    <select idref="TheShellForTheUucpAccountShouldBeAssignedAppropriately." selected="true" />
    <select idref="TheShellForTheWebservdAccountShouldBeAssignedAppropriately." selected="true" />
    <select idref="TheSquidEUIDShouldBeSetToAnAppropriateUser" selected="true" />
    <select idref="TheSquidGUIDShouldBeSetToAnAppropriateGroup" selected="true" />
    <select idref="UseOnlyApprovedCipherInCounterMode" selected="true" />
    <select idref="UseRoot_SquashingOnAllExports" selected="true" />
    <select idref="UseTheLatestOperatingSystemRelease" selected="true" />
    <select idref="VerifyGroupsReferencedIn_etc_passwdAreIncludedIn_etc_group" selected="true" />
    <select idref="VerifyNet_snmpVersionOnTheSystem" selected="true" />
    <select idref="VerifyNoLegacy_EntriesExistIn_Etc_groupFile" selected="true" />
    <select idref="VerifyNoLegacy_EntriesExistIn_Etc_passwdFile" selected="true" />
    <select idref="VerifyNoLegacy_EntriesExistIn_Etc_shadowFile" selected="true" />
    <select idref="VerifyNoUID0AccountsExistOtherThanRoot" selected="true" />
    <select idref="VerifyPermissionsOn_Etc_hosts.allow" selected="true" />
    <select idref="VerifyPermissionsOn_Etc_hosts.allow_GroupOwnership" selected="true" />
    <select idref="VerifyPermissionsOn_Etc_hosts.allow_Ownership" selected="true" />
    <select idref="VerifyPermissionsOn_Etc_hosts.deny" selected="true" />
    <select idref="VerifyPermissionsOn_Etc_hosts.deny_GroupOwnership" selected="true" />
    <select idref="VerifyPermissionsOn_Etc_hosts.deny_Ownership" selected="true" />
    <select idref="VerifyRedHatGPGKeyIsInstalled" selected="true" />
    <select idref="VerifyThatAHomeDirectoryHasBeenEstablishedForRoot" selected="true" />
    <select idref="VerifyThatGpgcheckIsGloballyActivated" selected="true" />
    <select idref="VsftpdTransactionLogging" selected="true" />
    <select idref="WriteAccessToNFSSharesShouldBeDisabled" selected="true" />
    <select idref="EnsureFirewalldServiceIsEnabled" selected="true" />
    <select idref="VerifyFirewalldVersionOnTheSystem" selected="true" />
    <select idref="ConfigureFirewallToGenerateAuditLogs_Etc_sysconfig_firewalld" selected="true" />
    <select idref="TestIfTheFile_Var_log_firewalldExists" selected="true" />
    <select idref="TestTheGroupOwnerOfTheDirectory_Etc_firewalld" selected="true" />
    <select idref="TestTheOwnerOfTheDirectory_Etc_firewalld" selected="true" />
    <select idref="TestThePermissionsOfTheDirectory_Etc_firewalld" selected="true" />
    <select idref="TestTheGroupOwnerOfTheFile_Etc_firewalld_firewalld.conf" selected="true" />
    <select idref="TestTheOwnerOfTheFile_Etc_firewalld_firewalld.conf" selected="true" />
    <select idref="TestThePermissionsOfTheFile_Etc_firewalld_firewalld.conf" selected="true" />
    <select idref="TestThePermissionsOfTheFile_Etc_sysconfig_firewalld" selected="true" />
    <select idref="TestTheOwnerOfTheFile_Etc_sysconfig_firewalld" selected="true" />
    <select idref="TestTheGroupOwnerOfTheFile_Etc_sysconfig_firewalld" selected="true" />
    <select idref="EnsurePasswordHashingAlgorithmIsSHA_512" selected="true" />  </Profile>
  <Profile id="OracleLinux7PCIBenchmark" abstract="false">
    <title xml:lang="en">Oracle Linux 7 PCI Benchmark</title>
    <description xml:lang="en" />
    <platform idref="cpe:/o:oracle:linux:7" />
    <select idref="AcceptRemoteRsyslogMessagesOnlyOnDesignatedLogHosts" selected="true" />
    <select idref="AddNodevOptionTo_Dev_shmPartition" selected="true" />
    <select idref="AddNodevOptionTo_Home" selected="true" />
    <select idref="AddNodevOptionToRemovableMediaPartitions" selected="true" />
    <select idref="AddNosuidOptionToRemovableMediaPartitions" selected="true" />
    <select idref="CheckForDuplicateGIDs" selected="true" />
    <select idref="CheckForDuplicateGroupNames" selected="true" />
    <select idref="CheckForDuplicateUIDs" selected="true" />
    <select idref="CheckForDuplicateUserNames" selected="true" />
    <select idref="CheckForPresenceOfUser.netrcFiles" selected="true" />
    <select idref="CheckForUnconfinedDaemons" selected="true" />
    <select idref="CheckPermissionsOnUserHomeDirectories" selected="true" />
    <select idref="CheckThatReservedUIDsAreAssignedToSystemAccounts" selected="true" />
    <select idref="CheckThatUsersAreAssignedValidHomeDirectories" selected="true" />
    <select idref="CheckUserDotFilePermissions" selected="true" />
    <select idref="CollectChangesToSystemAdministrationScope" selected="true" />
    <select idref="CollectDiscretionaryAccessControlPermissionModificationEvents" selected="true" />
    <select idref="CollectFileDeletionEventsByUser" selected="true" />
    <select idref="CollectKernelModuleLoadingAndUnloading" selected="true" />
    <select idref="CollectLoginAndLogoutEvents" selected="true" />
    <select idref="CollectSessionInitiationInformation" selected="true" />
    <select idref="CollectSuccessfulFileSystemMounts" selected="true" />
    <select idref="CollectSystemAdministratorActions_Sudolog_" selected="true" />
    <select idref="CollectUnsuccessfulUnauthorizedAccessAttemptsToFiles" selected="true" />
    <select idref="Configuraration_Read_onlyOptionForAllNFSExports" selected="true" />
    <select idref="Configuration_LimitRootLoginToTheLocalConsole" selected="true" />
    <select idref="Configuration-MesgNIsSetAsDefaultForAllUsers" selected="true" />
    <select idref="Configuration_RestrictLockdServiceToUseAStaticTcpPort" selected="true" />
    <select idref="Configuration_RestrictLockdServiceToUseAStaticUdpPort" selected="true" />
    <select idref="Configuration_RootAccountShouldBeDisabled" selected="true" />
    <select idref="Configuration_SendmailExpnCommandShouldBeDisabled" selected="true" />
    <select idref="Configuration_SendmailVrfyCommandShouldBeDisabled" selected="true" />
    <select idref="ConfigureAuditLogStorageSize" selected="true" />
    <select idref="ConfigureRsyslogToSendLogsToARemoteLogHost" selected="true" />
    <select idref="Create_Etc_hosts.allow" selected="true" />
    <select idref="Create_Etc_hosts.deny" selected="true" />
    <select idref="CreateThe_Etc_vsftpd_ftpusersFile" selected="true" />
    <select idref="DisableAutofsUnlessAutofsIsAbsolutelyNecessary" selected="true" />
    <select idref="DisableAvahiServerUnlessAvahiServerIsAbsolutelyNecessary" selected="true" />
    <select idref="DisableBindUnlessBindIsAbsolutelyNecessary" selected="true" />
    <select idref="DisableBluetoothUnlessBluetoothIsAbsolutelyNecessary" selected="true" />
    <select idref="DisableChargen_dgramUnlessChargen_dgramIsAbsolutelyNecessary" selected="true" />
    <select idref="DisableChargen_streamUnlessChargen_streamIsAbsolutelyNecessary" selected="true" />
    <select idref="DisableCpupowerUnlessCpupowerIsAbsolutelyNecessary" selected="true" />
    <select idref="DisableCupsUnlessCupsIsAbsolutelyNecessary" selected="true" />
    <select idref="DisableDaytime_dgramUnlessDaytime_dgramIsAbsolutelyNecessary" selected="true" />
    <select idref="DisableDaytime_streamUnlessDaytime_streamIsAbsolutelyNecessary" selected="true" />
    <select idref="DisableDCCP" selected="true" />
    <select idref="DisableDhcpdUnlessDhcpdIsAbsolutelyNecessary" selected="true" />
    <select idref="DisableDiscardTcpUnlessDiscardTcpIsAbsolutelyNecessary" selected="true" />
    <select idref="DisableDiscard_udpUnlessDiscard_udpIsAbsolutelyNecessary" selected="true" />
    <select idref="DisableDovecotUnlessDovecotIsAbsolutelyNecessary" selected="true" />
    <select idref="DisableEcho_dgramUnlessEcho_dgramIsAbsolutelyNecessary" selected="true" />
    <select idref="DisableEcho_streamUnlessEcho_streamIsAbsolutelyNecessary" selected="true" />
    <select idref="DisableFirstbootUnlessFirstbootIsAbsolutelyNecessary" selected="true" />
    <select idref="DisableFtpUnlessFtpIsAbsolutelyNecessary" selected="true" />
    <select idref="DisableGdmUnlessGdmIsAbsolutelyNecessary" selected="true" />
    <select idref="DisableIPForwarding" selected="true" />
    <select idref="DisableIp6tablesUnlessIp6tablesIsAbsolutelyNecessary" selected="true" />
    <select idref="DisableIptablesUnlessIptablesIsAbsolutelyNecessary" selected="true" />
    <select idref="DisableIPv6RouterAdvertisements_Net.ipv6.conf.default.accept_ra" selected="true" />
    <select idref="DisableIPv6RouterAdvertisements_net.ipv6.conf.all.accept_ra" selected="true" />
    <select idref="DisableIrqbalanceUnlessIrqbalanceIsAbsolutelyNecessary" selected="true" />
    <select idref="DisableKadminUnlessKadminIsAbsolutelyNecessary" selected="true" />
    <select idref="DisableKdumpUnlessKdumpIsAbsolutelyNecessary" selected="true" />
    <select idref="DisableKpropUnlessKpropIsAbsolutelyNecessary" selected="true" />
    <select idref="DisableKrb5kdcUnlessKrb5kdcIsAbsolutelyNecessary" selected="true" />
    <select idref="DisableLockdUnlessLockdIsAbsolutelyNecessary" selected="true" />
    <select idref="DisableLogonPromptsOnSerialPorts" selected="true" />
    <select idref="DisableMdmonitorUnlessMdmonitorIsAbsolutelyNecessary" selected="true" />
    <select idref="DisableMicrocodeUnlessMicrocodeIsAbsolutelyNecessary" selected="true" />
    <select idref="DisableMountdUnlessMountdIsAbsolutelyNecessary" selected="true" />
    <select idref="DisableMountingOfCramfsFilesystems" selected="true" />
    <select idref="DisableMountingOfFreevxfsFilesystems" selected="true" />
    <select idref="DisableMountingOfHfsFilesystems" selected="true" />
    <select idref="DisableMountingOfHfsplusFilesystems" selected="true" />
    <select idref="DisableMountingOfJffs2Filesystems" selected="true" />
    <select idref="DisableMountingOfSquashfsFilesystems" selected="true" />
    <select idref="DisableMountingOfUdfFilesystems" selected="true" />
    <select idref="DisableMysqldUnlessMysqldIsAbsolutelyNecessary" selected="true" />
    <select idref="DisableNamedUnlessNamedIsAbsolutelyNecessary" selected="true" />
    <select idref="DisableNetworkUnlessNetworkIsAbsolutelyNecessary" selected="true" />
    <select idref="DisableNfsUnlessNfsServiceIsAbsolutelyNecessary" selected="true" />
    <select idref="DisableNfs_serverUnlessNfs_serverIsAbsolutelyNecessary" selected="true" />
    <select idref="DisableNfslockUnlessNfslockIsAbsolutelyNecessary" selected="true" />
    <select idref="DisableNtpdUnlessNtpdIsAbsolutelyNecessary" selected="true" />
    <select idref="DisablePcscdUnlessPcscdIsAbsolutelyNecessary" selected="true" />
    <select idref="DisablePopUnlessPopIsAbsolutelyNecessary" selected="true" />
    <select idref="DisableRDS" selected="true" />
    <select idref="DisableRestorecondUnlessRestorecondIsAbsolutelyNecessary" selected="true" />
    <select idref="DisableRpcbindUnlessRpcbindIsAbsolutelyNecessary" selected="true" />
    <select idref="DisableRpcgssdUnlessRpcgssdIsAbsolutelyNecessary" selected="true" />
    <select idref="DisableRpcidmapdUnlessRpcidmapdIsAbsolutelyNecessary" selected="true" />
    <select idref="DisableRpcsvcgssdUnlessRpcsvcgssdIsAbsolutelyNecessary" selected="true" />
    <select idref="DisableRquotadUnlessRquotadIsAbsolutelyNecessary" selected="true" />
    <select idref="DisableRshUnlessRshIsAbsolutelyNecessary" selected="true" />
    <select idref="DisableRstatdUnlessRstatdIsAbsolutelyNecessary" selected="true" />
    <select idref="DisableRsyncdUnlessRsyncdIsAbsolutelyNecessary" selected="true" />
    <select idref="DisableRsyslogUnlessRsyslogIsAbsolutelyNecessary" selected="true" />
    <select idref="DisableRusersdUnlessRusersdIsAbsolutelyNecessary" selected="true" />
    <select idref="DisableSCTP" selected="true" />
    <select idref="DisableSmartdUnlessSmartdIsAbsolutelyNecessary" selected="true" />
    <select idref="DisableSmbUnlessSmbIsAbsolutelyNecessary" selected="true" />
    <select idref="DisableSnmpdUnlessSnmpdIsAbsolutelyNecessary" selected="true" />
    <select idref="DisableSourceRoutedPacketAcceptance_Net.ipv4.conf.all.accept_source_route" selected="true" />
    <select idref="DisableSourceRoutedPacketAcceptance_Net.ipv4.conf.default.accept_source_route" selected="true" />
    <select idref="DisableSSHRootLogin" selected="true" />
    <select idref="DisableSSHX11Forwarding" selected="true" />
    <select idref="DisableStatdUnlessStatdIsAbsolutelyNecessary" selected="true" />
    <select idref="DisableSystemAccounts" selected="true" />
    <select idref="DisableSystemOnAuditLogFull" selected="true" />
    <select idref="DisableTcpmux-serverUnlessTcpmux-serverIsAbsolutelyNecessary" selected="true" />
    <select idref="DisableTelnetUnlessRquotadIsAbsolutelyNecessary" selected="true" />
    <select idref="DisableTftpUnlessTftpIsAbsolutelyNecessary" selected="true" />
    <select idref="DisableTIPC" selected="true" />
    <select idref="DisableUSBstoragedevices" selected="true" />
    <select idref="DisableYpbindUnlessYpbindIsAbsolutelyNecessary" selected="true" />
    <select idref="DisableYppasswddUnlessYppasswddIsAbsolutelyNecessary" selected="true" />
    <select idref="DisableYpservUnlessYpservIsAbsolutelyNecessary" selected="true" />
    <select idref="DisableYpxfrdUnlessYpxfrdIsAbsolutelyNecessary" selected="true" />
    <select idref="DisableYum_cronUnlessYum_cronIsAbsolutelyNecessary" selected="true" />
    <select idref="DoNotAllowUsersToSetEnvironmentOptions" selected="true" />
    <select idref="EnableAnacronDaemon" selected="true" />
    <select idref="EnableAuditdService" selected="true" />
    <select idref="EnableAuditingForProcessesThatStartPriorToAuditdIn_Boot_grub2_grub.cfg" selected="true" />
    <select idref="EnableAuditingForProcessesThatStartPriorToAuditdIn_Etc_default_grub" selected="true" />
    <select idref="EnableBadErrorMessageProtection_Net.ipv4.icmp_ignore_bogus_error_responses" selected="true" />
    <select idref="EnableCrondDaemon" selected="true" />
    <select idref="EnableIgnoreBroadcastRequests_Net.ipv4.icmp_echo_ignore_broadcasts" selected="true" />
    <select idref="EnableRFC_recommendedSourceRouteValidation_Net.ipv4.conf.all.rp_filter" selected="true" />
    <select idref="EnableRFC_recommendedSourceRouteValidation_Net.ipv4.conf.default.rp_filter" selected="true" />
    <select idref="EnableSELinuxIn_Boot_grub2_grub.cfg" selected="true" />
    <select idref="EnableSELinuxIn_Boot_grub2_grub.cfg_EnforcingShouldNotBeDisabledIn_Boot_grub2_grub.cfg" selected="true" />
    <select idref="EnsurePasswordFieldsAreNotEmpty" selected="true" />
    <select idref="FTPConfiguration_EnableOrDisableAnonymousAccessViaVsftpdServiceAsAppropriate" selected="true" />
    <select idref="FTPConfiguration_EnableOrDisableFileUploadsViaVsftpdServiceAsAppropriate" selected="true" />
    <select idref="FTPConfiguration_UmaskForFtpUsers" selected="true" />
    <select idref="TestTheGroupOwnerOfTheFiles-_Var_log_boot.log_" selected="true" />
    <select idref="InstallTCPWrappers" selected="true" />
    <select idref="KeepAllAuditingInformation" selected="true" />
    <select idref="LimitAccessViaSSH" selected="true" />
    <select idref="LimitPasswordReuse" selected="true" />
    <select idref="LockInactiveUserAccounts" selected="true" />
    <select idref="LogSuspiciousPackets_Net.ipv4.conf.all.log_martians" selected="true" />
    <select idref="LogSuspiciousPackets_Net.ipv4.conf.default.log_martians" selected="true" />
    <select idref="MakeTheAuditConfigurationImmutable" selected="true" />
    <select idref="NFSConfiguration_Insecure_locksOptionRemoval_etc_exports" selected="true" />
    <select idref="TestTheOwnerOfTheFiles-_Var_log_boot.log_" selected="true" />
    <select idref="PasswordCreationRequirementParametersUsingPam_pwquality_Dcredit" selected="true" />
    <select idref="PasswordCreationRequirementParametersUsingPam_pwquality_Lcredit" selected="true" />
    <select idref="PasswordCreationRequirementParametersUsingPam_pwquality_Minlen" selected="true" />
    <select idref="PasswordCreationRequirementParametersUsingPam_pwquality_Ocredit" selected="true" />
    <select idref="PasswordCreationRequirementParametersUsingPam_pwquality_Retry" selected="true" />
    <select idref="PasswordCreationRequirementParametersUsingPam_pwquality_Try_first_pass" selected="true" />
    <select idref="PasswordCreationRequirementParametersUsingPam_pwquality_Ucredit" selected="true" />
    <select idref="PasswordSettings_NewUsersToChangeTheirPasswordOnFirstLogon" selected="true" />
    <select idref="TestThePermissionsOfTheFiles-_Var_log_boot.log_" selected="true" />
    <select idref="RecordEventsThatModifyDateAndTimeInformation" selected="true" />
    <select idref="RecordEventsThatModifyTheSystem_sMandatoryAccessControls" selected="true" />
    <select idref="RecordEventsThatModifyTheSystem_sNetworkEnvironment" selected="true" />
    <select idref="RecordEventsThatModifyUser_GroupInformation" selected="true" />
    <select idref="RemoveMCSTranslationService" selected="true" />
    <select idref="RemoveNISClient" selected="true" />
    <select idref="RemoveNISServer" selected="true" />
    <select idref="RemoveRhostsSupportUnlessAbsolutelyNecessary" selected="true" />
    <select idref="RemoveSETroubleshootService" selected="true" />
    <select idref="RemoveTelnet_serverPackage" selected="true" />
    <select idref="RemoveThe_Etc_hosts_equivFile" selected="true" />
    <select idref="RemoveUnixToUnixCopyClient" selected="true" />
    <select idref="DisableAvahiServer-RemoveZeroconf" selected="true" />
    <select idref="RestrictAccessToTheSuCommand_LimitAccessToTheRootAccountFromSu" selected="true" />
    <select idref="RestrictAccessToTheSuCommand_UsersListInTheWheelStatementIn_Etc_group" selected="true" />
    <select idref="RestrictAt_cronToAuthorizedUsers_TestTheExistenceOfTheFile_Etc_cron.deny" selected="true" />
    <select idref="RestrictCoreDumps" selected="true" />
    <select idref="RestrictCoreDumps_Fs.suid_dumpableVariableValue" selected="true" />
    <select idref="SetBootLoaderPassword" selected="true" />
    <select idref="SetDefaultGroupForRootAccount" selected="true" />
    <select idref="SetDefaultUmaskForUsers_AllTheFilesIn_Etc_profile.dDirectory" selected="true" />
    <select idref="SetGroupOwnerPermissionOn_Etc_anacrontab" selected="true" />
    <select idref="SetGroupOwnerPermissionOn_Etc_cron.dDirectory" selected="true" />
    <select idref="SetGroupOwnerPermissionOn_Etc_cron.dailyDirectory" selected="true" />
    <select idref="SetGroupOwnerPermissionOn_Etc_cron.hourlyDirectory" selected="true" />
    <select idref="SetGroupOwnerPermissionOn_Etc_cron.monthlyDirectory" selected="true" />
    <select idref="SetGroupOwnerPermissionOn_Etc_crontab" selected="true" />
    <select idref="SetIdleTimeoutIntervalForUserLogin_ClientAliveCountMax" selected="true" />
    <select idref="SetIdleTimeoutIntervalForUserLogin_ClientAliveInterval" selected="true" />
    <select idref="SetLockoutForFailedPasswordAttempts" selected="true" />
    <select idref="SetLogLevelToINFO" selected="true" />
    <select idref="SetNodevOptionFor_TmpPartition" selected="true" />
    <select idref="SetOwnerPermissionOn_Etc_anacrontab" selected="true" />
    <select idref="SetOwnerPermissionOn_Etc_cron.dDirectory" selected="true" />
    <select idref="SetOwnerPermissionOn_Etc_cron.dailyDirectory" selected="true" />
    <select idref="SetOwnerPermissionOn_Etc_cron.hourlyDirectory" selected="true" />
    <select idref="SetOwnerPermissionOn_Etc_cron.monthlyDirectory" selected="true" />
    <select idref="SetOwnerPermissionOn_Etc_crontab" selected="true" />
    <select idref="SetPasswordChangeMinimumNumberOfDays" selected="true" />
    <select idref="SetPasswordExpirationDays" selected="true" />
    <select idref="SetPasswordExpiringWarningDays" selected="true" />
    <select idref="SetPermissionOn_Etc_anacrontab" selected="true" />
    <select idref="SetPermissionsOn_Etc_cron.dailyDirectory" selected="true" />
    <select idref="SetPermissionsOn_Etc_cron.hourlyDirectory" selected="true" />
    <select idref="SetPermissionsOn_Etc_cron.monthlyDirectory" selected="true" />
    <select idref="SetPermissionsOn_Etc_cron.weeklyDirectory" selected="true" />
    <select idref="SetPermissionsOn_Etc_crontab" selected="true" />
    <select idref="SetSSHBanner" selected="true" />
    <select idref="SetSSHHostbasedAuthenticationToNo" selected="true" />
    <select idref="SetSSHIgnoreRhostsToYes" selected="true" />
    <select idref="SetSSHMaxAuthTriesTo4OrLess" selected="true" />
    <select idref="SetSSHPermitEmptyPasswordsToNo" selected="true" />
    <select idref="SetSSHProtocolTo2" selected="true" />
    <select idref="SetTheSELinuxPolicy" selected="true" />
    <select idref="SetTheSELinuxState" selected="true" />
    <select idref="TestIfAppropriateBootLoaderIsInstalled" selected="true" />
    <select idref="TestIfFileExists_Var_log_messages" selected="true" />
    <select idref="TestIfTheSystemLogonBannerIsSetCorrectly_Etc_dconf_db_gdm.d_" selected="true" />
    <select idref="TestPermissionsOnRsyslogLogFile_Var_log_daemon.log" selected="true" />
    <select idref="TestPermissionsOnRsyslogLogFile_Var_log_daemon.log_GroupOwnership" selected="true" />
    <select idref="TestPermissionsOnRsyslogLogFile_Var_log_daemon.log_Ownership" selected="true" />
    <select idref="TestPermissionsOnRsyslogLogFile_Var_log_kern.log" selected="true" />
    <select idref="TestPermissionsOnRsyslogLogFile_Var_log_kern.log_GroupOwnership" selected="true" />
    <select idref="TestPermissionsOnRsyslogLogFile_Var_log_kern.log_Ownership" selected="true" />
    <select idref="TestPermissionsOnRsyslogLogFile_Var_log_messages" selected="true" />
    <select idref="TestPermissionsOnRsyslogLogFile_Var_log_messages_GroupOwnership" selected="true" />
    <select idref="TestPermissionsOnRsyslogLogFile_Var_log_messages_Ownership" selected="true" />
    <select idref="TestPermissionsOnRsyslogLogFile_Var_log_syslog" selected="true" />
    <select idref="TestPermissionsOnRsyslogLogFile_Var_log_syslog_GroupOwnership" selected="true" />
    <select idref="TestPermissionsOnRsyslogLogFile_Var_log_syslog_Ownership" selected="true" />
    <select idref="TestPermissionsOnRsyslogLogFile_Var_log_unused.log" selected="true" />
    <select idref="TestPermissionsOnRsyslogLogFile_Var_log_unused.log_GroupOwnership" selected="true" />
    <select idref="TestPermissionsOnRsyslogLogFile_Var_log_unused.log_Ownership" selected="true" />
    <select idref="TestTheConfigurationStatusOfMailTransferAgent_MTA_ForLocal_onlyMode" selected="true" />
    <select idref="TestTheEnable_DisableStatusFor_Net.ipv4.conf.all.secure_redirects" selected="true" />
    <select idref="TestTheEnable_DisableStatusFor_Net.ipv4.conf.default.secure_redirects" selected="true" />
    <select idref="TestTheEnable_DisableStatusFor-InteractiveBoot" selected="true" />
    <select idref="TestTheExistenceOfTheFile_Etc_at.allow" selected="true" />
    <select idref="TestTheExistenceOfTheFile_Etc_cron.allow" selected="true" />
    <select idref="TestTheExistenceOfTheFile_var_run_btmp" selected="true" />
    <select idref="TestTheExistenceOfTheFile_var_run_utmp" selected="true" />
    <select idref="TestTheExistenceOfTheFiles-_Var_log_boot.log_" selected="true" />
    <select idref="TestTheGroupOwnerOfAllFilesPresentInTheDirectory_Etc_httpd_conf" selected="true" />
    <select idref="TestTheGroupOwnerOfThe_RootDirectory" selected="true" />
    <select idref="TestTheGroupOwnerOfTheDirectory_Etc_httpd_conf.d" selected="true" />
    <select idref="TestTheGroupOwnerOfTheDirectory_Etc_profile.d" selected="true" />
    <select idref="TestTheGroupOwnerOfTheDirectory_Var" selected="true" />
    <select idref="TestTheGroupOwnerOfTheDirectory_Var_adm" selected="true" />
    <select idref="TestTheGroupOwnerOfTheDirectory_Var_log_httpd" selected="true" />
    <select idref="TestTheGroupOwnerOfTheDirectory_Var_www_html" selected="true" />
    <select idref="TestTheGroupOwnerOfTheFile_Boot_grub2_grub.cfg" selected="true" />
    <select idref="TestTheGroupOwnerOfTheFile_Etc_aliases" selected="true" />
    <select idref="TestTheGroupOwnerOfTheFile_Etc_audit_audit.rules" selected="true" />
    <select idref="TestTheGroupOwnerOfTheFile_Etc_audit_auditd.conf" selected="true" />
    <select idref="TestTheGroupOwnerOfTheFile_Etc_auto.master" selected="true" />
    <select idref="TestTheGroupOwnerOfTheFile_Etc_auto.misc" selected="true" />
    <select idref="TestTheGroupOwnerOfTheFile_Etc_auto.net" selected="true" />
    <select idref="TestTheGroupOwnerOfTheFile_Etc_bashrc" selected="true" />
    <select idref="TestTheGroupOwnerOfTheFile_Etc_cron.deny" selected="true" />
    <select idref="TestTheGroupOwnerOfTheFile_Etc_exports" selected="true" />
    <select idref="TestTheGroupOwnerOfTheFile_Etc_group" selected="true" />
    <select idref="TestTheGroupOwnerOfTheFile_Etc_gshadow" selected="true" />
    <select idref="TestTheGroupOwnerOfTheFile_Etc_httpd_conf_httpd.conf" selected="true" />
    <select idref="TestTheGroupOwnerOfTheFile_Etc_login.defs" selected="true" />
    <select idref="TestTheGroupOwnerOfTheFile_Etc_named.conf" selected="true" />
    <select idref="TestTheGroupOwnerOfTheFile_Etc_profile" selected="true" />
    <select idref="TestTheGroupOwnerOfTheFile_Etc_resolv.conf" selected="true" />
    <select idref="TestTheGroupOwnerOfTheFile_Etc_samba_smb.conf" selected="true" />
    <select idref="TestTheGroupOwnerOfTheFile_Etc_securetty" selected="true" />
    <select idref="TestTheGroupOwnerOfTheFile_Etc_security_access.conf" selected="true" />
    <select idref="TestTheGroupOwnerOfTheFile_Etc_services" selected="true" />
    <select idref="TestTheGroupOwnerOfTheFile_Etc_shadow" selected="true" />
    <select idref="TestTheGroupOwnerOfTheFile_Etc_skel_.bash_logout" selected="true" />
    <select idref="TestTheGroupOwnerOfTheFile_Etc_skel_.bash_profile" selected="true" />
    <select idref="TestTheGroupOwnerOfTheFile_Etc_skel_.bashrc" selected="true" />
    <select idref="TestTheGroupOwnerOfTheFile_Etc_snmp_snmpd.conf" selected="true" />
    <select idref="TestTheGroupOwnerOfTheFile_Etc_ssh_sshd_config" selected="true" />
    <select idref="TestTheGroupOwnerOfTheFile_Etc_sysctl.conf" selected="true" />
    <select idref="TestTheGroupOwnerOfTheFile_Etc_xinetd.conf" selected="true" />
    <select idref="TestTheGroupOwnerOfTheFile_Usr_bin_at" selected="true" />
    <select idref="TestTheGroupOwnerOfTheFile_Usr_bin_htpasswd" selected="true" />
    <select idref="TestTheGroupOwnerOfTheFile_Usr_bin_traceroute" selected="true" />
    <select idref="TestTheGroupOwnerOfTheFile_Usr_sbin_httpd" selected="true" />
    <select idref="TestTheGroupOwnerOfTheFile_Usr_sbin_userhelper" selected="true" />
    <select idref="TestTheGroupOwnerOfTheFile_Var_log_audit_audit.log" selected="true" />
    <select idref="TestTheGroupOwnerOfTheFile_Var_named_chroot_etc_named.conf" selected="true" />
    <select idref="TestTheGroupOwnerOfTheFile_Etc_at.allow" selected="true" />
    <select idref="TestTheGroupOwnerOfTheFile_Etc_at.deny" selected="true" />
    <select idref="TestTheGroupOwnerOfTheFile_Etc_cron.allow" selected="true" />
    <select idref="TestTheGroupOwnerOfTheFile_Usr_bin_smbpasswd" selected="true" />
    <select idref="TestTheGroupOwnerOfTheFiles_Etc_default_._" selected="true" />
    <select idref="TestTheGroupOwnerOfTheFiles_Var_lib_ldap_._" selected="true" />
    <select idref="TestTheGroupOwnerOfTheFiles_Var_log_cron_" selected="true" />
    <select idref="TestTheGroupOwnerOfTheFiles_Var_log_secure_" selected="true" />
    <select idref="TestTheOwnerOf_Etc_xinetd.confFile" selected="true" />
    <select idref="TestTheOwnerOf_Usr_bin_smbpasswdFile" selected="true" />
    <select idref="TestTheOwnerOf_Usr_sbin_tracerouteFile" selected="true" />
    <select idref="TestTheOwnerOfAllFilesPresentInTheDirectory_Etc_httpd_conf" selected="true" />
    <select idref="TestTheOwnerOfThe_RootDirectory" selected="true" />
    <select idref="TestTheOwnerOfTheDirectory_Etc_httpd_conf.d" selected="true" />
    <select idref="TestTheOwnerOfTheDirectory_Etc_profile.d" selected="true" />
    <select idref="TestTheOwnerOfTheDirectory_Var" selected="true" />
    <select idref="TestTheOwnerOfTheDirectory_Var_adm" selected="true" />
    <select idref="TestTheOwnerOfTheDirectory_Var_log" selected="true" />
    <select idref="TestTheOwnerOfTheDirectory_Var_log_httpd" selected="true" />
    <select idref="TestTheOwnerOfTheDirectory_Var_www_html" selected="true" />
    <select idref="TestTheOwnerOfTheFile_Boot_grub2_grub.cfg" selected="true" />
    <select idref="TestTheOwnerOfTheFile_Etc_aliases" selected="true" />
    <select idref="TestTheOwnerOfTheFile_Etc_audit_audit.rules" selected="true" />
    <select idref="TestTheOwnerOfTheFile_Etc_audit_auditd.conf" selected="true" />
    <select idref="TestTheOwnerOfTheFile_Etc_auto.master" selected="true" />
    <select idref="TestTheOwnerOfTheFile_Etc_auto.misc" selected="true" />
    <select idref="TestTheOwnerOfTheFile_Etc_auto.net" selected="true" />
    <select idref="TestTheOwnerOfTheFile_Etc_bashrc" selected="true" />
    <select idref="TestTheOwnerOfTheFile_Etc_cron.deny" selected="true" />
    <select idref="TestTheOwnerOfTheFile_Etc_exports" selected="true" />
    <select idref="TestTheOwnerOfTheFile_Etc_group" selected="true" />
    <select idref="TestTheOwnerOfTheFile_Etc_gshadow" selected="true" />
    <select idref="TestTheOwnerOfTheFile_Etc_httpd_conf_httpd.conf" selected="true" />
    <select idref="TestTheOwnerOfTheFile_Etc_login.defs" selected="true" />
    <select idref="TestTheOwnerOfTheFile_Etc_named.conf" selected="true" />
    <select idref="TestTheOwnerOfTheFile_Etc_profile" selected="true" />
    <select idref="TestTheOwnerOfTheFile_Etc_resolv.conf" selected="true" />
    <select idref="TestTheOwnerOfTheFile_Etc_samba_smb.conf" selected="true" />
    <select idref="TestTheOwnerOfTheFile_Etc_securetty" selected="true" />
    <select idref="TestTheOwnerOfTheFile_Etc_security_access.conf" selected="true" />
    <select idref="TestTheOwnerOfTheFile_Etc_services" selected="true" />
    <select idref="TestTheOwnerOfTheFile_Etc_shadow" selected="true" />
    <select idref="TestTheOwnerOfTheFile_Etc_skel_.bash_logout" selected="true" />
    <select idref="TestTheOwnerOfTheFile_Etc_skel_.bash_profile" selected="true" />
    <select idref="TestTheOwnerOfTheFile_Etc_skel_.bashrc" selected="true" />
    <select idref="TestTheOwnerOfTheFile_Etc_snmp_snmpd.conf" selected="true" />
    <select idref="TestTheOwnerOfTheFile_Etc_ssh_sshd_config" selected="true" />
    <select idref="TestTheOwnerOfTheFile_Etc_sysctl.conf" selected="true" />
    <select idref="TestTheOwnerOfTheFile_Usr_bin_at" selected="true" />
    <select idref="TestTheOwnerOfTheFile_Usr_sbin_htpasswd" selected="true" />
    <select idref="TestTheOwnerOfTheFile_Usr_sbin_httpd" selected="true" />
    <select idref="TestTheOwnerOfTheFile_Usr_sbin_userhelper" selected="true" />
    <select idref="TestTheOwnerOfTheFile_Var_log_audit_audit.log" selected="true" />
    <select idref="TestTheOwnerOfTheFile_Var_named_chroot_etc_named.confFile" selected="true" />
    <select idref="TestTheOwnerOfTheFile_Etc_at.allow" selected="true" />
    <select idref="TestTheOwnerOfTheFile_Etc_at.deny" selected="true" />
    <select idref="TestTheOwnerOfTheFile_Etc_cron.allow" selected="true" />
    <select idref="TestTheOwnerOfTheFiles_Etc_default_._" selected="true" />
    <select idref="TestTheOwnerOfTheFiles_Var_lib_ldap_._" selected="true" />
    <select idref="TestTheOwnerOfTheFiles_Var_log_cron_" selected="true" />
    <select idref="TestTheOwnerOfTheFiles_Var_log_secure_" selected="true" />
    <select idref="TestThePermissionOfTheFile_Etc_cron.allow" selected="true" />
    <select idref="TestThePermissionsOfTheFile_Usr_bin_traceroute" selected="true" />
    <select idref="TestThePermissionsOfTheFile_Var_log_audit_audit.log" selected="true" />
    <select idref="TestThePermissionsOf_Etc_xinetd.conf" selected="true" />
    <select idref="TestThePermissionsOfAllFilesPresentInTheDirectory_Etc_httpd_conf" selected="true" />
    <select idref="TestThePermissionsOfAllFilesPresentInTheDirectory_Etc_pam.d_Files" selected="true" />
    <select idref="TestThePermissionsOfThe_RootDirectory" selected="true" />
    <select idref="TestThePermissionsOfTheDirectory_Etc_cron.d" selected="true" />
    <select idref="TestThePermissionsOfTheDirectory_Etc_httpd_conf.d" selected="true" />
    <select idref="TestThePermissionsOfTheDirectory_Etc_profile.d" selected="true" />
    <select idref="TestThePermissionsOfTheDirectory_Etc_security" selected="true" />
    <select idref="TestThePermissionsOfTheDirectory_Tmp" selected="true" />
    <select idref="TestThePermissionsOfTheDirectory_Var" selected="true" />
    <select idref="TestThePermissionsOfTheDirectory_Var_adm" selected="true" />
    <select idref="TestThePermissionsOfTheDirectory_Var_log_httpd" selected="true" />
    <select idref="TestThePermissionsOfTheDirectory_Var_tmp" selected="true" />
    <select idref="TestThePermissionsOfTheDirectory_Var_www_html" selected="true" />
    <select idref="TestThePermissionsOfTheFile_Bin_bash" selected="true" />
    <select idref="TestThePermissionsOfTheFile_Bin_tcsh" selected="true" />
    <select idref="TestThePermissionsOfTheFile_Boot_grub2_grub.cfg" selected="true" />
    <select idref="TestThePermissionsOfTheFile_Dev_mem" selected="true" />
    <select idref="TestThePermissionsOfTheFile_Dev_null" selected="true" />
    <select idref="TestThePermissionsOfTheFile_Etc_aliases" selected="true" />
    <select idref="TestThePermissionsOfTheFile_Etc_at.allow" selected="true" />
    <select idref="TestThePermissionsOfTheFile_Etc_at.deny" selected="true" />
    <select idref="TestThePermissionsOfTheFile_Etc_audit_audit.rules" selected="true" />
    <select idref="TestThePermissionsOfTheFile_Etc_audit_auditd.conf" selected="true" />
    <select idref="TestThePermissionsOfTheFile_Etc_auto.master" selected="true" />
    <select idref="TestThePermissionsOfTheFile_Etc_auto.misc" selected="true" />
    <select idref="TestThePermissionsOfTheFile_Etc_auto.net" selected="true" />
    <select idref="TestThePermissionsOfTheFile_Etc_bashrc" selected="true" />
    <select idref="TestThePermissionsOfTheFile_Etc_cron.deny" selected="true" />
    <select idref="TestThePermissionsOfTheFile_Etc_exports" selected="true" />
    <select idref="TestThePermissionsOfTheFile_Etc_fstab" selected="true" />
    <select idref="TestThePermissionsOfTheFile_Etc_group" selected="true" />
    <select idref="TestThePermissionsOfTheFile_Etc_gshadow" selected="true" />
    <select idref="TestThePermissionsOfTheFile_Etc_httpd_conf_httpd.conf" selected="true" />
    <select idref="TestThePermissionsOfTheFile_Etc_issue" selected="true" />
    <select idref="TestThePermissionsOfTheFile_Etc_login.defs" selected="true" />
    <select idref="TestThePermissionsOfTheFile_Etc_motd" selected="true" />
    <select idref="TestThePermissionsOfTheFile_Etc_named.conf" selected="true" />
    <select idref="TestThePermissionsOfTheFile_Etc_netconfig" selected="true" />
    <select idref="TestThePermissionsOfTheFile_Etc_passwd" selected="true" />
    <select idref="TestThePermissionsOfTheFile_Etc_profile" selected="true" />
    <select idref="TestThePermissionsOfTheFile_Etc_resolv.conf" selected="true" />
    <select idref="TestThePermissionsOfTheFile_Etc_rsyslog.conf" selected="true" />
    <select idref="TestThePermissionsOfTheFile_Etc_securetty" selected="true" />
    <select idref="TestThePermissionsOfTheFile_Etc_security_access.conf" selected="true" />
    <select idref="TestThePermissionsOfTheFile_Etc_services" selected="true" />
    <select idref="TestThePermissionsOfTheFile_Etc_shadow" selected="true" />
    <select idref="TestThePermissionsOfTheFile_Etc_snmp_snmpd.conf" selected="true" />
    <select idref="TestThePermissionsOfTheFile_Etc_ssh_sshd_config" selected="true" />
    <select idref="TestThePermissionsOfTheFile_Etc_sysctl.conf" selected="true" />
    <select idref="TestThePermissionsOfTheFile_Sbin_sendmail.sendmail" selected="true" />
    <select idref="TestThePermissionsOfTheFile_Usr_bin_at" selected="true" />
    <select idref="TestThePermissionsOfTheFile_Usr_bin_bash" selected="true" />
    <select idref="TestThePermissionsOfTheFile_Usr_bin_htpasswd" selected="true" />
    <select idref="TestThePermissionsOfTheFile_Usr_bin_smbpasswd" selected="true" />
    <select idref="TestThePermissionsOfTheFile_Usr_bin_sync" selected="true" />
    <select idref="TestThePermissionsOfTheFile_Usr_sbin_httpd" selected="true" />
    <select idref="TestThePermissionsOfTheFile_Usr_sbin_userhelper" selected="true" />
    <select idref="TestThePermissionsOfTheFile_Var_log_wtmp" selected="true" />
    <select idref="TestThePermissionsOfTheFile_Var_run_utmp" selected="true" />
    <select idref="TestThePermissionsOfTheFiles_Etc_default_._" selected="true" />
    <select idref="TestThePermissionsOfTheFiles_Var_lib_ldap_._" selected="true" />
    <select idref="TestThePermissionsOfTheFiles_Var_log_cron_" selected="true" />
    <select idref="TestThePermissionsOfTheFiles_Var_log_secure_" selected="true" />
    <select idref="TestThePermissionsOfTheFiles_Var_spool_mail_" selected="true" />
    <select idref="TestThePermissionsOfTheFiles_Var_tmp_" selected="true" />
    <select idref="TestThePermissionsOfTheScriptFile" selected="true" />
    <select idref="TestThePermissionsOnUser.forwardFiles" selected="true" />
    <select idref="TestThePermissionsOnUser.netrcFiles" selected="true" />
    <select idref="TestThePermissionsSetOnTheFile_Etc_hosts" selected="true" />
    <select idref="TestThePermissionsSetOnTheFile_Etc_skel_.bash_logout" selected="true" />
    <select idref="TestThePermissionsSetOnTheFile_Etc_skel_.bash_profile" selected="true" />
    <select idref="TestThePermissionsSetOnTheFile_Etc_skel_.bashrc" selected="true" />
    <select idref="TestTheStatusOf-RestrictionOfNFSClientsToPrivilegedPorts" selected="true" />
    <select idref="TheDynamicDnsFeatureOfTheDhcpServerShouldBeDisabled" selected="true" />
    <select idref="TheShellForTheAdmAccountShouldBeAssignedAppropriately." selected="true" />
    <select idref="TheShellForTheBinAccountShouldBeAssignedAppropriately." selected="true" />
    <select idref="TheShellForTheGdmAccountShouldBeAssignedAppropriately." selected="true" />
    <select idref="TheShellForTheListenAccountShouldBeAssignedAppropriately." selected="true" />
    <select idref="TheShellForTheLpAccountShouldBeAssignedAppropriately." selected="true" />
    <select idref="TheShellForTheNoaccessAccountShouldBeAssignedAppropriately." selected="true" />
    <select idref="TheShellForTheNobodyAccountShouldBeAssignedAppropriately." selected="true" />
    <select idref="TheShellForTheNobody4AccountShouldBeAssignedAppropriately." selected="true" />
    <select idref="TheShellForTheNuucpAccountShouldBeAssignedAppropriately." selected="true" />
    <select idref="TheShellForTheSmmspAccountShouldBeAssignedAppropriately." selected="true" />
    <select idref="TheShellForTheUucpAccountShouldBeAssignedAppropriately." selected="true" />
    <select idref="TheShellForTheWebservdAccountShouldBeAssignedAppropriately." selected="true" />
    <select idref="TheSquidEUIDShouldBeSetToAnAppropriateUser" selected="true" />
    <select idref="TheSquidGUIDShouldBeSetToAnAppropriateGroup" selected="true" />
    <select idref="UseOnlyApprovedCipherInCounterMode" selected="true" />
    <select idref="UseRoot_SquashingOnAllExports" selected="true" />
    <select idref="UseTheLatestOperatingSystemRelease" selected="true" />
    <select idref="VerifyGroupsReferencedIn_etc_passwdAreIncludedIn_etc_group" selected="true" />
    <select idref="VerifyNet_snmpVersionOnTheSystem" selected="true" />
    <select idref="VerifyNoLegacy_EntriesExistIn_Etc_groupFile" selected="true" />
    <select idref="VerifyNoLegacy_EntriesExistIn_Etc_passwdFile" selected="true" />
    <select idref="VerifyNoLegacy_EntriesExistIn_Etc_shadowFile" selected="true" />
    <select idref="VerifyNoUID0AccountsExistOtherThanRoot" selected="true" />
    <select idref="VerifyPermissionsOn_Etc_hosts.allow" selected="true" />
    <select idref="VerifyPermissionsOn_Etc_hosts.allow_GroupOwnership" selected="true" />
    <select idref="VerifyPermissionsOn_Etc_hosts.allow_Ownership" selected="true" />
    <select idref="VerifyPermissionsOn_Etc_hosts.deny" selected="true" />
    <select idref="VerifyPermissionsOn_Etc_hosts.deny_GroupOwnership" selected="true" />
    <select idref="VerifyPermissionsOn_Etc_hosts.deny_Ownership" selected="true" />
    <select idref="VerifyThatAHomeDirectoryHasBeenEstablishedForRoot" selected="true" />
    <select idref="VerifyThatGpgcheckIsGloballyActivated" selected="true" />
    <select idref="VsftpdTransactionLogging" selected="true" />
    <select idref="WriteAccessToNFSSharesShouldBeDisabled" selected="true" />
    <select idref="ConfigureFirewallToGenerateAuditLogs_Etc_sysconfig_firewalld" selected="true" />
    <select idref="EnsureFirewalldServiceIsEnabled" selected="true" />
    <select idref="VerifyFirewalldVersionOnTheSystem" selected="true" />
    <select idref="TestIfTheFile_Var_log_firewalldExists" selected="true" />
    <select idref="TestTheGroupOwnerOfTheDirectory_Etc_firewalld" selected="true" />
    <select idref="TestTheOwnerOfTheDirectory_Etc_firewalld" selected="true" />
    <select idref="TestThePermissionsOfTheDirectory_Etc_firewalld" selected="true" />
    <select idref="TestTheGroupOwnerOfTheFile_Etc_firewalld_firewalld.conf" selected="true" />
    <select idref="TestTheOwnerOfTheFile_Etc_firewalld_firewalld.conf" selected="true" />
    <select idref="TestThePermissionsOfTheFile_Etc_firewalld_firewalld.conf" selected="true" />
    <select idref="TestThePermissionsOfTheFile_Etc_sysconfig_firewalld" selected="true" />
    <select idref="TestTheOwnerOfTheFile_Etc_sysconfig_firewalld" selected="true" />
    <select idref="TestTheGroupOwnerOfTheFile_Etc_sysconfig_firewalld" selected="true" />
    <select idref="EnsurePasswordHashingAlgorithmIsSHA_512" selected="true" />
  </Profile>
  <Profile id="CentOSLinux7PCIBenchmark" abstract="false">
    <title xml:lang="en">CentOS Linux 7 PCI Benchmark</title>
    <description xml:lang="en" />
    <platform idref="cpe:/o:centos:centos:7" />
    <select idref="AcceptRemoteRsyslogMessagesOnlyOnDesignatedLogHosts" selected="true" />
    <select idref="AddNodevOptionTo_Dev_shmPartition" selected="true" />
    <select idref="AddNodevOptionTo_Home" selected="true" />
    <select idref="AddNodevOptionToRemovableMediaPartitions" selected="true" />
    <select idref="AddNosuidOptionToRemovableMediaPartitions" selected="true" />
    <select idref="CheckForDuplicateGIDs" selected="true" />
    <select idref="CheckForDuplicateGroupNames" selected="true" />
    <select idref="CheckForDuplicateUIDs" selected="true" />
    <select idref="CheckForDuplicateUserNames" selected="true" />
    <select idref="CheckForPresenceOfUser.netrcFiles" selected="true" />
    <select idref="CheckForUnconfinedDaemons" selected="true" />
    <select idref="CheckPermissionsOnUserHomeDirectories" selected="true" />
    <select idref="CheckThatReservedUIDsAreAssignedToSystemAccounts" selected="true" />
    <select idref="CheckThatUsersAreAssignedValidHomeDirectories" selected="true" />
    <select idref="CheckUserDotFilePermissions" selected="true" />
    <select idref="CollectChangesToSystemAdministrationScope" selected="true" />
    <select idref="CollectDiscretionaryAccessControlPermissionModificationEvents" selected="true" />
    <select idref="CollectFileDeletionEventsByUser" selected="true" />
    <select idref="CollectKernelModuleLoadingAndUnloading" selected="true" />
    <select idref="CollectLoginAndLogoutEvents" selected="true" />
    <select idref="CollectSessionInitiationInformation" selected="true" />
    <select idref="CollectSuccessfulFileSystemMounts" selected="true" />
    <select idref="CollectSystemAdministratorActions_Sudolog_" selected="true" />
    <select idref="CollectUnsuccessfulUnauthorizedAccessAttemptsToFiles" selected="true" />
    <select idref="Configuraration_Read_onlyOptionForAllNFSExports" selected="true" />
    <select idref="Configuration_LimitRootLoginToTheLocalConsole" selected="true" />
    <select idref="Configuration-MesgNIsSetAsDefaultForAllUsers" selected="true" />
    <select idref="Configuration_RestrictLockdServiceToUseAStaticTcpPort" selected="true" />
    <select idref="Configuration_RestrictLockdServiceToUseAStaticUdpPort" selected="true" />
    <select idref="Configuration_RootAccountShouldBeDisabled" selected="true" />
    <select idref="Configuration_SendmailExpnCommandShouldBeDisabled" selected="true" />
    <select idref="Configuration_SendmailVrfyCommandShouldBeDisabled" selected="true" />
    <select idref="ConfigureAuditLogStorageSize" selected="true" />
    <select idref="ConfigureRsyslogToSendLogsToARemoteLogHost" selected="true" />
    <select idref="Create_Etc_hosts.allow" selected="true" />
    <select idref="Create_Etc_hosts.deny" selected="true" />
    <select idref="CreateThe_Etc_vsftpd_ftpusersFile" selected="true" />
    <select idref="DisableAutofsUnlessAutofsIsAbsolutelyNecessary" selected="true" />
    <select idref="DisableAvahiServerUnlessAvahiServerIsAbsolutelyNecessary" selected="true" />
    <select idref="DisableBindUnlessBindIsAbsolutelyNecessary" selected="true" />
    <select idref="DisableBluetoothUnlessBluetoothIsAbsolutelyNecessary" selected="true" />
    <select idref="DisableChargen_dgramUnlessChargen_dgramIsAbsolutelyNecessary" selected="true" />
    <select idref="DisableChargen_streamUnlessChargen_streamIsAbsolutelyNecessary" selected="true" />
    <select idref="DisableCpupowerUnlessCpupowerIsAbsolutelyNecessary" selected="true" />
    <select idref="DisableCupsUnlessCupsIsAbsolutelyNecessary" selected="true" />
    <select idref="DisableDaytime_dgramUnlessDaytime_dgramIsAbsolutelyNecessary" selected="true" />
    <select idref="DisableDaytime_streamUnlessDaytime_streamIsAbsolutelyNecessary" selected="true" />
    <select idref="DisableDCCP" selected="true" />
    <select idref="DisableDhcpdUnlessDhcpdIsAbsolutelyNecessary" selected="true" />
    <select idref="DisableDiscardTcpUnlessDiscardTcpIsAbsolutelyNecessary" selected="true" />
    <select idref="DisableDiscard_udpUnlessDiscard_udpIsAbsolutelyNecessary" selected="true" />
    <select idref="DisableDovecotUnlessDovecotIsAbsolutelyNecessary" selected="true" />
    <select idref="DisableEcho_dgramUnlessEcho_dgramIsAbsolutelyNecessary" selected="true" />
    <select idref="DisableEcho_streamUnlessEcho_streamIsAbsolutelyNecessary" selected="true" />
    <select idref="DisableFirstbootUnlessFirstbootIsAbsolutelyNecessary" selected="true" />
    <select idref="DisableFtpUnlessFtpIsAbsolutelyNecessary" selected="true" />
    <select idref="DisableGdmUnlessGdmIsAbsolutelyNecessary" selected="true" />
    <select idref="DisableIPForwarding" selected="true" />
    <select idref="DisableIp6tablesUnlessIp6tablesIsAbsolutelyNecessary" selected="true" />
    <select idref="DisableIptablesUnlessIptablesIsAbsolutelyNecessary" selected="true" />
    <select idref="DisableIPv6RouterAdvertisements_Net.ipv6.conf.default.accept_ra" selected="true" />
    <select idref="DisableIPv6RouterAdvertisements_net.ipv6.conf.all.accept_ra" selected="true" />
    <select idref="DisableIrqbalanceUnlessIrqbalanceIsAbsolutelyNecessary" selected="true" />
    <select idref="DisableKadminUnlessKadminIsAbsolutelyNecessary" selected="true" />
    <select idref="DisableKdumpUnlessKdumpIsAbsolutelyNecessary" selected="true" />
    <select idref="DisableKpropUnlessKpropIsAbsolutelyNecessary" selected="true" />
    <select idref="DisableKrb5kdcUnlessKrb5kdcIsAbsolutelyNecessary" selected="true" />
    <select idref="DisableLockdUnlessLockdIsAbsolutelyNecessary" selected="true" />
    <select idref="DisableLogonPromptsOnSerialPorts" selected="true" />
    <select idref="DisableMdmonitorUnlessMdmonitorIsAbsolutelyNecessary" selected="true" />
    <select idref="DisableMicrocodeUnlessMicrocodeIsAbsolutelyNecessary" selected="true" />
    <select idref="DisableMountdUnlessMountdIsAbsolutelyNecessary" selected="true" />
    <select idref="DisableMountingOfCramfsFilesystems" selected="true" />
    <select idref="DisableMountingOfFreevxfsFilesystems" selected="true" />
    <select idref="DisableMountingOfHfsFilesystems" selected="true" />
    <select idref="DisableMountingOfHfsplusFilesystems" selected="true" />
    <select idref="DisableMountingOfJffs2Filesystems" selected="true" />
    <select idref="DisableMountingOfSquashfsFilesystems" selected="true" />
    <select idref="DisableMountingOfUdfFilesystems" selected="true" />
    <select idref="DisableMysqldUnlessMysqldIsAbsolutelyNecessary" selected="true" />
    <select idref="DisableNamedUnlessNamedIsAbsolutelyNecessary" selected="true" />
    <select idref="DisableNetworkUnlessNetworkIsAbsolutelyNecessary" selected="true" />
    <select idref="DisableNfsUnlessNfsServiceIsAbsolutelyNecessary" selected="true" />
    <select idref="DisableNfs_serverUnlessNfs_serverIsAbsolutelyNecessary" selected="true" />
    <select idref="DisableNfslockUnlessNfslockIsAbsolutelyNecessary" selected="true" />
    <select idref="DisableNtpdUnlessNtpdIsAbsolutelyNecessary" selected="true" />
    <select idref="DisablePcscdUnlessPcscdIsAbsolutelyNecessary" selected="true" />
    <select idref="DisablePopUnlessPopIsAbsolutelyNecessary" selected="true" />
    <select idref="DisableRDS" selected="true" />
    <select idref="DisableRestorecondUnlessRestorecondIsAbsolutelyNecessary" selected="true" />
    <select idref="DisableRpcbindUnlessRpcbindIsAbsolutelyNecessary" selected="true" />
    <select idref="DisableRpcgssdUnlessRpcgssdIsAbsolutelyNecessary" selected="true" />
    <select idref="DisableRpcidmapdUnlessRpcidmapdIsAbsolutelyNecessary" selected="true" />
    <select idref="DisableRpcsvcgssdUnlessRpcsvcgssdIsAbsolutelyNecessary" selected="true" />
    <select idref="DisableRquotadUnlessRquotadIsAbsolutelyNecessary" selected="true" />
    <select idref="DisableRshUnlessRshIsAbsolutelyNecessary" selected="true" />
    <select idref="DisableRstatdUnlessRstatdIsAbsolutelyNecessary" selected="true" />
    <select idref="DisableRsyncdUnlessRsyncdIsAbsolutelyNecessary" selected="true" />
    <select idref="DisableRsyslogUnlessRsyslogIsAbsolutelyNecessary" selected="true" />
    <select idref="DisableRusersdUnlessRusersdIsAbsolutelyNecessary" selected="true" />
    <select idref="DisableSCTP" selected="true" />
    <select idref="DisableSmartdUnlessSmartdIsAbsolutelyNecessary" selected="true" />
    <select idref="DisableSmbUnlessSmbIsAbsolutelyNecessary" selected="true" />
    <select idref="DisableSnmpdUnlessSnmpdIsAbsolutelyNecessary" selected="true" />
    <select idref="DisableSourceRoutedPacketAcceptance_Net.ipv4.conf.all.accept_source_route" selected="true" />
    <select idref="DisableSourceRoutedPacketAcceptance_Net.ipv4.conf.default.accept_source_route" selected="true" />
    <select idref="DisableSSHRootLogin" selected="true" />
    <select idref="DisableSSHX11Forwarding" selected="true" />
    <select idref="DisableStatdUnlessStatdIsAbsolutelyNecessary" selected="true" />
    <select idref="DisableSystemAccounts" selected="true" />
    <select idref="DisableSystemOnAuditLogFull" selected="true" />
    <select idref="DisableTcpmux-serverUnlessTcpmux-serverIsAbsolutelyNecessary" selected="true" />
    <select idref="DisableTelnetUnlessRquotadIsAbsolutelyNecessary" selected="true" />
    <select idref="DisableTftpUnlessTftpIsAbsolutelyNecessary" selected="true" />
    <select idref="DisableTIPC" selected="true" />
    <select idref="DisableUSBstoragedevices" selected="true" />
    <select idref="DisableYpbindUnlessYpbindIsAbsolutelyNecessary" selected="true" />
    <select idref="DisableYppasswddUnlessYppasswddIsAbsolutelyNecessary" selected="true" />
    <select idref="DisableYpservUnlessYpservIsAbsolutelyNecessary" selected="true" />
    <select idref="DisableYpxfrdUnlessYpxfrdIsAbsolutelyNecessary" selected="true" />
    <select idref="DisableYum_cronUnlessYum_cronIsAbsolutelyNecessary" selected="true" />
    <select idref="DoNotAllowUsersToSetEnvironmentOptions" selected="true" />
    <select idref="EnableAnacronDaemon" selected="true" />
    <select idref="EnableAuditdService" selected="true" />
    <select idref="EnableAuditingForProcessesThatStartPriorToAuditdIn_Boot_grub2_grub.cfg" selected="true" />
    <select idref="EnableAuditingForProcessesThatStartPriorToAuditdIn_Etc_default_grub" selected="true" />
    <select idref="EnableBadErrorMessageProtection_Net.ipv4.icmp_ignore_bogus_error_responses" selected="true" />
    <select idref="EnableCrondDaemon" selected="true" />
    <select idref="EnableIgnoreBroadcastRequests_Net.ipv4.icmp_echo_ignore_broadcasts" selected="true" />
    <select idref="EnableRFC_recommendedSourceRouteValidation_Net.ipv4.conf.all.rp_filter" selected="true" />
    <select idref="EnableRFC_recommendedSourceRouteValidation_Net.ipv4.conf.default.rp_filter" selected="true" />
    <select idref="EnableSELinuxIn_Boot_grub2_grub.cfg" selected="true" />
    <select idref="EnableSELinuxIn_Boot_grub2_grub.cfg_EnforcingShouldNotBeDisabledIn_Boot_grub2_grub.cfg" selected="true" />
    <select idref="EnsurePasswordFieldsAreNotEmpty" selected="true" />
    <select idref="FTPConfiguration_EnableOrDisableAnonymousAccessViaVsftpdServiceAsAppropriate" selected="true" />
    <select idref="FTPConfiguration_EnableOrDisableFileUploadsViaVsftpdServiceAsAppropriate" selected="true" />
    <select idref="FTPConfiguration_UmaskForFtpUsers" selected="true" />
    <select idref="TestTheGroupOwnerOfTheFiles-_Var_log_boot.log_" selected="true" />
    <select idref="InstallTCPWrappers" selected="true" />
    <select idref="KeepAllAuditingInformation" selected="true" />
    <select idref="LimitAccessViaSSH" selected="true" />
    <select idref="LimitPasswordReuse" selected="true" />
    <select idref="LockInactiveUserAccounts" selected="true" />
    <select idref="LogSuspiciousPackets_Net.ipv4.conf.all.log_martians" selected="true" />
    <select idref="LogSuspiciousPackets_Net.ipv4.conf.default.log_martians" selected="true" />
    <select idref="MakeTheAuditConfigurationImmutable" selected="true" />
    <select idref="NFSConfiguration_Insecure_locksOptionRemoval_etc_exports" selected="true" />
    <select idref="TestTheOwnerOfTheFiles-_Var_log_boot.log_" selected="true" />
    <select idref="PasswordCreationRequirementParametersUsingPam_pwquality_Dcredit" selected="true" />
    <select idref="PasswordCreationRequirementParametersUsingPam_pwquality_Lcredit" selected="true" />
    <select idref="PasswordCreationRequirementParametersUsingPam_pwquality_Minlen" selected="true" />
    <select idref="PasswordCreationRequirementParametersUsingPam_pwquality_Ocredit" selected="true" />
    <select idref="PasswordCreationRequirementParametersUsingPam_pwquality_Retry" selected="true" />
    <select idref="PasswordCreationRequirementParametersUsingPam_pwquality_Try_first_pass" selected="true" />
    <select idref="PasswordCreationRequirementParametersUsingPam_pwquality_Ucredit" selected="true" />
    <select idref="PasswordSettings_NewUsersToChangeTheirPasswordOnFirstLogon" selected="true" />
    <select idref="TestThePermissionsOfTheFiles-_Var_log_boot.log_" selected="true" />
    <select idref="RecordEventsThatModifyDateAndTimeInformation" selected="true" />
    <select idref="RecordEventsThatModifyTheSystem_sMandatoryAccessControls" selected="true" />
    <select idref="RecordEventsThatModifyTheSystem_sNetworkEnvironment" selected="true" />
    <select idref="RecordEventsThatModifyUser_GroupInformation" selected="true" />
    <select idref="RemoveMCSTranslationService" selected="true" />
    <select idref="RemoveNISClient" selected="true" />
    <select idref="RemoveNISServer" selected="true" />
    <select idref="RemoveRhostsSupportUnlessAbsolutelyNecessary" selected="true" />
    <select idref="RemoveSETroubleshootService" selected="true" />
    <select idref="RemoveTelnet_serverPackage" selected="true" />
    <select idref="RemoveThe_Etc_hosts_equivFile" selected="true" />
    <select idref="RemoveUnixToUnixCopyClient" selected="true" />
    <select idref="DisableAvahiServer-RemoveZeroconf" selected="true" />
    <select idref="RestrictAccessToTheSuCommand_LimitAccessToTheRootAccountFromSu" selected="true" />
    <select idref="RestrictAccessToTheSuCommand_UsersListInTheWheelStatementIn_Etc_group" selected="true" />
    <select idref="RestrictAt_cronToAuthorizedUsers_TestTheExistenceOfTheFile_Etc_cron.deny" selected="true" />
    <select idref="RestrictCoreDumps" selected="true" />
    <select idref="RestrictCoreDumps_Fs.suid_dumpableVariableValue" selected="true" />
    <select idref="SetBootLoaderPassword" selected="true" />
    <select idref="SetDefaultGroupForRootAccount" selected="true" />
    <select idref="SetDefaultUmaskForUsers_AllTheFilesIn_Etc_profile.dDirectory" selected="true" />
    <select idref="SetGroupOwnerPermissionOn_Etc_anacrontab" selected="true" />
    <select idref="SetGroupOwnerPermissionOn_Etc_cron.dDirectory" selected="true" />
    <select idref="SetGroupOwnerPermissionOn_Etc_cron.dailyDirectory" selected="true" />
    <select idref="SetGroupOwnerPermissionOn_Etc_cron.hourlyDirectory" selected="true" />
    <select idref="SetGroupOwnerPermissionOn_Etc_cron.monthlyDirectory" selected="true" />
    <select idref="SetGroupOwnerPermissionOn_Etc_crontab" selected="true" />
    <select idref="SetIdleTimeoutIntervalForUserLogin_ClientAliveCountMax" selected="true" />
    <select idref="SetIdleTimeoutIntervalForUserLogin_ClientAliveInterval" selected="true" />
    <select idref="SetLockoutForFailedPasswordAttempts" selected="true" />
    <select idref="SetLogLevelToINFO" selected="true" />
    <select idref="SetNodevOptionFor_TmpPartition" selected="true" />
    <select idref="SetOwnerPermissionOn_Etc_anacrontab" selected="true" />
    <select idref="SetOwnerPermissionOn_Etc_cron.dDirectory" selected="true" />
    <select idref="SetOwnerPermissionOn_Etc_cron.dailyDirectory" selected="true" />
    <select idref="SetOwnerPermissionOn_Etc_cron.hourlyDirectory" selected="true" />
    <select idref="SetOwnerPermissionOn_Etc_cron.monthlyDirectory" selected="true" />
    <select idref="SetOwnerPermissionOn_Etc_crontab" selected="true" />
    <select idref="SetPasswordChangeMinimumNumberOfDays" selected="true" />
    <select idref="SetPasswordExpirationDays" selected="true" />
    <select idref="SetPasswordExpiringWarningDays" selected="true" />
    <select idref="SetPermissionOn_Etc_anacrontab" selected="true" />
    <select idref="SetPermissionsOn_Etc_cron.dailyDirectory" selected="true" />
    <select idref="SetPermissionsOn_Etc_cron.hourlyDirectory" selected="true" />
    <select idref="SetPermissionsOn_Etc_cron.monthlyDirectory" selected="true" />
    <select idref="SetPermissionsOn_Etc_cron.weeklyDirectory" selected="true" />
    <select idref="SetPermissionsOn_Etc_crontab" selected="true" />
    <select idref="SetSSHBanner" selected="true" />
    <select idref="SetSSHHostbasedAuthenticationToNo" selected="true" />
    <select idref="SetSSHIgnoreRhostsToYes" selected="true" />
    <select idref="SetSSHMaxAuthTriesTo4OrLess" selected="true" />
    <select idref="SetSSHPermitEmptyPasswordsToNo" selected="true" />
    <select idref="SetSSHProtocolTo2" selected="true" />
    <select idref="SetTheSELinuxPolicy" selected="true" />
    <select idref="SetTheSELinuxState" selected="true" />
    <select idref="TestIfAppropriateBootLoaderIsInstalled" selected="true" />
    <select idref="TestIfFileExists_Var_log_messages" selected="true" />
    <select idref="TestIfTheSystemLogonBannerIsSetCorrectly_Etc_dconf_db_gdm.d_" selected="true" />
    <select idref="TestPermissionsOnRsyslogLogFile_Var_log_daemon.log" selected="true" />
    <select idref="TestPermissionsOnRsyslogLogFile_Var_log_daemon.log_GroupOwnership" selected="true" />
    <select idref="TestPermissionsOnRsyslogLogFile_Var_log_daemon.log_Ownership" selected="true" />
    <select idref="TestPermissionsOnRsyslogLogFile_Var_log_kern.log" selected="true" />
    <select idref="TestPermissionsOnRsyslogLogFile_Var_log_kern.log_GroupOwnership" selected="true" />
    <select idref="TestPermissionsOnRsyslogLogFile_Var_log_kern.log_Ownership" selected="true" />
    <select idref="TestPermissionsOnRsyslogLogFile_Var_log_messages" selected="true" />
    <select idref="TestPermissionsOnRsyslogLogFile_Var_log_messages_GroupOwnership" selected="true" />
    <select idref="TestPermissionsOnRsyslogLogFile_Var_log_messages_Ownership" selected="true" />
    <select idref="TestPermissionsOnRsyslogLogFile_Var_log_syslog" selected="true" />
    <select idref="TestPermissionsOnRsyslogLogFile_Var_log_syslog_GroupOwnership" selected="true" />
    <select idref="TestPermissionsOnRsyslogLogFile_Var_log_syslog_Ownership" selected="true" />
    <select idref="TestPermissionsOnRsyslogLogFile_Var_log_unused.log" selected="true" />
    <select idref="TestPermissionsOnRsyslogLogFile_Var_log_unused.log_GroupOwnership" selected="true" />
    <select idref="TestPermissionsOnRsyslogLogFile_Var_log_unused.log_Ownership" selected="true" />
    <select idref="TestTheConfigurationStatusOfMailTransferAgent_MTA_ForLocal_onlyMode" selected="true" />
    <select idref="TestTheEnable_DisableStatusFor_Net.ipv4.conf.all.secure_redirects" selected="true" />
    <select idref="TestTheEnable_DisableStatusFor_Net.ipv4.conf.default.secure_redirects" selected="true" />
    <select idref="TestTheEnable_DisableStatusFor-InteractiveBoot" selected="true" />
    <select idref="TestTheExistenceOfTheFile_Etc_at.allow" selected="true" />
    <select idref="TestTheExistenceOfTheFile_Etc_cron.allow" selected="true" />
    <select idref="TestTheExistenceOfTheFile_var_run_btmp" selected="true" />
    <select idref="TestTheExistenceOfTheFile_var_run_utmp" selected="true" />
    <select idref="TestTheExistenceOfTheFiles-_Var_log_boot.log_" selected="true" />
    <select idref="TestTheGroupOwnerOfAllFilesPresentInTheDirectory_Etc_httpd_conf" selected="true" />
    <select idref="TestTheGroupOwnerOfThe_RootDirectory" selected="true" />
    <select idref="TestTheGroupOwnerOfTheDirectory_Etc_httpd_conf.d" selected="true" />
    <select idref="TestTheGroupOwnerOfTheDirectory_Etc_profile.d" selected="true" />
    <select idref="TestTheGroupOwnerOfTheDirectory_Var" selected="true" />
    <select idref="TestTheGroupOwnerOfTheDirectory_Var_adm" selected="true" />
    <select idref="TestTheGroupOwnerOfTheDirectory_Var_log_httpd" selected="true" />
    <select idref="TestTheGroupOwnerOfTheDirectory_Var_www_html" selected="true" />
    <select idref="TestTheGroupOwnerOfTheFile_Boot_grub2_grub.cfg" selected="true" />
    <select idref="TestTheGroupOwnerOfTheFile_Etc_aliases" selected="true" />
    <select idref="TestTheGroupOwnerOfTheFile_Etc_audit_audit.rules" selected="true" />
    <select idref="TestTheGroupOwnerOfTheFile_Etc_audit_auditd.conf" selected="true" />
    <select idref="TestTheGroupOwnerOfTheFile_Etc_auto.master" selected="true" />
    <select idref="TestTheGroupOwnerOfTheFile_Etc_auto.misc" selected="true" />
    <select idref="TestTheGroupOwnerOfTheFile_Etc_auto.net" selected="true" />
    <select idref="TestTheGroupOwnerOfTheFile_Etc_bashrc" selected="true" />
    <select idref="TestTheGroupOwnerOfTheFile_Etc_cron.deny" selected="true" />
    <select idref="TestTheGroupOwnerOfTheFile_Etc_exports" selected="true" />
    <select idref="TestTheGroupOwnerOfTheFile_Etc_group" selected="true" />
    <select idref="TestTheGroupOwnerOfTheFile_Etc_gshadow" selected="true" />
    <select idref="TestTheGroupOwnerOfTheFile_Etc_httpd_conf_httpd.conf" selected="true" />
    <select idref="TestTheGroupOwnerOfTheFile_Etc_login.defs" selected="true" />
    <select idref="TestTheGroupOwnerOfTheFile_Etc_named.conf" selected="true" />
    <select idref="TestTheGroupOwnerOfTheFile_Etc_profile" selected="true" />
    <select idref="TestTheGroupOwnerOfTheFile_Etc_resolv.conf" selected="true" />
    <select idref="TestTheGroupOwnerOfTheFile_Etc_samba_smb.conf" selected="true" />
    <select idref="TestTheGroupOwnerOfTheFile_Etc_securetty" selected="true" />
    <select idref="TestTheGroupOwnerOfTheFile_Etc_security_access.conf" selected="true" />
    <select idref="TestTheGroupOwnerOfTheFile_Etc_services" selected="true" />
    <select idref="TestTheGroupOwnerOfTheFile_Etc_shadow" selected="true" />
    <select idref="TestTheGroupOwnerOfTheFile_Etc_skel_.bash_logout" selected="true" />
    <select idref="TestTheGroupOwnerOfTheFile_Etc_skel_.bash_profile" selected="true" />
    <select idref="TestTheGroupOwnerOfTheFile_Etc_skel_.bashrc" selected="true" />
    <select idref="TestTheGroupOwnerOfTheFile_Etc_snmp_snmpd.conf" selected="true" />
    <select idref="TestTheGroupOwnerOfTheFile_Etc_ssh_sshd_config" selected="true" />
    <select idref="TestTheGroupOwnerOfTheFile_Etc_sysctl.conf" selected="true" />
    <select idref="TestTheGroupOwnerOfTheFile_Etc_xinetd.conf" selected="true" />
    <select idref="TestTheGroupOwnerOfTheFile_Usr_bin_at" selected="true" />
    <select idref="TestTheGroupOwnerOfTheFile_Usr_bin_htpasswd" selected="true" />
    <select idref="TestTheGroupOwnerOfTheFile_Usr_bin_traceroute" selected="true" />
    <select idref="TestTheGroupOwnerOfTheFile_Usr_sbin_httpd" selected="true" />
    <select idref="TestTheGroupOwnerOfTheFile_Usr_sbin_userhelper" selected="true" />
    <select idref="TestTheGroupOwnerOfTheFile_Var_log_audit_audit.log" selected="true" />
    <select idref="TestTheGroupOwnerOfTheFile_Var_named_chroot_etc_named.conf" selected="true" />
    <select idref="TestTheGroupOwnerOfTheFile_Etc_at.allow" selected="true" />
    <select idref="TestTheGroupOwnerOfTheFile_Etc_at.deny" selected="true" />
    <select idref="TestTheGroupOwnerOfTheFile_Etc_cron.allow" selected="true" />
    <select idref="TestTheGroupOwnerOfTheFile_Usr_bin_smbpasswd" selected="true" />
    <select idref="TestTheGroupOwnerOfTheFiles_Etc_default_._" selected="true" />
    <select idref="TestTheGroupOwnerOfTheFiles_Var_lib_ldap_._" selected="true" />
    <select idref="TestTheGroupOwnerOfTheFiles_Var_log_cron_" selected="true" />
    <select idref="TestTheGroupOwnerOfTheFiles_Var_log_secure_" selected="true" />
    <select idref="TestTheOwnerOf_Etc_xinetd.confFile" selected="true" />
    <select idref="TestTheOwnerOf_Usr_bin_smbpasswdFile" selected="true" />
    <select idref="TestTheOwnerOf_Usr_sbin_tracerouteFile" selected="true" />
    <select idref="TestTheOwnerOfAllFilesPresentInTheDirectory_Etc_httpd_conf" selected="true" />
    <select idref="TestTheOwnerOfThe_RootDirectory" selected="true" />
    <select idref="TestTheOwnerOfTheDirectory_Etc_httpd_conf.d" selected="true" />
    <select idref="TestTheOwnerOfTheDirectory_Etc_profile.d" selected="true" />
    <select idref="TestTheOwnerOfTheDirectory_Var" selected="true" />
    <select idref="TestTheOwnerOfTheDirectory_Var_adm" selected="true" />
    <select idref="TestTheOwnerOfTheDirectory_Var_log" selected="true" />
    <select idref="TestTheOwnerOfTheDirectory_Var_log_httpd" selected="true" />
    <select idref="TestTheOwnerOfTheDirectory_Var_www_html" selected="true" />
    <select idref="TestTheOwnerOfTheFile_Boot_grub2_grub.cfg" selected="true" />
    <select idref="TestTheOwnerOfTheFile_Etc_aliases" selected="true" />
    <select idref="TestTheOwnerOfTheFile_Etc_audit_audit.rules" selected="true" />
    <select idref="TestTheOwnerOfTheFile_Etc_audit_auditd.conf" selected="true" />
    <select idref="TestTheOwnerOfTheFile_Etc_auto.master" selected="true" />
    <select idref="TestTheOwnerOfTheFile_Etc_auto.misc" selected="true" />
    <select idref="TestTheOwnerOfTheFile_Etc_auto.net" selected="true" />
    <select idref="TestTheOwnerOfTheFile_Etc_bashrc" selected="true" />
    <select idref="TestTheOwnerOfTheFile_Etc_cron.deny" selected="true" />
    <select idref="TestTheOwnerOfTheFile_Etc_exports" selected="true" />
    <select idref="TestTheOwnerOfTheFile_Etc_group" selected="true" />
    <select idref="TestTheOwnerOfTheFile_Etc_gshadow" selected="true" />
    <select idref="TestTheOwnerOfTheFile_Etc_httpd_conf_httpd.conf" selected="true" />
    <select idref="TestTheOwnerOfTheFile_Etc_login.defs" selected="true" />
    <select idref="TestTheOwnerOfTheFile_Etc_named.conf" selected="true" />
    <select idref="TestTheOwnerOfTheFile_Etc_profile" selected="true" />
    <select idref="TestTheOwnerOfTheFile_Etc_resolv.conf" selected="true" />
    <select idref="TestTheOwnerOfTheFile_Etc_samba_smb.conf" selected="true" />
    <select idref="TestTheOwnerOfTheFile_Etc_securetty" selected="true" />
    <select idref="TestTheOwnerOfTheFile_Etc_security_access.conf" selected="true" />
    <select idref="TestTheOwnerOfTheFile_Etc_services" selected="true" />
    <select idref="TestTheOwnerOfTheFile_Etc_shadow" selected="true" />
    <select idref="TestTheOwnerOfTheFile_Etc_skel_.bash_logout" selected="true" />
    <select idref="TestTheOwnerOfTheFile_Etc_skel_.bash_profile" selected="true" />
    <select idref="TestTheOwnerOfTheFile_Etc_skel_.bashrc" selected="true" />
    <select idref="TestTheOwnerOfTheFile_Etc_snmp_snmpd.conf" selected="true" />
    <select idref="TestTheOwnerOfTheFile_Etc_ssh_sshd_config" selected="true" />
    <select idref="TestTheOwnerOfTheFile_Etc_sysctl.conf" selected="true" />
    <select idref="TestTheOwnerOfTheFile_Usr_bin_at" selected="true" />
    <select idref="TestTheOwnerOfTheFile_Usr_sbin_htpasswd" selected="true" />
    <select idref="TestTheOwnerOfTheFile_Usr_sbin_httpd" selected="true" />
    <select idref="TestTheOwnerOfTheFile_Usr_sbin_userhelper" selected="true" />
    <select idref="TestTheOwnerOfTheFile_Var_log_audit_audit.log" selected="true" />
    <select idref="TestTheOwnerOfTheFile_Var_named_chroot_etc_named.confFile" selected="true" />
    <select idref="TestTheOwnerOfTheFile_Etc_at.allow" selected="true" />
    <select idref="TestTheOwnerOfTheFile_Etc_at.deny" selected="true" />
    <select idref="TestTheOwnerOfTheFile_Etc_cron.allow" selected="true" />
    <select idref="TestTheOwnerOfTheFiles_Etc_default_._" selected="true" />
    <select idref="TestTheOwnerOfTheFiles_Var_lib_ldap_._" selected="true" />
    <select idref="TestTheOwnerOfTheFiles_Var_log_cron_" selected="true" />
    <select idref="TestTheOwnerOfTheFiles_Var_log_secure_" selected="true" />
    <select idref="TestThePermissionOfTheFile_Etc_cron.allow" selected="true" />
    <select idref="TestThePermissionsOfTheFile_Usr_bin_traceroute" selected="true" />
    <select idref="TestThePermissionsOfTheFile_Var_log_audit_audit.log" selected="true" />
    <select idref="TestThePermissionsOf_Etc_xinetd.conf" selected="true" />
    <select idref="TestThePermissionsOfAllFilesPresentInTheDirectory_Etc_httpd_conf" selected="true" />
    <select idref="TestThePermissionsOfAllFilesPresentInTheDirectory_Etc_pam.d_Files" selected="true" />
    <select idref="TestThePermissionsOfThe_RootDirectory" selected="true" />
    <select idref="TestThePermissionsOfTheDirectory_Etc_cron.d" selected="true" />
    <select idref="TestThePermissionsOfTheDirectory_Etc_httpd_conf.d" selected="true" />
    <select idref="TestThePermissionsOfTheDirectory_Etc_profile.d" selected="true" />
    <select idref="TestThePermissionsOfTheDirectory_Etc_security" selected="true" />
    <select idref="TestThePermissionsOfTheDirectory_Tmp" selected="true" />
    <select idref="TestThePermissionsOfTheDirectory_Var" selected="true" />
    <select idref="TestThePermissionsOfTheDirectory_Var_adm" selected="true" />
    <select idref="TestThePermissionsOfTheDirectory_Var_log_httpd" selected="true" />
    <select idref="TestThePermissionsOfTheDirectory_Var_tmp" selected="true" />
    <select idref="TestThePermissionsOfTheDirectory_Var_www_html" selected="true" />
    <select idref="TestThePermissionsOfTheFile_Bin_bash" selected="true" />
    <select idref="TestThePermissionsOfTheFile_Bin_tcsh" selected="true" />
    <select idref="TestThePermissionsOfTheFile_Boot_grub2_grub.cfg" selected="true" />
    <select idref="TestThePermissionsOfTheFile_Dev_mem" selected="true" />
    <select idref="TestThePermissionsOfTheFile_Dev_null" selected="true" />
    <select idref="TestThePermissionsOfTheFile_Etc_aliases" selected="true" />
    <select idref="TestThePermissionsOfTheFile_Etc_at.allow" selected="true" />
    <select idref="TestThePermissionsOfTheFile_Etc_at.deny" selected="true" />
    <select idref="TestThePermissionsOfTheFile_Etc_audit_audit.rules" selected="true" />
    <select idref="TestThePermissionsOfTheFile_Etc_audit_auditd.conf" selected="true" />
    <select idref="TestThePermissionsOfTheFile_Etc_auto.master" selected="true" />
    <select idref="TestThePermissionsOfTheFile_Etc_auto.misc" selected="true" />
    <select idref="TestThePermissionsOfTheFile_Etc_auto.net" selected="true" />
    <select idref="TestThePermissionsOfTheFile_Etc_bashrc" selected="true" />
    <select idref="TestThePermissionsOfTheFile_Etc_cron.deny" selected="true" />
    <select idref="TestThePermissionsOfTheFile_Etc_exports" selected="true" />
    <select idref="TestThePermissionsOfTheFile_Etc_fstab" selected="true" />
    <select idref="TestThePermissionsOfTheFile_Etc_group" selected="true" />
    <select idref="TestThePermissionsOfTheFile_Etc_gshadow" selected="true" />
    <select idref="TestThePermissionsOfTheFile_Etc_httpd_conf_httpd.conf" selected="true" />
    <select idref="TestThePermissionsOfTheFile_Etc_issue" selected="true" />
    <select idref="TestThePermissionsOfTheFile_Etc_login.defs" selected="true" />
    <select idref="TestThePermissionsOfTheFile_Etc_motd" selected="true" />
    <select idref="TestThePermissionsOfTheFile_Etc_named.conf" selected="true" />
    <select idref="TestThePermissionsOfTheFile_Etc_netconfig" selected="true" />
    <select idref="TestThePermissionsOfTheFile_Etc_passwd" selected="true" />
    <select idref="TestThePermissionsOfTheFile_Etc_profile" selected="true" />
    <select idref="TestThePermissionsOfTheFile_Etc_resolv.conf" selected="true" />
    <select idref="TestThePermissionsOfTheFile_Etc_rsyslog.conf" selected="true" />
    <select idref="TestThePermissionsOfTheFile_Etc_securetty" selected="true" />
    <select idref="TestThePermissionsOfTheFile_Etc_security_access.conf" selected="true" />
    <select idref="TestThePermissionsOfTheFile_Etc_services" selected="true" />
    <select idref="TestThePermissionsOfTheFile_Etc_shadow" selected="true" />
    <select idref="TestThePermissionsOfTheFile_Etc_snmp_snmpd.conf" selected="true" />
    <select idref="TestThePermissionsOfTheFile_Etc_ssh_sshd_config" selected="true" />
    <select idref="TestThePermissionsOfTheFile_Etc_sysctl.conf" selected="true" />
    <select idref="TestThePermissionsOfTheFile_Sbin_sendmail.sendmail" selected="true" />
    <select idref="TestThePermissionsOfTheFile_Usr_bin_at" selected="true" />
    <select idref="TestThePermissionsOfTheFile_Usr_bin_bash" selected="true" />
    <select idref="TestThePermissionsOfTheFile_Usr_bin_htpasswd" selected="true" />
    <select idref="TestThePermissionsOfTheFile_Usr_bin_smbpasswd" selected="true" />
    <select idref="TestThePermissionsOfTheFile_Usr_bin_sync" selected="true" />
    <select idref="TestThePermissionsOfTheFile_Usr_sbin_httpd" selected="true" />
    <select idref="TestThePermissionsOfTheFile_Usr_sbin_userhelper" selected="true" />
    <select idref="TestThePermissionsOfTheFile_Var_log_wtmp" selected="true" />
    <select idref="TestThePermissionsOfTheFile_Var_run_utmp" selected="true" />
    <select idref="TestThePermissionsOfTheFiles_Etc_default_._" selected="true" />
    <select idref="TestThePermissionsOfTheFiles_Var_lib_ldap_._" selected="true" />
    <select idref="TestThePermissionsOfTheFiles_Var_log_cron_" selected="true" />
    <select idref="TestThePermissionsOfTheFiles_Var_log_secure_" selected="true" />
    <select idref="TestThePermissionsOfTheFiles_Var_spool_mail_" selected="true" />
    <select idref="TestThePermissionsOfTheFiles_Var_tmp_" selected="true" />
    <select idref="TestThePermissionsOfTheScriptFile" selected="true" />
    <select idref="TestThePermissionsOnUser.forwardFiles" selected="true" />
    <select idref="TestThePermissionsOnUser.netrcFiles" selected="true" />
    <select idref="TestThePermissionsSetOnTheFile_Etc_hosts" selected="true" />
    <select idref="TestThePermissionsSetOnTheFile_Etc_skel_.bash_logout" selected="true" />
    <select idref="TestThePermissionsSetOnTheFile_Etc_skel_.bash_profile" selected="true" />
    <select idref="TestThePermissionsSetOnTheFile_Etc_skel_.bashrc" selected="true" />
    <select idref="TestTheStatusOf-RestrictionOfNFSClientsToPrivilegedPorts" selected="true" />
    <select idref="TheDynamicDnsFeatureOfTheDhcpServerShouldBeDisabled" selected="true" />
    <select idref="TheShellForTheAdmAccountShouldBeAssignedAppropriately." selected="true" />
    <select idref="TheShellForTheBinAccountShouldBeAssignedAppropriately." selected="true" />
    <select idref="TheShellForTheGdmAccountShouldBeAssignedAppropriately." selected="true" />
    <select idref="TheShellForTheListenAccountShouldBeAssignedAppropriately." selected="true" />
    <select idref="TheShellForTheLpAccountShouldBeAssignedAppropriately." selected="true" />
    <select idref="TheShellForTheNoaccessAccountShouldBeAssignedAppropriately." selected="true" />
    <select idref="TheShellForTheNobodyAccountShouldBeAssignedAppropriately." selected="true" />
    <select idref="TheShellForTheNobody4AccountShouldBeAssignedAppropriately." selected="true" />
    <select idref="TheShellForTheNuucpAccountShouldBeAssignedAppropriately." selected="true" />
    <select idref="TheShellForTheSmmspAccountShouldBeAssignedAppropriately." selected="true" />
    <select idref="TheShellForTheUucpAccountShouldBeAssignedAppropriately." selected="true" />
    <select idref="TheShellForTheWebservdAccountShouldBeAssignedAppropriately." selected="true" />
    <select idref="TheSquidEUIDShouldBeSetToAnAppropriateUser" selected="true" />
    <select idref="TheSquidGUIDShouldBeSetToAnAppropriateGroup" selected="true" />
    <select idref="UseOnlyApprovedCipherInCounterMode" selected="true" />
    <select idref="UseRoot_SquashingOnAllExports" selected="true" />
    <select idref="UseTheLatestOperatingSystemRelease" selected="true" />
    <select idref="VerifyGroupsReferencedIn_etc_passwdAreIncludedIn_etc_group" selected="true" />
    <select idref="VerifyNet_snmpVersionOnTheSystem" selected="true" />
    <select idref="VerifyNoLegacy_EntriesExistIn_Etc_groupFile" selected="true" />
    <select idref="VerifyNoLegacy_EntriesExistIn_Etc_passwdFile" selected="true" />
    <select idref="VerifyNoLegacy_EntriesExistIn_Etc_shadowFile" selected="true" />
    <select idref="VerifyNoUID0AccountsExistOtherThanRoot" selected="true" />
    <select idref="VerifyPermissionsOn_Etc_hosts.allow" selected="true" />
    <select idref="VerifyPermissionsOn_Etc_hosts.allow_GroupOwnership" selected="true" />
    <select idref="VerifyPermissionsOn_Etc_hosts.allow_Ownership" selected="true" />
    <select idref="VerifyPermissionsOn_Etc_hosts.deny" selected="true" />
    <select idref="VerifyPermissionsOn_Etc_hosts.deny_GroupOwnership" selected="true" />
    <select idref="VerifyPermissionsOn_Etc_hosts.deny_Ownership" selected="true" />
    <select idref="VerifyThatAHomeDirectoryHasBeenEstablishedForRoot" selected="true" />
    <select idref="VerifyThatGpgcheckIsGloballyActivated" selected="true" />
    <select idref="VsftpdTransactionLogging" selected="true" />
    <select idref="WriteAccessToNFSSharesShouldBeDisabled" selected="true" />
    <select idref="ConfigureFirewallToGenerateAuditLogs_Etc_sysconfig_firewalld" selected="true" />
    <select idref="EnsureFirewalldServiceIsEnabled" selected="true" />
    <select idref="VerifyFirewalldVersionOnTheSystem" selected="true" />
    <select idref="TestIfTheFile_Var_log_firewalldExists" selected="true" />
    <select idref="TestTheGroupOwnerOfTheDirectory_Etc_firewalld" selected="true" />
    <select idref="TestTheOwnerOfTheDirectory_Etc_firewalld" selected="true" />
    <select idref="TestThePermissionsOfTheDirectory_Etc_firewalld" selected="true" />
    <select idref="TestTheGroupOwnerOfTheFile_Etc_firewalld_firewalld.conf" selected="true" />
    <select idref="TestTheOwnerOfTheFile_Etc_firewalld_firewalld.conf" selected="true" />
    <select idref="TestThePermissionsOfTheFile_Etc_firewalld_firewalld.conf" selected="true" />
    <select idref="TestThePermissionsOfTheFile_Etc_sysconfig_firewalld" selected="true" />
    <select idref="TestTheOwnerOfTheFile_Etc_sysconfig_firewalld" selected="true" />
    <select idref="TestTheGroupOwnerOfTheFile_Etc_sysconfig_firewalld" selected="true" />
    <select idref="EnsurePasswordHashingAlgorithmIsSHA_512" selected="true" />
  </Profile>
  <Group id="DisableAllUnnecessaryServices" xml:lang="en">
    <title xml:lang="en">Disable all unnecessary services</title>
    <Value id="EnterTheNameOfTheRPMPackageToBeVerified._var777" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">ypbind</value>
    </Value>
    <Value id="EnterTheNameOfTheRPMPackageToBeVerified._var888" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">ypserv</value>
    </Value>
    <Value id="EnterTheNameOfTheRPMPackageToBeVerified._var999" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">openssh-clients</value>
    </Value>
    <Value id="ShouldTheServiceBeEnabledOrDisabled_var" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">true</value>
    </Value>
    <Value id="ShouldTheServiceBeEnabledOrDisabled_var0" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">true</value>
    </Value>
    <Value id="ShouldTheServiceBeEnabledOrDisabled_var1" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">true</value>
    </Value>
    <Value id="ShouldTheServiceBeEnabledOrDisabled_var2" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">true</value>
    </Value>
    <Value id="ShouldTheServiceBeEnabledOrDisabled_var3" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">true</value>
    </Value>
    <Value id="ShouldTheServiceBeEnabledOrDisabled_var4" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">true</value>
    </Value>
    <Value id="ShouldTheServiceBeEnabledOrDisabled_var5" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">true</value>
    </Value>
    <Value id="ShouldTheServiceBeEnabledOrDisabled_var6" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">true</value>
    </Value>
    <Value id="ShouldTheServiceBeEnabledOrDisabled_var7" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">true</value>
    </Value>
    <Value id="ShouldTheServiceBeEnabledOrDisabled_var8" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">true</value>
    </Value>
    <Value id="EnterTheNameOfTheRPMPackageToBeVerified._var1" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">setroubleshoot</value>
    </Value>
    <Value id="EnterTheNameOfTheRPMPackageToBeVerified._var2" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">mcstrans</value>
    </Value>
    <Value id="EnterTheNameOfTheRPMPackageToBeVerified._var3" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">telnet-server</value>
    </Value>
    <Value id="EnterTheNameOfTheRPMPackageToBeVerified._var5" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">cronie-anacron</value>
    </Value>
    <Value id="RunlevelAtWhichTheServiceShouldBeEnabledOrDisabled_var" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">5</value>
    </Value>
    <Value id="Enable_file_uploads_var" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">NO</value>
    </Value>
    <Value id="Enable_anonymous_access_var" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">NO</value>
    </Value>
    <Value id="EnterTheDesiredNet-snmpVersion._var" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">5.7.2</value>
    </Value>
    <Rule id="DisableRquotadUnlessRquotadIsAbsolutelyNecessary" xml:lang="en" selected="false">
      <title xml:lang="en">Disable rquotad unless rquotad is absolutely necessary</title>
      <description xml:lang="en">This rule ensures that rquotad service is not enabled.</description>
      <reference>PCI DSS v3.2 Requirements 2.2.2</reference>
      <reference>https://www.pcisecuritystandards.org</reference>
      <platform idref="cpe:/o:centos:centos:7" />
      <platform idref="cpe:/o:oracle:linux:7" />
      <platform idref="cpe:/o:redhat:enterprise_linux:7" />
      <ident system="www.unifiedcompliance.com">UCF CC ID 01473</ident>
      <check system="http://www.mcafee.com/xccdf/script/1.0">
        <check-content>/bin/sh
30
#!/bin/bash
#BASH script to verify the state of a SYSTEMD Service
: ' The systemd system and service manager is responsible for controlling how services are started, stopped and otherwise managed on Red Hat Enterprise Linux 7, Oracle Linux 7 and CentOS Linux 7 systems. Although the systemd process replaces the init process (quite literally, /sbin/init is now a symbolic link to /usr/lib/systemd/systemd) for starting services at boot time and changing runlevels, systemd provides much more control than the init
process does while still supporting existing init scripts. '

SYSTEMD_SERVICE_NAME=nfs-rquotad.service

#SERVICE_EXISTENCE - Command to verify whether $SYSTEMD_SERVICE_NAME exists on the system or not.
SERVICE_EXISTENCE=`systemctl list-unit-files --type service | grep $SYSTEMD_SERVICE_NAME`

#CURRENT_SERVICE_STATE - Command to verify the current state of $SYSTEMD_SERVICE_NAME
CURRENT_SERVICE_STATE=`systemctl is-enabled $SYSTEMD_SERVICE_NAME`

#EXPECTED_SERVICE_STATE - Expected service state by End User
EXPECTED_SERVICE_STATE=disabled

if [ -z "$SERVICE_EXISTENCE" ]  #SYSTEMD_SERVICE_NAME existence test.
        then
                #echo "SYSTEMD Service $SYSTEMD_SERVICE_NAME does not exists on the system."
                exit 0  #Script should return true. Verify the last executed command status by echo $?.
elif [ "$CURRENT_SERVICE_STATE" = "$EXPECTED_SERVICE_STATE" ]
        then
                #echo "SYSTEMD Service $SYSTEMD_SERVICE_NAME is disabled as expected."
                exit 0  #Script should return true. Verify the last executed command status by echo $?.
        else
                #echo "SYSTEMD Service $SYSTEMD_SERVICE_NAME is enabled, expected to be disabled."
                exit 1  #Script should return false. Verify the last executed command status by echo $?.
fi
fi</check-content>
      </check>
    </Rule>
    <Rule id="DisableTelnetUnlessRquotadIsAbsolutelyNecessary" xml:lang="en" selected="false">
      <title xml:lang="en">Disable telnet unless telnet is absolutely necessary</title>
      <description xml:lang="en">This rule ensures that telnet service is not enabled.</description>
      <reference>PCI DSS v3.2 Requirements 2.2.2</reference>
      <reference>https://www.pcisecuritystandards.org</reference>
      <platform idref="cpe:/o:centos:centos:7" />
      <platform idref="cpe:/o:oracle:linux:7" />
      <platform idref="cpe:/o:redhat:enterprise_linux:7" />
      <ident system="www.unifiedcompliance.com">UCF CC ID 01478</ident>
      <check system="http://www.mcafee.com/xccdf/script/1.0">
        <check-content>/bin/sh
30
          #!/bin/bash
          #BASH script to verify the state of a SYSTEMD Service
          : ' The systemd system and service manager is responsible for controlling how services are started, stopped and otherwise managed on Red Hat Enterprise Linux 7, Oracle Linux 7 and CentOS Linux 7 systems. Although the systemd process replaces the init process (quite literally, /sbin/init is now a symbolic link to /usr/lib/systemd/systemd) for starting services at boot time and changing runlevels, systemd provides much more control than the init
          process does while still supporting existing init scripts. '
          
          SYSTEMD_SERVICE_NAME=telnet.socket
          
          #SERVICE_EXISTENCE - Command to verify whether $SYSTEMD_SERVICE_NAME exists on the system or not.
          SERVICE_EXISTENCE=`systemctl list-unit-files --type socket | grep $SYSTEMD_SERVICE_NAME`
          
          #CURRENT_SERVICE_STATE - Command to verify the current state of $SYSTEMD_SERVICE_NAME
          CURRENT_SERVICE_STATE=`systemctl is-enabled $SYSTEMD_SERVICE_NAME`
          
          #EXPECTED_SERVICE_STATE - Expected service state by End User
          EXPECTED_SERVICE_STATE=disabled
          
          if [ -z "$SERVICE_EXISTENCE" ]  #SYSTEMD_SERVICE_NAME existence test.
          then
          #echo "SYSTEMD Service $SYSTEMD_SERVICE_NAME does not exists on the system."
          exit 0  #Script should return true. Verify the last executed command status by echo $?.
          elif [ "$CURRENT_SERVICE_STATE" = "$EXPECTED_SERVICE_STATE" ]
          then
          #echo "SYSTEMD Service $SYSTEMD_SERVICE_NAME is disabled as expected."
          exit 0  #Script should return true. Verify the last executed command status by echo $?.
          else
          #echo "SYSTEMD Service $SYSTEMD_SERVICE_NAME is enabled, expected to be disabled."
          exit 1  #Script should return false. Verify the last executed command status by echo $?.
          fi
          fi</check-content>
      </check>
    </Rule>
    <Rule id="DisableFtpUnlessFtpIsAbsolutelyNecessary" xml:lang="en" selected="false">
      <title xml:lang="en">Disable ftp unless ftp is absolutely necessary</title>
      <description xml:lang="en">This rule ensures that file transfer protocol service is not enabled.</description>
      <reference>PCI DSS v3.2 Requirements 2.2.2</reference>
      <reference>https://www.pcisecuritystandards.org</reference>
      <platform idref="cpe:/o:centos:centos:7" />
      <platform idref="cpe:/o:oracle:linux:7" />
      <platform idref="cpe:/o:redhat:enterprise_linux:7" />
      <ident system="www.unifiedcompliance.com">UCF CC ID 01479</ident>
      <ident system="www.unifiedcompliance.com">UCF CC ID 04989</ident>
      <check system="http://www.mcafee.com/xccdf/script/1.0">
        <check-content>/bin/sh
30
#!/bin/bash
#BASH script to verify the state of a SYSTEMD Service
: ' The systemd system and service manager is responsible for controlling how services are started, stopped and otherwise managed on Red Hat Enterprise Linux 7, Oracle Linux 7 and CentOS Linux 7 systems. Although the systemd process replaces the init process (quite literally, /sbin/init is now a symbolic link to /usr/lib/systemd/systemd) for starting services at boot time and changing runlevels, systemd provides much more control than the init
process does while still supporting existing init scripts. '

SYSTEMD_SERVICE_NAME=vsftpd.service

#SERVICE_EXISTENCE - Command to verify whether $SYSTEMD_SERVICE_NAME exists on the system or not.
SERVICE_EXISTENCE=`systemctl list-unit-files --type service | grep $SYSTEMD_SERVICE_NAME`

#CURRENT_SERVICE_STATE - Command to verify the current state of $SYSTEMD_SERVICE_NAME
CURRENT_SERVICE_STATE=`systemctl is-enabled $SYSTEMD_SERVICE_NAME`

#EXPECTED_SERVICE_STATE - Expected service state by End User
EXPECTED_SERVICE_STATE=disabled

if [ -z "$SERVICE_EXISTENCE" ]  #SYSTEMD_SERVICE_NAME existence test.
then
#echo "SYSTEMD Service $SYSTEMD_SERVICE_NAME does not exists on the system."
exit 0  #Script should return true. Verify the last executed command status by echo $?.
elif [ "$CURRENT_SERVICE_STATE" = "$EXPECTED_SERVICE_STATE" ]
then
#echo "SYSTEMD Service $SYSTEMD_SERVICE_NAME is disabled as expected."
exit 0  #Script should return true. Verify the last executed command status by echo $?.
else
#echo "SYSTEMD Service $SYSTEMD_SERVICE_NAME is enabled, expected to be disabled."
exit 1  #Script should return false. Verify the last executed command status by echo $?.
fi
fi</check-content>
      </check>
    </Rule>
    <Rule id="FTPConfiguration_EnableOrDisableAnonymousAccessViaVsftpdServiceAsAppropriate" xml:lang="en" selected="false">
      <title xml:lang="en">FTP Configuration - Enable or disable anonymous access via vsftpd service as appropriate</title>
      <description xml:lang="en">This rule verifies if anonymous access is enabled or not via vsftpd service</description>
      <reference>PCI DSS v3.2 Requirements 2.2.2</reference>
      <reference>https://www.pcisecuritystandards.org</reference>
      <platform idref="cpe:/o:centos:centos:7" />
      <platform idref="cpe:/o:oracle:linux:7" />
      <platform idref="cpe:/o:redhat:enterprise_linux:7" />
      <ident system="www.unifiedcompliance.com">UCF CC ID 06739</ident>
      <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
        <check-export value-id="Enable_anonymous_access_var" export-name="oval:com.mcafee.oval:var:2487262" />
        <check-content-ref href="" name="oval:com.mcafee.oval:def:2487258" />
      </check>
    </Rule>
    <Rule id="DisableMysqldUnlessMysqldIsAbsolutelyNecessary" xml:lang="en" selected="false">
      <title xml:lang="en">Disable mysqld unless mysqld is absolutely necessary</title>
      <description xml:lang="en">This rule ensures that SQLServer service is not enabled.</description>
      <reference>PCI DSS v3.2 Requirements 2.2.2</reference>
      <reference>https://www.pcisecuritystandards.org</reference>
      <platform idref="cpe:/o:centos:centos:7" />
      <platform idref="cpe:/o:oracle:linux:7" />
      <platform idref="cpe:/o:redhat:enterprise_linux:7" />
      <ident system="www.unifiedcompliance.com">UCF CC ID 01500</ident>
      <check system="http://www.mcafee.com/xccdf/script/1.0">
        <check-content>/bin/sh
30
          #!/bin/bash
          #BASH script to verify the state of a SYSTEMD Service
          : ' The systemd system and service manager is responsible for controlling how services are started, stopped and otherwise managed on Red Hat Enterprise Linux 7, Oracle Linux 7 and CentOS Linux 7 systems. Although the systemd process replaces the init process (quite literally, /sbin/init is now a symbolic link to /usr/lib/systemd/systemd) for starting services at boot time and changing runlevels, systemd provides much more control than the init
          process does while still supporting existing init scripts. '
          
          SYSTEMD_SERVICE_NAME=mysqld.service
          
          #SERVICE_EXISTENCE - Command to verify whether $SYSTEMD_SERVICE_NAME exists on the system or not.
          SERVICE_EXISTENCE=`systemctl list-unit-files --type service | grep $SYSTEMD_SERVICE_NAME`
          
          #CURRENT_SERVICE_STATE - Command to verify the current state of $SYSTEMD_SERVICE_NAME
          CURRENT_SERVICE_STATE=`systemctl is-enabled $SYSTEMD_SERVICE_NAME`
          
          #EXPECTED_SERVICE_STATE - Expected service state by End User
          EXPECTED_SERVICE_STATE=disabled
          
          if [ -z "$SERVICE_EXISTENCE" ]  #SYSTEMD_SERVICE_NAME existence test.
          then
          #echo "SYSTEMD Service $SYSTEMD_SERVICE_NAME does not exists on the system."
          exit 0  #Script should return true. Verify the last executed command status by echo $?.
          elif [ "$CURRENT_SERVICE_STATE" = "$EXPECTED_SERVICE_STATE" ]
          then
          #echo "SYSTEMD Service $SYSTEMD_SERVICE_NAME is disabled as expected."
          exit 0  #Script should return true. Verify the last executed command status by echo $?.
          else
          #echo "SYSTEMD Service $SYSTEMD_SERVICE_NAME is enabled, expected to be disabled."
          exit 1  #Script should return false. Verify the last executed command status by echo $?.
          fi
          fi</check-content>
      </check>
    </Rule>
    <Rule id="DisablePopUnlessPopIsAbsolutelyNecessary" xml:lang="en" selected="false">
      <title xml:lang="en">Disable POP unless POP is absolutely necessary</title>
      <description xml:lang="en">This rule ensures that dovecot service which enable the Post Office Protocol is not enabled.</description>
      <reference>PCI DSS v3.2 Requirements 2.2.2</reference>
      <reference>https://www.pcisecuritystandards.org</reference>
      <platform idref="cpe:/o:centos:centos:7" />
      <platform idref="cpe:/o:oracle:linux:7" />
      <platform idref="cpe:/o:redhat:enterprise_linux:7" />
      <ident system="www.unifiedcompliance.com">UCF CC ID 01486</ident>
      <ident system="www.unifiedcompliance.com">UCF CC ID 05379</ident>
      <check system="http://www.mcafee.com/xccdf/script/1.0">
        <check-content>/bin/sh
30
          #!/bin/bash
          #BASH script to verify the state of a SYSTEMD Service
          : ' The systemd system and service manager is responsible for controlling how services are started, stopped and otherwise managed on Red Hat Enterprise Linux 7, Oracle Linux 7 and CentOS Linux 7 systems. Although the systemd process replaces the init process (quite literally, /sbin/init is now a symbolic link to /usr/lib/systemd/systemd) for starting services at boot time and changing runlevels, systemd provides much more control than the init
          process does while still supporting existing init scripts. '
          
          SYSTEMD_SERVICE_NAME=dovecot.service
          
          #SERVICE_EXISTENCE - Command to verify whether $SYSTEMD_SERVICE_NAME exists on the system or not.
          SERVICE_EXISTENCE=`systemctl list-unit-files --type service | grep $SYSTEMD_SERVICE_NAME`
          
          #CURRENT_SERVICE_STATE - Command to verify the current state of $SYSTEMD_SERVICE_NAME
          CURRENT_SERVICE_STATE=`systemctl is-enabled $SYSTEMD_SERVICE_NAME`
          
          #EXPECTED_SERVICE_STATE - Expected service state by End User
          EXPECTED_SERVICE_STATE=disabled
          
          if [ -z "$SERVICE_EXISTENCE" ]  #SYSTEMD_SERVICE_NAME existence test.
          then
          #echo "SYSTEMD Service $SYSTEMD_SERVICE_NAME does not exists on the system."
          exit 0  #Script should return true. Verify the last executed command status by echo $?.
          elif [ "$CURRENT_SERVICE_STATE" = "$EXPECTED_SERVICE_STATE" ]
          then
          #echo "SYSTEMD Service $SYSTEMD_SERVICE_NAME is disabled as expected."
          exit 0  #Script should return true. Verify the last executed command status by echo $?.
          else
          #echo "SYSTEMD Service $SYSTEMD_SERVICE_NAME is enabled, expected to be disabled."
          exit 1  #Script should return false. Verify the last executed command status by echo $?.
          fi
          fi</check-content>
      </check>
    </Rule>
    <Rule id="DisableDovecotUnlessDovecotIsAbsolutelyNecessary" xml:lang="en" selected="false">
      <title xml:lang="en">Disable dovecot unless dovecot is absolutely necessary</title>
      <description xml:lang="en">This rule ensures that dovecot service which enable the Internet Message Access Protocol is not enabled.</description>
      <reference>PCI DSS v3.2 Requirements 2.2.2</reference>
      <reference>https://www.pcisecuritystandards.org</reference>
      <platform idref="cpe:/o:centos:centos:7" />
      <platform idref="cpe:/o:oracle:linux:7" />
      <platform idref="cpe:/o:redhat:enterprise_linux:7" />
      <ident system="www.unifiedcompliance.com">UCF CC ID 01485</ident>
      <ident system="www.unifiedcompliance.com">UCF CC ID 05379</ident>
      <ident system="www.unifiedcompliance.com">UCF CC ID 04990</ident>
      <check system="http://www.mcafee.com/xccdf/script/1.0">
        <check-content>/bin/sh
30
          #!/bin/bash
          #BASH script to verify the state of a SYSTEMD Service
          : ' The systemd system and service manager is responsible for controlling how services are started, stopped and otherwise managed on Red Hat Enterprise Linux 7, Oracle Linux 7 and CentOS Linux 7 systems. Although the systemd process replaces the init process (quite literally, /sbin/init is now a symbolic link to /usr/lib/systemd/systemd) for starting services at boot time and changing runlevels, systemd provides much more control than the init
          process does while still supporting existing init scripts. '
          
          SYSTEMD_SERVICE_NAME=dovecot.service
          
          #SERVICE_EXISTENCE - Command to verify whether $SYSTEMD_SERVICE_NAME exists on the system or not.
          SERVICE_EXISTENCE=`systemctl list-unit-files --type service | grep $SYSTEMD_SERVICE_NAME`
          
          #CURRENT_SERVICE_STATE - Command to verify the current state of $SYSTEMD_SERVICE_NAME
          CURRENT_SERVICE_STATE=`systemctl is-enabled $SYSTEMD_SERVICE_NAME`
          
          #EXPECTED_SERVICE_STATE - Expected service state by End User
          EXPECTED_SERVICE_STATE=disabled
          
          if [ -z "$SERVICE_EXISTENCE" ]  #SYSTEMD_SERVICE_NAME existence test.
          then
          #echo "SYSTEMD Service $SYSTEMD_SERVICE_NAME does not exists on the system."
          exit 0  #Script should return true. Verify the last executed command status by echo $?.
          elif [ "$CURRENT_SERVICE_STATE" = "$EXPECTED_SERVICE_STATE" ]
          then
          #echo "SYSTEMD Service $SYSTEMD_SERVICE_NAME is disabled as expected."
          exit 0  #Script should return true. Verify the last executed command status by echo $?.
          else
          #echo "SYSTEMD Service $SYSTEMD_SERVICE_NAME is enabled, expected to be disabled."
          exit 1  #Script should return false. Verify the last executed command status by echo $?.
          fi
          fi</check-content>
      </check>
    </Rule>
    <Rule id="DisableNtpdUnlessNtpdIsAbsolutelyNecessary" xml:lang="en" selected="false">
      <title xml:lang="en">Disable ntpd unless ntpd is absolutely necessary</title>
      <description xml:lang="en">This rule ensures that ntpd service is not enabled.</description>
      <reference>PCI DSS v3.2 Requirements 2.2.2</reference>
      <reference>https://www.pcisecuritystandards.org</reference>
      <platform idref="cpe:/o:centos:centos:7" />
      <platform idref="cpe:/o:oracle:linux:7" />
      <platform idref="cpe:/o:redhat:enterprise_linux:7" />
      <ident system="www.unifiedcompliance.com">UCF CC ID 04911</ident>
      <check system="http://www.mcafee.com/xccdf/script/1.0">
        <check-content>/bin/sh
30
          #!/bin/bash
          #BASH script to verify the state of a SYSTEMD Service
          : ' The systemd system and service manager is responsible for controlling how services are started, stopped and otherwise managed on Red Hat Enterprise Linux 7, Oracle Linux 7 and CentOS Linux 7 systems. Although the systemd process replaces the init process (quite literally, /sbin/init is now a symbolic link to /usr/lib/systemd/systemd) for starting services at boot time and changing runlevels, systemd provides much more control than the init
          process does while still supporting existing init scripts. '
          
          SYSTEMD_SERVICE_NAME=ntpd.service
          
          #SERVICE_EXISTENCE - Command to verify whether $SYSTEMD_SERVICE_NAME exists on the system or not.
          SERVICE_EXISTENCE=`systemctl list-unit-files --type service | grep $SYSTEMD_SERVICE_NAME`
          
          #CURRENT_SERVICE_STATE - Command to verify the current state of $SYSTEMD_SERVICE_NAME
          CURRENT_SERVICE_STATE=`systemctl is-enabled $SYSTEMD_SERVICE_NAME`
          
          #EXPECTED_SERVICE_STATE - Expected service state by End User
          EXPECTED_SERVICE_STATE=disabled
          
          if [ -z "$SERVICE_EXISTENCE" ]  #SYSTEMD_SERVICE_NAME existence test.
          then
          #echo "SYSTEMD Service $SYSTEMD_SERVICE_NAME does not exists on the system."
          exit 0  #Script should return true. Verify the last executed command status by echo $?.
          elif [ "$CURRENT_SERVICE_STATE" = "$EXPECTED_SERVICE_STATE" ]
          then
          #echo "SYSTEMD Service $SYSTEMD_SERVICE_NAME is disabled as expected."
          exit 0  #Script should return true. Verify the last executed command status by echo $?.
          else
          #echo "SYSTEMD Service $SYSTEMD_SERVICE_NAME is enabled, expected to be disabled."
          exit 1  #Script should return false. Verify the last executed command status by echo $?.
          fi
          fi</check-content>
      </check>
    </Rule>
    <Rule id="DisableEcho_streamUnlessEcho_streamIsAbsolutelyNecessary" xml:lang="en" selected="false">
      <title xml:lang="en">Disable echo-stream unless echo-stream is absolutely necessary</title>
      <description xml:lang="en">This rule ensures that echo-stream service is not enabled.</description>
      <reference>PCI DSS v3.2 Requirements 2.2.2</reference>
      <reference>https://www.pcisecuritystandards.org</reference>
      <platform idref="cpe:/o:centos:centos:7" />
      <platform idref="cpe:/o:oracle:linux:7" />
      <platform idref="cpe:/o:redhat:enterprise_linux:7" />
      <ident system="www.unifiedcompliance.com">UCF CC ID 09927</ident>
      <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
        <check-export value-id="ShouldTheServiceBeEnabledOrDisabled_var0" export-name="oval:com.mcafee.oval:var:87714" />
        <check-content-ref href="" name="oval:com.mcafee.oval:def:8853" />
      </check>
    </Rule>
    <Rule id="DisableEcho_dgramUnlessEcho_dgramIsAbsolutelyNecessary" xml:lang="en" selected="false">
      <title xml:lang="en">Disable echo-dgram unless echo-dgram is absolutely necessary</title>
      <description xml:lang="en">This rule ensures that echo-dgram service is not enabled.</description>
      <reference>PCI DSS v3.2 Requirements 2.2.2</reference>
      <reference>https://www.pcisecuritystandards.org</reference>
      <platform idref="cpe:/o:centos:centos:7" />
      <platform idref="cpe:/o:oracle:linux:7" />
      <platform idref="cpe:/o:redhat:enterprise_linux:7" />
      <ident system="www.unifiedcompliance.com">UCF CC ID 09928</ident>
      <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
        <check-export value-id="ShouldTheServiceBeEnabledOrDisabled_var1" export-name="oval:com.mcafee.oval:var:87714" />
        <check-content-ref href="" name="oval:com.mcafee.oval:def:8873" />
      </check>
    </Rule>
    <Rule id="DisableTcpmux-serverUnlessTcpmux-serverIsAbsolutelyNecessary" xml:lang="en" selected="false">
      <title xml:lang="en">Disable tcpmux-server unless tcpmux-server is absolutely necessary</title>
      <description xml:lang="en">This rule ensures that tcpmux-server service is not enabled.</description>
      <reference>PCI DSS v3.2 Requirements 2.2.2</reference>
      <reference>https://www.pcisecuritystandards.org</reference>
      <platform idref="cpe:/o:centos:centos:7" />
      <platform idref="cpe:/o:oracle:linux:7" />
      <platform idref="cpe:/o:redhat:enterprise_linux:7" />
      <ident system="www.unifiedcompliance.com">UCF CC ID 09929</ident>
      <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
        <check-export value-id="ShouldTheServiceBeEnabledOrDisabled_var" export-name="oval:com.mcafee.oval:var:87714" />
        <check-content-ref href="" name="oval:com.mcafee.oval:def:242788" />
      </check>
    </Rule>
    <Rule id="DisableChargen_dgramUnlessChargen_dgramIsAbsolutelyNecessary" xml:lang="en" selected="false">
      <title xml:lang="en">Disable chargen-dgram unless chargen-dgram is absolutely necessary</title>
      <description xml:lang="en">This rule ensures that chargen-dgram service is not enabled.</description>
      <reference>PCI DSS v3.2 Requirements 2.2.2</reference>
      <reference>https://www.pcisecuritystandards.org</reference>
      <platform idref="cpe:/o:centos:centos:7" />
      <platform idref="cpe:/o:oracle:linux:7" />
      <platform idref="cpe:/o:redhat:enterprise_linux:7" />
      <ident system="www.unifiedcompliance.com">UCF CC ID 04914</ident>
      <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
        <check-export value-id="ShouldTheServiceBeEnabledOrDisabled_var6" export-name="oval:com.mcafee.oval:var:87714" />
        <check-content-ref href="" name="oval:com.mcafee.oval:def:8874" />
      </check>
    </Rule>
    <Rule id="DisableChargen_streamUnlessChargen_streamIsAbsolutelyNecessary" xml:lang="en" selected="false">
      <title xml:lang="en">Disable chargen-stream unless chargen-stream is absolutely necessary</title>
      <description xml:lang="en">This rule ensures that chargen-stream service is not enabled.</description>
      <reference>PCI DSS v3.2 Requirements 2.2.2</reference>
      <reference>https://www.pcisecuritystandards.org</reference>
      <platform idref="cpe:/o:centos:centos:7" />
      <platform idref="cpe:/o:oracle:linux:7" />
      <platform idref="cpe:/o:redhat:enterprise_linux:7" />
      <ident system="www.unifiedcompliance.com">UCF CC ID 04914</ident>
      <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
        <check-export value-id="ShouldTheServiceBeEnabledOrDisabled_var7" export-name="oval:com.mcafee.oval:var:87714" />
        <check-content-ref href="" name="oval:com.mcafee.oval:def:8856" />
      </check>
    </Rule>
    <Rule id="DisableTftpUnlessTftpIsAbsolutelyNecessary" xml:lang="en" selected="false">
      <title xml:lang="en">Disable tftp unless tftp is absolutely necessary</title>
      <description xml:lang="en">This rule ensures that tftp service is not enabled.</description>
      <reference>PCI DSS v3.2 Requirements 2.2.2</reference>
      <reference>https://www.pcisecuritystandards.org</reference>
      <platform idref="cpe:/o:centos:centos:7" />
      <platform idref="cpe:/o:oracle:linux:7" />
      <platform idref="cpe:/o:redhat:enterprise_linux:7" />
      <ident system="www.unifiedcompliance.com">UCF CC ID 04915</ident>
      <check system="http://www.mcafee.com/xccdf/script/1.0">
        <check-content>/bin/sh
30
#!/bin/bash
#BASH script to verify the state of a SYSTEMD Service
: ' The systemd system and service manager is responsible for controlling how services are started, stopped and otherwise managed on Red Hat Enterprise Linux 7, Oracle Linux 7 and CentOS Linux 7 systems. Although the systemd process replaces the init process (quite literally, /sbin/init is now a symbolic link to /usr/lib/systemd/systemd) for starting services at boot time and changing runlevels, systemd provides much more control than the init
process does while still supporting existing init scripts. '

SYSTEMD_SERVICE_NAME=tftp.socket

#SERVICE_EXISTENCE - Command to verify whether $SYSTEMD_SERVICE_NAME exists on the system or not.
SERVICE_EXISTENCE=`systemctl list-unit-files --type socket | grep $SYSTEMD_SERVICE_NAME`

#CURRENT_SERVICE_STATE - Command to verify the current state of $SYSTEMD_SERVICE_NAME
CURRENT_SERVICE_STATE=`systemctl is-enabled $SYSTEMD_SERVICE_NAME`

#EXPECTED_SERVICE_STATE - Expected service state by End User
EXPECTED_SERVICE_STATE=disabled

if [ -z "$SERVICE_EXISTENCE" ]  #SYSTEMD_SERVICE_NAME existence test.
then
#echo "SYSTEMD Service $SYSTEMD_SERVICE_NAME does not exists on the system."
exit 0  #Script should return true. Verify the last executed command status by echo $?.
elif [ "$CURRENT_SERVICE_STATE" = "$EXPECTED_SERVICE_STATE" ]
then
#echo "SYSTEMD Service $SYSTEMD_SERVICE_NAME is disabled as expected."
exit 0  #Script should return true. Verify the last executed command status by echo $?.
else
#echo "SYSTEMD Service $SYSTEMD_SERVICE_NAME is enabled, expected to be disabled."
exit 1  #Script should return false. Verify the last executed command status by echo $?.
fi
fi</check-content>
      </check>
    </Rule>
    <Rule id="DisableRstatdUnlessRstatdIsAbsolutelyNecessary" xml:lang="en" selected="false">
      <title xml:lang="en">Disable rstatd unless rstatd is absolutely necessary</title>
      <description xml:lang="en">This rule ensures that rstatd service is not enabled.</description>
      <reference>PCI DSS v3.2 Requirements 2.2.2</reference>
      <reference>https://www.pcisecuritystandards.org</reference>
      <platform idref="cpe:/o:centos:centos:7" />
      <platform idref="cpe:/o:oracle:linux:7" />
      <platform idref="cpe:/o:redhat:enterprise_linux:7" />
      <ident system="www.unifiedcompliance.com">UCF CC ID 04917</ident>
      <check system="http://www.mcafee.com/xccdf/script/1.0">
        <check-content>/bin/sh
30
#!/bin/bash
#BASH script to verify the state of a SYSTEMD Service
: ' The systemd system and service manager is responsible for controlling how services are started, stopped and otherwise managed on Red Hat Enterprise Linux 7, Oracle Linux 7 and CentOS Linux 7 systems. Although the systemd process replaces the init process (quite literally, /sbin/init is now a symbolic link to /usr/lib/systemd/systemd) for starting services at boot time and changing runlevels, systemd provides much more control than the init
process does while still supporting existing init scripts. '

SYSTEMD_SERVICE_NAME=rstatd.service

#SERVICE_EXISTENCE - Command to verify whether $SYSTEMD_SERVICE_NAME exists on the system or not.
SERVICE_EXISTENCE=`systemctl list-unit-files --type service | grep $SYSTEMD_SERVICE_NAME`

#CURRENT_SERVICE_STATE - Command to verify the current state of $SYSTEMD_SERVICE_NAME
CURRENT_SERVICE_STATE=`systemctl is-enabled $SYSTEMD_SERVICE_NAME`

#EXPECTED_SERVICE_STATE - Expected service state by End User
EXPECTED_SERVICE_STATE=disabled

if [ -z "$SERVICE_EXISTENCE" ]  #SYSTEMD_SERVICE_NAME existence test.
then
#echo "SYSTEMD Service $SYSTEMD_SERVICE_NAME does not exists on the system."
exit 0  #Script should return true. Verify the last executed command status by echo $?.
elif [ "$CURRENT_SERVICE_STATE" = "$EXPECTED_SERVICE_STATE" ]
then
#echo "SYSTEMD Service $SYSTEMD_SERVICE_NAME is disabled as expected."
exit 0  #Script should return true. Verify the last executed command status by echo $?.
else
#echo "SYSTEMD Service $SYSTEMD_SERVICE_NAME is enabled, expected to be disabled."
exit 1  #Script should return false. Verify the last executed command status by echo $?.
fi
fi</check-content>
      </check>
    </Rule>
    <Rule id="DisableRusersdUnlessRusersdIsAbsolutelyNecessary" xml:lang="en" selected="false">
      <title xml:lang="en">Disable rusersd unless rusersd is absolutely necessary</title>
      <description xml:lang="en">This rule ensures that rusersd service is not enabled.</description>
      <reference>PCI DSS v3.2 Requirements 2.2.2</reference>
      <reference>https://www.pcisecuritystandards.org</reference>
      <platform idref="cpe:/o:centos:centos:7" />
      <platform idref="cpe:/o:oracle:linux:7" />
      <platform idref="cpe:/o:redhat:enterprise_linux:7" />
      <ident system="www.unifiedcompliance.com">UCF CC ID 04919</ident>
      <check system="http://www.mcafee.com/xccdf/script/1.0">
        <check-content>/bin/sh
30
#!/bin/bash
#BASH script to verify the state of a SYSTEMD Service
: ' The systemd system and service manager is responsible for controlling how services are started, stopped and otherwise managed on Red Hat Enterprise Linux 7, Oracle Linux 7 and CentOS Linux 7 systems. Although the systemd process replaces the init process (quite literally, /sbin/init is now a symbolic link to /usr/lib/systemd/systemd) for starting services at boot time and changing runlevels, systemd provides much more control than the init
process does while still supporting existing init scripts. '

SYSTEMD_SERVICE_NAME=rusersd.service

#SERVICE_EXISTENCE - Command to verify whether $SYSTEMD_SERVICE_NAME exists on the system or not.
SERVICE_EXISTENCE=`systemctl list-unit-files --type service | grep $SYSTEMD_SERVICE_NAME`

#CURRENT_SERVICE_STATE - Command to verify the current state of $SYSTEMD_SERVICE_NAME
CURRENT_SERVICE_STATE=`systemctl is-enabled $SYSTEMD_SERVICE_NAME`

#EXPECTED_SERVICE_STATE - Expected service state by End User
EXPECTED_SERVICE_STATE=disabled

if [ -z "$SERVICE_EXISTENCE" ]  #SYSTEMD_SERVICE_NAME existence test.
then
#echo "SYSTEMD Service $SYSTEMD_SERVICE_NAME does not exists on the system."
exit 0  #Script should return true. Verify the last executed command status by echo $?.
elif [ "$CURRENT_SERVICE_STATE" = "$EXPECTED_SERVICE_STATE" ]
then
#echo "SYSTEMD Service $SYSTEMD_SERVICE_NAME is disabled as expected."
exit 0  #Script should return true. Verify the last executed command status by echo $?.
else
#echo "SYSTEMD Service $SYSTEMD_SERVICE_NAME is enabled, expected to be disabled."
exit 1  #Script should return false. Verify the last executed command status by echo $?.
fi
fi</check-content>
      </check>
    </Rule>
    <Rule id="DisableDaytime_streamUnlessDaytime_streamIsAbsolutelyNecessary" xml:lang="en" selected="false">
      <title xml:lang="en">Disable daytime-stream unless daytime-stream is absolutely necessary</title>
      <description xml:lang="en">This rule ensures that daytime-stream service is not enabled.</description>
      <reference>PCI DSS v3.2 Requirements 2.2.2</reference>
      <reference>https://www.pcisecuritystandards.org</reference>
      <platform idref="cpe:/o:centos:centos:7" />
      <platform idref="cpe:/o:oracle:linux:7" />
      <platform idref="cpe:/o:redhat:enterprise_linux:7" />
      <ident system="www.unifiedcompliance.com">UCF CC ID 04924</ident>
      <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
        <check-export value-id="ShouldTheServiceBeEnabledOrDisabled_var4" export-name="oval:com.mcafee.oval:var:87714" />
        <check-content-ref href="" name="oval:com.mcafee.oval:def:8865" />
      </check>
    </Rule>
    <Rule id="DisableDaytime_dgramUnlessDaytime_dgramIsAbsolutelyNecessary" xml:lang="en" selected="false">
      <title xml:lang="en">Disable daytime-dgram unless daytime-dgram is absolutely necessary</title>
      <description xml:lang="en">This rule ensures that daytime-dgram service is not enabled.</description>
      <reference>PCI DSS v3.2 Requirements 2.2.2</reference>
      <reference>https://www.pcisecuritystandards.org</reference>
      <platform idref="cpe:/o:centos:centos:7" />
      <platform idref="cpe:/o:oracle:linux:7" />
      <platform idref="cpe:/o:redhat:enterprise_linux:7" />
      <ident system="www.unifiedcompliance.com">UCF CC ID 04924</ident>
      <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
        <check-export value-id="ShouldTheServiceBeEnabledOrDisabled_var5" export-name="oval:com.mcafee.oval:var:87714" />
        <check-content-ref href="" name="oval:com.mcafee.oval:def:8875" />
      </check>
    </Rule>
    <Rule id="DisableDiscard_udpUnlessDiscard_udpIsAbsolutelyNecessary" xml:lang="en" selected="false">
      <title xml:lang="en">Disable discard-udp unless discard-udp is absolutely necessary</title>
      <description xml:lang="en">This rule ensures that discard-udp service is not enabled.</description>
      <reference>PCI DSS v3.2 Requirements 2.2.2</reference>
      <reference>https://www.pcisecuritystandards.org</reference>
      <platform idref="cpe:/o:centos:centos:7" />
      <platform idref="cpe:/o:oracle:linux:7" />
      <platform idref="cpe:/o:redhat:enterprise_linux:7" />
      <ident system="www.unifiedcompliance.com">UCF CC ID 04928</ident>
      <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
        <check-export value-id="ShouldTheServiceBeEnabledOrDisabled_var2" export-name="oval:com.mcafee.oval:var:87714" />
        <check-content-ref href="" name="oval:com.mcafee.oval:def:429107" />
      </check>
    </Rule>
    <Rule id="DisableDiscardTcpUnlessDiscardTcpIsAbsolutelyNecessary" xml:lang="en" selected="false">
      <title xml:lang="en">Disable discard tcp unless discard tcp is absolutely necessary</title>
      <description xml:lang="en">This rule ensures that discard tcp service is not enabled.</description>
      <reference>PCI DSS v3.2 Requirements 2.2.2</reference>
      <reference>https://www.pcisecuritystandards.org</reference>
      <platform idref="cpe:/o:centos:centos:7" />
      <platform idref="cpe:/o:oracle:linux:7" />
      <platform idref="cpe:/o:redhat:enterprise_linux:7" />
      <ident system="www.unifiedcompliance.com">UCF CC ID 04928</ident>
      <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
        <check-export value-id="ShouldTheServiceBeEnabledOrDisabled_var3" export-name="oval:com.mcafee.oval:var:87714" />
        <check-content-ref href="" name="oval:com.mcafee.oval:def:1412435" />
      </check>
    </Rule>
    <Rule id="DisableBindUnlessBindIsAbsolutelyNecessary" xml:lang="en" selected="false">
      <title xml:lang="en">Disable bind unless bind is absolutely necessary</title>
      <description xml:lang="en">This rule ensures that bind service named is not enabled.</description>
      <reference>PCI DSS v3.2 Requirements 2.2.2</reference>
      <reference>https://www.pcisecuritystandards.org</reference>
      <platform idref="cpe:/o:centos:centos:7" />
      <platform idref="cpe:/o:oracle:linux:7" />
      <platform idref="cpe:/o:redhat:enterprise_linux:7" />
      <ident system="www.unifiedcompliance.com">UCF CC ID 04930</ident>
      <ident system="www.unifiedcompliance.com">UCF CC ID 04988</ident>
      <check system="http://www.mcafee.com/xccdf/script/1.0">
        <check-content>/bin/sh
30
          #!/bin/bash
          #BASH script to verify the state of a SYSTEMD Service
          : ' The systemd system and service manager is responsible for controlling how services are started, stopped and otherwise managed on Red Hat Enterprise Linux 7, Oracle Linux 7 and CentOS Linux 7 systems. Although the systemd process replaces the init process (quite literally, /sbin/init is now a symbolic link to /usr/lib/systemd/systemd) for starting services at boot time and changing runlevels, systemd provides much more control than the init
          process does while still supporting existing init scripts. '
          
          SYSTEMD_SERVICE_NAME=named.service
          
          #SERVICE_EXISTENCE - Command to verify whether $SYSTEMD_SERVICE_NAME exists on the system or not.
          SERVICE_EXISTENCE=`systemctl list-unit-files --type service | grep $SYSTEMD_SERVICE_NAME`
          
          #CURRENT_SERVICE_STATE - Command to verify the current state of $SYSTEMD_SERVICE_NAME
          CURRENT_SERVICE_STATE=`systemctl is-enabled $SYSTEMD_SERVICE_NAME`
          
          #EXPECTED_SERVICE_STATE - Expected service state by End User
          EXPECTED_SERVICE_STATE=disabled
          
          if [ -z "$SERVICE_EXISTENCE" ]  #SYSTEMD_SERVICE_NAME existence test.
          then
          #echo "SYSTEMD Service $SYSTEMD_SERVICE_NAME does not exists on the system."
          exit 0  #Script should return true. Verify the last executed command status by echo $?.
          elif [ "$CURRENT_SERVICE_STATE" = "$EXPECTED_SERVICE_STATE" ]
          then
          #echo "SYSTEMD Service $SYSTEMD_SERVICE_NAME is disabled as expected."
          exit 0  #Script should return true. Verify the last executed command status by echo $?.
          else
          #echo "SYSTEMD Service $SYSTEMD_SERVICE_NAME is enabled, expected to be disabled."
          exit 1  #Script should return false. Verify the last executed command status by echo $?.
          fi
          fi</check-content>
      </check>
    </Rule>
    <Rule id="DisableNfs_serverUnlessNfs_serverIsAbsolutelyNecessary" xml:lang="en" selected="false">
      <title xml:lang="en">Disable nfs-server unless nfs-server is absolutely necessary</title>
      <description xml:lang="en">This rule ensures that nfs-server service is not enabled.</description>
      <reference>PCI DSS v3.2 Requirements 2.2.2</reference>
      <reference>https://www.pcisecuritystandards.org</reference>
      <platform idref="cpe:/o:centos:centos:7" />
      <platform idref="cpe:/o:oracle:linux:7" />
      <platform idref="cpe:/o:redhat:enterprise_linux:7" />
      <ident system="www.unifiedcompliance.com">UCF CC ID 04931</ident>
      <check system="http://www.mcafee.com/xccdf/script/1.0">
        <check-content>/bin/sh
30
          #!/bin/bash
          #BASH script to verify the state of a SYSTEMD Service
          : ' The systemd system and service manager is responsible for controlling how services are started, stopped and otherwise managed on Red Hat Enterprise Linux 7, Oracle Linux 7 and CentOS Linux 7 systems. Although the systemd process replaces the init process (quite literally, /sbin/init is now a symbolic link to /usr/lib/systemd/systemd) for starting services at boot time and changing runlevels, systemd provides much more control than the init
          process does while still supporting existing init scripts. '
          
          SYSTEMD_SERVICE_NAME=nfs-server.service
          
          #SERVICE_EXISTENCE - Command to verify whether $SYSTEMD_SERVICE_NAME exists on the system or not.
          SERVICE_EXISTENCE=`systemctl list-unit-files --type service | grep $SYSTEMD_SERVICE_NAME`
          
          #CURRENT_SERVICE_STATE - Command to verify the current state of $SYSTEMD_SERVICE_NAME
          CURRENT_SERVICE_STATE=`systemctl is-enabled $SYSTEMD_SERVICE_NAME`
          
          #EXPECTED_SERVICE_STATE - Expected service state by End User
          EXPECTED_SERVICE_STATE=disabled
          
          if [ -z "$SERVICE_EXISTENCE" ]  #SYSTEMD_SERVICE_NAME existence test.
          then
          #echo "SYSTEMD Service $SYSTEMD_SERVICE_NAME does not exists on the system."
          exit 0  #Script should return true. Verify the last executed command status by echo $?.
          elif [ "$CURRENT_SERVICE_STATE" = "$EXPECTED_SERVICE_STATE" ]
          then
          #echo "SYSTEMD Service $SYSTEMD_SERVICE_NAME is disabled as expected."
          exit 0  #Script should return true. Verify the last executed command status by echo $?.
          else
          #echo "SYSTEMD Service $SYSTEMD_SERVICE_NAME is enabled, expected to be disabled."
          exit 1  #Script should return false. Verify the last executed command status by echo $?.
          fi
          fi</check-content>
      </check>
    </Rule>
    <Rule id="DisableMountdUnlessMountdIsAbsolutelyNecessary" xml:lang="en" selected="false">
      <title xml:lang="en">Disable mountd unless mountd is absolutely necessary</title>
      <description xml:lang="en">This rule ensures that mountd service is not enabled.</description>
      <reference>PCI DSS v3.2 Requirements 2.2.2</reference>
      <reference>https://www.pcisecuritystandards.org</reference>
      <platform idref="cpe:/o:centos:centos:7" />
      <platform idref="cpe:/o:oracle:linux:7" />
      <platform idref="cpe:/o:redhat:enterprise_linux:7" />
      <ident system="www.unifiedcompliance.com">UCF CC ID 04932</ident>
      <check system="http://www.mcafee.com/xccdf/script/1.0">
        <check-content>/bin/sh
30
          #!/bin/bash
          #BASH script to verify the state of a SYSTEMD Service
          : ' The systemd system and service manager is responsible for controlling how services are started, stopped and otherwise managed on Red Hat Enterprise Linux 7, Oracle Linux 7 and CentOS Linux 7 systems. Although the systemd process replaces the init process (quite literally, /sbin/init is now a symbolic link to /usr/lib/systemd/systemd) for starting services at boot time and changing runlevels, systemd provides much more control than the init
          process does while still supporting existing init scripts. '
          
          SYSTEMD_SERVICE_NAME=nfs-mountd.service
          
          #SERVICE_EXISTENCE - Command to verify whether $SYSTEMD_SERVICE_NAME exists on the system or not.
          SERVICE_EXISTENCE=`systemctl list-unit-files --type service | grep $SYSTEMD_SERVICE_NAME`
          
          #CURRENT_SERVICE_STATE - Command to verify the current state of $SYSTEMD_SERVICE_NAME
          CURRENT_SERVICE_STATE=`systemctl is-enabled $SYSTEMD_SERVICE_NAME`
          
          #EXPECTED_SERVICE_STATE - Expected service state by End User
          EXPECTED_SERVICE_STATE=disabled
          
          if [ -z "$SERVICE_EXISTENCE" ]  #SYSTEMD_SERVICE_NAME existence test.
          then
          #echo "SYSTEMD Service $SYSTEMD_SERVICE_NAME does not exists on the system."
          exit 0  #Script should return true. Verify the last executed command status by echo $?.
          elif [ "$CURRENT_SERVICE_STATE" = "$EXPECTED_SERVICE_STATE" ]
          then
          #echo "SYSTEMD Service $SYSTEMD_SERVICE_NAME is disabled as expected."
          exit 0  #Script should return true. Verify the last executed command status by echo $?.
          else
          #echo "SYSTEMD Service $SYSTEMD_SERVICE_NAME is enabled, expected to be disabled."
          exit 1  #Script should return false. Verify the last executed command status by echo $?.
          fi
          fi</check-content>
      </check>
    </Rule>
    <Rule id="DisableStatdUnlessStatdIsAbsolutelyNecessary" xml:lang="en" selected="false">
      <title xml:lang="en">Disable statd unless statd is absolutely necessary</title>
      <description xml:lang="en">This rule ensures that statd service is not enabled.</description>
      <reference>PCI DSS v3.2 Requirements 2.2.2</reference>
      <reference>https://www.pcisecuritystandards.org</reference>
      <platform idref="cpe:/o:centos:centos:7" />
      <platform idref="cpe:/o:oracle:linux:7" />
      <platform idref="cpe:/o:redhat:enterprise_linux:7" />
      <ident system="www.unifiedcompliance.com">UCF CC ID 04933</ident>
      <check system="http://www.mcafee.com/xccdf/script/1.0">
        <check-content>/bin/sh
30
          #!/bin/bash
          #BASH script to verify the state of a SYSTEMD Service
          : ' The systemd system and service manager is responsible for controlling how services are started, stopped and otherwise managed on Red Hat Enterprise Linux 7, Oracle Linux 7 and CentOS Linux 7 systems. Although the systemd process replaces the init process (quite literally, /sbin/init is now a symbolic link to /usr/lib/systemd/systemd) for starting services at boot time and changing runlevels, systemd provides much more control than the init
          process does while still supporting existing init scripts. '
          
          SYSTEMD_SERVICE_NAME=rpc-statd.service
          
          #SERVICE_EXISTENCE - Command to verify whether $SYSTEMD_SERVICE_NAME exists on the system or not.
          SERVICE_EXISTENCE=`systemctl list-unit-files --type service | grep $SYSTEMD_SERVICE_NAME`
          
          #CURRENT_SERVICE_STATE - Command to verify the current state of $SYSTEMD_SERVICE_NAME
          CURRENT_SERVICE_STATE=`systemctl is-enabled $SYSTEMD_SERVICE_NAME`
          
          #EXPECTED_SERVICE_STATE - Expected service state by End User
          EXPECTED_SERVICE_STATE=disabled
          
          if [ -z "$SERVICE_EXISTENCE" ]  #SYSTEMD_SERVICE_NAME existence test.
          then
          #echo "SYSTEMD Service $SYSTEMD_SERVICE_NAME does not exists on the system."
          exit 0  #Script should return true. Verify the last executed command status by echo $?.
          elif [ "$CURRENT_SERVICE_STATE" = "$EXPECTED_SERVICE_STATE" ]
          then
          #echo "SYSTEMD Service $SYSTEMD_SERVICE_NAME is disabled as expected."
          exit 0  #Script should return true. Verify the last executed command status by echo $?.
          else
          #echo "SYSTEMD Service $SYSTEMD_SERVICE_NAME is enabled, expected to be disabled."
          exit 1  #Script should return false. Verify the last executed command status by echo $?.
          fi
          fi</check-content>
      </check>
    </Rule>
    <Rule id="DisableLockdUnlessLockdIsAbsolutelyNecessary" xml:lang="en" selected="false">
      <title xml:lang="en">Disable lockd unless lockd is absolutely necessary</title>
      <description xml:lang="en">This rule ensures that lockd service is not enabled.</description>
      <reference>PCI DSS v3.2 Requirements 2.2.2</reference>
      <reference>https://www.pcisecuritystandards.org</reference>
      <platform idref="cpe:/o:centos:centos:7" />
      <platform idref="cpe:/o:oracle:linux:7" />
      <platform idref="cpe:/o:redhat:enterprise_linux:7" />
      <ident system="www.unifiedcompliance.com">UCF CC ID 04934</ident>
      <check system="http://www.mcafee.com/xccdf/script/1.0">
        <check-content>/bin/sh
30
          #!/bin/bash
          #BASH script to verify the state of a SYSTEMD Service
          : ' The systemd system and service manager is responsible for controlling how services are started, stopped and otherwise managed on Red Hat Enterprise Linux 7, Oracle Linux 7 and CentOS Linux 7 systems. Although the systemd process replaces the init process (quite literally, /sbin/init is now a symbolic link to /usr/lib/systemd/systemd) for starting services at boot time and changing runlevels, systemd provides much more control than the init
          process does while still supporting existing init scripts. '
          
          SYSTEMD_SERVICE_NAME=rpc-lock.service
          
          #SERVICE_EXISTENCE - Command to verify whether $SYSTEMD_SERVICE_NAME exists on the system or not.
          SERVICE_EXISTENCE=`systemctl list-unit-files --type service | grep $SYSTEMD_SERVICE_NAME`
          
          #CURRENT_SERVICE_STATE - Command to verify the current state of $SYSTEMD_SERVICE_NAME
          CURRENT_SERVICE_STATE=`systemctl is-enabled $SYSTEMD_SERVICE_NAME`
          
          #EXPECTED_SERVICE_STATE - Expected service state by End User
          EXPECTED_SERVICE_STATE=disabled
          
          if [ -z "$SERVICE_EXISTENCE" ]  #SYSTEMD_SERVICE_NAME existence test.
          then
          #echo "SYSTEMD Service $SYSTEMD_SERVICE_NAME does not exists on the system."
          exit 0  #Script should return true. Verify the last executed command status by echo $?.
          elif [ "$CURRENT_SERVICE_STATE" = "$EXPECTED_SERVICE_STATE" ]
          then
          #echo "SYSTEMD Service $SYSTEMD_SERVICE_NAME is disabled as expected."
          exit 0  #Script should return true. Verify the last executed command status by echo $?.
          else
          #echo "SYSTEMD Service $SYSTEMD_SERVICE_NAME is enabled, expected to be disabled."
          exit 1  #Script should return false. Verify the last executed command status by echo $?.
          fi
          fi</check-content>
      </check>
    </Rule>
    <Rule id="Configuration_SendmailVrfyCommandShouldBeDisabled" xml:lang="en" selected="false">
      <title xml:lang="en">configuration-sendmail vrfy command should be disabled</title>
      <description xml:lang="en">This rule will verfiy the sendmail vrfy command is disabled or not</description>
      <reference>PCI DSS v3.2 Requirements 2.2.2</reference>
      <reference>https://www.pcisecuritystandards.org</reference>
      <platform idref="cpe:/o:centos:centos:7" />
      <platform idref="cpe:/o:oracle:linux:7" />
      <platform idref="cpe:/o:redhat:enterprise_linux:7" />
      <ident system="www.unifiedcompliance.com">UCF CC ID 04936</ident>
      <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
        <check-content-ref href="" name="oval:com.mcafee.oval:def:234399" />
      </check>
    </Rule>
    <Rule id="Configuration_SendmailExpnCommandShouldBeDisabled" xml:lang="en" selected="false">
      <title xml:lang="en">configuration-sendmail expn command should be disabled</title>
      <description xml:lang="en">This rule will verfiy the sendmail vrfy command is disabled or not</description>
      <reference>PCI DSS v3.2 Requirements 2.2.2</reference>
      <reference>https://www.pcisecuritystandards.org</reference>
      <platform idref="cpe:/o:centos:centos:7" />
      <platform idref="cpe:/o:oracle:linux:7" />
      <platform idref="cpe:/o:redhat:enterprise_linux:7" />
      <ident system="www.unifiedcompliance.com">UCF CC ID 04937</ident>
      <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
        <check-content-ref href="" name="oval:com.mcafee.oval:def:234400" />
      </check>
    </Rule>
    <Rule id="NFSConfiguration_Insecure_locksOptionRemoval_etc_exports" xml:lang="en" selected="false">
      <title xml:lang="en">NFS Configuration - insecure_locks option removal - /etc/exports</title>
      <description xml:lang="en">This rule ensures that insecure_locks option is not present for any shares  in /etc/exports file.</description>
      <reference>PCI DSS v3.2 Requirements 2.2.2</reference>
      <reference>https://www.pcisecuritystandards.org</reference>
      <platform idref="cpe:/o:centos:centos:7" />
      <platform idref="cpe:/o:oracle:linux:7" />
      <platform idref="cpe:/o:redhat:enterprise_linux:7" />
      <ident system="www.unifiedcompliance.com">UCF CC ID 04939</ident>
      <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
        <check-content-ref href="" name="oval:com.mcafee.oval:def:2487247" />
      </check>
    </Rule>
    <Rule id="RemoveSETroubleshootService" xml:lang="en" selected="false">
      <title xml:lang="en">Remove SETroubleshoot Service</title>
      <description xml:lang="en">This rule ensures that SETroubleshoot package is not installed on the system.</description>
      <reference>PCI DSS v3.2 Requirements 2.2.2</reference>
      <reference>https://www.pcisecuritystandards.org</reference>
      <platform idref="cpe:/o:centos:centos:7" />
      <platform idref="cpe:/o:oracle:linux:7" />
      <platform idref="cpe:/o:redhat:enterprise_linux:7" />
      <ident system="www.unifiedcompliance.com">UCF CC ID 05540</ident>
      <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
        <check-export value-id="EnterTheNameOfTheRPMPackageToBeVerified._var1" export-name="oval:com.mcafee.oval:var:242779" />
        <check-content-ref href="" name="oval:com.mcafee.oval:def:242776" />
      </check>
    </Rule>
    <Rule id="RemoveMCSTranslationService" xml:lang="en" selected="false">
      <title xml:lang="en">Remove MCS Translation Service</title>
      <description xml:lang="en">This rule ensures that mcstrans package is not installed on the system.</description>
      <reference>PCI DSS v3.2 Requirements 2.2.2</reference>
      <reference>https://www.pcisecuritystandards.org</reference>
      <platform idref="cpe:/o:centos:centos:7" />
      <platform idref="cpe:/o:oracle:linux:7" />
      <platform idref="cpe:/o:redhat:enterprise_linux:7" />
      <ident system="www.unifiedcompliance.com">UCF CC ID 05541</ident>
      <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
        <check-export value-id="EnterTheNameOfTheRPMPackageToBeVerified._var2" export-name="oval:com.mcafee.oval:var:242779" />
        <check-content-ref href="" name="oval:com.mcafee.oval:def:242776" />
      </check>
    </Rule>
    <Rule id="DisableRestorecondUnlessRestorecondIsAbsolutelyNecessary" xml:lang="en" selected="false">
      <title xml:lang="en">Disable restorecond unless restorecond is absolutely necessary</title>
      <description xml:lang="en">This rule ensures that Restorecond service is not enabled.</description>
      <reference>PCI DSS v3.2 Requirements 2.2.2</reference>
      <reference>https://www.pcisecuritystandards.org</reference>
      <platform idref="cpe:/o:centos:centos:7" />
      <platform idref="cpe:/o:oracle:linux:7" />
      <platform idref="cpe:/o:redhat:enterprise_linux:7" />
      <ident system="www.unifiedcompliance.com">UCF CC ID 05542</ident>
      <check system="http://www.mcafee.com/xccdf/script/1.0">
        <check-content>/bin/sh
30
          #!/bin/bash
          #BASH script to verify the state of a SYSTEMD Service
          : ' The systemd system and service manager is responsible for controlling how services are started, stopped and otherwise managed on Red Hat Enterprise Linux 7, Oracle Linux 7 and CentOS Linux 7 systems. Although the systemd process replaces the init process (quite literally, /sbin/init is now a symbolic link to /usr/lib/systemd/systemd) for starting services at boot time and changing runlevels, systemd provides much more control than the init
          process does while still supporting existing init scripts. '
          
          SYSTEMD_SERVICE_NAME=restorecond.service
          
          #SERVICE_EXISTENCE - Command to verify whether $SYSTEMD_SERVICE_NAME exists on the system or not.
          SERVICE_EXISTENCE=`systemctl list-unit-files --type service | grep $SYSTEMD_SERVICE_NAME`
          
          #CURRENT_SERVICE_STATE - Command to verify the current state of $SYSTEMD_SERVICE_NAME
          CURRENT_SERVICE_STATE=`systemctl is-enabled $SYSTEMD_SERVICE_NAME`
          
          #EXPECTED_SERVICE_STATE - Expected service state by End User
          EXPECTED_SERVICE_STATE=disabled
          
          if [ -z "$SERVICE_EXISTENCE" ]  #SYSTEMD_SERVICE_NAME existence test.
          then
          #echo "SYSTEMD Service $SYSTEMD_SERVICE_NAME does not exists on the system."
          exit 0  #Script should return true. Verify the last executed command status by echo $?.
          elif [ "$CURRENT_SERVICE_STATE" = "$EXPECTED_SERVICE_STATE" ]
          then
          #echo "SYSTEMD Service $SYSTEMD_SERVICE_NAME is disabled as expected."
          exit 0  #Script should return true. Verify the last executed command status by echo $?.
          else
          #echo "SYSTEMD Service $SYSTEMD_SERVICE_NAME is enabled, expected to be disabled."
          exit 1  #Script should return false. Verify the last executed command status by echo $?.
          fi
          fi</check-content>
      </check>
    </Rule>
    <Rule id="DisableRhnsdUnlessRhnsdIsAbsolutelyNecessary" xml:lang="en" selected="false">
      <title xml:lang="en">Disable rhnsd unless rhnsd is absolutely necessary</title>
      <description xml:lang="en">This rule ensures that rhnsd service is not enabled.</description>
      <reference>PCI DSS v3.2 Requirements 2.2.2</reference>
      <platform idref="cpe:/o:redhat:enterprise_linux:7" />
      <ident system="www.unifiedcompliance.com">UCF CC ID 04944</ident>
      <check system="http://www.mcafee.com/xccdf/script/1.0">
        <check-content>/bin/sh
30
          #!/bin/bash
          #BASH script to verify the state of a SYSTEMD Service
          : ' The systemd system and service manager is responsible for controlling how services are started, stopped and otherwise managed on Red Hat Enterprise Linux 7 systems. Although the systemd process replaces the init process (quite literally, /sbin/init is now a symbolic link to /usr/lib/systemd/systemd) for starting services at boot time and changing runlevels, systemd provides much more control than the init
          process does while still supporting existing init scripts. '
          
          SYSTEMD_SERVICE_NAME=rhnsd.service
          
          #SERVICE_EXISTENCE - Command to verify whether $SYSTEMD_SERVICE_NAME exists on the system or not.
          SERVICE_EXISTENCE=`systemctl list-unit-files --type service | grep $SYSTEMD_SERVICE_NAME`
          
          #CURRENT_SERVICE_STATE - Command to verify the current state of $SYSTEMD_SERVICE_NAME
          CURRENT_SERVICE_STATE=`systemctl is-enabled $SYSTEMD_SERVICE_NAME`
          
          #EXPECTED_SERVICE_STATE - Expected service state by End User
          EXPECTED_SERVICE_STATE=disabled
          
          if [ -z "$SERVICE_EXISTENCE" ]  #SYSTEMD_SERVICE_NAME existence test.
          then
          #echo "SYSTEMD Service $SYSTEMD_SERVICE_NAME does not exists on the system."
          exit 0  #Script should return true. Verify the last executed command status by echo $?.
          elif [ "$CURRENT_SERVICE_STATE" = "$EXPECTED_SERVICE_STATE" ]
          then
          #echo "SYSTEMD Service $SYSTEMD_SERVICE_NAME is disabled as expected."
          exit 0  #Script should return true. Verify the last executed command status by echo $?.
          else
          #echo "SYSTEMD Service $SYSTEMD_SERVICE_NAME is enabled, expected to be disabled."
          exit 1  #Script should return false. Verify the last executed command status by echo $?.
          fi
          fi</check-content>
      </check>
    </Rule>
    <Rule id="DisableYum_cronUnlessYum_cronIsAbsolutelyNecessary" xml:lang="en" selected="false">
      <title xml:lang="en">Disable yum-cron unless yum-cron is absolutely necessary</title>
      <description xml:lang="en">This rule ensures that yum-cron service is not enabled.</description>
      <reference>PCI DSS v3.2 Requirements 2.2.2</reference>
      <reference>https://www.pcisecuritystandards.org</reference>
      <platform idref="cpe:/o:centos:centos:7" />
      <platform idref="cpe:/o:oracle:linux:7" />
      <platform idref="cpe:/o:redhat:enterprise_linux:7" />
      <ident system="www.unifiedcompliance.com">UCF CC ID 04945</ident>
      <check system="http://www.mcafee.com/xccdf/script/1.0">
        <check-content>/bin/sh
30
          #!/bin/bash
          #BASH script to verify the state of a SYSTEMD Service
          : ' The systemd system and service manager is responsible for controlling how services are started, stopped and otherwise managed on Red Hat Enterprise Linux 7, Oracle Linux 7 and CentOS Linux 7 systems. Although the systemd process replaces the init process (quite literally, /sbin/init is now a symbolic link to /usr/lib/systemd/systemd) for starting services at boot time and changing runlevels, systemd provides much more control than the init
          process does while still supporting existing init scripts. '
          
          SYSTEMD_SERVICE_NAME=yum-cron.service
          
          #SERVICE_EXISTENCE - Command to verify whether $SYSTEMD_SERVICE_NAME exists on the system or not.
          SERVICE_EXISTENCE=`systemctl list-unit-files --type service | grep $SYSTEMD_SERVICE_NAME`
          
          #CURRENT_SERVICE_STATE - Command to verify the current state of $SYSTEMD_SERVICE_NAME
          CURRENT_SERVICE_STATE=`systemctl is-enabled $SYSTEMD_SERVICE_NAME`
          
          #EXPECTED_SERVICE_STATE - Expected service state by End User
          EXPECTED_SERVICE_STATE=disabled
          
          if [ -z "$SERVICE_EXISTENCE" ]  #SYSTEMD_SERVICE_NAME existence test.
          then
          #echo "SYSTEMD Service $SYSTEMD_SERVICE_NAME does not exists on the system."
          exit 0  #Script should return true. Verify the last executed command status by echo $?.
          elif [ "$CURRENT_SERVICE_STATE" = "$EXPECTED_SERVICE_STATE" ]
          then
          #echo "SYSTEMD Service $SYSTEMD_SERVICE_NAME is disabled as expected."
          exit 0  #Script should return true. Verify the last executed command status by echo $?.
          else
          #echo "SYSTEMD Service $SYSTEMD_SERVICE_NAME is enabled, expected to be disabled."
          exit 1  #Script should return false. Verify the last executed command status by echo $?.
          fi
          fi</check-content>
      </check>
    </Rule>
    <Rule id="DisableAutofsUnlessAutofsIsAbsolutelyNecessary" xml:lang="en" selected="false">
      <title xml:lang="en">Disable autofs unless autofs is absolutely necessary</title>
      <description xml:lang="en">This rule ensures that autofs service is not enabled.</description>
      <reference>PCI DSS v3.2 Requirements 2.2.2</reference>
      <reference>https://www.pcisecuritystandards.org</reference>
      <platform idref="cpe:/o:centos:centos:7" />
      <platform idref="cpe:/o:oracle:linux:7" />
      <platform idref="cpe:/o:redhat:enterprise_linux:7" />
      <ident system="www.unifiedcompliance.com">UCF CC ID 04946</ident>
      <check system="http://www.mcafee.com/xccdf/script/1.0">
        <check-content>/bin/sh
30
          #!/bin/bash
          #BASH script to verify the state of a SYSTEMD Service
          : ' The systemd system and service manager is responsible for controlling how services are started, stopped and otherwise managed on Red Hat Enterprise Linux 7, Oracle Linux 7 and CentOS Linux 7 systems. Although the systemd process replaces the init process (quite literally, /sbin/init is now a symbolic link to /usr/lib/systemd/systemd) for starting services at boot time and changing runlevels, systemd provides much more control than the init
          process does while still supporting existing init scripts. '
          
          SYSTEMD_SERVICE_NAME=autofs.service
          
          #SERVICE_EXISTENCE - Command to verify whether $SYSTEMD_SERVICE_NAME exists on the system or not.
          SERVICE_EXISTENCE=`systemctl list-unit-files --type service | grep $SYSTEMD_SERVICE_NAME`
          
          #CURRENT_SERVICE_STATE - Command to verify the current state of $SYSTEMD_SERVICE_NAME
          CURRENT_SERVICE_STATE=`systemctl is-enabled $SYSTEMD_SERVICE_NAME`
          
          #EXPECTED_SERVICE_STATE - Expected service state by End User
          EXPECTED_SERVICE_STATE=disabled
          
          if [ -z "$SERVICE_EXISTENCE" ]  #SYSTEMD_SERVICE_NAME existence test.
          then
          #echo "SYSTEMD Service $SYSTEMD_SERVICE_NAME does not exists on the system."
          exit 0  #Script should return true. Verify the last executed command status by echo $?.
          elif [ "$CURRENT_SERVICE_STATE" = "$EXPECTED_SERVICE_STATE" ]
          then
          #echo "SYSTEMD Service $SYSTEMD_SERVICE_NAME is disabled as expected."
          exit 0  #Script should return true. Verify the last executed command status by echo $?.
          else
          #echo "SYSTEMD Service $SYSTEMD_SERVICE_NAME is enabled, expected to be disabled."
          exit 1  #Script should return false. Verify the last executed command status by echo $?.
          fi
          fi</check-content>
      </check>
    </Rule>
    <Rule id="DisableRsyncdUnlessRsyncdIsAbsolutelyNecessary" xml:lang="en" selected="false">
      <title xml:lang="en">Disable rsyncd unless rsyncd is absolutely necessary</title>
      <description xml:lang="en">This rule ensures that rsyncd service is not enabled.</description>
      <reference>PCI DSS v3.2 Requirements 10</reference>
      <reference>https://www.pcisecuritystandards.org</reference>
      <platform idref="cpe:/o:centos:centos:7" />
      <platform idref="cpe:/o:oracle:linux:7" />
      <platform idref="cpe:/o:redhat:enterprise_linux:7" />
      <ident system="www.unifiedcompliance.com">UCF CC ID 11382</ident>
      <check system="http://www.mcafee.com/xccdf/script/1.0">
        <check-content>/bin/sh
30
          #!/bin/bash
          #BASH script to verify the state of a SYSTEMD Service
          : ' The systemd system and service manager is responsible for controlling how services are started, stopped and otherwise managed on Red Hat Enterprise Linux 7, Oracle Linux 7 and CentOS Linux 7 systems. Although the systemd process replaces the init process (quite literally, /sbin/init is now a symbolic link to /usr/lib/systemd/systemd) for starting services at boot time and changing runlevels, systemd provides much more control than the init
          process does while still supporting existing init scripts. '
          
          SYSTEMD_SERVICE_NAME=rsyncd.service
          
          #SERVICE_EXISTENCE - Command to verify whether $SYSTEMD_SERVICE_NAME exists on the system or not.
          SERVICE_EXISTENCE=`systemctl list-unit-files --type service | grep $SYSTEMD_SERVICE_NAME`
          
          #CURRENT_SERVICE_STATE - Command to verify the current state of $SYSTEMD_SERVICE_NAME
          CURRENT_SERVICE_STATE=`systemctl is-enabled $SYSTEMD_SERVICE_NAME`
          
          #EXPECTED_SERVICE_STATE - Expected service state by End User
          EXPECTED_SERVICE_STATE=disabled
          
          if [ -z "$SERVICE_EXISTENCE" ]  #SYSTEMD_SERVICE_NAME existence test.
          then
          #echo "SYSTEMD Service $SYSTEMD_SERVICE_NAME does not exists on the system."
          exit 0  #Script should return true. Verify the last executed command status by echo $?.
          elif [ "$CURRENT_SERVICE_STATE" = "$EXPECTED_SERVICE_STATE" ]
          then
          #echo "SYSTEMD Service $SYSTEMD_SERVICE_NAME is disabled as expected."
          exit 0  #Script should return true. Verify the last executed command status by echo $?.
          else
          #echo "SYSTEMD Service $SYSTEMD_SERVICE_NAME is enabled, expected to be disabled."
          exit 1  #Script should return false. Verify the last executed command status by echo $?.
          fi
          fi</check-content>
      </check>
    </Rule>
    <Rule id="DisableIp6tablesUnlessIp6tablesIsAbsolutelyNecessary" xml:lang="en" selected="false">
      <title xml:lang="en">Disable Ip6tables unless Ip6tables is absolutely necessary</title>
      <description xml:lang="en">This rule ensures that Ip6tables service is not enabled.</description>
      <reference>PCI DSS v3.2 Requirements 2.2.2</reference>
      <reference>https://www.pcisecuritystandards.org</reference>
      <platform idref="cpe:/o:centos:centos:7" />
      <platform idref="cpe:/o:oracle:linux:7" />
      <platform idref="cpe:/o:redhat:enterprise_linux:7" />
      <ident system="www.unifiedcompliance.com">UCF CC ID 04947</ident>
      <check system="http://www.mcafee.com/xccdf/script/1.0">
        <check-content>/bin/sh
30
          #!/bin/bash
          #BASH script to verify the state of a SYSTEMD Service
          : ' The systemd system and service manager is responsible for controlling how services are started, stopped and otherwise managed on Red Hat Enterprise Linux 7, Oracle Linux 7 and CentOS Linux 7 systems. Although the systemd process replaces the init process (quite literally, /sbin/init is now a symbolic link to /usr/lib/systemd/systemd) for starting services at boot time and changing runlevels, systemd provides much more control than the init
          process does while still supporting existing init scripts. '
          
          SYSTEMD_SERVICE_NAME=ip6tables.service
          
          #SERVICE_EXISTENCE - Command to verify whether $SYSTEMD_SERVICE_NAME exists on the system or not.
          SERVICE_EXISTENCE=`systemctl list-unit-files --type service | grep $SYSTEMD_SERVICE_NAME`
          
          #CURRENT_SERVICE_STATE - Command to verify the current state of $SYSTEMD_SERVICE_NAME
          CURRENT_SERVICE_STATE=`systemctl is-enabled $SYSTEMD_SERVICE_NAME`
          
          #EXPECTED_SERVICE_STATE - Expected service state by End User
          EXPECTED_SERVICE_STATE=disabled
          
          if [ -z "$SERVICE_EXISTENCE" ]  #SYSTEMD_SERVICE_NAME existence test.
          then
          #echo "SYSTEMD Service $SYSTEMD_SERVICE_NAME does not exists on the system."
          exit 0  #Script should return true. Verify the last executed command status by echo $?.
          elif [ "$CURRENT_SERVICE_STATE" = "$EXPECTED_SERVICE_STATE" ]
          then
          #echo "SYSTEMD Service $SYSTEMD_SERVICE_NAME is disabled as expected."
          exit 0  #Script should return true. Verify the last executed command status by echo $?.
          else
          #echo "SYSTEMD Service $SYSTEMD_SERVICE_NAME is enabled, expected to be disabled."
          exit 1  #Script should return false. Verify the last executed command status by echo $?.
          fi
          fi</check-content>
      </check>
    </Rule>
    <Rule id="DisableIptablesUnlessIptablesIsAbsolutelyNecessary" xml:lang="en" selected="false">
      <title xml:lang="en">Disable Iptables unless Iptables is absolutely necessary</title>
      <description xml:lang="en">This rule ensures that Iptables service is not enabled.</description>
      <reference>PCI DSS v3.2 Requirements 2.2.2</reference>
      <reference>https://www.pcisecuritystandards.org</reference>
      <platform idref="cpe:/o:centos:centos:7" />
      <platform idref="cpe:/o:oracle:linux:7" />
      <platform idref="cpe:/o:redhat:enterprise_linux:7" />
      <ident system="www.unifiedcompliance.com">UCF CC ID 04948</ident>
      <check system="http://www.mcafee.com/xccdf/script/1.0">
        <check-content>/bin/sh
30
          #!/bin/bash
          #BASH script to verify the state of a SYSTEMD Service
          : ' The systemd system and service manager is responsible for controlling how services are started, stopped and otherwise managed on Red Hat Enterprise Linux 7, Oracle Linux 7 and CentOS Linux 7 systems. Although the systemd process replaces the init process (quite literally, /sbin/init is now a symbolic link to /usr/lib/systemd/systemd) for starting services at boot time and changing runlevels, systemd provides much more control than the init
          process does while still supporting existing init scripts. '
          
          SYSTEMD_SERVICE_NAME=iptables.service
          
          #SERVICE_EXISTENCE - Command to verify whether $SYSTEMD_SERVICE_NAME exists on the system or not.
          SERVICE_EXISTENCE=`systemctl list-unit-files --type service | grep $SYSTEMD_SERVICE_NAME`
          
          #CURRENT_SERVICE_STATE - Command to verify the current state of $SYSTEMD_SERVICE_NAME
          CURRENT_SERVICE_STATE=`systemctl is-enabled $SYSTEMD_SERVICE_NAME`
          
          #EXPECTED_SERVICE_STATE - Expected service state by End User
          EXPECTED_SERVICE_STATE=disabled
          
          if [ -z "$SERVICE_EXISTENCE" ]  #SYSTEMD_SERVICE_NAME existence test.
          then
          #echo "SYSTEMD Service $SYSTEMD_SERVICE_NAME does not exists on the system."
          exit 0  #Script should return true. Verify the last executed command status by echo $?.
          elif [ "$CURRENT_SERVICE_STATE" = "$EXPECTED_SERVICE_STATE" ]
          then
          #echo "SYSTEMD Service $SYSTEMD_SERVICE_NAME is disabled as expected."
          exit 0  #Script should return true. Verify the last executed command status by echo $?.
          else
          #echo "SYSTEMD Service $SYSTEMD_SERVICE_NAME is enabled, expected to be disabled."
          exit 1  #Script should return false. Verify the last executed command status by echo $?.
          fi
          fi</check-content>
      </check>
    </Rule>
    <Rule id="DisableRsyslogUnlessRsyslogIsAbsolutelyNecessary" xml:lang="en" selected="false">
      <title xml:lang="en">Disable rsyslog unless rsyslog is absolutely necessary</title>
      <description xml:lang="en">This rule ensures that rsyslog service is not enabled.</description>
      <reference>PCI DSS v3.2 Requirements 2.2.2</reference>
      <reference>https://www.pcisecuritystandards.org</reference>
      <platform idref="cpe:/o:centos:centos:7" />
      <platform idref="cpe:/o:oracle:linux:7" />
      <platform idref="cpe:/o:redhat:enterprise_linux:7" />
      <ident system="www.unifiedcompliance.com">UCF CC ID 04949</ident>
      <check system="http://www.mcafee.com/xccdf/script/1.0">
        <check-content>/bin/sh
30
          #!/bin/bash
          #BASH script to verify the state of a SYSTEMD Service
          : ' The systemd system and service manager is responsible for controlling how services are started, stopped and otherwise managed on Red Hat Enterprise Linux 7, Oracle Linux 7 and CentOS Linux 7 systems. Although the systemd process replaces the init process (quite literally, /sbin/init is now a symbolic link to /usr/lib/systemd/systemd) for starting services at boot time and changing runlevels, systemd provides much more control than the init
          process does while still supporting existing init scripts. '
          
          SYSTEMD_SERVICE_NAME=rsyslog.service
          
          #SERVICE_EXISTENCE - Command to verify whether $SYSTEMD_SERVICE_NAME exists on the system or not.
          SERVICE_EXISTENCE=`systemctl list-unit-files --type service | grep $SYSTEMD_SERVICE_NAME`
          
          #CURRENT_SERVICE_STATE - Command to verify the current state of $SYSTEMD_SERVICE_NAME
          CURRENT_SERVICE_STATE=`systemctl is-enabled $SYSTEMD_SERVICE_NAME`
          
          #EXPECTED_SERVICE_STATE - Expected service state by End User
          EXPECTED_SERVICE_STATE=disabled
          
          if [ -z "$SERVICE_EXISTENCE" ]  #SYSTEMD_SERVICE_NAME existence test.
          then
          #echo "SYSTEMD Service $SYSTEMD_SERVICE_NAME does not exists on the system."
          exit 0  #Script should return true. Verify the last executed command status by echo $?.
          elif [ "$CURRENT_SERVICE_STATE" = "$EXPECTED_SERVICE_STATE" ]
          then
          #echo "SYSTEMD Service $SYSTEMD_SERVICE_NAME is disabled as expected."
          exit 0  #Script should return true. Verify the last executed command status by echo $?.
          else
          #echo "SYSTEMD Service $SYSTEMD_SERVICE_NAME is enabled, expected to be disabled."
          exit 1  #Script should return false. Verify the last executed command status by echo $?.
          fi
          fi</check-content>
      </check>
    </Rule>
    <Rule id="EnableAuditdService" xml:lang="en" selected="false">
      <title xml:lang="en">Enable auditd service</title>
      <description xml:lang="en">This rule ensures that auditd service is not enabled.</description>
      <reference>PCI DSS v3.2 Requirements 2.2.2</reference>
      <reference>https://www.pcisecuritystandards.org</reference>
      <platform idref="cpe:/o:centos:centos:7" />
      <platform idref="cpe:/o:oracle:linux:7" />
      <platform idref="cpe:/o:redhat:enterprise_linux:7" />
      <ident system="www.unifiedcompliance.com">UCF CC ID 04950</ident>
      <check system="http://www.mcafee.com/xccdf/script/1.0">
        <check-content>/bin/sh
30
          #!/bin/bash
          #BASH script to verify the state of a SYSTEMD Service
          : ' The systemd system and service manager is responsible for controlling how services are started, stopped and otherwise managed on Red Hat Enterprise Linux 7, Oracle Linux 7 and CentOS Linux 7 systems. Although the systemd process replaces the init process (quite literally, /sbin/init is now a symbolic link to /usr/lib/systemd/systemd) for starting services at boot time and changing runlevels, systemd provides much more control than the init
          process does while still supporting existing init scripts. '
          
          SYSTEMD_SERVICE_NAME=auditd.service
          
          #SERVICE_EXISTENCE - Command to verify whether $SYSTEMD_SERVICE_NAME exists on the system or not.
          SERVICE_EXISTENCE=`systemctl list-unit-files --type service | grep $SYSTEMD_SERVICE_NAME`
          
          #CURRENT_SERVICE_STATE - Command to verify the current state of $SYSTEMD_SERVICE_NAME
          CURRENT_SERVICE_STATE=`systemctl is-enabled $SYSTEMD_SERVICE_NAME`
          
          #EXPECTED_SERVICE_STATE - Expected service state by End User
          EXPECTED_SERVICE_STATE=enabled
          
          if [ -z "$SERVICE_EXISTENCE" ]  #SYSTEMD_SERVICE_NAME existence test.
          then
          #echo "SYSTEMD Service $SYSTEMD_SERVICE_NAME does not exists on the system."
          exit 0  #Script should return true. Verify the last executed command status by echo $?.
          elif [ "$CURRENT_SERVICE_STATE" = "$EXPECTED_SERVICE_STATE" ]
          then
          #echo "SYSTEMD Service $SYSTEMD_SERVICE_NAME is enabled as expected."
          exit 0  #Script should return true. Verify the last executed command status by echo $?.
          else
          #echo "SYSTEMD Service $SYSTEMD_SERVICE_NAME is disabled, expected to be enabled."
          exit 1  #Script should return false. Verify the last executed command status by echo $?.
          fi
          fi</check-content>
      </check>
    </Rule>
    <Rule id="RemoveTelnet_serverPackage" xml:lang="en" selected="false">
      <title xml:lang="en">Remove telnet-server package</title>
      <description xml:lang="en">This rule ensures that telnet-server package is not installed on the system.</description>
      <reference>PCI DSS v3.2 Requirements 2.2.2</reference>
      <reference>https://www.pcisecuritystandards.org</reference>
      <platform idref="cpe:/o:centos:centos:7" />
      <platform idref="cpe:/o:oracle:linux:7" />
      <platform idref="cpe:/o:redhat:enterprise_linux:7" />
      <ident system="www.unifiedcompliance.com">UCF CC ID 04953</ident>
      <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
        <check-export value-id="EnterTheNameOfTheRPMPackageToBeVerified._var3" export-name="oval:com.mcafee.oval:var:242779" />
        <check-content-ref href="" name="oval:com.mcafee.oval:def:242776" />
      </check>
    </Rule>
    <Rule id="DisableYpbindUnlessYpbindIsAbsolutelyNecessary" xml:lang="en" selected="false">
      <title xml:lang="en">Disable ypbind unless ypbind is absolutely necessary</title>
      <description xml:lang="en">This rule ensures that ypbind service is not enabled.</description>
      <reference>PCI DSS v3.2 Requirements 2.2.2</reference>
      <reference>https://www.pcisecuritystandards.org</reference>
      <platform idref="cpe:/o:centos:centos:7" />
      <platform idref="cpe:/o:oracle:linux:7" />
      <platform idref="cpe:/o:redhat:enterprise_linux:7" />
      <ident system="www.unifiedcompliance.com">UCF CC ID 04954</ident>
      <check system="http://www.mcafee.com/xccdf/script/1.0">
        <check-content>/bin/sh
30
          #!/bin/bash
          #BASH script to verify the state of a SYSTEMD Service
          : ' The systemd system and service manager is responsible for controlling how services are started, stopped and otherwise managed on Red Hat Enterprise Linux 7, Oracle Linux 7 and CentOS Linux 7 systems. Although the systemd process replaces the init process (quite literally, /sbin/init is now a symbolic link to /usr/lib/systemd/systemd) for starting services at boot time and changing runlevels, systemd provides much more control than the init
          process does while still supporting existing init scripts. '
          
          SYSTEMD_SERVICE_NAME=ypbind.service
          
          #SERVICE_EXISTENCE - Command to verify whether $SYSTEMD_SERVICE_NAME exists on the system or not.
          SERVICE_EXISTENCE=`systemctl list-unit-files --type service | grep $SYSTEMD_SERVICE_NAME`
          
          #CURRENT_SERVICE_STATE - Command to verify the current state of $SYSTEMD_SERVICE_NAME
          CURRENT_SERVICE_STATE=`systemctl is-enabled $SYSTEMD_SERVICE_NAME`
          
          #EXPECTED_SERVICE_STATE - Expected service state by End User
          EXPECTED_SERVICE_STATE=disabled
          
          if [ -z "$SERVICE_EXISTENCE" ]  #SYSTEMD_SERVICE_NAME existence test.
          then
          #echo "SYSTEMD Service $SYSTEMD_SERVICE_NAME does not exists on the system."
          exit 0  #Script should return true. Verify the last executed command status by echo $?.
          elif [ "$CURRENT_SERVICE_STATE" = "$EXPECTED_SERVICE_STATE" ]
          then
          #echo "SYSTEMD Service $SYSTEMD_SERVICE_NAME is disabled as expected."
          exit 0  #Script should return true. Verify the last executed command status by echo $?.
          else
          #echo "SYSTEMD Service $SYSTEMD_SERVICE_NAME is enabled, expected to be disabled."
          exit 1  #Script should return false. Verify the last executed command status by echo $?.
          fi
          fi</check-content>
      </check>
    </Rule>
    <Rule id="DisableYpservUnlessYpservIsAbsolutelyNecessary" xml:lang="en" selected="false">
      <title xml:lang="en">Disable ypserv unless ypserv is absolutely necessary</title>
      <description xml:lang="en">This rule ensures that ypserv service is not enabled.</description>
      <reference>PCI DSS v3.2 Requirements 2.2.2</reference>
      <reference>https://www.pcisecuritystandards.org</reference>
      <platform idref="cpe:/o:centos:centos:7" />
      <platform idref="cpe:/o:oracle:linux:7" />
      <platform idref="cpe:/o:redhat:enterprise_linux:7" />
      <ident system="www.unifiedcompliance.com">UCF CC ID 04955</ident>
      <check system="http://www.mcafee.com/xccdf/script/1.0">
        <check-content>/bin/sh
30
          #!/bin/bash
          #BASH script to verify the state of a SYSTEMD Service
          : ' The systemd system and service manager is responsible for controlling how services are started, stopped and otherwise managed on Red Hat Enterprise Linux 7, Oracle Linux 7 and CentOS Linux 7 systems. Although the systemd process replaces the init process (quite literally, /sbin/init is now a symbolic link to /usr/lib/systemd/systemd) for starting services at boot time and changing runlevels, systemd provides much more control than the init
          process does while still supporting existing init scripts. '
          
          SYSTEMD_SERVICE_NAME=ypserv.service
          
          #SERVICE_EXISTENCE - Command to verify whether $SYSTEMD_SERVICE_NAME exists on the system or not.
          SERVICE_EXISTENCE=`systemctl list-unit-files --type service | grep $SYSTEMD_SERVICE_NAME`
          
          #CURRENT_SERVICE_STATE - Command to verify the current state of $SYSTEMD_SERVICE_NAME
          CURRENT_SERVICE_STATE=`systemctl is-enabled $SYSTEMD_SERVICE_NAME`
          
          #EXPECTED_SERVICE_STATE - Expected service state by End User
          EXPECTED_SERVICE_STATE=disabled
          
          if [ -z "$SERVICE_EXISTENCE" ]  #SYSTEMD_SERVICE_NAME existence test.
          then
          #echo "SYSTEMD Service $SYSTEMD_SERVICE_NAME does not exists on the system."
          exit 0  #Script should return true. Verify the last executed command status by echo $?.
          elif [ "$CURRENT_SERVICE_STATE" = "$EXPECTED_SERVICE_STATE" ]
          then
          #echo "SYSTEMD Service $SYSTEMD_SERVICE_NAME is disabled as expected."
          exit 0  #Script should return true. Verify the last executed command status by echo $?.
          else
          #echo "SYSTEMD Service $SYSTEMD_SERVICE_NAME is enabled, expected to be disabled."
          exit 1  #Script should return false. Verify the last executed command status by echo $?.
          fi
          fi</check-content>
      </check>
    </Rule>
    <Rule id="DisableFirstbootUnlessFirstbootIsAbsolutelyNecessary" xml:lang="en" selected="false">
      <title xml:lang="en">Disable firstboot unless firstboot is absolutely necessary</title>
      <description xml:lang="en">This rule ensures that firstboot service is not enabled.</description>
      <reference>PCI DSS v3.2 Requirements 2.2.2</reference>
      <reference>https://www.pcisecuritystandards.org</reference>
      <platform idref="cpe:/o:centos:centos:7" />
      <platform idref="cpe:/o:oracle:linux:7" />
      <platform idref="cpe:/o:redhat:enterprise_linux:7" />
      <ident system="www.unifiedcompliance.com">UCF CC ID 04956</ident>
      <check system="http://www.mcafee.com/xccdf/script/1.0">
        <check-content>/bin/sh
30
          #!/bin/bash
          #BASH script to verify the state of a SYSTEMD Service
          : ' The systemd system and service manager is responsible for controlling how services are started, stopped and otherwise managed on Red Hat Enterprise Linux 7, Oracle Linux 7 and CentOS Linux 7 systems. Although the systemd process replaces the init process (quite literally, /sbin/init is now a symbolic link to /usr/lib/systemd/systemd) for starting services at boot time and changing runlevels, systemd provides much more control than the init
          process does while still supporting existing init scripts. '
          
          SYSTEMD_SERVICE_NAME=firstboot-graphical.service
          
          #SERVICE_EXISTENCE - Command to verify whether $SYSTEMD_SERVICE_NAME exists on the system or not.
          SERVICE_EXISTENCE=`systemctl list-unit-files --type service | grep $SYSTEMD_SERVICE_NAME`
          
          #CURRENT_SERVICE_STATE - Command to verify the current state of $SYSTEMD_SERVICE_NAME
          CURRENT_SERVICE_STATE=`systemctl is-enabled $SYSTEMD_SERVICE_NAME`
          
          #EXPECTED_SERVICE_STATE - Expected service state by End User
          EXPECTED_SERVICE_STATE=disabled
          
          if [ -z "$SERVICE_EXISTENCE" ]  #SYSTEMD_SERVICE_NAME existence test.
          then
          #echo "SYSTEMD Service $SYSTEMD_SERVICE_NAME does not exists on the system."
          exit 0  #Script should return true. Verify the last executed command status by echo $?.
          elif [ "$CURRENT_SERVICE_STATE" = "$EXPECTED_SERVICE_STATE" ]
          then
          #echo "SYSTEMD Service $SYSTEMD_SERVICE_NAME is disabled as expected."
          exit 0  #Script should return true. Verify the last executed command status by echo $?.
          else
          #echo "SYSTEMD Service $SYSTEMD_SERVICE_NAME is enabled, expected to be disabled."
          exit 1  #Script should return false. Verify the last executed command status by echo $?.
          fi
          fi</check-content>
      </check>
    </Rule>
    <Rule id="DisableIrqbalanceUnlessIrqbalanceIsAbsolutelyNecessary" xml:lang="en" selected="false">
      <title xml:lang="en">Disable irqbalance unless irqbalance is absolutely necessary</title>
      <description xml:lang="en">This rule ensures that irqbalance service is not enabled.</description>
      <reference>PCI DSS v3.2 Requirements 2.2.2</reference>
      <reference>https://www.pcisecuritystandards.org</reference>
      <platform idref="cpe:/o:centos:centos:7" />
      <platform idref="cpe:/o:oracle:linux:7" />
      <platform idref="cpe:/o:redhat:enterprise_linux:7" />
      <ident system="www.unifiedcompliance.com">UCF CC ID 04958</ident>
      <check system="http://www.mcafee.com/xccdf/script/1.0">
        <check-content>/bin/sh
30
          #!/bin/bash
          #BASH script to verify the state of a SYSTEMD Service
          : ' The systemd system and service manager is responsible for controlling how services are started, stopped and otherwise managed on Red Hat Enterprise Linux 7, Oracle Linux 7 and CentOS Linux 7 systems. Although the systemd process replaces the init process (quite literally, /sbin/init is now a symbolic link to /usr/lib/systemd/systemd) for starting services at boot time and changing runlevels, systemd provides much more control than the init
          process does while still supporting existing init scripts. '
          
          SYSTEMD_SERVICE_NAME=irqbalance.service
          
          #SERVICE_EXISTENCE - Command to verify whether $SYSTEMD_SERVICE_NAME exists on the system or not.
          SERVICE_EXISTENCE=`systemctl list-unit-files --type service | grep $SYSTEMD_SERVICE_NAME`
          
          #CURRENT_SERVICE_STATE - Command to verify the current state of $SYSTEMD_SERVICE_NAME
          CURRENT_SERVICE_STATE=`systemctl is-enabled $SYSTEMD_SERVICE_NAME`
          
          #EXPECTED_SERVICE_STATE - Expected service state by End User
          EXPECTED_SERVICE_STATE=disabled
          
          if [ -z "$SERVICE_EXISTENCE" ]  #SYSTEMD_SERVICE_NAME existence test.
          then
          #echo "SYSTEMD Service $SYSTEMD_SERVICE_NAME does not exists on the system."
          exit 0  #Script should return true. Verify the last executed command status by echo $?.
          elif [ "$CURRENT_SERVICE_STATE" = "$EXPECTED_SERVICE_STATE" ]
          then
          #echo "SYSTEMD Service $SYSTEMD_SERVICE_NAME is disabled as expected."
          exit 0  #Script should return true. Verify the last executed command status by echo $?.
          else
          #echo "SYSTEMD Service $SYSTEMD_SERVICE_NAME is enabled, expected to be disabled."
          exit 1  #Script should return false. Verify the last executed command status by echo $?.
          fi
          fi</check-content>
      </check>
    </Rule>
    <Rule id="DisableKdumpUnlessKdumpIsAbsolutelyNecessary" xml:lang="en" selected="false">
      <title xml:lang="en">Disable kdump unless kdump is absolutely necessary</title>
      <description xml:lang="en">This rule ensures that kdump service is not enabled.</description>
      <reference>PCI DSS v3.2 Requirements 2.2.2</reference>
      <reference>https://www.pcisecuritystandards.org</reference>
      <platform idref="cpe:/o:centos:centos:7" />
      <platform idref="cpe:/o:oracle:linux:7" />
      <platform idref="cpe:/o:redhat:enterprise_linux:7" />
      <ident system="www.unifiedcompliance.com">UCF CC ID 04960</ident>
      <check system="http://www.mcafee.com/xccdf/script/1.0">
        <check-content>/bin/sh
30
          #!/bin/bash
          #BASH script to verify the state of a SYSTEMD Service
          : ' The systemd system and service manager is responsible for controlling how services are started, stopped and otherwise managed on Red Hat Enterprise Linux 7, Oracle Linux 7 and CentOS Linux 7 systems. Although the systemd process replaces the init process (quite literally, /sbin/init is now a symbolic link to /usr/lib/systemd/systemd) for starting services at boot time and changing runlevels, systemd provides much more control than the init
          process does while still supporting existing init scripts. '
          
          SYSTEMD_SERVICE_NAME=kdump.service
          
          #SERVICE_EXISTENCE - Command to verify whether $SYSTEMD_SERVICE_NAME exists on the system or not.
          SERVICE_EXISTENCE=`systemctl list-unit-files --type service | grep $SYSTEMD_SERVICE_NAME`
          
          #CURRENT_SERVICE_STATE - Command to verify the current state of $SYSTEMD_SERVICE_NAME
          CURRENT_SERVICE_STATE=`systemctl is-enabled $SYSTEMD_SERVICE_NAME`
          
          #EXPECTED_SERVICE_STATE - Expected service state by End User
          EXPECTED_SERVICE_STATE=disabled
          
          if [ -z "$SERVICE_EXISTENCE" ]  #SYSTEMD_SERVICE_NAME existence test.
          then
          #echo "SYSTEMD Service $SYSTEMD_SERVICE_NAME does not exists on the system."
          exit 0  #Script should return true. Verify the last executed command status by echo $?.
          elif [ "$CURRENT_SERVICE_STATE" = "$EXPECTED_SERVICE_STATE" ]
          then
          #echo "SYSTEMD Service $SYSTEMD_SERVICE_NAME is disabled as expected."
          exit 0  #Script should return true. Verify the last executed command status by echo $?.
          else
          #echo "SYSTEMD Service $SYSTEMD_SERVICE_NAME is enabled, expected to be disabled."
          exit 1  #Script should return false. Verify the last executed command status by echo $?.
          fi
          fi</check-content>
      </check>
    </Rule>
    <Rule id="DisableMdmonitorUnlessMdmonitorIsAbsolutelyNecessary" xml:lang="en" selected="false">
      <title xml:lang="en">Disable mdmonitor unless mdmonitor is absolutely necessary</title>
      <description xml:lang="en">This rule ensures that mdmonitor service is not enabled.</description>
      <reference>PCI DSS v3.2 Requirements 2.2.2</reference>
      <reference>https://www.pcisecuritystandards.org</reference>
      <platform idref="cpe:/o:centos:centos:7" />
      <platform idref="cpe:/o:oracle:linux:7" />
      <platform idref="cpe:/o:redhat:enterprise_linux:7" />
      <ident system="www.unifiedcompliance.com">UCF CC ID 04961</ident>
      <check system="http://www.mcafee.com/xccdf/script/1.0">
        <check-content>/bin/sh
30
          #!/bin/bash
          #BASH script to verify the state of a SYSTEMD Service
          : ' The systemd system and service manager is responsible for controlling how services are started, stopped and otherwise managed on Red Hat Enterprise Linux 7, Oracle Linux 7 and CentOS Linux 7 systems. Although the systemd process replaces the init process (quite literally, /sbin/init is now a symbolic link to /usr/lib/systemd/systemd) for starting services at boot time and changing runlevels, systemd provides much more control than the init
          process does while still supporting existing init scripts. '
          
          SYSTEMD_SERVICE_NAME=mdmonitor.service
          
          #SERVICE_EXISTENCE - Command to verify whether $SYSTEMD_SERVICE_NAME exists on the system or not.
          SERVICE_EXISTENCE=`systemctl list-unit-files --type service | grep $SYSTEMD_SERVICE_NAME`
          
          #CURRENT_SERVICE_STATE - Command to verify the current state of $SYSTEMD_SERVICE_NAME
          CURRENT_SERVICE_STATE=`systemctl is-enabled $SYSTEMD_SERVICE_NAME`
          
          #EXPECTED_SERVICE_STATE - Expected service state by End User
          EXPECTED_SERVICE_STATE=disabled
          
          if [ -z "$SERVICE_EXISTENCE" ]  #SYSTEMD_SERVICE_NAME existence test.
          then
          #echo "SYSTEMD Service $SYSTEMD_SERVICE_NAME does not exists on the system."
          exit 0  #Script should return true. Verify the last executed command status by echo $?.
          elif [ "$CURRENT_SERVICE_STATE" = "$EXPECTED_SERVICE_STATE" ]
          then
          #echo "SYSTEMD Service $SYSTEMD_SERVICE_NAME is disabled as expected."
          exit 0  #Script should return true. Verify the last executed command status by echo $?.
          else
          #echo "SYSTEMD Service $SYSTEMD_SERVICE_NAME is enabled, expected to be disabled."
          exit 1  #Script should return false. Verify the last executed command status by echo $?.
          fi
          fi</check-content>
      </check>
    </Rule>
    <Rule id="DisableMicrocodeUnlessMicrocodeIsAbsolutelyNecessary" xml:lang="en" selected="false">
      <title xml:lang="en">Disable microcode unless microcode is absolutely necessary</title>
      <description xml:lang="en">This rule ensures that microcode service is not enabled.</description>
      <reference>PCI DSS v3.2 Requirements 2.2.2</reference>
      <reference>https://www.pcisecuritystandards.org</reference>
      <platform idref="cpe:/o:centos:centos:7" />
      <platform idref="cpe:/o:oracle:linux:7" />
      <platform idref="cpe:/o:redhat:enterprise_linux:7" />
      <ident system="www.unifiedcompliance.com">UCF CC ID 04962</ident>
      <check system="http://www.mcafee.com/xccdf/script/1.0">
        <check-content>/bin/sh
30
          #!/bin/bash
          #BASH script to verify the state of a SYSTEMD Service
          : ' The systemd system and service manager is responsible for controlling how services are started, stopped and otherwise managed on Red Hat Enterprise Linux 7, Oracle Linux 7 and CentOS Linux 7 systems. Although the systemd process replaces the init process (quite literally, /sbin/init is now a symbolic link to /usr/lib/systemd/systemd) for starting services at boot time and changing runlevels, systemd provides much more control than the init
          process does while still supporting existing init scripts. '
          
          SYSTEMD_SERVICE_NAME=microcode.service
          
          #SERVICE_EXISTENCE - Command to verify whether $SYSTEMD_SERVICE_NAME exists on the system or not.
          SERVICE_EXISTENCE=`systemctl list-unit-files --type service | grep $SYSTEMD_SERVICE_NAME`
          
          #CURRENT_SERVICE_STATE - Command to verify the current state of $SYSTEMD_SERVICE_NAME
          CURRENT_SERVICE_STATE=`systemctl is-enabled $SYSTEMD_SERVICE_NAME`
          
          #EXPECTED_SERVICE_STATE - Expected service state by End User
          EXPECTED_SERVICE_STATE=disabled
          
          if [ -z "$SERVICE_EXISTENCE" ]  #SYSTEMD_SERVICE_NAME existence test.
          then
          #echo "SYSTEMD Service $SYSTEMD_SERVICE_NAME does not exists on the system."
          exit 0  #Script should return true. Verify the last executed command status by echo $?.
          elif [ "$CURRENT_SERVICE_STATE" = "$EXPECTED_SERVICE_STATE" ]
          then
          #echo "SYSTEMD Service $SYSTEMD_SERVICE_NAME is disabled as expected."
          exit 0  #Script should return true. Verify the last executed command status by echo $?.
          else
          #echo "SYSTEMD Service $SYSTEMD_SERVICE_NAME is enabled, expected to be disabled."
          exit 1  #Script should return false. Verify the last executed command status by echo $?.
          fi
          fi</check-content>
      </check>
    </Rule>
    <Rule id="DisablePcscdUnlessPcscdIsAbsolutelyNecessary" xml:lang="en" selected="false">
      <title xml:lang="en">Disable pcscd unless pcscd is absolutely necessary</title>
      <description xml:lang="en">This rule ensures that pcscd service is not enabled.</description>
      <reference>PCI DSS v3.2 Requirements 2.2.2</reference>
      <reference>https://www.pcisecuritystandards.org</reference>
      <platform idref="cpe:/o:centos:centos:7" />
      <platform idref="cpe:/o:oracle:linux:7" />
      <platform idref="cpe:/o:redhat:enterprise_linux:7" />
      <ident system="www.unifiedcompliance.com">UCF CC ID 04963</ident>
      <check system="http://www.mcafee.com/xccdf/script/1.0">
        <check-content>/bin/sh
30
          #!/bin/bash
          #BASH script to verify the state of a SYSTEMD Service
          : ' The systemd system and service manager is responsible for controlling how services are started, stopped and otherwise managed on Red Hat Enterprise Linux 7, Oracle Linux 7 and CentOS Linux 7 systems. Although the systemd process replaces the init process (quite literally, /sbin/init is now a symbolic link to /usr/lib/systemd/systemd) for starting services at boot time and changing runlevels, systemd provides much more control than the init
          process does while still supporting existing init scripts. '
          
          SYSTEMD_SERVICE_NAME=pcscd.socket
          
          #SERVICE_EXISTENCE - Command to verify whether $SYSTEMD_SERVICE_NAME exists on the system or not.
          SERVICE_EXISTENCE=`systemctl list-unit-files --type socket | grep $SYSTEMD_SERVICE_NAME`
          
          #CURRENT_SERVICE_STATE - Command to verify the current state of $SYSTEMD_SERVICE_NAME
          CURRENT_SERVICE_STATE=`systemctl is-enabled $SYSTEMD_SERVICE_NAME`
          
          #EXPECTED_SERVICE_STATE - Expected service state by End User
          EXPECTED_SERVICE_STATE=disabled
          
          if [ -z "$SERVICE_EXISTENCE" ]  #SYSTEMD_SERVICE_NAME existence test.
          then
          #echo "SYSTEMD Service $SYSTEMD_SERVICE_NAME does not exists on the system."
          exit 0  #Script should return true. Verify the last executed command status by echo $?.
          elif [ "$CURRENT_SERVICE_STATE" = "$EXPECTED_SERVICE_STATE" ]
          then
          #echo "SYSTEMD Service $SYSTEMD_SERVICE_NAME is disabled as expected."
          exit 0  #Script should return true. Verify the last executed command status by echo $?.
          else
          #echo "SYSTEMD Service $SYSTEMD_SERVICE_NAME is enabled, expected to be disabled."
          exit 1  #Script should return false. Verify the last executed command status by echo $?.
          fi
          fi</check-content>
      </check>
    </Rule>
    <Rule id="DisableSmartdUnlessSmartdIsAbsolutelyNecessary" xml:lang="en" selected="false">
      <title xml:lang="en">Disable smartd unless smartd is absolutely necessary</title>
      <description xml:lang="en">This rule ensures that smartd service is not enabled.</description>
      <reference>PCI DSS v3.2 Requirements 2.2.2</reference>
      <reference>https://www.pcisecuritystandards.org</reference>
      <platform idref="cpe:/o:centos:centos:7" />
      <platform idref="cpe:/o:oracle:linux:7" />
      <platform idref="cpe:/o:redhat:enterprise_linux:7" />
      <ident system="www.unifiedcompliance.com">UCF CC ID 04964</ident>
      <check system="http://www.mcafee.com/xccdf/script/1.0">
        <check-content>/bin/sh
30
          #!/bin/bash
          #BASH script to verify the state of a SYSTEMD Service
          : ' The systemd system and service manager is responsible for controlling how services are started, stopped and otherwise managed on Red Hat Enterprise Linux 7, Oracle Linux 7 and CentOS Linux 7 systems. Although the systemd process replaces the init process (quite literally, /sbin/init is now a symbolic link to /usr/lib/systemd/systemd) for starting services at boot time and changing runlevels, systemd provides much more control than the init
          process does while still supporting existing init scripts. '
          
          SYSTEMD_SERVICE_NAME=smartd.service
          
          #SERVICE_EXISTENCE - Command to verify whether $SYSTEMD_SERVICE_NAME exists on the system or not.
          SERVICE_EXISTENCE=`systemctl list-unit-files --type service | grep $SYSTEMD_SERVICE_NAME`
          
          #CURRENT_SERVICE_STATE - Command to verify the current state of $SYSTEMD_SERVICE_NAME
          CURRENT_SERVICE_STATE=`systemctl is-enabled $SYSTEMD_SERVICE_NAME`
          
          #EXPECTED_SERVICE_STATE - Expected service state by End User
          EXPECTED_SERVICE_STATE=disabled
          
          if [ -z "$SERVICE_EXISTENCE" ]  #SYSTEMD_SERVICE_NAME existence test.
          then
          #echo "SYSTEMD Service $SYSTEMD_SERVICE_NAME does not exists on the system."
          exit 0  #Script should return true. Verify the last executed command status by echo $?.
          elif [ "$CURRENT_SERVICE_STATE" = "$EXPECTED_SERVICE_STATE" ]
          then
          #echo "SYSTEMD Service $SYSTEMD_SERVICE_NAME is disabled as expected."
          exit 0  #Script should return true. Verify the last executed command status by echo $?.
          else
          #echo "SYSTEMD Service $SYSTEMD_SERVICE_NAME is enabled, expected to be disabled."
          exit 1  #Script should return false. Verify the last executed command status by echo $?.
          fi
          fi</check-content>
      </check>
    </Rule>
    <Rule id="DisableCpupowerUnlessCpupowerIsAbsolutelyNecessary" xml:lang="en" selected="false">
      <title xml:lang="en">Disable cpupower unless cpupower is absolutely necessary</title>
      <description xml:lang="en">This rule ensures that cpupower service is not enabled.</description>
      <reference>PCI DSS v3.2 Requirements 2.2.2</reference>
      <reference>https://www.pcisecuritystandards.org</reference>
      <platform idref="cpe:/o:centos:centos:7" />
      <platform idref="cpe:/o:oracle:linux:7" />
      <platform idref="cpe:/o:redhat:enterprise_linux:7" />
      <ident system="www.unifiedcompliance.com">UCF CC ID 04971</ident>
      <check system="http://www.mcafee.com/xccdf/script/1.0">
        <check-content>/bin/sh
30
          #!/bin/bash
          #BASH script to verify the state of a SYSTEMD Service
          : ' The systemd system and service manager is responsible for controlling how services are started, stopped and otherwise managed on Red Hat Enterprise Linux 7, Oracle Linux 7 and CentOS Linux 7 systems. Although the systemd process replaces the init process (quite literally, /sbin/init is now a symbolic link to /usr/lib/systemd/systemd) for starting services at boot time and changing runlevels, systemd provides much more control than the init
          process does while still supporting existing init scripts. '
          
          SYSTEMD_SERVICE_NAME=cpupower.service
          
          #SERVICE_EXISTENCE - Command to verify whether $SYSTEMD_SERVICE_NAME exists on the system or not.
          SERVICE_EXISTENCE=`systemctl list-unit-files --type service | grep $SYSTEMD_SERVICE_NAME`
          
          #CURRENT_SERVICE_STATE - Command to verify the current state of $SYSTEMD_SERVICE_NAME
          CURRENT_SERVICE_STATE=`systemctl is-enabled $SYSTEMD_SERVICE_NAME`
          
          #EXPECTED_SERVICE_STATE - Expected service state by End User
          EXPECTED_SERVICE_STATE=disabled
          
          if [ -z "$SERVICE_EXISTENCE" ]  #SYSTEMD_SERVICE_NAME existence test.
          then
          #echo "SYSTEMD Service $SYSTEMD_SERVICE_NAME does not exists on the system."
          exit 0  #Script should return true. Verify the last executed command status by echo $?.
          elif [ "$CURRENT_SERVICE_STATE" = "$EXPECTED_SERVICE_STATE" ]
          then
          #echo "SYSTEMD Service $SYSTEMD_SERVICE_NAME is disabled as expected."
          exit 0  #Script should return true. Verify the last executed command status by echo $?.
          else
          #echo "SYSTEMD Service $SYSTEMD_SERVICE_NAME is enabled, expected to be disabled."
          exit 1  #Script should return false. Verify the last executed command status by echo $?.
          fi
          fi</check-content>
      </check>
    </Rule>
    <Rule id="DisableNetworkUnlessNetworkIsAbsolutelyNecessary" xml:lang="en" selected="false">
      <title xml:lang="en">Disable network unless network is absolutely necessary</title>
      <description xml:lang="en">This rule ensures that network service is not enabled.</description>
      <reference>PCI DSS v3.2 Requirements 2.2.2</reference>
      <reference>https://www.pcisecuritystandards.org</reference>
      <platform idref="cpe:/o:centos:centos:7" />
      <platform idref="cpe:/o:oracle:linux:7" />
      <platform idref="cpe:/o:redhat:enterprise_linux:7" />
      <ident system="www.unifiedcompliance.com">UCF CC ID 04972</ident>
      <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
        <check-export value-id="RunlevelAtWhichTheServiceShouldBeEnabledOrDisabled_var" export-name="oval:com.mcafee.oval:var:79726" />
        <check-export value-id="ShouldTheServiceBeEnabledOrDisabled_var8" export-name="oval:com.mcafee.oval:var:87715" />
        <check-content-ref href="" name="oval:com.mcafee.oval:def:50461" />
      </check>
    </Rule>
    <Rule id="DisableBluetoothUnlessBluetoothIsAbsolutelyNecessary" xml:lang="en" selected="false">
      <title xml:lang="en">Disable bluetooth unless bluetooth is absolutely necessary</title>
      <description xml:lang="en">This rule ensures that bluetooth service is not enabled.</description>
      <reference>PCI DSS v3.2 Requirements 2.2.2</reference>
      <reference>https://www.pcisecuritystandards.org</reference>
      <platform idref="cpe:/o:centos:centos:7" />
      <platform idref="cpe:/o:oracle:linux:7" />
      <platform idref="cpe:/o:redhat:enterprise_linux:7" />
      <ident system="www.unifiedcompliance.com">UCF CC ID 04973</ident>
      <check system="http://www.mcafee.com/xccdf/script/1.0">
        <check-content>/bin/sh
30
          #!/bin/bash
          #BASH script to verify the state of a SYSTEMD Service
          : ' The systemd system and service manager is responsible for controlling how services are started, stopped and otherwise managed on Red Hat Enterprise Linux 7, Oracle Linux 7 and CentOS Linux 7 systems. Although the systemd process replaces the init process (quite literally, /sbin/init is now a symbolic link to /usr/lib/systemd/systemd) for starting services at boot time and changing runlevels, systemd provides much more control than the init
          process does while still supporting existing init scripts. '
          
          SYSTEMD_SERVICE_NAME=bluetooth.service
          
          #SERVICE_EXISTENCE - Command to verify whether $SYSTEMD_SERVICE_NAME exists on the system or not.
          SERVICE_EXISTENCE=`systemctl list-unit-files --type service | grep $SYSTEMD_SERVICE_NAME`
          
          #CURRENT_SERVICE_STATE - Command to verify the current state of $SYSTEMD_SERVICE_NAME
          CURRENT_SERVICE_STATE=`systemctl is-enabled $SYSTEMD_SERVICE_NAME`
          
          #EXPECTED_SERVICE_STATE - Expected service state by End User
          EXPECTED_SERVICE_STATE=disabled
          
          if [ -z "$SERVICE_EXISTENCE" ]  #SYSTEMD_SERVICE_NAME existence test.
          then
          #echo "SYSTEMD Service $SYSTEMD_SERVICE_NAME does not exists on the system."
          exit 0  #Script should return true. Verify the last executed command status by echo $?.
          elif [ "$CURRENT_SERVICE_STATE" = "$EXPECTED_SERVICE_STATE" ]
          then
          #echo "SYSTEMD Service $SYSTEMD_SERVICE_NAME is disabled as expected."
          exit 0  #Script should return true. Verify the last executed command status by echo $?.
          else
          #echo "SYSTEMD Service $SYSTEMD_SERVICE_NAME is enabled, expected to be disabled."
          exit 1  #Script should return false. Verify the last executed command status by echo $?.
          fi
          fi</check-content>
      </check>
    </Rule>
    <Rule id="EnableCrondDaemon" xml:lang="en" selected="false">
      <title xml:lang="en">Enable crond daemon</title>
      <description xml:lang="en">This rule ensures that crond service is enabled.</description>
      <reference>PCI DSS v3.2 Requirements 2.2.2</reference>
      <reference>https://www.pcisecuritystandards.org</reference>
      <platform idref="cpe:/o:centos:centos:7" />
      <platform idref="cpe:/o:oracle:linux:7" />
      <platform idref="cpe:/o:redhat:enterprise_linux:7" />
      <ident system="www.unifiedcompliance.com">UCF CC ID 04974</ident>
      <check system="http://www.mcafee.com/xccdf/script/1.0">
        <check-content>/bin/sh
30
#!/bin/bash
#BASH script to verify the state of a SYSTEMD Service
: ' The systemd system and service manager is responsible for controlling how services are started, stopped and otherwise managed on Red Hat Enterprise Linux 7, Oracle Linux 7 and CentOS Linux 7 systems. Although the systemd process replaces the init process (quite literally, /sbin/init is now a symbolic link to /usr/lib/systemd/systemd) for starting services at boot time and changing runlevels, systemd provides much more control than the init
process does while still supporting existing init scripts. '

SYSTEMD_SERVICE_NAME=crond.service

#SERVICE_EXISTENCE - Command to verify whether $SYSTEMD_SERVICE_NAME exists on the system or not.
SERVICE_EXISTENCE=`systemctl list-unit-files --type service | grep $SYSTEMD_SERVICE_NAME`

#CURRENT_SERVICE_STATE - Command to verify the current state of $SYSTEMD_SERVICE_NAME
CURRENT_SERVICE_STATE=`systemctl is-enabled $SYSTEMD_SERVICE_NAME`

#EXPECTED_SERVICE_STATE - Expected service state by End User
EXPECTED_SERVICE_STATE=enabled

if [ -z "$SERVICE_EXISTENCE" ]  #SYSTEMD_SERVICE_NAME existence test.
then
#echo "SYSTEMD Service $SYSTEMD_SERVICE_NAME does not exists on the system."
exit 0  #Script should return true. Verify the last executed command status by echo $?.
elif [ "$CURRENT_SERVICE_STATE" = "$EXPECTED_SERVICE_STATE" ]
then
#echo "SYSTEMD Service $SYSTEMD_SERVICE_NAME is disabled as expected."
exit 0  #Script should return true. Verify the last executed command status by echo $?.
else
#echo "SYSTEMD Service $SYSTEMD_SERVICE_NAME is enabled, expected to be disabled."
exit 1  #Script should return false. Verify the last executed command status by echo $?.
fi
fi</check-content>
      </check>
    </Rule>
    <Rule id="EnableAnacronDaemon" xml:lang="en" selected="false">
      <title xml:lang="en">Enable anacron Daemon</title>
      <description xml:lang="en">This rule ensures that anacron package is installed on the system.</description>
      <reference>PCI DSS v3.2 Requirements 2.2.2</reference>
      <reference>https://www.pcisecuritystandards.org</reference>
      <platform idref="cpe:/o:centos:centos:7" />
      <platform idref="cpe:/o:oracle:linux:7" />
      <platform idref="cpe:/o:redhat:enterprise_linux:7" />
      <ident system="www.unifiedcompliance.com">UCF CC ID 04975</ident>
      <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
        <check-export value-id="EnterTheNameOfTheRPMPackageToBeVerified._var5" export-name="oval:com.mcafee.oval:var:242779" />
        <check-content-ref href="" name="oval:com.mcafee.oval:def:244340" />
      </check>
    </Rule>
    <Rule id="DisableAvahiServerUnlessAvahiServerIsAbsolutelyNecessary" xml:lang="en" selected="false">
      <title xml:lang="en">Disable Avahi Server unless Avahi Server is absolutely necessary</title>
      <description xml:lang="en">This rule ensures that Avahi Server service is not enabled.</description>
      <reference>PCI DSS v3.2 Requirements 2.2.2</reference>
      <reference>https://www.pcisecuritystandards.org</reference>
      <platform idref="cpe:/o:centos:centos:7" />
      <platform idref="cpe:/o:oracle:linux:7" />
      <platform idref="cpe:/o:redhat:enterprise_linux:7" />
      <ident system="www.unifiedcompliance.com">UCF CC ID 04977</ident>
      <check system="http://www.mcafee.com/xccdf/script/1.0">
        <check-content>/bin/sh
30
#!/bin/bash
#BASH script to verify the state of a SYSTEMD Service
: ' The systemd system and service manager is responsible for controlling how services are started, stopped and otherwise managed on Red Hat Enterprise Linux 7, Oracle Linux 7 and CentOS Linux 7 systems. Although the systemd process replaces the init process (quite literally, /sbin/init is now a symbolic link to /usr/lib/systemd/systemd) for starting services at boot time and changing runlevels, systemd provides much more control than the init
process does while still supporting existing init scripts. '

SYSTEMD_SERVICE_NAME=avahi-daemon.service

#SERVICE_EXISTENCE - Command to verify whether $SYSTEMD_SERVICE_NAME exists on the system or not.
SERVICE_EXISTENCE=`systemctl list-unit-files --type service | grep $SYSTEMD_SERVICE_NAME`

#CURRENT_SERVICE_STATE - Command to verify the current state of $SYSTEMD_SERVICE_NAME
CURRENT_SERVICE_STATE=`systemctl is-enabled $SYSTEMD_SERVICE_NAME`

#EXPECTED_SERVICE_STATE - Expected service state by End User
EXPECTED_SERVICE_STATE=disabled

if [ -z "$SERVICE_EXISTENCE" ]  #SYSTEMD_SERVICE_NAME existence test.
then
#echo "SYSTEMD Service $SYSTEMD_SERVICE_NAME does not exists on the system."
exit 0  #Script should return true. Verify the last executed command status by echo $?.
elif [ "$CURRENT_SERVICE_STATE" = "$EXPECTED_SERVICE_STATE" ]
then
#echo "SYSTEMD Service $SYSTEMD_SERVICE_NAME is disabled as expected."
exit 0  #Script should return true. Verify the last executed command status by echo $?.
else
#echo "SYSTEMD Service $SYSTEMD_SERVICE_NAME is enabled, expected to be disabled."
exit 1  #Script should return false. Verify the last executed command status by echo $?.
fi
fi</check-content>
      </check>
    </Rule>
    <Rule id="DisableCupsUnlessCupsIsAbsolutelyNecessary" xml:lang="en" selected="false">
      <title xml:lang="en">Disable cups unless cups is absolutely necessary</title>
      <description xml:lang="en">This rule ensures that cups service is not enabled.</description>
      <reference>PCI DSS v3.2 Requirements 2.2.2</reference>
      <reference>https://www.pcisecuritystandards.org</reference>
      <platform idref="cpe:/o:centos:centos:7" />
      <platform idref="cpe:/o:oracle:linux:7" />
      <platform idref="cpe:/o:redhat:enterprise_linux:7" />
      <ident system="www.unifiedcompliance.com">UCF CC ID 04978</ident>
      <check system="http://www.mcafee.com/xccdf/script/1.0">
        <check-content>/bin/sh
30
          #!/bin/bash
          #BASH script to verify the state of a SYSTEMD Service
          : ' The systemd system and service manager is responsible for controlling how services are started, stopped and otherwise managed on Red Hat Enterprise Linux 7, Oracle Linux 7 and CentOS Linux 7 systems. Although the systemd process replaces the init process (quite literally, /sbin/init is now a symbolic link to /usr/lib/systemd/systemd) for starting services at boot time and changing runlevels, systemd provides much more control than the init
          process does while still supporting existing init scripts. '
          
          SYSTEMD_SERVICE_NAME=cups.service
          
          #SERVICE_EXISTENCE - Command to verify whether $SYSTEMD_SERVICE_NAME exists on the system or not.
          SERVICE_EXISTENCE=`systemctl list-unit-files --type service | grep $SYSTEMD_SERVICE_NAME`
          
          #CURRENT_SERVICE_STATE - Command to verify the current state of $SYSTEMD_SERVICE_NAME
          CURRENT_SERVICE_STATE=`systemctl is-enabled $SYSTEMD_SERVICE_NAME`
          
          #EXPECTED_SERVICE_STATE - Expected service state by End User
          EXPECTED_SERVICE_STATE=disabled
          
          if [ -z "$SERVICE_EXISTENCE" ]  #SYSTEMD_SERVICE_NAME existence test.
          then
          #echo "SYSTEMD Service $SYSTEMD_SERVICE_NAME does not exists on the system."
          exit 0  #Script should return true. Verify the last executed command status by echo $?.
          elif [ "$CURRENT_SERVICE_STATE" = "$EXPECTED_SERVICE_STATE" ]
          then
          #echo "SYSTEMD Service $SYSTEMD_SERVICE_NAME is disabled as expected."
          exit 0  #Script should return true. Verify the last executed command status by echo $?.
          else
          #echo "SYSTEMD Service $SYSTEMD_SERVICE_NAME is enabled, expected to be disabled."
          exit 1  #Script should return false. Verify the last executed command status by echo $?.
          fi
          fi</check-content>
      </check>
    </Rule>
    <Rule id="DisableDhcpdUnlessDhcpdIsAbsolutelyNecessary" xml:lang="en" selected="false">
      <title xml:lang="en">Disable dhcpd unless dhcpd is absolutely necessary</title>
      <description xml:lang="en">This rule ensures that cups service is not enabled.</description>
      <reference>PCI DSS v3.2 Requirements 2.2.2</reference>
      <reference>https://www.pcisecuritystandards.org</reference>
      <platform idref="cpe:/o:centos:centos:7" />
      <platform idref="cpe:/o:oracle:linux:7" />
      <platform idref="cpe:/o:redhat:enterprise_linux:7" />
      <ident system="www.unifiedcompliance.com">UCF CC ID 04980</ident>
      <check system="http://www.mcafee.com/xccdf/script/1.0">
        <check-content>/bin/sh
30
          #!/bin/bash
          #BASH script to verify the state of a SYSTEMD Service
          : ' The systemd system and service manager is responsible for controlling how services are started, stopped and otherwise managed on Red Hat Enterprise Linux 7, Oracle Linux 7 and CentOS Linux 7 systems. Although the systemd process replaces the init process (quite literally, /sbin/init is now a symbolic link to /usr/lib/systemd/systemd) for starting services at boot time and changing runlevels, systemd provides much more control than the init
          process does while still supporting existing init scripts. '
          
          SYSTEMD_SERVICE_NAME=dhcpd.service
          
          #SERVICE_EXISTENCE - Command to verify whether $SYSTEMD_SERVICE_NAME exists on the system or not.
          SERVICE_EXISTENCE=`systemctl list-unit-files --type service | grep $SYSTEMD_SERVICE_NAME`
          
          #CURRENT_SERVICE_STATE - Command to verify the current state of $SYSTEMD_SERVICE_NAME
          CURRENT_SERVICE_STATE=`systemctl is-enabled $SYSTEMD_SERVICE_NAME`
          
          #EXPECTED_SERVICE_STATE - Expected service state by End User
          EXPECTED_SERVICE_STATE=disabled
          
          if [ -z "$SERVICE_EXISTENCE" ]  #SYSTEMD_SERVICE_NAME existence test.
          then
          #echo "SYSTEMD Service $SYSTEMD_SERVICE_NAME does not exists on the system."
          exit 0  #Script should return true. Verify the last executed command status by echo $?.
          elif [ "$CURRENT_SERVICE_STATE" = "$EXPECTED_SERVICE_STATE" ]
          then
          #echo "SYSTEMD Service $SYSTEMD_SERVICE_NAME is disabled as expected."
          exit 0  #Script should return true. Verify the last executed command status by echo $?.
          else
          #echo "SYSTEMD Service $SYSTEMD_SERVICE_NAME is enabled, expected to be disabled."
          exit 1  #Script should return false. Verify the last executed command status by echo $?.
          fi
          fi</check-content>
      </check>
    </Rule>
    <Rule id="DisableNfslockUnlessNfslockIsAbsolutelyNecessary" xml:lang="en" selected="false">
      <title xml:lang="en">Disable nfslock unless nfslock is absolutely necessary</title>
      <description xml:lang="en">This rule ensures that nfslock service is not enabled.</description>
      <reference>PCI DSS v3.2 Requirements 2.2.2</reference>
      <reference>https://www.pcisecuritystandards.org</reference>
      <platform idref="cpe:/o:centos:centos:7" />
      <platform idref="cpe:/o:oracle:linux:7" />
      <platform idref="cpe:/o:redhat:enterprise_linux:7" />
      <ident system="www.unifiedcompliance.com">UCF CC ID 04981</ident>
      <check system="http://www.mcafee.com/xccdf/script/1.0">
        <check-content>/bin/sh
30
          #!/bin/bash
          #BASH script to verify the state of a SYSTEMD Service
          : ' The systemd system and service manager is responsible for controlling how services are started, stopped and otherwise managed on Red Hat Enterprise Linux 7, Oracle Linux 7 and CentOS Linux 7 systems. Although the systemd process replaces the init process (quite literally, /sbin/init is now a symbolic link to /usr/lib/systemd/systemd) for starting services at boot time and changing runlevels, systemd provides much more control than the init
          process does while still supporting existing init scripts. '
          
          SYSTEMD_SERVICE_NAME=nfs-lock.service
          
          #SERVICE_EXISTENCE - Command to verify whether $SYSTEMD_SERVICE_NAME exists on the system or not.
          SERVICE_EXISTENCE=`systemctl list-unit-files --type service | grep $SYSTEMD_SERVICE_NAME`
          
          #CURRENT_SERVICE_STATE - Command to verify the current state of $SYSTEMD_SERVICE_NAME
          CURRENT_SERVICE_STATE=`systemctl is-enabled $SYSTEMD_SERVICE_NAME`
          
          #EXPECTED_SERVICE_STATE - Expected service state by End User
          EXPECTED_SERVICE_STATE=disabled
          
          if [ -z "$SERVICE_EXISTENCE" ]  #SYSTEMD_SERVICE_NAME existence test.
          then
          #echo "SYSTEMD Service $SYSTEMD_SERVICE_NAME does not exists on the system."
          exit 0  #Script should return true. Verify the last executed command status by echo $?.
          elif [ "$CURRENT_SERVICE_STATE" = "$EXPECTED_SERVICE_STATE" ]
          then
          #echo "SYSTEMD Service $SYSTEMD_SERVICE_NAME is disabled as expected."
          exit 0  #Script should return true. Verify the last executed command status by echo $?.
          else
          #echo "SYSTEMD Service $SYSTEMD_SERVICE_NAME is enabled, expected to be disabled."
          exit 1  #Script should return false. Verify the last executed command status by echo $?.
          fi
          fi</check-content>
      </check>
    </Rule>
    <Rule id="DisableRpcgssdUnlessRpcgssdIsAbsolutelyNecessary" xml:lang="en" selected="false">
      <title xml:lang="en">Disable rpcgssd unless rpcgssd is absolutely necessary</title>
      <description xml:lang="en">This rule ensures that rpcgssd service is not enabled.</description>
      <reference>PCI DSS v3.2 Requirements 2.2.2</reference>
      <reference>https://www.pcisecuritystandards.org</reference>
      <platform idref="cpe:/o:centos:centos:7" />
      <platform idref="cpe:/o:oracle:linux:7" />
      <platform idref="cpe:/o:redhat:enterprise_linux:7" />
      <ident system="www.unifiedcompliance.com">UCF CC ID 04982</ident>
      <check system="http://www.mcafee.com/xccdf/script/1.0">
        <check-content>/bin/sh
30
          #!/bin/bash
          #BASH script to verify the state of a SYSTEMD Service
          : ' The systemd system and service manager is responsible for controlling how services are started, stopped and otherwise managed on Red Hat Enterprise Linux 7, Oracle Linux 7 and CentOS Linux 7 systems. Although the systemd process replaces the init process (quite literally, /sbin/init is now a symbolic link to /usr/lib/systemd/systemd) for starting services at boot time and changing runlevels, systemd provides much more control than the init
          process does while still supporting existing init scripts. '
          
          SYSTEMD_SERVICE_NAME=rpcgssd.service
          
          #SERVICE_EXISTENCE - Command to verify whether $SYSTEMD_SERVICE_NAME exists on the system or not.
          SERVICE_EXISTENCE=`systemctl list-unit-files --type service | grep $SYSTEMD_SERVICE_NAME`
          
          #CURRENT_SERVICE_STATE - Command to verify the current state of $SYSTEMD_SERVICE_NAME
          CURRENT_SERVICE_STATE=`systemctl is-enabled $SYSTEMD_SERVICE_NAME`
          
          #EXPECTED_SERVICE_STATE - Expected service state by End User
          EXPECTED_SERVICE_STATE=disabled
          
          if [ -z "$SERVICE_EXISTENCE" ]  #SYSTEMD_SERVICE_NAME existence test.
          then
          #echo "SYSTEMD Service $SYSTEMD_SERVICE_NAME does not exists on the system."
          exit 0  #Script should return true. Verify the last executed command status by echo $?.
          elif [ "$CURRENT_SERVICE_STATE" = "$EXPECTED_SERVICE_STATE" ]
          then
          #echo "SYSTEMD Service $SYSTEMD_SERVICE_NAME is disabled as expected."
          exit 0  #Script should return true. Verify the last executed command status by echo $?.
          else
          #echo "SYSTEMD Service $SYSTEMD_SERVICE_NAME is enabled, expected to be disabled."
          exit 1  #Script should return false. Verify the last executed command status by echo $?.
          fi
          fi</check-content>
      </check>
    </Rule>
    <Rule id="DisableRpcidmapdUnlessRpcidmapdIsAbsolutelyNecessary" xml:lang="en" selected="false">
      <title xml:lang="en">Disable rpcidmapd unless rpcidmapd is absolutely necessary</title>
      <description xml:lang="en">This rule ensures that rpcidmapd service is not enabled.</description>
      <reference>PCI DSS v3.2 Requirements 2.2.2</reference>
      <reference>https://www.pcisecuritystandards.org</reference>
      <platform idref="cpe:/o:centos:centos:7" />
      <platform idref="cpe:/o:oracle:linux:7" />
      <platform idref="cpe:/o:redhat:enterprise_linux:7" />
      <ident system="www.unifiedcompliance.com">UCF CC ID 04983</ident>
      <check system="http://www.mcafee.com/xccdf/script/1.0">
        <check-content>/bin/sh
30
          #!/bin/bash
          #BASH script to verify the state of a SYSTEMD Service
          : ' The systemd system and service manager is responsible for controlling how services are started, stopped and otherwise managed on Red Hat Enterprise Linux 7, Oracle Linux 7 and CentOS Linux 7 systems. Although the systemd process replaces the init process (quite literally, /sbin/init is now a symbolic link to /usr/lib/systemd/systemd) for starting services at boot time and changing runlevels, systemd provides much more control than the init
          process does while still supporting existing init scripts. '
          
          SYSTEMD_SERVICE_NAME=rpcidmapd.service
          
          #SERVICE_EXISTENCE - Command to verify whether $SYSTEMD_SERVICE_NAME exists on the system or not.
          SERVICE_EXISTENCE=`systemctl list-unit-files --type service | grep $SYSTEMD_SERVICE_NAME`
          
          #CURRENT_SERVICE_STATE - Command to verify the current state of $SYSTEMD_SERVICE_NAME
          CURRENT_SERVICE_STATE=`systemctl is-enabled $SYSTEMD_SERVICE_NAME`
          
          #EXPECTED_SERVICE_STATE - Expected service state by End User
          EXPECTED_SERVICE_STATE=disabled
          
          if [ -z "$SERVICE_EXISTENCE" ]  #SYSTEMD_SERVICE_NAME existence test.
          then
          #echo "SYSTEMD Service $SYSTEMD_SERVICE_NAME does not exists on the system."
          exit 0  #Script should return true. Verify the last executed command status by echo $?.
          elif [ "$CURRENT_SERVICE_STATE" = "$EXPECTED_SERVICE_STATE" ]
          then
          #echo "SYSTEMD Service $SYSTEMD_SERVICE_NAME is disabled as expected."
          exit 0  #Script should return true. Verify the last executed command status by echo $?.
          else
          #echo "SYSTEMD Service $SYSTEMD_SERVICE_NAME is enabled, expected to be disabled."
          exit 1  #Script should return false. Verify the last executed command status by echo $?.
          fi
          fi</check-content>
      </check>
    </Rule>
    <Rule id="DisableNfsUnlessNfsServiceIsAbsolutelyNecessary" xml:lang="en" selected="false">
      <title xml:lang="en">Disable nfs unless nfs service is absolutely necessary</title>
      <description xml:lang="en">This rule ensures that rpcidmapd service is not enabled.</description>
      <reference>PCI DSS v3.2 Requirements 2.2.2</reference>
      <reference>https://www.pcisecuritystandards.org</reference>
      <platform idref="cpe:/o:centos:centos:7" />
      <platform idref="cpe:/o:oracle:linux:7" />
      <platform idref="cpe:/o:redhat:enterprise_linux:7" />
      <ident system="www.unifiedcompliance.com">UCF CC ID 04984</ident>
      <check system="http://www.mcafee.com/xccdf/script/1.0">
        <check-content>/bin/sh
30
          #!/bin/bash
          #BASH script to verify the state of a SYSTEMD Service
          : ' The systemd system and service manager is responsible for controlling how services are started, stopped and otherwise managed on Red Hat Enterprise Linux 7, Oracle Linux 7 and CentOS Linux 7 systems. Although the systemd process replaces the init process (quite literally, /sbin/init is now a symbolic link to /usr/lib/systemd/systemd) for starting services at boot time and changing runlevels, systemd provides much more control than the init
          process does while still supporting existing init scripts. '
          
          SYSTEMD_SERVICE_NAME=nfs.service
          
          #SERVICE_EXISTENCE - Command to verify whether $SYSTEMD_SERVICE_NAME exists on the system or not.
          SERVICE_EXISTENCE=`systemctl list-unit-files --type service | grep $SYSTEMD_SERVICE_NAME`
          
          #CURRENT_SERVICE_STATE - Command to verify the current state of $SYSTEMD_SERVICE_NAME
          CURRENT_SERVICE_STATE=`systemctl is-enabled $SYSTEMD_SERVICE_NAME`
          
          #EXPECTED_SERVICE_STATE - Expected service state by End User
          EXPECTED_SERVICE_STATE=disabled
          
          if [ -z "$SERVICE_EXISTENCE" ]  #SYSTEMD_SERVICE_NAME existence test.
          then
          #echo "SYSTEMD Service $SYSTEMD_SERVICE_NAME does not exists on the system."
          exit 0  #Script should return true. Verify the last executed command status by echo $?.
          elif [ "$CURRENT_SERVICE_STATE" = "$EXPECTED_SERVICE_STATE" ]
          then
          #echo "SYSTEMD Service $SYSTEMD_SERVICE_NAME is disabled as expected."
          exit 0  #Script should return true. Verify the last executed command status by echo $?.
          else
          #echo "SYSTEMD Service $SYSTEMD_SERVICE_NAME is enabled, expected to be disabled."
          exit 1  #Script should return false. Verify the last executed command status by echo $?.
          fi
          fi</check-content>
      </check>
    </Rule>
    <Rule id="DisableRpcsvcgssdUnlessRpcsvcgssdIsAbsolutelyNecessary" xml:lang="en" selected="false">
      <title xml:lang="en">Disable rpcsvcgssd unless rpcsvcgssd is absolutely necessary</title>
      <description xml:lang="en">This rule ensures that rpcsvcgssd service is not enabled.</description>
      <reference>PCI DSS v3.2 Requirements 2.2.2</reference>
      <reference>https://www.pcisecuritystandards.org</reference>
      <platform idref="cpe:/o:centos:centos:7" />
      <platform idref="cpe:/o:oracle:linux:7" />
      <platform idref="cpe:/o:redhat:enterprise_linux:7" />
      <ident system="www.unifiedcompliance.com">UCF CC ID 04985</ident>
      <check system="http://www.mcafee.com/xccdf/script/1.0">
        <check-content>/bin/sh
30
          #!/bin/bash
          #BASH script to verify the state of a SYSTEMD Service
          : ' The systemd system and service manager is responsible for controlling how services are started, stopped and otherwise managed on Red Hat Enterprise Linux 7, Oracle Linux 7 and CentOS Linux 7 systems. Although the systemd process replaces the init process (quite literally, /sbin/init is now a symbolic link to /usr/lib/systemd/systemd) for starting services at boot time and changing runlevels, systemd provides much more control than the init
          process does while still supporting existing init scripts. '
          
          SYSTEMD_SERVICE_NAME=rpcsvcgssd.service
          
          #SERVICE_EXISTENCE - Command to verify whether $SYSTEMD_SERVICE_NAME exists on the system or not.
          SERVICE_EXISTENCE=`systemctl list-unit-files --type service | grep $SYSTEMD_SERVICE_NAME`
          
          #CURRENT_SERVICE_STATE - Command to verify the current state of $SYSTEMD_SERVICE_NAME
          CURRENT_SERVICE_STATE=`systemctl is-enabled $SYSTEMD_SERVICE_NAME`
          
          #EXPECTED_SERVICE_STATE - Expected service state by End User
          EXPECTED_SERVICE_STATE=disabled
          
          if [ -z "$SERVICE_EXISTENCE" ]  #SYSTEMD_SERVICE_NAME existence test.
          then
          #echo "SYSTEMD Service $SYSTEMD_SERVICE_NAME does not exists on the system."
          exit 0  #Script should return true. Verify the last executed command status by echo $?.
          elif [ "$CURRENT_SERVICE_STATE" = "$EXPECTED_SERVICE_STATE" ]
          then
          #echo "SYSTEMD Service $SYSTEMD_SERVICE_NAME is disabled as expected."
          exit 0  #Script should return true. Verify the last executed command status by echo $?.
          else
          #echo "SYSTEMD Service $SYSTEMD_SERVICE_NAME is enabled, expected to be disabled."
          exit 1  #Script should return false. Verify the last executed command status by echo $?.
          fi
          fi</check-content>
      </check>
    </Rule>
    <Rule id="DisableYppasswddUnlessYppasswddIsAbsolutelyNecessary" xml:lang="en" selected="false">
      <title xml:lang="en">Disable yppasswdd unless yppasswdd is absolutely necessary</title>
      <description xml:lang="en">This rule ensures that yppasswdd service is not enabled.</description>
      <reference>PCI DSS v3.2 Requirements 2</reference>
      <reference>https://www.pcisecuritystandards.org</reference>
      <platform idref="cpe:/o:centos:centos:7" />
      <platform idref="cpe:/o:oracle:linux:7" />
      <platform idref="cpe:/o:redhat:enterprise_linux:7" />
      <ident system="www.unifiedcompliance.com">UCF CC ID 05725</ident>
      <check system="http://www.mcafee.com/xccdf/script/1.0">
        <check-content>/bin/sh
30
          #!/bin/bash
          #BASH script to verify the state of a SYSTEMD Service
          : ' The systemd system and service manager is responsible for controlling how services are started, stopped and otherwise managed on Red Hat Enterprise Linux 7, Oracle Linux 7 and CentOS Linux 7 systems. Although the systemd process replaces the init process (quite literally, /sbin/init is now a symbolic link to /usr/lib/systemd/systemd) for starting services at boot time and changing runlevels, systemd provides much more control than the init
          process does while still supporting existing init scripts. '
          
          SYSTEMD_SERVICE_NAME=yppasswdd.service
          
          #SERVICE_EXISTENCE - Command to verify whether $SYSTEMD_SERVICE_NAME exists on the system or not.
          SERVICE_EXISTENCE=`systemctl list-unit-files --type service | grep $SYSTEMD_SERVICE_NAME`
          
          #CURRENT_SERVICE_STATE - Command to verify the current state of $SYSTEMD_SERVICE_NAME
          CURRENT_SERVICE_STATE=`systemctl is-enabled $SYSTEMD_SERVICE_NAME`
          
          #EXPECTED_SERVICE_STATE - Expected service state by End User
          EXPECTED_SERVICE_STATE=disabled
          
          if [ -z "$SERVICE_EXISTENCE" ]  #SYSTEMD_SERVICE_NAME existence test.
          then
          #echo "SYSTEMD Service $SYSTEMD_SERVICE_NAME does not exists on the system."
          exit 0  #Script should return true. Verify the last executed command status by echo $?.
          elif [ "$CURRENT_SERVICE_STATE" = "$EXPECTED_SERVICE_STATE" ]
          then
          #echo "SYSTEMD Service $SYSTEMD_SERVICE_NAME is disabled as expected."
          exit 0  #Script should return true. Verify the last executed command status by echo $?.
          else
          #echo "SYSTEMD Service $SYSTEMD_SERVICE_NAME is enabled, expected to be disabled."
          exit 1  #Script should return false. Verify the last executed command status by echo $?.
          fi
          fi</check-content>
      </check>
    </Rule>
    <Rule id="DisableYpxfrdUnlessYpxfrdIsAbsolutelyNecessary" xml:lang="en" selected="false">
      <title xml:lang="en">Disable ypxfrd unless ypxfrd is absolutely necessary</title>
      <description xml:lang="en">This rule ensures that ypxfrd service is not enabled.</description>
      <reference>PCI DSS v3.2 Requirements 2</reference>
      <reference>https://www.pcisecuritystandards.org</reference>
      <platform idref="cpe:/o:centos:centos:7" />
      <platform idref="cpe:/o:oracle:linux:7" />
      <platform idref="cpe:/o:redhat:enterprise_linux:7" />
      <ident system="www.unifiedcompliance.com">UCF CC ID 05727</ident>
      <check system="http://www.mcafee.com/xccdf/script/1.0">
        <check-content>/bin/sh
30
          #!/bin/bash
          #BASH script to verify the state of a SYSTEMD Service
          : ' The systemd system and service manager is responsible for controlling how services are started, stopped and otherwise managed on Red Hat Enterprise Linux 7, Oracle Linux 7 and CentOS Linux 7 systems. Although the systemd process replaces the init process (quite literally, /sbin/init is now a symbolic link to /usr/lib/systemd/systemd) for starting services at boot time and changing runlevels, systemd provides much more control than the init
          process does while still supporting existing init scripts. '
          
          SYSTEMD_SERVICE_NAME=ypxfrd.service
          
          #SERVICE_EXISTENCE - Command to verify whether $SYSTEMD_SERVICE_NAME exists on the system or not.
          SERVICE_EXISTENCE=`systemctl list-unit-files --type service | grep $SYSTEMD_SERVICE_NAME`
          
          #CURRENT_SERVICE_STATE - Command to verify the current state of $SYSTEMD_SERVICE_NAME
          CURRENT_SERVICE_STATE=`systemctl is-enabled $SYSTEMD_SERVICE_NAME`
          
          #EXPECTED_SERVICE_STATE - Expected service state by End User
          EXPECTED_SERVICE_STATE=disabled
          
          if [ -z "$SERVICE_EXISTENCE" ]  #SYSTEMD_SERVICE_NAME existence test.
          then
          #echo "SYSTEMD Service $SYSTEMD_SERVICE_NAME does not exists on the system."
          exit 0  #Script should return true. Verify the last executed command status by echo $?.
          elif [ "$CURRENT_SERVICE_STATE" = "$EXPECTED_SERVICE_STATE" ]
          then
          #echo "SYSTEMD Service $SYSTEMD_SERVICE_NAME is disabled as expected."
          exit 0  #Script should return true. Verify the last executed command status by echo $?.
          else
          #echo "SYSTEMD Service $SYSTEMD_SERVICE_NAME is enabled, expected to be disabled."
          exit 1  #Script should return false. Verify the last executed command status by echo $?.
          fi
          fi</check-content>
      </check>
    </Rule>
    <Rule id="UseRoot_SquashingOnAllExports" xml:lang="en" selected="false">
      <title xml:lang="en">Use Root-Squashing on All Exports</title>
      <description xml:lang="en">This rule ensures that remotely mounted file systems such as nfs or nfs4 are not mounted with no_root_squash option in /etc/fstab file. It Allows root account on client to access export share on server as the root account.</description>
      <reference>PCI DSS v3.2 Requirements 2.2.2</reference>
      <reference>https://www.pcisecuritystandards.org</reference>
      <platform idref="cpe:/o:centos:centos:7" />
      <platform idref="cpe:/o:oracle:linux:7" />
      <platform idref="cpe:/o:redhat:enterprise_linux:7" />
      <ident system="www.unifiedcompliance.com">UCF CC ID 04986</ident>
      <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
        <check-content-ref href="" name="oval:com.mcafee.oval:def:1412436" />
      </check>
    </Rule>
    <Rule id="WriteAccessToNFSSharesShouldBeDisabled" xml:lang="en" selected="false">
      <title xml:lang="en">Write access to NFS shares should be disabled</title>
      <description xml:lang="en">This check ensures that  file systems such as nfs or nfs4 does not have rw option in /etc/exports file.</description>
      <reference>PCI DSS v3.2 Requirements 2.2.2</reference>
      <reference>https://www.pcisecuritystandards.org</reference>
      <platform idref="cpe:/o:centos:centos:7" />
      <platform idref="cpe:/o:oracle:linux:7" />
      <platform idref="cpe:/o:redhat:enterprise_linux:7" />
      <ident system="www.unifiedcompliance.com">UCF CC ID 04987</ident>
      <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
        <check-content-ref href="" name="oval:com.mcafee.oval:def:2487250" />
      </check>
    </Rule>
    <Rule id="DisableNamedUnlessNamedIsAbsolutelyNecessary" xml:lang="en" selected="false">
      <title xml:lang="en">Disable named unless named is absolutely necessary</title>
      <description xml:lang="en">This rule ensures that named service is not enabled.</description>
      <reference>PCI DSS v3.2 Requirements 2.2.2</reference>
      <reference>https://www.pcisecuritystandards.org</reference>
      <platform idref="cpe:/o:centos:centos:7" />
      <platform idref="cpe:/o:oracle:linux:7" />
      <platform idref="cpe:/o:redhat:enterprise_linux:7" />
      <ident system="www.unifiedcompliance.com">UCF CC ID 04985</ident>
      <check system="http://www.mcafee.com/xccdf/script/1.0">
        <check-content>/bin/sh
30
          #!/bin/bash
          #BASH script to verify the state of a SYSTEMD Service
          : ' The systemd system and service manager is responsible for controlling how services are started, stopped and otherwise managed on Red Hat Enterprise Linux 7, Oracle Linux 7 and CentOS Linux 7 systems. Although the systemd process replaces the init process (quite literally, /sbin/init is now a symbolic link to /usr/lib/systemd/systemd) for starting services at boot time and changing runlevels, systemd provides much more control than the init
          process does while still supporting existing init scripts. '
          
          SYSTEMD_SERVICE_NAME=named.service
          
          #SERVICE_EXISTENCE - Command to verify whether $SYSTEMD_SERVICE_NAME exists on the system or not.
          SERVICE_EXISTENCE=`systemctl list-unit-files --type service | grep $SYSTEMD_SERVICE_NAME`
          
          #CURRENT_SERVICE_STATE - Command to verify the current state of $SYSTEMD_SERVICE_NAME
          CURRENT_SERVICE_STATE=`systemctl is-enabled $SYSTEMD_SERVICE_NAME`
          
          #EXPECTED_SERVICE_STATE - Expected service state by End User
          EXPECTED_SERVICE_STATE=disabled
          
          if [ -z "$SERVICE_EXISTENCE" ]  #SYSTEMD_SERVICE_NAME existence test.
          then
          #echo "SYSTEMD Service $SYSTEMD_SERVICE_NAME does not exists on the system."
          exit 0  #Script should return true. Verify the last executed command status by echo $?.
          elif [ "$CURRENT_SERVICE_STATE" = "$EXPECTED_SERVICE_STATE" ]
          then
          #echo "SYSTEMD Service $SYSTEMD_SERVICE_NAME is disabled as expected."
          exit 0  #Script should return true. Verify the last executed command status by echo $?.
          else
          #echo "SYSTEMD Service $SYSTEMD_SERVICE_NAME is enabled, expected to be disabled."
          exit 1  #Script should return false. Verify the last executed command status by echo $?.
          fi
          fi</check-content>
      </check>
    </Rule>
    <Rule id="DisableSmbUnlessSmbIsAbsolutelyNecessary" xml:lang="en" selected="false">
      <title xml:lang="en">Disable smb unless smb is absolutely necessary</title>
      <description xml:lang="en">This rule ensures that smb service is not enabled.</description>
      <reference>PCI DSS v3.2 Requirements 2.2.2</reference>
      <reference>https://www.pcisecuritystandards.org</reference>
      <platform idref="cpe:/o:centos:centos:7" />
      <platform idref="cpe:/o:oracle:linux:7" />
      <platform idref="cpe:/o:redhat:enterprise_linux:7" />
      <ident system="www.unifiedcompliance.com">UCF CC ID 04991</ident>
      <check system="http://www.mcafee.com/xccdf/script/1.0">
        <check-content>/bin/sh
30
          #!/bin/bash
          #BASH script to verify the state of a SYSTEMD Service
          : ' The systemd system and service manager is responsible for controlling how services are started, stopped and otherwise managed on Red Hat Enterprise Linux 7, Oracle Linux 7 and CentOS Linux 7 systems. Although the systemd process replaces the init process (quite literally, /sbin/init is now a symbolic link to /usr/lib/systemd/systemd) for starting services at boot time and changing runlevels, systemd provides much more control than the init
          process does while still supporting existing init scripts. '
          
          SYSTEMD_SERVICE_NAME=smb.service
          
          #SERVICE_EXISTENCE - Command to verify whether $SYSTEMD_SERVICE_NAME exists on the system or not.
          SERVICE_EXISTENCE=`systemctl list-unit-files --type service | grep $SYSTEMD_SERVICE_NAME`
          
          #CURRENT_SERVICE_STATE - Command to verify the current state of $SYSTEMD_SERVICE_NAME
          CURRENT_SERVICE_STATE=`systemctl is-enabled $SYSTEMD_SERVICE_NAME`
          
          #EXPECTED_SERVICE_STATE - Expected service state by End User
          EXPECTED_SERVICE_STATE=disabled
          
          if [ -z "$SERVICE_EXISTENCE" ]  #SYSTEMD_SERVICE_NAME existence test.
          then
          #echo "SYSTEMD Service $SYSTEMD_SERVICE_NAME does not exists on the system."
          exit 0  #Script should return true. Verify the last executed command status by echo $?.
          elif [ "$CURRENT_SERVICE_STATE" = "$EXPECTED_SERVICE_STATE" ]
          then
          #echo "SYSTEMD Service $SYSTEMD_SERVICE_NAME is disabled as expected."
          exit 0  #Script should return true. Verify the last executed command status by echo $?.
          else
          #echo "SYSTEMD Service $SYSTEMD_SERVICE_NAME is enabled, expected to be disabled."
          exit 1  #Script should return false. Verify the last executed command status by echo $?.
          fi
          fi</check-content>
      </check>
    </Rule>
    <Rule id="DisableSnmpdUnlessSnmpdIsAbsolutelyNecessary" xml:lang="en" selected="false">
      <title xml:lang="en">Disable snmpd unless snmpd is absolutely necessary</title>
      <description xml:lang="en">This rule ensures that snmpd service is not enabled.</description>
      <reference>PCI DSS v3.2 Requirements 2.2.2</reference>
      <reference>https://www.pcisecuritystandards.org</reference>
      <platform idref="cpe:/o:centos:centos:7" />
      <platform idref="cpe:/o:oracle:linux:7" />
      <platform idref="cpe:/o:redhat:enterprise_linux:7" />
      <ident system="www.unifiedcompliance.com">UCF CC ID 04992</ident>
      <check system="http://www.mcafee.com/xccdf/script/1.0">
        <check-content>/bin/sh
30
          #!/bin/bash
          #BASH script to verify the state of a SYSTEMD Service
          : ' The systemd system and service manager is responsible for controlling how services are started, stopped and otherwise managed on Red Hat Enterprise Linux 7, Oracle Linux 7 and CentOS Linux 7 systems. Although the systemd process replaces the init process (quite literally, /sbin/init is now a symbolic link to /usr/lib/systemd/systemd) for starting services at boot time and changing runlevels, systemd provides much more control than the init
          process does while still supporting existing init scripts. '
          
          SYSTEMD_SERVICE_NAME=snmpd.service
          
          #SERVICE_EXISTENCE - Command to verify whether $SYSTEMD_SERVICE_NAME exists on the system or not.
          SERVICE_EXISTENCE=`systemctl list-unit-files --type service | grep $SYSTEMD_SERVICE_NAME`
          
          #CURRENT_SERVICE_STATE - Command to verify the current state of $SYSTEMD_SERVICE_NAME
          CURRENT_SERVICE_STATE=`systemctl is-enabled $SYSTEMD_SERVICE_NAME`
          
          #EXPECTED_SERVICE_STATE - Expected service state by End User
          EXPECTED_SERVICE_STATE=disabled
          
          if [ -z "$SERVICE_EXISTENCE" ]  #SYSTEMD_SERVICE_NAME existence test.
          then
          #echo "SYSTEMD Service $SYSTEMD_SERVICE_NAME does not exists on the system."
          exit 0  #Script should return true. Verify the last executed command status by echo $?.
          elif [ "$CURRENT_SERVICE_STATE" = "$EXPECTED_SERVICE_STATE" ]
          then
          #echo "SYSTEMD Service $SYSTEMD_SERVICE_NAME is disabled as expected."
          exit 0  #Script should return true. Verify the last executed command status by echo $?.
          else
          #echo "SYSTEMD Service $SYSTEMD_SERVICE_NAME is enabled, expected to be disabled."
          exit 1  #Script should return false. Verify the last executed command status by echo $?.
          fi
          fi</check-content>
      </check>
    </Rule>
    <Rule id="DisableGdmUnlessGdmIsAbsolutelyNecessary" xml:lang="en" selected="false">
      <title xml:lang="en">Disable gdm unless gdm is absolutely necessary</title>
      <description xml:lang="en">This rule ensures that gdm service is not enabled.</description>
      <reference>PCI DSS v3.2 Requirements 2.2.2</reference>
      <reference>https://www.pcisecuritystandards.org</reference>
      <platform idref="cpe:/o:centos:centos:7" />
      <platform idref="cpe:/o:oracle:linux:7" />
      <platform idref="cpe:/o:redhat:enterprise_linux:7" />
      <ident system="www.unifiedcompliance.com">UCF CC ID 04994</ident>
      <check system="http://www.mcafee.com/xccdf/script/1.0">
        <check-content>/bin/sh
30
          #!/bin/bash
          #BASH script to verify the state of a SYSTEMD Service
          : ' The systemd system and service manager is responsible for controlling how services are started, stopped and otherwise managed on Red Hat Enterprise Linux 7, Oracle Linux 7 and CentOS Linux 7 systems. Although the systemd process replaces the init process (quite literally, /sbin/init is now a symbolic link to /usr/lib/systemd/systemd) for starting services at boot time and changing runlevels, systemd provides much more control than the init
          process does while still supporting existing init scripts. '
          
          SYSTEMD_SERVICE_NAME=gdm.service
          
          #SERVICE_EXISTENCE - Command to verify whether $SYSTEMD_SERVICE_NAME exists on the system or not.
          SERVICE_EXISTENCE=`systemctl list-unit-files --type service | grep $SYSTEMD_SERVICE_NAME`
          
          #CURRENT_SERVICE_STATE - Command to verify the current state of $SYSTEMD_SERVICE_NAME
          CURRENT_SERVICE_STATE=`systemctl is-enabled $SYSTEMD_SERVICE_NAME`
          
          #EXPECTED_SERVICE_STATE - Expected service state by End User
          EXPECTED_SERVICE_STATE=disabled
          
          if [ -z "$SERVICE_EXISTENCE" ]  #SYSTEMD_SERVICE_NAME existence test.
          then
          #echo "SYSTEMD Service $SYSTEMD_SERVICE_NAME does not exists on the system."
          exit 0  #Script should return true. Verify the last executed command status by echo $?.
          elif [ "$CURRENT_SERVICE_STATE" = "$EXPECTED_SERVICE_STATE" ]
          then
          #echo "SYSTEMD Service $SYSTEMD_SERVICE_NAME is disabled as expected."
          exit 0  #Script should return true. Verify the last executed command status by echo $?.
          else
          #echo "SYSTEMD Service $SYSTEMD_SERVICE_NAME is enabled, expected to be disabled."
          exit 1  #Script should return false. Verify the last executed command status by echo $?.
          fi
          fi</check-content>
      </check>
    </Rule>
    <Rule id="DisableRpcbindUnlessRpcbindIsAbsolutelyNecessary" xml:lang="en" selected="false">
      <title xml:lang="en">Disable rpcbind unless rpcbind is absolutely necessary</title>
      <description xml:lang="en">This rule ensures that rpcbind service is not enabled.</description>
      <reference>PCI DSS v3.2 Requirements 2.2.2</reference>
      <reference>https://www.pcisecuritystandards.org</reference>
      <platform idref="cpe:/o:centos:centos:7" />
      <platform idref="cpe:/o:oracle:linux:7" />
      <platform idref="cpe:/o:redhat:enterprise_linux:7" />
      <ident system="www.unifiedcompliance.com">UCF CC ID 05006</ident>
      <check system="http://www.mcafee.com/xccdf/script/1.0">
        <check-content>/bin/sh
30
          #!/bin/bash
          #BASH script to verify the state of a SYSTEMD Service
          : ' The systemd system and service manager is responsible for controlling how services are started, stopped and otherwise managed on Red Hat Enterprise Linux 7, Oracle Linux 7 and CentOS Linux 7 systems. Although the systemd process replaces the init process (quite literally, /sbin/init is now a symbolic link to /usr/lib/systemd/systemd) for starting services at boot time and changing runlevels, systemd provides much more control than the init
          process does while still supporting existing init scripts. '
          
          SYSTEMD_SERVICE_NAME=rpcbind.service
          
          #SERVICE_EXISTENCE - Command to verify whether $SYSTEMD_SERVICE_NAME exists on the system or not.
          SERVICE_EXISTENCE=`systemctl list-unit-files --type service | grep $SYSTEMD_SERVICE_NAME`
          
          #CURRENT_SERVICE_STATE - Command to verify the current state of $SYSTEMD_SERVICE_NAME
          CURRENT_SERVICE_STATE=`systemctl is-enabled $SYSTEMD_SERVICE_NAME`
          
          #EXPECTED_SERVICE_STATE - Expected service state by End User
          EXPECTED_SERVICE_STATE=disabled
          
          if [ -z "$SERVICE_EXISTENCE" ]  #SYSTEMD_SERVICE_NAME existence test.
          then
          #echo "SYSTEMD Service $SYSTEMD_SERVICE_NAME does not exists on the system."
          exit 0  #Script should return true. Verify the last executed command status by echo $?.
          elif [ "$CURRENT_SERVICE_STATE" = "$EXPECTED_SERVICE_STATE" ]
          then
          #echo "SYSTEMD Service $SYSTEMD_SERVICE_NAME is disabled as expected."
          exit 0  #Script should return true. Verify the last executed command status by echo $?.
          else
          #echo "SYSTEMD Service $SYSTEMD_SERVICE_NAME is enabled, expected to be disabled."
          exit 1  #Script should return false. Verify the last executed command status by echo $?.
          fi
          fi</check-content>
      </check>
    </Rule>
    <Rule id="DisableKadminUnlessKadminIsAbsolutelyNecessary" xml:lang="en" selected="false">
      <title xml:lang="en">Disable kadmin unless kadmin is absolutely necessary</title>
      <description xml:lang="en">This rule ensures that kadmin service is not enabled.</description>
      <reference>PCI DSS v3.2 Requirements 2.2.2</reference>
      <reference>https://www.pcisecuritystandards.org</reference>
      <platform idref="cpe:/o:centos:centos:7" />
      <platform idref="cpe:/o:oracle:linux:7" />
      <platform idref="cpe:/o:redhat:enterprise_linux:7" />
      <ident system="www.unifiedcompliance.com">UCF CC ID 05007</ident>
      <check system="http://www.mcafee.com/xccdf/script/1.0">
        <check-content>/bin/sh
30
          #!/bin/bash
          #BASH script to verify the state of a SYSTEMD Service
          : ' The systemd system and service manager is responsible for controlling how services are started, stopped and otherwise managed on Red Hat Enterprise Linux 7, Oracle Linux 7 and CentOS Linux 7 systems. Although the systemd process replaces the init process (quite literally, /sbin/init is now a symbolic link to /usr/lib/systemd/systemd) for starting services at boot time and changing runlevels, systemd provides much more control than the init
          process does while still supporting existing init scripts. '
          
          SYSTEMD_SERVICE_NAME=kadmin.service
          
          #SERVICE_EXISTENCE - Command to verify whether $SYSTEMD_SERVICE_NAME exists on the system or not.
          SERVICE_EXISTENCE=`systemctl list-unit-files --type service | grep $SYSTEMD_SERVICE_NAME`
          
          #CURRENT_SERVICE_STATE - Command to verify the current state of $SYSTEMD_SERVICE_NAME
          CURRENT_SERVICE_STATE=`systemctl is-enabled $SYSTEMD_SERVICE_NAME`
          
          #EXPECTED_SERVICE_STATE - Expected service state by End User
          EXPECTED_SERVICE_STATE=disabled
          
          if [ -z "$SERVICE_EXISTENCE" ]  #SYSTEMD_SERVICE_NAME existence test.
          then
          #echo "SYSTEMD Service $SYSTEMD_SERVICE_NAME does not exists on the system."
          exit 0  #Script should return true. Verify the last executed command status by echo $?.
          elif [ "$CURRENT_SERVICE_STATE" = "$EXPECTED_SERVICE_STATE" ]
          then
          #echo "SYSTEMD Service $SYSTEMD_SERVICE_NAME is disabled as expected."
          exit 0  #Script should return true. Verify the last executed command status by echo $?.
          else
          #echo "SYSTEMD Service $SYSTEMD_SERVICE_NAME is enabled, expected to be disabled."
          exit 1  #Script should return false. Verify the last executed command status by echo $?.
          fi
          fi</check-content>
      </check>
    </Rule>
    <Rule id="DisableKrb5kdcUnlessKrb5kdcIsAbsolutelyNecessary" xml:lang="en" selected="false">
      <title xml:lang="en">Disable krb5kdc unless krb5kdc is absolutely necessary</title>
      <description xml:lang="en">This rule ensures that krb5kdc service is not enabled.</description>
      <reference>PCI DSS v3.2 Requirements 2.2.2</reference>
      <reference>https://www.pcisecuritystandards.org</reference>
      <platform idref="cpe:/o:centos:centos:7" />
      <platform idref="cpe:/o:oracle:linux:7" />
      <platform idref="cpe:/o:redhat:enterprise_linux:7" />
      <ident system="www.unifiedcompliance.com">UCF CC ID 05008</ident>
      <check system="http://www.mcafee.com/xccdf/script/1.0">
        <check-content>/bin/sh
30
          #!/bin/bash
          #BASH script to verify the state of a SYSTEMD Service
          : ' The systemd system and service manager is responsible for controlling how services are started, stopped and otherwise managed on Red Hat Enterprise Linux 7, Oracle Linux 7 and CentOS Linux 7 systems. Although the systemd process replaces the init process (quite literally, /sbin/init is now a symbolic link to /usr/lib/systemd/systemd) for starting services at boot time and changing runlevels, systemd provides much more control than the init
          process does while still supporting existing init scripts. '
          
          SYSTEMD_SERVICE_NAME=krb5kdc.service
          
          #SERVICE_EXISTENCE - Command to verify whether $SYSTEMD_SERVICE_NAME exists on the system or not.
          SERVICE_EXISTENCE=`systemctl list-unit-files --type service | grep $SYSTEMD_SERVICE_NAME`
          
          #CURRENT_SERVICE_STATE - Command to verify the current state of $SYSTEMD_SERVICE_NAME
          CURRENT_SERVICE_STATE=`systemctl is-enabled $SYSTEMD_SERVICE_NAME`
          
          #EXPECTED_SERVICE_STATE - Expected service state by End User
          EXPECTED_SERVICE_STATE=disabled
          
          if [ -z "$SERVICE_EXISTENCE" ]  #SYSTEMD_SERVICE_NAME existence test.
          then
          #echo "SYSTEMD Service $SYSTEMD_SERVICE_NAME does not exists on the system."
          exit 0  #Script should return true. Verify the last executed command status by echo $?.
          elif [ "$CURRENT_SERVICE_STATE" = "$EXPECTED_SERVICE_STATE" ]
          then
          #echo "SYSTEMD Service $SYSTEMD_SERVICE_NAME is disabled as expected."
          exit 0  #Script should return true. Verify the last executed command status by echo $?.
          else
          #echo "SYSTEMD Service $SYSTEMD_SERVICE_NAME is enabled, expected to be disabled."
          exit 1  #Script should return false. Verify the last executed command status by echo $?.
          fi
          fi</check-content>
      </check>
    </Rule>
    <Rule id="DisableKpropUnlessKpropIsAbsolutelyNecessary" xml:lang="en" selected="false">
      <title xml:lang="en">Disable kprop unless kprop is absolutely necessary</title>
      <description xml:lang="en">This rule ensures that kprop service is not enabled.</description>
      <reference>PCI DSS v3.2 Requirements 2.2.2</reference>
      <reference>https://www.pcisecuritystandards.org</reference>
      <platform idref="cpe:/o:centos:centos:7" />
      <platform idref="cpe:/o:oracle:linux:7" />
      <platform idref="cpe:/o:redhat:enterprise_linux:7" />
      <ident system="www.unifiedcompliance.com">UCF CC ID 05009</ident>
      <check system="http://www.mcafee.com/xccdf/script/1.0">
        <check-content>/bin/sh
30
          #!/bin/bash
          #BASH script to verify the state of a SYSTEMD Service
          : ' The systemd system and service manager is responsible for controlling how services are started, stopped and otherwise managed on Red Hat Enterprise Linux 7, Oracle Linux 7 and CentOS Linux 7 systems. Although the systemd process replaces the init process (quite literally, /sbin/init is now a symbolic link to /usr/lib/systemd/systemd) for starting services at boot time and changing runlevels, systemd provides much more control than the init
          process does while still supporting existing init scripts. '
          
          SYSTEMD_SERVICE_NAME=kprop.service
          
          #SERVICE_EXISTENCE - Command to verify whether $SYSTEMD_SERVICE_NAME exists on the system or not.
          SERVICE_EXISTENCE=`systemctl list-unit-files --type service | grep $SYSTEMD_SERVICE_NAME`
          
          #CURRENT_SERVICE_STATE - Command to verify the current state of $SYSTEMD_SERVICE_NAME
          CURRENT_SERVICE_STATE=`systemctl is-enabled $SYSTEMD_SERVICE_NAME`
          
          #EXPECTED_SERVICE_STATE - Expected service state by End User
          EXPECTED_SERVICE_STATE=disabled
          
          if [ -z "$SERVICE_EXISTENCE" ]  #SYSTEMD_SERVICE_NAME existence test.
          then
          #echo "SYSTEMD Service $SYSTEMD_SERVICE_NAME does not exists on the system."
          exit 0  #Script should return true. Verify the last executed command status by echo $?.
          elif [ "$CURRENT_SERVICE_STATE" = "$EXPECTED_SERVICE_STATE" ]
          then
          #echo "SYSTEMD Service $SYSTEMD_SERVICE_NAME is disabled as expected."
          exit 0  #Script should return true. Verify the last executed command status by echo $?.
          else
          #echo "SYSTEMD Service $SYSTEMD_SERVICE_NAME is enabled, expected to be disabled."
          exit 1  #Script should return false. Verify the last executed command status by echo $?.
          fi
          fi</check-content>
      </check>
    </Rule>
    <Rule id="DisableRshUnlessRshIsAbsolutelyNecessary" xml:lang="en" selected="false">
      <title xml:lang="en">Disable rsh unless rsh is absolutely necessary</title>
      <description xml:lang="en">This rule ensures that rsh service is not enabled.</description>
      <reference>PCI DSS v3.2 Requirements 2.2.2</reference>
      <reference>https://www.pcisecuritystandards.org</reference>
      <platform idref="cpe:/o:centos:centos:7" />
      <platform idref="cpe:/o:oracle:linux:7" />
      <platform idref="cpe:/o:redhat:enterprise_linux:7" />
      <ident system="www.unifiedcompliance.com">UCF CC ID 05077</ident>
      <check system="http://www.mcafee.com/xccdf/script/1.0">
        <check-content>/bin/sh
30
          #!/bin/bash
          #BASH script to verify the state of a SYSTEMD Service
          : ' The systemd system and service manager is responsible for controlling how services are started, stopped and otherwise managed on Red Hat Enterprise Linux 7, Oracle Linux 7 and CentOS Linux 7 systems. Although the systemd process replaces the init process (quite literally, /sbin/init is now a symbolic link to /usr/lib/systemd/systemd) for starting services at boot time and changing runlevels, systemd provides much more control than the init
          process does while still supporting existing init scripts. '
          
          SYSTEMD_SERVICE_NAME=rsh.socket
          
          #SERVICE_EXISTENCE - Command to verify whether $SYSTEMD_SERVICE_NAME exists on the system or not.
          SERVICE_EXISTENCE=`systemctl list-unit-files --type socket | grep $SYSTEMD_SERVICE_NAME`
          
          #CURRENT_SERVICE_STATE - Command to verify the current state of $SYSTEMD_SERVICE_NAME
          CURRENT_SERVICE_STATE=`systemctl is-enabled $SYSTEMD_SERVICE_NAME`
          
          #EXPECTED_SERVICE_STATE - Expected service state by End User
          EXPECTED_SERVICE_STATE=disabled
          
          if [ -z "$SERVICE_EXISTENCE" ]  #SYSTEMD_SERVICE_NAME existence test.
          then
          #echo "SYSTEMD Service $SYSTEMD_SERVICE_NAME does not exists on the system."
          exit 0  #Script should return true. Verify the last executed command status by echo $?.
          elif [ "$CURRENT_SERVICE_STATE" = "$EXPECTED_SERVICE_STATE" ]
          then
          #echo "SYSTEMD Service $SYSTEMD_SERVICE_NAME is disabled as expected."
          exit 0  #Script should return true. Verify the last executed command status by echo $?.
          else
          #echo "SYSTEMD Service $SYSTEMD_SERVICE_NAME is enabled, expected to be disabled."
          exit 1  #Script should return false. Verify the last executed command status by echo $?.
          fi
          fi</check-content>
      </check>
    </Rule>
    <Rule id="FTPConfiguration_EnableOrDisableFileUploadsViaVsftpdServiceAsAppropriate" xml:lang="en" selected="false">
      <title xml:lang="en">FTP Configuration - Enable or disable file uploads via vsftpd service as appropriate</title>
      <description xml:lang="en">This rule verifies if FTP server is set to Enable or Disable file uploads via vsftpd service</description>
      <reference>PCI DSS v3.2 Requirements 2.2.2</reference>
      <reference>https://www.pcisecuritystandards.org</reference>
      <platform idref="cpe:/o:centos:centos:7" />
      <platform idref="cpe:/o:oracle:linux:7" />
      <platform idref="cpe:/o:redhat:enterprise_linux:7" />
      <ident system="www.unifiedcompliance.com">UCF CC ID 05100</ident>
      <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
        <check-export value-id="Enable_file_uploads_var" export-name="oval:com.mcafee.oval:var:2487257" />
        <check-content-ref href="" name="oval:com.mcafee.oval:def:2487253" />
      </check>
    </Rule>
    <Rule id="VerifyNet_snmpVersionOnTheSystem" xml:lang="en" selected="false">
      <title xml:lang="en">Verify net-snmp version on the system</title>
      <description xml:lang="en">This rule is to verify net-snmp version on the system.</description>
      <reference>PCI DSS v3.2 Requirements 2.2.2</reference>
      <reference>https://www.pcisecuritystandards.org</reference>
      <platform idref="cpe:/o:centos:centos:7" />
      <platform idref="cpe:/o:oracle:linux:7" />
      <platform idref="cpe:/o:redhat:enterprise_linux:7" />
      <ident system="www.unifiedcompliance.com">UCF CC ID 08976</ident>
      <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
        <check-export value-id="EnterTheDesiredNet-snmpVersion._var" export-name="oval:com.mcafee.oval:var:1326824" />
        <check-content-ref href="" name="oval:com.mcafee.oval:def:1326819" />
      </check>
    </Rule>
    <Rule id="RemoveNISClient" xml:lang="en" selected="false">
      <title xml:lang="en">Remove NIS Client</title>
      <description xml:lang="en">The Network Information Service (NIS), formerly known as Yellow Pages, is a client-server directory service protocol used to distribute system configuration files. The NIS client (ypbind) was used to bind a machine to an NIS server and receive the distributed configuration files. This rule ensures that, ypbind package is not installed on the system.</description>
      <reference>PCI DSS v3.2 Requirements 2</reference>
      <reference>https://www.pcisecuritystandards.org</reference>
      <platform idref="cpe:/o:centos:centos:7" />
      <platform idref="cpe:/o:oracle:linux:7" />
      <platform idref="cpe:/o:redhat:enterprise_linux:7" />
      <ident system="www.unifiedcompliance.com">UCF CC ID 01458</ident>
      <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
        <check-export value-id="EnterTheNameOfTheRPMPackageToBeVerified._var777" export-name="oval:com.mcafee.oval:var:242779" />
        <check-content-ref href="" name="oval:com.mcafee.oval:def:242776" />
      </check>
    </Rule>
    <Rule id="RemoveNISServer" xml:lang="en" selected="false">
      <title xml:lang="en">Remove NIS Server</title>
      <description xml:lang="en">The Network Information Service (NIS) (formally known as Yellow Pages) is a client-server directory service protocol for distributing system configuration files. The NIS server is a collection of programs that allow for the distribution of configuration files. This rule ensures that the ypserv package is not installed on the system.</description>
      <reference>PCI DSS v3.2 Requirements 2</reference>
      <reference>https://www.pcisecuritystandards.org</reference>
      <platform idref="cpe:/o:centos:centos:7" />
      <platform idref="cpe:/o:oracle:linux:7" />
      <platform idref="cpe:/o:redhat:enterprise_linux:7" />
      <ident system="www.unifiedcompliance.com">UCF CC ID 01457</ident>
      <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
        <check-export value-id="EnterTheNameOfTheRPMPackageToBeVerified._var888" export-name="oval:com.mcafee.oval:var:242779" />
        <check-content-ref href="" name="oval:com.mcafee.oval:def:242776" />
      </check>
    </Rule>
    <Rule id="RemoveUnixToUnixCopyClient" xml:lang="en" selected="false">
      <title xml:lang="en">Remove Unix to Unix copy Client</title>
      <description xml:lang="en">The Network Information Service (NIS), formerly known as Yellow Pages, is a client-server directory service protocol used to distribute system configuration files. The NIS client (ypbind) was used to bind a machine to an NIS server and receive the distributed configuration files. This rule ensures that, ypbind package is not installed on the system.</description>
      <reference>PCI DSS v3.2 Requirements 2</reference>
      <reference>https://www.pcisecuritystandards.org</reference>
      <platform idref="cpe:/o:centos:centos:7" />
      <platform idref="cpe:/o:oracle:linux:7" />
      <platform idref="cpe:/o:redhat:enterprise_linux:7" />
      <ident system="www.unifiedcompliance.com">UCF CC ID 02169</ident>
      <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
        <check-export value-id="EnterTheNameOfTheRPMPackageToBeVerified._var999" export-name="oval:com.mcafee.oval:var:242779" />
        <check-content-ref href="" name="oval:com.mcafee.oval:def:242776" />
      </check>
    </Rule>
    <Rule id="Configuration_RestrictLockdServiceToUseAStaticTcpPort" xml:lang="en" selected="false">
      <title xml:lang="en">Configuration - restrict lockd service to use a static tcp port</title>
      <description xml:lang="en">This check verifies if lockd service is restricted to use a static tcp port.</description>
      <reference>PCI DSS v3.2 Requirements 2.2.2</reference>
      <reference>https://www.pcisecuritystandards.org</reference>
      <platform idref="cpe:/o:centos:centos:7" />
      <platform idref="cpe:/o:oracle:linux:7" />
      <platform idref="cpe:/o:redhat:enterprise_linux:7" />
      <ident system="www.unifiedcompliance.com">UCF CC ID 05980</ident>
      <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
        <check-content-ref href="" name="oval:com.mcafee.oval:def:2487490" />
      </check>
    </Rule>
    <Rule id="Configuration_RestrictLockdServiceToUseAStaticUdpPort" xml:lang="en" selected="false">
      <title xml:lang="en">Configuration - restrict lockd service to use a static udp port</title>
      <description xml:lang="en">This check verifies if lockd service is restricted to use a static udp port</description>
      <reference>PCI DSS v3.2 Requirements 2.2.2</reference>
      <reference>https://www.pcisecuritystandards.org</reference>
      <platform idref="cpe:/o:centos:centos:7" />
      <platform idref="cpe:/o:oracle:linux:7" />
      <platform idref="cpe:/o:redhat:enterprise_linux:7" />
      <ident system="www.unifiedcompliance.com">UCF CC ID 05980</ident>
      <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
        <check-content-ref href="" name="oval:com.mcafee.oval:def:2487491" />
      </check>
    </Rule>
  </Group>
  <Group id="RemoveAllUnnecessaryFunctionality." xml:lang="en">
    <title xml:lang="en">Remove all unnecessary functionality</title>
    <Value id="Ip_forwardShouldBeEnabledOrDisabled_var" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">0</value>
    </Value>
    <Value id="ShouldOthersHaveWRITEAccess_var7" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">0</value>
    </Value>
    <Value id="ShouldOthersHaveEXECUTEAccess_var7" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">0</value>
    </Value>
    <Value id="ShouldOthersHaveREADAccess_var7" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">0</value>
    </Value>
    <Value id="ShouldTheUserHaveEXECUTEAccess_var7" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">1</value>
    </Value>
    <Value id="ShouldTheUserHaveREADAccess_var7" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">1</value>
    </Value>
    <Value id="ShouldTheUserHaveWRITEAccess_var7" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">1</value>
    </Value>
    <Value id="ShouldTheGroupHaveWRITEAccess_var7" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">0</value>
    </Value>
    <Value id="ShouldTheGroupHaveREADAccess_var7" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">0</value>
    </Value>
    <Value id="ShouldTheGroupHaveEXECUTEAccess_var7" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">0</value>
    </Value>
    <Value id="WhatIsTheRequiredUserIDOfTheFileOwner_var7" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">0</value>
    </Value>
    <Value id="WhatIsTheRequiredGroupIDOfTheFileOwner_var7" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">0</value>
    </Value>
    <Value id="ShouldOthersHaveWRITEAccess_var34" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">0</value>
    </Value>
    <Value id="ShouldOthersHaveEXECUTEAccess_var34" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">0</value>
    </Value>
    <Value id="ShouldOthersHaveREADAccess_var34" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">1</value>
    </Value>
    <Value id="ShouldTheUserHaveEXECUTEAccess_var34" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">0</value>
    </Value>
    <Value id="ShouldTheUserHaveREADAccess_var34" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">1</value>
    </Value>
    <Value id="ShouldTheUserHaveWRITEAccess_var34" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">1</value>
    </Value>
    <Value id="ShouldTheGroupHaveWRITEAccess_var34" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">0</value>
    </Value>
    <Value id="ShouldTheGroupHaveREADAccess_var34" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">1</value>
    </Value>
    <Value id="ShouldTheGroupHaveEXECUTEAccess_var34" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">0</value>
    </Value>
    <Value id="WhatIsTheRequiredGroupIDOfTheFileOwner_var22" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">0</value>
    </Value>
    <Value id="WhatIsTheRequiredUserIDOfTheFileOwner_var22" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">0</value>
    </Value>
    <Value id="WhatIsTheHardCoreParameterValue_var" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">0</value>
    </Value>
    <Value id="WhatIsTheFs.suid_dumpableVariableValue_var" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">0</value>
    </Value>
    <Value id="SquidEuidShouldBeSetToWhichUser_var" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">squid</value>
    </Value>
    <Value id="SquidGuidShouldBeSetToWhichGroup_var" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">squid</value>
    </Value>
    <Rule id="DisableLogonPromptsOnSerialPorts" xml:lang="en" selected="false">
      <title xml:lang="en">Disable logon prompts on serial ports</title>
      <description xml:lang="en">This rule ensures that Login prompts on serial ports is disabled.</description>
      <reference>PCI DSS v3.2 Requirements 2.2.5</reference>
      <reference>https://www.pcisecuritystandards.org</reference>
      <platform idref="cpe:/o:centos:centos:7" />
      <platform idref="cpe:/o:oracle:linux:7" />
      <platform idref="cpe:/o:redhat:enterprise_linux:7" />
      <ident system="www.unifiedcompliance.com">UCF CC ID 01553</ident>
      <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
        <check-content-ref href="" name="oval:com.mcafee.oval:def:200803050065" />
      </check>
    </Rule>
    <Rule id="DisableUSBstoragedevices" xml:lang="en" selected="false">
      <title xml:lang="en">Disable USB storage devices</title>
      <description xml:lang="en">This rule will verify that USB storage devices are disabled.</description>
      <reference>PCI DSS v3.2 Requirements 2.2.5</reference>
      <reference>PCI DSS v3.2 Requirements 2.1.1</reference>
      <reference>https://www.pcisecuritystandards.org</reference>
      <platform idref="cpe:/o:centos:centos:7" />
      <platform idref="cpe:/o:oracle:linux:7" />
      <platform idref="cpe:/o:redhat:enterprise_linux:7" />
      <ident system="www.unifiedcompliance.com">UCF CC ID 01545</ident>
      <ident system="www.unifiedcompliance.com">UCF CC ID 04901</ident>
      <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
        <check-content-ref href="" name="oval:com.mcafee.oval:def:2487263" />
      </check>
    </Rule>
    <Rule id="RemoveRhostsSupportUnlessAbsolutelyNecessary" xml:lang="en" selected="false">
      <title xml:lang="en">Remove rhosts support unless absolutely necessary</title>
      <reference>PCI DSS v3.2 Requirements 2.2.5</reference>
      <reference>https://www.pcisecuritystandards.org</reference>
      <platform idref="cpe:/o:centos:centos:7" />
      <platform idref="cpe:/o:oracle:linux:7" />
      <platform idref="cpe:/o:redhat:enterprise_linux:7" />
      <ident system="www.unifiedcompliance.com">UCF CC ID 01555</ident>
      <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
        <check-content-ref href="" name="oval:com.mcafee.oval:def:246586" />
      </check>
    </Rule>
    <Rule id="RemoveThe_Etc_hosts_equivFile" xml:lang="en" selected="false">
      <title xml:lang="en">Remove the /etc/hosts.equiv file</title>
      <description xml:lang="en">This check ensures that the file /etc/hosts.equiv does not exist on the system</description>
      <reference>PCI DSS v3.2 Requirements 2.2.5</reference>
      <reference>https://www.pcisecuritystandards.org</reference>
      <platform idref="cpe:/o:centos:centos:7" />
      <platform idref="cpe:/o:oracle:linux:7" />
      <platform idref="cpe:/o:redhat:enterprise_linux:7" />
      <ident system="www.unifiedcompliance.com">UCF CC ID 01559</ident>
      <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
        <check-content-ref href="" name="oval:com.mcafee.oval:def:2487266" />
      </check>
    </Rule>
    <Rule id="CreateThe_Etc_vsftpd_ftpusersFile" xml:lang="en" selected="false">
      <title xml:lang="en">Create the /etc/vsftpd/ftpusers file</title>
      <description xml:lang="en">This rule will verifies if the file /etc/vsftpd/ftpusers exists. This file contains a list of users who are not allowed to access the system via VSFTPD.</description>
      <reference>PCI DSS v3.2 Requirements 2.2.5</reference>
      <reference>https://www.pcisecuritystandards.org</reference>
      <platform idref="cpe:/o:centos:centos:7" />
      <platform idref="cpe:/o:oracle:linux:7" />
      <platform idref="cpe:/o:redhat:enterprise_linux:7" />
      <ident system="www.unifiedcompliance.com">UCF CC ID 01560</ident>
      <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
        <check-content-ref href="" name="oval:com.mcafee.oval:def:1095264" />
      </check>
    </Rule>
    <Rule id="SetOwnerPermissionOn_Etc_crontab" xml:lang="en" selected="false">
      <title xml:lang="en">Set Owner permission on /etc/crontab</title>
      <description xml:lang="en">The /etc/crontab file is used by cron to control its own jobs. The commands in this item make here sure that root is the user and group owner of the file and is the only user that can read and write the file. This rule verifies if the owner of the file - /etc/crontab is set as per the user input.</description>
      <reference>PCI DSS v3.2 Requirements 2.2.5</reference>
      <reference>PCI DSS v3.2 Requirements 2.3</reference>
      <reference>https://www.pcisecuritystandards.org</reference>
      <platform idref="cpe:/o:centos:centos:7" />
      <platform idref="cpe:/o:oracle:linux:7" />
      <platform idref="cpe:/o:redhat:enterprise_linux:7" />
      <ident system="www.unifiedcompliance.com">UCF CC ID 01560</ident>
      <ident system="www.unifiedcompliance.com">UCF CC ID 05302</ident>
      <ident system="www.unifiedcompliance.com">UCF CC ID 08968</ident>
      <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
        <check-export value-id="WhatIsTheRequiredUserIDOfTheFileOwner_var7" export-name="oval:com.mcafee.oval:var:80228" />
        <check-content-ref href="" name="oval:com.mcafee.oval:def:200802250128" />
      </check>
    </Rule>
    <Rule id="SetGroupOwnerPermissionOn_Etc_crontab" xml:lang="en" selected="false">
      <title xml:lang="en">Set Group Owner permission on /etc/crontab</title>
      <description xml:lang="en">The /etc/crontab file is used by cron to control its own jobs. The commands in this item make here sure that root is the user and group owner of the file and is the only user that can read and write the file. This check verifies if the group owner of the file -
        /etc/crontab is set as per the user input.</description>
      <reference>PCI DSS v3.2 Requirements 2.2.5</reference>
      <reference>PCI DSS v3.2 Requirements 2.3</reference>
      <reference>https://www.pcisecuritystandards.org</reference>
      <platform idref="cpe:/o:centos:centos:7" />
      <platform idref="cpe:/o:oracle:linux:7" />
      <platform idref="cpe:/o:redhat:enterprise_linux:7" />
      <ident system="www.unifiedcompliance.com">UCF CC ID 01560</ident>
      <ident system="www.unifiedcompliance.com">UCF CC ID 05302</ident>
      <ident system="www.unifiedcompliance.com">UCF CC ID 08968</ident>
      <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
        <check-export value-id="WhatIsTheRequiredGroupIDOfTheFileOwner_var7" export-name="oval:com.mcafee.oval:var:80125" />
        <check-content-ref href="" name="oval:com.mcafee.oval:def:200802290132" />
      </check>
    </Rule>
    <Rule id="SetPermissionsOn_Etc_crontab" xml:lang="en" selected="false">
      <title xml:lang="en">Set Permissions on /etc/crontab</title>
      <description xml:lang="en">The /etc/crontab file is used by cron to control its own jobs. The commands in this item make here sure that root is the user and group owner of the file and is the only user that can read and write the file. This check verifies if the permissions of the file -
        /etc/crontab are set as per the user input.</description>
      <reference>PCI DSS v3.2 Requirements 2.2.5</reference>
      <reference>PCI DSS v3.2 Requirements 2.3</reference>
      <reference>https://www.pcisecuritystandards.org</reference>
      <platform idref="cpe:/o:centos:centos:7" />
      <platform idref="cpe:/o:oracle:linux:7" />
      <platform idref="cpe:/o:redhat:enterprise_linux:7" />
      <ident system="www.unifiedcompliance.com">UCF CC ID 01560</ident>
      <ident system="www.unifiedcompliance.com">UCF CC ID 08968</ident>
      <ident system="www.unifiedcompliance.com">UCF CC ID 08967</ident>
      <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
        <check-export value-id="ShouldTheUserHaveREADAccess_var7" export-name="oval:com.mcafee.oval:var:78640" />
        <check-export value-id="ShouldTheUserHaveWRITEAccess_var7" export-name="oval:com.mcafee.oval:var:78641" />
        <check-export value-id="ShouldTheUserHaveEXECUTEAccess_var7" export-name="oval:com.mcafee.oval:var:78642" />
        <check-export value-id="ShouldTheGroupHaveREADAccess_var7" export-name="oval:com.mcafee.oval:var:78643" />
        <check-export value-id="ShouldTheGroupHaveWRITEAccess_var7" export-name="oval:com.mcafee.oval:var:78644" />
        <check-export value-id="ShouldTheGroupHaveEXECUTEAccess_var7" export-name="oval:com.mcafee.oval:var:78645" />
        <check-export value-id="ShouldOthersHaveREADAccess_var7" export-name="oval:com.mcafee.oval:var:78646" />
        <check-export value-id="ShouldOthersHaveWRITEAccess_var7" export-name="oval:com.mcafee.oval:var:78647" />
        <check-export value-id="ShouldOthersHaveEXECUTEAccess_var7" export-name="oval:com.mcafee.oval:var:78648" />
        <check-content-ref href="" name="oval:com.mcafee.oval:def:6894" />
      </check>
    </Rule>
    <Rule id="TestThePermissionsOf_Etc_xinetd.conf" xml:lang="en" selected="false">
      <title xml:lang="en">Test the permissions of - /etc/xinetd.conf</title>
      <description xml:lang="en">This rule will verify the permissions of - /etc/xinetd.conf.</description>
      <reference>PCI DSS v3.2 Requirements 2.2.5</reference>
      <reference>PCI DSS v3.2 Requirements 2.3</reference>
      <reference>https://www.pcisecuritystandards.org</reference>
      <platform idref="cpe:/o:centos:centos:7" />
      <platform idref="cpe:/o:oracle:linux:7" />
      <platform idref="cpe:/o:redhat:enterprise_linux:7" />
      <ident system="www.unifiedcompliance.com">UCF CC ID 01506</ident>
      <ident system="www.unifiedcompliance.com">UCF CC ID 05490</ident>
      <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
        <check-export value-id="ShouldTheUserHaveREADAccess_var34" export-name="oval:com.mcafee.oval:var:78640" />
        <check-export value-id="ShouldTheUserHaveWRITEAccess_var34" export-name="oval:com.mcafee.oval:var:78641" />
        <check-export value-id="ShouldTheUserHaveEXECUTEAccess_var34" export-name="oval:com.mcafee.oval:var:78642" />
        <check-export value-id="ShouldTheGroupHaveREADAccess_var34" export-name="oval:com.mcafee.oval:var:78643" />
        <check-export value-id="ShouldTheGroupHaveWRITEAccess_var34" export-name="oval:com.mcafee.oval:var:78644" />
        <check-export value-id="ShouldTheGroupHaveEXECUTEAccess_var34" export-name="oval:com.mcafee.oval:var:78645" />
        <check-export value-id="ShouldOthersHaveREADAccess_var34" export-name="oval:com.mcafee.oval:var:78646" />
        <check-export value-id="ShouldOthersHaveWRITEAccess_var34" export-name="oval:com.mcafee.oval:var:78647" />
        <check-export value-id="ShouldOthersHaveEXECUTEAccess_var34" export-name="oval:com.mcafee.oval:var:78648" />
        <check-content-ref href="" name="oval:com.mcafee.oval:def:7712" />
      </check>
    </Rule>
    <Rule id="TestTheGroupOwnerOfTheFile_Etc_xinetd.conf" xml:lang="en" selected="false">
      <title xml:lang="en">Test the group owner of the file - /etc/xinetd.conf</title>
      <description xml:lang="en">This rule will verify the group owner of the file - /etc/xinetd.conf.</description>
      <reference>PCI DSS v3.2 Requirements 2.2.5</reference>
      <reference>PCI DSS v3.2 Requirements 2.3</reference>
      <reference>PCI DSS v3.2 Requirements 2</reference>
      <reference>https://www.pcisecuritystandards.org</reference>
      <platform idref="cpe:/o:centos:centos:7" />
      <platform idref="cpe:/o:oracle:linux:7" />
      <platform idref="cpe:/o:redhat:enterprise_linux:7" />
      <ident system="www.unifiedcompliance.com">UCF CC ID 05311</ident>
      <ident system="www.unifiedcompliance.com">UCF CC ID 05994</ident>
      <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
        <check-export value-id="WhatIsTheRequiredGroupIDOfTheFileOwner_var22" export-name="oval:com.mcafee.oval:var:80125" />
        <check-content-ref href="" name="oval:com.mcafee.oval:def:78837" />
      </check>
    </Rule>
    <Rule id="TestTheOwnerOf_Etc_xinetd.confFile" xml:lang="en" selected="false">
      <title xml:lang="en">Test the owner of /etc/xinetd.conf file</title>
      <description xml:lang="en">This rule will verify the owner of /etc/xinetd.conf file.</description>
      <reference>PCI DSS v3.2 Requirements 2.2.5</reference>
      <reference>PCI DSS v3.2 Requirements 2.3</reference>
      <reference>https://www.pcisecuritystandards.org</reference>
      <platform idref="cpe:/o:centos:centos:7" />
      <platform idref="cpe:/o:oracle:linux:7" />
      <platform idref="cpe:/o:redhat:enterprise_linux:7" />
      <ident system="www.unifiedcompliance.com">UCF CC ID 05311</ident>
      <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
        <check-export value-id="WhatIsTheRequiredUserIDOfTheFileOwner_var22" export-name="oval:com.mcafee.oval:var:80228" />
        <check-content-ref href="" name="oval:com.mcafee.oval:def:7708" />
      </check>
    </Rule>
    <Rule id="RestrictCoreDumps" xml:lang="en" selected="false">
      <title xml:lang="en">Restrict Core Dumps</title>
      <description xml:lang="en">A core dump is the memory of an executable program. It is generally used to determine why a program aborted. It can also be used to glean confidential information from a core file. The system provides the ability to set a soft limit for core dumps, but this can be overridden by the user. This rule will verify that core dumps are disabled or not.</description>
      <reference>PCI DSS v3.2 Requirements 2.2.5</reference>
      <reference>PCI DSS v3.2 Requirements 2.3</reference>
      <reference>https://www.pcisecuritystandards.org</reference>
      <platform idref="cpe:/o:centos:centos:7" />
      <platform idref="cpe:/o:oracle:linux:7" />
      <platform idref="cpe:/o:redhat:enterprise_linux:7" />
      <ident system="www.unifiedcompliance.com">UCF CC ID 01507</ident>
      <ident system="www.unifiedcompliance.com">UCF CC ID 05990</ident>
      <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
        <check-export value-id="WhatIsTheHardCoreParameterValue_var" export-name="oval:com.mcafee.oval:var:402395" />
        <check-content-ref href="" name="oval:com.mcafee.oval:def:402388" />
      </check>
    </Rule>
    <Rule id="RestrictCoreDumps_Fs.suid_dumpableVariableValue" xml:lang="en" selected="false">
      <title xml:lang="en">Restrict Core Dumps - fs.suid_dumpable variable value</title>
      <description xml:lang="en">A core dump is the memory of an executable program. It is generally used to determine why a program aborted. It can also be used to glean confidential information from a core file. The system provides the ability to set a soft limit for core dumps, but this can be overridden by the user. This rule will verify the fs.suid_dumpable variable value.</description>
      <reference>PCI DSS v3.2 Requirements 2.2.5</reference>
      <reference>PCI DSS v3.2 Requirements 2.3</reference>
      <reference>https://www.pcisecuritystandards.org</reference>
      <platform idref="cpe:/o:centos:centos:7" />
      <platform idref="cpe:/o:oracle:linux:7" />
      <platform idref="cpe:/o:redhat:enterprise_linux:7" />
      <ident system="www.unifiedcompliance.com">UCF CC ID 05990</ident>
      <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
        <check-export value-id="WhatIsTheFs.suid_dumpableVariableValue_var" export-name="oval:com.mcafee.oval:var:402399" />
        <check-content-ref href="" name="oval:com.mcafee.oval:def:402389" />
      </check>
    </Rule>
    <Rule id="TheSquidEUIDShouldBeSetToAnAppropriateUser" xml:lang="en" selected="false">
      <title xml:lang="en">The Squid EUID should be set to an appropriate user</title>
      <description xml:lang="en">This check ensures that Squid EUID is set to an appropriate user. Squid is a proxy caching server for web clients, supporting FTP, gopher, and HTTP.</description>
      <reference>PCI DSS v3.2 Requirements 2.2.5</reference>
      <reference>https://www.pcisecuritystandards.org</reference>
      <platform idref="cpe:/o:centos:centos:7" />
      <platform idref="cpe:/o:oracle:linux:7" />
      <platform idref="cpe:/o:redhat:enterprise_linux:7" />
      <ident system="www.unifiedcompliance.com">UCF CC ID 05138</ident>
      <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
        <check-export value-id="SquidEuidShouldBeSetToWhichUser_var" export-name="oval:com.mcafee.oval:var:2487271" />
        <check-content-ref href="" name="oval:com.mcafee.oval:def:2487267" />
      </check>
    </Rule>
    <Rule id="TheSquidGUIDShouldBeSetToAnAppropriateGroup" xml:lang="en" selected="false">
      <title xml:lang="en">The Squid GUID should be set to an appropriate group</title>
      <description xml:lang="en">This check ensures that Squid GUID is set to an appropriate group. Squid is a proxy caching server for web clients, supporting FTP, gopher, and HTTP.</description>
      <reference>PCI DSS v3.2 Requirements 2.2.5</reference>
      <reference>https://www.pcisecuritystandards.org</reference>
      <platform idref="cpe:/o:centos:centos:7" />
      <platform idref="cpe:/o:oracle:linux:7" />
      <platform idref="cpe:/o:redhat:enterprise_linux:7" />
      <ident system="www.unifiedcompliance.com">UCF CC ID 05138</ident>
      <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
        <check-export value-id="SquidGuidShouldBeSetToWhichGroup_var" export-name="oval:com.mcafee.oval:var:2487276" />
        <check-content-ref href="" name="oval:com.mcafee.oval:def:2487272" />
      </check>
    </Rule>
    <Rule id="VerifyGroupsReferencedIn_etc_passwdAreIncludedIn_etc_group" xml:lang="en" selected="false">
      <title xml:lang="en">Verify groups referenced in /etc/passwd are included in /etc/group</title>
      <description xml:lang="en">Over time, system administration errors and changes can lead to groups being defined in /etc/passwd but not in /etc/group. All GIDs referenced in the /etc/passwd file must be defined in
        the /etc/group file.</description>
      <reference>PCI DSS v3.2 Requirements 2.2.5</reference>
      <reference>PCI DSS v3.2 Requirements 2.3</reference>
      <reference>https://www.pcisecuritystandards.org</reference>
      <platform idref="cpe:/o:centos:centos:7" />
      <platform idref="cpe:/o:oracle:linux:7" />
      <platform idref="cpe:/o:redhat:enterprise_linux:7" />
      <ident system="www.unifiedcompliance.com">UCF CC ID 05139</ident>
      <ident system="www.unifiedcompliance.com">UCF CC ID 05448</ident>
      <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
        <check-content-ref href="" name="oval:com.mcafee.oval:def:236469" />
      </check>
    </Rule>
    <Rule id="TestTheExistenceOfTheFile_Etc_cron.allow" xml:lang="en" selected="false">
      <title xml:lang="en">Test the existence of the file /etc/cron.allow</title>
      <description xml:lang="en">This check ensures that the file - /etc/cron.allow exists on the system.</description>
      <reference>PCI DSS v3.2 Requirements 2.2.5</reference>
      <reference>PCI DSS v3.2 Requirements 8</reference>
      <reference>https://www.pcisecuritystandards.org</reference>
      <platform idref="cpe:/o:centos:centos:7" />
      <platform idref="cpe:/o:oracle:linux:7" />
      <platform idref="cpe:/o:redhat:enterprise_linux:7" />
      <ident system="www.unifiedcompliance.com">UCF CC ID 06014</ident>
      <ident system="www.unifiedcompliance.com">UCF CC ID 01572</ident>
      <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
        <check-content-ref href="" name="oval:com.mcafee.oval:def:238336" />
      </check>
    </Rule>
    <Rule id="TestTheExistenceOfTheFile_Etc_at.allow" xml:lang="en" selected="false">
      <title xml:lang="en">Test the existence of the file /etc/at.allow</title>
      <description xml:lang="en">This check ensures that the file - /etc/at.allow exists on the system.</description>
      <reference>PCI DSS v3.2 Requirements 2.2.5</reference>
      <reference>https://www.pcisecuritystandards.org</reference>
      <platform idref="cpe:/o:centos:centos:7" />
      <platform idref="cpe:/o:oracle:linux:7" />
      <platform idref="cpe:/o:redhat:enterprise_linux:7" />
      <ident system="www.unifiedcompliance.com">UCF CC ID 06015</ident>
      <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
        <check-content-ref href="" name="oval:com.mcafee.oval:def:238335" />
      </check>
    </Rule>
    <Rule id="TheDynamicDnsFeatureOfTheDhcpServerShouldBeDisabled" xml:lang="en" selected="false">
      <title xml:lang="en">The dynamic DNS feature of the DHCP server should be disabled</title>
      <description xml:lang="en">The dynamic DNS feature of the DHCP server should be disabled if enabled, then this is a finding.</description>
      <reference>PCI DSS v3.2 Requirements 2.2.5</reference>
      <reference>https://www.pcisecuritystandards.org</reference>
      <platform idref="cpe:/o:centos:centos:7" />
      <platform idref="cpe:/o:oracle:linux:7" />
      <platform idref="cpe:/o:redhat:enterprise_linux:7" />
      <ident system="www.unifiedcompliance.com">UCF CC ID 06039</ident>
      <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
        <check-content-ref href="" name="oval:com.mcafee.oval:def:200803040051" />
      </check>
    </Rule>
    <Rule id="DisableIPForwarding" xml:lang="en" selected="false">
      <title xml:lang="en">Disable IP Forwarding</title>
      <description xml:lang="en">The net.ipv4.ip_forward flag is used to tell the server whether it can forward packets or not. If the server is not to be used as a router, set the flag to 0. This rule will verify the enable / disable status for net.ipv4.ip_forward.</description>
      <reference>PCI DSS v3.2 Requirements 1</reference>
      <reference>https://www.pcisecuritystandards.org</reference>
      <platform idref="cpe:/o:centos:centos:7" />
      <platform idref="cpe:/o:oracle:linux:7" />
      <platform idref="cpe:/o:redhat:enterprise_linux:7" />
      <ident system="www.unifiedcompliance.com">UCF CC ID 02170</ident>
      <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
        <check-export value-id="Ip_forwardShouldBeEnabledOrDisabled_var" export-name="oval:com.mcafee.oval:var:95957" />
        <check-content-ref href="" name="oval:com.mcafee.oval:def:50620" />
      </check>
    </Rule>
  </Group>
  <Group id="LogonAndPasswordAuthenticationManagement" xml:lang="en">
    <title xml:lang="en">Logon and password authentication management</title>
    <Value id="WhatIsTheMaximumPasswordAge_inDays__var" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">90</value>
    </Value>
    <Value id="WhatIsTheMinimumPasswordAge_inDays__var" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">7</value>
    </Value>
    <Value id="WhatIsTheExpectedPasswordWarningValue_var" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">7</value>
    </Value>
    <Value id="TheMinimumPasswordLength_minlen_RequiredLengthByThePolicy_var" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">14</value>
    </Value>
    <Value id="TheNumberOfNumericCharacters_dcredit_RequiredByThePolicy_var" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">-1</value>
    </Value>
    <Value id="TheNumberOfOtherCharactersRequiredByThePolicy_var" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">-1</value>
    </Value>
    <Value id="TheNumberOfUpperCaseCharacters_ucredit_RequiredByThePolicy_var" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">-1</value>
    </Value>
    <Value id="TheNumberOfLowecaseCharacters_lcredit_RequiredByThePolicy_var" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">-1</value>
    </Value>
    <Value id="TheMaximumNumberPasswordRetryLimit_retry_RequiredByThePolicy._var" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">3</value>
    </Value>
    <Value id="WhatIsTheMaximumNumberTimesTheUseMustBePromptedBeforeReturningTheError._var" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">3</value>
    </Value>
    <Value id="TheNumberOfSpecialCharactersRequiredByThePolicy_var" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">-1</value>
    </Value>
    <Value id="WhatShouldBeTheMinimumPasswordLength_var" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">14</value>
    </Value>
    <Value id="TheNumberOfNumericCharactersRequiredByThePolicy_var" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">-1</value>
    </Value>
    <Value id="TheNumberOfUpperCaseCharactersRequiredWhileSettingThePassword_var" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">-1</value>
    </Value>
    <Value id="TheNumberOfLowecaseCharactersRequiredWhileSettingThePassword_var" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">-1</value>
    </Value>
    <Value id="NumberOfPasswordsToRemember_var" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">5</value>
    </Value>
    <Value id="ShouldEmptyPasswordsBePermitted_var" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">no</value>
    </Value>
    <Value id="WhatIsTheDurationForInactiveUserAccountsLockOut_inDays__var" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">90</value>
    </Value>
    <Rule id="TestTheExistenceOfTheFile_var_run_utmp" xml:lang="en" selected="false">
      <title xml:lang="en">Test the existence of the file /var/run/utmp</title>
      <description xml:lang="en">This check ensures that the file - /var/run/utmp exists on the system.</description>
      <reference>PCI DSS v3.2 Requirements 8</reference>
      <reference>https://www.pcisecuritystandards.org</reference>
      <platform idref="cpe:/o:centos:centos:7" />
      <platform idref="cpe:/o:oracle:linux:7" />
      <platform idref="cpe:/o:redhat:enterprise_linux:7" />
      <ident system="www.unifiedcompliance.com">UCF CC ID 00554</ident>
      <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
        <check-content-ref href="" name="oval:com.mcafee.oval:def:2487289" />
      </check>
    </Rule>
    <Rule id="TestTheExistenceOfTheFile_var_run_btmp" xml:lang="en" selected="false">
      <title xml:lang="en">Test the existence of the file /var/run/btmp</title>
      <description xml:lang="en">This check ensures that the file - /var/run/btmp exists on the system.</description>
      <reference>PCI DSS v3.2 Requirements 8</reference>
      <reference>https://www.pcisecuritystandards.org</reference>
      <platform idref="cpe:/o:centos:centos:7" />
      <platform idref="cpe:/o:oracle:linux:7" />
      <platform idref="cpe:/o:redhat:enterprise_linux:7" />
      <ident system="www.unifiedcompliance.com">UCF CC ID 00554</ident>
      <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
        <check-content-ref href="" name="oval:com.mcafee.oval:def:2487290" />
      </check>
    </Rule>
    <Rule id="SetLockoutForFailedPasswordAttempts" xml:lang="en" selected="false">
      <title xml:lang="en">Set Lockout for Failed Password Attempts</title>
      <description xml:lang="en">This check ensures that the settings are appropriate for password lock out user IDs after n unsuccessful consecutive login attempts in /etc/pam.d/system-auth and /etc/pam.d/password-auth files for pam_faillock parameter.</description>
      <reference>PCI DSS v3.2 Requirements 8.1.6</reference>
      <reference>PCI DSS v3.2 Requirements 8.1.7</reference>
      <reference>https://www.pcisecuritystandards.org</reference>
      <platform idref="cpe:/o:centos:centos:7" />
      <platform idref="cpe:/o:oracle:linux:7" />
      <platform idref="cpe:/o:redhat:enterprise_linux:7" />
      <ident system="www.unifiedcompliance.com">UCF CC ID 00555</ident>
      <ident system="www.unifiedcompliance.com">UCF CC ID 12031</ident>
      <ident system="www.unifiedcompliance.com">UCF CC ID 12002</ident>
      <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
        <check-content-ref href="" name="oval:com.mcafee.oval:def:244697" />
      </check>
    </Rule>
    <Rule id="PasswordSettings_NewUsersToChangeTheirPasswordOnFirstLogon" xml:lang="en" selected="false">
      <title xml:lang="en">Password Settings - new users to change their password on first logon</title>
      <description xml:lang="en">This rule will verify that new users requires to change their password on first logon.</description>
      <reference>PCI DSS v3.2 Requirements 8.1.6</reference>
      <reference>https://www.pcisecuritystandards.org</reference>
      <platform idref="cpe:/o:centos:centos:7" />
      <platform idref="cpe:/o:oracle:linux:7" />
      <platform idref="cpe:/o:redhat:enterprise_linux:7" />
      <ident system="www.unifiedcompliance.com">UCF CC ID 05268</ident>
      <ident system="www.unifiedcompliance.com">UCF CC ID 12031</ident>
      <ident system="www.unifiedcompliance.com">UCF CC ID 12002</ident>
      <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
        <check-content-ref href="" name="oval:com.mcafee.oval:def:2487291" />
      </check>
    </Rule>
    <Rule id="SetBootLoaderPassword" xml:lang="en" selected="false">
      <title xml:lang="en">Set Boot Loader Password</title>
      <description xml:lang="en">This rule will verify that grub require a password to boot the operating system.</description>
      <reference>PCI DSS v3.2 Requirements 8</reference>
      <reference>https://www.pcisecuritystandards.org</reference>
      <platform idref="cpe:/o:centos:centos:7" />
      <platform idref="cpe:/o:oracle:linux:7" />
      <platform idref="cpe:/o:redhat:enterprise_linux:7" />
      <ident system="www.unifiedcompliance.com">UCF CC ID 01576</ident>
      <ident system="www.unifiedcompliance.com">UCF CC ID 12031</ident>
      <ident system="www.unifiedcompliance.com">UCF CC ID 12002</ident>
      <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
        <check-content-ref href="" name="oval:com.mcafee.oval:def:634939" />
      </check>
    </Rule>
    <Rule id="SetPasswordExpirationDays" xml:lang="en" selected="false">
      <title xml:lang="en">Set Password Expiration Days</title>
      <description xml:lang="en">This rule ensures that the maximum expiration days for password is set appropriately in /etc/login.defs. The PASS_MAX_DAYS parameter in /etc/login.defs allows an administrator to force passwords to expire once they reach a defined age. It is recommended that the PASS_MAX_DAYS parameter be set to less than or equal to 90 days.</description>
      <reference>PCI DSS v3.2 Requirements 8.2.4</reference>
      <reference>PCI DSS v3.2 Requirements 2</reference>
      <reference>https://www.pcisecuritystandards.org</reference>
      <platform idref="cpe:/o:centos:centos:7" />
      <platform idref="cpe:/o:oracle:linux:7" />
      <platform idref="cpe:/o:redhat:enterprise_linux:7" />
      <ident system="www.unifiedcompliance.com">UCF CC ID 01704</ident>
      <ident system="www.unifiedcompliance.com">UCF CC ID 01580</ident>
      <ident system="www.unifiedcompliance.com">UCF CC ID 07688</ident>
      <ident system="www.unifiedcompliance.com">UCF CC ID 12031</ident>
      <ident system="www.unifiedcompliance.com">UCF CC ID 12002</ident>
      <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
        <check-export value-id="WhatIsTheMaximumPasswordAge_inDays__var" export-name="oval:com.mcafee.oval:var:79418" />
        <check-content-ref href="" name="oval:com.mcafee.oval:def:7199" />
      </check>
    </Rule>
    <Rule id="SetPasswordChangeMinimumNumberOfDays" xml:lang="en" selected="false">
      <title xml:lang="en">Set Password Change Minimum Number of Days</title>
      <description xml:lang="en">The PASS_MIN_DAYS parameter in /etc/login.defs allows an administrator to prevent users from changing their password until a minimum number of days have passed since the last time the user changed their password. It is recommended that PASS_MIN_DAYS parameter be set to 7 or more days. This rule ensures that the PASS_MIN_DAYS parameter is set appropriately in /etc/login.defs.</description>
      <reference>PCI DSS v3.2 Requirements 8.2.3</reference>
      <reference>PCI DSS v3.2 Requirements 2</reference>
      <reference>https://www.pcisecuritystandards.org</reference>
      <platform idref="cpe:/o:centos:centos:7" />
      <platform idref="cpe:/o:oracle:linux:7" />
      <platform idref="cpe:/o:redhat:enterprise_linux:7" />
      <ident system="www.unifiedcompliance.com">UCF CC ID 01703</ident>
      <ident system="www.unifiedcompliance.com">UCF CC ID 01580</ident>
      <ident system="www.unifiedcompliance.com">UCF CC ID 07711</ident>
      <ident system="www.unifiedcompliance.com">UCF CC ID 12031</ident>
      <ident system="www.unifiedcompliance.com">UCF CC ID 12002</ident>
      <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
        <check-export value-id="WhatIsTheMinimumPasswordAge_inDays__var" export-name="oval:com.mcafee.oval:var:79419" />
        <check-content-ref href="" name="oval:com.mcafee.oval:def:7203" />
      </check>
    </Rule>
    <Rule id="SetPasswordExpiringWarningDays" xml:lang="en" selected="false">
      <title xml:lang="en">Set Password Expiring Warning Days</title>
      <description xml:lang="en">The PASS_WARN_AGE parameter in /etc/login.defs allows an administrator to notify users that their password will expire in a defined number of days. It is recommended that the PASS_WARN_AGE parameter be set to 7 or more days. This rule ensures that the PASS_WARN_AGE parameter is set appropriately in /etc/login.defs.</description>
      <reference>PCI DSS v3.2 Requirements 8.2.4</reference>
      <reference>PCI DSS v3.2 Requirements 2</reference>
      <reference>https://www.pcisecuritystandards.org</reference>
      <platform idref="cpe:/o:centos:centos:7" />
      <platform idref="cpe:/o:oracle:linux:7" />
      <platform idref="cpe:/o:redhat:enterprise_linux:7" />
      <ident system="www.unifiedcompliance.com">UCF CC ID 01702</ident>
      <ident system="www.unifiedcompliance.com">UCF CC ID 01580</ident>
      <ident system="www.unifiedcompliance.com">UCF CC ID 12031</ident>
      <ident system="www.unifiedcompliance.com">UCF CC ID 12002</ident>
      <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
        <check-export value-id="WhatIsTheExpectedPasswordWarningValue_var" export-name="oval:com.mcafee.oval:var:79421" />
        <check-content-ref href="" name="oval:com.mcafee.oval:def:200803070538" />
      </check>
    </Rule>
    <Rule id="PasswordCreationRequirementParametersUsingPam_pwquality_Minlen" xml:lang="en" selected="false">
      <title xml:lang="en">Password Creation Requirement Parameters Using pam_pwquality - minlen</title>
      <description xml:lang="en">This check verifies if the minimum password length on the system matches with what is expected by the user.</description>
      <reference>PCI DSS v3.2 Requirements 8.2.3</reference>
      <reference>https://www.pcisecuritystandards.org</reference>
      <platform idref="cpe:/o:centos:centos:7" />
      <platform idref="cpe:/o:oracle:linux:7" />
      <platform idref="cpe:/o:redhat:enterprise_linux:7" />
      <ident system="www.unifiedcompliance.com">UCF CC ID 01705</ident>
      <ident system="www.unifiedcompliance.com">UCF CC ID 12031</ident>
      <ident system="www.unifiedcompliance.com">UCF CC ID 12002</ident>
      <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
        <check-export value-id="WhatShouldBeTheMinimumPasswordLength_var" export-name="oval:com.mcafee.oval:var:924492" />
        <check-content-ref href="" name="oval:com.mcafee.oval:def:924470" />
      </check>
    </Rule>
    <Rule id="PasswordCreationRequirementParametersUsingPam_pwquality_Try_first_pass" xml:lang="en" selected="false">
      <title xml:lang="en">Password Creation Requirement Parameters Using pam_pwquality - try_first_pass</title>
      <description xml:lang="en">This check verifies if the retrieve password from a previous
        stacked PAM module option is been set. If this is not available, then it would prompt the user for a password.</description>
      <reference>PCI DSS v3.2 Requirements 8.2.3</reference>
      <reference>https://www.pcisecuritystandards.org</reference>
      <platform idref="cpe:/o:centos:centos:7" />
      <platform idref="cpe:/o:oracle:linux:7" />
      <platform idref="cpe:/o:redhat:enterprise_linux:7" />
      <ident system="www.unifiedcompliance.com">UCF CC ID 01706</ident>
      <ident system="www.unifiedcompliance.com">UCF CC ID 12031</ident>
      <ident system="www.unifiedcompliance.com">UCF CC ID 12002</ident>
      <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
        <check-content-ref href="" name="oval:com.mcafee.oval:def:924462" />
      </check>
    </Rule>
    <Rule id="PasswordCreationRequirementParametersUsingPam_pwquality_Dcredit" xml:lang="en" selected="false">
      <title xml:lang="en">Password Creation Requirement Parameters Using pam_pwquality - dcredit</title>
      <description xml:lang="en">Password policy should specify a minimum number of numeric
        characters and all systems should enforce this policy. There may be separate policies for daemon accounts, default accounts and the root account.</description>
      <reference>PCI DSS v3.2 Requirements 8.2.3</reference>
      <reference>PCI DSS v3.2 Requirements 8.2.4</reference>
      <reference>https://www.pcisecuritystandards.org</reference>
      <platform idref="cpe:/o:centos:centos:7" />
      <platform idref="cpe:/o:oracle:linux:7" />
      <platform idref="cpe:/o:redhat:enterprise_linux:7" />
      <ident system="www.unifiedcompliance.com">UCF CC ID 01706</ident>
      <ident system="www.unifiedcompliance.com">UCF CC ID 08717</ident>
      <ident system="www.unifiedcompliance.com">UCF CC ID 12031</ident>
      <ident system="www.unifiedcompliance.com">UCF CC ID 12002</ident>
      <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
        <check-export value-id="TheNumberOfNumericCharactersRequiredByThePolicy_var" export-name="oval:com.mcafee.oval:var:924493" />
        <check-content-ref href="" name="oval:com.mcafee.oval:def:924471" />
      </check>
    </Rule>
    <Rule id="PasswordCreationRequirementParametersUsingPam_pwquality_Ocredit" xml:lang="en" selected="false">
      <title xml:lang="en">Password Creation Requirement Parameters Using pam_pwquality - ocredit</title>
      <description xml:lang="en">This check ensured that the password contains at least one
        special character.</description>
      <reference>PCI DSS v3.2 Requirements 8.2.3</reference>
      <reference>PCI DSS v3.2 Requirements 8.2.4</reference>
      <reference>https://www.pcisecuritystandards.org</reference>
      <platform idref="cpe:/o:centos:centos:7" />
      <platform idref="cpe:/o:oracle:linux:7" />
      <platform idref="cpe:/o:redhat:enterprise_linux:7" />
      <ident system="www.unifiedcompliance.com">UCF CC ID 08720</ident>
      <ident system="www.unifiedcompliance.com">UCF CC ID 01706</ident>
      <ident system="www.unifiedcompliance.com">UCF CC ID 12031</ident>
      <ident system="www.unifiedcompliance.com">UCF CC ID 12002</ident>
      <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
        <check-export value-id="TheNumberOfSpecialCharactersRequiredByThePolicy_var" export-name="oval:com.mcafee.oval:var:924491" />
        <check-content-ref href="" name="oval:com.mcafee.oval:def:924469" />
      </check>
    </Rule>
    <Rule id="PasswordCreationRequirementParametersUsingPam_pwquality_Ucredit" xml:lang="en" selected="false">
      <title xml:lang="en">Password Creation Requirement Parameters Using pam_pwquality - ucredit</title>
      <description xml:lang="en">Password policy should specify a minimum number of upper case characters and all systems should enforce this policy. There may be separate policies for daemon accounts, default accounts and the root account.</description>
      <reference>PCI DSS v3.2 Requirements 8.2.3</reference>
      <reference>PCI DSS v3.2 Requirements 8.2.4</reference>
      <reference>https://www.pcisecuritystandards.org</reference>
      <platform idref="cpe:/o:centos:centos:7" />
      <platform idref="cpe:/o:oracle:linux:7" />
      <platform idref="cpe:/o:redhat:enterprise_linux:7" />
      <ident system="www.unifiedcompliance.com">UCF CC ID 08718</ident>
      <ident system="www.unifiedcompliance.com">UCF CC ID 01706</ident>
      <ident system="www.unifiedcompliance.com">UCF CC ID 12031</ident>
      <ident system="www.unifiedcompliance.com">UCF CC ID 12002</ident>
      <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
        <check-export value-id="TheNumberOfUpperCaseCharactersRequiredWhileSettingThePassword_var" export-name="oval:com.mcafee.oval:var:924494" />
        <check-content-ref href="" name="oval:com.mcafee.oval:def:924472" />
      </check>
    </Rule>
    <Rule id="PasswordCreationRequirementParametersUsingPam_pwquality_Lcredit" xml:lang="en" selected="false">
      <title xml:lang="en">Password Creation Requirement Parameters Using pam_pwquality - lcredit</title>
      <description xml:lang="en">This check ensured that the password contains at least one
        lowercase character.</description>
      <reference>PCI DSS v3.2 Requirements 8.2.3</reference>
      <reference>PCI DSS v3.2 Requirements 8.2.4</reference>
      <reference>https://www.pcisecuritystandards.org</reference>
      <platform idref="cpe:/o:centos:centos:7" />
      <platform idref="cpe:/o:oracle:linux:7" />
      <platform idref="cpe:/o:redhat:enterprise_linux:7" />
      <ident system="www.unifiedcompliance.com">UCF CC ID 08719</ident>
      <ident system="www.unifiedcompliance.com">UCF CC ID 01706</ident>
      <ident system="www.unifiedcompliance.com">UCF CC ID 12031</ident>
      <ident system="www.unifiedcompliance.com">UCF CC ID 12002</ident>
      <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
        <check-export value-id="TheNumberOfLowecaseCharactersRequiredWhileSettingThePassword_var" export-name="oval:com.mcafee.oval:var:924495" />
        <check-content-ref href="" name="oval:com.mcafee.oval:def:924473" />
      </check>
    </Rule>
    <Rule id="PasswordCreationRequirementParametersUsingPam_pwquality_Retry" xml:lang="en" selected="false">
      <title xml:lang="en">Password Creation Requirement Parameters Using pam_pwquality - retry</title>
      <description xml:lang="en">This check verifies if the password retry parameter is set as
        per the user input. It is the maximum number of times the user needs to be prompted before returning with error.</description>
      <reference>PCI DSS v3.2 Requirements 8.2.3</reference>
      <reference>https://www.pcisecuritystandards.org</reference>
      <platform idref="cpe:/o:centos:centos:7" />
      <platform idref="cpe:/o:oracle:linux:7" />
      <platform idref="cpe:/o:redhat:enterprise_linux:7" />
      <ident system="www.unifiedcompliance.com">UCF CC ID 01706</ident>
      <ident system="www.unifiedcompliance.com">UCF CC ID 12031</ident>
      <ident system="www.unifiedcompliance.com">UCF CC ID 12002</ident>
      <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
        <check-export value-id="WhatIsTheMaximumNumberTimesTheUseMustBePromptedBeforeReturningTheError._var" export-name="oval:com.mcafee.oval:var:244432" />
        <check-content-ref href="" name="oval:com.mcafee.oval:def:924463" />
      </check>
    </Rule>
    <Rule id="LimitPasswordReuse" xml:lang="en" selected="false">
      <title xml:lang="en">Limit Password Reuse</title>
      <description xml:lang="en">The /etc/security/opasswd file stores the users' old passwords and can be checked to ensure that users are not recycling recent passwords. Password reuse should be restricted by enforcing password history. This policy should be specified by the security policy and enforced globally. Default accounts, daemon accounts and the root account may have separate password policies.</description>
      <reference>PCI DSS v3.2 Requirements 8.2.5</reference>
      <reference>PCI DSS v3.2 Requirements 8.4</reference>
      <reference>https://www.pcisecuritystandards.org</reference>
      <platform idref="cpe:/o:centos:centos:7" />
      <platform idref="cpe:/o:oracle:linux:7" />
      <platform idref="cpe:/o:redhat:enterprise_linux:7" />
      <ident system="www.unifiedcompliance.com">UCF CC ID 01707</ident>
      <ident system="www.unifiedcompliance.com">UCF CC ID 08722</ident>
      <ident system="www.unifiedcompliance.com">UCF CC ID 08724</ident>
      <ident system="www.unifiedcompliance.com">UCF CC ID 11930</ident>
      <ident system="www.unifiedcompliance.com">UCF CC ID 12357</ident>
      <ident system="www.unifiedcompliance.com">UCF CC ID 12031</ident>
      <ident system="www.unifiedcompliance.com">UCF CC ID 12002</ident>
      <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
        <check-export value-id="NumberOfPasswordsToRemember_var" export-name="oval:com.mcafee.oval:var:51127" />
        <check-content-ref href="" name="oval:com.mcafee.oval:def:54360" />
      </check>
    </Rule>
    <Rule id="SetSSHPermitEmptyPasswordsToNo" xml:lang="en" selected="false">
      <title xml:lang="en">Set SSH PermitEmptyPasswords to No</title>
      <description xml:lang="en">The PermitEmptyPasswords parameter specifies if the server allows login to accounts with empty password strings. This rule ensures that the SSH ermitEmptyPasswords is set appropriately in /etc/ssh/sshd_config file.</description>
      <reference>PCI DSS v3.2 Requirements 8</reference>
      <reference>PCI DSS v3.2 Requirements 8.2.5</reference>
      <reference>https://www.pcisecuritystandards.org</reference>
      <platform idref="cpe:/o:centos:centos:7" />
      <platform idref="cpe:/o:oracle:linux:7" />
      <platform idref="cpe:/o:redhat:enterprise_linux:7" />
      <ident system="www.unifiedcompliance.com">UCF CC ID 05269</ident>
      <ident system="www.unifiedcompliance.com">UCF CC ID 06016</ident>
      <ident system="www.unifiedcompliance.com">UCF CC ID 04475</ident>
      <ident system="www.unifiedcompliance.com">UCF CC ID 12031</ident>
      <ident system="www.unifiedcompliance.com">UCF CC ID 12002</ident>
      <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
        <check-export value-id="ShouldEmptyPasswordsBePermitted_var" export-name="oval:com.mcafee.oval:var:97905" />
        <check-content-ref href="" name="oval:com.mcafee.oval:def:97902" />
      </check>
    </Rule>
    <Rule id="LockInactiveUserAccounts" xml:lang="en" selected="false">
      <title xml:lang="en">Lock Inactive User Accounts</title>
      <description xml:lang="en">User accounts that have been inactive for over a given period of time can be automatically disabled. It is recommended that accounts that are inactive for 35 or more days be disabled. his check verifies if duration of inactive user accounts lockout is set appropriately in /etc/default/useradd file.</description>
      <reference>PCI DSS v3.2 Requirements 8</reference>
      <reference>https://www.pcisecuritystandards.org</reference>
      <platform idref="cpe:/o:centos:centos:7" />
      <platform idref="cpe:/o:oracle:linux:7" />
      <platform idref="cpe:/o:redhat:enterprise_linux:7" />
      <ident system="www.unifiedcompliance.com">UCF CC ID 09921</ident>
      <ident system="www.unifiedcompliance.com">UCF CC ID 11661</ident>
      <ident system="www.unifiedcompliance.com">UCF CC ID 07603</ident>
      <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
        <check-export value-id="WhatIsTheDurationForInactiveUserAccountsLockOut_inDays__var" export-name="oval:com.mcafee.oval:var:232497" />
        <check-content-ref href="" name="oval:com.mcafee.oval:def:242772" />
      </check>
    </Rule>
    <Rule id="TestIfTheSystemLogonBannerIsSetCorrectly_Etc_dconf_db_gdm.d_" xml:lang="en" selected="false">
      <title xml:lang="en">Test if the system logon banner is set correctly - /etc/dconf/db/gdm.d/</title>
      <description xml:lang="en">This check verifies if the system login banner is enabled and set in any file under /etc/dconf/db/gdm.d/ directory.</description>
      <reference>PCI DSS v3.2 Requirements 8</reference>
      <reference>https://www.pcisecuritystandards.org</reference>
      <platform idref="cpe:/o:centos:centos:7" />
      <platform idref="cpe:/o:oracle:linux:7" />
      <platform idref="cpe:/o:redhat:enterprise_linux:7" />
      <ident system="www.unifiedcompliance.com">UCF CC ID 06770</ident>
      <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
        <check-content-ref href="" name="oval:com.mcafee.oval:def:2487485" />
      </check>
    </Rule>
    <Rule id="EnsurePasswordHashingAlgorithmIsSHA_512" xml:lang="en" selected="false">
      <title xml:lang="en">Ensure password hashing algorithm is SHA-512</title>
      <description xml:lang="en">The commands below change password encryption from md5 to sha512 (a much stronger hashing algorithm). All existing accounts will need to perform a password change to upgrade the stored hashes to the new algorithm. This rule verifies if the password hashing algorithm set to SHA-512 in the /etc/pam.d/password-auth and /etc/pam.d/system-auth files.</description>
      <reference>PCI DSS v3.2 Requirements 2.3</reference>
      <reference>https://www.pcisecuritystandards.org</reference>
      <platform idref="cpe:/o:centos:centos:7" />
      <platform idref="cpe:/o:oracle:linux:7" />
      <platform idref="cpe:/o:redhat:enterprise_linux:7" />
      <ident system="www.unifiedcompliance.com">UCF CC ID 11986</ident>
      <ident system="www.unifiedcompliance.com">UCF CC ID 12031</ident>
      <ident system="www.unifiedcompliance.com">UCF CC ID 12002</ident>
      <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
        <check-content-ref href="" name="oval:com.mcafee.oval:def:2487821" />
      </check>
    </Rule>
  </Group>
  <Group id="SystemSecurityParameters" xml:lang="en">
    <title xml:lang="en">System security parameters</title>
    <Value id="ShouldOthersHaveWRITEAccess_var129" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">0</value>
    </Value>
    <Value id="ShouldOthersHaveEXECUTEAccess_var129" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">0</value>
    </Value>
    <Value id="ShouldOthersHaveREADAccess_var129" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">1</value>
    </Value>
    <Value id="ShouldTheUserHaveEXECUTEAccess_var129" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">0</value>
    </Value>
    <Value id="ShouldTheUserHaveREADAccess_var129" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">1</value>
    </Value>
    <Value id="ShouldTheUserHaveWRITEAccess_var129" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">1</value>
    </Value>
    <Value id="ShouldTheGroupHaveWRITEAccess_var129" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">0</value>
    </Value>
    <Value id="ShouldTheGroupHaveREADAccess_var129" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">1</value>
    </Value>
    <Value id="ShouldTheGroupHaveEXECUTEAccess_var129" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">0</value>
    </Value>
    <Value id="WhatIsTheRequiredUserIDOfTheFileOwner_var129" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">0</value>
    </Value>
    <Value id="WhatIsTheRequiredGroupIDOfTheFileOwner_var129" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">0</value>
    </Value>
    <Value id="ShouldOthersHaveWRITEAccess_var128" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">0</value>
    </Value>
    <Value id="ShouldOthersHaveEXECUTEAccess_var128" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">0</value>
    </Value>
    <Value id="ShouldOthersHaveREADAccess_var128" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">1</value>
    </Value>
    <Value id="ShouldTheUserHaveEXECUTEAccess_var128" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">0</value>
    </Value>
    <Value id="ShouldTheUserHaveREADAccess_var128" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">1</value>
    </Value>
    <Value id="ShouldTheUserHaveWRITEAccess_var128" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">1</value>
    </Value>
    <Value id="ShouldTheGroupHaveWRITEAccess_var128" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">0</value>
    </Value>
    <Value id="ShouldTheGroupHaveREADAccess_var128" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">1</value>
    </Value>
    <Value id="ShouldTheGroupHaveEXECUTEAccess_var128" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">0</value>
    </Value>
    <Value id="WhatIsTheRequiredUserIDOfTheFileOwner_var128" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">0</value>
    </Value>
    <Value id="WhatIsTheRequiredGroupIDOfTheFileOwner_var128" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">0</value>
    </Value>
    <Value id="EnterTheNameOfTheRPMPackageToBeVerified._var25" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">tcp_wrappers</value>
    </Value>
    <Value id="EnterTheNameOfTheRPMPackageToBeVerified._var666" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">gpg-pubkey</value>
    </Value>
    <Value id="GpgcheckShouldBeEnabledOrDisabled_var" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">1</value>
    </Value>
    <Value id="WhatIsThePartitionNameForEg._tmpdevshmhomeEtc.__var" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">/tmp</value>
    </Value>
    <Value id="WhatIsThePartitionNameForEg._tmpdevshmhomeEtc.__var1" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">/home</value>
    </Value>
    <Value id="WhatIsThePartitionNameForEg._tmpdevshmhomeEtc.__var2" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">/dev/cdrom</value>
    </Value>
    <Value id="WhatIsThePartitionNameForEg._tmpdevshmhomeEtc.__var5" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">/dev/shm</value>
    </Value>
    <Value id="WhatIsThePartitionNameForEg._tmpdevshmhomeEtc.__var4" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">/dev/cdrom</value>
    </Value>
    <Value id="ShouldOthersHaveWRITEAccess_var15" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">0</value>
    </Value>
    <Value id="ShouldOthersHaveEXECUTEAccess_var15" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">0</value>
    </Value>
    <Value id="ShouldOthersHaveREADAccess_var15" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">0</value>
    </Value>
    <Value id="ShouldTheUserHaveEXECUTEAccess_var15" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">0</value>
    </Value>
    <Value id="ShouldTheUserHaveREADAccess_var15" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">1</value>
    </Value>
    <Value id="ShouldTheUserHaveWRITEAccess_var15" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">1</value>
    </Value>
    <Value id="ShouldTheGroupHaveWRITEAccess_var15" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">0</value>
    </Value>
    <Value id="ShouldTheGroupHaveREADAccess_var15" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">0</value>
    </Value>
    <Value id="ShouldTheGroupHaveEXECUTEAccess_var15" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">0</value>
    </Value>
    <Value id="WhatIsTheRequiredGroupIDOfTheFileOwner_var15" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">0</value>
    </Value>
    <Value id="WhatIsTheRequiredUserIDOfTheFileOwner_var15" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">0</value>
    </Value>
    <Value id="WhatIsTheExpectedSettingForPROMPTInetcsysconfiginit_var0" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">no</value>
    </Value>
    <Value id="WhatIsTheRequiredGroupIDOfTheFileOwner_var13" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">0</value>
    </Value>
    <Value id="WhatIsTheRequiredUserIDOfTheFileOwner_var13" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">0</value>
    </Value>
    <Value id="ShouldOthersHaveWRITEAccess_var13" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">0</value>
    </Value>
    <Value id="ShouldOthersHaveEXECUTEAccess_var13" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">0</value>
    </Value>
    <Value id="ShouldOthersHaveREADAccess_var13" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">0</value>
    </Value>
    <Value id="ShouldTheUserHaveEXECUTEAccess_var13" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">0</value>
    </Value>
    <Value id="ShouldTheUserHaveREADAccess_var13" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">1</value>
    </Value>
    <Value id="ShouldTheUserHaveWRITEAccess_var13" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">1</value>
    </Value>
    <Value id="ShouldTheGroupHaveWRITEAccess_var13" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">0</value>
    </Value>
    <Value id="ShouldTheGroupHaveREADAccess_var13" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">0</value>
    </Value>
    <Value id="ShouldTheGroupHaveEXECUTEAccess_var13" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">0</value>
    </Value>
    <Value id="WhatIsTheRequiredUserIDOfTheFileOwner_var14" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">0</value>
    </Value>
    <Value id="WhatIsTheRequiredGroupIDOfTheFileOwner_var14" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">0</value>
    </Value>
    <Value id="WhatIsTheRequiredUserIDOfTheFileOwner_var21" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">0</value>
    </Value>
    <Value id="ShouldOthersHaveWRITEAccess_var33" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">0</value>
    </Value>
    <Value id="ShouldOthersHaveEXECUTEAccess_var33" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">0</value>
    </Value>
    <Value id="ShouldOthersHaveREADAccess_var33" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">1</value>
    </Value>
    <Value id="ShouldTheUserHaveEXECUTEAccess_var33" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">0</value>
    </Value>
    <Value id="ShouldTheUserHaveREADAccess_var33" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">1</value>
    </Value>
    <Value id="ShouldTheUserHaveWRITEAccess_var33" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">1</value>
    </Value>
    <Value id="ShouldTheGroupHaveWRITEAccess_var33" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">0</value>
    </Value>
    <Value id="ShouldTheGroupHaveREADAccess_var33" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">1</value>
    </Value>
    <Value id="ShouldTheGroupHaveEXECUTEAccess_var33" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">0</value>
    </Value>
    <Value id="WhatIsTheRequiredGroupIDOfTheFileOwner_var21" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">0</value>
    </Value>
    <Value id="WhatIsTheRequiredGroupIDOfTheFileOwner_var20" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">0</value>
    </Value>
    <Value id="WhatIsTheRequiredUserIDOfTheFileOwner_var20" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">0</value>
    </Value>
    <Value id="WhatIsTheRequiredUserIDOfTheFileOwner_var" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">0</value>
    </Value>
    <Value id="WhatIsTheRequiredGroupIDOfTheFileOwner_var" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">0</value>
    </Value>
    <Value id="ShouldOthersHaveWRITEAccess_var" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">1</value>
    </Value>
    <Value id="ShouldOthersHaveEXECUTEAccess_var" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">1</value>
    </Value>
    <Value id="ShouldOthersHaveREADAccess_var" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">1</value>
    </Value>
    <Value id="ShouldTheUserHaveEXECUTEAccess_var" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">1</value>
    </Value>
    <Value id="ShouldTheUserHaveREADAccess_var" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">1</value>
    </Value>
    <Value id="ShouldTheUserHaveWRITEAccess_var" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">1</value>
    </Value>
    <Value id="ShouldTheGroupHaveWRITEAccess_var" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">0</value>
    </Value>
    <Value id="ShouldTheGroupHaveREADAccess_var" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">1</value>
    </Value>
    <Value id="ShouldTheGroupHaveEXECUTEAccess_var" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">1</value>
    </Value>
    <Value id="All.secure_redirectsShouldBeEnabledOrDisabled_var" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">0</value>
    </Value>
    <Value id="Net.ipv4.conf.default.secure_redirectsShouldBeEnabledOrDisabled_var" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">0</value>
    </Value>
    <Value id="Net.ipv4.icmp_ignore_bogus_error_responsesShouldBeEnabledOrDisabled_var" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">1</value>
    </Value>
    <Value id="Rp_filterShouldBeEnabledOrDisabled_var" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">1</value>
    </Value>
    <Value id="Default.rp_filterShouldBeEnabledOrDisabled_var" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">1</value>
    </Value>
    <Value id="WhatIsTheRequiredGroupIDOfTheFileOwner_var23" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">0</value>
    </Value>
    <Value id="WhatIsTheRequiredUserIDOfTheFileOwner_var23" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">0</value>
    </Value>
    <Value id="ShouldOthersHaveWRITEAccess_var21" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">0</value>
    </Value>
    <Value id="ShouldOthersHaveEXECUTEAccess_var21" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">0</value>
    </Value>
    <Value id="ShouldOthersHaveREADAccess_var21" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">0</value>
    </Value>
    <Value id="ShouldTheUserHaveEXECUTEAccess_var21" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">0</value>
    </Value>
    <Value id="ShouldTheUserHaveREADAccess_var21" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">0</value>
    </Value>
    <Value id="ShouldTheUserHaveWRITEAccess_var21" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">0</value>
    </Value>
    <Value id="ShouldTheGroupHaveWRITEAccess_var21" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">0</value>
    </Value>
    <Value id="ShouldTheGroupHaveREADAccess_var21" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">0</value>
    </Value>
    <Value id="ShouldTheGroupHaveEXECUTEAccess_var21" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">0</value>
    </Value>
    <Value id="WhatIsTheRequiredGroupIDOfTheFileOwner_var25" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">0</value>
    </Value>
    <Value id="WhatIsTheRequiredUserIDOfTheFileOwner_var25" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">0</value>
    </Value>
    <Value id="WhatIsTheRequiredGroupIDOfTheFileOwner_var0" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">0</value>
    </Value>
    <Value id="WhatIsTheRequiredGroupIDOfTheFileOwner_var1" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">0</value>
    </Value>
    <Value id="WhatIsTheRequiredUserIDOfTheFileOwner_var0" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">0</value>
    </Value>
    <Value id="WhatIsTheRequiredUserIDOfTheFileOwner_var1" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">0</value>
    </Value>
    <Value id="WhatIsTheRequiredGroupIDOfTheFileOwner_var2" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">0</value>
    </Value>
    <Value id="WhatIsTheRequiredUserIDOfTheFileOwner_var2" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">0</value>
    </Value>
    <Value id="WhatIsTheRequiredGroupIDOfTheFileOwner_var3" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">0</value>
    </Value>
    <Value id="WhatIsTheRequiredGroupIDOfTheFileOwner_var4" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">25</value>
    </Value>
    <Value id="WhatIsTheRequiredUserIDOfTheFileOwner_var3" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">0</value>
    </Value>
    <Value id="WhatIsTheRequiredUserIDOfTheFileOwner_var4" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">0</value>
    </Value>
    <Value id="WhatIsTheRequiredGroupIDOfTheFileOwner_var5" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">25</value>
    </Value>
    <Value id="WhatIsTheRequiredUserIDOfTheFileOwner_var5" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">0</value>
    </Value>
    <Value id="WhatIsTheRequiredUserIDOfTheFileOwner_var6" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">0</value>
    </Value>
    <Value id="WhatIsTheRequiredGroupIDOfTheFileOwner_var8" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">0</value>
    </Value>
    <Value id="WhatIsTheRequiredUserIDOfTheFileOwner_var8" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">0</value>
    </Value>
    <Value id="WhatIsTheRequiredGroupIDOfTheFileOwner_var9" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">0</value>
    </Value>
    <Value id="WhatIsTheRequiredUserIDOfTheFileOwner_var9" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">0</value>
    </Value>
    <Value id="WhatIsTheRequiredGroupIDOfTheFileOwner_var10" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">0</value>
    </Value>
    <Value id="WhatIsTheRequiredGroupIDOfTheFileOwner_var11" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">0</value>
    </Value>
    <Value id="WhatIsTheRequiredUserIDOfTheFileOwner_var10" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">0</value>
    </Value>
    <Value id="WhatIsTheRequiredUserIDOfTheFileOwner_var11" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">0</value>
    </Value>
    <Value id="WhatIsTheRequiredGroupIDOfTheFileOwner_var12" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">0</value>
    </Value>
    <Value id="WhatIsTheRequiredGroupIDOfTheFileOwner_var16" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">0</value>
    </Value>
    <Value id="WhatIsTheRequiredUserIDOfTheFileOwner_var12" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">0</value>
    </Value>
    <Value id="ShouldOthersHaveWRITEAccess_var0" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">0</value>
    </Value>
    <Value id="ShouldOthersHaveEXECUTEAccess_var0" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">0</value>
    </Value>
    <Value id="ShouldOthersHaveREADAccess_var0" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">1</value>
    </Value>
    <Value id="ShouldTheUserHaveEXECUTEAccess_var0" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">0</value>
    </Value>
    <Value id="ShouldTheUserHaveREADAccess_var0" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">1</value>
    </Value>
    <Value id="ShouldTheUserHaveWRITEAccess_var0" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">1</value>
    </Value>
    <Value id="ShouldTheGroupHaveWRITEAccess_var0" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">0</value>
    </Value>
    <Value id="ShouldTheGroupHaveREADAccess_var0" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">1</value>
    </Value>
    <Value id="ShouldTheGroupHaveEXECUTEAccess_var0" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">0</value>
    </Value>
    <Value id="WhatIsTheRequiredGroupIDOfTheFileOwner_var17" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">0</value>
    </Value>
    <Value id="ShouldOthersHaveWRITEAccess_var1" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">0</value>
    </Value>
    <Value id="ShouldOthersHaveEXECUTEAccess_var1" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">0</value>
    </Value>
    <Value id="ShouldOthersHaveREADAccess_var1" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">1</value>
    </Value>
    <Value id="ShouldTheUserHaveEXECUTEAccess_var1" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">0</value>
    </Value>
    <Value id="ShouldTheUserHaveREADAccess_var1" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">1</value>
    </Value>
    <Value id="ShouldTheUserHaveWRITEAccess_var1" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">1</value>
    </Value>
    <Value id="ShouldTheGroupHaveWRITEAccess_var1" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">0</value>
    </Value>
    <Value id="ShouldTheGroupHaveREADAccess_var1" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">1</value>
    </Value>
    <Value id="ShouldTheGroupHaveEXECUTEAccess_var1" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">0</value>
    </Value>
    <Value id="WhatIsTheRequiredUserIDOfTheFileOwner_var16" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">0</value>
    </Value>
    <Value id="WhatIsTheRequiredGroupIDOfTheFileOwner_var18" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">0</value>
    </Value>
    <Value id="ShouldOthersHaveWRITEAccess_var2" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">0</value>
    </Value>
    <Value id="ShouldOthersHaveEXECUTEAccess_var2" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">0</value>
    </Value>
    <Value id="ShouldOthersHaveREADAccess_var2" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">1</value>
    </Value>
    <Value id="ShouldTheUserHaveEXECUTEAccess_var2" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">0</value>
    </Value>
    <Value id="ShouldTheUserHaveREADAccess_var2" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">1</value>
    </Value>
    <Value id="ShouldTheUserHaveWRITEAccess_var2" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">1</value>
    </Value>
    <Value id="ShouldTheGroupHaveWRITEAccess_var2" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">0</value>
    </Value>
    <Value id="ShouldTheGroupHaveREADAccess_var2" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">1</value>
    </Value>
    <Value id="ShouldTheGroupHaveEXECUTEAccess_var2" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">0</value>
    </Value>
    <Value id="WhatIsTheRequiredUserIDOfTheFileOwner_var17" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">0</value>
    </Value>
    <Value id="ShouldOthersHaveWRITEAccess_var3" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">0</value>
    </Value>
    <Value id="ShouldOthersHaveEXECUTEAccess_var3" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">0</value>
    </Value>
    <Value id="ShouldOthersHaveREADAccess_var3" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">1</value>
    </Value>
    <Value id="ShouldTheUserHaveEXECUTEAccess_var3" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">0</value>
    </Value>
    <Value id="ShouldTheUserHaveREADAccess_var3" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">1</value>
    </Value>
    <Value id="ShouldTheUserHaveWRITEAccess_var3" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">1</value>
    </Value>
    <Value id="ShouldTheGroupHaveWRITEAccess_var3" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">0</value>
    </Value>
    <Value id="ShouldTheGroupHaveREADAccess_var3" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">1</value>
    </Value>
    <Value id="ShouldTheGroupHaveEXECUTEAccess_var3" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">0</value>
    </Value>
    <Value id="WhatIsTheRequiredUserIDOfTheFileOwner_var18" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">0</value>
    </Value>
    <Value id="WhatIsTheRequiredGroupIDOfTheFileOwner_var19" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">0</value>
    </Value>
    <Value id="ShouldOthersHaveWRITEAccess_var4" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">0</value>
    </Value>
    <Value id="ShouldOthersHaveEXECUTEAccess_var4" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">0</value>
    </Value>
    <Value id="ShouldOthersHaveREADAccess_var4" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">1</value>
    </Value>
    <Value id="ShouldTheUserHaveEXECUTEAccess_var4" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">0</value>
    </Value>
    <Value id="ShouldTheUserHaveREADAccess_var4" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">1</value>
    </Value>
    <Value id="ShouldTheUserHaveWRITEAccess_var4" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">1</value>
    </Value>
    <Value id="ShouldTheGroupHaveWRITEAccess_var4" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">0</value>
    </Value>
    <Value id="ShouldTheGroupHaveREADAccess_var4" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">1</value>
    </Value>
    <Value id="ShouldTheGroupHaveEXECUTEAccess_var4" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">0</value>
    </Value>
    <Value id="WhatIsTheRequiredUserIDOfTheFileOwner_var19" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">0</value>
    </Value>
    <Value id="WhatIsTheRequiredGroupIDOfTheFileOwner_var24" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">0</value>
    </Value>
    <Value id="ShouldOthersHaveWRITEAccess_var5" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">0</value>
    </Value>
    <Value id="ShouldOthersHaveEXECUTEAccess_var5" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">0</value>
    </Value>
    <Value id="ShouldOthersHaveREADAccess_var5" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">1</value>
    </Value>
    <Value id="ShouldTheUserHaveEXECUTEAccess_var5" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">0</value>
    </Value>
    <Value id="ShouldTheUserHaveREADAccess_var5" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">1</value>
    </Value>
    <Value id="ShouldTheUserHaveWRITEAccess_var5" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">1</value>
    </Value>
    <Value id="ShouldTheGroupHaveWRITEAccess_var5" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">0</value>
    </Value>
    <Value id="ShouldTheGroupHaveREADAccess_var5" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">1</value>
    </Value>
    <Value id="ShouldTheGroupHaveEXECUTEAccess_var5" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">0</value>
    </Value>
    <Value id="WhatIsTheRequiredUserIDOfTheFileOwner_var24" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">0</value>
    </Value>
    <Value id="WhatIsTheRequiredGroupIDOfTheFileOwner_var26" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">0</value>
    </Value>
    <Value id="WhatIsTheRequiredUserIDOfTheFileOwner_var26" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">0</value>
    </Value>
    <Value id="WhatIsTheRequiredGroupIDOfTheFileOwner_var27" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">0</value>
    </Value>
    <Value id="WhatIsTheRequiredGroupIDOfTheFileOwner_var28" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">0</value>
    </Value>
    <Value id="WhatIsTheRequiredUserIDOfTheFileOwner_var27" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">0</value>
    </Value>
    <Value id="WhatIsTheRequiredUserIDOfTheFileOwner_var28" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">0</value>
    </Value>
    <Value id="WhatIsTheRequiredGroupIDOfTheFileOwner_var29" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">0</value>
    </Value>
    <Value id="WhatIsTheRequiredUserIDOfTheFileOwner_var29" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">0</value>
    </Value>
    <Value id="WhatIsTheRequiredGroupIDOfTheFileOwner_var30" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">0</value>
    </Value>
    <Value id="WhatIsTheRequiredUserIDOfTheFileOwner_var30" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">0</value>
    </Value>
    <Value id="WhatIsTheRequiredGroupIDOfTheFileOwner_var31" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">0</value>
    </Value>
    <Value id="WhatIsTheRequiredGroupIDOfTheFileOwner_var32" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">0</value>
    </Value>
    <Value id="WhatIsTheRequiredUserIDOfTheFileOwner_var31" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">0</value>
    </Value>
    <Value id="WhatIsTheRequiredGroupIDOfTheFileOwner_var33" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">0</value>
    </Value>
    <Value id="WhatIsTheRequiredUserIDOfTheFileOwner_var32" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">0</value>
    </Value>
    <Value id="WhatIsTheRequiredGroupIDOfTheFileOwner_var6" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">0</value>
    </Value>
    <Value id="WhatIsTheRequiredGroupIDOfTheFileOwner_var59" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">0</value>
    </Value>
    <Value id="WhatIsTheRequiredUserIDOfTheFileOwner_var59" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">0</value>
    </Value>
    <Value id="WhatIsTheRequiredUserIDOfTheFileOwner_var57" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">0</value>
    </Value>
    <Value id="WhatIsTheRequiredGroupIDOfTheFileOwner_var57" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">0</value>
    </Value>
    <Value id="WhatIsTheRequiredUserIDOfTheFileOwner_var56" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">0</value>
    </Value>
    <Value id="WhatIsTheRequiredGroupIDOfTheFileOwner_var56" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">0</value>
    </Value>
    <Value id="WhatIsTheRequiredGroupIDOfTheFileOwner_var55" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">0</value>
    </Value>
    <Value id="WhatIsTheRequiredUserIDOfTheFileOwner_var55" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">0</value>
    </Value>
    <Value id="WhatIsTheRequiredUserIDOfTheFileOwner_var58" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">0</value>
    </Value>
    <Value id="WhatIsTheRequiredGroupIDOfTheFileOwner_var58" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">0</value>
    </Value>
    <Value id="WhatIsTheRequiredUserIDForvarlogsyslog_var" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">0</value>
    </Value>
    <Value id="WhatIsTheRequiredGroupIDForvarlogsyslog_var" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">0</value>
    </Value>
    <Value id="WhatIsTheExpectedSELinuxState_var" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">enforcing</value>
    </Value>
    <Value id="WhatIsTheExpectedSELinuxPolicy_var" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">targeted</value>
    </Value>
    <Value id="WhatIsTheRequiredUserIDOfTheFileOwner_var33" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">0</value>
    </Value>
    <Value id="WhatIsTheRequiredGroupIDOfTheFileOwner_var34" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">0</value>
    </Value>
    <Value id="WhatIsTheRequiredUserIDOfTheFileOwner_var34" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">0</value>
    </Value>
    <Value id="ShouldOthersHaveWRITEAccess_var28" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">0</value>
    </Value>
    <Value id="ShouldOthersHaveEXECUTEAccess_var28" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">1</value>
    </Value>
    <Value id="ShouldOthersHaveREADAccess_var28" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">1</value>
    </Value>
    <Value id="ShouldTheUserHaveEXECUTEAccess_var28" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">1</value>
    </Value>
    <Value id="ShouldTheUserHaveREADAccess_var28" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">1</value>
    </Value>
    <Value id="ShouldTheUserHaveWRITEAccess_var28" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">1</value>
    </Value>
    <Value id="ShouldTheGroupHaveWRITEAccess_var28" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">0</value>
    </Value>
    <Value id="ShouldTheGroupHaveREADAccess_var28" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">1</value>
    </Value>
    <Value id="ShouldTheGroupHaveEXECUTEAccess_var28" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">1</value>
    </Value>
    <Value id="WhatIsTheRequiredGroupIDOfTheFileOwner_var35" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">0</value>
    </Value>
    <Value id="WhatIsTheRequiredUserIDOfTheFileOwner_var35" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">0</value>
    </Value>
    <Value id="ShouldOthersHaveWRITEAccess_var29" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">0</value>
    </Value>
    <Value id="ShouldOthersHaveEXECUTEAccess_var29" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">1</value>
    </Value>
    <Value id="ShouldOthersHaveREADAccess_var29" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">1</value>
    </Value>
    <Value id="ShouldTheUserHaveEXECUTEAccess_var29" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">1</value>
    </Value>
    <Value id="ShouldTheUserHaveREADAccess_var29" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">1</value>
    </Value>
    <Value id="ShouldTheUserHaveWRITEAccess_var29" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">1</value>
    </Value>
    <Value id="ShouldTheGroupHaveWRITEAccess_var29" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">0</value>
    </Value>
    <Value id="ShouldTheGroupHaveREADAccess_var29" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">1</value>
    </Value>
    <Value id="ShouldTheGroupHaveEXECUTEAccess_var29" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">1</value>
    </Value>
    <Value id="WhatIsTheRequiredGroupIDOfTheFileOwner_var36" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">0</value>
    </Value>
    <Value id="WhatIsTheRequiredUserIDOfTheFileOwner_var36" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">0</value>
    </Value>
    <Value id="WhatIsTheRequiredGroupIDOfTheFileOwner_var37" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">0</value>
    </Value>
    <Value id="WhatIsTheRequiredUserIDOfTheFileOwner_var37" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">0</value>
    </Value>
    <Value id="WhatIsTheRequiredGroupIDOfTheFileOwner_var38" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">0</value>
    </Value>
    <Value id="WhatIsTheRequiredGroupIDOfTheFileOwner_var39" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">0</value>
    </Value>
    <Value id="WhatIsTheRequiredGroupIDOfTheFileOwner_var40" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">0</value>
    </Value>
    <Value id="WhatIsTheRequiredGroupIDOfTheFileOwner_var41" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">0</value>
    </Value>
    <Value id="WhatIsTheRequiredUserIDOfTheFileOwner_var38" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">0</value>
    </Value>
    <Value id="WhatIsTheRequiredUserIDOfTheFileOwner_var39" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">0</value>
    </Value>
    <Value id="WhatIsTheRequiredUserIDOfTheFileOwner_var40" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">0</value>
    </Value>
    <Value id="WhatIsTheRequiredUserIDOfTheFileOwner_var41" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">0</value>
    </Value>
    <Value id="WhatIsTheRequiredUserIDOfTheFileOwner_var42" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">0</value>
    </Value>
    <Value id="WhatIsTheRequiredGroupIDOfTheFileOwner_var42" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">0</value>
    </Value>
    <Value id="WhatIsTheRequiredUserIDOfTheFileOwner_var43" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">0</value>
    </Value>
    <Value id="WhatIsTheRequiredGroupIDOfTheFileOwner_var43" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">0</value>
    </Value>
    <Value id="WhatIsTheExpectedSSHProtocolVersion_var" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">2</value>
    </Value>
    <Value id="SelectSSHLogLevelSetting-TheseAreTheVerbosityLevelsThatAreUsedWhenLoggingMessagesFromSshd._var" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">INFO</value>
    </Value>
    <Value id="AllowX11Forwarding_var" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">no</value>
    </Value>
    <Value id="SetSSHMaxAuthTries-EnterTheIntegerValue._var" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">4</value>
    </Value>
    <Value id="ShouldRhostsBeIgnoredInSSH_var" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">yes</value>
    </Value>
    <Value id="SSHHost-basedAuthenticationShouldBeEnabledOrDisabled_var" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">no</value>
    </Value>
    <Value id="PermitRootLogin_var" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">no</value>
    </Value>
    <Value id="AllowPermitUserEnvironmentSetting_var" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">no</value>
    </Value>
    <Value id="SetSSHClientAliveInterval-EnterTheIntegerValue._var" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">300</value>
    </Value>
    <Value id="SetSSHClientAliveCountMax-EnterTheIntegerValue._var" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">0</value>
    </Value>
    <Value id="WhatShouldBeTheUmaskValue_var" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">077</value>
    </Value>
    <Rule id="TestTheStatusOf-RestrictionOfNFSClientsToPrivilegedPorts" xml:lang="en" selected="false">
      <title xml:lang="en">Test the status of - Restriction of NFS clients to privileged ports</title>
      <description xml:lang="en">This check verifies the configuration in /etc/exports. Setting the secure parameter causes the NFS server process on the local system to ignore NFS client requests 
      that do not originate from the privileged port range (ports less than 1024). This should not hinder normal NFS operations but may block some automated NFS attacks that are run by unprivileged users.</description>
      <reference>PCI DSS v3.2 Requirements 2.2.3</reference>
      <reference>https://www.pcisecuritystandards.org</reference>
      <platform idref="cpe:/o:centos:centos:7" />
      <platform idref="cpe:/o:oracle:linux:7" />
      <platform idref="cpe:/o:redhat:enterprise_linux:7" />
      <ident system="www.unifiedcompliance.com">UCF CC ID 01515</ident>
      <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
        <check-content-ref href="" name="oval:com.mcafee.oval:def:200803060046" />
      </check>
    </Rule>
    <Rule id="SetNodevOptionFor_TmpPartition" xml:lang="en" selected="false">
      <title xml:lang="en">Set nodev option for /tmp Partition</title>
      <description xml:lang="en">The nodev mount option specifies that the filesystem cannot contain special devices. This rule will verify that nodev option is set for /tmp partition in /etc/fstab.</description>
      <reference>PCI DSS v3.2 Requirements 2.2.3</reference>
      <reference>https://www.pcisecuritystandards.org</reference>
      <platform idref="cpe:/o:centos:centos:7" />
      <platform idref="cpe:/o:oracle:linux:7" />
      <platform idref="cpe:/o:redhat:enterprise_linux:7" />
      <ident system="www.unifiedcompliance.com">UCF CC ID 01534</ident>
      <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
        <check-export value-id="WhatIsThePartitionNameForEg._tmpdevshmhomeEtc.__var" export-name="oval:com.mcafee.oval:var:250224" />
        <check-content-ref href="" name="oval:com.mcafee.oval:def:250220" />
      </check>
    </Rule>
    <Rule id="AddNodevOptionTo_Home" xml:lang="en" selected="false">
      <title xml:lang="en">Add nodev Option to /home</title>
      <description xml:lang="en">When set on a file system, this option prevents character and block special devices from being defined, or if they exist, from being used as character and block special devices. This rule will verify that nodev option is set for /home partition in /etc/fstab.</description>
      <reference>PCI DSS v3.2 Requirements 2.2.3</reference>
      <reference>https://www.pcisecuritystandards.org</reference>
      <platform idref="cpe:/o:centos:centos:7" />
      <platform idref="cpe:/o:oracle:linux:7" />
      <platform idref="cpe:/o:redhat:enterprise_linux:7" />
      <ident system="www.unifiedcompliance.com">UCF CC ID 01534</ident>
      <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
        <check-export value-id="WhatIsThePartitionNameForEg._tmpdevshmhomeEtc.__var1" export-name="oval:com.mcafee.oval:var:250224" />
        <check-content-ref href="" name="oval:com.mcafee.oval:def:250220" />
      </check>
    </Rule>
    <Rule id="AddNodevOptionToRemovableMediaPartitions" xml:lang="en" selected="false">
      <title xml:lang="en">Add nodev Option to Removable Media Partitions</title>
      <description xml:lang="en">Set nodev on removable media to prevent character and block special devices that are present on the removable be treated as these device files. This rule will verify that nodev option is set for removable media partitions in /etc/fstab.</description>
      <reference>PCI DSS v3.2 Requirements 2.2.3</reference>
      <reference>https://www.pcisecuritystandards.org</reference>
      <platform idref="cpe:/o:centos:centos:7" />
      <platform idref="cpe:/o:oracle:linux:7" />
      <platform idref="cpe:/o:redhat:enterprise_linux:7" />
      <ident system="www.unifiedcompliance.com">UCF CC ID 01534</ident>
      <ident system="www.unifiedcompliance.com">UCF CC ID 01535</ident>
      <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
        <check-export value-id="WhatIsThePartitionNameForEg._tmpdevshmhomeEtc.__var2" export-name="oval:com.mcafee.oval:var:250224" />
        <check-content-ref href="" name="oval:com.mcafee.oval:def:250220" />
      </check>
    </Rule>
    <Rule id="AddNodevOptionTo_Dev_shmPartition" xml:lang="en" selected="false">
      <title xml:lang="en">Add nodev Option to /dev/shm Partition</title>
      <description xml:lang="en">The nodev mount option specifies that the /dev/shm (temporary filesystem stored in memory) cannot contain block or character special devices. This rule will verify that nodev option is set for /dev/shm partition in /etc/fstab.</description>
      <reference>PCI DSS v3.2 Requirements 2.2.3</reference>
      <reference>https://www.pcisecuritystandards.org</reference>
      <platform idref="cpe:/o:centos:centos:7" />
      <platform idref="cpe:/o:oracle:linux:7" />
      <platform idref="cpe:/o:redhat:enterprise_linux:7" />
      <ident system="www.unifiedcompliance.com">UCF CC ID 01534</ident>
      <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
        <check-export value-id="WhatIsThePartitionNameForEg._tmpdevshmhomeEtc.__var5" export-name="oval:com.mcafee.oval:var:250224" />
        <check-content-ref href="" name="oval:com.mcafee.oval:def:250220" />
      </check>
    </Rule>
    <Rule id="AddNosuidOptionToRemovableMediaPartitions" xml:lang="en" selected="false">
      <title xml:lang="en">Add nosuid Option to Removable Media Partitions</title>
      <description xml:lang="en">Set nosuid on removable media to prevent setuid and setgid executable files that are on that media from being executed as setuid and setgid. This rule will verify that nosuid option is set for removable media partitions in /etc/fstab.</description>
      <reference>PCI DSS v3.2 Requirements 2.2.3</reference>
      <reference>PCI DSS v3.2 Requirements 8</reference>
      <reference>https://www.pcisecuritystandards.org</reference>
      <platform idref="cpe:/o:centos:centos:7" />
      <platform idref="cpe:/o:oracle:linux:7" />
      <platform idref="cpe:/o:redhat:enterprise_linux:7" />
      <ident system="www.unifiedcompliance.com">UCF CC ID 01535</ident>
      <ident system="www.unifiedcompliance.com">UCF CC ID 05447</ident>
      <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
        <check-export value-id="WhatIsThePartitionNameForEg._tmpdevshmhomeEtc.__var4" export-name="oval:com.mcafee.oval:var:250224" />
        <check-content-ref href="" name="oval:com.mcafee.oval:def:250219" />
      </check>
    </Rule>
    <Rule id="TestThePermissionsOfTheFile_Etc_ssh_sshd_config" xml:lang="en" selected="false">
      <title xml:lang="en">Test the permissions of the file - /etc/ssh/sshd_config</title>
      <description xml:lang="en">The /etc/ssh/sshd_config file contains configuration specifications for sshd. The command below sets the owner and group of the file to root. This rule verifies if the permissions of the file /etc/ssh/sshd_config are set appropriately.</description>
      <reference>PCI DSS v3.2 Requirements 8.1.8</reference>
      <reference>https://www.pcisecuritystandards.org</reference>
      <platform idref="cpe:/o:centos:centos:7" />
      <platform idref="cpe:/o:oracle:linux:7" />
      <platform idref="cpe:/o:redhat:enterprise_linux:7" />
      <ident system="www.unifiedcompliance.com">UCF CC ID 04475</ident>
      <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
        <check-export value-id="ShouldTheUserHaveREADAccess_var15" export-name="oval:com.mcafee.oval:var:78640" />
        <check-export value-id="ShouldTheUserHaveWRITEAccess_var15" export-name="oval:com.mcafee.oval:var:78641" />
        <check-export value-id="ShouldTheUserHaveEXECUTEAccess_var15" export-name="oval:com.mcafee.oval:var:78642" />
        <check-export value-id="ShouldTheGroupHaveREADAccess_var15" export-name="oval:com.mcafee.oval:var:78643" />
        <check-export value-id="ShouldTheGroupHaveWRITEAccess_var15" export-name="oval:com.mcafee.oval:var:78644" />
        <check-export value-id="ShouldTheGroupHaveEXECUTEAccess_var15" export-name="oval:com.mcafee.oval:var:78645" />
        <check-export value-id="ShouldOthersHaveREADAccess_var15" export-name="oval:com.mcafee.oval:var:78646" />
        <check-export value-id="ShouldOthersHaveWRITEAccess_var15" export-name="oval:com.mcafee.oval:var:78647" />
        <check-export value-id="ShouldOthersHaveEXECUTEAccess_var15" export-name="oval:com.mcafee.oval:var:78648" />
        <check-content-ref href="" name="oval:com.mcafee.oval:def:78733" />
      </check>
    </Rule>
    <Rule id="TestTheGroupOwnerOfTheFile_Etc_ssh_sshd_config" xml:lang="en" selected="false">
      <title xml:lang="en">Test the Group owner of the file - /etc/ssh/sshd_config</title>
      <description xml:lang="en">The /etc/ssh/sshd_config file contains configuration specifications for sshd. The command below sets the owner and group of the file to root. This rule verifies if the group owner of the file /etc/ssh/sshd_config is set appropriately.</description>
      <reference>PCI DSS v3.2 Requirements 8.1.8</reference>
      <reference>https://www.pcisecuritystandards.org</reference>
      <platform idref="cpe:/o:centos:centos:7" />
      <platform idref="cpe:/o:oracle:linux:7" />
      <platform idref="cpe:/o:redhat:enterprise_linux:7" />
      <ident system="www.unifiedcompliance.com">UCF CC ID 04475</ident>
      <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
        <check-export value-id="WhatIsTheRequiredGroupIDOfTheFileOwner_var15" export-name="oval:com.mcafee.oval:var:80125" />
        <check-content-ref href="" name="oval:com.mcafee.oval:def:78813" />
      </check>
    </Rule>
    <Rule id="TestTheOwnerOfTheFile_Etc_ssh_sshd_config" xml:lang="en" selected="false">
      <title xml:lang="en">Test the owner of the file - /etc/ssh/sshd_config</title>
      <description xml:lang="en">The /etc/ssh/sshd_config file contains configuration specifications for sshd. The command below sets the owner and group of the file to root. This rule verifies if the owner of the file /etc/ssh/sshd_config is set appropriately.</description>
      <reference>PCI DSS v3.2 Requirements 8.1.8</reference>
      <reference>https://www.pcisecuritystandards.org</reference>
      <platform idref="cpe:/o:centos:centos:7" />
      <platform idref="cpe:/o:oracle:linux:7" />
      <platform idref="cpe:/o:redhat:enterprise_linux:7" />
      <ident system="www.unifiedcompliance.com">UCF CC ID 04475</ident>
      <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
        <check-export value-id="WhatIsTheRequiredUserIDOfTheFileOwner_var15" export-name="oval:com.mcafee.oval:var:80228" />
        <check-content-ref href="" name="oval:com.mcafee.oval:def:78890" />
      </check>
    </Rule>
    <Rule id="TestTheEnable_DisableStatusFor-InteractiveBoot" xml:lang="en" selected="false">
      <title xml:lang="en">Test the enable / disable status for -Interactive Boot</title>
      <description xml:lang="en">This check is to verify that Interactive Boot is configured appropriately in /etc/sysconfig/init</description>
      <reference>PCI DSS v3.2 Requirements 8</reference>
      <reference>https://www.pcisecuritystandards.org</reference>
      <platform idref="cpe:/o:centos:centos:7" />
      <platform idref="cpe:/o:oracle:linux:7" />
      <platform idref="cpe:/o:redhat:enterprise_linux:7" />
      <ident system="www.unifiedcompliance.com">UCF CC ID 05283</ident>
      <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
        <check-export value-id="WhatIsTheExpectedSettingForPROMPTInetcsysconfiginit_var0" export-name="oval:com.mcafee.oval:var:249946" />
        <check-content-ref href="" name="oval:com.mcafee.oval:def:249935" />
      </check>
    </Rule>
    <Rule id="VerifyNoLegacy_EntriesExistIn_Etc_passwdFile" xml:lang="en" selected="false">
      <title xml:lang="en">Verify No Legacy "+" Entries Exist in /etc/passwd File</title>
      <description xml:lang="en">The character + in various files used to be markers for systems to insert data from NIS maps at a certain point in a system configuration file. These entries are no longer required on RHEL7/CentOS7/Oracle Linux 7 systems, but may exist in files that have been imported from other platforms. This check will verify if the Access control files contain a plus sign (+) - /etc/passwd.</description>
      <reference>PCI DSS v3.2 Requirements 8</reference>
      <reference>PCI DSS v3.2 Requirements 2</reference>
      <reference>https://www.pcisecuritystandards.org</reference>
      <platform idref="cpe:/o:centos:centos:7" />
      <platform idref="cpe:/o:oracle:linux:7" />
      <platform idref="cpe:/o:redhat:enterprise_linux:7" />
      <ident system="www.unifiedcompliance.com">UCF CC ID 05284</ident>
      <ident system="www.unifiedcompliance.com">UCF CC ID 1584</ident>
      <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
        <check-content-ref href="" name="oval:com.mcafee.oval:def:50674" />
      </check>
    </Rule>
    <Rule id="TestTheGroupOwnerOfTheFile_Etc_at.allow" xml:lang="en" selected="false">
      <title xml:lang="en">Test the Group Owner of the file /etc/at.allow</title>
      <description xml:lang="en">The at daemon works with the cron daemon to allow non-privileged users to submit one time only jobs at their convenience. There are two files that control at: /etc/at.allow and /etc/at.deny. If /etc/at.allow exists, then users listed in the file are the only ones that can create at jobs. If /etc/at.allow does not exist and /etc/at.deny does exist, then any user on the system, with the exception of those listed in /etc/at.deny, are allowed to execute at jobs. An empty /etc/at.deny file allows any user to create at jobs. If neither /etc/at.allow nor /etc/at.deny exist, then only superuser can create at jobs. The commands below remove the /etc/at.deny file and create an empty /etc/at.allow file that can only be read and modified by user and group root. This check verifies if the owner of the file - /etc/cron.d/at.allow is set as per the user input.</description>
      <reference>PCI DSS v3.2 Requirements 8</reference>
      <reference>https://www.pcisecuritystandards.org</reference>
      <platform idref="cpe:/o:centos:centos:7" />
      <platform idref="cpe:/o:oracle:linux:7" />
      <platform idref="cpe:/o:redhat:enterprise_linux:7" />
      <ident system="www.unifiedcompliance.com">UCF CC ID 05299</ident>
      <ident system="www.unifiedcompliance.com">UCF CC ID 01572</ident>
      <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
        <check-export value-id="WhatIsTheRequiredGroupIDOfTheFileOwner_var13" export-name="oval:com.mcafee.oval:var:80125" />
        <check-content-ref href="" name="oval:com.mcafee.oval:def:7245" />
      </check>
    </Rule>
    <Rule id="TestTheOwnerOfTheFile_Etc_at.allow" xml:lang="en" selected="false">
      <title xml:lang="en">Test the owner of the file /etc/at.allow</title>
      <description xml:lang="en">The at daemon works with the cron daemon to allow non-privileged users to submit one time only jobs at their convenience. There are two files that control at: /etc/at.allow and /etc/at.deny. If /etc/at.allow exists, then users listed in the file are the only ones that can create at jobs. If /etc/at.allow does not exist and /etc/at.deny does exist, then any user on the system, with the exception of those listed in /etc/at.deny, are allowed to execute at jobs. An empty /etc/at.deny file allows any user to create at jobs. If neither /etc/at.allow nor /etc/at.deny exist, then only superuser can create at jobs. The commands below remove the /etc/at.deny file and create an empty /etc/at.allow file that can only be read and modified by user and group root. This check verifies if the owner of the file - /etc/at.allow is set as per the user input.</description>
      <reference>PCI DSS v3.2 Requirements 8</reference>
      <reference>https://www.pcisecuritystandards.org</reference>
      <platform idref="cpe:/o:centos:centos:7" />
      <platform idref="cpe:/o:oracle:linux:7" />
      <platform idref="cpe:/o:redhat:enterprise_linux:7" />
      <ident system="www.unifiedcompliance.com">UCF CC ID 05299</ident>
      <ident system="www.unifiedcompliance.com">UCF CC ID 01572</ident>
      <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
        <check-export value-id="WhatIsTheRequiredUserIDOfTheFileOwner_var13" export-name="oval:com.mcafee.oval:var:80228" />
        <check-content-ref href="" name="oval:com.mcafee.oval:def:78859" />
      </check>
    </Rule>
    <Rule id="TestThePermissionsOfTheFile_Etc_at.allow" xml:lang="en" selected="false">
      <title xml:lang="en">Test the permissions of the file - /etc/at.allow</title>
      <description xml:lang="en">The at daemon works with the cron daemon to allow non-privileged users to submit one time only jobs at their convenience. There are two files that control at: /etc/at.allow and /etc/at.deny. If /etc/at.allow exists, then users listed in the file are the only ones that can create at jobs. If /etc/at.allow does not exist and /etc/at.deny does exist, then any user on the system, with the exception of those listed in /etc/at.deny, are allowed to execute at jobs. An empty /etc/at.deny file allows any user to create at jobs. If neither /etc/at.allow nor /etc/at.deny exist, then only superuser can create at jobs. The commands below remove the /etc/at.deny file and create an empty /etc/at.allow file that can only be read and modified by user and group root. This check verifies if the permissions of the file - /etc/at.allow is set as per the user input.</description>
      <reference>PCI DSS v3.2 Requirements 2.3</reference>
      <reference>https://www.pcisecuritystandards.org</reference>
      <platform idref="cpe:/o:centos:centos:7" />
      <platform idref="cpe:/o:oracle:linux:7" />
      <platform idref="cpe:/o:redhat:enterprise_linux:7" />
      <ident system="www.unifiedcompliance.com">UCF CC ID 05299</ident>
      <ident system="www.unifiedcompliance.com">UCF CC ID 01572</ident>
      <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
        <check-export value-id="ShouldTheUserHaveREADAccess_var13" export-name="oval:com.mcafee.oval:var:78640" />
        <check-export value-id="ShouldTheUserHaveWRITEAccess_var13" export-name="oval:com.mcafee.oval:var:78641" />
        <check-export value-id="ShouldTheUserHaveEXECUTEAccess_var13" export-name="oval:com.mcafee.oval:var:78642" />
        <check-export value-id="ShouldTheGroupHaveREADAccess_var13" export-name="oval:com.mcafee.oval:var:78643" />
        <check-export value-id="ShouldTheGroupHaveWRITEAccess_var13" export-name="oval:com.mcafee.oval:var:78644" />
        <check-export value-id="ShouldTheGroupHaveEXECUTEAccess_var13" export-name="oval:com.mcafee.oval:var:78645" />
        <check-export value-id="ShouldOthersHaveREADAccess_var13" export-name="oval:com.mcafee.oval:var:78646" />
        <check-export value-id="ShouldOthersHaveWRITEAccess_var13" export-name="oval:com.mcafee.oval:var:78647" />
        <check-export value-id="ShouldOthersHaveEXECUTEAccess_var13" export-name="oval:com.mcafee.oval:var:78648" />
        <check-content-ref href="" name="oval:com.mcafee.oval:def:78697" />
      </check>
    </Rule>
    <Rule id="TestTheOwnerOfTheFile_Etc_cron.allow" xml:lang="en" selected="false">
      <title xml:lang="en">Test the owner of the file /etc/cron.allow</title>
      <description xml:lang="en">Configure /etc/cron.allow and /etc/at.allow to allow specific users to use these services. If /etc/cron.allow or /etc/at.allow do not exist, then /etc/at.deny and /etc/cron.deny are checked. Any user not specifically defined in those files is allowed to use at and cron. By removing the files, only users in /etc/cron.allow and /etc/at.allow are allowed to use at and cron. Note that even though a given user is not listed in cron.allow, cron jobs can still be run as that user. The cron.allow file only controls administrative access to the crontab command for scheduling and modifying cron jobs. This check verifies if the owner of the file - /etc/cron.allow is set as per the user input.</description>
      <reference>PCI DSS v3.2 Requirements 8</reference>
      <reference>https://www.pcisecuritystandards.org</reference>
      <platform idref="cpe:/o:centos:centos:7" />
      <platform idref="cpe:/o:oracle:linux:7" />
      <platform idref="cpe:/o:redhat:enterprise_linux:7" />
      <ident system="www.unifiedcompliance.com">UCF CC ID 05303</ident>
      <ident system="www.unifiedcompliance.com">UCF CC ID 01572</ident>
      <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
        <check-export value-id="WhatIsTheRequiredUserIDOfTheFileOwner_var14" export-name="oval:com.mcafee.oval:var:80228" />
        <check-content-ref href="" name="oval:com.mcafee.oval:def:78861" />
      </check>
    </Rule>
    <Rule id="TestTheGroupOwnerOfTheFile_Etc_cron.allow" xml:lang="en" selected="false">
      <title xml:lang="en">Test the Group owner of the file /etc/cron.allow</title>
      <description xml:lang="en">Configure /etc/cron.allow and /etc/at.allow to allow specific users to use these services. If /etc/cron.allow or /etc/at.allow do not exist, then /etc/at.deny and /etc/cron.deny are checked. Any user not specifically defined in those files is allowed to use at and cron. By removing the files, only users in /etc/cron.allow and /etc/at.allow are allowed to use at and cron. Note that even though a given user is not listed in cron.allow, cron jobs can still be run as that user. The cron.allow file only controls administrative access to the crontab command for scheduling and modifying cron jobs. This check verifies if the group owner of the file - /etc/cron.allow is set as per the user input.</description>
      <reference>PCI DSS v3.2 Requirements 8</reference>
      <reference>https://www.pcisecuritystandards.org</reference>
      <platform idref="cpe:/o:centos:centos:7" />
      <platform idref="cpe:/o:oracle:linux:7" />
      <platform idref="cpe:/o:redhat:enterprise_linux:7" />
      <ident system="www.unifiedcompliance.com">UCF CC ID 05303</ident>
      <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
        <check-export value-id="WhatIsTheRequiredGroupIDOfTheFileOwner_var14" export-name="oval:com.mcafee.oval:var:80125" />
        <check-content-ref href="" name="oval:com.mcafee.oval:def:7276" />
      </check>
    </Rule>
    <Rule id="TestTheOwnerOfTheFile_Etc_services" xml:lang="en" selected="false">
      <title xml:lang="en">Test the owner of the file - /etc/services</title>
      <description xml:lang="en">This rule will verify the owner of the file - /etc/services.</description>
      <reference>PCI DSS v3.2 Requirements 8</reference>
      <reference>https://www.pcisecuritystandards.org</reference>
      <platform idref="cpe:/o:centos:centos:7" />
      <platform idref="cpe:/o:oracle:linux:7" />
      <platform idref="cpe:/o:redhat:enterprise_linux:7" />
      <ident system="www.unifiedcompliance.com">UCF CC ID 05314</ident>
      <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
        <check-export value-id="WhatIsTheRequiredUserIDOfTheFileOwner_var21" export-name="oval:com.mcafee.oval:var:80228" />
        <check-content-ref href="" name="oval:com.mcafee.oval:def:78887" />
      </check>
    </Rule>
    <Rule id="RestrictAt_cronToAuthorizedUsers_TestTheExistenceOfTheFile_Etc_cron.deny" xml:lang="en" selected="false">
      <title xml:lang="en">Restrict at/cron to Authorized Users - Test the existence of the file - /etc/cron.deny</title>
      <description xml:lang="en">Configure /etc/cron.allow and /etc/at.allow to allow specific users to use these services. If /etc/cron.allow or /etc/at.allow do not exist, then /etc/at.deny and /etc/cron.deny are checked. Any user not specifically defined in those files is allowed to use at and cron. By removing the files, only users in /etc/cron.allow and /etc/at.allow are allowed to use at and cron. Note that even though a given user is not listed in cron.allow, cron jobs can still be run as that user. The cron.allow file only controls administrative access to the crontab command for scheduling and modifying cron jobs. This check ensures that the file /etc/cron.deny does not exist on the system.</description>
      <reference>PCI DSS v3.2 Requirements 8</reference>
      <reference>https://www.pcisecuritystandards.org</reference>
      <platform idref="cpe:/o:centos:centos:7" />
      <platform idref="cpe:/o:oracle:linux:7" />
      <platform idref="cpe:/o:redhat:enterprise_linux:7" />
      <ident system="www.unifiedcompliance.com">UCF CC ID 01572</ident>
      <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
        <check-content-ref href="" name="oval:com.mcafee.oval:def:239207" />
      </check>
    </Rule>
    <Rule id="TestThePermissionsOfTheFile_Etc_services" xml:lang="en" selected="false">
      <title xml:lang="en">Test the permissions of the file - /etc/services</title>
      <description xml:lang="en">This rule will verify the permissions of the file - /etc/services.</description>
      <reference>PCI DSS v3.2 Requirements 2.3</reference>
      <reference>https://www.pcisecuritystandards.org</reference>
      <platform idref="cpe:/o:centos:centos:7" />
      <platform idref="cpe:/o:oracle:linux:7" />
      <platform idref="cpe:/o:redhat:enterprise_linux:7" />
      <ident system="www.unifiedcompliance.com">UCF CC ID 05500</ident>
      <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
        <check-export value-id="ShouldTheUserHaveREADAccess_var33" export-name="oval:com.mcafee.oval:var:78640" />
        <check-export value-id="ShouldTheUserHaveWRITEAccess_var33" export-name="oval:com.mcafee.oval:var:78641" />
        <check-export value-id="ShouldTheUserHaveEXECUTEAccess_var33" export-name="oval:com.mcafee.oval:var:78642" />
        <check-export value-id="ShouldTheGroupHaveREADAccess_var33" export-name="oval:com.mcafee.oval:var:78643" />
        <check-export value-id="ShouldTheGroupHaveWRITEAccess_var33" export-name="oval:com.mcafee.oval:var:78644" />
        <check-export value-id="ShouldTheGroupHaveEXECUTEAccess_var33" export-name="oval:com.mcafee.oval:var:78645" />
        <check-export value-id="ShouldOthersHaveREADAccess_var33" export-name="oval:com.mcafee.oval:var:78646" />
        <check-export value-id="ShouldOthersHaveWRITEAccess_var33" export-name="oval:com.mcafee.oval:var:78647" />
        <check-export value-id="ShouldOthersHaveEXECUTEAccess_var33" export-name="oval:com.mcafee.oval:var:78648" />
        <check-content-ref href="" name="oval:com.mcafee.oval:def:78729" />
      </check>
    </Rule>
    <Rule id="TestTheGroupOwnerOfTheFile_Etc_services" xml:lang="en" selected="false">
      <title xml:lang="en">Test the group owner of the file - /etc/services</title>
      <description xml:lang="en">This rule will verify the group owner of the file - /etc/services.</description>
      <reference>PCI DSS v3.2 Requirements 8</reference>
      <reference>https://www.pcisecuritystandards.org</reference>
      <platform idref="cpe:/o:centos:centos:7" />
      <platform idref="cpe:/o:oracle:linux:7" />
      <platform idref="cpe:/o:redhat:enterprise_linux:7" />
      <ident system="www.unifiedcompliance.com">UCF CC ID 05314</ident>
      <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
        <check-export value-id="WhatIsTheRequiredGroupIDOfTheFileOwner_var21" export-name="oval:com.mcafee.oval:var:80125" />
        <check-content-ref href="" name="oval:com.mcafee.oval:def:78808" />
      </check>
    </Rule>
    <Rule id="TestTheGroupOwnerOfTheFile_Etc_shadow" xml:lang="en" selected="false">
      <title xml:lang="en">Test the Group owner of the file - /etc/shadow</title>
      <description xml:lang="en">The /etc/shadow file contains the one-way cipher text passwords for each user defined in the /etc/passwd file. The command below sets the user and group ownership of the file to root. This rule ensures that the group owner of the file /etc/shadow is set appropriately as per the user input.</description>
      <reference>PCI DSS v3.2 Requirements 8</reference>
      <reference>https://www.pcisecuritystandards.org</reference>
      <platform idref="cpe:/o:centos:centos:7" />
      <platform idref="cpe:/o:oracle:linux:7" />
      <platform idref="cpe:/o:redhat:enterprise_linux:7" />
      <ident system="www.unifiedcompliance.com">UCF CC ID 05326</ident>
      <ident system="www.unifiedcompliance.com">UCF CC ID 11386</ident>
      <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
        <check-export value-id="WhatIsTheRequiredGroupIDOfTheFileOwner_var20" export-name="oval:com.mcafee.oval:var:80125" />
        <check-content-ref href="" name="oval:com.mcafee.oval:def:200802290140" />
      </check>
    </Rule>
    <Rule id="TestTheOwnerOfTheFile_Etc_shadow" xml:lang="en" selected="false">
      <title xml:lang="en">Test the owner of the file - /etc/shadow</title>
      <description xml:lang="en">The /etc/shadow file contains the one-way cipher text passwords for each user defined in the /etc/passwd file. The command below sets the user and group ownership of the file to root.</description>
      <reference>PCI DSS v3.2 Requirements 8</reference>
      <reference>https://www.pcisecuritystandards.org</reference>
      <platform idref="cpe:/o:centos:centos:7" />
      <platform idref="cpe:/o:oracle:linux:7" />
      <platform idref="cpe:/o:redhat:enterprise_linux:7" />
      <ident system="www.unifiedcompliance.com">UCF CC ID 05326</ident>
      <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
        <check-export value-id="WhatIsTheRequiredUserIDOfTheFileOwner_var20" export-name="oval:com.mcafee.oval:var:80228" />
        <check-content-ref href="" name="oval:com.mcafee.oval:def:200802250160" />
      </check>
    </Rule>
    <Rule id="TestTheOwnerOfTheFile_Boot_grub2_grub.cfg" xml:lang="en" selected="false">
      <title xml:lang="en">Test the owner of the file - /boot/grub2/grub.cfg</title>
      <description xml:lang="en">Set the owner of /boot/grub2/grub.cfgto the root user. This rule will verify the owner of the file - /boot/grub2/grub.cfg.</description>
      <reference>PCI DSS v3.2 Requirements 8</reference>
      <reference>https://www.pcisecuritystandards.org</reference>
      <platform idref="cpe:/o:centos:centos:7" />
      <platform idref="cpe:/o:oracle:linux:7" />
      <platform idref="cpe:/o:redhat:enterprise_linux:7" />
      <ident system="www.unifiedcompliance.com">UCF CC ID 05341</ident>
      <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
        <check-export value-id="WhatIsTheRequiredUserIDOfTheFileOwner_var" export-name="oval:com.mcafee.oval:var:80228" />
        <check-content-ref href="" name="oval:com.mcafee.oval:def:634931" />
      </check>
    </Rule>
    <Rule id="TestTheGroupOwnerOfTheFile_Boot_grub2_grub.cfg" xml:lang="en" selected="false">
      <title xml:lang="en">Test the Group owner of the file - /boot/grub2/grub.cfg</title>
      <description xml:lang="en">Set the group of /boot/grub2/grub.cfgto the root user. This rule will verify the group owner of the file - /boot/grub2/grub.cfg.</description>
      <reference>PCI DSS v3.2 Requirements 8</reference>
      <reference>https://www.pcisecuritystandards.org</reference>
      <platform idref="cpe:/o:centos:centos:7" />
      <platform idref="cpe:/o:oracle:linux:7" />
      <platform idref="cpe:/o:redhat:enterprise_linux:7" />
      <ident system="www.unifiedcompliance.com">UCF CC ID 05341</ident>
      <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
        <check-export value-id="WhatIsTheRequiredGroupIDOfTheFileOwner_var" export-name="oval:com.mcafee.oval:var:80125" />
        <check-content-ref href="" name="oval:com.mcafee.oval:def:634932" />
      </check>
    </Rule>
    <Rule id="TestThePermissionsOfTheFile_Boot_grub2_grub.cfg" xml:lang="en" selected="false">
      <title xml:lang="en">Test the permissions of the file - /boot/grub2/grub.cfg</title>
      <description xml:lang="en">Set permission on the /boot/grub2/grub.cfg file to read and write for root only. This rule will verify the permissions of the file - /boot/grub2/grub.cfg.</description>
      <reference>PCI DSS v3.2 Requirements 8</reference>
      <reference>PCI DSS v3.2 Requirements 2.3</reference>
      <reference>https://www.pcisecuritystandards.org</reference>
      <platform idref="cpe:/o:centos:centos:7" />
      <platform idref="cpe:/o:oracle:linux:7" />
      <platform idref="cpe:/o:redhat:enterprise_linux:7" />
      <ident system="www.unifiedcompliance.com">UCF CC ID 05341</ident>
      <ident system="www.unifiedcompliance.com">UCF CC ID 05528</ident>
      <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
        <check-export value-id="ShouldTheUserHaveREADAccess_var" export-name="oval:com.mcafee.oval:var:78640" />
        <check-export value-id="ShouldTheUserHaveWRITEAccess_var" export-name="oval:com.mcafee.oval:var:78641" />
        <check-export value-id="ShouldTheUserHaveEXECUTEAccess_var" export-name="oval:com.mcafee.oval:var:78642" />
        <check-export value-id="ShouldTheGroupHaveREADAccess_var" export-name="oval:com.mcafee.oval:var:78643" />
        <check-export value-id="ShouldTheGroupHaveWRITEAccess_var" export-name="oval:com.mcafee.oval:var:78644" />
        <check-export value-id="ShouldTheGroupHaveEXECUTEAccess_var" export-name="oval:com.mcafee.oval:var:78645" />
        <check-export value-id="ShouldOthersHaveREADAccess_var" export-name="oval:com.mcafee.oval:var:78646" />
        <check-export value-id="ShouldOthersHaveWRITEAccess_var" export-name="oval:com.mcafee.oval:var:78647" />
        <check-export value-id="ShouldOthersHaveEXECUTEAccess_var" export-name="oval:com.mcafee.oval:var:78648" />
        <check-content-ref href="" name="oval:com.mcafee.oval:def:634937" />
      </check>
    </Rule>
    <Rule id="TestTheEnable_DisableStatusFor_Net.ipv4.conf.all.secure_redirects" xml:lang="en" selected="false">
      <title xml:lang="en">Test the enable / disable status for - net.ipv4.conf.all.secure_redirects</title>
      <description xml:lang="en">This rule will verify the enable / disable status for - net.ipv4.conf.all.secure_redirects.</description>
      <reference>PCI DSS v3.2 Requirements 8</reference>
      <reference>https://www.pcisecuritystandards.org</reference>
      <platform idref="cpe:/o:centos:centos:7" />
      <platform idref="cpe:/o:oracle:linux:7" />
      <platform idref="cpe:/o:redhat:enterprise_linux:7" />
      <ident system="www.unifiedcompliance.com">UCF CC ID 09941</ident>
      <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
        <check-export value-id="All.secure_redirectsShouldBeEnabledOrDisabled_var" export-name="oval:com.mcafee.oval:var:79410" />
        <check-content-ref href="" name="oval:com.mcafee.oval:def:200803030006" />
      </check>
    </Rule>
    <Rule id="TestTheEnable_DisableStatusFor_Net.ipv4.conf.default.secure_redirects" xml:lang="en" selected="false">
      <title xml:lang="en">Test the enable / disable status for - net.ipv4.conf.default.secure_redirects</title>
      <description xml:lang="en">This rule will verify the enable / disable status for - net.ipv4.conf.default.secure_redirects.</description>
      <reference>PCI DSS v3.2 Requirements 8</reference>
      <reference>https://www.pcisecuritystandards.org</reference>
      <platform idref="cpe:/o:centos:centos:7" />
      <platform idref="cpe:/o:oracle:linux:7" />
      <platform idref="cpe:/o:redhat:enterprise_linux:7" />
      <ident system="www.unifiedcompliance.com">UCF CC ID 09941</ident>
      <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
        <check-export value-id="Net.ipv4.conf.default.secure_redirectsShouldBeEnabledOrDisabled_var" export-name="oval:com.mcafee.oval:var:95956" />
        <check-content-ref href="" name="oval:com.mcafee.oval:def:50617" />
      </check>
    </Rule>
    <Rule id="EnableBadErrorMessageProtection_Net.ipv4.icmp_ignore_bogus_error_responses" xml:lang="en" selected="false">
      <title xml:lang="en">Enable Bad Error Message Protection - net.ipv4.icmp_ignore_bogus_error_responses</title>
      <description xml:lang="en">Setting icmp_ignore_bogus_error_responses to 1 prevents the kernel from logging bogus responses (RFC-1122 non-compliant) from broadcast reframes, keeping file systems from filling up with useless log messages. This rule verifies the enable / disable status for net.ipv4.icmp_ignore_bogus_error_responses.</description>
      <reference>PCI DSS v3.2 Requirements 8</reference>
      <reference>https://www.pcisecuritystandards.org</reference>
      <platform idref="cpe:/o:centos:centos:7" />
      <platform idref="cpe:/o:oracle:linux:7" />
      <platform idref="cpe:/o:redhat:enterprise_linux:7" />
      <ident system="www.unifiedcompliance.com">UCF CC ID 09942</ident>
      <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
        <check-export value-id="Net.ipv4.icmp_ignore_bogus_error_responsesShouldBeEnabledOrDisabled_var" export-name="oval:com.mcafee.oval:var:245587" />
        <check-content-ref href="" name="oval:com.mcafee.oval:def:245583" />
      </check>
    </Rule>
    <Rule id="EnableRFC_recommendedSourceRouteValidation_Net.ipv4.conf.default.rp_filter" xml:lang="en" selected="false">
      <title xml:lang="en">Enable RFC-recommended Source Route Validation - net.ipv4.conf.default.rp_filter</title>
      <description xml:lang="en">Setting net.ipv4.conf.all.rp_filter and net.ipv4.conf.default.rp_filter to 1 forces the Linux kernel to utilize reverse path filtering on a received packet to determine if the packet was valid. Essentially, with reverse path filtering, if the return packet does not go out the same interface that the corresponding source packet came from, the packet is dropped (and logged if log_martians is set). This rule verifies the enable / disable status for net.ipv4.conf.default.rp_filter.</description>
      <reference>PCI DSS v3.2 Requirements 8</reference>
      <reference>https://www.pcisecuritystandards.org</reference>
      <platform idref="cpe:/o:centos:centos:7" />
      <platform idref="cpe:/o:oracle:linux:7" />
      <platform idref="cpe:/o:redhat:enterprise_linux:7" />
      <ident system="www.unifiedcompliance.com">UCF CC ID 09943</ident>
      <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
        <check-export value-id="Default.rp_filterShouldBeEnabledOrDisabled_var" export-name="oval:com.mcafee.oval:var:79411" />
        <check-content-ref href="" name="oval:com.mcafee.oval:def:50586" />
      </check>
    </Rule>
    <Rule id="EnableRFC_recommendedSourceRouteValidation_Net.ipv4.conf.all.rp_filter" xml:lang="en" selected="false">
      <title xml:lang="en">Enable RFC-recommended Source Route Validation - net.ipv4.conf.all.rp_filter</title>
      <description xml:lang="en">Setting net.ipv4.conf.all.rp_filter and net.ipv4.conf.default.rp_filter to 1 forces the Linux kernel to utilize reverse path filtering on a received packet to determine if the packet was valid. Essentially, with reverse path filtering, if the return packet does not go out the same interface that the corresponding source packet came from, the packet is dropped (and logged if log_martians is set). This rule will verify the enable / disable status for net.ipv4.conf.all.rp_filter.</description>
      <reference>PCI DSS v3.2 Requirements 8</reference>
      <reference>https://www.pcisecuritystandards.org</reference>
      <platform idref="cpe:/o:centos:centos:7" />
      <platform idref="cpe:/o:oracle:linux:7" />
      <platform idref="cpe:/o:redhat:enterprise_linux:7" />
      <ident system="www.unifiedcompliance.com">UCF CC ID 09943</ident>
      <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
        <check-export value-id="Rp_filterShouldBeEnabledOrDisabled_var" export-name="oval:com.mcafee.oval:var:79406" />
        <check-content-ref href="" name="oval:com.mcafee.oval:def:50580" />
      </check>
    </Rule>
    <Rule id="TestTheGroupOwnerOfTheFile_Etc_group" xml:lang="en" selected="false">
      <title xml:lang="en">Test the Group owner of the file - /etc/group</title>
      <description xml:lang="en">The /etc/group file contains a list of all the valid groups defined in the system. The command below allows read/write access for root and read access for everyone else. This rule ensures that the group owner of the file /etc/group is set appropriately as per the user input.</description>
      <reference>PCI DSS v3.2 Requirements 8</reference>
      <reference>https://www.pcisecuritystandards.org</reference>
      <platform idref="cpe:/o:centos:centos:7" />
      <platform idref="cpe:/o:oracle:linux:7" />
      <platform idref="cpe:/o:redhat:enterprise_linux:7" />
      <ident system="www.unifiedcompliance.com">UCF CC ID 05349</ident>
      <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
        <check-export value-id="WhatIsTheRequiredGroupIDOfTheFileOwner_var23" export-name="oval:com.mcafee.oval:var:80125" />
        <check-content-ref href="" name="oval:com.mcafee.oval:def:200802290128" />
      </check>
    </Rule>
    <Rule id="TestTheOwnerOfTheFile_Etc_group" xml:lang="en" selected="false">
      <title xml:lang="en">Test the owner of the file - /etc/group</title>
      <description xml:lang="en">The /etc/group file contains a list of all the valid groups defined in the system. The command below allows read/write access for root and read access for everyone else. This rule ensures that the owner of the file /etc/group is set appropriately as per the user input.</description>
      <reference>PCI DSS v3.2 Requirements 8</reference>
      <reference>https://www.pcisecuritystandards.org</reference>
      <platform idref="cpe:/o:centos:centos:7" />
      <platform idref="cpe:/o:oracle:linux:7" />
      <platform idref="cpe:/o:redhat:enterprise_linux:7" />
      <ident system="www.unifiedcompliance.com">UCF CC ID 05349</ident>
      <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
        <check-export value-id="WhatIsTheRequiredUserIDOfTheFileOwner_var23" export-name="oval:com.mcafee.oval:var:80228" />
        <check-content-ref href="" name="oval:com.mcafee.oval:def:200802250132" />
      </check>
    </Rule>
    <Rule id="TestThePermissionsOfTheFile_Etc_gshadow" xml:lang="en" selected="false">
      <title xml:lang="en">Test the permissions of the file - /etc/gshadow</title>
      <description xml:lang="en">The /etc/gshadow file contains information about group accounts that is critical to the security of those accounts, such as the hashed password and other security information. This rule ensures that the permissions of the file /etc/gshadow
        are set appropriately as per the user input.</description>
      <reference>PCI DSS v3.2 Requirements 2.3</reference>
      <reference>https://www.pcisecuritystandards.org</reference>
      <platform idref="cpe:/o:centos:centos:7" />
      <platform idref="cpe:/o:oracle:linux:7" />
      <platform idref="cpe:/o:redhat:enterprise_linux:7" />
      <ident system="www.unifiedcompliance.com">UCF CC ID 05486</ident>
      <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
        <check-export value-id="ShouldTheUserHaveREADAccess_var21" export-name="oval:com.mcafee.oval:var:78640" />
        <check-export value-id="ShouldTheUserHaveWRITEAccess_var21" export-name="oval:com.mcafee.oval:var:78641" />
        <check-export value-id="ShouldTheUserHaveEXECUTEAccess_var21" export-name="oval:com.mcafee.oval:var:78642" />
        <check-export value-id="ShouldTheGroupHaveREADAccess_var21" export-name="oval:com.mcafee.oval:var:78643" />
        <check-export value-id="ShouldTheGroupHaveWRITEAccess_var21" export-name="oval:com.mcafee.oval:var:78644" />
        <check-export value-id="ShouldTheGroupHaveEXECUTEAccess_var21" export-name="oval:com.mcafee.oval:var:78645" />
        <check-export value-id="ShouldOthersHaveREADAccess_var21" export-name="oval:com.mcafee.oval:var:78646" />
        <check-export value-id="ShouldOthersHaveWRITEAccess_var21" export-name="oval:com.mcafee.oval:var:78647" />
        <check-export value-id="ShouldOthersHaveEXECUTEAccess_var21" export-name="oval:com.mcafee.oval:var:78648" />
        <check-content-ref href="" name="oval:com.mcafee.oval:def:6910" />
      </check>
    </Rule>
    <Rule id="TestTheGroupOwnerOfTheFile_Etc_gshadow" xml:lang="en" selected="false">
      <title xml:lang="en">Test the Group owner of the file - /etc/gshadow</title>
      <description xml:lang="en">The /etc/gshadow file contains information about group accounts that is critical to the security of those accounts, such as the hashed password and other security information. This rule ensures that the group owner of the file /etc/gshadow
        is set appropriately as per the user input.</description>
      <reference>PCI DSS v3.2 Requirements 8</reference>
      <reference>https://www.pcisecuritystandards.org</reference>
      <platform idref="cpe:/o:centos:centos:7" />
      <platform idref="cpe:/o:oracle:linux:7" />
      <platform idref="cpe:/o:redhat:enterprise_linux:7" />
      <ident system="www.unifiedcompliance.com">UCF CC ID 05350</ident>
      <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
        <check-export value-id="WhatIsTheRequiredGroupIDOfTheFileOwner_var25" export-name="oval:com.mcafee.oval:var:80125" />
        <check-content-ref href="" name="oval:com.mcafee.oval:def:200802290148" />
      </check>
    </Rule>
    <Rule id="TestTheOwnerOfTheFile_Etc_gshadow" xml:lang="en" selected="false">
      <title xml:lang="en">Test the owner of the file - /etc/gshadow</title>
      <description xml:lang="en">The /etc/gshadow file contains information about group accounts that is critical to the security of those accounts, such as the hashed password and other security information. This rule ensures that the owner of the file /etc/gshadow file
        is set appropriately as per the user input.</description>
      <reference>PCI DSS v3.2 Requirements 8</reference>
      <reference>https://www.pcisecuritystandards.org</reference>
      <platform idref="cpe:/o:centos:centos:7" />
      <platform idref="cpe:/o:oracle:linux:7" />
      <platform idref="cpe:/o:redhat:enterprise_linux:7" />
      <ident system="www.unifiedcompliance.com">UCF CC ID 05350</ident>
      <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
        <check-export value-id="WhatIsTheRequiredUserIDOfTheFileOwner_var25" export-name="oval:com.mcafee.oval:var:80228" />
        <check-content-ref href="" name="oval:com.mcafee.oval:def:200802250140" />
      </check>
    </Rule>
    <Rule id="TheShellForTheUucpAccountShouldBeAssignedAppropriately." xml:lang="en" selected="false">
      <title xml:lang="en">The shell for the uucp account should be assigned appropriately.</title>
      <description xml:lang="en">The shell for the uucp account should be assigned appropriately. A vulnerability exists in the command line argument handling of uucp which may be exploited by a local user to obtain UUCP uid and gid.</description>
      <reference>PCI DSS v3.2 Requirements 8</reference>
      <reference>https://www.pcisecuritystandards.org</reference>
      <platform idref="cpe:/o:centos:centos:7" />
      <platform idref="cpe:/o:oracle:linux:7" />
      <platform idref="cpe:/o:redhat:enterprise_linux:7" />
      <ident system="www.unifiedcompliance.com">UCF CC ID 05435</ident>
      <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
        <check-content-ref href="" name="oval:com.mcafee.oval:def:8652" />
      </check>
    </Rule>
    <Rule id="TheShellForTheWebservdAccountShouldBeAssignedAppropriately." xml:lang="en" selected="false">
      <title xml:lang="en">The shell for the webservd account should be assigned appropriately.</title>
      <description xml:lang="en">The recommended value for the shell in /etc/passwd is /bin/false. For example: service:x:50:50:service description:/directory:/bin/false</description>
      <reference>PCI DSS v3.2 Requirements 8</reference>
      <reference>https://www.pcisecuritystandards.org</reference>
      <platform idref="cpe:/o:centos:centos:7" />
      <platform idref="cpe:/o:oracle:linux:7" />
      <platform idref="cpe:/o:redhat:enterprise_linux:7" />
      <ident system="www.unifiedcompliance.com">UCF CC ID 05429</ident>
      <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
        <check-content-ref href="" name="oval:com.mcafee.oval:def:8624" />
      </check>
    </Rule>
    <Rule id="TheShellForTheAdmAccountShouldBeAssignedAppropriately." xml:lang="en" selected="false">
      <title xml:lang="en">The shell for the adm account should be assigned appropriately.</title>
      <description xml:lang="en">A non user account should not have a shell assigned to it. The recommended value for the shell in /etc/passwd is /bin/false. For example: service:x:50:50:service description:/directory:/bin/false</description>
      <reference>PCI DSS v3.2 Requirements 8</reference>
      <reference>https://www.pcisecuritystandards.org</reference>
      <platform idref="cpe:/o:centos:centos:7" />
      <platform idref="cpe:/o:oracle:linux:7" />
      <platform idref="cpe:/o:redhat:enterprise_linux:7" />
      <ident system="www.unifiedcompliance.com">UCF CC ID 05433</ident>
      <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
        <check-content-ref href="" name="oval:com.mcafee.oval:def:8644" />
      </check>
    </Rule>
    <Rule id="TheShellForTheBinAccountShouldBeAssignedAppropriately." xml:lang="en" selected="false">
      <title xml:lang="en">The shell for the bin account should be assigned appropriately.</title>
      <description xml:lang="en">A non user account should not have a shell assigned to it. The recommended value for the shell in /etc/passwd is /bin/false. For example: service:x:50:50:service description:/directory:/bin/false</description>
      <reference>PCI DSS v3.2 Requirements 8</reference>
      <reference>https://www.pcisecuritystandards.org</reference>
      <platform idref="cpe:/o:centos:centos:7" />
      <platform idref="cpe:/o:oracle:linux:7" />
      <platform idref="cpe:/o:redhat:enterprise_linux:7" />
      <ident system="www.unifiedcompliance.com">UCF CC ID 05424</ident>
      <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
        <check-content-ref href="" name="oval:com.mcafee.oval:def:8604" />
      </check>
    </Rule>
    <Rule id="TheShellForTheGdmAccountShouldBeAssignedAppropriately." xml:lang="en" selected="false">
      <title xml:lang="en">The shell for the gdm account should be assigned appropriately.</title>
      <description xml:lang="en">A non user account should not have a shell assigned to it. The recommended value for the shell in /etc/passwd is /bin/false. For example: service:x:50:50:service description:/directory:/bin/false</description>
      <reference>PCI DSS v3.2 Requirements 8</reference>
      <reference>https://www.pcisecuritystandards.org</reference>
      <platform idref="cpe:/o:centos:centos:7" />
      <platform idref="cpe:/o:oracle:linux:7" />
      <platform idref="cpe:/o:redhat:enterprise_linux:7" />
      <ident system="www.unifiedcompliance.com">UCF CC ID 05428</ident>
      <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
        <check-content-ref href="" name="oval:com.mcafee.oval:def:8620" />
      </check>
    </Rule>
    <Rule id="TheShellForTheListenAccountShouldBeAssignedAppropriately." xml:lang="en" selected="false">
      <title xml:lang="en">The shell for the listen account should be assigned appropriately.</title>
      <description xml:lang="en">A non user account should not have a shell assigned to it. The recommended value for the shell in /etc/passwd is /bin/false. For example: service:x:50:50:service description:/directory:/bin/false</description>
      <reference>PCI DSS v3.2 Requirements 8</reference>
      <reference>https://www.pcisecuritystandards.org</reference>
      <platform idref="cpe:/o:centos:centos:7" />
      <platform idref="cpe:/o:oracle:linux:7" />
      <platform idref="cpe:/o:redhat:enterprise_linux:7" />
      <ident system="www.unifiedcompliance.com">UCF CC ID 05427</ident>
      <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
        <check-content-ref href="" name="oval:com.mcafee.oval:def:8616" />
      </check>
    </Rule>
    <Rule id="TheShellForTheLpAccountShouldBeAssignedAppropriately." xml:lang="en" selected="false">
      <title xml:lang="en">The shell for the lp account should be assigned appropriately.</title>
      <description xml:lang="en">A non user account should not have a shell assigned to it. The recommended value for the shell in /etc/passwd is /bin/false. For example: service:x:50:50:service description:/directory:/bin/false</description>
      <reference>PCI DSS v3.2 Requirements 8</reference>
      <reference>https://www.pcisecuritystandards.org</reference>
      <platform idref="cpe:/o:centos:centos:7" />
      <platform idref="cpe:/o:oracle:linux:7" />
      <platform idref="cpe:/o:redhat:enterprise_linux:7" />
      <ident system="www.unifiedcompliance.com">UCF CC ID 05434</ident>
      <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
        <check-content-ref href="" name="oval:com.mcafee.oval:def:8648" />
      </check>
    </Rule>
    <Rule id="TheShellForTheNoaccessAccountShouldBeAssignedAppropriately." xml:lang="en" selected="false">
      <title xml:lang="en">The shell for the noaccess account should be assigned appropriately.</title>
      <description xml:lang="en">A non user account should not have a shell assigned to it. The recommended value for the shell in /etc/passwd is /bin/false. For example: service:x:50:50:service description:/directory:/bin/false</description>
      <reference>PCI DSS v3.2 Requirements 8</reference>
      <reference>https://www.pcisecuritystandards.org</reference>
      <platform idref="cpe:/o:centos:centos:7" />
      <platform idref="cpe:/o:oracle:linux:7" />
      <platform idref="cpe:/o:redhat:enterprise_linux:7" />
      <ident system="www.unifiedcompliance.com">UCF CC ID 05431</ident>
      <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
        <check-content-ref href="" name="oval:com.mcafee.oval:def:8632" />
      </check>
    </Rule>
    <Rule id="TheShellForTheNobodyAccountShouldBeAssignedAppropriately." xml:lang="en" selected="false">
      <title xml:lang="en">The shell for the nobody account should be assigned appropriately.</title>
      <description xml:lang="en">A non user account should not have a shell assigned to it. The recommended value for the shell in /etc/passwd is /bin/false. For example: service:x:50:50:service description:/directory:/bin/false</description>
      <reference>PCI DSS v3.2 Requirements 8</reference>
      <reference>https://www.pcisecuritystandards.org</reference>
      <platform idref="cpe:/o:centos:centos:7" />
      <platform idref="cpe:/o:oracle:linux:7" />
      <platform idref="cpe:/o:redhat:enterprise_linux:7" />
      <ident system="www.unifiedcompliance.com">UCF CC ID 05430</ident>
      <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
        <check-content-ref href="" name="oval:com.mcafee.oval:def:8628" />
      </check>
    </Rule>
    <Rule id="TheShellForTheNobody4AccountShouldBeAssignedAppropriately." xml:lang="en" selected="false">
      <title xml:lang="en">The shell for the nobody4 account should be assigned appropriately.</title>
      <description xml:lang="en">A non user account should not have a shell assigned to it. The recommended value for the shell in /etc/passwd is /bin/false. For example: service:x:50:50:service description:/directory:/bin/false</description>
      <reference>PCI DSS v3.2 Requirements 8</reference>
      <reference>https://www.pcisecuritystandards.org</reference>
      <platform idref="cpe:/o:centos:centos:7" />
      <platform idref="cpe:/o:oracle:linux:7" />
      <platform idref="cpe:/o:redhat:enterprise_linux:7" />
      <ident system="www.unifiedcompliance.com">UCF CC ID 05432</ident>
      <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
        <check-content-ref href="" name="oval:com.mcafee.oval:def:8640" />
      </check>
    </Rule>
    <Rule id="TheShellForTheNuucpAccountShouldBeAssignedAppropriately." xml:lang="en" selected="false">
      <title xml:lang="en">The shell for the nuucp account should be assigned appropriately.</title>
      <description xml:lang="en">A non user account should not have a shell assigned to it. The recommended value for the shell in /etc/passwd is /bin/false. For example: service:x:50:50:service description:/directory:/bin/false</description>
      <reference>PCI DSS v3.2 Requirements 8</reference>
      <reference>https://www.pcisecuritystandards.org</reference>
      <platform idref="cpe:/o:centos:centos:7" />
      <platform idref="cpe:/o:oracle:linux:7" />
      <platform idref="cpe:/o:redhat:enterprise_linux:7" />
      <ident system="www.unifiedcompliance.com">UCF CC ID 05425</ident>
      <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
        <check-content-ref href="" name="oval:com.mcafee.oval:def:8608" />
      </check>
    </Rule>
    <Rule id="TheShellForTheSmmspAccountShouldBeAssignedAppropriately." xml:lang="en" selected="false">
      <title xml:lang="en">The shell for the smmsp account should be assigned appropriately.</title>
      <description xml:lang="en">A non user account should not have a shell assigned to it. The recommended value for the shell in /etc/passwd is /bin/false. For example: service:x:50:50:service description:/directory:/bin/false</description>
      <reference>PCI DSS v3.2 Requirements 8</reference>
      <reference>https://www.pcisecuritystandards.org</reference>
      <platform idref="cpe:/o:centos:centos:7" />
      <platform idref="cpe:/o:oracle:linux:7" />
      <platform idref="cpe:/o:redhat:enterprise_linux:7" />
      <ident system="www.unifiedcompliance.com">UCF CC ID 05426</ident>
      <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
        <check-content-ref href="" name="oval:com.mcafee.oval:def:8612" />
      </check>
    </Rule>
    <Rule id="TestTheOwnerOfTheFile_Etc_at.deny" xml:lang="en" selected="false">
      <title xml:lang="en">Test the Owner of the file /etc/at.deny</title>
      <description xml:lang="en">This check verifies if the owner of the file - /etc/at.deny is set as per the user input.</description>
      <reference>PCI DSS v3.2 Requirements 8</reference>
      <reference>https://www.pcisecuritystandards.org</reference>
      <platform idref="cpe:/o:centos:centos:7" />
      <platform idref="cpe:/o:oracle:linux:7" />
      <platform idref="cpe:/o:redhat:enterprise_linux:7" />
      <ident system="www.unifiedcompliance.com">UCF CC ID 05300</ident>
      <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
        <check-export value-id="WhatIsTheRequiredUserIDOfTheFileOwner_var0" export-name="oval:com.mcafee.oval:var:80228" />
        <check-content-ref href="" name="oval:com.mcafee.oval:def:7252" />
      </check>
    </Rule>
    <Rule id="TestTheGroupOwnerOfTheFile_Etc_at.deny" xml:lang="en" selected="false">
      <title xml:lang="en">Test the Group Owner of the file /etc/at.deny</title>
      <description xml:lang="en">This check verifies if the Group owner of the file - /etc/at.deny is set as per the user input.</description>
      <reference>PCI DSS v3.2 Requirements 8</reference>
      <reference>https://www.pcisecuritystandards.org</reference>
      <platform idref="cpe:/o:centos:centos:7" />
      <platform idref="cpe:/o:oracle:linux:7" />
      <platform idref="cpe:/o:redhat:enterprise_linux:7" />
      <ident system="www.unifiedcompliance.com">UCF CC ID 05300</ident>
      <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
        <check-export value-id="WhatIsTheRequiredGroupIDOfTheFileOwner_var1" export-name="oval:com.mcafee.oval:var:80125" />
        <check-content-ref href="" name="oval:com.mcafee.oval:def:79729" />
      </check>
    </Rule>
    <Rule id="TestTheOwnerOfTheFile_Etc_cron.deny" xml:lang="en" selected="false">
      <title xml:lang="en">Test the owner of the file - /etc/cron.deny</title>
      <description xml:lang="en">This check will verify the owner of the file - /etc/cron.deny</description>
      <reference>PCI DSS v3.2 Requirements 8</reference>
      <reference>https://www.pcisecuritystandards.org</reference>
      <platform idref="cpe:/o:centos:centos:7" />
      <platform idref="cpe:/o:oracle:linux:7" />
      <platform idref="cpe:/o:redhat:enterprise_linux:7" />
      <ident system="www.unifiedcompliance.com">UCF CC ID 05304</ident>
      <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
        <check-export value-id="WhatIsTheRequiredUserIDOfTheFileOwner_var1" export-name="oval:com.mcafee.oval:var:80228" />
        <check-content-ref href="" name="oval:com.mcafee.oval:def:2487295" />
      </check>
    </Rule>
    <Rule id="TestTheGroupOwnerOfTheFile_Etc_cron.deny" xml:lang="en" selected="false">
      <title xml:lang="en">Test the Group owner of the file - /etc/cron.deny</title>
      <description xml:lang="en">This check will verify the group owner of the file - /etc/cron.deny</description>
      <reference>PCI DSS v3.2 Requirements 8</reference>
      <reference>https://www.pcisecuritystandards.org</reference>
      <platform idref="cpe:/o:centos:centos:7" />
      <platform idref="cpe:/o:oracle:linux:7" />
      <platform idref="cpe:/o:redhat:enterprise_linux:7" />
      <ident system="www.unifiedcompliance.com">UCF CC ID 05304</ident>
      <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
        <check-export value-id="WhatIsTheRequiredGroupIDOfTheFileOwner_var2" export-name="oval:com.mcafee.oval:var:80125" />
        <check-content-ref href="" name="oval:com.mcafee.oval:def:2487294" />
      </check>
    </Rule>
    <Rule id="TestTheOwnerOfTheFile_Etc_resolv.conf" xml:lang="en" selected="false">
      <title xml:lang="en">Test the owner of the file - /etc/resolv.conf</title>
      <description xml:lang="en">This check will verify the owner of the file - /etc/resolv.conf</description>
      <reference>PCI DSS v3.2 Requirements 8</reference>
      <reference>https://www.pcisecuritystandards.org</reference>
      <platform idref="cpe:/o:centos:centos:7" />
      <platform idref="cpe:/o:oracle:linux:7" />
      <platform idref="cpe:/o:redhat:enterprise_linux:7" />
      <ident system="www.unifiedcompliance.com">UCF CC ID 05306</ident>
      <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
        <check-export value-id="WhatIsTheRequiredUserIDOfTheFileOwner_var2" export-name="oval:com.mcafee.oval:var:80228" />
        <check-content-ref href="" name="oval:com.mcafee.oval:def:99513" />
      </check>
    </Rule>
    <Rule id="TestTheGroupOwnerOfTheFile_Etc_resolv.conf" xml:lang="en" selected="false">
      <title xml:lang="en">Test the group owner of the file - /etc/resolv.conf</title>
      <description xml:lang="en">This check will verify the group owner of the file - /etc/resolv.conf</description>
      <reference>PCI DSS v3.2 Requirements 8</reference>
      <reference>https://www.pcisecuritystandards.org</reference>
      <platform idref="cpe:/o:centos:centos:7" />
      <platform idref="cpe:/o:oracle:linux:7" />
      <platform idref="cpe:/o:redhat:enterprise_linux:7" />
      <ident system="www.unifiedcompliance.com">UCF CC ID 05306</ident>
      <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
        <check-export value-id="WhatIsTheRequiredGroupIDOfTheFileOwner_var3" export-name="oval:com.mcafee.oval:var:80125" />
        <check-content-ref href="" name="oval:com.mcafee.oval:def:99517" />
      </check>
    </Rule>
    <Rule id="TestTheGroupOwnerOfTheFile_Etc_named.conf" xml:lang="en" selected="false">
      <title xml:lang="en">Test the group owner of the file - /etc/named.conf</title>
      <description xml:lang="en">This check will verify the group owner of the file - /etc/named.conf.</description>
      <reference>PCI DSS v3.2 Requirements 8</reference>
      <reference>https://www.pcisecuritystandards.org</reference>
      <platform idref="cpe:/o:centos:centos:7" />
      <platform idref="cpe:/o:oracle:linux:7" />
      <platform idref="cpe:/o:redhat:enterprise_linux:7" />
      <ident system="www.unifiedcompliance.com">UCF CC ID 05308</ident>
      <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
        <check-export value-id="WhatIsTheRequiredGroupIDOfTheFileOwner_var4" export-name="oval:com.mcafee.oval:var:80125" />
        <check-content-ref href="" name="oval:com.mcafee.oval:def:99454" />
      </check>
    </Rule>
    <Rule id="TestTheOwnerOfTheFile_Etc_named.conf" xml:lang="en" selected="false">
      <title xml:lang="en">Test the owner of the file - /etc/named.conf</title>
      <description xml:lang="en">This check will verify the owner of the file - /etc/named.conf</description>
      <reference>PCI DSS v3.2 Requirements 8</reference>
      <reference>https://www.pcisecuritystandards.org</reference>
      <platform idref="cpe:/o:centos:centos:7" />
      <platform idref="cpe:/o:oracle:linux:7" />
      <platform idref="cpe:/o:redhat:enterprise_linux:7" />
      <ident system="www.unifiedcompliance.com">UCF CC ID 05308</ident>
      <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
        <check-export value-id="WhatIsTheRequiredUserIDOfTheFileOwner_var3" export-name="oval:com.mcafee.oval:var:80228" />
        <check-content-ref href="" name="oval:com.mcafee.oval:def:99450" />
      </check>
    </Rule>
    <Rule id="TestTheOwnerOfTheFile_Var_named_chroot_etc_named.confFile" xml:lang="en" selected="false">
      <title xml:lang="en">Test the owner of the file - /var/named/chroot/etc/named.conf file</title>
      <description xml:lang="en">This check will verify the owner of the file - /var/named/chroot/etc/named.conf file</description>
      <reference>PCI DSS v3.2 Requirements 8</reference>
      <reference>https://www.pcisecuritystandards.org</reference>
      <platform idref="cpe:/o:centos:centos:7" />
      <platform idref="cpe:/o:oracle:linux:7" />
      <platform idref="cpe:/o:redhat:enterprise_linux:7" />
      <ident system="www.unifiedcompliance.com">UCF CC ID 05309</ident>
      <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
        <check-export value-id="WhatIsTheRequiredUserIDOfTheFileOwner_var4" export-name="oval:com.mcafee.oval:var:80228" />
        <check-content-ref href="" name="oval:com.mcafee.oval:def:200802250164" />
      </check>
    </Rule>
    <Rule id="TestTheGroupOwnerOfTheFile_Var_named_chroot_etc_named.conf" xml:lang="en" selected="false">
      <title xml:lang="en">Test the group owner of the file - /var/named/chroot/etc/named.conf</title>
      <description xml:lang="en">This check will verify the group owner of the file - /var/named/chroot/etc/named.conf</description>
      <reference>PCI DSS v3.2 Requirements 8</reference>
      <reference>https://www.pcisecuritystandards.org</reference>
      <platform idref="cpe:/o:centos:centos:7" />
      <platform idref="cpe:/o:oracle:linux:7" />
      <platform idref="cpe:/o:redhat:enterprise_linux:7" />
      <ident system="www.unifiedcompliance.com">UCF CC ID 05309</ident>
      <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
        <check-export value-id="WhatIsTheRequiredGroupIDOfTheFileOwner_var5" export-name="oval:com.mcafee.oval:var:80125" />
        <check-content-ref href="" name="oval:com.mcafee.oval:def:200802290136" />
      </check>
    </Rule>
    <Rule id="TestTheOwnerOfTheFile_Etc_exports" xml:lang="en" selected="false">
      <title xml:lang="en">Test the owner of the file - /etc/exports</title>
      <description xml:lang="en">This check will verify the owner of the /etc/exports file</description>
      <reference>PCI DSS v3.2 Requirements 8</reference>
      <reference>https://www.pcisecuritystandards.org</reference>
      <platform idref="cpe:/o:centos:centos:7" />
      <platform idref="cpe:/o:oracle:linux:7" />
      <platform idref="cpe:/o:redhat:enterprise_linux:7" />
      <ident system="www.unifiedcompliance.com">UCF CC ID 05312</ident>
      <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
        <check-export value-id="WhatIsTheRequiredUserIDOfTheFileOwner_var5" export-name="oval:com.mcafee.oval:var:80228" />
        <check-content-ref href="" name="oval:com.mcafee.oval:def:7343" />
      </check>
    </Rule>
    <Rule id="TestTheOwnerOfTheFile_Etc_samba_smb.conf" xml:lang="en" selected="false">
      <title xml:lang="en">Test the owner of the file - /etc/samba/smb.conf</title>
      <description xml:lang="en">This check will verify the owner of the file - /etc/samba/smb.conf</description>
      <reference>PCI DSS v3.2 Requirements 8</reference>
      <reference>https://www.pcisecuritystandards.org</reference>
      <platform idref="cpe:/o:centos:centos:7" />
      <platform idref="cpe:/o:oracle:linux:7" />
      <platform idref="cpe:/o:redhat:enterprise_linux:7" />
      <ident system="www.unifiedcompliance.com">UCF CC ID 05316</ident>
      <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
        <check-export value-id="WhatIsTheRequiredUserIDOfTheFileOwner_var6" export-name="oval:com.mcafee.oval:var:80228" />
        <check-content-ref href="" name="oval:com.mcafee.oval:def:2487304" />
      </check>
    </Rule>
    <Rule id="TestTheGroupOwnerOfTheFile_Etc_samba_smb.conf" xml:lang="en" selected="false">
      <title xml:lang="en">Test the group owner of the file - /etc/samba/smb.conf</title>
      <description xml:lang="en">This check will verify the group owner of the file - /etc/samba/smb.conf</description>
      <reference>PCI DSS v3.2 Requirements 8</reference>
      <reference>https://www.pcisecuritystandards.org</reference>
      <platform idref="cpe:/o:centos:centos:7" />
      <platform idref="cpe:/o:oracle:linux:7" />
      <platform idref="cpe:/o:redhat:enterprise_linux:7" />
      <ident system="www.unifiedcompliance.com">UCF CC ID 05316</ident>
      <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
        <check-export value-id="WhatIsTheRequiredGroupIDOfTheFileOwner_var8" export-name="oval:com.mcafee.oval:var:80125" />
        <check-content-ref href="" name="oval:com.mcafee.oval:def:2487303" />
      </check>
    </Rule>
    <Rule id="TestTheOwnerOf_Usr_bin_smbpasswdFile" xml:lang="en" selected="false">
      <title xml:lang="en">Test the owner of /usr/bin/smbpasswd file</title>
      <description xml:lang="en">This check will verify the owner of /usr/bin/smbpasswd file</description>
      <reference>PCI DSS v3.2 Requirements 8</reference>
      <reference>https://www.pcisecuritystandards.org</reference>
      <platform idref="cpe:/o:centos:centos:7" />
      <platform idref="cpe:/o:oracle:linux:7" />
      <platform idref="cpe:/o:redhat:enterprise_linux:7" />
      <ident system="www.unifiedcompliance.com">UCF CC ID 05317</ident>
      <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
        <check-export value-id="WhatIsTheRequiredUserIDOfTheFileOwner_var8" export-name="oval:com.mcafee.oval:var:80228" />
        <check-content-ref href="" name="oval:com.mcafee.oval:def:7610" />
      </check>
    </Rule>
    <Rule id="TestTheGroupOwnerOfTheFile_Usr_bin_smbpasswd" xml:lang="en" selected="false">
      <title xml:lang="en">Test the group owner of the file /usr/bin/smbpasswd</title>
      <description xml:lang="en">This check will verify the group owner of - /usr/bin/smbpasswd</description>
      <reference>PCI DSS v3.2 Requirements 8</reference>
      <reference>https://www.pcisecuritystandards.org</reference>
      <platform idref="cpe:/o:centos:centos:7" />
      <platform idref="cpe:/o:oracle:linux:7" />
      <platform idref="cpe:/o:redhat:enterprise_linux:7" />
      <ident system="www.unifiedcompliance.com">UCF CC ID 05317</ident>
      <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
        <check-export value-id="WhatIsTheRequiredGroupIDOfTheFileOwner_var9" export-name="oval:com.mcafee.oval:var:80125" />
        <check-content-ref href="" name="oval:com.mcafee.oval:def:7606" />
      </check>
    </Rule>
    <Rule id="TestTheOwnerOfTheFile_Etc_aliases" xml:lang="en" selected="false">
      <title xml:lang="en">Test the owner of the file - /etc/aliases</title>
      <description xml:lang="en">This check will verify the owner of the file - /etc/aliases</description>
      <reference>PCI DSS v3.2 Requirements 8</reference>
      <reference>https://www.pcisecuritystandards.org</reference>
      <platform idref="cpe:/o:centos:centos:7" />
      <platform idref="cpe:/o:oracle:linux:7" />
      <platform idref="cpe:/o:redhat:enterprise_linux:7" />
      <ident system="www.unifiedcompliance.com">UCF CC ID 05318</ident>
      <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
        <check-export value-id="WhatIsTheRequiredUserIDOfTheFileOwner_var9" export-name="oval:com.mcafee.oval:var:80228" />
        <check-content-ref href="" name="oval:com.mcafee.oval:def:7241" />
      </check>
    </Rule>
    <Rule id="TestTheGroupOwnerOfTheFile_Etc_aliases" xml:lang="en" selected="false">
      <title xml:lang="en">Test the group owner of the file - /etc/aliases</title>
      <description xml:lang="en">This check will verify the group owner of the file - /etc/aliases</description>
      <reference>PCI DSS v3.2 Requirements 8</reference>
      <reference>https://www.pcisecuritystandards.org</reference>
      <platform idref="cpe:/o:centos:centos:7" />
      <platform idref="cpe:/o:oracle:linux:7" />
      <platform idref="cpe:/o:redhat:enterprise_linux:7" />
      <ident system="www.unifiedcompliance.com">UCF CC ID 05318</ident>
      <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
        <check-export value-id="WhatIsTheRequiredGroupIDOfTheFileOwner_var10" export-name="oval:com.mcafee.oval:var:80125" />
        <check-content-ref href="" name="oval:com.mcafee.oval:def:78774" />
      </check>
    </Rule>
    <Rule id="TestTheGroupOwnerOfTheFiles_Var_log_secure_" xml:lang="en" selected="false">
      <title xml:lang="en">Test the group owner of the files - /var/log/secure*</title>
      <description xml:lang="en">This check will verify the group owner of the files - /var/log/secure*</description>
      <reference>PCI DSS v3.2 Requirements 8</reference>
      <reference>https://www.pcisecuritystandards.org</reference>
      <platform idref="cpe:/o:centos:centos:7" />
      <platform idref="cpe:/o:oracle:linux:7" />
      <platform idref="cpe:/o:redhat:enterprise_linux:7" />
      <ident system="www.unifiedcompliance.com">UCF CC ID 05319</ident>
      <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
        <check-export value-id="WhatIsTheRequiredGroupIDOfTheFileOwner_var11" export-name="oval:com.mcafee.oval:var:80125" />
        <check-content-ref href="" name="oval:com.mcafee.oval:def:94386" />
      </check>
    </Rule>
    <Rule id="TestTheOwnerOfTheFiles_Var_log_secure_" xml:lang="en" selected="false">
      <title xml:lang="en">Test the owner of the files - /var/log/secure*</title>
      <description xml:lang="en">This check will verify theowner of the files - /var/log/secure* files</description>
      <reference>PCI DSS v3.2 Requirements 8</reference>
      <reference>https://www.pcisecuritystandards.org</reference>
      <platform idref="cpe:/o:centos:centos:7" />
      <platform idref="cpe:/o:oracle:linux:7" />
      <platform idref="cpe:/o:redhat:enterprise_linux:7" />
      <ident system="www.unifiedcompliance.com">UCF CC ID 05319</ident>
      <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
        <check-export value-id="WhatIsTheRequiredUserIDOfTheFileOwner_var10" export-name="oval:com.mcafee.oval:var:80228" />
        <check-content-ref href="" name="oval:com.mcafee.oval:def:94440" />
      </check>
    </Rule>
    <Rule id="TestTheOwnerOfTheFile_Etc_snmp_snmpd.conf" xml:lang="en" selected="false">
      <title xml:lang="en">Test the owner of the file - /etc/snmp/snmpd.conf</title>
      <description xml:lang="en">This check will verify the owner of the file - /etc/snmp/snmpd.conf</description>
      <reference>PCI DSS v3.2 Requirements 8</reference>
      <reference>https://www.pcisecuritystandards.org</reference>
      <platform idref="cpe:/o:centos:centos:7" />
      <platform idref="cpe:/o:oracle:linux:7" />
      <platform idref="cpe:/o:redhat:enterprise_linux:7" />
      <ident system="www.unifiedcompliance.com">UCF CC ID 05321</ident>
      <ident system="www.unifiedcompliance.com">UCF CC ID 12423</ident>
      <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
        <check-export value-id="WhatIsTheRequiredUserIDOfTheFileOwner_var11" export-name="oval:com.mcafee.oval:var:80228" />
        <check-content-ref href="" name="oval:com.mcafee.oval:def:2487315" />
      </check>
    </Rule>
    <Rule id="TestTheGroupOwnerOfTheFile_Etc_snmp_snmpd.conf" xml:lang="en" selected="false">
      <title xml:lang="en">Test the group owner of the file - /etc/snmp/snmpd.conf</title>
      <description xml:lang="en">This check will verify the group owner of the file - /etc/snmp/snmpd.conf</description>
      <reference>PCI DSS v3.2 Requirements 8</reference>
      <reference>https://www.pcisecuritystandards.org</reference>
      <platform idref="cpe:/o:centos:centos:7" />
      <platform idref="cpe:/o:oracle:linux:7" />
      <platform idref="cpe:/o:redhat:enterprise_linux:7" />
      <ident system="www.unifiedcompliance.com">UCF CC ID 05321</ident>
      <ident system="www.unifiedcompliance.com">UCF CC ID 12423</ident>
      <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
        <check-export value-id="WhatIsTheRequiredGroupIDOfTheFileOwner_var12" export-name="oval:com.mcafee.oval:var:80125" />
        <check-content-ref href="" name="oval:com.mcafee.oval:def:2487314" />
      </check>
    </Rule>
    <Rule id="TestTheGroupOwnerOfTheFile_Etc_skel_.bash_logout" xml:lang="en" selected="false">
      <title xml:lang="en">Test the group owner of the file - /etc/skel/.bash_logout</title>
      <description xml:lang="en">This check will verify the group owner of the file - /etc/skel/.bash_logout. Default/Skeleton dot files should be owned by an appropriate group.</description>
      <reference>PCI DSS v3.2 Requirements 8</reference>
      <reference>https://www.pcisecuritystandards.org</reference>
      <platform idref="cpe:/o:centos:centos:7" />
      <platform idref="cpe:/o:oracle:linux:7" />
      <platform idref="cpe:/o:redhat:enterprise_linux:7" />
      <ident system="www.unifiedcompliance.com">UCF CC ID 05333</ident>
      <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
        <check-export value-id="WhatIsTheRequiredGroupIDOfTheFileOwner_var16" export-name="oval:com.mcafee.oval:var:80125" />
        <check-content-ref href="" name="oval:com.mcafee.oval:def:2487322" />
      </check>
    </Rule>
    <Rule id="TestTheOwnerOfTheFile_Etc_skel_.bash_logout" xml:lang="en" selected="false">
      <title xml:lang="en">Test the owner of the file - /etc/skel/.bash_logout</title>
      <description xml:lang="en">This check will verify the owner of the file - /etc/skel/.bash_logout. Default/Skeleton dot files should be owned by an appropriate user.</description>
      <reference>PCI DSS v3.2 Requirements 8</reference>
      <reference>https://www.pcisecuritystandards.org</reference>
      <platform idref="cpe:/o:centos:centos:7" />
      <platform idref="cpe:/o:oracle:linux:7" />
      <platform idref="cpe:/o:redhat:enterprise_linux:7" />
      <ident system="www.unifiedcompliance.com">UCF CC ID 05333</ident>
      <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
        <check-export value-id="WhatIsTheRequiredUserIDOfTheFileOwner_var12" export-name="oval:com.mcafee.oval:var:80228" />
        <check-content-ref href="" name="oval:com.mcafee.oval:def:2487323" />
      </check>
    </Rule>
    <Rule id="TestThePermissionsSetOnTheFile_Etc_skel_.bash_logout" xml:lang="en" selected="false">
      <title xml:lang="en">Test the permissions set on the file - /etc/skel/.bash_logout</title>
      <description xml:lang="en">This check will verify the permissions set on the file - /etc/skel/.bash_logout</description>
      <reference>PCI DSS v3.2 Requirements 8</reference>
      <reference>https://www.pcisecuritystandards.org</reference>
      <platform idref="cpe:/o:centos:centos:7" />
      <platform idref="cpe:/o:oracle:linux:7" />
      <platform idref="cpe:/o:redhat:enterprise_linux:7" />
      <ident system="www.unifiedcompliance.com">UCF CC ID 05333</ident>
      <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
        <check-export value-id="ShouldTheUserHaveREADAccess_var0" export-name="oval:com.mcafee.oval:var:78640" />
        <check-export value-id="ShouldTheUserHaveWRITEAccess_var0" export-name="oval:com.mcafee.oval:var:78641" />
        <check-export value-id="ShouldTheUserHaveEXECUTEAccess_var0" export-name="oval:com.mcafee.oval:var:78642" />
        <check-export value-id="ShouldTheGroupHaveREADAccess_var0" export-name="oval:com.mcafee.oval:var:78643" />
        <check-export value-id="ShouldTheGroupHaveWRITEAccess_var0" export-name="oval:com.mcafee.oval:var:78644" />
        <check-export value-id="ShouldTheGroupHaveEXECUTEAccess_var0" export-name="oval:com.mcafee.oval:var:78645" />
        <check-export value-id="ShouldOthersHaveREADAccess_var0" export-name="oval:com.mcafee.oval:var:78646" />
        <check-export value-id="ShouldOthersHaveWRITEAccess_var0" export-name="oval:com.mcafee.oval:var:78647" />
        <check-export value-id="ShouldOthersHaveEXECUTEAccess_var0" export-name="oval:com.mcafee.oval:var:78648" />
        <check-content-ref href="" name="oval:com.mcafee.oval:def:2487324" />
      </check>
    </Rule>
    <Rule id="TestTheGroupOwnerOfTheFile_Etc_skel_.bash_profile" xml:lang="en" selected="false">
      <title xml:lang="en">Test the group owner of the file - /etc/skel/.bash_profile</title>
      <description xml:lang="en">This check will verify the group owner of the file - /etc/skel/.bash_profile. Default/Skeleton dot files should be owned by an appropriate group.</description>
      <reference>PCI DSS v3.2 Requirements 8</reference>
      <reference>https://www.pcisecuritystandards.org</reference>
      <platform idref="cpe:/o:centos:centos:7" />
      <platform idref="cpe:/o:oracle:linux:7" />
      <platform idref="cpe:/o:redhat:enterprise_linux:7" />
      <ident system="www.unifiedcompliance.com">UCF CC ID 05333</ident>
      <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
        <check-export value-id="WhatIsTheRequiredGroupIDOfTheFileOwner_var17" export-name="oval:com.mcafee.oval:var:80125" />
        <check-content-ref href="" name="oval:com.mcafee.oval:def:2487330" />
      </check>
    </Rule>
    <Rule id="TestThePermissionsSetOnTheFile_Etc_skel_.bash_profile" xml:lang="en" selected="false">
      <title xml:lang="en">Test the permissions set on the file - /etc/skel/.bash_profile</title>
      <description xml:lang="en">This check will verify the permissions set on the file - /etc/skel/.bash_profile</description>
      <reference>PCI DSS v3.2 Requirements 8</reference>
      <reference>https://www.pcisecuritystandards.org</reference>
      <platform idref="cpe:/o:centos:centos:7" />
      <platform idref="cpe:/o:oracle:linux:7" />
      <platform idref="cpe:/o:redhat:enterprise_linux:7" />
      <ident system="www.unifiedcompliance.com">UCF CC ID 05333</ident>
      <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
        <check-export value-id="ShouldTheUserHaveREADAccess_var1" export-name="oval:com.mcafee.oval:var:78640" />
        <check-export value-id="ShouldTheUserHaveWRITEAccess_var1" export-name="oval:com.mcafee.oval:var:78641" />
        <check-export value-id="ShouldTheUserHaveEXECUTEAccess_var1" export-name="oval:com.mcafee.oval:var:78642" />
        <check-export value-id="ShouldTheGroupHaveREADAccess_var1" export-name="oval:com.mcafee.oval:var:78643" />
        <check-export value-id="ShouldTheGroupHaveWRITEAccess_var1" export-name="oval:com.mcafee.oval:var:78644" />
        <check-export value-id="ShouldTheGroupHaveEXECUTEAccess_var1" export-name="oval:com.mcafee.oval:var:78645" />
        <check-export value-id="ShouldOthersHaveREADAccess_var1" export-name="oval:com.mcafee.oval:var:78646" />
        <check-export value-id="ShouldOthersHaveWRITEAccess_var1" export-name="oval:com.mcafee.oval:var:78647" />
        <check-export value-id="ShouldOthersHaveEXECUTEAccess_var1" export-name="oval:com.mcafee.oval:var:78648" />
        <check-content-ref href="" name="oval:com.mcafee.oval:def:2487332" />
      </check>
    </Rule>
    <Rule id="TestTheOwnerOfTheFile_Etc_skel_.bash_profile" xml:lang="en" selected="false">
      <title xml:lang="en">Test the owner of the file - /etc/skel/.bash_profile</title>
      <description xml:lang="en">This check will verify the owner of the file - /etc/skel/.bash_profile. Default/Skeleton dot files should be owned by an appropriate user.</description>
      <reference>PCI DSS v3.2 Requirements 8</reference>
      <reference>https://www.pcisecuritystandards.org</reference>
      <platform idref="cpe:/o:centos:centos:7" />
      <platform idref="cpe:/o:oracle:linux:7" />
      <platform idref="cpe:/o:redhat:enterprise_linux:7" />
      <ident system="www.unifiedcompliance.com">UCF CC ID 05333</ident>
      <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
        <check-export value-id="WhatIsTheRequiredUserIDOfTheFileOwner_var16" export-name="oval:com.mcafee.oval:var:80228" />
        <check-content-ref href="" name="oval:com.mcafee.oval:def:2487331" />
      </check>
    </Rule>
    <Rule id="TestTheGroupOwnerOfTheFile_Etc_skel_.bashrc" xml:lang="en" selected="false">
      <title xml:lang="en">Test the group owner of the file - /etc/skel/.bashrc</title>
      <description xml:lang="en">This check will verify the group owner of the file - /etc/skel/.bashrc. Default/Skeleton dot files should be owned by an appropriate group.</description>
      <reference>PCI DSS v3.2 Requirements 8</reference>
      <reference>https://www.pcisecuritystandards.org</reference>
      <platform idref="cpe:/o:centos:centos:7" />
      <platform idref="cpe:/o:oracle:linux:7" />
      <platform idref="cpe:/o:redhat:enterprise_linux:7" />
      <ident system="www.unifiedcompliance.com">UCF CC ID 05333</ident>
      <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
        <check-export value-id="WhatIsTheRequiredGroupIDOfTheFileOwner_var18" export-name="oval:com.mcafee.oval:var:80125" />
        <check-content-ref href="" name="oval:com.mcafee.oval:def:2487340" />
      </check>
    </Rule>
    <Rule id="TestThePermissionsSetOnTheFile_Etc_skel_.bashrc" xml:lang="en" selected="false">
      <title xml:lang="en">Test the permissions set on the file - /etc/skel/.bashrc</title>
      <description xml:lang="en">This check will verify the permissions set on the file - /etc/skel/.bashrc</description>
      <reference>PCI DSS v3.2 Requirements 8</reference>
      <reference>https://www.pcisecuritystandards.org</reference>
      <platform idref="cpe:/o:centos:centos:7" />
      <platform idref="cpe:/o:oracle:linux:7" />
      <platform idref="cpe:/o:redhat:enterprise_linux:7" />
      <ident system="www.unifiedcompliance.com">UCF CC ID 05333</ident>
      <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
        <check-export value-id="ShouldTheUserHaveREADAccess_var2" export-name="oval:com.mcafee.oval:var:78640" />
        <check-export value-id="ShouldTheUserHaveWRITEAccess_var2" export-name="oval:com.mcafee.oval:var:78641" />
        <check-export value-id="ShouldTheUserHaveEXECUTEAccess_var2" export-name="oval:com.mcafee.oval:var:78642" />
        <check-export value-id="ShouldTheGroupHaveREADAccess_var2" export-name="oval:com.mcafee.oval:var:78643" />
        <check-export value-id="ShouldTheGroupHaveWRITEAccess_var2" export-name="oval:com.mcafee.oval:var:78644" />
        <check-export value-id="ShouldTheGroupHaveEXECUTEAccess_var2" export-name="oval:com.mcafee.oval:var:78645" />
        <check-export value-id="ShouldOthersHaveREADAccess_var2" export-name="oval:com.mcafee.oval:var:78646" />
        <check-export value-id="ShouldOthersHaveWRITEAccess_var2" export-name="oval:com.mcafee.oval:var:78647" />
        <check-export value-id="ShouldOthersHaveEXECUTEAccess_var2" export-name="oval:com.mcafee.oval:var:78648" />
        <check-content-ref href="" name="oval:com.mcafee.oval:def:2487339" />
      </check>
    </Rule>
    <Rule id="TestTheOwnerOfTheFile_Etc_skel_.bashrc" xml:lang="en" selected="false">
      <title xml:lang="en">Test the owner of the file - /etc/skel/.bashrc</title>
      <description xml:lang="en">This check will verify the owner of the file - /etc/skel/.bashrc. Default/Skeleton dot files should be owned by an appropriate user.</description>
      <reference>PCI DSS v3.2 Requirements 8</reference>
      <reference>https://www.pcisecuritystandards.org</reference>
      <platform idref="cpe:/o:centos:centos:7" />
      <platform idref="cpe:/o:oracle:linux:7" />
      <platform idref="cpe:/o:redhat:enterprise_linux:7" />
      <ident system="www.unifiedcompliance.com">UCF CC ID 05333</ident>
      <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
        <check-export value-id="WhatIsTheRequiredUserIDOfTheFileOwner_var17" export-name="oval:com.mcafee.oval:var:80228" />
        <check-content-ref href="" name="oval:com.mcafee.oval:def:2487338" />
      </check>
    </Rule>
    <Rule id="TestThePermissionsOfTheFile_Etc_auto.master" xml:lang="en" selected="false">
      <title xml:lang="en">Test the permissions of the file - /etc/auto.master</title>
      <description xml:lang="en">This check will verify the permissions of the file - /etc/auto.master</description>
      <reference>PCI DSS v3.2 Requirements 8</reference>
      <reference>https://www.pcisecuritystandards.org</reference>
      <platform idref="cpe:/o:centos:centos:7" />
      <platform idref="cpe:/o:oracle:linux:7" />
      <platform idref="cpe:/o:redhat:enterprise_linux:7" />
      <ident system="www.unifiedcompliance.com">UCF CC ID 05338</ident>
      <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
        <check-export value-id="ShouldTheUserHaveREADAccess_var3" export-name="oval:com.mcafee.oval:var:78640" />
        <check-export value-id="ShouldTheUserHaveWRITEAccess_var3" export-name="oval:com.mcafee.oval:var:78641" />
        <check-export value-id="ShouldTheUserHaveEXECUTEAccess_var3" export-name="oval:com.mcafee.oval:var:78642" />
        <check-export value-id="ShouldTheGroupHaveREADAccess_var3" export-name="oval:com.mcafee.oval:var:78643" />
        <check-export value-id="ShouldTheGroupHaveWRITEAccess_var3" export-name="oval:com.mcafee.oval:var:78644" />
        <check-export value-id="ShouldTheGroupHaveEXECUTEAccess_var3" export-name="oval:com.mcafee.oval:var:78645" />
        <check-export value-id="ShouldOthersHaveREADAccess_var3" export-name="oval:com.mcafee.oval:var:78646" />
        <check-export value-id="ShouldOthersHaveWRITEAccess_var3" export-name="oval:com.mcafee.oval:var:78647" />
        <check-export value-id="ShouldOthersHaveEXECUTEAccess_var3" export-name="oval:com.mcafee.oval:var:78648" />
        <check-content-ref href="" name="oval:com.mcafee.oval:def:2487347" />
      </check>
    </Rule>
    <Rule id="TestTheOwnerOfTheFile_Etc_auto.master" xml:lang="en" selected="false">
      <title xml:lang="en">Test the owner of the file - /etc/auto.master</title>
      <description xml:lang="en">This check will verify the owner of the file - /etc/auto.master</description>
      <reference>PCI DSS v3.2 Requirements 8</reference>
      <reference>https://www.pcisecuritystandards.org</reference>
      <platform idref="cpe:/o:centos:centos:7" />
      <platform idref="cpe:/o:oracle:linux:7" />
      <platform idref="cpe:/o:redhat:enterprise_linux:7" />
      <ident system="www.unifiedcompliance.com">UCF CC ID 05338</ident>
      <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
        <check-export value-id="WhatIsTheRequiredUserIDOfTheFileOwner_var18" export-name="oval:com.mcafee.oval:var:80228" />
        <check-content-ref href="" name="oval:com.mcafee.oval:def:2487349" />
      </check>
    </Rule>
    <Rule id="TestTheGroupOwnerOfTheFile_Etc_auto.master" xml:lang="en" selected="false">
      <title xml:lang="en">Test the group owner of the file - /etc/auto.master</title>
      <description xml:lang="en">This check will verify the group owner of the file - /etc/auto.master</description>
      <reference>PCI DSS v3.2 Requirements 8</reference>
      <reference>https://www.pcisecuritystandards.org</reference>
      <platform idref="cpe:/o:centos:centos:7" />
      <platform idref="cpe:/o:oracle:linux:7" />
      <platform idref="cpe:/o:redhat:enterprise_linux:7" />
      <ident system="www.unifiedcompliance.com">UCF CC ID 05338</ident>
      <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
        <check-export value-id="WhatIsTheRequiredGroupIDOfTheFileOwner_var19" export-name="oval:com.mcafee.oval:var:80125" />
        <check-content-ref href="" name="oval:com.mcafee.oval:def:2487348" />
      </check>
    </Rule>
    <Rule id="TestThePermissionsOfTheFile_Etc_auto.misc" xml:lang="en" selected="false">
      <title xml:lang="en">Test the permissions of the file - /etc/auto.misc</title>
      <description xml:lang="en">This check will verify the permissions of the file - /etc/auto.misc</description>
      <reference>PCI DSS v3.2 Requirements 8</reference>
      <reference>https://www.pcisecuritystandards.org</reference>
      <platform idref="cpe:/o:centos:centos:7" />
      <platform idref="cpe:/o:oracle:linux:7" />
      <platform idref="cpe:/o:redhat:enterprise_linux:7" />
      <ident system="www.unifiedcompliance.com">UCF CC ID 05339</ident>
      <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
        <check-export value-id="ShouldTheUserHaveREADAccess_var4" export-name="oval:com.mcafee.oval:var:78640" />
        <check-export value-id="ShouldTheUserHaveWRITEAccess_var4" export-name="oval:com.mcafee.oval:var:78641" />
        <check-export value-id="ShouldTheUserHaveEXECUTEAccess_var4" export-name="oval:com.mcafee.oval:var:78642" />
        <check-export value-id="ShouldTheGroupHaveREADAccess_var4" export-name="oval:com.mcafee.oval:var:78643" />
        <check-export value-id="ShouldTheGroupHaveWRITEAccess_var4" export-name="oval:com.mcafee.oval:var:78644" />
        <check-export value-id="ShouldTheGroupHaveEXECUTEAccess_var4" export-name="oval:com.mcafee.oval:var:78645" />
        <check-export value-id="ShouldOthersHaveREADAccess_var4" export-name="oval:com.mcafee.oval:var:78646" />
        <check-export value-id="ShouldOthersHaveWRITEAccess_var4" export-name="oval:com.mcafee.oval:var:78647" />
        <check-export value-id="ShouldOthersHaveEXECUTEAccess_var4" export-name="oval:com.mcafee.oval:var:78648" />
        <check-content-ref href="" name="oval:com.mcafee.oval:def:2487357" />
      </check>
    </Rule>
    <Rule id="TestTheOwnerOfTheFile_Etc_auto.misc" xml:lang="en" selected="false">
      <title xml:lang="en">Test the owner of the file - /etc/auto.misc</title>
      <description xml:lang="en">This check will verify the owner of the file - /etc/auto.misc</description>
      <reference>PCI DSS v3.2 Requirements 8</reference>
      <reference>https://www.pcisecuritystandards.org</reference>
      <platform idref="cpe:/o:centos:centos:7" />
      <platform idref="cpe:/o:oracle:linux:7" />
      <platform idref="cpe:/o:redhat:enterprise_linux:7" />
      <ident system="www.unifiedcompliance.com">UCF CC ID 05339</ident>
      <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
        <check-export value-id="WhatIsTheRequiredUserIDOfTheFileOwner_var19" export-name="oval:com.mcafee.oval:var:80228" />
        <check-content-ref href="" name="oval:com.mcafee.oval:def:2487355" />
      </check>
    </Rule>
    <Rule id="TestTheGroupOwnerOfTheFile_Etc_auto.misc" xml:lang="en" selected="false">
      <title xml:lang="en">Test the group owner of the file - /etc/auto.misc</title>
      <description xml:lang="en">This check will verify the group owner of the file - /etc/auto.misc</description>
      <reference>PCI DSS v3.2 Requirements 8</reference>
      <reference>https://www.pcisecuritystandards.org</reference>
      <platform idref="cpe:/o:centos:centos:7" />
      <platform idref="cpe:/o:oracle:linux:7" />
      <platform idref="cpe:/o:redhat:enterprise_linux:7" />
      <ident system="www.unifiedcompliance.com">UCF CC ID 05339</ident>
      <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
        <check-export value-id="WhatIsTheRequiredGroupIDOfTheFileOwner_var24" export-name="oval:com.mcafee.oval:var:80125" />
        <check-content-ref href="" name="oval:com.mcafee.oval:def:2487356" />
      </check>
    </Rule>
    <Rule id="TestThePermissionsOfTheFile_Etc_auto.net" xml:lang="en" selected="false">
      <title xml:lang="en">Test the permissions of the file - /etc/auto.net</title>
      <description xml:lang="en">This check will verify the permissions of the file - /etc/auto.net</description>
      <reference>PCI DSS v3.2 Requirements 8</reference>
      <reference>https://www.pcisecuritystandards.org</reference>
      <platform idref="cpe:/o:centos:centos:7" />
      <platform idref="cpe:/o:oracle:linux:7" />
      <platform idref="cpe:/o:redhat:enterprise_linux:7" />
      <ident system="www.unifiedcompliance.com">UCF CC ID 05340</ident>
      <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
        <check-export value-id="ShouldTheUserHaveREADAccess_var5" export-name="oval:com.mcafee.oval:var:78640" />
        <check-export value-id="ShouldTheUserHaveWRITEAccess_var5" export-name="oval:com.mcafee.oval:var:78641" />
        <check-export value-id="ShouldTheUserHaveEXECUTEAccess_var5" export-name="oval:com.mcafee.oval:var:78642" />
        <check-export value-id="ShouldTheGroupHaveREADAccess_var5" export-name="oval:com.mcafee.oval:var:78643" />
        <check-export value-id="ShouldTheGroupHaveWRITEAccess_var5" export-name="oval:com.mcafee.oval:var:78644" />
        <check-export value-id="ShouldTheGroupHaveEXECUTEAccess_var5" export-name="oval:com.mcafee.oval:var:78645" />
        <check-export value-id="ShouldOthersHaveREADAccess_var5" export-name="oval:com.mcafee.oval:var:78646" />
        <check-export value-id="ShouldOthersHaveWRITEAccess_var5" export-name="oval:com.mcafee.oval:var:78647" />
        <check-export value-id="ShouldOthersHaveEXECUTEAccess_var5" export-name="oval:com.mcafee.oval:var:78648" />
        <check-content-ref href="" name="oval:com.mcafee.oval:def:2487364" />
      </check>
    </Rule>
    <Rule id="TestTheOwnerOfTheFile_Etc_auto.net" xml:lang="en" selected="false">
      <title xml:lang="en">Test the owner of the file - /etc/auto.net</title>
      <description xml:lang="en">This check will verify the owner of the file - /etc/auto.net</description>
      <reference>PCI DSS v3.2 Requirements 8</reference>
      <reference>https://www.pcisecuritystandards.org</reference>
      <platform idref="cpe:/o:centos:centos:7" />
      <platform idref="cpe:/o:oracle:linux:7" />
      <platform idref="cpe:/o:redhat:enterprise_linux:7" />
      <ident system="www.unifiedcompliance.com">UCF CC ID 05340</ident>
      <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
        <check-export value-id="WhatIsTheRequiredUserIDOfTheFileOwner_var24" export-name="oval:com.mcafee.oval:var:80228" />
        <check-content-ref href="" name="oval:com.mcafee.oval:def:2487365" />
      </check>
    </Rule>
    <Rule id="TestTheGroupOwnerOfTheFile_Etc_auto.net" xml:lang="en" selected="false">
      <title xml:lang="en">Test the group owner of the file - /etc/auto.net</title>
      <description xml:lang="en">This check will verify the group owner of the file - /etc/auto.net</description>
      <reference>PCI DSS v3.2 Requirements 8</reference>
      <reference>https://www.pcisecuritystandards.org</reference>
      <platform idref="cpe:/o:centos:centos:7" />
      <platform idref="cpe:/o:oracle:linux:7" />
      <platform idref="cpe:/o:redhat:enterprise_linux:7" />
      <ident system="www.unifiedcompliance.com">UCF CC ID 05340</ident>
      <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
        <check-export value-id="WhatIsTheRequiredGroupIDOfTheFileOwner_var26" export-name="oval:com.mcafee.oval:var:80125" />
        <check-content-ref href="" name="oval:com.mcafee.oval:def:2487363" />
      </check>
    </Rule>
    <Rule id="TestTheOwnerOfTheFile_Etc_login.defs" xml:lang="en" selected="false">
      <title xml:lang="en">Test the owner of the file - /etc/login.defs</title>
      <description xml:lang="en">This check will verify the owner of the file - /etc/login.defs</description>
      <reference>PCI DSS v3.2 Requirements 8</reference>
      <reference>https://www.pcisecuritystandards.org</reference>
      <platform idref="cpe:/o:centos:centos:7" />
      <platform idref="cpe:/o:oracle:linux:7" />
      <platform idref="cpe:/o:redhat:enterprise_linux:7" />
      <ident system="www.unifiedcompliance.com">UCF CC ID 05343</ident>
      <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
        <check-export value-id="WhatIsTheRequiredUserIDOfTheFileOwner_var26" export-name="oval:com.mcafee.oval:var:80228" />
        <check-content-ref href="" name="oval:com.mcafee.oval:def:78876" />
      </check>
    </Rule>
    <Rule id="TestTheGroupOwnerOfTheFile_Etc_login.defs" xml:lang="en" selected="false">
      <title xml:lang="en">Test the group owner of the file - /etc/login.defs</title>
      <description xml:lang="en">This check will verify the group owner of the file - /etc/login.defs</description>
      <reference>PCI DSS v3.2 Requirements 8</reference>
      <reference>https://www.pcisecuritystandards.org</reference>
      <platform idref="cpe:/o:centos:centos:7" />
      <platform idref="cpe:/o:oracle:linux:7" />
      <platform idref="cpe:/o:redhat:enterprise_linux:7" />
      <ident system="www.unifiedcompliance.com">UCF CC ID 05343</ident>
      <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
        <check-export value-id="WhatIsTheRequiredGroupIDOfTheFileOwner_var27" export-name="oval:com.mcafee.oval:var:80125" />
        <check-content-ref href="" name="oval:com.mcafee.oval:def:78794" />
      </check>
    </Rule>
    <Rule id="TestTheGroupOwnerOfTheFile_Etc_security_access.conf" xml:lang="en" selected="false">
      <title xml:lang="en">Test the group owner of the file - /etc/security/access.conf</title>
      <description xml:lang="en">This check will verify the group owner of the file - /etc/security/access.conf</description>
      <reference>PCI DSS v3.2 Requirements 8</reference>
      <reference>https://www.pcisecuritystandards.org</reference>
      <platform idref="cpe:/o:centos:centos:7" />
      <platform idref="cpe:/o:oracle:linux:7" />
      <platform idref="cpe:/o:redhat:enterprise_linux:7" />
      <ident system="www.unifiedcompliance.com">UCF CC ID 05344</ident>
      <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
        <check-export value-id="WhatIsTheRequiredGroupIDOfTheFileOwner_var28" export-name="oval:com.mcafee.oval:var:80125" />
        <check-content-ref href="" name="oval:com.mcafee.oval:def:79078" />
      </check>
    </Rule>
    <Rule id="TestTheOwnerOfTheFile_Etc_security_access.conf" xml:lang="en" selected="false">
      <title xml:lang="en">Test the owner of the file - /etc/security/access.conf</title>
      <description xml:lang="en">This check will verify the owner of the file - /etc/security/access.conf</description>
      <reference>PCI DSS v3.2 Requirements 8</reference>
      <reference>https://www.pcisecuritystandards.org</reference>
      <platform idref="cpe:/o:centos:centos:7" />
      <platform idref="cpe:/o:oracle:linux:7" />
      <platform idref="cpe:/o:redhat:enterprise_linux:7" />
      <ident system="www.unifiedcompliance.com">UCF CC ID 05344</ident>
      <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
        <check-export value-id="WhatIsTheRequiredUserIDOfTheFileOwner_var27" export-name="oval:com.mcafee.oval:var:80228" />
        <check-content-ref href="" name="oval:com.mcafee.oval:def:79079" />
      </check>
    </Rule>
    <Rule id="TestTheOwnerOfTheFile_Etc_sysctl.conf" xml:lang="en" selected="false">
      <title xml:lang="en">Test the owner of the file - /etc/sysctl.conf</title>
      <description xml:lang="en">This check will verify the owner of the file - /etc/sysctl.conf</description>
      <reference>PCI DSS v3.2 Requirements 8</reference>
      <reference>https://www.pcisecuritystandards.org</reference>
      <platform idref="cpe:/o:centos:centos:7" />
      <platform idref="cpe:/o:oracle:linux:7" />
      <platform idref="cpe:/o:redhat:enterprise_linux:7" />
      <ident system="www.unifiedcompliance.com">UCF CC ID 05345</ident>
      <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
        <check-export value-id="WhatIsTheRequiredUserIDOfTheFileOwner_var28" export-name="oval:com.mcafee.oval:var:80228" />
        <check-content-ref href="" name="oval:com.mcafee.oval:def:78893" />
      </check>
    </Rule>
    <Rule id="TestTheGroupOwnerOfTheFile_Etc_sysctl.conf" xml:lang="en" selected="false">
      <title xml:lang="en">Test the group owner of the file - /etc/sysctl.conf</title>
      <description xml:lang="en">This check will verify the group owner of the file - /etc/sysctl.conf</description>
      <reference>PCI DSS v3.2 Requirements 8</reference>
      <reference>https://www.pcisecuritystandards.org</reference>
      <platform idref="cpe:/o:centos:centos:7" />
      <platform idref="cpe:/o:oracle:linux:7" />
      <platform idref="cpe:/o:redhat:enterprise_linux:7" />
      <ident system="www.unifiedcompliance.com">UCF CC ID 05345</ident>
      <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
        <check-export value-id="WhatIsTheRequiredGroupIDOfTheFileOwner_var29" export-name="oval:com.mcafee.oval:var:80125" />
        <check-content-ref href="" name="oval:com.mcafee.oval:def:78816" />
      </check>
    </Rule>
    <Rule id="TestTheOwnerOfTheFile_Etc_securetty" xml:lang="en" selected="false">
      <title xml:lang="en">Test the owner of the file - /etc/securetty</title>
      <description xml:lang="en">This check will verify the owner of the file - /etc/securetty</description>
      <reference>PCI DSS v3.2 Requirements 8</reference>
      <reference>https://www.pcisecuritystandards.org</reference>
      <platform idref="cpe:/o:centos:centos:7" />
      <platform idref="cpe:/o:oracle:linux:7" />
      <platform idref="cpe:/o:redhat:enterprise_linux:7" />
      <ident system="www.unifiedcompliance.com">UCF CC ID 05346</ident>
      <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
        <check-export value-id="WhatIsTheRequiredUserIDOfTheFileOwner_var29" export-name="oval:com.mcafee.oval:var:80228" />
        <check-content-ref href="" name="oval:com.mcafee.oval:def:78884" />
      </check>
    </Rule>
    <Rule id="TestTheGroupOwnerOfTheFile_Etc_securetty" xml:lang="en" selected="false">
      <title xml:lang="en">Test the group owner of the file - /etc/securetty</title>
      <description xml:lang="en">This check will verify the group owner of the file - /etc/securetty</description>
      <reference>PCI DSS v3.2 Requirements 8</reference>
      <reference>https://www.pcisecuritystandards.org</reference>
      <platform idref="cpe:/o:centos:centos:7" />
      <platform idref="cpe:/o:oracle:linux:7" />
      <platform idref="cpe:/o:redhat:enterprise_linux:7" />
      <ident system="www.unifiedcompliance.com">UCF CC ID 05346</ident>
      <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
        <check-export value-id="WhatIsTheRequiredGroupIDOfTheFileOwner_var30" export-name="oval:com.mcafee.oval:var:80125" />
        <check-content-ref href="" name="oval:com.mcafee.oval:def:78804" />
      </check>
    </Rule>
    <Rule id="TestTheOwnerOfTheFile_Etc_audit_auditd.conf" xml:lang="en" selected="false">
      <title xml:lang="en">Test the owner of the file - /etc/audit/auditd.conf</title>
      <description xml:lang="en">This check will verify the owner of the file - /etc/audit/auditd.conf.</description>
      <reference>PCI DSS v3.2 Requirements 8</reference>
      <reference>https://www.pcisecuritystandards.org</reference>
      <platform idref="cpe:/o:centos:centos:7" />
      <platform idref="cpe:/o:oracle:linux:7" />
      <platform idref="cpe:/o:redhat:enterprise_linux:7" />
      <ident system="www.unifiedcompliance.com">UCF CC ID 05347</ident>
      <ident system="www.unifiedcompliance.com">UCF CC ID 05373</ident>
      <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
        <check-export value-id="WhatIsTheRequiredUserIDOfTheFileOwner_var30" export-name="oval:com.mcafee.oval:var:80228" />
        <check-content-ref href="" name="oval:com.mcafee.oval:def:2487373" />
      </check>
    </Rule>
    <Rule id="TestTheGroupOwnerOfTheFile_Etc_audit_auditd.conf" xml:lang="en" selected="false">
      <title xml:lang="en">Test the group owner of the file - /etc/audit/auditd.conf</title>
      <description xml:lang="en">This check will verify the group owner of the file - /etc/audit/auditd.conf.</description>
      <reference>PCI DSS v3.2 Requirements 8</reference>
      <reference>https://www.pcisecuritystandards.org</reference>
      <platform idref="cpe:/o:centos:centos:7" />
      <platform idref="cpe:/o:oracle:linux:7" />
      <platform idref="cpe:/o:redhat:enterprise_linux:7" />
      <ident system="www.unifiedcompliance.com">UCF CC ID 05347</ident>
      <ident system="www.unifiedcompliance.com">UCF CC ID 05373</ident>
      <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
        <check-export value-id="WhatIsTheRequiredGroupIDOfTheFileOwner_var31" export-name="oval:com.mcafee.oval:var:80125" />
        <check-content-ref href="" name="oval:com.mcafee.oval:def:2487372" />
      </check>
    </Rule>
    <Rule id="TestTheGroupOwnerOfTheFile_Etc_audit_audit.rules" xml:lang="en" selected="false">
      <title xml:lang="en">Test the group owner of the file - /etc/audit/audit.rules</title>
      <description xml:lang="en">This check will verify the group owner of the file - /etc/audit/audit.rules</description>
      <reference>PCI DSS v3.2 Requirements 8</reference>
      <reference>https://www.pcisecuritystandards.org</reference>
      <platform idref="cpe:/o:centos:centos:7" />
      <platform idref="cpe:/o:oracle:linux:7" />
      <platform idref="cpe:/o:redhat:enterprise_linux:7" />
      <ident system="www.unifiedcompliance.com">UCF CC ID 05348</ident>
      <ident system="www.unifiedcompliance.com">UCF CC ID 05373</ident>
      <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
        <check-export value-id="WhatIsTheRequiredGroupIDOfTheFileOwner_var32" export-name="oval:com.mcafee.oval:var:80125" />
        <check-content-ref href="" name="oval:com.mcafee.oval:def:79087" />
      </check>
    </Rule>
    <Rule id="TestTheOwnerOfTheFile_Etc_audit_audit.rules" xml:lang="en" selected="false">
      <title xml:lang="en">Test the owner of the file - /etc/audit/audit.rules</title>
      <description xml:lang="en">This check will verify the owner of the file - /etc/audit/audit.rules</description>
      <reference>PCI DSS v3.2 Requirements 8</reference>
      <reference>https://www.pcisecuritystandards.org</reference>
      <platform idref="cpe:/o:centos:centos:7" />
      <platform idref="cpe:/o:oracle:linux:7" />
      <platform idref="cpe:/o:redhat:enterprise_linux:7" />
      <ident system="www.unifiedcompliance.com">UCF CC ID 05348</ident>
      <ident system="www.unifiedcompliance.com">UCF CC ID 05373</ident>
      <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
        <check-export value-id="WhatIsTheRequiredUserIDOfTheFileOwner_var31" export-name="oval:com.mcafee.oval:var:80228" />
        <check-content-ref href="" name="oval:com.mcafee.oval:def:79088" />
      </check>
    </Rule>
    <Rule id="TestTheGroupOwnerOfTheFile_Usr_sbin_userhelper" xml:lang="en" selected="false">
      <title xml:lang="en">Test the group owner of the file - /usr/sbin/userhelper</title>
      <description xml:lang="en">This check will verify the group owner of the file - /usr/sbin/userhelper</description>
      <reference>PCI DSS v3.2 Requirements 8</reference>
      <reference>https://www.pcisecuritystandards.org</reference>
      <platform idref="cpe:/o:centos:centos:7" />
      <platform idref="cpe:/o:oracle:linux:7" />
      <platform idref="cpe:/o:redhat:enterprise_linux:7" />
      <ident system="www.unifiedcompliance.com">UCF CC ID 05351</ident>
      <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
        <check-export value-id="WhatIsTheRequiredGroupIDOfTheFileOwner_var33" export-name="oval:com.mcafee.oval:var:80125" />
        <check-content-ref href="" name="oval:com.mcafee.oval:def:79023" />
      </check>
    </Rule>
    <Rule id="TestTheOwnerOfTheFile_Usr_sbin_userhelper" xml:lang="en" selected="false">
      <title xml:lang="en">Test the owner of the file - /usr/sbin/userhelper</title>
      <description xml:lang="en">This check will verify the owner of the file - /usr/sbin/userhelper</description>
      <reference>PCI DSS v3.2 Requirements 8</reference>
      <reference>https://www.pcisecuritystandards.org</reference>
      <platform idref="cpe:/o:centos:centos:7" />
      <platform idref="cpe:/o:oracle:linux:7" />
      <platform idref="cpe:/o:redhat:enterprise_linux:7" />
      <ident system="www.unifiedcompliance.com">UCF CC ID 05351</ident>
      <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
        <check-export value-id="WhatIsTheRequiredUserIDOfTheFileOwner_var32" export-name="oval:com.mcafee.oval:var:80228" />
        <check-content-ref href="" name="oval:com.mcafee.oval:def:79024" />
      </check>
    </Rule>
    <Rule id="TestTheGroupOwnerOfTheFile_Etc_exports" xml:lang="en" selected="false">
      <title xml:lang="en">Test the group owner of the file - /etc/exports</title>
      <description xml:lang="en">This check will verify the group owner of the file - /etc/exports</description>
      <reference>PCI DSS v3.2 Requirements 8</reference>
      <reference>https://www.pcisecuritystandards.org</reference>
      <platform idref="cpe:/o:centos:centos:7" />
      <platform idref="cpe:/o:oracle:linux:7" />
      <platform idref="cpe:/o:redhat:enterprise_linux:7" />
      <ident system="www.unifiedcompliance.com">UCF CC ID 05312</ident>
      <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
        <check-export value-id="WhatIsTheRequiredGroupIDOfTheFileOwner_var6" export-name="oval:com.mcafee.oval:var:80125" />
        <check-content-ref href="" name="oval:com.mcafee.oval:def:78782" />
      </check>
    </Rule>
    <Rule id="SetGroupOwnerPermissionOn_Etc_anacrontab" xml:lang="en" selected="false">
      <title xml:lang="en">Set Group Owner permission on /etc/anacrontab</title>
      <description xml:lang="en">The /etc/anacrontab file is used by anacron to control its own jobs. The commands in this item make sure that root is the user and group owner of the file and is the only user that can read and write the file. This check verifies if the group owner of the file - /etc/anacrontab is set as per the user input.</description>
      <reference>PCI DSS v3.2 Requirements 8</reference>
      <reference>https://www.pcisecuritystandards.org</reference>
      <platform idref="cpe:/o:centos:centos:7" />
      <platform idref="cpe:/o:oracle:linux:7" />
      <platform idref="cpe:/o:redhat:enterprise_linux:7" />
      <ident system="www.unifiedcompliance.com">UCF CC ID 05353</ident>
      <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
        <check-export value-id="WhatIsTheRequiredGroupIDOfTheFileOwner_var59" export-name="oval:com.mcafee.oval:var:80125" />
        <check-content-ref href="" name="oval:com.mcafee.oval:def:200802290108" />
      </check>
    </Rule>
    <Rule id="SetOwnerPermissionOn_Etc_anacrontab" xml:lang="en" selected="false">
      <title xml:lang="en">Set Owner permission on /etc/anacrontab</title>
      <description xml:lang="en">The /etc/anacrontab file is used by anacron to control its own jobs. The commands in this item make sure that root is the user and group owner of the file and is the only user that can read and write the file. This check verifies if the owner of /etc/anacrontab is set as per the user input.</description>
      <reference>PCI DSS v3.2 Requirements 8</reference>
      <reference>https://www.pcisecuritystandards.org</reference>
      <platform idref="cpe:/o:centos:centos:7" />
      <platform idref="cpe:/o:oracle:linux:7" />
      <platform idref="cpe:/o:redhat:enterprise_linux:7" />
      <ident system="www.unifiedcompliance.com">UCF CC ID 05353</ident>
      <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
        <check-export value-id="WhatIsTheRequiredUserIDOfTheFileOwner_var59" export-name="oval:com.mcafee.oval:var:80228" />
        <check-content-ref href="" name="oval:com.mcafee.oval:def:200802250104" />
      </check>
    </Rule>
    <Rule id="TestPermissionsOnRsyslogLogFile_Var_log_unused.log_GroupOwnership" xml:lang="en" selected="false">
      <title xml:lang="en">Test Permissions on rsyslog Log File /var/log/unused.log - Group Ownership</title>
      <description xml:lang="en">A log file must already exist for rsyslog to be able to write to it. This rule verifies whether the group owner of the file /var/log/unused.log is set as per the user input.</description>
      <reference>PCI DSS v3.2 Requirements 8</reference>
      <reference>https://www.pcisecuritystandards.org</reference>
      <platform idref="cpe:/o:centos:centos:7" />
      <platform idref="cpe:/o:oracle:linux:7" />
      <platform idref="cpe:/o:redhat:enterprise_linux:7" />
      <ident system="www.unifiedcompliance.com">UCF CC ID 05352</ident>
      <ident system="www.unifiedcompliance.com">UCF CC ID 08715</ident>
      <ident system="www.unifiedcompliance.com">UCF CC ID 08716</ident>
      <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
        <check-export value-id="WhatIsTheRequiredGroupIDOfTheFileOwner_var55" export-name="oval:com.mcafee.oval:var:80125" />
        <check-content-ref href="" name="oval:com.mcafee.oval:def:406099" />
      </check>
    </Rule>
    <Rule id="TestPermissionsOnRsyslogLogFile_Var_log_unused.log_Ownership" xml:lang="en" selected="false">
      <title xml:lang="en">Test Permissions on rsyslog Log File /var/log/unused.log - Ownership</title>
      <description xml:lang="en">A log file must already exist for rsyslog to be able to write to it. This rule verifies whether the owner of the file /var/log/unused.log is set as per the user input.</description>
      <reference>PCI DSS v3.2 Requirements 8</reference>
      <reference>https://www.pcisecuritystandards.org</reference>
      <platform idref="cpe:/o:centos:centos:7" />
      <platform idref="cpe:/o:oracle:linux:7" />
      <platform idref="cpe:/o:redhat:enterprise_linux:7" />
      <ident system="www.unifiedcompliance.com">UCF CC ID 05352</ident>
      <ident system="www.unifiedcompliance.com">UCF CC ID 08715</ident>
      <ident system="www.unifiedcompliance.com">UCF CC ID 08716</ident>
      <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
        <check-export value-id="WhatIsTheRequiredUserIDOfTheFileOwner_var55" export-name="oval:com.mcafee.oval:var:80228" />
        <check-content-ref href="" name="oval:com.mcafee.oval:def:406075" />
      </check>
    </Rule>
    <Rule id="TestPermissionsOnRsyslogLogFile_Var_log_kern.log_Ownership" xml:lang="en" selected="false">
      <title xml:lang="en">Test Permissions on rsyslog Log File /var/log/kern.log - Ownership</title>
      <description xml:lang="en">A log file must already exist for rsyslog to be able to write to it. This rule verifies whether the owner of the file /var/log/kern.log is set as per the user input.</description>
      <reference>PCI DSS v3.2 Requirements 8</reference>
      <reference>https://www.pcisecuritystandards.org</reference>
      <platform idref="cpe:/o:centos:centos:7" />
      <platform idref="cpe:/o:oracle:linux:7" />
      <platform idref="cpe:/o:redhat:enterprise_linux:7" />
      <ident system="www.unifiedcompliance.com">UCF CC ID 05352</ident>
      <ident system="www.unifiedcompliance.com">UCF CC ID 08715</ident>
      <ident system="www.unifiedcompliance.com">UCF CC ID 08716</ident>
      <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
        <check-export value-id="WhatIsTheRequiredUserIDOfTheFileOwner_var56" export-name="oval:com.mcafee.oval:var:80228" />
        <check-content-ref href="" name="oval:com.mcafee.oval:def:406100" />
      </check>
    </Rule>
    <Rule id="TestPermissionsOnRsyslogLogFile_Var_log_kern.log_GroupOwnership" xml:lang="en" selected="false">
      <title xml:lang="en">Test Permissions on rsyslog Log File /var/log/kern.log - Group Ownership</title>
      <description xml:lang="en">A log file must already exist for rsyslog to be able to write to it. This rule verifies whether the group owner of the file /var/log/kern.log is set as per the user input.</description>
      <reference>PCI DSS v3.2 Requirements 8</reference>
      <reference>https://www.pcisecuritystandards.org</reference>
      <platform idref="cpe:/o:centos:centos:7" />
      <platform idref="cpe:/o:oracle:linux:7" />
      <platform idref="cpe:/o:redhat:enterprise_linux:7" />
      <ident system="www.unifiedcompliance.com">UCF CC ID 05352</ident>
      <ident system="www.unifiedcompliance.com">UCF CC ID 08715</ident>
      <ident system="www.unifiedcompliance.com">UCF CC ID 08716</ident>
      <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
        <check-export value-id="WhatIsTheRequiredGroupIDOfTheFileOwner_var56" export-name="oval:com.mcafee.oval:var:80125" />
        <check-content-ref href="" name="oval:com.mcafee.oval:def:406080" />
      </check>
    </Rule>
    <Rule id="TestPermissionsOnRsyslogLogFile_Var_log_daemon.log_Ownership" xml:lang="en" selected="false">
      <title xml:lang="en">Test Permissions on rsyslog Log File /var/log/daemon.log - Ownership</title>
      <description xml:lang="en">A log file must already exist for rsyslog to be able to write to it. This rule verifies whether the owner of the file /var/log/daemon.log is set as per the user input.</description>
      <reference>PCI DSS v3.2 Requirements 8</reference>
      <reference>https://www.pcisecuritystandards.org</reference>
      <platform idref="cpe:/o:centos:centos:7" />
      <platform idref="cpe:/o:oracle:linux:7" />
      <platform idref="cpe:/o:redhat:enterprise_linux:7" />
      <ident system="www.unifiedcompliance.com">UCF CC ID 05352</ident>
      <ident system="www.unifiedcompliance.com">UCF CC ID 08715</ident>
      <ident system="www.unifiedcompliance.com">UCF CC ID 08716</ident>
      <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
        <check-export value-id="WhatIsTheRequiredUserIDOfTheFileOwner_var57" export-name="oval:com.mcafee.oval:var:80228" />
        <check-content-ref href="" name="oval:com.mcafee.oval:def:406097" />
      </check>
    </Rule>
    <Rule id="TestPermissionsOnRsyslogLogFile_Var_log_daemon.log_GroupOwnership" xml:lang="en" selected="false">
      <title xml:lang="en">Test Permissions on rsyslog Log File /var/log/daemon.log - Group Ownership</title>
      <description xml:lang="en">A log file must already exist for rsyslog to be able to write to it. This rule verifies whether group owner of the file /var/log/daemon.log is set as per the user input.</description>
      <reference>PCI DSS v3.2 Requirements 8</reference>
      <reference>https://www.pcisecuritystandards.org</reference>
      <platform idref="cpe:/o:centos:centos:7" />
      <platform idref="cpe:/o:oracle:linux:7" />
      <platform idref="cpe:/o:redhat:enterprise_linux:7" />
      <ident system="www.unifiedcompliance.com">UCF CC ID 05352</ident>
      <ident system="www.unifiedcompliance.com">UCF CC ID 08715</ident>
      <ident system="www.unifiedcompliance.com">UCF CC ID 08716</ident>
      <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
        <check-export value-id="WhatIsTheRequiredGroupIDOfTheFileOwner_var57" export-name="oval:com.mcafee.oval:var:80125" />
        <check-content-ref href="" name="oval:com.mcafee.oval:def:406096" />
      </check>
    </Rule>
    <Rule id="TestPermissionsOnRsyslogLogFile_Var_log_messages_Ownership" xml:lang="en" selected="false">
      <title xml:lang="en">Test Permissions on rsyslog Log File /var/log/messages - Ownership</title>
      <description xml:lang="en">A log file must already exist for rsyslog to be able to write to it. This rule verifies whether the owner of the file /var/log/messages is set as per the user input.</description>
      <reference>PCI DSS v3.2 Requirements 8</reference>
      <reference>https://www.pcisecuritystandards.org</reference>
      <platform idref="cpe:/o:centos:centos:7" />
      <platform idref="cpe:/o:oracle:linux:7" />
      <platform idref="cpe:/o:redhat:enterprise_linux:7" />
      <ident system="www.unifiedcompliance.com">UCF CC ID 05352</ident>
      <ident system="www.unifiedcompliance.com">UCF CC ID 08715</ident>
      <ident system="www.unifiedcompliance.com">UCF CC ID 08716</ident>
      <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
        <check-export value-id="WhatIsTheRequiredUserIDOfTheFileOwner_var58" export-name="oval:com.mcafee.oval:var:80228" />
        <check-content-ref href="" name="oval:com.mcafee.oval:def:406139" />
      </check>
    </Rule>
    <Rule id="TestPermissionsOnRsyslogLogFile_Var_log_messages_GroupOwnership" xml:lang="en" selected="false">
      <title xml:lang="en">Test Permissions on rsyslog Log File /var/log/messages - Group Ownership</title>
      <description xml:lang="en">A log file must already exist for rsyslog to be able to write to it. This rule verifies whether the group owner of the file /var/log/messages is set as per the user input.</description>
      <reference>PCI DSS v3.2 Requirements 8</reference>
      <reference>https://www.pcisecuritystandards.org</reference>
      <platform idref="cpe:/o:centos:centos:7" />
      <platform idref="cpe:/o:oracle:linux:7" />
      <platform idref="cpe:/o:redhat:enterprise_linux:7" />
      <ident system="www.unifiedcompliance.com">UCF CC ID 05352</ident>
      <ident system="www.unifiedcompliance.com">UCF CC ID 08715</ident>
      <ident system="www.unifiedcompliance.com">UCF CC ID 08716</ident>
      <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
        <check-export value-id="WhatIsTheRequiredGroupIDOfTheFileOwner_var58" export-name="oval:com.mcafee.oval:var:80125" />
        <check-content-ref href="" name="oval:com.mcafee.oval:def:406140" />
      </check>
    </Rule>
    <Rule id="TestPermissionsOnRsyslogLogFile_Var_log_syslog_Ownership" xml:lang="en" selected="false">
      <title xml:lang="en">Test Permissions on rsyslog Log File /var/log/syslog - Ownership</title>
      <description xml:lang="en">A log file must already exist for rsyslog to be able to write to it. This rule verifies whether the owner of the file /var/log/syslog is set as per the user input.</description>
      <reference>PCI DSS v3.2 Requirements 8</reference>
      <reference>https://www.pcisecuritystandards.org</reference>
      <platform idref="cpe:/o:centos:centos:7" />
      <platform idref="cpe:/o:oracle:linux:7" />
      <platform idref="cpe:/o:redhat:enterprise_linux:7" />
      <ident system="www.unifiedcompliance.com">UCF CC ID 05352</ident>
      <ident system="www.unifiedcompliance.com">UCF CC ID 08715</ident>
      <ident system="www.unifiedcompliance.com">UCF CC ID 08716</ident>
      <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
        <check-export value-id="WhatIsTheRequiredUserIDForvarlogsyslog_var" export-name="oval:com.mcafee.oval:var:231552" />
        <check-content-ref href="" name="oval:com.mcafee.oval:def:406129" />
      </check>
    </Rule>
    <Rule id="TestPermissionsOnRsyslogLogFile_Var_log_syslog_GroupOwnership" xml:lang="en" selected="false">
      <title xml:lang="en">Test Permissions on rsyslog Log File /var/log/syslog - Group Ownership</title>
      <description xml:lang="en">A log file must already exist for rsyslog to be able to write to it. This rule verifies whether group owner of the file /var/log/syslog is set as per the user input.</description>
      <reference>PCI DSS v3.2 Requirements 8</reference>
      <reference>https://www.pcisecuritystandards.org</reference>
      <platform idref="cpe:/o:centos:centos:7" />
      <platform idref="cpe:/o:oracle:linux:7" />
      <platform idref="cpe:/o:redhat:enterprise_linux:7" />
      <ident system="www.unifiedcompliance.com">UCF CC ID 05352</ident>
      <ident system="www.unifiedcompliance.com">UCF CC ID 08715</ident>
      <ident system="www.unifiedcompliance.com">UCF CC ID 08716</ident>
      <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
        <check-export value-id="WhatIsTheRequiredGroupIDForvarlogsyslog_var" export-name="oval:com.mcafee.oval:var:231555" />
        <check-content-ref href="" name="oval:com.mcafee.oval:def:406132" />
      </check>
    </Rule>
    <Rule id="EnableSELinuxIn_Boot_grub2_grub.cfg" xml:lang="en" selected="false">
      <title xml:lang="en">Enable SELinux in /boot/grub2/grub.cfg</title>
      <description xml:lang="en">Configure SELINUX to be enabled at boot time and verify that it has not been overwritten by the grub boot parameters. This rule is to verify that SELinux is not disabled in /boot/grub2/grub.cfg.</description>
      <reference>PCI DSS v3.2 Requirements 8</reference>
      <reference>https://www.pcisecuritystandards.org</reference>
      <platform idref="cpe:/o:centos:centos:7" />
      <platform idref="cpe:/o:oracle:linux:7" />
      <platform idref="cpe:/o:redhat:enterprise_linux:7" />
      <ident system="www.unifiedcompliance.com">UCF CC ID 05376</ident>
      <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
        <check-content-ref href="" name="oval:com.mcafee.oval:def:634891" />
      </check>
    </Rule>
    <Rule id="EnableSELinuxIn_Boot_grub2_grub.cfg_EnforcingShouldNotBeDisabledIn_Boot_grub2_grub.cfg" xml:lang="en" selected="false">
      <title xml:lang="en">Enable SELinux in /boot/grub2/grub.cfg - enforcing should not be disabled in /boot/grub2/grub.cfg</title>
      <description xml:lang="en">Configure SELINUX to be enabled at boot time and verify that it has not been overwritten by the grub boot parameters. This check is to verify that SELinux is not disabled in /boot/grub2/grub.cfg.</description>
      <reference>PCI DSS v3.2 Requirements 8</reference>
      <reference>https://www.pcisecuritystandards.org</reference>
      <platform idref="cpe:/o:centos:centos:7" />
      <platform idref="cpe:/o:oracle:linux:7" />
      <platform idref="cpe:/o:redhat:enterprise_linux:7" />
      <ident system="www.unifiedcompliance.com">UCF CC ID 05376</ident>
      <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
        <check-content-ref href="" name="oval:com.mcafee.oval:def:634894" />
      </check>
    </Rule>
    <Rule id="SetTheSELinuxState" xml:lang="en" selected="false">
      <title xml:lang="en">Set the SELinux State</title>
      <description xml:lang="en">Set SELinux to enable when the system is booted. This rule is to verify that SELinux state is set appropriately in /etc/selinux/config file.</description>
      <reference>PCI DSS v3.2 Requirements 8</reference>
      <reference>https://www.pcisecuritystandards.org</reference>
      <platform idref="cpe:/o:centos:centos:7" />
      <platform idref="cpe:/o:oracle:linux:7" />
      <platform idref="cpe:/o:redhat:enterprise_linux:7" />
      <ident system="www.unifiedcompliance.com">UCF CC ID 05377</ident>
      <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
        <check-export value-id="WhatIsTheExpectedSELinuxState_var" export-name="oval:com.mcafee.oval:var:250028" />
        <check-content-ref href="" name="oval:com.mcafee.oval:def:402020" />
      </check>
    </Rule>
    <Rule id="SetTheSELinuxPolicy" xml:lang="en" selected="false">
      <title xml:lang="en">Set the SELinux Policy</title>
      <description xml:lang="en">Configure SELinux to meet or exceed the default targeted policy, which constrains daemons and system software only. This rule is to verify that SELinux policy is set appropriately in /etc/selinux/config file.</description>
      <reference>PCI DSS v3.2 Requirements 8</reference>
      <reference>https://www.pcisecuritystandards.org</reference>
      <platform idref="cpe:/o:centos:centos:7" />
      <platform idref="cpe:/o:oracle:linux:7" />
      <platform idref="cpe:/o:redhat:enterprise_linux:7" />
      <ident system="www.unifiedcompliance.com">UCF CC ID 05378</ident>
      <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
        <check-export value-id="WhatIsTheExpectedSELinuxPolicy_var" export-name="oval:com.mcafee.oval:var:250052" />
        <check-content-ref href="" name="oval:com.mcafee.oval:def:250048" />
      </check>
    </Rule>
    <Rule id="TestTheOwnerOfAllFilesPresentInTheDirectory_Etc_httpd_conf" xml:lang="en" selected="false">
      <title xml:lang="en">Test the owner of all files present in the directory - /etc/httpd/conf</title>
      <description xml:lang="en">This check will verify owner of all files present in the directory - /etc/httpd/conf</description>
      <reference>PCI DSS v3.2 Requirements 8</reference>
      <reference>https://www.pcisecuritystandards.org</reference>
      <platform idref="cpe:/o:centos:centos:7" />
      <platform idref="cpe:/o:oracle:linux:7" />
      <platform idref="cpe:/o:redhat:enterprise_linux:7" />
      <ident system="www.unifiedcompliance.com">UCF CC ID 05359</ident>
      <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
        <check-export value-id="WhatIsTheRequiredUserIDOfTheFileOwner_var33" export-name="oval:com.mcafee.oval:var:80228" />
        <check-content-ref href="" name="oval:com.mcafee.oval:def:79018" />
      </check>
    </Rule>
    <Rule id="TestTheGroupOwnerOfAllFilesPresentInTheDirectory_Etc_httpd_conf" xml:lang="en" selected="false">
      <title xml:lang="en">Test the group owner of all files present in the directory - /etc/httpd/conf</title>
      <description xml:lang="en">This check will verify the group owner of all files present in the directory - /etc/httpd/conf</description>
      <reference>PCI DSS v3.2 Requirements 8</reference>
      <reference>https://www.pcisecuritystandards.org</reference>
      <platform idref="cpe:/o:centos:centos:7" />
      <platform idref="cpe:/o:oracle:linux:7" />
      <platform idref="cpe:/o:redhat:enterprise_linux:7" />
      <ident system="www.unifiedcompliance.com">UCF CC ID 05359</ident>
      <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
        <check-export value-id="WhatIsTheRequiredGroupIDOfTheFileOwner_var34" export-name="oval:com.mcafee.oval:var:80125" />
        <check-content-ref href="" name="oval:com.mcafee.oval:def:79017" />
      </check>
    </Rule>
    <Rule id="TestTheOwnerOfTheDirectory_Var" xml:lang="en" selected="false">
      <title xml:lang="en">Test the owner of the directory - /var</title>
      <description xml:lang="en">This check will verify the owner of the /var directory</description>
      <reference>PCI DSS v3.2 Requirements 8</reference>
      <reference>https://www.pcisecuritystandards.org</reference>
      <platform idref="cpe:/o:centos:centos:7" />
      <platform idref="cpe:/o:oracle:linux:7" />
      <platform idref="cpe:/o:redhat:enterprise_linux:7" />
      <ident system="www.unifiedcompliance.com">UCF CC ID 05367</ident>
      <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
        <check-export value-id="WhatIsTheRequiredUserIDOfTheFileOwner_var34" export-name="oval:com.mcafee.oval:var:80228" />
        <check-content-ref href="" name="oval:com.mcafee.oval:def:2487380" />
      </check>
    </Rule>
    <Rule id="TestThePermissionsOfTheDirectory_Var" xml:lang="en" selected="false">
      <title xml:lang="en">Test the permissions of the directory - /var</title>
      <description xml:lang="en">This check will verify the permissions set on the /var directory</description>
      <reference>PCI DSS v3.2 Requirements 8</reference>
      <reference>https://www.pcisecuritystandards.org</reference>
      <platform idref="cpe:/o:centos:centos:7" />
      <platform idref="cpe:/o:oracle:linux:7" />
      <platform idref="cpe:/o:redhat:enterprise_linux:7" />
      <ident system="www.unifiedcompliance.com">UCF CC ID 05367</ident>
      <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
        <check-export value-id="ShouldTheUserHaveREADAccess_var28" export-name="oval:com.mcafee.oval:var:78640" />
        <check-export value-id="ShouldTheUserHaveWRITEAccess_var28" export-name="oval:com.mcafee.oval:var:78641" />
        <check-export value-id="ShouldTheUserHaveEXECUTEAccess_var28" export-name="oval:com.mcafee.oval:var:78642" />
        <check-export value-id="ShouldTheGroupHaveREADAccess_var28" export-name="oval:com.mcafee.oval:var:78643" />
        <check-export value-id="ShouldTheGroupHaveWRITEAccess_var28" export-name="oval:com.mcafee.oval:var:78644" />
        <check-export value-id="ShouldTheGroupHaveEXECUTEAccess_var28" export-name="oval:com.mcafee.oval:var:78645" />
        <check-export value-id="ShouldOthersHaveREADAccess_var28" export-name="oval:com.mcafee.oval:var:78646" />
        <check-export value-id="ShouldOthersHaveWRITEAccess_var28" export-name="oval:com.mcafee.oval:var:78647" />
        <check-export value-id="ShouldOthersHaveEXECUTEAccess_var28" export-name="oval:com.mcafee.oval:var:78648" />
        <check-content-ref href="" name="oval:com.mcafee.oval:def:2487381" />
      </check>
    </Rule>
    <Rule id="TestTheGroupOwnerOfTheDirectory_Var" xml:lang="en" selected="false">
      <title xml:lang="en">Test the group owner of the directory - /var</title>
      <description xml:lang="en">This check will verify the group owner of the /var directory</description>
      <reference>PCI DSS v3.2 Requirements 8</reference>
      <reference>https://www.pcisecuritystandards.org</reference>
      <platform idref="cpe:/o:centos:centos:7" />
      <platform idref="cpe:/o:oracle:linux:7" />
      <platform idref="cpe:/o:redhat:enterprise_linux:7" />
      <ident system="www.unifiedcompliance.com">UCF CC ID 05367</ident>
      <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
        <check-export value-id="WhatIsTheRequiredGroupIDOfTheFileOwner_var35" export-name="oval:com.mcafee.oval:var:80125" />
        <check-content-ref href="" name="oval:com.mcafee.oval:def:2487379" />
      </check>
    </Rule>
    <Rule id="TestTheOwnerOfTheDirectory_Var_log" xml:lang="en" selected="false">
      <title xml:lang="en">Test the owner of the directory - /var/log</title>
      <description xml:lang="en">This check will verify the owner of the directory - /var/log</description>
      <reference>PCI DSS v3.2 Requirements 8</reference>
      <reference>https://www.pcisecuritystandards.org</reference>
      <platform idref="cpe:/o:centos:centos:7" />
      <platform idref="cpe:/o:oracle:linux:7" />
      <platform idref="cpe:/o:redhat:enterprise_linux:7" />
      <ident system="www.unifiedcompliance.com">UCF CC ID 05368</ident>
      <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
        <check-export value-id="WhatIsTheRequiredUserIDOfTheFileOwner_var35" export-name="oval:com.mcafee.oval:var:80228" />
        <check-content-ref href="" name="oval:com.mcafee.oval:def:92617" />
      </check>
    </Rule>
    <Rule id="TestThePermissionsOfTheDirectory_Var_adm" xml:lang="en" selected="false">
      <title xml:lang="en">Test the permissions of the directory - /var/adm</title>
      <description xml:lang="en">This check will verify the permissions set on the /var/adm directory</description>
      <reference>PCI DSS v3.2 Requirements 8</reference>
      <reference>https://www.pcisecuritystandards.org</reference>
      <platform idref="cpe:/o:centos:centos:7" />
      <platform idref="cpe:/o:oracle:linux:7" />
      <platform idref="cpe:/o:redhat:enterprise_linux:7" />
      <ident system="www.unifiedcompliance.com">UCF CC ID 05369</ident>
      <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
        <check-export value-id="ShouldTheUserHaveREADAccess_var29" export-name="oval:com.mcafee.oval:var:78640" />
        <check-export value-id="ShouldTheUserHaveWRITEAccess_var29" export-name="oval:com.mcafee.oval:var:78641" />
        <check-export value-id="ShouldTheUserHaveEXECUTEAccess_var29" export-name="oval:com.mcafee.oval:var:78642" />
        <check-export value-id="ShouldTheGroupHaveREADAccess_var29" export-name="oval:com.mcafee.oval:var:78643" />
        <check-export value-id="ShouldTheGroupHaveWRITEAccess_var29" export-name="oval:com.mcafee.oval:var:78644" />
        <check-export value-id="ShouldTheGroupHaveEXECUTEAccess_var29" export-name="oval:com.mcafee.oval:var:78645" />
        <check-export value-id="ShouldOthersHaveREADAccess_var29" export-name="oval:com.mcafee.oval:var:78646" />
        <check-export value-id="ShouldOthersHaveWRITEAccess_var29" export-name="oval:com.mcafee.oval:var:78647" />
        <check-export value-id="ShouldOthersHaveEXECUTEAccess_var29" export-name="oval:com.mcafee.oval:var:78648" />
        <check-content-ref href="" name="oval:com.mcafee.oval:def:2487393" />
      </check>
    </Rule>
    <Rule id="TestTheGroupOwnerOfTheDirectory_Var_adm" xml:lang="en" selected="false">
      <title xml:lang="en">Test the group owner of the directory - /var/adm</title>
      <description xml:lang="en">This check will verify the group owner of the /var/adm directory</description>
      <reference>PCI DSS v3.2 Requirements 8</reference>
      <reference>https://www.pcisecuritystandards.org</reference>
      <platform idref="cpe:/o:centos:centos:7" />
      <platform idref="cpe:/o:oracle:linux:7" />
      <platform idref="cpe:/o:redhat:enterprise_linux:7" />
      <ident system="www.unifiedcompliance.com">UCF CC ID 05369</ident>
      <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
        <check-export value-id="WhatIsTheRequiredGroupIDOfTheFileOwner_var36" export-name="oval:com.mcafee.oval:var:80125" />
        <check-content-ref href="" name="oval:com.mcafee.oval:def:2487392" />
      </check>
    </Rule>
    <Rule id="TestTheOwnerOfTheDirectory_Var_adm" xml:lang="en" selected="false">
      <title xml:lang="en">Test the owner of the directory - /var/adm</title>
      <description xml:lang="en">This check will verify the owner of the directory - /var/adm</description>
      <reference>PCI DSS v3.2 Requirements 8</reference>
      <reference>https://www.pcisecuritystandards.org</reference>
      <platform idref="cpe:/o:centos:centos:7" />
      <platform idref="cpe:/o:oracle:linux:7" />
      <platform idref="cpe:/o:redhat:enterprise_linux:7" />
      <ident system="www.unifiedcompliance.com">UCF CC ID 05369</ident>
      <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
        <check-export value-id="WhatIsTheRequiredUserIDOfTheFileOwner_var36" export-name="oval:com.mcafee.oval:var:80228" />
        <check-content-ref href="" name="oval:com.mcafee.oval:def:2487387" />
      </check>
    </Rule>
    <Rule id="TestTheGroupOwnerOfTheFile_Usr_bin_traceroute" xml:lang="en" selected="false">
      <title xml:lang="en">Test the group owner of the file - /usr/bin/traceroute</title>
      <description xml:lang="en">This check will verify the group owner of the file - /usr/bin/traceroute</description>
      <reference>PCI DSS v3.2 Requirements 8</reference>
      <reference>https://www.pcisecuritystandards.org</reference>
      <platform idref="cpe:/o:centos:centos:7" />
      <platform idref="cpe:/o:oracle:linux:7" />
      <platform idref="cpe:/o:redhat:enterprise_linux:7" />
      <ident system="www.unifiedcompliance.com">UCF CC ID 08980</ident>
      <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
        <check-export value-id="WhatIsTheRequiredGroupIDOfTheFileOwner_var37" export-name="oval:com.mcafee.oval:var:80125" />
        <check-content-ref href="" name="oval:com.mcafee.oval:def:2487395" />
      </check>
    </Rule>
    <Rule id="TestTheOwnerOf_Usr_sbin_tracerouteFile" xml:lang="en" selected="false">
      <title xml:lang="en">Test the owner of /usr/sbin/traceroute file</title>
      <description xml:lang="en">This check will verify the owner of /usr/sbin/traceroute file</description>
      <reference>PCI DSS v3.2 Requirements 8 and 2.3</reference>
      <reference>https://www.pcisecuritystandards.org</reference>
      <platform idref="cpe:/o:centos:centos:7" />
      <platform idref="cpe:/o:oracle:linux:7" />
      <platform idref="cpe:/o:redhat:enterprise_linux:7" />
      <ident system="www.unifiedcompliance.com">UCF CC ID 08981</ident>
      <ident system="www.unifiedcompliance.com">UCF CC ID 02165</ident>
      <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
        <check-export value-id="WhatIsTheRequiredUserIDOfTheFileOwner_var37" export-name="oval:com.mcafee.oval:var:80228" />
        <check-content-ref href="" name="oval:com.mcafee.oval:def:2487397" />
      </check>
    </Rule>
    <Rule id="TestTheGroupOwnerOfTheDirectory_Var_log_httpd" xml:lang="en" selected="false">
      <title xml:lang="en">Test the group owner of the directory - /var/log/httpd</title>
      <description xml:lang="en">This check will verify the group owner of the directory - /var/log/httpd</description>
      <reference>PCI DSS v3.2 Requirements 8</reference>
      <reference>https://www.pcisecuritystandards.org</reference>
      <platform idref="cpe:/o:centos:centos:7" />
      <platform idref="cpe:/o:oracle:linux:7" />
      <platform idref="cpe:/o:redhat:enterprise_linux:7" />
      <ident system="www.unifiedcompliance.com">UCF CC ID 09027</ident>
      <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
        <check-export value-id="WhatIsTheRequiredGroupIDOfTheFileOwner_var38" export-name="oval:com.mcafee.oval:var:80125" />
        <check-content-ref href="" name="oval:com.mcafee.oval:def:92711" />
      </check>
    </Rule>
    <Rule id="TestTheGroupOwnerOfTheDirectory_Etc_httpd_conf.d" xml:lang="en" selected="false">
      <title xml:lang="en">Test the group owner of the directory - /etc/httpd/conf.d</title>
      <description xml:lang="en">This check will verify the group owner of the /etc/httpd/conf.d directory</description>
      <reference>PCI DSS v3.2 Requirements 8</reference>
      <reference>https://www.pcisecuritystandards.org</reference>
      <platform idref="cpe:/o:centos:centos:7" />
      <platform idref="cpe:/o:oracle:linux:7" />
      <platform idref="cpe:/o:redhat:enterprise_linux:7" />
      <ident system="www.unifiedcompliance.com">UCF CC ID 09028</ident>
      <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
        <check-export value-id="WhatIsTheRequiredGroupIDOfTheFileOwner_var39" export-name="oval:com.mcafee.oval:var:80125" />
        <check-content-ref href="" name="oval:com.mcafee.oval:def:2487427" />
      </check>
    </Rule>
    <Rule id="TestTheGroupOwnerOfTheFile_Usr_sbin_httpd" xml:lang="en" selected="false">
      <title xml:lang="en">Test the group owner of the file - /usr/sbin/httpd</title>
      <description xml:lang="en">This check will verify the group owner of the file - /usr/sbin/httpd</description>
      <reference>PCI DSS v3.2 Requirements 8</reference>
      <reference>https://www.pcisecuritystandards.org</reference>
      <platform idref="cpe:/o:centos:centos:7" />
      <platform idref="cpe:/o:oracle:linux:7" />
      <platform idref="cpe:/o:redhat:enterprise_linux:7" />
      <ident system="www.unifiedcompliance.com">UCF CC ID 09031</ident>
      <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
        <check-export value-id="WhatIsTheRequiredGroupIDOfTheFileOwner_var40" export-name="oval:com.mcafee.oval:var:80125" />
        <check-content-ref href="" name="oval:com.mcafee.oval:def:79020" />
      </check>
    </Rule>
    <Rule id="TestTheGroupOwnerOfTheDirectory_Var_www_html" xml:lang="en" selected="false">
      <title xml:lang="en">Test the group owner of the directory - /var/www/html</title>
      <description xml:lang="en">This check will verify the group owner of the /var/www/html directory</description>
      <reference>PCI DSS v3.2 Requirements 8</reference>
      <reference>https://www.pcisecuritystandards.org</reference>
      <platform idref="cpe:/o:centos:centos:7" />
      <platform idref="cpe:/o:oracle:linux:7" />
      <platform idref="cpe:/o:redhat:enterprise_linux:7" />
      <ident system="www.unifiedcompliance.com">UCF CC ID 09032</ident>
      <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
        <check-export value-id="WhatIsTheRequiredGroupIDOfTheFileOwner_var41" export-name="oval:com.mcafee.oval:var:80125" />
        <check-content-ref href="" name="oval:com.mcafee.oval:def:2487420" />
      </check>
    </Rule>
    <Rule id="TestTheOwnerOfTheDirectory_Var_log_httpd" xml:lang="en" selected="false">
      <title xml:lang="en">Test the owner of the directory - /var/log/httpd</title>
      <description xml:lang="en">This check will verify the owner of the directory - /var/log/httpd</description>
      <reference>PCI DSS v3.2 Requirements 8</reference>
      <reference>https://www.pcisecuritystandards.org</reference>
      <platform idref="cpe:/o:centos:centos:7" />
      <platform idref="cpe:/o:oracle:linux:7" />
      <platform idref="cpe:/o:redhat:enterprise_linux:7" />
      <ident system="www.unifiedcompliance.com">UCF CC ID 09034</ident>
      <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
        <check-export value-id="WhatIsTheRequiredUserIDOfTheFileOwner_var38" export-name="oval:com.mcafee.oval:var:80228" />
        <check-content-ref href="" name="oval:com.mcafee.oval:def:92707" />
      </check>
    </Rule>
    <Rule id="TestTheOwnerOfTheDirectory_Etc_httpd_conf.d" xml:lang="en" selected="false">
      <title xml:lang="en">Test the owner of the directory - /etc/httpd/conf.d</title>
      <description xml:lang="en">This check will verify the owner of the directory - /etc/httpd/conf.d</description>
      <reference>PCI DSS v3.2 Requirements 8</reference>
      <reference>https://www.pcisecuritystandards.org</reference>
      <platform idref="cpe:/o:centos:centos:7" />
      <platform idref="cpe:/o:oracle:linux:7" />
      <platform idref="cpe:/o:redhat:enterprise_linux:7" />
      <ident system="www.unifiedcompliance.com">UCF CC ID 09035</ident>
      <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
        <check-export value-id="WhatIsTheRequiredUserIDOfTheFileOwner_var39" export-name="oval:com.mcafee.oval:var:80228" />
        <check-content-ref href="" name="oval:com.mcafee.oval:def:2487428" />
      </check>
    </Rule>
    <Rule id="TestTheOwnerOfTheFile_Usr_sbin_httpd" xml:lang="en" selected="false">
      <title xml:lang="en">Test the owner of the file - /usr/sbin/httpd</title>
      <description xml:lang="en">This check will verify the owner of the file - /usr/sbin/httpd</description>
      <reference>PCI DSS v3.2 Requirements 8</reference>
      <reference>https://www.pcisecuritystandards.org</reference>
      <platform idref="cpe:/o:centos:centos:7" />
      <platform idref="cpe:/o:oracle:linux:7" />
      <platform idref="cpe:/o:redhat:enterprise_linux:7" />
      <ident system="www.unifiedcompliance.com">UCF CC ID 09038</ident>
      <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
        <check-export value-id="WhatIsTheRequiredUserIDOfTheFileOwner_var40" export-name="oval:com.mcafee.oval:var:80228" />
        <check-content-ref href="" name="oval:com.mcafee.oval:def:79021" />
      </check>
    </Rule>
    <Rule id="TestTheOwnerOfTheDirectory_Var_www_html" xml:lang="en" selected="false">
      <title xml:lang="en">Test the owner of the directory - /var/www/html</title>
      <description xml:lang="en">This check will verify the owner of the directory - /var/www/html</description>
      <reference>PCI DSS v3.2 Requirements 8</reference>
      <reference>https://www.pcisecuritystandards.org</reference>
      <platform idref="cpe:/o:centos:centos:7" />
      <platform idref="cpe:/o:oracle:linux:7" />
      <platform idref="cpe:/o:redhat:enterprise_linux:7" />
      <ident system="www.unifiedcompliance.com">UCF CC ID 09039</ident>
      <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
        <check-export value-id="WhatIsTheRequiredUserIDOfTheFileOwner_var41" export-name="oval:com.mcafee.oval:var:80228" />
        <check-content-ref href="" name="oval:com.mcafee.oval:def:2487419" />
      </check>
    </Rule>
    <Rule id="TestTheOwnerOfTheFile_Etc_httpd_conf_httpd.conf" xml:lang="en" selected="false">
      <title xml:lang="en">Test the owner of the file - /etc/httpd/conf/httpd.conf</title>
      <description xml:lang="en">This check will verify the owner of the file - /etc/httpd/conf/httpd.conf.</description>
      <reference>PCI DSS v3.2 Requirements 8</reference>
      <reference>https://www.pcisecuritystandards.org</reference>
      <platform idref="cpe:/o:centos:centos:7" />
      <platform idref="cpe:/o:oracle:linux:7" />
      <platform idref="cpe:/o:redhat:enterprise_linux:7" />
      <ident system="www.unifiedcompliance.com">UCF CC ID 09095</ident>
      <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
        <check-export value-id="WhatIsTheRequiredUserIDOfTheFileOwner_var42" export-name="oval:com.mcafee.oval:var:80228" />
        <check-content-ref href="" name="oval:com.mcafee.oval:def:2487404" />
      </check>
    </Rule>
    <Rule id="TestTheGroupOwnerOfTheFile_Etc_httpd_conf_httpd.conf" xml:lang="en" selected="false">
      <title xml:lang="en">Test the group owner of the file - /etc/httpd/conf/httpd.conf</title>
      <description xml:lang="en">This check will verify the group owner of the file - /etc/httpd/conf/httpd.conf.</description>
      <reference>PCI DSS v3.2 Requirements 8</reference>
      <reference>https://www.pcisecuritystandards.org</reference>
      <platform idref="cpe:/o:centos:centos:7" />
      <platform idref="cpe:/o:oracle:linux:7" />
      <platform idref="cpe:/o:redhat:enterprise_linux:7" />
      <ident system="www.unifiedcompliance.com">UCF CC ID 09096</ident>
      <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
        <check-export value-id="WhatIsTheRequiredGroupIDOfTheFileOwner_var42" export-name="oval:com.mcafee.oval:var:80125" />
        <check-content-ref href="" name="oval:com.mcafee.oval:def:2487403" />
      </check>
    </Rule>
    <Rule id="TestTheOwnerOfTheFile_Usr_sbin_htpasswd" xml:lang="en" selected="false">
      <title xml:lang="en">Test the owner of the file - /usr/sbin/htpasswd</title>
      <description xml:lang="en">This check will verify the owner of /usr/sbin/htpasswd file</description>
      <reference>PCI DSS v3.2 Requirements 8</reference>
      <reference>https://www.pcisecuritystandards.org</reference>
      <platform idref="cpe:/o:centos:centos:7" />
      <platform idref="cpe:/o:oracle:linux:7" />
      <platform idref="cpe:/o:redhat:enterprise_linux:7" />
      <ident system="www.unifiedcompliance.com">UCF CC ID 09059</ident>
      <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
        <check-export value-id="WhatIsTheRequiredUserIDOfTheFileOwner_var43" export-name="oval:com.mcafee.oval:var:80228" />
        <check-content-ref href="" name="oval:com.mcafee.oval:def:2487413" />
      </check>
    </Rule>
    <Rule id="TestTheGroupOwnerOfTheFile_Usr_bin_htpasswd" xml:lang="en" selected="false">
      <title xml:lang="en">Test the group owner of the file - /usr/bin/htpasswd</title>
      <description xml:lang="en">This check will verify the group owner of the file - /usr/bin/htpasswd</description>
      <reference>PCI DSS v3.2 Requirements 8</reference>
      <reference>https://www.pcisecuritystandards.org</reference>
      <platform idref="cpe:/o:centos:centos:7" />
      <platform idref="cpe:/o:oracle:linux:7" />
      <platform idref="cpe:/o:redhat:enterprise_linux:7" />
      <ident system="www.unifiedcompliance.com">UCF CC ID 09058</ident>
      <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
        <check-export value-id="WhatIsTheRequiredGroupIDOfTheFileOwner_var43" export-name="oval:com.mcafee.oval:var:80125" />
        <check-content-ref href="" name="oval:com.mcafee.oval:def:2487411" />
      </check>
    </Rule>
    <Rule id="SetSSHProtocolTo2" xml:lang="en" selected="false">
      <title xml:lang="en">Set SSH Protocol to 2</title>
      <description xml:lang="en">SSH supports two different and incompatible protocols: SSH1 and SSH2. SSH1 was the original protocol and was subject to security issues. SSH2 is more advanced and secure. This check ensures that the SSH Protocol version is set appropriately in /etc/ssh/sshd_config file as per the user input.</description>
      <reference>PCI DSS v3.2 Requirements 8</reference>
      <reference>https://www.pcisecuritystandards.org</reference>
      <platform idref="cpe:/o:centos:centos:7" />
      <platform idref="cpe:/o:oracle:linux:7" />
      <platform idref="cpe:/o:redhat:enterprise_linux:7" />
      <ident system="www.unifiedcompliance.com">UCF CC ID 04475</ident>
      <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
        <check-export value-id="WhatIsTheExpectedSSHProtocolVersion_var" export-name="oval:com.mcafee.oval:var:230372" />
        <check-content-ref href="" name="oval:com.mcafee.oval:def:230333" />
      </check>
    </Rule>
    <Rule id="SetLogLevelToINFO" xml:lang="en" selected="false">
      <title xml:lang="en">Set LogLevel to INFO</title>
      <description xml:lang="en">The INFO parameter specifies that login and logout activity will be logged. This rule ensures that the SSH LogLevel parameter is set appropriately in /etc/ssh/sshd_config file.</description>
      <reference>PCI DSS v3.2 Requirements 8</reference>
      <reference>https://www.pcisecuritystandards.org</reference>
      <platform idref="cpe:/o:centos:centos:7" />
      <platform idref="cpe:/o:oracle:linux:7" />
      <platform idref="cpe:/o:redhat:enterprise_linux:7" />
      <ident system="www.unifiedcompliance.com">UCF CC ID 04475</ident>
      <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
        <check-export value-id="SelectSSHLogLevelSetting-TheseAreTheVerbosityLevelsThatAreUsedWhenLoggingMessagesFromSshd._var" export-name="oval:com.mcafee.oval:var:242726" />
        <check-content-ref href="" name="oval:com.mcafee.oval:def:242722" />
      </check>
    </Rule>
    <Rule id="DisableSSHX11Forwarding" xml:lang="en" selected="false">
      <title xml:lang="en">Disable SSH X11 Forwarding</title>
      <description xml:lang="en">The X11Forwarding parameter provides the ability to tunnel X11 traffic through the connection to enable remote graphic connections. This rule ensures that the X11 forwarding
        parameter is set appropriately in /etc/ssh/sshd_config file.</description>
      <reference>PCI DSS v3.2 Requirements 8</reference>
      <reference>https://www.pcisecuritystandards.org</reference>
      <platform idref="cpe:/o:centos:centos:7" />
      <platform idref="cpe:/o:oracle:linux:7" />
      <platform idref="cpe:/o:redhat:enterprise_linux:7" />
      <ident system="www.unifiedcompliance.com">UCF CC ID 04475</ident>
      <ident system="www.unifiedcompliance.com">UCF CC ID 05723</ident>
      <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
        <check-export value-id="AllowX11Forwarding_var" export-name="oval:com.mcafee.oval:var:79445" />
        <check-content-ref href="" name="oval:com.mcafee.oval:def:8665" />
      </check>
    </Rule>
    <Rule id="SetSSHMaxAuthTriesTo4OrLess" xml:lang="en" selected="false">
      <title xml:lang="en">Set SSH MaxAuthTries to 4 or Less</title>
      <description xml:lang="en">The MaxAuthTries parameter specifies the maximum number of authentication attempts permitted per connection. When the login failure count reaches half the number, error messages will be written to the syslog file detailing the login failure. This rule ensures that the SSH MaxAuthTries parameter is set appropriately in /etc/ssh/sshd_config file.</description>
      <reference>PCI DSS v3.2 Requirements 8</reference>
      <reference>https://www.pcisecuritystandards.org</reference>
      <platform idref="cpe:/o:centos:centos:7" />
      <platform idref="cpe:/o:oracle:linux:7" />
      <platform idref="cpe:/o:redhat:enterprise_linux:7" />
      <ident system="www.unifiedcompliance.com">UCF CC ID 04475</ident>
      <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
        <check-export value-id="SetSSHMaxAuthTries-EnterTheIntegerValue._var" export-name="oval:com.mcafee.oval:var:242731" />
        <check-content-ref href="" name="oval:com.mcafee.oval:def:242727" />
      </check>
    </Rule>
    <Rule id="SetSSHIgnoreRhostsToYes" xml:lang="en" selected="false">
      <title xml:lang="en">Set SSH IgnoreRhosts to Yes</title>
      <description xml:lang="en">The IgnoreRhosts parameter specifies that .rhosts and .shosts files will not be used in RhostsRSAAuthentication or HostbasedAuthentication. This rule verifies that the SSH IgnoreRhosts parameter is set appropriately in /etc/ssh/sshd_config file.</description>
      <reference>PCI DSS v3.2 Requirements 8</reference>
      <reference>https://www.pcisecuritystandards.org</reference>
      <platform idref="cpe:/o:centos:centos:7" />
      <platform idref="cpe:/o:oracle:linux:7" />
      <platform idref="cpe:/o:redhat:enterprise_linux:7" />
      <ident system="www.unifiedcompliance.com">UCF CC ID 04475</ident>
      <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
        <check-export value-id="ShouldRhostsBeIgnoredInSSH_var" export-name="oval:com.mcafee.oval:var:79442" />
        <check-content-ref href="" name="oval:com.mcafee.oval:def:8666" />
      </check>
    </Rule>
    <Rule id="SetSSHHostbasedAuthenticationToNo" xml:lang="en" selected="false">
      <title xml:lang="en">Set SSH HostbasedAuthentication to No</title>
      <description xml:lang="en">The HostbasedAuthentication parameter specifies if authentication is allowed through trusted hosts via the user of .rhosts, or /etc/hosts.equiv, along with successful public key client host authentication. This option only applies to SSH Protocol Version 2. This rule ensures that the SSH HostbasedAuthentication parameter is set appropriately in
        /etc/ssh/sshd_config file</description>
      <reference>PCI DSS v3.2 Requirements 8</reference>
      <reference>https://www.pcisecuritystandards.org</reference>
      <platform idref="cpe:/o:centos:centos:7" />
      <platform idref="cpe:/o:oracle:linux:7" />
      <platform idref="cpe:/o:redhat:enterprise_linux:7" />
      <ident system="www.unifiedcompliance.com">UCF CC ID 04475</ident>
      <ident system="www.unifiedcompliance.com">UCF CC ID 05576</ident>
      <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
        <check-export value-id="SSHHost-basedAuthenticationShouldBeEnabledOrDisabled_var" export-name="oval:com.mcafee.oval:var:94515" />
        <check-content-ref href="" name="oval:com.mcafee.oval:def:200803050006" />
      </check>
    </Rule>
    <Rule id="DisableSSHRootLogin" xml:lang="en" selected="false">
      <title xml:lang="en">Disable SSH Root Login</title>
      <description xml:lang="en">The PermitRootLogin parameter specifies if the root user can log in using ssh(1). The default is no. This rule ensures that SSH PermitRootLogin parameter is set appropriately in
        /etc/ssh/sshd_config file.</description>
      <reference>PCI DSS v3.2 Requirements 8</reference>
      <reference>PCI DSS v3.2 Requirements 2</reference>
      <reference>https://www.pcisecuritystandards.org</reference>
      <platform idref="cpe:/o:centos:centos:7" />
      <platform idref="cpe:/o:oracle:linux:7" />
      <platform idref="cpe:/o:redhat:enterprise_linux:7" />
      <ident system="www.unifiedcompliance.com">UCF CC ID 04475</ident>
      <ident system="www.unifiedcompliance.com">UCF CC ID 05574</ident>
      <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
        <check-export value-id="PermitRootLogin_var" export-name="oval:com.mcafee.oval:var:79443" />
        <check-content-ref href="" name="oval:com.mcafee.oval:def:200803050011" />
      </check>
    </Rule>
    <Rule id="DoNotAllowUsersToSetEnvironmentOptions" xml:lang="en" selected="false">
      <title xml:lang="en">Do Not Allow Users to Set Environment Options</title>
      <description xml:lang="en">The PermitUserEnvironment option allows users to present environment options to the ssh daemon. This rule ensures that the SSH PermitUserEnvironment parameter is set appropriately in /etc/ssh/sshd_config file.</description>
      <reference>PCI DSS v3.2 Requirements 8</reference>
      <reference>https://www.pcisecuritystandards.org</reference>
      <platform idref="cpe:/o:centos:centos:7" />
      <platform idref="cpe:/o:oracle:linux:7" />
      <platform idref="cpe:/o:redhat:enterprise_linux:7" />
      <ident system="www.unifiedcompliance.com">UCF CC ID 04475</ident>
      <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
        <check-export value-id="AllowPermitUserEnvironmentSetting_var" export-name="oval:com.mcafee.oval:var:242736" />
        <check-content-ref href="" name="oval:com.mcafee.oval:def:242732" />
      </check>
    </Rule>
    <Rule id="UseOnlyApprovedCipherInCounterMode" xml:lang="en" selected="false">
      <title xml:lang="en">Use Only Approved Cipher in Counter Mode</title>
      <description xml:lang="en">This variable limits the types of ciphers that SSH can use during communication. This check ensures that SSH uses approved ciphers (of new Counter mode algorithms) during communication.</description>
      <reference>PCI DSS v3.2 Requirements 8</reference>
      <reference>https://www.pcisecuritystandards.org</reference>
      <platform idref="cpe:/o:centos:centos:7" />
      <platform idref="cpe:/o:oracle:linux:7" />
      <platform idref="cpe:/o:redhat:enterprise_linux:7" />
      <ident system="www.unifiedcompliance.com">UCF CC ID 04475</ident>
      <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
        <check-content-ref href="" name="oval:com.mcafee.oval:def:244331" />
      </check>
    </Rule>
    <Rule id="SetIdleTimeoutIntervalForUserLogin_ClientAliveInterval" xml:lang="en" selected="false">
      <title xml:lang="en">Set Idle Timeout Interval for User Login - ClientAliveInterval</title>
      <description xml:lang="en">The two options ClientAliveInterval and ClientAliveCountMax control the timeout of ssh sessions. When the ClientAliveInterval variable is set, ssh sessions that have no activity for the specified length of time are terminated. When the ClientAliveCountMax variable is set, sshd will send client alive messages at every ClientAliveInterval interval. When the number of consecutive client alive messages are sent with no response from the client, the ssh session is terminated. For example, if the ClientAliveInterval is set to 15 seconds and the ClientAliveCountMax is set to 3, the client ssh session will be terminated after 45 seconds of idle time. This rule verifies that the ClientAliveInterval parameter is set appropriately in /etc/ssh/sshd_config file.</description>
      <reference>PCI DSS v3.2 Requirements 8</reference>
      <reference>PCI DSS v3.2 Requirements 2.3</reference>
      <reference>PCI DSS v3.2 Requirements 12.3.8</reference>
      <reference>https://www.pcisecuritystandards.org</reference>
      <platform idref="cpe:/o:centos:centos:7" />
      <platform idref="cpe:/o:oracle:linux:7" />
      <platform idref="cpe:/o:redhat:enterprise_linux:7" />
      <ident system="www.unifiedcompliance.com">UCF CC ID 04475</ident>
      <ident system="www.unifiedcompliance.com">UCF CC ID 01710</ident>
      <ident system="www.unifiedcompliance.com">UCF CC ID 01418</ident>
      <ident system="www.unifiedcompliance.com">UCF CC ID 12460</ident>
      <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
        <check-export value-id="SetSSHClientAliveInterval-EnterTheIntegerValue._var" export-name="oval:com.mcafee.oval:var:242741" />
        <check-content-ref href="" name="oval:com.mcafee.oval:def:242737" />
      </check>
    </Rule>
    <Rule id="SetIdleTimeoutIntervalForUserLogin_ClientAliveCountMax" xml:lang="en" selected="false">
      <title xml:lang="en">Set Idle Timeout Interval for User Login - ClientAliveCountMax</title>
      <description xml:lang="en">The two options ClientAliveInterval and ClientAliveCountMax control the timeout of ssh sessions. When the ClientAliveInterval variable is set, ssh sessions that have no activity for the specified length of time are terminated. When the ClientAliveCountMax variable is set, sshd will send client alive messages at every ClientAliveInterval interval. When the number of consecutive client alive messages are sent with no response from the client, the ssh session is terminated. For example, if the ClientAliveInterval is set to 15 seconds and the ClientAliveCountMax is set to 3, the client ssh session will be terminated after 45 seconds of idle time. This rule verifies that the SSH ClientAliveCountMax parameter is set appropriately in /etc/ssh/sshd_config file.</description>
      <reference>PCI DSS v3.2 Requirements 8</reference>
      <reference>PCI DSS v3.2 Requirements 2.3</reference>
      <reference>PCI DSS v3.2 Requirements 12.3.8</reference>
      <reference>https://www.pcisecuritystandards.org</reference>
      <platform idref="cpe:/o:centos:centos:7" />
      <platform idref="cpe:/o:oracle:linux:7" />
      <platform idref="cpe:/o:redhat:enterprise_linux:7" />
      <ident system="www.unifiedcompliance.com">UCF CC ID 04475</ident>
      <ident system="www.unifiedcompliance.com">UCF CC ID 01710</ident>
      <ident system="www.unifiedcompliance.com">UCF CC ID 01418</ident>
      <ident system="www.unifiedcompliance.com">UCF CC ID 12460</ident>
      <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
        <check-export value-id="SetSSHClientAliveCountMax-EnterTheIntegerValue._var" export-name="oval:com.mcafee.oval:var:242746" />
        <check-content-ref href="" name="oval:com.mcafee.oval:def:242742" />
      </check>
    </Rule>
    <Rule id="LimitAccessViaSSH" xml:lang="en" selected="false">
      <title xml:lang="en">Limit Access via SSH</title>
      <description xml:lang="en">This rule ensures that the access is limited to Users and Groups appropriately in /etc/ssh/sshd_config file.</description>
      <reference>PCI DSS v3.2 Requirements 8</reference>
      <reference>https://www.pcisecuritystandards.org</reference>
      <platform idref="cpe:/o:centos:centos:7" />
      <platform idref="cpe:/o:oracle:linux:7" />
      <platform idref="cpe:/o:redhat:enterprise_linux:7" />
      <ident system="www.unifiedcompliance.com">UCF CC ID 04475</ident>
      <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
        <check-content-ref href="" name="oval:com.mcafee.oval:def:242747" />
      </check>
    </Rule>
    <Rule id="SetSSHBanner" xml:lang="en" selected="false">
      <title xml:lang="en">Set SSH Banner</title>
      <description xml:lang="en">The Banner parameter specifies a file whose contents must be sent to the remote user before authentication is permitted. By default, no banner is displayed. This rule ensures that the SSH Banner is set appropriately in /etc/ssh/sshd_config file.</description>
      <reference>PCI DSS v3.2 Requirements 8</reference>
      <reference>https://www.pcisecuritystandards.org</reference>
      <platform idref="cpe:/o:centos:centos:7" />
      <platform idref="cpe:/o:oracle:linux:7" />
      <platform idref="cpe:/o:redhat:enterprise_linux:7" />
      <ident system="www.unifiedcompliance.com">UCF CC ID 04475</ident>
      <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
        <check-content-ref href="" name="oval:com.mcafee.oval:def:230327" />
      </check>
    </Rule>
    <Rule id="CheckForDuplicateGIDs" xml:lang="en" selected="false">
      <title xml:lang="en">Check for Duplicate GIDs</title>
      <description xml:lang="en">Although the groupadd program will not let you create a duplicate Group ID (GID), it is possible for an administrator to manually edit the /etc/group file and change the GID field.</description>
      <reference>PCI DSS v3.2 Requirements 10</reference>
      <reference>https://www.pcisecuritystandards.org</reference>
      <platform idref="cpe:/o:centos:centos:7" />
      <platform idref="cpe:/o:oracle:linux:7" />
      <platform idref="cpe:/o:redhat:enterprise_linux:7" />
      <ident system="www.unifiedcompliance.com">UCF CC ID 09931</ident>
      <check system="http://www.mcafee.com/xccdf/script/1.0">
        <check-content>/bin/sh
30
          #!/bin/bash
          /bin/cat /etc/group | /bin/cut -f3 -d":" | /bin/sort -n | /usr/bin/uniq -c |\
          while read x ; do
          [ -z "${x}" ] &amp;&amp; break
          set - $x
          if [ $1 -gt 1 ]; then
          grps=`/bin/gawk -F: '($3 == n) { print $1 }' n=$2 \ /etc/group | xargs`
          # echo "Duplicate GID ($2): ${grps}"
          exit 1
          fi
          done</check-content>
      </check>
    </Rule>
    <Rule id="CheckForDuplicateUIDs" xml:lang="en" selected="false">
      <title xml:lang="en">Check for Duplicate UIDs</title>
      <description xml:lang="en">Although the useradd program will not let you create a duplicate User ID (UID), it is possible for an administrator to manually edit the /etc/passwd file and change the UID field.</description>
      <reference>PCI DSS v3.2 Requirements 10</reference>
      <reference>https://www.pcisecuritystandards.org</reference>
      <platform idref="cpe:/o:centos:centos:7" />
      <platform idref="cpe:/o:oracle:linux:7" />
      <platform idref="cpe:/o:redhat:enterprise_linux:7" />
      <ident system="www.unifiedcompliance.com">UCF CC ID 09930</ident>
      <check system="http://www.mcafee.com/xccdf/script/1.0">
        <check-content>/bin/sh
30
          #!/bin/bash
        /bin/cat /etc/passwd | /bin/cut -f3 -d":" | /bin/sort -n | /usr/bin/uniq -c |\
          while read x ; do
          [ -z "${x}" ] &amp;&amp; break
          set - $x
          if [ $1 -gt 1 ]; then
          users=`/bin/gawk -F: '($3 == n) { print $1 }' n=$2 /etc/passwd | /usr/bin/xargs` 
          # echo "Duplicate UID ($2): ${users}"
          exit 1;
          fi
          done</check-content>
      </check>
    </Rule>
    <Rule id="CheckForDuplicateUserNames" xml:lang="en" selected="false">
      <title xml:lang="en">Check for Duplicate User Names</title>
      <description xml:lang="en">Although the useradd program will not let you create a duplicate user name, it is possible for an administrator to manually edit the /etc/passwd file and change the user name.</description>
      <reference>PCI DSS v3.2 Requirements 10</reference>
      <reference>https://www.pcisecuritystandards.org</reference>
      <platform idref="cpe:/o:centos:centos:7" />
      <platform idref="cpe:/o:oracle:linux:7" />
      <platform idref="cpe:/o:redhat:enterprise_linux:7" />
      <ident system="www.unifiedcompliance.com">UCF CC ID 09956</ident>
      <check system="http://www.mcafee.com/xccdf/script/1.0">
        <check-content>/bin/sh
30
          #!/bin/bash
          /bin/cat /etc/passwd | /bin/cut -f1 -d":" | /bin/sort -n | /usr/bin/uniq -c |\
          while read x ; do
          [ -z "${x}" ] &amp;&amp; break
          set - $x 
          if [ $1 -gt 1 ]; then
          uids=`/bin/gawk -F: '($1 == n) { print $3 }' n=$2 \ /etc/passwd | xargs`
          #echo "Duplicate User Name ($2): ${uids}"
          exit 1
          fi
          done</check-content>
      </check>
    </Rule>
    <Rule id="CheckForDuplicateGroupNames" xml:lang="en" selected="false">
      <title xml:lang="en">Check for Duplicate Group Names</title>
      <description xml:lang="en">Although the groupadd program will not let you create a duplicate group name, it is possible for an administrator to manually edit the /etc/group file and change the group name.</description>
      <reference>PCI DSS v3.2 Requirements 10</reference>
      <reference>https://www.pcisecuritystandards.org</reference>
      <platform idref="cpe:/o:centos:centos:7" />
      <platform idref="cpe:/o:oracle:linux:7" />
      <platform idref="cpe:/o:redhat:enterprise_linux:7" />
      <ident system="www.unifiedcompliance.com">UCF CC ID 09932</ident>
      <check system="http://www.mcafee.com/xccdf/script/1.0">
        <check-content>/bin/sh
30
          #!/bin/bash
          /bin/cat /etc/group | /bin/cut -f1 -d":" | /bin/sort -n | /usr/bin/uniq -c |\
          while read x ; do
          [ -z "${x}" ] &amp;&amp; break
          set - $x 
          if [ $1 -gt 1 ]; then
          gids=`/bin/gawk -F: '($1 == n) { print $3 }' n=$2 /etc/passwd | xargs`
          #echo "Duplicate Group Name ($2): ${gids}"
          exit 1
          fi
          done</check-content>
      </check>
    </Rule>
    <Rule id="ConfigureRsyslogToSendLogsToARemoteLogHost" xml:lang="en" selected="false">
      <title xml:lang="en">Configure rsyslog to Send Logs to a Remote Log Host</title>
      <description xml:lang="en">The rsyslog utility supports the ability to send logs it gathers to a remote log host running syslogd(8) or to receive messages from remote hosts, reducing administrative overhead. This rule verifies whether system is configured to send logs to remote LogHost.</description>
      <reference>PCI DSS v3.2 Requirements 3</reference>
      <reference>https://www.pcisecuritystandards.org</reference>
      <platform idref="cpe:/o:centos:centos:7" />
      <platform idref="cpe:/o:oracle:linux:7" />
      <platform idref="cpe:/o:redhat:enterprise_linux:7" />
      <ident system="www.unifiedcompliance.com">UCF CC ID 08800</ident>
      <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
        <check-content-ref href="" name="oval:com.mcafee.oval:def:249406" />
      </check>
    </Rule>
    <Rule id="AcceptRemoteRsyslogMessagesOnlyOnDesignatedLogHosts" xml:lang="en" selected="false">
      <title xml:lang="en">Accept Remote rsyslog Messages Only on Designated Log Hosts</title>
      <description xml:lang="en">By default, rsyslog does not listen for log messages coming in from remote systems. The ModLoad tells rsyslog to load the imtcp.so module so it can listen over a network via TCP. The InputTCPServerRun option instructs rsyslogd to listen on the specified TCP port. This rule verifies if imtcp.so module and  InputTCPServerRun parameter are set correctly in /etc/rsyslog.conf for the hosts that are designated log hosts.</description>
      <reference>PCI DSS v3.2 Requirements 3</reference>
      <reference>https://www.pcisecuritystandards.org</reference>
      <platform idref="cpe:/o:centos:centos:7" />
      <platform idref="cpe:/o:oracle:linux:7" />
      <platform idref="cpe:/o:redhat:enterprise_linux:7" />
      <ident system="www.unifiedcompliance.com">UCF CC ID 08801</ident>
      <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
        <check-content-ref href="" name="oval:com.mcafee.oval:def:249542" />
      </check>
    </Rule>
    <Rule id="CheckForUnconfinedDaemons" xml:lang="en" selected="false">
      <title xml:lang="en">Check for Unconfined Daemons</title>
      <description xml:lang="en">Daemons that are not defined in SELinux policy will inherit the security context of their parent process. This rule is to verify the existence of unconfined daemons on the server.</description>
      <reference>PCI DSS v3.2 Requirements 3</reference>
      <reference>https://www.pcisecuritystandards.org</reference>
      <platform idref="cpe:/o:centos:centos:7" />
      <platform idref="cpe:/o:oracle:linux:7" />
      <platform idref="cpe:/o:redhat:enterprise_linux:7" />
      <ident system="www.unifiedcompliance.com">UCF CC ID 09936</ident>
      <check system="http://www.mcafee.com/xccdf/script/1.0">
        <check-content>/bin/sh
30
          #!/bin/bash
          #BASH script to verify the existence of unconfined daemons on the server
          UNCONFINED_DAEMON_EXISTENCE_CHECK=`ps -eZ | egrep "initrc" | egrep -vw "tr|ps|egrep|bash|awk" | tr ':' ' ' | awk '{ print $NF }'`
          if [ -z "$UNCONFINED_DAEMON_EXISTENCE_CHECK" ]
          then
          #echo "Any UNCONFINED Daemon does not exists on the system."
          exit 0  #Script should return true. Verify the last executed command status by echo $?.
          else
          #echo "UNCONFINED Daemons does exists on the system."
          exit 1  #Script should return false. Verify the last executed command status by echo $?.
          fi
          fi</check-content>
      </check>
    </Rule>
    <Rule id="DisableMountingOfCramfsFilesystems" xml:lang="en" selected="false">
      <title xml:lang="en">Disable Mounting of cramfs Filesystems</title>
      <description xml:lang="en">The cramfs filesystem type is a compressed read-only Linux filesystem embedded in small footprint systems. A cramfs image can be used without having to first decompress the image. This rule will verify that cramfs filesystem is disabled.</description>
      <reference>PCI DSS v3.2 Requirements 6</reference>
      <reference>https://www.pcisecuritystandards.org</reference>
      <platform idref="cpe:/o:centos:centos:7" />
      <platform idref="cpe:/o:oracle:linux:7" />
      <platform idref="cpe:/o:redhat:enterprise_linux:7" />
      <ident system="www.unifiedcompliance.com">UCF CC ID 08765</ident>
      <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
        <check-content-ref href="" name="oval:com.mcafee.oval:def:402410" />
      </check>
    </Rule>
    <Rule id="DisableMountingOfFreevxfsFilesystems" xml:lang="en" selected="false">
      <title xml:lang="en">Disable Mounting of freevxfs Filesystems</title>
      <description xml:lang="en">The freevxfs filesystem type is a free version of the Veritas type filesystem. This is the primary filesystem type for HP-UX operating systems. This rule will verify that freevxfs filesystem is disabled.</description>
      <reference>PCI DSS v3.2 Requirements 6</reference>
      <reference>https://www.pcisecuritystandards.org</reference>
      <platform idref="cpe:/o:centos:centos:7" />
      <platform idref="cpe:/o:oracle:linux:7" />
      <platform idref="cpe:/o:redhat:enterprise_linux:7" />
      <ident system="www.unifiedcompliance.com">UCF CC ID 08766</ident>
      <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
        <check-content-ref href="" name="oval:com.mcafee.oval:def:402411" />
      </check>
    </Rule>
    <Rule id="DisableMountingOfJffs2Filesystems" xml:lang="en" selected="false">
      <title xml:lang="en">Disable Mounting of jffs2 Filesystems</title>
      <description xml:lang="en">The jffs2 (journaling flash filesystem 2) filesystem type is a log-structured filesystem used in flash memory devices. This rule will verify that jffs2 filesystem is disabled.</description>
      <reference>PCI DSS v3.2 Requirements 6</reference>
      <reference>https://www.pcisecuritystandards.org</reference>
      <platform idref="cpe:/o:centos:centos:7" />
      <platform idref="cpe:/o:oracle:linux:7" />
      <platform idref="cpe:/o:redhat:enterprise_linux:7" />
      <ident system="www.unifiedcompliance.com">UCF CC ID 08769</ident>
      <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
        <check-content-ref href="" name="oval:com.mcafee.oval:def:402412" />
      </check>
    </Rule>
    <Rule id="DisableMountingOfHfsFilesystems" xml:lang="en" selected="false">
      <title xml:lang="en">Disable Mounting of hfs Filesystems</title>
      <description xml:lang="en">The hfs filesystem type is a hierarchical filesystem that allows you to mount Mac OS filesystems. This rule will verify that hfs filesystem is disabled.</description>
      <reference>PCI DSS v3.2 Requirements 6</reference>
      <reference>https://www.pcisecuritystandards.org</reference>
      <platform idref="cpe:/o:centos:centos:7" />
      <platform idref="cpe:/o:oracle:linux:7" />
      <platform idref="cpe:/o:redhat:enterprise_linux:7" />
      <ident system="www.unifiedcompliance.com">UCF CC ID 08767</ident>
      <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
        <check-content-ref href="" name="oval:com.mcafee.oval:def:402413" />
      </check>
    </Rule>
    <Rule id="DisableMountingOfHfsplusFilesystems" xml:lang="en" selected="false">
      <title xml:lang="en">Disable Mounting of hfsplus Filesystems</title>
      <description xml:lang="en">The hfsplus filesystem type is a hierarchical filesystem designed to replace hfs that allows you to mount Mac OS filesystems. This rule will verify that hfsplus filesystem is disabled.</description>
      <reference>PCI DSS v3.2 Requirements 6</reference>
      <reference>https://www.pcisecuritystandards.org</reference>
      <platform idref="cpe:/o:centos:centos:7" />
      <platform idref="cpe:/o:oracle:linux:7" />
      <platform idref="cpe:/o:redhat:enterprise_linux:7" />
      <ident system="www.unifiedcompliance.com">UCF CC ID 08768</ident>
      <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
        <check-content-ref href="" name="oval:com.mcafee.oval:def:402414" />
      </check>
    </Rule>
    <Rule id="DisableMountingOfSquashfsFilesystems" xml:lang="en" selected="false">
      <title xml:lang="en">Disable Mounting of squashfs Filesystems</title>
      <description xml:lang="en">The squashfs filesystem type is a compressed read-only Linux filesystem embedded in small footprint systems (similar to cramfs). A squashfs image can be used without having to first decompress the image. This rule will verify that squashfs filesystem is disabled.</description>
      <reference>PCI DSS v3.2 Requirements 6</reference>
      <reference>https://www.pcisecuritystandards.org</reference>
      <platform idref="cpe:/o:centos:centos:7" />
      <platform idref="cpe:/o:oracle:linux:7" />
      <platform idref="cpe:/o:redhat:enterprise_linux:7" />
      <ident system="www.unifiedcompliance.com">UCF CC ID 08770</ident>
      <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
        <check-content-ref href="" name="oval:com.mcafee.oval:def:402415" />
      </check>
    </Rule>
    <Rule id="DisableMountingOfUdfFilesystems" xml:lang="en" selected="false">
      <title xml:lang="en">Disable Mounting of udf Filesystems</title>
      <description xml:lang="en">The udf filesystem type is the universal disk format used to implement ISO/IEC 13346 and ECMA-167 specifications. This is an open vendor filesystem type for data storage on a broad range of media. This filesystem type is necessary to support writing DVDs and newer optical disc formats. This rule will verify that udf filesystem is disabled.</description>
      <reference>PCI DSS v3.2 Requirements 6</reference>
      <reference>https://www.pcisecuritystandards.org</reference>
      <platform idref="cpe:/o:centos:centos:7" />
      <platform idref="cpe:/o:oracle:linux:7" />
      <platform idref="cpe:/o:redhat:enterprise_linux:7" />
      <ident system="www.unifiedcompliance.com">UCF CC ID 08771</ident>
      <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
        <check-content-ref href="" name="oval:com.mcafee.oval:def:402416" />
      </check>
    </Rule>
    <Rule id="VerifyRedHatGPGKeyIsInstalled" xml:lang="en" selected="false">
      <title xml:lang="en">Verify Red Hat GPG Key is Installed</title>
      <description xml:lang="en">Red Hat cryptographically signs updates with a GPG key to verify that they are valid. This rule is to ensure that the GPG Key RPM package should exist on the system.</description>
      <reference>PCI DSS v3.2 Requirements 6</reference>
      <reference>https://www.pcisecuritystandards.org</reference>
      <platform idref="cpe:/o:centos:centos:7" />
      <platform idref="cpe:/o:oracle:linux:7" />
      <platform idref="cpe:/o:redhat:enterprise_linux:7" />
      <ident system="www.unifiedcompliance.com">UCF CC ID 08764</ident>
      <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
        <check-export value-id="EnterTheNameOfTheRPMPackageToBeVerified._var666" export-name="oval:com.mcafee.oval:var:242779" />
        <check-content-ref href="" name="oval:com.mcafee.oval:def:244340" />
      </check>
    </Rule>
    <Rule id="VerifyThatGpgcheckIsGloballyActivated" xml:lang="en" selected="false">
      <title xml:lang="en">Verify that gpgcheck is Globally Activated</title>
      <description xml:lang="en">The gpgcheck option, found in the main section of the /etc/yum.conf file determines if an RPM package's signature is always checked prior to its installation. This rule verifies that gpgcheck is Globally Activated in /etc/yum.conf file.</description>
      <reference>PCI DSS v3.2 Requirements 6</reference>
      <reference>https://www.pcisecuritystandards.org</reference>
      <platform idref="cpe:/o:centos:centos:7" />
      <platform idref="cpe:/o:oracle:linux:7" />
      <platform idref="cpe:/o:redhat:enterprise_linux:7" />
      <ident system="www.unifiedcompliance.com">UCF CC ID 08764</ident>
      <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
        <check-export value-id="GpgcheckShouldBeEnabledOrDisabled_var" export-name="oval:com.mcafee.oval:var:401602" />
        <check-content-ref href="" name="oval:com.mcafee.oval:def:401598" />
      </check>
    </Rule>
    <Rule id="RestrictAccessToTheSuCommand_UsersListInTheWheelStatementIn_Etc_group" xml:lang="en" selected="false">
      <title xml:lang="en">Restrict Access to the su Command - Users list in the wheel statement in /etc/group</title>
      <description xml:lang="en">The su command allows a user to run a command or shell as another user. The program has been superseded by sudo, which allows for more granular control over privileged access. Normally, the su command can be executed by any user. By un-commenting the pam_wheel.so statement in /etc/pam.d/su, the su command will only allow users in the wheel group to execute su. This check verifies for the comma separated list of users in the wheel statement in the /etc/group file.</description>
      <reference>PCI DSS v3.2 Requirements 2.3</reference>
      <reference>https://www.pcisecuritystandards.org</reference>
      <platform idref="cpe:/o:centos:centos:7" />
      <platform idref="cpe:/o:oracle:linux:7" />
      <platform idref="cpe:/o:redhat:enterprise_linux:7" />
      <ident system="www.unifiedcompliance.com">UCF CC ID 05539</ident>
      <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
        <check-content-ref href="" name="oval:com.mcafee.oval:def:244738" />
      </check>
    </Rule>
    <Rule id="Create_Etc_hosts.allow" xml:lang="en" selected="false">
      <title xml:lang="en">Create /etc/hosts.allow</title>
      <description xml:lang="en">The /etc/hosts.allow file specifies which IP addresses are permitted to connect to the host. It is intended to be used in conjunction with the /etc/hosts.deny file. This rule verifies if the /etc/hosts.allow file exists on the system.</description>
      <reference>PCI DSS v3.2 Requirements 10</reference>
      <reference>https://www.pcisecuritystandards.org</reference>
      <platform idref="cpe:/o:centos:centos:7" />
      <platform idref="cpe:/o:oracle:linux:7" />
      <platform idref="cpe:/o:redhat:enterprise_linux:7" />
      <ident system="www.unifiedcompliance.com">UCF CC ID 09944</ident>
      <ident system="www.unifiedcompliance.com">UCF CC ID 01566</ident>
      <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
        <check-content-ref href="" name="oval:com.mcafee.oval:def:231137" />
      </check>
    </Rule>
    <Rule id="InstallTCPWrappers" xml:lang="en" selected="false">
      <title xml:lang="en">Install TCP Wrappers</title>
      <description xml:lang="en">TCP Wrappers provides a simple access list and standardized logging method for services capable of supporting it. In the past, services that were called from inetd and xinetd supported the use of tcp wrappers. As inetd and xinetd have been falling in disuse, any service that can support tcp wrappers will have the libwrap.so library attached to it. This rule is to ensure that the tcp_wrappers RPM package exist on the system.</description>
      <reference>PCI DSS v3.2 Requirements 10</reference>
      <reference>https://www.pcisecuritystandards.org</reference>
      <platform idref="cpe:/o:centos:centos:7" />
      <platform idref="cpe:/o:oracle:linux:7" />
      <platform idref="cpe:/o:redhat:enterprise_linux:7" />
      <ident system="www.unifiedcompliance.com">UCF CC ID 01567</ident>
      <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
        <check-export value-id="EnterTheNameOfTheRPMPackageToBeVerified._var25" export-name="oval:com.mcafee.oval:var:242779" />
        <check-content-ref href="" name="oval:com.mcafee.oval:def:244340" />
      </check>
    </Rule>
    <Rule id="VerifyPermissionsOn_Etc_hosts.allow" xml:lang="en" selected="false">
      <title xml:lang="en">Verify Permissions on /etc/hosts.allow</title>
      <description xml:lang="en">The /etc/hosts.allow file contains networking information that is used by many applications and therefore must be readable for these applications to operate. This rule verifies if the permissions of the file - /etc/hosts.allow are set as per the user input.</description>
      <reference>PCI DSS v3.2 Requirements 10</reference>
      <reference>https://www.pcisecuritystandards.org</reference>
      <platform idref="cpe:/o:centos:centos:7" />
      <platform idref="cpe:/o:oracle:linux:7" />
      <platform idref="cpe:/o:redhat:enterprise_linux:7" />
      <ident system="www.unifiedcompliance.com">UCF CC ID 01566</ident>
      <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
        <check-export value-id="ShouldTheUserHaveREADAccess_var129" export-name="oval:com.mcafee.oval:var:78640" />
        <check-export value-id="ShouldTheUserHaveWRITEAccess_var129" export-name="oval:com.mcafee.oval:var:78641" />
        <check-export value-id="ShouldTheUserHaveEXECUTEAccess_var129" export-name="oval:com.mcafee.oval:var:78642" />
        <check-export value-id="ShouldTheGroupHaveREADAccess_var129" export-name="oval:com.mcafee.oval:var:78643" />
        <check-export value-id="ShouldTheGroupHaveWRITEAccess_var129" export-name="oval:com.mcafee.oval:var:78644" />
        <check-export value-id="ShouldTheGroupHaveEXECUTEAccess_var129" export-name="oval:com.mcafee.oval:var:78645" />
        <check-export value-id="ShouldOthersHaveREADAccess_var129" export-name="oval:com.mcafee.oval:var:78646" />
        <check-export value-id="ShouldOthersHaveWRITEAccess_var129" export-name="oval:com.mcafee.oval:var:78647" />
        <check-export value-id="ShouldOthersHaveEXECUTEAccess_var129" export-name="oval:com.mcafee.oval:var:78648" />
        <check-content-ref href="" name="oval:com.mcafee.oval:def:78708" />
      </check>
    </Rule>
    <Rule id="VerifyPermissionsOn_Etc_hosts.allow_Ownership" xml:lang="en" selected="false">
      <title xml:lang="en">Verify Permissions on /etc/hosts.allow - Ownership</title>
      <description xml:lang="en">The /etc/hosts.allow file contains networking information that is used by many applications and therefore must be readable for these applications to operate. This rule verifies if the owner of the file - /etc/hosts.allow is set as per the user input.</description>
      <reference>PCI DSS v3.2 Requirements 10</reference>
      <reference>https://www.pcisecuritystandards.org</reference>
      <platform idref="cpe:/o:centos:centos:7" />
      <platform idref="cpe:/o:oracle:linux:7" />
      <platform idref="cpe:/o:redhat:enterprise_linux:7" />
      <ident system="www.unifiedcompliance.com">UCF CC ID 01566</ident>
      <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
        <check-export value-id="WhatIsTheRequiredUserIDOfTheFileOwner_var129" export-name="oval:com.mcafee.oval:var:80228" />
        <check-content-ref href="" name="oval:com.mcafee.oval:def:78869" />
      </check>
    </Rule>
    <Rule id="VerifyPermissionsOn_Etc_hosts.allow_GroupOwnership" xml:lang="en" selected="false">
      <title xml:lang="en">Verify Permissions on /etc/hosts.allow - Group Ownership</title>
      <description xml:lang="en">The /etc/hosts.allow file contains networking information that is used by many applications and therefore must be readable for these applications to operate. This rule verifies if the group owner of the file - /etc/hosts.allow is set as per the user input.</description>
      <reference>PCI DSS v3.2 Requirements 10</reference>
      <reference>https://www.pcisecuritystandards.org</reference>
      <platform idref="cpe:/o:centos:centos:7" />
      <platform idref="cpe:/o:oracle:linux:7" />
      <platform idref="cpe:/o:redhat:enterprise_linux:7" />
      <ident system="www.unifiedcompliance.com">UCF CC ID 01566</ident>
      <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
        <check-export value-id="WhatIsTheRequiredGroupIDOfTheFileOwner_var129" export-name="oval:com.mcafee.oval:var:80125" />
        <check-content-ref href="" name="oval:com.mcafee.oval:def:78786" />
      </check>
    </Rule>
    <Rule id="Create_Etc_hosts.deny" xml:lang="en" selected="false">
      <title xml:lang="en">Create /etc/hosts.deny</title>
      <description xml:lang="en">The /etc/hosts.deny file specifies which IP addresses are not permitted to connect to the host. It is intended to be used in conjunction with the /etc/hosts.allow file. This rule verifies if the /etc/hosts.deny file exists on the system.</description>
      <reference>PCI DSS v3.2 Requirements 10</reference>
      <reference>https://www.pcisecuritystandards.org</reference>
      <platform idref="cpe:/o:centos:centos:7" />
      <platform idref="cpe:/o:oracle:linux:7" />
      <platform idref="cpe:/o:redhat:enterprise_linux:7" />
      <ident system="www.unifiedcompliance.com">UCF CC ID 01566</ident>
      <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
        <check-content-ref href="" name="oval:com.mcafee.oval:def:231138" />
      </check>
    </Rule>
    <Rule id="VerifyPermissionsOn_Etc_hosts.deny" xml:lang="en" selected="false">
      <title xml:lang="en">Verify Permissions on /etc/hosts.deny</title>
      <description xml:lang="en">The /etc/hosts.deny file contains network information that is used by many system applications and therefore must be readable for these applications to operate. This rule verifies if the permissions of the file /etc/hosts.deny are set as per the user input.</description>
      <reference>PCI DSS v3.2 Requirements 10</reference>
      <reference>https://www.pcisecuritystandards.org</reference>
      <platform idref="cpe:/o:centos:centos:7" />
      <platform idref="cpe:/o:oracle:linux:7" />
      <platform idref="cpe:/o:redhat:enterprise_linux:7" />
      <ident system="www.unifiedcompliance.com">UCF CC ID 01566</ident>
      <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
        <check-export value-id="ShouldTheUserHaveREADAccess_var128" export-name="oval:com.mcafee.oval:var:78640" />
        <check-export value-id="ShouldTheUserHaveWRITEAccess_var128" export-name="oval:com.mcafee.oval:var:78641" />
        <check-export value-id="ShouldTheUserHaveEXECUTEAccess_var128" export-name="oval:com.mcafee.oval:var:78642" />
        <check-export value-id="ShouldTheGroupHaveREADAccess_var128" export-name="oval:com.mcafee.oval:var:78643" />
        <check-export value-id="ShouldTheGroupHaveWRITEAccess_var128" export-name="oval:com.mcafee.oval:var:78644" />
        <check-export value-id="ShouldTheGroupHaveEXECUTEAccess_var128" export-name="oval:com.mcafee.oval:var:78645" />
        <check-export value-id="ShouldOthersHaveREADAccess_var128" export-name="oval:com.mcafee.oval:var:78646" />
        <check-export value-id="ShouldOthersHaveWRITEAccess_var128" export-name="oval:com.mcafee.oval:var:78647" />
        <check-export value-id="ShouldOthersHaveEXECUTEAccess_var128" export-name="oval:com.mcafee.oval:var:78648" />
        <check-content-ref href="" name="oval:com.mcafee.oval:def:78707" />
      </check>
    </Rule>
    <Rule id="VerifyPermissionsOn_Etc_hosts.deny_Ownership" xml:lang="en" selected="false">
      <title xml:lang="en">Verify Permissions on /etc/hosts.deny - Ownership</title>
      <description xml:lang="en">The /etc/hosts.deny file contains network information that is used by many system applications and therefore must be readable for these applications to operate. This rule verifies if the owner of the file - /etc/hosts.deny is set as per the user input.</description>
      <reference>PCI DSS v3.2 Requirements 10</reference>
      <reference>https://www.pcisecuritystandards.org</reference>
      <platform idref="cpe:/o:centos:centos:7" />
      <platform idref="cpe:/o:oracle:linux:7" />
      <platform idref="cpe:/o:redhat:enterprise_linux:7" />
      <ident system="www.unifiedcompliance.com">UCF CC ID 01566</ident>
      <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
        <check-export value-id="WhatIsTheRequiredUserIDOfTheFileOwner_var128" export-name="oval:com.mcafee.oval:var:80228" />
        <check-content-ref href="" name="oval:com.mcafee.oval:def:78870" />
      </check>
    </Rule>
    <Rule id="VerifyPermissionsOn_Etc_hosts.deny_GroupOwnership" xml:lang="en" selected="false">
      <title xml:lang="en">Verify Permissions on /etc/hosts.deny - Group Ownership</title>
      <description xml:lang="en">The /etc/hosts.deny file contains network information that is used by many system applications and therefore must be readable for these applications to operate. This rule verifies if the group owner of the file /etc/hosts.deny is set as per the user inputs.</description>
      <reference>PCI DSS v3.2 Requirements 10</reference>
      <reference>https://www.pcisecuritystandards.org</reference>
      <platform idref="cpe:/o:centos:centos:7" />
      <platform idref="cpe:/o:oracle:linux:7" />
      <platform idref="cpe:/o:redhat:enterprise_linux:7" />
      <ident system="www.unifiedcompliance.com">UCF CC ID 01566</ident>
      <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
        <check-export value-id="WhatIsTheRequiredGroupIDOfTheFileOwner_var128" export-name="oval:com.mcafee.oval:var:80125" />
        <check-content-ref href="" name="oval:com.mcafee.oval:def:78787" />
      </check>
    </Rule>
    <Rule id="FTPConfiguration_UmaskForFtpUsers" xml:lang="en" selected="false">
      <title xml:lang="en">FTP Configuration - umask for ftp users</title>
      <description xml:lang="en">This check verifies if umask for ftp users is set properly.</description>
      <reference>PCI DSS v3.2 Requirements 2</reference>
      <reference>https://www.pcisecuritystandards.org</reference>
      <platform idref="cpe:/o:centos:centos:7" />
      <platform idref="cpe:/o:oracle:linux:7" />
      <platform idref="cpe:/o:redhat:enterprise_linux:7" />
      <ident system="www.unifiedcompliance.com">UCF CC ID 01592</ident>
      <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
        <check-export value-id="WhatShouldBeTheUmaskValue_var" export-name="oval:com.mcafee.oval:var:98454" />
        <check-content-ref href="" name="oval:com.mcafee.oval:def:2487498" />
      </check>
    </Rule>
    <Rule id="Configuraration_Read_onlyOptionForAllNFSExports" xml:lang="en" selected="false">
      <title xml:lang="en">Configuraration - read-only option for all NFS exports</title>
      <description xml:lang="en">This check ensures that  file systems such as nfs or nfs4 does have ro option in /etc/exports file.</description>
      <reference>PCI DSS v3.2 Requirements 2.3</reference>
      <reference>https://www.pcisecuritystandards.org</reference>
      <platform idref="cpe:/o:centos:centos:7" />
      <platform idref="cpe:/o:oracle:linux:7" />
      <platform idref="cpe:/o:redhat:enterprise_linux:7" />
      <ident system="www.unifiedcompliance.com">UCF CC ID 05572</ident>
      <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
        <check-content-ref href="" name="oval:com.mcafee.oval:def:2487515" />
      </check>
    </Rule>
    <Rule id="TestTheConfigurationStatusOfMailTransferAgent_MTA_ForLocal_onlyMode" xml:lang="en" selected="false">
      <title xml:lang="en">Test the configuration status of Mail Transfer Agent (MTA) for local-only mode</title>
      <description xml:lang="en">This check verifies if the MTA is configured to local-only mode in the /etc/postfix/main.cf file. If the system is not intended to be a mail server, it is recommended that the MTA be configured to only process local mail. Ensure that the MTA is listening on the loopback address (127.0.0.1)</description>
      <reference>PCI DSS v3.2 Requirements 10</reference>
      <reference>https://www.pcisecuritystandards.org</reference>
      <platform idref="cpe:/o:centos:centos:7" />
      <platform idref="cpe:/o:oracle:linux:7" />
      <platform idref="cpe:/o:redhat:enterprise_linux:7" /> 
      <ident system="www.unifiedcompliance.com">UCF CC ID 08753</ident>
      <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
        <check-content-ref href="" name="oval:com.mcafee.oval:def:2487520" />
      </check>
    </Rule>
  </Group>
  <Group id="ConfigureFirewall" xml:lang="en">
    <title xml:lang="en">Configure Firewall</title>    
    <Value id="EnterTheDesiredFirewalldVersion._var" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">0.4.3.2</value>
    </Value>
    <Rule id="EnsureFirewalldServiceIsEnabled" xml:lang="en" selected="false">
      <title xml:lang="en">Ensure firewalld service is enabled</title>
      <description xml:lang="en">This rule will verify that firewalld service is enabled on the system.</description>
      <reference>PCI DSS v3.2 Requirements 1.2.2</reference>
      <reference>https://www.pcisecuritystandards.org</reference>
      <platform idref="cpe:/o:centos:centos:7" />
      <platform idref="cpe:/o:oracle:linux:7" />
      <platform idref="cpe:/o:redhat:enterprise_linux:7" />
      <ident system="www.unifiedcompliance.com">UCF CC ID 11821</ident>
      <check system="http://www.mcafee.com/xccdf/script/1.0">
        <check-content>/bin/sh
30
#!/bin/bash
          #BASH script to verify the state of a SYSTEMD Service
          : ' The systemd system and service manager is responsible for controlling how services are started, stopped and otherwise managed on RHEL 7 , CentOS Linux 7 and Oracle Linux 7 systems. Although the systemd process replaces the init process (quite literally, /sbin/init is now a symbolic link to /usr/lib/systemd/systemd) for starting services at boot time and changing runlevels, systemd provides much more control than the init
          process does while still supporting existing init scripts. '
          
          SYSTEMD_SERVICE_NAME=firewalld.service
          
          #SERVICE_EXISTENCE - Command to verify whether $SYSTEMD_SERVICE_NAME exists on the system or not.
          SERVICE_EXISTENCE=`systemctl list-unit-files --type service | grep $SYSTEMD_SERVICE_NAME`
          
          #CURRENT_SERVICE_STATE - Command to verify the current state of $SYSTEMD_SERVICE_NAME
          CURRENT_SERVICE_STATE=`systemctl is-enabled $SYSTEMD_SERVICE_NAME`
          
          #EXPECTED_SERVICE_STATE - Expected service state by End User
          EXPECTED_SERVICE_STATE=enabled
          
          if [ -z "$SERVICE_EXISTENCE" ]  #SYSTEMD_SERVICE_NAME existence test.
          then
          #echo "SYSTEMD Service $SYSTEMD_SERVICE_NAME does not exists on the system."
          exit 0  #Script should return true. Verify the last executed command status by echo $?.
          elif [ "$CURRENT_SERVICE_STATE" = "$EXPECTED_SERVICE_STATE" ]
          then
          #echo "SYSTEMD Service $SYSTEMD_SERVICE_NAME is enabled as expected."
          exit 0  #Script should return true. Verify the last executed command status by echo $?.
          else
          #echo "SYSTEMD Service $SYSTEMD_SERVICE_NAME is disabled, expected to be enabled."
          exit 1  #Script should return false. Verify the last executed command status by echo $?.
          fi
          fi</check-content>
      </check>
    </Rule>
    <Rule id="VerifyFirewalldVersionOnTheSystem" xml:lang="en" selected="false">
      <title xml:lang="en">Verify firewalld version on the system</title>
      <description xml:lang="en">This rule is to verify firewalld version on the system.</description>
      <reference>PCI DSS v3.2 Requirements 6.6</reference>
      <reference>https://www.pcisecuritystandards.org</reference>
      <platform idref="cpe:/o:centos:centos:7" />
      <platform idref="cpe:/o:oracle:linux:7" />
      <platform idref="cpe:/o:redhat:enterprise_linux:7" />
      <ident system="www.unifiedcompliance.com">UCF CC ID 12037</ident>
      <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
        <check-export value-id="EnterTheDesiredFirewalldVersion._var" export-name="oval:com.mcafee.oval:var:2897422" />
        <check-content-ref href="" name="oval:com.mcafee.oval:def:2897417" />
      </check>
    </Rule>
    <Rule id="ConfigureFirewallToGenerateAuditLogs_Etc_sysconfig_firewalld" xml:lang="en" selected="false">
      <title xml:lang="en">Configure firewall to generate audit logs - /etc/sysconfig/firewalld</title>
      <description xml:lang="en">This check will verify that /etc/sysconfig/firewalld is configured properly in order to generate logs to intended files.</description>
      <reference>PCI DSS v3.2 Requirements 1.2.2</reference>
      <reference>https://www.pcisecuritystandards.org</reference>
      <platform idref="cpe:/o:centos:centos:7" />
      <platform idref="cpe:/o:oracle:linux:7" />
      <platform idref="cpe:/o:redhat:enterprise_linux:7" />
      <ident system="www.unifiedcompliance.com">UCF CC ID 12038</ident>
      <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
        <check-content-ref href="" name="oval:com.mcafee.oval:def:2897406" />
      </check>
    </Rule>
    <Rule id="TestIfTheFile_Var_log_firewalldExists" xml:lang="en" selected="false">
      <title xml:lang="en">Test if the file - /var/log/firewalld exists</title>
      <description xml:lang="en">This check ensures that the file - /var/log/firewalld exists on the system.</description>
      <reference>PCI DSS v3.2 Requirements 1.2.2</reference>
      <reference>https://www.pcisecuritystandards.org</reference>
      <platform idref="cpe:/o:centos:centos:7" />
      <platform idref="cpe:/o:oracle:linux:7" />
      <platform idref="cpe:/o:redhat:enterprise_linux:7" />
      <ident system="www.unifiedcompliance.com">UCF CC ID 12038</ident>
      <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
        <check-content-ref href="" name="oval:com.mcafee.oval:def:2897403" />
      </check>
    </Rule>
    <Group id="FirewallConfigurationFilesPermissions" xml:lang="en">
      <title xml:lang="en">Firewall configuration files permissions</title>
      <Value id="WhatIsTheRequiredGroupIDOfTheFileOwner_var52" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">0</value>
      </Value>
      <Value id="WhatIsTheRequiredUserIDOfTheFileOwner_var52" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">0</value>
      </Value>
      <Value id="ShouldOthersHaveWRITEAccess_var73" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">0</value>
      </Value>
      <Value id="ShouldOthersHaveEXECUTEAccess_var73" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">0</value>
      </Value>
      <Value id="ShouldOthersHaveREADAccess_var73" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">0</value>
      </Value>
      <Value id="ShouldTheUserHaveEXECUTEAccess_var73" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">1</value>
      </Value>
      <Value id="ShouldTheUserHaveREADAccess_var73" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">1</value>
      </Value>
      <Value id="ShouldTheUserHaveWRITEAccess_var73" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">1</value>
      </Value>
      <Value id="ShouldTheGroupHaveWRITEAccess_var73" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">0</value>
      </Value>
      <Value id="ShouldTheGroupHaveREADAccess_var73" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">1</value>
      </Value>
      <Value id="ShouldTheGroupHaveEXECUTEAccess_var73" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">1</value>
      </Value>
      <Value id="WhatIsTheRequiredGroupIDOfTheFileOwner_var53" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">0</value>
      </Value>
      <Value id="WhatIsTheRequiredUserIDOfTheFileOwner_var53" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">0</value>
      </Value>
      <Value id="ShouldOthersHaveWRITEAccess_var74" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">0</value>
      </Value>
      <Value id="ShouldOthersHaveEXECUTEAccess_var74" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">0</value>
      </Value>
      <Value id="ShouldOthersHaveREADAccess_var74" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">1</value>
      </Value>
      <Value id="ShouldTheUserHaveEXECUTEAccess_var74" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">0</value>
      </Value>
      <Value id="ShouldTheUserHaveREADAccess_var74" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">1</value>
      </Value>
      <Value id="ShouldTheUserHaveWRITEAccess_var74" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">1</value>
      </Value>
      <Value id="ShouldTheGroupHaveWRITEAccess_var74" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">0</value>
      </Value>
      <Value id="ShouldTheGroupHaveREADAccess_var74" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">1</value>
      </Value>
      <Value id="ShouldTheGroupHaveEXECUTEAccess_var74" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">0</value>
      </Value>
      <Value id="ShouldOthersHaveWRITEAccess_var75" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">0</value>
      </Value>
      <Value id="ShouldOthersHaveEXECUTEAccess_var75" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">0</value>
      </Value>
      <Value id="ShouldOthersHaveREADAccess_var75" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">1</value>
      </Value>
      <Value id="ShouldTheUserHaveEXECUTEAccess_var75" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">0</value>
      </Value>
      <Value id="ShouldTheUserHaveREADAccess_var75" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">1</value>
      </Value>
      <Value id="ShouldTheUserHaveWRITEAccess_var75" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">1</value>
      </Value>
      <Value id="ShouldTheGroupHaveWRITEAccess_var75" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">0</value>
      </Value>
      <Value id="ShouldTheGroupHaveREADAccess_var75" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">1</value>
      </Value>
      <Value id="ShouldTheGroupHaveEXECUTEAccess_var75" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">0</value>
      </Value>
      <Value id="WhatIsTheRequiredUserIDOfTheFileOwner_var54" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">0</value>
      </Value>
      <Value id="WhatIsTheRequiredGroupIDOfTheFileOwner_var54" xml:lang="en" type="string" operator="equals" interactive="false">
        <value selector="">0</value>
      </Value>
      <Rule id="TestTheGroupOwnerOfTheDirectory_Etc_firewalld" xml:lang="en" selected="false">
        <title xml:lang="en">Test the group owner of the directory - /etc/firewalld</title>
        <description xml:lang="en">This check will verify the group owner of the directory - /etc/firewalld</description>
        <reference>PCI DSS v3.2 Requirements 1.2.2</reference>
        <reference>https://www.pcisecuritystandards.org</reference>
        <platform idref="cpe:/o:centos:centos:7" />
        <platform idref="cpe:/o:oracle:linux:7" />
        <platform idref="cpe:/o:redhat:enterprise_linux:7" />
        <ident system="www.unifiedcompliance.com">UCF CC ID 11851</ident>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="WhatIsTheRequiredGroupIDOfTheFileOwner_var52" export-name="oval:com.mcafee.oval:var:80125" />
          <check-content-ref href="" name="oval:com.mcafee.oval:def:2897395" />
        </check>
      </Rule>
      <Rule id="TestTheOwnerOfTheDirectory_Etc_firewalld" xml:lang="en" selected="false">
        <title xml:lang="en">Test the owner of the directory - /etc/firewalld</title>
        <description xml:lang="en">This check will verify the owner of the directory - /etc/firewalld</description>
        <reference>PCI DSS v3.2 Requirements 1.2.2</reference>
        <reference>https://www.pcisecuritystandards.org</reference>
        <platform idref="cpe:/o:centos:centos:7" />
        <platform idref="cpe:/o:oracle:linux:7" />
        <platform idref="cpe:/o:redhat:enterprise_linux:7" />
        <ident system="www.unifiedcompliance.com">UCF CC ID 11851</ident>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="WhatIsTheRequiredUserIDOfTheFileOwner_var52" export-name="oval:com.mcafee.oval:var:80228" />
          <check-content-ref href="" name="oval:com.mcafee.oval:def:2897396" />
        </check>
      </Rule>
      <Rule id="TestThePermissionsOfTheDirectory_Etc_firewalld" xml:lang="en" selected="false">
        <title xml:lang="en">Test the permissions of the directory - /etc/firewalld</title>
        <description xml:lang="en">This check will verify the permissions of the directory - /etc/firewalld</description>
        <reference>PCI DSS v3.2 Requirements 1.2.2</reference>
        <reference>https://www.pcisecuritystandards.org</reference>
        <platform idref="cpe:/o:centos:centos:7" />
        <platform idref="cpe:/o:oracle:linux:7" />
        <platform idref="cpe:/o:redhat:enterprise_linux:7" />
        <ident system="www.unifiedcompliance.com">UCF CC ID 11851</ident>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="ShouldTheUserHaveREADAccess_var73" export-name="oval:com.mcafee.oval:var:78640" />
          <check-export value-id="ShouldTheUserHaveWRITEAccess_var73" export-name="oval:com.mcafee.oval:var:78641" />
          <check-export value-id="ShouldTheUserHaveEXECUTEAccess_var73" export-name="oval:com.mcafee.oval:var:78642" />
          <check-export value-id="ShouldTheGroupHaveREADAccess_var73" export-name="oval:com.mcafee.oval:var:78643" />
          <check-export value-id="ShouldTheGroupHaveWRITEAccess_var73" export-name="oval:com.mcafee.oval:var:78644" />
          <check-export value-id="ShouldTheGroupHaveEXECUTEAccess_var73" export-name="oval:com.mcafee.oval:var:78645" />
          <check-export value-id="ShouldOthersHaveREADAccess_var73" export-name="oval:com.mcafee.oval:var:78646" />
          <check-export value-id="ShouldOthersHaveWRITEAccess_var73" export-name="oval:com.mcafee.oval:var:78647" />
          <check-export value-id="ShouldOthersHaveEXECUTEAccess_var73" export-name="oval:com.mcafee.oval:var:78648" />
          <check-content-ref href="" name="oval:com.mcafee.oval:def:2897397" />
        </check>
      </Rule>
      <Rule id="TestTheGroupOwnerOfTheFile_Etc_firewalld_firewalld.conf" xml:lang="en" selected="false">
        <title xml:lang="en">Test the group owner of the file - /etc/firewalld/firewalld.conf</title>
        <description xml:lang="en">This check will verify the group owner of the file - /etc/firewalld/firewalld.conf</description>
        <reference>PCI DSS v3.2 Requirements 1.2.2</reference>
        <reference>https://www.pcisecuritystandards.org</reference>
        <platform idref="cpe:/o:centos:centos:7" />
        <platform idref="cpe:/o:oracle:linux:7" />
        <platform idref="cpe:/o:redhat:enterprise_linux:7" />
        <ident system="www.unifiedcompliance.com">UCF CC ID 11851</ident>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="WhatIsTheRequiredGroupIDOfTheFileOwner_var53" export-name="oval:com.mcafee.oval:var:80125" />
          <check-content-ref href="" name="oval:com.mcafee.oval:def:2897387" />
        </check>
      </Rule>
      <Rule id="TestTheOwnerOfTheFile_Etc_firewalld_firewalld.conf" xml:lang="en" selected="false">
        <title xml:lang="en">Test the owner of the file - /etc/firewalld/firewalld.conf</title>
        <description xml:lang="en">This check will verify the owner of /etc/firewalld/firewalld.conf file</description>
        <reference>PCI DSS v3.2 Requirements 1.2.2</reference>
        <reference>https://www.pcisecuritystandards.org</reference>
        <platform idref="cpe:/o:centos:centos:7" />
        <platform idref="cpe:/o:oracle:linux:7" />
        <platform idref="cpe:/o:redhat:enterprise_linux:7" />
        <ident system="www.unifiedcompliance.com">UCF CC ID 11851</ident>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="WhatIsTheRequiredUserIDOfTheFileOwner_var53" export-name="oval:com.mcafee.oval:var:80228" />
          <check-content-ref href="" name="oval:com.mcafee.oval:def:2897391" />
        </check>
      </Rule>
      <Rule id="TestThePermissionsOfTheFile_Etc_firewalld_firewalld.conf" xml:lang="en" selected="false">
        <title xml:lang="en">Test the permissions of the file - /etc/firewalld/firewalld.conf</title>
        <description xml:lang="en">This check will verify the permissions set on the file - /etc/firewalld/firewalld.conf</description>
        <reference>PCI DSS v3.2 Requirements 1.2.2</reference>
        <reference>https://www.pcisecuritystandards.org</reference>
        <platform idref="cpe:/o:centos:centos:7" />
        <platform idref="cpe:/o:oracle:linux:7" />
        <platform idref="cpe:/o:redhat:enterprise_linux:7" />
        <ident system="www.unifiedcompliance.com">UCF CC ID 11851</ident>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="ShouldTheUserHaveREADAccess_var74" export-name="oval:com.mcafee.oval:var:78640" />
          <check-export value-id="ShouldTheUserHaveWRITEAccess_var74" export-name="oval:com.mcafee.oval:var:78641" />
          <check-export value-id="ShouldTheUserHaveEXECUTEAccess_var74" export-name="oval:com.mcafee.oval:var:78642" />
          <check-export value-id="ShouldTheGroupHaveREADAccess_var74" export-name="oval:com.mcafee.oval:var:78643" />
          <check-export value-id="ShouldTheGroupHaveWRITEAccess_var74" export-name="oval:com.mcafee.oval:var:78644" />
          <check-export value-id="ShouldTheGroupHaveEXECUTEAccess_var74" export-name="oval:com.mcafee.oval:var:78645" />
          <check-export value-id="ShouldOthersHaveREADAccess_var74" export-name="oval:com.mcafee.oval:var:78646" />
          <check-export value-id="ShouldOthersHaveWRITEAccess_var74" export-name="oval:com.mcafee.oval:var:78647" />
          <check-export value-id="ShouldOthersHaveEXECUTEAccess_var74" export-name="oval:com.mcafee.oval:var:78648" />
          <check-content-ref href="" name="oval:com.mcafee.oval:def:2897393" />
        </check>
      </Rule>
      <Rule id="TestThePermissionsOfTheFile_Etc_sysconfig_firewalld" xml:lang="en" selected="false">
        <title xml:lang="en">Test the permissions of the file - /etc/sysconfig/firewalld</title>
        <description xml:lang="en">This check will verify the permissions set on the file - /etc/sysconfig/firewalld</description>
        <reference>PCI DSS v3.2 Requirements 1.2.2</reference>
        <reference>https://www.pcisecuritystandards.org</reference>
        <platform idref="cpe:/o:centos:centos:7" />
        <platform idref="cpe:/o:oracle:linux:7" />
        <platform idref="cpe:/o:redhat:enterprise_linux:7" />
        <ident system="www.unifiedcompliance.com">UCF CC ID 11851</ident>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="ShouldTheUserHaveREADAccess_var75" export-name="oval:com.mcafee.oval:var:78640" />
          <check-export value-id="ShouldTheUserHaveWRITEAccess_var75" export-name="oval:com.mcafee.oval:var:78641" />
          <check-export value-id="ShouldTheUserHaveEXECUTEAccess_var75" export-name="oval:com.mcafee.oval:var:78642" />
          <check-export value-id="ShouldTheGroupHaveREADAccess_var75" export-name="oval:com.mcafee.oval:var:78643" />
          <check-export value-id="ShouldTheGroupHaveWRITEAccess_var75" export-name="oval:com.mcafee.oval:var:78644" />
          <check-export value-id="ShouldTheGroupHaveEXECUTEAccess_var75" export-name="oval:com.mcafee.oval:var:78645" />
          <check-export value-id="ShouldOthersHaveREADAccess_var75" export-name="oval:com.mcafee.oval:var:78646" />
          <check-export value-id="ShouldOthersHaveWRITEAccess_var75" export-name="oval:com.mcafee.oval:var:78647" />
          <check-export value-id="ShouldOthersHaveEXECUTEAccess_var75" export-name="oval:com.mcafee.oval:var:78648" />
          <check-content-ref href="" name="oval:com.mcafee.oval:def:2897411" />
        </check>
      </Rule>
      <Rule id="TestTheOwnerOfTheFile_Etc_sysconfig_firewalld" xml:lang="en" selected="false">
        <title xml:lang="en">Test the owner of the file - /etc/sysconfig/firewalld</title>
        <description xml:lang="en">This check will verify the owner of /etc/sysconfig/firewalld file</description>
        <reference>PCI DSS v3.2 Requirements 1.2.2</reference>
        <reference>https://www.pcisecuritystandards.org</reference>
        <platform idref="cpe:/o:centos:centos:7" />
        <platform idref="cpe:/o:oracle:linux:7" />
        <platform idref="cpe:/o:redhat:enterprise_linux:7" />
        <ident system="www.unifiedcompliance.com">UCF CC ID 11851</ident>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="WhatIsTheRequiredUserIDOfTheFileOwner_var54" export-name="oval:com.mcafee.oval:var:80228" />
          <check-content-ref href="" name="oval:com.mcafee.oval:def:2897410" />
        </check>
      </Rule>
      <Rule id="TestTheGroupOwnerOfTheFile_Etc_sysconfig_firewalld" xml:lang="en" selected="false">
        <title xml:lang="en">Test the group owner of the file - /etc/sysconfig/firewalld</title>
        <description xml:lang="en">This check will verify the group owner of the file - /etc/sysconfig/firewalld</description>
        <reference>PCI DSS v3.2 Requirements 1.2.2</reference>
        <reference>https://www.pcisecuritystandards.org</reference>
        <platform idref="cpe:/o:centos:centos:7" />
        <platform idref="cpe:/o:oracle:linux:7" />
        <platform idref="cpe:/o:redhat:enterprise_linux:7" />
        <ident system="www.unifiedcompliance.com">UCF CC ID 11851</ident>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-export value-id="WhatIsTheRequiredGroupIDOfTheFileOwner_var54" export-name="oval:com.mcafee.oval:var:80125" />
          <check-content-ref href="" name="oval:com.mcafee.oval:def:2897409" />
        </check>
      </Rule>
    </Group>
  </Group>
  <Group id="ConfigureFilePermissions" xml:lang="en">
    <title xml:lang="en">Configure file permissions</title>
    <Value id="ShouldTheUserHaveREADAccess_var22" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">1</value>
    </Value>
    <Value id="ShouldTheGroupHaveWRITEAccess_var20" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">0</value>
    </Value>
    <Value id="ShouldOthersHaveEXECUTEAccess_var22" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">0</value>
    </Value>
    <Value id="ShouldOthersHaveREADAccess_var20" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">0</value>
    </Value>
    <Value id="ShouldTheGroupHaveREADAccess_var20" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">0</value>
    </Value>
    <Value id="ShouldTheUserHaveEXECUTEAccess_var20" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">0</value>
    </Value>
    <Value id="ShouldTheGroupHaveWRITEAccess_var22" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">0</value>
    </Value>
    <Value id="ShouldTheUserHaveWRITEAccess_var20" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">0</value>
    </Value>
    <Value id="ShouldTheUserHaveEXECUTEAccess_var22" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">0</value>
    </Value>
    <Value id="ShouldTheGroupHaveREADAccess_var22" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">1</value>
    </Value>
    <Value id="ShouldTheGroupHaveEXECUTEAccess_var22" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">0</value>
    </Value>
    <Value id="ShouldTheUserHaveREADAccess_var20" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">0</value>
    </Value>
    <Value id="ShouldTheGroupHaveEXECUTEAccess_var20" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">0</value>
    </Value>
    <Value id="ShouldOthersHaveWRITEAccess_var20" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">0</value>
    </Value>
    <Value id="ShouldOthersHaveEXECUTEAccess_var20" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">0</value>
    </Value>
    <Value id="ShouldOthersHaveWRITEAccess_var22" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">0</value>
    </Value>
    <Value id="ShouldOthersHaveREADAccess_var22" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">1</value>
    </Value>
    <Value id="ShouldTheUserHaveWRITEAccess_var22" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">1</value>
    </Value>
    <Value id="ShouldOthersHaveWRITEAccess_var6" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">0</value>
    </Value>
    <Value id="ShouldOthersHaveEXECUTEAccess_var6" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">0</value>
    </Value>
    <Value id="ShouldOthersHaveREADAccess_var6" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">1</value>
    </Value>
    <Value id="ShouldTheUserHaveEXECUTEAccess_var6" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">0</value>
    </Value>
    <Value id="ShouldTheUserHaveREADAccess_var6" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">1</value>
    </Value>
    <Value id="ShouldTheUserHaveWRITEAccess_var6" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">1</value>
    </Value>
    <Value id="ShouldTheGroupHaveWRITEAccess_var6" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">1</value>
    </Value>
    <Value id="ShouldTheGroupHaveREADAccess_var6" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">1</value>
    </Value>
    <Value id="ShouldTheGroupHaveEXECUTEAccess_var6" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">0</value>
    </Value>
    <Value id="ShouldOthersHaveWRITEAccess_var8" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">0</value>
    </Value>
    <Value id="ShouldOthersHaveEXECUTEAccess_var8" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">0</value>
    </Value>
    <Value id="ShouldOthersHaveREADAccess_var8" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">0</value>
    </Value>
    <Value id="ShouldTheUserHaveEXECUTEAccess_var8" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">0</value>
    </Value>
    <Value id="ShouldTheUserHaveREADAccess_var8" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">1</value>
    </Value>
    <Value id="ShouldTheUserHaveWRITEAccess_var8" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">1</value>
    </Value>
    <Value id="ShouldTheGroupHaveWRITEAccess_var8" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">0</value>
    </Value>
    <Value id="ShouldTheGroupHaveREADAccess_var8" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">1</value>
    </Value>
    <Value id="ShouldTheGroupHaveEXECUTEAccess_var8" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">0</value>
    </Value>
    <Value id="ShouldOthersHaveWRITEAccess_var9" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">0</value>
    </Value>
    <Value id="ShouldOthersHaveEXECUTEAccess_var9" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">0</value>
    </Value>
    <Value id="ShouldOthersHaveREADAccess_var9" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">1</value>
    </Value>
    <Value id="ShouldTheUserHaveEXECUTEAccess_var9" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">0</value>
    </Value>
    <Value id="ShouldTheUserHaveREADAccess_var9" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">1</value>
    </Value>
    <Value id="ShouldTheUserHaveWRITEAccess_var9" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">1</value>
    </Value>
    <Value id="ShouldTheGroupHaveWRITEAccess_var9" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">0</value>
    </Value>
    <Value id="ShouldTheGroupHaveREADAccess_var9" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">1</value>
    </Value>
    <Value id="ShouldTheGroupHaveEXECUTEAccess_var9" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">0</value>
    </Value>
    <Value id="ShouldOthersHaveWRITEAccess_var10" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">0</value>
    </Value>
    <Value id="ShouldOthersHaveEXECUTEAccess_var10" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">0</value>
    </Value>
    <Value id="ShouldOthersHaveREADAccess_var10" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">1</value>
    </Value>
    <Value id="ShouldTheUserHaveEXECUTEAccess_var10" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">0</value>
    </Value>
    <Value id="ShouldTheUserHaveREADAccess_var10" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">1</value>
    </Value>
    <Value id="ShouldTheUserHaveWRITEAccess_var10" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">1</value>
    </Value>
    <Value id="ShouldTheGroupHaveWRITEAccess_var10" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">0</value>
    </Value>
    <Value id="ShouldTheGroupHaveREADAccess_var10" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">1</value>
    </Value>
    <Value id="ShouldTheGroupHaveEXECUTEAccess_var10" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">0</value>
    </Value>
    <Value id="ShouldOthersHaveWRITEAccess_var11" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">0</value>
    </Value>
    <Value id="ShouldOthersHaveEXECUTEAccess_var11" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">0</value>
    </Value>
    <Value id="ShouldOthersHaveREADAccess_var11" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">1</value>
    </Value>
    <Value id="ShouldTheUserHaveEXECUTEAccess_var11" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">0</value>
    </Value>
    <Value id="ShouldTheUserHaveREADAccess_var11" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">1</value>
    </Value>
    <Value id="ShouldTheUserHaveWRITEAccess_var11" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">1</value>
    </Value>
    <Value id="ShouldTheGroupHaveWRITEAccess_var11" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">0</value>
    </Value>
    <Value id="ShouldTheGroupHaveREADAccess_var11" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">1</value>
    </Value>
    <Value id="ShouldTheGroupHaveEXECUTEAccess_var11" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">0</value>
    </Value>
    <Value id="ShouldOthersHaveWRITEAccess_var12" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">0</value>
    </Value>
    <Value id="ShouldOthersHaveEXECUTEAccess_var12" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">0</value>
    </Value>
    <Value id="ShouldOthersHaveREADAccess_var12" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">1</value>
    </Value>
    <Value id="ShouldTheUserHaveEXECUTEAccess_var12" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">0</value>
    </Value>
    <Value id="ShouldTheUserHaveREADAccess_var12" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">1</value>
    </Value>
    <Value id="ShouldTheUserHaveWRITEAccess_var12" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">1</value>
    </Value>
    <Value id="ShouldTheGroupHaveWRITEAccess_var12" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">0</value>
    </Value>
    <Value id="ShouldTheGroupHaveREADAccess_var12" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">1</value>
    </Value>
    <Value id="ShouldTheGroupHaveEXECUTEAccess_var12" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">0</value>
    </Value>
    <Value id="ShouldOthersHaveWRITEAccess_var14" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">0</value>
    </Value>
    <Value id="ShouldOthersHaveEXECUTEAccess_var14" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">0</value>
    </Value>
    <Value id="ShouldOthersHaveREADAccess_var14" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">1</value>
    </Value>
    <Value id="ShouldTheUserHaveEXECUTEAccess_var14" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">0</value>
    </Value>
    <Value id="ShouldTheUserHaveREADAccess_var14" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">1</value>
    </Value>
    <Value id="ShouldTheUserHaveWRITEAccess_var14" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">1</value>
    </Value>
    <Value id="ShouldTheGroupHaveWRITEAccess_var14" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">0</value>
    </Value>
    <Value id="ShouldTheGroupHaveREADAccess_var14" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">1</value>
    </Value>
    <Value id="ShouldTheGroupHaveEXECUTEAccess_var14" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">0</value>
    </Value>
    <Value id="ShouldOthersHaveWRITEAccess_var16" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">0</value>
    </Value>
    <Value id="ShouldOthersHaveEXECUTEAccess_var16" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">0</value>
    </Value>
    <Value id="ShouldOthersHaveREADAccess_var16" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">1</value>
    </Value>
    <Value id="ShouldTheUserHaveEXECUTEAccess_var16" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">0</value>
    </Value>
    <Value id="ShouldTheUserHaveREADAccess_var16" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">1</value>
    </Value>
    <Value id="ShouldTheUserHaveWRITEAccess_var16" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">1</value>
    </Value>
    <Value id="ShouldTheGroupHaveWRITEAccess_var16" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">0</value>
    </Value>
    <Value id="ShouldTheGroupHaveREADAccess_var16" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">1</value>
    </Value>
    <Value id="ShouldTheGroupHaveEXECUTEAccess_var16" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">0</value>
    </Value>
    <Value id="ShouldOthersHaveWRITEAccess_var17" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">0</value>
    </Value>
    <Value id="ShouldOthersHaveEXECUTEAccess_var17" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">0</value>
    </Value>
    <Value id="ShouldOthersHaveREADAccess_var17" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">1</value>
    </Value>
    <Value id="ShouldTheUserHaveEXECUTEAccess_var17" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">0</value>
    </Value>
    <Value id="ShouldTheUserHaveREADAccess_var17" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">1</value>
    </Value>
    <Value id="ShouldTheUserHaveWRITEAccess_var17" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">1</value>
    </Value>
    <Value id="ShouldTheGroupHaveWRITEAccess_var17" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">0</value>
    </Value>
    <Value id="ShouldTheGroupHaveREADAccess_var17" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">1</value>
    </Value>
    <Value id="ShouldTheGroupHaveEXECUTEAccess_var17" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">0</value>
    </Value>
    <Value id="ShouldOthersHaveWRITEAccess_var18" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">0</value>
    </Value>
    <Value id="ShouldOthersHaveEXECUTEAccess_var18" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">0</value>
    </Value>
    <Value id="ShouldOthersHaveREADAccess_var18" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">1</value>
    </Value>
    <Value id="ShouldTheUserHaveEXECUTEAccess_var18" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">0</value>
    </Value>
    <Value id="ShouldTheUserHaveREADAccess_var18" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">1</value>
    </Value>
    <Value id="ShouldTheUserHaveWRITEAccess_var18" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">1</value>
    </Value>
    <Value id="ShouldTheGroupHaveWRITEAccess_var18" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">0</value>
    </Value>
    <Value id="ShouldTheGroupHaveREADAccess_var18" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">1</value>
    </Value>
    <Value id="ShouldTheGroupHaveEXECUTEAccess_var18" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">0</value>
    </Value>
    <Value id="ShouldOthersHaveWRITEAccess_var19" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">0</value>
    </Value>
    <Value id="ShouldOthersHaveEXECUTEAccess_var19" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">0</value>
    </Value>
    <Value id="ShouldOthersHaveREADAccess_var19" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">0</value>
    </Value>
    <Value id="ShouldTheUserHaveEXECUTEAccess_var19" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">0</value>
    </Value>
    <Value id="ShouldTheUserHaveREADAccess_var19" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">1</value>
    </Value>
    <Value id="ShouldTheUserHaveWRITEAccess_var19" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">1</value>
    </Value>
    <Value id="ShouldTheGroupHaveWRITEAccess_var19" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">0</value>
    </Value>
    <Value id="ShouldTheGroupHaveREADAccess_var19" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">0</value>
    </Value>
    <Value id="ShouldTheGroupHaveEXECUTEAccess_var19" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">0</value>
    </Value>
    <Value id="ShouldOthersHaveWRITEAccess_var23" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">0</value>
    </Value>
    <Value id="ShouldOthersHaveEXECUTEAccess_var23" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">0</value>
    </Value>
    <Value id="ShouldOthersHaveREADAccess_var23" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">0</value>
    </Value>
    <Value id="ShouldTheUserHaveEXECUTEAccess_var23" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">0</value>
    </Value>
    <Value id="ShouldTheUserHaveREADAccess_var23" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">1</value>
    </Value>
    <Value id="ShouldTheUserHaveWRITEAccess_var23" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">1</value>
    </Value>
    <Value id="ShouldTheGroupHaveWRITEAccess_var23" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">0</value>
    </Value>
    <Value id="ShouldTheGroupHaveREADAccess_var23" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">1</value>
    </Value>
    <Value id="ShouldTheGroupHaveEXECUTEAccess_var23" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">0</value>
    </Value>
    <Value id="ShouldOthersHaveWRITEAccess_var24" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">0</value>
    </Value>
    <Value id="ShouldOthersHaveEXECUTEAccess_var24" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">0</value>
    </Value>
    <Value id="ShouldOthersHaveREADAccess_var24" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">0</value>
    </Value>
    <Value id="ShouldTheUserHaveEXECUTEAccess_var24" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">0</value>
    </Value>
    <Value id="ShouldTheUserHaveREADAccess_var24" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">1</value>
    </Value>
    <Value id="ShouldTheUserHaveWRITEAccess_var24" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">1</value>
    </Value>
    <Value id="ShouldTheGroupHaveWRITEAccess_var24" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">0</value>
    </Value>
    <Value id="ShouldTheGroupHaveREADAccess_var24" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">1</value>
    </Value>
    <Value id="ShouldTheGroupHaveEXECUTEAccess_var24" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">0</value>
    </Value>
    <Value id="ShouldOthersHaveWRITEAccess_var25" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">0</value>
    </Value>
    <Value id="ShouldOthersHaveEXECUTEAccess_var25" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">1</value>
    </Value>
    <Value id="ShouldOthersHaveREADAccess_var25" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">0</value>
    </Value>
    <Value id="ShouldTheUserHaveEXECUTEAccess_var25" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">0</value>
    </Value>
    <Value id="ShouldTheUserHaveREADAccess_var25" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">1</value>
    </Value>
    <Value id="ShouldTheUserHaveWRITEAccess_var25" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">1</value>
    </Value>
    <Value id="ShouldTheGroupHaveWRITEAccess_var25" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">0</value>
    </Value>
    <Value id="ShouldTheGroupHaveREADAccess_var25" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">0</value>
    </Value>
    <Value id="ShouldTheGroupHaveEXECUTEAccess_var25" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">1</value>
    </Value>
    <Value id="ShouldOthersHaveWRITEAccess_var26" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">0</value>
    </Value>
    <Value id="ShouldOthersHaveEXECUTEAccess_var26" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">0</value>
    </Value>
    <Value id="ShouldOthersHaveREADAccess_var26" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">1</value>
    </Value>
    <Value id="ShouldTheUserHaveEXECUTEAccess_var26" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">0</value>
    </Value>
    <Value id="ShouldTheUserHaveREADAccess_var26" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">1</value>
    </Value>
    <Value id="ShouldTheUserHaveWRITEAccess_var26" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">1</value>
    </Value>
    <Value id="ShouldTheGroupHaveWRITEAccess_var26" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">0</value>
    </Value>
    <Value id="ShouldTheGroupHaveREADAccess_var26" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">1</value>
    </Value>
    <Value id="ShouldTheGroupHaveEXECUTEAccess_var26" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">0</value>
    </Value>
    <Value id="ShouldOthersHaveWRITEAccess_var27" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">0</value>
    </Value>
    <Value id="ShouldOthersHaveEXECUTEAccess_var27" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">0</value>
    </Value>
    <Value id="ShouldOthersHaveREADAccess_var27" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">1</value>
    </Value>
    <Value id="ShouldTheUserHaveEXECUTEAccess_var27" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">0</value>
    </Value>
    <Value id="ShouldTheUserHaveREADAccess_var27" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">1</value>
    </Value>
    <Value id="ShouldTheUserHaveWRITEAccess_var27" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">1</value>
    </Value>
    <Value id="ShouldTheGroupHaveWRITEAccess_var27" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">0</value>
    </Value>
    <Value id="ShouldTheGroupHaveREADAccess_var27" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">1</value>
    </Value>
    <Value id="ShouldTheGroupHaveEXECUTEAccess_var27" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">0</value>
    </Value>
    <Value id="ShouldOthersHaveWRITEAccess_var55" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">0</value>
    </Value>
    <Value id="ShouldOthersHaveEXECUTEAccess_var55" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">0</value>
    </Value>
    <Value id="ShouldOthersHaveREADAccess_var55" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">0</value>
    </Value>
    <Value id="ShouldTheUserHaveEXECUTEAccess_var55" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">0</value>
    </Value>
    <Value id="ShouldTheUserHaveREADAccess_var55" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">1</value>
    </Value>
    <Value id="ShouldTheUserHaveWRITEAccess_var55" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">1</value>
    </Value>
    <Value id="ShouldTheGroupHaveWRITEAccess_var55" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">0</value>
    </Value>
    <Value id="ShouldTheGroupHaveREADAccess_var55" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">0</value>
    </Value>
    <Value id="ShouldTheGroupHaveEXECUTEAccess_var55" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">0</value>
    </Value>
    <Value id="ShouldOthersHaveWRITEAccess_var56" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">0</value>
    </Value>
    <Value id="ShouldOthersHaveEXECUTEAccess_var56" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">0</value>
    </Value>
    <Value id="ShouldOthersHaveREADAccess_var56" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">0</value>
    </Value>
    <Value id="ShouldTheUserHaveEXECUTEAccess_var56" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">0</value>
    </Value>
    <Value id="ShouldTheUserHaveREADAccess_var56" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">1</value>
    </Value>
    <Value id="ShouldTheUserHaveWRITEAccess_var56" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">1</value>
    </Value>
    <Value id="ShouldTheGroupHaveWRITEAccess_var56" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">0</value>
    </Value>
    <Value id="ShouldTheGroupHaveREADAccess_var56" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">0</value>
    </Value>
    <Value id="ShouldTheGroupHaveEXECUTEAccess_var56" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">0</value>
    </Value>
    <Value id="ShouldOthersHaveWRITEAccess_var57" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">0</value>
    </Value>
    <Value id="ShouldOthersHaveEXECUTEAccess_var57" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">0</value>
    </Value>
    <Value id="ShouldOthersHaveREADAccess_var57" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">0</value>
    </Value>
    <Value id="ShouldTheUserHaveEXECUTEAccess_var57" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">0</value>
    </Value>
    <Value id="ShouldTheUserHaveREADAccess_var57" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">1</value>
    </Value>
    <Value id="ShouldTheUserHaveWRITEAccess_var57" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">1</value>
    </Value>
    <Value id="ShouldTheGroupHaveWRITEAccess_var57" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">0</value>
    </Value>
    <Value id="ShouldTheGroupHaveREADAccess_var57" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">0</value>
    </Value>
    <Value id="ShouldTheGroupHaveEXECUTEAccess_var57" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">0</value>
    </Value>
    <Value id="ShouldOthersHaveWRITEAccess_var58" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">0</value>
    </Value>
    <Value id="ShouldOthersHaveEXECUTEAccess_var58" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">0</value>
    </Value>
    <Value id="ShouldOthersHaveREADAccess_var58" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">0</value>
    </Value>
    <Value id="ShouldTheUserHaveEXECUTEAccess_var58" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">0</value>
    </Value>
    <Value id="ShouldTheUserHaveREADAccess_var58" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">1</value>
    </Value>
    <Value id="ShouldTheUserHaveWRITEAccess_var58" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">1</value>
    </Value>
    <Value id="ShouldTheGroupHaveWRITEAccess_var58" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">0</value>
    </Value>
    <Value id="ShouldTheGroupHaveREADAccess_var58" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">0</value>
    </Value>
    <Value id="ShouldTheGroupHaveEXECUTEAccess_var58" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">0</value>
    </Value>
    <Value id="ShouldTheUserHaveEXECUTEAccessTovarlogsyslog_var" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">0</value>
    </Value>
    <Value id="ShouldTheGroupHaveREADAccessTovarlogsyslog_var" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">0</value>
    </Value>
    <Value id="ShouldTheGroupHaveWRITEAccessTovarlogsyslog_var" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">0</value>
    </Value>
    <Value id="ShouldOthersHaveREADAccessTovarlogsyslog_var" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">0</value>
    </Value>
    <Value id="ShouldOthersHaveEXECUTEAccessTovarlogsyslog_var" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">0</value>
    </Value>
    <Value id="ShouldOthersHaveWRITEAccessTovarlogsyslog_var" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">0</value>
    </Value>
    <Value id="ShouldTheUserHaveWRITEAccessTovarlogsyslog_var" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">1</value>
    </Value>
    <Value id="ShouldTheGroupHaveEXECUTEAccessTovarlogsyslog_var" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">0</value>
    </Value>
    <Value id="ShouldTheUserHaveREADAccessTovarlogsyslog_var" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">1</value>
    </Value>
    <Value id="ShouldOthersHaveWRITEAccess_var60" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">0</value>
    </Value>
    <Value id="ShouldOthersHaveEXECUTEAccess_var60" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">0</value>
    </Value>
    <Value id="ShouldOthersHaveREADAccess_var60" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">0</value>
    </Value>
    <Value id="ShouldTheUserHaveEXECUTEAccess_var60" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">1</value>
    </Value>
    <Value id="ShouldTheUserHaveREADAccess_var60" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">1</value>
    </Value>
    <Value id="ShouldTheUserHaveWRITEAccess_var60" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">1</value>
    </Value>
    <Value id="ShouldTheGroupHaveWRITEAccess_var60" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">0</value>
    </Value>
    <Value id="ShouldTheGroupHaveREADAccess_var60" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">0</value>
    </Value>
    <Value id="ShouldTheGroupHaveEXECUTEAccess_var60" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">0</value>
    </Value>
    <Value id="ShouldOthersHaveWRITEAccess_var30" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">0</value>
    </Value>
    <Value id="ShouldOthersHaveEXECUTEAccess_var30" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">0</value>
    </Value>
    <Value id="ShouldOthersHaveREADAccess_var30" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">0</value>
    </Value>
    <Value id="ShouldTheUserHaveEXECUTEAccess_var30" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">0</value>
    </Value>
    <Value id="ShouldTheUserHaveREADAccess_var30" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">1</value>
    </Value>
    <Value id="ShouldTheUserHaveWRITEAccess_var30" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">1</value>
    </Value>
    <Value id="ShouldTheGroupHaveWRITEAccess_var30" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">0</value>
    </Value>
    <Value id="ShouldTheGroupHaveREADAccess_var30" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">1</value>
    </Value>
    <Value id="ShouldTheGroupHaveEXECUTEAccess_var30" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">0</value>
    </Value>
    <Value id="ShouldOthersHaveWRITEAccess_var31" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">1</value>
    </Value>
    <Value id="ShouldOthersHaveEXECUTEAccess_var31" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">0</value>
    </Value>
    <Value id="ShouldOthersHaveREADAccess_var31" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">1</value>
    </Value>
    <Value id="ShouldTheUserHaveEXECUTEAccess_var31" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">0</value>
    </Value>
    <Value id="ShouldTheUserHaveREADAccess_var31" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">1</value>
    </Value>
    <Value id="ShouldTheUserHaveWRITEAccess_var31" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">1</value>
    </Value>
    <Value id="ShouldTheGroupHaveWRITEAccess_var31" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">1</value>
    </Value>
    <Value id="ShouldTheGroupHaveREADAccess_var31" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">1</value>
    </Value>
    <Value id="ShouldTheGroupHaveEXECUTEAccess_var31" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">0</value>
    </Value>
    <Value id="ShouldOthersHaveWRITEAccess_var32" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">0</value>
    </Value>
    <Value id="ShouldOthersHaveEXECUTEAccess_var32" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">1</value>
    </Value>
    <Value id="ShouldOthersHaveREADAccess_var32" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">1</value>
    </Value>
    <Value id="ShouldTheUserHaveEXECUTEAccess_var32" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">1</value>
    </Value>
    <Value id="ShouldTheUserHaveREADAccess_var32" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">1</value>
    </Value>
    <Value id="ShouldTheUserHaveWRITEAccess_var32" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">1</value>
    </Value>
    <Value id="ShouldTheGroupHaveWRITEAccess_var32" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">0</value>
    </Value>
    <Value id="ShouldTheGroupHaveREADAccess_var32" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">1</value>
    </Value>
    <Value id="ShouldTheGroupHaveEXECUTEAccess_var32" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">1</value>
    </Value>
    <Value id="ShouldOthersHaveWRITEAccess_var35" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">0</value>
    </Value>
    <Value id="ShouldOthersHaveEXECUTEAccess_var35" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">1</value>
    </Value>
    <Value id="ShouldOthersHaveREADAccess_var35" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">1</value>
    </Value>
    <Value id="ShouldTheUserHaveEXECUTEAccess_var35" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">1</value>
    </Value>
    <Value id="ShouldTheUserHaveREADAccess_var35" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">1</value>
    </Value>
    <Value id="ShouldTheUserHaveWRITEAccess_var35" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">1</value>
    </Value>
    <Value id="ShouldTheGroupHaveWRITEAccess_var35" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">0</value>
    </Value>
    <Value id="ShouldTheGroupHaveREADAccess_var35" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">1</value>
    </Value>
    <Value id="ShouldTheGroupHaveEXECUTEAccess_var35" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">1</value>
    </Value>
    <Value id="ShouldOthersHaveWRITEAccess_var36" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">0</value>
    </Value>
    <Value id="ShouldOthersHaveEXECUTEAccess_var36" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">1</value>
    </Value>
    <Value id="ShouldOthersHaveREADAccess_var36" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">1</value>
    </Value>
    <Value id="ShouldTheUserHaveEXECUTEAccess_var36" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">1</value>
    </Value>
    <Value id="ShouldTheUserHaveREADAccess_var36" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">1</value>
    </Value>
    <Value id="ShouldTheUserHaveWRITEAccess_var36" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">1</value>
    </Value>
    <Value id="ShouldTheGroupHaveWRITEAccess_var36" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">0</value>
    </Value>
    <Value id="ShouldTheGroupHaveREADAccess_var36" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">1</value>
    </Value>
    <Value id="ShouldTheGroupHaveEXECUTEAccess_var36" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">1</value>
    </Value>
    <Value id="ShouldOthersHaveWRITEAccess_var37" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">0</value>
    </Value>
    <Value id="ShouldOthersHaveEXECUTEAccess_var37" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">1</value>
    </Value>
    <Value id="ShouldOthersHaveREADAccess_var37" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">1</value>
    </Value>
    <Value id="ShouldTheUserHaveEXECUTEAccess_var37" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">1</value>
    </Value>
    <Value id="ShouldTheUserHaveREADAccess_var37" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">1</value>
    </Value>
    <Value id="ShouldTheUserHaveWRITEAccess_var37" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">1</value>
    </Value>
    <Value id="ShouldTheGroupHaveWRITEAccess_var37" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">0</value>
    </Value>
    <Value id="ShouldTheGroupHaveREADAccess_var37" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">1</value>
    </Value>
    <Value id="ShouldTheGroupHaveEXECUTEAccess_var37" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">1</value>
    </Value>
    <Value id="ShouldOthersHaveWRITEAccess_var38" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">0</value>
    </Value>
    <Value id="ShouldOthersHaveEXECUTEAccess_var38" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">0</value>
    </Value>
    <Value id="ShouldOthersHaveREADAccess_var38" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">1</value>
    </Value>
    <Value id="ShouldTheUserHaveEXECUTEAccess_var38" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">0</value>
    </Value>
    <Value id="ShouldTheUserHaveREADAccess_var38" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">1</value>
    </Value>
    <Value id="ShouldTheUserHaveWRITEAccess_var38" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">1</value>
    </Value>
    <Value id="ShouldTheGroupHaveWRITEAccess_var38" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">0</value>
    </Value>
    <Value id="ShouldTheGroupHaveREADAccess_var38" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">1</value>
    </Value>
    <Value id="ShouldTheGroupHaveEXECUTEAccess_var38" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">0</value>
    </Value>
    <Value id="ShouldOthersHaveWRITEAccess_var39" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">0</value>
    </Value>
    <Value id="ShouldOthersHaveEXECUTEAccess_var39" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">1</value>
    </Value>
    <Value id="ShouldOthersHaveREADAccess_var39" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">1</value>
    </Value>
    <Value id="ShouldTheUserHaveEXECUTEAccess_var39" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">1</value>
    </Value>
    <Value id="ShouldTheUserHaveREADAccess_var39" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">1</value>
    </Value>
    <Value id="ShouldTheUserHaveWRITEAccess_var39" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">1</value>
    </Value>
    <Value id="ShouldTheGroupHaveWRITEAccess_var39" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">0</value>
    </Value>
    <Value id="ShouldTheGroupHaveREADAccess_var39" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">1</value>
    </Value>
    <Value id="ShouldTheGroupHaveEXECUTEAccess_var39" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">1</value>
    </Value>
    <Value id="ShouldOthersHaveWRITEAccess_var40" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">0</value>
    </Value>
    <Value id="ShouldOthersHaveEXECUTEAccess_var40" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">0</value>
    </Value>
    <Value id="ShouldOthersHaveREADAccess_var40" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">0</value>
    </Value>
    <Value id="ShouldTheUserHaveEXECUTEAccess_var40" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">1</value>
    </Value>
    <Value id="ShouldTheUserHaveREADAccess_var40" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">1</value>
    </Value>
    <Value id="ShouldTheUserHaveWRITEAccess_var40" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">1</value>
    </Value>
    <Value id="ShouldTheGroupHaveWRITEAccess_var40" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">0</value>
    </Value>
    <Value id="ShouldTheGroupHaveREADAccess_var40" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">0</value>
    </Value>
    <Value id="ShouldTheGroupHaveEXECUTEAccess_var40" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">0</value>
    </Value>
    <Value id="ShouldOthersHaveWRITEAccess_var41" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">0</value>
    </Value>
    <Value id="ShouldOthersHaveEXECUTEAccess_var41" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">1</value>
    </Value>
    <Value id="ShouldOthersHaveREADAccess_var41" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">1</value>
    </Value>
    <Value id="ShouldTheUserHaveEXECUTEAccess_var41" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">1</value>
    </Value>
    <Value id="ShouldTheUserHaveREADAccess_var41" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">1</value>
    </Value>
    <Value id="ShouldTheUserHaveWRITEAccess_var41" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">1</value>
    </Value>
    <Value id="ShouldTheGroupHaveWRITEAccess_var41" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">0</value>
    </Value>
    <Value id="ShouldTheGroupHaveREADAccess_var41" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">1</value>
    </Value>
    <Value id="ShouldTheGroupHaveEXECUTEAccess_var41" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">1</value>
    </Value>
    <Value id="ShouldOthersHaveWRITEAccess_var42" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">0</value>
    </Value>
    <Value id="ShouldOthersHaveEXECUTEAccess_var42" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">0</value>
    </Value>
    <Value id="ShouldOthersHaveREADAccess_var42" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">1</value>
    </Value>
    <Value id="ShouldTheUserHaveEXECUTEAccess_var42" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">0</value>
    </Value>
    <Value id="ShouldTheUserHaveREADAccess_var42" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">1</value>
    </Value>
    <Value id="ShouldTheUserHaveWRITEAccess_var42" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">1</value>
    </Value>
    <Value id="ShouldTheGroupHaveWRITEAccess_var42" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">0</value>
    </Value>
    <Value id="ShouldTheGroupHaveREADAccess_var42" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">1</value>
    </Value>
    <Value id="ShouldTheGroupHaveEXECUTEAccess_var42" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">0</value>
    </Value>
    <Value id="ShouldOthersHaveWRITEAccess_var43" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">0</value>
    </Value>
    <Value id="ShouldOthersHaveEXECUTEAccess_var43" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">1</value>
    </Value>
    <Value id="ShouldOthersHaveREADAccess_var43" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">1</value>
    </Value>
    <Value id="ShouldTheUserHaveEXECUTEAccess_var43" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">1</value>
    </Value>
    <Value id="ShouldTheUserHaveREADAccess_var43" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">1</value>
    </Value>
    <Value id="ShouldTheUserHaveWRITEAccess_var43" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">1</value>
    </Value>
    <Value id="ShouldTheGroupHaveWRITEAccess_var43" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">0</value>
    </Value>
    <Value id="ShouldTheGroupHaveREADAccess_var43" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">1</value>
    </Value>
    <Value id="ShouldTheGroupHaveEXECUTEAccess_var43" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">1</value>
    </Value>
    <Value id="ShouldOthersHaveWRITEAccess_var44" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">0</value>
    </Value>
    <Value id="ShouldOthersHaveEXECUTEAccess_var44" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">1</value>
    </Value>
    <Value id="ShouldOthersHaveREADAccess_var44" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">1</value>
    </Value>
    <Value id="ShouldTheUserHaveEXECUTEAccess_var44" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">1</value>
    </Value>
    <Value id="ShouldTheUserHaveREADAccess_var44" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">1</value>
    </Value>
    <Value id="ShouldTheUserHaveWRITEAccess_var44" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">1</value>
    </Value>
    <Value id="ShouldTheGroupHaveWRITEAccess_var44" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">0</value>
    </Value>
    <Value id="ShouldTheGroupHaveREADAccess_var44" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">1</value>
    </Value>
    <Value id="ShouldTheGroupHaveEXECUTEAccess_var44" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">1</value>
    </Value>
    <Value id="ShouldOthersHaveWRITEAccess_var45" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">0</value>
    </Value>
    <Value id="ShouldOthersHaveEXECUTEAccess_var45" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">1</value>
    </Value>
    <Value id="ShouldOthersHaveREADAccess_var45" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">1</value>
    </Value>
    <Value id="ShouldTheUserHaveEXECUTEAccess_var45" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">1</value>
    </Value>
    <Value id="ShouldTheUserHaveREADAccess_var45" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">1</value>
    </Value>
    <Value id="ShouldTheUserHaveWRITEAccess_var45" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">1</value>
    </Value>
    <Value id="ShouldTheGroupHaveWRITEAccess_var45" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">0</value>
    </Value>
    <Value id="ShouldTheGroupHaveREADAccess_var45" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">1</value>
    </Value>
    <Value id="ShouldTheGroupHaveEXECUTEAccess_var45" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">1</value>
    </Value>
    <Value id="ShouldOthersHaveWRITEAccess_var61" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">0</value>
    </Value>
    <Value id="ShouldOthersHaveEXECUTEAccess_var61" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">0</value>
    </Value>
    <Value id="ShouldOthersHaveREADAccess_var61" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">0</value>
    </Value>
    <Value id="ShouldTheUserHaveEXECUTEAccess_var61" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">1</value>
    </Value>
    <Value id="ShouldTheUserHaveREADAccess_var61" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">1</value>
    </Value>
    <Value id="ShouldTheUserHaveWRITEAccess_var61" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">1</value>
    </Value>
    <Value id="ShouldTheGroupHaveWRITEAccess_var61" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">0</value>
    </Value>
    <Value id="ShouldTheGroupHaveREADAccess_var61" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">0</value>
    </Value>
    <Value id="ShouldTheGroupHaveEXECUTEAccess_var61" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">0</value>
    </Value>
    <Value id="ShouldOthersHaveWRITEAccess_var65" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">0</value>
    </Value>
    <Value id="ShouldOthersHaveEXECUTEAccess_var65" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">0</value>
    </Value>
    <Value id="ShouldOthersHaveREADAccess_var65" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">1</value>
    </Value>
    <Value id="ShouldTheUserHaveEXECUTEAccess_var65" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">0</value>
    </Value>
    <Value id="ShouldTheUserHaveREADAccess_var65" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">1</value>
    </Value>
    <Value id="ShouldTheUserHaveWRITEAccess_var65" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">1</value>
    </Value>
    <Value id="ShouldTheGroupHaveWRITEAccess_var65" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">0</value>
    </Value>
    <Value id="ShouldTheGroupHaveREADAccess_var65" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">1</value>
    </Value>
    <Value id="ShouldTheGroupHaveEXECUTEAccess_var65" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">0</value>
    </Value>
    <Value id="ShouldOthersHaveWRITEAccess_var117" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">0</value>
    </Value>
    <Value id="ShouldOthersHaveEXECUTEAccess_var117" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">0</value>
    </Value>
    <Value id="ShouldOthersHaveREADAccess_var117" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">1</value>
    </Value>
    <Value id="ShouldTheUserHaveEXECUTEAccess_var117" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">0</value>
    </Value>
    <Value id="ShouldTheUserHaveREADAccess_var117" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">1</value>
    </Value>
    <Value id="ShouldTheUserHaveWRITEAccess_var117" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">1</value>
    </Value>
    <Value id="ShouldTheGroupHaveWRITEAccess_var117" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">0</value>
    </Value>
    <Value id="ShouldTheGroupHaveREADAccess_var117" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">1</value>
    </Value>
    <Value id="ShouldTheGroupHaveEXECUTEAccess_var117" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">0</value>
    </Value>
    <Value id="ShouldOthersHaveWRITEAccess_var116" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">0</value>
    </Value>
    <Value id="ShouldOthersHaveEXECUTEAccess_var116" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">0</value>
    </Value>
    <Value id="ShouldOthersHaveREADAccess_var116" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">1</value>
    </Value>
    <Value id="ShouldTheUserHaveEXECUTEAccess_var116" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">0</value>
    </Value>
    <Value id="ShouldTheUserHaveREADAccess_var116" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">1</value>
    </Value>
    <Value id="ShouldTheUserHaveWRITEAccess_var116" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">1</value>
    </Value>
    <Value id="ShouldTheGroupHaveWRITEAccess_var116" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">0</value>
    </Value>
    <Value id="ShouldTheGroupHaveREADAccess_var116" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">1</value>
    </Value>
    <Value id="ShouldTheGroupHaveEXECUTEAccess_var116" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">0</value>
    </Value>
    <Value id="ShouldOthersHaveWRITEAccess_var115" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">0</value>
    </Value>
    <Value id="ShouldOthersHaveEXECUTEAccess_var115" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">0</value>
    </Value>
    <Value id="ShouldOthersHaveREADAccess_var115" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">1</value>
    </Value>
    <Value id="ShouldTheUserHaveEXECUTEAccess_var115" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">0</value>
    </Value>
    <Value id="ShouldTheUserHaveREADAccess_var115" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">1</value>
    </Value>
    <Value id="ShouldTheUserHaveWRITEAccess_var115" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">1</value>
    </Value>
    <Value id="ShouldTheGroupHaveWRITEAccess_var115" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">0</value>
    </Value>
    <Value id="ShouldTheGroupHaveREADAccess_var115" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">1</value>
    </Value>
    <Value id="ShouldTheGroupHaveEXECUTEAccess_var115" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">0</value>
    </Value>
    <Value id="ShouldOthersHaveWRITEAccess_var77" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">0</value>
    </Value>
    <Value id="ShouldOthersHaveEXECUTEAccess_var77" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">0</value>
    </Value>
    <Value id="ShouldOthersHaveREADAccess_var77" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">0</value>
    </Value>
    <Value id="ShouldTheUserHaveEXECUTEAccess_var77" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">1</value>
    </Value>
    <Value id="ShouldTheUserHaveREADAccess_var77" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">1</value>
    </Value>
    <Value id="ShouldTheUserHaveWRITEAccess_var77" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">1</value>
    </Value>
    <Value id="ShouldTheGroupHaveWRITEAccess_var77" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">0</value>
    </Value>
    <Value id="ShouldTheGroupHaveREADAccess_var77" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">0</value>
    </Value>
    <Value id="ShouldTheGroupHaveEXECUTEAccess_var77" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">0</value>
    </Value>
    <Value id="ShouldOthersHaveWRITEAccess_var114" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">0</value>
    </Value>
    <Value id="ShouldOthersHaveEXECUTEAccess_var114" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">0</value>
    </Value>
    <Value id="ShouldOthersHaveREADAccess_var114" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">0</value>
    </Value>
    <Value id="ShouldTheUserHaveEXECUTEAccess_var114" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">0</value>
    </Value>
    <Value id="ShouldTheUserHaveREADAccess_var114" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">1</value>
    </Value>
    <Value id="ShouldTheUserHaveWRITEAccess_var114" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">1</value>
    </Value>
    <Value id="ShouldTheGroupHaveWRITEAccess_var114" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">0</value>
    </Value>
    <Value id="ShouldTheGroupHaveREADAccess_var114" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">0</value>
    </Value>
    <Value id="ShouldTheGroupHaveEXECUTEAccess_var114" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">0</value>
    </Value>
    <Value id="ShouldOthersHaveWRITEAccess_var119" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">0</value>
    </Value>
    <Value id="ShouldOthersHaveEXECUTEAccess_var119" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">0</value>
    </Value>
    <Value id="ShouldOthersHaveREADAccess_var119" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">0</value>
    </Value>
    <Value id="ShouldTheUserHaveEXECUTEAccess_var119" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">1</value>
    </Value>
    <Value id="ShouldTheUserHaveREADAccess_var119" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">1</value>
    </Value>
    <Value id="ShouldTheUserHaveWRITEAccess_var119" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">1</value>
    </Value>
    <Value id="ShouldTheGroupHaveWRITEAccess_var119" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">0</value>
    </Value>
    <Value id="ShouldTheGroupHaveREADAccess_var119" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">0</value>
    </Value>
    <Value id="ShouldTheGroupHaveEXECUTEAccess_var119" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">0</value>
    </Value>
    <Value id="ShouldOthersHaveWRITEAccess_var120" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">0</value>
    </Value>
    <Value id="ShouldOthersHaveEXECUTEAccess_var120" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">0</value>
    </Value>
    <Value id="ShouldOthersHaveREADAccess_var120" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">0</value>
    </Value>
    <Value id="ShouldTheUserHaveEXECUTEAccess_var120" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">1</value>
    </Value>
    <Value id="ShouldTheUserHaveREADAccess_var120" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">1</value>
    </Value>
    <Value id="ShouldTheUserHaveWRITEAccess_var120" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">1</value>
    </Value>
    <Value id="ShouldTheGroupHaveWRITEAccess_var120" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">0</value>
    </Value>
    <Value id="ShouldTheGroupHaveREADAccess_var120" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">0</value>
    </Value>
    <Value id="ShouldTheGroupHaveEXECUTEAccess_var120" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">0</value>
    </Value>
    <Value id="ShouldOthersHaveWRITEAccess_var121" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">0</value>
    </Value>
    <Value id="ShouldOthersHaveEXECUTEAccess_var121" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">0</value>
    </Value>
    <Value id="ShouldOthersHaveREADAccess_var121" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">0</value>
    </Value>
    <Value id="ShouldTheUserHaveEXECUTEAccess_var121" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">1</value>
    </Value>
    <Value id="ShouldTheUserHaveREADAccess_var121" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">1</value>
    </Value>
    <Value id="ShouldTheUserHaveWRITEAccess_var121" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">1</value>
    </Value>
    <Value id="ShouldTheGroupHaveWRITEAccess_var121" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">0</value>
    </Value>
    <Value id="ShouldTheGroupHaveREADAccess_var121" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">0</value>
    </Value>
    <Value id="ShouldTheGroupHaveEXECUTEAccess_var121" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">0</value>
    </Value>
    <Value id="ShouldOthersHaveWRITEAccess_var122" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">0</value>
    </Value>
    <Value id="ShouldOthersHaveEXECUTEAccess_var122" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">0</value>
    </Value>
    <Value id="ShouldOthersHaveREADAccess_var122" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">0</value>
    </Value>
    <Value id="ShouldTheUserHaveEXECUTEAccess_var122" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">1</value>
    </Value>
    <Value id="ShouldTheUserHaveREADAccess_var122" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">1</value>
    </Value>
    <Value id="ShouldTheUserHaveWRITEAccess_var122" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">1</value>
    </Value>
    <Value id="ShouldTheGroupHaveWRITEAccess_var122" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">0</value>
    </Value>
    <Value id="ShouldTheGroupHaveREADAccess_var122" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">0</value>
    </Value>
    <Value id="ShouldTheGroupHaveEXECUTEAccess_var122" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">0</value>
    </Value>
    <Value id="ShouldOthersHaveWRITEAccess_var123" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">0</value>
    </Value>
    <Value id="ShouldOthersHaveEXECUTEAccess_var123" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">1</value>
    </Value>
    <Value id="ShouldOthersHaveREADAccess_var123" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">1</value>
    </Value>
    <Value id="ShouldTheUserHaveEXECUTEAccess_var123" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">0</value>
    </Value>
    <Value id="ShouldTheUserHaveREADAccess_var123" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">1</value>
    </Value>
    <Value id="ShouldTheUserHaveWRITEAccess_var123" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">1</value>
    </Value>
    <Value id="ShouldTheGroupHaveWRITEAccess_var123" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">0</value>
    </Value>
    <Value id="ShouldTheGroupHaveREADAccess_var123" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">1</value>
    </Value>
    <Value id="ShouldTheGroupHaveEXECUTEAccess_var123" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">1</value>
    </Value>
    <Value id="ShouldOthersHaveWRITEAccess_var229" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">0</value>
    </Value>
    <Value id="ShouldOthersHaveEXECUTEAccess_var229" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">0</value>
    </Value>
    <Value id="ShouldOthersHaveREADAccess_var229" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">0</value>
    </Value>
    <Value id="ShouldTheUserHaveEXECUTEAccess_var229" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">0</value>
    </Value>
    <Value id="ShouldTheUserHaveREADAccess_var229" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">1</value>
    </Value>
    <Value id="ShouldTheUserHaveWRITEAccess_var229" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">0</value>
    </Value>
    <Value id="ShouldTheGroupHaveWRITEAccess_var229" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">0</value>
    </Value>
    <Value id="ShouldTheGroupHaveREADAccess_var229" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">0</value>
    </Value>
    <Value id="ShouldTheGroupHaveEXECUTEAccess_var229" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">0</value>
    </Value>
    <Value id="ShouldOthersHaveWRITEAccess_var46" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">1</value>
    </Value>
    <Value id="ShouldOthersHaveEXECUTEAccess_var46" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">1</value>
    </Value>
    <Value id="ShouldOthersHaveREADAccess_var46" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">1</value>
    </Value>
    <Value id="ShouldTheUserHaveEXECUTEAccess_var46" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">1</value>
    </Value>
    <Value id="ShouldTheUserHaveREADAccess_var46" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">1</value>
    </Value>
    <Value id="ShouldTheUserHaveWRITEAccess_var46" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">1</value>
    </Value>
    <Value id="ShouldTheGroupHaveWRITEAccess_var46" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">1</value>
    </Value>
    <Value id="ShouldTheGroupHaveREADAccess_var46" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">1</value>
    </Value>
    <Value id="ShouldTheGroupHaveEXECUTEAccess_var46" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">1</value>
    </Value>
    <Value id="ShouldOthersHaveWRITEAccess_var47" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">0</value>
    </Value>
    <Value id="ShouldOthersHaveEXECUTEAccess_var47" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">0</value>
    </Value>
    <Value id="ShouldOthersHaveREADAccess_var47" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">1</value>
    </Value>
    <Value id="ShouldTheUserHaveEXECUTEAccess_var47" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">0</value>
    </Value>
    <Value id="ShouldTheUserHaveREADAccess_var47" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">1</value>
    </Value>
    <Value id="ShouldTheUserHaveWRITEAccess_var47" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">1</value>
    </Value>
    <Value id="ShouldTheGroupHaveWRITEAccess_var47" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">0</value>
    </Value>
    <Value id="ShouldTheGroupHaveREADAccess_var47" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">1</value>
    </Value>
    <Value id="ShouldTheGroupHaveEXECUTEAccess_var47" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">0</value>
    </Value>
    <Value id="ShouldOthersHaveWRITEAccess_var48" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">0</value>
    </Value>
    <Value id="ShouldOthersHaveEXECUTEAccess_var48" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">0</value>
    </Value>
    <Value id="ShouldOthersHaveREADAccess_var48" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">1</value>
    </Value>
    <Value id="ShouldTheUserHaveEXECUTEAccess_var48" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">0</value>
    </Value>
    <Value id="ShouldTheUserHaveREADAccess_var48" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">1</value>
    </Value>
    <Value id="ShouldTheUserHaveWRITEAccess_var48" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">1</value>
    </Value>
    <Value id="ShouldTheGroupHaveWRITEAccess_var48" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">0</value>
    </Value>
    <Value id="ShouldTheGroupHaveREADAccess_var48" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">1</value>
    </Value>
    <Value id="ShouldTheGroupHaveEXECUTEAccess_var48" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">0</value>
    </Value>
    <Value id="ShouldOthersHaveWRITEAccess_var49" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">0</value>
    </Value>
    <Value id="ShouldOthersHaveEXECUTEAccess_var49" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">0</value>
    </Value>
    <Value id="ShouldOthersHaveREADAccess_var49" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">1</value>
    </Value>
    <Value id="ShouldTheUserHaveEXECUTEAccess_var49" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">0</value>
    </Value>
    <Value id="ShouldTheUserHaveREADAccess_var49" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">1</value>
    </Value>
    <Value id="ShouldTheUserHaveWRITEAccess_var49" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">1</value>
    </Value>
    <Value id="ShouldTheGroupHaveWRITEAccess_var49" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">0</value>
    </Value>
    <Value id="ShouldTheGroupHaveREADAccess_var49" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">1</value>
    </Value>
    <Value id="ShouldTheGroupHaveEXECUTEAccess_var49" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">0</value>
    </Value>
    <Value id="ShouldOthersHaveWRITEAccess_var50" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">0</value>
    </Value>
    <Value id="ShouldOthersHaveEXECUTEAccess_var50" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">0</value>
    </Value>
    <Value id="ShouldOthersHaveREADAccess_var50" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">1</value>
    </Value>
    <Value id="ShouldTheUserHaveEXECUTEAccess_var50" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">0</value>
    </Value>
    <Value id="ShouldTheUserHaveREADAccess_var50" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">1</value>
    </Value>
    <Value id="ShouldTheUserHaveWRITEAccess_var50" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">1</value>
    </Value>
    <Value id="ShouldTheGroupHaveWRITEAccess_var50" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">1</value>
    </Value>
    <Value id="ShouldTheGroupHaveREADAccess_var50" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">1</value>
    </Value>
    <Value id="ShouldTheGroupHaveEXECUTEAccess_var50" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">0</value>
    </Value>
    <Value id="ShouldOthersHaveWRITEAccess_var51" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">0</value>
    </Value>
    <Value id="ShouldOthersHaveEXECUTEAccess_var51" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">0</value>
    </Value>
    <Value id="ShouldOthersHaveREADAccess_var51" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">1</value>
    </Value>
    <Value id="ShouldTheUserHaveEXECUTEAccess_var51" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">0</value>
    </Value>
    <Value id="ShouldTheUserHaveREADAccess_var51" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">1</value>
    </Value>
    <Value id="ShouldTheUserHaveWRITEAccess_var51" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">1</value>
    </Value>
    <Value id="ShouldTheGroupHaveWRITEAccess_var51" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">1</value>
    </Value>
    <Value id="ShouldTheGroupHaveREADAccess_var51" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">1</value>
    </Value>
    <Value id="ShouldTheGroupHaveEXECUTEAccess_var51" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">0</value>
    </Value>
    <Value id="ShouldOthersHaveWRITEAccess_var52" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">0</value>
    </Value>
    <Value id="ShouldOthersHaveEXECUTEAccess_var52" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">1</value>
    </Value>
    <Value id="ShouldOthersHaveREADAccess_var52" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">1</value>
    </Value>
    <Value id="ShouldTheUserHaveEXECUTEAccess_var52" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">1</value>
    </Value>
    <Value id="ShouldTheUserHaveREADAccess_var52" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">1</value>
    </Value>
    <Value id="ShouldTheUserHaveWRITEAccess_var52" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">1</value>
    </Value>
    <Value id="ShouldTheGroupHaveWRITEAccess_var52" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">0</value>
    </Value>
    <Value id="ShouldTheGroupHaveREADAccess_var52" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">1</value>
    </Value>
    <Value id="ShouldTheGroupHaveEXECUTEAccess_var52" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">1</value>
    </Value>
    <Value id="ShouldOthersHaveWRITEAccess_var53" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">0</value>
    </Value>
    <Value id="ShouldOthersHaveEXECUTEAccess_var53" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">0</value>
    </Value>
    <Value id="ShouldOthersHaveREADAccess_var53" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">0</value>
    </Value>
    <Value id="ShouldTheUserHaveEXECUTEAccess_var53" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">0</value>
    </Value>
    <Value id="ShouldTheUserHaveREADAccess_var53" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">1</value>
    </Value>
    <Value id="ShouldTheUserHaveWRITEAccess_var53" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">1</value>
    </Value>
    <Value id="ShouldTheGroupHaveWRITEAccess_var53" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">1</value>
    </Value>
    <Value id="ShouldTheGroupHaveREADAccess_var53" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">1</value>
    </Value>
    <Value id="ShouldTheGroupHaveEXECUTEAccess_var53" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">0</value>
    </Value>
    <Value id="ShouldOthersHaveWRITEAccess_var54" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">0</value>
    </Value>
    <Value id="ShouldOthersHaveEXECUTEAccess_var54" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">1</value>
    </Value>
    <Value id="ShouldOthersHaveREADAccess_var54" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">1</value>
    </Value>
    <Value id="ShouldTheUserHaveEXECUTEAccess_var54" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">1</value>
    </Value>
    <Value id="ShouldTheUserHaveREADAccess_var54" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">1</value>
    </Value>
    <Value id="ShouldTheUserHaveWRITEAccess_var54" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">1</value>
    </Value>
    <Value id="ShouldTheGroupHaveWRITEAccess_var54" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">0</value>
    </Value>
    <Value id="ShouldTheGroupHaveREADAccess_var54" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">1</value>
    </Value>
    <Value id="ShouldTheGroupHaveEXECUTEAccess_var54" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">1</value>
    </Value>
    <Value id="ShouldOthersHaveWRITEAccess_var59" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">0</value>
    </Value>
    <Value id="ShouldOthersHaveEXECUTEAccess_var59" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">0</value>
    </Value>
    <Value id="ShouldOthersHaveREADAccess_var59" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">1</value>
    </Value>
    <Value id="ShouldTheUserHaveEXECUTEAccess_var59" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">0</value>
    </Value>
    <Value id="ShouldTheUserHaveREADAccess_var59" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">1</value>
    </Value>
    <Value id="ShouldTheUserHaveWRITEAccess_var59" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">1</value>
    </Value>
    <Value id="ShouldTheGroupHaveWRITEAccess_var59" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">0</value>
    </Value>
    <Value id="ShouldTheGroupHaveREADAccess_var59" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">1</value>
    </Value>
    <Value id="ShouldTheGroupHaveEXECUTEAccess_var59" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">0</value>
    </Value>
    <Value id="ShouldOthersHaveWRITEAccess_var62" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">0</value>
    </Value>
    <Value id="ShouldOthersHaveEXECUTEAccess_var62" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">1</value>
    </Value>
    <Value id="ShouldOthersHaveREADAccess_var62" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">1</value>
    </Value>
    <Value id="ShouldTheUserHaveEXECUTEAccess_var62" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">1</value>
    </Value>
    <Value id="ShouldTheUserHaveREADAccess_var62" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">1</value>
    </Value>
    <Value id="ShouldTheUserHaveWRITEAccess_var62" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">1</value>
    </Value>
    <Value id="ShouldTheGroupHaveWRITEAccess_var62" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">0</value>
    </Value>
    <Value id="ShouldTheGroupHaveREADAccess_var62" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">1</value>
    </Value>
    <Value id="ShouldTheGroupHaveEXECUTEAccess_var62" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">1</value>
    </Value>
    <Value id="WhatIsTheRequiredGroupIDOfTheFileOwner_var112" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">0</value>
    </Value>
    <Value id="WhatIsTheRequiredUserIDOfTheFileOwner_var112" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">0</value>
    </Value>
    <Value id="WhatIsTheRequiredGroupIDOfTheFileOwner_var88" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">0</value>
    </Value>
    <Value id="WhatIsTheRequiredUserIDOfTheFileOwner_var88" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">0</value>
    </Value>
    <Value id="WhatIsTheRequiredGroupIDOfTheFileOwner_var99" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">0</value>
    </Value>
    <Value id="WhatIsTheRequiredUserIDOfTheFileOwner_var99" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">0</value>
    </Value>
    <Value id="WhatIsTheRequiredGroupIDOfTheFileOwner_var111" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">0</value>
    </Value>
    <Value id="WhatIsTheRequiredUserIDOfTheFileOwner_var111" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">0</value>
    </Value>
    <Value id="ShouldOthersHaveWRITEAccess_var144" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">0</value>
    </Value>
    <Value id="WhatIsThePathForScriptFile_var1" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">/usr/bin</value>
    </Value>
    <Value id="WhatIsTheNameOfScriptFile_var1" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">scripts</value>
    </Value>
    <Value id="ShouldOthersHaveEXECUTEAccess_var144" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">0</value>
    </Value>
    <Value id="ShouldOthersHaveREADAccess_var144" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">1</value>
    </Value>
    <Value id="ShouldTheUserHaveEXECUTEAccess_var144" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">0</value>
    </Value>
    <Value id="ShouldTheUserHaveREADAccess_var144" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">1</value>
    </Value>
    <Value id="ShouldTheUserHaveWRITEAccess_var144" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">1</value>
    </Value>
    <Value id="ShouldTheGroupHaveWRITEAccess_var144" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">0</value>
    </Value>
    <Value id="ShouldTheGroupHaveREADAccess_var144" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">1</value>
    </Value>
    <Value id="ShouldTheGroupHaveEXECUTEAccess_var144" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">0</value>
    </Value>
    <Value id="WhatIsTheRequiredGroupIDOfTheFileOwner_var214" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">0</value>
    </Value>
    <Value id="WhatIsTheRequiredUserIDOfTheFileOwner_var214" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">0</value>
    </Value>
    <Value id="ShouldOthersHaveWRITEAccess_var224" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">0</value>
    </Value>
    <Value id="ShouldOthersHaveEXECUTEAccess_var224" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">0</value>
    </Value>
    <Value id="ShouldOthersHaveREADAccess_var224" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">0</value>
    </Value>
    <Value id="ShouldTheUserHaveEXECUTEAccess_var224" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">1</value>
    </Value>
    <Value id="ShouldTheUserHaveREADAccess_var224" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">1</value>
    </Value>
    <Value id="ShouldTheUserHaveWRITEAccess_var224" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">1</value>
    </Value>
    <Value id="ShouldTheGroupHaveWRITEAccess_var224" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">0</value>
    </Value>
    <Value id="ShouldTheGroupHaveREADAccess_var224" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">1</value>
    </Value>
    <Value id="ShouldTheGroupHaveEXECUTEAccess_var224" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">1</value>
    </Value>
    <Value id="WhatIsTheRequiredUserIDOfTheFileOwner_var44" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">0</value>
    </Value>
    <Value id="WhatIsTheRequiredGroupIDOfTheFileOwner_var44" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">0</value>
    </Value>
    <Value id="WhatIsTheRequiredGroupIDOfTheFileOwner_var45" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">0</value>
    </Value>
    <Value id="ShouldOthersHaveWRITEAccess_var63" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">0</value>
    </Value>
    <Value id="ShouldOthersHaveEXECUTEAccess_var63" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">0</value>
    </Value>
    <Value id="ShouldOthersHaveREADAccess_var63" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">1</value>
    </Value>
    <Value id="ShouldTheUserHaveEXECUTEAccess_var63" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">0</value>
    </Value>
    <Value id="ShouldTheUserHaveREADAccess_var63" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">1</value>
    </Value>
    <Value id="ShouldTheUserHaveWRITEAccess_var63" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">1</value>
    </Value>
    <Value id="ShouldTheGroupHaveWRITEAccess_var63" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">0</value>
    </Value>
    <Value id="ShouldTheGroupHaveREADAccess_var63" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">1</value>
    </Value>
    <Value id="ShouldTheGroupHaveEXECUTEAccess_var63" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">0</value>
    </Value>
    <Value id="WhatIsTheRequiredUserIDOfTheFileOwner_var45" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">0</value>
    </Value>
    <Value id="ShouldOthersHaveWRITEAccess_var64" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">0</value>
    </Value>
    <Value id="ShouldOthersHaveEXECUTEAccess_var64" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">0</value>
    </Value>
    <Value id="ShouldOthersHaveREADAccess_var64" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">1</value>
    </Value>
    <Value id="ShouldTheUserHaveEXECUTEAccess_var64" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">0</value>
    </Value>
    <Value id="ShouldTheUserHaveREADAccess_var64" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">1</value>
    </Value>
    <Value id="ShouldTheUserHaveWRITEAccess_var64" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">1</value>
    </Value>
    <Value id="ShouldTheGroupHaveWRITEAccess_var64" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">0</value>
    </Value>
    <Value id="ShouldTheGroupHaveREADAccess_var64" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">1</value>
    </Value>
    <Value id="ShouldTheGroupHaveEXECUTEAccess_var64" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">0</value>
    </Value>
    <Value id="WhatIsTheRequiredGroupIDOfTheFileOwner_var46" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">0</value>
    </Value>
    <Value id="WhatIsTheRequiredUserIDOfTheFileOwner_var46" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">0</value>
    </Value>
    <Value id="WhatIsTheRequiredGroupIDOfTheFileOwner_var47" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">0</value>
    </Value>
    <Value id="WhatIsTheRequiredUserIDOfTheFileOwner_var47" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">0</value>
    </Value>
    <Value id="ShouldOthersHaveWRITEAccess_var66" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">0</value>
    </Value>
    <Value id="ShouldOthersHaveEXECUTEAccess_var66" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">1</value>
    </Value>
    <Value id="ShouldOthersHaveREADAccess_var66" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">1</value>
    </Value>
    <Value id="ShouldTheUserHaveEXECUTEAccess_var66" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">1</value>
    </Value>
    <Value id="ShouldTheUserHaveREADAccess_var66" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">1</value>
    </Value>
    <Value id="ShouldTheUserHaveWRITEAccess_var66" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">1</value>
    </Value>
    <Value id="ShouldTheGroupHaveWRITEAccess_var66" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">0</value>
    </Value>
    <Value id="ShouldTheGroupHaveREADAccess_var66" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">1</value>
    </Value>
    <Value id="ShouldTheGroupHaveEXECUTEAccess_var66" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">1</value>
    </Value>
    <Value id="ShouldOthersHaveWRITEAccess_var67" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">0</value>
    </Value>
    <Value id="ShouldOthersHaveEXECUTEAccess_var67" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">1</value>
    </Value>
    <Value id="ShouldOthersHaveREADAccess_var67" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">1</value>
    </Value>
    <Value id="ShouldTheUserHaveEXECUTEAccess_var67" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">1</value>
    </Value>
    <Value id="ShouldTheUserHaveREADAccess_var67" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">1</value>
    </Value>
    <Value id="ShouldTheUserHaveWRITEAccess_var67" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">1</value>
    </Value>
    <Value id="ShouldTheGroupHaveWRITEAccess_var67" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">0</value>
    </Value>
    <Value id="ShouldTheGroupHaveREADAccess_var67" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">1</value>
    </Value>
    <Value id="ShouldTheGroupHaveEXECUTEAccess_var67" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">1</value>
    </Value>
    <Value id="WhatIsTheRequiredGroupIDOfTheFileOwner_var48" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">0</value>
    </Value>
    <Value id="WhatIsTheRequiredUserIDOfTheFileOwner_var48" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">0</value>
    </Value>
    <Value id="WhatIsTheRequiredGroupIDOfTheFileOwner_var49" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">0</value>
    </Value>
    <Value id="ShouldOthersHaveWRITEAccess_var68" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">0</value>
    </Value>
    <Value id="ShouldOthersHaveEXECUTEAccess_var68" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">0</value>
    </Value>
    <Value id="ShouldOthersHaveREADAccess_var68" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">1</value>
    </Value>
    <Value id="ShouldTheUserHaveEXECUTEAccess_var68" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">0</value>
    </Value>
    <Value id="ShouldTheUserHaveREADAccess_var68" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">1</value>
    </Value>
    <Value id="ShouldTheUserHaveWRITEAccess_var68" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">1</value>
    </Value>
    <Value id="ShouldTheGroupHaveWRITEAccess_var68" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">0</value>
    </Value>
    <Value id="ShouldTheGroupHaveREADAccess_var68" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">1</value>
    </Value>
    <Value id="ShouldTheGroupHaveEXECUTEAccess_var68" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">0</value>
    </Value>
    <Value id="WhatIsTheRequiredUserIDOfTheFileOwner_var49" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">0</value>
    </Value>
    <Value id="ShouldOthersHaveWRITEAccess_var69" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">0</value>
    </Value>
    <Value id="ShouldOthersHaveEXECUTEAccess_var69" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">0</value>
    </Value>
    <Value id="ShouldOthersHaveREADAccess_var69" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">0</value>
    </Value>
    <Value id="ShouldTheUserHaveEXECUTEAccess_var69" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">0</value>
    </Value>
    <Value id="ShouldTheUserHaveREADAccess_var69" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">1</value>
    </Value>
    <Value id="ShouldTheUserHaveWRITEAccess_var69" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">1</value>
    </Value>
    <Value id="ShouldTheGroupHaveWRITEAccess_var69" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">0</value>
    </Value>
    <Value id="ShouldTheGroupHaveREADAccess_var69" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">0</value>
    </Value>
    <Value id="ShouldTheGroupHaveEXECUTEAccess_var69" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">0</value>
    </Value>
    <Value id="ShouldOthersHaveWRITEAccess_var71" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">0</value>
    </Value>
    <Value id="ShouldOthersHaveEXECUTEAccess_var71" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">1</value>
    </Value>
    <Value id="ShouldOthersHaveREADAccess_var71" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">1</value>
    </Value>
    <Value id="ShouldTheUserHaveEXECUTEAccess_var71" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">1</value>
    </Value>
    <Value id="ShouldTheUserHaveREADAccess_var71" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">1</value>
    </Value>
    <Value id="ShouldTheUserHaveWRITEAccess_var71" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">1</value>
    </Value>
    <Value id="ShouldTheGroupHaveWRITEAccess_var71" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">0</value>
    </Value>
    <Value id="ShouldTheGroupHaveREADAccess_var71" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">1</value>
    </Value>
    <Value id="ShouldTheGroupHaveEXECUTEAccess_var71" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">1</value>
    </Value>
    <Value id="ShouldOthersHaveWRITEAccess_var72" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">0</value>
    </Value>
    <Value id="ShouldOthersHaveEXECUTEAccess_var72" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">0</value>
    </Value>
    <Value id="ShouldOthersHaveREADAccess_var72" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">1</value>
    </Value>
    <Value id="ShouldTheUserHaveEXECUTEAccess_var72" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">0</value>
    </Value>
    <Value id="ShouldTheUserHaveREADAccess_var72" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">1</value>
    </Value>
    <Value id="ShouldTheUserHaveWRITEAccess_var72" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">1</value>
    </Value>
    <Value id="ShouldTheGroupHaveWRITEAccess_var72" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">0</value>
    </Value>
    <Value id="ShouldTheGroupHaveREADAccess_var72" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">1</value>
    </Value>
    <Value id="ShouldTheGroupHaveEXECUTEAccess_var72" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">0</value>
    </Value>
    <Value id="WhatIsTheRequiredGroupIDOfTheFileOwner_var51" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">0</value>
    </Value>
    <Value id="WhatIsTheRequiredUserIDOfTheFileOwner_var51" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">0</value>
    </Value>
    <Rule id="TestThePermissionsOfTheFile_Etc_group" xml:lang="en" selected="false">
      <title xml:lang="en">Test the permissions of the file - /etc/group</title>
      <description xml:lang="en">The /etc/group file contains a list of all the valid groups defined in the system. The command below allows read/write access for root and read access for everyone else. This rule ensures that the permissions of the file /etc/group are set appropriately as per the user input.</description>
      <reference>PCI DSS v3.2 Requirements 2.3</reference>
      <reference>https://www.pcisecuritystandards.org</reference>
      <platform idref="cpe:/o:centos:centos:7" />
      <platform idref="cpe:/o:oracle:linux:7" />
      <platform idref="cpe:/o:redhat:enterprise_linux:7" />
      <ident system="www.unifiedcompliance.com">UCF CC ID 05454</ident>
      <ident system="www.unifiedcompliance.com">UCF CC ID 01537</ident>
      <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
        <check-export value-id="ShouldTheUserHaveREADAccess_var22" export-name="oval:com.mcafee.oval:var:78640" />
        <check-export value-id="ShouldTheUserHaveWRITEAccess_var22" export-name="oval:com.mcafee.oval:var:78641" />
        <check-export value-id="ShouldTheUserHaveEXECUTEAccess_var22" export-name="oval:com.mcafee.oval:var:78642" />
        <check-export value-id="ShouldTheGroupHaveREADAccess_var22" export-name="oval:com.mcafee.oval:var:78643" />
        <check-export value-id="ShouldTheGroupHaveWRITEAccess_var22" export-name="oval:com.mcafee.oval:var:78644" />
        <check-export value-id="ShouldTheGroupHaveEXECUTEAccess_var22" export-name="oval:com.mcafee.oval:var:78645" />
        <check-export value-id="ShouldOthersHaveREADAccess_var22" export-name="oval:com.mcafee.oval:var:78646" />
        <check-export value-id="ShouldOthersHaveWRITEAccess_var22" export-name="oval:com.mcafee.oval:var:78647" />
        <check-export value-id="ShouldOthersHaveEXECUTEAccess_var22" export-name="oval:com.mcafee.oval:var:78648" />
        <check-content-ref href="" name="oval:com.mcafee.oval:def:6898" />
      </check>
    </Rule>
    <Rule id="TestThePermissionsOfTheFile_Etc_shadow" xml:lang="en" selected="false">
      <title xml:lang="en">Test the permissions of the file - /etc/shadow</title>
      <description xml:lang="en">The /etc/shadow file is used to store the information about user accounts that is critical to the security of those accounts, such as the hashed password and other security information. This rule ensures that the permissions of the file /etc/shadow
        are set appropriately as per the user input.</description>
      <reference>PCI DSS v3.2 Requirements 2.3</reference>
      <reference>https://www.pcisecuritystandards.org</reference>
      <platform idref="cpe:/o:centos:centos:7" />
      <platform idref="cpe:/o:oracle:linux:7" />
      <platform idref="cpe:/o:redhat:enterprise_linux:7" />
      <ident system="www.unifiedcompliance.com">UCF CC ID 01537</ident>
      <ident system="www.unifiedcompliance.com">UCF CC ID 05502</ident>
      <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
        <check-export value-id="ShouldTheUserHaveREADAccess_var20" export-name="oval:com.mcafee.oval:var:78640" />
        <check-export value-id="ShouldTheUserHaveWRITEAccess_var20" export-name="oval:com.mcafee.oval:var:78641" />
        <check-export value-id="ShouldTheUserHaveEXECUTEAccess_var20" export-name="oval:com.mcafee.oval:var:78642" />
        <check-export value-id="ShouldTheGroupHaveREADAccess_var20" export-name="oval:com.mcafee.oval:var:78643" />
        <check-export value-id="ShouldTheGroupHaveWRITEAccess_var20" export-name="oval:com.mcafee.oval:var:78644" />
        <check-export value-id="ShouldTheGroupHaveEXECUTEAccess_var20" export-name="oval:com.mcafee.oval:var:78645" />
        <check-export value-id="ShouldOthersHaveREADAccess_var20" export-name="oval:com.mcafee.oval:var:78646" />
        <check-export value-id="ShouldOthersHaveWRITEAccess_var20" export-name="oval:com.mcafee.oval:var:78647" />
        <check-export value-id="ShouldOthersHaveEXECUTEAccess_var20" export-name="oval:com.mcafee.oval:var:78648" />
        <check-content-ref href="" name="oval:com.mcafee.oval:def:6946" />
      </check>
    </Rule>
    <Rule id="TestThePermissionsOfTheFile_Etc_resolv.conf" xml:lang="en" selected="false">
      <title xml:lang="en">Test the permissions of the file - /etc/resolv.conf</title>
      <description xml:lang="en">This check will verify the permissions set on the file - /etc/resolv.conf</description>
      <reference>PCI DSS v3.2 Requirements 2.3</reference>
      <reference>https://www.pcisecuritystandards.org</reference>
      <platform idref="cpe:/o:centos:centos:7" />
      <platform idref="cpe:/o:oracle:linux:7" />
      <platform idref="cpe:/o:redhat:enterprise_linux:7" />
      <ident system="www.unifiedcompliance.com">UCF CC ID 05452</ident>
      <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
        <check-export value-id="ShouldTheUserHaveREADAccess_var6" export-name="oval:com.mcafee.oval:var:78640" />
        <check-export value-id="ShouldTheUserHaveWRITEAccess_var6" export-name="oval:com.mcafee.oval:var:78641" />
        <check-export value-id="ShouldTheUserHaveEXECUTEAccess_var6" export-name="oval:com.mcafee.oval:var:78642" />
        <check-export value-id="ShouldTheGroupHaveREADAccess_var6" export-name="oval:com.mcafee.oval:var:78643" />
        <check-export value-id="ShouldTheGroupHaveWRITEAccess_var6" export-name="oval:com.mcafee.oval:var:78644" />
        <check-export value-id="ShouldTheGroupHaveEXECUTEAccess_var6" export-name="oval:com.mcafee.oval:var:78645" />
        <check-export value-id="ShouldOthersHaveREADAccess_var6" export-name="oval:com.mcafee.oval:var:78646" />
        <check-export value-id="ShouldOthersHaveWRITEAccess_var6" export-name="oval:com.mcafee.oval:var:78647" />
        <check-export value-id="ShouldOthersHaveEXECUTEAccess_var6" export-name="oval:com.mcafee.oval:var:78648" />
        <check-content-ref href="" name="oval:com.mcafee.oval:def:99519" />
      </check>
    </Rule>
    <Rule id="TestThePermissionsOfTheFile_Etc_named.conf" xml:lang="en" selected="false">
      <title xml:lang="en">Test the permissions of the file - /etc/named.conf</title>
      <description xml:lang="en">This check will verify the permissions set on the file - /etc/named.conf</description>
      <reference>PCI DSS v3.2 Requirements 2.3</reference>
      <reference>https://www.pcisecuritystandards.org</reference>
      <platform idref="cpe:/o:centos:centos:7" />
      <platform idref="cpe:/o:oracle:linux:7" />
      <platform idref="cpe:/o:redhat:enterprise_linux:7" />
      <ident system="www.unifiedcompliance.com">UCF CC ID 05453</ident>
      <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
        <check-export value-id="ShouldTheUserHaveREADAccess_var8" export-name="oval:com.mcafee.oval:var:78640" />
        <check-export value-id="ShouldTheUserHaveWRITEAccess_var8" export-name="oval:com.mcafee.oval:var:78641" />
        <check-export value-id="ShouldTheUserHaveEXECUTEAccess_var8" export-name="oval:com.mcafee.oval:var:78642" />
        <check-export value-id="ShouldTheGroupHaveREADAccess_var8" export-name="oval:com.mcafee.oval:var:78643" />
        <check-export value-id="ShouldTheGroupHaveWRITEAccess_var8" export-name="oval:com.mcafee.oval:var:78644" />
        <check-export value-id="ShouldTheGroupHaveEXECUTEAccess_var8" export-name="oval:com.mcafee.oval:var:78645" />
        <check-export value-id="ShouldOthersHaveREADAccess_var8" export-name="oval:com.mcafee.oval:var:78646" />
        <check-export value-id="ShouldOthersHaveWRITEAccess_var8" export-name="oval:com.mcafee.oval:var:78647" />
        <check-export value-id="ShouldOthersHaveEXECUTEAccess_var8" export-name="oval:com.mcafee.oval:var:78648" />
        <check-content-ref href="" name="oval:com.mcafee.oval:def:99456" />
      </check>
    </Rule>
    <Rule id="TestThePermissionsOfTheFile_Etc_exports" xml:lang="en" selected="false">
      <title xml:lang="en">Test the permissions of the file - /etc/exports</title>
      <description xml:lang="en">This check will verify the permissions of the file - /etc/exports</description>
      <reference>PCI DSS v3.2 Requirements 2.3</reference>
      <reference>https://www.pcisecuritystandards.org</reference>
      <platform idref="cpe:/o:centos:centos:7" />
      <platform idref="cpe:/o:oracle:linux:7" />
      <platform idref="cpe:/o:redhat:enterprise_linux:7" />
      <ident system="www.unifiedcompliance.com">UCF CC ID 05455</ident>
      <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
        <check-export value-id="ShouldTheUserHaveREADAccess_var9" export-name="oval:com.mcafee.oval:var:78640" />
        <check-export value-id="ShouldTheUserHaveWRITEAccess_var9" export-name="oval:com.mcafee.oval:var:78641" />
        <check-export value-id="ShouldTheUserHaveEXECUTEAccess_var9" export-name="oval:com.mcafee.oval:var:78642" />
        <check-export value-id="ShouldTheGroupHaveREADAccess_var9" export-name="oval:com.mcafee.oval:var:78643" />
        <check-export value-id="ShouldTheGroupHaveWRITEAccess_var9" export-name="oval:com.mcafee.oval:var:78644" />
        <check-export value-id="ShouldTheGroupHaveEXECUTEAccess_var9" export-name="oval:com.mcafee.oval:var:78645" />
        <check-export value-id="ShouldOthersHaveREADAccess_var9" export-name="oval:com.mcafee.oval:var:78646" />
        <check-export value-id="ShouldOthersHaveWRITEAccess_var9" export-name="oval:com.mcafee.oval:var:78647" />
        <check-export value-id="ShouldOthersHaveEXECUTEAccess_var9" export-name="oval:com.mcafee.oval:var:78648" />
        <check-content-ref href="" name="oval:com.mcafee.oval:def:78703" />
      </check>
    </Rule>
    <Rule id="TestThePermissionsOfTheFile_Etc_aliases" xml:lang="en" selected="false">
      <title xml:lang="en">Test the permissions of the file - /etc/aliases</title>
      <description xml:lang="en">This check will verify the permissions of the file - /etc/aliases</description>
      <reference>PCI DSS v3.2 Requirements 2.3</reference>
      <reference>https://www.pcisecuritystandards.org</reference>
      <platform idref="cpe:/o:centos:centos:7" />
      <platform idref="cpe:/o:oracle:linux:7" />
      <platform idref="cpe:/o:redhat:enterprise_linux:7" />
      <ident system="www.unifiedcompliance.com">UCF CC ID 05460</ident>
      <ident system="www.unifiedcompliance.com">UCF CC ID 05482</ident>
      <ident system="www.unifiedcompliance.com">UCF CC ID 05494</ident>
      <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
        <check-export value-id="ShouldTheUserHaveREADAccess_var10" export-name="oval:com.mcafee.oval:var:78640" />
        <check-export value-id="ShouldTheUserHaveWRITEAccess_var10" export-name="oval:com.mcafee.oval:var:78641" />
        <check-export value-id="ShouldTheUserHaveEXECUTEAccess_var10" export-name="oval:com.mcafee.oval:var:78642" />
        <check-export value-id="ShouldTheGroupHaveREADAccess_var10" export-name="oval:com.mcafee.oval:var:78643" />
        <check-export value-id="ShouldTheGroupHaveWRITEAccess_var10" export-name="oval:com.mcafee.oval:var:78644" />
        <check-export value-id="ShouldTheGroupHaveEXECUTEAccess_var10" export-name="oval:com.mcafee.oval:var:78645" />
        <check-export value-id="ShouldOthersHaveREADAccess_var10" export-name="oval:com.mcafee.oval:var:78646" />
        <check-export value-id="ShouldOthersHaveWRITEAccess_var10" export-name="oval:com.mcafee.oval:var:78647" />
        <check-export value-id="ShouldOthersHaveEXECUTEAccess_var10" export-name="oval:com.mcafee.oval:var:78648" />
        <check-content-ref href="" name="oval:com.mcafee.oval:def:78693" />
      </check>
    </Rule>
    <Rule id="TestThePermissionsOfTheFiles_Var_log_secure_" xml:lang="en" selected="false">
      <title xml:lang="en">Test the permissions of the files - /var/log/secure*</title>
      <description xml:lang="en">This check will verify the permissions of the files - /var/log/secure*</description>
      <reference>PCI DSS v3.2 Requirements 2.3</reference>
      <reference>https://www.pcisecuritystandards.org</reference>
      <platform idref="cpe:/o:centos:centos:7" />
      <platform idref="cpe:/o:oracle:linux:7" />
      <platform idref="cpe:/o:redhat:enterprise_linux:7" />
      <ident system="www.unifiedcompliance.com">UCF CC ID 05461</ident>
      <ident system="www.unifiedcompliance.com">UCF CC ID 05506</ident>
      <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
        <check-export value-id="ShouldTheUserHaveREADAccess_var11" export-name="oval:com.mcafee.oval:var:78640" />
        <check-export value-id="ShouldTheUserHaveWRITEAccess_var11" export-name="oval:com.mcafee.oval:var:78641" />
        <check-export value-id="ShouldTheUserHaveEXECUTEAccess_var11" export-name="oval:com.mcafee.oval:var:78642" />
        <check-export value-id="ShouldTheGroupHaveREADAccess_var11" export-name="oval:com.mcafee.oval:var:78643" />
        <check-export value-id="ShouldTheGroupHaveWRITEAccess_var11" export-name="oval:com.mcafee.oval:var:78644" />
        <check-export value-id="ShouldTheGroupHaveEXECUTEAccess_var11" export-name="oval:com.mcafee.oval:var:78645" />
        <check-export value-id="ShouldOthersHaveREADAccess_var11" export-name="oval:com.mcafee.oval:var:78646" />
        <check-export value-id="ShouldOthersHaveWRITEAccess_var11" export-name="oval:com.mcafee.oval:var:78647" />
        <check-export value-id="ShouldOthersHaveEXECUTEAccess_var11" export-name="oval:com.mcafee.oval:var:78648" />
        <check-content-ref href="" name="oval:com.mcafee.oval:def:92736" />
      </check>
    </Rule>
    <Rule id="TestThePermissionsOfTheFile_Etc_snmp_snmpd.conf" xml:lang="en" selected="false">
      <title xml:lang="en">Test the permissions of the file - /etc/snmp/snmpd.conf</title>
      <description xml:lang="en">This check will verify the permissions of the file - /etc/snmp/snmpd.conf</description>
      <reference>PCI DSS v3.2 Requirements 2.3</reference>
      <reference>https://www.pcisecuritystandards.org</reference>
      <platform idref="cpe:/o:centos:centos:7" />
      <platform idref="cpe:/o:oracle:linux:7" />
      <platform idref="cpe:/o:redhat:enterprise_linux:7" />
      <ident system="www.unifiedcompliance.com">UCF CC ID 05478</ident>
      <ident system="www.unifiedcompliance.com">UCF CC ID 12423</ident>
      <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
        <check-export value-id="ShouldTheUserHaveREADAccess_var12" export-name="oval:com.mcafee.oval:var:78640" />
        <check-export value-id="ShouldTheUserHaveWRITEAccess_var12" export-name="oval:com.mcafee.oval:var:78641" />
        <check-export value-id="ShouldTheUserHaveEXECUTEAccess_var12" export-name="oval:com.mcafee.oval:var:78642" />
        <check-export value-id="ShouldTheGroupHaveREADAccess_var12" export-name="oval:com.mcafee.oval:var:78643" />
        <check-export value-id="ShouldTheGroupHaveWRITEAccess_var12" export-name="oval:com.mcafee.oval:var:78644" />
        <check-export value-id="ShouldTheGroupHaveEXECUTEAccess_var12" export-name="oval:com.mcafee.oval:var:78645" />
        <check-export value-id="ShouldOthersHaveREADAccess_var12" export-name="oval:com.mcafee.oval:var:78646" />
        <check-export value-id="ShouldOthersHaveWRITEAccess_var12" export-name="oval:com.mcafee.oval:var:78647" />
        <check-export value-id="ShouldOthersHaveEXECUTEAccess_var12" export-name="oval:com.mcafee.oval:var:78648" />
        <check-content-ref href="" name="oval:com.mcafee.oval:def:2487316" />
      </check>
    </Rule>
    <Rule id="TestThePermissionsOfTheFile_Usr_bin_smbpasswd" xml:lang="en" selected="false">
      <title xml:lang="en">Test the permissions of the file - /usr/bin/smbpasswd</title>
      <description xml:lang="en">This check will verify the permissions of - /usr/bin/smbpasswd</description>
      <reference>PCI DSS v3.2 Requirements 2.3</reference>
      <reference>https://www.pcisecuritystandards.org</reference>
      <platform idref="cpe:/o:centos:centos:7" />
      <platform idref="cpe:/o:oracle:linux:7" />
      <platform idref="cpe:/o:redhat:enterprise_linux:7" />
      <ident system="www.unifiedcompliance.com">UCF CC ID 05517</ident>
      <ident system="www.unifiedcompliance.com">UCF CC ID 05459</ident>
      <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
        <check-export value-id="ShouldTheUserHaveREADAccess_var14" export-name="oval:com.mcafee.oval:var:78640" />
        <check-export value-id="ShouldTheUserHaveWRITEAccess_var14" export-name="oval:com.mcafee.oval:var:78641" />
        <check-export value-id="ShouldTheUserHaveEXECUTEAccess_var14" export-name="oval:com.mcafee.oval:var:78642" />
        <check-export value-id="ShouldTheGroupHaveREADAccess_var14" export-name="oval:com.mcafee.oval:var:78643" />
        <check-export value-id="ShouldTheGroupHaveWRITEAccess_var14" export-name="oval:com.mcafee.oval:var:78644" />
        <check-export value-id="ShouldTheGroupHaveEXECUTEAccess_var14" export-name="oval:com.mcafee.oval:var:78645" />
        <check-export value-id="ShouldOthersHaveREADAccess_var14" export-name="oval:com.mcafee.oval:var:78646" />
        <check-export value-id="ShouldOthersHaveWRITEAccess_var14" export-name="oval:com.mcafee.oval:var:78647" />
        <check-export value-id="ShouldOthersHaveEXECUTEAccess_var14" export-name="oval:com.mcafee.oval:var:78648" />
        <check-content-ref href="" name="oval:com.mcafee.oval:def:7339" />
      </check>
    </Rule>
    <Rule id="TestThePermissionsOfTheFile_Etc_login.defs" xml:lang="en" selected="false">
      <title xml:lang="en">Test the permissions of the file - /etc/login.defs</title>
      <description xml:lang="en">This check will verify the permissions of the file - /etc/login.defs</description>
      <reference>PCI DSS v3.2 Requirements 2.3</reference>
      <reference>https://www.pcisecuritystandards.org</reference>
      <platform idref="cpe:/o:centos:centos:7" />
      <platform idref="cpe:/o:oracle:linux:7" />
      <platform idref="cpe:/o:redhat:enterprise_linux:7" />
      <ident system="www.unifiedcompliance.com">UCF CC ID 05531</ident>
      <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
        <check-export value-id="ShouldTheUserHaveREADAccess_var16" export-name="oval:com.mcafee.oval:var:78640" />
        <check-export value-id="ShouldTheUserHaveWRITEAccess_var16" export-name="oval:com.mcafee.oval:var:78641" />
        <check-export value-id="ShouldTheUserHaveEXECUTEAccess_var16" export-name="oval:com.mcafee.oval:var:78642" />
        <check-export value-id="ShouldTheGroupHaveREADAccess_var16" export-name="oval:com.mcafee.oval:var:78643" />
        <check-export value-id="ShouldTheGroupHaveWRITEAccess_var16" export-name="oval:com.mcafee.oval:var:78644" />
        <check-export value-id="ShouldTheGroupHaveEXECUTEAccess_var16" export-name="oval:com.mcafee.oval:var:78645" />
        <check-export value-id="ShouldOthersHaveREADAccess_var16" export-name="oval:com.mcafee.oval:var:78646" />
        <check-export value-id="ShouldOthersHaveWRITEAccess_var16" export-name="oval:com.mcafee.oval:var:78647" />
        <check-export value-id="ShouldOthersHaveEXECUTEAccess_var16" export-name="oval:com.mcafee.oval:var:78648" />
        <check-content-ref href="" name="oval:com.mcafee.oval:def:78715" />
      </check>
    </Rule>
    <Rule id="TestThePermissionsOfTheFile_Etc_security_access.conf" xml:lang="en" selected="false">
      <title xml:lang="en">Test the permissions of the file - /etc/security/access.conf</title>
      <description xml:lang="en">This check will verify the permissions of the file - /etc/security/access.conf</description>
      <reference>PCI DSS v3.2 Requirements 2.3</reference>
      <reference>https://www.pcisecuritystandards.org</reference>
      <platform idref="cpe:/o:centos:centos:7" />
      <platform idref="cpe:/o:oracle:linux:7" />
      <platform idref="cpe:/o:redhat:enterprise_linux:7" />
      <ident system="www.unifiedcompliance.com">UCF CC ID 05532</ident>
      <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
        <check-export value-id="ShouldTheUserHaveREADAccess_var17" export-name="oval:com.mcafee.oval:var:78640" />
        <check-export value-id="ShouldTheUserHaveWRITEAccess_var17" export-name="oval:com.mcafee.oval:var:78641" />
        <check-export value-id="ShouldTheUserHaveEXECUTEAccess_var17" export-name="oval:com.mcafee.oval:var:78642" />
        <check-export value-id="ShouldTheGroupHaveREADAccess_var17" export-name="oval:com.mcafee.oval:var:78643" />
        <check-export value-id="ShouldTheGroupHaveWRITEAccess_var17" export-name="oval:com.mcafee.oval:var:78644" />
        <check-export value-id="ShouldTheGroupHaveEXECUTEAccess_var17" export-name="oval:com.mcafee.oval:var:78645" />
        <check-export value-id="ShouldOthersHaveREADAccess_var17" export-name="oval:com.mcafee.oval:var:78646" />
        <check-export value-id="ShouldOthersHaveWRITEAccess_var17" export-name="oval:com.mcafee.oval:var:78647" />
        <check-export value-id="ShouldOthersHaveEXECUTEAccess_var17" export-name="oval:com.mcafee.oval:var:78648" />
        <check-content-ref href="" name="oval:com.mcafee.oval:def:79080" />
      </check>
    </Rule>
    <Rule id="TestThePermissionsOfTheFile_Etc_sysctl.conf" xml:lang="en" selected="false">
      <title xml:lang="en">Test the permissions of the file - /etc/sysctl.conf</title>
      <description xml:lang="en">This check will verify the permissions of the file - /etc/sysctl.conf</description>
      <reference>PCI DSS v3.2 Requirements 2.3</reference>
      <reference>https://www.pcisecuritystandards.org</reference>
      <platform idref="cpe:/o:centos:centos:7" />
      <platform idref="cpe:/o:oracle:linux:7" />
      <platform idref="cpe:/o:redhat:enterprise_linux:7" />
      <ident system="www.unifiedcompliance.com">UCF CC ID 05533</ident>
      <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
        <check-export value-id="ShouldTheUserHaveREADAccess_var18" export-name="oval:com.mcafee.oval:var:78640" />
        <check-export value-id="ShouldTheUserHaveWRITEAccess_var18" export-name="oval:com.mcafee.oval:var:78641" />
        <check-export value-id="ShouldTheUserHaveEXECUTEAccess_var18" export-name="oval:com.mcafee.oval:var:78642" />
        <check-export value-id="ShouldTheGroupHaveREADAccess_var18" export-name="oval:com.mcafee.oval:var:78643" />
        <check-export value-id="ShouldTheGroupHaveWRITEAccess_var18" export-name="oval:com.mcafee.oval:var:78644" />
        <check-export value-id="ShouldTheGroupHaveEXECUTEAccess_var18" export-name="oval:com.mcafee.oval:var:78645" />
        <check-export value-id="ShouldOthersHaveREADAccess_var18" export-name="oval:com.mcafee.oval:var:78646" />
        <check-export value-id="ShouldOthersHaveWRITEAccess_var18" export-name="oval:com.mcafee.oval:var:78647" />
        <check-export value-id="ShouldOthersHaveEXECUTEAccess_var18" export-name="oval:com.mcafee.oval:var:78648" />
        <check-content-ref href="" name="oval:com.mcafee.oval:def:78737" />
      </check>
    </Rule>
    <Rule id="TestThePermissionsOfTheFile_Etc_securetty" xml:lang="en" selected="false">
      <title xml:lang="en">Test the permissions of the file - /etc/securetty</title>
      <description xml:lang="en">This check will verify the permissions of the file - /etc/securetty</description>
      <reference>PCI DSS v3.2 Requirements 2.3</reference>
      <reference>https://www.pcisecuritystandards.org</reference>
      <platform idref="cpe:/o:centos:centos:7" />
      <platform idref="cpe:/o:oracle:linux:7" />
      <platform idref="cpe:/o:redhat:enterprise_linux:7" />
      <ident system="www.unifiedcompliance.com">UCF CC ID 05534</ident>
      <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
        <check-export value-id="ShouldTheUserHaveREADAccess_var19" export-name="oval:com.mcafee.oval:var:78640" />
        <check-export value-id="ShouldTheUserHaveWRITEAccess_var19" export-name="oval:com.mcafee.oval:var:78641" />
        <check-export value-id="ShouldTheUserHaveEXECUTEAccess_var19" export-name="oval:com.mcafee.oval:var:78642" />
        <check-export value-id="ShouldTheGroupHaveREADAccess_var19" export-name="oval:com.mcafee.oval:var:78643" />
        <check-export value-id="ShouldTheGroupHaveWRITEAccess_var19" export-name="oval:com.mcafee.oval:var:78644" />
        <check-export value-id="ShouldTheGroupHaveEXECUTEAccess_var19" export-name="oval:com.mcafee.oval:var:78645" />
        <check-export value-id="ShouldOthersHaveREADAccess_var19" export-name="oval:com.mcafee.oval:var:78646" />
        <check-export value-id="ShouldOthersHaveWRITEAccess_var19" export-name="oval:com.mcafee.oval:var:78647" />
        <check-export value-id="ShouldOthersHaveEXECUTEAccess_var19" export-name="oval:com.mcafee.oval:var:78648" />
        <check-content-ref href="" name="oval:com.mcafee.oval:def:78725" />
      </check>
    </Rule>
    <Rule id="TestThePermissionsOfTheFile_Etc_audit_auditd.conf" xml:lang="en" selected="false">
      <title xml:lang="en">Test the permissions of the file - /etc/audit/auditd.conf</title>
      <description xml:lang="en">This check will verify the permissions set on the file - /etc/audit/auditd.conf</description>
      <reference>PCI DSS v3.2 Requirements 2.3</reference>
      <reference>https://www.pcisecuritystandards.org</reference>
      <platform idref="cpe:/o:centos:centos:7" />
      <platform idref="cpe:/o:oracle:linux:7" />
      <platform idref="cpe:/o:redhat:enterprise_linux:7" />
      <ident system="www.unifiedcompliance.com">UCF CC ID 05535</ident>
      <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
        <check-export value-id="ShouldTheUserHaveREADAccess_var23" export-name="oval:com.mcafee.oval:var:78640" />
        <check-export value-id="ShouldTheUserHaveWRITEAccess_var23" export-name="oval:com.mcafee.oval:var:78641" />
        <check-export value-id="ShouldTheUserHaveEXECUTEAccess_var23" export-name="oval:com.mcafee.oval:var:78642" />
        <check-export value-id="ShouldTheGroupHaveREADAccess_var23" export-name="oval:com.mcafee.oval:var:78643" />
        <check-export value-id="ShouldTheGroupHaveWRITEAccess_var23" export-name="oval:com.mcafee.oval:var:78644" />
        <check-export value-id="ShouldTheGroupHaveEXECUTEAccess_var23" export-name="oval:com.mcafee.oval:var:78645" />
        <check-export value-id="ShouldOthersHaveREADAccess_var23" export-name="oval:com.mcafee.oval:var:78646" />
        <check-export value-id="ShouldOthersHaveWRITEAccess_var23" export-name="oval:com.mcafee.oval:var:78647" />
        <check-export value-id="ShouldOthersHaveEXECUTEAccess_var23" export-name="oval:com.mcafee.oval:var:78648" />
        <check-content-ref href="" name="oval:com.mcafee.oval:def:2487371" />
      </check>
    </Rule>
    <Rule id="TestThePermissionsOfTheFile_Etc_audit_audit.rules" xml:lang="en" selected="false">
      <title xml:lang="en">Test the permissions of the file - /etc/audit/audit.rules</title>
      <description xml:lang="en">This check will verify the permissions of the file - /etc/audit/audit.rules</description>
      <reference>PCI DSS v3.2 Requirements 2.3</reference>
      <reference>https://www.pcisecuritystandards.org</reference>
      <platform idref="cpe:/o:centos:centos:7" />
      <platform idref="cpe:/o:oracle:linux:7" />
      <platform idref="cpe:/o:redhat:enterprise_linux:7" />
      <ident system="www.unifiedcompliance.com">UCF CC ID 05536</ident>
      <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
        <check-export value-id="ShouldTheUserHaveREADAccess_var24" export-name="oval:com.mcafee.oval:var:78640" />
        <check-export value-id="ShouldTheUserHaveWRITEAccess_var24" export-name="oval:com.mcafee.oval:var:78641" />
        <check-export value-id="ShouldTheUserHaveEXECUTEAccess_var24" export-name="oval:com.mcafee.oval:var:78642" />
        <check-export value-id="ShouldTheGroupHaveREADAccess_var24" export-name="oval:com.mcafee.oval:var:78643" />
        <check-export value-id="ShouldTheGroupHaveWRITEAccess_var24" export-name="oval:com.mcafee.oval:var:78644" />
        <check-export value-id="ShouldTheGroupHaveEXECUTEAccess_var24" export-name="oval:com.mcafee.oval:var:78645" />
        <check-export value-id="ShouldOthersHaveREADAccess_var24" export-name="oval:com.mcafee.oval:var:78646" />
        <check-export value-id="ShouldOthersHaveWRITEAccess_var24" export-name="oval:com.mcafee.oval:var:78647" />
        <check-export value-id="ShouldOthersHaveEXECUTEAccess_var24" export-name="oval:com.mcafee.oval:var:78648" />
        <check-content-ref href="" name="oval:com.mcafee.oval:def:79089" />
      </check>
    </Rule>
    <Rule id="TestThePermissionsOfTheFile_Usr_sbin_userhelper" xml:lang="en" selected="false">
      <title xml:lang="en">Test the permissions of the file - /usr/sbin/userhelper</title>
      <description xml:lang="en">This check will verify the permissions of the file - /usr/sbin/userhelper</description>
      <reference>PCI DSS v3.2 Requirements 2.3</reference>
      <reference>https://www.pcisecuritystandards.org</reference>
      <platform idref="cpe:/o:centos:centos:7" />
      <platform idref="cpe:/o:oracle:linux:7" />
      <platform idref="cpe:/o:redhat:enterprise_linux:7" />
      <ident system="www.unifiedcompliance.com">UCF CC ID 05537</ident>
      <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
        <check-export value-id="ShouldTheUserHaveREADAccess_var25" export-name="oval:com.mcafee.oval:var:78640" />
        <check-export value-id="ShouldTheUserHaveWRITEAccess_var25" export-name="oval:com.mcafee.oval:var:78641" />
        <check-export value-id="ShouldTheUserHaveEXECUTEAccess_var25" export-name="oval:com.mcafee.oval:var:78642" />
        <check-export value-id="ShouldTheGroupHaveREADAccess_var25" export-name="oval:com.mcafee.oval:var:78643" />
        <check-export value-id="ShouldTheGroupHaveWRITEAccess_var25" export-name="oval:com.mcafee.oval:var:78644" />
        <check-export value-id="ShouldTheGroupHaveEXECUTEAccess_var25" export-name="oval:com.mcafee.oval:var:78645" />
        <check-export value-id="ShouldOthersHaveREADAccess_var25" export-name="oval:com.mcafee.oval:var:78646" />
        <check-export value-id="ShouldOthersHaveWRITEAccess_var25" export-name="oval:com.mcafee.oval:var:78647" />
        <check-export value-id="ShouldOthersHaveEXECUTEAccess_var25" export-name="oval:com.mcafee.oval:var:78648" />
        <check-content-ref href="" name="oval:com.mcafee.oval:def:79025" />
      </check>
    </Rule>
    <Rule id="TestThePermissionsOfTheFile_Etc_at.deny" xml:lang="en" selected="false">
      <title xml:lang="en">Test the permissions of the file - /etc/at.deny</title>
      <description xml:lang="en">This check will verify the permissions of the file - /etc/at.deny</description>
      <reference>PCI DSS v3.2 Requirements 2.3</reference>
      <reference>https://www.pcisecuritystandards.org</reference>
      <platform idref="cpe:/o:centos:centos:7" />
      <platform idref="cpe:/o:oracle:linux:7" />
      <platform idref="cpe:/o:redhat:enterprise_linux:7" />
      <ident system="www.unifiedcompliance.com">UCF CC ID 05996</ident>
      <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
        <check-export value-id="ShouldTheUserHaveREADAccess_var26" export-name="oval:com.mcafee.oval:var:78640" />
        <check-export value-id="ShouldTheUserHaveWRITEAccess_var26" export-name="oval:com.mcafee.oval:var:78641" />
        <check-export value-id="ShouldTheUserHaveEXECUTEAccess_var26" export-name="oval:com.mcafee.oval:var:78642" />
        <check-export value-id="ShouldTheGroupHaveREADAccess_var26" export-name="oval:com.mcafee.oval:var:78643" />
        <check-export value-id="ShouldTheGroupHaveWRITEAccess_var26" export-name="oval:com.mcafee.oval:var:78644" />
        <check-export value-id="ShouldTheGroupHaveEXECUTEAccess_var26" export-name="oval:com.mcafee.oval:var:78645" />
        <check-export value-id="ShouldOthersHaveREADAccess_var26" export-name="oval:com.mcafee.oval:var:78646" />
        <check-export value-id="ShouldOthersHaveWRITEAccess_var26" export-name="oval:com.mcafee.oval:var:78647" />
        <check-export value-id="ShouldOthersHaveEXECUTEAccess_var26" export-name="oval:com.mcafee.oval:var:78648" />
        <check-content-ref href="" name="oval:com.mcafee.oval:def:78696" />
      </check>
    </Rule>
    <Rule id="TestThePermissionsOfTheFile_Etc_cron.deny" xml:lang="en" selected="false">
      <title xml:lang="en">Test the permissions of the file - /etc/cron.deny</title>
      <description xml:lang="en">This check will verify the permissions of the file - /etc/cron.deny</description>
      <reference>PCI DSS v3.2 Requirements 2.3</reference>
      <reference>https://www.pcisecuritystandards.org</reference>
      <platform idref="cpe:/o:centos:centos:7" />
      <platform idref="cpe:/o:oracle:linux:7" />
      <platform idref="cpe:/o:redhat:enterprise_linux:7" />
      <ident system="www.unifiedcompliance.com">UCF CC ID 06000</ident>
      <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
        <check-export value-id="ShouldTheUserHaveREADAccess_var27" export-name="oval:com.mcafee.oval:var:78640" />
        <check-export value-id="ShouldTheUserHaveWRITEAccess_var27" export-name="oval:com.mcafee.oval:var:78641" />
        <check-export value-id="ShouldTheUserHaveEXECUTEAccess_var27" export-name="oval:com.mcafee.oval:var:78642" />
        <check-export value-id="ShouldTheGroupHaveREADAccess_var27" export-name="oval:com.mcafee.oval:var:78643" />
        <check-export value-id="ShouldTheGroupHaveWRITEAccess_var27" export-name="oval:com.mcafee.oval:var:78644" />
        <check-export value-id="ShouldTheGroupHaveEXECUTEAccess_var27" export-name="oval:com.mcafee.oval:var:78645" />
        <check-export value-id="ShouldOthersHaveREADAccess_var27" export-name="oval:com.mcafee.oval:var:78646" />
        <check-export value-id="ShouldOthersHaveWRITEAccess_var27" export-name="oval:com.mcafee.oval:var:78647" />
        <check-export value-id="ShouldOthersHaveEXECUTEAccess_var27" export-name="oval:com.mcafee.oval:var:78648" />
        <check-content-ref href="" name="oval:com.mcafee.oval:def:2487301" />
      </check>
    </Rule>
    <Rule id="TestPermissionsOnRsyslogLogFile_Var_log_unused.log" xml:lang="en" selected="false">
      <title xml:lang="en">Test Permissions on rsyslog Log File /var/log/unused.log</title>
      <description xml:lang="en">A log file must already exist for rsyslog to be able to write to it. This rule verifies whether the permissions of the file /var/log/unused.log is set as per the user input.</description>
      <reference>PCI DSS v3.2 Requirements 2.3</reference>
      <reference>https://www.pcisecuritystandards.org</reference>
      <platform idref="cpe:/o:centos:centos:7" />
      <platform idref="cpe:/o:oracle:linux:7" />
      <platform idref="cpe:/o:redhat:enterprise_linux:7" />
      <ident system="www.unifiedcompliance.com">UCF CC ID 05538</ident>
      <ident system="www.unifiedcompliance.com">UCF CC ID 08748</ident>
      <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
        <check-export value-id="ShouldTheUserHaveREADAccess_var55" export-name="oval:com.mcafee.oval:var:78640" />
        <check-export value-id="ShouldTheUserHaveWRITEAccess_var55" export-name="oval:com.mcafee.oval:var:78641" />
        <check-export value-id="ShouldTheUserHaveEXECUTEAccess_var55" export-name="oval:com.mcafee.oval:var:78642" />
        <check-export value-id="ShouldTheGroupHaveREADAccess_var55" export-name="oval:com.mcafee.oval:var:78643" />
        <check-export value-id="ShouldTheGroupHaveWRITEAccess_var55" export-name="oval:com.mcafee.oval:var:78644" />
        <check-export value-id="ShouldTheGroupHaveEXECUTEAccess_var55" export-name="oval:com.mcafee.oval:var:78645" />
        <check-export value-id="ShouldOthersHaveREADAccess_var55" export-name="oval:com.mcafee.oval:var:78646" />
        <check-export value-id="ShouldOthersHaveWRITEAccess_var55" export-name="oval:com.mcafee.oval:var:78647" />
        <check-export value-id="ShouldOthersHaveEXECUTEAccess_var55" export-name="oval:com.mcafee.oval:var:78648" />
        <check-content-ref href="" name="oval:com.mcafee.oval:def:406098" />
      </check>
    </Rule>
    <Rule id="TestPermissionsOnRsyslogLogFile_Var_log_kern.log" xml:lang="en" selected="false">
      <title xml:lang="en">Test Permissions on rsyslog Log File /var/log/kern.log</title>
      <description xml:lang="en">A log file must already exist for rsyslog to be able to write to it. This rule verifies whether the permissions of the file /var/log/kern.log is set as per the user input.</description>
      <reference>PCI DSS v3.2 Requirements 2.3</reference>
      <reference>https://www.pcisecuritystandards.org</reference>
      <platform idref="cpe:/o:centos:centos:7" />
      <platform idref="cpe:/o:oracle:linux:7" />
      <platform idref="cpe:/o:redhat:enterprise_linux:7" />
      <ident system="www.unifiedcompliance.com">UCF CC ID 05538</ident>
      <ident system="www.unifiedcompliance.com">UCF CC ID 08748</ident>
      <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
        <check-export value-id="ShouldTheUserHaveREADAccess_var56" export-name="oval:com.mcafee.oval:var:78640" />
        <check-export value-id="ShouldTheUserHaveWRITEAccess_var56" export-name="oval:com.mcafee.oval:var:78641" />
        <check-export value-id="ShouldTheUserHaveEXECUTEAccess_var56" export-name="oval:com.mcafee.oval:var:78642" />
        <check-export value-id="ShouldTheGroupHaveREADAccess_var56" export-name="oval:com.mcafee.oval:var:78643" />
        <check-export value-id="ShouldTheGroupHaveWRITEAccess_var56" export-name="oval:com.mcafee.oval:var:78644" />
        <check-export value-id="ShouldTheGroupHaveEXECUTEAccess_var56" export-name="oval:com.mcafee.oval:var:78645" />
        <check-export value-id="ShouldOthersHaveREADAccess_var56" export-name="oval:com.mcafee.oval:var:78646" />
        <check-export value-id="ShouldOthersHaveWRITEAccess_var56" export-name="oval:com.mcafee.oval:var:78647" />
        <check-export value-id="ShouldOthersHaveEXECUTEAccess_var56" export-name="oval:com.mcafee.oval:var:78648" />
        <check-content-ref href="" name="oval:com.mcafee.oval:def:406081" />
      </check>
    </Rule>
    <Rule id="TestPermissionsOnRsyslogLogFile_Var_log_daemon.log" xml:lang="en" selected="false">
      <title xml:lang="en">Test Permissions on rsyslog Log File /var/log/daemon.log</title>
      <description xml:lang="en">A log file must already exist for rsyslog to be able to write to it. This rule verifies whether the permissions of the file /var/log/daemon.log is set as per the user input.</description>
      <reference>PCI DSS v3.2 Requirements 2.3</reference>
      <reference>https://www.pcisecuritystandards.org</reference>
      <platform idref="cpe:/o:centos:centos:7" />
      <platform idref="cpe:/o:oracle:linux:7" />
      <platform idref="cpe:/o:redhat:enterprise_linux:7" />
      <ident system="www.unifiedcompliance.com">UCF CC ID 05538</ident>
      <ident system="www.unifiedcompliance.com">UCF CC ID 08748</ident>
      <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
        <check-export value-id="ShouldTheUserHaveREADAccess_var57" export-name="oval:com.mcafee.oval:var:78640" />
        <check-export value-id="ShouldTheUserHaveWRITEAccess_var57" export-name="oval:com.mcafee.oval:var:78641" />
        <check-export value-id="ShouldTheUserHaveEXECUTEAccess_var57" export-name="oval:com.mcafee.oval:var:78642" />
        <check-export value-id="ShouldTheGroupHaveREADAccess_var57" export-name="oval:com.mcafee.oval:var:78643" />
        <check-export value-id="ShouldTheGroupHaveWRITEAccess_var57" export-name="oval:com.mcafee.oval:var:78644" />
        <check-export value-id="ShouldTheGroupHaveEXECUTEAccess_var57" export-name="oval:com.mcafee.oval:var:78645" />
        <check-export value-id="ShouldOthersHaveREADAccess_var57" export-name="oval:com.mcafee.oval:var:78646" />
        <check-export value-id="ShouldOthersHaveWRITEAccess_var57" export-name="oval:com.mcafee.oval:var:78647" />
        <check-export value-id="ShouldOthersHaveEXECUTEAccess_var57" export-name="oval:com.mcafee.oval:var:78648" />
        <check-content-ref href="" name="oval:com.mcafee.oval:def:406083" />
      </check>
    </Rule>
    <Rule id="TestPermissionsOnRsyslogLogFile_Var_log_messages" xml:lang="en" selected="false">
      <title xml:lang="en">Test Permissions on rsyslog Log File /var/log/messages</title>
      <description xml:lang="en">A log file must already exist for rsyslog to be able to write to it. This rule verifies whether the permissions of the file /var/log/messages is set as per the user input.</description>
      <reference>PCI DSS v3.2 Requirements 2.3</reference>
      <reference>https://www.pcisecuritystandards.org</reference>
      <platform idref="cpe:/o:centos:centos:7" />
      <platform idref="cpe:/o:oracle:linux:7" />
      <platform idref="cpe:/o:redhat:enterprise_linux:7" />
      <ident system="www.unifiedcompliance.com">UCF CC ID 05538</ident>
      <ident system="www.unifiedcompliance.com">UCF CC ID 05505</ident>
      <ident system="www.unifiedcompliance.com">UCF CC ID 08748</ident>
      <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
        <check-export value-id="ShouldTheUserHaveREADAccess_var58" export-name="oval:com.mcafee.oval:var:78640" />
        <check-export value-id="ShouldTheUserHaveWRITEAccess_var58" export-name="oval:com.mcafee.oval:var:78641" />
        <check-export value-id="ShouldTheUserHaveEXECUTEAccess_var58" export-name="oval:com.mcafee.oval:var:78642" />
        <check-export value-id="ShouldTheGroupHaveREADAccess_var58" export-name="oval:com.mcafee.oval:var:78643" />
        <check-export value-id="ShouldTheGroupHaveWRITEAccess_var58" export-name="oval:com.mcafee.oval:var:78644" />
        <check-export value-id="ShouldTheGroupHaveEXECUTEAccess_var58" export-name="oval:com.mcafee.oval:var:78645" />
        <check-export value-id="ShouldOthersHaveREADAccess_var58" export-name="oval:com.mcafee.oval:var:78646" />
        <check-export value-id="ShouldOthersHaveWRITEAccess_var58" export-name="oval:com.mcafee.oval:var:78647" />
        <check-export value-id="ShouldOthersHaveEXECUTEAccess_var58" export-name="oval:com.mcafee.oval:var:78648" />
        <check-content-ref href="" name="oval:com.mcafee.oval:def:406133" />
      </check>
    </Rule>
    <Rule id="TestPermissionsOnRsyslogLogFile_Var_log_syslog" xml:lang="en" selected="false">
      <title xml:lang="en">Test Permissions on rsyslog Log File /var/log/syslog</title>
      <description xml:lang="en">A log file must already exist for rsyslog to be able to write to it. This rule verifies if the file /var/log/syslog is set right permissions as per the user input.</description>
      <reference>PCI DSS v3.2 Requirements 2.3</reference>
      <reference>https://www.pcisecuritystandards.org</reference>
      <platform idref="cpe:/o:centos:centos:7" />
      <platform idref="cpe:/o:oracle:linux:7" />
      <platform idref="cpe:/o:redhat:enterprise_linux:7" />
      <ident system="www.unifiedcompliance.com">UCF CC ID 05538</ident>
      <ident system="www.unifiedcompliance.com">UCF CC ID 08748</ident>
      <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
        <check-export value-id="ShouldTheUserHaveREADAccessTovarlogsyslog_var" export-name="oval:com.mcafee.oval:var:231542" />
        <check-export value-id="ShouldTheUserHaveWRITEAccessTovarlogsyslog_var" export-name="oval:com.mcafee.oval:var:231543" />
        <check-export value-id="ShouldTheUserHaveEXECUTEAccessTovarlogsyslog_var" export-name="oval:com.mcafee.oval:var:231544" />
        <check-export value-id="ShouldTheGroupHaveREADAccessTovarlogsyslog_var" export-name="oval:com.mcafee.oval:var:231545" />
        <check-export value-id="ShouldTheGroupHaveWRITEAccessTovarlogsyslog_var" export-name="oval:com.mcafee.oval:var:231546" />
        <check-export value-id="ShouldTheGroupHaveEXECUTEAccessTovarlogsyslog_var" export-name="oval:com.mcafee.oval:var:231547" />
        <check-export value-id="ShouldOthersHaveREADAccessTovarlogsyslog_var" export-name="oval:com.mcafee.oval:var:231548" />
        <check-export value-id="ShouldOthersHaveWRITEAccessTovarlogsyslog_var" export-name="oval:com.mcafee.oval:var:231549" />
        <check-export value-id="ShouldOthersHaveEXECUTEAccessTovarlogsyslog_var" export-name="oval:com.mcafee.oval:var:231550" />
        <check-content-ref href="" name="oval:com.mcafee.oval:def:406130" />
      </check>
    </Rule>
    <Rule id="SetPermissionOn_Etc_anacrontab" xml:lang="en" selected="false">
      <title xml:lang="en">Set permission on /etc/anacrontab</title>
      <description xml:lang="en">The /etc/anacrontab file is used by anacron to control its own jobs. The commands in this item make sure that root is the user and group owner of the file and is the only user that can read and write the file. This check verifies if the permissions of - /etc/anacrontab are set as per the user input.</description>
      <reference>PCI DSS v3.2 Requirements 2.3</reference>
      <reference>https://www.pcisecuritystandards.org</reference>
      <platform idref="cpe:/o:centos:centos:7" />
      <platform idref="cpe:/o:oracle:linux:7" />
      <platform idref="cpe:/o:redhat:enterprise_linux:7" />
      <ident system="www.unifiedcompliance.com">UCF CC ID 05543</ident>
      <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
        <check-export value-id="ShouldTheUserHaveREADAccess_var60" export-name="oval:com.mcafee.oval:var:78640" />
        <check-export value-id="ShouldTheUserHaveWRITEAccess_var60" export-name="oval:com.mcafee.oval:var:78641" />
        <check-export value-id="ShouldTheUserHaveEXECUTEAccess_var60" export-name="oval:com.mcafee.oval:var:78642" />
        <check-export value-id="ShouldTheGroupHaveREADAccess_var60" export-name="oval:com.mcafee.oval:var:78643" />
        <check-export value-id="ShouldTheGroupHaveWRITEAccess_var60" export-name="oval:com.mcafee.oval:var:78644" />
        <check-export value-id="ShouldTheGroupHaveEXECUTEAccess_var60" export-name="oval:com.mcafee.oval:var:78645" />
        <check-export value-id="ShouldOthersHaveREADAccess_var60" export-name="oval:com.mcafee.oval:var:78646" />
        <check-export value-id="ShouldOthersHaveWRITEAccess_var60" export-name="oval:com.mcafee.oval:var:78647" />
        <check-export value-id="ShouldOthersHaveEXECUTEAccess_var60" export-name="oval:com.mcafee.oval:var:78648" />
        <check-content-ref href="" name="oval:com.mcafee.oval:def:6870" />
      </check>
    </Rule>
    <Rule id="TestThePermissionsOfTheFile_Dev_mem" xml:lang="en" selected="false">
      <title xml:lang="en">Test the permissions of the file - /dev/mem</title>
      <description xml:lang="en">This check will verify the permissions set on the file - /dev/mem</description>
      <reference>PCI DSS v3.2 Requirements 2.3</reference>
      <reference>https://www.pcisecuritystandards.org</reference>
      <platform idref="cpe:/o:centos:centos:7" />
      <platform idref="cpe:/o:oracle:linux:7" />
      <platform idref="cpe:/o:redhat:enterprise_linux:7" />
      <ident system="www.unifiedcompliance.com">UCF CC ID 05450</ident>
      <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
        <check-export value-id="ShouldTheUserHaveREADAccess_var30" export-name="oval:com.mcafee.oval:var:78640" />
        <check-export value-id="ShouldTheUserHaveWRITEAccess_var30" export-name="oval:com.mcafee.oval:var:78641" />
        <check-export value-id="ShouldTheUserHaveEXECUTEAccess_var30" export-name="oval:com.mcafee.oval:var:78642" />
        <check-export value-id="ShouldTheGroupHaveREADAccess_var30" export-name="oval:com.mcafee.oval:var:78643" />
        <check-export value-id="ShouldTheGroupHaveWRITEAccess_var30" export-name="oval:com.mcafee.oval:var:78644" />
        <check-export value-id="ShouldTheGroupHaveEXECUTEAccess_var30" export-name="oval:com.mcafee.oval:var:78645" />
        <check-export value-id="ShouldOthersHaveREADAccess_var30" export-name="oval:com.mcafee.oval:var:78646" />
        <check-export value-id="ShouldOthersHaveWRITEAccess_var30" export-name="oval:com.mcafee.oval:var:78647" />
        <check-export value-id="ShouldOthersHaveEXECUTEAccess_var30" export-name="oval:com.mcafee.oval:var:78648" />
        <check-content-ref href="" name="oval:com.mcafee.oval:def:2487435" />
      </check>
    </Rule>
    <Rule id="TestThePermissionsOfTheFile_Dev_null" xml:lang="en" selected="false">
      <title xml:lang="en">Test the permissions of the file - /dev/null</title>
      <description xml:lang="en">This check will verify the permissions set on the file - /dev/null</description>
      <reference>PCI DSS v3.2 Requirements 2.3</reference>
      <reference>https://www.pcisecuritystandards.org</reference>
      <platform idref="cpe:/o:centos:centos:7" />
      <platform idref="cpe:/o:oracle:linux:7" />
      <platform idref="cpe:/o:redhat:enterprise_linux:7" />
      <ident system="www.unifiedcompliance.com">UCF CC ID 05451</ident>
      <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
        <check-export value-id="ShouldTheUserHaveREADAccess_var31" export-name="oval:com.mcafee.oval:var:78640" />
        <check-export value-id="ShouldTheUserHaveWRITEAccess_var31" export-name="oval:com.mcafee.oval:var:78641" />
        <check-export value-id="ShouldTheUserHaveEXECUTEAccess_var31" export-name="oval:com.mcafee.oval:var:78642" />
        <check-export value-id="ShouldTheGroupHaveREADAccess_var31" export-name="oval:com.mcafee.oval:var:78643" />
        <check-export value-id="ShouldTheGroupHaveWRITEAccess_var31" export-name="oval:com.mcafee.oval:var:78644" />
        <check-export value-id="ShouldTheGroupHaveEXECUTEAccess_var31" export-name="oval:com.mcafee.oval:var:78645" />
        <check-export value-id="ShouldOthersHaveREADAccess_var31" export-name="oval:com.mcafee.oval:var:78646" />
        <check-export value-id="ShouldOthersHaveWRITEAccess_var31" export-name="oval:com.mcafee.oval:var:78647" />
        <check-export value-id="ShouldOthersHaveEXECUTEAccess_var31" export-name="oval:com.mcafee.oval:var:78648" />
        <check-content-ref href="" name="oval:com.mcafee.oval:def:2487439" />
      </check>
    </Rule>
    <Rule id="TestThePermissionsOfTheFile_Usr_bin_sync" xml:lang="en" selected="false">
      <title xml:lang="en">Test the permissions of the file - /usr/bin/sync</title>
      <description xml:lang="en">This check will verify the permissions set on the file - /usr/bin/sync</description>
      <reference>PCI DSS v3.2 Requirements 2.3</reference>
      <reference>https://www.pcisecuritystandards.org</reference>
      <platform idref="cpe:/o:centos:centos:7" />
      <platform idref="cpe:/o:oracle:linux:7" />
      <platform idref="cpe:/o:redhat:enterprise_linux:7" />
      <ident system="www.unifiedcompliance.com">UCF CC ID 05458</ident>
      <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
        <check-export value-id="ShouldTheUserHaveREADAccess_var32" export-name="oval:com.mcafee.oval:var:78640" />
        <check-export value-id="ShouldTheUserHaveWRITEAccess_var32" export-name="oval:com.mcafee.oval:var:78641" />
        <check-export value-id="ShouldTheUserHaveEXECUTEAccess_var32" export-name="oval:com.mcafee.oval:var:78642" />
        <check-export value-id="ShouldTheGroupHaveREADAccess_var32" export-name="oval:com.mcafee.oval:var:78643" />
        <check-export value-id="ShouldTheGroupHaveWRITEAccess_var32" export-name="oval:com.mcafee.oval:var:78644" />
        <check-export value-id="ShouldTheGroupHaveEXECUTEAccess_var32" export-name="oval:com.mcafee.oval:var:78645" />
        <check-export value-id="ShouldOthersHaveREADAccess_var32" export-name="oval:com.mcafee.oval:var:78646" />
        <check-export value-id="ShouldOthersHaveWRITEAccess_var32" export-name="oval:com.mcafee.oval:var:78647" />
        <check-export value-id="ShouldOthersHaveEXECUTEAccess_var32" export-name="oval:com.mcafee.oval:var:78648" />
        <check-content-ref href="" name="oval:com.mcafee.oval:def:2487443" />
      </check>
    </Rule>
    <Rule id="TestThePermissionsOfTheFile_Bin_tcsh" xml:lang="en" selected="false">
      <title xml:lang="en">Test the permissions of the file - /bin/tcsh</title>
      <description xml:lang="en">This check will verify the permissions set on the file - /bin/tcsh</description>
      <reference>PCI DSS v3.2 Requirements 2.3</reference>
      <reference>https://www.pcisecuritystandards.org</reference>
      <platform idref="cpe:/o:centos:centos:7" />
      <platform idref="cpe:/o:oracle:linux:7" />
      <platform idref="cpe:/o:redhat:enterprise_linux:7" />
      <ident system="www.unifiedcompliance.com">UCF CC ID 05463</ident>
      <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
        <check-export value-id="ShouldTheUserHaveREADAccess_var35" export-name="oval:com.mcafee.oval:var:78640" />
        <check-export value-id="ShouldTheUserHaveWRITEAccess_var35" export-name="oval:com.mcafee.oval:var:78641" />
        <check-export value-id="ShouldTheUserHaveEXECUTEAccess_var35" export-name="oval:com.mcafee.oval:var:78642" />
        <check-export value-id="ShouldTheGroupHaveREADAccess_var35" export-name="oval:com.mcafee.oval:var:78643" />
        <check-export value-id="ShouldTheGroupHaveWRITEAccess_var35" export-name="oval:com.mcafee.oval:var:78644" />
        <check-export value-id="ShouldTheGroupHaveEXECUTEAccess_var35" export-name="oval:com.mcafee.oval:var:78645" />
        <check-export value-id="ShouldOthersHaveREADAccess_var35" export-name="oval:com.mcafee.oval:var:78646" />
        <check-export value-id="ShouldOthersHaveWRITEAccess_var35" export-name="oval:com.mcafee.oval:var:78647" />
        <check-export value-id="ShouldOthersHaveEXECUTEAccess_var35" export-name="oval:com.mcafee.oval:var:78648" />
        <check-content-ref href="" name="oval:com.mcafee.oval:def:2487447" />
      </check>
    </Rule>
    <Rule id="TestThePermissionsOfTheFile_Bin_bash" xml:lang="en" selected="false">
      <title xml:lang="en">Test the permissions of the file - /bin/bash</title>
      <description xml:lang="en">This check will verify the permissions set on the file - /bin/bash</description>
      <reference>PCI DSS v3.2 Requirements 2.3</reference>
      <reference>https://www.pcisecuritystandards.org</reference>
      <platform idref="cpe:/o:centos:centos:7" />
      <platform idref="cpe:/o:oracle:linux:7" />
      <platform idref="cpe:/o:redhat:enterprise_linux:7" />
      <ident system="www.unifiedcompliance.com">UCF CC ID 05467</ident>
      <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
        <check-export value-id="ShouldTheUserHaveREADAccess_var36" export-name="oval:com.mcafee.oval:var:78640" />
        <check-export value-id="ShouldTheUserHaveWRITEAccess_var36" export-name="oval:com.mcafee.oval:var:78641" />
        <check-export value-id="ShouldTheUserHaveEXECUTEAccess_var36" export-name="oval:com.mcafee.oval:var:78642" />
        <check-export value-id="ShouldTheGroupHaveREADAccess_var36" export-name="oval:com.mcafee.oval:var:78643" />
        <check-export value-id="ShouldTheGroupHaveWRITEAccess_var36" export-name="oval:com.mcafee.oval:var:78644" />
        <check-export value-id="ShouldTheGroupHaveEXECUTEAccess_var36" export-name="oval:com.mcafee.oval:var:78645" />
        <check-export value-id="ShouldOthersHaveREADAccess_var36" export-name="oval:com.mcafee.oval:var:78646" />
        <check-export value-id="ShouldOthersHaveWRITEAccess_var36" export-name="oval:com.mcafee.oval:var:78647" />
        <check-export value-id="ShouldOthersHaveEXECUTEAccess_var36" export-name="oval:com.mcafee.oval:var:78648" />
        <check-content-ref href="" name="oval:com.mcafee.oval:def:2487451" />
      </check>
    </Rule>
    <Rule id="TestThePermissionsOfTheFile_Usr_bin_bash" xml:lang="en" selected="false">
      <title xml:lang="en">Test the permissions of the file - /usr/bin/bash</title>
      <description xml:lang="en">This check will verify the permissions set on the file - /usr/bin/bash</description>
      <reference>PCI DSS v3.2 Requirements 2.3</reference>
      <reference>https://www.pcisecuritystandards.org</reference>
      <platform idref="cpe:/o:centos:centos:7" />
      <platform idref="cpe:/o:oracle:linux:7" />
      <platform idref="cpe:/o:redhat:enterprise_linux:7" />
      <ident system="www.unifiedcompliance.com">UCF CC ID 05477</ident>
      <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
        <check-export value-id="ShouldTheUserHaveREADAccess_var37" export-name="oval:com.mcafee.oval:var:78640" />
        <check-export value-id="ShouldTheUserHaveWRITEAccess_var37" export-name="oval:com.mcafee.oval:var:78641" />
        <check-export value-id="ShouldTheUserHaveEXECUTEAccess_var37" export-name="oval:com.mcafee.oval:var:78642" />
        <check-export value-id="ShouldTheGroupHaveREADAccess_var37" export-name="oval:com.mcafee.oval:var:78643" />
        <check-export value-id="ShouldTheGroupHaveWRITEAccess_var37" export-name="oval:com.mcafee.oval:var:78644" />
        <check-export value-id="ShouldTheGroupHaveEXECUTEAccess_var37" export-name="oval:com.mcafee.oval:var:78645" />
        <check-export value-id="ShouldOthersHaveREADAccess_var37" export-name="oval:com.mcafee.oval:var:78646" />
        <check-export value-id="ShouldOthersHaveWRITEAccess_var37" export-name="oval:com.mcafee.oval:var:78647" />
        <check-export value-id="ShouldOthersHaveEXECUTEAccess_var37" export-name="oval:com.mcafee.oval:var:78648" />
        <check-content-ref href="" name="oval:com.mcafee.oval:def:2487455" />
      </check>
    </Rule>
    <Rule id="TestThePermissionsOfAllFilesPresentInTheDirectory_Etc_httpd_conf" xml:lang="en" selected="false">
      <title xml:lang="en">Test the permissions of all files present in the directory - /etc/httpd/conf</title>
      <description xml:lang="en">This check will verify the permissions of all files present in the directory - /etc/httpd/conf</description>
      <reference>PCI DSS v3.2 Requirements 2.3</reference>
      <reference>https://www.pcisecuritystandards.org</reference>
      <platform idref="cpe:/o:centos:centos:7" />
      <platform idref="cpe:/o:oracle:linux:7" />
      <platform idref="cpe:/o:redhat:enterprise_linux:7" />
      <ident system="www.unifiedcompliance.com">UCF CC ID 05548</ident>
      <ident system="www.unifiedcompliance.com">UCF CC ID 05549</ident>
      <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
        <check-export value-id="ShouldTheUserHaveREADAccess_var38" export-name="oval:com.mcafee.oval:var:78640" />
        <check-export value-id="ShouldTheUserHaveWRITEAccess_var38" export-name="oval:com.mcafee.oval:var:78641" />
        <check-export value-id="ShouldTheUserHaveEXECUTEAccess_var38" export-name="oval:com.mcafee.oval:var:78642" />
        <check-export value-id="ShouldTheGroupHaveREADAccess_var38" export-name="oval:com.mcafee.oval:var:78643" />
        <check-export value-id="ShouldTheGroupHaveWRITEAccess_var38" export-name="oval:com.mcafee.oval:var:78644" />
        <check-export value-id="ShouldTheGroupHaveEXECUTEAccess_var38" export-name="oval:com.mcafee.oval:var:78645" />
        <check-export value-id="ShouldOthersHaveREADAccess_var38" export-name="oval:com.mcafee.oval:var:78646" />
        <check-export value-id="ShouldOthersHaveWRITEAccess_var38" export-name="oval:com.mcafee.oval:var:78647" />
        <check-export value-id="ShouldOthersHaveEXECUTEAccess_var38" export-name="oval:com.mcafee.oval:var:78648" />
        <check-content-ref href="" name="oval:com.mcafee.oval:def:79019" />
      </check>
    </Rule>
    <Rule id="TestThePermissionsOfTheFile_Usr_sbin_httpd" xml:lang="en" selected="false">
      <title xml:lang="en">Test the permissions of the file - /usr/sbin/httpd</title>
      <description xml:lang="en">This check will verify the permissions of the file - /usr/sbin/httpd</description>
      <reference>PCI DSS v3.2 Requirements 2.3</reference>
      <reference>https://www.pcisecuritystandards.org</reference>
      <platform idref="cpe:/o:centos:centos:7" />
      <platform idref="cpe:/o:oracle:linux:7" />
      <platform idref="cpe:/o:redhat:enterprise_linux:7" />
      <ident system="www.unifiedcompliance.com">UCF CC ID 05550</ident>
      <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
        <check-export value-id="ShouldTheUserHaveREADAccess_var39" export-name="oval:com.mcafee.oval:var:78640" />
        <check-export value-id="ShouldTheUserHaveWRITEAccess_var39" export-name="oval:com.mcafee.oval:var:78641" />
        <check-export value-id="ShouldTheUserHaveEXECUTEAccess_var39" export-name="oval:com.mcafee.oval:var:78642" />
        <check-export value-id="ShouldTheGroupHaveREADAccess_var39" export-name="oval:com.mcafee.oval:var:78643" />
        <check-export value-id="ShouldTheGroupHaveWRITEAccess_var39" export-name="oval:com.mcafee.oval:var:78644" />
        <check-export value-id="ShouldTheGroupHaveEXECUTEAccess_var39" export-name="oval:com.mcafee.oval:var:78645" />
        <check-export value-id="ShouldOthersHaveREADAccess_var39" export-name="oval:com.mcafee.oval:var:78646" />
        <check-export value-id="ShouldOthersHaveWRITEAccess_var39" export-name="oval:com.mcafee.oval:var:78647" />
        <check-export value-id="ShouldOthersHaveEXECUTEAccess_var39" export-name="oval:com.mcafee.oval:var:78648" />
        <check-content-ref href="" name="oval:com.mcafee.oval:def:79022" />
      </check>
    </Rule>
    <Rule id="TestThePermissionsOfTheDirectory_Var_log_httpd" xml:lang="en" selected="false">
      <title xml:lang="en">Test the permissions of the directory - /var/log/httpd</title>
      <description xml:lang="en">This check will verify the permissions of the directory - /var/log/httpd</description>
      <reference>PCI DSS v3.2 Requirements 2.3</reference>
      <reference>https://www.pcisecuritystandards.org</reference>
      <platform idref="cpe:/o:centos:centos:7" />
      <platform idref="cpe:/o:oracle:linux:7" />
      <platform idref="cpe:/o:redhat:enterprise_linux:7" />
      <ident system="www.unifiedcompliance.com">UCF CC ID 05551</ident>
      <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
        <check-export value-id="ShouldTheUserHaveREADAccess_var40" export-name="oval:com.mcafee.oval:var:78640" />
        <check-export value-id="ShouldTheUserHaveWRITEAccess_var40" export-name="oval:com.mcafee.oval:var:78641" />
        <check-export value-id="ShouldTheUserHaveEXECUTEAccess_var40" export-name="oval:com.mcafee.oval:var:78642" />
        <check-export value-id="ShouldTheGroupHaveREADAccess_var40" export-name="oval:com.mcafee.oval:var:78643" />
        <check-export value-id="ShouldTheGroupHaveWRITEAccess_var40" export-name="oval:com.mcafee.oval:var:78644" />
        <check-export value-id="ShouldTheGroupHaveEXECUTEAccess_var40" export-name="oval:com.mcafee.oval:var:78645" />
        <check-export value-id="ShouldOthersHaveREADAccess_var40" export-name="oval:com.mcafee.oval:var:78646" />
        <check-export value-id="ShouldOthersHaveWRITEAccess_var40" export-name="oval:com.mcafee.oval:var:78647" />
        <check-export value-id="ShouldOthersHaveEXECUTEAccess_var40" export-name="oval:com.mcafee.oval:var:78648" />
        <check-content-ref href="" name="oval:com.mcafee.oval:def:92713" />
      </check>
    </Rule>
    <Rule id="TestThePermissionsOfTheFile_Usr_bin_traceroute" xml:lang="en" selected="false">
      <title xml:lang="en">Test the permissions of  the file - /usr/bin/traceroute</title>
      <description xml:lang="en">This check will verify the permissions of  the file - /usr/bin/traceroute</description>
      <reference>PCI DSS v3.2 Requirements 2.3</reference>
      <reference>https://www.pcisecuritystandards.org</reference>
      <platform idref="cpe:/o:centos:centos:7" />
      <platform idref="cpe:/o:oracle:linux:7" />
      <platform idref="cpe:/o:redhat:enterprise_linux:7" />
      <ident system="www.unifiedcompliance.com">UCF CC ID 08979</ident>
      <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
        <check-export value-id="ShouldTheUserHaveREADAccess_var41" export-name="oval:com.mcafee.oval:var:78640" />
        <check-export value-id="ShouldTheUserHaveWRITEAccess_var41" export-name="oval:com.mcafee.oval:var:78641" />
        <check-export value-id="ShouldTheUserHaveEXECUTEAccess_var41" export-name="oval:com.mcafee.oval:var:78642" />
        <check-export value-id="ShouldTheGroupHaveREADAccess_var41" export-name="oval:com.mcafee.oval:var:78643" />
        <check-export value-id="ShouldTheGroupHaveWRITEAccess_var41" export-name="oval:com.mcafee.oval:var:78644" />
        <check-export value-id="ShouldTheGroupHaveEXECUTEAccess_var41" export-name="oval:com.mcafee.oval:var:78645" />
        <check-export value-id="ShouldOthersHaveREADAccess_var41" export-name="oval:com.mcafee.oval:var:78646" />
        <check-export value-id="ShouldOthersHaveWRITEAccess_var41" export-name="oval:com.mcafee.oval:var:78647" />
        <check-export value-id="ShouldOthersHaveEXECUTEAccess_var41" export-name="oval:com.mcafee.oval:var:78648" />
        <check-content-ref href="" name="oval:com.mcafee.oval:def:2487396" />
      </check>
    </Rule>
    <Rule id="TestThePermissionsOfTheFile_Etc_httpd_conf_httpd.conf" xml:lang="en" selected="false">
      <title xml:lang="en">Test the permissions of the file - /etc/httpd/conf/httpd.conf</title>
      <description xml:lang="en">This check will verify the permissions set on the file - /etc/httpd/conf/httpd.conf</description>
      <reference>PCI DSS v3.2 Requirements 2.3</reference>
      <reference>https://www.pcisecuritystandards.org</reference>
      <platform idref="cpe:/o:centos:centos:7" />
      <platform idref="cpe:/o:oracle:linux:7" />
      <platform idref="cpe:/o:redhat:enterprise_linux:7" />
      <ident system="www.unifiedcompliance.com">UCF CC ID 09041</ident>
      <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
        <check-export value-id="ShouldTheUserHaveREADAccess_var42" export-name="oval:com.mcafee.oval:var:78640" />
        <check-export value-id="ShouldTheUserHaveWRITEAccess_var42" export-name="oval:com.mcafee.oval:var:78641" />
        <check-export value-id="ShouldTheUserHaveEXECUTEAccess_var42" export-name="oval:com.mcafee.oval:var:78642" />
        <check-export value-id="ShouldTheGroupHaveREADAccess_var42" export-name="oval:com.mcafee.oval:var:78643" />
        <check-export value-id="ShouldTheGroupHaveWRITEAccess_var42" export-name="oval:com.mcafee.oval:var:78644" />
        <check-export value-id="ShouldTheGroupHaveEXECUTEAccess_var42" export-name="oval:com.mcafee.oval:var:78645" />
        <check-export value-id="ShouldOthersHaveREADAccess_var42" export-name="oval:com.mcafee.oval:var:78646" />
        <check-export value-id="ShouldOthersHaveWRITEAccess_var42" export-name="oval:com.mcafee.oval:var:78647" />
        <check-export value-id="ShouldOthersHaveEXECUTEAccess_var42" export-name="oval:com.mcafee.oval:var:78648" />
        <check-content-ref href="" name="oval:com.mcafee.oval:def:2487405" />
      </check>
    </Rule>
    <Rule id="TestThePermissionsOfTheDirectory_Var_www_html" xml:lang="en" selected="false">
      <title xml:lang="en">Test the permissions of the directory - /var/www/html</title>
      <description xml:lang="en">This check will verify the permissions set on the /var/www/html directory</description>
      <reference>PCI DSS v3.2 Requirements 2.3</reference>
      <reference>https://www.pcisecuritystandards.org</reference>
      <platform idref="cpe:/o:centos:centos:7" />
      <platform idref="cpe:/o:oracle:linux:7" />
      <platform idref="cpe:/o:redhat:enterprise_linux:7" />
      <ident system="www.unifiedcompliance.com">UCF CC ID 09044</ident>
      <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
        <check-export value-id="ShouldTheUserHaveREADAccess_var43" export-name="oval:com.mcafee.oval:var:78640" />
        <check-export value-id="ShouldTheUserHaveWRITEAccess_var43" export-name="oval:com.mcafee.oval:var:78641" />
        <check-export value-id="ShouldTheUserHaveEXECUTEAccess_var43" export-name="oval:com.mcafee.oval:var:78642" />
        <check-export value-id="ShouldTheGroupHaveREADAccess_var43" export-name="oval:com.mcafee.oval:var:78643" />
        <check-export value-id="ShouldTheGroupHaveWRITEAccess_var43" export-name="oval:com.mcafee.oval:var:78644" />
        <check-export value-id="ShouldTheGroupHaveEXECUTEAccess_var43" export-name="oval:com.mcafee.oval:var:78645" />
        <check-export value-id="ShouldOthersHaveREADAccess_var43" export-name="oval:com.mcafee.oval:var:78646" />
        <check-export value-id="ShouldOthersHaveWRITEAccess_var43" export-name="oval:com.mcafee.oval:var:78647" />
        <check-export value-id="ShouldOthersHaveEXECUTEAccess_var43" export-name="oval:com.mcafee.oval:var:78648" />
        <check-content-ref href="" name="oval:com.mcafee.oval:def:2487421" />
      </check>
    </Rule>
    <Rule id="TestThePermissionsOfTheFile_Usr_bin_htpasswd" xml:lang="en" selected="false">
      <title xml:lang="en">Test the permissions of the file - /usr/bin/htpasswd</title>
      <description xml:lang="en">This check will verify the permissions of the file - /usr/bin/htpasswd</description>
      <reference>PCI DSS v3.2 Requirements 2.3</reference>
      <reference>https://www.pcisecuritystandards.org</reference>
      <platform idref="cpe:/o:centos:centos:7" />
      <platform idref="cpe:/o:oracle:linux:7" />
      <platform idref="cpe:/o:redhat:enterprise_linux:7" />
      <ident system="www.unifiedcompliance.com">UCF CC ID 09057</ident>
      <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
        <check-export value-id="ShouldTheUserHaveREADAccess_var44" export-name="oval:com.mcafee.oval:var:78640" />
        <check-export value-id="ShouldTheUserHaveWRITEAccess_var44" export-name="oval:com.mcafee.oval:var:78641" />
        <check-export value-id="ShouldTheUserHaveEXECUTEAccess_var44" export-name="oval:com.mcafee.oval:var:78642" />
        <check-export value-id="ShouldTheGroupHaveREADAccess_var44" export-name="oval:com.mcafee.oval:var:78643" />
        <check-export value-id="ShouldTheGroupHaveWRITEAccess_var44" export-name="oval:com.mcafee.oval:var:78644" />
        <check-export value-id="ShouldTheGroupHaveEXECUTEAccess_var44" export-name="oval:com.mcafee.oval:var:78645" />
        <check-export value-id="ShouldOthersHaveREADAccess_var44" export-name="oval:com.mcafee.oval:var:78646" />
        <check-export value-id="ShouldOthersHaveWRITEAccess_var44" export-name="oval:com.mcafee.oval:var:78647" />
        <check-export value-id="ShouldOthersHaveEXECUTEAccess_var44" export-name="oval:com.mcafee.oval:var:78648" />
        <check-content-ref href="" name="oval:com.mcafee.oval:def:2487412" />
      </check>
    </Rule>
    <Rule id="TestThePermissionsOfTheDirectory_Etc_httpd_conf.d" xml:lang="en" selected="false">
      <title xml:lang="en">Test the permissions of the directory - /etc/httpd/conf.d</title>
      <description xml:lang="en">This check will verify the permissions set on the /etc/httpd/conf.d directory</description>
      <reference>PCI DSS v3.2 Requirements 2.3</reference>
      <reference>https://www.pcisecuritystandards.org</reference>
      <platform idref="cpe:/o:centos:centos:7" />
      <platform idref="cpe:/o:oracle:linux:7" />
      <platform idref="cpe:/o:redhat:enterprise_linux:7" />
      <ident system="www.unifiedcompliance.com">UCF CC ID 09149</ident>
      <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
        <check-export value-id="ShouldTheUserHaveREADAccess_var45" export-name="oval:com.mcafee.oval:var:78640" />
        <check-export value-id="ShouldTheUserHaveWRITEAccess_var45" export-name="oval:com.mcafee.oval:var:78641" />
        <check-export value-id="ShouldTheUserHaveEXECUTEAccess_var45" export-name="oval:com.mcafee.oval:var:78642" />
        <check-export value-id="ShouldTheGroupHaveREADAccess_var45" export-name="oval:com.mcafee.oval:var:78643" />
        <check-export value-id="ShouldTheGroupHaveWRITEAccess_var45" export-name="oval:com.mcafee.oval:var:78644" />
        <check-export value-id="ShouldTheGroupHaveEXECUTEAccess_var45" export-name="oval:com.mcafee.oval:var:78645" />
        <check-export value-id="ShouldOthersHaveREADAccess_var45" export-name="oval:com.mcafee.oval:var:78646" />
        <check-export value-id="ShouldOthersHaveWRITEAccess_var45" export-name="oval:com.mcafee.oval:var:78647" />
        <check-export value-id="ShouldOthersHaveEXECUTEAccess_var45" export-name="oval:com.mcafee.oval:var:78648" />
        <check-content-ref href="" name="oval:com.mcafee.oval:def:2487429" />
      </check>
    </Rule>
    <Rule id="TestThePermissionsOfTheDirectory_Tmp" xml:lang="en" selected="false">
      <title xml:lang="en">Test the permissions of the directory - /tmp</title>
      <description xml:lang="en">This check will verify the permissions of the /tmp directory.</description>
      <reference>PCI DSS v3.2 Requirements 2.3</reference>
      <reference>https://www.pcisecuritystandards.org</reference>
      <platform idref="cpe:/o:centos:centos:7" />
      <platform idref="cpe:/o:oracle:linux:7" />
      <platform idref="cpe:/o:redhat:enterprise_linux:7" />
      <ident system="www.unifiedcompliance.com">UCF CC ID 05479</ident>
      <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
        <check-export value-id="ShouldTheUserHaveREADAccess_var61" export-name="oval:com.mcafee.oval:var:78640" />
        <check-export value-id="ShouldTheUserHaveWRITEAccess_var61" export-name="oval:com.mcafee.oval:var:78641" />
        <check-export value-id="ShouldTheUserHaveEXECUTEAccess_var61" export-name="oval:com.mcafee.oval:var:78642" />
        <check-export value-id="ShouldTheGroupHaveREADAccess_var61" export-name="oval:com.mcafee.oval:var:78643" />
        <check-export value-id="ShouldTheGroupHaveWRITEAccess_var61" export-name="oval:com.mcafee.oval:var:78644" />
        <check-export value-id="ShouldTheGroupHaveEXECUTEAccess_var61" export-name="oval:com.mcafee.oval:var:78645" />
        <check-export value-id="ShouldOthersHaveREADAccess_var61" export-name="oval:com.mcafee.oval:var:78646" />
        <check-export value-id="ShouldOthersHaveWRITEAccess_var61" export-name="oval:com.mcafee.oval:var:78647" />
        <check-export value-id="ShouldOthersHaveEXECUTEAccess_var61" export-name="oval:com.mcafee.oval:var:78648" />
        <check-content-ref href="" name="oval:com.mcafee.oval:def:78771" />
      </check>
    </Rule>
    <Rule id="TestThePermissionsSetOnTheFile_Etc_hosts" xml:lang="en" selected="false">
      <title xml:lang="en">Test the permissions set on the file - /etc/hosts</title>
      <description xml:lang="en">This rule will verify the permissions set on the file - /etc/hosts.</description>
      <reference>PCI DSS v3.2 Requirements 2.3</reference>
      <reference>https://www.pcisecuritystandards.org</reference>
      <platform idref="cpe:/o:centos:centos:7" />
      <platform idref="cpe:/o:oracle:linux:7" />
      <platform idref="cpe:/o:redhat:enterprise_linux:7" />
      <ident system="www.unifiedcompliance.com">UCF CC ID 05489</ident>
      <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
        <check-export value-id="ShouldTheUserHaveREADAccess_var65" export-name="oval:com.mcafee.oval:var:78640" />
        <check-export value-id="ShouldTheUserHaveWRITEAccess_var65" export-name="oval:com.mcafee.oval:var:78641" />
        <check-export value-id="ShouldTheUserHaveEXECUTEAccess_var65" export-name="oval:com.mcafee.oval:var:78642" />
        <check-export value-id="ShouldTheGroupHaveREADAccess_var65" export-name="oval:com.mcafee.oval:var:78643" />
        <check-export value-id="ShouldTheGroupHaveWRITEAccess_var65" export-name="oval:com.mcafee.oval:var:78644" />
        <check-export value-id="ShouldTheGroupHaveEXECUTEAccess_var65" export-name="oval:com.mcafee.oval:var:78645" />
        <check-export value-id="ShouldOthersHaveREADAccess_var65" export-name="oval:com.mcafee.oval:var:78646" />
        <check-export value-id="ShouldOthersHaveWRITEAccess_var65" export-name="oval:com.mcafee.oval:var:78647" />
        <check-export value-id="ShouldOthersHaveEXECUTEAccess_var65" export-name="oval:com.mcafee.oval:var:78648" />
        <check-content-ref href="" name="oval:com.mcafee.oval:def:1326827" />
      </check>
    </Rule>
    <Rule id="TestThePermissionsOfTheFile_Etc_issue" xml:lang="en" selected="false">
      <title xml:lang="en">Test the permissions of the file - /etc/issue</title>
      <description xml:lang="en">This rule ensures that the permissions of the file /etc/issue
        are set appropriately as per the user input.</description>
      <reference>PCI DSS v3.2 Requirements 2.3</reference>
      <reference>https://www.pcisecuritystandards.org</reference>
      <platform idref="cpe:/o:centos:centos:7" />
      <platform idref="cpe:/o:oracle:linux:7" />
      <platform idref="cpe:/o:redhat:enterprise_linux:7" />
      <ident system="www.unifiedcompliance.com">UCF CC ID 05491</ident>
      <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
        <check-export value-id="ShouldTheUserHaveREADAccess_var117" export-name="oval:com.mcafee.oval:var:78640" />
        <check-export value-id="ShouldTheUserHaveWRITEAccess_var117" export-name="oval:com.mcafee.oval:var:78641" />
        <check-export value-id="ShouldTheUserHaveEXECUTEAccess_var117" export-name="oval:com.mcafee.oval:var:78642" />
        <check-export value-id="ShouldTheGroupHaveREADAccess_var117" export-name="oval:com.mcafee.oval:var:78643" />
        <check-export value-id="ShouldTheGroupHaveWRITEAccess_var117" export-name="oval:com.mcafee.oval:var:78644" />
        <check-export value-id="ShouldTheGroupHaveEXECUTEAccess_var117" export-name="oval:com.mcafee.oval:var:78645" />
        <check-export value-id="ShouldOthersHaveREADAccess_var117" export-name="oval:com.mcafee.oval:var:78646" />
        <check-export value-id="ShouldOthersHaveWRITEAccess_var117" export-name="oval:com.mcafee.oval:var:78647" />
        <check-export value-id="ShouldOthersHaveEXECUTEAccess_var117" export-name="oval:com.mcafee.oval:var:78648" />
        <check-content-ref href="" name="oval:com.mcafee.oval:def:78712" />
      </check>
    </Rule>
    <Rule id="TestThePermissionsOfTheFile_Etc_motd" xml:lang="en" selected="false">
      <title xml:lang="en">Test the permissions of the file - /etc/motd</title>
      <description xml:lang="en">This rule ensures that the permissions of the file /etc/motd are
        set appropriately as per the user input.</description>
      <reference>PCI DSS v3.2 Requirements 2.3</reference>
      <reference>https://www.pcisecuritystandards.org</reference>
      <platform idref="cpe:/o:centos:centos:7" />
      <platform idref="cpe:/o:oracle:linux:7" />
      <platform idref="cpe:/o:redhat:enterprise_linux:7" />
      <ident system="www.unifiedcompliance.com">UCF CC ID 05495</ident>
      <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
        <check-export value-id="ShouldTheUserHaveREADAccess_var116" export-name="oval:com.mcafee.oval:var:78640" />
        <check-export value-id="ShouldTheUserHaveWRITEAccess_var116" export-name="oval:com.mcafee.oval:var:78641" />
        <check-export value-id="ShouldTheUserHaveEXECUTEAccess_var116" export-name="oval:com.mcafee.oval:var:78642" />
        <check-export value-id="ShouldTheGroupHaveREADAccess_var116" export-name="oval:com.mcafee.oval:var:78643" />
        <check-export value-id="ShouldTheGroupHaveWRITEAccess_var116" export-name="oval:com.mcafee.oval:var:78644" />
        <check-export value-id="ShouldTheGroupHaveEXECUTEAccess_var116" export-name="oval:com.mcafee.oval:var:78645" />
        <check-export value-id="ShouldOthersHaveREADAccess_var116" export-name="oval:com.mcafee.oval:var:78646" />
        <check-export value-id="ShouldOthersHaveWRITEAccess_var116" export-name="oval:com.mcafee.oval:var:78647" />
        <check-export value-id="ShouldOthersHaveEXECUTEAccess_var116" export-name="oval:com.mcafee.oval:var:78648" />
        <check-content-ref href="" name="oval:com.mcafee.oval:def:78716" />
      </check>
    </Rule>
    <Rule id="TestThePermissionsOfTheFile_Etc_passwd" xml:lang="en" selected="false">
      <title xml:lang="en">Test the permissions of the file - /etc/passwd</title>
      <description xml:lang="en">This rule will verify the permissions of the file- /etc/passwd.</description>
      <reference>PCI DSS v3.2 Requirements 2.3</reference>
      <reference>https://www.pcisecuritystandards.org</reference>
      <platform idref="cpe:/o:centos:centos:7" />
      <platform idref="cpe:/o:oracle:linux:7" />
      <platform idref="cpe:/o:redhat:enterprise_linux:7" />
      <ident system="www.unifiedcompliance.com">UCF CC ID 05498</ident>
      <ident system="www.unifiedcompliance.com">UCF CC ID 01537</ident>
      <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
        <check-export value-id="ShouldTheUserHaveREADAccess_var115" export-name="oval:com.mcafee.oval:var:78640" />
        <check-export value-id="ShouldTheUserHaveWRITEAccess_var115" export-name="oval:com.mcafee.oval:var:78641" />
        <check-export value-id="ShouldTheUserHaveEXECUTEAccess_var115" export-name="oval:com.mcafee.oval:var:78642" />
        <check-export value-id="ShouldTheGroupHaveREADAccess_var115" export-name="oval:com.mcafee.oval:var:78643" />
        <check-export value-id="ShouldTheGroupHaveWRITEAccess_var115" export-name="oval:com.mcafee.oval:var:78644" />
        <check-export value-id="ShouldTheGroupHaveEXECUTEAccess_var115" export-name="oval:com.mcafee.oval:var:78645" />
        <check-export value-id="ShouldOthersHaveREADAccess_var115" export-name="oval:com.mcafee.oval:var:78646" />
        <check-export value-id="ShouldOthersHaveWRITEAccess_var115" export-name="oval:com.mcafee.oval:var:78647" />
        <check-export value-id="ShouldOthersHaveEXECUTEAccess_var115" export-name="oval:com.mcafee.oval:var:78648" />
        <check-content-ref href="" name="oval:com.mcafee.oval:def:6922" />
      </check>
    </Rule>
    <Rule id="TestThePermissionsOfTheDirectory_Etc_security" xml:lang="en" selected="false">
      <title xml:lang="en">Test the permissions of the directory - /etc/security</title>
      <description xml:lang="en">This check will verify the permissions set on the directory /etc/security.</description>
      <reference>PCI DSS v3.2 Requirements 2.3</reference>
      <reference>https://www.pcisecuritystandards.org</reference>
      <platform idref="cpe:/o:centos:centos:7" />
      <platform idref="cpe:/o:oracle:linux:7" />
      <platform idref="cpe:/o:redhat:enterprise_linux:7" />
      <ident system="www.unifiedcompliance.com">UCF CC ID 05499</ident>
      <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
        <check-export value-id="ShouldTheUserHaveREADAccess_var77" export-name="oval:com.mcafee.oval:var:78640" />
        <check-export value-id="ShouldTheUserHaveWRITEAccess_var77" export-name="oval:com.mcafee.oval:var:78641" />
        <check-export value-id="ShouldTheUserHaveEXECUTEAccess_var77" export-name="oval:com.mcafee.oval:var:78642" />
        <check-export value-id="ShouldTheGroupHaveREADAccess_var77" export-name="oval:com.mcafee.oval:var:78643" />
        <check-export value-id="ShouldTheGroupHaveWRITEAccess_var77" export-name="oval:com.mcafee.oval:var:78644" />
        <check-export value-id="ShouldTheGroupHaveEXECUTEAccess_var77" export-name="oval:com.mcafee.oval:var:78645" />
        <check-export value-id="ShouldOthersHaveREADAccess_var77" export-name="oval:com.mcafee.oval:var:78646" />
        <check-export value-id="ShouldOthersHaveWRITEAccess_var77" export-name="oval:com.mcafee.oval:var:78647" />
        <check-export value-id="ShouldOthersHaveEXECUTEAccess_var77" export-name="oval:com.mcafee.oval:var:78648" />
        <check-content-ref href="" name="oval:com.mcafee.oval:def:224533" />
      </check>
    </Rule>
    <Rule id="TestThePermissionOfTheFile_Etc_cron.allow" xml:lang="en" selected="false">
      <title xml:lang="en">Test the Permission of the file /etc/cron.allow</title>
      <description xml:lang="en">Configure /etc/cron.allow and /etc/at.allow to allow specific users to use these services. If /etc/cron.allow or /etc/at.allow do not exist, then /etc/at.deny and /etc/cron.deny are checked. Any user not specifically defined in those files is allowed to use at and cron. By removing the files, only users in /etc/cron.allow and /etc/at.allow are allowed to use at and cron. Note that even though a given user is not listed in cron.allow, cron jobs can still be run as that user. The cron.allow file only controls administrative access to the crontab command for scheduling and modifying cron jobs. This check verifies if the permissions of the file - /etc/cron.allow are set as per the user input.</description>
      <reference>PCI DSS v3.2 Requirements 2.3</reference>
      <reference>https://www.pcisecuritystandards.org</reference>
      <platform idref="cpe:/o:centos:centos:7" />
      <platform idref="cpe:/o:oracle:linux:7" />
      <platform idref="cpe:/o:redhat:enterprise_linux:7" />
      <ident system="www.unifiedcompliance.com">UCF CC ID 05999</ident>
      <ident system="www.unifiedcompliance.com">UCF CC ID 01572</ident>
      <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
        <check-export value-id="ShouldTheUserHaveREADAccess_var114" export-name="oval:com.mcafee.oval:var:78640" />
        <check-export value-id="ShouldTheUserHaveWRITEAccess_var114" export-name="oval:com.mcafee.oval:var:78641" />
        <check-export value-id="ShouldTheUserHaveEXECUTEAccess_var114" export-name="oval:com.mcafee.oval:var:78642" />
        <check-export value-id="ShouldTheGroupHaveREADAccess_var114" export-name="oval:com.mcafee.oval:var:78643" />
        <check-export value-id="ShouldTheGroupHaveWRITEAccess_var114" export-name="oval:com.mcafee.oval:var:78644" />
        <check-export value-id="ShouldTheGroupHaveEXECUTEAccess_var114" export-name="oval:com.mcafee.oval:var:78645" />
        <check-export value-id="ShouldOthersHaveREADAccess_var114" export-name="oval:com.mcafee.oval:var:78646" />
        <check-export value-id="ShouldOthersHaveWRITEAccess_var114" export-name="oval:com.mcafee.oval:var:78647" />
        <check-export value-id="ShouldOthersHaveEXECUTEAccess_var114" export-name="oval:com.mcafee.oval:var:78648" />
        <check-content-ref href="" name="oval:com.mcafee.oval:def:78699" />
      </check>
    </Rule>
    <Rule id="SetPermissionsOn_Etc_cron.dailyDirectory" xml:lang="en" selected="false">
      <title xml:lang="en">Set Permissions on /etc/cron.daily directory</title>
      <description xml:lang="en">The /etc/cron.daily directory contains system cron jobs that need to run on a daily basis. The files in this directory cannot be manipulated by the crontab command, but are instead edited by system administrators using a text editor. The commands below restrict read/write and search access to user and group root, preventing regular users from accessing this directory. This check verifies if the permissions of directory - /etc/cron.daily are set as per the user input.</description>
      <reference>PCI DSS v3.2 Requirements 2.3</reference>
      <reference>https://www.pcisecuritystandards.org</reference>
      <platform idref="cpe:/o:centos:centos:7" />
      <platform idref="cpe:/o:oracle:linux:7" />
      <platform idref="cpe:/o:redhat:enterprise_linux:7" />
      <ident system="www.unifiedcompliance.com">UCF CC ID 06008</ident>
      <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
        <check-export value-id="ShouldTheUserHaveREADAccess_var119" export-name="oval:com.mcafee.oval:var:78640" />
        <check-export value-id="ShouldTheUserHaveWRITEAccess_var119" export-name="oval:com.mcafee.oval:var:78641" />
        <check-export value-id="ShouldTheUserHaveEXECUTEAccess_var119" export-name="oval:com.mcafee.oval:var:78642" />
        <check-export value-id="ShouldTheGroupHaveREADAccess_var119" export-name="oval:com.mcafee.oval:var:78643" />
        <check-export value-id="ShouldTheGroupHaveWRITEAccess_var119" export-name="oval:com.mcafee.oval:var:78644" />
        <check-export value-id="ShouldTheGroupHaveEXECUTEAccess_var119" export-name="oval:com.mcafee.oval:var:78645" />
        <check-export value-id="ShouldOthersHaveREADAccess_var119" export-name="oval:com.mcafee.oval:var:78646" />
        <check-export value-id="ShouldOthersHaveWRITEAccess_var119" export-name="oval:com.mcafee.oval:var:78647" />
        <check-export value-id="ShouldOthersHaveEXECUTEAccess_var119" export-name="oval:com.mcafee.oval:var:78648" />
        <check-content-ref href="" name="oval:com.mcafee.oval:def:6878" />
      </check>
    </Rule>
    <Rule id="SetPermissionsOn_Etc_cron.weeklyDirectory" xml:lang="en" selected="false">
      <title xml:lang="en">Set Permissions on /etc/cron.weekly directory</title>
      <description xml:lang="en">The /etc/cron.weekly directory contains system cron jobs that need to run on a weekly basis. The files in this directory cannot be manipulated by the crontab command, but are instead edited by system administrators using a text editor. The commands below restrict read/write and search access to user and group root, preventing regular users from accessing this directory. This check verifies if the permissions of the directory - /etc/cron.weekly are set as per the user input.</description>
      <reference>PCI DSS v3.2 Requirements 2.3</reference>
      <reference>https://www.pcisecuritystandards.org</reference>
      <platform idref="cpe:/o:centos:centos:7" />
      <platform idref="cpe:/o:oracle:linux:7" />
      <platform idref="cpe:/o:redhat:enterprise_linux:7" />
      <ident system="www.unifiedcompliance.com">UCF CC ID 06009</ident>
      <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
        <check-export value-id="ShouldTheUserHaveREADAccess_var120" export-name="oval:com.mcafee.oval:var:78640" />
        <check-export value-id="ShouldTheUserHaveWRITEAccess_var120" export-name="oval:com.mcafee.oval:var:78641" />
        <check-export value-id="ShouldTheUserHaveEXECUTEAccess_var120" export-name="oval:com.mcafee.oval:var:78642" />
        <check-export value-id="ShouldTheGroupHaveREADAccess_var120" export-name="oval:com.mcafee.oval:var:78643" />
        <check-export value-id="ShouldTheGroupHaveWRITEAccess_var120" export-name="oval:com.mcafee.oval:var:78644" />
        <check-export value-id="ShouldTheGroupHaveEXECUTEAccess_var120" export-name="oval:com.mcafee.oval:var:78645" />
        <check-export value-id="ShouldOthersHaveREADAccess_var120" export-name="oval:com.mcafee.oval:var:78646" />
        <check-export value-id="ShouldOthersHaveWRITEAccess_var120" export-name="oval:com.mcafee.oval:var:78647" />
        <check-export value-id="ShouldOthersHaveEXECUTEAccess_var120" export-name="oval:com.mcafee.oval:var:78648" />
        <check-content-ref href="" name="oval:com.mcafee.oval:def:6890" />
      </check>
    </Rule>
    <Rule id="SetPermissionsOn_Etc_cron.monthlyDirectory" xml:lang="en" selected="false">
      <title xml:lang="en">Set Permissions on /etc/cron.monthly directory</title>
      <description xml:lang="en">The /etc/cron.monthly directory contains system cron jobs that need to run on a monthly basis. The files in this directory cannot be manipulated by the crontab command, but are instead edited by system administrators using a text editor. The commands below restrict read/write and search access to user and group root, preventing regular users from accessing this directory. This check verifies if the permissions of the directory - /etc/cron.monthly are set as per the user input.</description>
      <reference>PCI DSS v3.2 Requirements 2.3</reference>
      <reference>https://www.pcisecuritystandards.org</reference>
      <platform idref="cpe:/o:centos:centos:7" />
      <platform idref="cpe:/o:oracle:linux:7" />
      <platform idref="cpe:/o:redhat:enterprise_linux:7" />
      <ident system="www.unifiedcompliance.com">UCF CC ID 06013</ident>
      <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
        <check-export value-id="ShouldTheUserHaveREADAccess_var121" export-name="oval:com.mcafee.oval:var:78640" />
        <check-export value-id="ShouldTheUserHaveWRITEAccess_var121" export-name="oval:com.mcafee.oval:var:78641" />
        <check-export value-id="ShouldTheUserHaveEXECUTEAccess_var121" export-name="oval:com.mcafee.oval:var:78642" />
        <check-export value-id="ShouldTheGroupHaveREADAccess_var121" export-name="oval:com.mcafee.oval:var:78643" />
        <check-export value-id="ShouldTheGroupHaveWRITEAccess_var121" export-name="oval:com.mcafee.oval:var:78644" />
        <check-export value-id="ShouldTheGroupHaveEXECUTEAccess_var121" export-name="oval:com.mcafee.oval:var:78645" />
        <check-export value-id="ShouldOthersHaveREADAccess_var121" export-name="oval:com.mcafee.oval:var:78646" />
        <check-export value-id="ShouldOthersHaveWRITEAccess_var121" export-name="oval:com.mcafee.oval:var:78647" />
        <check-export value-id="ShouldOthersHaveEXECUTEAccess_var121" export-name="oval:com.mcafee.oval:var:78648" />
        <check-content-ref href="" name="oval:com.mcafee.oval:def:6886" />
      </check>
    </Rule>
    <Rule id="SetPermissionsOn_Etc_cron.hourlyDirectory" xml:lang="en" selected="false">
      <title xml:lang="en">Set Permissions on /etc/cron.hourly directory</title>
      <description xml:lang="en">This directory contains system cron jobs that need to run on an hourly basis. The files in this directory cannot be manipulated by the crontab command, but are instead edited by system administrators using a text editor. The commands below restrict read/write and search access to user and group root, preventing regular users from accessing this directory. This check verifies if the permissions of the directory -/etc/cron.hourly are set as per the user input.</description>
      <reference>PCI DSS v3.2 Requirements 2.3</reference>
      <reference>https://www.pcisecuritystandards.org</reference>
      <platform idref="cpe:/o:centos:centos:7" />
      <platform idref="cpe:/o:oracle:linux:7" />
      <platform idref="cpe:/o:redhat:enterprise_linux:7" />
      <ident system="www.unifiedcompliance.com">UCF CC ID 06010</ident>
      <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
        <check-export value-id="ShouldTheUserHaveREADAccess_var122" export-name="oval:com.mcafee.oval:var:78640" />
        <check-export value-id="ShouldTheUserHaveWRITEAccess_var122" export-name="oval:com.mcafee.oval:var:78641" />
        <check-export value-id="ShouldTheUserHaveEXECUTEAccess_var122" export-name="oval:com.mcafee.oval:var:78642" />
        <check-export value-id="ShouldTheGroupHaveREADAccess_var122" export-name="oval:com.mcafee.oval:var:78643" />
        <check-export value-id="ShouldTheGroupHaveWRITEAccess_var122" export-name="oval:com.mcafee.oval:var:78644" />
        <check-export value-id="ShouldTheGroupHaveEXECUTEAccess_var122" export-name="oval:com.mcafee.oval:var:78645" />
        <check-export value-id="ShouldOthersHaveREADAccess_var122" export-name="oval:com.mcafee.oval:var:78646" />
        <check-export value-id="ShouldOthersHaveWRITEAccess_var122" export-name="oval:com.mcafee.oval:var:78647" />
        <check-export value-id="ShouldOthersHaveEXECUTEAccess_var122" export-name="oval:com.mcafee.oval:var:78648" />
        <check-content-ref href="" name="oval:com.mcafee.oval:def:6882" />
      </check>
    </Rule>
    <Rule id="CheckPermissionsOnUserHomeDirectories" xml:lang="en" selected="false">
      <title xml:lang="en">Check Permissions on User Home Directories</title>
      <description xml:lang="en">While the system administrator can establish secure permissions for users' home directories, the users can easily override these. This checks verifies the file permissions of all the user home directories of all the accounts other than root, sync, shutdown and halt and also home directories of the accounts whose login shell is not equal to /sbin/nologin.</description>
      <reference>PCI DSS v3.2 Requirements 2.3</reference>
      <reference>https://www.pcisecuritystandards.org</reference>
      <platform idref="cpe:/o:centos:centos:7" />
      <platform idref="cpe:/o:oracle:linux:7" />
      <platform idref="cpe:/o:redhat:enterprise_linux:7" />
      <ident system="www.unifiedcompliance.com">UCF CC ID 06019</ident>
      <ident system="www.unifiedcompliance.com">UCF CC ID 01588</ident>
      <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
        <check-export value-id="ShouldTheUserHaveREADAccess_var123" export-name="oval:com.mcafee.oval:var:78640" />
        <check-export value-id="ShouldTheUserHaveWRITEAccess_var123" export-name="oval:com.mcafee.oval:var:78641" />
        <check-export value-id="ShouldTheUserHaveEXECUTEAccess_var123" export-name="oval:com.mcafee.oval:var:78642" />
        <check-export value-id="ShouldTheGroupHaveREADAccess_var123" export-name="oval:com.mcafee.oval:var:78643" />
        <check-export value-id="ShouldTheGroupHaveWRITEAccess_var123" export-name="oval:com.mcafee.oval:var:78644" />
        <check-export value-id="ShouldTheGroupHaveEXECUTEAccess_var123" export-name="oval:com.mcafee.oval:var:78645" />
        <check-export value-id="ShouldOthersHaveREADAccess_var123" export-name="oval:com.mcafee.oval:var:78646" />
        <check-export value-id="ShouldOthersHaveWRITEAccess_var123" export-name="oval:com.mcafee.oval:var:78647" />
        <check-export value-id="ShouldOthersHaveEXECUTEAccess_var123" export-name="oval:com.mcafee.oval:var:78648" />
        <check-content-ref href="" name="oval:com.mcafee.oval:def:405194" />
      </check>
    </Rule>
    <Rule id="TestThePermissionsOnUser.netrcFiles" xml:lang="en" selected="false">
      <title xml:lang="en">Test the permissions on user .netrc files</title>
      <description xml:lang="en">This rule verifies the file permissions of the .netrc files in the home directories of all the accounts other than root, sync, shutdown and halt and home directories of the accounts whose login shell is not equal to /sbin/nologin.</description>
      <reference>PCI DSS v3.2 Requirements 2.3</reference>
      <reference>https://www.pcisecuritystandards.org</reference>
      <platform idref="cpe:/o:centos:centos:7" />
      <platform idref="cpe:/o:oracle:linux:7" />
      <platform idref="cpe:/o:redhat:enterprise_linux:7" />
      <ident system="www.unifiedcompliance.com">UCF CC ID 06022</ident>
      <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
        <check-export value-id="ShouldTheUserHaveREADAccess_var229" export-name="oval:com.mcafee.oval:var:78640" />
        <check-export value-id="ShouldTheUserHaveWRITEAccess_var229" export-name="oval:com.mcafee.oval:var:78641" />
        <check-export value-id="ShouldTheUserHaveEXECUTEAccess_var229" export-name="oval:com.mcafee.oval:var:78642" />
        <check-export value-id="ShouldTheGroupHaveREADAccess_var229" export-name="oval:com.mcafee.oval:var:78643" />
        <check-export value-id="ShouldTheGroupHaveWRITEAccess_var229" export-name="oval:com.mcafee.oval:var:78644" />
        <check-export value-id="ShouldTheGroupHaveEXECUTEAccess_var229" export-name="oval:com.mcafee.oval:var:78645" />
        <check-export value-id="ShouldOthersHaveREADAccess_var229" export-name="oval:com.mcafee.oval:var:78646" />
        <check-export value-id="ShouldOthersHaveWRITEAccess_var229" export-name="oval:com.mcafee.oval:var:78647" />
        <check-export value-id="ShouldOthersHaveEXECUTEAccess_var229" export-name="oval:com.mcafee.oval:var:78648" />
        <check-content-ref href="" name="oval:com.mcafee.oval:def:246594" />
      </check>
    </Rule>
    <Rule id="TestThePermissionsOfTheDirectory_Var_tmp" xml:lang="en" selected="false">
      <title xml:lang="en">Test the permissions of the directory - /var/tmp</title>
      <description xml:lang="en">This check will verify the permissions set on the /var/tmp directory</description>
      <reference>PCI DSS v3.2 Requirements 2.3</reference>
      <reference>https://www.pcisecuritystandards.org</reference>
      <platform idref="cpe:/o:centos:centos:7" />
      <platform idref="cpe:/o:oracle:linux:7" />
      <platform idref="cpe:/o:redhat:enterprise_linux:7" />
      <ident system="www.unifiedcompliance.com">UCF CC ID 05480</ident>
      <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
        <check-export value-id="ShouldTheUserHaveREADAccess_var46" export-name="oval:com.mcafee.oval:var:78640" />
        <check-export value-id="ShouldTheUserHaveWRITEAccess_var46" export-name="oval:com.mcafee.oval:var:78641" />
        <check-export value-id="ShouldTheUserHaveEXECUTEAccess_var46" export-name="oval:com.mcafee.oval:var:78642" />
        <check-export value-id="ShouldTheGroupHaveREADAccess_var46" export-name="oval:com.mcafee.oval:var:78643" />
        <check-export value-id="ShouldTheGroupHaveWRITEAccess_var46" export-name="oval:com.mcafee.oval:var:78644" />
        <check-export value-id="ShouldTheGroupHaveEXECUTEAccess_var46" export-name="oval:com.mcafee.oval:var:78645" />
        <check-export value-id="ShouldOthersHaveREADAccess_var46" export-name="oval:com.mcafee.oval:var:78646" />
        <check-export value-id="ShouldOthersHaveWRITEAccess_var46" export-name="oval:com.mcafee.oval:var:78647" />
        <check-export value-id="ShouldOthersHaveEXECUTEAccess_var46" export-name="oval:com.mcafee.oval:var:78648" />
        <check-content-ref href="" name="oval:com.mcafee.oval:def:2487459" />
      </check>
    </Rule>
    <Rule id="TestThePermissionsOfTheFile_Etc_netconfig" xml:lang="en" selected="false">
      <title xml:lang="en">Test the permissions of the file - /etc/netconfig</title>
      <description xml:lang="en">This check will verify the permissions set on the file - /etc/netconfig</description>
      <reference>PCI DSS v3.2 Requirements 2.3</reference>
      <reference>https://www.pcisecuritystandards.org</reference>
      <platform idref="cpe:/o:centos:centos:7" />
      <platform idref="cpe:/o:oracle:linux:7" />
      <platform idref="cpe:/o:redhat:enterprise_linux:7" />
      <ident system="www.unifiedcompliance.com">UCF CC ID 05496</ident>
      <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
        <check-export value-id="ShouldTheUserHaveREADAccess_var47" export-name="oval:com.mcafee.oval:var:78640" />
        <check-export value-id="ShouldTheUserHaveWRITEAccess_var47" export-name="oval:com.mcafee.oval:var:78641" />
        <check-export value-id="ShouldTheUserHaveEXECUTEAccess_var47" export-name="oval:com.mcafee.oval:var:78642" />
        <check-export value-id="ShouldTheGroupHaveREADAccess_var47" export-name="oval:com.mcafee.oval:var:78643" />
        <check-export value-id="ShouldTheGroupHaveWRITEAccess_var47" export-name="oval:com.mcafee.oval:var:78644" />
        <check-export value-id="ShouldTheGroupHaveEXECUTEAccess_var47" export-name="oval:com.mcafee.oval:var:78645" />
        <check-export value-id="ShouldOthersHaveREADAccess_var47" export-name="oval:com.mcafee.oval:var:78646" />
        <check-export value-id="ShouldOthersHaveWRITEAccess_var47" export-name="oval:com.mcafee.oval:var:78647" />
        <check-export value-id="ShouldOthersHaveEXECUTEAccess_var47" export-name="oval:com.mcafee.oval:var:78648" />
        <check-content-ref href="" name="oval:com.mcafee.oval:def:2487463" />
      </check>
    </Rule>
    <Rule id="TestThePermissionsOfTheFile_Etc_rsyslog.conf" xml:lang="en" selected="false">
      <title xml:lang="en">Test the permissions of the file - /etc/rsyslog.conf</title>
      <description xml:lang="en">This check will verify the permissions set on the file - /etc/rsyslog.conf</description>
      <reference>PCI DSS v3.2 Requirements 2.3</reference>
      <reference>https://www.pcisecuritystandards.org</reference>
      <platform idref="cpe:/o:centos:centos:7" />
      <platform idref="cpe:/o:oracle:linux:7" />
      <platform idref="cpe:/o:redhat:enterprise_linux:7" />
      <ident system="www.unifiedcompliance.com">UCF CC ID 05503</ident>
      <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
        <check-export value-id="ShouldTheUserHaveREADAccess_var48" export-name="oval:com.mcafee.oval:var:78640" />
        <check-export value-id="ShouldTheUserHaveWRITEAccess_var48" export-name="oval:com.mcafee.oval:var:78641" />
        <check-export value-id="ShouldTheUserHaveEXECUTEAccess_var48" export-name="oval:com.mcafee.oval:var:78642" />
        <check-export value-id="ShouldTheGroupHaveREADAccess_var48" export-name="oval:com.mcafee.oval:var:78643" />
        <check-export value-id="ShouldTheGroupHaveWRITEAccess_var48" export-name="oval:com.mcafee.oval:var:78644" />
        <check-export value-id="ShouldTheGroupHaveEXECUTEAccess_var48" export-name="oval:com.mcafee.oval:var:78645" />
        <check-export value-id="ShouldOthersHaveREADAccess_var48" export-name="oval:com.mcafee.oval:var:78646" />
        <check-export value-id="ShouldOthersHaveWRITEAccess_var48" export-name="oval:com.mcafee.oval:var:78647" />
        <check-export value-id="ShouldOthersHaveEXECUTEAccess_var48" export-name="oval:com.mcafee.oval:var:78648" />
        <check-content-ref href="" name="oval:com.mcafee.oval:def:2487467" />
      </check>
    </Rule>
    <Rule id="TestThePermissionsOfTheFile_Etc_fstab" xml:lang="en" selected="false">
      <title xml:lang="en">Test the permissions of the file - /etc/fstab</title>
      <description xml:lang="en">This check will verify the permissions of - /etc/fstab</description>
      <reference>PCI DSS v3.2 Requirements 2.3</reference>
      <reference>https://www.pcisecuritystandards.org</reference>
      <platform idref="cpe:/o:centos:centos:7" />
      <platform idref="cpe:/o:oracle:linux:7" />
      <platform idref="cpe:/o:redhat:enterprise_linux:7" />
      <ident system="www.unifiedcompliance.com">UCF CC ID 05504</ident>
      <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
        <check-export value-id="ShouldTheUserHaveREADAccess_var49" export-name="oval:com.mcafee.oval:var:78640" />
        <check-export value-id="ShouldTheUserHaveWRITEAccess_var49" export-name="oval:com.mcafee.oval:var:78641" />
        <check-export value-id="ShouldTheUserHaveEXECUTEAccess_var49" export-name="oval:com.mcafee.oval:var:78642" />
        <check-export value-id="ShouldTheGroupHaveREADAccess_var49" export-name="oval:com.mcafee.oval:var:78643" />
        <check-export value-id="ShouldTheGroupHaveWRITEAccess_var49" export-name="oval:com.mcafee.oval:var:78644" />
        <check-export value-id="ShouldTheGroupHaveEXECUTEAccess_var49" export-name="oval:com.mcafee.oval:var:78645" />
        <check-export value-id="ShouldOthersHaveREADAccess_var49" export-name="oval:com.mcafee.oval:var:78646" />
        <check-export value-id="ShouldOthersHaveWRITEAccess_var49" export-name="oval:com.mcafee.oval:var:78647" />
        <check-export value-id="ShouldOthersHaveEXECUTEAccess_var49" export-name="oval:com.mcafee.oval:var:78648" />
        <check-content-ref href="" name="oval:com.mcafee.oval:def:8837" />
      </check>
    </Rule>
    <Rule id="TestThePermissionsOfTheFile_Var_run_utmp" xml:lang="en" selected="false">
      <title xml:lang="en">Test the permissions of the file - /var/run/utmp</title>
      <description xml:lang="en">This check will verify the permissions of the file - /var/run/utmp</description>
      <reference>PCI DSS v3.2 Requirements 2.3</reference>
      <reference>https://www.pcisecuritystandards.org</reference>
      <platform idref="cpe:/o:centos:centos:7" />
      <platform idref="cpe:/o:oracle:linux:7" />
      <platform idref="cpe:/o:redhat:enterprise_linux:7" />
      <ident system="www.unifiedcompliance.com">UCF CC ID 05507</ident>
      <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
        <check-export value-id="ShouldTheUserHaveREADAccess_var50" export-name="oval:com.mcafee.oval:var:78640" />
        <check-export value-id="ShouldTheUserHaveWRITEAccess_var50" export-name="oval:com.mcafee.oval:var:78641" />
        <check-export value-id="ShouldTheUserHaveEXECUTEAccess_var50" export-name="oval:com.mcafee.oval:var:78642" />
        <check-export value-id="ShouldTheGroupHaveREADAccess_var50" export-name="oval:com.mcafee.oval:var:78643" />
        <check-export value-id="ShouldTheGroupHaveWRITEAccess_var50" export-name="oval:com.mcafee.oval:var:78644" />
        <check-export value-id="ShouldTheGroupHaveEXECUTEAccess_var50" export-name="oval:com.mcafee.oval:var:78645" />
        <check-export value-id="ShouldOthersHaveREADAccess_var50" export-name="oval:com.mcafee.oval:var:78646" />
        <check-export value-id="ShouldOthersHaveWRITEAccess_var50" export-name="oval:com.mcafee.oval:var:78647" />
        <check-export value-id="ShouldOthersHaveEXECUTEAccess_var50" export-name="oval:com.mcafee.oval:var:78648" />
        <check-content-ref href="" name="oval:com.mcafee.oval:def:92742" />
      </check>
    </Rule>
    <Rule id="TestThePermissionsOfTheFile_Var_log_wtmp" xml:lang="en" selected="false">
      <title xml:lang="en">Test the permissions of the file - /var/log/wtmp</title>
      <description xml:lang="en">This check will verify the permissions of the file - /var/log/wtmp</description>
      <reference>PCI DSS v3.2 Requirements 2.3</reference>
      <reference>https://www.pcisecuritystandards.org</reference>
      <platform idref="cpe:/o:centos:centos:7" />
      <platform idref="cpe:/o:oracle:linux:7" />
      <platform idref="cpe:/o:redhat:enterprise_linux:7" />
      <ident system="www.unifiedcompliance.com">UCF CC ID 05508</ident>
      <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
        <check-export value-id="ShouldTheUserHaveREADAccess_var51" export-name="oval:com.mcafee.oval:var:78640" />
        <check-export value-id="ShouldTheUserHaveWRITEAccess_var51" export-name="oval:com.mcafee.oval:var:78641" />
        <check-export value-id="ShouldTheUserHaveEXECUTEAccess_var51" export-name="oval:com.mcafee.oval:var:78642" />
        <check-export value-id="ShouldTheGroupHaveREADAccess_var51" export-name="oval:com.mcafee.oval:var:78643" />
        <check-export value-id="ShouldTheGroupHaveWRITEAccess_var51" export-name="oval:com.mcafee.oval:var:78644" />
        <check-export value-id="ShouldTheGroupHaveEXECUTEAccess_var51" export-name="oval:com.mcafee.oval:var:78645" />
        <check-export value-id="ShouldOthersHaveREADAccess_var51" export-name="oval:com.mcafee.oval:var:78646" />
        <check-export value-id="ShouldOthersHaveWRITEAccess_var51" export-name="oval:com.mcafee.oval:var:78647" />
        <check-export value-id="ShouldOthersHaveEXECUTEAccess_var51" export-name="oval:com.mcafee.oval:var:78648" />
        <check-content-ref href="" name="oval:com.mcafee.oval:def:92745" />
      </check>
    </Rule>
    <Rule id="TestThePermissionsOfTheFiles_Var_tmp_" xml:lang="en" selected="false">
      <title xml:lang="en">Test the permissions of the files - /var/tmp/*</title>
      <description xml:lang="en">This check will verify the permissions of the files - /var/tmp/*</description>
      <reference>PCI DSS v3.2 Requirements 2.3</reference>
      <reference>https://www.pcisecuritystandards.org</reference>
      <platform idref="cpe:/o:centos:centos:7" />
      <platform idref="cpe:/o:oracle:linux:7" />
      <platform idref="cpe:/o:redhat:enterprise_linux:7" />
      <ident system="www.unifiedcompliance.com">UCF CC ID 05512</ident>
      <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
        <check-export value-id="ShouldTheUserHaveREADAccess_var" export-name="oval:com.mcafee.oval:var:78640" />
        <check-export value-id="ShouldTheUserHaveWRITEAccess_var" export-name="oval:com.mcafee.oval:var:78641" />
        <check-export value-id="ShouldTheUserHaveEXECUTEAccess_var" export-name="oval:com.mcafee.oval:var:78642" />
        <check-export value-id="ShouldTheGroupHaveREADAccess_var" export-name="oval:com.mcafee.oval:var:78643" />
        <check-export value-id="ShouldTheGroupHaveWRITEAccess_var" export-name="oval:com.mcafee.oval:var:78644" />
        <check-export value-id="ShouldTheGroupHaveEXECUTEAccess_var" export-name="oval:com.mcafee.oval:var:78645" />
        <check-export value-id="ShouldOthersHaveREADAccess_var" export-name="oval:com.mcafee.oval:var:78646" />
        <check-export value-id="ShouldOthersHaveWRITEAccess_var" export-name="oval:com.mcafee.oval:var:78647" />
        <check-export value-id="ShouldOthersHaveEXECUTEAccess_var" export-name="oval:com.mcafee.oval:var:78648" />
        <check-content-ref href="" name="oval:com.mcafee.oval:def:2487473" />
      </check>
    </Rule>
    <Rule id="TestThePermissionsOfTheFiles_Var_spool_mail_" xml:lang="en" selected="false">
      <title xml:lang="en">Test the permissions of the files - /var/spool/mail/*</title>
      <description xml:lang="en">This check will verify the permissions of the files - /var/spool/mail/*</description>
      <reference>PCI DSS v3.2 Requirements 2.3</reference>
      <reference>https://www.pcisecuritystandards.org</reference>
      <platform idref="cpe:/o:centos:centos:7" />
      <platform idref="cpe:/o:oracle:linux:7" />
      <platform idref="cpe:/o:redhat:enterprise_linux:7" />
      <ident system="www.unifiedcompliance.com">UCF CC ID 05511</ident>
      <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
        <check-export value-id="ShouldTheUserHaveREADAccess_var53" export-name="oval:com.mcafee.oval:var:78640" />
        <check-export value-id="ShouldTheUserHaveWRITEAccess_var53" export-name="oval:com.mcafee.oval:var:78641" />
        <check-export value-id="ShouldTheUserHaveEXECUTEAccess_var53" export-name="oval:com.mcafee.oval:var:78642" />
        <check-export value-id="ShouldTheGroupHaveREADAccess_var53" export-name="oval:com.mcafee.oval:var:78643" />
        <check-export value-id="ShouldTheGroupHaveWRITEAccess_var53" export-name="oval:com.mcafee.oval:var:78644" />
        <check-export value-id="ShouldTheGroupHaveEXECUTEAccess_var53" export-name="oval:com.mcafee.oval:var:78645" />
        <check-export value-id="ShouldOthersHaveREADAccess_var53" export-name="oval:com.mcafee.oval:var:78646" />
        <check-export value-id="ShouldOthersHaveWRITEAccess_var53" export-name="oval:com.mcafee.oval:var:78647" />
        <check-export value-id="ShouldOthersHaveEXECUTEAccess_var53" export-name="oval:com.mcafee.oval:var:78648" />
        <check-content-ref href="" name="oval:com.mcafee.oval:def:2487469" />
      </check>
    </Rule>
    <Rule id="TestThePermissionsOfTheFile_Sbin_sendmail.sendmail" xml:lang="en" selected="false">
      <title xml:lang="en">Test the permissions of the file - /sbin/sendmail.sendmail</title>
      <description xml:lang="en">This check will verify the permissions set on the file - /sbin/sendmail.sendmail</description>
      <reference>PCI DSS v3.2 Requirements 2.3</reference>
      <reference>https://www.pcisecuritystandards.org</reference>
      <platform idref="cpe:/o:centos:centos:7" />
      <platform idref="cpe:/o:oracle:linux:7" />
      <platform idref="cpe:/o:redhat:enterprise_linux:7" />
      <ident system="www.unifiedcompliance.com">UCF CC ID 05518</ident>
      <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
        <check-export value-id="ShouldTheUserHaveREADAccess_var54" export-name="oval:com.mcafee.oval:var:78640" />
        <check-export value-id="ShouldTheUserHaveWRITEAccess_var54" export-name="oval:com.mcafee.oval:var:78641" />
        <check-export value-id="ShouldTheUserHaveEXECUTEAccess_var54" export-name="oval:com.mcafee.oval:var:78642" />
        <check-export value-id="ShouldTheGroupHaveREADAccess_var54" export-name="oval:com.mcafee.oval:var:78643" />
        <check-export value-id="ShouldTheGroupHaveWRITEAccess_var54" export-name="oval:com.mcafee.oval:var:78644" />
        <check-export value-id="ShouldTheGroupHaveEXECUTEAccess_var54" export-name="oval:com.mcafee.oval:var:78645" />
        <check-export value-id="ShouldOthersHaveREADAccess_var54" export-name="oval:com.mcafee.oval:var:78646" />
        <check-export value-id="ShouldOthersHaveWRITEAccess_var54" export-name="oval:com.mcafee.oval:var:78647" />
        <check-export value-id="ShouldOthersHaveEXECUTEAccess_var54" export-name="oval:com.mcafee.oval:var:78648" />
        <check-content-ref href="" name="oval:com.mcafee.oval:def:2487477" />
      </check>
    </Rule>
    <Rule id="TestThePermissionsOfAllFilesPresentInTheDirectory_Etc_pam.d_Files" xml:lang="en" selected="false">
      <title xml:lang="en">Test the permissions of all files present in the directory - /etc/pam.d/* files</title>
      <description xml:lang="en">This check will verify the permissions of all files present in the directory -/etc/pam.d/* files</description>
      <reference>PCI DSS v3.2 Requirements 2.3</reference>
      <reference>https://www.pcisecuritystandards.org</reference>
      <platform idref="cpe:/o:centos:centos:7" />
      <platform idref="cpe:/o:oracle:linux:7" />
      <platform idref="cpe:/o:redhat:enterprise_linux:7" />
      <ident system="www.unifiedcompliance.com">UCF CC ID 05527</ident>
      <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
        <check-export value-id="ShouldTheUserHaveREADAccess_var59" export-name="oval:com.mcafee.oval:var:78640" />
        <check-export value-id="ShouldTheUserHaveWRITEAccess_var59" export-name="oval:com.mcafee.oval:var:78641" />
        <check-export value-id="ShouldTheUserHaveEXECUTEAccess_var59" export-name="oval:com.mcafee.oval:var:78642" />
        <check-export value-id="ShouldTheGroupHaveREADAccess_var59" export-name="oval:com.mcafee.oval:var:78643" />
        <check-export value-id="ShouldTheGroupHaveWRITEAccess_var59" export-name="oval:com.mcafee.oval:var:78644" />
        <check-export value-id="ShouldTheGroupHaveEXECUTEAccess_var59" export-name="oval:com.mcafee.oval:var:78645" />
        <check-export value-id="ShouldOthersHaveREADAccess_var59" export-name="oval:com.mcafee.oval:var:78646" />
        <check-export value-id="ShouldOthersHaveWRITEAccess_var59" export-name="oval:com.mcafee.oval:var:78647" />
        <check-export value-id="ShouldOthersHaveEXECUTEAccess_var59" export-name="oval:com.mcafee.oval:var:78648" />
        <check-content-ref href="" name="oval:com.mcafee.oval:def:92673" />
      </check>
    </Rule>
    <Rule id="TestThePermissionsOfTheFile_Usr_bin_at" xml:lang="en" selected="false">
      <title xml:lang="en">Test the permissions of the file - /usr/bin/at</title>
      <description xml:lang="en">This check will verify the permissions set on the file - /usr/bin/at</description>
      <reference>PCI DSS v3.2 Requirements 2.3</reference>
      <reference>https://www.pcisecuritystandards.org</reference>
      <platform idref="cpe:/o:centos:centos:7" />
      <platform idref="cpe:/o:oracle:linux:7" />
      <platform idref="cpe:/o:redhat:enterprise_linux:7" />
      <ident system="www.unifiedcompliance.com">UCF CC ID 06001</ident>
      <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
        <check-export value-id="ShouldTheUserHaveREADAccess_var62" export-name="oval:com.mcafee.oval:var:78640" />
        <check-export value-id="ShouldTheUserHaveWRITEAccess_var62" export-name="oval:com.mcafee.oval:var:78641" />
        <check-export value-id="ShouldTheUserHaveEXECUTEAccess_var62" export-name="oval:com.mcafee.oval:var:78642" />
        <check-export value-id="ShouldTheGroupHaveREADAccess_var62" export-name="oval:com.mcafee.oval:var:78643" />
        <check-export value-id="ShouldTheGroupHaveWRITEAccess_var62" export-name="oval:com.mcafee.oval:var:78644" />
        <check-export value-id="ShouldTheGroupHaveEXECUTEAccess_var62" export-name="oval:com.mcafee.oval:var:78645" />
        <check-export value-id="ShouldOthersHaveREADAccess_var62" export-name="oval:com.mcafee.oval:var:78646" />
        <check-export value-id="ShouldOthersHaveWRITEAccess_var62" export-name="oval:com.mcafee.oval:var:78647" />
        <check-export value-id="ShouldOthersHaveEXECUTEAccess_var62" export-name="oval:com.mcafee.oval:var:78648" />
        <check-content-ref href="" name="oval:com.mcafee.oval:def:2487481" />
      </check>
    </Rule>
    <Rule id="SetGroupOwnerPermissionOn_Etc_cron.dDirectory" xml:lang="en" selected="false">
      <title xml:lang="en">Set Group Owner permission on /etc/cron.d directory</title>
      <description xml:lang="en">The /etc/cron.d directory contains system cron jobs that need to run in a similar manner to the hourly, daily weekly and monthly jobs from /etc/crontab, but require more granular control as to when they run. The files in this directory cannot be manipulated by the crontab command, but are instead edited by system administrators using a text editor. The commands below restrict read/write and search access to user and group root, preventing regular users from accessing this directory. This check will verify the group owner of the directory - /etc/cron.d is set as per the user input.</description>
      <reference>PCI DSS v3.2 Requirements 2.3</reference>
      <reference>https://www.pcisecuritystandards.org</reference>
      <platform idref="cpe:/o:centos:centos:7" />
      <platform idref="cpe:/o:oracle:linux:7" />
      <platform idref="cpe:/o:redhat:enterprise_linux:7" />
      <ident system="www.unifiedcompliance.com">UCF CC ID 06004</ident>
      <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
        <check-export value-id="WhatIsTheRequiredGroupIDOfTheFileOwner_var112" export-name="oval:com.mcafee.oval:var:80125" />
        <check-content-ref href="" name="oval:com.mcafee.oval:def:78840" />
      </check>
    </Rule>
    <Rule id="SetOwnerPermissionOn_Etc_cron.dDirectory" xml:lang="en" selected="false">
      <title xml:lang="en">Set Owner permission on /etc/cron.d directory</title>
      <description xml:lang="en">The /etc/cron.d directory contains system cron jobs that need to run in a similar manner to the hourly, daily weekly and monthly jobs from /etc/crontab, but require more granular control as to when they run. The files in this directory cannot be manipulated by the crontab command, but are instead edited by system administrators using a text editor. The commands below restrict read/write and search access to user and group root, preventing regular users from accessing this directory. This check verifies if the owner of /etc/cron.d directory is set as per the user input.</description>
      <reference>PCI DSS v3.2 Requirements 2.3</reference>
      <reference>https://www.pcisecuritystandards.org</reference>
      <platform idref="cpe:/o:centos:centos:7" />
      <platform idref="cpe:/o:oracle:linux:7" />
      <platform idref="cpe:/o:redhat:enterprise_linux:7" />
      <ident system="www.unifiedcompliance.com">UCF CC ID 06004</ident>
      <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
        <check-export value-id="WhatIsTheRequiredUserIDOfTheFileOwner_var112" export-name="oval:com.mcafee.oval:var:80228" />
        <check-content-ref href="" name="oval:com.mcafee.oval:def:200802250108" />
      </check>
    </Rule>
    <Rule id="SetGroupOwnerPermissionOn_Etc_cron.hourlyDirectory" xml:lang="en" selected="false">
      <title xml:lang="en">Set Group Owner permission on /etc/cron.hourly directory</title>
      <description xml:lang="en">This directory contains system cron jobs that need to run on an hourly basis. The files in this directory cannot be manipulated by the crontab command, but are instead edited by system administrators using a text editor. The commands below restrict read/write and search access to user and group root, preventing regular users from accessing this directory. This check verifies if the group owner of the directory - /etc/cron.hourly is as per the user input.</description>
      <reference>PCI DSS v3.2 Requirements 2.3</reference>
      <reference>https://www.pcisecuritystandards.org</reference>
      <platform idref="cpe:/o:centos:centos:7" />
      <platform idref="cpe:/o:oracle:linux:7" />
      <platform idref="cpe:/o:redhat:enterprise_linux:7" />
      <ident system="www.unifiedcompliance.com">UCF CC ID 06011</ident>
      <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
        <check-export value-id="WhatIsTheRequiredGroupIDOfTheFileOwner_var88" export-name="oval:com.mcafee.oval:var:80125" />
        <check-content-ref href="" name="oval:com.mcafee.oval:def:200802290120" />
      </check>
    </Rule>
    <Rule id="SetOwnerPermissionOn_Etc_cron.hourlyDirectory" xml:lang="en" selected="false">
      <title xml:lang="en">Set Owner permission on /etc/cron.hourly directory</title>
      <description xml:lang="en">This directory contains system cron jobs that need to run on an hourly basis. The files in this directory cannot be manipulated by the crontab command, but are instead edited by system administrators using a text editor. The commands below restrict read/write and search access to user and group root, preventing regular users from accessing this directory. This check verifies if the owner of the /etc/cron.hourly directory is set as per the user input.</description>
      <reference>PCI DSS v3.2 Requirements 2.3</reference>
      <reference>https://www.pcisecuritystandards.org</reference>
      <platform idref="cpe:/o:centos:centos:7" />
      <platform idref="cpe:/o:oracle:linux:7" />
      <platform idref="cpe:/o:redhat:enterprise_linux:7" />
      <ident system="www.unifiedcompliance.com">UCF CC ID 06011</ident>
      <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
        <check-export value-id="WhatIsTheRequiredUserIDOfTheFileOwner_var88" export-name="oval:com.mcafee.oval:var:80228" />
        <check-content-ref href="" name="oval:com.mcafee.oval:def:200802250116" />
      </check>
    </Rule>
    <Rule id="SetGroupOwnerPermissionOn_Etc_cron.dailyDirectory" xml:lang="en" selected="false">
      <title xml:lang="en">Set Group Owner permission on /etc/cron.daily directory</title>
      <description xml:lang="en">The /etc/cron.daily directory contains system cron jobs that need to run on a daily basis. The files in this directory cannot be manipulated by the crontab command, but are instead edited by system administrators using a text editor. The commands below restrict read/write and search access to user and group root, preventing regular users from accessing this directory. This check verifies if the group owner of directory - /etc/cron.daily is set as per the user input.</description>
      <reference>PCI DSS v3.2 Requirements 2.3</reference>
      <reference>https://www.pcisecuritystandards.org</reference>
      <platform idref="cpe:/o:centos:centos:7" />
      <platform idref="cpe:/o:oracle:linux:7" />
      <platform idref="cpe:/o:redhat:enterprise_linux:7" />
      <ident system="www.unifiedcompliance.com">UCF CC ID 06012</ident>
      <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
        <check-export value-id="WhatIsTheRequiredGroupIDOfTheFileOwner_var99" export-name="oval:com.mcafee.oval:var:80125" />
        <check-content-ref href="" name="oval:com.mcafee.oval:def:200802290100" />
      </check>
    </Rule>
    <Rule id="SetOwnerPermissionOn_Etc_cron.dailyDirectory" xml:lang="en" selected="false">
      <title xml:lang="en">Set Owner permission on /etc/cron.daily directory</title>
      <description xml:lang="en">The /etc/cron.daily directory contains system cron jobs that need to run on a daily basis. The files in this directory cannot be manipulated by the crontab command, but are instead edited by system administrators using a text editor. The commands below restrict read/write and search access to user and group root, preventing regular users from accessing this directory. This check verifies if the owner of directory - /etc/cron.daily is set as per the user input.</description>
      <reference>PCI DSS v3.2 Requirements 2.3</reference>
      <reference>https://www.pcisecuritystandards.org</reference>
      <platform idref="cpe:/o:centos:centos:7" />
      <platform idref="cpe:/o:oracle:linux:7" />
      <platform idref="cpe:/o:redhat:enterprise_linux:7" />
      <ident system="www.unifiedcompliance.com">UCF CC ID 06012</ident>
      <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
        <check-export value-id="WhatIsTheRequiredUserIDOfTheFileOwner_var99" export-name="oval:com.mcafee.oval:var:80228" />
        <check-content-ref href="" name="oval:com.mcafee.oval:def:200802250112" />
      </check>
    </Rule>
    <Rule id="SetGroupOwnerPermissionOn_Etc_cron.monthlyDirectory" xml:lang="en" selected="false">
      <title xml:lang="en">Set Group Owner permission on /etc/cron.monthly directory</title>
      <description xml:lang="en">The /etc/cron.monthly directory contains system cron jobs that need to run on a monthly basis. The files in this directory cannot be manipulated by the crontab command, but are instead edited by system administrators using a text editor. The commands below restrict read/write and search access to user and group root, preventing regular users from accessing this directory. This check verifies if the group owner of the directory - /etc/cron.monthly directory is set as per the user input.</description>
      <reference>PCI DSS v3.2 Requirements 2.3</reference>
      <reference>https://www.pcisecuritystandards.org</reference>
      <platform idref="cpe:/o:centos:centos:7" />
      <platform idref="cpe:/o:oracle:linux:7" />
      <platform idref="cpe:/o:redhat:enterprise_linux:7" />
      <ident system="www.unifiedcompliance.com">UCF CC ID 06007</ident>
      <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
        <check-export value-id="WhatIsTheRequiredGroupIDOfTheFileOwner_var111" export-name="oval:com.mcafee.oval:var:80125" />
        <check-content-ref href="" name="oval:com.mcafee.oval:def:200802290116" />
      </check>
    </Rule>
    <Rule id="SetOwnerPermissionOn_Etc_cron.monthlyDirectory" xml:lang="en" selected="false">
      <title xml:lang="en">Set Owner permission on /etc/cron.monthly directory</title>
      <description xml:lang="en">The /etc/cron.monthly directory contains system cron jobs that need to run on a monthly basis. The files in this directory cannot be manipulated by the crontab command, but are instead edited by system administrators using a text editor. The commands below restrict read/write and search access to user and group root, preventing regular users from accessing this directory. This check verifies if the owner of the directory - /etc/cron.monthly directory is set as per the user input.</description>
      <reference>PCI DSS v3.2 Requirements 2.3</reference>
      <reference>https://www.pcisecuritystandards.org</reference>
      <platform idref="cpe:/o:centos:centos:7" />
      <platform idref="cpe:/o:oracle:linux:7" />
      <platform idref="cpe:/o:redhat:enterprise_linux:7" />
      <ident system="www.unifiedcompliance.com">UCF CC ID 06007</ident>
      <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
        <check-export value-id="WhatIsTheRequiredUserIDOfTheFileOwner_var111" export-name="oval:com.mcafee.oval:var:80228" />
        <check-content-ref href="" name="oval:com.mcafee.oval:def:200802250120" />
      </check>
    </Rule>
    <Rule id="TestThePermissionsOfTheScriptFile" xml:lang="en" selected="false">
      <title xml:lang="en">Test the permissions of the script file</title>
      <description xml:lang="en">This check will verify the permissions of the script file.</description>
      <reference>PCI DSS v3.2 Requirements 2.3</reference>
      <reference>https://www.pcisecuritystandards.org</reference>
      <platform idref="cpe:/o:centos:centos:7" />
      <platform idref="cpe:/o:oracle:linux:7" />
      <platform idref="cpe:/o:redhat:enterprise_linux:7" />
      <ident system="www.unifiedcompliance.com">UCF CC ID 02160</ident>
      <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
        <check-export value-id="WhatIsThePathForScriptFile_var1" export-name="oval:com.mcafee.oval:var:1163128" />
        <check-export value-id="WhatIsTheNameOfScriptFile_var1" export-name="oval:com.mcafee.oval:var:1163129" />
        <check-export value-id="ShouldTheUserHaveREADAccess_var144" export-name="oval:com.mcafee.oval:var:78640" />
        <check-export value-id="ShouldTheUserHaveWRITEAccess_var144" export-name="oval:com.mcafee.oval:var:78641" />
        <check-export value-id="ShouldTheUserHaveEXECUTEAccess_var144" export-name="oval:com.mcafee.oval:var:78642" />
        <check-export value-id="ShouldTheGroupHaveREADAccess_var144" export-name="oval:com.mcafee.oval:var:78643" />
        <check-export value-id="ShouldTheGroupHaveWRITEAccess_var144" export-name="oval:com.mcafee.oval:var:78644" />
        <check-export value-id="ShouldTheGroupHaveEXECUTEAccess_var144" export-name="oval:com.mcafee.oval:var:78645" />
        <check-export value-id="ShouldOthersHaveREADAccess_var144" export-name="oval:com.mcafee.oval:var:78646" />
        <check-export value-id="ShouldOthersHaveWRITEAccess_var144" export-name="oval:com.mcafee.oval:var:78647" />
        <check-export value-id="ShouldOthersHaveEXECUTEAccess_var144" export-name="oval:com.mcafee.oval:var:78648" />
        <check-content-ref href="" name="oval:com.mcafee.oval:def:1163042" />
      </check>
    </Rule>
    <Rule id="TestTheGroupOwnerOfThe_RootDirectory" xml:lang="en" selected="false">
      <title xml:lang="en">Test the group owner of the /root directory</title>
      <description xml:lang="en">This rule will verify the group owner of the /root directory.</description>
      <reference>PCI DSS v3.2 Requirements 2.3</reference>
      <reference>https://www.pcisecuritystandards.org</reference>
      <platform idref="cpe:/o:centos:centos:7" />
      <platform idref="cpe:/o:oracle:linux:7" />
      <platform idref="cpe:/o:redhat:enterprise_linux:7" />
      <ident system="www.unifiedcompliance.com">UCF CC ID 06020</ident>
      <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
        <check-export value-id="WhatIsTheRequiredGroupIDOfTheFileOwner_var214" export-name="oval:com.mcafee.oval:var:80125" />
        <check-content-ref href="" name="oval:com.mcafee.oval:def:79090" />
      </check>
    </Rule>
    <Rule id="TestTheOwnerOfThe_RootDirectory" xml:lang="en" selected="false">
      <title xml:lang="en">Test the owner of the /root directory</title>
      <description xml:lang="en">This rule will verify the owner of the /root directory.</description>
      <reference>PCI DSS v3.2 Requirements 2.3</reference>
      <reference>https://www.pcisecuritystandards.org</reference>
      <platform idref="cpe:/o:centos:centos:7" />
      <platform idref="cpe:/o:oracle:linux:7" />
      <platform idref="cpe:/o:redhat:enterprise_linux:7" />
      <ident system="www.unifiedcompliance.com">UCF CC ID 06020</ident>
      <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
        <check-export value-id="WhatIsTheRequiredUserIDOfTheFileOwner_var214" export-name="oval:com.mcafee.oval:var:80228" />
        <check-content-ref href="" name="oval:com.mcafee.oval:def:79091" />
      </check>
    </Rule>
    <Rule id="TestThePermissionsOfThe_RootDirectory" xml:lang="en" selected="false">
      <title xml:lang="en">Test the permissions of the /root directory</title>
      <description xml:lang="en">This rule will verify the permissions of the /root directory.</description>
      <reference>PCI DSS v3.2 Requirements 2.3</reference>
      <reference>https://www.pcisecuritystandards.org</reference>
      <platform idref="cpe:/o:centos:centos:7" />
      <platform idref="cpe:/o:oracle:linux:7" />
      <platform idref="cpe:/o:redhat:enterprise_linux:7" />
      <ident system="www.unifiedcompliance.com">UCF CC ID 06020</ident>
      <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
        <check-export value-id="ShouldTheUserHaveREADAccess_var224" export-name="oval:com.mcafee.oval:var:78640" />
        <check-export value-id="ShouldTheUserHaveWRITEAccess_var224" export-name="oval:com.mcafee.oval:var:78641" />
        <check-export value-id="ShouldTheUserHaveEXECUTEAccess_var224" export-name="oval:com.mcafee.oval:var:78642" />
        <check-export value-id="ShouldTheGroupHaveREADAccess_var224" export-name="oval:com.mcafee.oval:var:78643" />
        <check-export value-id="ShouldTheGroupHaveWRITEAccess_var224" export-name="oval:com.mcafee.oval:var:78644" />
        <check-export value-id="ShouldTheGroupHaveEXECUTEAccess_var224" export-name="oval:com.mcafee.oval:var:78645" />
        <check-export value-id="ShouldOthersHaveREADAccess_var224" export-name="oval:com.mcafee.oval:var:78646" />
        <check-export value-id="ShouldOthersHaveWRITEAccess_var224" export-name="oval:com.mcafee.oval:var:78647" />
        <check-export value-id="ShouldOthersHaveEXECUTEAccess_var224" export-name="oval:com.mcafee.oval:var:78648" />
        <check-content-ref href="" name="oval:com.mcafee.oval:def:79092" />
      </check>
    </Rule>
    <Rule id="TestTheOwnerOfTheFile_Usr_bin_at" xml:lang="en" selected="false">
      <title xml:lang="en">Test the owner of the file - /usr/bin/at</title>
      <description xml:lang="en">This check will verify the owner of /usr/bin/at file</description>
      <reference>PCI DSS v3.2 Requirements 2.3</reference>
      <reference>https://www.pcisecuritystandards.org</reference>
      <platform idref="cpe:/o:centos:centos:7" />
      <platform idref="cpe:/o:oracle:linux:7" />
      <platform idref="cpe:/o:redhat:enterprise_linux:7" />
      <ident system="www.unifiedcompliance.com">UCF CC ID 06001</ident>
      <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
        <check-export value-id="WhatIsTheRequiredUserIDOfTheFileOwner_var44" export-name="oval:com.mcafee.oval:var:80228" />
        <check-content-ref href="" name="oval:com.mcafee.oval:def:2487549" />
      </check>
    </Rule>
    <Rule id="TestTheGroupOwnerOfTheFile_Usr_bin_at" xml:lang="en" selected="false">
      <title xml:lang="en">Test the group owner of the file - /usr/bin/at</title>
      <description xml:lang="en">This check will verify the group owner of the file - /usr/bin/at</description>
      <reference>PCI DSS v3.2 Requirements 2.3</reference>
      <reference>https://www.pcisecuritystandards.org</reference>
      <platform idref="cpe:/o:centos:centos:7" />
      <platform idref="cpe:/o:oracle:linux:7" />
      <platform idref="cpe:/o:redhat:enterprise_linux:7" />
      <ident system="www.unifiedcompliance.com">UCF CC ID 06001</ident>
      <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
        <check-export value-id="WhatIsTheRequiredGroupIDOfTheFileOwner_var44" export-name="oval:com.mcafee.oval:var:80125" />
        <check-content-ref href="" name="oval:com.mcafee.oval:def:2487550" />
      </check>
    </Rule>
    <Rule id="TestTheGroupOwnerOfTheFile_Etc_profile" xml:lang="en" selected="false">
      <title xml:lang="en">Test the group owner of the file - /etc/profile</title>
      <description xml:lang="en">This check will verify the group owner of /etc/profile file</description>
      <reference>PCI DSS v3.2 Requirements 8</reference>
      <reference>https://www.pcisecuritystandards.org</reference>
      <platform idref="cpe:/o:centos:centos:7" />
      <platform idref="cpe:/o:oracle:linux:7" />
      <platform idref="cpe:/o:redhat:enterprise_linux:7" />
      <ident system="www.unifiedcompliance.com">UCF CC ID 05334</ident>
      <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
        <check-export value-id="WhatIsTheRequiredGroupIDOfTheFileOwner_var45" export-name="oval:com.mcafee.oval:var:80125" />
        <check-content-ref href="" name="oval:com.mcafee.oval:def:6994" />
      </check>
    </Rule>
    <Rule id="TestThePermissionsOfTheFile_Etc_profile" xml:lang="en" selected="false">
      <title xml:lang="en">Test the permissions of the file - /etc/profile</title>
      <description xml:lang="en">This check will verify the permissions of the file - /etc/profile</description>
      <reference>PCI DSS v3.2 Requirements 8</reference>
      <reference>https://www.pcisecuritystandards.org</reference>
      <platform idref="cpe:/o:centos:centos:7" />
      <platform idref="cpe:/o:oracle:linux:7" />
      <platform idref="cpe:/o:redhat:enterprise_linux:7" />
      <ident system="www.unifiedcompliance.com">UCF CC ID 05334</ident>
      <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
        <check-export value-id="ShouldTheUserHaveREADAccess_var63" export-name="oval:com.mcafee.oval:var:78640" />
        <check-export value-id="ShouldTheUserHaveWRITEAccess_var63" export-name="oval:com.mcafee.oval:var:78641" />
        <check-export value-id="ShouldTheUserHaveEXECUTEAccess_var63" export-name="oval:com.mcafee.oval:var:78642" />
        <check-export value-id="ShouldTheGroupHaveREADAccess_var63" export-name="oval:com.mcafee.oval:var:78643" />
        <check-export value-id="ShouldTheGroupHaveWRITEAccess_var63" export-name="oval:com.mcafee.oval:var:78644" />
        <check-export value-id="ShouldTheGroupHaveEXECUTEAccess_var63" export-name="oval:com.mcafee.oval:var:78645" />
        <check-export value-id="ShouldOthersHaveREADAccess_var63" export-name="oval:com.mcafee.oval:var:78646" />
        <check-export value-id="ShouldOthersHaveWRITEAccess_var63" export-name="oval:com.mcafee.oval:var:78647" />
        <check-export value-id="ShouldOthersHaveEXECUTEAccess_var63" export-name="oval:com.mcafee.oval:var:78648" />
        <check-content-ref href="" name="oval:com.mcafee.oval:def:6982" />
      </check>
    </Rule>
    <Rule id="TestTheOwnerOfTheFile_Etc_profile" xml:lang="en" selected="false">
      <title xml:lang="en">Test the owner of the file - /etc/profile</title>
      <description xml:lang="en">This check will verify the owner of the file - /etc/profile</description>
      <reference>PCI DSS v3.2 Requirements 8</reference>
      <reference>https://www.pcisecuritystandards.org</reference>
      <platform idref="cpe:/o:centos:centos:7" />
      <platform idref="cpe:/o:oracle:linux:7" />
      <platform idref="cpe:/o:redhat:enterprise_linux:7" />
      <ident system="www.unifiedcompliance.com">UCF CC ID 05334</ident>
      <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
        <check-export value-id="WhatIsTheRequiredUserIDOfTheFileOwner_var45" export-name="oval:com.mcafee.oval:var:80228" />
        <check-content-ref href="" name="oval:com.mcafee.oval:def:78999" />
      </check>
    </Rule>
    <Rule id="TestThePermissionsOfTheFile_Etc_bashrc" xml:lang="en" selected="false">
      <title xml:lang="en">Test the permissions of the file - /etc/bashrc</title>
      <description xml:lang="en">This check will verify the permissions of the file - /etc/bashrc</description>
      <reference>PCI DSS v3.2 Requirements 8</reference>
      <reference>https://www.pcisecuritystandards.org</reference>
      <platform idref="cpe:/o:centos:centos:7" />
      <platform idref="cpe:/o:oracle:linux:7" />
      <platform idref="cpe:/o:redhat:enterprise_linux:7" />
      <ident system="www.unifiedcompliance.com">UCF CC ID 05334</ident>
      <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
        <check-export value-id="ShouldTheUserHaveREADAccess_var64" export-name="oval:com.mcafee.oval:var:78640" />
        <check-export value-id="ShouldTheUserHaveWRITEAccess_var64" export-name="oval:com.mcafee.oval:var:78641" />
        <check-export value-id="ShouldTheUserHaveEXECUTEAccess_var64" export-name="oval:com.mcafee.oval:var:78642" />
        <check-export value-id="ShouldTheGroupHaveREADAccess_var64" export-name="oval:com.mcafee.oval:var:78643" />
        <check-export value-id="ShouldTheGroupHaveWRITEAccess_var64" export-name="oval:com.mcafee.oval:var:78644" />
        <check-export value-id="ShouldTheGroupHaveEXECUTEAccess_var64" export-name="oval:com.mcafee.oval:var:78645" />
        <check-export value-id="ShouldOthersHaveREADAccess_var64" export-name="oval:com.mcafee.oval:var:78646" />
        <check-export value-id="ShouldOthersHaveWRITEAccess_var64" export-name="oval:com.mcafee.oval:var:78647" />
        <check-export value-id="ShouldOthersHaveEXECUTEAccess_var64" export-name="oval:com.mcafee.oval:var:78648" />
        <check-content-ref href="" name="oval:com.mcafee.oval:def:78695" />
      </check>
    </Rule>
    <Rule id="TestTheGroupOwnerOfTheFile_Etc_bashrc" xml:lang="en" selected="false">
      <title xml:lang="en">Test the group owner of the file - /etc/bashrc</title>
      <description xml:lang="en">This check will verify the group owner of /etc/bashrc file</description>
      <reference>PCI DSS v3.2 Requirements 8</reference>
      <reference>https://www.pcisecuritystandards.org</reference>
      <platform idref="cpe:/o:centos:centos:7" />
      <platform idref="cpe:/o:oracle:linux:7" />
      <platform idref="cpe:/o:redhat:enterprise_linux:7" />
      <ident system="www.unifiedcompliance.com">UCF CC ID 05334</ident>
      <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
        <check-export value-id="WhatIsTheRequiredGroupIDOfTheFileOwner_var46" export-name="oval:com.mcafee.oval:var:80125" />
        <check-content-ref href="" name="oval:com.mcafee.oval:def:6986" />
      </check>
    </Rule>
    <Rule id="TestTheOwnerOfTheFile_Etc_bashrc" xml:lang="en" selected="false">
      <title xml:lang="en">Test the owner of the File - /etc/bashrc</title>
      <description xml:lang="en">This check will verify the owner of the file - /etc/bashrc</description>
      <reference>PCI DSS v3.2 Requirements 8</reference>
      <reference>https://www.pcisecuritystandards.org</reference>
      <platform idref="cpe:/o:centos:centos:7" />
      <platform idref="cpe:/o:oracle:linux:7" />
      <platform idref="cpe:/o:redhat:enterprise_linux:7" />
      <ident system="www.unifiedcompliance.com">UCF CC ID 05334</ident>
      <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
        <check-export value-id="WhatIsTheRequiredUserIDOfTheFileOwner_var46" export-name="oval:com.mcafee.oval:var:80228" />
        <check-content-ref href="" name="oval:com.mcafee.oval:def:79002" />
      </check>
    </Rule>
    <Rule id="TestTheGroupOwnerOfTheDirectory_Etc_profile.d" xml:lang="en" selected="false">
      <title xml:lang="en">Test the group owner of the directory - /etc/profile.d</title>
      <description xml:lang="en">This check will verify the group owner of the /etc/profile.d directory</description>
      <reference>PCI DSS v3.2 Requirements 8</reference>
      <reference>https://www.pcisecuritystandards.org</reference>
      <platform idref="cpe:/o:centos:centos:7" />
      <platform idref="cpe:/o:oracle:linux:7" />
      <platform idref="cpe:/o:redhat:enterprise_linux:7" />
      <ident system="www.unifiedcompliance.com">UCF CC ID 05334</ident>
      <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
        <check-export value-id="WhatIsTheRequiredGroupIDOfTheFileOwner_var47" export-name="oval:com.mcafee.oval:var:80125" />
        <check-content-ref href="" name="oval:com.mcafee.oval:def:2487538" />
      </check>
    </Rule>
    <Rule id="TestTheOwnerOfTheDirectory_Etc_profile.d" xml:lang="en" selected="false">
      <title xml:lang="en">Test the owner of the directory - /etc/profile.d</title>
      <description xml:lang="en">This check will verify the owner of the directory - /etc/profile.d</description>
      <reference>PCI DSS v3.2 Requirements 8</reference>
      <reference>https://www.pcisecuritystandards.org</reference>
      <platform idref="cpe:/o:centos:centos:7" />
      <platform idref="cpe:/o:oracle:linux:7" />
      <platform idref="cpe:/o:redhat:enterprise_linux:7" />
      <ident system="www.unifiedcompliance.com">UCF CC ID 05334</ident>
      <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
        <check-export value-id="WhatIsTheRequiredUserIDOfTheFileOwner_var47" export-name="oval:com.mcafee.oval:var:80228" />
        <check-content-ref href="" name="oval:com.mcafee.oval:def:2487539" />
      </check>
    </Rule>
    <Rule id="TestThePermissionsOfTheDirectory_Etc_profile.d" xml:lang="en" selected="false">
      <title xml:lang="en">Test the permissions of the directory - /etc/profile.d</title>
      <description xml:lang="en">This check will verify the permissions set on the /etc/profile.d directory</description>
      <reference>PCI DSS v3.2 Requirements 8</reference>
      <reference>https://www.pcisecuritystandards.org</reference>
      <platform idref="cpe:/o:centos:centos:7" />
      <platform idref="cpe:/o:oracle:linux:7" />
      <platform idref="cpe:/o:redhat:enterprise_linux:7" />
      <ident system="www.unifiedcompliance.com">UCF CC ID 05334</ident>
      <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
        <check-export value-id="ShouldTheUserHaveREADAccess_var66" export-name="oval:com.mcafee.oval:var:78640" />
        <check-export value-id="ShouldTheUserHaveWRITEAccess_var66" export-name="oval:com.mcafee.oval:var:78641" />
        <check-export value-id="ShouldTheUserHaveEXECUTEAccess_var66" export-name="oval:com.mcafee.oval:var:78642" />
        <check-export value-id="ShouldTheGroupHaveREADAccess_var66" export-name="oval:com.mcafee.oval:var:78643" />
        <check-export value-id="ShouldTheGroupHaveWRITEAccess_var66" export-name="oval:com.mcafee.oval:var:78644" />
        <check-export value-id="ShouldTheGroupHaveEXECUTEAccess_var66" export-name="oval:com.mcafee.oval:var:78645" />
        <check-export value-id="ShouldOthersHaveREADAccess_var66" export-name="oval:com.mcafee.oval:var:78646" />
        <check-export value-id="ShouldOthersHaveWRITEAccess_var66" export-name="oval:com.mcafee.oval:var:78647" />
        <check-export value-id="ShouldOthersHaveEXECUTEAccess_var66" export-name="oval:com.mcafee.oval:var:78648" />
        <check-content-ref href="" name="oval:com.mcafee.oval:def:2487540" />
      </check>
    </Rule>
    <Rule id="TestThePermissionsOfTheFiles_Var_lib_ldap_._" xml:lang="en" selected="false">
      <title xml:lang="en">Test the permissions of the files - /var/lib/ldap/.*</title>
      <description xml:lang="en">This check will verify the permissions of the files - /var/lib/ldap/.*</description>
      <reference>PCI DSS v3.2 Requirements 2.3</reference>
      <reference>https://www.pcisecuritystandards.org</reference>
      <platform idref="cpe:/o:centos:centos:7" />
      <platform idref="cpe:/o:oracle:linux:7" />
      <platform idref="cpe:/o:redhat:enterprise_linux:7" />
      <ident system="www.unifiedcompliance.com">UCF CC ID 05358</ident>
      <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
        <check-export value-id="ShouldTheUserHaveREADAccess_var67" export-name="oval:com.mcafee.oval:var:78640" />
        <check-export value-id="ShouldTheUserHaveWRITEAccess_var67" export-name="oval:com.mcafee.oval:var:78641" />
        <check-export value-id="ShouldTheUserHaveEXECUTEAccess_var67" export-name="oval:com.mcafee.oval:var:78642" />
        <check-export value-id="ShouldTheGroupHaveREADAccess_var67" export-name="oval:com.mcafee.oval:var:78643" />
        <check-export value-id="ShouldTheGroupHaveWRITEAccess_var67" export-name="oval:com.mcafee.oval:var:78644" />
        <check-export value-id="ShouldTheGroupHaveEXECUTEAccess_var67" export-name="oval:com.mcafee.oval:var:78645" />
        <check-export value-id="ShouldOthersHaveREADAccess_var67" export-name="oval:com.mcafee.oval:var:78646" />
        <check-export value-id="ShouldOthersHaveWRITEAccess_var67" export-name="oval:com.mcafee.oval:var:78647" />
        <check-export value-id="ShouldOthersHaveEXECUTEAccess_var67" export-name="oval:com.mcafee.oval:var:78648" />
        <check-content-ref href="" name="oval:com.mcafee.oval:def:2487524" />
      </check>
    </Rule>
    <Rule id="TestTheGroupOwnerOfTheFiles_Var_lib_ldap_._" xml:lang="en" selected="false">
      <title xml:lang="en">Test the group owner of the files - /var/lib/ldap/.*</title>
      <description xml:lang="en">This check will verify the group owner of the files - /var/lib/ldap/.*</description>
      <reference>PCI DSS v3.2 Requirements 2.3</reference>
      <reference>https://www.pcisecuritystandards.org</reference>
      <platform idref="cpe:/o:centos:centos:7" />
      <platform idref="cpe:/o:oracle:linux:7" />
      <platform idref="cpe:/o:redhat:enterprise_linux:7" />
      <ident system="www.unifiedcompliance.com">UCF CC ID 05358</ident>
      <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
        <check-export value-id="WhatIsTheRequiredGroupIDOfTheFileOwner_var48" export-name="oval:com.mcafee.oval:var:80125" />
        <check-content-ref href="" name="oval:com.mcafee.oval:def:2487523" />
      </check>
    </Rule>
    <Rule id="TestTheOwnerOfTheFiles_Var_lib_ldap_._" xml:lang="en" selected="false">
      <title xml:lang="en">Test the owner of the files - /var/lib/ldap/.*</title>
      <description xml:lang="en">This check will verify the owner of the files - /var/lib/ldap/.*</description>
      <reference>PCI DSS v3.2 Requirements 2.3</reference>
      <reference>https://www.pcisecuritystandards.org</reference>
      <platform idref="cpe:/o:centos:centos:7" />
      <platform idref="cpe:/o:oracle:linux:7" />
      <platform idref="cpe:/o:redhat:enterprise_linux:7" />
      <ident system="www.unifiedcompliance.com">UCF CC ID 05358</ident>
      <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
        <check-export value-id="WhatIsTheRequiredUserIDOfTheFileOwner_var48" export-name="oval:com.mcafee.oval:var:80228" />
        <check-content-ref href="" name="oval:com.mcafee.oval:def:2487522" />
      </check>
    </Rule>
    <Rule id="TestTheGroupOwnerOfTheFiles_Etc_default_._" xml:lang="en" selected="false">
      <title xml:lang="en">Test the group owner of the files - /etc/default/.*</title>
      <description xml:lang="en">This check will verify the group owner of the files - /etc/default/.*</description>
      <reference>PCI DSS v3.2 Requirements 2.3</reference>
      <reference>https://www.pcisecuritystandards.org</reference>
      <platform idref="cpe:/o:centos:centos:7" />
      <platform idref="cpe:/o:oracle:linux:7" />
      <platform idref="cpe:/o:redhat:enterprise_linux:7" />
      <ident system="www.unifiedcompliance.com">UCF CC ID 05484</ident>
      <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
        <check-export value-id="WhatIsTheRequiredGroupIDOfTheFileOwner_var49" export-name="oval:com.mcafee.oval:var:80125" />
        <check-content-ref href="" name="oval:com.mcafee.oval:def:2487531" />
      </check>
    </Rule>
    <Rule id="TestThePermissionsOfTheFiles_Etc_default_._" xml:lang="en" selected="false">
      <title xml:lang="en">Test the permissions of the files - /etc/default/.*</title>
      <reference>PCI DSS v3.2 Requirements 2.3</reference>
      <reference>https://www.pcisecuritystandards.org</reference>
      <platform idref="cpe:/o:centos:centos:7" />
      <platform idref="cpe:/o:oracle:linux:7" />
      <platform idref="cpe:/o:redhat:enterprise_linux:7" />
      <ident system="www.unifiedcompliance.com">UCF CC ID 05484</ident>
      <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
        <check-export value-id="ShouldTheUserHaveREADAccess_var68" export-name="oval:com.mcafee.oval:var:78640" />
        <check-export value-id="ShouldTheUserHaveWRITEAccess_var68" export-name="oval:com.mcafee.oval:var:78641" />
        <check-export value-id="ShouldTheUserHaveEXECUTEAccess_var68" export-name="oval:com.mcafee.oval:var:78642" />
        <check-export value-id="ShouldTheGroupHaveREADAccess_var68" export-name="oval:com.mcafee.oval:var:78643" />
        <check-export value-id="ShouldTheGroupHaveWRITEAccess_var68" export-name="oval:com.mcafee.oval:var:78644" />
        <check-export value-id="ShouldTheGroupHaveEXECUTEAccess_var68" export-name="oval:com.mcafee.oval:var:78645" />
        <check-export value-id="ShouldOthersHaveREADAccess_var68" export-name="oval:com.mcafee.oval:var:78646" />
        <check-export value-id="ShouldOthersHaveWRITEAccess_var68" export-name="oval:com.mcafee.oval:var:78647" />
        <check-export value-id="ShouldOthersHaveEXECUTEAccess_var68" export-name="oval:com.mcafee.oval:var:78648" />
        <check-content-ref href="" name="oval:com.mcafee.oval:def:2487532" />
      </check>
    </Rule>
    <Rule id="TestTheOwnerOfTheFiles_Etc_default_._" xml:lang="en" selected="false">
      <title xml:lang="en">Test the owner of the files - /etc/default/.*</title>
      <description xml:lang="en">This check will verify the owner of the files - /etc/default/.*</description>
      <reference>PCI DSS v3.2 Requirements 2.3</reference>
      <reference>https://www.pcisecuritystandards.org</reference>
      <platform idref="cpe:/o:centos:centos:7" />
      <platform idref="cpe:/o:oracle:linux:7" />
      <platform idref="cpe:/o:redhat:enterprise_linux:7" />
      <ident system="www.unifiedcompliance.com">UCF CC ID 05484</ident>
      <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
        <check-export value-id="WhatIsTheRequiredUserIDOfTheFileOwner_var49" export-name="oval:com.mcafee.oval:var:80228" />
        <check-content-ref href="" name="oval:com.mcafee.oval:def:2487530" />
      </check>
    </Rule>
    <Rule id="TestThePermissionsOnUser.forwardFiles" xml:lang="en" selected="false">
      <title xml:lang="en">Test the permissions on user .forward files</title>
      <description xml:lang="en">This checks verifies the file permissions of the .forward files in the home directories of all the accounts other than root, sync, shutdown and halt and home directories of the accounts whose login shell is not equal to /sbin/nologin.</description>
      <reference>PCI DSS v3.2 Requirements 2</reference>
      <reference>https://www.pcisecuritystandards.org</reference>
      <platform idref="cpe:/o:centos:centos:7" />
      <platform idref="cpe:/o:oracle:linux:7" />
      <platform idref="cpe:/o:redhat:enterprise_linux:7" />
      <ident system="www.unifiedcompliance.com">UCF CC ID 04848</ident>
      <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
        <check-export value-id="ShouldTheUserHaveREADAccess_var69" export-name="oval:com.mcafee.oval:var:78640" />
        <check-export value-id="ShouldTheUserHaveWRITEAccess_var69" export-name="oval:com.mcafee.oval:var:78641" />
        <check-export value-id="ShouldTheUserHaveEXECUTEAccess_var69" export-name="oval:com.mcafee.oval:var:78642" />
        <check-export value-id="ShouldTheGroupHaveREADAccess_var69" export-name="oval:com.mcafee.oval:var:78643" />
        <check-export value-id="ShouldTheGroupHaveWRITEAccess_var69" export-name="oval:com.mcafee.oval:var:78644" />
        <check-export value-id="ShouldTheGroupHaveEXECUTEAccess_var69" export-name="oval:com.mcafee.oval:var:78645" />
        <check-export value-id="ShouldOthersHaveREADAccess_var69" export-name="oval:com.mcafee.oval:var:78646" />
        <check-export value-id="ShouldOthersHaveWRITEAccess_var69" export-name="oval:com.mcafee.oval:var:78647" />
        <check-export value-id="ShouldOthersHaveEXECUTEAccess_var69" export-name="oval:com.mcafee.oval:var:78648" />
        <check-content-ref href="" name="oval:com.mcafee.oval:def:2487503" />
      </check>
    </Rule>
    <Rule id="TestThePermissionsOfTheDirectory_Etc_cron.d" xml:lang="en" selected="false">
      <title xml:lang="en">Test the permissions of the directory - /etc/cron.d</title>
      <description xml:lang="en">This check will verify the permissions set on the /etc/cron.d directory</description>
      <reference>PCI DSS v3.2 Requirements 2.3</reference>
      <reference>https://www.pcisecuritystandards.org</reference>
      <platform idref="cpe:/o:centos:centos:7" />
      <platform idref="cpe:/o:oracle:linux:7" />
      <platform idref="cpe:/o:redhat:enterprise_linux:7" />
      <ident system="www.unifiedcompliance.com">UCF CC ID 05997</ident>
      <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
        <check-export value-id="ShouldTheUserHaveREADAccess_var71" export-name="oval:com.mcafee.oval:var:78640" />
        <check-export value-id="ShouldTheUserHaveWRITEAccess_var71" export-name="oval:com.mcafee.oval:var:78641" />
        <check-export value-id="ShouldTheUserHaveEXECUTEAccess_var71" export-name="oval:com.mcafee.oval:var:78642" />
        <check-export value-id="ShouldTheGroupHaveREADAccess_var71" export-name="oval:com.mcafee.oval:var:78643" />
        <check-export value-id="ShouldTheGroupHaveWRITEAccess_var71" export-name="oval:com.mcafee.oval:var:78644" />
        <check-export value-id="ShouldTheGroupHaveEXECUTEAccess_var71" export-name="oval:com.mcafee.oval:var:78645" />
        <check-export value-id="ShouldOthersHaveREADAccess_var71" export-name="oval:com.mcafee.oval:var:78646" />
        <check-export value-id="ShouldOthersHaveWRITEAccess_var71" export-name="oval:com.mcafee.oval:var:78647" />
        <check-export value-id="ShouldOthersHaveEXECUTEAccess_var71" export-name="oval:com.mcafee.oval:var:78648" />
        <check-content-ref href="" name="oval:com.mcafee.oval:def:2487518" />
      </check>
    </Rule>
    <Rule id="TestThePermissionsOfTheFiles_Var_log_cron_" xml:lang="en" selected="false">
      <title xml:lang="en">Test the permissions of the files - /var/log/cron*</title>
      <reference>PCI DSS v3.2 Requirements 2.3 and 10</reference>
      <reference>https://www.pcisecuritystandards.org</reference>
      <platform idref="cpe:/o:centos:centos:7" />
      <platform idref="cpe:/o:oracle:linux:7" />
      <platform idref="cpe:/o:redhat:enterprise_linux:7" />
      <ident system="www.unifiedcompliance.com">UCF CC ID 01528</ident>
      <ident system="www.unifiedcompliance.com">UCF CC ID 05998</ident>
      <ident system="www.unifiedcompliance.com">UCF CC ID 05371</ident>
      <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
        <check-export value-id="ShouldTheUserHaveREADAccess_var72" export-name="oval:com.mcafee.oval:var:78640" />
        <check-export value-id="ShouldTheUserHaveWRITEAccess_var72" export-name="oval:com.mcafee.oval:var:78641" />
        <check-export value-id="ShouldTheUserHaveEXECUTEAccess_var72" export-name="oval:com.mcafee.oval:var:78642" />
        <check-export value-id="ShouldTheGroupHaveREADAccess_var72" export-name="oval:com.mcafee.oval:var:78643" />
        <check-export value-id="ShouldTheGroupHaveWRITEAccess_var72" export-name="oval:com.mcafee.oval:var:78644" />
        <check-export value-id="ShouldTheGroupHaveEXECUTEAccess_var72" export-name="oval:com.mcafee.oval:var:78645" />
        <check-export value-id="ShouldOthersHaveREADAccess_var72" export-name="oval:com.mcafee.oval:var:78646" />
        <check-export value-id="ShouldOthersHaveWRITEAccess_var72" export-name="oval:com.mcafee.oval:var:78647" />
        <check-export value-id="ShouldOthersHaveEXECUTEAccess_var72" export-name="oval:com.mcafee.oval:var:78648" />
        <check-content-ref href="" name="oval:com.mcafee.oval:def:92697" />
      </check>
    </Rule>
    <Rule id="TestTheGroupOwnerOfTheFiles_Var_log_cron_" xml:lang="en" selected="false">
      <title xml:lang="en">Test the group owner of the files - /var/log/cron*</title>
      <description xml:lang="en">This check will verify the group owner of the files - /var/log/cron*</description>
      <reference>PCI DSS v3.2 Requirements 2.3 and 10</reference>
      <reference>https://www.pcisecuritystandards.org</reference>
      <platform idref="cpe:/o:centos:centos:7" />
      <platform idref="cpe:/o:oracle:linux:7" />
      <platform idref="cpe:/o:redhat:enterprise_linux:7" />
      <ident system="www.unifiedcompliance.com">UCF CC ID 01528</ident>
      <ident system="www.unifiedcompliance.com">UCF CC ID 05998</ident>
      <ident system="www.unifiedcompliance.com">UCF CC ID 05371</ident>
      <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
        <check-export value-id="WhatIsTheRequiredGroupIDOfTheFileOwner_var51" export-name="oval:com.mcafee.oval:var:80125" />
        <check-content-ref href="" name="oval:com.mcafee.oval:def:92695" />
      </check>
    </Rule>
    <Rule id="TestTheOwnerOfTheFiles_Var_log_cron_" xml:lang="en" selected="false">
      <title xml:lang="en">Test the owner of the files - /var/log/cron*</title>
      <description xml:lang="en">This check will verify the owner of the files - /var/log/cron*</description>
      <reference>PCI DSS v3.2 Requirements 2.3 and 10</reference>
      <reference>https://www.pcisecuritystandards.org</reference>
      <platform idref="cpe:/o:centos:centos:7" />
      <platform idref="cpe:/o:oracle:linux:7" />
      <platform idref="cpe:/o:redhat:enterprise_linux:7" />
      <ident system="www.unifiedcompliance.com">UCF CC ID 01528</ident>
      <ident system="www.unifiedcompliance.com">UCF CC ID 05998</ident>
      <ident system="www.unifiedcompliance.com">UCF CC ID 05371</ident>
      <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
        <check-export value-id="WhatIsTheRequiredUserIDOfTheFileOwner_var51" export-name="oval:com.mcafee.oval:var:80228" />
        <check-content-ref href="" name="oval:com.mcafee.oval:def:92691" />
      </check>
    </Rule>
  </Group>
  <Group id="OperatingSystemAndSoftwarePrograms" xml:lang="en">
    <title xml:lang="en">Operating System and Software programs</title>
    <Value id="ExpectedOSReleaseForEg.3.10.0-123.8.1.el7.x86_64_ItShouldBeInRegexFormat.3.10.0-123.9.1.el7.x86_64__var" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">^3\.10\.0\-514\.16\.1\.el7\.x86\_64$</value>
    </Value>
    <Value id="EnterTheNameOfTheRPMPackageToBeVerified._var6" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">grub2</value>
    </Value>
    <Rule id="UseTheLatestOperatingSystemRelease" xml:lang="en" selected="false">
      <title xml:lang="en">Use the Latest Operating System Release</title>
      <description xml:lang="en">Periodically, Red Hat, CentOS and Oracle Linux releases updates to their operating system to support new hardware platforms, deliver new functionality as well as the bundle together a set of patches that can be tested as a unit. This rule will verify that latest OS release has been installed.</description>
      <reference>PCI DSS v3.2 Requirements 2</reference>
      <reference>https://www.pcisecuritystandards.org</reference>
      <platform idref="cpe:/o:centos:centos:7" />
      <platform idref="cpe:/o:oracle:linux:7" />
      <platform idref="cpe:/o:redhat:enterprise_linux:7" />
      <ident system="www.unifiedcompliance.com">UCF CC ID 00897</ident>
      <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
        <check-export value-id="ExpectedOSReleaseForEg.3.10.0-123.8.1.el7.x86_64_ItShouldBeInRegexFormat.3.10.0-123.9.1.el7.x86_64__var" export-name="oval:com.mcafee.oval:var:634948" />
        <check-content-ref href="" name="oval:com.mcafee.oval:def:634944" />
      </check>
    </Rule>
    <Rule id="TestIfAppropriateBootLoaderIsInstalled" xml:lang="en" selected="false">
      <title xml:lang="en">Test if appropriate boot loader is installed</title>
      <description xml:lang="en">This rule ensures that grub2 boot loader is installed on the system.</description>
      <reference>PCI DSS v3.2 Requirements 2.1.1</reference>
      <reference>https://www.pcisecuritystandards.org</reference>
      <platform idref="cpe:/o:centos:centos:7" />
      <platform idref="cpe:/o:oracle:linux:7" />
      <platform idref="cpe:/o:redhat:enterprise_linux:7" />
      <ident system="www.unifiedcompliance.com">UCF CC ID 04900</ident>
      <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
        <check-export value-id="EnterTheNameOfTheRPMPackageToBeVerified._var6" export-name="oval:com.mcafee.oval:var:242779" />
        <check-content-ref href="" name="oval:com.mcafee.oval:def:244340" />
      </check>
    </Rule>
  </Group>
  <Group id="ConfigureUserAccounts" xml:lang="en">
    <title xml:lang="en">Configure user accounts</title>
    <Value id="WhatIsTheRootAccountHomeDirectoryPath_var" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">/root</value>
    </Value>
    <Value id="WhatIsTheRequiredGroupIDForTheRootAccount_var" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">0</value>
    </Value>
    <Value id="ShouldOthersHaveWRITEAccess_var329" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">0</value>
    </Value>
    <Value id="ShouldOthersHaveEXECUTEAccess_var329" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">0</value>
    </Value>
    <Value id="ShouldOthersHaveREADAccess_var329" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">1</value>
    </Value>
    <Value id="ShouldTheUserHaveEXECUTEAccess_var329" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">0</value>
    </Value>
    <Value id="ShouldTheUserHaveREADAccess_var329" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">1</value>
    </Value>
    <Value id="ShouldTheUserHaveWRITEAccess_var329" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">1</value>
    </Value>
    <Value id="ShouldTheGroupHaveWRITEAccess_var329" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">0</value>
    </Value>
    <Value id="ShouldTheGroupHaveREADAccess_var329" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">1</value>
    </Value>
    <Value id="ShouldTheGroupHaveEXECUTEAccess_var329" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">0</value>
    </Value>
    <Value id="WhatShouldBeTheUmaskValue_var1" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">077</value>
    </Value>
    <Rule id="DisableSystemAccounts" xml:lang="en" selected="false">
      <title xml:lang="en">Disable System Accounts</title>
      <description xml:lang="en">There are a number of accounts provided with the Red Hat that are used to manage applications and are not intended to provide an interactive shell. This script verifies for those accounts that have been locked are prohibited from running commands on the system.</description>
      <reference>PCI DSS v3.2 Requirements 2.1</reference>
      <reference>https://www.pcisecuritystandards.org</reference>
      <platform idref="cpe:/o:centos:centos:7" />
      <platform idref="cpe:/o:oracle:linux:7" />
      <platform idref="cpe:/o:redhat:enterprise_linux:7" />
      <ident system="www.unifiedcompliance.com">UCF CC ID 01539</ident>
      <ident system="www.unifiedcompliance.com">UCF CC ID 12479</ident>
      <check system="http://www.mcafee.com/xccdf/script/1.0">
        <check-content>/bin/sh
30
          #!/bin/sh
          cmd_output=`egrep -v "^\+" /etc/passwd | awk -F: '($1!="root" &amp;&amp; $1!="sync" &amp;&amp; $1!="shutdown" &amp;amp;&amp;amp; $1!="halt" &amp;&amp; $3&amp;lt;1000 &amp;&amp; $7!="/sbin/nologin") {print}'`
          
          if [ -n "$cmd_output" ]
          then
          exit 1
          fi</check-content>
      </check>
    </Rule>
    <Rule id="SetDefaultGroupForRootAccount" xml:lang="en" selected="false">
      <title xml:lang="en">Set Default Group for root Account</title>
      <description xml:lang="en">The usermod command can be used to specify which group the root user belongs to. This affects permissions of files that are created by the root user. This check verifies if the group owner of the root account is set as per the user input.</description>
      <reference>PCI DSS v3.2 Requirements 2.3</reference>
      <reference>https://www.pcisecuritystandards.org</reference>
      <platform idref="cpe:/o:centos:centos:7" />
      <platform idref="cpe:/o:oracle:linux:7" />
      <platform idref="cpe:/o:redhat:enterprise_linux:7" />
      <ident system="www.unifiedcompliance.com">UCF CC ID 01586</ident>
      <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
        <check-export value-id="WhatIsTheRequiredGroupIDForTheRootAccount_var" export-name="oval:com.mcafee.oval:var:231047" />
        <check-content-ref href="" name="oval:com.mcafee.oval:def:230890" />
      </check>
    </Rule>
    <Rule id="VerifyNoUID0AccountsExistOtherThanRoot" xml:lang="en" selected="false">
      <title xml:lang="en">Verify No UID 0 Accounts Exist Other Than root</title>
      <description xml:lang="en">Any account with UID 0 has superuser privileges on the system. This check verifies if root account is the only account with UID
        zero. This also ensures that non-root users have UID other than 0.</description>
      <reference>PCI DSS v3.2 Requirements 2.1</reference>
      <reference>https://www.pcisecuritystandards.org</reference>
      <platform idref="cpe:/o:centos:centos:7" />
      <platform idref="cpe:/o:oracle:linux:7" />
      <platform idref="cpe:/o:redhat:enterprise_linux:7" />
      <ident system="www.unifiedcompliance.com">UCF CC ID 01585</ident>
      <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
        <check-content-ref href="" name="oval:com.mcafee.oval:def:6835" />
      </check>
    </Rule>
    <Rule id="VerifyNoLegacy_EntriesExistIn_Etc_shadowFile" xml:lang="en" selected="false">
      <title xml:lang="en">Verify No Legacy "+" Entries Exist in /etc/shadow File</title>
      <description xml:lang="en">The character + in various files used to be markers for systems to insert data from NIS maps at a certain point in a system configuration file. These entries are no longer required on RHEL7 systems, but may exist in files that have been imported from other platforms. This check will verify if the Access control files contain a plus sign (+) - /etc/shadow.</description>
      <reference>PCI DSS v3.2 Requirements 2</reference>
      <reference>https://www.pcisecuritystandards.org</reference>
      <platform idref="cpe:/o:centos:centos:7" />
      <platform idref="cpe:/o:oracle:linux:7" />
      <platform idref="cpe:/o:redhat:enterprise_linux:7" />
      <ident system="www.unifiedcompliance.com">UCF CC ID 01584</ident>
      <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
        <check-content-ref href="" name="oval:com.mcafee.oval:def:50671" />
      </check>
    </Rule>
    <Rule id="VerifyNoLegacy_EntriesExistIn_Etc_groupFile" xml:lang="en" selected="false">
      <title xml:lang="en">Verify No Legacy "+" Entries Exist in /etc/group File</title>
      <description xml:lang="en">The character + in various files used to be markers for systems to insert data from NIS maps at a certain point in a system configuration file. These entries are no longer required on RHEL7 systems, but may exist in files that have been imported from other platforms. This check will verify if the Access control files contain a plus sign (+) - /etc/group.</description>
      <reference>PCI DSS v3.2 Requirements 2</reference>
      <reference>https://www.pcisecuritystandards.org</reference>
      <platform idref="cpe:/o:centos:centos:7" />
      <platform idref="cpe:/o:oracle:linux:7" />
      <platform idref="cpe:/o:redhat:enterprise_linux:7" />
      <ident system="www.unifiedcompliance.com">UCF CC ID 01584</ident>
      <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
        <check-content-ref href="" name="oval:com.mcafee.oval:def:50676" />
      </check>
    </Rule>
    <Rule id="EnsurePasswordFieldsAreNotEmpty" xml:lang="en" selected="false">
      <title xml:lang="en">Ensure Password Fields are Not Empty</title>
      <description xml:lang="en">An account with an empty password field means that anybody may log in as that user without providing a password. This check ensures that there are no user accounts with empty
        password fields.</description>
      <reference>PCI DSS v3.2 Requirements 2</reference>
      <reference>https://www.pcisecuritystandards.org</reference>
      <platform idref="cpe:/o:centos:centos:7" />
      <platform idref="cpe:/o:oracle:linux:7" />
      <platform idref="cpe:/o:redhat:enterprise_linux:7" />
      <ident system="www.unifiedcompliance.com">UCF CC ID 01579</ident>
      <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
        <check-content-ref href="" name="oval:com.mcafee.oval:def:238498" />
      </check>
    </Rule>
    <Rule id="CheckUserDotFilePermissions" xml:lang="en" selected="false">
      <title xml:lang="en">Check User Dot File Permissions</title>
      <description xml:lang="en">While the system administrator can establish secure permissions for users' "dot" files, the users can easily override these. This checks verifies the file permissions of all the netrc files in the home directories of all the accounts other than root, sync, shutdown and halt and home directories of the accounts whose login shell is not equal to
        /sbin/nologin.</description>
      <reference>PCI DSS v3.2 Requirements 2</reference>
      <reference>https://www.pcisecuritystandards.org</reference>
      <platform idref="cpe:/o:centos:centos:7" />
      <platform idref="cpe:/o:oracle:linux:7" />
      <platform idref="cpe:/o:redhat:enterprise_linux:7" />
      <ident system="www.unifiedcompliance.com">UCF CC ID 01589</ident>
      <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
        <check-export value-id="ShouldTheUserHaveREADAccess_var329" export-name="oval:com.mcafee.oval:var:78640" />
        <check-export value-id="ShouldTheUserHaveWRITEAccess_var329" export-name="oval:com.mcafee.oval:var:78641" />
        <check-export value-id="ShouldTheUserHaveEXECUTEAccess_var329" export-name="oval:com.mcafee.oval:var:78642" />
        <check-export value-id="ShouldTheGroupHaveREADAccess_var329" export-name="oval:com.mcafee.oval:var:78643" />
        <check-export value-id="ShouldTheGroupHaveWRITEAccess_var329" export-name="oval:com.mcafee.oval:var:78644" />
        <check-export value-id="ShouldTheGroupHaveEXECUTEAccess_var329" export-name="oval:com.mcafee.oval:var:78645" />
        <check-export value-id="ShouldOthersHaveREADAccess_var329" export-name="oval:com.mcafee.oval:var:78646" />
        <check-export value-id="ShouldOthersHaveWRITEAccess_var329" export-name="oval:com.mcafee.oval:var:78647" />
        <check-export value-id="ShouldOthersHaveEXECUTEAccess_var329" export-name="oval:com.mcafee.oval:var:78648" />
        <check-content-ref href="" name="oval:com.mcafee.oval:def:246602" />
      </check>
    </Rule>
    <Rule id="CheckForPresenceOfUser.netrcFiles" xml:lang="en" selected="false">
      <title xml:lang="en">Check for Presence of User .netrc Files</title>
      <description xml:lang="en">The .netrc file contains data for logging into a remote host for file transfers via FTP. This check ensures that dot-netrc (.netrc) files does not exist in any users home directories.</description>
      <reference>PCI DSS v3.2 Requirements 2</reference>
      <reference>https://www.pcisecuritystandards.org</reference>
      <platform idref="cpe:/o:centos:centos:7" />
      <platform idref="cpe:/o:oracle:linux:7" />
      <platform idref="cpe:/o:redhat:enterprise_linux:7" />
      <ident system="www.unifiedcompliance.com">UCF CC ID 01590</ident>
      <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
        <check-content-ref href="" name="oval:com.mcafee.oval:def:246542" />
      </check>
    </Rule>
    <Rule id="SetDefaultUmaskForUsers_AllTheFilesIn_Etc_profile.dDirectory" xml:lang="en" selected="false">
      <title xml:lang="en">Set Default umask for Users - all the files in /etc/profile.d directory</title>
      <description xml:lang="en">The default umask determines the permissions of files created by users. The user creating the file has the discretion of making their files and directories readable by others via the chmod command. Users who wish to allow their files and directories to be readable by others by default may choose a different default umask by inserting the umask command into the standard shell configuration files (.profile, .cshrc, etc.) in their home directories. This check verifies if the default umask is set for users in all the files in /etc/profile.d directory as per the user input.</description>
      <reference>PCI DSS v3.2 Requirements 2</reference>
      <reference>https://www.pcisecuritystandards.org</reference>
      <platform idref="cpe:/o:centos:centos:7" />
      <platform idref="cpe:/o:oracle:linux:7" />
      <platform idref="cpe:/o:redhat:enterprise_linux:7" />
      <ident system="www.unifiedcompliance.com">UCF CC ID 01591</ident>
      <ident system="www.unifiedcompliance.com">UCF CC ID 05580</ident>
      <ident system="www.unifiedcompliance.com">UCF CC ID 05582</ident>
      <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
        <check-export value-id="WhatShouldBeTheUmaskValue_var1" export-name="oval:com.mcafee.oval:var:98454" />
        <check-content-ref href="" name="oval:com.mcafee.oval:def:919582" />
      </check>
    </Rule>
    <Rule id="Configuration-MesgNIsSetAsDefaultForAllUsers" xml:lang="en" selected="false">
      <title xml:lang="en">Configuration - mesg n is set as default for all users</title>
      <description xml:lang="en">This check will verify that "mesg n" is set as default for all the users in /etc/.login. if not set, it is a finding.</description>
      <reference>PCI DSS v3.2 Requirements 2</reference>
      <reference>https://www.pcisecuritystandards.org</reference>
      <platform idref="cpe:/o:centos:centos:7" />
      <platform idref="cpe:/o:oracle:linux:7" />
      <platform idref="cpe:/o:redhat:enterprise_linux:7" />
      <ident system="www.unifiedcompliance.com">UCF CC ID 01593</ident>
      <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
        <check-content-ref href="" name="oval:com.mcafee.oval:def:231803" />
      </check>
    </Rule>
    <Rule id="RestrictAccessToTheSuCommand_LimitAccessToTheRootAccountFromSu" xml:lang="en" selected="false">
      <title xml:lang="en">Restrict Access to the su Command - Limit access to the root account from su</title>
      <description xml:lang="en">This check verifies for the pam_wheel.so statement in /etc/pam.d/su file. By uncommenting the pam_wheel.so statement in /etc/pam.d/su, the su command will only allow users in the wheel group to execute su.</description>
      <reference>PCI DSS v3.2 Requirements 2</reference>
      <reference>https://www.pcisecuritystandards.org</reference>
      <platform idref="cpe:/o:centos:centos:7" />
      <platform idref="cpe:/o:oracle:linux:7" />
      <platform idref="cpe:/o:redhat:enterprise_linux:7" />
      <ident system="www.unifiedcompliance.com">UCF CC ID 01595</ident>
      <ident system="www.unifiedcompliance.com">UCF CC ID 08797</ident>
      <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
        <check-content-ref href="" name="oval:com.mcafee.oval:def:50114" />
      </check>
    </Rule>
    <Rule id="CheckThatUsersAreAssignedValidHomeDirectories" xml:lang="en" selected="false">
      <title xml:lang="en">Check That Users Are Assigned Valid Home Directories</title>
      <description xml:lang="en">Users can be defined in /etc/passwd without a home directory or with a home directory does not actually exist. This checks verifies that all the non-system accounts have home
        directories defined and they exist on the system.</description>
      <reference>PCI DSS v3.2 Requirements 2</reference>
      <reference>https://www.pcisecuritystandards.org</reference>
      <platform idref="cpe:/o:centos:centos:7" />
      <platform idref="cpe:/o:oracle:linux:7" />
      <platform idref="cpe:/o:redhat:enterprise_linux:7" />
      <ident system="www.unifiedcompliance.com">UCF CC ID 06018</ident>
      <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
        <check-content-ref href="" name="oval:com.mcafee.oval:def:246577" />
      </check>
    </Rule>
    <Rule id="CheckThatReservedUIDsAreAssignedToSystemAccounts" xml:lang="en" selected="false">
      <title xml:lang="en">Check That Reserved UIDs Are Assigned to System Accounts</title>
      <description xml:lang="en">Traditionally, UNIX systems establish "reserved" UIDs (0-999 range) that are intended for system accounts. This check verifies that reserved UIDs (0-999 range) are
        assigned to only system (default) accounts.</description>
      <reference>PCI DSS v3.2 Requirements 10</reference>
      <reference>https://www.pcisecuritystandards.org</reference>
      <platform idref="cpe:/o:centos:centos:7" />
      <platform idref="cpe:/o:oracle:linux:7" />
      <platform idref="cpe:/o:redhat:enterprise_linux:7" />
      <ident system="www.unifiedcompliance.com">UCF CC ID 09955</ident>
      <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
        <check-content-ref href="" name="oval:com.mcafee.oval:def:1385074" />
      </check>
    </Rule>
    <Rule id="VerifyThatAHomeDirectoryHasBeenEstablishedForRoot" xml:lang="en" selected="false">
      <title xml:lang="en">Verify that a home directory has been established for root</title>
      <description xml:lang="en">This check verifies if root user is assigned home directory.</description>
      <reference>PCI DSS v3.2 Requirements 2.3</reference>
      <reference>https://www.pcisecuritystandards.org</reference>
      <platform idref="cpe:/o:centos:centos:7" />
      <platform idref="cpe:/o:oracle:linux:7" />
      <platform idref="cpe:/o:redhat:enterprise_linux:7" />
      <ident system="www.unifiedcompliance.com">UCF CC ID 06017</ident>
      <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
        <check-export value-id="WhatIsTheRootAccountHomeDirectoryPath_var" export-name="oval:com.mcafee.oval:var:1126575" />
        <check-content-ref href="" name="oval:com.mcafee.oval:def:1126571" />
      </check>
    </Rule>
    <Rule id="Configuration_RootAccountShouldBeDisabled" xml:lang="en" selected="false">
      <title xml:lang="en">Configuration - root account should be disabled</title>
      <description xml:lang="en">This check will verify that root account is disabled or not in /etc/passwd file</description>
      <reference>PCI DSS v3.2 Requirements 8</reference>
      <reference>https://www.pcisecuritystandards.org</reference>
      <platform idref="cpe:/o:centos:centos:7" />
      <platform idref="cpe:/o:oracle:linux:7" />
      <platform idref="cpe:/o:redhat:enterprise_linux:7" />
      <ident system="www.unifiedcompliance.com">UCF CC ID 01582</ident>
      <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
        <check-content-ref href="" name="oval:com.mcafee.oval:def:2487546" />
      </check>
    </Rule>
    <Rule id="Configuration_LimitRootLoginToTheLocalConsole" xml:lang="en" selected="false">
      <title xml:lang="en">Configuration - Limit root login to the local console</title>
      <description xml:lang="en">The root account can be directly logged into from somewhere other than the system console</description>
      <reference>PCI DSS v3.2 Requirements 8</reference>
      <reference>https://www.pcisecuritystandards.org</reference>
      <platform idref="cpe:/o:centos:centos:7" />
      <platform idref="cpe:/o:oracle:linux:7" />
      <platform idref="cpe:/o:redhat:enterprise_linux:7" />
      <ident system="www.unifiedcompliance.com">UCF CC ID 01573</ident>
      <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
        <check-content-ref href="" name="oval:com.mcafee.oval:def:7026" />
      </check>
    </Rule>
  </Group>
  <Group id="NetworkSettings" xml:lang="en">
    <title xml:lang="en">Network Settings</title>
    <Value id="Icmp_echo_ignore_broadcastsShouldBeEnabledOrDisabled_var" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">1</value>
    </Value>
    <Value id="All.accept_source_routeShouldBeEnabledOrDisabled_var" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">0</value>
    </Value>
    <Value id="Default.accept_source_routeShouldBeEnabledOrDisabled_var" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">0</value>
    </Value>
    <Value id="All.accept_source_routeShouldBeEnabledOrDisabled_var0" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">0</value>
    </Value>
    <Value id="All.accept_source_routeShouldBeEnabledOrDisabled_var1" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">0</value>
    </Value>
    <Rule id="DisableDCCP" xml:lang="en" selected="false">
      <title xml:lang="en">Disable DCCP</title>
      <description xml:lang="en">The Datagram Congestion Control Protocol (DCCP) is a transport layer protocol that supports streaming media and telephony. DCCP provides a way to gain access to congestion control, without having to do it at the application layer, but does not provide in-sequence delivery. This rule will verify that DCCP is disabled on the system.</description>
      <reference>PCI DSS v3.2 Requirements 1</reference>
      <reference>https://www.pcisecuritystandards.org</reference>
      <platform idref="cpe:/o:centos:centos:7" />
      <platform idref="cpe:/o:oracle:linux:7" />
      <platform idref="cpe:/o:redhat:enterprise_linux:7" />
      <ident system="www.unifiedcompliance.com">UCF CC ID 08781</ident>
      <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
        <check-content-ref href="" name="oval:com.mcafee.oval:def:402664" />
      </check>
    </Rule>
    <Rule id="DisableSCTP" xml:lang="en" selected="false">
      <title xml:lang="en">Disable SCTP</title>
      <description xml:lang="en">The Stream Control Transmission Protocol (SCTP) is a transport layer protocol used to support message oriented communication, with several streams of messages in one connection. It serves a similar function as TCP and UDP, incorporating features of both. It is message-oriented like UDP, and ensures reliable in-sequence transport of messages with congestion control like TCP. This rule will verify that SCTP is disabled on the system.</description>
      <reference>PCI DSS v3.2 Requirements 1</reference>
      <reference>https://www.pcisecuritystandards.org</reference>
      <platform idref="cpe:/o:centos:centos:7" />
      <platform idref="cpe:/o:oracle:linux:7" />
      <platform idref="cpe:/o:redhat:enterprise_linux:7" />
      <ident system="www.unifiedcompliance.com">UCF CC ID 08782</ident>
      <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
        <check-content-ref href="" name="oval:com.mcafee.oval:def:402665" />
      </check>
    </Rule>
    <Rule id="DisableRDS" xml:lang="en" selected="false">
      <title xml:lang="en">Disable RDS</title>
      <description xml:lang="en">The Reliable Datagram Sockets (RDS) protocol is a transport layer protocol designed to provide low-latency, high-bandwidth communications between cluster nodes. It was developed by the Oracle Corporation. This rule will verify that RDS is disabled on the system.</description>
      <reference>PCI DSS v3.2 Requirements 1</reference>
      <reference>https://www.pcisecuritystandards.org</reference>
      <platform idref="cpe:/o:centos:centos:7" />
      <platform idref="cpe:/o:oracle:linux:7" />
      <platform idref="cpe:/o:redhat:enterprise_linux:7" />
      <ident system="www.unifiedcompliance.com">UCF CC ID 08783</ident>
      <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
        <check-content-ref href="" name="oval:com.mcafee.oval:def:402666" />
      </check>
    </Rule>
    <Rule id="DisableTIPC" xml:lang="en" selected="false">
      <title xml:lang="en">Disable TIPC</title>
      <description xml:lang="en">The Transparent Inter-Process Communication (TIPC) protocol is designed to provide communication between cluster nodes. This rule will verify that TIPC is disabled on the system.</description>
      <reference>PCI DSS v3.2 Requirements 1</reference>
      <reference>https://www.pcisecuritystandards.org</reference>
      <platform idref="cpe:/o:centos:centos:7" />
      <platform idref="cpe:/o:oracle:linux:7" />
      <platform idref="cpe:/o:redhat:enterprise_linux:7" />
      <ident system="www.unifiedcompliance.com">UCF CC ID 08784</ident>
      <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
        <check-content-ref href="" name="oval:com.mcafee.oval:def:402667" />
      </check>
    </Rule>
    <Rule id="DisableAvahiServer-RemoveZeroconf" xml:lang="en" selected="false">
      <title xml:lang="en">Remove zeroconf</title>
      <description xml:lang="en">zeroconf route during system boot should be disabled in the
        /etc/sysconfig/network file.</description>
      <reference>PCI DSS v3.2 Requirements 1</reference>
      <reference>https://www.pcisecuritystandards.org</reference>
      <platform idref="cpe:/o:centos:centos:7" />
      <platform idref="cpe:/o:oracle:linux:7" />
      <platform idref="cpe:/o:redhat:enterprise_linux:7" />
      <ident system="www.unifiedcompliance.com">UCF CC ID 08786</ident>
      <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
        <check-content-ref href="" name="oval:com.mcafee.oval:def:245566" />
      </check>
    </Rule>
    <Rule id="DisableIPv6RouterAdvertisements_Net.ipv6.conf.default.accept_ra" xml:lang="en" selected="false">
      <title xml:lang="en">Disable IPv6 Router Advertisements - net.ipv6.conf.default.accept_ra</title>
      <description xml:lang="en">This setting disables the systems ability to accept router advertisements. This rule verifies the enable/disable status for net.ipv6.conf.default.accept_ra.</description>
      <reference>PCI DSS v3.2 Requirements 1</reference>
      <reference>https://www.pcisecuritystandards.org</reference>
      <platform idref="cpe:/o:centos:centos:7" />
      <platform idref="cpe:/o:oracle:linux:7" />
      <platform idref="cpe:/o:redhat:enterprise_linux:7" />
      <ident system="www.unifiedcompliance.com">UCF CC ID 05732</ident>
      <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
        <check-export value-id="All.accept_source_routeShouldBeEnabledOrDisabled_var0" export-name="oval:com.mcafee.oval:var:79408" />
        <check-content-ref href="" name="oval:com.mcafee.oval:def:248527" />
      </check>
    </Rule>
    <Rule id="DisableIPv6RouterAdvertisements_net.ipv6.conf.all.accept_ra" xml:lang="en" selected="false">
      <title xml:lang="en">Disable IPv6 Router Advertisements -net.ipv6.conf.all.accept_ra</title>
      <description xml:lang="en">This setting disables the systems ability to accept router advertisements. This rule verifies the enable/disable status for net.ipv6.conf.all.accept_ra.</description>
      <reference>PCI DSS v3.2 Requirements 1</reference>
      <reference>https://www.pcisecuritystandards.org</reference>
      <platform idref="cpe:/o:centos:centos:7" />
      <platform idref="cpe:/o:oracle:linux:7" />
      <platform idref="cpe:/o:redhat:enterprise_linux:7" />
      <ident system="www.unifiedcompliance.com">UCF CC ID 05732</ident>
      <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
        <check-export value-id="All.accept_source_routeShouldBeEnabledOrDisabled_var1" export-name="oval:com.mcafee.oval:var:79408" />
        <check-content-ref href="" name="oval:com.mcafee.oval:def:248533" />
      </check>
    </Rule>
    <Rule id="EnableIgnoreBroadcastRequests_Net.ipv4.icmp_echo_ignore_broadcasts" xml:lang="en" selected="false">
      <title xml:lang="en">Enable Ignore Broadcast Requests - net.ipv4.icmp_echo_ignore_broadcasts</title>
      <description xml:lang="en">Setting net.ipv4.icmp_echo_ignore_broadcasts to 1 will cause the system to ignore all ICMP echo and timestamp requests to broadcast and multicast addresses. This rule will verify the enable / disable status for net.ipv4.icmp_echo_ignore_broadcasts.</description>
      <reference>PCI DSS v3.2 Requirements 1</reference>
      <reference>https://www.pcisecuritystandards.org</reference>
      <platform idref="cpe:/o:centos:centos:7" />
      <platform idref="cpe:/o:oracle:linux:7" />
      <platform idref="cpe:/o:redhat:enterprise_linux:7" />
      <ident system="www.unifiedcompliance.com">UCF CC ID 05740</ident>
      <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
        <check-export value-id="Icmp_echo_ignore_broadcastsShouldBeEnabledOrDisabled_var" export-name="oval:com.mcafee.oval:var:79413" />
        <check-content-ref href="" name="oval:com.mcafee.oval:def:200803030108" />
      </check>
    </Rule>
    <Rule id="DisableSourceRoutedPacketAcceptance_Net.ipv4.conf.all.accept_source_route" xml:lang="en" selected="false">
      <title xml:lang="en">Disable Source Routed Packet Acceptance - net.ipv4.conf.all.accept_source_route</title>
      <description xml:lang="en">In networking, source routing allows a sender to partially or fully specify the route packets take through a network. In contrast, non-source routed packets travel a path determined by routers in the network. In some cases, systems may not be routable or reachable from some locations (e.g. private addresses vs. Internet routable), and so source routed packets would need to be used. This rule verifies the enable / disable status for net.ipv4.conf.all.accept_source_route.</description>
      <reference>PCI DSS v3.2 Requirements 1</reference>
      <reference>https://www.pcisecuritystandards.org</reference>
      <platform idref="cpe:/o:centos:centos:7" />
      <platform idref="cpe:/o:oracle:linux:7" />
      <platform idref="cpe:/o:redhat:enterprise_linux:7" />
      <ident system="www.unifiedcompliance.com">UCF CC ID 08977</ident>
      <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
        <check-export value-id="All.accept_source_routeShouldBeEnabledOrDisabled_var" export-name="oval:com.mcafee.oval:var:79408" />
        <check-content-ref href="" name="oval:com.mcafee.oval:def:79005" />
      </check>
    </Rule>
    <Rule id="DisableSourceRoutedPacketAcceptance_Net.ipv4.conf.default.accept_source_route" xml:lang="en" selected="false">
      <title xml:lang="en">Disable Source Routed Packet Acceptance - net.ipv4.conf.default.accept_source_route</title>
      <description xml:lang="en">In networking, source routing allows a sender to partially or fully specify the route packets take through a network. In contrast, non-source routed packets travel a path determined by routers in the network. In some cases, systems may not be routable or reachable from some locations (e.g. private addresses vs. Internet routable), and so source routed packets would need to be used. This rule verifies the enable / disable status for net.ipv4.conf.default.accept_source_route.</description>
      <reference>PCI DSS v3.2 Requirements 1</reference>
      <reference>https://www.pcisecuritystandards.org</reference>
      <platform idref="cpe:/o:centos:centos:7" />
      <platform idref="cpe:/o:oracle:linux:7" />
      <platform idref="cpe:/o:redhat:enterprise_linux:7" />
      <ident system="www.unifiedcompliance.com">UCF CC ID 08977</ident>
      <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
        <check-export value-id="Default.accept_source_routeShouldBeEnabledOrDisabled_var" export-name="oval:com.mcafee.oval:var:79407" />
        <check-content-ref href="" name="oval:com.mcafee.oval:def:50612" />
      </check>
    </Rule>
  </Group>
  <Group id="ConfigureSystemAccounting_Auditd_" xml:lang="en">
    <title xml:lang="en">Configure System Accounting (auditd)</title>
    <Value id="EnterTheValueToCheckWhetherAuditLogsAreRetained-Max_log_file_action_var" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">KEEP_LOGS</value>
    </Value>
    <Value id="EnterTheValueFor-Admin_space_left_action_var" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">halt</value>
    </Value>
    <Value id="EnterTheValidEmailAddressaliasForAction_mail_acct_defaultIsRoot__var" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">root</value>
    </Value>
    <Value id="EnterTheValueForSpace_left_actionParameter_var" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">halt</value>
    </Value>
    <Value id="EnterTheValueForMaximumSizeOfTheAuditLogFile-Max_log_file_var" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">20</value>
    </Value>
    <Value id="WhatIsTheRequiredUserIDOfTheFileOwner_var155" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">0</value>
    </Value>
    <Value id="WhatIsTheRequiredGroupIDOfTheFileOwner_var155" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">0</value>
    </Value>
    <Value id="ShouldOthersHaveWRITEAccess_var889" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">0</value>
    </Value>
    <Value id="ShouldOthersHaveEXECUTEAccess_var889" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">0</value>
    </Value>
    <Value id="ShouldOthersHaveREADAccess_var889" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">0</value>
    </Value>
    <Value id="ShouldTheUserHaveEXECUTEAccess_var889" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">0</value>
    </Value>
    <Value id="ShouldTheUserHaveREADAccess_var889" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">1</value>
    </Value>
    <Value id="ShouldTheUserHaveWRITEAccess_var889" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">1</value>
    </Value>
    <Value id="ShouldTheGroupHaveWRITEAccess_var889" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">0</value>
    </Value>
    <Value id="ShouldTheGroupHaveREADAccess_var889" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">0</value>
    </Value>
    <Value id="ShouldTheGroupHaveEXECUTEAccess_var889" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">0</value>
    </Value>
    <Value id="Net.ipv4.conf.default.log_martiansShouldBeEnabledOrDisabled_var" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">1</value>
    </Value>
    <Value id="All.log_martiansShouldBeEnabledOrDisabled_var" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">1</value>
    </Value>
    <Value id="Log_ftp_protocolShouldBeEnabledOrDisabled_var" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">YES</value>
    </Value>
    <Value id="WhatIsTheRequiredGroupIDOfTheFileOwner_var50" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">0</value>
    </Value>
    <Value id="WhatIsTheRequiredUserIDOfTheFileOwner_var50" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">0</value>
    </Value>
    <Value id="ShouldOthersHaveWRITEAccess_var70" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">0</value>
    </Value>
    <Value id="ShouldOthersHaveEXECUTEAccess_var70" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">0</value>
    </Value>
    <Value id="ShouldOthersHaveREADAccess_var70" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">0</value>
    </Value>
    <Value id="ShouldTheUserHaveEXECUTEAccess_var70" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">0</value>
    </Value>
    <Value id="ShouldTheUserHaveREADAccess_var70" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">1</value>
    </Value>
    <Value id="ShouldTheUserHaveWRITEAccess_var70" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">1</value>
    </Value>
    <Value id="ShouldTheGroupHaveWRITEAccess_var70" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">0</value>
    </Value>
    <Value id="ShouldTheGroupHaveREADAccess_var70" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">0</value>
    </Value>
    <Value id="ShouldTheGroupHaveEXECUTEAccess_var70" xml:lang="en" type="string" operator="equals" interactive="false">
      <value selector="">0</value>
    </Value>
    <Rule id="EnableAuditingForProcessesThatStartPriorToAuditdIn_Boot_grub2_grub.cfg" xml:lang="en" selected="false">
      <title xml:lang="en">Enable Auditing for Processes That Start Prior to auditd in /boot/grub2/grub.cfg</title>
      <description xml:lang="en">Configure grub so that processes that are capable of being audited can be audited even if they start up prior to auditd startup. This check verifies if the argument audit=1 appears on each linux kernel line in /boot/grub2/grub.cfg file to ensure that the audit events need to be captured on processes that start up prior to auditd.</description>
      <reference>PCI DSS v3.2 Requirements 10</reference>
      <reference>https://www.pcisecuritystandards.org</reference>
      <platform idref="cpe:/o:centos:centos:7" />
      <platform idref="cpe:/o:oracle:linux:7" />
      <platform idref="cpe:/o:redhat:enterprise_linux:7" />
      <ident system="www.unifiedcompliance.com">UCF CC ID 09947</ident>
      <ident system="www.unifiedcompliance.com">UCF CC ID 01529</ident>
      <ident system="www.unifiedcompliance.com">UCF CC ID 06332</ident>
      <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
        <check-content-ref href="" name="oval:com.mcafee.oval:def:909805" />
      </check>
    </Rule>
    <Rule id="EnableAuditingForProcessesThatStartPriorToAuditdIn_Etc_default_grub" xml:lang="en" selected="false">
      <title xml:lang="en">Enable Auditing for Processes That Start Prior to auditd in /etc/default/grub</title>
      <description xml:lang="en">Configure grub so that processes that are capable of being audited can be audited even if they start up prior to auditd startup. This check verifies that /etc/default/grub has audit=1 as part of GRUB_CMDLINE_LINUX.</description>
      <reference>PCI DSS v3.2 Requirements 10</reference>
      <reference>https://www.pcisecuritystandards.org</reference>
      <platform idref="cpe:/o:centos:centos:7" />
      <platform idref="cpe:/o:oracle:linux:7" />
      <platform idref="cpe:/o:redhat:enterprise_linux:7" />
      <ident system="www.unifiedcompliance.com">UCF CC ID 09947</ident>
      <ident system="www.unifiedcompliance.com">UCF CC ID 01529</ident>
      <ident system="www.unifiedcompliance.com">UCF CC ID 06332</ident>
      <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
        <check-content-ref href="" name="oval:com.mcafee.oval:def:909811" />
      </check>
    </Rule>
    <Rule id="RecordEventsThatModifyDateAndTimeInformation" xml:lang="en" selected="false">
      <title xml:lang="en">Record Events That Modify Date and Time Information</title>
      <description xml:lang="en">Capture events where the system date and/or time has been modified. The parameters in this section are set to determine if the adjtimex (tune kernel clock), settimeofday (Set time, using timeval and timezone structures) stime (using seconds since 1/1/1970) or clock_settime (allows for the setting of several internal clocks and timers) system calls have been executed and always write an audit record to the /var/log/audit.log file upon exit, tagging the records with the identifier "time-change". This check verifies for the time-change parameter in /etc/audit/audit.rules file to determine if events where the system date and/or time has been modified are captured.</description>
      <reference>PCI DSS v3.2 Requirements 10</reference>
      <reference>https://www.pcisecuritystandards.org</reference>
      <platform idref="cpe:/o:centos:centos:7" />
      <platform idref="cpe:/o:oracle:linux:7" />
      <platform idref="cpe:/o:redhat:enterprise_linux:7" />
      <ident system="www.unifiedcompliance.com">UCF CC ID 08750</ident>
      <ident system="www.unifiedcompliance.com">UCF CC ID 01529</ident>
      <ident system="www.unifiedcompliance.com">UCF CC ID 06423</ident>
      <ident system="www.unifiedcompliance.com">UCF CC ID 11608</ident>
      <ident system="www.unifiedcompliance.com">UCF CC ID 01336</ident>
      <ident system="www.unifiedcompliance.com">UCF CC ID 06332</ident>
      <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
        <check-content-ref href="" name="oval:com.mcafee.oval:def:402478" />
      </check>
    </Rule>
    <Rule id="RecordEventsThatModifyUser_GroupInformation" xml:lang="en" selected="false">
      <title xml:lang="en">Record Events That Modify User/Group Information</title>
      <description xml:lang="en">Record events affecting the group, passwd (user IDs), shadow and gshadow (passwords) or /etc/security/opasswd (old passwords, based on remember parameter in the PAM configuration) files. The parameters in this section will watch the files to see if they have been opened for write or have had attribute changes (e.g. permissions) and tag them with the identifier "identity" in the audit log file. This check verifies if the /etc/audit/audit.rules file is set with appropriate identity identifier to determine if events that modify user/group information are recorded.</description>
      <reference>PCI DSS v3.2 Requirements 10</reference>
      <reference>https://www.pcisecuritystandards.org</reference>
      <platform idref="cpe:/o:centos:centos:7" />
      <platform idref="cpe:/o:oracle:linux:7" />
      <platform idref="cpe:/o:redhat:enterprise_linux:7" />
      <ident system="www.unifiedcompliance.com">UCF CC ID 08751</ident>
      <ident system="www.unifiedcompliance.com">UCF CC ID 01529</ident>
      <ident system="www.unifiedcompliance.com">UCF CC ID 06423</ident>
      <ident system="www.unifiedcompliance.com">UCF CC ID 11968</ident>
      <ident system="www.unifiedcompliance.com">UCF CC ID 01334</ident>
      <ident system="www.unifiedcompliance.com">UCF CC ID 06332</ident>
      <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
        <check-content-ref href="" name="oval:com.mcafee.oval:def:249962" />
      </check>
    </Rule>
    <Rule id="RecordEventsThatModifyTheSystem_sNetworkEnvironment" xml:lang="en" selected="false">
      <title xml:lang="en">Record Events That Modify the System's Network Environment</title>
      <description xml:lang="en">Record changes to network environment files or system calls. The below parameters monitor the sethostname (set the system's host name) or setdomainname (set the system's domainname) system calls, and write an audit event on system call exit. The other parameters monitor the /etc/issue and /etc/issue.net files (messages displayed pre-login), /etc/hosts (file containing host names and associated IP addresses) and /etc/sysconfig/network (directory containing network interface scripts and configurations) files. This check verifies for the system-locale parameter in /etc/audit/audit.rules file to determine if events that modify the system's environment are recorded.</description>
      <reference>PCI DSS v3.2 Requirements 10</reference>
      <reference>https://www.pcisecuritystandards.org</reference>
      <platform idref="cpe:/o:centos:centos:7" />
      <platform idref="cpe:/o:oracle:linux:7" />
      <platform idref="cpe:/o:redhat:enterprise_linux:7" />
      <ident system="www.unifiedcompliance.com">UCF CC ID 08752</ident>
      <ident system="www.unifiedcompliance.com">UCF CC ID 01529</ident>
      <ident system="www.unifiedcompliance.com">UCF CC ID 06332</ident>
      <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
        <check-content-ref href="" name="oval:com.mcafee.oval:def:402512" />
      </check>
    </Rule>
    <Rule id="RecordEventsThatModifyTheSystem_sMandatoryAccessControls" xml:lang="en" selected="false">
      <title xml:lang="en">Record Events That Modify the System's Mandatory Access Controls</title>
      <description xml:lang="en">Monitor SELinux mandatory access controls. The parameters below monitor any write access (potential additional, deletion or modification of files in the directory) or attribute changes to the /etc/selinux directory. This check verifies if the MAC-policy is set appropriately in /etc/audit/audit.rules file to record the events that modify the system's mandatory access controls (i.e. any write access or attribute changes to the /etc/selinux directory).</description>
      <reference>PCI DSS v3.2 Requirements 10</reference>
      <reference>https://www.pcisecuritystandards.org</reference>
      <platform idref="cpe:/o:centos:centos:7" />
      <platform idref="cpe:/o:oracle:linux:7" />
      <platform idref="cpe:/o:redhat:enterprise_linux:7" />
      <ident system="www.unifiedcompliance.com">UCF CC ID 08753</ident>
      <ident system="www.unifiedcompliance.com">UCF CC ID 01529</ident>
      <ident system="www.unifiedcompliance.com">UCF CC ID 11968</ident>
      <ident system="www.unifiedcompliance.com">UCF CC ID 06332</ident>
      <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
        <check-content-ref href="" name="oval:com.mcafee.oval:def:249973" />
      </check>
    </Rule>
    <Rule id="CollectLoginAndLogoutEvents" xml:lang="en" selected="false">
      <title xml:lang="en">Collect Login and Logout Events</title>
      <description xml:lang="en">Monitor login and logout events. The parameters below track changes to files associated with login/logout events. The file /var/log/faillog tracks failed events from login. The file /var/log/lastlog maintain records of the last time a user successfully logged in. The file /var/log/btmp keeps track of failed login attempts and can be read by entering the command /usr/bin/last -f /var/log/btmp. All audit records will be tagged with the identifier "logins." This check verifies if the /etc/audit/audit.rules file is set with appropriate logins identifier to determine if login and logout events are recorded.</description>
      <reference>PCI DSS v3.2 Requirements 10</reference>
      <reference>https://www.pcisecuritystandards.org</reference>
      <platform idref="cpe:/o:centos:centos:7" />
      <platform idref="cpe:/o:oracle:linux:7" />
      <platform idref="cpe:/o:redhat:enterprise_linux:7" />
      <ident system="www.unifiedcompliance.com">UCF CC ID 08754</ident>
      <ident system="www.unifiedcompliance.com">UCF CC ID 01529</ident>
      <ident system="www.unifiedcompliance.com">UCF CC ID 01915</ident>
      <ident system="www.unifiedcompliance.com">UCF CC ID 06332</ident>
      <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
        <check-content-ref href="" name="oval:com.mcafee.oval:def:249976" />
      </check>
    </Rule>
    <Rule id="CollectSessionInitiationInformation" xml:lang="en" selected="false">
      <title xml:lang="en">Collect Session Initiation Information</title>
      <description xml:lang="en">Monitor session initiation events. The parameters in this section track changes to the files associated with session events. The file /var/run/utmp file tracks all currently logged in users. The /var/log/wtmp file tracks logins, logouts, shutdown and reboot events. All audit records will be tagged with the identifier "session." This check verifies if the /etc/audit/audit.rules file is set with appropriate session identifier to determine if session initiation information is collected.</description>
      <reference>PCI DSS v3.2 Requirements 10</reference>
      <reference>https://www.pcisecuritystandards.org</reference>
      <platform idref="cpe:/o:centos:centos:7" />
      <platform idref="cpe:/o:oracle:linux:7" />
      <platform idref="cpe:/o:redhat:enterprise_linux:7" />
      <ident system="www.unifiedcompliance.com">UCF CC ID 08755</ident>
      <ident system="www.unifiedcompliance.com">UCF CC ID 09948</ident>
      <ident system="www.unifiedcompliance.com">UCF CC ID 01529</ident>
      <ident system="www.unifiedcompliance.com">UCF CC ID 06332</ident>
      <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
        <check-content-ref href="" name="oval:com.mcafee.oval:def:249983" />
      </check>
    </Rule>
    <Rule id="CollectDiscretionaryAccessControlPermissionModificationEvents" xml:lang="en" selected="false">
      <title xml:lang="en">Collect Discretionary Access Control Permission Modification Events</title>
      <description xml:lang="en">Monitor changes to file permissions, attributes, ownership and group. The parameters in this section track changes for system calls that affect file permissions and attributes. The chmod, fchmod and fchmodat system calls affect the permissions associated with a file. The chown, fchown, fchownat and lchown system calls affect owner and group attributes on a file. The setxattr, lsetxattr, fsetxattr (set extended file attributes) and removexattr, lremovexattr, fremovexattr (remove extended file attributes) control extended file attributes. In all cases, an audit record will only be written for non-system userids (auid &gt;= 1000) and will ignore Daemon events (auid = 4294967295). All audit records will be tagged with the identifier "perm_mod." This check is to determine if permission modifications are being recorded files in /etc/audit/audit.rules file.</description>
      <reference>PCI DSS v3.2 Requirements 10</reference>
      <reference>https://www.pcisecuritystandards.org</reference>
      <platform idref="cpe:/o:centos:centos:7" />
      <platform idref="cpe:/o:oracle:linux:7" />
      <platform idref="cpe:/o:redhat:enterprise_linux:7" />
      <ident system="www.unifiedcompliance.com">UCF CC ID 08756</ident>
      <ident system="www.unifiedcompliance.com">UCF CC ID 09949</ident>
      <ident system="www.unifiedcompliance.com">UCF CC ID 01529</ident>
      <ident system="www.unifiedcompliance.com">UCF CC ID 11968</ident>
      <ident system="www.unifiedcompliance.com">UCF CC ID 06332</ident>
      <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
        <check-content-ref href="" name="oval:com.mcafee.oval:def:1385056" />
      </check>
    </Rule>
    <Rule id="CollectUnsuccessfulUnauthorizedAccessAttemptsToFiles" xml:lang="en" selected="false">
      <title xml:lang="en">Collect Unsuccessful Unauthorized Access Attempts to Files</title>
      <description xml:lang="en">Monitor for unsuccessful attempts to access files. The parameters below are associated with system calls that control creation (creat), opening (open, openat) and truncation (truncate, ftruncate) of files. An audit log record will only be written if the user is a non-privileged user (auid &gt; = 500), is not a Daemon event (auid=4294967295) and if the system call returned EACCES (permission denied to the file) or EPERM (some other permanent error associated with the specific system call). All audit records will be tagged with the identifier "access."This check is to determine if there are unsuccessful attempts to access files in /etc/audit/audit.rules file.</description>
      <reference>PCI DSS v3.2 Requirements 10</reference>
      <reference>https://www.pcisecuritystandards.org</reference>
      <platform idref="cpe:/o:centos:centos:7" />
      <platform idref="cpe:/o:oracle:linux:7" />
      <platform idref="cpe:/o:redhat:enterprise_linux:7" />
      <ident system="www.unifiedcompliance.com">UCF CC ID 08757</ident>
      <ident system="www.unifiedcompliance.com">UCF CC ID 00527</ident>
      <ident system="www.unifiedcompliance.com">UCF CC ID 01919</ident>
      <ident system="www.unifiedcompliance.com">UCF CC ID 01529</ident>
      <ident system="www.unifiedcompliance.com">UCF CC ID 11968</ident>
      <ident system="www.unifiedcompliance.com">UCF CC ID 06332</ident>
      <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
        <check-content-ref href="" name="oval:com.mcafee.oval:def:1385069" />
      </check>
    </Rule>
    <Rule id="CollectSuccessfulFileSystemMounts" xml:lang="en" selected="false">
      <title xml:lang="en">Collect Successful File System Mounts</title>
      <description xml:lang="en">Monitor the use of the mount system call. The mount (and umount) system call controls the mounting and unmounting of file systems. The parameters below configure the system to create an audit record when the mount system call is used by a non-privileged user. This check verifies for the mounts parameter in /etc/audit/audit.rules file to determine if filesystem mounts are recorded when the mount system call is used by a non-privileged user.</description>
      <reference>PCI DSS v3.2 Requirements 10</reference>
      <reference>https://www.pcisecuritystandards.org</reference>
      <platform idref="cpe:/o:centos:centos:7" />
      <platform idref="cpe:/o:oracle:linux:7" />
      <platform idref="cpe:/o:redhat:enterprise_linux:7" />
      <ident system="www.unifiedcompliance.com">UCF CC ID 09923</ident>
      <ident system="www.unifiedcompliance.com">UCF CC ID 01529</ident>
      <ident system="www.unifiedcompliance.com">UCF CC ID 06332</ident>
      <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
        <check-content-ref href="" name="oval:com.mcafee.oval:def:1385043" />
      </check>
    </Rule>
    <Rule id="CollectFileDeletionEventsByUser" xml:lang="en" selected="false">
      <title xml:lang="en">Collect File Deletion Events by User</title>
      <description xml:lang="en">Monitor the use of system calls associated with the deletion or renaming of files and file attributes. This configuration statement sets up monitoring for the unlink (remove a file), unlinkat (remove a file attribute), rename (rename a file) and renameat (rename a file attribute) system calls and tags them with the identifier "delete". This check is to determine if file deletion events by user are recorded in /etc/audit/audit.rules file.</description>
      <reference>PCI DSS v3.2 Requirements 10</reference>
      <reference>https://www.pcisecuritystandards.org</reference>
      <platform idref="cpe:/o:centos:centos:7" />
      <platform idref="cpe:/o:oracle:linux:7" />
      <platform idref="cpe:/o:redhat:enterprise_linux:7" />
      <ident system="www.unifiedcompliance.com">UCF CC ID 08760</ident>
      <ident system="www.unifiedcompliance.com">UCF CC ID 01529</ident>
      <ident system="www.unifiedcompliance.com">UCF CC ID 06332</ident>
      <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
        <check-content-ref href="" name="oval:com.mcafee.oval:def:1385051" />
      </check>
    </Rule>
    <Rule id="CollectChangesToSystemAdministrationScope" xml:lang="en" selected="false">
      <title xml:lang="en">Collect Changes to System Administration Scope</title>
      <description xml:lang="en">Monitor scope changes for system administrations. If the system has been properly configured to force system administrators to log in as themselves first and then use the sudo command to execute privileged commands, it is possible to monitor changes in scope. The file /etc/sudoers will be written to when the file or its attributes have changed. The audit records will be tagged with the identifier "scope." This check verifies if the /etc/audit/audit.rules file is set with appropriate scope identifier to ensure that the file /etc/sudoers will be written to when the file or its attributes have changed.</description>
      <reference>PCI DSS v3.2 Requirements 10</reference>
      <reference>PCI DSS v3.2 Requirements 10.2.2</reference>
      <reference>https://www.pcisecuritystandards.org</reference>
      <platform idref="cpe:/o:centos:centos:7" />
      <platform idref="cpe:/o:oracle:linux:7" />
      <platform idref="cpe:/o:redhat:enterprise_linux:7" />
      <ident system="www.unifiedcompliance.com">UCF CC ID 08761</ident>
      <ident system="www.unifiedcompliance.com">UCF CC ID 09950</ident>
      <ident system="www.unifiedcompliance.com">UCF CC ID 00645</ident>
      <ident system="www.unifiedcompliance.com">UCF CC ID 01529</ident>
      <ident system="www.unifiedcompliance.com">UCF CC ID 06332</ident>
      <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
        <check-content-ref href="" name="oval:com.mcafee.oval:def:249902" />
      </check>
    </Rule>
    <Rule id="CollectSystemAdministratorActions_Sudolog_" xml:lang="en" selected="false">
      <title xml:lang="en">Collect System Administrator Actions (sudolog)</title>
      <description xml:lang="en">Monitor the sudo log file. If the system has been properly configured to disable the use of the su command and force all administrators to have to log in first and then use sudo to execute privileged commands, then all administrator commands will be logged to /var/log/sudo.log. Any time a command is executed, an audit event will be triggered as the /var/log/sudo.log file will be opened for write and the executed administration command will be written to the log. This check verifies if the /etc/audit/audit.rules file is set with appropriate actions parameter to ensure that any unauthorized commands that have been executed gets recorded under sudo log file.</description>
      <reference>PCI DSS v3.2 Requirements 10</reference>
      <reference>PCI DSS v3.2 Requirements 10.2.2</reference>
      <reference>https://www.pcisecuritystandards.org</reference>
      <platform idref="cpe:/o:centos:centos:7" />
      <platform idref="cpe:/o:oracle:linux:7" />
      <platform idref="cpe:/o:redhat:enterprise_linux:7" />
      <ident system="www.unifiedcompliance.com">UCF CC ID 08761</ident>
      <ident system="www.unifiedcompliance.com">UCF CC ID 09950</ident>
      <ident system="www.unifiedcompliance.com">UCF CC ID 00645</ident>
      <ident system="www.unifiedcompliance.com">UCF CC ID 01529</ident>
      <ident system="www.unifiedcompliance.com">UCF CC ID 06332</ident>
      <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
        <check-content-ref href="" name="oval:com.mcafee.oval:def:249889" />
      </check>
    </Rule>
    <Rule id="CollectKernelModuleLoadingAndUnloading" xml:lang="en" selected="false">
      <title xml:lang="en">Collect Kernel Module Loading and Unloading</title>
      <description xml:lang="en">Monitor the loading and unloading of kernel modules. The programs insmod (install a kernel module), rmmod (remove a kernel module), and modprobe (a more sophisticated program to load and unload modules, as well as some other features) control loading and unloading of modules. The init_module (load a module) and delete_module (delete a module) system calls control loading and unloading of modules. Any execution of the loading and unloading module programs and system calls will trigger an audit record with an identifier of "modules". This check is to determine if kernel module loading and unloading is recorded.</description>
      <reference>PCI DSS v3.2 Requirements 10</reference>
      <reference>https://www.pcisecuritystandards.org</reference>
      <platform idref="cpe:/o:centos:centos:7" />
      <platform idref="cpe:/o:oracle:linux:7" />
      <platform idref="cpe:/o:redhat:enterprise_linux:7" />
      <ident system="www.unifiedcompliance.com">UCF CC ID 08762</ident>
      <ident system="www.unifiedcompliance.com">UCF CC ID 01529</ident>
      <ident system="www.unifiedcompliance.com">UCF CC ID 06332</ident>
      <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
        <check-content-ref href="" name="oval:com.mcafee.oval:def:403352" />
      </check>
    </Rule>
    <Rule id="MakeTheAuditConfigurationImmutable" xml:lang="en" selected="false">
      <title xml:lang="en">Make the Audit Configuration Immutable</title>
      <description xml:lang="en">Set system audit so that audit rules cannot be modified with auditctl. Setting the flag "-e 2" forces audit to be put in immutable mode. Audit changes can only be made on system reboot. This check verifies if the -e flag is set with value 2 in /etc/audit/audit.rules file to ensure the audit is put in immutable mode.</description>
      <reference>PCI DSS v3.2 Requirements 10</reference>
      <reference>https://www.pcisecuritystandards.org</reference>
      <platform idref="cpe:/o:centos:centos:7" />
      <platform idref="cpe:/o:oracle:linux:7" />
      <platform idref="cpe:/o:redhat:enterprise_linux:7" />
      <ident system="www.unifiedcompliance.com">UCF CC ID 08763</ident>
      <ident system="www.unifiedcompliance.com">UCF CC ID 01529</ident>
      <ident system="www.unifiedcompliance.com">UCF CC ID 06332</ident>
      <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
        <check-content-ref href="" name="oval:com.mcafee.oval:def:249886" />
      </check>
    </Rule>
    <Rule id="DisableSystemOnAuditLogFull" xml:lang="en" selected="false">
      <title xml:lang="en">Disable System on Audit Log Full</title>
      <description xml:lang="en">The auditd daemon can be configured to halt the system when the audit logs are full. This check is to determine if auditd is configured to notify the administrator and halt the system when audit logs are full by verifying the space_left_action, action_mail_acct and admin_space_left_action in the /etc/audit/auditd.conf file.</description>
      <reference>PCI DSS v3.2 Requirements 10</reference>
      <reference>https://www.pcisecuritystandards.org</reference>
      <platform idref="cpe:/o:centos:centos:7" />
      <platform idref="cpe:/o:oracle:linux:7" />
      <platform idref="cpe:/o:redhat:enterprise_linux:7" />
      <ident system="www.unifiedcompliance.com">UCF CC ID 09945</ident>
      <ident system="www.unifiedcompliance.com">UCF CC ID 01529</ident>
      <ident system="www.unifiedcompliance.com">UCF CC ID 06332</ident>
      <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
        <check-export value-id="EnterTheValueForSpace_left_actionParameter_var" export-name="oval:com.mcafee.oval:var:403345" />
        <check-export value-id="EnterTheValidEmailAddressaliasForAction_mail_acct_defaultIsRoot__var" export-name="oval:com.mcafee.oval:var:403346" />
        <check-export value-id="EnterTheValueFor-Admin_space_left_action_var" export-name="oval:com.mcafee.oval:var:403347" />
        <check-content-ref href="" name="oval:com.mcafee.oval:def:403335" />
      </check>
    </Rule>
    <Rule id="KeepAllAuditingInformation" xml:lang="en" selected="false">
      <title xml:lang="en">Keep All Auditing Information</title>
      <description xml:lang="en">Normally, auditd will hold 4 logs of maximum log file size before deleting older log files. This check verifies if audit logs are retained as per the user input value in /etc/audit/auditd.conf file for the max_log_file_action parameter.</description>
      <reference>PCI DSS v3.2 Requirements 10</reference>
      <reference>https://www.pcisecuritystandards.org</reference>
      <platform idref="cpe:/o:centos:centos:7" />
      <platform idref="cpe:/o:oracle:linux:7" />
      <platform idref="cpe:/o:redhat:enterprise_linux:7" />
      <ident system="www.unifiedcompliance.com">UCF CC ID 09946</ident>
      <ident system="www.unifiedcompliance.com">UCF CC ID 06332</ident>
      <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
        <check-export value-id="EnterTheValueToCheckWhetherAuditLogsAreRetained-Max_log_file_action_var" export-name="oval:com.mcafee.oval:var:249654" />
        <check-content-ref href="" name="oval:com.mcafee.oval:def:249650" />
      </check>
    </Rule>
    <Rule id="ConfigureAuditLogStorageSize" xml:lang="en" selected="false">
      <title xml:lang="en">Configure Audit Log Storage Size</title>
      <description xml:lang="en">Configure the maximum size of the audit log file. Once the log reaches the maximum size, it will be rotated and a new log file will be started. This check verifies if the maximum size of the audit log file is set as per the user input value in /etc/audit/auditd.conf file for the max_log_file parameter.</description>
      <reference>PCI DSS v3.2 Requirements 10</reference>
      <reference>https://www.pcisecuritystandards.org</reference>
      <platform idref="cpe:/o:centos:centos:7" />
      <platform idref="cpe:/o:oracle:linux:7" />
      <platform idref="cpe:/o:redhat:enterprise_linux:7" />
      <ident system="www.unifiedcompliance.com">UCF CC ID 01716</ident>
      <ident system="www.unifiedcompliance.com">UCF CC ID 01713</ident>
      <ident system="www.unifiedcompliance.com">UCF CC ID 06332</ident>
      <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
        <check-export value-id="EnterTheValueForMaximumSizeOfTheAuditLogFile-Max_log_file_var" export-name="oval:com.mcafee.oval:var:249634" />
        <check-content-ref href="" name="oval:com.mcafee.oval:def:249628" />
      </check>
    </Rule>
    <Rule id="TestIfFileExists_Var_log_messages" xml:lang="en" selected="false">
      <title xml:lang="en">Test If file exists - /var/log/messages</title>
      <description xml:lang="en">This rule will verify the existence of /var/log/messages file.</description>
      <reference>PCI DSS v3.2 Requirements 2.3</reference>
      <reference>https://www.pcisecuritystandards.org</reference>
      <platform idref="cpe:/o:centos:centos:7" />
      <platform idref="cpe:/o:oracle:linux:7" />
      <platform idref="cpe:/o:redhat:enterprise_linux:7" />
      <ident system="www.unifiedcompliance.com">UCF CC ID 08965</ident>
      <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
        <check-content-ref href="" name="oval:com.mcafee.oval:def:707799" />
      </check>
    </Rule>
    <Rule id="TestTheOwnerOfTheFiles-_Var_log_boot.log_" xml:lang="en" selected="false">
      <title xml:lang="en">Owner of the files - /var/log/boot.log*</title>
      <description xml:lang="en">This check verifies the owner of the files - /var/log/boot.log*.</description>
      <reference>PCI DSS v3.2 Requirements 2.3</reference>
      <reference>https://www.pcisecuritystandards.org</reference>
      <platform idref="cpe:/o:centos:centos:7" />
      <platform idref="cpe:/o:oracle:linux:7" />
      <platform idref="cpe:/o:redhat:enterprise_linux:7" />
      <ident system="www.unifiedcompliance.com">UCF CC ID 04455</ident>
      <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
        <check-export value-id="WhatIsTheRequiredUserIDOfTheFileOwner_var155" export-name="oval:com.mcafee.oval:var:80228" />
        <check-content-ref href="" name="oval:com.mcafee.oval:def:92683" />
      </check>
    </Rule>
    <Rule id="TestTheGroupOwnerOfTheFiles-_Var_log_boot.log_" xml:lang="en" selected="false">
      <title xml:lang="en">Group owner of the files - /var/log/boot.log*</title>
      <description xml:lang="en">This check verifies the group owner of the files - /var/log/boot.log*.</description>
      <reference>PCI DSS v3.2 Requirements 2.3</reference>
      <reference>https://www.pcisecuritystandards.org</reference>
      <platform idref="cpe:/o:centos:centos:7" />
      <platform idref="cpe:/o:oracle:linux:7" />
      <platform idref="cpe:/o:redhat:enterprise_linux:7" />
      <ident system="www.unifiedcompliance.com">UCF CC ID 04455</ident>
      <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
        <check-export value-id="WhatIsTheRequiredGroupIDOfTheFileOwner_var155" export-name="oval:com.mcafee.oval:var:80125" />
        <check-content-ref href="" name="oval:com.mcafee.oval:def:92687" />
      </check>
    </Rule>
    <Rule id="TestThePermissionsOfTheFiles-_Var_log_boot.log_" xml:lang="en" selected="false">
      <title xml:lang="en">Permissions of the files - /var/log/boot.log*</title>
      <description xml:lang="en">This check verifies the permissions of the files - /var/log/boot.log*.</description>
      <reference>PCI DSS v3.2 Requirements 2.3</reference>
      <reference>https://www.pcisecuritystandards.org</reference>
      <platform idref="cpe:/o:centos:centos:7" />
      <platform idref="cpe:/o:oracle:linux:7" />
      <platform idref="cpe:/o:redhat:enterprise_linux:7" />
      <ident system="www.unifiedcompliance.com">UCF CC ID 04455</ident>
      <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
        <check-export value-id="ShouldTheUserHaveREADAccess_var889" export-name="oval:com.mcafee.oval:var:78640" />
        <check-export value-id="ShouldTheUserHaveWRITEAccess_var889" export-name="oval:com.mcafee.oval:var:78641" />
        <check-export value-id="ShouldTheUserHaveEXECUTEAccess_var889" export-name="oval:com.mcafee.oval:var:78642" />
        <check-export value-id="ShouldTheGroupHaveREADAccess_var889" export-name="oval:com.mcafee.oval:var:78643" />
        <check-export value-id="ShouldTheGroupHaveWRITEAccess_var889" export-name="oval:com.mcafee.oval:var:78644" />
        <check-export value-id="ShouldTheGroupHaveEXECUTEAccess_var889" export-name="oval:com.mcafee.oval:var:78645" />
        <check-export value-id="ShouldOthersHaveREADAccess_var889" export-name="oval:com.mcafee.oval:var:78646" />
        <check-export value-id="ShouldOthersHaveWRITEAccess_var889" export-name="oval:com.mcafee.oval:var:78647" />
        <check-export value-id="ShouldOthersHaveEXECUTEAccess_var889" export-name="oval:com.mcafee.oval:var:78648" />
        <check-content-ref href="" name="oval:com.mcafee.oval:def:92689" />
      </check>
    </Rule>
    <Rule id="TestTheExistenceOfTheFiles-_Var_log_boot.log_" xml:lang="en" selected="false">
      <title xml:lang="en">Test the existence of the files - files - /var/log/boot.log*</title>
      <description xml:lang="en">This check ensures that the files -files - /var/log/boot.log* exists on the system.</description>
      <reference>PCI DSS v3.2 Requirements 2.3</reference>
      <reference>https://www.pcisecuritystandards.org</reference>
      <platform idref="cpe:/o:centos:centos:7" />
      <platform idref="cpe:/o:oracle:linux:7" />
      <platform idref="cpe:/o:redhat:enterprise_linux:7" />
      <ident system="www.unifiedcompliance.com">UCF CC ID 04455</ident>
      <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
        <check-content-ref href="" name="oval:com.mcafee.oval:def:2487521" />
      </check>
    </Rule>
    <Rule id="LogSuspiciousPackets_Net.ipv4.conf.default.log_martians" xml:lang="en" selected="false">
      <title xml:lang="en">Log Suspicious Packets - net.ipv4.conf.default.log_martians</title>
      <description xml:lang="en">When enabled, this feature logs packets with un-routable source addresses to the kernel log. This rule verifies the enable / disable status for net.ipv4.conf.default.log_martians.</description>
      <reference>PCI DSS v3.2 Requirements 10</reference>
      <reference>https://www.pcisecuritystandards.org</reference>
      <platform idref="cpe:/o:centos:centos:7" />
      <platform idref="cpe:/o:oracle:linux:7" />
      <platform idref="cpe:/o:redhat:enterprise_linux:7" />
      <ident system="www.unifiedcompliance.com">UCF CC ID 05601</ident>
      <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
        <check-export value-id="Net.ipv4.conf.default.log_martiansShouldBeEnabledOrDisabled_var" export-name="oval:com.mcafee.oval:var:245582" />
        <check-content-ref href="" name="oval:com.mcafee.oval:def:245578" />
      </check>
    </Rule>
    <Rule id="LogSuspiciousPackets_Net.ipv4.conf.all.log_martians" xml:lang="en" selected="false">
      <title xml:lang="en">Log Suspicious Packets - net.ipv4.conf.all.log_martians</title>
      <description xml:lang="en">When enabled, this feature logs packets with un-routable source addresses to the kernel log. This rule will verify the enable / disable status for net.ipv4.conf.all.log_martians.</description>
      <reference>PCI DSS v3.2 Requirements 10</reference>
      <reference>https://www.pcisecuritystandards.org</reference>
      <platform idref="cpe:/o:centos:centos:7" />
      <platform idref="cpe:/o:oracle:linux:7" />
      <platform idref="cpe:/o:redhat:enterprise_linux:7" />
      <ident system="www.unifiedcompliance.com">UCF CC ID 05601</ident>
      <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
        <check-export value-id="All.log_martiansShouldBeEnabledOrDisabled_var" export-name="oval:com.mcafee.oval:var:79416" />
        <check-content-ref href="" name="oval:com.mcafee.oval:def:50610" />
      </check>
    </Rule>
    <Rule id="VsftpdTransactionLogging" xml:lang="en" selected="false">
      <title xml:lang="en">Vsftpd transaction logging</title>
      <description xml:lang="en">Logging of vsftpd transactions should be enabled or disabled as appropriate.</description>
      <reference>PCI DSS v3.2 Requirements 2.3</reference>
      <reference>https://www.pcisecuritystandards.org</reference>
      <platform idref="cpe:/o:centos:centos:7" />
      <platform idref="cpe:/o:oracle:linux:7" />
      <platform idref="cpe:/o:redhat:enterprise_linux:7" />
      <ident system="www.unifiedcompliance.com">UCF CC ID 06032</ident>
      <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
        <check-export value-id="Log_ftp_protocolShouldBeEnabledOrDisabled_var" export-name="oval:com.mcafee.oval:var:95924" />
        <check-content-ref href="" name="oval:com.mcafee.oval:def:200803070092" />
      </check>
    </Rule>
    <Rule id="TestTheGroupOwnerOfTheFile_Var_log_audit_audit.log" xml:lang="en" selected="false">
      <title xml:lang="en">Test the group owner of the file - /var/log/audit/audit.log</title>
      <description xml:lang="en">This check will verify the group owner of the file - /var/log/audit/audit.log</description>
      <reference>PCI DSS v3.2 Requirements 2.3</reference>
      <reference>https://www.pcisecuritystandards.org</reference>
      <platform idref="cpe:/o:centos:centos:7" />
      <platform idref="cpe:/o:oracle:linux:7" />
      <platform idref="cpe:/o:redhat:enterprise_linux:7" />
      <ident system="www.unifiedcompliance.com">UCF CC ID 05566</ident>
      <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
        <check-export value-id="WhatIsTheRequiredGroupIDOfTheFileOwner_var50" export-name="oval:com.mcafee.oval:var:80125" />
        <check-content-ref href="" name="oval:com.mcafee.oval:def:2487507" />
      </check>
    </Rule>
    <Rule id="TestTheOwnerOfTheFile_Var_log_audit_audit.log" xml:lang="en" selected="false">
      <title xml:lang="en">Test the owner of the file - /var/log/audit/audit.log</title>
      <description xml:lang="en">This check will verify the owner of /var/log/audit/audit.log file</description>
      <reference>PCI DSS v3.2 Requirements 2.3</reference>
      <reference>https://www.pcisecuritystandards.org</reference>
      <platform idref="cpe:/o:centos:centos:7" />
      <platform idref="cpe:/o:oracle:linux:7" />
      <platform idref="cpe:/o:redhat:enterprise_linux:7" />
      <ident system="www.unifiedcompliance.com">UCF CC ID 05566</ident>
      <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
        <check-export value-id="WhatIsTheRequiredUserIDOfTheFileOwner_var50" export-name="oval:com.mcafee.oval:var:80228" />
        <check-content-ref href="" name="oval:com.mcafee.oval:def:2487513" />
      </check>
    </Rule>
    <Rule id="TestThePermissionsOfTheFile_Var_log_audit_audit.log" xml:lang="en" selected="false">
      <title xml:lang="en">Test the permissions of  the file - /var/log/audit/audit.log</title>
      <description xml:lang="en">This check will verify the permissions of  the file - /var/log/audit/audit.log</description>
      <reference>PCI DSS v3.2 Requirements 2.3</reference>
      <reference>https://www.pcisecuritystandards.org</reference>
      <platform idref="cpe:/o:centos:centos:7" />
      <platform idref="cpe:/o:oracle:linux:7" />
      <platform idref="cpe:/o:redhat:enterprise_linux:7" />
      <ident system="www.unifiedcompliance.com">UCF CC ID 05566</ident>
      <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
        <check-export value-id="ShouldTheUserHaveREADAccess_var70" export-name="oval:com.mcafee.oval:var:78640" />
        <check-export value-id="ShouldTheUserHaveWRITEAccess_var70" export-name="oval:com.mcafee.oval:var:78641" />
        <check-export value-id="ShouldTheUserHaveEXECUTEAccess_var70" export-name="oval:com.mcafee.oval:var:78642" />
        <check-export value-id="ShouldTheGroupHaveREADAccess_var70" export-name="oval:com.mcafee.oval:var:78643" />
        <check-export value-id="ShouldTheGroupHaveWRITEAccess_var70" export-name="oval:com.mcafee.oval:var:78644" />
        <check-export value-id="ShouldTheGroupHaveEXECUTEAccess_var70" export-name="oval:com.mcafee.oval:var:78645" />
        <check-export value-id="ShouldOthersHaveREADAccess_var70" export-name="oval:com.mcafee.oval:var:78646" />
        <check-export value-id="ShouldOthersHaveWRITEAccess_var70" export-name="oval:com.mcafee.oval:var:78647" />
        <check-export value-id="ShouldOthersHaveEXECUTEAccess_var70" export-name="oval:com.mcafee.oval:var:78648" />
        <check-content-ref href="" name="oval:com.mcafee.oval:def:2487514" />
      </check>
    </Rule>
  </Group>
</Benchmark>