{"component-definition":{"components":[{"control-implementations":[{"description":"FedRAMP Rev 5 Moderate Baseline","implemented-requirements":[{"control-id":"ac-3","description":"","props":[{"name":"Rule_Id","ns":"https://oscal-compass/compliance-trestle/schemas/oscal/cd","value":"accounts_password_pam_unix_enabled"},{"name":"Rule_Id","ns":"https://oscal-compass/compliance-trestle/schemas/oscal/cd","value":"accounts_root_gid_zero"},{"name":"Rule_Id","ns":"https://oscal-compass/compliance-trestle/schemas/oscal/cd","value":"accounts_umask_etc_bashrc"},{"name":"Rule_Id","ns":"https://oscal-compass/compliance-trestle/schemas/oscal/cd","value":"accounts_umask_etc_login_defs"},{"name":"Rule_Id","ns":"https://oscal-compass/compliance-trestle/schemas/oscal/cd","value":"accounts_umask_etc_profile"},{"name":"Rule_Id","ns":"https://oscal-compass/compliance-trestle/schemas/oscal/cd","value":"accounts_umask_root"},{"name":"Rule_Id","ns":"https://oscal-compass/compliance-trestle/schemas/oscal/cd","value":"ensure_pam_wheel_group_empty"},{"name":"Rule_Id","ns":"https://oscal-compass/compliance-trestle/schemas/oscal/cd","value":"ensure_root_access_controlled"},{"name":"Rule_Id","ns":"https://oscal-compass/compliance-trestle/schemas/oscal/cd","value":"file_groupowner_sshd_config"},{"name":"Rule_Id","ns":"https://oscal-compass/compliance-trestle/schemas/oscal/cd","value":"file_owner_sshd_config"},{"name":"Rule_Id","ns":"https://oscal-compass/compliance-trestle/schemas/oscal/cd","value":"file_permissions_sshd_config"},{"name":"Rule_Id","ns":"https://oscal-compass/compliance-trestle/schemas/oscal/cd","value":"file_permissions_sshd_private_key"},{"name":"Rule_Id","ns":"https://oscal-compass/compliance-trestle/schemas/oscal/cd","value":"file_permissions_sshd_pub_key"},{"name":"Rule_Id","ns":"https://oscal-compass/compliance-trestle/schemas/oscal/cd","value":"groups_no_zero_gid_except_root"},{"name":"Rule_Id","ns":"https://oscal-compass/compliance-trestle/schemas/oscal/cd","value":"no_invalid_shell_accounts_unlocked"},{"name":"Rule_Id","ns":"https://oscal-compass/compliance-trestle/schemas/oscal/cd","value":"no_shelllogin_for_systemaccounts"},{"name":"Rule_Id","ns":"https://oscal-compass/compliance-trestle/schemas/oscal/cd","value":"sshd_limit_user_access"},{"name":"Rule_Id","ns":"https://oscal-compass/compliance-trestle/schemas/oscal/cd","value":"use_pam_wheel_group_for_su"}],"uuid":"fd7cbc99-954e-4958-8742-e822dd34d5e3"},{"control-id":"ac-5","description":"","props":[{"name":"Rule_Id","ns":"https://oscal-compass/compliance-trestle/schemas/oscal/cd","value":"accounts_password_pam_unix_enabled"},{"name":"Rule_Id","ns":"https://oscal-compass/compliance-trestle/schemas/oscal/cd","value":"accounts_root_gid_zero"},{"name":"Rule_Id","ns":"https://oscal-compass/compliance-trestle/schemas/oscal/cd","value":"accounts_umask_etc_bashrc"},{"name":"Rule_Id","ns":"https://oscal-compass/compliance-trestle/schemas/oscal/cd","value":"accounts_umask_etc_login_defs"},{"name":"Rule_Id","ns":"https://oscal-compass/compliance-trestle/schemas/oscal/cd","value":"accounts_umask_etc_profile"},{"name":"Rule_Id","ns":"https://oscal-compass/compliance-trestle/schemas/oscal/cd","value":"accounts_umask_root"},{"name":"Rule_Id","ns":"https://oscal-compass/compliance-trestle/schemas/oscal/cd","value":"ensure_pam_wheel_group_empty"},{"name":"Rule_Id","ns":"https://oscal-compass/compliance-trestle/schemas/oscal/cd","value":"ensure_root_access_controlled"},{"name":"Rule_Id","ns":"https://oscal-compass/compliance-trestle/schemas/oscal/cd","value":"file_groupowner_sshd_config"},{"name":"Rule_Id","ns":"https://oscal-compass/compliance-trestle/schemas/oscal/cd","value":"file_owner_sshd_config"},{"name":"Rule_Id","ns":"https://oscal-compass/compliance-trestle/schemas/oscal/cd","value":"file_permissions_sshd_config"},{"name":"Rule_Id","ns":"https://oscal-compass/compliance-trestle/schemas/oscal/cd","value":"file_permissions_sshd_private_key"},{"name":"Rule_Id","ns":"https://oscal-compass/compliance-trestle/schemas/oscal/cd","value":"file_permissions_sshd_pub_key"},{"name":"Rule_Id","ns":"https://oscal-compass/compliance-trestle/schemas/oscal/cd","value":"groups_no_zero_gid_except_root"},{"name":"Rule_Id","ns":"https://oscal-compass/compliance-trestle/schemas/oscal/cd","value":"no_invalid_shell_accounts_unlocked"},{"name":"Rule_Id","ns":"https://oscal-compass/compliance-trestle/schemas/oscal/cd","value":"no_shelllogin_for_systemaccounts"},{"name":"Rule_Id","ns":"https://oscal-compass/compliance-trestle/schemas/oscal/cd","value":"sshd_limit_user_access"},{"name":"Rule_Id","ns":"https://oscal-compass/compliance-trestle/schemas/oscal/cd","value":"use_pam_wheel_group_for_su"}],"uuid":"7384ca78-d205-44d4-ac82-623a93dd202b"},{"control-id":"ac-6","description":"","props":[{"name":"Rule_Id","ns":"https://oscal-compass/compliance-trestle/schemas/oscal/cd","value":"accounts_password_pam_unix_enabled"},{"name":"Rule_Id","ns":"https://oscal-compass/compliance-trestle/schemas/oscal/cd","value":"accounts_root_gid_zero"},{"name":"Rule_Id","ns":"https://oscal-compass/compliance-trestle/schemas/oscal/cd","value":"accounts_umask_etc_bashrc"},{"name":"Rule_Id","ns":"https://oscal-compass/compliance-trestle/schemas/oscal/cd","value":"accounts_umask_etc_login_defs"},{"name":"Rule_Id","ns":"https://oscal-compass/compliance-trestle/schemas/oscal/cd","value":"accounts_umask_etc_profile"},{"name":"Rule_Id","ns":"https://oscal-compass/compliance-trestle/schemas/oscal/cd","value":"accounts_umask_root"},{"name":"Rule_Id","ns":"https://oscal-compass/compliance-trestle/schemas/oscal/cd","value":"ensure_pam_wheel_group_empty"},{"name":"Rule_Id","ns":"https://oscal-compass/compliance-trestle/schemas/oscal/cd","value":"ensure_root_access_controlled"},{"name":"Rule_Id","ns":"https://oscal-compass/compliance-trestle/schemas/oscal/cd","value":"file_groupowner_sshd_config"},{"name":"Rule_Id","ns":"https://oscal-compass/compliance-trestle/schemas/oscal/cd","value":"file_owner_sshd_config"},{"name":"Rule_Id","ns":"https://oscal-compass/compliance-trestle/schemas/oscal/cd","value":"file_permissions_sshd_config"},{"name":"Rule_Id","ns":"https://oscal-compass/compliance-trestle/schemas/oscal/cd","value":"file_permissions_sshd_private_key"},{"name":"Rule_Id","ns":"https://oscal-compass/compliance-trestle/schemas/oscal/cd","value":"file_permissions_sshd_pub_key"},{"name":"Rule_Id","ns":"https://oscal-compass/compliance-trestle/schemas/oscal/cd","value":"groups_no_zero_gid_except_root"},{"name":"Rule_Id","ns":"https://oscal-compass/compliance-trestle/schemas/oscal/cd","value":"no_invalid_shell_accounts_unlocked"},{"name":"Rule_Id","ns":"https://oscal-compass/compliance-trestle/schemas/oscal/cd","value":"no_shelllogin_for_systemaccounts"},{"name":"Rule_Id","ns":"https://oscal-compass/compliance-trestle/schemas/oscal/cd","value":"sshd_limit_user_access"},{"name":"Rule_Id","ns":"https://oscal-compass/compliance-trestle/schemas/oscal/cd","value":"use_pam_wheel_group_for_su"}],"uuid":"c1fc31b6-572f-468c-82a7-7973661ab8a8"},{"control-id":"mp-2","description":"","props":[{"name":"Rule_Id","ns":"https://oscal-compass/compliance-trestle/schemas/oscal/cd","value":"accounts_password_pam_unix_enabled"},{"name":"Rule_Id","ns":"https://oscal-compass/compliance-trestle/schemas/oscal/cd","value":"accounts_root_gid_zero"},{"name":"Rule_Id","ns":"https://oscal-compass/compliance-trestle/schemas/oscal/cd","value":"accounts_umask_etc_bashrc"},{"name":"Rule_Id","ns":"https://oscal-compass/compliance-trestle/schemas/oscal/cd","value":"accounts_umask_etc_login_defs"},{"name":"Rule_Id","ns":"https://oscal-compass/compliance-trestle/schemas/oscal/cd","value":"accounts_umask_etc_profile"},{"name":"Rule_Id","ns":"https://oscal-compass/compliance-trestle/schemas/oscal/cd","value":"accounts_umask_root"},{"name":"Rule_Id","ns":"https://oscal-compass/compliance-trestle/schemas/oscal/cd","value":"ensure_pam_wheel_group_empty"},{"name":"Rule_Id","ns":"https://oscal-compass/compliance-trestle/schemas/oscal/cd","value":"ensure_root_access_controlled"},{"name":"Rule_Id","ns":"https://oscal-compass/compliance-trestle/schemas/oscal/cd","value":"file_groupowner_sshd_config"},{"name":"Rule_Id","ns":"https://oscal-compass/compliance-trestle/schemas/oscal/cd","value":"file_owner_sshd_config"},{"name":"Rule_Id","ns":"https://oscal-compass/compliance-trestle/schemas/oscal/cd","value":"file_permissions_sshd_config"},{"name":"Rule_Id","ns":"https://oscal-compass/compliance-trestle/schemas/oscal/cd","value":"file_permissions_sshd_private_key"},{"name":"Rule_Id","ns":"https://oscal-compass/compliance-trestle/schemas/oscal/cd","value":"file_permissions_sshd_pub_key"},{"name":"Rule_Id","ns":"https://oscal-compass/compliance-trestle/schemas/oscal/cd","value":"groups_no_zero_gid_except_root"},{"name":"Rule_Id","ns":"https://oscal-compass/compliance-trestle/schemas/oscal/cd","value":"no_invalid_shell_accounts_unlocked"},{"name":"Rule_Id","ns":"https://oscal-compass/compliance-trestle/schemas/oscal/cd","value":"no_shelllogin_for_systemaccounts"},{"name":"Rule_Id","ns":"https://oscal-compass/compliance-trestle/schemas/oscal/cd","value":"sshd_limit_user_access"},{"name":"Rule_Id","ns":"https://oscal-compass/compliance-trestle/schemas/oscal/cd","value":"use_pam_wheel_group_for_su"}],"uuid":"ba13c297-d314-4dbd-85a3-bba9aeddba82"},{"control-id":"ac-17.2","description":"","props":[{"name":"Rule_Id","ns":"https://oscal-compass/compliance-trestle/schemas/oscal/cd","value":"sshd_use_strong_ciphers"},{"name":"Rule_Id","ns":"https://oscal-compass/compliance-trestle/schemas/oscal/cd","value":"sshd_use_strong_kex"},{"name":"Rule_Id","ns":"https://oscal-compass/compliance-trestle/schemas/oscal/cd","value":"sshd_use_strong_macs"}],"uuid":"9cf4cb67-785a-4740-974a-ef85c78dcbf6"},{"control-id":"ia-5","description":"","props":[{"name":"Rule_Id","ns":"https://oscal-compass/compliance-trestle/schemas/oscal/cd","value":"sshd_use_strong_ciphers"},{"name":"Rule_Id","ns":"https://oscal-compass/compliance-trestle/schemas/oscal/cd","value":"sshd_use_strong_kex"},{"name":"Rule_Id","ns":"https://oscal-compass/compliance-trestle/schemas/oscal/cd","value":"sshd_use_strong_macs"}],"uuid":"a72b92fc-690e-4ecf-902a-5bc9da5a2477"},{"control-id":"ia-5.1","description":"","props":[{"name":"Rule_Id","ns":"https://oscal-compass/compliance-trestle/schemas/oscal/cd","value":"sshd_use_strong_ciphers"},{"name":"Rule_Id","ns":"https://oscal-compass/compliance-trestle/schemas/oscal/cd","value":"sshd_use_strong_kex"},{"name":"Rule_Id","ns":"https://oscal-compass/compliance-trestle/schemas/oscal/cd","value":"sshd_use_strong_macs"},{"name":"Rule_Id","ns":"https://oscal-compass/compliance-trestle/schemas/oscal/cd","value":"accounts_password_pam_pwhistory_use_authtok"},{"name":"Rule_Id","ns":"https://oscal-compass/compliance-trestle/schemas/oscal/cd","value":"accounts_password_pam_unix_authtok"},{"name":"Rule_Id","ns":"https://oscal-compass/compliance-trestle/schemas/oscal/cd","value":"set_password_hashing_algorithm_logindefs"},{"name":"Rule_Id","ns":"https://oscal-compass/compliance-trestle/schemas/oscal/cd","value":"set_password_hashing_algorithm_systemauth"},{"name":"Rule_Id","ns":"https://oscal-compass/compliance-trestle/schemas/oscal/cd","value":"account_disable_post_pw_expiration"},{"name":"Rule_Id","ns":"https://oscal-compass/compliance-trestle/schemas/oscal/cd","value":"accounts_maximum_age_login_defs"},{"name":"Rule_Id","ns":"https://oscal-compass/compliance-trestle/schemas/oscal/cd","value":"accounts_minimum_age_login_defs"},{"name":"Rule_Id","ns":"https://oscal-compass/compliance-trestle/schemas/oscal/cd","value":"accounts_password_last_change_is_in_past"},{"name":"Rule_Id","ns":"https://oscal-compass/compliance-trestle/schemas/oscal/cd","value":"accounts_password_pam_dcredit"},{"name":"Rule_Id","ns":"https://oscal-compass/compliance-trestle/schemas/oscal/cd","value":"accounts_password_pam_dictcheck"},{"name":"Rule_Id","ns":"https://oscal-compass/compliance-trestle/schemas/oscal/cd","value":"accounts_password_pam_difok"},{"name":"Rule_Id","ns":"https://oscal-compass/compliance-trestle/schemas/oscal/cd","value":"accounts_password_pam_enforce_root"},{"name":"Rule_Id","ns":"https://oscal-compass/compliance-trestle/schemas/oscal/cd","value":"accounts_password_pam_enforcing"},{"name":"Rule_Id","ns":"https://oscal-compass/compliance-trestle/schemas/oscal/cd","value":"accounts_password_pam_lcredit"},{"name":"Rule_Id","ns":"https://oscal-compass/compliance-trestle/schemas/oscal/cd","value":"accounts_password_pam_maxrepeat"},{"name":"Rule_Id","ns":"https://oscal-compass/compliance-trestle/schemas/oscal/cd","value":"accounts_password_pam_maxsequence"},{"name":"Rule_Id","ns":"https://oscal-compass/compliance-trestle/schemas/oscal/cd","value":"accounts_password_pam_minclass"},{"name":"Rule_Id","ns":"https://oscal-compass/compliance-trestle/schemas/oscal/cd","value":"accounts_password_pam_minlen"},{"name":"Rule_Id","ns":"https://oscal-compass/compliance-trestle/schemas/oscal/cd","value":"accounts_password_pam_ocredit"},{"name":"Rule_Id","ns":"https://oscal-compass/compliance-trestle/schemas/oscal/cd","value":"accounts_password_pam_pwhistory_enabled"},{"name":"Rule_Id","ns":"https://oscal-compass/compliance-trestle/schemas/oscal/cd","value":"accounts_password_pam_pwhistory_enforce_root"},{"name":"Rule_Id","ns":"https://oscal-compass/compliance-trestle/schemas/oscal/cd","value":"accounts_password_pam_pwhistory_remember"},{"name":"Rule_Id","ns":"https://oscal-compass/compliance-trestle/schemas/oscal/cd","value":"accounts_password_pam_pwquality_enabled"},{"name":"Rule_Id","ns":"https://oscal-compass/compliance-trestle/schemas/oscal/cd","value":"accounts_password_pam_ucredit"},{"name":"Rule_Id","ns":"https://oscal-compass/compliance-trestle/schemas/oscal/cd","value":"accounts_password_pam_unix_no_remember"},{"name":"Rule_Id","ns":"https://oscal-compass/compliance-trestle/schemas/oscal/cd","value":"accounts_password_set_max_life_existing"},{"name":"Rule_Id","ns":"https://oscal-compass/compliance-trestle/schemas/oscal/cd","value":"accounts_password_set_min_life_existing"},{"name":"Rule_Id","ns":"https://oscal-compass/compliance-trestle/schemas/oscal/cd","value":"no_empty_passwords_unix"},{"name":"Rule_Id","ns":"https://oscal-compass/compliance-trestle/schemas/oscal/cd","value":"sshd_disable_empty_passwords"},{"name":"Rule_Id","ns":"https://oscal-compass/compliance-trestle/schemas/oscal/cd","value":"sshd_disable_gssapi_auth"},{"name":"Rule_Id","ns":"https://oscal-compass/compliance-trestle/schemas/oscal/cd","value":"sshd_disable_rhosts"},{"name":"Rule_Id","ns":"https://oscal-compass/compliance-trestle/schemas/oscal/cd","value":"sshd_enable_pam"}],"uuid":"d7fd5eca-fdb8-483f-aeed-2a2a9b2ef6fd"},{"control-id":"sc-8","description":"","props":[{"name":"Rule_Id","ns":"https://oscal-compass/compliance-trestle/schemas/oscal/cd","value":"sshd_use_strong_ciphers"},{"name":"Rule_Id","ns":"https://oscal-compass/compliance-trestle/schemas/oscal/cd","value":"sshd_use_strong_kex"},{"name":"Rule_Id","ns":"https://oscal-compass/compliance-trestle/schemas/oscal/cd","value":"sshd_use_strong_macs"}],"uuid":"370d80d3-b7d7-4489-ac34-0c3d881bb6f5"},{"control-id":"sc-8.1","description":"","props":[{"name":"Rule_Id","ns":"https://oscal-compass/compliance-trestle/schemas/oscal/cd","value":"sshd_use_strong_ciphers"},{"name":"Rule_Id","ns":"https://oscal-compass/compliance-trestle/schemas/oscal/cd","value":"sshd_use_strong_kex"},{"name":"Rule_Id","ns":"https://oscal-compass/compliance-trestle/schemas/oscal/cd","value":"sshd_use_strong_macs"}],"uuid":"8025ca6c-a5f6-4e13-810c-c9a6bc011f1f"},{"control-id":"sc-28","description":"","props":[{"name":"Rule_Id","ns":"https://oscal-compass/compliance-trestle/schemas/oscal/cd","value":"accounts_password_pam_pwhistory_use_authtok"},{"name":"Rule_Id","ns":"https://oscal-compass/compliance-trestle/schemas/oscal/cd","value":"accounts_password_pam_unix_authtok"},{"name":"Rule_Id","ns":"https://oscal-compass/compliance-trestle/schemas/oscal/cd","value":"set_password_hashing_algorithm_logindefs"},{"name":"Rule_Id","ns":"https://oscal-compass/compliance-trestle/schemas/oscal/cd","value":"set_password_hashing_algorithm_systemauth"}],"uuid":"39c239dd-4fdd-4556-a018-be17ac5b3745"},{"control-id":"sc-28.1","description":"","props":[{"name":"Rule_Id","ns":"https://oscal-compass/compliance-trestle/schemas/oscal/cd","value":"accounts_password_pam_pwhistory_use_authtok"},{"name":"Rule_Id","ns":"https://oscal-compass/compliance-trestle/schemas/oscal/cd","value":"accounts_password_pam_unix_authtok"},{"name":"Rule_Id","ns":"https://oscal-compass/compliance-trestle/schemas/oscal/cd","value":"set_password_hashing_algorithm_logindefs"},{"name":"Rule_Id","ns":"https://oscal-compass/compliance-trestle/schemas/oscal/cd","value":"set_password_hashing_algorithm_systemauth"}],"uuid":"e8d13124-4664-4dee-b562-fde0d889cd11"},{"control-id":"cm-1","description":"","props":[{"name":"Rule_Id","ns":"https://oscal-compass/compliance-trestle/schemas/oscal/cd","value":"accounts_password_warn_age_login_defs"}],"uuid":"9174f08b-181d-472a-91a3-dcecb31c7339"},{"control-id":"cm-2","description":"","props":[{"name":"Rule_Id","ns":"https://oscal-compass/compliance-trestle/schemas/oscal/cd","value":"accounts_password_warn_age_login_defs"}],"uuid":"8ec46497-b6c9-4e18-986c-897fb0941b3b"},{"control-id":"cm-6","description":"","props":[{"name":"Rule_Id","ns":"https://oscal-compass/compliance-trestle/schemas/oscal/cd","value":"accounts_password_warn_age_login_defs"},{"name":"Rule_Id","ns":"https://oscal-compass/compliance-trestle/schemas/oscal/cd","value":"sshd_disable_forwarding"}],"uuid":"e207de93-222b-4b4c-aea1-108ffede5642"},{"control-id":"cm-7","description":"","props":[{"name":"Rule_Id","ns":"https://oscal-compass/compliance-trestle/schemas/oscal/cd","value":"accounts_password_warn_age_login_defs"},{"name":"Rule_Id","ns":"https://oscal-compass/compliance-trestle/schemas/oscal/cd","value":"sshd_disable_forwarding"}],"uuid":"97336ef4-875a-41ab-9d55-4e5b98189cae"},{"control-id":"cm-7.1","description":"","props":[{"name":"Rule_Id","ns":"https://oscal-compass/compliance-trestle/schemas/oscal/cd","value":"accounts_password_warn_age_login_defs"}],"uuid":"71ae8531-0899-4949-85dc-f0da24c0cbfe"},{"control-id":"cm-9","description":"","props":[{"name":"Rule_Id","ns":"https://oscal-compass/compliance-trestle/schemas/oscal/cd","value":"accounts_password_warn_age_login_defs"}],"uuid":"ae45a9ac-b5f0-4387-a367-4b6bdd625b34"},{"control-id":"sa-3","description":"","props":[{"name":"Rule_Id","ns":"https://oscal-compass/compliance-trestle/schemas/oscal/cd","value":"accounts_password_warn_age_login_defs"}],"uuid":"7da00e0c-1a3d-45a4-afbb-eb891453adba"},{"control-id":"sa-8","description":"","props":[{"name":"Rule_Id","ns":"https://oscal-compass/compliance-trestle/schemas/oscal/cd","value":"accounts_password_warn_age_login_defs"}],"uuid":"cc14ca9a-c1b9-4cbb-a6e1-dd9be902374a"},{"control-id":"sa-10","description":"","props":[{"name":"Rule_Id","ns":"https://oscal-compass/compliance-trestle/schemas/oscal/cd","value":"accounts_password_warn_age_login_defs"}],"uuid":"d763c576-601a-4b65-8744-4e4124d58125"},{"control-id":"ac-2.5","description":"","props":[{"name":"Rule_Id","ns":"https://oscal-compass/compliance-trestle/schemas/oscal/cd","value":"accounts_tmout"}],"uuid":"42cb5b63-3996-480f-8386-0fc4e546abad"},{"control-id":"ac-11","description":"","props":[{"name":"Rule_Id","ns":"https://oscal-compass/compliance-trestle/schemas/oscal/cd","value":"accounts_tmout"}],"uuid":"e631c12b-5197-4a88-9002-a3f979c5dd4d"},{"control-id":"ac-11.1","description":"","props":[{"name":"Rule_Id","ns":"https://oscal-compass/compliance-trestle/schemas/oscal/cd","value":"accounts_tmout"}],"uuid":"0e4db66d-0033-454e-9753-75c4424bbd4e"},{"control-id":"ac-12","description":"","props":[{"name":"Rule_Id","ns":"https://oscal-compass/compliance-trestle/schemas/oscal/cd","value":"accounts_tmout"}],"uuid":"a01071e2-524f-4079-8270-e8e69595095c"},{"control-id":"ac-6.2","description":"","props":[{"name":"Rule_Id","ns":"https://oscal-compass/compliance-trestle/schemas/oscal/cd","value":"package_sudo_installed"},{"name":"Rule_Id","ns":"https://oscal-compass/compliance-trestle/schemas/oscal/cd","value":"sshd_disable_root_login"},{"name":"Rule_Id","ns":"https://oscal-compass/compliance-trestle/schemas/oscal/cd","value":"sudo_add_use_pty"},{"name":"Rule_Id","ns":"https://oscal-compass/compliance-trestle/schemas/oscal/cd","value":"sudo_remove_no_authenticate"},{"name":"Rule_Id","ns":"https://oscal-compass/compliance-trestle/schemas/oscal/cd","value":"sudo_require_authentication"},{"name":"Rule_Id","ns":"https://oscal-compass/compliance-trestle/schemas/oscal/cd","value":"sudo_require_reauthentication"}],"uuid":"6d23f675-15e0-4f9c-8f8a-37a74104ab89"},{"control-id":"ac-6.5","description":"","props":[{"name":"Rule_Id","ns":"https://oscal-compass/compliance-trestle/schemas/oscal/cd","value":"package_sudo_installed"},{"name":"Rule_Id","ns":"https://oscal-compass/compliance-trestle/schemas/oscal/cd","value":"sshd_disable_root_login"},{"name":"Rule_Id","ns":"https://oscal-compass/compliance-trestle/schemas/oscal/cd","value":"sudo_add_use_pty"},{"name":"Rule_Id","ns":"https://oscal-compass/compliance-trestle/schemas/oscal/cd","value":"sudo_remove_no_authenticate"},{"name":"Rule_Id","ns":"https://oscal-compass/compliance-trestle/schemas/oscal/cd","value":"sudo_require_authentication"},{"name":"Rule_Id","ns":"https://oscal-compass/compliance-trestle/schemas/oscal/cd","value":"sudo_require_reauthentication"}],"uuid":"b4b6b4b4-fb38-42b7-aed3-8f829b263f16"},{"control-id":"ac-1","description":"","props":[{"name":"Rule_Id","ns":"https://oscal-compass/compliance-trestle/schemas/oscal/cd","value":"accounts_passwords_pam_faillock_deny"},{"name":"Rule_Id","ns":"https://oscal-compass/compliance-trestle/schemas/oscal/cd","value":"accounts_passwords_pam_faillock_enabled"},{"name":"Rule_Id","ns":"https://oscal-compass/compliance-trestle/schemas/oscal/cd","value":"accounts_passwords_pam_faillock_root_unlock_time"},{"name":"Rule_Id","ns":"https://oscal-compass/compliance-trestle/schemas/oscal/cd","value":"accounts_passwords_pam_faillock_unlock_time"}],"uuid":"4ae74a00-0c3d-4a2a-89e9-f93c226d1106"},{"control-id":"ac-2","description":"","props":[{"name":"Rule_Id","ns":"https://oscal-compass/compliance-trestle/schemas/oscal/cd","value":"accounts_passwords_pam_faillock_deny"},{"name":"Rule_Id","ns":"https://oscal-compass/compliance-trestle/schemas/oscal/cd","value":"accounts_passwords_pam_faillock_enabled"},{"name":"Rule_Id","ns":"https://oscal-compass/compliance-trestle/schemas/oscal/cd","value":"accounts_passwords_pam_faillock_root_unlock_time"},{"name":"Rule_Id","ns":"https://oscal-compass/compliance-trestle/schemas/oscal/cd","value":"accounts_passwords_pam_faillock_unlock_time"}],"uuid":"f64d55c9-e365-422c-8144-15e70f730611"},{"control-id":"ac-2.1","description":"","props":[{"name":"Rule_Id","ns":"https://oscal-compass/compliance-trestle/schemas/oscal/cd","value":"accounts_passwords_pam_faillock_deny"},{"name":"Rule_Id","ns":"https://oscal-compass/compliance-trestle/schemas/oscal/cd","value":"accounts_passwords_pam_faillock_enabled"},{"name":"Rule_Id","ns":"https://oscal-compass/compliance-trestle/schemas/oscal/cd","value":"accounts_passwords_pam_faillock_root_unlock_time"},{"name":"Rule_Id","ns":"https://oscal-compass/compliance-trestle/schemas/oscal/cd","value":"accounts_passwords_pam_faillock_unlock_time"}],"uuid":"1e5f6915-e89e-442d-b68f-691c04ab9455"},{"control-id":"au-2","description":"","props":[{"name":"Rule_Id","ns":"https://oscal-compass/compliance-trestle/schemas/oscal/cd","value":"sshd_set_loglevel_info"}],"uuid":"5ce20048-a573-45ca-926e-e6a86d0684b4"},{"control-id":"au-7","description":"","props":[{"name":"Rule_Id","ns":"https://oscal-compass/compliance-trestle/schemas/oscal/cd","value":"sshd_set_loglevel_info"},{"name":"Rule_Id","ns":"https://oscal-compass/compliance-trestle/schemas/oscal/cd","value":"sshd_set_max_auth_tries"},{"name":"Rule_Id","ns":"https://oscal-compass/compliance-trestle/schemas/oscal/cd","value":"sudo_custom_logfile"}],"uuid":"237e6893-5211-442b-8a7a-f8eb71f92543"},{"control-id":"au-12","description":"","props":[{"name":"Rule_Id","ns":"https://oscal-compass/compliance-trestle/schemas/oscal/cd","value":"sshd_set_loglevel_info"},{"name":"Rule_Id","ns":"https://oscal-compass/compliance-trestle/schemas/oscal/cd","value":"sshd_set_max_auth_tries"},{"name":"Rule_Id","ns":"https://oscal-compass/compliance-trestle/schemas/oscal/cd","value":"sudo_custom_logfile"}],"uuid":"da27508e-123f-44a4-b6a5-7bd9649adc36"},{"control-id":"au-3","description":"","props":[{"name":"Rule_Id","ns":"https://oscal-compass/compliance-trestle/schemas/oscal/cd","value":"sshd_set_max_auth_tries"},{"name":"Rule_Id","ns":"https://oscal-compass/compliance-trestle/schemas/oscal/cd","value":"sudo_custom_logfile"}],"uuid":"8e2be6b8-5538-4674-acbe-feb8fd914385"},{"control-id":"au-3.1","description":"","props":[{"name":"Rule_Id","ns":"https://oscal-compass/compliance-trestle/schemas/oscal/cd","value":"sshd_set_max_auth_tries"},{"name":"Rule_Id","ns":"https://oscal-compass/compliance-trestle/schemas/oscal/cd","value":"sudo_custom_logfile"}],"uuid":"18e6f0eb-fffa-4263-97ff-a63af395463e"},{"control-id":"ac-10","description":"Implementation of AC-10 via XCCDF validation","props":[{"name":"Rule_Id","ns":"https://oscal-compass/compliance-trestle/schemas/oscal/cd","value":"concurrent_session_limit_configured"}],"uuid":"4bdd8e78-eb7f-4c0d-b734-9520552ce8cd"},{"control-id":"ac-17.1","description":"Implementation of AC-17.1 via XCCDF validation","props":[{"name":"Rule_Id","ns":"https://oscal-compass/compliance-trestle/schemas/oscal/cd","value":"sshd_logging_enabled"}],"uuid":"c06c1ae3-ceb9-4583-b895-8eda8d65735f"},{"control-id":"ac-2.2","description":"Implementation of AC-2.2 via XCCDF validation","props":[{"name":"Rule_Id","ns":"https://oscal-compass/compliance-trestle/schemas/oscal/cd","value":"account_temporary_expiration_configured"}],"uuid":"b7720a7a-c171-4af2-a8da-ebe75f396a42"},{"control-id":"ac-2.3","description":"Implementation of AC-2.3 via XCCDF validation","props":[{"name":"Rule_Id","ns":"https://oscal-compass/compliance-trestle/schemas/oscal/cd","value":"account_disable_inactive_accounts"}],"uuid":"3e7284d7-9d20-4c7d-bc6d-444d226ace2e"},{"control-id":"ac-4.4","description":"Implementation of AC-4.4 via XCCDF validation","props":[{"name":"Rule_Id","ns":"https://oscal-compass/compliance-trestle/schemas/oscal/cd","value":"encrypted_traffic_inspection_configured"}],"uuid":"d3d533d6-0a07-465e-b34b-990b91f7ab76"},{"control-id":"ac-6.1","description":"Implementation of AC-6.1 via XCCDF validation","props":[{"name":"Rule_Id","ns":"https://oscal-compass/compliance-trestle/schemas/oscal/cd","value":"sudo_security_function_authorization"}],"uuid":"6081b1bc-dd54-4740-b931-42a6f613c86b"},{"control-id":"ac-6.3","description":"Implementation of AC-6.3 via XCCDF validation","props":[{"name":"Rule_Id","ns":"https://oscal-compass/compliance-trestle/schemas/oscal/cd","value":"privileged_command_network_restriction"}],"uuid":"09306527-594f-4792-8a66-2bf60a598393"},{"control-id":"au-10","description":"Implementation of AU-10 via XCCDF validation","props":[{"name":"Rule_Id","ns":"https://oscal-compass/compliance-trestle/schemas/oscal/cd","value":"critical_action_signing_enabled"}],"uuid":"8180315f-7d4f-4f29-9448-b53d0d8a886d"},{"control-id":"au-12.1","description":"Implementation of AU-12.1 via XCCDF validation","props":[{"name":"Rule_Id","ns":"https://oscal-compass/compliance-trestle/schemas/oscal/cd","value":"time_synchronization_configured"}],"uuid":"6946a656-fa4e-4a94-ba63-07fedbc8beaa"},{"control-id":"au-5.1","description":"Implementation of AU-5.1 via XCCDF validation","props":[{"name":"Rule_Id","ns":"https://oscal-compass/compliance-trestle/schemas/oscal/cd","value":"auditd_storage_threshold_alert"}],"uuid":"7838f5c9-9ff6-4763-988f-effe6ea16d1a"},{"control-id":"au-5.2","description":"Implementation of AU-5.2 via XCCDF validation","props":[{"name":"Rule_Id","ns":"https://oscal-compass/compliance-trestle/schemas/oscal/cd","value":"auditd_realtime_alerts_enabled"}],"uuid":"c1ef60ba-b627-43fc-8c5e-18fcd45853fa"},{"control-id":"au-6.1","description":"Implementation of AU-6.1 via XCCDF validation","props":[{"name":"Rule_Id","ns":"https://oscal-compass/compliance-trestle/schemas/oscal/cd","value":"log_analysis_tool_configured"}],"uuid":"b76a42f4-1c5c-48f1-82bf-ca38d2810c30"},{"control-id":"au-6.4","description":"Implementation of AU-6.4 via XCCDF validation","props":[{"name":"Rule_Id","ns":"https://oscal-compass/compliance-trestle/schemas/oscal/cd","value":"centralized_logging_configured"}],"uuid":"1381f7e2-ac89-4d71-bdf9-699f2d7326b5"},{"control-id":"au-9.2","description":"Implementation of AU-9.2 via XCCDF validation","props":[{"name":"Rule_Id","ns":"https://oscal-compass/compliance-trestle/schemas/oscal/cd","value":"audit_logs_remote_storage"}],"uuid":"10e3b8af-469a-472b-b18b-b7a79a1b85a1"},{"control-id":"au-9.3","description":"Implementation of AU-9.3 via XCCDF validation","props":[{"name":"Rule_Id","ns":"https://oscal-compass/compliance-trestle/schemas/oscal/cd","value":"audit_logs_encrypted"}],"uuid":"17738c24-c9ae-4de3-8911-ca0b5867dbb2"},{"control-id":"cm-3.2","description":"Implementation of CM-3.2 via XCCDF validation","props":[{"name":"Rule_Id","ns":"https://oscal-compass/compliance-trestle/schemas/oscal/cd","value":"change_control_documentation_required"}],"uuid":"3adb22bb-c225-410f-9d26-d181351be186"},{"control-id":"si-2.2","description":"Implementation of SI-2.2 via XCCDF validation","props":[{"name":"Rule_Id","ns":"https://oscal-compass/compliance-trestle/schemas/oscal/cd","value":"package_update_automation_configured"}],"uuid":"704e7771-e155-418f-8808-a742626ea77a"},{"control-id":"si-4.2","description":"Implementation of SI-4.2 via XCCDF validation","props":[{"name":"Rule_Id","ns":"https://oscal-compass/compliance-trestle/schemas/oscal/cd","value":"intrusion_detection_tool_installed"}],"uuid":"7f0263f8-d505-4c9c-a64f-db8fdd73cde9"}],"source":"../../catalogs/resolved-FedRAMP-Rev5-Moderate/catalog.json","uuid":"4de88500-ac9d-4cc3-a7ff-c3b25d501db8"}],"description":"Ubuntu Linux 24.04 LTS","props":[{"name":"Rule_Id","ns":"https://oscal-compass/compliance-trestle/schemas/oscal/cd","remarks":"rule_set_00","value":"accounts_password_pam_unix_enabled"},{"name":"Rule_Description","ns":"https://oscal-compass/compliance-trestle/schemas/oscal/cd","remarks":"rule_set_00","value":"accounts_password_pam_unix_enabled"},{"name":"Rule_Id","ns":"https://oscal-compass/compliance-trestle/schemas/oscal/cd","remarks":"rule_set_01","value":"accounts_root_gid_zero"},{"name":"Rule_Description","ns":"https://oscal-compass/compliance-trestle/schemas/oscal/cd","remarks":"rule_set_01","value":"accounts_root_gid_zero"},{"name":"Rule_Id","ns":"https://oscal-compass/compliance-trestle/schemas/oscal/cd","remarks":"rule_set_02","value":"accounts_umask_etc_bashrc"},{"name":"Rule_Description","ns":"https://oscal-compass/compliance-trestle/schemas/oscal/cd","remarks":"rule_set_02","value":"accounts_umask_etc_bashrc"},{"name":"Rule_Id","ns":"https://oscal-compass/compliance-trestle/schemas/oscal/cd","remarks":"rule_set_03","value":"accounts_umask_etc_login_defs"},{"name":"Rule_Description","ns":"https://oscal-compass/compliance-trestle/schemas/oscal/cd","remarks":"rule_set_03","value":"accounts_umask_etc_login_defs"},{"name":"Rule_Id","ns":"https://oscal-compass/compliance-trestle/schemas/oscal/cd","remarks":"rule_set_04","value":"accounts_umask_etc_profile"},{"name":"Rule_Description","ns":"https://oscal-compass/compliance-trestle/schemas/oscal/cd","remarks":"rule_set_04","value":"accounts_umask_etc_profile"},{"name":"Rule_Id","ns":"https://oscal-compass/compliance-trestle/schemas/oscal/cd","remarks":"rule_set_05","value":"accounts_umask_root"},{"name":"Rule_Description","ns":"https://oscal-compass/compliance-trestle/schemas/oscal/cd","remarks":"rule_set_05","value":"accounts_umask_root"},{"name":"Rule_Id","ns":"https://oscal-compass/compliance-trestle/schemas/oscal/cd","remarks":"rule_set_06","value":"ensure_pam_wheel_group_empty"},{"name":"Rule_Description","ns":"https://oscal-compass/compliance-trestle/schemas/oscal/cd","remarks":"rule_set_06","value":"ensure_pam_wheel_group_empty"},{"name":"Rule_Id","ns":"https://oscal-compass/compliance-trestle/schemas/oscal/cd","remarks":"rule_set_07","value":"ensure_root_access_controlled"},{"name":"Rule_Description","ns":"https://oscal-compass/compliance-trestle/schemas/oscal/cd","remarks":"rule_set_07","value":"ensure_root_access_controlled"},{"name":"Rule_Id","ns":"https://oscal-compass/compliance-trestle/schemas/oscal/cd","remarks":"rule_set_08","value":"file_groupowner_sshd_config"},{"name":"Rule_Description","ns":"https://oscal-compass/compliance-trestle/schemas/oscal/cd","remarks":"rule_set_08","value":"file_groupowner_sshd_config"},{"name":"Rule_Id","ns":"https://oscal-compass/compliance-trestle/schemas/oscal/cd","remarks":"rule_set_09","value":"file_owner_sshd_config"},{"name":"Rule_Description","ns":"https://oscal-compass/compliance-trestle/schemas/oscal/cd","remarks":"rule_set_09","value":"file_owner_sshd_config"},{"name":"Rule_Id","ns":"https://oscal-compass/compliance-trestle/schemas/oscal/cd","remarks":"rule_set_10","value":"file_permissions_sshd_config"},{"name":"Rule_Description","ns":"https://oscal-compass/compliance-trestle/schemas/oscal/cd","remarks":"rule_set_10","value":"file_permissions_sshd_config"},{"name":"Rule_Id","ns":"https://oscal-compass/compliance-trestle/schemas/oscal/cd","remarks":"rule_set_11","value":"file_permissions_sshd_private_key"},{"name":"Rule_Description","ns":"https://oscal-compass/compliance-trestle/schemas/oscal/cd","remarks":"rule_set_11","value":"file_permissions_sshd_private_key"},{"name":"Rule_Id","ns":"https://oscal-compass/compliance-trestle/schemas/oscal/cd","remarks":"rule_set_12","value":"file_permissions_sshd_pub_key"},{"name":"Rule_Description","ns":"https://oscal-compass/compliance-trestle/schemas/oscal/cd","remarks":"rule_set_12","value":"file_permissions_sshd_pub_key"},{"name":"Rule_Id","ns":"https://oscal-compass/compliance-trestle/schemas/oscal/cd","remarks":"rule_set_13","value":"groups_no_zero_gid_except_root"},{"name":"Rule_Description","ns":"https://oscal-compass/compliance-trestle/schemas/oscal/cd","remarks":"rule_set_13","value":"groups_no_zero_gid_except_root"},{"name":"Rule_Id","ns":"https://oscal-compass/compliance-trestle/schemas/oscal/cd","remarks":"rule_set_14","value":"no_invalid_shell_accounts_unlocked"},{"name":"Rule_Description","ns":"https://oscal-compass/compliance-trestle/schemas/oscal/cd","remarks":"rule_set_14","value":"no_invalid_shell_accounts_unlocked"},{"name":"Rule_Id","ns":"https://oscal-compass/compliance-trestle/schemas/oscal/cd","remarks":"rule_set_15","value":"no_shelllogin_for_systemaccounts"},{"name":"Rule_Description","ns":"https://oscal-compass/compliance-trestle/schemas/oscal/cd","remarks":"rule_set_15","value":"no_shelllogin_for_systemaccounts"},{"name":"Rule_Id","ns":"https://oscal-compass/compliance-trestle/schemas/oscal/cd","remarks":"rule_set_16","value":"sshd_limit_user_access"},{"name":"Rule_Description","ns":"https://oscal-compass/compliance-trestle/schemas/oscal/cd","remarks":"rule_set_16","value":"sshd_limit_user_access"},{"name":"Rule_Id","ns":"https://oscal-compass/compliance-trestle/schemas/oscal/cd","remarks":"rule_set_17","value":"use_pam_wheel_group_for_su"},{"name":"Rule_Description","ns":"https://oscal-compass/compliance-trestle/schemas/oscal/cd","remarks":"rule_set_17","value":"use_pam_wheel_group_for_su"},{"name":"Rule_Id","ns":"https://oscal-compass/compliance-trestle/schemas/oscal/cd","remarks":"rule_set_18","value":"sshd_use_strong_ciphers"},{"name":"Rule_Description","ns":"https://oscal-compass/compliance-trestle/schemas/oscal/cd","remarks":"rule_set_18","value":"sshd_use_strong_ciphers"},{"name":"Rule_Id","ns":"https://oscal-compass/compliance-trestle/schemas/oscal/cd","remarks":"rule_set_19","value":"sshd_use_strong_kex"},{"name":"Rule_Description","ns":"https://oscal-compass/compliance-trestle/schemas/oscal/cd","remarks":"rule_set_19","value":"sshd_use_strong_kex"},{"name":"Rule_Id","ns":"https://oscal-compass/compliance-trestle/schemas/oscal/cd","remarks":"rule_set_20","value":"sshd_use_strong_macs"},{"name":"Rule_Description","ns":"https://oscal-compass/compliance-trestle/schemas/oscal/cd","remarks":"rule_set_20","value":"sshd_use_strong_macs"},{"name":"Rule_Id","ns":"https://oscal-compass/compliance-trestle/schemas/oscal/cd","remarks":"rule_set_21","value":"accounts_password_pam_pwhistory_use_authtok"},{"name":"Rule_Description","ns":"https://oscal-compass/compliance-trestle/schemas/oscal/cd","remarks":"rule_set_21","value":"accounts_password_pam_pwhistory_use_authtok"},{"name":"Rule_Id","ns":"https://oscal-compass/compliance-trestle/schemas/oscal/cd","remarks":"rule_set_22","value":"accounts_password_pam_unix_authtok"},{"name":"Rule_Description","ns":"https://oscal-compass/compliance-trestle/schemas/oscal/cd","remarks":"rule_set_22","value":"accounts_password_pam_unix_authtok"},{"name":"Rule_Id","ns":"https://oscal-compass/compliance-trestle/schemas/oscal/cd","remarks":"rule_set_23","value":"set_password_hashing_algorithm_logindefs"},{"name":"Rule_Description","ns":"https://oscal-compass/compliance-trestle/schemas/oscal/cd","remarks":"rule_set_23","value":"set_password_hashing_algorithm_logindefs"},{"name":"Rule_Id","ns":"https://oscal-compass/compliance-trestle/schemas/oscal/cd","remarks":"rule_set_24","value":"set_password_hashing_algorithm_systemauth"},{"name":"Rule_Description","ns":"https://oscal-compass/compliance-trestle/schemas/oscal/cd","remarks":"rule_set_24","value":"set_password_hashing_algorithm_systemauth"},{"name":"Rule_Id","ns":"https://oscal-compass/compliance-trestle/schemas/oscal/cd","remarks":"rule_set_25","value":"account_disable_post_pw_expiration"},{"name":"Rule_Description","ns":"https://oscal-compass/compliance-trestle/schemas/oscal/cd","remarks":"rule_set_25","value":"account_disable_post_pw_expiration"},{"name":"Rule_Id","ns":"https://oscal-compass/compliance-trestle/schemas/oscal/cd","remarks":"rule_set_26","value":"accounts_maximum_age_login_defs"},{"name":"Rule_Description","ns":"https://oscal-compass/compliance-trestle/schemas/oscal/cd","remarks":"rule_set_26","value":"accounts_maximum_age_login_defs"},{"name":"Rule_Id","ns":"https://oscal-compass/compliance-trestle/schemas/oscal/cd","remarks":"rule_set_27","value":"accounts_minimum_age_login_defs"},{"name":"Rule_Description","ns":"https://oscal-compass/compliance-trestle/schemas/oscal/cd","remarks":"rule_set_27","value":"accounts_minimum_age_login_defs"},{"name":"Rule_Id","ns":"https://oscal-compass/compliance-trestle/schemas/oscal/cd","remarks":"rule_set_28","value":"accounts_password_last_change_is_in_past"},{"name":"Rule_Description","ns":"https://oscal-compass/compliance-trestle/schemas/oscal/cd","remarks":"rule_set_28","value":"accounts_password_last_change_is_in_past"},{"name":"Rule_Id","ns":"https://oscal-compass/compliance-trestle/schemas/oscal/cd","remarks":"rule_set_29","value":"accounts_password_pam_dcredit"},{"name":"Rule_Description","ns":"https://oscal-compass/compliance-trestle/schemas/oscal/cd","remarks":"rule_set_29","value":"accounts_password_pam_dcredit"},{"name":"Rule_Id","ns":"https://oscal-compass/compliance-trestle/schemas/oscal/cd","remarks":"rule_set_30","value":"accounts_password_pam_dictcheck"},{"name":"Rule_Description","ns":"https://oscal-compass/compliance-trestle/schemas/oscal/cd","remarks":"rule_set_30","value":"accounts_password_pam_dictcheck"},{"name":"Rule_Id","ns":"https://oscal-compass/compliance-trestle/schemas/oscal/cd","remarks":"rule_set_31","value":"accounts_password_pam_difok"},{"name":"Rule_Description","ns":"https://oscal-compass/compliance-trestle/schemas/oscal/cd","remarks":"rule_set_31","value":"accounts_password_pam_difok"},{"name":"Rule_Id","ns":"https://oscal-compass/compliance-trestle/schemas/oscal/cd","remarks":"rule_set_32","value":"accounts_password_pam_enforce_root"},{"name":"Rule_Description","ns":"https://oscal-compass/compliance-trestle/schemas/oscal/cd","remarks":"rule_set_32","value":"accounts_password_pam_enforce_root"},{"name":"Rule_Id","ns":"https://oscal-compass/compliance-trestle/schemas/oscal/cd","remarks":"rule_set_33","value":"accounts_password_pam_enforcing"},{"name":"Rule_Description","ns":"https://oscal-compass/compliance-trestle/schemas/oscal/cd","remarks":"rule_set_33","value":"accounts_password_pam_enforcing"},{"name":"Rule_Id","ns":"https://oscal-compass/compliance-trestle/schemas/oscal/cd","remarks":"rule_set_34","value":"accounts_password_pam_lcredit"},{"name":"Rule_Description","ns":"https://oscal-compass/compliance-trestle/schemas/oscal/cd","remarks":"rule_set_34","value":"accounts_password_pam_lcredit"},{"name":"Rule_Id","ns":"https://oscal-compass/compliance-trestle/schemas/oscal/cd","remarks":"rule_set_35","value":"accounts_password_pam_maxrepeat"},{"name":"Rule_Description","ns":"https://oscal-compass/compliance-trestle/schemas/oscal/cd","remarks":"rule_set_35","value":"accounts_password_pam_maxrepeat"},{"name":"Rule_Id","ns":"https://oscal-compass/compliance-trestle/schemas/oscal/cd","remarks":"rule_set_36","value":"accounts_password_pam_maxsequence"},{"name":"Rule_Description","ns":"https://oscal-compass/compliance-trestle/schemas/oscal/cd","remarks":"rule_set_36","value":"accounts_password_pam_maxsequence"},{"name":"Rule_Id","ns":"https://oscal-compass/compliance-trestle/schemas/oscal/cd","remarks":"rule_set_37","value":"accounts_password_pam_minclass"},{"name":"Rule_Description","ns":"https://oscal-compass/compliance-trestle/schemas/oscal/cd","remarks":"rule_set_37","value":"accounts_password_pam_minclass"},{"name":"Rule_Id","ns":"https://oscal-compass/compliance-trestle/schemas/oscal/cd","remarks":"rule_set_38","value":"accounts_password_pam_minlen"},{"name":"Rule_Description","ns":"https://oscal-compass/compliance-trestle/schemas/oscal/cd","remarks":"rule_set_38","value":"accounts_password_pam_minlen"},{"name":"Rule_Id","ns":"https://oscal-compass/compliance-trestle/schemas/oscal/cd","remarks":"rule_set_39","value":"accounts_password_pam_ocredit"},{"name":"Rule_Description","ns":"https://oscal-compass/compliance-trestle/schemas/oscal/cd","remarks":"rule_set_39","value":"accounts_password_pam_ocredit"},{"name":"Rule_Id","ns":"https://oscal-compass/compliance-trestle/schemas/oscal/cd","remarks":"rule_set_40","value":"accounts_password_pam_pwhistory_enabled"},{"name":"Rule_Description","ns":"https://oscal-compass/compliance-trestle/schemas/oscal/cd","remarks":"rule_set_40","value":"accounts_password_pam_pwhistory_enabled"},{"name":"Rule_Id","ns":"https://oscal-compass/compliance-trestle/schemas/oscal/cd","remarks":"rule_set_41","value":"accounts_password_pam_pwhistory_enforce_root"},{"name":"Rule_Description","ns":"https://oscal-compass/compliance-trestle/schemas/oscal/cd","remarks":"rule_set_41","value":"accounts_password_pam_pwhistory_enforce_root"},{"name":"Rule_Id","ns":"https://oscal-compass/compliance-trestle/schemas/oscal/cd","remarks":"rule_set_42","value":"accounts_password_pam_pwhistory_remember"},{"name":"Rule_Description","ns":"https://oscal-compass/compliance-trestle/schemas/oscal/cd","remarks":"rule_set_42","value":"accounts_password_pam_pwhistory_remember"},{"name":"Rule_Id","ns":"https://oscal-compass/compliance-trestle/schemas/oscal/cd","remarks":"rule_set_43","value":"accounts_password_pam_pwquality_enabled"},{"name":"Rule_Description","ns":"https://oscal-compass/compliance-trestle/schemas/oscal/cd","remarks":"rule_set_43","value":"accounts_password_pam_pwquality_enabled"},{"name":"Rule_Id","ns":"https://oscal-compass/compliance-trestle/schemas/oscal/cd","remarks":"rule_set_44","value":"accounts_password_pam_ucredit"},{"name":"Rule_Description","ns":"https://oscal-compass/compliance-trestle/schemas/oscal/cd","remarks":"rule_set_44","value":"accounts_password_pam_ucredit"},{"name":"Rule_Id","ns":"https://oscal-compass/compliance-trestle/schemas/oscal/cd","remarks":"rule_set_45","value":"accounts_password_pam_unix_no_remember"},{"name":"Rule_Description","ns":"https://oscal-compass/compliance-trestle/schemas/oscal/cd","remarks":"rule_set_45","value":"accounts_password_pam_unix_no_remember"},{"name":"Rule_Id","ns":"https://oscal-compass/compliance-trestle/schemas/oscal/cd","remarks":"rule_set_46","value":"accounts_password_set_max_life_existing"},{"name":"Rule_Description","ns":"https://oscal-compass/compliance-trestle/schemas/oscal/cd","remarks":"rule_set_46","value":"accounts_password_set_max_life_existing"},{"name":"Rule_Id","ns":"https://oscal-compass/compliance-trestle/schemas/oscal/cd","remarks":"rule_set_47","value":"accounts_password_set_min_life_existing"},{"name":"Rule_Description","ns":"https://oscal-compass/compliance-trestle/schemas/oscal/cd","remarks":"rule_set_47","value":"accounts_password_set_min_life_existing"},{"name":"Rule_Id","ns":"https://oscal-compass/compliance-trestle/schemas/oscal/cd","remarks":"rule_set_48","value":"no_empty_passwords_unix"},{"name":"Rule_Description","ns":"https://oscal-compass/compliance-trestle/schemas/oscal/cd","remarks":"rule_set_48","value":"no_empty_passwords_unix"},{"name":"Rule_Id","ns":"https://oscal-compass/compliance-trestle/schemas/oscal/cd","remarks":"rule_set_49","value":"sshd_disable_empty_passwords"},{"name":"Rule_Description","ns":"https://oscal-compass/compliance-trestle/schemas/oscal/cd","remarks":"rule_set_49","value":"sshd_disable_empty_passwords"},{"name":"Rule_Id","ns":"https://oscal-compass/compliance-trestle/schemas/oscal/cd","remarks":"rule_set_50","value":"sshd_disable_gssapi_auth"},{"name":"Rule_Description","ns":"https://oscal-compass/compliance-trestle/schemas/oscal/cd","remarks":"rule_set_50","value":"sshd_disable_gssapi_auth"},{"name":"Rule_Id","ns":"https://oscal-compass/compliance-trestle/schemas/oscal/cd","remarks":"rule_set_51","value":"sshd_disable_rhosts"},{"name":"Rule_Description","ns":"https://oscal-compass/compliance-trestle/schemas/oscal/cd","remarks":"rule_set_51","value":"sshd_disable_rhosts"},{"name":"Rule_Id","ns":"https://oscal-compass/compliance-trestle/schemas/oscal/cd","remarks":"rule_set_52","value":"sshd_enable_pam"},{"name":"Rule_Description","ns":"https://oscal-compass/compliance-trestle/schemas/oscal/cd","remarks":"rule_set_52","value":"sshd_enable_pam"},{"name":"Rule_Id","ns":"https://oscal-compass/compliance-trestle/schemas/oscal/cd","remarks":"rule_set_53","value":"accounts_password_warn_age_login_defs"},{"name":"Rule_Description","ns":"https://oscal-compass/compliance-trestle/schemas/oscal/cd","remarks":"rule_set_53","value":"accounts_password_warn_age_login_defs"},{"name":"Rule_Id","ns":"https://oscal-compass/compliance-trestle/schemas/oscal/cd","remarks":"rule_set_54","value":"sshd_disable_forwarding"},{"name":"Rule_Description","ns":"https://oscal-compass/compliance-trestle/schemas/oscal/cd","remarks":"rule_set_54","value":"sshd_disable_forwarding"},{"name":"Rule_Id","ns":"https://oscal-compass/compliance-trestle/schemas/oscal/cd","remarks":"rule_set_55","value":"accounts_tmout"},{"name":"Rule_Description","ns":"https://oscal-compass/compliance-trestle/schemas/oscal/cd","remarks":"rule_set_55","value":"accounts_tmout"},{"name":"Rule_Id","ns":"https://oscal-compass/compliance-trestle/schemas/oscal/cd","remarks":"rule_set_56","value":"package_sudo_installed"},{"name":"Rule_Description","ns":"https://oscal-compass/compliance-trestle/schemas/oscal/cd","remarks":"rule_set_56","value":"package_sudo_installed"},{"name":"Rule_Id","ns":"https://oscal-compass/compliance-trestle/schemas/oscal/cd","remarks":"rule_set_57","value":"sshd_disable_root_login"},{"name":"Rule_Description","ns":"https://oscal-compass/compliance-trestle/schemas/oscal/cd","remarks":"rule_set_57","value":"sshd_disable_root_login"},{"name":"Rule_Id","ns":"https://oscal-compass/compliance-trestle/schemas/oscal/cd","remarks":"rule_set_58","value":"sudo_add_use_pty"},{"name":"Rule_Description","ns":"https://oscal-compass/compliance-trestle/schemas/oscal/cd","remarks":"rule_set_58","value":"sudo_add_use_pty"},{"name":"Rule_Id","ns":"https://oscal-compass/compliance-trestle/schemas/oscal/cd","remarks":"rule_set_59","value":"sudo_remove_no_authenticate"},{"name":"Rule_Description","ns":"https://oscal-compass/compliance-trestle/schemas/oscal/cd","remarks":"rule_set_59","value":"sudo_remove_no_authenticate"},{"name":"Rule_Id","ns":"https://oscal-compass/compliance-trestle/schemas/oscal/cd","remarks":"rule_set_60","value":"sudo_require_authentication"},{"name":"Rule_Description","ns":"https://oscal-compass/compliance-trestle/schemas/oscal/cd","remarks":"rule_set_60","value":"sudo_require_authentication"},{"name":"Rule_Id","ns":"https://oscal-compass/compliance-trestle/schemas/oscal/cd","remarks":"rule_set_61","value":"sudo_require_reauthentication"},{"name":"Rule_Description","ns":"https://oscal-compass/compliance-trestle/schemas/oscal/cd","remarks":"rule_set_61","value":"sudo_require_reauthentication"},{"name":"Rule_Id","ns":"https://oscal-compass/compliance-trestle/schemas/oscal/cd","remarks":"rule_set_62","value":"accounts_passwords_pam_faillock_deny"},{"name":"Rule_Description","ns":"https://oscal-compass/compliance-trestle/schemas/oscal/cd","remarks":"rule_set_62","value":"accounts_passwords_pam_faillock_deny"},{"name":"Rule_Id","ns":"https://oscal-compass/compliance-trestle/schemas/oscal/cd","remarks":"rule_set_63","value":"accounts_passwords_pam_faillock_enabled"},{"name":"Rule_Description","ns":"https://oscal-compass/compliance-trestle/schemas/oscal/cd","remarks":"rule_set_63","value":"accounts_passwords_pam_faillock_enabled"},{"name":"Rule_Id","ns":"https://oscal-compass/compliance-trestle/schemas/oscal/cd","remarks":"rule_set_64","value":"accounts_passwords_pam_faillock_root_unlock_time"},{"name":"Rule_Description","ns":"https://oscal-compass/compliance-trestle/schemas/oscal/cd","remarks":"rule_set_64","value":"accounts_passwords_pam_faillock_root_unlock_time"},{"name":"Rule_Id","ns":"https://oscal-compass/compliance-trestle/schemas/oscal/cd","remarks":"rule_set_65","value":"accounts_passwords_pam_faillock_unlock_time"},{"name":"Rule_Description","ns":"https://oscal-compass/compliance-trestle/schemas/oscal/cd","remarks":"rule_set_65","value":"accounts_passwords_pam_faillock_unlock_time"},{"name":"Rule_Id","ns":"https://oscal-compass/compliance-trestle/schemas/oscal/cd","remarks":"rule_set_66","value":"sshd_set_loglevel_info"},{"name":"Rule_Description","ns":"https://oscal-compass/compliance-trestle/schemas/oscal/cd","remarks":"rule_set_66","value":"sshd_set_loglevel_info"},{"name":"Rule_Id","ns":"https://oscal-compass/compliance-trestle/schemas/oscal/cd","remarks":"rule_set_67","value":"sshd_set_max_auth_tries"},{"name":"Rule_Description","ns":"https://oscal-compass/compliance-trestle/schemas/oscal/cd","remarks":"rule_set_67","value":"sshd_set_max_auth_tries"},{"name":"Rule_Id","ns":"https://oscal-compass/compliance-trestle/schemas/oscal/cd","remarks":"rule_set_68","value":"sudo_custom_logfile"},{"name":"Rule_Description","ns":"https://oscal-compass/compliance-trestle/schemas/oscal/cd","remarks":"rule_set_68","value":"sudo_custom_logfile"},{"name":"Rule_Id","ns":"https://oscal-compass/compliance-trestle/schemas/oscal/cd","remarks":"rule_set_69","value":"account_automated_provisioning_enabled"},{"name":"Rule_Description","ns":"https://oscal-compass/compliance-trestle/schemas/oscal/cd","remarks":"rule_set_69","value":"Verify automated account management is configured"},{"name":"Rule_Id","ns":"https://oscal-compass/compliance-trestle/schemas/oscal/cd","remarks":"rule_set_70","value":"account_temporary_expiration_configured"},{"name":"Rule_Description","ns":"https://oscal-compass/compliance-trestle/schemas/oscal/cd","remarks":"rule_set_70","value":"Verify temporary account expiration is automated"},{"name":"Rule_Id","ns":"https://oscal-compass/compliance-trestle/schemas/oscal/cd","remarks":"rule_set_71","value":"account_disable_inactive_accounts"},{"name":"Rule_Description","ns":"https://oscal-compass/compliance-trestle/schemas/oscal/cd","remarks":"rule_set_71","value":"Verify inactive account disabling mechanism"},{"name":"Rule_Id","ns":"https://oscal-compass/compliance-trestle/schemas/oscal/cd","remarks":"rule_set_72","value":"sudo_security_function_authorization"},{"name":"Rule_Description","ns":"https://oscal-compass/compliance-trestle/schemas/oscal/cd","remarks":"rule_set_72","value":"Verify sudo configuration restricts security functions"},{"name":"Rule_Id","ns":"https://oscal-compass/compliance-trestle/schemas/oscal/cd","remarks":"rule_set_73","value":"service_nonprivileged_user_execution"},{"name":"Rule_Description","ns":"https://oscal-compass/compliance-trestle/schemas/oscal/cd","remarks":"rule_set_73","value":"Verify services run as non-root users"},{"name":"Rule_Id","ns":"https://oscal-compass/compliance-trestle/schemas/oscal/cd","remarks":"rule_set_74","value":"screen_lock_timeout_configured"},{"name":"Rule_Description","ns":"https://oscal-compass/compliance-trestle/schemas/oscal/cd","remarks":"rule_set_74","value":"Verify screen lock timeout is configured"},{"name":"Rule_Id","ns":"https://oscal-compass/compliance-trestle/schemas/oscal/cd","remarks":"rule_set_75","value":"screen_lock_pattern_hiding_enabled"},{"name":"Rule_Description","ns":"https://oscal-compass/compliance-trestle/schemas/oscal/cd","remarks":"rule_set_75","value":"Verify screen blanking on lock"},{"name":"Rule_Id","ns":"https://oscal-compass/compliance-trestle/schemas/oscal/cd","remarks":"rule_set_76","value":"sshd_logging_enabled"},{"name":"Rule_Description","ns":"https://oscal-compass/compliance-trestle/schemas/oscal/cd","remarks":"rule_set_76","value":"Verify SSH logging is enabled and comprehensive"},{"name":"Rule_Id","ns":"https://oscal-compass/compliance-trestle/schemas/oscal/cd","remarks":"rule_set_77","value":"auditd_extended_information_enabled"},{"name":"Rule_Description","ns":"https://oscal-compass/compliance-trestle/schemas/oscal/cd","remarks":"rule_set_77","value":"Verify extended audit information is captured"},{"name":"Rule_Id","ns":"https://oscal-compass/compliance-trestle/schemas/oscal/cd","remarks":"rule_set_78","value":"log_analysis_tool_configured"},{"name":"Rule_Description","ns":"https://oscal-compass/compliance-trestle/schemas/oscal/cd","remarks":"rule_set_78","value":"Verify automated log analysis tool is configured"},{"name":"Rule_Id","ns":"https://oscal-compass/compliance-trestle/schemas/oscal/cd","remarks":"rule_set_79","value":"change_control_documentation_required"},{"name":"Rule_Description","ns":"https://oscal-compass/compliance-trestle/schemas/oscal/cd","remarks":"rule_set_79","value":"Verify change control process documentation"},{"name":"Rule_Id","ns":"https://oscal-compass/compliance-trestle/schemas/oscal/cd","remarks":"rule_set_80","value":"service_periodic_review_enabled"},{"name":"Rule_Description","ns":"https://oscal-compass/compliance-trestle/schemas/oscal/cd","remarks":"rule_set_80","value":"Verify periodic service review process"},{"name":"Rule_Id","ns":"https://oscal-compass/compliance-trestle/schemas/oscal/cd","remarks":"rule_set_81","value":"package_update_automation_configured"},{"name":"Rule_Description","ns":"https://oscal-compass/compliance-trestle/schemas/oscal/cd","remarks":"rule_set_81","value":"Verify automated patch management"},{"name":"Rule_Id","ns":"https://oscal-compass/compliance-trestle/schemas/oscal/cd","remarks":"rule_set_82","value":"intrusion_detection_tool_installed"},{"name":"Rule_Description","ns":"https://oscal-compass/compliance-trestle/schemas/oscal/cd","remarks":"rule_set_82","value":"Verify IDS/IPS tool is installed and running"},{"name":"Rule_Id","ns":"https://oscal-compass/compliance-trestle/schemas/oscal/cd","remarks":"rule_set_83","value":"encrypted_traffic_inspection_configured"},{"name":"Rule_Description","ns":"https://oscal-compass/compliance-trestle/schemas/oscal/cd","remarks":"rule_set_83","value":"Verify encrypted traffic inspection capability"},{"name":"Rule_Id","ns":"https://oscal-compass/compliance-trestle/schemas/oscal/cd","remarks":"rule_set_84","value":"privileged_command_network_restriction"},{"name":"Rule_Description","ns":"https://oscal-compass/compliance-trestle/schemas/oscal/cd","remarks":"rule_set_84","value":"Verify network-based restrictions on privileged commands"},{"name":"Rule_Id","ns":"https://oscal-compass/compliance-trestle/schemas/oscal/cd","remarks":"rule_set_85","value":"concurrent_session_limit_configured"},{"name":"Rule_Description","ns":"https://oscal-compass/compliance-trestle/schemas/oscal/cd","remarks":"rule_set_85","value":"Verify concurrent session limits"},{"name":"Rule_Id","ns":"https://oscal-compass/compliance-trestle/schemas/oscal/cd","remarks":"rule_set_86","value":"auditd_storage_threshold_alert"},{"name":"Rule_Description","ns":"https://oscal-compass/compliance-trestle/schemas/oscal/cd","remarks":"rule_set_86","value":"Verify audit storage threshold alerting"},{"name":"Rule_Id","ns":"https://oscal-compass/compliance-trestle/schemas/oscal/cd","remarks":"rule_set_87","value":"auditd_realtime_alerts_enabled"},{"name":"Rule_Description","ns":"https://oscal-compass/compliance-trestle/schemas/oscal/cd","remarks":"rule_set_87","value":"Verify real-time audit failure alerts"},{"name":"Rule_Id","ns":"https://oscal-compass/compliance-trestle/schemas/oscal/cd","remarks":"rule_set_88","value":"centralized_logging_configured"},{"name":"Rule_Description","ns":"https://oscal-compass/compliance-trestle/schemas/oscal/cd","remarks":"rule_set_88","value":"Verify centralized logging is configured"},{"name":"Rule_Id","ns":"https://oscal-compass/compliance-trestle/schemas/oscal/cd","remarks":"rule_set_89","value":"audit_logs_remote_storage"},{"name":"Rule_Description","ns":"https://oscal-compass/compliance-trestle/schemas/oscal/cd","remarks":"rule_set_89","value":"Verify audit logs are sent to remote system"},{"name":"Rule_Id","ns":"https://oscal-compass/compliance-trestle/schemas/oscal/cd","remarks":"rule_set_90","value":"audit_logs_encrypted"},{"name":"Rule_Description","ns":"https://oscal-compass/compliance-trestle/schemas/oscal/cd","remarks":"rule_set_90","value":"Verify audit log encryption/signing"},{"name":"Rule_Id","ns":"https://oscal-compass/compliance-trestle/schemas/oscal/cd","remarks":"rule_set_91","value":"critical_action_signing_enabled"},{"name":"Rule_Description","ns":"https://oscal-compass/compliance-trestle/schemas/oscal/cd","remarks":"rule_set_91","value":"Verify digital signatures for critical actions"},{"name":"Rule_Id","ns":"https://oscal-compass/compliance-trestle/schemas/oscal/cd","remarks":"rule_set_92","value":"time_synchronization_configured"},{"name":"Rule_Description","ns":"https://oscal-compass/compliance-trestle/schemas/oscal/cd","remarks":"rule_set_92","value":"Verify NTP/chrony is configured and running"}],"title":"Ubuntu_Linux_24.04_LTS","type":"software","uuid":"b2e11579-d4d6-48f8-a43c-ec7157543648"}],"metadata":{"last-modified":"2026-05-09T08:16:55.814457","oscal-version":"1.2.1","title":"Component definition for Ubuntu_Linux_24.04_LTS","version":"V1.2"},"uuid":"3a0c1cd5-fb09-4a19-9061-b1b9231582eb"}}