<Profile id="stig-rhel5-server-upstream">
<title>Upstream STIG for Red Hat Enterprise Linux 5 Server</title>
<description>This profile is being developed under the DoD consensus model to become a STIG in coordination with DISA FSO.</description>

<select idref="accounts_cracklib_present" selected="true"/>
<select idref="accounts_disable_post_pw_expiration" selected="true"/>
<select idref="accounts_executable_dangerous_path_for_root" selected="true"/>
<select idref="accounts_fail_delay" selected="true"/>
<select idref="accounts_global_setting" selected="true"/>
<select idref="accounts_library_dangerous_path_for_root" selected="true"/>
<select idref="accounts_max_concurrent_login_sessions" selected="true"/>
<select idref="accounts_maximum_age_login_defs" selected="true"/>
<select idref="accounts_minimum_age_login_defs" selected="true"/>
<select idref="accounts_no_uid_except_zero" selected="true"/>
<select idref="accounts_password_all_shadowed" selected="true"/>
<select idref="accounts_password_pam_cracklib_dcredit" selected="true"/>
<select idref="accounts_password_pam_cracklib_difok" selected="true"/>
<select idref="accounts_password_pam_cracklib_lcredit" selected="true"/>
<select idref="accounts_password_pam_cracklib_maxrepeat" selected="true"/>
<select idref="accounts_password_pam_cracklib_minlen" selected="true"/>
<select idref="accounts_password_pam_cracklib_ocredit" selected="true"/>
<select idref="accounts_password_pam_cracklib_ucredit" selected="true"/>
<select idref="accounts_password_pam_tally_deny" selected="true"/>
<select idref="accounts_password_pam_unix_remember" selected="true"/>
<select idref="accounts_root_path_dirs_no_write" selected="true"/>
<select idref="accounts_umask" selected="true"/>
<select idref="accounts_unique_name" selected="true"/>
<!-- <select idref="accounts_unique_uid" selected="true"/> -->
<select idref="aide_build_database" selected="true"/>
<select idref="aide_periodic_cron_checking" selected="true"/>
<select idref="at_access_controlled" selected="true"/>
<select idref="at_deny_nonempty" selected="true"/>
<select idref="at_system_accounts" selected="true"/>
<select idref="audit_rules_audit_rules" selected="true"/>
<select idref="audit_rules_dac_modification_chmod" selected="true"/>
<select idref="audit_rules_dac_modification_chown" selected="true"/>
<select idref="audit_rules_dac_modification_fchmod" selected="true"/>
<select idref="audit_rules_dac_modification_fchmodat" selected="true"/>
<select idref="audit_rules_dac_modification_fchown" selected="true"/>
<select idref="audit_rules_dac_modification_fchownat" selected="true"/>
<select idref="audit_rules_dac_modification_fremovexattr" selected="true"/>
<select idref="audit_rules_dac_modification_fsetxattr" selected="true"/>
<select idref="audit_rules_dac_modification_lchown" selected="true"/>
<select idref="audit_rules_dac_modification_lremovexattr" selected="true"/>
<select idref="audit_rules_dac_modification_lsetxattr" selected="true"/>
<select idref="audit_rules_dac_modification_removexattr" selected="true"/>
<select idref="audit_rules_dac_modification_setxattr" selected="true"/>
<select idref="audit_rules_file_deletion_events" selected="true"/>
<select idref="audit_rules_file_deletion_events_rmdir" selected="true"/>
<select idref="audit_rules_kernel_module_loading" selected="true"/>
<select idref="audit_rules_login_events" selected="true"/>
<select idref="audit_rules_sched_setparam" selected="true"/>
<select idref="audit_rules_sched_setscheduler" selected="true"/>
<select idref="audit_rules_setdomainname" selected="true"/>
<select idref="audit_rules_sethostname" selected="true"/>
<select idref="audit_rules_time_adjtimex" selected="true"/>
<select idref="audit_rules_time_clock_settime" selected="true"/>
<select idref="audit_rules_time_settimeofday" selected="true"/>
<select idref="audit_rules_time_stime" selected="true"/>
<select idref="audit_rules_unsuccessful_file_creat" selected="true"/>
<select idref="audit_rules_unsuccessful_file_ftruncate" selected="true"/>
<select idref="audit_rules_unsuccessful_file_open" selected="true"/>
<select idref="audit_rules_unsuccessful_file_openat" selected="true"/>
<select idref="audit_rules_unsuccessful_file_truncate" selected="true"/>
<select idref="audit_rules_usergroup_creation" selected="true"/>
<select idref="audit_rules_usergroup_disabling" selected="true"/>
<select idref="audit_rules_usergroup_modification" selected="true"/>
<select idref="audit_rules_usergroup_termination" selected="true"/>
<select idref="auditd_data_retention_audit_processing_failure" selected="true"/>
<select idref="auditd_data_retention_audit_storage_failure" selected="true"/>
<select idref="banner_etc_issue" selected="true"/>
<select idref="banner_gui_enabled" selected="true"/>
<select idref="baseline_device_files" selected="true"/>
<select idref="baseline_sgid_files" selected="true"/>
<select idref="baseline_suid_files" selected="true"/>
<select idref="bootloader_audit_argument" selected="true"/>
<select idref="bootloader_exists" selected="true"/>
<select idref="bootloader_nousb_argument" selected="true"/>
<select idref="bootloader_password" selected="true"/>
<select idref="bootloader_password_hash" selected="true"/>
<select idref="auditd_audispd_syslog_plugin_activated" selected="true"/>
<select idref="cron_access_controlled" selected="true"/>
<select idref="cron_system_accounts" selected="true"/>
<select idref="dir_perms_world_writable_sticky_bits" selected="true"/>
<select idref="dir_perms_world_writable_system_owned" selected="true"/>
<select idref="disable_ctrlaltdel_reboot" selected="true"/>
<select idref="disable_users_coredumps" selected="true"/>
<select idref="dhcp_client_disable_ddns" selected="true"/>
<select idref="ensure_gpgcheck_never_disabled" selected="true"/>
<select idref="file_groupowner_aliases" selected="true"/>
<select idref="file_groupowner_aliases_files" selected="true"/>
<select idref="file_groupowner_audio_devices" selected="true"/>
<select idref="file_groupowner_audit_log" selected="true"/>
<select idref="file_groupowner_audit_tools" selected="true"/>
<select idref="file_groupowner_bin_traceroute" selected="true"/>
<select idref="file_groupowner_binary_dirs" selected="true"/>
<select idref="file_groupowner_core_dump_dir" selected="true"/>
<select idref="file_groupowner_crontab_dirs" selected="true"/>
<select idref="file_groupowner_crontab_files" selected="true"/>
<select idref="file_groupowner_etc_at_allow" selected="true"/>
<select idref="file_groupowner_etc_at_deny" selected="true"/>
<select idref="file_groupowner_etc_cron_allow" selected="true"/>
<select idref="file_groupowner_etc_cron_deny" selected="true"/>
<select idref="file_groupowner_etc_cups_printers_conf" selected="true"/>
<select idref="file_groupowner_etc_exports" selected="true"/>
<select idref="file_groupowner_etc_group" selected="true"/>
<select idref="file_groupowner_etc_gshadow" selected="true"/>
<select idref="file_groupowner_etc_hosts" selected="true"/>
<select idref="file_groupowner_etc_ldap_conf" selected="true"/>
<select idref="file_groupowner_etc_nsswitch_conf" selected="true"/>
<select idref="file_groupowner_etc_ntp_conf" selected="true"/>
<select idref="file_groupowner_etc_passwd" selected="true"/>
<select idref="file_groupowner_etc_resolv_conf" selected="true"/>
<select idref="file_groupowner_etc_samba_smb_conf" selected="true"/>
<select idref="file_groupowner_etc_samba_tdb" selected="true"/>
<select idref="file_groupowner_etc_security_access_conf" selected="true"/>
<select idref="file_groupowner_etc_securetty" selected="true"/>
<select idref="file_groupowner_etc_services" selected="true"/>
<select idref="file_groupowner_etc_shadow" selected="true"/>
<select idref="file_groupowner_etc_skel" selected="true"/>
<select idref="file_groupowner_etc_sysctl_conf" selected="true"/>
<select idref="file_groupowner_etc_syslog_conf" selected="true"/>
<select idref="file_groupowner_etc_xinetd_conf" selected="true"/>
<select idref="file_groupowner_exports_dirs" selected="true"/>
<select idref="file_groupowner_ftpusers" selected="true"/>
<select idref="file_groupowner_global_initialization_files" selected="true"/>
<select idref="file_groupowner_grub_conf" selected="true"/>
<select idref="file_groupowner_home_dirs" selected="true"/>
<select idref="file_groupowner_home_files" selected="true"/>
<select idref="file_groupowner_ldap_cacerts" selected="true"/>
<select idref="file_groupowner_ldap_certs" selected="true"/>
<select idref="file_groupowner_ldap_keys" selected="true"/>
<select idref="file_groupowner_local_initialization_files" selected="true"/>
<select idref="file_groupowner_run_control_scripts" selected="true"/>
<select idref="file_groupowner_shell_files" selected="true"/>
<select idref="file_groupowner_snmpd_conf" selected="true"/>
<select idref="file_groupowner_var_spool_at" selected="true"/>
<select idref="file_groupowner_var_yp" selected="true"/>
<select idref="file_owner_aliases" selected="true"/>
<select idref="file_owner_aliases_files" selected="true"/>
<select idref="file_owner_audio_devices" selected="true"/>
<select idref="file_owner_audit_log" selected="true"/>
<select idref="file_owner_audit_tools" selected="true"/>
<select idref="file_owner_bin_traceroute" selected="true"/>
<select idref="file_owner_binary_dirs" selected="true"/>
<select idref="file_owner_core_dump_dir" selected="true"/>
<select idref="file_owner_crontab_dirs" selected="true"/>
<select idref="file_owner_crontab_files" selected="true"/>
<select idref="file_owner_etc_at_allow" selected="true"/>
<select idref="file_owner_etc_at_deny" selected="true"/>
<select idref="file_owner_etc_cron_allow" selected="true"/>
<select idref="file_owner_etc_cron_deny" selected="true"/>
<select idref="file_owner_etc_cups_printers_conf" selected="true"/>
<select idref="file_owner_etc_exports" selected="true"/>
<select idref="file_owner_etc_group" selected="true"/>
<select idref="file_owner_etc_gshadow" selected="true"/>
<select idref="file_owner_etc_hosts" selected="true"/>
<select idref="file_owner_etc_ldap_conf" selected="true"/>
<select idref="file_owner_etc_nsswitch_conf" selected="true"/>
<select idref="file_owner_etc_ntp_conf" selected="true"/>
<select idref="file_owner_etc_passwd" selected="true"/>
<select idref="file_owner_etc_resolv_conf" selected="true"/>
<select idref="file_owner_etc_samba_smb_conf" selected="true"/>
<select idref="file_owner_etc_samba_tdb" selected="true"/>
<select idref="file_owner_etc_securetty" selected="true"/>
<select idref="file_owner_etc_security_access_conf" selected="true"/>
<select idref="file_owner_etc_services" selected="true"/>
<select idref="file_owner_etc_shadow" selected="true"/>
<select idref="file_owner_etc_skel" selected="true"/>
<select idref="file_owner_etc_sysctl_conf" selected="true"/>
<select idref="file_owner_etc_syslog_conf" selected="true"/>
<select idref="file_owner_etc_xinetd_conf" selected="true"/>
<select idref="file_owner_exports_dirs" selected="true"/>
<select idref="file_owner_ftpusers" selected="true"/>
<select idref="file_owner_global_initialization_files" selected="true"/>
<select idref="file_owner_grub_conf" selected="true"/>
<select idref="file_owner_home_dirs" selected="true"/>
<select idref="file_owner_home_files" selected="true"/>
<select idref="file_owner_ldap_cacerts" selected="true"/>
<select idref="file_owner_ldap_certs" selected="true"/>
<select idref="file_owner_ldap_keys" selected="true"/>
<select idref="file_owner_local_initialization_files" selected="true"/>
<select idref="file_owner_run_control_scripts" selected="true"/>
<select idref="file_owner_shell_files" selected="true"/>
<select idref="file_owner_smtp_logs" selected="true"/>
<select idref="file_owner_snmpd_conf" selected="true"/>
<select idref="file_owner_var_spool_at" selected="true"/>
<select idref="file_owner_var_yp" selected="true"/>
<select idref="file_permissions_aliases" selected="true"/>
<select idref="file_permissions_aliases_files" selected="true"/>
<select idref="file_permissions_audio_devices" selected="true"/>
<select idref="file_permissions_audit_log" selected="true"/>
<select idref="file_permissions_audit_tools" selected="true"/>
<select idref="file_permissions_bin_traceroute" selected="true"/>
<select idref="file_permissions_binary_dirs" selected="true"/>
<select idref="file_permissions_core_dump_dir" selected="true"/>
<select idref="file_permissions_cron_files" selected="true"/>
<select idref="file_permissions_cron_log_files" selected="true"/>
<select idref="file_permissions_crontab_dirs" selected="true"/>
<select idref="file_permissions_crontab_files" selected="true"/>
<select idref="file_permissions_etc_at_allow" selected="true"/>
<select idref="file_permissions_etc_at_deny" selected="true"/>
<select idref="file_permissions_etc_cron_allow" selected="true"/>
<select idref="file_permissions_etc_cron_deny" selected="true"/>
<select idref="file_permissions_etc_cups_printers_conf" selected="true"/>
<select idref="file_permissions_etc_exports" selected="true"/>
<select idref="file_permissions_etc_group" selected="true"/>
<select idref="file_permissions_etc_gshadow" selected="true"/>
<select idref="file_permissions_etc_hosts" selected="true"/>
<select idref="file_permissions_etc_ldap_conf" selected="true"/>
<select idref="file_permissions_etc_news_infeed_conf" selected="true"/>
<select idref="file_permissions_etc_news_incoming_conf" selected="true"/>
<select idref="file_permissions_etc_news_passwd_nntp" selected="true"/>
<select idref="file_permissions_etc_nsswitch_conf" selected="true"/>
<select idref="file_permissions_etc_ntp_conf" selected="true"/>
<select idref="file_permissions_etc_passwd" selected="true"/>
<select idref="file_permissions_etc_resolv_conf" selected="true"/>
<select idref="file_permissions_etc_samba_smb_conf" selected="true"/>
<select idref="file_permissions_etc_samba_tdb" selected="true"/>
<select idref="file_permissions_etc_securetty" selected="true"/>
<select idref="file_permissions_etc_security_access_conf" selected="true"/>
<select idref="file_permissions_etc_services" selected="true"/>
<select idref="file_permissions_etc_shadow" selected="true"/>
<select idref="file_permissions_etc_skel" selected="true"/>
<select idref="file_permissions_etc_sysctl_conf" selected="true"/>
<select idref="file_permissions_etc_syslog_conf" selected="true"/>
<select idref="file_permissions_etc_xinetd_conf" selected="true"/>
<select idref="file_permissions_etc_xinetd_dir" selected="true"/>
<select idref="file_permissions_extended_aliases" selected="true"/>
<select idref="file_permissions_extended_aliases_files" selected="true"/>
<select idref="file_permissions_extended_audio_devices" selected="true"/>
<select idref="file_permissions_extended_audit_log" selected="true"/>
<select idref="file_permissions_extended_audit_tools" selected="true"/>
<select idref="file_permissions_extended_bin_traceroute" selected="true"/>
<select idref="file_permissions_extended_binary_dirs" selected="true"/>
<select idref="file_permissions_extended_core_dump_dir" selected="true"/>
<select idref="file_permissions_extended_cron_log_files" selected="true"/>
<select idref="file_permissions_extended_crontab_dirs" selected="true"/>
<select idref="file_permissions_extended_crontab_files" selected="true"/>
<select idref="file_permissions_extended_etc_at_allow" selected="true"/>
<select idref="file_permissions_extended_etc_at_deny" selected="true"/>
<select idref="file_permissions_extended_etc_cron_allow" selected="true"/>
<select idref="file_permissions_extended_etc_cron_deny" selected="true"/>
<select idref="file_permissions_extended_etc_cups_printers_conf" selected="true"/>
<select idref="file_permissions_extended_etc_exports" selected="true"/>
<select idref="file_permissions_extended_etc_group" selected="true"/>
<select idref="file_permissions_extended_etc_gshadow" selected="true"/>
<select idref="file_permissions_extended_etc_hosts" selected="true"/>
<select idref="file_permissions_extended_etc_ldap_conf" selected="true"/>
<select idref="file_permissions_extended_etc_news_infeed_conf" selected="true"/>
<select idref="file_permissions_extended_etc_news_incoming_conf" selected="true"/>
<select idref="file_permissions_extended_etc_news_nnrp_access" selected="true"/>
<select idref="file_permissions_extended_etc_news_passwd_nntp" selected="true"/>
<select idref="file_permissions_extended_etc_nsswitch_conf" selected="true"/>
<select idref="file_permissions_extended_etc_ntp_conf" selected="true"/>
<select idref="file_permissions_extended_etc_passwd" selected="true"/>
<select idref="file_permissions_extended_etc_resolv_conf" selected="true"/>
<select idref="file_permissions_extended_etc_samba_smb_conf" selected="true"/>
<select idref="file_permissions_extended_etc_samba_tdb" selected="true"/>
<select idref="file_permissions_extended_etc_security_access_conf" selected="true"/>
<select idref="file_permissions_extended_etc_services" selected="true"/>
<select idref="file_permissions_extended_etc_shadow" selected="true"/>
<select idref="file_permissions_extended_etc_skel" selected="true"/>
<select idref="file_permissions_extended_etc_sysctl_conf" selected="true"/>
<select idref="file_permissions_extended_etc_syslog_conf" selected="true"/>
<select idref="file_permissions_extended_etc_xinetd_conf" selected="true"/>
<select idref="file_permissions_extended_etc_xinetd_dir" selected="true"/>
<select idref="file_permissions_extended_ftpusers" selected="true"/>
<select idref="file_permissions_extended_global_initialization_files" selected="true"/>
<select idref="file_permissions_extended_grub_conf" selected="true"/>
<select idref="file_permissions_extended_home_dirs" selected="true"/>
<select idref="file_permissions_extended_home_files" selected="true"/>
<select idref="file_permissions_extended_ldap_cacerts" selected="true"/>
<select idref="file_permissions_extended_ldap_certs" selected="true"/>
<select idref="file_permissions_extended_ldap_keys" selected="true"/>
<select idref="file_permissions_extended_library_dirs" selected="true"/>
<select idref="file_permissions_extended_local_initialization_files" selected="true"/>
<select idref="file_permissions_extended_man_pages" selected="true"/>
<select idref="file_permissions_extended_mib_files" selected="true"/>
<select idref="file_permissions_extended_root_dir" selected="true"/>
<select idref="file_permissions_extended_run_control_scripts" selected="true"/>
<select idref="file_permissions_extended_shell_files" selected="true"/>
<select idref="file_permissions_extended_smtp_logs" selected="true"/>
<select idref="file_permissions_extended_snmpd_conf" selected="true"/>
<select idref="file_permissions_extended_usr_sbin_dir" selected="true"/>
<select idref="file_permissions_extended_var_log" selected="true"/>
<select idref="file_permissions_extended_var_spool_at" selected="true"/>
<select idref="file_permissions_extended_var_yp" selected="true"/>
<select idref="file_permissions_extended_xauthority_files" selected="true"/>
<select idref="file_permissions_ftpusers" selected="true"/>
<select idref="file_permissions_global_initialization_files" selected="true"/>
<select idref="file_permissions_grub_conf" selected="true"/>
<select idref="file_permissions_home_dirs" selected="true"/>
<select idref="file_permissions_home_files" selected="true"/>
<select idref="file_permissions_ldap_cacerts" selected="true"/>
<select idref="file_permissions_ldap_certs" selected="true"/>
<select idref="file_permissions_ldap_keys" selected="true"/>
<select idref="file_permissions_library_dirs" selected="true"/>
<select idref="file_permissions_local_initialization_files" selected="true"/>
<select idref="file_permissions_man_pages" selected="true"/>
<select idref="file_permissions_mib_files" selected="true"/>
<select idref="file_permissions_root_dir" selected="true"/>
<select idref="file_permissions_run_control_scripts" selected="true"/>
<select idref="file_permissions_shell_files" selected="true"/>
<select idref="file_permissions_smtp_logs" selected="true"/>
<select idref="file_permissions_snmpd_conf" selected="true"/>
<select idref="file_permissions_ssh_private_host_keys" selected="true"/>
<select idref="file_permissions_ssh_public_host_keys" selected="true"/>
<select idref="file_permissions_tftp_binary" selected="true"/>
<select idref="file_permissions_unauthorized_world_writable" selected="true"/>
<select idref="file_permissions_ungroupowned" selected="true"/>
<select idref="file_permissions_usr_bin_ldd" selected="true"/>
<select idref="file_permissions_usr_sbin_dir" selected="true"/>
<select idref="file_permissions_var_log" selected="true"/>
<select idref="file_permissions_var_spool_at" selected="true"/>
<select idref="file_permissions_var_yp" selected="true"/>
<select idref="file_permissions_xauthority_files" selected="true"/>
<select idref="ftp_anonymous_shell" selected="true"/>
<select idref="ftp_default_umask" selected="true"/>
<select idref="ftp_enable_warning_banner" selected="true"/>
<select idref="ftp_ftpusers_file_empty" selected="true"/>
<select idref="ftp_ftpusers_file_exists" selected="true"/>
<select idref="ftp_log_transactions" selected="true"/>
<select idref="gconf_gnome_screensaver_idle_activation_enabled" selected="true"/>
<select idref="gconf_gnome_screensaver_idle_delay" selected="true"/>
<select idref="gconf_gnome_screensaver_lock_enabled" selected="true"/>
<select idref="gid_passwd_group_same" selected="true"/>
<select idref="global_initialization_files_mesg" selected="true"/>
<select idref="iptables_input_reject_rule" selected="true"/>
<select idref="iptables_timestamp_reject_rule" selected="true"/>
<select idref="ip6tables_input_icmpv6_broadcast" selected="true"/>
<select idref="ip_6to4_tunnels" selected="true"/>
<select idref="ip_teredo" selected="true"/>
<select idref="ip_tunnels" selected="true"/>
<select idref="kernel_module_appletalk_disabled" selected="true"/>
<select idref="kernel_module_bluetooth_disabled" selected="true"/>
<select idref="kernel_module_bridge_disabled" selected="true"/>
<select idref="kernel_module_dccp_disabled" selected="true"/>
<select idref="kernel_module_ieee1394_disabled" selected="true"/>
<select idref="kernel_module_ipv6_option_disabled" selected="true"/>
<select idref="kernel_module_rds_disabled" selected="true"/>
<select idref="kernel_module_sctp_disabled" selected="true"/>
<select idref="kernel_module_tipc_disabled" selected="true"/>
<select idref="kernel_module_usb-storage_disabled" selected="true"/>
<select idref="ldap_client_bindpw" selected="true"/>
<select idref="ldap_client_start_tls" selected="true"/>
<select idref="ldap_client_tls_cert" selected="true"/>
<select idref="ldap_client_tls_checkpeer" selected="true"/>
<select idref="ldap_client_tls_crlcheck" selected="true"/>
<select idref="logrotate_rotate_all_files" selected="true"/>
<select idref="mail_debug_enabled" selected="true"/>
<select idref="mail_decode_active" selected="true"/>
<select idref="mail_expn_active" selected="true"/>
<select idref="mail_forward_files" selected="true"/>
<select idref="mail_help_command" selected="true"/>
<select idref="mail_log_level" selected="true"/>
<select idref="mail_log_enabled" selected="true"/>
<select idref="mail_relaying_disabled" selected="true"/>
<select idref="mail_up_to_date" selected="true"/>
<select idref="mail_version_info" selected="true"/>
<select idref="mail_vrfy_active" selected="true"/>
<select idref="mail_wiz_active" selected="true"/>
<select idref="mount_option_nodev_removable_filesystems" selected="true"/>
<select idref="mount_option_nosuid_removable_filesystems" selected="true"/>
<select idref="network_ipv6_default_gateway" selected="true"/>
<select idref="network_ipv6_disable_interfaces" selected="true"/>
<select idref="nfs_enforce_host_access" selected="true"/>
<select idref="nfs_mount_option_nosuid_remote_filesystems" selected="true"/>
<select idref="nfs_no_anonymous" selected="true"/>
<select idref="nfs_no_insecure_locks_exports" selected="true"/>
<select idref="nfs_use_root_squashing_all_exports" selected="true"/>
<select idref="no_empty_passwords" selected="true"/>
<select idref="no_files_unowned_by_user" selected="true"/>
<select idref="no_netrc_files" selected="true"/>
<select idref="no_root_webbrowsing" selected="true"/>
<select idref="no_rsh_trust_files" selected="true"/>
<select idref="ntp_multiple_remote_servers" selected="true"/>
<select idref="ntp_remote_server" selected="true"/>
<select idref="package_av_installed" selected="true"/>
<select idref="package_hids_installed" selected="true"/>
<select idref="package_rpc_removed" selected="true"/>
<select idref="package_rsh-server_removed" selected="true"/>
<select idref="package_samba_removed" selected="true"/>
<select idref="partition_for_home" selected="true"/>
<select idref="partition_for_tmp" selected="true"/>
<select idref="partition_for_var" selected="true"/>
<select idref="partition_for_var_log_audit" selected="true"/>
<select idref="require_singleuser_auth" selected="true"/>
<select idref="restricted_accounts" selected="true"/>
<select idref="restricted_accounts_ftp" selected="true"/>
<select idref="restricted_accounts_games" selected="true"/>
<select idref="restricted_accounts_gopher" selected="true"/>
<select idref="restricted_accounts_news" selected="true"/>
<select idref="rhosts_auth_pam_files" selected="true"/>
<!-- <select idref="rpm_verify_hashes" selected="true"/> -->
<select idref="samba_encrypt_passwords_option" selected="true"/>
<select idref="samba_guest_ok_option" selected="true"/>
<select idref="samba_hosts_option" selected="true"/>
<select idref="samba_security_option" selected="true"/>
<select idref="samba-swat_restricted" selected="true"/>
<select idref="securetty_root_login_console_only" selected="true"/>
<!-- <select idref="security_patches_up_to_date" selected="true"/> -->
<select idref="selinux_enforcing" selected="true"/>
<select idref="service_auditd_enabled" selected="true"/>
<select idref="service_autofs_disabled" selected="true"/>
<select idref="service_kdump_disabled" selected="true"/>
<select idref="service_iptables_enabled" selected="true"/>
<select idref="service_ntpd_enabled" selected="true"/>
<select idref="service_rexec_disabled" selected="true"/>
<select idref="service_rlogin_disabled" selected="true"/>
<select idref="service_rpc_disabled" selected="true"/>
<select idref="service_rsh_disabled" selected="true"/>
<select idref="service_telnetd_disabled" selected="true"/>
<select idref="service_tftp_disabled" selected="true"/>
<select idref="service_unencrypted_ftp_disabled" selected="true"/>
<select idref="service_yum-updatesd_disabled" selected="true"/>
<select idref="service_xinetd_disabled" selected="true"/>
<select idref="service_ypbind_disabled" selected="true"/>
<select idref="set_password_hashing_algorithm_systemauth" selected="true"/>
<!-- <select idref="shells_file_references" selected="true"/> -->
<!-- <select idref="smartcard_auth" selected="true"/> -->
<select idref="snmpd_not_default_password" selected="true"/>
<select idref="snmpd_use_approved_hash" selected="true"/>
<select idref="snmpd_use_approved_encryption" selected="true"/>
<select idref="snmpd_use_newer_protocol" selected="true"/>
<select idref="ssh_gssapiauthentication" selected="true"/>
<select idref="ssh_no_cbc" selected="true"/>
<select idref="ssh_protocol_2" selected="true"/>
<select idref="ssh_use_approved_ciphers" selected="true"/>
<select idref="ssh_use_approved_macs" selected="true"/>
<select idref="sshd_compression" selected="true"/>
<select idref="sshd_disable_root_login" selected="true"/>
<select idref="sshd_enable_warning_banner" selected="true"/>
<select idref="sshd_gssapiauthentication" selected="true"/>
<select idref="sshd_ipfiltering" selected="true"/>
<select idref="sshd_kerberosauthentication" selected="true"/>
<select idref="sshd_listen_addresses" selected="true"/>
<select idref="sshd_no_cbc" selected="true"/>
<select idref="sshd_printlastlog" selected="true"/>
<select idref="sshd_privilegeseparation" selected="true"/>
<select idref="sshd_protocol_2" selected="true"/>
<select idref="sshd_rhostsrsaauthentication" selected="true"/>
<select idref="sshd_strictmodes" selected="true"/>
<select idref="sshd_use_approved_ciphers" selected="true"/>
<select idref="sshd_use_approved_macs" selected="true"/>
<select idref="sshd_users_groups" selected="true"/>
<select idref="sudo_wheel" selected="true"/>
<select idref="sysconfig_networking_bootproto_ifcfg" selected="true"/>
<select idref="sysctl_kernel_execshield" selected="true"/>
<select idref="sysctl_kernel_nonexec_stack" selected="true"/>
<select idref="sysctl_net_ipv4_conf_accept_redirects" selected="true"/>
<select idref="sysctl_net_ipv4_conf_accept_source_route" selected="true"/>
<select idref="sysctl_net_ipv4_conf_log_martians" selected="true"/>
<select idref="sysctl_net_ipv4_conf_send_redirects" selected="true"/>
<select idref="sysctl_net_ipv4_icmp_echo_ignore_broadcasts" selected="true"/>
<select idref="sysctl_net_ipv4_ip_forward" selected="true"/>
<select idref="sysctl_net_ipv4_tcp_syncookies" selected="true"/>
<select idref="sysctl_net_ipv4_tcp_max_syn_backlog" selected="true"/>
<select idref="sysctl_net_ipv6_conf_all_accept_redirects" selected="true"/>
<select idref="sysctl_net_ipv6_conf_forwarding" selected="true"/>
<select idref="syslog_nolisten" selected="true"/>
<select idref="syslog_remote_loghost" selected="true"/>
<select idref="system_access_control" selected="true"/>
<select idref="tftpd_user_shell" selected="true"/>
<select idref="tftpd_uses_secure_mode" selected="true"/>
<select idref="xwindows_runlevel_setting" selected="true"/>

<refine-value idref="ftp_login_banner_text" selector="dod_default"/>
<refine-value idref="gui_login_banner_text" selector="dod_default"/>
<refine-value idref="inactivity_timeout_value" selector="15_minutes"/>
<refine-value idref="max_concurrent_login_sessions_value" selector="10"/>
<refine-value idref="password_history_retain_number" selector="5"/>
<refine-value idref="sysctl_net_ipv4_conf_all_accept_redirects_value" selector="disabled"/>
<refine-value idref="sysctl_net_ipv4_conf_all_accept_source_route_value" selector="disabled"/>
<refine-value idref="sysctl_net_ipv4_conf_all_log_martians_value" selector="enabled"/>
<refine-value idref="sysctl_net_ipv4_conf_all_rp_filter_value" selector="enabled"/>
<refine-value idref="sysctl_net_ipv4_conf_all_secure_redirects_value" selector="disabled"/>
<refine-value idref="sysctl_net_ipv4_icmp_echo_ignore_broadcasts_value" selector="enabled"/>
<refine-value idref="sysctl_net_ipv4_icmp_ignore_bogus_error_responses_value" selector="enabled"/>
<refine-value idref="sysctl_net_ipv4_tcp_syncookies_value" selector="enabled"/>
<refine-value idref="sysctl_net_ipv4_tcp_max_syn_backlog_value" selector="recommended"/>
<refine-value idref="system_login_banner_text" selector="dod_default"/>
<refine-value idref="var_accounts_maximum_age_login_defs" selector="60"/>
<refine-value idref="var_accounts_minimum_age_login_defs" selector="1"/>
<refine-value idref="var_accounts_password_pam_tally_deny" selector="3"/>
<refine-value idref="var_accounts_user_umask" selector="077"/>
<refine-value idref="var_auditd_admin_space_left_action" selector="single"/>
<refine-value idref="var_auditd_disk_error_action" selector="syslog"/>
<refine-value idref="var_auditd_disk_full_action" selector="syslog"/>
<refine-value idref="var_auditd_max_log_file" selector="6"/>
<refine-value idref="var_auditd_max_log_file_action" selector="rotate"/>
<refine-value idref="var_auditd_num_logs" selector="5"/>
<refine-value idref="var_password_pam_cracklib_dcredit" selector="1"/>
<refine-value idref="var_password_pam_cracklib_difok" selector="4"/>
<refine-value idref="var_password_pam_cracklib_lcredit" selector="1"/>
<refine-value idref="var_password_pam_cracklib_maxrepeat" selector="3"/>
<refine-value idref="var_password_pam_cracklib_minlen" selector="14"/>
<refine-value idref="var_password_pam_cracklib_ocredit" selector="1"/>
<refine-value idref="var_password_pam_cracklib_retry" selector="3"/>
<refine-value idref="var_password_pam_cracklib_ucredit" selector="1"/>
<refine-value idref="var_selinux_policy_name" selector="targeted"/>

</Profile>
