<?xml version="1.0" encoding="UTF-8"?>
<oval_definitions xmlns:unix-def="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" xmlns:ind-def="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" xmlns:lin-def="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux" xmlns:oval="http://oval.mitre.org/XMLSchema/oval-common-5" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:schemaLocation="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix 
									  unix-definitions-schema.xsd
									  http://oval.mitre.org/XMLSchema/oval-definitions-5#independent 
									  independent-definitions-schema.xsd
									  http://oval.mitre.org/XMLSchema/oval-definitions-5#linux 
									  linux-definitions-schema.xsd
									  http://oval.mitre.org/XMLSchema/oval-definitions-5 
									  oval-definitions-schema.xsd
									  http://oval.mitre.org/XMLSchema/oval-common-5 
									  oval-common-schema.xsd
									  ">
	<generator>
		<oval:product_name>Text Editors</oval:product_name>
		<oval:schema_version>5.8</oval:schema_version>
		<oval:timestamp>2010-06-08T12:00:00-04:00</oval:timestamp>
	</generator>
	<definitions>
		<!--====================================================================================================-->
		<!--=====================================  EXTENDED DEFINITIONS  =========================================-->
		<!--====================================================================================================-->
		<definition class="inventory" id="oval:gov.nist.usgcb.rhel:def:10000" version="1">
			<metadata>
				<title>Red Hat Enterprise Linux 5</title>
				<affected family="unix">
					<platform>Red Hat Enterprise Linux 5</platform>
				</affected>
				<reference ref_id="cpe:/o:redhat:enterprise_linux:5" source="CPE"/>
				<description>The operating system installed on the system is Red Hat Enterprise Linux 5</description>
			</metadata>
			<criteria>
				<criterion comment="Installed operating system is part of the unix family" test_ref="oval:gov.nist.usgcb.rhel:tst:20001"/>
				<criterion comment="Red Hat Enterprise Linux 5 is installed" test_ref="oval:gov.nist.usgcb.rhel:tst:10000"/>
			</criteria>
		</definition>
		<definition id="oval:org.mitre.oval:def:2004" version="1" class="inventory">
			<metadata>
				<title>The operating system installed on the system is Red Hat Enterprise Linux 5 for x64</title>
				<affected family="unix">
					<platform>Red Hat Enterprise Linux 5</platform>
				</affected>
				<reference source="CPE" ref_id="cpe:/o:redhat:enterprise_linux:5::ix64"/>
				<description>The operating system installed on the system is Red Hat Enterprise Linux 5 for x64.</description>
				<oval_repository>
					<dates>
						<submitted date="2007-07-27T12:00:00.000-06:00">
							<contributor organization="McAfee, Inc.">Mark Villanova</contributor>
						</submitted>
						<status_change date="2007-08-14T21:26:14.352-04:00">DRAFT</status_change>
						<status_change date="2007-09-06T09:13:29.423-04:00">INTERIM</status_change>
						<status_change date="2007-09-27T08:57:42.904-04:00">ACCEPTED</status_change>
					</dates>
					<status>ACCEPTED</status>
				</oval_repository>
			</metadata>
			<criteria>
				<criterion comment="Red Hat Enterprise 5 is installed" test_ref="oval:org.mitre.oval:tst:3846"/>
				<criterion comment="ix64 architecture" test_ref="oval:org.mitre.oval:tst:3929"/>
			</criteria>
		</definition>
		<!-- ==================================================================================================== -->
		<!-- ==========================================  DEFINITIONS  =========================================== -->
		<!-- ==================================================================================================== -->
		<definition class="compliance" id="oval:gov.nist.usgcb.rhel:def:20000" version="1">
			<metadata>
				<title>Ensure that /tmp has its own partition or logical volume</title>
				<affected family="unix">
					<platform>Red Hat Enterprise Linux 5</platform>
				</affected>
				<reference ref_id="CCE-14161-4" source="CCE"/>
				<description>The /tmp directory is a world-writable directory used for temporary ﬁle storage. Verify that it has its own partition or logical volume.</description>
			</metadata>
			<criteria>
				<criterion test_ref="oval:gov.nist.usgcb.rhel:tst:20000" comment="Check in /etc/fstab for a /tmp mount point"/>
			</criteria>
		</definition>
		<definition class="compliance" id="oval:gov.nist.usgcb.rhel:def:20002" version="1">
			<metadata>
				<title>Ensure that /var has its own partition or logical volume</title>
				<affected family="unix">
					<platform>Red Hat Enterprise Linux 5</platform>
				</affected>
				<reference ref_id="CCE-14777-7" source="CCE"/>
				<description>The /var directory is used by daemons and other system 
                              services to store frequently-changing data. It is not uncommon for the /var directory 
                              to contain world-writable directories, installed by other software packages.
                              Ensure that /var has its own partition or logical volume.</description>
			</metadata>
			<criteria>
				<criterion test_ref="oval:gov.nist.usgcb.rhel:tst:20002" comment="Check in /etc/fstab for a /var mount point"/>
			</criteria>
		</definition>
		<definition class="compliance" id="oval:gov.nist.usgcb.rhel:def:20004" version="1">
			<metadata>
				<title>Ensure that /var/log has its own partition or logical volume</title>
				<affected family="unix">
					<platform>Red Hat Enterprise Linux 5</platform>
				</affected>
				<reference ref_id="CCE-14011-1" source="CCE"/>
				<description>System logs are stored in the /var/log directory. Ensure that it has its own partition or logical volume.</description>
			</metadata>
			<criteria>
				<criterion test_ref="oval:gov.nist.usgcb.rhel:tst:20004" comment="Check in /etc/fstab for a /var/log mount point"/>
			</criteria>
		</definition>
		<definition class="compliance" id="oval:gov.nist.usgcb.rhel:def:20005" version="1">
			<metadata>
				<title>Ensure that /var/log/audit has its own partition or logical volume</title>
				<affected family="unix">
					<platform>Red Hat Enterprise Linux 5</platform>
				</affected>
				<reference ref_id="CCE-14171-3" source="CCE"/>
				<description>Audit logs are stored in the /var/log/audit directory. 
                              Ensure that it has its own partition or logical volume.  Make absolutely certain 
                              that it is large enough to store all audit logs that will be created by the auditing
                              daemon.</description>
			</metadata>
			<criteria>
				<criterion test_ref="oval:gov.nist.usgcb.rhel:tst:20005" comment="Check in /etc/fstab for a /var/log/audit mount point"/>
			</criteria>
		</definition>
		<definition class="compliance" id="oval:gov.nist.usgcb.rhel:def:20006" version="1">
			<metadata>
				<title>Ensure that /home has its own partition or logical volume</title>
				<affected family="unix">
					<platform>Red Hat Enterprise Linux 5</platform>
				</affected>
				<reference ref_id="CCE-14559-9" source="CCE"/>
				<description>If user home directories will be stored locally, create a separate 
                              partition for /home. If /home will be mounted from another system such as an NFS server, then 
                              creating a separate partition is not necessary at this time, and the mountpoint can 
                              instead be conﬁgured later.</description>
			</metadata>
			<criteria>
				<criterion test_ref="oval:gov.nist.usgcb.rhel:tst:20006" comment="Check in /etc/fstab for a /home mount point"/>
			</criteria>
		</definition>
		<definition class="compliance" id="oval:gov.nist.usgcb.rhel:def:200065" version="1">
			<metadata>
				<title>Ensure that GPG Key for Red Hat Network is installed</title>
				<affected family="unix">
					<platform>Red Hat Enterprise Linux 5</platform>
				</affected>
				<reference ref_id="CCE-14440-2" source="CCE"/>
				<description>The GPG key should be installed.</description>
			</metadata>
			<criteria>
				<extend_definition definition_ref="oval:gov.nist.usgcb.rhel:def:10000" comment="Red Hat Enterprise Linux 5 is installed"/>
				<criterion test_ref="oval:gov.nist.usgcb.rhel:tst:200065" comment="check gpg signature"/>
			</criteria>
		</definition>
		<definition class="compliance" id="oval:gov.nist.usgcb.rhel:def:20007" version="1">
			<metadata>
				<title>Disable the rhnsd Daemon</title>
				<affected family="unix">
					<platform>Red Hat Enterprise Linux 5</platform>
				</affected>
				<reference ref_id="CCE-3416-5" source="CCE"/>
				<description>The rhnsd service should be disabled.</description>
			</metadata>
			<criteria operator="AND">
				<extend_definition definition_ref="oval:gov.nist.usgcb.rhel:def:10000" comment="Red Hat Enterprise Linux 5 is installed"/>
				<criterion comment="Check that rhnsd service is not running" test_ref="oval:gov.nist.usgcb.rhel:tst:20007"/>
				<criterion comment="Check that rhnsd service is not running" test_ref="oval:gov.nist.usgcb.rhel:tst:200071"/>
				<criterion comment="Check that rhnsd service is not running" test_ref="oval:gov.nist.usgcb.rhel:tst:200072"/>
				<criterion comment="Check that rhnsd service is not running" test_ref="oval:gov.nist.usgcb.rhel:tst:200073"/>
				<criterion comment="Check that rhnsd service is not running" test_ref="oval:gov.nist.usgcb.rhel:tst:200074"/>
				<criterion comment="Check that rhnsd service is not running" test_ref="oval:gov.nist.usgcb.rhel:tst:200075"/>
				<criterion comment="Check that rhnsd service is not running" test_ref="oval:gov.nist.usgcb.rhel:tst:200076"/>
			</criteria>
		</definition>
		<definition class="compliance" id="oval:gov.nist.usgcb.rhel:def:20008" version="1">
			<metadata>
				<title>yum-updatesd service should be disabled</title>
				<affected family="unix">
					<platform>Red Hat Enterprise Linux 5</platform>
				</affected>
				<reference ref_id="CCE-4218-4" source="CCE"/>
				<description>The yum-updatesd service should be disabled</description>
			</metadata>
			<criteria operator="AND">
				<criterion comment="check that yum-updatesd service is disabled" test_ref="oval:gov.nist.usgcb.rhel:tst:20008"/>
				<criterion comment="check that yum-updatesd service is disabled" test_ref="oval:gov.nist.usgcb.rhel:tst:200081"/>
				<criterion comment="check that yum-updatesd service is disabled" test_ref="oval:gov.nist.usgcb.rhel:tst:200082"/>
				<criterion comment="check that yum-updatesd service is disabled" test_ref="oval:gov.nist.usgcb.rhel:tst:200083"/>
				<criterion comment="check that yum-updatesd service is disabled" test_ref="oval:gov.nist.usgcb.rhel:tst:200084"/>
				<criterion comment="check that yum-updatesd service is disabled" test_ref="oval:gov.nist.usgcb.rhel:tst:200085"/>
				<criterion comment="check that yum-updatesd service is disabled" test_ref="oval:gov.nist.usgcb.rhel:tst:200086"/>
			</criteria>
		</definition>
		<definition class="compliance" id="oval:gov.nist.usgcb.rhel:def:20010" version="1">
			<metadata>
				<title>Ensure gpgcheck is Globally Activated</title>
				<affected family="unix">
					<platform>Red Hat Enterprise Linux 5</platform>
				</affected>
				<reference ref_id="CCE-14914-6" source="CCE"/>
				<description>The gpgcheck option should be used to ensure that checking of an RPM package’s signature always occurs prior
                              to its installation./</description>
			</metadata>
			<criteria>
				<criterion comment="check value of gpgcheck in /etc/yum.conf" test_ref="oval:gov.nist.usgcb.rhel:tst:20010"/>
			</criteria>
		</definition>
		<definition class="compliance" id="oval:gov.nist.usgcb.rhel:def:20011" version="1">
			<metadata>
				<title>Ensure Package Signature Checking is Not Disabled For Any Repos</title>
				<affected family="unix">
					<platform>Red Hat Enterprise Linux 5</platform>
				</affected>
				<reference ref_id="CCE-14813-0" source="CCE"/>
				<description>To ensure that signature checking is not disabled for any repos, ensure that the following line DOES NOT
                              appear in any repo conﬁguration ﬁles in /etc/yum.repos.d or elsewhere</description>
			</metadata>
			<criteria>
				<criterion comment="check value of gpgcheck=0 in /etc/yum.repos.d/*" test_ref="oval:gov.nist.usgcb.rhel:tst:20011" negate="true"/>
			</criteria>
		</definition>
		<definition class="compliance" id="oval:gov.nist.usgcb.rhel:def:20014" version="1">
			<metadata>
				<title>Install AIDE</title>
				<affected family="unix">
					<platform>Red Hat Enterprise Linux 5</platform>
				</affected>
				<reference ref_id="CCE-4209-3" source="CCE"/>
				<description>The AIDE package should be installed</description>
			</metadata>
			<criteria>
				<criterion comment="Conditions are satisfied" test_ref="oval:gov.nist.usgcb.rhel:tst:20014"/>
			</criteria>
		</definition>
		<definition class="compliance" id="oval:gov.nist.usgcb.rhel:def:200155" version="1">
			<metadata>
				<title>Verify Package Integrity Using RPM</title>
				<affected family="unix">
					<platform>Red Hat Enterprise Linux 5</platform>
				</affected>
				<reference ref_id="CCE-14931-0" source="CCE"/>
				<description>>Verify the integrity of installed packages by comparing the installed ﬁles with 
                              information about the ﬁles taken from the package metadata stored in the RPM
                              database.</description>
			</metadata>
			<criteria>
				<criterion comment="Unknown test stub" test_ref="oval:gov.nist.usgcb.rhel:tst:22"/>
			</criteria>
		</definition>
		<definition class="compliance" id="oval:gov.nist.usgcb.rhel:def:20016" version="1">
			<metadata>
				<title>Add nodev Option to Non-Root Local Partitions</title>
				<affected family="unix">
					<platform>Red Hat Enterprise Linux 5</platform>
				</affected>
				<reference ref_id="CCE-4249-9" source="CCE"/>
				<description>The nodev option should be enabled for all non-root partitions.</description>
			</metadata>
			<criteria>
				<!--<criterion test_ref="oval:gov.nist.usgcb.rhel:tst:200162" comment="Check options for nodev in /etc/mtab for all non-root partitions"/>-->
				<criterion test_ref="oval:gov.nist.usgcb.rhel:tst:42490" comment="unknown test stub"/>
			</criteria>
		</definition>
		<definition class="compliance" id="oval:gov.nist.usgcb.rhel:def:20017" version="1">
			<metadata>
				<title>Add nodev Option to Removable Media Partitions</title>
				<affected family="unix">
					<platform>Red Hat Enterprise Linux 5</platform>
				</affected>
				<reference ref_id="CCE-3522-0" source="CCE"/>
				<description>The nodev option should be enabled for all removable media.</description>
			</metadata>
			<criteria>
				<!-- TODO create a udev rule and make sure it is present -->
				<criterion comment="Unknown test stub" test_ref="oval:gov.nist.usgcb.rhel:tst:22"/>
			</criteria>
		</definition>
		<definition class="compliance" id="oval:gov.nist.usgcb.rhel:def:20018" version="1">
			<metadata>
				<title>Add noexec Option to Removable Media Partitions</title>
				<affected family="unix">
					<platform>Red Hat Enterprise Linux 5</platform>
				</affected>
				<reference ref_id="CCE-4275-4" source="CCE"/>
				<description>The noexec option should be enabled for all removable media.</description>
			</metadata>
			<criteria>
				<!-- TODO create a udev rule and make sure it is present -->
				<criterion comment="Unknown test stub" test_ref="oval:gov.nist.usgcb.rhel:tst:22"/>
			</criteria>
		</definition>
		<definition class="compliance" id="oval:gov.nist.usgcb.rhel:def:20019" version="1">
			<metadata>
				<title>Add nosuid Option to Removable Media Partitions</title>
				<affected family="unix">
					<platform>Red Hat Enterprise Linux 5</platform>
				</affected>
				<reference ref_id="CCE-4042-8" source="CCE"/>
				<description>The nosuid option should be enabled for all removable media.</description>
			</metadata>
			<criteria>
				<!-- TODO create a udev rule and make sure it is present -->
				<criterion comment="Unknown test stub" test_ref="oval:gov.nist.usgcb.rhel:tst:22"/>
			</criteria>
		</definition>
		<definition class="compliance" id="oval:gov.nist.usgcb.rhel:def:20027" version="2">
			<metadata>
				<title>Disable Mounting of cramfs</title>
				<affected family="unix">
					<platform>Red Hat Enterprise Linux 5</platform>
				</affected>
				<reference ref_id="CCE-14089-7" source="CCE"/>
				<description>prevents usage of this uncommon ﬁlesystems.</description>
			</metadata>
			<criteria>
				<criterion test_ref="oval:gov.nist.usgcb.rhel:tst:20027" comment="check for cramfs"/>
				<!--<criterion test_ref="oval:gov.nist.usgcb.rhel:tst:140890" comment="unknown test stub"/>-->
			</criteria>
		</definition>
		<definition class="compliance" id="oval:gov.nist.usgcb.rhel:def:20028" version="2">
			<metadata>
				<title>Disable Mounting of freevxfs</title>
				<affected family="unix">
					<platform>Red Hat Enterprise Linux 5</platform>
				</affected>
				<reference ref_id="CCE-14457-6" source="CCE"/>
				<description>prevents usage of this uncommon ﬁlesystems.</description>
			</metadata>
			<criteria>
				<criterion test_ref="oval:gov.nist.usgcb.rhel:tst:20028" comment="check for freevxfs"/>
				<!--<criterion test_ref="oval:gov.nist.usgcb.rhel:tst:144570" comment="unknown test stub"/>-->
			</criteria>
		</definition>
		<definition class="compliance" id="oval:gov.nist.usgcb.rhel:def:20029" version="2">
			<metadata>
				<title>Disable Mounting of jffs2</title>
				<affected family="unix">
					<platform>Red Hat Enterprise Linux 5</platform>
				</affected>
				<reference ref_id="CCE-14853-6" source="CCE"/>
				<description>prevents usage of this uncommon ﬁlesystems.</description>
			</metadata>
			<criteria>
				<criterion test_ref="oval:gov.nist.usgcb.rhel:tst:20029" comment="check for jffs2"/>
				<!--<criterion test_ref="oval:gov.nist.usgcb.rhel:tst:148530" comment="unknown test stub"/>-->
			</criteria>
		</definition>
		<definition class="compliance" id="oval:gov.nist.usgcb.rhel:def:20030" version="2">
			<metadata>
				<title>Disable Mounting of hfs</title>
				<affected family="unix">
					<platform>Red Hat Enterprise Linux 5</platform>
				</affected>
				<reference ref_id="CCE-15087-0" source="CCE"/>
				<description>prevents usage of this uncommon ﬁlesystems.</description>
			</metadata>
			<criteria>
				<criterion test_ref="oval:gov.nist.usgcb.rhel:tst:20030" comment="check for hfs"/>
				<!--<criterion test_ref="oval:gov.nist.usgcb.rhel:tst:150870" comment="unknown test stub"/>-->
			</criteria>
		</definition>
		<definition class="compliance" id="oval:gov.nist.usgcb.rhel:def:20031" version="2">
			<metadata>
				<title>Disable Mounting of hfsplus</title>
				<affected family="unix">
					<platform>Red Hat Enterprise Linux 5</platform>
				</affected>
				<reference ref_id="CCE-14093-9" source="CCE"/>
				<description>prevents usage of this uncommon ﬁlesystems.</description>
			</metadata>
			<criteria>
				<criterion test_ref="oval:gov.nist.usgcb.rhel:tst:20031" comment="check for hfsplus"/>
				<!--<criterion test_ref="oval:gov.nist.usgcb.rhel:tst:140930" comment="unknown test stub"/>-->
			</criteria>
		</definition>
		<definition class="compliance" id="oval:gov.nist.usgcb.rhel:def:20032" version="2">
			<metadata>
				<title>Disable Mounting of squashfs</title>
				<affected family="unix">
					<platform>Red Hat Enterprise Linux 5</platform>
				</affected>
				<reference ref_id="CCE-14118-4" source="CCE"/>
				<description>prevents usage of this uncommon ﬁlesystems.</description>
			</metadata>
			<criteria>
				<criterion test_ref="oval:gov.nist.usgcb.rhel:tst:20032" comment="check for squashfs"/>
				<!--<criterion test_ref="oval:gov.nist.usgcb.rhel:tst:141180" comment="unknown test stub"/>-->
			</criteria>
		</definition>
		<definition class="compliance" id="oval:gov.nist.usgcb.rhel:def:20033" version="2">
			<metadata>
				<title>Disable Mounting of udf</title>
				<affected family="unix">
					<platform>Red Hat Enterprise Linux 5</platform>
				</affected>
				<reference ref_id="CCE-14871-8" source="CCE"/>
				<description>prevents usage of this uncommon ﬁlesystems.</description>
			</metadata>
			<criteria>
				<criterion test_ref="oval:gov.nist.usgcb.rhel:tst:20033" comment="check for udf"/>
				<!--<criterion test_ref="oval:gov.nist.usgcb.rhel:tst:148710" comment="unknown test stub"/>-->
			</criteria>
		</definition>
		<definition class="compliance" id="oval:gov.nist.usgcb.rhel:def:20034" version="1">
			<metadata>
				<title>Verify user who owns 'shadow' file</title>
				<affected family="unix">
					<platform>Red Hat Enterprise Linux 5</platform>
				</affected>
				<reference ref_id="CCE-3918-0" source="CCE"/>
				<description>The /etc/shadow file should be owned by the appropriate user.</description>
			</metadata>
			<criteria>
				<criterion test_ref="oval:gov.nist.usgcb.rhel:tst:20034" comment="Check file ownership of /etc/shadow"/>
			</criteria>
		</definition>
		<definition class="compliance" id="oval:gov.nist.usgcb.rhel:def:20035" version="1">
			<metadata>
				<title>Verify group who owns 'shadow' file</title>
				<affected family="unix">
					<platform>Red Hat Enterprise Linux 5</platform>
				</affected>
				<reference ref_id="CCE-3988-3" source="CCE"/>
				<description>The /etc/shadow file should be owned by the appropriate group.</description>
			</metadata>
			<criteria>
				<criterion test_ref="oval:gov.nist.usgcb.rhel:tst:20035"/>
			</criteria>
		</definition>
		<definition class="compliance" id="oval:gov.nist.usgcb.rhel:def:20036" version="1">
			<metadata>
				<title>Verify user who owns 'group' file</title>
				<affected family="unix">
					<platform>Red Hat Enterprise Linux 5</platform>
				</affected>
				<reference ref_id="CCE-3276-3" source="CCE"/>
				<description>The /etc/group file should be owned by the appropriate user.</description>
			</metadata>
			<criteria>
				<criterion test_ref="oval:gov.nist.usgcb.rhel:tst:20036"/>
			</criteria>
		</definition>
		<definition class="compliance" id="oval:gov.nist.usgcb.rhel:def:20037" version="1">
			<metadata>
				<title>Verify group who owns 'group' file</title>
				<affected family="unix">
					<platform>Red Hat Enterprise Linux 5</platform>
				</affected>
				<reference ref_id="CCE-3883-6" source="CCE"/>
				<description>The /etc/group file should be owned by the appropriate group.</description>
			</metadata>
			<criteria>
				<criterion test_ref="oval:gov.nist.usgcb.rhel:tst:20037"/>
			</criteria>
		</definition>
		<definition class="compliance" id="oval:gov.nist.usgcb.rhel:def:20038" version="1">
			<metadata>
				<title>Verify user who owns 'gshadow' file</title>
				<affected family="unix">
					<platform>Red Hat Enterprise Linux 5</platform>
				</affected>
				<reference ref_id="CCE-4210-1" source="CCE"/>
				<description>The /etc/gshadow file should be owned by the appropriate user.</description>
			</metadata>
			<criteria>
				<criterion test_ref="oval:gov.nist.usgcb.rhel:tst:20038"/>
			</criteria>
		</definition>
		<definition class="compliance" id="oval:gov.nist.usgcb.rhel:def:20039" version="1">
			<metadata>
				<title>Verify group who owns 'gshadow' file</title>
				<affected family="unix">
					<platform>Red Hat Enterprise Linux 5</platform>
				</affected>
				<reference ref_id="CCE-4064-2" source="CCE"/>
				<description>The /etc/gshadow file should be owned by the appropriate group.</description>
			</metadata>
			<criteria>
				<criterion test_ref="oval:gov.nist.usgcb.rhel:tst:20039"/>
			</criteria>
		</definition>
		<definition class="compliance" id="oval:gov.nist.usgcb.rhel:def:20040" version="1">
			<metadata>
				<title>Verify user who owns 'passwd' file</title>
				<affected family="unix">
					<platform>Red Hat Enterprise Linux 5</platform>
				</affected>
				<reference ref_id="CCE-3958-6" source="CCE"/>
				<description>The /etc/passwd file should be owned by the appropriate user.</description>
			</metadata>
			<criteria>
				<criterion test_ref="oval:gov.nist.usgcb.rhel:tst:20040"/>
			</criteria>
		</definition>
		<definition class="compliance" id="oval:gov.nist.usgcb.rhel:def:20041" version="1">
			<metadata>
				<title>Verify group who owns 'passwd' file</title>
				<affected family="unix">
					<platform>Red Hat Enterprise Linux 5</platform>
				</affected>
				<reference ref_id="CCE-3495-9" source="CCE"/>
				<description>The /etc/passwd file should be owned by the appropriate group.</description>
			</metadata>
			<criteria>
				<criterion test_ref="oval:gov.nist.usgcb.rhel:tst:20041"/>
			</criteria>
		</definition>
		<definition class="compliance" id="oval:gov.nist.usgcb.rhel:def:20042" version="1">
			<metadata>
				<title>Verify permissions on 'shadow' file</title>
				<affected family="unix">
					<platform>Red Hat Enterprise Linux 5</platform>
				</affected>
				<reference ref_id="CCE-4130-1" source="CCE"/>
				<description>File permissions for /etc/shadow should be set correctly.</description>
			</metadata>
			<criteria>
				<criterion test_ref="oval:gov.nist.usgcb.rhel:tst:20042"/>
			</criteria>
		</definition>
		<definition class="compliance" id="oval:gov.nist.usgcb.rhel:def:20043" version="1">
			<metadata>
				<title>Verify permissions on 'group' file</title>
				<affected family="unix">
					<platform>Red Hat Enterprise Linux 5</platform>
				</affected>
				<reference ref_id="CCE-3967-7" source="CCE"/>
				<description>File permissions for /etc/group should be set correctly.</description>
			</metadata>
			<criteria>
				<criterion test_ref="oval:gov.nist.usgcb.rhel:tst:20043"/>
			</criteria>
		</definition>
		<definition class="compliance" id="oval:gov.nist.usgcb.rhel:def:20044" version="1">
			<metadata>
				<title>Verify permissions on 'gshadow' file</title>
				<affected family="unix">
					<platform>Red Hat Enterprise Linux 5</platform>
				</affected>
				<reference ref_id="CCE-3932-1" source="CCE"/>
				<description>File permissions for /etc/gshadow should be set correctly.</description>
			</metadata>
			<criteria>
				<criterion test_ref="oval:gov.nist.usgcb.rhel:tst:20044"/>
			</criteria>
		</definition>
		<definition class="compliance" id="oval:gov.nist.usgcb.rhel:def:20045" version="1">
			<metadata>
				<title>Verify permissions on 'passwd' file</title>
				<affected family="unix">
					<platform>Red Hat Enterprise Linux 5</platform>
				</affected>
				<reference ref_id="CCE-3566-7" source="CCE"/>
				<description>File permissions for /etc/passwd should be set correctly.</description>
			</metadata>
			<criteria>
				<criterion test_ref="oval:gov.nist.usgcb.rhel:tst:20045"/>
			</criteria>
		</definition>
		<definition class="compliance" id="oval:gov.nist.usgcb.rhel:def:20046" version="1">
			<metadata>
				<title>Verify that All World-Writable Directories Have Sticky Bits Set</title>
				<affected family="unix">
					<platform>Red Hat Enterprise Linux 5</platform>
				</affected>
				<reference ref_id="CCE-3399-3" source="CCE"/>
				<description>The sticky bit should be set for all world-writable directories.</description>
			</metadata>
			<criteria>
				<criterion comment="Check all directories and make sure they are either not world writable or if they are they have the sticky bit set" test_ref="oval:gov.nist.usgcb.rhel:tst:20046"/>
			</criteria>
		</definition>
		<definition class="compliance" id="oval:gov.nist.usgcb.rhel:def:20047" version="1">
			<metadata>
				<title>Find Unauthorized World-Writable Files</title>
				<affected family="unix">
					<platform>Red Hat Enterprise Linux 5</platform>
				</affected>
				<reference ref_id="CCE-3795-2" source="CCE"/>
				<description>The world-write permission should be disabled for all files.</description>
			</metadata>
			<criteria>
				<!-- Need a way to add exceptions to a list somehow (can add another filter to obj:20047, depending on a variable) -->
				<criterion comment="Check all (regular) files and make sure they are not world writable" test_ref="oval:gov.nist.usgcb.rhel:tst:20047"/>
			</criteria>
		</definition>
		<definition class="compliance" id="oval:gov.nist.usgcb.rhel:def:20048" version="1">
			<metadata>
				<title>Find Unauthorized SGID System Executables</title>
				<affected family="unix">
					<platform>Red Hat Enterprise Linux 5</platform>
				</affected>
				<reference ref_id="CCE-14970-8" source="CCE"/>
				<description>The sgid bit should be set only for specified files.</description>
			</metadata>
			<criteria>
				<criterion comment="Check all files and make sure only authorized files have sgid set" test_ref="oval:gov.nist.usgcb.rhel:tst:20048"/>
			</criteria>
		</definition>
		<definition class="compliance" id="oval:gov.nist.usgcb.rhel:def:20049" version="1">
			<metadata>
				<title>Find Unauthorized SUID System Executables</title>
				<affected family="unix">
					<platform>Red Hat Enterprise Linux 5</platform>
				</affected>
				<reference ref_id="CCE-14340-4" source="CCE"/>
				<description>The suid bit should be set only for specified files.</description>
			</metadata>
			<criteria>
				<criterion comment="Check all files and make sure only authorized files have suid set" test_ref="oval:gov.nist.usgcb.rhel:tst:20049"/>
			</criteria>
		</definition>
		<definition class="compliance" id="oval:gov.nist.usgcb.rhel:def:20050" version="1">
			<metadata>
				<title>Find files unowned by a user</title>
				<affected family="unix">
					<platform>Red Hat Enterprise Linux 5</platform>
				</affected>
				<reference ref_id="CCE-4223-4" source="CCE"/>
				<description>All files should be owned by a user</description>
			</metadata>
			<criteria>
				<criterion comment="Check all files and make sure they are owned by a user" test_ref="oval:gov.nist.usgcb.rhel:tst:20050"/>
			</criteria>
		</definition>
		<definition class="compliance" id="oval:gov.nist.usgcb.rhel:def:20051" version="1">
			<metadata>
				<title>Find files unowned by a group</title>
				<affected family="unix">
					<platform>Red Hat Enterprise Linux 5</platform>
				</affected>
				<reference ref_id="CCE-3573-3" source="CCE"/>
				<description>All files should be owned by a group</description>
			</metadata>
			<criteria>
				<criterion comment="Check all files and make sure they are owned by a group" test_ref="oval:gov.nist.usgcb.rhel:tst:20051"/>
			</criteria>
		</definition>
		<definition class="compliance" id="oval:gov.nist.usgcb.rhel:def:20052" version="1">
			<metadata>
				<title>Find world writable directories not owned by a system account</title>
				<affected family="unix">
					<platform>Red Hat Enterprise Linux 5</platform>
				</affected>
				<reference ref_id="CCE-14794-2" source="CCE"/>
				<description>All world writable directories should be owned by a system user</description>
			</metadata>
			<criteria>
				<criterion comment="Check all directories are not world writable or owned by a user with uid less than 500" test_ref="oval:gov.nist.usgcb.rhel:tst:20052"/>
			</criteria>
		</definition>
		<definition class="compliance" id="oval:gov.nist.usgcb.rhel:def:20053" version="1">
			<metadata>
				<title>Set Daemon umask</title>
				<affected family="unix">
					<platform>Red Hat Enterprise Linux 5</platform>
				</affected>
				<reference ref_id="CCE-4220-0" source="CCE"/>
				<description>The daemon umask should be set as appropriate</description>
			</metadata>
			<criteria>
				<criterion test_ref="oval:gov.nist.usgcb.rhel:tst:20053"/>
			</criteria>
		</definition>
		<definition class="compliance" id="oval:gov.nist.usgcb.rhel:def:20055" version="1">
			<metadata>
				<title>Disable Core Dumps</title>
				<affected family="unix">
					<platform>Red Hat Enterprise Linux 5</platform>
				</affected>
				<reference ref_id="CCE-4225-9" source="CCE"/>
				<description>Core dumps for all users should be disabled</description>
			</metadata>
			<criteria>
				<criterion comment="Are core dumps disabled" test_ref="oval:gov.nist.usgcb.rhel:tst:20055"/>
			</criteria>
		</definition>
		<definition class="compliance" id="oval:gov.nist.usgcb.rhel:def:20056" version="1">
			<metadata>
				<title>Disable Core Dumps for setuid programs</title>
				<affected family="unix">
					<platform>Red Hat Enterprise Linux 5</platform>
				</affected>
				<reference ref_id="CCE-4247-3" source="CCE"/>
				<description>Core dumps for setuid programs should be disabled</description>
			</metadata>
			<criteria>
				<criterion comment="Are core dumps for setuid programs disabled?" test_ref="oval:gov.nist.usgcb.rhel:tst:20056"/>
			</criteria>
		</definition>
		<definition class="compliance" id="oval:gov.nist.usgcb.rhel:def:20057" version="1">
			<metadata>
				<title>Enable ExecShield</title>
				<affected family="unix">
					<platform>Red Hat Enterprise Linux 5</platform>
				</affected>
				<reference ref_id="CCE-4168-1" source="CCE"/>
				<description>ExecShield should be enabled</description>
			</metadata>
			<criteria>
				<criterion comment="Is execshield enabled" test_ref="oval:gov.nist.usgcb.rhel:tst:20057"/>
			</criteria>
		</definition>
		<definition class="compliance" id="oval:gov.nist.usgcb.rhel:def:20058" version="1">
			<metadata>
				<title>Enable ExecShield randomized placement of virtual memory regions</title>
				<affected family="unix">
					<platform>Red Hat Enterprise Linux 5</platform>
				</affected>
				<reference ref_id="CCE-4146-7" source="CCE"/>
				<description>ExecShield randomized placement of virtual memory regions should be enabled</description>
			</metadata>
			<criteria>
				<criterion comment="check ExecShield randomized placement of virtual memory regions" test_ref="oval:gov.nist.usgcb.rhel:tst:20058"/>
			</criteria>
		</definition>
		<definition class="compliance" id="oval:gov.nist.usgcb.rhel:def:20059" version="1">
			<metadata>
				<title>Install New Kernel on Supported x86 Systems</title>
				<affected family="unix">
					<platform>Red Hat Enterprise Linux 5</platform>
				</affected>
				<reference ref_id="CCE-4172-3" source="CCE"/>
				<description>Kernel support for the XD/NX processor feature should be enabled</description>
			</metadata>
			<criteria operator="OR">
				<extend_definition definition_ref="oval:org.mitre.oval:def:2004" comment="check for x64"/>
				<criterion comment="check for PAE kernel" test_ref="oval:gov.nist.usgcb.rhel:tst:20059"/>
			</criteria>
		</definition>
		<definition class="compliance" id="oval:gov.nist.usgcb.rhel:def:20063" version="1">
			<metadata>
				<title>Restrict Root Logins to System Console</title>
				<affected family="unix">
					<platform>Red Hat Enterprise Linux 5</platform>
				</affected>
				<reference ref_id="CCE-3485-0" source="CCE"/>
				<description>Logins through the primary console device should be disabled</description>
			</metadata>
			<criteria>
				<!--<criterion comment="Conditions are satisfied" test_ref="oval:gov.nist.usgcb.rhel:tst:20063"/>-->
				<criterion comment="Conditions are satisfied" test_ref="oval:gov.nist.usgcb.rhel:tst:34850"/>
			</criteria>
		</definition>
		<definition class="compliance" id="oval:gov.nist.usgcb.rhel:def:20064" version="1">
			<metadata>
				<title>Restrict Root Logins to System Console</title>
				<affected family="unix">
					<platform>Red Hat Enterprise Linux 5</platform>
				</affected>
				<reference ref_id="CCE-4256-4" source="CCE"/>
				<description>Login prompts on serial ports should be disabled.</description>
			</metadata>
			<criteria>
				<!--<criterion negate="true" comment="Conditions are satisfied" test_ref="oval:gov.nist.usgcb.rhel:tst:20064"/>-->
				<criterion comment="Conditions are satisfied" test_ref="oval:gov.nist.usgcb.rhel:tst:42560"/>
			</criteria>
		</definition>
		<definition class="compliance" id="oval:gov.nist.usgcb.rhel:def:20065" version="1">
			<metadata>
				<title>Limit su Access to the wheel group</title>
				<affected family="unix">
					<platform>Red Hat Enterprise Linux 5</platform>
				</affected>
				<reference source="CCE" ref_id="CCE-14088-9"/>
				<description>The wheel group should exist</description>
			</metadata>
			<criteria>
				<criterion comment="Does wheel group exist" test_ref="oval:gov.nist.usgcb.rhel:tst:20065"/>
			</criteria>
		</definition>
		<definition class="compliance" id="oval:gov.nist.usgcb.rhel:def:20066" version="1">
			<metadata>
				<title>Limit command Access to the Root Account</title>
				<affected family="unix">
					<platform>Red Hat Enterprise Linux 5</platform>
				</affected>
				<reference source="CCE" ref_id="CCE-15047-4"/>
				<description>Command access to the root account should be restricted to the wheel group.</description>
			</metadata>
			<criteria>
				<criterion comment="Conditions are satisfied" test_ref="oval:gov.nist.usgcb.rhel:tst:20066"/>
			</criteria>
		</definition>
		<definition class="compliance" id="oval:gov.nist.usgcb.rhel:def:20068" version="1">
			<metadata>
				<title>Block Shell and Login Access for Non-Root System Accounts</title>
				<affected family="unix">
					<platform>Red Hat Enterprise Linux 5</platform>
				</affected>
				<reference ref_id="CCE-3987-5" source="CCE"/>
				<description>Login access to non-root system accounts should be disabled</description>
			</metadata>
			<criteria>
				<criterion comment="check /etc/passwd for /sbin/nologin on non root system accounts" test_ref="oval:gov.nist.usgcb.rhel:tst:20068"/>
			</criteria>
		</definition>
		<definition class="compliance" id="oval:gov.nist.usgcb.rhel:def:20069" version="1">
			<metadata>
				<title>Verify that No Accounts Have Empty Password Fields</title>
				<affected family="unix">
					<platform>Red Hat Enterprise Linux 5</platform>
				</affected>
				<reference ref_id="CCE-4238-2" source="CCE"/>
				<description>Login access to accounts without passwords should be disabled</description>
			</metadata>
			<criteria>
				<criterion comment="Conditions are satisfied" test_ref="oval:gov.nist.usgcb.rhel:tst:20069"/>
			</criteria>
		</definition>
		<definition class="compliance" id="oval:gov.nist.usgcb.rhel:def:200695" version="1">
			<metadata>
				<title>Verify that All Account Password Hashes are Shadowed</title>
				<affected family="unix">
					<platform>Red Hat Enterprise Linux 5</platform>
				</affected>
				<reference ref_id="CCE-14300-8" source="CCE"/>
				<description>Check that passwords are shadowed</description>
			</metadata>
			<criteria>
				<criterion comment="Conditions are satisfied" test_ref="oval:gov.nist.usgcb.rhel:tst:200695"/>
			</criteria>
		</definition>
		<definition class="compliance" id="oval:gov.nist.usgcb.rhel:def:20070" version="1">
			<metadata>
				<title>Verify that No Non-Root Accounts Have UID 0</title>
				<affected family="unix">
					<platform>Red Hat Enterprise Linux 5</platform>
				</affected>
				<reference ref_id="CCE-4009-7" source="CCE"/>
				<description>Anonymous root logins are disabled</description>
			</metadata>
			<criteria>
				<criterion comment="conditions are satisfied" test_ref="oval:gov.nist.usgcb.rhel:tst:20070"/>
			</criteria>
		</definition>
		<definition class="compliance" id="oval:gov.nist.usgcb.rhel:def:20071" version="1">
			<metadata>
				<title>Set Password Expiration Parameters</title>
				<affected family="unix">
					<platform>Red Hat Enterprise Linux 5</platform>
				</affected>
				<reference ref_id="CCE-4154-1" source="CCE"/>
				<description>The password minimum length should be set appropriately</description>
			</metadata>
			<criteria operator="AND">
				<criterion test_ref="oval:gov.nist.usgcb.rhel:tst:20071"/>
				<criterion test_ref="oval:gov.nist.usgcb.rhel:tst:200782"/>
			</criteria>
		</definition>
		<definition class="compliance" id="oval:gov.nist.usgcb.rhel:def:20072" version="1">
			<metadata>
				<title>Set Password Expiration Parameters</title>
				<affected family="unix">
					<platform>Red Hat Enterprise Linux 5</platform>
				</affected>
				<reference ref_id="CCE-4180-6" source="CCE"/>
				<description>The "minimum password age" policy should meet minimum requirements. </description>
			</metadata>
			<criteria>
				<criterion test_ref="oval:gov.nist.usgcb.rhel:tst:20072"/>
			</criteria>
		</definition>
		<definition class="compliance" id="oval:gov.nist.usgcb.rhel:def:20073" version="1">
			<metadata>
				<title>Set Password Expiration Parameters</title>
				<affected family="unix">
					<platform>Red Hat Enterprise Linux 5</platform>
				</affected>
				<reference ref_id="CCE-4092-3" source="CCE"/>
				<description>The "maximum password age" policy should meet minimum requirements. </description>
			</metadata>
			<criteria>
				<criterion test_ref="oval:gov.nist.usgcb.rhel:tst:20073"/>
			</criteria>
		</definition>
		<definition class="compliance" id="oval:gov.nist.usgcb.rhel:def:20074" version="1">
			<metadata>
				<title>Set Password Expiration Parameters</title>
				<affected family="unix">
					<platform>Red Hat Enterprise Linux 5</platform>
				</affected>
				<reference ref_id="CCE-4097-2" source="CCE"/>
				<description>The password warn age should be set appropriately</description>
			</metadata>
			<criteria>
				<criterion test_ref="oval:gov.nist.usgcb.rhel:tst:20074"/>
			</criteria>
		</definition>
		<definition class="compliance" id="oval:gov.nist.usgcb.rhel:def:20075" version="1">
			<metadata>
				<title>Remove Legacy + Entries from Password Files</title>
				<affected family="unix">
					<platform>Red Hat Enterprise Linux 5</platform>
				</affected>
				<reference source="CCE" ref_id="CCE-14071-5"/>
				<description>NIS file inclusions should be set appropriately in the /etc/shadow file</description>
			</metadata>
			<criteria>
				<criterion comment="Conditions are satisfied" test_ref="oval:gov.nist.usgcb.rhel:tst:20075"/>
			</criteria>
		</definition>
		<definition class="compliance" id="oval:gov.nist.usgcb.rhel:def:20076" version="1">
			<metadata>
				<title>Remove Legacy + Entries from Password Files</title>
				<affected family="unix">
					<platform>Red Hat Enterprise Linux 5</platform>
				</affected>
				<reference source="CCE" ref_id="CCE-14675-3"/>
				<description>NIS file inclusions should be set appropriately in the /etc/group file</description>
			</metadata>
			<criteria>
				<criterion comment="Conditions are satisfied" test_ref="oval:gov.nist.usgcb.rhel:tst:20076"/>
			</criteria>
		</definition>
		<definition class="compliance" id="oval:gov.nist.usgcb.rhel:def:20077" version="1">
			<metadata>
				<title>Remove Legacy + Entries from Password Files</title>
				<affected family="unix">
					<platform>Red Hat Enterprise Linux 5</platform>
				</affected>
				<reference ref_id="CCE-4114-5" source="CCE"/>
				<description>NIS file inclusions should be set appropriately in the /etc/passwd file</description>
			</metadata>
			<criteria>
				<criterion comment="Conditions are satisfied" test_ref="oval:gov.nist.usgcb.rhel:tst:20077"/>
			</criteria>
		</definition>
		<definition class="compliance" id="oval:gov.nist.usgcb.rhel:def:200781" version="1">
			<metadata>
				<title>Set Password retry Requirements</title>
				<affected family="unix">
					<platform>Red Hat Enterprise Linux 5</platform>
				</affected>
				<reference ref_id="CCE-15054-0" source="CCE"/>
				<description>The password retry should meet minimum requirements using pam_cracklib</description>
			</metadata>
			<criteria>
				<criterion comment="Conditions for retry are satisfied" test_ref="oval:gov.nist.usgcb.rhel:tst:200781"/>
			</criteria>
		</definition>
		<definition class="compliance" id="oval:gov.nist.usgcb.rhel:def:141130" version="1">
			<metadata>
				<title>Set Password dcredit Requirements</title>
				<affected family="unix">
					<platform>Red Hat Enterprise Linux 5</platform>
				</affected>
				<reference ref_id="CCE-14113-5" source="CCE"/>
				<description>The password dcredit should meet minimum requirements using pam_cracklib</description>
			</metadata>
			<criteria>
				<criterion comment="Conditions for dcredit are satisfied" test_ref="oval:gov.nist.usgcb.rhel:tst:141130"/>
			</criteria>
		</definition>
		<definition class="compliance" id="oval:gov.nist.usgcb.rhel:def:200784" version="1">
			<metadata>
				<title>Set Password ucredit Requirements</title>
				<affected family="unix">
					<platform>Red Hat Enterprise Linux 5</platform>
				</affected>
				<reference ref_id="CCE-14672-0" source="CCE"/>
				<description>The password ucredit should meet minimum requirements using pam_cracklib</description>
			</metadata>
			<criteria>
				<criterion comment="Conditions for ucredit are satisfied" test_ref="oval:gov.nist.usgcb.rhel:tst:200784"/>
			</criteria>
		</definition>
		<definition class="compliance" id="oval:gov.nist.usgcb.rhel:def:200785" version="1">
			<metadata>
				<title>Set Password ocredit Requirements</title>
				<affected family="unix">
					<platform>Red Hat Enterprise Linux 5</platform>
				</affected>
				<reference ref_id="CCE-14122-6" source="CCE"/>
				<description>The password ocredit should meet minimum requirements using pam_cracklib</description>
			</metadata>
			<criteria>
				<criterion comment="Conditions for ocredit are satisfied" test_ref="oval:gov.nist.usgcb.rhel:tst:200785"/>
			</criteria>
		</definition>
		<definition class="compliance" id="oval:gov.nist.usgcb.rhel:def:200786" version="1">
			<metadata>
				<title>Set Password lcredit Requirements</title>
				<affected family="unix">
					<platform>Red Hat Enterprise Linux 5</platform>
				</affected>
				<reference ref_id="CCE-14712-4" source="CCE"/>
				<description>The password lcredit should meet minimum requirements using pam_cracklib</description>
			</metadata>
			<criteria>
				<criterion comment="Conditions for lcredit are satisfied" test_ref="oval:gov.nist.usgcb.rhel:tst:200786"/>
			</criteria>
		</definition>
		<definition class="compliance" id="oval:gov.nist.usgcb.rhel:def:200787" version="1">
			<metadata>
				<title>Set Password difok Requirements</title>
				<affected family="unix">
					<platform>Red Hat Enterprise Linux 5</platform>
				</affected>
				<reference ref_id="CCE-14701-7" source="CCE"/>
				<description>The password difok should meet minimum requirements using pam_cracklib</description>
			</metadata>
			<criteria>
				<criterion comment="Conditions for difok are satisfied" test_ref="oval:gov.nist.usgcb.rhel:tst:200787"/>
			</criteria>
		</definition>
		<definition class="compliance" id="oval:gov.nist.usgcb.rhel:def:200801" version="1">
			<metadata>
				<title>Set deny for Failed Password Attempts</title>
				<affected family="unix">
					<platform>Red Hat Enterprise Linux 5</platform>
				</affected>
				<reference ref_id="CCE-3410-8" source="CCE"/>
				<description>The "account deny" policy should meet minimum requirements.</description>
			</metadata>
			<criteria>
				<criterion comment="check that deny for pam_tally2 account module is configured correctly" test_ref="oval:gov.nist.usgcb.rhel:tst:200801"/>
			</criteria>
		</definition>
		<definition class="compliance" id="oval:gov.nist.usgcb.rhel:def:20083" version="1">
			<metadata>
				<title>Set Password hashing algorithm</title>
				<affected family="unix">
					<platform>Red Hat Enterprise Linux 5</platform>
				</affected>
				<reference ref_id="CCE-14063-2" source="CCE"/>
				<description>The password hashing algorithm should be set correctly.</description>
			</metadata>
			<criteria operator="AND">
				<criterion test_ref="oval:gov.nist.usgcb.rhel:tst:140630"/>
				<criterion test_ref="oval:gov.nist.usgcb.rhel:tst:140631"/>
				<criterion test_ref="oval:gov.nist.usgcb.rhel:tst:140632"/>
			</criteria>
		</definition>
		<definition class="compliance" id="oval:gov.nist.usgcb.rhel:def:20084" version="1">
			<metadata>
				<title>Limit password reuse</title>
				<affected family="unix">
					<platform>Red Hat Enterprise Linux 5</platform>
				</affected>
				<reference ref_id="CCE-14939-3" source="CCE"/>
				<description>The passwords to remember should be set correctly.</description>
			</metadata>
			<criteria operator="ONE">
				<criteria>
					<criterion test_ref="oval:gov.nist.usgcb.rhel:tst:200841" comment="remember parameter is set to 0"/>
				</criteria>
				<criteria>
					<criterion test_ref="oval:gov.nist.usgcb.rhel:tst:200841" comment="remember parameter is set to 0 (note this is negated)" negate="true"/>
					<criterion comment="check the /etc/pam.d/system-auth password module has a remember option set appropriately" test_ref="oval:gov.nist.usgcb.rhel:tst:200842"/>
				</criteria>
			</criteria>
		</definition>
		<definition class="compliance" id="oval:gov.nist.usgcb.rhel:def:20085" version="1">
			<metadata>
				<title>Ensure that No Dangerous Directories Exist in Root's Path</title>
				<affected family="unix">
					<platform>Red Hat Enterprise Linux 5</platform>
				</affected>
				<reference ref_id="CCE-3301-9" source="CCE"/>
				<description>The PATH variable should be set correctly for user root</description>
			</metadata>
			<criteria operator="AND" negate="true" comment="PATH starts with ':' or '.', path contains '::' or ':.:' or path ends with ':' or '.'">
				<criterion comment="PATH starts with ':' or '.', path contains '::' or ':.:' or path ends with ':' or '.' " test_ref="oval:gov.nist.usgcb.rhel:tst:20085"/>
			</criteria>
		</definition>
		<definition class="compliance" id="oval:gov.nist.usgcb.rhel:def:200855" version="1">
			<metadata>
				<title>Write permissions are disabled for group and other in all directories in Root's Path</title>
				<affected family="unix">
					<platform>Red Hat Enterprise Linux 5</platform>
				</affected>
				<reference ref_id="CCE-14957-5" source="CCE"/>
				<description>Check each directory in root's path and make use it does not grant write permission to group and other</description>
			</metadata>
			<criteria operator="OR" negate="true" comment="Check that write permission to group and other in root's path is denied">
				<criterion comment="Check for write permission to group in root's path" test_ref="oval:gov.nist.usgcb.rhel:tst:2008551"/>
				<criterion comment="Check for write permission to other in root's path" test_ref="oval:gov.nist.usgcb.rhel:tst:2008552"/>
			</criteria>
		</definition>
		<definition class="compliance" id="oval:gov.nist.usgcb.rhel:def:20086" version="1">
			<metadata>
				<title>Ensure that User Home Directories are not Group-Writable or World-Readable</title>
				<affected family="unix">
					<platform>Red Hat Enterprise Linux 5</platform>
				</affected>
				<reference ref_id="CCE-4090-7" source="CCE"/>
				<description>File permissions should be set correctly for the home directories for all user accounts.</description>
			</metadata>
			<criteria comment="Both criterion are negated to get desired result">
				<criterion comment="Home directories are group writable" test_ref="oval:gov.nist.usgcb.rhel:tst:200861" negate="true"/>
				<criterion comment="Home directories are world readable" test_ref="oval:gov.nist.usgcb.rhel:tst:200862" negate="true"/>
			</criteria>
		</definition>
		<definition class="compliance" id="oval:gov.nist.usgcb.rhel:def:20087" version="1">
			<metadata>
				<title>Ensure that Users Have Sensible Umask Values set for bash</title>
				<affected family="unix">
					<platform>Red Hat Enterprise Linux 5</platform>
				</affected>
				<reference ref_id="CCE-3844-8" source="CCE"/>
				<description>The default umask for all users should be set correctly for the bash shell</description>
			</metadata>
			<criteria>
				<criterion test_ref="oval:gov.nist.usgcb.rhel:tst:20087"/>
			</criteria>
		</definition>
		<definition class="compliance" id="oval:gov.nist.usgcb.rhel:def:20088" version="1">
			<metadata>
				<title>Ensure that Users Have Sensible Umask Values set for csh</title>
				<affected family="unix">
					<platform>Red Hat Enterprise Linux 5</platform>
				</affected>
				<reference ref_id="CCE-4227-5" source="CCE"/>
				<description>The default umask for all users should be set correctly for the csh shell</description>
			</metadata>
			<criteria>
				<criterion test_ref="oval:gov.nist.usgcb.rhel:tst:20088"/>
			</criteria>
		</definition>
		<definition class="compliance" id="oval:gov.nist.usgcb.rhel:def:20089" version="1">
			<metadata>
				<title>Ensure that Users Have Sensible Umask Values in /etc/login.defs</title>
				<affected family="unix">
					<platform>Red Hat Enterprise Linux 5</platform>
				</affected>
				<reference ref_id="CCE-14107-7" source="CCE"/>
				<description>The default umask for all users should be set correctly</description>
			</metadata>
			<criteria>
				<criterion test_ref="oval:gov.nist.usgcb.rhel:tst:20089"/>
			</criteria>
		</definition>
		<definition class="compliance" id="oval:gov.nist.usgcb.rhel:def:20090" version="1">
			<metadata>
				<title>Ensure that Users Have Sensible Umask Values in /etc/profile</title>
				<affected family="unix">
					<platform>Red Hat Enterprise Linux 5</platform>
				</affected>
				<reference ref_id="CCE-14847-8" source="CCE"/>
				<description>The default umask for all users should be set correctly</description>
			</metadata>
			<criteria>
				<criterion test_ref="oval:gov.nist.usgcb.rhel:tst:20090"/>
			</criteria>
		</definition>
		<definition class="compliance" id="oval:gov.nist.usgcb.rhel:def:20092" version="1">
			<metadata>
				<title>Set Boot Loader Password</title>
				<affected family="unix">
					<platform>Red Hat Enterprise Linux 5</platform>
				</affected>
				<reference ref_id="CCE-4144-2" source="CCE"/>
				<description>The /boot/grub/grub.conf file should be owned by the appropriate user.</description>
			</metadata>
			<criteria>
				<criterion test_ref="oval:gov.nist.usgcb.rhel:tst:20092"/>
			</criteria>
		</definition>
		<definition class="compliance" id="oval:gov.nist.usgcb.rhel:def:20093" version="1">
			<metadata>
				<title>Set Boot Loader Password</title>
				<affected family="unix">
					<platform>Red Hat Enterprise Linux 5</platform>
				</affected>
				<reference ref_id="CCE-4197-0" source="CCE"/>
				<description>The /boot/grub/grub.conf file should be owned by the appropriate group.</description>
			</metadata>
			<criteria>
				<criterion test_ref="oval:gov.nist.usgcb.rhel:tst:20093"/>
			</criteria>
		</definition>
		<definition class="compliance" id="oval:gov.nist.usgcb.rhel:def:20094" version="1">
			<metadata>
				<title>Set Boot Loader Password</title>
				<affected family="unix">
					<platform>Red Hat Enterprise Linux 5</platform>
				</affected>
				<reference ref_id="CCE-3923-0" source="CCE"/>
				<description>File permissions for /boot/grub/grub.conf should be set correctly.</description>
			</metadata>
			<criteria>
				<criterion test_ref="oval:gov.nist.usgcb.rhel:tst:20094"/>
			</criteria>
		</definition>
		<definition class="compliance" id="oval:gov.nist.usgcb.rhel:def:20095" version="1">
			<metadata>
				<title>Set Boot Loader Password</title>
				<affected family="unix">
					<platform>Red Hat Enterprise Linux 5</platform>
				</affected>
				<reference ref_id="CCE-3818-2" source="CCE"/>
				<description>The grub boot loader should have password protection enabled</description>
			</metadata>
			<criteria>
				<criterion comment="Conditions are satisfied" test_ref="oval:gov.nist.usgcb.rhel:tst:20095"/>
			</criteria>
		</definition>
		<definition class="compliance" id="oval:gov.nist.usgcb.rhel:def:20096" version="1">
			<metadata>
				<title>Require Authentication for Single-User Mode</title>
				<affected family="unix">
					<platform>Red Hat Enterprise Linux 5</platform>
				</affected>
				<reference ref_id="CCE-4241-6" source="CCE"/>
				<description>The requirement for a password to boot into single-user mode should be configured correctly.</description>
			</metadata>
			<criteria>
				<criterion comment="Conditions are satisfied" test_ref="oval:gov.nist.usgcb.rhel:tst:20096"/>
			</criteria>
		</definition>
		<definition class="compliance" id="oval:gov.nist.usgcb.rhel:def:20097" version="1">
			<metadata>
				<title>Disable Interactive Boot</title>
				<affected family="unix">
					<platform>Red Hat Enterprise Linux 5</platform>
				</affected>
				<reference ref_id="CCE-4245-7" source="CCE"/>
				<description>The ability for users to perform interactive startups should be disabled.</description>
			</metadata>
			<criteria>
				<criterion test_ref="oval:gov.nist.usgcb.rhel:tst:20097"/>
			</criteria>
		</definition>
		<definition class="compliance" id="oval:gov.nist.usgcb.rhel:def:20100" version="1">
			<metadata>
				<title>Configure GUI Screen Locking</title>
				<affected family="unix">
					<platform>Red Hat Enterprise Linux 5</platform>
				</affected>
				<reference ref_id="CCE-3315-9" source="CCE"/>
				<description>The allowed period of inactivity gnome desktop lockout should be configured correctly.</description>
			</metadata>
			<criteria>
				<criterion comment="check value of idle_delay in GCONF" test_ref="oval:gov.nist.usgcb.rhel:tst:20100"/>
			</criteria>
		</definition>
		<definition class="compliance" id="oval:gov.nist.usgcb.rhel:def:201005" version="1">
			<metadata>
				<title>Implement idle activation of screen saver</title>
				<affected family="unix">
					<platform>Red Hat Enterprise Linux 5</platform>
				</affected>
				<reference ref_id="CCE-14604-3" source="CCE"/>
				<description>Idle activation of the screen saver should be enabled.</description>
			</metadata>
			<criteria>
				<criterion comment="check value of idle_activation_enabled in GCONF" test_ref="oval:gov.nist.usgcb.rhel:tst:201005"/>
			</criteria>
		</definition>
		<definition class="compliance" id="oval:gov.nist.usgcb.rhel:def:201006" version="1">
			<metadata>
				<title>Implement idle activation of screen lock</title>
				<affected family="unix">
					<platform>Red Hat Enterprise Linux 5</platform>
				</affected>
				<reference ref_id="CCE-14023-6" source="CCE"/>
				<description>Idle activation of the screen lock should be enabled.</description>
			</metadata>
			<criteria>
				<criterion comment="check value of lock_enabled in GCONF" test_ref="oval:gov.nist.usgcb.rhel:tst:201006"/>
			</criteria>
		</definition>
		<definition class="compliance" id="oval:gov.nist.usgcb.rhel:def:201007" version="1">
			<metadata>
				<title>Implement blank screen saver</title>
				<affected family="unix">
					<platform>Red Hat Enterprise Linux 5</platform>
				</affected>
				<reference ref_id="CCE-14735-5" source="CCE"/>
				<description>The screen saver should be blank.</description>
			</metadata>
			<criteria>
				<criterion comment="check value of mode in GCONF" test_ref="oval:gov.nist.usgcb.rhel:tst:201007"/>
			</criteria>
		</definition>
		<definition class="compliance" id="oval:gov.nist.usgcb.rhel:def:20101" version="1">
			<metadata>
				<title>Configure GUI Screen Locking</title>
				<affected family="unix">
					<platform>Red Hat Enterprise Linux 5</platform>
				</affected>
				<reference ref_id="CCE-3910-7" source="CCE"/>
				<description>The vlock package should be installed</description>
			</metadata>
			<criteria>
				<criterion comment="Conditions are satisfied" test_ref="oval:gov.nist.usgcb.rhel:tst:20101"/>
			</criteria>
		</definition>
		<definition class="compliance" id="oval:gov.nist.usgcb.rhel:def:20102" version="1">
			<metadata>
				<title>Modify the System Login Banner</title>
				<affected family="unix">
					<platform>Red Hat Enterprise Linux 5</platform>
				</affected>
				<reference ref_id="CCE-4060-0" source="CCE"/>
				<description>The system login banner text should be set correctly.</description>
			</metadata>
			<criteria>
				<criterion comment="/etc/issue is set appropriately" test_ref="oval:gov.nist.usgcb.rhel:tst:20102"/>
			</criteria>
		</definition>
		<definition class="compliance" id="oval:gov.nist.usgcb.rhel:def:20103" version="1">
			<metadata>
				<title>Implement a GUI Warning Banner</title>
				<affected family="unix">
					<platform>Red Hat Enterprise Linux 5</platform>
				</affected>
				<reference ref_id="CCE-4188-9" source="CCE"/>
				<description>The direct gnome login warning banner should be set correctly.</description>
			</metadata>
			<criteria>
				<!--<criterion comment="Check that the GConf setting for the login banner is set correctly" test_ref="oval:gov.nist.usgcb.rhel:tst:20103"/>-->
				<criterion comment="unknown test stub" test_ref="oval:gov.nist.usgcb.rhel:tst:41880"/>
			</criteria>
		</definition>
		<definition class="compliance" id="oval:gov.nist.usgcb.rhel:def:201035" version="1">
			<metadata>
				<title>Ensure SELinux is Properly Enabled</title>
				<affected family="unix">
					<platform>Red Hat Enterprise Linux 5</platform>
				</affected>
				<!--<reference ref_id="TBD" source="CCE"/>-->
				<description>Check output of /usr/sbin/sestatus or check if /selinux exists.</description>
			</metadata>
			<criteria>
				<criterion comment="/selinux exists" test_ref="oval:gov.nist.usgcb.rhel:tst:201035"/>
			</criteria>
		</definition>
		<definition class="compliance" id="oval:gov.nist.usgcb.rhel:def:20104" version="1">
			<metadata>
				<title>Enable SELinux</title>
				<affected family="unix">
					<platform>Red Hat Enterprise Linux 5</platform>
				</affected>
				<reference ref_id="CCE-3977-6" source="CCE"/>
				<description>SELinux should be enabled</description>
			</metadata>
			<criteria>
				<criterion test_ref="oval:gov.nist.usgcb.rhel:tst:20104"/>
			</criteria>
		</definition>
		<definition class="compliance" id="oval:gov.nist.usgcb.rhel:def:20106" version="1">
			<metadata>
				<title>Enable SELinux state</title>
				<affected family="unix">
					<platform>Red Hat Enterprise Linux 5</platform>
				</affected>
				<reference ref_id="CCE-3999-0" source="CCE"/>
				<description>The SELinux state should be set appropriately.</description>
			</metadata>
			<criteria operator="AND">
				<criterion test_ref="oval:gov.nist.usgcb.rhel:tst:20106"/>
				<criteria operator="OR">
					<criteria operator="AND">
						<extend_definition definition_ref="oval:gov.nist.usgcb.rhel:def:201035" comment="/selinux exists" negate="true"/>
						<criterion test_ref="oval:gov.nist.usgcb.rhel:tst:201061" comment="enforce is disabled"/>
					</criteria>
					<criteria operator="AND">
						<extend_definition definition_ref="oval:gov.nist.usgcb.rhel:def:201035" comment="/selinux exists"/>
						<criteria operator="OR">
							<criteria operator="AND">
								<criterion test_ref="oval:gov.nist.usgcb.rhel:tst:201062" comment="enforce is permissive"/>
								<criterion test_ref="oval:gov.nist.usgcb.rhel:tst:201064" comment="/selinux/enforce is 0"/>
							</criteria>
							<criteria operator="AND">
								<criterion test_ref="oval:gov.nist.usgcb.rhel:tst:201063" comment="enforce is enforcing"/>
								<criterion test_ref="oval:gov.nist.usgcb.rhel:tst:201065" comment="/selinux/enforce is 1"/>
							</criteria>
						</criteria>
					</criteria>
				</criteria>
			</criteria>
		</definition>
		<definition class="compliance" id="oval:gov.nist.usgcb.rhel:def:20107" version="1">
			<metadata>
				<title>Enable SELinux</title>
				<affected family="unix">
					<platform>Red Hat Enterprise Linux 5</platform>
				</affected>
				<reference ref_id="CCE-3624-4" source="CCE"/>
				<description>The SELinux policy should be set appropriately.</description>
			</metadata>
			<criteria>
				<criterion test_ref="oval:gov.nist.usgcb.rhel:tst:20107"/>
			</criteria>
		</definition>
		<definition class="compliance" id="oval:gov.nist.usgcb.rhel:def:20110" version="1">
			<metadata>
				<title>Disable MCS Translation Service (mcstrans) if Possible</title>
				<affected family="unix">
					<platform>Red Hat Enterprise Linux 5</platform>
				</affected>
				<reference ref_id="CCE-3668-1" source="CCE"/>
				<description>The mcstrans service should be disabled.</description>
			</metadata>
			<criteria operator="AND">
				<criterion comment="Conditions are satisfied" test_ref="oval:gov.nist.usgcb.rhel:tst:20110"/>
				<criterion comment="Conditions are satisfied" test_ref="oval:gov.nist.usgcb.rhel:tst:201101"/>
				<criterion comment="Conditions are satisfied" test_ref="oval:gov.nist.usgcb.rhel:tst:201102"/>
				<criterion comment="Conditions are satisfied" test_ref="oval:gov.nist.usgcb.rhel:tst:201103"/>
				<criterion comment="Conditions are satisfied" test_ref="oval:gov.nist.usgcb.rhel:tst:201104"/>
				<criterion comment="Conditions are satisfied" test_ref="oval:gov.nist.usgcb.rhel:tst:201105"/>
				<criterion comment="Conditions are satisfied" test_ref="oval:gov.nist.usgcb.rhel:tst:201106"/>
			</criteria>
		</definition>
		<definition class="compliance" id="oval:gov.nist.usgcb.rhel:def:201115" version="1">
			<metadata>
				<title>Check for Unconfined Daemons</title>
				<affected family="unix">
					<platform>Red Hat Enterprise Linux 5</platform>
				</affected>
				<reference ref_id="CCE-14991-4" source="CCE"/>
				<description>Check for device ﬁle that is not labeled.</description>
			</metadata>
			<criteria>
				<criterion comment="Unknown test stub" test_ref="oval:gov.nist.usgcb.rhel:tst:22"/>
			</criteria>
		</definition>
		<definition class="compliance" id="oval:gov.nist.usgcb.rhel:def:20112" version="1">
			<metadata>
				<title>Network Parameters for Hosts Only</title>
				<affected family="unix">
					<platform>Red Hat Enterprise Linux 5</platform>
				</affected>
				<reference ref_id="CCE-4151-7" source="CCE"/>
				<description>The default setting for sending ICMP redirects should be disabled for network interfaces.</description>
			</metadata>
			<criteria>
				<criterion test_ref="oval:gov.nist.usgcb.rhel:tst:20112"/>
			</criteria>
		</definition>
		<definition class="compliance" id="oval:gov.nist.usgcb.rhel:def:20113" version="1">
			<metadata>
				<title>Network Parameters for Hosts Only</title>
				<affected family="unix">
					<platform>Red Hat Enterprise Linux 5</platform>
				</affected>
				<reference ref_id="CCE-4155-8" source="CCE"/>
				<description>Sending ICMP redirects should be disabled for all interfaces.</description>
			</metadata>
			<criteria>
				<criterion test_ref="oval:gov.nist.usgcb.rhel:tst:20113"/>
			</criteria>
		</definition>
		<definition class="compliance" id="oval:gov.nist.usgcb.rhel:def:20114" version="1">
			<metadata>
				<title>Network Parameters for Hosts Only</title>
				<affected family="unix">
					<platform>Red Hat Enterprise Linux 5</platform>
				</affected>
				<reference ref_id="CCE-3561-8" source="CCE"/>
				<description>IP forwarding should be disabled.</description>
			</metadata>
			<criteria>
				<criterion test_ref="oval:gov.nist.usgcb.rhel:tst:20114"/>
			</criteria>
		</definition>
		<definition class="compliance" id="oval:gov.nist.usgcb.rhel:def:20115" version="1">
			<metadata>
				<title>Network Parameters for Hosts and Routers</title>
				<affected family="unix">
					<platform>Red Hat Enterprise Linux 5</platform>
				</affected>
				<reference ref_id="CCE-4236-6" source="CCE"/>
				<description>Accepting source routed packets should be enabled or disabled for all interfaces as appropriate.</description>
			</metadata>
			<criteria>
				<criterion test_ref="oval:gov.nist.usgcb.rhel:tst:20115"/>
			</criteria>
		</definition>
		<definition class="compliance" id="oval:gov.nist.usgcb.rhel:def:20116" version="1">
			<metadata>
				<title>Network Parameters for Hosts and Routers</title>
				<affected family="unix">
					<platform>Red Hat Enterprise Linux 5</platform>
				</affected>
				<reference ref_id="CCE-4217-6" source="CCE"/>
				<description>Accepting ICMP redirects should be enabled or disabled for all interfaces as appropriate.</description>
			</metadata>
			<criteria>
				<criterion test_ref="oval:gov.nist.usgcb.rhel:tst:20116"/>
			</criteria>
		</definition>
		<definition class="compliance" id="oval:gov.nist.usgcb.rhel:def:20117" version="1">
			<metadata>
				<title>Network Parameters for Hosts and Routers</title>
				<affected family="unix">
					<platform>Red Hat Enterprise Linux 5</platform>
				</affected>
				<reference ref_id="CCE-3472-8" source="CCE"/>
				<description>Accepting "secure" ICMP redirects (those from gateways listed in the default gateways list) should be enabled or disabled for all interfaces as appropriate.</description>
			</metadata>
			<criteria>
				<criterion test_ref="oval:gov.nist.usgcb.rhel:tst:20117"/>
			</criteria>
		</definition>
		<definition class="compliance" id="oval:gov.nist.usgcb.rhel:def:20118" version="1">
			<metadata>
				<title>Network Parameters for Hosts and Routers</title>
				<affected family="unix">
					<platform>Red Hat Enterprise Linux 5</platform>
				</affected>
				<reference ref_id="CCE-4320-8" source="CCE"/>
				<description>Logging of "martian" packets (those with impossible addresses) should be enabled or disabled for all interfaces as appropriate.</description>
			</metadata>
			<criteria>
				<criterion test_ref="oval:gov.nist.usgcb.rhel:tst:20118"/>
			</criteria>
		</definition>
		<definition class="compliance" id="oval:gov.nist.usgcb.rhel:def:20119" version="1">
			<metadata>
				<title>Network Parameters for Hosts and Routers</title>
				<affected family="unix">
					<platform>Red Hat Enterprise Linux 5</platform>
				</affected>
				<reference ref_id="CCE-4091-5" source="CCE"/>
				<description>The default setting for accepting source routed packets should be enabled or disabled for network interfaces as appropriate.</description>
			</metadata>
			<criteria>
				<criterion test_ref="oval:gov.nist.usgcb.rhel:tst:20119"/>
			</criteria>
		</definition>
		<definition class="compliance" id="oval:gov.nist.usgcb.rhel:def:20120" version="1">
			<metadata>
				<title>Network Parameters for Hosts and Routers</title>
				<affected family="unix">
					<platform>Red Hat Enterprise Linux 5</platform>
				</affected>
				<reference ref_id="CCE-4186-3" source="CCE"/>
				<description>The default setting for accepting ICMP redirects should be enabled or disabled for network interfaces as appropriate.</description>
			</metadata>
			<criteria>
				<criterion test_ref="oval:gov.nist.usgcb.rhel:tst:20120"/>
			</criteria>
		</definition>
		<definition class="compliance" id="oval:gov.nist.usgcb.rhel:def:20121" version="1">
			<metadata>
				<title>Network Parameters for Hosts and Routers</title>
				<affected family="unix">
					<platform>Red Hat Enterprise Linux 5</platform>
				</affected>
				<reference ref_id="CCE-3339-9" source="CCE"/>
				<description>The default setting for accepting "secure" ICMP redirects (those from gateways listed in the default gateways list) should be enabled or disabled for network interfaces as appropriate.</description>
			</metadata>
			<criteria>
				<criterion test_ref="oval:gov.nist.usgcb.rhel:tst:20121"/>
			</criteria>
		</definition>
		<definition class="compliance" id="oval:gov.nist.usgcb.rhel:def:20122" version="1">
			<metadata>
				<title>Network Parameters for Hosts and Routers</title>
				<affected family="unix">
					<platform>Red Hat Enterprise Linux 5</platform>
				</affected>
				<reference ref_id="CCE-3644-2" source="CCE"/>
				<description>Ignoring ICMP echo requests (pings) sent to broadcast / multicast addresses should be enabled or disabled as appropriate.</description>
			</metadata>
			<criteria>
				<criterion test_ref="oval:gov.nist.usgcb.rhel:tst:20122"/>
			</criteria>
		</definition>
		<definition class="compliance" id="oval:gov.nist.usgcb.rhel:def:20123" version="1">
			<metadata>
				<title>Network Parameters for Hosts and Routers</title>
				<affected family="unix">
					<platform>Red Hat Enterprise Linux 5</platform>
				</affected>
				<reference ref_id="CCE-4133-5" source="CCE"/>
				<description>Ignoring bogus ICMP responses to broadcasts should be enabled or disabled as appropriate.</description>
			</metadata>
			<criteria>
				<criterion test_ref="oval:gov.nist.usgcb.rhel:tst:20123"/>
			</criteria>
		</definition>
		<definition class="compliance" id="oval:gov.nist.usgcb.rhel:def:20124" version="1">
			<metadata>
				<title>Network Parameters for Hosts and Routers</title>
				<affected family="unix">
					<platform>Red Hat Enterprise Linux 5</platform>
				</affected>
				<reference ref_id="CCE-4265-5" source="CCE"/>
				<description>Sending TCP syncookies should be enabled or disabled as appropriate.</description>
			</metadata>
			<criteria>
				<criterion test_ref="oval:gov.nist.usgcb.rhel:tst:20124"/>
			</criteria>
		</definition>
		<definition class="compliance" id="oval:gov.nist.usgcb.rhel:def:20125" version="1">
			<metadata>
				<title>Network Parameters for Hosts and Routers</title>
				<affected family="unix">
					<platform>Red Hat Enterprise Linux 5</platform>
				</affected>
				<reference ref_id="CCE-4080-8" source="CCE"/>
				<description>Performing source validation by reverse path should be enabled or disabled for all interfaces as appropriate.</description>
			</metadata>
			<criteria>
				<criterion test_ref="oval:gov.nist.usgcb.rhel:tst:20125"/>
			</criteria>
		</definition>
		<definition class="compliance" id="oval:gov.nist.usgcb.rhel:def:20126" version="1">
			<metadata>
				<title>Network Parameters for Hosts and Routers</title>
				<affected family="unix">
					<platform>Red Hat Enterprise Linux 5</platform>
				</affected>
				<reference ref_id="CCE-3840-6" source="CCE"/>
				<description>The default setting for performing source validation by reverse path should be enabled or disabled for network interfaces as appropriate.</description>
			</metadata>
			<criteria>
				<criterion test_ref="oval:gov.nist.usgcb.rhel:tst:20126"/>
			</criteria>
		</definition>
		<definition class="compliance" id="oval:gov.nist.usgcb.rhel:def:20128" version="1">
			<metadata>
				<title>Deactivate Wireless Interfaces</title>
				<affected family="unix">
					<platform>Red Hat Enterprise Linux 5</platform>
				</affected>
				<reference ref_id="CCE-4276-2" source="CCE"/>
				<description>All wireless interfaces should be disabled.</description>
			</metadata>
			<criteria operator="OR">
				<criterion comment="No wireless interfaces exist" test_ref="oval:gov.nist.usgcb.rhel:tst:20128"/>
				<criterion comment="The file /proc/net/wireless does not exist" test_ref="oval:gov.nist.usgcb.rhel:tst:42760"/>
			</criteria>
		</definition>
		<definition class="compliance" id="oval:gov.nist.usgcb.rhel:def:20130" version="1">
			<metadata>
				<title>Disable IPv6 address assignment</title>
				<affected family="unix">
					<platform>Red Hat Enterprise Linux 5</platform>
				</affected>
				<reference ref_id="CCE-18455-6" source="CCE"/>
				<description>Automatic IPv6 address assignment should be disabled.</description>
			</metadata>
			<criteria>
				<criterion test_ref="oval:gov.nist.usgcb.rhel:tst:20130" comment="ipv6 option disable=1 set for modprobe"/>
			</criteria>
		</definition>
		<definition class="compliance" id="oval:gov.nist.usgcb.rhel:def:20131" version="1">
			<metadata>
				<title>Disable Interface Usage of IPv6</title>
				<affected family="unix">
					<platform>Red Hat Enterprise Linux 5</platform>
				</affected>
				<reference ref_id="CCE-3381-1" source="CCE"/>
				<description>The default setting for IPv6 configuration should be disabled for network interfaces.</description>
			</metadata>
			<criteria operator="OR" comment="Either IPv6 kernel module is not loaded or this feature should be disabled">
				<extend_definition definition_ref="oval:gov.nist.usgcb.rhel:def:20130" comment="Automatic loading of the IPv6 kernel module should be disabled"/>
				<criterion test_ref="oval:gov.nist.usgcb.rhel:tst:20131"/>
			</criteria>
		</definition>
		<definition class="compliance" id="oval:gov.nist.usgcb.rhel:def:20132" version="1">
			<metadata>
				<title>Disable Interface Usage of IPv6</title>
				<affected family="unix">
					<platform>Red Hat Enterprise Linux 5</platform>
				</affected>
				<reference ref_id="CCE-3377-9" source="CCE"/>
				<description>Global IPv6 initialization should be disabled.</description>
			</metadata>
			<criteria operator="OR" comment="Either IPv6 kernel module is not loaded or this feature should be disabled">
				<extend_definition definition_ref="oval:gov.nist.usgcb.rhel:def:20130" comment="Automatic loading of the IPv6 kernel module should be disabled"/>
				<criterion test_ref="oval:gov.nist.usgcb.rhel:tst:20132"/>
			</criteria>
		</definition>
		<definition class="compliance" id="oval:gov.nist.usgcb.rhel:def:20133" version="1">
			<metadata>
				<title>Disable Interface Usage of IPv6</title>
				<affected family="unix">
					<platform>Red Hat Enterprise Linux 5</platform>
				</affected>
				<reference ref_id="CCE-4296-0" source="CCE"/>
				<description>IPv6 configuration should be disabled for all interfaces.</description>
			</metadata>
			<criteria operator="OR" comment="Either IPv6 kernel module is not loaded or this feature should be disabled">
				<extend_definition definition_ref="oval:gov.nist.usgcb.rhel:def:20130" comment="Automatic loading of the IPv6 kernel module should be disabled"/>
				<criterion test_ref="oval:gov.nist.usgcb.rhel:tst:20133"/>
			</criteria>
		</definition>
		<definition class="compliance" id="oval:gov.nist.usgcb.rhel:def:20135" version="1">
			<metadata>
				<title>Disable Automatic Configuration</title>
				<affected family="unix">
					<platform>Red Hat Enterprise Linux 5</platform>
				</affected>
				<reference ref_id="CCE-4269-7" source="CCE"/>
				<description>The default setting for accepting IPv6 router advertisements should be disabled for network interfaces. (and dependencies are met)</description>
			</metadata>
			<criteria operator="OR" comment="Either IPv6 kernel module is not loaded or this feature should be disabled">
				<extend_definition definition_ref="oval:gov.nist.usgcb.rhel:def:20130" comment="Automatic loading of the IPv6 kernel module should be disabled"/>
				<criterion comment="Unknown test stub" test_ref="oval:gov.nist.usgcb.rhel:tst:22"/>
			</criteria>
		</definition>
		<definition class="compliance" id="oval:gov.nist.usgcb.rhel:def:20136" version="1">
			<metadata>
				<title>Disable Automatic Configuration</title>
				<affected family="unix">
					<platform>Red Hat Enterprise Linux 5</platform>
				</affected>
				<reference ref_id="CCE-4313-3" source="CCE"/>
				<description>Accepting redirects from IPv6 routers should be disabled as appropriate for all network interfaces. (and dependencies are met)</description>
			</metadata>
			<criteria operator="OR" comment="Either IPv6 kernel module is not loaded or this feature should be disabled">
				<extend_definition definition_ref="oval:gov.nist.usgcb.rhel:def:20130" comment="Automatic loading of the IPv6 kernel module should be disabled"/>
				<criterion comment="Unknown test stub" test_ref="oval:gov.nist.usgcb.rhel:tst:43130"/>
			</criteria>
		</definition>
		<definition class="compliance" id="oval:gov.nist.usgcb.rhel:def:20146" version="1">
			<metadata>
				<title>Verify ip6tables is enabled</title>
				<affected family="unix">
					<platform>Red Hat Enterprise Linux 5</platform>
				</affected>
				<reference ref_id="CCE-4167-3" source="CCE"/>
				<description>The ip6tables service should be enabled.</description>
			</metadata>
			<criteria operator="OR" comment="Either IPv6 is disabled or this feature should be">
				<extend_definition definition_ref="oval:gov.nist.usgcb.rhel:def:20131" comment="The default setting for IPv6 configuration should be disabled for network interfaces"/>
				<extend_definition definition_ref="oval:gov.nist.usgcb.rhel:def:20132" comment="Global IPv6 initialization should be disabled"/>
				<extend_definition definition_ref="oval:gov.nist.usgcb.rhel:def:20133" comment="IPv6 configuration should be disabled for all interfaces"/>
				<criteria operator="AND">
					<criterion comment="Conditions are satisfied" test_ref="oval:gov.nist.usgcb.rhel:tst:201462"/>
					<criterion comment="Conditions are satisfied" test_ref="oval:gov.nist.usgcb.rhel:tst:201463"/>
					<criterion comment="Conditions are satisfied" test_ref="oval:gov.nist.usgcb.rhel:tst:201464"/>
					<criterion comment="Conditions are satisfied" test_ref="oval:gov.nist.usgcb.rhel:tst:201465"/>
				</criteria>
			</criteria>
		</definition>
		<definition class="compliance" id="oval:gov.nist.usgcb.rhel:def:20147" version="1">
			<metadata>
				<title>Inspect and Activate Default Rules </title>
				<affected family="unix">
					<platform>Red Hat Enterprise Linux 5</platform>
				</affected>
				<reference ref_id="CCE-4189-7" source="CCE"/>
				<description>The iptables service should be enabled.</description>
			</metadata>
			<criteria operator="AND">
				<criterion comment="Conditions are satisfied" test_ref="oval:gov.nist.usgcb.rhel:tst:2014702"/>
				<criterion comment="Conditions are satisfied" test_ref="oval:gov.nist.usgcb.rhel:tst:2014703"/>
				<criterion comment="Conditions are satisfied" test_ref="oval:gov.nist.usgcb.rhel:tst:2014704"/>
				<criterion comment="Conditions are satisfied" test_ref="oval:gov.nist.usgcb.rhel:tst:2014705"/>
			</criteria>
		</definition>
		<definition class="compliance" id="oval:gov.nist.usgcb.rhel:def:201474" version="1">
			<metadata>
				<title>Change the default policy to DROP (from ACCEPT) for the INPUT built-in chain</title>
				<affected family="unix">
					<platform>Red Hat Enterprise Linux 5</platform>
				</affected>
				<reference ref_id="CCE-14264-6" source="CCE"/>
				<description>Change the default policy to DROP (from ACCEPT) for the INPUT built-in chain.</description>
			</metadata>
			<criteria>
				<criterion comment=":INPUT DROP [0:0]" test_ref="oval:gov.nist.usgcb.rhel:tst:2014741"/>
				<criterion comment=":INPUT ACCEPT [0:0]" test_ref="oval:gov.nist.usgcb.rhel:tst:2014742" negate="true"/>
			</criteria>
		</definition>
		<definition class="compliance" id="oval:gov.nist.usgcb.rhel:def:201476" version="2">
			<metadata>
				<title>Disable Support for DCCP</title>
				<affected family="unix">
					<platform>Red Hat Enterprise Linux 5</platform>
				</affected>
				<reference ref_id="CCE-14268-7" source="CCE"/>
				<description>Support for DCCP should be disabled.</description>
			</metadata>
			<criteria>
				<criterion comment="check for DCCP in /etc/modprobe.conf" test_ref="oval:gov.nist.usgcb.rhel:tst:201476"/>
				<!--<criterion comment="manual test stub" test_ref="oval:gov.nist.usgcb.rhel:tst:142680"/>-->
			</criteria>
		</definition>
		<definition class="compliance" id="oval:gov.nist.usgcb.rhel:def:201477" version="2">
			<metadata>
				<title>Disable Support for SCTP</title>
				<affected family="unix">
					<platform>Red Hat Enterprise Linux 5</platform>
				</affected>
				<reference ref_id="CCE-14132-5" source="CCE"/>
				<description>Support for SCTP should be disabled.</description>
			</metadata>
			<criteria>
				<criterion comment="check for SCTP in /etc/modprobe.conf" test_ref="oval:gov.nist.usgcb.rhel:tst:201477"/>
				<!--<criterion test_ref="oval:gov.nist.usgcb.rhel:tst:141320" comment="unknown test stub"/>-->
			</criteria>
		</definition>
		<definition class="compliance" id="oval:gov.nist.usgcb.rhel:def:201478" version="2">
			<metadata>
				<title>Disable Support for RDS</title>
				<affected family="unix">
					<platform>Red Hat Enterprise Linux 5</platform>
				</affected>
				<reference ref_id="CCE-14027-7" source="CCE"/>
				<description>Support for RDS should be disabled.</description>
			</metadata>
			<criteria>
				<criterion comment="check for RDS in /etc/modprobe.conf" test_ref="oval:gov.nist.usgcb.rhel:tst:201478"/>
				<!--<criterion test_ref="oval:gov.nist.usgcb.rhel:tst:140270" comment="unknown test stub"/>-->
			</criteria>
		</definition>
		<definition class="compliance" id="oval:gov.nist.usgcb.rhel:def:201479" version="2">
			<metadata>
				<title>Disable Support for TIPC</title>
				<affected family="unix">
					<platform>Red Hat Enterprise Linux 5</platform>
				</affected>
				<reference ref_id="CCE-14911-2" source="CCE"/>
				<description>Support for TIPC should be disabled.</description>
			</metadata>
			<criteria>
				<criterion comment="check for TIPC in /etc/modprobe.conf" test_ref="oval:gov.nist.usgcb.rhel:tst:201479"/>
				<!--<criterion test_ref="oval:gov.nist.usgcb.rhel:tst:149110" comment="unknown test stub"/>-->
			</criteria>
		</definition>
		<definition class="compliance" id="oval:gov.nist.usgcb.rhel:def:201480" version="1">
			<metadata>
				<title>The rsyslog package should be installed or uninstalled as appropriate.</title>
				<affected family="unix">
					<platform>Red Hat Enterprise Linux 5</platform>
				</affected>
				<reference ref_id="CCE-17742-8" source="CCE"/>
				<description>The rsyslog package should be installed or uninstalled as appropriate.</description>
			</metadata>
			<criteria>
				<criterion comment="Check to see if rsylog is installed" test_ref="oval:gov.nist.usgcb.rhel:tst:201480"/>
			</criteria>
		</definition>
		<definition class="compliance" id="oval:gov.nist.usgcb.rhel:def:20148" version="1">
			<metadata>
				<title>Configure Rsyslog</title>
				<affected family="unix">
					<platform>Red Hat Enterprise Linux 5</platform>
				</affected>
				<reference ref_id="CCE-17698-2" source="CCE"/>
				<description>The syslog service should be enabled or disabled as appropriate.</description>
			</metadata>
			<criteria operator="AND">
				<criterion comment="Conditions are satisfied" test_ref="oval:gov.nist.usgcb.rhel:tst:201482"/>
				<criterion comment="Conditions are satisfied" test_ref="oval:gov.nist.usgcb.rhel:tst:201483"/>
				<criterion comment="Conditions are satisfied" test_ref="oval:gov.nist.usgcb.rhel:tst:201484"/>
				<criterion comment="Conditions are satisfied" test_ref="oval:gov.nist.usgcb.rhel:tst:201485"/>
			</criteria>
		</definition>
		<definition class="compliance" id="oval:gov.nist.usgcb.rhel:def:20149" version="1">
			<metadata>
				<title>Confirm Existence and Permissions of System Log Files </title>
				<affected family="unix">
					<platform>Red Hat Enterprise Linux 5</platform>
				</affected>
				<reference ref_id="CCE-17857-4" source="CCE"/>
				<description>All rsyslog log files should be owned by root user.</description>
			</metadata>
			<criteria>
				<criterion comment="check if user root owns all syslog log files" test_ref="oval:gov.nist.usgcb.rhel:tst:20149"/>
			</criteria>
		</definition>
		<definition class="compliance" id="oval:gov.nist.usgcb.rhel:def:20150" version="1">
			<metadata>
				<title>Confirm Existence and Permissions of System Log Files</title>
				<affected family="unix">
					<platform>Red Hat Enterprise Linux 5</platform>
				</affected>
				<reference ref_id="CCE-18240-2" source="CCE"/>
				<description>All syslog log files should be owned by the appropriate group.</description>
			</metadata>
			<criteria>
				<criterion comment="check if group root owns all syslog log files" test_ref="oval:gov.nist.usgcb.rhel:tst:20150"/>
			</criteria>
		</definition>
		<definition class="compliance" id="oval:gov.nist.usgcb.rhel:def:20151" version="1">
			<metadata>
				<title>Confirm Existence and Permissions of System Log Files </title>
				<affected family="unix">
					<platform>Red Hat Enterprise Linux 5</platform>
				</affected>
				<reference ref_id="CCE-18095-0" source="CCE"/>
				<description>File permissions for all syslog log files should be set correctly.</description>
			</metadata>
			<criteria>
				<criterion comment="check permissions of all syslog log files" test_ref="oval:gov.nist.usgcb.rhel:tst:20151"/>
			</criteria>
		</definition>
		<definition class="compliance" id="oval:gov.nist.usgcb.rhel:def:20152" version="1">
			<metadata>
				<title>Send Logs to a Remote Loghost </title>
				<affected family="unix">
					<platform>Red Hat Enterprise Linux 5</platform>
				</affected>
				<reference ref_id="CCE-17248-6" source="CCE"/>
				<description>Syslog logs should be sent to a remote loghost</description>
			</metadata>
			<criteria>
				<criterion comment="Conditions are satisfied" test_ref="oval:gov.nist.usgcb.rhel:tst:20152"/>
			</criteria>
		</definition>
		<definition class="compliance" id="oval:gov.nist.usgcb.rhel:def:20153" version="1">
			<metadata>
				<title>Disable Rsyslogd from Accepting Remote Messages on Loghosts Only</title>
				<affected family="unix">
					<platform>Red Hat Enterprise Linux 5</platform>
				</affected>
				<reference ref_id="CCE-17639-6" source="CCE"/>
				<description>RSyslogd should reject remote messages</description>
			</metadata>
			<criteria>
				<criterion comment="Conditions are satisfied" test_ref="oval:gov.nist.usgcb.rhel:tst:20153"/>
			</criteria>
		</definition>
		<definition class="compliance" id="oval:gov.nist.usgcb.rhel:def:20154" version="1">
			<metadata>
				<title>Ensure All Logs are Rotated by logrotate</title>
				<affected family="unix">
					<platform>Red Hat Enterprise Linux 5</platform>
				</affected>
				<reference ref_id="CCE-4182-2" source="CCE"/>
				<description>The logrotate (syslog rotater) service should be enabled.</description>
			</metadata>
			<criteria>
				<criterion comment="Find each file in /etc/syslog.conf in /etc/logrotate.d/syslog" test_ref="oval:gov.nist.usgcb.rhel:tst:20154"/>
			</criteria>
		</definition>
		<definition class="compliance" id="oval:gov.nist.usgcb.rhel:def:20156" version="1">
			<metadata>
				<title>Enable the auditd Service</title>
				<affected family="unix">
					<platform>Red Hat Enterprise Linux 5</platform>
				</affected>
				<reference ref_id="CCE-4292-9" source="CCE"/>
				<description>The auditd service should be enabled.</description>
			</metadata>
			<criteria operator="AND">
				<criterion comment="Conditions are satisfied" test_ref="oval:gov.nist.usgcb.rhel:tst:201562"/>
				<criterion comment="Conditions are satisfied" test_ref="oval:gov.nist.usgcb.rhel:tst:201563"/>
				<criterion  comment="Conditions are satisfied" test_ref="oval:gov.nist.usgcb.rhel:tst:201564"/>
				<criterion comment="Conditions are satisfied" test_ref="oval:gov.nist.usgcb.rhel:tst:201565"/>
			</criteria>
		</definition>
		<definition class="compliance" id="oval:gov.nist.usgcb.rhel:def:20157" version="1">
			<metadata>
				<title>Enable Auditing for Processes Which Start Prior to the Audit Daemon</title>
				<affected family="unix">
					<platform>Red Hat Enterprise Linux 5</platform>
				</affected>
				<reference ref_id="CCE-15026-8" source="CCE"/>
				<description>Look for argument audit=1 in the kernel line in /boot/grub/grub.conf</description>
			</metadata>
			<criteria>
				<criterion comment="check for audit=1 in /boot/grub/grub.conf" test_ref="oval:gov.nist.usgcb.rhel:tst:20157"/>
			</criteria>
		</definition>
		<definition class="compliance" id="oval:gov.nist.usgcb.rhel:def:201575" version="1">
			<metadata>
				<title>Records Events that Modify Date and Time Information</title>
				<affected family="unix">
					<platform>Red Hat Enterprise Linux 5</platform>
				</affected>
				<reference ref_id="CCE-14051-7" source="CCE"/>
				<description>Audit rules about time are enabled</description>
			</metadata>
			<criteria>
				<criteria operator="OR" comment="check for 32-bit rules">
					<criterion comment="check that 32-bit arch is irrelevant for this architecture" test_ref="oval:gov.nist.usgcb.rhel:tst:201670"/>
					<criteria>
						<criterion comment="/etc/audit/audit.rules contains -a always,exit -F arch=ARCH -S adjtimex -S settimeofday -S stime -k time-change" test_ref="oval:gov.nist.usgcb.rhel:tst:2015750"/>
						<criterion comment="/etc/audit/audit.rules contains -a always,exit -F arch=ARCH -S clock_settime -F a0=0 -k time-change" test_ref="oval:gov.nist.usgcb.rhel:tst:2015751"/>
					</criteria>
				</criteria>
				<criteria operator="OR" comment="check for 64-bit rules">
					<criterion comment="check that 64-bit arch is irrelevant for this architecture" test_ref="oval:gov.nist.usgcb.rhel:tst:201672"/>
					<criteria>
						<criterion comment="/etc/audit/audit.rules contains -a always,exit -F arch=ARCH -S adjtimex -S settimeofday -S stime -k time-change" test_ref="oval:gov.nist.usgcb.rhel:tst:2015752"/>
						<criterion comment="/etc/audit/audit.rules contains -a always,exit -F arch=ARCH -S clock_settime -F a0=0 -k time-change" test_ref="oval:gov.nist.usgcb.rhel:tst:2015753"/>
					</criteria>
				</criteria>
				<criterion comment="/etc/audit/audit.rules contains -w /etc/localtime -p wa -k time-change" test_ref="oval:gov.nist.usgcb.rhel:tst:2015754"/>
			</criteria>
		</definition>
		<definition class="compliance" id="oval:gov.nist.usgcb.rhel:def:20158" version="1">
			<metadata>
				<title>Record Events that Modify User/Group Information</title>
				<affected family="unix">
					<platform>Red Hat Enterprise Linux 5</platform>
				</affected>
				<reference ref_id="CCE-14829-6" source="CCE"/>
				<description>Audit rules about User/Group Information are enabled</description>
			</metadata>
			<criteria>
				<criterion comment="/etc/audit/audit.rules contains -w /etc/group -p wa -k identity" test_ref="oval:gov.nist.usgcb.rhel:tst:201580"/>
				<criterion comment="/etc/audit/audit.rules contains -w /etc/passwd -p wa -k identity" test_ref="oval:gov.nist.usgcb.rhel:tst:201581"/>
				<criterion comment="/etc/audit/audit.rules contains -w /etc/gshadow -p wa -k identity" test_ref="oval:gov.nist.usgcb.rhel:tst:201582"/>
				<criterion comment="/etc/audit/audit.rules contains -w /etc/shadow -p wa -k identity" test_ref="oval:gov.nist.usgcb.rhel:tst:201583"/>
				<criterion comment="/etc/audit/audit.rules contains -w /etc/security/opasswd -p wa -k identity" test_ref="oval:gov.nist.usgcb.rhel:tst:201584"/>
			</criteria>
		</definition>
		<definition class="compliance" id="oval:gov.nist.usgcb.rhel:def:20159" version="1">
			<metadata>
				<title>Record Events that Modify the System’s Network Environment</title>
				<affected family="unix">
					<platform>Red Hat Enterprise Linux 5</platform>
				</affected>
				<reference ref_id="CCE-14816-3" source="CCE"/>
				<description>Audit rules about the System’s Network Environment are enabled</description>
			</metadata>
			<criteria>
				<criteria operator="OR" comment="check for 32-bit rules">
					<criterion comment="check that 32-bit arch is irrelevant for this architecture" test_ref="oval:gov.nist.usgcb.rhel:tst:201670"/>
					<criterion comment="/etc/audit/audit.rules contains -a exit,always -F arch=ARCH -S sethostname -S setdomainname -k system-locale" test_ref="oval:gov.nist.usgcb.rhel:tst:201590"/>
				</criteria>
				<criteria operator="OR" comment="check for 64-bit rules">
					<criterion comment="check that 64-bit arch is irrelevant for this architecture" test_ref="oval:gov.nist.usgcb.rhel:tst:201672"/>
					<criterion comment="/etc/audit/audit.rules contains -a exit,always -F arch=ARCH -S sethostname -S setdomainname -k system-locale" test_ref="oval:gov.nist.usgcb.rhel:tst:201591"/>
				</criteria>
				<criterion comment="/etc/audit/audit.rules contains -w /etc/issue -p wa -k system-locale" test_ref="oval:gov.nist.usgcb.rhel:tst:201592"/>
				<criterion comment="/etc/audit/audit.rules contains -w /etc/issue.net -p wa -k system-locale" test_ref="oval:gov.nist.usgcb.rhel:tst:201593"/>
				<criterion comment="/etc/audit/audit.rules contains -w /etc/hosts -p wa -k system-locale" test_ref="oval:gov.nist.usgcb.rhel:tst:201594"/>
				<criterion comment="/etc/audit/audit.rules contains -w /etc/sysconfig/network -p wa -k system-locale" test_ref="oval:gov.nist.usgcb.rhel:tst:201595"/>
			</criteria>
		</definition>
		<definition class="compliance" id="oval:gov.nist.usgcb.rhel:def:20160" version="1">
			<metadata>
				<title>Record Events that Modify the System’s Mandatory Access Controls</title>
				<affected family="unix">
					<platform>Red Hat Enterprise Linux 5</platform>
				</affected>
				<reference ref_id="CCE-14821-3" source="CCE"/>
				<description>Audit rules about the System’s Mandatory Access Controls are enabled</description>
			</metadata>
			<criteria>
				<criterion comment="/etc/audit/audit.rules contains -w /etc/selinux/ -p wa -k MAC-policy" test_ref="oval:gov.nist.usgcb.rhel:tst:20160"/>
			</criteria>
		</definition>
		<definition class="compliance" id="oval:gov.nist.usgcb.rhel:def:20161" version="1">
			<metadata>
				<title>Ensure auditd Collects Logon and Logout Events</title>
				<affected family="unix">
					<platform>Red Hat Enterprise Linux 5</platform>
				</affected>
				<reference ref_id="CCE-14904-7" source="CCE"/>
				<description>Audit rules about the Logon and Logout Events are enabled</description>
			</metadata>
			<criteria>
				<criterion comment="/etc/audit/audit.rules contains -w /var/log/faillog -p wa -k logins" test_ref="oval:gov.nist.usgcb.rhel:tst:201610"/>
				<criterion comment="/etc/audit/audit.rules contains -w /var/log/lastlog -p wa -k logins" test_ref="oval:gov.nist.usgcb.rhel:tst:201611"/>
			</criteria>
		</definition>
		<definition class="compliance" id="oval:gov.nist.usgcb.rhel:def:20162" version="1">
			<metadata>
				<title>Ensure auditd Collects Process and Session Initiation Information</title>
				<affected family="unix">
					<platform>Red Hat Enterprise Linux 5</platform>
				</affected>
				<reference ref_id="CCE-14679-5" source="CCE"/>
				<description>Audit rules about the Process and Session Initiation Information are enabled</description>
			</metadata>
			<criteria>
				<criterion comment="/etc/audit/audit.rules contains -w /var/run/utmp -p wa -k session" test_ref="oval:gov.nist.usgcb.rhel:tst:201620"/>
				<criterion comment="/etc/audit/audit.rules contains -w /var/log/btmp -p wa -k session" test_ref="oval:gov.nist.usgcb.rhel:tst:201621"/>
				<criterion comment="/etc/audit/audit.rules contains -w /var/log/wtmp -p wa -k session" test_ref="oval:gov.nist.usgcb.rhel:tst:201622"/>
			</criteria>
		</definition>
		<definition class="compliance" id="oval:gov.nist.usgcb.rhel:def:20163" version="1">
			<metadata>
				<title>Ensure auditd Collects Discretionary Access Control Permission Modiﬁcation Events</title>
				<affected family="unix">
					<platform>Red Hat Enterprise Linux 5</platform>
				</affected>
				<reference ref_id="CCE-14058-2" source="CCE"/>
				<description>Audit rules about the Discretionary Access Control Permission Modiﬁcation Events are enabled</description>
			</metadata>
			<criteria>
				<criteria operator="OR" comment="check for 32-bit rules">
					<criterion comment="check that 32-bit arch is irrelevant for this architecture" test_ref="oval:gov.nist.usgcb.rhel:tst:201670"/>
					<criteria>
						<criterion comment="/etc/audit/audit.rules contains -a always,exit -F arch=ARCH -S chmod -S fchmod -S fchmodat -F auid>=500 -F auid!=4294967295 -k perm_mod" test_ref="oval:gov.nist.usgcb.rhel:tst:201630"/>
						<criterion comment="/etc/audit/audit.rules contains -a always,exit -F arch=ARCH -S chown -S fchown -S fchownat -S lchown -F auid>=500 -F auid!=4294967295 -k perm_mod" test_ref="oval:gov.nist.usgcb.rhel:tst:201631"/>
						<criterion comment="/etc/audit/audit.rules contains -a always,exit -F arch=ARCH -S setxattr -S lsetxattr -S fsetxattr -S removexattr -S lremovexattr -S fremovexattr -F auid>=500 -F auid!=4294967295 -k perm_mod" test_ref="oval:gov.nist.usgcb.rhel:tst:201632"/>
					</criteria>
				</criteria>
				<criteria operator="OR" comment="check for 64-bit rules">
					<criterion comment="check that 64-bit arch is irrelevant for this architecture" test_ref="oval:gov.nist.usgcb.rhel:tst:201672"/>
					<criteria>
						<criterion comment="/etc/audit/audit.rules contains -a always,exit -F arch=ARCH -S chmod -S fchmod -S fchmodat -F auid>=500 -F auid!=4294967295 -k perm_mod" test_ref="oval:gov.nist.usgcb.rhel:tst:201633"/>
						<criterion comment="/etc/audit/audit.rules contains -a always,exit -F arch=ARCH -S chown -S fchown -S fchownat -S lchown -F auid>=500 -F auid!=4294967295 -k perm_mod" test_ref="oval:gov.nist.usgcb.rhel:tst:201634"/>
						<criterion comment="/etc/audit/audit.rules contains -a always,exit -F arch=ARCH -S setxattr -S lsetxattr -S fsetxattr -S removexattr -S lremovexattr -S fremovexattr -F auid>=500 -F auid!=4294967295 -k perm_mod" test_ref="oval:gov.nist.usgcb.rhel:tst:201635"/>
					</criteria>
				</criteria>
			</criteria>
		</definition>
		<definition class="compliance" id="oval:gov.nist.usgcb.rhel:def:20164" version="1">
			<metadata>
				<title>Ensure auditd Collects Unauthorized Access Attempts to Files (unsuccessful)</title>
				<affected family="unix">
					<platform>Red Hat Enterprise Linux 5</platform>
				</affected>
				<reference ref_id="CCE-14917-9" source="CCE"/>
				<description>Audit rules about the Unauthorized Access Attempts to Files (unsuccessful) are enabled</description>
			</metadata>
			<criteria>
				<criteria operator="OR" comment="check for 32-bit rules">
					<criterion comment="check that 32-bit arch is irrelevant for this architecture" test_ref="oval:gov.nist.usgcb.rhel:tst:201670"/>
					<criteria>
						<criterion comment="/etc/audit/audit.rules contains -a always,exit -F arch=ARCH -S creat -S open -S openat -S truncate -S ftruncate -F exit=-EACCES -F auid>=500 -F auid!=4294967295 -k access" test_ref="oval:gov.nist.usgcb.rhel:tst:201640"/>
						<criterion comment="/etc/audit/audit.rules contains -a always,exit -F arch=ARCH -S creat -S open -S openat -S truncate -S ftruncate -F exit=-EPERM -F auid>=500 -F auid!=4294967295 -k access" test_ref="oval:gov.nist.usgcb.rhel:tst:201641"/>
					</criteria>
				</criteria>
				<criteria operator="OR" comment="check for 64-bit rules">
					<criterion comment="check that 64-bit arch is irrelevant for this architecture" test_ref="oval:gov.nist.usgcb.rhel:tst:201672"/>
					<criteria>
						<criterion comment="/etc/audit/audit.rules contains -a always,exit -F arch=ARCH -S creat -S open -S openat -S truncate -S ftruncate -F exit=-EACCES -F auid>=500 -F auid!=4294967295 -k access" test_ref="oval:gov.nist.usgcb.rhel:tst:201642"/>
						<criterion comment="/etc/audit/audit.rules contains -a always,exit -F arch=ARCH -S creat -S open -S openat -S truncate -S ftruncate -F exit=-EPERM -F auid>=500 -F auid!=4294967295 -k access" test_ref="oval:gov.nist.usgcb.rhel:tst:201643"/>
					</criteria>
				</criteria>
			</criteria>
		</definition>
		<definition class="compliance" id="oval:gov.nist.usgcb.rhel:def:20165" version="1">
			<metadata>
				<title>Ensure auditd Collects Information on the Use of Privileged Commands</title>
				<affected family="unix">
					<platform>Red Hat Enterprise Linux 5</platform>
				</affected>
				<reference ref_id="CCE-14296-8" source="CCE"/>
				<description>Audit rules about the Information on the Use of Privileged Commands are enabled</description>
			</metadata>
			<criteria>
				<criterion comment="/etc/audit/audit.rules contains -a always,exit -F path=/bin/ping -F perm=x -F auid>=500 -F auid!=4294967295 -k privileged" test_ref="oval:gov.nist.usgcb.rhel:tst:20165"/>
			</criteria>
		</definition>
		<definition class="compliance" id="oval:gov.nist.usgcb.rhel:def:20166" version="1">
			<metadata>
				<title>Ensure auditd Collects Information on Exporting to Media (successful)</title>
				<affected family="unix">
					<platform>Red Hat Enterprise Linux 5</platform>
				</affected>
				<reference ref_id="CCE-14569-8" source="CCE"/>
				<description>Audit rules about the Information on Exporting to Media (successful) are enabled</description>
			</metadata>
			<criteria>
				<criteria operator="OR" comment="check for 32-bit rules">
					<criterion comment="check that 32-bit arch is irrelevant for this architecture" test_ref="oval:gov.nist.usgcb.rhel:tst:201670"/>
					<criterion comment="/etc/audit/audit.rules contains -a always,exit -F arch=ARCH -S mount -F auid>=500 -F auid!=4294967295 -k export" test_ref="oval:gov.nist.usgcb.rhel:tst:201660"/>
				</criteria>
				<criteria operator="OR" comment="check for 64-bit rules">
					<criterion comment="check that 64-bit arch is irrelevant for this architecture" test_ref="oval:gov.nist.usgcb.rhel:tst:201672"/>
					<criterion comment="/etc/audit/audit.rules contains -a always,exit -F arch=ARCH -S mount -F auid>=500 -F auid!=4294967295 -k export" test_ref="oval:gov.nist.usgcb.rhel:tst:201661"/>
				</criteria>
			</criteria>
		</definition>
		<definition class="compliance" id="oval:gov.nist.usgcb.rhel:def:20167" version="1">
			<metadata>
				<title>Ensure auditd Collects Files Deletion Events by User (successful and unsuccessful)</title>
				<affected family="unix">
					<platform>Red Hat Enterprise Linux 5</platform>
				</affected>
				<reference ref_id="CCE-14820-5" source="CCE"/>
				<description>Audit rules about the Files Deletion Events by User (successful and unsuccessful) are enabled</description>
			</metadata>
			<criteria>
				<criteria operator="OR" comment="check for 32-bit rules">
					<criterion comment="check that 32-bit arch is irrelevant for this architecture" test_ref="oval:gov.nist.usgcb.rhel:tst:201670"/>
					<criterion comment="/etc/audit/audit.rules contains -a always,exit -F arch=ARCH -S unlink -S unlinkat -S rename -S renameat -F auid>=500 -F auid!=4294967295 -k delete" test_ref="oval:gov.nist.usgcb.rhel:tst:201671"/>
				</criteria>
				<criteria operator="OR" comment="check for 64-bit rules">
					<criterion comment="check that 64-bit arch is irrelevant for this architecture" test_ref="oval:gov.nist.usgcb.rhel:tst:201672"/>
					<criterion comment="/etc/audit/audit.rules contains -a always,exit -F arch=ARCH -S unlink -S unlinkat -S rename -S renameat -F auid>=500 -F auid!=4294967295 -k delete" test_ref="oval:gov.nist.usgcb.rhel:tst:201673"/>
				</criteria>
			</criteria>
		</definition>
		<definition class="compliance" id="oval:gov.nist.usgcb.rhel:def:20168" version="1">
			<metadata>
				<title>Ensure auditd Collects System Administrator Actions</title>
				<affected family="unix">
					<platform>Red Hat Enterprise Linux 5</platform>
				</affected>
				<reference ref_id="CCE-14824-7" source="CCE"/>
				<description>Audit rules about the System Administrator Actions are enabled</description>
			</metadata>
			<criteria>
				<criterion comment="/etc/audit/audit.rules contains -w /etc/sudoers -p wa -k actions" test_ref="oval:gov.nist.usgcb.rhel:tst:20168"/>
			</criteria>
		</definition>
		<definition class="compliance" id="oval:gov.nist.usgcb.rhel:def:201685" version="1">
			<metadata>
				<title>Ensure auditd Collects Information on Kernel Module Loading and Unloading</title>
				<affected family="unix">
					<platform>Red Hat Enterprise Linux 5</platform>
				</affected>
				<reference ref_id="CCE-14688-6" source="CCE"/>
				<description>Audit rules about the Information on Kernel Module Loading and Unloading.</description>
			</metadata>
			<criteria operator="AND">
				<criterion comment="/etc/audit/audit.rules contains -w /sbin/insmod -p x -k modules" test_ref="oval:gov.nist.usgcb.rhel:tst:2016851"/>
				<criterion comment="/etc/audit/audit.rules contains -w /sbin/rmmod -p x -k modules" test_ref="oval:gov.nist.usgcb.rhel:tst:2016852"/>
				<criterion comment="/etc/audit/audit.rules contains -w /sbin/modprobe -p x -k modules" test_ref="oval:gov.nist.usgcb.rhel:tst:2016853"/>
				<criterion comment="/etc/audit/audit.rules contains -a always,exit -S init_module -S delete_module -k modules" test_ref="oval:gov.nist.usgcb.rhel:tst:2016854"/>
			</criteria>
		</definition>
		<definition class="compliance" id="oval:gov.nist.usgcb.rhel:def:20169" version="1">
			<metadata>
				<title>Make the auditd Conﬁguration Immutable</title>
				<affected family="unix">
					<platform>Red Hat Enterprise Linux 5</platform>
				</affected>
				<reference ref_id="CCE-14692-8" source="CCE"/>
				<description>Force a reboot to change audit rules is enabled</description>
			</metadata>
			<criteria>
				<criterion comment="look in /etc/audit/audit.rules for -e 2" test_ref="oval:gov.nist.usgcb.rhel:tst:20169"/>
			</criteria>
		</definition>
		<definition class="compliance" id="oval:gov.nist.usgcb.rhel:def:20170" version="1">
			<metadata>
				<title>Inetd and Xinetd</title>
				<affected family="unix">
					<platform>Red Hat Enterprise Linux 5</platform>
				</affected>
				<reference ref_id="CCE-4234-1" source="CCE"/>
				<description>The inetd service should be disabled.</description>
			</metadata>
			<criteria operator="OR" comment="inetd is not installed or conditions are met">
				<extend_definition definition_ref="oval:gov.nist.usgcb.rhel:def:20172" comment="inetd is not installed"/>
				<criteria operator="AND">
					<criterion comment="Conditions are satisfied" test_ref="oval:gov.nist.usgcb.rhel:tst:20170"/>
					<criterion comment="Conditions are satisfied" test_ref="oval:gov.nist.usgcb.rhel:tst:201701"/>
					<criterion comment="Conditions are satisfied" test_ref="oval:gov.nist.usgcb.rhel:tst:201702"/>
					<criterion comment="Conditions are satisfied" test_ref="oval:gov.nist.usgcb.rhel:tst:201703"/>
					<criterion comment="Conditions are satisfied" test_ref="oval:gov.nist.usgcb.rhel:tst:201704"/>
					<criterion comment="Conditions are satisfied" test_ref="oval:gov.nist.usgcb.rhel:tst:201705"/>
					<criterion comment="Conditions are satisfied" test_ref="oval:gov.nist.usgcb.rhel:tst:201706"/>
				</criteria>
			</criteria>
		</definition>
		<definition class="compliance" id="oval:gov.nist.usgcb.rhel:def:20171" version="1">
			<metadata>
				<title>Inetd and Xinetd</title>
				<affected family="unix">
					<platform>Red Hat Enterprise Linux 5</platform>
				</affected>
				<reference ref_id="CCE-4252-3" source="CCE"/>
				<description>The xinetd service should be disabled.</description>
			</metadata>
			<criteria operator="OR" comment="xinetd is not installed or conditions are met">
				<extend_definition definition_ref="oval:gov.nist.usgcb.rhel:def:20173" comment="xinetd is not installed"/>
				<criteria operator="AND">
					<criterion comment="Conditions are satisfied" test_ref="oval:gov.nist.usgcb.rhel:tst:20171"/>
					<criterion comment="Conditions are satisfied" test_ref="oval:gov.nist.usgcb.rhel:tst:201711"/>
					<criterion comment="Conditions are satisfied" test_ref="oval:gov.nist.usgcb.rhel:tst:201712"/>
					<criterion comment="Conditions are satisfied" test_ref="oval:gov.nist.usgcb.rhel:tst:201713"/>
					<criterion comment="Conditions are satisfied" test_ref="oval:gov.nist.usgcb.rhel:tst:201714"/>
					<criterion comment="Conditions are satisfied" test_ref="oval:gov.nist.usgcb.rhel:tst:201715"/>
					<criterion comment="Conditions are satisfied" test_ref="oval:gov.nist.usgcb.rhel:tst:201716"/>
				</criteria>
			</criteria>
		</definition>
		<definition class="compliance" id="oval:gov.nist.usgcb.rhel:def:20172" version="1">
			<metadata>
				<title>Inetd and Xinetd</title>
				<affected family="unix">
					<platform>Red Hat Enterprise Linux 5</platform>
				</affected>
				<reference ref_id="CCE-4023-8" source="CCE"/>
				<description>The inetd package should be uninstalled.</description>
			</metadata>
			<criteria>
				<criterion comment="Conditions are satisfied" test_ref="oval:gov.nist.usgcb.rhel:tst:20172"/>
			</criteria>
		</definition>
		<definition class="compliance" id="oval:gov.nist.usgcb.rhel:def:20173" version="1">
			<metadata>
				<title>Inetd and Xinetd</title>
				<affected family="unix">
					<platform>Red Hat Enterprise Linux 5</platform>
				</affected>
				<reference ref_id="CCE-4164-0" source="CCE"/>
				<description>The xinetd package should be uninstalled.</description>
			</metadata>
			<criteria>
				<criterion comment="Conditions are satisfied" test_ref="oval:gov.nist.usgcb.rhel:tst:20173"/>
			</criteria>
		</definition>
		<definition class="compliance" id="oval:gov.nist.usgcb.rhel:def:20174" version="1">
			<metadata>
				<title>Telnet</title>
				<affected family="unix">
					<platform>Red Hat Enterprise Linux 5</platform>
				</affected>
				<reference ref_id="CCE-4330-7" source="CCE"/>
				<description>The telnet-server package should be uninstalled.</description>
			</metadata>
			<criteria>
				<criterion comment="Conditions are satisfied" test_ref="oval:gov.nist.usgcb.rhel:tst:20174"/>
			</criteria>
		</definition>
		<definition class="compliance" id="oval:gov.nist.usgcb.rhel:def:201745" version="1">
			<metadata>
				<title>Disable Telnet service</title>
				<affected family="unix">
					<platform>Red Hat Enterprise Linux 5</platform>
				</affected>
				<reference ref_id="CCE-3390-2" source="CCE"/>
				<description>The telnet service should be disabled.</description>
			</metadata>
			<criteria operator="OR" comment="telnet is not installed or conditions are met">
				<extend_definition definition_ref="oval:gov.nist.usgcb.rhel:def:20174" comment="telnet is not installed"/>
				<criterion comment="Unknown test stub" test_ref="oval:gov.nist.usgcb.rhel:tst:22"/>
			</criteria>
		</definition>
		<definition class="compliance" id="oval:gov.nist.usgcb.rhel:def:20177" version="1">
			<metadata>
				<title>Remove the Rsh Server Commands from the System</title>
				<affected family="unix">
					<platform>Red Hat Enterprise Linux 5</platform>
				</affected>
				<reference ref_id="CCE-4308-3" source="CCE"/>
				<description>The rsh-server package should be uninstalled.</description>
			</metadata>
			<criteria>
				<criterion comment="Conditions are satisfied" test_ref="oval:gov.nist.usgcb.rhel:tst:20177"/>
			</criteria>
		</definition>
		<definition class="compliance" id="oval:gov.nist.usgcb.rhel:def:201774" version="1">
			<metadata>
				<title>disable rcp</title>
				<affected family="unix">
					<platform>Red Hat Enterprise Linux 5</platform>
				</affected>
				<reference ref_id="CCE-3974-3" source="CCE"/>
				<description>The rcp service should be disabled.</description>
			</metadata>
			<criteria operator="OR" comment="telnet-server is not installed or conditions are met">
				<extend_definition definition_ref="oval:gov.nist.usgcb.rhel:def:20177" comment="rsh-server is not installed"/>
				<criterion comment="Unknown test stub" test_ref="oval:gov.nist.usgcb.rhel:tst:22"/>
			</criteria>
		</definition>
		<definition class="compliance" id="oval:gov.nist.usgcb.rhel:def:201775" version="1">
			<metadata>
				<title>disable rsh</title>
				<affected family="unix">
					<platform>Red Hat Enterprise Linux 5</platform>
				</affected>
				<reference ref_id="CCE-4141-8" source="CCE"/>
				<description>The rsh service should be disabled.</description>
			</metadata>
			<criteria operator="OR" comment="telnet-server is not installed or conditions are met">
				<extend_definition definition_ref="oval:gov.nist.usgcb.rhel:def:20177" comment="rsh-server is not installed"/>
				<criterion comment="Unknown test stub" test_ref="oval:gov.nist.usgcb.rhel:tst:22"/>
			</criteria>
		</definition>
		<definition class="compliance" id="oval:gov.nist.usgcb.rhel:def:201776" version="1">
			<metadata>
				<title>disable rlogin</title>
				<affected family="unix">
					<platform>Red Hat Enterprise Linux 5</platform>
				</affected>
				<reference ref_id="CCE-3537-8" source="CCE"/>
				<description>The rlogin service should be disabled.</description>
			</metadata>
			<criteria operator="OR" comment="telnet-server is not installed or conditions are met">
				<extend_definition definition_ref="oval:gov.nist.usgcb.rhel:def:20177" comment="rsh-server is not installed"/>
				<criterion comment="Unknown test stub" test_ref="oval:gov.nist.usgcb.rhel:tst:22"/>
			</criteria>
		</definition>
		<definition class="compliance" id="oval:gov.nist.usgcb.rhel:def:20180" version="1">
			<metadata>
				<title>NIS</title>
				<affected family="unix">
					<platform>Red Hat Enterprise Linux 5</platform>
				</affected>
				<reference ref_id="CCE-4348-9" source="CCE"/>
				<description>The ypserv package should be uninstalled.</description>
			</metadata>
			<criteria>
				<criterion comment="Conditions are satisfied" test_ref="oval:gov.nist.usgcb.rhel:tst:20180"/>
			</criteria>
		</definition>
		<definition class="compliance" id="oval:gov.nist.usgcb.rhel:def:20181" version="1">
			<metadata>
				<title>NIS</title>
				<affected family="unix">
					<platform>Red Hat Enterprise Linux 5</platform>
				</affected>
				<reference ref_id="CCE-3705-1" source="CCE"/>
				<description>The ypbind service should be disabled.</description>
			</metadata>
			<criteria operator="OR" comment="ypserv is not installed or conditions are met">
				<extend_definition definition_ref="oval:gov.nist.usgcb.rhel:def:20180" comment="ypserv is not installed"/>
				<criteria operator="AND">
					<criterion comment="Conditions are satisfied" test_ref="oval:gov.nist.usgcb.rhel:tst:20181"/>
					<criterion comment="Conditions are satisfied" test_ref="oval:gov.nist.usgcb.rhel:tst:201811"/>
					<criterion comment="Conditions are satisfied" test_ref="oval:gov.nist.usgcb.rhel:tst:201812"/>
					<criterion comment="Conditions are satisfied" test_ref="oval:gov.nist.usgcb.rhel:tst:201813"/>
					<criterion comment="Conditions are satisfied" test_ref="oval:gov.nist.usgcb.rhel:tst:201814"/>
					<criterion comment="Conditions are satisfied" test_ref="oval:gov.nist.usgcb.rhel:tst:201815"/>
					<criterion comment="Conditions are satisfied" test_ref="oval:gov.nist.usgcb.rhel:tst:201816"/>
				</criteria>
			</criteria>
		</definition>
		<definition class="compliance" id="oval:gov.nist.usgcb.rhel:def:20182" version="1">
			<metadata>
				<title>Uninstall TFTP Server</title>
				<affected family="unix">
					<platform>Red Hat Enterprise Linux 5</platform>
				</affected>
				<reference ref_id="CCE-3916-4" source="CCE"/>
				<description>The tftp-server package should be uninstalled.</description>
			</metadata>
			<criteria>
				<criterion comment="Conditions are satisfied" test_ref="oval:gov.nist.usgcb.rhel:tst:20182"/>
			</criteria>
		</definition>
		<definition class="compliance" id="oval:gov.nist.usgcb.rhel:def:201825" version="1">
			<metadata>
				<title>Disable TFTP Server</title>
				<affected family="unix">
					<platform>Red Hat Enterprise Linux 5</platform>
				</affected>
				<reference ref_id="CCE-4273-9" source="CCE"/>
				<description>The tftp service should be disabled.</description>
			</metadata>
			<criteria operator="OR" comment="tftp-server is not installed or conditions are met">
				<extend_definition definition_ref="oval:gov.nist.usgcb.rhel:def:20182" comment="tftp-server is not installed"/>
				<criteria operator="AND">
					<criterion comment="The tftp service is not running" test_ref="oval:gov.nist.usgcb.rhel:tst:201825"/>
					<criterion comment="The tftp service is not running" test_ref="oval:gov.nist.usgcb.rhel:tst:2018251"/>
					<criterion comment="The tftp service is not running" test_ref="oval:gov.nist.usgcb.rhel:tst:2018252"/>
					<criterion comment="The tftp service is not running" test_ref="oval:gov.nist.usgcb.rhel:tst:2018253"/>
					<criterion comment="The tftp service is not running" test_ref="oval:gov.nist.usgcb.rhel:tst:2018254"/>
					<criterion comment="The tftp service is not running" test_ref="oval:gov.nist.usgcb.rhel:tst:2018255"/>
					<criterion comment="The tftp service is not running" test_ref="oval:gov.nist.usgcb.rhel:tst:2018256"/>
				</criteria>
			</criteria>
		</definition>
		<definition class="compliance" id="oval:gov.nist.usgcb.rhel:def:20186" version="1">
			<metadata>
				<title>ISDN Support (isdn)</title>
				<affected family="unix">
					<platform>Red Hat Enterprise Linux 5</platform>
				</affected>
				<reference ref_id="CCE-4286-1" source="CCE"/>
				<description>The isdn service should be disabled.</description>
			</metadata>
			<criteria operator="AND">
				<criterion comment="Conditions are satisfied" test_ref="oval:gov.nist.usgcb.rhel:tst:20186"/>
				<criterion comment="Conditions are satisfied" test_ref="oval:gov.nist.usgcb.rhel:tst:201861"/>
				<criterion comment="Conditions are satisfied" test_ref="oval:gov.nist.usgcb.rhel:tst:201862"/>
				<criterion comment="Conditions are satisfied" test_ref="oval:gov.nist.usgcb.rhel:tst:201863"/>
				<criterion comment="Conditions are satisfied" test_ref="oval:gov.nist.usgcb.rhel:tst:201864"/>
				<criterion comment="Conditions are satisfied" test_ref="oval:gov.nist.usgcb.rhel:tst:201865"/>
				<criterion comment="Conditions are satisfied" test_ref="oval:gov.nist.usgcb.rhel:tst:201866"/>
			</criteria>
		</definition>
		<definition class="compliance" id="oval:gov.nist.usgcb.rhel:def:20187" version="1">
			<metadata>
				<title>Kdump Kernel Crash Analyzer (kdump)</title>
				<affected family="unix">
					<platform>Red Hat Enterprise Linux 5</platform>
				</affected>
				<reference ref_id="CCE-3425-6" source="CCE"/>
				<description>The kdump service should be disabled.</description>
			</metadata>
			<criteria operator="AND">
				<criterion comment="Conditions are satisfied" test_ref="oval:gov.nist.usgcb.rhel:tst:20187"/>
				<criterion comment="Conditions are satisfied" test_ref="oval:gov.nist.usgcb.rhel:tst:201871"/>
				<criterion comment="Conditions are satisfied" test_ref="oval:gov.nist.usgcb.rhel:tst:201872"/>
				<criterion comment="Conditions are satisfied" test_ref="oval:gov.nist.usgcb.rhel:tst:201873"/>
				<criterion comment="Conditions are satisfied" test_ref="oval:gov.nist.usgcb.rhel:tst:201874"/>
				<criterion comment="Conditions are satisfied" test_ref="oval:gov.nist.usgcb.rhel:tst:201875"/>
				<criterion comment="Conditions are satisfied" test_ref="oval:gov.nist.usgcb.rhel:tst:201876"/>
			</criteria>
		</definition>
		<definition class="compliance" id="oval:gov.nist.usgcb.rhel:def:20193" version="1">
			<metadata>
				<title>Disable Zeroconf Networking</title>
				<affected family="unix">
					<platform>Red Hat Enterprise Linux 5</platform>
				</affected>
				<reference ref_id="CCE-14054-1" source="CCE"/>
				<description>Disable Zeroconf automatic route assignment in the 169.245.0.0 subnet.</description>
			</metadata>
			<criteria>
				<criterion comment="Look for NOZEROCONF=yes in /etc/sysconfig/network" test_ref="oval:gov.nist.usgcb.rhel:tst:20193"/>
			</criteria>
		</definition>
		<definition class="compliance" id="oval:gov.nist.usgcb.rhel:def:20196" version="1">
			<metadata>
				<title>Boot Caching (readahead early/readahead later)</title>
				<affected family="unix">
					<platform>Red Hat Enterprise Linux 5</platform>
				</affected>
				<reference ref_id="CCE-4421-4" source="CCE"/>
				<description>The readahead_early service should be disabled.</description>
			</metadata>
			<criteria operator="AND">
				<criterion comment="Conditions are satisfied" test_ref="oval:gov.nist.usgcb.rhel:tst:20196"/>
				<criterion comment="Conditions are satisfied" test_ref="oval:gov.nist.usgcb.rhel:tst:201961"/>
				<criterion comment="Conditions are satisfied" test_ref="oval:gov.nist.usgcb.rhel:tst:201962"/>
				<criterion comment="Conditions are satisfied" test_ref="oval:gov.nist.usgcb.rhel:tst:201963"/>
				<criterion comment="Conditions are satisfied" test_ref="oval:gov.nist.usgcb.rhel:tst:201964"/>
				<criterion comment="Conditions are satisfied" test_ref="oval:gov.nist.usgcb.rhel:tst:201965"/>
				<criterion comment="Conditions are satisfied" test_ref="oval:gov.nist.usgcb.rhel:tst:201966"/>
			</criteria>
		</definition>
		<definition class="compliance" id="oval:gov.nist.usgcb.rhel:def:20197" version="1">
			<metadata>
				<title>Boot Caching (readahead early/readahead later)</title>
				<affected family="unix">
					<platform>Red Hat Enterprise Linux 5</platform>
				</affected>
				<reference ref_id="CCE-4302-6" source="CCE"/>
				<description>The readahead_later service should be disabled.</description>
			</metadata>
			<criteria operator="AND">
				<criterion comment="Conditions are satisfied" test_ref="oval:gov.nist.usgcb.rhel:tst:20197"/>
				<criterion comment="Conditions are satisfied" test_ref="oval:gov.nist.usgcb.rhel:tst:201971"/>
				<criterion comment="Conditions are satisfied" test_ref="oval:gov.nist.usgcb.rhel:tst:201972"/>
				<criterion comment="Conditions are satisfied" test_ref="oval:gov.nist.usgcb.rhel:tst:201973"/>
				<criterion comment="Conditions are satisfied" test_ref="oval:gov.nist.usgcb.rhel:tst:201974"/>
				<criterion comment="Conditions are satisfied" test_ref="oval:gov.nist.usgcb.rhel:tst:201975"/>
				<criterion comment="Conditions are satisfied" test_ref="oval:gov.nist.usgcb.rhel:tst:201976"/>
			</criteria>
		</definition>
		<definition class="compliance" id="oval:gov.nist.usgcb.rhel:def:20200" version="1">
			<metadata>
				<title>Bluetooth Host Controller Interface Daemon (bluetooth)</title>
				<affected family="unix">
					<platform>Red Hat Enterprise Linux 5</platform>
				</affected>
				<reference ref_id="CCE-4355-4" source="CCE"/>
				<description>The bluetooth service should be disabled.</description>
			</metadata>
			<criteria operator="AND">
				<criterion comment="Conditions are satisfied" test_ref="oval:gov.nist.usgcb.rhel:tst:20200"/>
				<criterion comment="Conditions are satisfied" test_ref="oval:gov.nist.usgcb.rhel:tst:202001"/>
				<criterion comment="Conditions are satisfied" test_ref="oval:gov.nist.usgcb.rhel:tst:202002"/>
				<criterion comment="Conditions are satisfied" test_ref="oval:gov.nist.usgcb.rhel:tst:202003"/>
				<criterion comment="Conditions are satisfied" test_ref="oval:gov.nist.usgcb.rhel:tst:202004"/>
				<criterion comment="Conditions are satisfied" test_ref="oval:gov.nist.usgcb.rhel:tst:202005"/>
				<criterion comment="Conditions are satisfied" test_ref="oval:gov.nist.usgcb.rhel:tst:202006"/>
			</criteria>
		</definition>
		<definition class="compliance" id="oval:gov.nist.usgcb.rhel:def:20201" version="1">
			<metadata>
				<title>Bluetooth Input Devices (hidd)</title>
				<affected family="unix">
					<platform>Red Hat Enterprise Linux 5</platform>
				</affected>
				<reference ref_id="CCE-4377-8" source="CCE"/>
				<description>The hidd service should be disabled.</description>
			</metadata>
			<criteria>
				<criterion comment="Conditions are satisfied" test_ref="oval:gov.nist.usgcb.rhel:tst:20201"/>
				<criterion comment="Conditions are satisfied" test_ref="oval:gov.nist.usgcb.rhel:tst:202011"/>
				<criterion comment="Conditions are satisfied" test_ref="oval:gov.nist.usgcb.rhel:tst:202012"/>
				<criterion comment="Conditions are satisfied" test_ref="oval:gov.nist.usgcb.rhel:tst:202013"/>
				<criterion comment="Conditions are satisfied" test_ref="oval:gov.nist.usgcb.rhel:tst:202014"/>
				<criterion comment="Conditions are satisfied" test_ref="oval:gov.nist.usgcb.rhel:tst:202015"/>
				<criterion comment="Conditions are satisfied" test_ref="oval:gov.nist.usgcb.rhel:tst:202016"/>
			</criteria>
		</definition>
		<definition class="compliance" id="oval:gov.nist.usgcb.rhel:def:20205" version="1">
			<metadata>
				<title>Cron Daemon running state</title>
				<affected family="unix">
					<platform>Red Hat Enterprise Linux 5</platform>
				</affected>
				<reference ref_id="CCE-4324-0" source="CCE"/>
				<description>The crond service should be enabled.</description>
			</metadata>
			<criteria operator="AND">
				<criterion comment="Conditions are satisfied" test_ref="oval:gov.nist.usgcb.rhel:tst:20200052"/>
				<criterion comment="Conditions are satisfied" test_ref="oval:gov.nist.usgcb.rhel:tst:20200053"/>
				<criterion comment="Conditions are satisfied" test_ref="oval:gov.nist.usgcb.rhel:tst:20200054"/>
				<criterion comment="Conditions are satisfied" test_ref="oval:gov.nist.usgcb.rhel:tst:20200055"/>
			</criteria>
		</definition>
		<definition class="compliance" id="oval:gov.nist.usgcb.rhel:def:202052" version="1">
			<metadata>
				<title>At Daemon running state</title>
				<affected family="unix">
					<platform>Red Hat Enterprise Linux 5</platform>
				</affected>
				<reference ref_id="CCE-14466-7" source="CCE"/>
				<description>The atd service should be disabled.</description>
			</metadata>
			<criteria operator="OR" comment="at is not installed or conditions are met">
				<criterion comment="at is not installed" test_ref="oval:gov.nist.usgcb.rhel:tst:202053"/>
				<criteria operator="AND">
					<criterion comment="Conditions are satisfied" test_ref="oval:gov.nist.usgcb.rhel:tst:202052"/>
					<criterion comment="Conditions are satisfied" test_ref="oval:gov.nist.usgcb.rhel:tst:2020521"/>
					<criterion comment="Conditions are satisfied" test_ref="oval:gov.nist.usgcb.rhel:tst:2020522"/>
					<criterion comment="Conditions are satisfied" test_ref="oval:gov.nist.usgcb.rhel:tst:2020523"/>
					<criterion comment="Conditions are satisfied" test_ref="oval:gov.nist.usgcb.rhel:tst:2020524"/>
					<criterion comment="Conditions are satisfied" test_ref="oval:gov.nist.usgcb.rhel:tst:2020525"/>
					<criterion comment="Conditions are satisfied" test_ref="oval:gov.nist.usgcb.rhel:tst:2020526"/>
				</criteria>
			</criteria>
		</definition>
		<definition class="compliance" id="oval:gov.nist.usgcb.rhel:def:20208" version="1">
			<metadata>
				<title>Restrict Permissions on Files Used by cron</title>
				<affected family="unix">
					<platform>Red Hat Enterprise Linux 5</platform>
				</affected>
				<reference ref_id="CCE-3626-9" source="CCE"/>
				<description>The /etc/crontab file should be owned by the appropriate group.</description>
			</metadata>
			<criteria>
				<criterion test_ref="oval:gov.nist.usgcb.rhel:tst:20208"/>
			</criteria>
		</definition>
		<definition class="compliance" id="oval:gov.nist.usgcb.rhel:def:20209" version="1">
			<metadata>
				<title>Restrict Permissions on Files Used by cron</title>
				<affected family="unix">
					<platform>Red Hat Enterprise Linux 5</platform>
				</affected>
				<reference ref_id="CCE-3851-3" source="CCE"/>
				<description>The /etc/crontab file should be owned by the appropriate user.</description>
			</metadata>
			<criteria>
				<criterion test_ref="oval:gov.nist.usgcb.rhel:tst:20209"/>
			</criteria>
		</definition>
		<definition class="compliance" id="oval:gov.nist.usgcb.rhel:def:20210" version="1">
			<metadata>
				<title>Restrict Permissions on Files Used by cron</title>
				<affected family="unix">
					<platform>Red Hat Enterprise Linux 5</platform>
				</affected>
				<reference ref_id="CCE-4388-5" source="CCE"/>
				<description>File permissions for /etc/crontab should be set correctly.</description>
			</metadata>
			<criteria>
				<criterion test_ref="oval:gov.nist.usgcb.rhel:tst:20210"/>
			</criteria>
		</definition>
		<definition class="compliance" id="oval:gov.nist.usgcb.rhel:def:20211" version="1">
			<metadata>
				<title>Restrict Permissions on Files Used by cron</title>
				<affected family="unix">
					<platform>Red Hat Enterprise Linux 5</platform>
				</affected>
				<reference ref_id="CCE-3604-6" source="CCE"/>
				<description>The /etc/anacrontab file should be owned by the appropriate group.</description>
			</metadata>
			<criteria>
				<criterion test_ref="oval:gov.nist.usgcb.rhel:tst:20211"/>
			</criteria>
		</definition>
		<definition class="compliance" id="oval:gov.nist.usgcb.rhel:def:20212" version="1">
			<metadata>
				<title>Restrict Permissions on Files Used by cron</title>
				<affected family="unix">
					<platform>Red Hat Enterprise Linux 5</platform>
				</affected>
				<reference ref_id="CCE-4379-4" source="CCE"/>
				<description>The /etc/anacrontab file should be owned by the appropriate user.</description>
			</metadata>
			<criteria>
				<criterion test_ref="oval:gov.nist.usgcb.rhel:tst:20212"/>
			</criteria>
		</definition>
		<definition class="compliance" id="oval:gov.nist.usgcb.rhel:def:20213" version="1">
			<metadata>
				<title>Restrict Permissions on Files Used by cron</title>
				<affected family="unix">
					<platform>Red Hat Enterprise Linux 5</platform>
				</affected>
				<reference ref_id="CCE-4304-2" source="CCE"/>
				<description>File permissions for /etc/anacrontab should be set correctly.</description>
			</metadata>
			<criteria>
				<criterion test_ref="oval:gov.nist.usgcb.rhel:tst:20213"/>
			</criteria>
		</definition>
		<definition class="compliance" id="oval:gov.nist.usgcb.rhel:def:20214" version="1">
			<metadata>
				<title>Restrict Permissions on Files Used by cron</title>
				<affected family="unix">
					<platform>Red Hat Enterprise Linux 5</platform>
				</affected>
				<reference ref_id="CCE-4054-3" source="CCE"/>
				<description>The /etc/cron.hourly file should be owned by the appropriate group.</description>
			</metadata>
			<criteria>
				<criterion test_ref="oval:gov.nist.usgcb.rhel:tst:20214"/>
			</criteria>
		</definition>
		<definition class="compliance" id="oval:gov.nist.usgcb.rhel:def:20215" version="1">
			<metadata>
				<title>Restrict Permissions on Files Used by cron</title>
				<affected family="unix">
					<platform>Red Hat Enterprise Linux 5</platform>
				</affected>
				<reference ref_id="CCE-3481-9" source="CCE"/>
				<description>The /etc/cron.daily file should be owned by the appropriate group.</description>
			</metadata>
			<criteria>
				<criterion test_ref="oval:gov.nist.usgcb.rhel:tst:20215"/>
			</criteria>
		</definition>
		<definition class="compliance" id="oval:gov.nist.usgcb.rhel:def:20216" version="1">
			<metadata>
				<title>Restrict Permissions on Files Used by cron</title>
				<affected family="unix">
					<platform>Red Hat Enterprise Linux 5</platform>
				</affected>
				<reference ref_id="CCE-4331-5" source="CCE"/>
				<description>The /etc/cron.weekly file should be owned by the appropriate group.</description>
			</metadata>
			<criteria>
				<criterion test_ref="oval:gov.nist.usgcb.rhel:tst:20216"/>
			</criteria>
		</definition>
		<definition class="compliance" id="oval:gov.nist.usgcb.rhel:def:20217" version="1">
			<metadata>
				<title>Restrict Permissions on Files Used by cron</title>
				<affected family="unix">
					<platform>Red Hat Enterprise Linux 5</platform>
				</affected>
				<reference ref_id="CCE-4322-4" source="CCE"/>
				<description>The /etc/cron.monthly file should be owned by the appropriate group.</description>
			</metadata>
			<criteria>
				<criterion test_ref="oval:gov.nist.usgcb.rhel:tst:20217"/>
			</criteria>
		</definition>
		<definition class="compliance" id="oval:gov.nist.usgcb.rhel:def:20218" version="1">
			<metadata>
				<title>Restrict Permissions on Files Used by cron</title>
				<affected family="unix">
					<platform>Red Hat Enterprise Linux 5</platform>
				</affected>
				<reference ref_id="CCE-4212-7" source="CCE"/>
				<description>The /etc/cron.d file should be owned by the appropriate group.</description>
			</metadata>
			<criteria>
				<criterion test_ref="oval:gov.nist.usgcb.rhel:tst:20218"/>
			</criteria>
		</definition>
		<definition class="compliance" id="oval:gov.nist.usgcb.rhel:def:20219" version="1">
			<metadata>
				<title>Restrict Permissions on Files Used by cron</title>
				<affected family="unix">
					<platform>Red Hat Enterprise Linux 5</platform>
				</affected>
				<reference ref_id="CCE-3983-4" source="CCE"/>
				<description>The /etc/cron.hourly file should be owned by the appropriate user.</description>
			</metadata>
			<criteria>
				<criterion test_ref="oval:gov.nist.usgcb.rhel:tst:20219"/>
			</criteria>
		</definition>
		<definition class="compliance" id="oval:gov.nist.usgcb.rhel:def:20220" version="1">
			<metadata>
				<title>Restrict Permissions on Files Used by cron</title>
				<affected family="unix">
					<platform>Red Hat Enterprise Linux 5</platform>
				</affected>
				<reference ref_id="CCE-4022-0" source="CCE"/>
				<description>The /etc/cron.daily file should be owned by the appropriate user.</description>
			</metadata>
			<criteria>
				<criterion test_ref="oval:gov.nist.usgcb.rhel:tst:20220"/>
			</criteria>
		</definition>
		<definition class="compliance" id="oval:gov.nist.usgcb.rhel:def:20221" version="1">
			<metadata>
				<title>Restrict Permissions on Files Used by cron</title>
				<affected family="unix">
					<platform>Red Hat Enterprise Linux 5</platform>
				</affected>
				<reference ref_id="CCE-3833-1" source="CCE"/>
				<description>The /etc/cron.weekly file should be owned by the appropriate user.</description>
			</metadata>
			<criteria>
				<criterion test_ref="oval:gov.nist.usgcb.rhel:tst:20221"/>
			</criteria>
		</definition>
		<definition class="compliance" id="oval:gov.nist.usgcb.rhel:def:20222" version="1">
			<metadata>
				<title>Restrict Permissions on Files Used by cron</title>
				<affected family="unix">
					<platform>Red Hat Enterprise Linux 5</platform>
				</affected>
				<reference ref_id="CCE-4441-2" source="CCE"/>
				<description>The /etc/cron.monthly file should be owned by the appropriate user.</description>
			</metadata>
			<criteria>
				<criterion test_ref="oval:gov.nist.usgcb.rhel:tst:20222"/>
			</criteria>
		</definition>
		<definition class="compliance" id="oval:gov.nist.usgcb.rhel:def:20223" version="1">
			<metadata>
				<title>Restrict Permissions on Files Used by cron</title>
				<affected family="unix">
					<platform>Red Hat Enterprise Linux 5</platform>
				</affected>
				<reference ref_id="CCE-4380-2" source="CCE"/>
				<description>The /etc/cron.d file should be owned by the appropriate user.</description>
			</metadata>
			<criteria>
				<criterion test_ref="oval:gov.nist.usgcb.rhel:tst:20223"/>
			</criteria>
		</definition>
		<definition class="compliance" id="oval:gov.nist.usgcb.rhel:def:20224" version="1">
			<metadata>
				<title>Restrict Permissions on Files Used by cron</title>
				<affected family="unix">
					<platform>Red Hat Enterprise Linux 5</platform>
				</affected>
				<reference ref_id="CCE-4106-1" source="CCE"/>
				<description>File permissions for /etc/cron.hourly should be set correctly.</description>
			</metadata>
			<criteria>
				<criterion test_ref="oval:gov.nist.usgcb.rhel:tst:20224"/>
			</criteria>
		</definition>
		<definition class="compliance" id="oval:gov.nist.usgcb.rhel:def:20225" version="1">
			<metadata>
				<title>Restrict Permissions on Files Used by cron</title>
				<affected family="unix">
					<platform>Red Hat Enterprise Linux 5</platform>
				</affected>
				<reference ref_id="CCE-4450-3" source="CCE"/>
				<description>File permissions for /etc/cron.daily should be set correctly.</description>
			</metadata>
			<criteria>
				<criterion test_ref="oval:gov.nist.usgcb.rhel:tst:20225"/>
			</criteria>
		</definition>
		<definition class="compliance" id="oval:gov.nist.usgcb.rhel:def:20226" version="1">
			<metadata>
				<title>Restrict Permissions on Files Used by cron</title>
				<affected family="unix">
					<platform>Red Hat Enterprise Linux 5</platform>
				</affected>
				<reference ref_id="CCE-4203-6" source="CCE"/>
				<description>File permissions for /etc/cron.weekly should be set correctly.</description>
			</metadata>
			<criteria>
				<criterion test_ref="oval:gov.nist.usgcb.rhel:tst:20226"/>
			</criteria>
		</definition>
		<definition class="compliance" id="oval:gov.nist.usgcb.rhel:def:20227" version="1">
			<metadata>
				<title>Restrict Permissions on Files Used by cron</title>
				<affected family="unix">
					<platform>Red Hat Enterprise Linux 5</platform>
				</affected>
				<reference ref_id="CCE-4251-5" source="CCE"/>
				<description>File permissions for /etc/cron.monthly should be set correctly.</description>
			</metadata>
			<criteria>
				<criterion test_ref="oval:gov.nist.usgcb.rhel:tst:20227"/>
			</criteria>
		</definition>
		<definition class="compliance" id="oval:gov.nist.usgcb.rhel:def:20228" version="1">
			<metadata>
				<title>Restrict Permissions on Files Used by cron</title>
				<affected family="unix">
					<platform>Red Hat Enterprise Linux 5</platform>
				</affected>
				<reference ref_id="CCE-4250-7" source="CCE"/>
				<description>File permissions for /etc/cron.d should be set correctly.</description>
			</metadata>
			<criteria>
				<criterion test_ref="oval:gov.nist.usgcb.rhel:tst:20228"/>
			</criteria>
		</definition>
		<definition class="compliance" id="oval:gov.nist.usgcb.rhel:def:20234" version="1">
			<metadata>
				<title>Disable OpenSSH Software</title>
				<affected family="unix">
					<platform>Red Hat Enterprise Linux 5</platform>
				</affected>
				<reference ref_id="CCE-4268-9" source="CCE"/>
				<description>The sshd service should be disabled.</description>
			</metadata>
			<criteria operator="OR" comment="SSH is not installed or conditions are met">
				<extend_definition definition_ref="oval:gov.nist.usgcb.rhel:def:20235" comment="ssh is not installed"/>
				<criteria operator="AND">
					<criterion comment="Conditions are satisfied" test_ref="oval:gov.nist.usgcb.rhel:tst:20234"/>
					<criterion comment="Conditions are satisfied" test_ref="oval:gov.nist.usgcb.rhel:tst:202341"/>
					<criterion comment="Conditions are satisfied" test_ref="oval:gov.nist.usgcb.rhel:tst:202342"/>
					<criterion comment="Conditions are satisfied" test_ref="oval:gov.nist.usgcb.rhel:tst:202343"/>
					<criterion comment="Conditions are satisfied" test_ref="oval:gov.nist.usgcb.rhel:tst:202344"/>
					<criterion comment="Conditions are satisfied" test_ref="oval:gov.nist.usgcb.rhel:tst:202345"/>
					<criterion comment="Conditions are satisfied" test_ref="oval:gov.nist.usgcb.rhel:tst:202346"/>
				</criteria>
			</criteria>
		</definition>
		<definition class="compliance" id="oval:gov.nist.usgcb.rhel:def:20235" version="1">
			<metadata>
				<title>Remove OpenSSH Software</title>
				<affected family="unix">
					<platform>Red Hat Enterprise Linux 5</platform>
				</affected>
				<reference ref_id="CCE-4272-1" source="CCE"/>
				<description>SSH should be uninstalled</description>
			</metadata>
			<criteria>
				<criterion comment="Conditions are satisfied" test_ref="oval:gov.nist.usgcb.rhel:tst:20235"/>
			</criteria>
		</definition>
		<definition class="compliance" id="oval:gov.nist.usgcb.rhel:def:20238" version="1">
			<metadata>
				<title>Ensure Only Protocol 2 Connections Allowed</title>
				<affected family="unix">
					<platform>Red Hat Enterprise Linux 5</platform>
				</affected>
				<reference ref_id="CCE-4325-7" source="CCE"/>
				<description>SSH version 1 protocol support should be disabled. (and dependencies are met)</description>
			</metadata>
			<criteria operator="OR" comment="SSH is not being used or conditions are met">
				<extend_definition definition_ref="oval:gov.nist.usgcb.rhel:def:20234" comment="sshd service is disabled"/>
				<criterion comment="Conditions are satisfied" test_ref="oval:gov.nist.usgcb.rhel:tst:20238"/>
			</criteria>
		</definition>
		<definition class="compliance" id="oval:gov.nist.usgcb.rhel:def:20239" version="1">
			<metadata>
				<title>Set Idle Timeout Interval for User Logins</title>
				<affected family="unix">
					<platform>Red Hat Enterprise Linux 5</platform>
				</affected>
				<reference ref_id="CCE-3845-5" source="CCE"/>
				<description>The SSH idle timout interval should be set to an appropriate value (and dependencies are met)</description>
			</metadata>
			<criteria operator="OR" comment="SSH is not being used or conditions are met">
				<extend_definition definition_ref="oval:gov.nist.usgcb.rhel:def:20234" comment="sshd service is disabled"/>
				<criterion comment="check ClientAliveInterval in /etc/ssh/sshd_config" test_ref="oval:gov.nist.usgcb.rhel:tst:20239"/>
			</criteria>
		</definition>
		<definition class="compliance" id="oval:gov.nist.usgcb.rhel:def:20240" version="1">
			<metadata>
				<title>Set ClientAliveCountMax for User Logins</title>
				<affected family="unix">
					<platform>Red Hat Enterprise Linux 5</platform>
				</affected>
				<reference ref_id="CCE-14061-6" source="CCE"/>
				<description>The SSH ClientAliveCountMax should be set to an appropriate value (and dependencies are met)</description>
			</metadata>
			<criteria operator="OR" comment="SSH is not being used or conditions are met">
				<extend_definition definition_ref="oval:gov.nist.usgcb.rhel:def:20234" comment="sshd service is disabled"/>
				<criterion comment="check ClientAliveCountMax in /etc/ssh/sshd_config" test_ref="oval:gov.nist.usgcb.rhel:tst:20240"/>
			</criteria>
		</definition>
		<definition class="compliance" id="oval:gov.nist.usgcb.rhel:def:20241" version="1">
			<metadata>
				<title>Disable .rhosts Files</title>
				<affected family="unix">
					<platform>Red Hat Enterprise Linux 5</platform>
				</affected>
				<reference ref_id="CCE-4475-0" source="CCE"/>
				<description>Emulation of the rsh command through the ssh server should be disabled (and dependencies are met)</description>
			</metadata>
			<criteria operator="OR" comment="SSH is not being used or conditions are met">
				<extend_definition definition_ref="oval:gov.nist.usgcb.rhel:def:20234" comment="sshd service is disabled"/>
				<criterion comment="Conditions are satisfied" test_ref="oval:gov.nist.usgcb.rhel:tst:20241"/>
			</criteria>
		</definition>
		<definition class="compliance" id="oval:gov.nist.usgcb.rhel:def:20242" version="2">
			<metadata>
				<title>Disable Host-Based Authentication</title>
				<affected family="unix">
					<platform>Red Hat Enterprise Linux 5</platform>
				</affected>
				<reference ref_id="CCE-4370-3" source="CCE"/>
				<description>SSH host-based authentication should be disabled (and dependencies are met)</description>
			</metadata>
			<criteria operator="OR" comment="SSH is not being used or conditions are met">
				<extend_definition definition_ref="oval:gov.nist.usgcb.rhel:def:20234" comment="sshd service is disabled"/>
				<criterion comment="Conditions are satisfied" test_ref="oval:gov.nist.usgcb.rhel:tst:20242"/>
			</criteria>
		</definition>
		<definition class="compliance" id="oval:gov.nist.usgcb.rhel:def:20243" version="1">
			<metadata>
				<title>Disable root Login via SSH</title>
				<affected family="unix">
					<platform>Red Hat Enterprise Linux 5</platform>
				</affected>
				<reference ref_id="CCE-4387-7" source="CCE"/>
				<description>Root login via SSH should be disabled (and dependencies are met)</description>
			</metadata>
			<criteria operator="OR" comment="SSH is not being used or conditions are met">
				<extend_definition definition_ref="oval:gov.nist.usgcb.rhel:def:20234" comment="sshd service is disabled"/>
				<criterion comment="Conditions are satisfied" test_ref="oval:gov.nist.usgcb.rhel:tst:20243"/>
			</criteria>
		</definition>
		<definition class="compliance" id="oval:gov.nist.usgcb.rhel:def:20244" version="1">
			<metadata>
				<title>Disable Empty Passwords</title>
				<affected family="unix">
					<platform>Red Hat Enterprise Linux 5</platform>
				</affected>
				<reference ref_id="CCE-3660-8" source="CCE"/>
				<description>Remote connections from accounts with empty passwords should be disabled (and dependencies are met)</description>
			</metadata>
			<criteria operator="OR" comment="SSH is not being used or conditions are met">
				<extend_definition definition_ref="oval:gov.nist.usgcb.rhel:def:20234" comment="sshd service is disabled"/>
				<criterion comment="Conditions are satisfied" test_ref="oval:gov.nist.usgcb.rhel:tst:20244"/>
			</criteria>
		</definition>
		<definition class="compliance" id="oval:gov.nist.usgcb.rhel:def:20245" version="1">
			<metadata>
				<title>Enable a Warning Banner</title>
				<affected family="unix">
					<platform>Red Hat Enterprise Linux 5</platform>
				</affected>
				<reference ref_id="CCE-4431-3" source="CCE"/>
				<description>SSH warning banner should be enabled (and dependencies are met)</description>
			</metadata>
			<criteria operator="OR" comment="SSH is not being used or conditions are met">
				<extend_definition definition_ref="oval:gov.nist.usgcb.rhel:def:20234" comment="sshd service is disabled"/>
				<criterion comment="Conditions are satisfied" test_ref="oval:gov.nist.usgcb.rhel:tst:20245"/>
			</criteria>
		</definition>
		<definition class="compliance" id="oval:gov.nist.usgcb.rhel:def:202455" version="1">
			<metadata>
				<title>Do Not Allow Users to Set Environment Options</title>
				<affected family="unix">
					<platform>Red Hat Enterprise Linux 5</platform>
				</affected>
				<reference ref_id="CCE-4422-2" source="CCE"/>
				<description>PermitUserEnvironment should be disabled</description>
			</metadata>
			<criteria operator="OR" comment="SSH is not being used or conditions are met">
				<extend_definition definition_ref="oval:gov.nist.usgcb.rhel:def:20234" comment="sshd service is disabled"/>
				<criterion comment="Check value of PermitUserEnvironment in /etc/ssh/sshd_config" test_ref="oval:gov.nist.usgcb.rhel:tst:202455"/>
			</criteria>
		</definition>
		<definition class="compliance" id="oval:gov.nist.usgcb.rhel:def:202456" version="1">
			<metadata>
				<title>Use Only Approved Ciphers</title>
				<affected family="unix">
					<platform>Red Hat Enterprise Linux 5</platform>
				</affected>
				<reference ref_id="CCE-14491-5" source="CCE"/>
				<description>Use only approved ciphers</description>
			</metadata>
			<criteria operator="OR" comment="SSH is not being used or conditions are met">
				<extend_definition definition_ref="oval:gov.nist.usgcb.rhel:def:20234" comment="sshd service is disabled"/>
				<criterion comment="Check value of Ciphers in /etc/ssh/sshd_config" test_ref="oval:gov.nist.usgcb.rhel:tst:202456"/>
			</criteria>
		</definition>
		<definition class="compliance" id="oval:gov.nist.usgcb.rhel:def:20248" version="1">
			<metadata>
				<title>Disable X Window System Listening</title>
				<affected family="unix">
					<platform>Red Hat Enterprise Linux 5</platform>
				</affected>
				<reference ref_id="CCE-4074-1" source="CCE"/>
				<description>Disable the ability to provide remote graphical display</description>
			</metadata>
			<criteria>
				<criterion comment="Check for existence of line exec X :0 -nolisten tcp $@ in file /etc/X11/xinit/xserverrc" test_ref="oval:gov.nist.usgcb.rhel:tst:20248"/>
			</criteria>
		</definition>
		<definition class="compliance" id="oval:gov.nist.usgcb.rhel:def:20249" version="1">
			<metadata>
				<title>Create Warning Banners for GUI Login Users</title>
				<affected family="unix">
					<platform>Red Hat Enterprise Linux 5</platform>
				</affected>
				<reference ref_id="CCE-3717-6" source="CCE"/>
				<description>Enable warning banner for GUI login</description>
			</metadata>
			<criteria>
				<criterion comment="check the value of InfoMsgFile=/etc/issue in /etc/gdm/custom.conf" test_ref="oval:gov.nist.usgcb.rhel:tst:20249"/>
			</criteria>
		</definition>
		<definition class="compliance" id="oval:gov.nist.usgcb.rhel:def:20250" version="1">
			<metadata>
				<title>Disable Avahi Server Software</title>
				<affected family="unix">
					<platform>Red Hat Enterprise Linux 5</platform>
				</affected>
				<reference ref_id="CCE-4365-3" source="CCE"/>
				<description>The avahi-daemon service should be disabled.</description>
			</metadata>
			<criteria operator="AND">
				<criterion comment="Conditions are satisfied" test_ref="oval:gov.nist.usgcb.rhel:tst:20250"/>
				<criterion comment="Conditions are satisfied" test_ref="oval:gov.nist.usgcb.rhel:tst:202501"/>
				<criterion comment="Conditions are satisfied" test_ref="oval:gov.nist.usgcb.rhel:tst:202502"/>
				<criterion comment="Conditions are satisfied" test_ref="oval:gov.nist.usgcb.rhel:tst:202503"/>
				<criterion comment="Conditions are satisfied" test_ref="oval:gov.nist.usgcb.rhel:tst:202504"/>
				<criterion comment="Conditions are satisfied" test_ref="oval:gov.nist.usgcb.rhel:tst:202505"/>
				<criterion comment="Conditions are satisfied" test_ref="oval:gov.nist.usgcb.rhel:tst:202506"/>
			</criteria>
		</definition>
		<definition class="compliance" id="oval:gov.nist.usgcb.rhel:def:20266" version="1">
			<metadata>
				<title>Disable HPLIP Service if Possible</title>
				<affected family="unix">
					<platform>Red Hat Enterprise Linux 5</platform>
				</affected>
				<reference ref_id="CCE-4425-5" source="CCE"/>
				<description>The hplip service should be disabled.</description>
			</metadata>
			<criteria>
				<criterion comment="Conditions are satisfied" test_ref="oval:gov.nist.usgcb.rhel:tst:20266"/>
				<criterion comment="Conditions are satisfied" test_ref="oval:gov.nist.usgcb.rhel:tst:202661"/>
				<criterion comment="Conditions are satisfied" test_ref="oval:gov.nist.usgcb.rhel:tst:202662"/>
				<criterion comment="Conditions are satisfied" test_ref="oval:gov.nist.usgcb.rhel:tst:202663"/>
				<criterion comment="Conditions are satisfied" test_ref="oval:gov.nist.usgcb.rhel:tst:202664"/>
				<criterion comment="Conditions are satisfied" test_ref="oval:gov.nist.usgcb.rhel:tst:202665"/>
				<criterion comment="Conditions are satisfied" test_ref="oval:gov.nist.usgcb.rhel:tst:202666"/>
			</criteria>
		</definition>
		<definition class="compliance" id="oval:gov.nist.usgcb.rhel:def:20268" version="1">
			<metadata>
				<title>Disable DHCP Server if possible</title>
				<affected family="unix">
					<platform>Red Hat Enterprise Linux 5</platform>
				</affected>
				<reference ref_id="CCE-4336-4" source="CCE"/>
				<description>The dhcpd service should be enabled or disabled as appropriate.</description>
			</metadata>
			<criteria operator="OR" comment="dhcp is not installed or conditions are met">
				<extend_definition definition_ref="oval:gov.nist.usgcb.rhel:def:20269" comment="dhcp is not installed"/>
				<criteria operator="AND">
					<criterion comment="Conditions are satisfied" test_ref="oval:gov.nist.usgcb.rhel:tst:20268"/>
					<criterion comment="Conditions are satisfied" test_ref="oval:gov.nist.usgcb.rhel:tst:202681"/>
					<criterion comment="Conditions are satisfied" test_ref="oval:gov.nist.usgcb.rhel:tst:202682"/>
					<criterion comment="Conditions are satisfied" test_ref="oval:gov.nist.usgcb.rhel:tst:202683"/>
					<criterion comment="Conditions are satisfied" test_ref="oval:gov.nist.usgcb.rhel:tst:202684"/>
					<criterion comment="Conditions are satisfied" test_ref="oval:gov.nist.usgcb.rhel:tst:202685"/>
					<criterion comment="Conditions are satisfied" test_ref="oval:gov.nist.usgcb.rhel:tst:202686"/>
				</criteria>
			</criteria>
		</definition>
		<definition class="compliance" id="oval:gov.nist.usgcb.rhel:def:20269" version="1">
			<metadata>
				<title>Disable DHCP Server if possible</title>
				<affected family="unix">
					<platform>Red Hat Enterprise Linux 5</platform>
				</affected>
				<reference ref_id="CCE-4464-4" source="CCE"/>
				<description>The dhcp package should be uninstalled.</description>
			</metadata>
			<criteria>
				<criterion comment="Conditions are satisfied" test_ref="oval:gov.nist.usgcb.rhel:tst:20269"/>
			</criteria>
		</definition>
		<definition class="compliance" id="oval:gov.nist.usgcb.rhel:def:20281" version="1">
			<metadata>
				<title>Enable the NTP Daemon</title>
				<affected family="unix">
					<platform>Red Hat Enterprise Linux 5</platform>
				</affected>
				<reference ref_id="CCE-4376-0" source="CCE"/>
				<description>The ntpd service should be enabled.</description>
			</metadata>
			<criteria operator="AND">
				<criterion comment="Conditions are satisfied" test_ref="oval:gov.nist.usgcb.rhel:tst:202812"/>
				<criterion comment="Conditions are satisfied" test_ref="oval:gov.nist.usgcb.rhel:tst:202813"/>
				<criterion comment="Conditions are satisfied" test_ref="oval:gov.nist.usgcb.rhel:tst:202814"/>
				<criterion comment="Conditions are satisfied" test_ref="oval:gov.nist.usgcb.rhel:tst:202815"/>
			</criteria>
		</definition>
		<definition class="compliance" id="oval:gov.nist.usgcb.rhel:def:20283" version="1">
			<metadata>
				<title>Specify a Remote NTP Server for Time Data</title>
				<affected family="unix">
					<platform>Red Hat Enterprise Linux 5</platform>
				</affected>
				<reference ref_id="CCE-4385-1" source="CCE"/>
				<description>A remote NTP Server for time synchronization should be specified (and dependencies are met)</description>
			</metadata>
			<criteria operator="AND" comment="ntpd is enabled and conditions are met">
				<extend_definition definition_ref="oval:gov.nist.usgcb.rhel:def:20281" comment="ntpd is enabled"/>
				<criterion test_ref="oval:gov.nist.usgcb.rhel:tst:43850"/>
			</criteria>
		</definition>
		<definition class="compliance" id="oval:gov.nist.usgcb.rhel:def:20287" version="1">
			<metadata>
				<title>Mail Transfer Agent</title>
				<affected family="unix">
					<platform>Red Hat Enterprise Linux 5</platform>
				</affected>
				<reference ref_id="CCE-4416-4" source="CCE"/>
				<description>The sendmail service should be disabled.</description>
			</metadata>
			<criteria>
				<criterion comment="Conditions are satisfied" test_ref="oval:gov.nist.usgcb.rhel:tst:20287"/>
				<criterion comment="Conditions are satisfied" test_ref="oval:gov.nist.usgcb.rhel:tst:202871"/>
				<criterion comment="Conditions are satisfied" test_ref="oval:gov.nist.usgcb.rhel:tst:202872"/>
				<criterion comment="Conditions are satisfied" test_ref="oval:gov.nist.usgcb.rhel:tst:202873"/>
				<criterion comment="Conditions are satisfied" test_ref="oval:gov.nist.usgcb.rhel:tst:202874"/>
				<criterion comment="Conditions are satisfied" test_ref="oval:gov.nist.usgcb.rhel:tst:202875"/>
				<criterion comment="Conditions are satisfied" test_ref="oval:gov.nist.usgcb.rhel:tst:202876"/>
			</criteria>
		</definition>
		<definition class="compliance" id="oval:gov.nist.usgcb.rhel:def:202885" version="1">
			<metadata>
				<title>Configure LDAP to Use TLS for All Transactions</title>
				<affected family="unix">
					<platform>Red Hat Enterprise Linux 5</platform>
				</affected>
				<reference ref_id="CCE-14894-0" source="CCE"/>
				<description>Clients require LDAP servers to provide valid certificates for SSL communications.</description>
			</metadata>
			<criteria>
				<criterion comment="look for tls_checkpeer yes in /etc/ldap.conf" test_ref="oval:gov.nist.usgcb.rhel:tst:202885"/>
			</criteria>
		</definition>
		<definition class="compliance" id="oval:gov.nist.usgcb.rhel:def:20289" version="1">
			<metadata>
				<title>Install OpenLDAP Server RPM</title>
				<affected family="unix">
					<platform>Red Hat Enterprise Linux 5</platform>
				</affected>
				<reference ref_id="CCE-3501-4" source="CCE"/>
				<description>The ldap service should be disabled.</description>
			</metadata>
			<criteria>
				<criterion comment="Conditions are satisfied" test_ref="oval:gov.nist.usgcb.rhel:tst:20289"/>
				<criterion comment="Conditions are satisfied" test_ref="oval:gov.nist.usgcb.rhel:tst:202891"/>
				<criterion comment="Conditions are satisfied" test_ref="oval:gov.nist.usgcb.rhel:tst:202892"/>
				<criterion comment="Conditions are satisfied" test_ref="oval:gov.nist.usgcb.rhel:tst:202893"/>
				<criterion comment="Conditions are satisfied" test_ref="oval:gov.nist.usgcb.rhel:tst:202894"/>
				<criterion comment="Conditions are satisfied" test_ref="oval:gov.nist.usgcb.rhel:tst:202895"/>
				<criterion comment="Conditions are satisfied" test_ref="oval:gov.nist.usgcb.rhel:tst:202896"/>
			</criteria>
		</definition>
		<definition class="compliance" id="oval:gov.nist.usgcb.rhel:def:20292" version="1">
			<metadata>
				<title>Disable Services Used Only by NFS</title>
				<affected family="unix">
					<platform>Red Hat Enterprise Linux 5</platform>
				</affected>
				<reference ref_id="CCE-4396-8" source="CCE"/>
				<description>The nfslock service should be disabled.</description>
			</metadata>
			<criteria>
				<criterion comment="Conditions are satisfied" test_ref="oval:gov.nist.usgcb.rhel:tst:20292"/>
				<criterion comment="Conditions are satisfied" test_ref="oval:gov.nist.usgcb.rhel:tst:202921"/>
				<criterion comment="Conditions are satisfied" test_ref="oval:gov.nist.usgcb.rhel:tst:202922"/>
				<criterion comment="Conditions are satisfied" test_ref="oval:gov.nist.usgcb.rhel:tst:202923"/>
				<criterion comment="Conditions are satisfied" test_ref="oval:gov.nist.usgcb.rhel:tst:202924"/>
				<criterion comment="Conditions are satisfied" test_ref="oval:gov.nist.usgcb.rhel:tst:202925"/>
				<criterion comment="Conditions are satisfied" test_ref="oval:gov.nist.usgcb.rhel:tst:202926"/>
			</criteria>
		</definition>
		<definition class="compliance" id="oval:gov.nist.usgcb.rhel:def:20293" version="1">
			<metadata>
				<title>Disable Services Used Only by NFS</title>
				<affected family="unix">
					<platform>Red Hat Enterprise Linux 5</platform>
				</affected>
				<reference ref_id="CCE-3535-2" source="CCE"/>
				<description>The rpcgssd service should be disabled.</description>
			</metadata>
			<criteria>
				<criterion comment="Conditions are satisfied" test_ref="oval:gov.nist.usgcb.rhel:tst:20293"/>
				<criterion comment="Conditions are satisfied" test_ref="oval:gov.nist.usgcb.rhel:tst:202931"/>
				<criterion comment="Conditions are satisfied" test_ref="oval:gov.nist.usgcb.rhel:tst:202932"/>
				<criterion comment="Conditions are satisfied" test_ref="oval:gov.nist.usgcb.rhel:tst:202933"/>
				<criterion comment="Conditions are satisfied" test_ref="oval:gov.nist.usgcb.rhel:tst:202934"/>
				<criterion comment="Conditions are satisfied" test_ref="oval:gov.nist.usgcb.rhel:tst:202935"/>
				<criterion comment="Conditions are satisfied" test_ref="oval:gov.nist.usgcb.rhel:tst:202936"/>
			</criteria>
		</definition>
		<definition class="compliance" id="oval:gov.nist.usgcb.rhel:def:20294" version="1">
			<metadata>
				<title>Disable Services Used Only by NFS</title>
				<affected family="unix">
					<platform>Red Hat Enterprise Linux 5</platform>
				</affected>
				<reference ref_id="CCE-3568-3" source="CCE"/>
				<description>The rpcidmapd service should be disabled.</description>
			</metadata>
			<criteria>
				<criterion comment="Conditions are satisfied" test_ref="oval:gov.nist.usgcb.rhel:tst:20294"/>
				<criterion comment="Conditions are satisfied" test_ref="oval:gov.nist.usgcb.rhel:tst:202941"/>
				<criterion comment="Conditions are satisfied" test_ref="oval:gov.nist.usgcb.rhel:tst:202942"/>
				<criterion comment="Conditions are satisfied" test_ref="oval:gov.nist.usgcb.rhel:tst:202943"/>
				<criterion comment="Conditions are satisfied" test_ref="oval:gov.nist.usgcb.rhel:tst:202944"/>
				<criterion comment="Conditions are satisfied" test_ref="oval:gov.nist.usgcb.rhel:tst:202945"/>
				<criterion comment="Conditions are satisfied" test_ref="oval:gov.nist.usgcb.rhel:tst:202946"/>
			</criteria>
		</definition>
		<definition class="compliance" id="oval:gov.nist.usgcb.rhel:def:20295" version="1">
			<metadata>
				<title>Disable netfs if Possible</title>
				<affected family="unix">
					<platform>Red Hat Enterprise Linux 5</platform>
				</affected>
				<reference ref_id="CCE-4533-6" source="CCE"/>
				<description>The netfs service should be disabled.</description>
			</metadata>
			<criteria>
				<criterion comment="Conditions are satisfied" test_ref="oval:gov.nist.usgcb.rhel:tst:20295"/>
				<criterion comment="Conditions are satisfied" test_ref="oval:gov.nist.usgcb.rhel:tst:202951"/>
				<criterion comment="Conditions are satisfied" test_ref="oval:gov.nist.usgcb.rhel:tst:202952"/>
				<criterion comment="Conditions are satisfied" test_ref="oval:gov.nist.usgcb.rhel:tst:202953"/>
				<criterion comment="Conditions are satisfied" test_ref="oval:gov.nist.usgcb.rhel:tst:202954"/>
				<criterion comment="Conditions are satisfied" test_ref="oval:gov.nist.usgcb.rhel:tst:202955"/>
				<criterion comment="Conditions are satisfied" test_ref="oval:gov.nist.usgcb.rhel:tst:202956"/>
			</criteria>
		</definition>
		<definition class="compliance" id="oval:gov.nist.usgcb.rhel:def:20296" version="1">
			<metadata>
				<title>Disable RPC Portmapper if Possible</title>
				<affected family="unix">
					<platform>Red Hat Enterprise Linux 5</platform>
				</affected>
				<reference ref_id="CCE-4550-0" source="CCE"/>
				<description>The portmap service should be disabled.</description>
			</metadata>
			<criteria>
				<criterion comment="Conditions are satisfied" test_ref="oval:gov.nist.usgcb.rhel:tst:20296"/>
				<criterion comment="Conditions are satisfied" test_ref="oval:gov.nist.usgcb.rhel:tst:202961"/>
				<criterion comment="Conditions are satisfied" test_ref="oval:gov.nist.usgcb.rhel:tst:202962"/>
				<criterion comment="Conditions are satisfied" test_ref="oval:gov.nist.usgcb.rhel:tst:202963"/>
				<criterion comment="Conditions are satisfied" test_ref="oval:gov.nist.usgcb.rhel:tst:202964"/>
				<criterion comment="Conditions are satisfied" test_ref="oval:gov.nist.usgcb.rhel:tst:202965"/>
				<criterion comment="Conditions are satisfied" test_ref="oval:gov.nist.usgcb.rhel:tst:202966"/>
			</criteria>
		</definition>
		<definition class="compliance" id="oval:gov.nist.usgcb.rhel:def:20303" version="1">
			<metadata>
				<title>Disable NFS Server Daemons</title>
				<affected family="unix">
					<platform>Red Hat Enterprise Linux 5</platform>
				</affected>
				<reference ref_id="CCE-4473-5" source="CCE"/>
				<description>The nfs service should be disabled</description>
			</metadata>
			<criteria>
				<criterion comment="Conditions are satisfied" test_ref="oval:gov.nist.usgcb.rhel:tst:20303"/>
				<criterion comment="Conditions are satisfied" test_ref="oval:gov.nist.usgcb.rhel:tst:203031"/>
				<criterion comment="Conditions are satisfied" test_ref="oval:gov.nist.usgcb.rhel:tst:203032"/>
				<criterion comment="Conditions are satisfied" test_ref="oval:gov.nist.usgcb.rhel:tst:203033"/>
				<criterion comment="Conditions are satisfied" test_ref="oval:gov.nist.usgcb.rhel:tst:203034"/>
				<criterion comment="Conditions are satisfied" test_ref="oval:gov.nist.usgcb.rhel:tst:203035"/>
				<criterion comment="Conditions are satisfied" test_ref="oval:gov.nist.usgcb.rhel:tst:203036"/>
			</criteria>
		</definition>
		<definition class="compliance" id="oval:gov.nist.usgcb.rhel:def:20304" version="1">
			<metadata>
				<title>Disable NFS Server Daemons</title>
				<affected family="unix">
					<platform>Red Hat Enterprise Linux 5</platform>
				</affected>
				<reference ref_id="CCE-4491-7" source="CCE"/>
				<description>The rpcsvcgssd service should be disabled</description>
			</metadata>
			<criteria>
				<criterion comment="Conditions are satisfied" test_ref="oval:gov.nist.usgcb.rhel:tst:20304"/>
				<criterion comment="Conditions are satisfied" test_ref="oval:gov.nist.usgcb.rhel:tst:203041"/>
				<criterion comment="Conditions are satisfied" test_ref="oval:gov.nist.usgcb.rhel:tst:203042"/>
				<criterion comment="Conditions are satisfied" test_ref="oval:gov.nist.usgcb.rhel:tst:203043"/>
				<criterion comment="Conditions are satisfied" test_ref="oval:gov.nist.usgcb.rhel:tst:203044"/>
				<criterion comment="Conditions are satisfied" test_ref="oval:gov.nist.usgcb.rhel:tst:203045"/>
				<criterion comment="Conditions are satisfied" test_ref="oval:gov.nist.usgcb.rhel:tst:203046"/>
			</criteria>
		</definition>
		<definition class="compliance" id="oval:gov.nist.usgcb.rhel:def:20305" version="1">
			<metadata>
				<title>Mount Remote Filesystems with nodev</title>
				<affected family="unix">
					<platform>Red Hat Enterprise Linux 5</platform>
				</affected>
				<reference ref_id="CCE-4368-7" source="CCE"/>
				<description>The nodev option should be enabled for all NFS mounts</description>
			</metadata>
			<criteria>
				<criterion comment="if type is nfs[4] in /etc/fstab options should contain nodev" test_ref="oval:gov.nist.usgcb.rhel:tst:203051"/>
				<criterion comment="if type is nfs[4] in /etc/mtab options should contain nodev" test_ref="oval:gov.nist.usgcb.rhel:tst:203052"/>
			</criteria>
		</definition>
		<definition class="compliance" id="oval:gov.nist.usgcb.rhel:def:20306" version="1">
			<metadata>
				<title>Mount Remote Filesystems with nosuid</title>
				<affected family="unix">
					<platform>Red Hat Enterprise Linux 5</platform>
				</affected>
				<reference ref_id="CCE-4024-6" source="CCE"/>
				<description>The nosuid option should be enabled for all NFS mounts</description>
			</metadata>
			<criteria>
				<criterion comment="Unknown test stub" test_ref="oval:gov.nist.usgcb.rhel:tst:22"/>
			</criteria>
		</definition>
		<definition class="compliance" id="oval:gov.nist.usgcb.rhel:def:20311" version="1">
			<metadata>
				<title>Disable DNS Server if Possible</title>
				<affected family="unix">
					<platform>Red Hat Enterprise Linux 5</platform>
				</affected>
				<reference ref_id="CCE-3578-2" source="CCE"/>
				<description>The named service should be disabled.</description>
			</metadata>
			<criteria operator="OR" comment="bind is not installed or conditions are met">
				<extend_definition definition_ref="oval:gov.nist.usgcb.rhel:def:20312" comment="bind is not installed"/>
				<criteria operator="AND">
					<criterion comment="Conditions are satisfied" test_ref="oval:gov.nist.usgcb.rhel:tst:20311"/>
					<criterion comment="Conditions are satisfied" test_ref="oval:gov.nist.usgcb.rhel:tst:203111"/>
					<criterion comment="Conditions are satisfied" test_ref="oval:gov.nist.usgcb.rhel:tst:203112"/>
					<criterion comment="Conditions are satisfied" test_ref="oval:gov.nist.usgcb.rhel:tst:203113"/>
					<criterion comment="Conditions are satisfied" test_ref="oval:gov.nist.usgcb.rhel:tst:203114"/>
					<criterion comment="Conditions are satisfied" test_ref="oval:gov.nist.usgcb.rhel:tst:203115"/>
					<criterion comment="Conditions are satisfied" test_ref="oval:gov.nist.usgcb.rhel:tst:203116"/>
				</criteria>
			</criteria>
		</definition>
		<definition class="compliance" id="oval:gov.nist.usgcb.rhel:def:20312" version="1">
			<metadata>
				<title>Disable DNS Server if Possible</title>
				<affected family="unix">
					<platform>Red Hat Enterprise Linux 5</platform>
				</affected>
				<reference ref_id="CCE-4219-2" source="CCE"/>
				<description>The bind package should be uninstalled.</description>
			</metadata>
			<criteria>
				<criterion comment="Conditions are satisfied" test_ref="oval:gov.nist.usgcb.rhel:tst:20312"/>
			</criteria>
		</definition>
		<definition class="compliance" id="oval:gov.nist.usgcb.rhel:def:20317" version="1">
			<metadata>
				<title>Disable vsftpd if Possible</title>
				<affected family="unix">
					<platform>Red Hat Enterprise Linux 5</platform>
				</affected>
				<reference ref_id="CCE-3919-8" source="CCE"/>
				<description>The vsftpd service should be disabled.</description>
			</metadata>
			<criteria operator="OR" comment="vsftpd is not installed or conditions are met">
				<extend_definition definition_ref="oval:gov.nist.usgcb.rhel:def:203175" comment="vsftpd is not installed"/>
				<criteria operator="AND">
					<criterion comment="Conditions are satisfied" test_ref="oval:gov.nist.usgcb.rhel:tst:203170"/>
					<criterion comment="Conditions are satisfied" test_ref="oval:gov.nist.usgcb.rhel:tst:2031701"/>
					<criterion comment="Conditions are satisfied" test_ref="oval:gov.nist.usgcb.rhel:tst:2031702"/>
					<criterion comment="Conditions are satisfied" test_ref="oval:gov.nist.usgcb.rhel:tst:2031703"/>
					<criterion comment="Conditions are satisfied" test_ref="oval:gov.nist.usgcb.rhel:tst:2031704"/>
					<criterion comment="Conditions are satisfied" test_ref="oval:gov.nist.usgcb.rhel:tst:2031705"/>
					<criterion comment="Conditions are satisfied" test_ref="oval:gov.nist.usgcb.rhel:tst:2031706"/>
				</criteria>
			</criteria>
		</definition>
		<definition class="compliance" id="oval:gov.nist.usgcb.rhel:def:203175" version="1">
			<metadata>
				<title>Uninstall vsftpd if Possible</title>
				<affected family="unix">
					<platform>Red Hat Enterprise Linux 5</platform>
				</affected>
				<reference ref_id="CCE-14881-7" source="CCE"/>
				<description>The vsftpd service should be uninstalled.</description>
			</metadata>
			<criteria>
				<criterion comment="Conditions are satisfied" test_ref="oval:gov.nist.usgcb.rhel:tst:203175"/>
			</criteria>
		</definition>
		<definition class="compliance" id="oval:gov.nist.usgcb.rhel:def:20322" version="1">
			<metadata>
				<title>Disable Apache if Possible</title>
				<affected family="unix">
					<platform>Red Hat Enterprise Linux 5</platform>
				</affected>
				<reference ref_id="CCE-4338-0" source="CCE"/>
				<description>The httpd service should be disabled.</description>
			</metadata>
			<criteria operator="OR" comment="httpd is not installed or conditions are met">
				<extend_definition definition_ref="oval:gov.nist.usgcb.rhel:def:20323" comment="httpd is not installed"/>
				<criteria operator="AND">
					<criterion comment="Conditions are satisfied" test_ref="oval:gov.nist.usgcb.rhel:tst:20322"/>
					<criterion comment="Conditions are satisfied" test_ref="oval:gov.nist.usgcb.rhel:tst:203221"/>
					<criterion comment="Conditions are satisfied" test_ref="oval:gov.nist.usgcb.rhel:tst:203222"/>
					<criterion comment="Conditions are satisfied" test_ref="oval:gov.nist.usgcb.rhel:tst:203223"/>
					<criterion comment="Conditions are satisfied" test_ref="oval:gov.nist.usgcb.rhel:tst:203224"/>
					<criterion comment="Conditions are satisfied" test_ref="oval:gov.nist.usgcb.rhel:tst:203225"/>
					<criterion comment="Conditions are satisfied" test_ref="oval:gov.nist.usgcb.rhel:tst:203226"/>
				</criteria>
			</criteria>
		</definition>
		<definition class="compliance" id="oval:gov.nist.usgcb.rhel:def:20323" version="1">
			<metadata>
				<title>Uninstall Apache if Possible</title>
				<affected family="unix">
					<platform>Red Hat Enterprise Linux 5</platform>
				</affected>
				<reference ref_id="CCE-4514-6" source="CCE"/>
				<description>The httpd package should be uninstalled.</description>
			</metadata>
			<criteria>
				<criterion comment="Conditions are satisfied" test_ref="oval:gov.nist.usgcb.rhel:tst:20323"/>
			</criteria>
		</definition>
		<definition class="compliance" id="oval:gov.nist.usgcb.rhel:def:20331" version="1">
			<metadata>
				<title>Disable Dovecot if Possible</title>
				<affected family="unix">
					<platform>Red Hat Enterprise Linux 5</platform>
				</affected>
				<reference ref_id="CCE-3847-1" source="CCE"/>
				<description>The dovecot service should be disabled.</description>
			</metadata>
			<criteria operator="OR" comment="dovecot is not installed or conditions are met">
				<extend_definition definition_ref="oval:gov.nist.usgcb.rhel:def:20332" comment="dovecot is not installed"/>
				<criteria operator="AND">
					<criterion comment="Conditions are satisfied" test_ref="oval:gov.nist.usgcb.rhel:tst:20331"/>
					<criterion comment="Conditions are satisfied" test_ref="oval:gov.nist.usgcb.rhel:tst:203311"/>
					<criterion comment="Conditions are satisfied" test_ref="oval:gov.nist.usgcb.rhel:tst:203312"/>
					<criterion comment="Conditions are satisfied" test_ref="oval:gov.nist.usgcb.rhel:tst:203313"/>
					<criterion comment="Conditions are satisfied" test_ref="oval:gov.nist.usgcb.rhel:tst:203314"/>
					<criterion comment="Conditions are satisfied" test_ref="oval:gov.nist.usgcb.rhel:tst:203315"/>
					<criterion comment="Conditions are satisfied" test_ref="oval:gov.nist.usgcb.rhel:tst:203316"/>
				</criteria>
			</criteria>
		</definition>
		<definition class="compliance" id="oval:gov.nist.usgcb.rhel:def:20332" version="1">
			<metadata>
				<title>Disable Dovecot if Possible</title>
				<affected family="unix">
					<platform>Red Hat Enterprise Linux 5</platform>
				</affected>
				<reference ref_id="CCE-4239-0" source="CCE"/>
				<description>The dovecot package should be uninstalled.</description>
			</metadata>
			<criteria>
				<criterion comment="Conditions are satisfied" test_ref="oval:gov.nist.usgcb.rhel:tst:20332"/>
			</criteria>
		</definition>
		<definition class="compliance" id="oval:gov.nist.usgcb.rhel:def:20340" version="1">
			<metadata>
				<title>Disable Samba if Possible</title>
				<affected family="unix">
					<platform>Red Hat Enterprise Linux 5</platform>
				</affected>
				<reference ref_id="CCE-4551-8" source="CCE"/>
				<description>The smb service should be disabled.</description>
			</metadata>
			<criteria operator="OR">
				<extend_definition definition_ref="oval:gov.nist.usgcb.rhel:def:203401" comment="samba is not installed"/>
				<criteria operator="AND">
					<criterion comment="Conditions are satisfied" test_ref="oval:gov.nist.usgcb.rhel:tst:203400"/>
					<criterion comment="Conditions are satisfied" test_ref="oval:gov.nist.usgcb.rhel:tst:2034001"/>
					<criterion comment="Conditions are satisfied" test_ref="oval:gov.nist.usgcb.rhel:tst:2034002"/>
					<criterion comment="Conditions are satisfied" test_ref="oval:gov.nist.usgcb.rhel:tst:2034003"/>
					<criterion comment="Conditions are satisfied" test_ref="oval:gov.nist.usgcb.rhel:tst:2034004"/>
					<criterion comment="Conditions are satisfied" test_ref="oval:gov.nist.usgcb.rhel:tst:2034005"/>
					<criterion comment="Conditions are satisfied" test_ref="oval:gov.nist.usgcb.rhel:tst:2034006"/>
				</criteria>
			</criteria>
		</definition>
		<definition class="compliance" id="oval:gov.nist.usgcb.rhel:def:203401" version="1">
			<metadata>
				<title>Uninstall samba</title>
				<affected family="unix">
					<platform>Red Hat Enterprise Linux 5</platform>
				</affected>
				<reference ref_id="CCE-4076-6" source="CCE"/>
				<description>The samba package should be uninstalled.</description>
			</metadata>
			<criteria>
				<criterion comment="Conditions are satisfied" test_ref="oval:gov.nist.usgcb.rhel:tst:203401"/>
			</criteria>
		</definition>
		<definition class="compliance" id="oval:gov.nist.usgcb.rhel:def:2034010" version="1">
			<metadata>
				<title>Require Client SMB Packet Signing, if using smbclient</title>
				<affected family="unix">
					<platform>Red Hat Enterprise Linux 5</platform>
				</affected>
				<reference ref_id="CCE-14075-6" source="CCE"/>
				<description>Require samba clients running smbclient to use packet signing.  A Samba client should only communicate with servers who can support SMB packet signing.</description>
			</metadata>
			<criteria operator="OR">
				<extend_definition definition_ref="oval:gov.nist.usgcb.rhel:def:20340" comment="smb service is disabled"/>
				<criterion comment="check for client signing = mandatory in /etc/samba/smb.conf" test_ref="oval:gov.nist.usgcb.rhel:tst:2034010"/>
			</criteria>
		</definition>
		<definition class="compliance" id="oval:gov.nist.usgcb.rhel:def:2034011" version="1">
			<metadata>
				<title>Require Client SMB Packet Signing, if using mount.cifs</title>
				<affected family="unix">
					<platform>Red Hat Enterprise Linux 5</platform>
				</affected>
				<reference ref_id="CCE-15029-2" source="CCE"/>
				<description>Require packet signing of clients who mount Samba shares using the mount.cifs program (e.g., those who
                              specify shares in /etc/fstab). To do so, ensure that signing options (either sec=krb5i or sec=ntlmv2i) are
                              used.</description>
			</metadata>
			<criteria operator="OR">
				<extend_definition definition_ref="oval:gov.nist.usgcb.rhel:def:20340" comment="smb service is disabled"/>
				<criteria operator="AND">
					<criteria operator="OR">
						<criterion comment="check for no cifs in /etc/fstab" test_ref="oval:gov.nist.usgcb.rhel:tst:20340111"/>
						<criterion comment="check for sec=krb5i or sec=ntlmv2i in /etc/fstab" test_ref="oval:gov.nist.usgcb.rhel:tst:20340112"/>
					</criteria>
					<criteria operator="OR">
						<criterion comment="check for no cifs in /etc/mtab" test_ref="oval:gov.nist.usgcb.rhel:tst:20340113"/>
						<criterion comment="check for sec=krb5i or sec=ntlmv2i in /etc/mtab" test_ref="oval:gov.nist.usgcb.rhel:tst:20340114"/>
					</criteria>
				</criteria>
			</criteria>
		</definition>
		<definition class="compliance" id="oval:gov.nist.usgcb.rhel:def:20341" version="1">
			<metadata>
				<title>Disable Squid if Possible</title>
				<affected family="unix">
					<platform>Red Hat Enterprise Linux 5</platform>
				</affected>
				<reference ref_id="CCE-4556-7" source="CCE"/>
				<description>The squid service should be disabled.</description>
			</metadata>
			<criteria operator="OR" comment="squid is not installed or conditions are met">
				<extend_definition definition_ref="oval:gov.nist.usgcb.rhel:def:20342" comment="squid is not installed"/>
				<criteria operator="AND">
					<criterion comment="Conditions are satisfied" test_ref="oval:gov.nist.usgcb.rhel:tst:20341"/>
					<criterion comment="Conditions are satisfied" test_ref="oval:gov.nist.usgcb.rhel:tst:203411"/>
					<criterion comment="Conditions are satisfied" test_ref="oval:gov.nist.usgcb.rhel:tst:203412"/>
					<criterion comment="Conditions are satisfied" test_ref="oval:gov.nist.usgcb.rhel:tst:203413"/>
					<criterion comment="Conditions are satisfied" test_ref="oval:gov.nist.usgcb.rhel:tst:203414"/>
					<criterion comment="Conditions are satisfied" test_ref="oval:gov.nist.usgcb.rhel:tst:203415"/>
					<criterion comment="Conditions are satisfied" test_ref="oval:gov.nist.usgcb.rhel:tst:203416"/>
				</criteria>
			</criteria>
		</definition>
		<definition class="compliance" id="oval:gov.nist.usgcb.rhel:def:20342" version="1">
			<metadata>
				<title>Disable Squid if Possible</title>
				<affected family="unix">
					<platform>Red Hat Enterprise Linux 5</platform>
				</affected>
				<reference ref_id="CCE-4076-6" source="CCE"/>
				<description>The squid package should be uninstalled.</description>
			</metadata>
			<criteria>
				<criterion comment="Conditions are satisfied" test_ref="oval:gov.nist.usgcb.rhel:tst:20342"/>
			</criteria>
		</definition>
		<definition class="compliance" id="oval:gov.nist.usgcb.rhel:def:20365" version="1">
			<metadata>
				<title>Disable SNMP Server if Possible</title>
				<affected family="unix">
					<platform>Red Hat Enterprise Linux 5</platform>
				</affected>
				<reference ref_id="CCE-3765-5" source="CCE"/>
				<description>The snmpd service should be disabled.</description>
			</metadata>
			<criteria operator="OR" comment="net-snmp is not installed or conditions are met">
				<extend_definition definition_ref="oval:gov.nist.usgcb.rhel:def:20366" comment="net-snmp is not installed"/>
				<criteria operator="AND">
					<criterion comment="Conditions are satisfied" test_ref="oval:gov.nist.usgcb.rhel:tst:20365"/>
					<criterion comment="Conditions are satisfied" test_ref="oval:gov.nist.usgcb.rhel:tst:203651"/>
					<criterion comment="Conditions are satisfied" test_ref="oval:gov.nist.usgcb.rhel:tst:203652"/>
					<criterion comment="Conditions are satisfied" test_ref="oval:gov.nist.usgcb.rhel:tst:203653"/>
					<criterion comment="Conditions are satisfied" test_ref="oval:gov.nist.usgcb.rhel:tst:203654"/>
					<criterion comment="Conditions are satisfied" test_ref="oval:gov.nist.usgcb.rhel:tst:203655"/>
					<criterion comment="Conditions are satisfied" test_ref="oval:gov.nist.usgcb.rhel:tst:203656"/>
				</criteria>
			</criteria>
		</definition>
		<definition class="compliance" id="oval:gov.nist.usgcb.rhel:def:20366" version="1">
			<metadata>
				<title>Disable SNMP Server if Possible</title>
				<affected family="unix">
					<platform>Red Hat Enterprise Linux 5</platform>
				</affected>
				<reference ref_id="CCE-14081-4" source="CCE"/>
				<description>The net-snmp package should be uninstalled.</description>
			</metadata>
			<criteria>
				<criterion comment="Conditions are satisfied" test_ref="oval:gov.nist.usgcb.rhel:tst:20366"/>
			</criteria>
		</definition>
		<definition class="compliance" id="oval:gov.nist.usgcb.rhel:def:573891" version="1">
			<metadata>
				<title>The postfix package should be installed or uninstalled as appropriate.</title>
				<affected family="unix">
					<platform>Red Hat Enterprise Linux 5</platform>
				</affected>
				<reference ref_id="CCE-14068-1" source="CCE"/>
				<description>The postfix package should be installed or uninstalled as appropriate.</description>
			</metadata>
			<criteria>
				<criterion comment="CCE-14068-1" test_ref="oval:gov.nist.usgcb.rhel:tst:573891"/>
			</criteria>
		</definition>
		<definition class="compliance" id="oval:gov.nist.usgcb.rhel:def:573892" version="1">
			<metadata>
				<title>The sendmail package should be installed or uninstalled as appropriate.</title>
				<affected family="unix">
					<platform>Red Hat Enterprise Linux 5</platform>
				</affected>
				<reference ref_id="CCE-14495-6" source="CCE"/>
				<description>The sendmail package should be installed or uninstalled as appropriate.</description>
			</metadata>
			<criteria>
				<criterion comment="CCE-14495-6" test_ref="oval:gov.nist.usgcb.rhel:tst:573892"/>
			</criteria>
		</definition>
		<definition class="compliance" id="oval:gov.nist.usgcb.rhel:def:573893" version="1">
			<metadata>
				<title>The isdn4k-utils package should installed or uninstalled as appropriate.</title>
				<affected family="unix">
					<platform>Red Hat Enterprise Linux 5</platform>
				</affected>
				<reference ref_id="CCE-14825-4" source="CCE"/>
				<description>The isdn4k-utils package should installed or uninstalled as appropriate.</description>
			</metadata>
			<criteria>
				<criterion comment="CCE-14825-4" test_ref="oval:gov.nist.usgcb.rhel:tst:573893"/>
			</criteria>
		</definition>
		<definition class="compliance" id="oval:gov.nist.usgcb.rhel:def:573894" version="1">
			<metadata>
				<title>The ipsec-tools package should be installed or uninstalled as appropriate.</title>
				<affected family="unix">
					<platform>Red Hat Enterprise Linux 5</platform>
				</affected>
				<reference ref_id="CCE-18031-5" source="CCE"/>
				<description>The ipsec-tools package should be installed or uninstalled as appropriate.</description>
			</metadata>
			<criteria>
				<criterion comment="CCE-18031-5" test_ref="oval:gov.nist.usgcb.rhel:tst:573894"/>
			</criteria>
		</definition>
		<definition class="compliance" id="oval:gov.nist.usgcb.rhel:def:573895" version="1">
			<metadata>
				<title>The pam_ccreds package should be installed or uninstalled as appropriate.</title>
				<affected family="unix">
					<platform>Red Hat Enterprise Linux 5</platform>
				</affected>
				<reference ref_id="CCE-17250-2" source="CCE"/>
				<description>The pam_ccreds package should be installed or uninstalled as appropriate.</description>
			</metadata>
			<criteria>
				<criterion comment="CCE-17250-2" test_ref="oval:gov.nist.usgcb.rhel:tst:573895"/>
			</criteria>
		</definition>
		<definition class="compliance" id="oval:gov.nist.usgcb.rhel:def:573896" version="1">
			<metadata>
				<title>The talk-server package should be installed or uninstalled as appropriate.</title>
				<affected family="unix">
					<platform>Red Hat Enterprise Linux 5</platform>
				</affected>
				<reference ref_id="CCE-18151-1" source="CCE"/>
				<description>The talk-server package should be installed or uninstalled as appropriate.</description>
			</metadata>
			<criteria>
				<criterion comment="CCE-18151-1" test_ref="oval:gov.nist.usgcb.rhel:tst:573896"/>
			</criteria>
		</definition>
		<definition class="compliance" id="oval:gov.nist.usgcb.rhel:def:573897" version="1">
			<metadata>
				<title>The talk package should be installed or uninstalled as appropriate.</title>
				<affected family="unix">
					<platform>Red Hat Enterprise Linux 5</platform>
				</affected>
				<reference ref_id="CCE-18200-6" source="CCE"/>
				<description>The talk package should be installed or uninstalled as appropriate.</description>
			</metadata>
			<criteria>
				<criterion comment="CCE-18200-6" test_ref="oval:gov.nist.usgcb.rhel:tst:573897"/>
			</criteria>
		</definition>
		<definition class="compliance" id="oval:gov.nist.usgcb.rhel:def:573898" version="1">
			<metadata>
				<title>The irda-utils package should be installed or uninstalled as appropriate.</title>
				<affected family="unix">
					<platform>Red Hat Enterprise Linux 5</platform>
				</affected>
				<reference ref_id="CCE-17504-2" source="CCE"/>
				<description>The irda-utils package should be installed or uninstalled as appropriate.</description>
			</metadata>
			<criteria>
				<criterion comment="CCE-17504-2" test_ref="oval:gov.nist.usgcb.rhel:tst:573898"/>
			</criteria>
		</definition>
		<!-- placeholder Definitions -->
		<definition class="compliance" id="oval:gov.nist.usgcb.rhel:def:144120" version="1">
			<metadata>
				<title>Add nodev Option to /tmp Partition</title>
				<affected family="unix">
					<platform>Red Hat Enterprise Linux 5</platform>
				</affected>
				<reference ref_id="CCE-14412-1" source="CCE"/>
				<description>Add nodev Option to /tmp Partition</description>
			</metadata>
			<criteria>
				<criterion comment="test for nodev option on /tmp" test_ref="oval:gov.nist.usgcb.rhel:tst:144120"/>
			</criteria>
		</definition>
		<definition class="compliance" id="oval:gov.nist.usgcb.rhel:def:500112" version="1">
			<metadata>
				<title>Add nosuid Option to /tmp Partition</title>
				<affected family="unix">
					<platform>Red Hat Enterprise Linux 5</platform>
				</affected>
				<reference ref_id="CCE-14940-1" source="CCE"/>
				<description>Add nosuid Option to /tmp Partition</description>
			</metadata>
			<criteria>
				<criterion comment="Unknown test stub" test_ref="oval:gov.nist.usgcb.rhel:tst:22"/>
			</criteria>
		</definition>
		<definition class="compliance" id="oval:gov.nist.usgcb.rhel:def:500113" version="1">
			<metadata>
				<title>Add nodev Option to /dev/shm Partition</title>
				<affected family="unix">
					<platform>Red Hat Enterprise Linux 5</platform>
				</affected>
				<reference ref_id="CCE-15007-8" source="CCE"/>
				<description>Add nodev Option to /dev/shm Partition</description>
			</metadata>
			<criteria>
				<criterion comment="Unknown test stub" test_ref="oval:gov.nist.usgcb.rhel:tst:22"/>
			</criteria>
		</definition>
		<definition class="compliance" id="oval:gov.nist.usgcb.rhel:def:500114" version="1">
			<metadata>
				<title>Add nosuid Option to /dev/shm Partition</title>
				<affected family="unix">
					<platform>Red Hat Enterprise Linux 5</platform>
				</affected>
				<reference ref_id="CCE-14306-5" source="CCE"/>
				<description>Add nosuid Option to /dev/shm Partition</description>
			</metadata>
			<criteria>
				<criterion comment="Unknown test stub" test_ref="oval:gov.nist.usgcb.rhel:tst:22"/>
			</criteria>
		</definition>
		<definition class="compliance" id="oval:gov.nist.usgcb.rhel:def:500115" version="1">
			<metadata>
				<title>Add noexec Option to /dev/shm Partition</title>
				<affected family="unix">
					<platform>Red Hat Enterprise Linux 5</platform>
				</affected>
				<reference ref_id="CCE-14703-3" source="CCE"/>
				<description>Add noexec Option to /dev/shm Partition</description>
			</metadata>
			<criteria>
				<criterion comment="Unknown test stub" test_ref="oval:gov.nist.usgcb.rhel:tst:22"/>
			</criteria>
		</definition>
		<definition class="compliance" id="oval:gov.nist.usgcb.rhel:def:500116" version="1">
			<metadata>
				<title>Add noexec Option to /tmp Partition</title>
				<affected family="unix">
					<platform>Red Hat Enterprise Linux 5</platform>
				</affected>
				<reference ref_id="CCE-14927-8" source="CCE"/>
				<description>Add noexec Option to /tmp Partition</description>
			</metadata>
			<criteria>
				<criterion comment="Unknown test stub" test_ref="oval:gov.nist.usgcb.rhel:tst:22"/>
			</criteria>
		</definition>
		<definition class="compliance" id="oval:gov.nist.usgcb.rhel:def:500117" version="1">
			<metadata>
				<title>Bind mount the /var/tmp directory to /var</title>
				<affected family="unix">
					<platform>Red Hat Enterprise Linux 5</platform>
				</affected>
				<reference ref_id="CCE-14584-7" source="CCE"/>
				<description>Bind mount the /var/tmp directory to /var</description>
			</metadata>
			<criteria>
				<criterion comment="Unknown test stub" test_ref="oval:gov.nist.usgcb.rhel:tst:22"/>
			</criteria>
		</definition>
		<definition class="compliance" id="oval:gov.nist.usgcb.rhel:def:500118" version="1">
			<metadata>
				<title>Disable the network sniffer</title>
				<affected family="unix">
					<platform>Red Hat Enterprise Linux 5</platform>
				</affected>
				<reference ref_id="CCE-15013-6" source="CCE"/>
				<description>Disable the network sniffer</description>
			</metadata>
			<criteria>
				<criterion comment="Unknown test stub" test_ref="oval:gov.nist.usgcb.rhel:tst:22"/>
			</criteria>
		</definition>
		<definition class="compliance" id="oval:gov.nist.usgcb.rhel:def:500119" version="1">
			<metadata>
				<title>Postfix network listening should be disabled</title>
				<affected family="unix">
					<platform>Red Hat Enterprise Linux 5</platform>
				</affected>
				<reference ref_id="CCE-15018-5" source="CCE"/>
				<description>Postfix network listening should be disabled</description>
			</metadata>
			<criteria>
				<criterion test_ref="oval:gov.nist.usgcb.rhel:tst:150180"/>
			</criteria>
		</definition>
		<definition class="compliance" id="oval:gov.nist.usgcb.rhel:def:182444" version="1">
			<metadata>
				<title>The irda service should be enabled or disabled as appropriate.</title>
				<affected family="unix">
					<platform>Red Hat Enterprise Linux 5</platform>
				</affected>
				<reference ref_id="CCE-18244-4" source="CCE"/>
				<description>The irda service should be enabled or disabled as appropriate.</description>
			</metadata>
			<criteria>
				<criterion comment="Unknown test stub" test_ref="oval:gov.nist.usgcb.rhel:tst:182440"/>
			</criteria>
		</definition>
		<definition class="compliance" id="oval:gov.nist.usgcb.rhel:def:36491" version="1">
			<metadata>
				<title>Firewall access to printing service should be enabled or disabled as appropriate</title>
				<affected family="unix">
					<platform>Red Hat Enterprise Linux 5</platform>
				</affected>
				<reference ref_id="CCE-3649-1" source="CCE"/>
				<description>Firewall access to printing service should be enabled or disabled as appropriate</description>
			</metadata>
			<criteria operator="AND">
				<criterion comment="TODO::INSERT" test_ref="oval:gov.nist.usgcb.rhel:tst:36490"/>
				<criterion test_ref="oval:gov.nist.usgcb.rhel:tst:36491"/>
			</criteria>
		</definition>
		<definition class="compliance" id="oval:gov.nist.usgcb.rhel:def:180372" version="1">
			<metadata>
				<title>The firewall should allow or reject access to the avahi service.</title>
				<affected family="unix">
					<platform>Red Hat Enterprise Linux 5</platform>
				</affected>
				<reference ref_id="CCE-18037-2" source="CCE"/>
				<description>The firewall should allow or reject access to the avahi service.</description>
			</metadata>
			<criteria operator="AND">
				<criterion comment="TODO::INSERT" test_ref="oval:gov.nist.usgcb.rhel:tst:180370"/>
				<criterion test_ref="oval:gov.nist.usgcb.rhel:tst:180371"/>
			</criteria>
		</definition>
		<definition class="compliance" id="oval:gov.nist.usgcb.rhel:def:40725" version="1">
			<metadata>
				<title>The autofs service should be enabled or disabled as appropriate.</title>
				<affected family="unix">
					<platform>Red Hat Enterprise Linux 5</platform>
				</affected>
				<reference ref_id="CCE-4072-5" source="CCE"/>
				<description>The autofs service should be enabled or disabled as appropriate.</description>
			</metadata>
			<criteria>
				<criterion comment="Unknown test stub" test_ref="oval:gov.nist.usgcb.rhel:tst:40720"/>
			</criteria>
		</definition>
		<definition class="compliance" id="oval:gov.nist.usgcb.rhel:def:181560" version="1">
			<metadata>
				<title>The rawdevices service should be enabled or disabled as appropriate.</title>
				<affected family="unix">
					<platform>Red Hat Enterprise Linux 5</platform>
				</affected>
				<reference ref_id="CCE-18156-0" source="CCE"/>
				<description>The rawdevices service should be enabled or disabled as appropriate.</description>
			</metadata>
			<criteria>
				<criterion comment="Unknown test stub" test_ref="oval:gov.nist.usgcb.rhel:tst:181560"/>
			</criteria>
		</definition>
		<definition class="compliance" id="oval:gov.nist.usgcb.rhel:def:178160" version="1">
			<metadata>
				<title>The libuser library imports login_defs from a file as appropriate.</title>
				<affected family="unix">
					<platform>Red Hat Enterprise Linux 5</platform>
				</affected>
				<reference ref_id="CCE-17816-0" source="CCE"/>
				<description>The libuser library imports login_defs from a file as appropriate.</description>
			</metadata>
			<criteria>
				<criterion comment="Unknown test stub" test_ref="oval:gov.nist.usgcb.rhel:tst:178160"/>
			</criteria>
		</definition>
		<definition class="compliance" id="oval:gov.nist.usgcb.rhel:def:43680" version="1">
			<metadata>
				<title>CCE-4368-7:Mount Remote Filesystems with nodev</title>
				<affected family="unix">
					<platform>Red Hat Enterprise Linux 5</platform>
				</affected>
				<reference ref_id="CCE-4368-7" source="CCE"/>
				<description>CCE-4368-7:Mount Remote Filesystems with nodev</description>
			</metadata>
			<criteria>
				<criterion comment="Unknown test stub" test_ref="oval:gov.nist.usgcb.rhel:tst:43680"/>
			</criteria>
		</definition>
		<definition class="compliance" id="oval:gov.nist.usgcb.rhel:def:99900" version="1">
			<metadata>
				<title>User accounts may or may not be inactivated a specified number of days after account expiration.</title>
				<affected family="unix">
					<platform>Red Hat Enterprise Linux 5</platform>
				</affected>
				<reference ref_id="CCE-18412-7" source="CCE"/>
				<description>User accounts may or may not be inactivated a specified number of days after account expiration.</description>
			</metadata>
			<criteria>
				<criterion comment="Test for INACTIVE=30 in /etc/default/useradd" test_ref="oval:gov.nist.usgcb.rhel:tst:99900"/>
			</criteria>
		</definition>
	</definitions>
	<tests>
		<!-- OVAL Repostiory defniition tests -->
		<uname_test id="oval:org.mitre.oval:tst:3929" version="1" comment="ix64 architecture" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
			<object object_ref="oval:org.mitre.oval:obj:2759"/>
			<state state_ref="oval:org.mitre.oval:ste:3081"/>
		</uname_test>
		<rpminfo_test id="oval:org.mitre.oval:tst:3846" version="1" comment="Red Hat Enterprise 5 is installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
			<object object_ref="oval:org.mitre.oval:obj:1414"/>
			<state state_ref="oval:org.mitre.oval:ste:11314"/>
		</rpminfo_test>
		<!-- end oval repository definition tests -->
		<ind-def:textfilecontent54_test id="oval:gov.nist.usgcb.rhel:tst:20027" version="2" check="at least one" comment="Check /etc/modprobe.conf for line install cramfs /bin/true">
			<ind-def:object object_ref="oval:gov.nist.usgcb.rhel:obj:20027"/>
			<ind-def:state state_ref="oval:gov.nist.usgcb.rhel:ste:20027"/>
		</ind-def:textfilecontent54_test>
		<ind-def:textfilecontent54_test id="oval:gov.nist.usgcb.rhel:tst:20028" version="2" check="at least one" comment="Check /etc/modprobe.conf for line install freevxfs /bin/true">
			<ind-def:object object_ref="oval:gov.nist.usgcb.rhel:obj:20027"/>
			<ind-def:state state_ref="oval:gov.nist.usgcb.rhel:ste:20028"/>
		</ind-def:textfilecontent54_test>
		<ind-def:textfilecontent54_test id="oval:gov.nist.usgcb.rhel:tst:200781" version="1" check="all" comment="check the configuration of /etc/pam.d/system-auth">
			<ind-def:object object_ref="oval:gov.nist.usgcb.rhel:obj:100002"/>
			<ind-def:state state_ref="oval:gov.nist.usgcb.rhel:ste:100002"/>
		</ind-def:textfilecontent54_test>
		<ind-def:textfilecontent54_test id="oval:gov.nist.usgcb.rhel:tst:200782" version="1" check="all" comment="check the configuration of /etc/pam.d/system-auth">
			<ind-def:object object_ref="oval:gov.nist.usgcb.rhel:obj:100001"/>
			<ind-def:state state_ref="oval:gov.nist.usgcb.rhel:ste:100001"/>
		</ind-def:textfilecontent54_test>
		<ind-def:textfilecontent54_test id="oval:gov.nist.usgcb.rhel:tst:141130" version="1" check="all" comment="check the configuration of /etc/pam.d/system-auth">
			<ind-def:object object_ref="oval:gov.nist.usgcb.rhel:obj:141130"/>
			<ind-def:state state_ref="oval:gov.nist.usgcb.rhel:ste:141130"/>
		</ind-def:textfilecontent54_test>
		<ind-def:textfilecontent54_test id="oval:gov.nist.usgcb.rhel:tst:200786" version="1" check="all" comment="check the configuration of /etc/pam.d/system-auth">
			<ind-def:object object_ref="oval:gov.nist.usgcb.rhel:obj:100000"/>
			<ind-def:state state_ref="oval:gov.nist.usgcb.rhel:ste:100000"/>
		</ind-def:textfilecontent54_test>
		<ind-def:textfilecontent54_test id="oval:gov.nist.usgcb.rhel:tst:200787" version="1" check="all" comment="check the configuration of /etc/pam.d/system-auth">
			<ind-def:object object_ref="oval:gov.nist.usgcb.rhel:obj:100006"/>
			<ind-def:state state_ref="oval:gov.nist.usgcb.rhel:ste:100006"/>
		</ind-def:textfilecontent54_test>
		<unix-def:password_test id="oval:gov.nist.usgcb.rhel:tst:200695" version="1" check="all" comment="Check that passwords are shadowed">
			<unix-def:object object_ref="oval:gov.nist.usgcb.rhel:obj:200695"/>
			<unix-def:state state_ref="oval:gov.nist.usgcb.rhel:ste:200695"/>
		</unix-def:password_test>
		<unix-def:file_test check_existence="all_exist" id="oval:gov.nist.usgcb.rhel:tst:20046" version="1" check="all" comment="sticky bit on all world writable directories">
			<notes>
				<note>This will check all directories on local partitions</note>
			</notes>
			<unix-def:object object_ref="oval:gov.nist.usgcb.rhel:obj:20046"/>
			<unix-def:state state_ref="oval:gov.nist.usgcb.rhel:ste:20046"/>
		</unix-def:file_test>
		<ind-def:textfilecontent54_test id="oval:gov.nist.usgcb.rhel:tst:201476" check_existence="at_least_one_exists" version="1" check="all" comment="Check /etc/modprobe.conf for line install DCCP /bin/true">
			<ind-def:object object_ref="oval:gov.nist.usgcb.rhel:obj:201476"/>
		</ind-def:textfilecontent54_test>
		<ind-def:textfilecontent54_test id="oval:gov.nist.usgcb.rhel:tst:201477" check_existence="at_least_one_exists" version="1" check="all" comment="Check /etc/modprobe.conf for line install SCTP /bin/true">
			<ind-def:object object_ref="oval:gov.nist.usgcb.rhel:obj:201477"/>
		</ind-def:textfilecontent54_test>
		<ind-def:textfilecontent54_test id="oval:gov.nist.usgcb.rhel:tst:201478" check_existence="at_least_one_exists" version="1" check="all" comment="Check /etc/modprobe.conf for line install RDS /bin/true">
			<ind-def:object object_ref="oval:gov.nist.usgcb.rhel:obj:201478"/>
		</ind-def:textfilecontent54_test>
		<ind-def:textfilecontent54_test id="oval:gov.nist.usgcb.rhel:tst:201479" check_existence="at_least_one_exists" version="1" check="all" comment="Check /etc/modprobe.conf for line install TIPC /bin/true">
			<ind-def:object object_ref="oval:gov.nist.usgcb.rhel:obj:201479"/>
		</ind-def:textfilecontent54_test>
		<ind-def:variable_test id="oval:gov.nist.usgcb.rhel:tst:200831" version="1" check="all" comment="check value of hashing algorithm is md5">
			<ind-def:object object_ref="oval:gov.nist.usgcb.rhel:obj:200831"/>
			<ind-def:state state_ref="oval:gov.nist.usgcb.rhel:ste:200831"/>
		</ind-def:variable_test>
		<ind-def:textfilecontent54_test check_existence="all_exist" id="oval:gov.nist.usgcb.rhel:tst:200832" version="1" check="all" comment="check the /etc/login.defs file for MD5_CRYPT_ENAB setting">
			<ind-def:object object_ref="oval:gov.nist.usgcb.rhel:obj:200832"/>
			<ind-def:state state_ref="oval:gov.nist.usgcb.rhel:ste:200832"/>
		</ind-def:textfilecontent54_test>
		<ind-def:textfilecontent54_test check_existence="all_exist" id="oval:gov.nist.usgcb.rhel:tst:200833" version="1" check="all" comment="check the /etc/login.defs file for ENCRYPT_METHOD setting">
			<ind-def:object object_ref="oval:gov.nist.usgcb.rhel:obj:200833"/>
			<ind-def:state state_ref="oval:gov.nist.usgcb.rhel:ste:200833"/>
		</ind-def:textfilecontent54_test>
		<ind-def:textfilecontent54_test check_existence="at_least_one_exists" id="oval:gov.nist.usgcb.rhel:tst:2034010" version="1" check="all" comment="check for client signing = mandatory in /etc/samba/smb.conf">
			<ind-def:object object_ref="oval:gov.nist.usgcb.rhel:obj:2034010"/>
		</ind-def:textfilecontent54_test>
		<ind-def:textfilecontent54_test check_existence="only_one_exists" id="oval:gov.nist.usgcb.rhel:tst:200801" version="1" check="all" comment="check system-auth pam_tally2 deny">
			<ind-def:object object_ref="oval:gov.nist.usgcb.rhel:obj:200801"/>
		</ind-def:textfilecontent54_test>
		<lin-def:rpminfo_test check_existence="none_exist" id="oval:gov.nist.usgcb.rhel:tst:203401" version="1" check="all" comment="The samba package should be installed or not as appropriate">
			<lin-def:object object_ref="oval:gov.nist.usgcb.rhel:obj:203401"/>
		</lin-def:rpminfo_test>
		<family_test check_existence="at_least_one_exists" id="oval:gov.nist.usgcb.rhel:tst:20001" version="1" check="only one" comment="installed operating system is part of the Unix family" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
			<object object_ref="oval:gov.nist.usgcb.rhel:obj:20001"/>
			<state state_ref="oval:gov.nist.usgcb.rhel:ste:20001"/>
		</family_test>
		<rpminfo_test check_existence="at_least_one_exists" id="oval:gov.nist.usgcb.rhel:tst:10000" version="1" check="at least one" comment="redhat-release is version 5" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
			<object object_ref="oval:gov.nist.usgcb.rhel:obj:10000"/>
			<state state_ref="oval:gov.nist.usgcb.rhel:ste:10000"/>
		</rpminfo_test>
		<ind-def:textfilecontent54_test id="oval:gov.nist.usgcb.rhel:tst:20000" version="1" check="at least one" comment="look for /tmp partition or logical volume in /etc/fstab" check_existence="at_least_one_exists">
			<ind-def:object object_ref="oval:gov.nist.usgcb.rhel:obj:20000"/>
			<ind-def:state state_ref="oval:gov.nist.usgcb.rhel:ste:20000"/>
		</ind-def:textfilecontent54_test>
		<ind-def:textfilecontent54_test id="oval:gov.nist.usgcb.rhel:tst:20002" version="1" check="at least one" comment="look for /var partition or logical volume in /etc/fstab" check_existence="at_least_one_exists">
			<ind-def:object object_ref="oval:gov.nist.usgcb.rhel:obj:20000"/>
			<ind-def:state state_ref="oval:gov.nist.usgcb.rhel:ste:20002"/>
		</ind-def:textfilecontent54_test>
		<ind-def:textfilecontent54_test id="oval:gov.nist.usgcb.rhel:tst:20004" version="1" check="at least one" comment="look for /var/log partition or logical volume in /etc/fstab" check_existence="at_least_one_exists">
			<ind-def:object object_ref="oval:gov.nist.usgcb.rhel:obj:20000"/>
			<ind-def:state state_ref="oval:gov.nist.usgcb.rhel:ste:20004"/>
		</ind-def:textfilecontent54_test>
		<ind-def:textfilecontent54_test id="oval:gov.nist.usgcb.rhel:tst:20005" version="1" check="at least one" comment="look for /var/log/audit partition or logical volume in /etc/fstab" check_existence="at_least_one_exists">
			<ind-def:object object_ref="oval:gov.nist.usgcb.rhel:obj:20000"/>
			<ind-def:state state_ref="oval:gov.nist.usgcb.rhel:ste:20005"/>
		</ind-def:textfilecontent54_test>
		<ind-def:textfilecontent54_test id="oval:gov.nist.usgcb.rhel:tst:20006" version="1" check="at least one" comment="look for /home partition or logical volume in /etc/fstab" check_existence="at_least_one_exists">
			<ind-def:object object_ref="oval:gov.nist.usgcb.rhel:obj:20000"/>
			<ind-def:state state_ref="oval:gov.nist.usgcb.rhel:ste:20006"/>
		</ind-def:textfilecontent54_test>
		<lin-def:rpminfo_test check_existence="any_exist" id="oval:gov.nist.usgcb.rhel:tst:200065" version="1" check="at least one" comment="proper gpg-pubkey version is installed">
			<lin-def:object object_ref="oval:gov.nist.usgcb.rhel:obj:200065"/>
			<lin-def:state state_ref="oval:gov.nist.usgcb.rhel:ste:200065"/>
		</lin-def:rpminfo_test>
		<ind-def:textfilecontent54_test id="oval:gov.nist.usgcb.rhel:tst:20010" version="1" check="all" comment="check value of gpgcheck in /etc/yum.conf" check_existence="at_least_one_exists">
			<ind-def:object object_ref="oval:gov.nist.usgcb.rhel:obj:20010"/>
			<ind-def:state state_ref="oval:gov.nist.usgcb.rhel:ste:20010"/>
		</ind-def:textfilecontent54_test>
		<ind-def:textfilecontent54_test id="oval:gov.nist.usgcb.rhel:tst:20011" version="1" check="at least one" comment="check value of gpgcheck=0 in /etc/yum.repos.d/">
			<ind-def:object object_ref="oval:gov.nist.usgcb.rhel:obj:20011"/>
			<ind-def:state state_ref="oval:gov.nist.usgcb.rhel:ste:20011"/>
		</ind-def:textfilecontent54_test>
		<ind-def:textfilecontent54_test id="oval:gov.nist.usgcb.rhel:tst:200162" version="1" check="all" comment="Check options for nodev in /etc/mtab for all non-root partitions" check_existence="at_least_one_exists">
			<ind-def:object object_ref="oval:gov.nist.usgcb.rhel:obj:200162"/>
			<ind-def:state state_ref="oval:gov.nist.usgcb.rhel:ste:200163"/>
		</ind-def:textfilecontent54_test>
		<unix-def:runlevel_test check_existence="any_exist" id="oval:gov.nist.usgcb.rhel:tst:20007" version="2" check="all" comment="Runlevel test">
			<unix-def:object object_ref="oval:gov.nist.usgcb.rhel:obj:20007"/>
			<unix-def:state state_ref="oval:gov.nist.usgcb.rhel:ste:20007"/>
		</unix-def:runlevel_test>
		<unix-def:runlevel_test check_existence="any_exist" id="oval:gov.nist.usgcb.rhel:tst:200071" version="2" check="all" comment="Runlevel test">
			<unix-def:object object_ref="oval:gov.nist.usgcb.rhel:obj:200071"/>
			<unix-def:state state_ref="oval:gov.nist.usgcb.rhel:ste:20007"/>
		</unix-def:runlevel_test>
		<unix-def:runlevel_test check_existence="any_exist" id="oval:gov.nist.usgcb.rhel:tst:200072" version="2" check="all" comment="Runlevel test">
			<unix-def:object object_ref="oval:gov.nist.usgcb.rhel:obj:200072"/>
			<unix-def:state state_ref="oval:gov.nist.usgcb.rhel:ste:20007"/>
		</unix-def:runlevel_test>
		<unix-def:runlevel_test check_existence="any_exist" id="oval:gov.nist.usgcb.rhel:tst:200073" version="2" check="all" comment="Runlevel test">
			<unix-def:object object_ref="oval:gov.nist.usgcb.rhel:obj:200073"/>
			<unix-def:state state_ref="oval:gov.nist.usgcb.rhel:ste:20007"/>
		</unix-def:runlevel_test>
		<unix-def:runlevel_test check_existence="any_exist" id="oval:gov.nist.usgcb.rhel:tst:200074" version="2" check="all" comment="Runlevel test">
			<unix-def:object object_ref="oval:gov.nist.usgcb.rhel:obj:200074"/>
			<unix-def:state state_ref="oval:gov.nist.usgcb.rhel:ste:20007"/>
		</unix-def:runlevel_test>
		<unix-def:runlevel_test check_existence="any_exist" id="oval:gov.nist.usgcb.rhel:tst:200075" version="2" check="all" comment="Runlevel test">
			<unix-def:object object_ref="oval:gov.nist.usgcb.rhel:obj:200075"/>
			<unix-def:state state_ref="oval:gov.nist.usgcb.rhel:ste:20007"/>
		</unix-def:runlevel_test>
		<unix-def:runlevel_test check_existence="any_exist" id="oval:gov.nist.usgcb.rhel:tst:200076" version="2" check="all" comment="Runlevel test">
			<unix-def:object object_ref="oval:gov.nist.usgcb.rhel:obj:200076"/>
			<unix-def:state state_ref="oval:gov.nist.usgcb.rhel:ste:20007"/>
		</unix-def:runlevel_test>
		<unix-def:runlevel_test check_existence="any_exist" id="oval:gov.nist.usgcb.rhel:tst:20008" version="2" check="all" comment="Runlevel test">
			<unix-def:object object_ref="oval:gov.nist.usgcb.rhel:obj:20008"/>
			<unix-def:state state_ref="oval:gov.nist.usgcb.rhel:ste:20007"/>
		</unix-def:runlevel_test>
		<unix-def:runlevel_test check_existence="any_exist" id="oval:gov.nist.usgcb.rhel:tst:200081" version="2" check="all" comment="Runlevel test">
			<unix-def:object object_ref="oval:gov.nist.usgcb.rhel:obj:200081"/>
			<unix-def:state state_ref="oval:gov.nist.usgcb.rhel:ste:20007"/>
		</unix-def:runlevel_test>
		<unix-def:runlevel_test check_existence="any_exist" id="oval:gov.nist.usgcb.rhel:tst:200082" version="2" check="all" comment="Runlevel test">
			<unix-def:object object_ref="oval:gov.nist.usgcb.rhel:obj:200082"/>
			<unix-def:state state_ref="oval:gov.nist.usgcb.rhel:ste:20007"/>
		</unix-def:runlevel_test>
		<unix-def:runlevel_test check_existence="any_exist" id="oval:gov.nist.usgcb.rhel:tst:200083" version="2" check="all" comment="Runlevel test">
			<unix-def:object object_ref="oval:gov.nist.usgcb.rhel:obj:200083"/>
			<unix-def:state state_ref="oval:gov.nist.usgcb.rhel:ste:20007"/>
		</unix-def:runlevel_test>
		<unix-def:runlevel_test check_existence="any_exist" id="oval:gov.nist.usgcb.rhel:tst:200084" version="2" check="all" comment="Runlevel test">
			<unix-def:object object_ref="oval:gov.nist.usgcb.rhel:obj:200084"/>
			<unix-def:state state_ref="oval:gov.nist.usgcb.rhel:ste:20007"/>
		</unix-def:runlevel_test>
		<unix-def:runlevel_test check_existence="any_exist" id="oval:gov.nist.usgcb.rhel:tst:200085" version="2" check="all" comment="Runlevel test">
			<unix-def:object object_ref="oval:gov.nist.usgcb.rhel:obj:200085"/>
			<unix-def:state state_ref="oval:gov.nist.usgcb.rhel:ste:20007"/>
		</unix-def:runlevel_test>
		<unix-def:runlevel_test check_existence="any_exist" id="oval:gov.nist.usgcb.rhel:tst:200086" version="2" check="all" comment="Runlevel test">
			<unix-def:object object_ref="oval:gov.nist.usgcb.rhel:obj:200086"/>
			<unix-def:state state_ref="oval:gov.nist.usgcb.rhel:ste:20007"/>
		</unix-def:runlevel_test>
		<lin-def:rpminfo_test check_existence="all_exist" id="oval:gov.nist.usgcb.rhel:tst:20014" version="1" check="all" comment="The aide package should be installed or not as appropriate">
			<lin-def:object object_ref="oval:gov.nist.usgcb.rhel:obj:20014"/>
		</lin-def:rpminfo_test>
		<ind-def:unknown_test id="oval:gov.nist.usgcb.rhel:tst:22" version="1" check="all" comment="Test implementation is unknown, unavailable, or impossible"/>
		<ind-def:textfilecontent54_test id="oval:gov.nist.usgcb.rhel:tst:20029" version="2" check="at least one" comment="Check /etc/modprobe.conf for line install jffs2 /bin/true">
			<ind-def:object object_ref="oval:gov.nist.usgcb.rhel:obj:20027"/>
			<ind-def:state state_ref="oval:gov.nist.usgcb.rhel:ste:20029"/>
		</ind-def:textfilecontent54_test>
		<ind-def:textfilecontent54_test id="oval:gov.nist.usgcb.rhel:tst:20030" version="2" check="at least one" comment="Check /etc/modprobe.conf for line install hfs /bin/true">
			<ind-def:object object_ref="oval:gov.nist.usgcb.rhel:obj:20027"/>
			<ind-def:state state_ref="oval:gov.nist.usgcb.rhel:ste:20030"/>
		</ind-def:textfilecontent54_test>
		<ind-def:textfilecontent54_test id="oval:gov.nist.usgcb.rhel:tst:20031" version="2" check="at least one" comment="Check /etc/modprobe.conf for line install hfsplus /bin/true">
			<ind-def:object object_ref="oval:gov.nist.usgcb.rhel:obj:20027"/>
			<ind-def:state state_ref="oval:gov.nist.usgcb.rhel:ste:20031"/>
		</ind-def:textfilecontent54_test>
		<ind-def:textfilecontent54_test id="oval:gov.nist.usgcb.rhel:tst:20032" version="2" check="at least one" comment="Check /etc/modprobe.conf for line install squashfs /bin/true">
			<ind-def:object object_ref="oval:gov.nist.usgcb.rhel:obj:20027"/>
			<ind-def:state state_ref="oval:gov.nist.usgcb.rhel:ste:20032"/>
		</ind-def:textfilecontent54_test>
		<ind-def:textfilecontent54_test id="oval:gov.nist.usgcb.rhel:tst:20033" version="2" check="at least one" comment="Check /etc/modprobe.conf for line install udf /bin/true">
			<ind-def:object object_ref="oval:gov.nist.usgcb.rhel:obj:20027"/>
			<ind-def:state state_ref="oval:gov.nist.usgcb.rhel:ste:20033"/>
		</ind-def:textfilecontent54_test>
		<unix-def:file_test check_existence="all_exist" id="oval:gov.nist.usgcb.rhel:tst:20034" version="1" check="all" comment="Testing user ownership of /etc/shadow">
			<unix-def:object object_ref="oval:gov.nist.usgcb.rhel:obj:20034"/>
			<unix-def:state state_ref="oval:gov.nist.usgcb.rhel:ste:20034"/>
		</unix-def:file_test>
		<unix-def:file_test check_existence="all_exist" id="oval:gov.nist.usgcb.rhel:tst:20035" version="1" check="all" comment="Testing group ownership /etc/shadow">
			<unix-def:object object_ref="oval:gov.nist.usgcb.rhel:obj:20034"/>
			<unix-def:state state_ref="oval:gov.nist.usgcb.rhel:ste:20035"/>
		</unix-def:file_test>
		<unix-def:file_test check_existence="all_exist" id="oval:gov.nist.usgcb.rhel:tst:20036" version="1" check="all" comment="Testing user ownership">
			<unix-def:object object_ref="oval:gov.nist.usgcb.rhel:obj:20036"/>
			<unix-def:state state_ref="oval:gov.nist.usgcb.rhel:ste:20036"/>
		</unix-def:file_test>
		<unix-def:file_test check_existence="all_exist" id="oval:gov.nist.usgcb.rhel:tst:20037" version="1" check="all" comment="Testing group ownership">
			<unix-def:object object_ref="oval:gov.nist.usgcb.rhel:obj:20036"/>
			<unix-def:state state_ref="oval:gov.nist.usgcb.rhel:ste:20037"/>
		</unix-def:file_test>
		<unix-def:file_test check_existence="all_exist" id="oval:gov.nist.usgcb.rhel:tst:20038" version="1" check="all" comment="Testing gshadow ownership">
			<unix-def:object object_ref="oval:gov.nist.usgcb.rhel:obj:20038"/>
			<unix-def:state state_ref="oval:gov.nist.usgcb.rhel:ste:20038"/>
		</unix-def:file_test>
		<unix-def:file_test check_existence="all_exist" id="oval:gov.nist.usgcb.rhel:tst:20039" version="1" check="all" comment="Testing gshadow ownership">
			<unix-def:object object_ref="oval:gov.nist.usgcb.rhel:obj:20038"/>
			<unix-def:state state_ref="oval:gov.nist.usgcb.rhel:ste:20039"/>
		</unix-def:file_test>
		<unix-def:file_test check_existence="all_exist" id="oval:gov.nist.usgcb.rhel:tst:20040" version="1" check="all" comment="Testing user ownership">
			<unix-def:object object_ref="oval:gov.nist.usgcb.rhel:obj:20040"/>
			<unix-def:state state_ref="oval:gov.nist.usgcb.rhel:ste:20040"/>
		</unix-def:file_test>
		<unix-def:file_test check_existence="all_exist" id="oval:gov.nist.usgcb.rhel:tst:20041" version="1" check="all" comment="Testing group ownership of /etc/passwd">
			<unix-def:object object_ref="oval:gov.nist.usgcb.rhel:obj:20040"/>
			<unix-def:state state_ref="oval:gov.nist.usgcb.rhel:ste:20041"/>
		</unix-def:file_test>
		<unix-def:file_test check_existence="all_exist" id="oval:gov.nist.usgcb.rhel:tst:20042" version="1" check="all" comment="Testing file permissions of /etc/shadow">
			<unix-def:object object_ref="oval:gov.nist.usgcb.rhel:obj:20034"/>
			<unix-def:state state_ref="oval:gov.nist.usgcb.rhel:ste:1000400"/>
		</unix-def:file_test>
		<unix-def:file_test check_existence="all_exist" id="oval:gov.nist.usgcb.rhel:tst:20043" version="1" check="all" comment="Testing /etc/group permissions">
			<unix-def:object object_ref="oval:gov.nist.usgcb.rhel:obj:20036"/>
			<unix-def:state state_ref="oval:gov.nist.usgcb.rhel:ste:1000644"/>
		</unix-def:file_test>
		<unix-def:file_test check_existence="all_exist" id="oval:gov.nist.usgcb.rhel:tst:20044" version="1" check="all" comment="Testing gshadow permissions">
			<unix-def:object object_ref="oval:gov.nist.usgcb.rhel:obj:20038"/>
			<unix-def:state state_ref="oval:gov.nist.usgcb.rhel:ste:1000400"/>
		</unix-def:file_test>
		<unix-def:file_test check_existence="all_exist" id="oval:gov.nist.usgcb.rhel:tst:20045" version="1" check="all" comment="Testing /etc/passwd permissions">
			<unix-def:object object_ref="oval:gov.nist.usgcb.rhel:obj:20040"/>
			<unix-def:state state_ref="oval:gov.nist.usgcb.rhel:ste:1000644"/>
		</unix-def:file_test>
		<unix-def:file_test id="oval:gov.nist.usgcb.rhel:tst:20047" version="1" check_existence="none_exist" check="all" comment="world writable (regular) files">
			<notes>
				<note>This will check all files on local partitions</note>
			</notes>
			<unix-def:object object_ref="oval:gov.nist.usgcb.rhel:obj:20047"/>
		</unix-def:file_test>
		<unix-def:file_test id="oval:gov.nist.usgcb.rhel:tst:20048" version="1" check_existence="none_exist" check="all" comment="unauthorized executable (regular) files with sgid set">
			<notes>
				<note>This will check all files on local partitions</note>
			</notes>
			<unix-def:object object_ref="oval:gov.nist.usgcb.rhel:obj:20048"/>
		</unix-def:file_test>
		<unix-def:file_test id="oval:gov.nist.usgcb.rhel:tst:20049" version="1" check_existence="none_exist" check="all" comment="unauthorized executable (regular) files with suid set">
			<notes>
				<note>This will check all files on local partitions</note>
			</notes>
			<unix-def:object object_ref="oval:gov.nist.usgcb.rhel:obj:20049"/>
		</unix-def:file_test>
		<unix-def:file_test id="oval:gov.nist.usgcb.rhel:tst:20050" version="1" check_existence="none_exist" check="all" comment="files with no user owner">
			<notes>
				<note>This will check all files on local partitions</note>
			</notes>
			<unix-def:object object_ref="oval:gov.nist.usgcb.rhel:obj:20050"/>
		</unix-def:file_test>
		<unix-def:file_test id="oval:gov.nist.usgcb.rhel:tst:20051" version="1" check_existence="none_exist" check="all" comment="files with no group owner">
			<notes>
				<note>This will check all files on local partitions</note>
			</notes>
			<unix-def:object object_ref="oval:gov.nist.usgcb.rhel:obj:20051"/>
		</unix-def:file_test>
		<unix-def:file_test id="oval:gov.nist.usgcb.rhel:tst:20052" version="1" check_existence="none_exist" check="all" comment="world writable directories have a uid greater than or equal to 500">
			<notes>
				<note>This will check all directories on local partitions</note>
			</notes>
			<unix-def:object object_ref="oval:gov.nist.usgcb.rhel:obj:20052"/>
		</unix-def:file_test>
		<ind-def:textfilecontent54_test check_existence="all_exist" id="oval:gov.nist.usgcb.rhel:tst:20053" version="1" check="all" comment="Tests the value of the umask[\s]+(.*) expression in the /etc/sysconfig/init file">
			<ind-def:object object_ref="oval:gov.nist.usgcb.rhel:obj:20053"/>
			<ind-def:state state_ref="oval:gov.nist.usgcb.rhel:ste:20053"/>
		</ind-def:textfilecontent54_test>
		<ind-def:textfilecontent54_test id="oval:gov.nist.usgcb.rhel:tst:20055" version="1" check="all" comment="Tests the value of the ^[\s]*\*[\s]+hard[\s]+core[\s]+([\d]+) setting in the /etc/security/limits.conf file">
			<ind-def:object object_ref="oval:gov.nist.usgcb.rhel:obj:20055"/>
			<ind-def:state state_ref="oval:gov.nist.usgcb.rhel:ste:20055"/>
		</ind-def:textfilecontent54_test>
		<ind-def:textfilecontent54_test check_existence="none_exist" id="oval:gov.nist.usgcb.rhel:tst:20056" version="2" check="all" comment="Tests the value of the ^[\s]*fs\.suid_dumpable[\s]*=[\s]*([\S].*) expression in the /etc/sysctl.conf file">
			<ind-def:object object_ref="oval:gov.nist.usgcb.rhel:obj:20056"/>
		</ind-def:textfilecontent54_test>
		<ind-def:textfilecontent54_test check_existence="all_exist" id="oval:gov.nist.usgcb.rhel:tst:20057" version="1" check="all" comment="Tests the value of /proc/sys/kernel/exec-shield">
			<ind-def:object object_ref="oval:gov.nist.usgcb.rhel:obj:20057"/>
		</ind-def:textfilecontent54_test>
		<ind-def:textfilecontent54_test check_existence="all_exist" id="oval:gov.nist.usgcb.rhel:tst:20058" version="1" check="all" comment="Tests the contents of /proc/sys/kernel/randomize_va_space to see if they equal 1">
			<ind-def:object object_ref="oval:gov.nist.usgcb.rhel:obj:20058"/>
		</ind-def:textfilecontent54_test>
		<lin-def:rpminfo_test check_existence="all_exist" id="oval:gov.nist.usgcb.rhel:tst:20059" version="1" check="all" comment="The kernel-PAE package should be installed or not as appropriate">
			<lin-def:object object_ref="oval:gov.nist.usgcb.rhel:obj:20059"/>
		</lin-def:rpminfo_test>
		<ind-def:textfilecontent54_test check_existence="none_exist" id="oval:gov.nist.usgcb.rhel:tst:20063" version="1" check="all" comment="Tests the value of the &lt;:begin:&gt;console&lt;:end:&gt; setting in the /etc/securetty file">
			<ind-def:object object_ref="oval:gov.nist.usgcb.rhel:obj:20063"/>
		</ind-def:textfilecontent54_test>
		<ind-def:textfilecontent54_test check_existence="none_exist" id="oval:gov.nist.usgcb.rhel:tst:20064" version="1" check="all" comment="Tests the value of the &lt;:begin:&gt;ttyS[0-9]+&lt;:end:&gt; setting in the /etc/securetty file">
			<ind-def:object object_ref="oval:gov.nist.usgcb.rhel:obj:20064"/>
		</ind-def:textfilecontent54_test>
		<ind-def:textfilecontent54_test check_existence="all_exist" id="oval:gov.nist.usgcb.rhel:tst:20065" version="1" check="all" comment="Tests the value of the &lt;:begin:&gt;wheel setting in the /etc/group file">
			<ind-def:object object_ref="oval:gov.nist.usgcb.rhel:obj:20065"/>
		</ind-def:textfilecontent54_test>
		<ind-def:textfilecontent54_test check_existence="all_exist" id="oval:gov.nist.usgcb.rhel:tst:20066" version="1" check="all" comment="Tests the value of the &lt;:begin:&gt;auth[\s]+required[\s]+pam_wheel.so[\s]+use_uid&lt;:end:&gt; setting in the /etc/pam.d/su file">
			<ind-def:object object_ref="oval:gov.nist.usgcb.rhel:obj:20066"/>
		</ind-def:textfilecontent54_test>
		<unix-def:password_test id="oval:gov.nist.usgcb.rhel:tst:20068" version="1" check="none satisfy" comment="Tests the login shell for non root system accounts">
			<unix-def:object object_ref="oval:gov.nist.usgcb.rhel:obj:20068"/>
			<unix-def:state state_ref="oval:gov.nist.usgcb.rhel:ste:20068"/>
		</unix-def:password_test>
		<ind-def:textfilecontent54_test check_existence="none_exist" id="oval:gov.nist.usgcb.rhel:tst:20069" version="1" check="all" comment="Tests the value of the ^[^:]*:: setting in the /etc/shadow file">
			<ind-def:object object_ref="oval:gov.nist.usgcb.rhel:obj:20069"/>
		</ind-def:textfilecontent54_test>
		<ind-def:textfilecontent54_test check_existence="none_exist" id="oval:gov.nist.usgcb.rhel:tst:20070" version="1" check="all" comment="Tests the value of the ^[^r][^o][^o][^t].*:0:setting in the /etc/passwd file">
			<ind-def:object object_ref="oval:gov.nist.usgcb.rhel:obj:20070"/>
		</ind-def:textfilecontent54_test>
		<ind-def:textfilecontent54_test check_existence="all_exist" id="oval:gov.nist.usgcb.rhel:tst:20071" version="1" check="all" comment="Tests the value of the PASS_MIN_LEN[\s]*=[\s]*(.*) expression in the /etc/login.defs file">
			<ind-def:object object_ref="oval:gov.nist.usgcb.rhel:obj:20071"/>
			<ind-def:state state_ref="oval:gov.nist.usgcb.rhel:ste:20071"/>
		</ind-def:textfilecontent54_test>
		<ind-def:textfilecontent54_test check_existence="all_exist" id="oval:gov.nist.usgcb.rhel:tst:20072" version="1" check="all" comment="Tests the value of the PASS_MIN_DAYS[\s]*=[\s]*(.*) expression in the /etc/login.defs file">
			<ind-def:object object_ref="oval:gov.nist.usgcb.rhel:obj:20072"/>
		</ind-def:textfilecontent54_test>
		<ind-def:textfilecontent54_test check_existence="all_exist" id="oval:gov.nist.usgcb.rhel:tst:20073" version="1" check="all" comment="Tests the value of the PASS_MAX_DAYS[\s]*=[\s]*(.*) expression in the /etc/login.defs file">
			<ind-def:object object_ref="oval:gov.nist.usgcb.rhel:obj:20073"/>
		</ind-def:textfilecontent54_test>
		<ind-def:textfilecontent54_test check_existence="all_exist" id="oval:gov.nist.usgcb.rhel:tst:20074" version="1" check="all" comment="Tests the value of the PASS_WARN_AGE[\s]*=[\s]*(.*) expression in the /etc/login.defs file">
			<ind-def:object object_ref="oval:gov.nist.usgcb.rhel:obj:20074"/>
		</ind-def:textfilecontent54_test>
		<ind-def:textfilecontent54_test check_existence="none_exist" id="oval:gov.nist.usgcb.rhel:tst:20075" version="1" check="all" comment="Tests the value of the ^+: setting in the /etc/shadow file">
			<ind-def:object object_ref="oval:gov.nist.usgcb.rhel:obj:20075"/>
		</ind-def:textfilecontent54_test>
		<ind-def:textfilecontent54_test check_existence="none_exist" id="oval:gov.nist.usgcb.rhel:tst:20076" version="1" check="all" comment="Tests the value of the ^+: setting in the /etc/group file">
			<ind-def:object object_ref="oval:gov.nist.usgcb.rhel:obj:20076"/>
		</ind-def:textfilecontent54_test>
		<ind-def:textfilecontent54_test check_existence="none_exist" id="oval:gov.nist.usgcb.rhel:tst:20077" version="1" check="all" comment="Tests the value of the ^+: setting in the /etc/passwd file">
			<ind-def:object object_ref="oval:gov.nist.usgcb.rhel:obj:20077"/>
		</ind-def:textfilecontent54_test>
		<ind-def:textfilecontent54_test id="oval:gov.nist.usgcb.rhel:tst:200784" version="1" check="all" comment="check the configuration of /etc/pam.d/system-auth">
			<ind-def:object object_ref="oval:gov.nist.usgcb.rhel:obj:100005"/>
			<ind-def:state state_ref="oval:gov.nist.usgcb.rhel:ste:100005"/>
		</ind-def:textfilecontent54_test>
		<ind-def:textfilecontent54_test id="oval:gov.nist.usgcb.rhel:tst:200785" version="1" check="all" comment="check the configuration of /etc/pam.d/system-auth">
			<ind-def:object object_ref="oval:gov.nist.usgcb.rhel:obj:100003"/>
			<ind-def:state state_ref="oval:gov.nist.usgcb.rhel:ste:100003"/>
		</ind-def:textfilecontent54_test>
		<ind-def:unknown_test id="oval:gov.nist.usgcb.rhel:tst:20079" version="1" check="all" comment="pam_passwdqc is not implemented"/>
		<ind-def:textfilecontent54_test check_existence="all_exist" id="oval:gov.nist.usgcb.rhel:tst:200834" version="1" check="all" comment="check the /etc/pam.d/system-auth file for the hash algorithm setting">
			<ind-def:object object_ref="oval:gov.nist.usgcb.rhel:obj:200834"/>
			<ind-def:state state_ref="oval:gov.nist.usgcb.rhel:ste:200833"/>
		</ind-def:textfilecontent54_test>
		<ind-def:textfilecontent54_test check_existence="all_exist" id="oval:gov.nist.usgcb.rhel:tst:200835" version="1" check="all" comment="check the /etc/libuser.conf file for the crypt_style setting">
			<ind-def:object object_ref="oval:gov.nist.usgcb.rhel:obj:200834"/>
			<ind-def:state state_ref="oval:gov.nist.usgcb.rhel:ste:200833"/>
		</ind-def:textfilecontent54_test>
		<ind-def:variable_test id="oval:gov.nist.usgcb.rhel:tst:200841" version="1" check="all" comment="check remember parameter is set to 0">
			<ind-def:object object_ref="oval:gov.nist.usgcb.rhel:obj:200841"/>
			<ind-def:state state_ref="oval:gov.nist.usgcb.rhel:ste:200841"/>
		</ind-def:variable_test>
		<ind-def:textfilecontent54_test check_existence="all_exist" id="oval:gov.nist.usgcb.rhel:tst:200842" version="1" check="all" comment="check that remember is set appropriately in /etc/pam.d/system-auth">
			<ind-def:object object_ref="oval:gov.nist.usgcb.rhel:obj:200842"/>
			<ind-def:state state_ref="oval:gov.nist.usgcb.rhel:ste:200842"/>
		</ind-def:textfilecontent54_test>
		<ind-def:environmentvariable_test version="1" id="oval:gov.nist.usgcb.rhel:tst:20085" check="all" comment="PATH starts with : or .">
			<ind-def:object object_ref="oval:gov.nist.usgcb.rhel:obj:20085"/>
			<ind-def:state state_ref="oval:gov.nist.usgcb.rhel:ste:20085"/>
		</ind-def:environmentvariable_test>
		<unix-def:file_test id="oval:gov.nist.usgcb.rhel:tst:2008551" check_existence="any_exist" version="1" check="at least one" comment="Check that write permission to group and other in root's path is denied">
			<unix-def:object object_ref="oval:gov.nist.usgcb.rhel:obj:200855"/>
			<unix-def:state state_ref="oval:gov.nist.usgcb.rhel:ste:2008551"/>
		</unix-def:file_test>
		<unix-def:file_test id="oval:gov.nist.usgcb.rhel:tst:2008552" check_existence="any_exist" version="1" check="at least one" comment="Check that write permission to group and other in root's path is denied">
			<unix-def:object object_ref="oval:gov.nist.usgcb.rhel:obj:200855"/>
			<unix-def:state state_ref="oval:gov.nist.usgcb.rhel:ste:2008552"/>
		</unix-def:file_test>
		<unix-def:file_test check_existence="any_exist" id="oval:gov.nist.usgcb.rhel:tst:200861" version="1" check="all" comment="home directories are group writeable">
			<unix-def:object object_ref="oval:gov.nist.usgcb.rhel:obj:20086"/>
			<unix-def:state state_ref="oval:gov.nist.usgcb.rhel:ste:200861"/>
		</unix-def:file_test>
		<unix-def:file_test check_existence="any_exist" id="oval:gov.nist.usgcb.rhel:tst:200862" version="1" check="all" comment="home directories are world readable">
			<unix-def:object object_ref="oval:gov.nist.usgcb.rhel:obj:20086"/>
			<unix-def:state state_ref="oval:gov.nist.usgcb.rhel:ste:200862"/>
		</unix-def:file_test>
		<ind-def:textfilecontent54_test check_existence="all_exist" id="oval:gov.nist.usgcb.rhel:tst:20087" version="1" check="all" comment="Tests the value of the second ^[\s]*umask[\s]+([^#]*) expression in the /etc/bashrc file">
			<ind-def:object object_ref="oval:gov.nist.usgcb.rhel:obj:20087"/>
			<ind-def:state state_ref="oval:gov.nist.usgcb.rhel:ste:20087"/>
		</ind-def:textfilecontent54_test>
		<ind-def:textfilecontent54_test check_existence="all_exist" id="oval:gov.nist.usgcb.rhel:tst:20088" version="1" check="all" comment="Tests the value of the second ^[\s]*umask[\s]+([^#]*) expression in the /etc/csh.cshrc file">
			<ind-def:object object_ref="oval:gov.nist.usgcb.rhel:obj:20088"/>
			<ind-def:state state_ref="oval:gov.nist.usgcb.rhel:ste:20087"/>
		</ind-def:textfilecontent54_test>
		<ind-def:textfilecontent54_test check_existence="all_exist" id="oval:gov.nist.usgcb.rhel:tst:20089" version="1" check="all" comment="Tests the value of the ^[\s]*umask[\s]+([^#]*) expression in the /etc/login.defs file">
			<ind-def:object object_ref="oval:gov.nist.usgcb.rhel:obj:20089"/>
			<ind-def:state state_ref="oval:gov.nist.usgcb.rhel:ste:20087"/>
		</ind-def:textfilecontent54_test>
		<ind-def:textfilecontent54_test check_existence="all_exist" id="oval:gov.nist.usgcb.rhel:tst:20090" version="1" check="all" comment="Tests the value of the ^[\s]*umask[\s]+([^#]*) expression in the /etc/profile file">
			<ind-def:object object_ref="oval:gov.nist.usgcb.rhel:obj:20090"/>
			<ind-def:state state_ref="oval:gov.nist.usgcb.rhel:ste:20087"/>
		</ind-def:textfilecontent54_test>
		<unix-def:file_test check_existence="all_exist" id="oval:gov.nist.usgcb.rhel:tst:20092" version="1" check="all" comment="Testing user ownership">
			<unix-def:object object_ref="oval:gov.nist.usgcb.rhel:obj:20092"/>
			<unix-def:state state_ref="oval:gov.nist.usgcb.rhel:ste:20092"/>
		</unix-def:file_test>
		<unix-def:file_test check_existence="all_exist" id="oval:gov.nist.usgcb.rhel:tst:20093" version="1" check="all" comment="Testing group ownership">
			<unix-def:object object_ref="oval:gov.nist.usgcb.rhel:obj:20093"/>
			<unix-def:state state_ref="oval:gov.nist.usgcb.rhel:ste:20093"/>
		</unix-def:file_test>
		<unix-def:file_test check_existence="all_exist" id="oval:gov.nist.usgcb.rhel:tst:20094" version="1" check="all" comment="Testing file permissions">
			<unix-def:object object_ref="oval:gov.nist.usgcb.rhel:obj:20094"/>
			<unix-def:state state_ref="oval:gov.nist.usgcb.rhel:ste:1000600"/>
		</unix-def:file_test>
		<ind-def:textfilecontent54_test check_existence="all_exist" id="oval:gov.nist.usgcb.rhel:tst:20095" version="1" check="all" comment="Tests the value of the password[\s]+--md5[\s]+.* setting in the /boot/grub/grub.conf file">
			<ind-def:object object_ref="oval:gov.nist.usgcb.rhel:obj:20095"/>
		</ind-def:textfilecontent54_test>
		<ind-def:textfilecontent54_test check_existence="all_exist" id="oval:gov.nist.usgcb.rhel:tst:20096" version="1" check="all" comment="Tests the value of the ~~:S:wait:/sbin/sulogin setting in the /etc/inittab file">
			<ind-def:object object_ref="oval:gov.nist.usgcb.rhel:obj:73"/>
		</ind-def:textfilecontent54_test>
		<ind-def:textfilecontent54_test check_existence="all_exist" id="oval:gov.nist.usgcb.rhel:tst:20097" version="1" check="all" comment="Tests the value of the PROMPT[\s]*=[\s]*([^#]*) expression in the /etc/sysconfig/init file">
			<ind-def:object object_ref="oval:gov.nist.usgcb.rhel:obj:20096"/>
		</ind-def:textfilecontent54_test>
		<ind-def:xmlfilecontent_test id="oval:gov.nist.usgcb.rhel:tst:20100" version="1" check="all" comment="/apps/gnome-screensaver/idle_delay in GConf">
			<ind-def:object object_ref="oval:gov.nist.usgcb.rhel:obj:20100"/>
			<ind-def:state state_ref="oval:gov.nist.usgcb.rhel:ste:20100"/>
		</ind-def:xmlfilecontent_test>
		<ind-def:xmlfilecontent_test id="oval:gov.nist.usgcb.rhel:tst:201005" version="1" check="all" comment="/apps/gnome-screensaver/idle_activation_enabled in GConf">
			<ind-def:object object_ref="oval:gov.nist.usgcb.rhel:obj:201005"/>
			<ind-def:state state_ref="oval:gov.nist.usgcb.rhel:ste:201005"/>
		</ind-def:xmlfilecontent_test>
		<ind-def:xmlfilecontent_test id="oval:gov.nist.usgcb.rhel:tst:201006" version="1" check="all" comment="/apps/gnome-screensaver/lock_enabled in GConf">
			<ind-def:object object_ref="oval:gov.nist.usgcb.rhel:obj:201006"/>
			<ind-def:state state_ref="oval:gov.nist.usgcb.rhel:ste:201006"/>
		</ind-def:xmlfilecontent_test>
		<ind-def:xmlfilecontent_test id="oval:gov.nist.usgcb.rhel:tst:201007" version="1" check="all" comment="/apps/gnome-screensaver/mode in GConf">
			<ind-def:object object_ref="oval:gov.nist.usgcb.rhel:obj:201007"/>
			<ind-def:state state_ref="oval:gov.nist.usgcb.rhel:ste:201007"/>
		</ind-def:xmlfilecontent_test>
		<lin-def:rpminfo_test check_existence="all_exist" id="oval:gov.nist.usgcb.rhel:tst:20101" version="1" check="all" comment="The vlock package should be installed or not as appropriate">
			<lin-def:object object_ref="oval:gov.nist.usgcb.rhel:obj:20101"/>
		</lin-def:rpminfo_test>
		<ind-def:textfilecontent54_test check_existence="all_exist" id="oval:gov.nist.usgcb.rhel:tst:20102" version="1" check="at least one" comment="Tests the value of the (.*) setting in the /etc/issue file">
			<ind-def:object object_ref="oval:gov.nist.usgcb.rhel:obj:20102"/>
			<ind-def:state state_ref="oval:gov.nist.usgcb.rhel:ste:20102"/>
		</ind-def:textfilecontent54_test>
		<ind-def:xmlfilecontent_test id="oval:gov.nist.usgcb.rhel:tst:20103" version="1" check="all" comment="/greeter/item[@id='banner']/box[1]/item[@id='custom-usgcb-banner']/text[1]">
			<ind-def:object object_ref="oval:gov.nist.usgcb.rhel:obj:20103"/>
			<ind-def:state state_ref="oval:gov.nist.usgcb.rhel:ste:20103"/>
		</ind-def:xmlfilecontent_test>
		<unix-def:file_test id="oval:gov.nist.usgcb.rhel:tst:201035" check_existence="at_least_one_exists" version="1" check="all" comment="/selinux exists">
			<unix-def:object object_ref="oval:gov.nist.usgcb.rhel:obj:201035"/>
		</unix-def:file_test>
		<ind-def:textfilecontent54_test check_existence="none_exist" id="oval:gov.nist.usgcb.rhel:tst:20104" version="1" check="all" comment="Tests the value of the ^[\s]*enforcing[\s]*=[\s]*([^#]*) expression in the /boot/grub/grub.conf file">
			<ind-def:object object_ref="oval:gov.nist.usgcb.rhel:obj:20104"/>
		</ind-def:textfilecontent54_test>
		<ind-def:textfilecontent54_test check_existence="all_exist" id="oval:gov.nist.usgcb.rhel:tst:20106" version="1" check="all" comment="Tests the value of the ^[\s]*selinux[\s]*=[\s]*([^#]*) expression in the /etc/selinux/config file">
			<ind-def:object object_ref="oval:gov.nist.usgcb.rhel:obj:20106"/>
			<ind-def:state state_ref="oval:gov.nist.usgcb.rhel:ste:20106"/>
		</ind-def:textfilecontent54_test>
		<ind-def:variable_test version="1" id="oval:gov.nist.usgcb.rhel:tst:201061" check="all" comment="enforce is disabled">
			<ind-def:object object_ref="oval:gov.nist.usgcb.rhel:obj:201061"/>
			<ind-def:state state_ref="oval:gov.nist.usgcb.rhel:ste:201061"/>
		</ind-def:variable_test>
		<ind-def:variable_test version="1" id="oval:gov.nist.usgcb.rhel:tst:201062" check="all" comment="enforce is permissive">
			<ind-def:object object_ref="oval:gov.nist.usgcb.rhel:obj:201061"/>
			<ind-def:state state_ref="oval:gov.nist.usgcb.rhel:ste:201062"/>
		</ind-def:variable_test>
		<ind-def:variable_test version="1" id="oval:gov.nist.usgcb.rhel:tst:201063" check="all" comment="enforce is enforcing">
			<ind-def:object object_ref="oval:gov.nist.usgcb.rhel:obj:201061"/>
			<ind-def:state state_ref="oval:gov.nist.usgcb.rhel:ste:201063"/>
		</ind-def:variable_test>
		<ind-def:textfilecontent54_test check_existence="all_exist" id="oval:gov.nist.usgcb.rhel:tst:201064" version="1" check="all" comment="/selinux/enforce is 0">
			<ind-def:object object_ref="oval:gov.nist.usgcb.rhel:obj:201064"/>
			<ind-def:state state_ref="oval:gov.nist.usgcb.rhel:ste:201064"/>
		</ind-def:textfilecontent54_test>
		<ind-def:textfilecontent54_test check_existence="all_exist" id="oval:gov.nist.usgcb.rhel:tst:201065" version="1" check="all" comment="/selinux/enforce is 1">
			<ind-def:object object_ref="oval:gov.nist.usgcb.rhel:obj:201064"/>
			<ind-def:state state_ref="oval:gov.nist.usgcb.rhel:ste:201065"/>
		</ind-def:textfilecontent54_test>
		<ind-def:textfilecontent54_test check_existence="all_exist" id="oval:gov.nist.usgcb.rhel:tst:20107" version="1" check="all" comment="Tests the value of the ^[\s]*SELINUXTYPE[\s]*=[\s]*([^#]*) expression in the /etc/selinux/config file">
			<ind-def:object object_ref="oval:gov.nist.usgcb.rhel:obj:20107"/>
			<ind-def:state state_ref="oval:gov.nist.usgcb.rhel:ste:20107"/>
		</ind-def:textfilecontent54_test>
		<unix-def:runlevel_test check_existence="any_exist" id="oval:gov.nist.usgcb.rhel:tst:20110" version="2" check="all" comment="Runlevel test">
			<unix-def:object object_ref="oval:gov.nist.usgcb.rhel:obj:20110"/>
			<unix-def:state state_ref="oval:gov.nist.usgcb.rhel:ste:20007"/>
		</unix-def:runlevel_test>
		<unix-def:runlevel_test check_existence="any_exist" id="oval:gov.nist.usgcb.rhel:tst:201101" version="2" check="all" comment="Runlevel test">
			<unix-def:object object_ref="oval:gov.nist.usgcb.rhel:obj:201101"/>
			<unix-def:state state_ref="oval:gov.nist.usgcb.rhel:ste:20007"/>
		</unix-def:runlevel_test>
		<unix-def:runlevel_test check_existence="any_exist" id="oval:gov.nist.usgcb.rhel:tst:201102" version="2" check="all" comment="Runlevel test">
			<unix-def:object object_ref="oval:gov.nist.usgcb.rhel:obj:201102"/>
			<unix-def:state state_ref="oval:gov.nist.usgcb.rhel:ste:20007"/>
		</unix-def:runlevel_test>
		<unix-def:runlevel_test check_existence="any_exist" id="oval:gov.nist.usgcb.rhel:tst:201103" version="2" check="all" comment="Runlevel test">
			<unix-def:object object_ref="oval:gov.nist.usgcb.rhel:obj:201103"/>
			<unix-def:state state_ref="oval:gov.nist.usgcb.rhel:ste:20007"/>
		</unix-def:runlevel_test>
		<unix-def:runlevel_test check_existence="any_exist" id="oval:gov.nist.usgcb.rhel:tst:201104" version="2" check="all" comment="Runlevel test">
			<unix-def:object object_ref="oval:gov.nist.usgcb.rhel:obj:201104"/>
			<unix-def:state state_ref="oval:gov.nist.usgcb.rhel:ste:20007"/>
		</unix-def:runlevel_test>
		<unix-def:runlevel_test check_existence="any_exist" id="oval:gov.nist.usgcb.rhel:tst:201105" version="2" check="all" comment="Runlevel test">
			<unix-def:object object_ref="oval:gov.nist.usgcb.rhel:obj:201105"/>
			<unix-def:state state_ref="oval:gov.nist.usgcb.rhel:ste:20007"/>
		</unix-def:runlevel_test>
		<unix-def:runlevel_test check_existence="any_exist" id="oval:gov.nist.usgcb.rhel:tst:201106" version="2" check="all" comment="Runlevel test">
			<unix-def:object object_ref="oval:gov.nist.usgcb.rhel:obj:201106"/>
			<unix-def:state state_ref="oval:gov.nist.usgcb.rhel:ste:20007"/>
		</unix-def:runlevel_test>
		<ind-def:textfilecontent54_test check_existence="all_exist" id="oval:gov.nist.usgcb.rhel:tst:20112" version="1" check="all" comment="Tests the value of the ^[\s]*net\.ipv4\.conf\.default\.send_redirects[\s]*=[\s]*([\S].*) expression in the /etc/sysctl.conf file">
			<ind-def:object object_ref="oval:gov.nist.usgcb.rhel:obj:20112"/>
			<ind-def:state state_ref="oval:gov.nist.usgcb.rhel:ste:20112"/>
		</ind-def:textfilecontent54_test>
		<ind-def:textfilecontent54_test check_existence="all_exist" id="oval:gov.nist.usgcb.rhel:tst:20113" version="1" check="all" comment="Tests the value of the ^[\s]*net\.ipv4\.conf\.all\.send_redirects[\s]*=[\s]*([\S].*) expression in the /etc/sysctl.conf file">
			<ind-def:object object_ref="oval:gov.nist.usgcb.rhel:obj:20113"/>
			<ind-def:state state_ref="oval:gov.nist.usgcb.rhel:ste:20113"/>
		</ind-def:textfilecontent54_test>
		<ind-def:textfilecontent54_test check_existence="all_exist" id="oval:gov.nist.usgcb.rhel:tst:20114" version="1" check="all" comment="Tests the value of the ^[\s]*net\.ipv4\.ip_forward[\s]*=[\s]*([\S].*) expression in the /etc/sysctl.conf file">
			<ind-def:object object_ref="oval:gov.nist.usgcb.rhel:obj:20114"/>
			<ind-def:state state_ref="oval:gov.nist.usgcb.rhel:ste:20114"/>
		</ind-def:textfilecontent54_test>
		<ind-def:textfilecontent54_test check_existence="all_exist" id="oval:gov.nist.usgcb.rhel:tst:20115" version="1" check="all" comment="Tests the value of the ^[\s]*net\.ipv4\.conf\.all\.accept_source_route[\s]*=[\s]*([\S].*) expression in the /etc/sysctl.conf file">
			<ind-def:object object_ref="oval:gov.nist.usgcb.rhel:obj:20115"/>
			<ind-def:state state_ref="oval:gov.nist.usgcb.rhel:ste:20115"/>
		</ind-def:textfilecontent54_test>
		<ind-def:textfilecontent54_test check_existence="all_exist" id="oval:gov.nist.usgcb.rhel:tst:20116" version="1" check="all" comment="Tests the value of the ^[\s]*net\.ipv4\.conf\.all\.accept_redirects[\s]*=[\s]*([\S].*) expression in the /etc/sysctl.conf file">
			<ind-def:object object_ref="oval:gov.nist.usgcb.rhel:obj:20116"/>
			<ind-def:state state_ref="oval:gov.nist.usgcb.rhel:ste:20116"/>
		</ind-def:textfilecontent54_test>
		<ind-def:textfilecontent54_test check_existence="all_exist" id="oval:gov.nist.usgcb.rhel:tst:20117" version="1" check="all" comment="Tests the value of the ^[\s]*net\.ipv4\.conf\.all\.secure_redirects[\s]*=[\s]*([\S].*) expression in the /etc/sysctl.conf file">
			<ind-def:object object_ref="oval:gov.nist.usgcb.rhel:obj:20117"/>
			<ind-def:state state_ref="oval:gov.nist.usgcb.rhel:ste:20117"/>
		</ind-def:textfilecontent54_test>
		<ind-def:textfilecontent54_test check_existence="all_exist" id="oval:gov.nist.usgcb.rhel:tst:20118" version="1" check="all" comment="Tests the value of the ^[\s]*net\.ipv4\.conf\.all\.log_martians[\s]*=[\s]*([\S].*) expression in the /etc/sysctl.conf file">
			<ind-def:object object_ref="oval:gov.nist.usgcb.rhel:obj:20118"/>
			<ind-def:state state_ref="oval:gov.nist.usgcb.rhel:ste:20118"/>
		</ind-def:textfilecontent54_test>
		<ind-def:textfilecontent54_test check_existence="all_exist" id="oval:gov.nist.usgcb.rhel:tst:20119" version="1" check="all" comment="Tests the value of the ^[\s]*net\.ipv4\.conf\.default\.accept_source_route[\s]*=[\s]*([\S].*) expression in the /etc/sysctl.conf file">
			<ind-def:object object_ref="oval:gov.nist.usgcb.rhel:obj:20119"/>
			<ind-def:state state_ref="oval:gov.nist.usgcb.rhel:ste:20119"/>
		</ind-def:textfilecontent54_test>
		<ind-def:textfilecontent54_test check_existence="all_exist" id="oval:gov.nist.usgcb.rhel:tst:20120" version="1" check="all" comment="Tests the value of the ^[\s]*net\.ipv4\.conf\.default\.accept_redirects[\s]*=[\s]*([\S].*) expression in the /etc/sysctl.conf file">
			<ind-def:object object_ref="oval:gov.nist.usgcb.rhel:obj:20120"/>
			<ind-def:state state_ref="oval:gov.nist.usgcb.rhel:ste:20120"/>
		</ind-def:textfilecontent54_test>
		<ind-def:textfilecontent54_test check_existence="all_exist" id="oval:gov.nist.usgcb.rhel:tst:20121" version="1" check="all" comment="Tests the value of the ^[\s]*net\.ipv4\.conf\.default\.secure_redirects[\s]*=[\s]*([\S].*) expression in the /etc/sysctl.conf file">
			<ind-def:object object_ref="oval:gov.nist.usgcb.rhel:obj:20121"/>
			<ind-def:state state_ref="oval:gov.nist.usgcb.rhel:ste:20121"/>
		</ind-def:textfilecontent54_test>
		<ind-def:textfilecontent54_test check_existence="all_exist" id="oval:gov.nist.usgcb.rhel:tst:20122" version="1" check="all" comment="Tests the value of the ^[\s]*net\.ipv4\.icmp_echo_ignore_broadcasts[\s]*=[\s]*([\S].*) expression in the /etc/sysctl.conf file">
			<ind-def:object object_ref="oval:gov.nist.usgcb.rhel:obj:20122"/>
			<ind-def:state state_ref="oval:gov.nist.usgcb.rhel:ste:20122"/>
		</ind-def:textfilecontent54_test>
		<ind-def:textfilecontent54_test check_existence="all_exist" id="oval:gov.nist.usgcb.rhel:tst:20123" version="1" check="all" comment="Tests the value of the ^[\s]*net\.ipv4\.icmp_ignore_bogus_error_messages[\s]*=[\s]*([\S].*) expression in the /etc/sysctl.conf file">
			<ind-def:object object_ref="oval:gov.nist.usgcb.rhel:obj:20123"/>
			<ind-def:state state_ref="oval:gov.nist.usgcb.rhel:ste:20123"/>
		</ind-def:textfilecontent54_test>
		<ind-def:textfilecontent54_test check_existence="all_exist" id="oval:gov.nist.usgcb.rhel:tst:20124" version="1" check="all" comment="Tests the value of the ^[\s]*net\.ipv4\.tcp_syncookies[\s]*=[\s]*([\S].*) expression in the /etc/sysctl.conf file">
			<ind-def:object object_ref="oval:gov.nist.usgcb.rhel:obj:20124"/>
			<ind-def:state state_ref="oval:gov.nist.usgcb.rhel:ste:20124"/>
		</ind-def:textfilecontent54_test>
		<ind-def:textfilecontent54_test check_existence="all_exist" id="oval:gov.nist.usgcb.rhel:tst:20125" version="1" check="all" comment="Tests the value of the ^[\s]*net\.ipv4\.conf\.all\.rp_filter[\s]*=[\s]*([\S].*) expression in the /etc/sysctl.conf file">
			<ind-def:object object_ref="oval:gov.nist.usgcb.rhel:obj:20125"/>
			<ind-def:state state_ref="oval:gov.nist.usgcb.rhel:ste:20125"/>
		</ind-def:textfilecontent54_test>
		<ind-def:textfilecontent54_test check_existence="all_exist" id="oval:gov.nist.usgcb.rhel:tst:20126" version="1" check="all" comment="Tests the value of the ^[\s]*net\.ipv4\.conf\.default\.rp_filter[\s]*=[\s]*([\S].*) expression in the /etc/sysctl.conf file">
			<ind-def:object object_ref="oval:gov.nist.usgcb.rhel:obj:20126"/>
			<ind-def:state state_ref="oval:gov.nist.usgcb.rhel:ste:20126"/>
		</ind-def:textfilecontent54_test>
		<ind-def:textfilecontent54_test check_existence="none_exist" id="oval:gov.nist.usgcb.rhel:tst:20128" version="1" check="all" comment="Look in /proc/net/wireless">
			<ind-def:object object_ref="oval:gov.nist.usgcb.rhel:obj:20128"/>
		</ind-def:textfilecontent54_test>
		<ind-def:textfilecontent54_test id="oval:gov.nist.usgcb.rhel:tst:20130" version="2" check="all" comment="Check ipv6 option disable in /etc/modprobe.d/usgcb-blacklist">
			<ind-def:object object_ref="oval:gov.nist.usgcb.rhel:obj:20130"/>
			<ind-def:state state_ref="oval:gov.nist.usgcb.rhel:ste:20130"/>
		</ind-def:textfilecontent54_test>
		<ind-def:textfilecontent54_test check_existence="all_exist" id="oval:gov.nist.usgcb.rhel:tst:20131" version="1" check="all" comment="Tests the value of the ^[\s]*IPV6INIT[\s]*=[\s]*([^#]*) expression in the /etc/sysconfig/network file">
			<ind-def:object object_ref="oval:gov.nist.usgcb.rhel:obj:20131"/>
			<ind-def:state state_ref="oval:gov.nist.usgcb.rhel:ste:20131"/>
		</ind-def:textfilecontent54_test>
		<ind-def:textfilecontent54_test check_existence="all_exist" id="oval:gov.nist.usgcb.rhel:tst:20132" version="1" check="all" comment="Tests the value of the ^[\s]*NETWORKING_IPV6[\s]*=[\s]*([^#]*) expression in the /etc/sysconfig/network file">
			<ind-def:object object_ref="oval:gov.nist.usgcb.rhel:obj:20132"/>
			<ind-def:state state_ref="oval:gov.nist.usgcb.rhel:ste:20132"/>
		</ind-def:textfilecontent54_test>
		<ind-def:textfilecontent54_test check_existence="all_exist" id="oval:gov.nist.usgcb.rhel:tst:20133" version="1" check="all" comment="Tests the value of the ^[\s]*NETWORKING_IPV6[\s]*=[\s]*([^#]*) expression in the /etc/sysconfig/network-scripts/ifcfg-.* file">
			<ind-def:object object_ref="oval:gov.nist.usgcb.rhel:obj:20133"/>
			<ind-def:state state_ref="oval:gov.nist.usgcb.rhel:ste:20133"/>
		</ind-def:textfilecontent54_test>
		<unix-def:runlevel_test check_existence="all_exist" id="oval:gov.nist.usgcb.rhel:tst:201462" version="2" check="all" comment="Runlevel test">
			<unix-def:object object_ref="oval:gov.nist.usgcb.rhel:obj:201462"/>
			<unix-def:state state_ref="oval:gov.nist.usgcb.rhel:ste:20008"/>
		</unix-def:runlevel_test>
		<unix-def:runlevel_test check_existence="all_exist" id="oval:gov.nist.usgcb.rhel:tst:201463" version="2" check="all" comment="Runlevel test">
			<unix-def:object object_ref="oval:gov.nist.usgcb.rhel:obj:201463"/>
			<unix-def:state state_ref="oval:gov.nist.usgcb.rhel:ste:20008"/>
		</unix-def:runlevel_test>
		<unix-def:runlevel_test check_existence="all_exist" id="oval:gov.nist.usgcb.rhel:tst:201464" version="2" check="all" comment="Runlevel test">
			<unix-def:object object_ref="oval:gov.nist.usgcb.rhel:obj:201464"/>
			<unix-def:state state_ref="oval:gov.nist.usgcb.rhel:ste:20008"/>
		</unix-def:runlevel_test>
		<unix-def:runlevel_test check_existence="all_exist" id="oval:gov.nist.usgcb.rhel:tst:201465" version="2" check="all" comment="Runlevel test">
			<unix-def:object object_ref="oval:gov.nist.usgcb.rhel:obj:201465"/>
			<unix-def:state state_ref="oval:gov.nist.usgcb.rhel:ste:20008"/>
		</unix-def:runlevel_test>
		<unix-def:runlevel_test check_existence="any_exist" id="oval:gov.nist.usgcb.rhel:tst:2014702" version="2" check="all" comment="Runlevel test">
			<unix-def:object object_ref="oval:gov.nist.usgcb.rhel:obj:2014702"/>
			<unix-def:state state_ref="oval:gov.nist.usgcb.rhel:ste:20008"/>
		</unix-def:runlevel_test>
		<unix-def:runlevel_test check_existence="all_exist" id="oval:gov.nist.usgcb.rhel:tst:2014703" version="2" check="all" comment="Runlevel test">
			<unix-def:object object_ref="oval:gov.nist.usgcb.rhel:obj:2014703"/>
			<unix-def:state state_ref="oval:gov.nist.usgcb.rhel:ste:20008"/>
		</unix-def:runlevel_test>
		<unix-def:runlevel_test check_existence="all_exist" id="oval:gov.nist.usgcb.rhel:tst:2014704" version="2" check="all" comment="Runlevel test">
			<unix-def:object object_ref="oval:gov.nist.usgcb.rhel:obj:2014704"/>
			<unix-def:state state_ref="oval:gov.nist.usgcb.rhel:ste:20008"/>
		</unix-def:runlevel_test>
		<unix-def:runlevel_test check_existence="all_exist" id="oval:gov.nist.usgcb.rhel:tst:2014705" version="2" check="all" comment="Runlevel test">
			<unix-def:object object_ref="oval:gov.nist.usgcb.rhel:obj:2014705"/>
			<unix-def:state state_ref="oval:gov.nist.usgcb.rhel:ste:20008"/>
		</unix-def:runlevel_test>
		<ind-def:textfilecontent54_test id="oval:gov.nist.usgcb.rhel:tst:2014741" check_existence="at_least_one_exists" version="1" check="all" comment="Check /etc/sysconfig/iptables for line :INPUT DROP [0:0]">
			<ind-def:object object_ref="oval:gov.nist.usgcb.rhel:obj:2014741"/>
		</ind-def:textfilecontent54_test>
		<ind-def:textfilecontent54_test id="oval:gov.nist.usgcb.rhel:tst:2014742" check_existence="at_least_one_exists" version="1" check="all" comment="Check /etc/sysconfig/iptables for line :INPUT ACCEPT [0:0]">
			<ind-def:object object_ref="oval:gov.nist.usgcb.rhel:obj:2014742"/>
		</ind-def:textfilecontent54_test>
		<lin-def:rpminfo_test check_existence="all_exist" comment="check to see if syslog is installed" check="all" version="1" id="oval:gov.nist.usgcb.rhel:tst:201480">
			<lin-def:object object_ref="oval:gov.nist.usgcb.rhel:obj:201480"/>
		</lin-def:rpminfo_test>
		<unix-def:runlevel_test check_existence="all_exist" id="oval:gov.nist.usgcb.rhel:tst:201482" version="2" check="all" comment="Runlevel test">
			<unix-def:object object_ref="oval:gov.nist.usgcb.rhel:obj:201482"/>
			<unix-def:state state_ref="oval:gov.nist.usgcb.rhel:ste:20008"/>
		</unix-def:runlevel_test>
		<unix-def:runlevel_test check_existence="all_exist" id="oval:gov.nist.usgcb.rhel:tst:201483" version="2" check="all" comment="Runlevel test">
			<unix-def:object object_ref="oval:gov.nist.usgcb.rhel:obj:201483"/>
			<unix-def:state state_ref="oval:gov.nist.usgcb.rhel:ste:20008"/>
		</unix-def:runlevel_test>
		<unix-def:runlevel_test check_existence="all_exist" id="oval:gov.nist.usgcb.rhel:tst:201484" version="2" check="all" comment="Runlevel test">
			<unix-def:object object_ref="oval:gov.nist.usgcb.rhel:obj:201484"/>
			<unix-def:state state_ref="oval:gov.nist.usgcb.rhel:ste:20008"/>
		</unix-def:runlevel_test>
		<unix-def:runlevel_test check_existence="all_exist" id="oval:gov.nist.usgcb.rhel:tst:201485" version="2" check="all" comment="Runlevel test">
			<unix-def:object object_ref="oval:gov.nist.usgcb.rhel:obj:201485"/>
			<unix-def:state state_ref="oval:gov.nist.usgcb.rhel:ste:20008"/>
		</unix-def:runlevel_test>
		<ind-def:unknown_test id="oval:gov.nist.usgcb.rhel:tst:20149" check="all" version="1" comment="use extended content to evaluated this test"/>
		<ind-def:unknown_test id="oval:gov.nist.usgcb.rhel:tst:20150" check="all" version="1" comment="use extended content to evaluated this test"/>
		<ind-def:unknown_test id="oval:gov.nist.usgcb.rhel:tst:20151" check="all" version="1" comment="use extended content to evaluated this test"/>
		<ind-def:textfilecontent54_test check_existence="all_exist" id="oval:gov.nist.usgcb.rhel:tst:20152" version="1" check="all" comment="Tests the value of the \*\.\*[\s]+@ setting in the /etc/syslog.conf file">
			<ind-def:object object_ref="oval:gov.nist.usgcb.rhel:obj:20152"/>
		</ind-def:textfilecontent54_test>
		<ind-def:textfilecontent54_test check_existence="none_exist" id="oval:gov.nist.usgcb.rhel:tst:20153" version="1" check="all" comment="Ensure that the /etc/rsyslog.conf does not contain $InputTCPServerRun | $InputUDPServerRun | $InputRELPServerRun">
			<ind-def:object object_ref="oval:gov.nist.usgcb.rhel:obj:20153"/>
		</ind-def:textfilecontent54_test>
		<ind-def:unknown_test id="oval:gov.nist.usgcb.rhel:tst:20154" check="all" version="1" comment="use extended content to evaluated this test"/>
		<unix-def:runlevel_test check_existence="all_exist" id="oval:gov.nist.usgcb.rhel:tst:201562" version="2" check="all" comment="Runlevel test">
			<unix-def:object object_ref="oval:gov.nist.usgcb.rhel:obj:201562"/>
			<unix-def:state state_ref="oval:gov.nist.usgcb.rhel:ste:20008"/>
		</unix-def:runlevel_test>
		<unix-def:runlevel_test check_existence="all_exist" id="oval:gov.nist.usgcb.rhel:tst:201563" version="2" check="all" comment="Runlevel test">
			<unix-def:object object_ref="oval:gov.nist.usgcb.rhel:obj:201563"/>
			<unix-def:state state_ref="oval:gov.nist.usgcb.rhel:ste:20008"/>
		</unix-def:runlevel_test>
		<unix-def:runlevel_test check_existence="all_exist" id="oval:gov.nist.usgcb.rhel:tst:201564" version="2" check="all" comment="Runlevel test">
			<unix-def:object object_ref="oval:gov.nist.usgcb.rhel:obj:201564"/>
			<unix-def:state state_ref="oval:gov.nist.usgcb.rhel:ste:20008"/>
		</unix-def:runlevel_test>
		<unix-def:runlevel_test check_existence="all_exist" id="oval:gov.nist.usgcb.rhel:tst:201565" version="2" check="all" comment="Runlevel test">
			<unix-def:object object_ref="oval:gov.nist.usgcb.rhel:obj:201565"/>
			<unix-def:state state_ref="oval:gov.nist.usgcb.rhel:ste:20008"/>
		</unix-def:runlevel_test>
		<ind-def:textfilecontent54_test check_existence="at_least_one_exists" id="oval:gov.nist.usgcb.rhel:tst:20157" version="1" check="all" comment="check for audit=1 in /boot/grub/grub.conf">
			<ind-def:object object_ref="oval:gov.nist.usgcb.rhel:obj:20157"/>
		</ind-def:textfilecontent54_test>
		<ind-def:textfilecontent54_test check_existence="at_least_one_exists" id="oval:gov.nist.usgcb.rhel:tst:2015750" version="1" check="all" comment="/etc/audit/audit.rules contains -a always,exit -F arch=b32 -S adjtimex -S settimeofday -S stime -k time-change">
			<ind-def:object object_ref="oval:gov.nist.usgcb.rhel:obj:2015750"/>
		</ind-def:textfilecontent54_test>
		<ind-def:textfilecontent54_test check_existence="at_least_one_exists" id="oval:gov.nist.usgcb.rhel:tst:2015751" version="1" check="all" comment="/etc/audit/audit.rules contains -a always,exit -F arch=b32 -S clock_settime -F a0=0 -k time-change">
			<ind-def:object object_ref="oval:gov.nist.usgcb.rhel:obj:2015751"/>
		</ind-def:textfilecontent54_test>
		<ind-def:textfilecontent54_test check_existence="at_least_one_exists" id="oval:gov.nist.usgcb.rhel:tst:2015752" version="1" check="all" comment="/etc/audit/audit.rules contains -a always,exit -F arch=b64 -S adjtimex -S settimeofday -S stime -k time-change">
			<ind-def:object object_ref="oval:gov.nist.usgcb.rhel:obj:2015752"/>
		</ind-def:textfilecontent54_test>
		<ind-def:textfilecontent54_test check_existence="at_least_one_exists" id="oval:gov.nist.usgcb.rhel:tst:2015753" version="1" check="all" comment="/etc/audit/audit.rules contains -a always,exit -F arch=b64 -S clock_settime -F a0=0 -k time-change">
			<ind-def:object object_ref="oval:gov.nist.usgcb.rhel:obj:2015753"/>
		</ind-def:textfilecontent54_test>
		<ind-def:textfilecontent54_test check_existence="at_least_one_exists" id="oval:gov.nist.usgcb.rhel:tst:2015754" version="1" check="all" comment="/etc/audit/audit.rules contains -w /etc/localtime -p wa -k time-change">
			<ind-def:object object_ref="oval:gov.nist.usgcb.rhel:obj:2015754"/>
		</ind-def:textfilecontent54_test>
		<ind-def:textfilecontent54_test check_existence="at_least_one_exists" id="oval:gov.nist.usgcb.rhel:tst:201580" version="1" check="all" comment="/etc/audit/audit.rules contains -w /etc/group -p wa -k identity">
			<ind-def:object object_ref="oval:gov.nist.usgcb.rhel:obj:201580"/>
		</ind-def:textfilecontent54_test>
		<ind-def:textfilecontent54_test check_existence="at_least_one_exists" id="oval:gov.nist.usgcb.rhel:tst:201581" version="1" check="all" comment="/etc/audit/audit.rules contains -w /etc/passwd -p wa -k identity">
			<ind-def:object object_ref="oval:gov.nist.usgcb.rhel:obj:201581"/>
		</ind-def:textfilecontent54_test>
		<ind-def:textfilecontent54_test check_existence="at_least_one_exists" id="oval:gov.nist.usgcb.rhel:tst:201582" version="1" check="all" comment="/etc/audit/audit.rules contains -w /etc/gshadow -p wa -k identity">
			<ind-def:object object_ref="oval:gov.nist.usgcb.rhel:obj:201582"/>
		</ind-def:textfilecontent54_test>
		<ind-def:textfilecontent54_test check_existence="at_least_one_exists" id="oval:gov.nist.usgcb.rhel:tst:201583" version="1" check="all" comment="/etc/audit/audit.rules contains -w /etc/shadow -p wa -k identity">
			<ind-def:object object_ref="oval:gov.nist.usgcb.rhel:obj:201583"/>
		</ind-def:textfilecontent54_test>
		<ind-def:textfilecontent54_test check_existence="at_least_one_exists" id="oval:gov.nist.usgcb.rhel:tst:201584" version="1" check="all" comment="/etc/audit/audit.rules contains -w /etc/security/opasswd -p wa -k identity">
			<ind-def:object object_ref="oval:gov.nist.usgcb.rhel:obj:201584"/>
		</ind-def:textfilecontent54_test>
		<ind-def:textfilecontent54_test check_existence="at_least_one_exists" id="oval:gov.nist.usgcb.rhel:tst:201590" version="1" check="all" comment="/etc/audit/audit.rules contains -a exit,always -F arch=b32 -S sethostname -S setdomainname -k system-locale">
			<ind-def:object object_ref="oval:gov.nist.usgcb.rhel:obj:201590"/>
		</ind-def:textfilecontent54_test>
		<ind-def:textfilecontent54_test check_existence="at_least_one_exists" id="oval:gov.nist.usgcb.rhel:tst:201591" version="1" check="all" comment="/etc/audit/audit.rules contains -a exit,always -F arch=b64 -S sethostname -S setdomainname -k system-locale">
			<ind-def:object object_ref="oval:gov.nist.usgcb.rhel:obj:201591"/>
		</ind-def:textfilecontent54_test>
		<ind-def:textfilecontent54_test check_existence="at_least_one_exists" id="oval:gov.nist.usgcb.rhel:tst:201592" version="1" check="all" comment="/etc/audit/audit.rules contains -w /etc/issue -p wa -k system-locale">
			<ind-def:object object_ref="oval:gov.nist.usgcb.rhel:obj:201592"/>
		</ind-def:textfilecontent54_test>
		<ind-def:textfilecontent54_test check_existence="at_least_one_exists" id="oval:gov.nist.usgcb.rhel:tst:201593" version="1" check="all" comment="/etc/audit/audit.rules contains -w /etc/issue.net -p wa -k system-locale">
			<ind-def:object object_ref="oval:gov.nist.usgcb.rhel:obj:201593"/>
		</ind-def:textfilecontent54_test>
		<ind-def:textfilecontent54_test check_existence="at_least_one_exists" id="oval:gov.nist.usgcb.rhel:tst:201594" version="1" check="all" comment="/etc/audit/audit.rules contains -w /etc/hosts -p wa -k system-locale">
			<ind-def:object object_ref="oval:gov.nist.usgcb.rhel:obj:201594"/>
		</ind-def:textfilecontent54_test>
		<ind-def:textfilecontent54_test check_existence="at_least_one_exists" id="oval:gov.nist.usgcb.rhel:tst:201595" version="1" check="all" comment="/etc/audit/audit.rules contains -w /etc/sysconfig/network -p wa -k system-locale">
			<ind-def:object object_ref="oval:gov.nist.usgcb.rhel:obj:201595"/>
		</ind-def:textfilecontent54_test>
		<ind-def:textfilecontent54_test check_existence="at_least_one_exists" id="oval:gov.nist.usgcb.rhel:tst:20160" version="1" check="all" comment="/etc/audit/audit.rules contains -w /etc/selinux/ -p wa -k MAC-policy">
			<ind-def:object object_ref="oval:gov.nist.usgcb.rhel:obj:20160"/>
		</ind-def:textfilecontent54_test>
		<ind-def:textfilecontent54_test check_existence="at_least_one_exists" id="oval:gov.nist.usgcb.rhel:tst:201610" version="1" check="all" comment="/etc/audit/audit.rules contains -w /var/log/faillog -p wa -k logins">
			<ind-def:object object_ref="oval:gov.nist.usgcb.rhel:obj:201610"/>
		</ind-def:textfilecontent54_test>
		<ind-def:textfilecontent54_test check_existence="at_least_one_exists" id="oval:gov.nist.usgcb.rhel:tst:201611" version="1" check="all" comment="/etc/audit/audit.rules contains -w /var/log/lastlog -p wa -k logins">
			<ind-def:object object_ref="oval:gov.nist.usgcb.rhel:obj:201611"/>
		</ind-def:textfilecontent54_test>
		<ind-def:textfilecontent54_test check_existence="at_least_one_exists" id="oval:gov.nist.usgcb.rhel:tst:201620" version="1" check="all" comment="/etc/audit/audit.rules contains -w /var/run/utmp -p wa -k session">
			<ind-def:object object_ref="oval:gov.nist.usgcb.rhel:obj:201620"/>
		</ind-def:textfilecontent54_test>
		<ind-def:textfilecontent54_test check_existence="at_least_one_exists" id="oval:gov.nist.usgcb.rhel:tst:201621" version="1" check="all" comment="/etc/audit/audit.rules contains -w /var/log/btmp -p wa -k session">
			<ind-def:object object_ref="oval:gov.nist.usgcb.rhel:obj:201621"/>
		</ind-def:textfilecontent54_test>
		<ind-def:textfilecontent54_test check_existence="at_least_one_exists" id="oval:gov.nist.usgcb.rhel:tst:201622" version="1" check="all" comment="/etc/audit/audit.rules contains -w /var/log/wtmp -p wa -k session">
			<ind-def:object object_ref="oval:gov.nist.usgcb.rhel:obj:201622"/>
		</ind-def:textfilecontent54_test>
		<ind-def:textfilecontent54_test check_existence="at_least_one_exists" id="oval:gov.nist.usgcb.rhel:tst:201630" version="1" check="all" comment="/etc/audit/audit.rules contains -a always,exit -F arch=ARCH -S chmod -S fchmod -S fchmodat -F auid>=500 -F auid!=4294967295 -k perm_mod">
			<ind-def:object object_ref="oval:gov.nist.usgcb.rhel:obj:201630"/>
		</ind-def:textfilecontent54_test>
		<ind-def:textfilecontent54_test check_existence="at_least_one_exists" id="oval:gov.nist.usgcb.rhel:tst:201631" version="1" check="all" comment="/etc/audit/audit.rules contains -a always,exit -F arch=ARCH -S chown -S fchown -S fchownat -S lchown -F auid>=500 -F auid!=4294967295 -k perm_mod">
			<ind-def:object object_ref="oval:gov.nist.usgcb.rhel:obj:201631"/>
		</ind-def:textfilecontent54_test>
		<ind-def:textfilecontent54_test check_existence="at_least_one_exists" id="oval:gov.nist.usgcb.rhel:tst:201632" version="1" check="all" comment="/etc/audit/audit.rules contains -a always,exit -F arch=ARCH -S setxattr -S lsetxattr -S fsetxattr -S removexattr -S lremovexattr -S fremovexattr -F auid>=500 -F auid!=4294967295 -k perm_mod">
			<ind-def:object object_ref="oval:gov.nist.usgcb.rhel:obj:201632"/>
		</ind-def:textfilecontent54_test>
		<ind-def:textfilecontent54_test check_existence="at_least_one_exists" id="oval:gov.nist.usgcb.rhel:tst:201633" version="1" check="all" comment="/etc/audit/audit.rules contains -a always,exit -F arch=ARCH -S chmod -S fchmod -S fchmodat -F auid>=500 -F auid!=4294967295 -k perm_mod">
			<ind-def:object object_ref="oval:gov.nist.usgcb.rhel:obj:201633"/>
		</ind-def:textfilecontent54_test>
		<ind-def:textfilecontent54_test check_existence="at_least_one_exists" id="oval:gov.nist.usgcb.rhel:tst:201634" version="1" check="all" comment="/etc/audit/audit.rules contains -a always,exit -F arch=ARCH -S chown -S fchown -S fchownat -S lchown -F auid>=500 -F auid!=4294967295 -k perm_mod">
			<ind-def:object object_ref="oval:gov.nist.usgcb.rhel:obj:201634"/>
		</ind-def:textfilecontent54_test>
		<ind-def:textfilecontent54_test check_existence="at_least_one_exists" id="oval:gov.nist.usgcb.rhel:tst:201635" version="1" check="all" comment="/etc/audit/audit.rules contains -a always,exit -F arch=ARCH -S setxattr -S lsetxattr -S fsetxattr -S removexattr -S lremovexattr -S fremovexattr -F auid>=500 -F auid!=4294967295 -k perm_mod">
			<ind-def:object object_ref="oval:gov.nist.usgcb.rhel:obj:201635"/>
		</ind-def:textfilecontent54_test>
		<ind-def:textfilecontent54_test check_existence="at_least_one_exists" id="oval:gov.nist.usgcb.rhel:tst:201640" version="1" check="all" comment="/etc/audit/audit.rules contains -a always,exit -F arch=b32 -S creat -S open -S openat -S truncate -S ftruncate -F exit=-EACCES -F auid>=500 -F auid!=4294967295 -k access">
			<ind-def:object object_ref="oval:gov.nist.usgcb.rhel:obj:201640"/>
		</ind-def:textfilecontent54_test>
		<ind-def:textfilecontent54_test check_existence="at_least_one_exists" id="oval:gov.nist.usgcb.rhel:tst:201641" version="1" check="all" comment="/etc/audit/audit.rules contains -a always,exit -F arch=b32 -S creat -S open -S openat -S truncate -S ftruncate -F exit=-EPERM -F auid>=500 -F auid!=4294967295 -k access">
			<ind-def:object object_ref="oval:gov.nist.usgcb.rhel:obj:201641"/>
		</ind-def:textfilecontent54_test>
		<ind-def:textfilecontent54_test check_existence="at_least_one_exists" id="oval:gov.nist.usgcb.rhel:tst:201642" version="1" check="all" comment="/etc/audit/audit.rules contains -a always,exit -F arch=b64 -S creat -S open -S openat -S truncate -S ftruncate -F exit=-EACCES -F auid>=500 -F auid!=4294967295 -k access">
			<ind-def:object object_ref="oval:gov.nist.usgcb.rhel:obj:201642"/>
		</ind-def:textfilecontent54_test>
		<ind-def:textfilecontent54_test check_existence="at_least_one_exists" id="oval:gov.nist.usgcb.rhel:tst:201643" version="1" check="all" comment="/etc/audit/audit.rules contains -a always,exit -F arch=b64 -S creat -S open -S openat -S truncate -S ftruncate -F exit=-EPERM -F auid>=500 -F auid!=4294967295 -k access">
			<ind-def:object object_ref="oval:gov.nist.usgcb.rhel:obj:201643"/>
		</ind-def:textfilecontent54_test>
		<ind-def:textfilecontent54_test check_existence="at_least_one_exists" id="oval:gov.nist.usgcb.rhel:tst:20165" version="1" check="all" comment="/etc/audit/audit.rules contains -a always,exit -F path=/bin/ping -F perm=x -F auid>=500 -F auid!=4294967295 -k privileged">
			<ind-def:object object_ref="oval:gov.nist.usgcb.rhel:obj:20165"/>
		</ind-def:textfilecontent54_test>
		<ind-def:textfilecontent54_test check_existence="at_least_one_exists" id="oval:gov.nist.usgcb.rhel:tst:201660" version="1" check="all" comment="/etc/audit/audit.rules contains -a always,exit -F arch=ARCH -S mount -F auid>=500 -F auid!=4294967295 -k export">
			<ind-def:object object_ref="oval:gov.nist.usgcb.rhel:obj:201660"/>
		</ind-def:textfilecontent54_test>
		<ind-def:textfilecontent54_test check_existence="at_least_one_exists" id="oval:gov.nist.usgcb.rhel:tst:201661" version="1" check="all" comment="/etc/audit/audit.rules contains -a always,exit -F arch=ARCH -S mount -F auid>=500 -F auid!=4294967295 -k export">
			<ind-def:object object_ref="oval:gov.nist.usgcb.rhel:obj:201661"/>
		</ind-def:textfilecontent54_test>
		<unix-def:uname_test id="oval:gov.nist.usgcb.rhel:tst:201670" version="1" check="none satisfy" comment="check architecture does not run 32-bit applications">
			<unix-def:object object_ref="oval:gov.nist.usgcb.rhel:obj:201670"/>
			<unix-def:state state_ref="oval:gov.nist.usgcb.rhel:ste:201670"/>
		</unix-def:uname_test>
		<ind-def:textfilecontent54_test check_existence="at_least_one_exists" id="oval:gov.nist.usgcb.rhel:tst:201671" version="1" check="all" comment="/etc/audit/audit.rules contains -a always,exit -F arch=b32 -S unlink -S unlinkat -S rename -S renameat -F auid>=500 -F auid!=4294967295 -k delete">
			<ind-def:object object_ref="oval:gov.nist.usgcb.rhel:obj:201671"/>
		</ind-def:textfilecontent54_test>
		<unix-def:uname_test id="oval:gov.nist.usgcb.rhel:tst:201672" version="1" check="none satisfy" comment="check architecture does not run 64-bit applications">
			<unix-def:object object_ref="oval:gov.nist.usgcb.rhel:obj:201670"/>
			<unix-def:state state_ref="oval:gov.nist.usgcb.rhel:ste:201672"/>
		</unix-def:uname_test>
		<ind-def:textfilecontent54_test check_existence="at_least_one_exists" id="oval:gov.nist.usgcb.rhel:tst:201673" version="1" check="all" comment="/etc/audit/audit.rules contains -a always,exit -F arch=b64 -S unlink -S unlinkat -S rename -S renameat -F auid>=500 -F auid!=4294967295 -k delete">
			<ind-def:object object_ref="oval:gov.nist.usgcb.rhel:obj:201673"/>
		</ind-def:textfilecontent54_test>
		<ind-def:textfilecontent54_test check_existence="at_least_one_exists" id="oval:gov.nist.usgcb.rhel:tst:20168" version="1" check="all" comment="/etc/audit/audit.rules contains -w /etc/sudoers -p wa -k actions">
			<ind-def:object object_ref="oval:gov.nist.usgcb.rhel:obj:20168"/>
		</ind-def:textfilecontent54_test>
		<ind-def:textfilecontent54_test check_existence="at_least_one_exists" id="oval:gov.nist.usgcb.rhel:tst:2016851" version="1" check="all" comment="/etc/audit/audit.rules contains -w /sbin/insmod -p x -k modules">
			<ind-def:object object_ref="oval:gov.nist.usgcb.rhel:obj:2016851"/>
		</ind-def:textfilecontent54_test>
		<ind-def:textfilecontent54_test check_existence="at_least_one_exists" id="oval:gov.nist.usgcb.rhel:tst:2016852" version="1" check="all" comment="/etc/audit/audit.rules contains -w /sbin/rmmod -p x -k modules">
			<ind-def:object object_ref="oval:gov.nist.usgcb.rhel:obj:2016852"/>
		</ind-def:textfilecontent54_test>
		<ind-def:textfilecontent54_test check_existence="at_least_one_exists" id="oval:gov.nist.usgcb.rhel:tst:2016853" version="1" check="all" comment="/etc/audit/audit.rules contains -w /sbin/modprobe -p x -k modules">
			<ind-def:object object_ref="oval:gov.nist.usgcb.rhel:obj:2016853"/>
		</ind-def:textfilecontent54_test>
		<ind-def:textfilecontent54_test check_existence="at_least_one_exists" id="oval:gov.nist.usgcb.rhel:tst:2016854" version="1" check="all" comment="/etc/audit/audit.rules contains -a always,exit -S init_module -S delete_module -k modules">
			<ind-def:object object_ref="oval:gov.nist.usgcb.rhel:obj:2016854"/>
		</ind-def:textfilecontent54_test>
		<ind-def:textfilecontent54_test check_existence="at_least_one_exists" id="oval:gov.nist.usgcb.rhel:tst:20169" version="1" check="all" comment="look in /etc/audit/audit.rules for -e 2">
			<ind-def:object object_ref="oval:gov.nist.usgcb.rhel:obj:20169"/>
		</ind-def:textfilecontent54_test>
		<unix-def:runlevel_test check_existence="any_exist" id="oval:gov.nist.usgcb.rhel:tst:20170" version="2" check="all" comment="Runlevel test">
			<unix-def:object object_ref="oval:gov.nist.usgcb.rhel:obj:20170"/>
			<unix-def:state state_ref="oval:gov.nist.usgcb.rhel:ste:20007"/>
		</unix-def:runlevel_test>
		<unix-def:runlevel_test check_existence="any_exist" id="oval:gov.nist.usgcb.rhel:tst:201701" version="2" check="all" comment="Runlevel test">
			<unix-def:object object_ref="oval:gov.nist.usgcb.rhel:obj:201701"/>
			<unix-def:state state_ref="oval:gov.nist.usgcb.rhel:ste:20007"/>
		</unix-def:runlevel_test>
		<unix-def:runlevel_test check_existence="any_exist" id="oval:gov.nist.usgcb.rhel:tst:201702" version="2" check="all" comment="Runlevel test">
			<unix-def:object object_ref="oval:gov.nist.usgcb.rhel:obj:201702"/>
			<unix-def:state state_ref="oval:gov.nist.usgcb.rhel:ste:20007"/>
		</unix-def:runlevel_test>
		<unix-def:runlevel_test check_existence="any_exist" id="oval:gov.nist.usgcb.rhel:tst:201703" version="2" check="all" comment="Runlevel test">
			<unix-def:object object_ref="oval:gov.nist.usgcb.rhel:obj:201703"/>
			<unix-def:state state_ref="oval:gov.nist.usgcb.rhel:ste:20007"/>
		</unix-def:runlevel_test>
		<unix-def:runlevel_test check_existence="any_exist" id="oval:gov.nist.usgcb.rhel:tst:201704" version="2" check="all" comment="Runlevel test">
			<unix-def:object object_ref="oval:gov.nist.usgcb.rhel:obj:201704"/>
			<unix-def:state state_ref="oval:gov.nist.usgcb.rhel:ste:20007"/>
		</unix-def:runlevel_test>
		<unix-def:runlevel_test check_existence="any_exist" id="oval:gov.nist.usgcb.rhel:tst:201705" version="2" check="all" comment="Runlevel test">
			<unix-def:object object_ref="oval:gov.nist.usgcb.rhel:obj:201705"/>
			<unix-def:state state_ref="oval:gov.nist.usgcb.rhel:ste:20007"/>
		</unix-def:runlevel_test>
		<unix-def:runlevel_test check_existence="any_exist" id="oval:gov.nist.usgcb.rhel:tst:201706" version="2" check="all" comment="Runlevel test">
			<unix-def:object object_ref="oval:gov.nist.usgcb.rhel:obj:201706"/>
			<unix-def:state state_ref="oval:gov.nist.usgcb.rhel:ste:20007"/>
		</unix-def:runlevel_test>
		<unix-def:runlevel_test check_existence="any_exist" id="oval:gov.nist.usgcb.rhel:tst:20171" version="2" check="all" comment="Runlevel test">
			<unix-def:object object_ref="oval:gov.nist.usgcb.rhel:obj:20171"/>
			<unix-def:state state_ref="oval:gov.nist.usgcb.rhel:ste:20007"/>
		</unix-def:runlevel_test>
		<unix-def:runlevel_test check_existence="any_exist" id="oval:gov.nist.usgcb.rhel:tst:201711" version="2" check="all" comment="Runlevel test">
			<unix-def:object object_ref="oval:gov.nist.usgcb.rhel:obj:201711"/>
		</unix-def:runlevel_test>
		<unix-def:runlevel_test check_existence="any_exist" id="oval:gov.nist.usgcb.rhel:tst:201712" version="2" check="all" comment="Runlevel test">
			<unix-def:object object_ref="oval:gov.nist.usgcb.rhel:obj:201712"/>
			<unix-def:state state_ref="oval:gov.nist.usgcb.rhel:ste:20007"/>
		</unix-def:runlevel_test>
		<unix-def:runlevel_test check_existence="any_exist" id="oval:gov.nist.usgcb.rhel:tst:201713" version="2" check="all" comment="Runlevel test">
			<unix-def:object object_ref="oval:gov.nist.usgcb.rhel:obj:201713"/>
			<unix-def:state state_ref="oval:gov.nist.usgcb.rhel:ste:20007"/>
		</unix-def:runlevel_test>
		<unix-def:runlevel_test check_existence="any_exist" id="oval:gov.nist.usgcb.rhel:tst:201714" version="2" check="all" comment="Runlevel test">
			<unix-def:object object_ref="oval:gov.nist.usgcb.rhel:obj:201714"/>
			<unix-def:state state_ref="oval:gov.nist.usgcb.rhel:ste:20007"/>
		</unix-def:runlevel_test>
		<unix-def:runlevel_test check_existence="any_exist" id="oval:gov.nist.usgcb.rhel:tst:201715" version="2" check="all" comment="Runlevel test">
			<unix-def:object object_ref="oval:gov.nist.usgcb.rhel:obj:201715"/>
			<unix-def:state state_ref="oval:gov.nist.usgcb.rhel:ste:20007"/>
		</unix-def:runlevel_test>
		<unix-def:runlevel_test check_existence="any_exist" id="oval:gov.nist.usgcb.rhel:tst:201716" version="2" check="all" comment="Runlevel test">
			<unix-def:object object_ref="oval:gov.nist.usgcb.rhel:obj:201716"/>
			<unix-def:state state_ref="oval:gov.nist.usgcb.rhel:ste:20007"/>
		</unix-def:runlevel_test>
		<lin-def:rpminfo_test check_existence="none_exist" id="oval:gov.nist.usgcb.rhel:tst:20172" version="1" check="all" comment="The inetd package should be installed or not as appropriate">
			<lin-def:object object_ref="oval:gov.nist.usgcb.rhel:obj:20172"/>
		</lin-def:rpminfo_test>
		<lin-def:rpminfo_test check_existence="none_exist" id="oval:gov.nist.usgcb.rhel:tst:20173" version="1" check="all" comment="The xinetd package should be installed or not as appropriate">
			<lin-def:object object_ref="oval:gov.nist.usgcb.rhel:obj:20173"/>
		</lin-def:rpminfo_test>
		<lin-def:rpminfo_test check_existence="none_exist" id="oval:gov.nist.usgcb.rhel:tst:20174" version="1" check="all" comment="The telnet-server package should be installed or not as appropriate">
			<lin-def:object object_ref="oval:gov.nist.usgcb.rhel:obj:20174"/>
		</lin-def:rpminfo_test>
		<lin-def:rpminfo_test check_existence="none_exist" id="oval:gov.nist.usgcb.rhel:tst:20177" version="1" check="all" comment="The rsh-server package should be installed or not as appropriate">
			<lin-def:object object_ref="oval:gov.nist.usgcb.rhel:obj:20177"/>
		</lin-def:rpminfo_test>
		<lin-def:rpminfo_test check_existence="none_exist" id="oval:gov.nist.usgcb.rhel:tst:20180" version="1" check="all" comment="The ypserv package should be installed or not as appropriate">
			<lin-def:object object_ref="oval:gov.nist.usgcb.rhel:obj:20180"/>
		</lin-def:rpminfo_test>
		<unix-def:runlevel_test check_existence="any_exist" id="oval:gov.nist.usgcb.rhel:tst:20181" version="2" check="all" comment="Runlevel test">
			<unix-def:object object_ref="oval:gov.nist.usgcb.rhel:obj:20181"/>
			<unix-def:state state_ref="oval:gov.nist.usgcb.rhel:ste:20007"/>
		</unix-def:runlevel_test>
		<unix-def:runlevel_test check_existence="any_exist" id="oval:gov.nist.usgcb.rhel:tst:201811" version="2" check="all" comment="Runlevel test">
			<unix-def:object object_ref="oval:gov.nist.usgcb.rhel:obj:201811"/>
			<unix-def:state state_ref="oval:gov.nist.usgcb.rhel:ste:20007"/>
		</unix-def:runlevel_test>
		<unix-def:runlevel_test check_existence="any_exist" id="oval:gov.nist.usgcb.rhel:tst:201812" version="2" check="all" comment="Runlevel test">
			<unix-def:object object_ref="oval:gov.nist.usgcb.rhel:obj:201812"/>
			<unix-def:state state_ref="oval:gov.nist.usgcb.rhel:ste:20007"/>
		</unix-def:runlevel_test>
		<unix-def:runlevel_test check_existence="any_exist" id="oval:gov.nist.usgcb.rhel:tst:201813" version="2" check="all" comment="Runlevel test">
			<unix-def:object object_ref="oval:gov.nist.usgcb.rhel:obj:201813"/>
			<unix-def:state state_ref="oval:gov.nist.usgcb.rhel:ste:20007"/>
		</unix-def:runlevel_test>
		<unix-def:runlevel_test check_existence="any_exist" id="oval:gov.nist.usgcb.rhel:tst:201814" version="2" check="all" comment="Runlevel test">
			<unix-def:object object_ref="oval:gov.nist.usgcb.rhel:obj:201814"/>
			<unix-def:state state_ref="oval:gov.nist.usgcb.rhel:ste:20007"/>
		</unix-def:runlevel_test>
		<unix-def:runlevel_test check_existence="any_exist" id="oval:gov.nist.usgcb.rhel:tst:201815" version="2" check="all" comment="Runlevel test">
			<unix-def:object object_ref="oval:gov.nist.usgcb.rhel:obj:201815"/>
			<unix-def:state state_ref="oval:gov.nist.usgcb.rhel:ste:20007"/>
		</unix-def:runlevel_test>
		<unix-def:runlevel_test check_existence="any_exist" id="oval:gov.nist.usgcb.rhel:tst:201816" version="2" check="all" comment="Runlevel test">
			<unix-def:object object_ref="oval:gov.nist.usgcb.rhel:obj:201816"/>
			<unix-def:state state_ref="oval:gov.nist.usgcb.rhel:ste:20007"/>
		</unix-def:runlevel_test>
		<lin-def:rpminfo_test check_existence="none_exist" id="oval:gov.nist.usgcb.rhel:tst:20182" version="1" check="all" comment="The tftp-server package should be installed or not as appropriate">
			<lin-def:object object_ref="oval:gov.nist.usgcb.rhel:obj:20182"/>
		</lin-def:rpminfo_test>
		<unix-def:runlevel_test check_existence="any_exist" id="oval:gov.nist.usgcb.rhel:tst:201825" version="2" check="all" comment="Runlevel test">
			<unix-def:object object_ref="oval:gov.nist.usgcb.rhel:obj:201825"/>
			<unix-def:state state_ref="oval:gov.nist.usgcb.rhel:ste:20007"/>
		</unix-def:runlevel_test>
		<unix-def:runlevel_test check_existence="any_exist" id="oval:gov.nist.usgcb.rhel:tst:2018251" version="2" check="all" comment="Runlevel test">
			<unix-def:object object_ref="oval:gov.nist.usgcb.rhel:obj:2018251"/>
			<unix-def:state state_ref="oval:gov.nist.usgcb.rhel:ste:20007"/>
		</unix-def:runlevel_test>
		<unix-def:runlevel_test check_existence="any_exist" id="oval:gov.nist.usgcb.rhel:tst:2018252" version="2" check="all" comment="Runlevel test">
			<unix-def:object object_ref="oval:gov.nist.usgcb.rhel:obj:2018252"/>
			<unix-def:state state_ref="oval:gov.nist.usgcb.rhel:ste:20007"/>
		</unix-def:runlevel_test>
		<unix-def:runlevel_test check_existence="any_exist" id="oval:gov.nist.usgcb.rhel:tst:2018253" version="2" check="all" comment="Runlevel test">
			<unix-def:object object_ref="oval:gov.nist.usgcb.rhel:obj:2018253"/>
			<unix-def:state state_ref="oval:gov.nist.usgcb.rhel:ste:20007"/>
		</unix-def:runlevel_test>
		<unix-def:runlevel_test check_existence="any_exist" id="oval:gov.nist.usgcb.rhel:tst:2018254" version="2" check="all" comment="Runlevel test">
			<unix-def:object object_ref="oval:gov.nist.usgcb.rhel:obj:2018254"/>
			<unix-def:state state_ref="oval:gov.nist.usgcb.rhel:ste:20007"/>
		</unix-def:runlevel_test>
		<unix-def:runlevel_test check_existence="any_exist" id="oval:gov.nist.usgcb.rhel:tst:2018255" version="2" check="all" comment="Runlevel test">
			<unix-def:object object_ref="oval:gov.nist.usgcb.rhel:obj:2018255"/>
			<unix-def:state state_ref="oval:gov.nist.usgcb.rhel:ste:20007"/>
		</unix-def:runlevel_test>
		<unix-def:runlevel_test check_existence="any_exist" id="oval:gov.nist.usgcb.rhel:tst:2018256" version="2" check="all" comment="Runlevel test">
			<unix-def:object object_ref="oval:gov.nist.usgcb.rhel:obj:2018256"/>
			<unix-def:state state_ref="oval:gov.nist.usgcb.rhel:ste:20007"/>
		</unix-def:runlevel_test>
		<unix-def:runlevel_test check_existence="any_exist" id="oval:gov.nist.usgcb.rhel:tst:20186" version="2" check="all" comment="Runlevel test">
			<unix-def:object object_ref="oval:gov.nist.usgcb.rhel:obj:20186"/>
			<unix-def:state state_ref="oval:gov.nist.usgcb.rhel:ste:20007"/>
		</unix-def:runlevel_test>
		<unix-def:runlevel_test check_existence="any_exist" id="oval:gov.nist.usgcb.rhel:tst:201861" version="2" check="all" comment="Runlevel test">
			<unix-def:object object_ref="oval:gov.nist.usgcb.rhel:obj:201861"/>
			<unix-def:state state_ref="oval:gov.nist.usgcb.rhel:ste:20007"/>
		</unix-def:runlevel_test>
		<unix-def:runlevel_test check_existence="any_exist" id="oval:gov.nist.usgcb.rhel:tst:201862" version="2" check="all" comment="Runlevel test">
			<unix-def:object object_ref="oval:gov.nist.usgcb.rhel:obj:201862"/>
			<unix-def:state state_ref="oval:gov.nist.usgcb.rhel:ste:20007"/>
		</unix-def:runlevel_test>
		<unix-def:runlevel_test check_existence="any_exist" id="oval:gov.nist.usgcb.rhel:tst:201863" version="2" check="all" comment="Runlevel test">
			<unix-def:object object_ref="oval:gov.nist.usgcb.rhel:obj:201863"/>
		</unix-def:runlevel_test>
		<unix-def:runlevel_test check_existence="any_exist" id="oval:gov.nist.usgcb.rhel:tst:201864" version="2" check="all" comment="Runlevel test">
			<unix-def:object object_ref="oval:gov.nist.usgcb.rhel:obj:201864"/>
			<unix-def:state state_ref="oval:gov.nist.usgcb.rhel:ste:20007"/>
		</unix-def:runlevel_test>
		<unix-def:runlevel_test check_existence="any_exist" id="oval:gov.nist.usgcb.rhel:tst:201865" version="2" check="all" comment="Runlevel test">
			<unix-def:object object_ref="oval:gov.nist.usgcb.rhel:obj:201865"/>
			<unix-def:state state_ref="oval:gov.nist.usgcb.rhel:ste:20007"/>
		</unix-def:runlevel_test>
		<unix-def:runlevel_test check_existence="any_exist" id="oval:gov.nist.usgcb.rhel:tst:201866" version="2" check="all" comment="Runlevel test">
			<unix-def:object object_ref="oval:gov.nist.usgcb.rhel:obj:201866"/>
			<unix-def:state state_ref="oval:gov.nist.usgcb.rhel:ste:20007"/>
		</unix-def:runlevel_test>
		<unix-def:runlevel_test check_existence="any_exist" id="oval:gov.nist.usgcb.rhel:tst:20187" version="2" check="all" comment="Runlevel test">
			<unix-def:object object_ref="oval:gov.nist.usgcb.rhel:obj:20187"/>
			<unix-def:state state_ref="oval:gov.nist.usgcb.rhel:ste:20007"/>
		</unix-def:runlevel_test>
		<unix-def:runlevel_test check_existence="any_exist" id="oval:gov.nist.usgcb.rhel:tst:201871" version="2" check="all" comment="Runlevel test">
			<unix-def:object object_ref="oval:gov.nist.usgcb.rhel:obj:201871"/>
			<unix-def:state state_ref="oval:gov.nist.usgcb.rhel:ste:20007"/>
		</unix-def:runlevel_test>
		<unix-def:runlevel_test check_existence="any_exist" id="oval:gov.nist.usgcb.rhel:tst:201872" version="2" check="all" comment="Runlevel test">
			<unix-def:object object_ref="oval:gov.nist.usgcb.rhel:obj:201872"/>
			<unix-def:state state_ref="oval:gov.nist.usgcb.rhel:ste:20007"/>
		</unix-def:runlevel_test>
		<unix-def:runlevel_test check_existence="any_exist" id="oval:gov.nist.usgcb.rhel:tst:201873" version="2" check="all" comment="Runlevel test">
			<unix-def:object object_ref="oval:gov.nist.usgcb.rhel:obj:201873"/>
			<unix-def:state state_ref="oval:gov.nist.usgcb.rhel:ste:20007"/>
		</unix-def:runlevel_test>
		<unix-def:runlevel_test check_existence="any_exist" id="oval:gov.nist.usgcb.rhel:tst:201874" version="2" check="all" comment="Runlevel test">
			<unix-def:object object_ref="oval:gov.nist.usgcb.rhel:obj:201874"/>
			<unix-def:state state_ref="oval:gov.nist.usgcb.rhel:ste:20007"/>
		</unix-def:runlevel_test>
		<unix-def:runlevel_test check_existence="any_exist" id="oval:gov.nist.usgcb.rhel:tst:201875" version="2" check="all" comment="Runlevel test">
			<unix-def:object object_ref="oval:gov.nist.usgcb.rhel:obj:201875"/>
			<unix-def:state state_ref="oval:gov.nist.usgcb.rhel:ste:20007"/>
		</unix-def:runlevel_test>
		<unix-def:runlevel_test check_existence="any_exist" id="oval:gov.nist.usgcb.rhel:tst:201876" version="2" check="all" comment="Runlevel test">
			<unix-def:object object_ref="oval:gov.nist.usgcb.rhel:obj:201876"/>
			<unix-def:state state_ref="oval:gov.nist.usgcb.rhel:ste:20007"/>
		</unix-def:runlevel_test>
		<ind-def:textfilecontent54_test check_existence="at_least_one_exists" id="oval:gov.nist.usgcb.rhel:tst:20193" version="1" check="all" comment="check NOZEROCONF=yes in /etc/sysconfig/network">
			<ind-def:object object_ref="oval:gov.nist.usgcb.rhel:obj:20193"/>
		</ind-def:textfilecontent54_test>
		<unix-def:runlevel_test check_existence="any_exist" id="oval:gov.nist.usgcb.rhel:tst:20196" version="1" check="all" comment="CCE-4421-4">
			<unix-def:object object_ref="oval:gov.nist.usgcb.rhel:obj:20196"/>
			<unix-def:state state_ref="oval:gov.nist.usgcb.rhel:ste:20007"/>
		</unix-def:runlevel_test>
		<unix-def:runlevel_test check_existence="any_exist" id="oval:gov.nist.usgcb.rhel:tst:201961" version="1" check="all" comment="CCE-4421-4">
			<unix-def:object object_ref="oval:gov.nist.usgcb.rhel:obj:201961"/>
			<unix-def:state state_ref="oval:gov.nist.usgcb.rhel:ste:20007"/>
		</unix-def:runlevel_test>
		<unix-def:runlevel_test check_existence="any_exist" id="oval:gov.nist.usgcb.rhel:tst:201962" version="1" check="all" comment="CCE-4421-4">
			<unix-def:object object_ref="oval:gov.nist.usgcb.rhel:obj:201962"/>
			<unix-def:state state_ref="oval:gov.nist.usgcb.rhel:ste:20007"/>
		</unix-def:runlevel_test>
		<unix-def:runlevel_test check_existence="any_exist" id="oval:gov.nist.usgcb.rhel:tst:201963" version="1" check="all" comment="CCE-4421-4">
			<unix-def:object object_ref="oval:gov.nist.usgcb.rhel:obj:201963"/>
			<unix-def:state state_ref="oval:gov.nist.usgcb.rhel:ste:20007"/>
		</unix-def:runlevel_test>
		<unix-def:runlevel_test check_existence="any_exist" id="oval:gov.nist.usgcb.rhel:tst:201964" version="1" check="all" comment="CCE-4421-4">
			<unix-def:object object_ref="oval:gov.nist.usgcb.rhel:obj:201964"/>
			<unix-def:state state_ref="oval:gov.nist.usgcb.rhel:ste:20007"/>
		</unix-def:runlevel_test>
		<unix-def:runlevel_test check_existence="any_exist" id="oval:gov.nist.usgcb.rhel:tst:201965" version="1" check="all" comment="CCE-4421-4">
			<unix-def:object object_ref="oval:gov.nist.usgcb.rhel:obj:201965"/>
			<unix-def:state state_ref="oval:gov.nist.usgcb.rhel:ste:20007"/>
		</unix-def:runlevel_test>
		<unix-def:runlevel_test check_existence="any_exist" id="oval:gov.nist.usgcb.rhel:tst:201966" version="1" check="all" comment="CCE-4421-4">
			<unix-def:object object_ref="oval:gov.nist.usgcb.rhel:obj:201966"/>
			<unix-def:state state_ref="oval:gov.nist.usgcb.rhel:ste:20007"/>
		</unix-def:runlevel_test>
		<unix-def:runlevel_test check_existence="any_exist" id="oval:gov.nist.usgcb.rhel:tst:20197" version="2" check="all" comment="Runlevel test">
			<unix-def:object object_ref="oval:gov.nist.usgcb.rhel:obj:20197"/>
			<unix-def:state state_ref="oval:gov.nist.usgcb.rhel:ste:20007"/>
		</unix-def:runlevel_test>
		<unix-def:runlevel_test check_existence="any_exist" id="oval:gov.nist.usgcb.rhel:tst:201971" version="2" check="all" comment="Runlevel test">
			<unix-def:object object_ref="oval:gov.nist.usgcb.rhel:obj:201971"/>
			<unix-def:state state_ref="oval:gov.nist.usgcb.rhel:ste:20007"/>
		</unix-def:runlevel_test>
		<unix-def:runlevel_test check_existence="any_exist" id="oval:gov.nist.usgcb.rhel:tst:201972" version="2" check="all" comment="Runlevel test">
			<unix-def:object object_ref="oval:gov.nist.usgcb.rhel:obj:201972"/>
			<unix-def:state state_ref="oval:gov.nist.usgcb.rhel:ste:20007"/>
		</unix-def:runlevel_test>
		<unix-def:runlevel_test check_existence="any_exist" id="oval:gov.nist.usgcb.rhel:tst:201973" version="2" check="all" comment="Runlevel test">
			<unix-def:object object_ref="oval:gov.nist.usgcb.rhel:obj:201973"/>
			<unix-def:state state_ref="oval:gov.nist.usgcb.rhel:ste:20007"/>
		</unix-def:runlevel_test>
		<unix-def:runlevel_test check_existence="any_exist" id="oval:gov.nist.usgcb.rhel:tst:201974" version="2" check="all" comment="Runlevel test">
			<unix-def:object object_ref="oval:gov.nist.usgcb.rhel:obj:201974"/>
			<unix-def:state state_ref="oval:gov.nist.usgcb.rhel:ste:20007"/>
		</unix-def:runlevel_test>
		<unix-def:runlevel_test check_existence="any_exist" id="oval:gov.nist.usgcb.rhel:tst:201975" version="2" check="all" comment="Runlevel test">
			<unix-def:object object_ref="oval:gov.nist.usgcb.rhel:obj:201975"/>
			<unix-def:state state_ref="oval:gov.nist.usgcb.rhel:ste:20007"/>
		</unix-def:runlevel_test>
		<unix-def:runlevel_test check_existence="any_exist" id="oval:gov.nist.usgcb.rhel:tst:201976" version="2" check="all" comment="Runlevel test">
			<unix-def:object object_ref="oval:gov.nist.usgcb.rhel:obj:201976"/>
			<unix-def:state state_ref="oval:gov.nist.usgcb.rhel:ste:20007"/>
		</unix-def:runlevel_test>
		<unix-def:runlevel_test check_existence="any_exist" id="oval:gov.nist.usgcb.rhel:tst:20200" version="2" check="all" comment="Runlevel test">
			<unix-def:object object_ref="oval:gov.nist.usgcb.rhel:obj:20200"/>
			<unix-def:state state_ref="oval:gov.nist.usgcb.rhel:ste:20007"/>
		</unix-def:runlevel_test>
		<unix-def:runlevel_test check_existence="any_exist" id="oval:gov.nist.usgcb.rhel:tst:202001" version="2" check="all" comment="Runlevel test">
			<unix-def:object object_ref="oval:gov.nist.usgcb.rhel:obj:202001"/>
			<unix-def:state state_ref="oval:gov.nist.usgcb.rhel:ste:20007"/>
		</unix-def:runlevel_test>
		<unix-def:runlevel_test check_existence="any_exist" id="oval:gov.nist.usgcb.rhel:tst:202002" version="2" check="all" comment="Runlevel test">
			<unix-def:object object_ref="oval:gov.nist.usgcb.rhel:obj:202002"/>
			<unix-def:state state_ref="oval:gov.nist.usgcb.rhel:ste:20007"/>
		</unix-def:runlevel_test>
		<unix-def:runlevel_test check_existence="any_exist" id="oval:gov.nist.usgcb.rhel:tst:202003" version="2" check="all" comment="Runlevel test">
			<unix-def:object object_ref="oval:gov.nist.usgcb.rhel:obj:202003"/>
			<unix-def:state state_ref="oval:gov.nist.usgcb.rhel:ste:20007"/>
		</unix-def:runlevel_test>
		<unix-def:runlevel_test check_existence="any_exist" id="oval:gov.nist.usgcb.rhel:tst:202004" version="2" check="all" comment="Runlevel test">
			<unix-def:object object_ref="oval:gov.nist.usgcb.rhel:obj:202004"/>
			<unix-def:state state_ref="oval:gov.nist.usgcb.rhel:ste:20007"/>
		</unix-def:runlevel_test>
		<unix-def:runlevel_test check_existence="any_exist" id="oval:gov.nist.usgcb.rhel:tst:202005" version="2" check="all" comment="Runlevel test">
			<unix-def:object object_ref="oval:gov.nist.usgcb.rhel:obj:202005"/>
			<unix-def:state state_ref="oval:gov.nist.usgcb.rhel:ste:20007"/>
		</unix-def:runlevel_test>
		<unix-def:runlevel_test check_existence="any_exist" id="oval:gov.nist.usgcb.rhel:tst:202006" version="2" check="all" comment="Runlevel test">
			<unix-def:object object_ref="oval:gov.nist.usgcb.rhel:obj:202006"/>
			<unix-def:state state_ref="oval:gov.nist.usgcb.rhel:ste:20007"/>
		</unix-def:runlevel_test>
		<unix-def:runlevel_test check_existence="any_exist" id="oval:gov.nist.usgcb.rhel:tst:20201" version="2" check="all" comment="Runlevel test">
			<unix-def:object object_ref="oval:gov.nist.usgcb.rhel:obj:20201"/>
			<unix-def:state state_ref="oval:gov.nist.usgcb.rhel:ste:20007"/>
		</unix-def:runlevel_test>
		<unix-def:runlevel_test check_existence="any_exist" id="oval:gov.nist.usgcb.rhel:tst:202011" version="2" check="all" comment="Runlevel test">
			<unix-def:object object_ref="oval:gov.nist.usgcb.rhel:obj:202011"/>
			<unix-def:state state_ref="oval:gov.nist.usgcb.rhel:ste:20007"/>
		</unix-def:runlevel_test>
		<unix-def:runlevel_test check_existence="any_exist" id="oval:gov.nist.usgcb.rhel:tst:202012" version="2" check="all" comment="Runlevel test">
			<unix-def:object object_ref="oval:gov.nist.usgcb.rhel:obj:202012"/>
			<unix-def:state state_ref="oval:gov.nist.usgcb.rhel:ste:20007"/>
		</unix-def:runlevel_test>
		<unix-def:runlevel_test check_existence="any_exist" id="oval:gov.nist.usgcb.rhel:tst:202013" version="2" check="all" comment="Runlevel test">
			<unix-def:object object_ref="oval:gov.nist.usgcb.rhel:obj:202013"/>
			<unix-def:state state_ref="oval:gov.nist.usgcb.rhel:ste:20007"/>
		</unix-def:runlevel_test>
		<unix-def:runlevel_test check_existence="any_exist" id="oval:gov.nist.usgcb.rhel:tst:202014" version="2" check="all" comment="Runlevel test">
			<unix-def:object object_ref="oval:gov.nist.usgcb.rhel:obj:202014"/>
			<unix-def:state state_ref="oval:gov.nist.usgcb.rhel:ste:20007"/>
		</unix-def:runlevel_test>
		<unix-def:runlevel_test check_existence="any_exist" id="oval:gov.nist.usgcb.rhel:tst:202015" version="2" check="all" comment="Runlevel test">
			<unix-def:object object_ref="oval:gov.nist.usgcb.rhel:obj:202015"/>
			<unix-def:state state_ref="oval:gov.nist.usgcb.rhel:ste:20007"/>
		</unix-def:runlevel_test>
		<unix-def:runlevel_test check_existence="any_exist" id="oval:gov.nist.usgcb.rhel:tst:202016" version="2" check="all" comment="Runlevel test">
			<unix-def:object object_ref="oval:gov.nist.usgcb.rhel:obj:202016"/>
			<unix-def:state state_ref="oval:gov.nist.usgcb.rhel:ste:20007"/>
		</unix-def:runlevel_test>
		<unix-def:runlevel_test check_existence="all_exist" id="oval:gov.nist.usgcb.rhel:tst:20200052" version="2" check="all" comment="Runlevel test">
			<unix-def:object object_ref="oval:gov.nist.usgcb.rhel:obj:20200052"/>
			<unix-def:state state_ref="oval:gov.nist.usgcb.rhel:ste:20008"/>
		</unix-def:runlevel_test>
		<unix-def:runlevel_test check_existence="all_exist" id="oval:gov.nist.usgcb.rhel:tst:20200053" version="2" check="all" comment="Runlevel test">
			<unix-def:object object_ref="oval:gov.nist.usgcb.rhel:obj:20200053"/>
			<unix-def:state state_ref="oval:gov.nist.usgcb.rhel:ste:20008"/>
		</unix-def:runlevel_test>
		<unix-def:runlevel_test check_existence="all_exist" id="oval:gov.nist.usgcb.rhel:tst:20200054" version="2" check="all" comment="Runlevel test">
			<unix-def:object object_ref="oval:gov.nist.usgcb.rhel:obj:20200054"/>
			<unix-def:state state_ref="oval:gov.nist.usgcb.rhel:ste:20008"/>
		</unix-def:runlevel_test>
		<unix-def:runlevel_test check_existence="all_exist" id="oval:gov.nist.usgcb.rhel:tst:20200055" version="2" check="all" comment="Runlevel test">
			<unix-def:object object_ref="oval:gov.nist.usgcb.rhel:obj:20200055"/>
			<unix-def:state state_ref="oval:gov.nist.usgcb.rhel:ste:20008"/>
		</unix-def:runlevel_test>
		<unix-def:runlevel_test check_existence="any_exist" id="oval:gov.nist.usgcb.rhel:tst:202052" version="2" check="all" comment="Runlevel test">
			<unix-def:object object_ref="oval:gov.nist.usgcb.rhel:obj:202052"/>
			<unix-def:state state_ref="oval:gov.nist.usgcb.rhel:ste:20007"/>
		</unix-def:runlevel_test>
		<unix-def:runlevel_test check_existence="any_exist" id="oval:gov.nist.usgcb.rhel:tst:2020521" version="2" check="all" comment="Runlevel test">
			<unix-def:object object_ref="oval:gov.nist.usgcb.rhel:obj:2020521"/>
			<unix-def:state state_ref="oval:gov.nist.usgcb.rhel:ste:20007"/>
		</unix-def:runlevel_test>
		<unix-def:runlevel_test check_existence="any_exist" id="oval:gov.nist.usgcb.rhel:tst:2020522" version="2" check="all" comment="Runlevel test">
			<unix-def:object object_ref="oval:gov.nist.usgcb.rhel:obj:2020522"/>
			<unix-def:state state_ref="oval:gov.nist.usgcb.rhel:ste:20007"/>
		</unix-def:runlevel_test>
		<unix-def:runlevel_test check_existence="any_exist" id="oval:gov.nist.usgcb.rhel:tst:2020523" version="2" check="all" comment="Runlevel test">
			<unix-def:object object_ref="oval:gov.nist.usgcb.rhel:obj:2020523"/>
			<unix-def:state state_ref="oval:gov.nist.usgcb.rhel:ste:20007"/>
		</unix-def:runlevel_test>
		<unix-def:runlevel_test check_existence="any_exist" id="oval:gov.nist.usgcb.rhel:tst:2020524" version="2" check="all" comment="Runlevel test">
			<unix-def:object object_ref="oval:gov.nist.usgcb.rhel:obj:2020524"/>
			<unix-def:state state_ref="oval:gov.nist.usgcb.rhel:ste:20007"/>
		</unix-def:runlevel_test>
		<unix-def:runlevel_test check_existence="any_exist" id="oval:gov.nist.usgcb.rhel:tst:2020525" version="2" check="all" comment="Runlevel test">
			<unix-def:object object_ref="oval:gov.nist.usgcb.rhel:obj:2020525"/>
			<unix-def:state state_ref="oval:gov.nist.usgcb.rhel:ste:20007"/>
		</unix-def:runlevel_test>
		<unix-def:runlevel_test check_existence="any_exist" id="oval:gov.nist.usgcb.rhel:tst:2020526" version="2" check="all" comment="Runlevel test">
			<unix-def:object object_ref="oval:gov.nist.usgcb.rhel:obj:2020526"/>
			<unix-def:state state_ref="oval:gov.nist.usgcb.rhel:ste:20007"/>
		</unix-def:runlevel_test>
		<lin-def:rpminfo_test check="all" check_existence="none_exist" version="1" id="oval:gov.nist.usgcb.rhel:tst:202053" comment="at is not installed">
			<lin-def:object object_ref="oval:gov.nist.usgcb.rhel:obj:202053"/>
		</lin-def:rpminfo_test>
		<unix-def:file_test check_existence="all_exist" id="oval:gov.nist.usgcb.rhel:tst:20208" version="1" check="all" comment="Testing group ownership">
			<unix-def:object object_ref="oval:gov.nist.usgcb.rhel:obj:20208"/>
			<unix-def:state state_ref="oval:gov.nist.usgcb.rhel:ste:20208"/>
		</unix-def:file_test>
		<unix-def:file_test check_existence="all_exist" id="oval:gov.nist.usgcb.rhel:tst:20209" version="1" check="all" comment="Testing user ownership">
			<unix-def:object object_ref="oval:gov.nist.usgcb.rhel:obj:20209"/>
			<unix-def:state state_ref="oval:gov.nist.usgcb.rhel:ste:20209"/>
		</unix-def:file_test>
		<unix-def:file_test check_existence="all_exist" id="oval:gov.nist.usgcb.rhel:tst:20210" version="1" check="all" comment="Testing file permissions">
			<unix-def:object object_ref="oval:gov.nist.usgcb.rhel:obj:20210"/>
			<unix-def:state state_ref="oval:gov.nist.usgcb.rhel:ste:1000600"/>
		</unix-def:file_test>
		<unix-def:file_test check_existence="all_exist" id="oval:gov.nist.usgcb.rhel:tst:20211" version="1" check="all" comment="Testing group ownership">
			<unix-def:object object_ref="oval:gov.nist.usgcb.rhel:obj:20211"/>
			<unix-def:state state_ref="oval:gov.nist.usgcb.rhel:ste:20211"/>
		</unix-def:file_test>
		<unix-def:file_test check_existence="all_exist" id="oval:gov.nist.usgcb.rhel:tst:20212" version="1" check="all" comment="Testing user ownership">
			<unix-def:object object_ref="oval:gov.nist.usgcb.rhel:obj:20212"/>
			<unix-def:state state_ref="oval:gov.nist.usgcb.rhel:ste:20212"/>
		</unix-def:file_test>
		<unix-def:file_test check_existence="all_exist" id="oval:gov.nist.usgcb.rhel:tst:20213" version="1" check="all" comment="Testing file permissions">
			<unix-def:object object_ref="oval:gov.nist.usgcb.rhel:obj:20213"/>
			<unix-def:state state_ref="oval:gov.nist.usgcb.rhel:ste:1000600"/>
		</unix-def:file_test>
		<unix-def:file_test check_existence="all_exist" id="oval:gov.nist.usgcb.rhel:tst:20214" version="1" check="all" comment="Testing group ownership">
			<unix-def:object object_ref="oval:gov.nist.usgcb.rhel:obj:20214"/>
			<unix-def:state state_ref="oval:gov.nist.usgcb.rhel:ste:20214"/>
		</unix-def:file_test>
		<unix-def:file_test check_existence="all_exist" id="oval:gov.nist.usgcb.rhel:tst:20215" version="1" check="all" comment="Testing group ownership">
			<unix-def:object object_ref="oval:gov.nist.usgcb.rhel:obj:20215"/>
			<unix-def:state state_ref="oval:gov.nist.usgcb.rhel:ste:20215"/>
		</unix-def:file_test>
		<unix-def:file_test check_existence="all_exist" id="oval:gov.nist.usgcb.rhel:tst:20216" version="1" check="all" comment="Testing group ownership">
			<unix-def:object object_ref="oval:gov.nist.usgcb.rhel:obj:20216"/>
			<unix-def:state state_ref="oval:gov.nist.usgcb.rhel:ste:20216"/>
		</unix-def:file_test>
		<unix-def:file_test check_existence="all_exist" id="oval:gov.nist.usgcb.rhel:tst:20217" version="1" check="all" comment="Testing group ownership">
			<unix-def:object object_ref="oval:gov.nist.usgcb.rhel:obj:20217"/>
			<unix-def:state state_ref="oval:gov.nist.usgcb.rhel:ste:20217"/>
		</unix-def:file_test>
		<unix-def:file_test check_existence="all_exist" id="oval:gov.nist.usgcb.rhel:tst:20218" version="1" check="all" comment="Testing group ownership">
			<unix-def:object object_ref="oval:gov.nist.usgcb.rhel:obj:20218"/>
			<unix-def:state state_ref="oval:gov.nist.usgcb.rhel:ste:20218"/>
		</unix-def:file_test>
		<unix-def:file_test check_existence="all_exist" id="oval:gov.nist.usgcb.rhel:tst:20219" version="1" check="all" comment="Testing user ownership">
			<unix-def:object object_ref="oval:gov.nist.usgcb.rhel:obj:20219"/>
			<unix-def:state state_ref="oval:gov.nist.usgcb.rhel:ste:20219"/>
		</unix-def:file_test>
		<unix-def:file_test check_existence="all_exist" id="oval:gov.nist.usgcb.rhel:tst:20220" version="1" check="all" comment="Testing user ownership">
			<unix-def:object object_ref="oval:gov.nist.usgcb.rhel:obj:20220"/>
			<unix-def:state state_ref="oval:gov.nist.usgcb.rhel:ste:20220"/>
		</unix-def:file_test>
		<unix-def:file_test check_existence="all_exist" id="oval:gov.nist.usgcb.rhel:tst:20221" version="1" check="all" comment="Testing user ownership">
			<unix-def:object object_ref="oval:gov.nist.usgcb.rhel:obj:20221"/>
			<unix-def:state state_ref="oval:gov.nist.usgcb.rhel:ste:20221"/>
		</unix-def:file_test>
		<unix-def:file_test check_existence="all_exist" id="oval:gov.nist.usgcb.rhel:tst:20222" version="1" check="all" comment="Testing user ownership">
			<unix-def:object object_ref="oval:gov.nist.usgcb.rhel:obj:20222"/>
			<unix-def:state state_ref="oval:gov.nist.usgcb.rhel:ste:20222"/>
		</unix-def:file_test>
		<unix-def:file_test check_existence="all_exist" id="oval:gov.nist.usgcb.rhel:tst:20223" version="1" check="all" comment="Testing user ownership">
			<unix-def:object object_ref="oval:gov.nist.usgcb.rhel:obj:20223"/>
			<unix-def:state state_ref="oval:gov.nist.usgcb.rhel:ste:20223"/>
		</unix-def:file_test>
		<unix-def:file_test check_existence="all_exist" id="oval:gov.nist.usgcb.rhel:tst:20224" version="1" check="all" comment="Testing file permissions /etc/cron.hourly">
			<unix-def:object object_ref="oval:gov.nist.usgcb.rhel:obj:20224"/>
			<unix-def:state state_ref="oval:gov.nist.usgcb.rhel:ste:1000700"/>
		</unix-def:file_test>
		<unix-def:file_test check_existence="all_exist" id="oval:gov.nist.usgcb.rhel:tst:20225" version="1" check="all" comment="Testing file permissions /etc/cron.daily">
			<unix-def:object object_ref="oval:gov.nist.usgcb.rhel:obj:20225"/>
			<unix-def:state state_ref="oval:gov.nist.usgcb.rhel:ste:1000700"/>
		</unix-def:file_test>
		<unix-def:file_test check_existence="all_exist" id="oval:gov.nist.usgcb.rhel:tst:20226" version="1" check="all" comment="Testing file permissions /etc/cron.weekly">
			<unix-def:object object_ref="oval:gov.nist.usgcb.rhel:obj:20226"/>
			<unix-def:state state_ref="oval:gov.nist.usgcb.rhel:ste:1000700"/>
		</unix-def:file_test>
		<unix-def:file_test check_existence="all_exist" id="oval:gov.nist.usgcb.rhel:tst:20227" version="1" check="all" comment="Testing file permissions /etc/cron.monthly">
			<unix-def:object object_ref="oval:gov.nist.usgcb.rhel:obj:20227"/>
			<unix-def:state state_ref="oval:gov.nist.usgcb.rhel:ste:1000700"/>
		</unix-def:file_test>
		<unix-def:file_test check_existence="all_exist" id="oval:gov.nist.usgcb.rhel:tst:20228" version="1" check="all" comment="Testing file permissions /etc/cron.d">
			<unix-def:object object_ref="oval:gov.nist.usgcb.rhel:obj:20228"/>
			<unix-def:state state_ref="oval:gov.nist.usgcb.rhel:ste:1000700"/>
		</unix-def:file_test>
		<unix-def:runlevel_test check_existence="any_exist" id="oval:gov.nist.usgcb.rhel:tst:20234" version="2" check="all" comment="Runlevel test">
			<unix-def:object object_ref="oval:gov.nist.usgcb.rhel:obj:20234"/>
			<unix-def:state state_ref="oval:gov.nist.usgcb.rhel:ste:20007"/>
		</unix-def:runlevel_test>
		<unix-def:runlevel_test check_existence="any_exist" id="oval:gov.nist.usgcb.rhel:tst:202341" version="2" check="all" comment="Runlevel test">
			<unix-def:object object_ref="oval:gov.nist.usgcb.rhel:obj:202341"/>
			<unix-def:state state_ref="oval:gov.nist.usgcb.rhel:ste:20007"/>
		</unix-def:runlevel_test>
		<unix-def:runlevel_test check_existence="any_exist" id="oval:gov.nist.usgcb.rhel:tst:202342" version="2" check="all" comment="Runlevel test">
			<unix-def:object object_ref="oval:gov.nist.usgcb.rhel:obj:202342"/>
			<unix-def:state state_ref="oval:gov.nist.usgcb.rhel:ste:20007"/>
		</unix-def:runlevel_test>
		<unix-def:runlevel_test check_existence="any_exist" id="oval:gov.nist.usgcb.rhel:tst:202343" version="2" check="all" comment="Runlevel test">
			<unix-def:object object_ref="oval:gov.nist.usgcb.rhel:obj:202343"/>
			<unix-def:state state_ref="oval:gov.nist.usgcb.rhel:ste:20007"/>
		</unix-def:runlevel_test>
		<unix-def:runlevel_test check_existence="any_exist" id="oval:gov.nist.usgcb.rhel:tst:202344" version="2" check="all" comment="Runlevel test">
			<unix-def:object object_ref="oval:gov.nist.usgcb.rhel:obj:202344"/>
			<unix-def:state state_ref="oval:gov.nist.usgcb.rhel:ste:20007"/>
		</unix-def:runlevel_test>
		<unix-def:runlevel_test check_existence="any_exist" id="oval:gov.nist.usgcb.rhel:tst:202345" version="2" check="all" comment="Runlevel test">
			<unix-def:object object_ref="oval:gov.nist.usgcb.rhel:obj:202345"/>
			<unix-def:state state_ref="oval:gov.nist.usgcb.rhel:ste:20007"/>
		</unix-def:runlevel_test>
		<unix-def:runlevel_test check_existence="any_exist" id="oval:gov.nist.usgcb.rhel:tst:202346" version="2" check="all" comment="Runlevel test">
			<unix-def:object object_ref="oval:gov.nist.usgcb.rhel:obj:202346"/>
			<unix-def:state state_ref="oval:gov.nist.usgcb.rhel:ste:20007"/>
		</unix-def:runlevel_test>
		<lin-def:rpminfo_test check_existence="none_exist" id="oval:gov.nist.usgcb.rhel:tst:20235" version="1" check="all" comment="The openssh-server package should be installed or not as appropriate">
			<lin-def:object object_ref="oval:gov.nist.usgcb.rhel:obj:20235"/>
		</lin-def:rpminfo_test>
		<ind-def:textfilecontent54_test check_existence="all_exist" id="oval:gov.nist.usgcb.rhel:tst:20238" version="1" check="all" comment="Tests the value of the Protocol[\s]&lt;:nocomment:&gt;1 setting in the /etc/ssh/sshd_config file">
			<ind-def:object object_ref="oval:gov.nist.usgcb.rhel:obj:20238"/>
		</ind-def:textfilecontent54_test>
		<ind-def:textfilecontent54_test check_existence="all_exist" id="oval:gov.nist.usgcb.rhel:tst:20239" version="1" check="all" comment="Tests the value of the ClientAliveInterval setting in the /etc/ssh/sshd_config file">
			<ind-def:object object_ref="oval:gov.nist.usgcb.rhel:obj:20239"/>
			<ind-def:state state_ref="oval:gov.nist.usgcb.rhel:ste:20239"/>
		</ind-def:textfilecontent54_test>
		<ind-def:textfilecontent54_test check_existence="all_exist" id="oval:gov.nist.usgcb.rhel:tst:20240" version="1" check="all" comment="Tests the value of the ClientAliveCountMax setting in the /etc/ssh/sshd_config file">
			<ind-def:object object_ref="oval:gov.nist.usgcb.rhel:obj:20240"/>
			<ind-def:state state_ref="oval:gov.nist.usgcb.rhel:ste:20240"/>
		</ind-def:textfilecontent54_test>
		<ind-def:textfilecontent54_test check_existence="none_exist" id="oval:gov.nist.usgcb.rhel:tst:20241" version="1" check="all" comment="Tests the value of the IgnoreRhosts[\s]*(&lt;:nocomment:&gt;*) setting in the /etc/ssh/sshd_config file">
			<ind-def:object object_ref="oval:gov.nist.usgcb.rhel:obj:20241"/>
		</ind-def:textfilecontent54_test>
		<ind-def:textfilecontent54_test check_existence="none_exist" id="oval:gov.nist.usgcb.rhel:tst:20242" version="1" check="all" comment="Tests the value of the HostbasedAuthentication[\s]*(&lt;:nocomment:&gt;*) setting in the /etc/ssh/sshd_config file">
			<ind-def:object object_ref="oval:gov.nist.usgcb.rhel:obj:20242"/>
		</ind-def:textfilecontent54_test>
		<ind-def:textfilecontent54_test check_existence="none_exist" id="oval:gov.nist.usgcb.rhel:tst:20243" version="1" check="all" comment="Tests the value of the PermitRootLogin[\s]*(&lt;:nocomment:&gt;*) setting in the /etc/ssh/sshd_config file">
			<ind-def:object object_ref="oval:gov.nist.usgcb.rhel:obj:20243"/>
		</ind-def:textfilecontent54_test>
		<ind-def:textfilecontent54_test check_existence="none_exist" id="oval:gov.nist.usgcb.rhel:tst:20244" version="1" check="all" comment="Tests the value of the PermitEmptyPasswords[\s]*(&lt;:nocomment:&gt;*) setting in the /etc/ssh/sshd_config file">
			<ind-def:object object_ref="oval:gov.nist.usgcb.rhel:obj:20244"/>
		</ind-def:textfilecontent54_test>
		<ind-def:textfilecontent54_test check_existence="all_exist" id="oval:gov.nist.usgcb.rhel:tst:20245" version="1" check="all" comment="Tests the value of the Banner[\s]+/etc/issue setting in the /etc/ssh/sshd_config file">
			<ind-def:object object_ref="oval:gov.nist.usgcb.rhel:obj:20245"/>
		</ind-def:textfilecontent54_test>
		<ind-def:textfilecontent54_test check_existence="none_exist" id="oval:gov.nist.usgcb.rhel:tst:202455" version="1" check="all" comment="Check value of PermitUserEnvironment in /etc/ssh/sshd_config">
			<ind-def:object object_ref="oval:gov.nist.usgcb.rhel:obj:202455"/>
		</ind-def:textfilecontent54_test>
		<ind-def:textfilecontent54_test check_existence="all_exist" id="oval:gov.nist.usgcb.rhel:tst:202456" version="1" check="all" comment="Check value of Ciphers in /etc/ssh/sshd_config">
			<ind-def:object object_ref="oval:gov.nist.usgcb.rhel:obj:202456"/>
			<ind-def:state state_ref="oval:gov.nist.usgcb.rhel:ste:202456"/>
		</ind-def:textfilecontent54_test>
		<ind-def:textfilecontent54_test check_existence="all_exist" id="oval:gov.nist.usgcb.rhel:tst:20248" version="1" check="all" comment="Check for existence of line exec X :0 -nolisten tcp $@ in file /etc/X11/xinit/xserverrc">
			<ind-def:object object_ref="oval:gov.nist.usgcb.rhel:obj:20248"/>
		</ind-def:textfilecontent54_test>
		<ind-def:textfilecontent54_test check_existence="all_exist" id="oval:gov.nist.usgcb.rhel:tst:20249" version="1" check="all" comment="Tests the value of the InfoMsgFile=/etc/issue expression in the /etc/gdm/custom.conf file">
			<ind-def:object object_ref="oval:gov.nist.usgcb.rhel:obj:20249"/>
		</ind-def:textfilecontent54_test>
		<unix-def:runlevel_test check_existence="any_exist" id="oval:gov.nist.usgcb.rhel:tst:20250" version="2" check="all" comment="Runlevel test">
			<unix-def:object object_ref="oval:gov.nist.usgcb.rhel:obj:20250"/>
			<unix-def:state state_ref="oval:gov.nist.usgcb.rhel:ste:20007"/>
		</unix-def:runlevel_test>
		<unix-def:runlevel_test check_existence="any_exist" id="oval:gov.nist.usgcb.rhel:tst:202501" version="2" check="all" comment="Runlevel test">
			<unix-def:object object_ref="oval:gov.nist.usgcb.rhel:obj:202501"/>
			<unix-def:state state_ref="oval:gov.nist.usgcb.rhel:ste:20007"/>
		</unix-def:runlevel_test>
		<unix-def:runlevel_test check_existence="any_exist" id="oval:gov.nist.usgcb.rhel:tst:202502" version="2" check="all" comment="Runlevel test">
			<unix-def:object object_ref="oval:gov.nist.usgcb.rhel:obj:202502"/>
			<unix-def:state state_ref="oval:gov.nist.usgcb.rhel:ste:20007"/>
		</unix-def:runlevel_test>
		<unix-def:runlevel_test check_existence="any_exist" id="oval:gov.nist.usgcb.rhel:tst:202503" version="2" check="all" comment="Runlevel test">
			<unix-def:object object_ref="oval:gov.nist.usgcb.rhel:obj:202503"/>
			<unix-def:state state_ref="oval:gov.nist.usgcb.rhel:ste:20007"/>
		</unix-def:runlevel_test>
		<unix-def:runlevel_test check_existence="any_exist" id="oval:gov.nist.usgcb.rhel:tst:202504" version="2" check="all" comment="Runlevel test">
			<unix-def:object object_ref="oval:gov.nist.usgcb.rhel:obj:202504"/>
			<unix-def:state state_ref="oval:gov.nist.usgcb.rhel:ste:20007"/>
		</unix-def:runlevel_test>
		<unix-def:runlevel_test check_existence="any_exist" id="oval:gov.nist.usgcb.rhel:tst:202505" version="2" check="all" comment="Runlevel test">
			<unix-def:object object_ref="oval:gov.nist.usgcb.rhel:obj:202505"/>
			<unix-def:state state_ref="oval:gov.nist.usgcb.rhel:ste:20007"/>
		</unix-def:runlevel_test>
		<unix-def:runlevel_test check_existence="any_exist" id="oval:gov.nist.usgcb.rhel:tst:202506" version="2" check="all" comment="Runlevel test">
			<unix-def:object object_ref="oval:gov.nist.usgcb.rhel:obj:202506"/>
			<unix-def:state state_ref="oval:gov.nist.usgcb.rhel:ste:20007"/>
		</unix-def:runlevel_test>
		<unix-def:runlevel_test check_existence="any_exist" id="oval:gov.nist.usgcb.rhel:tst:20266" version="2" check="all" comment="Runlevel test">
			<unix-def:object object_ref="oval:gov.nist.usgcb.rhel:obj:20266"/>
			<unix-def:state state_ref="oval:gov.nist.usgcb.rhel:ste:20007"/>
		</unix-def:runlevel_test>
		<unix-def:runlevel_test check_existence="any_exist" id="oval:gov.nist.usgcb.rhel:tst:202661" version="2" check="all" comment="Runlevel test">
			<unix-def:object object_ref="oval:gov.nist.usgcb.rhel:obj:202661"/>
			<unix-def:state state_ref="oval:gov.nist.usgcb.rhel:ste:20007"/>
		</unix-def:runlevel_test>
		<unix-def:runlevel_test check_existence="any_exist" id="oval:gov.nist.usgcb.rhel:tst:202662" version="2" check="all" comment="Runlevel test">
			<unix-def:object object_ref="oval:gov.nist.usgcb.rhel:obj:202662"/>
			<unix-def:state state_ref="oval:gov.nist.usgcb.rhel:ste:20007"/>
		</unix-def:runlevel_test>
		<unix-def:runlevel_test check_existence="any_exist" id="oval:gov.nist.usgcb.rhel:tst:202663" version="2" check="all" comment="Runlevel test">
			<unix-def:object object_ref="oval:gov.nist.usgcb.rhel:obj:202663"/>
			<unix-def:state state_ref="oval:gov.nist.usgcb.rhel:ste:20007"/>
		</unix-def:runlevel_test>
		<unix-def:runlevel_test check_existence="any_exist" id="oval:gov.nist.usgcb.rhel:tst:202664" version="2" check="all" comment="Runlevel test">
			<unix-def:object object_ref="oval:gov.nist.usgcb.rhel:obj:202664"/>
			<unix-def:state state_ref="oval:gov.nist.usgcb.rhel:ste:20007"/>
		</unix-def:runlevel_test>
		<unix-def:runlevel_test check_existence="any_exist" id="oval:gov.nist.usgcb.rhel:tst:202665" version="2" check="all" comment="Runlevel test">
			<unix-def:object object_ref="oval:gov.nist.usgcb.rhel:obj:202665"/>
			<unix-def:state state_ref="oval:gov.nist.usgcb.rhel:ste:20007"/>
		</unix-def:runlevel_test>
		<unix-def:runlevel_test check_existence="any_exist" id="oval:gov.nist.usgcb.rhel:tst:202666" version="2" check="all" comment="Runlevel test">
			<unix-def:object object_ref="oval:gov.nist.usgcb.rhel:obj:202666"/>
			<unix-def:state state_ref="oval:gov.nist.usgcb.rhel:ste:20007"/>
		</unix-def:runlevel_test>
		<unix-def:runlevel_test check_existence="any_exist" id="oval:gov.nist.usgcb.rhel:tst:20268" version="2" check="all" comment="Runlevel test">
			<unix-def:object object_ref="oval:gov.nist.usgcb.rhel:obj:20268"/>
			<unix-def:state state_ref="oval:gov.nist.usgcb.rhel:ste:20007"/>
		</unix-def:runlevel_test>
		<unix-def:runlevel_test check_existence="any_exist" id="oval:gov.nist.usgcb.rhel:tst:202681" version="2" check="all" comment="Runlevel test">
			<unix-def:object object_ref="oval:gov.nist.usgcb.rhel:obj:202681"/>
			<unix-def:state state_ref="oval:gov.nist.usgcb.rhel:ste:20007"/>
		</unix-def:runlevel_test>
		<unix-def:runlevel_test check_existence="any_exist" id="oval:gov.nist.usgcb.rhel:tst:202682" version="2" check="all" comment="Runlevel test">
			<unix-def:object object_ref="oval:gov.nist.usgcb.rhel:obj:202682"/>
			<unix-def:state state_ref="oval:gov.nist.usgcb.rhel:ste:20007"/>
		</unix-def:runlevel_test>
		<unix-def:runlevel_test check_existence="any_exist" id="oval:gov.nist.usgcb.rhel:tst:202683" version="2" check="all" comment="Runlevel test">
			<unix-def:object object_ref="oval:gov.nist.usgcb.rhel:obj:202683"/>
			<unix-def:state state_ref="oval:gov.nist.usgcb.rhel:ste:20007"/>
		</unix-def:runlevel_test>
		<unix-def:runlevel_test check_existence="any_exist" id="oval:gov.nist.usgcb.rhel:tst:202684" version="2" check="all" comment="Runlevel test">
			<unix-def:object object_ref="oval:gov.nist.usgcb.rhel:obj:202684"/>
			<unix-def:state state_ref="oval:gov.nist.usgcb.rhel:ste:20007"/>
		</unix-def:runlevel_test>
		<unix-def:runlevel_test check_existence="any_exist" id="oval:gov.nist.usgcb.rhel:tst:202685" version="2" check="all" comment="Runlevel test">
			<unix-def:object object_ref="oval:gov.nist.usgcb.rhel:obj:202685"/>
			<unix-def:state state_ref="oval:gov.nist.usgcb.rhel:ste:20007"/>
		</unix-def:runlevel_test>
		<unix-def:runlevel_test check_existence="any_exist" id="oval:gov.nist.usgcb.rhel:tst:202686" version="2" check="all" comment="Runlevel test">
			<unix-def:object object_ref="oval:gov.nist.usgcb.rhel:obj:202686"/>
			<unix-def:state state_ref="oval:gov.nist.usgcb.rhel:ste:20007"/>
		</unix-def:runlevel_test>
		<lin-def:rpminfo_test check_existence="none_exist" id="oval:gov.nist.usgcb.rhel:tst:20269" version="1" check="all" comment="The dhcp package should be installed or not as appropriate">
			<lin-def:object object_ref="oval:gov.nist.usgcb.rhel:obj:20269"/>
		</lin-def:rpminfo_test>
		<unix-def:runlevel_test check_existence="all_exist" id="oval:gov.nist.usgcb.rhel:tst:202812" version="2" check="all" comment="Runlevel test">
			<unix-def:object object_ref="oval:gov.nist.usgcb.rhel:obj:202812"/>
			<unix-def:state state_ref="oval:gov.nist.usgcb.rhel:ste:20008"/>
		</unix-def:runlevel_test>
		<unix-def:runlevel_test check_existence="all_exist" id="oval:gov.nist.usgcb.rhel:tst:202813" version="2" check="all" comment="Runlevel test">
			<unix-def:object object_ref="oval:gov.nist.usgcb.rhel:obj:202813"/>
			<unix-def:state state_ref="oval:gov.nist.usgcb.rhel:ste:20008"/>
		</unix-def:runlevel_test>
		<unix-def:runlevel_test check_existence="all_exist" id="oval:gov.nist.usgcb.rhel:tst:202814" version="2" check="all" comment="Runlevel test">
			<unix-def:object object_ref="oval:gov.nist.usgcb.rhel:obj:202814"/>
			<unix-def:state state_ref="oval:gov.nist.usgcb.rhel:ste:20008"/>
		</unix-def:runlevel_test>
		<unix-def:runlevel_test check_existence="all_exist" id="oval:gov.nist.usgcb.rhel:tst:202815" version="2" check="all" comment="Runlevel test">
			<unix-def:object object_ref="oval:gov.nist.usgcb.rhel:obj:202815"/>
			<unix-def:state state_ref="oval:gov.nist.usgcb.rhel:ste:20008"/>
		</unix-def:runlevel_test>
		<unix-def:runlevel_test check_existence="any_exist" id="oval:gov.nist.usgcb.rhel:tst:20287" version="2" check="all" comment="Runlevel test">
			<unix-def:object object_ref="oval:gov.nist.usgcb.rhel:obj:20287"/>
			<unix-def:state state_ref="oval:gov.nist.usgcb.rhel:ste:20007"/>
		</unix-def:runlevel_test>
		<unix-def:runlevel_test check_existence="any_exist" id="oval:gov.nist.usgcb.rhel:tst:202871" version="2" check="all" comment="Runlevel test">
			<unix-def:object object_ref="oval:gov.nist.usgcb.rhel:obj:202871"/>
			<unix-def:state state_ref="oval:gov.nist.usgcb.rhel:ste:20007"/>
		</unix-def:runlevel_test>
		<unix-def:runlevel_test check_existence="any_exist" id="oval:gov.nist.usgcb.rhel:tst:202872" version="2" check="all" comment="Runlevel test">
			<unix-def:object object_ref="oval:gov.nist.usgcb.rhel:obj:202872"/>
			<unix-def:state state_ref="oval:gov.nist.usgcb.rhel:ste:20007"/>
		</unix-def:runlevel_test>
		<unix-def:runlevel_test check_existence="any_exist" id="oval:gov.nist.usgcb.rhel:tst:202873" version="2" check="all" comment="Runlevel test">
			<unix-def:object object_ref="oval:gov.nist.usgcb.rhel:obj:202873"/>
			<unix-def:state state_ref="oval:gov.nist.usgcb.rhel:ste:20007"/>
		</unix-def:runlevel_test>
		<unix-def:runlevel_test check_existence="any_exist" id="oval:gov.nist.usgcb.rhel:tst:202874" version="2" check="all" comment="Runlevel test">
			<unix-def:object object_ref="oval:gov.nist.usgcb.rhel:obj:202874"/>
			<unix-def:state state_ref="oval:gov.nist.usgcb.rhel:ste:20007"/>
		</unix-def:runlevel_test>
		<unix-def:runlevel_test check_existence="any_exist" id="oval:gov.nist.usgcb.rhel:tst:202875" version="2" check="all" comment="Runlevel test">
			<unix-def:object object_ref="oval:gov.nist.usgcb.rhel:obj:202875"/>
			<unix-def:state state_ref="oval:gov.nist.usgcb.rhel:ste:20007"/>
		</unix-def:runlevel_test>
		<unix-def:runlevel_test check_existence="any_exist" id="oval:gov.nist.usgcb.rhel:tst:202876" version="2" check="all" comment="Runlevel test">
			<unix-def:object object_ref="oval:gov.nist.usgcb.rhel:obj:202876"/>
			<unix-def:state state_ref="oval:gov.nist.usgcb.rhel:ste:20007"/>
		</unix-def:runlevel_test>
		<ind-def:textfilecontent54_test check_existence="at_least_one_exists" id="oval:gov.nist.usgcb.rhel:tst:202885" version="1" check="all" comment="Tests the value of the tls_checkpeer[\s]+yes setting in the /etc/ldap.conf file">
			<ind-def:object object_ref="oval:gov.nist.usgcb.rhel:obj:202885"/>
		</ind-def:textfilecontent54_test>
		<unix-def:runlevel_test check_existence="any_exist" id="oval:gov.nist.usgcb.rhel:tst:20289" version="3" check="all" comment="Runlevel test">
			<unix-def:object object_ref="oval:gov.nist.usgcb.rhel:obj:20289"/>
			<unix-def:state state_ref="oval:gov.nist.usgcb.rhel:ste:20007"/>
		</unix-def:runlevel_test>
		<unix-def:runlevel_test check_existence="any_exist" id="oval:gov.nist.usgcb.rhel:tst:202891" version="3" check="all" comment="Runlevel test">
			<unix-def:object object_ref="oval:gov.nist.usgcb.rhel:obj:202891"/>
			<unix-def:state state_ref="oval:gov.nist.usgcb.rhel:ste:20007"/>
		</unix-def:runlevel_test>
		<unix-def:runlevel_test check_existence="any_exist" id="oval:gov.nist.usgcb.rhel:tst:202892" version="3" check="all" comment="Runlevel test">
			<unix-def:object object_ref="oval:gov.nist.usgcb.rhel:obj:202892"/>
			<unix-def:state state_ref="oval:gov.nist.usgcb.rhel:ste:20007"/>
		</unix-def:runlevel_test>
		<unix-def:runlevel_test check_existence="any_exist" id="oval:gov.nist.usgcb.rhel:tst:202893" version="3" check="all" comment="Runlevel test">
			<unix-def:object object_ref="oval:gov.nist.usgcb.rhel:obj:202893"/>
			<unix-def:state state_ref="oval:gov.nist.usgcb.rhel:ste:20007"/>
		</unix-def:runlevel_test>
		<unix-def:runlevel_test check_existence="any_exist" id="oval:gov.nist.usgcb.rhel:tst:202894" version="3" check="all" comment="Runlevel test">
			<unix-def:object object_ref="oval:gov.nist.usgcb.rhel:obj:202894"/>
			<unix-def:state state_ref="oval:gov.nist.usgcb.rhel:ste:20007"/>
		</unix-def:runlevel_test>
		<unix-def:runlevel_test check_existence="any_exist" id="oval:gov.nist.usgcb.rhel:tst:202895" version="3" check="all" comment="Runlevel test">
			<unix-def:object object_ref="oval:gov.nist.usgcb.rhel:obj:202895"/>
			<unix-def:state state_ref="oval:gov.nist.usgcb.rhel:ste:20007"/>
		</unix-def:runlevel_test>
		<unix-def:runlevel_test check_existence="any_exist" id="oval:gov.nist.usgcb.rhel:tst:202896" version="3" check="all" comment="Runlevel test">
			<unix-def:object object_ref="oval:gov.nist.usgcb.rhel:obj:202896"/>
			<unix-def:state state_ref="oval:gov.nist.usgcb.rhel:ste:20007"/>
		</unix-def:runlevel_test>
		<unix-def:runlevel_test check_existence="any_exist" id="oval:gov.nist.usgcb.rhel:tst:20292" version="2" check="all" comment="Runlevel test">
			<unix-def:object object_ref="oval:gov.nist.usgcb.rhel:obj:20292"/>
			<unix-def:state state_ref="oval:gov.nist.usgcb.rhel:ste:20007"/>
		</unix-def:runlevel_test>
		<unix-def:runlevel_test check_existence="any_exist" id="oval:gov.nist.usgcb.rhel:tst:202921" version="2" check="all" comment="Runlevel test">
			<unix-def:object object_ref="oval:gov.nist.usgcb.rhel:obj:202921"/>
			<unix-def:state state_ref="oval:gov.nist.usgcb.rhel:ste:20007"/>
		</unix-def:runlevel_test>
		<unix-def:runlevel_test check_existence="any_exist" id="oval:gov.nist.usgcb.rhel:tst:202922" version="2" check="all" comment="Runlevel test">
			<unix-def:object object_ref="oval:gov.nist.usgcb.rhel:obj:202922"/>
			<unix-def:state state_ref="oval:gov.nist.usgcb.rhel:ste:20007"/>
		</unix-def:runlevel_test>
		<unix-def:runlevel_test check_existence="any_exist" id="oval:gov.nist.usgcb.rhel:tst:202923" version="2" check="all" comment="Runlevel test">
			<unix-def:object object_ref="oval:gov.nist.usgcb.rhel:obj:202923"/>
			<unix-def:state state_ref="oval:gov.nist.usgcb.rhel:ste:20007"/>
		</unix-def:runlevel_test>
		<unix-def:runlevel_test check_existence="any_exist" id="oval:gov.nist.usgcb.rhel:tst:202924" version="2" check="all" comment="Runlevel test">
			<unix-def:object object_ref="oval:gov.nist.usgcb.rhel:obj:202924"/>
			<unix-def:state state_ref="oval:gov.nist.usgcb.rhel:ste:20007"/>
		</unix-def:runlevel_test>
		<unix-def:runlevel_test check_existence="any_exist" id="oval:gov.nist.usgcb.rhel:tst:202925" version="2" check="all" comment="Runlevel test">
			<unix-def:object object_ref="oval:gov.nist.usgcb.rhel:obj:202925"/>
			<unix-def:state state_ref="oval:gov.nist.usgcb.rhel:ste:20007"/>
		</unix-def:runlevel_test>
		<unix-def:runlevel_test check_existence="any_exist" id="oval:gov.nist.usgcb.rhel:tst:202926" version="2" check="all" comment="Runlevel test">
			<unix-def:object object_ref="oval:gov.nist.usgcb.rhel:obj:202926"/>
			<unix-def:state state_ref="oval:gov.nist.usgcb.rhel:ste:20007"/>
		</unix-def:runlevel_test>
		<unix-def:runlevel_test check_existence="any_exist" id="oval:gov.nist.usgcb.rhel:tst:20293" version="2" check="all" comment="Runlevel test">
			<unix-def:object object_ref="oval:gov.nist.usgcb.rhel:obj:20293"/>
			<unix-def:state state_ref="oval:gov.nist.usgcb.rhel:ste:20007"/>
		</unix-def:runlevel_test>
		<unix-def:runlevel_test check_existence="any_exist" id="oval:gov.nist.usgcb.rhel:tst:202931" version="2" check="all" comment="Runlevel test">
			<unix-def:object object_ref="oval:gov.nist.usgcb.rhel:obj:202931"/>
			<unix-def:state state_ref="oval:gov.nist.usgcb.rhel:ste:20007"/>
		</unix-def:runlevel_test>
		<unix-def:runlevel_test check_existence="any_exist" id="oval:gov.nist.usgcb.rhel:tst:202932" version="2" check="all" comment="Runlevel test">
			<unix-def:object object_ref="oval:gov.nist.usgcb.rhel:obj:202932"/>
			<unix-def:state state_ref="oval:gov.nist.usgcb.rhel:ste:20007"/>
		</unix-def:runlevel_test>
		<unix-def:runlevel_test check_existence="any_exist" id="oval:gov.nist.usgcb.rhel:tst:202933" version="2" check="all" comment="Runlevel test">
			<unix-def:object object_ref="oval:gov.nist.usgcb.rhel:obj:202933"/>
			<unix-def:state state_ref="oval:gov.nist.usgcb.rhel:ste:20007"/>
		</unix-def:runlevel_test>
		<unix-def:runlevel_test check_existence="any_exist" id="oval:gov.nist.usgcb.rhel:tst:202934" version="2" check="all" comment="Runlevel test">
			<unix-def:object object_ref="oval:gov.nist.usgcb.rhel:obj:202934"/>
			<unix-def:state state_ref="oval:gov.nist.usgcb.rhel:ste:20007"/>
		</unix-def:runlevel_test>
		<unix-def:runlevel_test check_existence="any_exist" id="oval:gov.nist.usgcb.rhel:tst:202935" version="2" check="all" comment="Runlevel test">
			<unix-def:object object_ref="oval:gov.nist.usgcb.rhel:obj:202935"/>
			<unix-def:state state_ref="oval:gov.nist.usgcb.rhel:ste:20007"/>
		</unix-def:runlevel_test>
		<unix-def:runlevel_test check_existence="any_exist" id="oval:gov.nist.usgcb.rhel:tst:202936" version="2" check="all" comment="Runlevel test">
			<unix-def:object object_ref="oval:gov.nist.usgcb.rhel:obj:202936"/>
			<unix-def:state state_ref="oval:gov.nist.usgcb.rhel:ste:20007"/>
		</unix-def:runlevel_test>
		<unix-def:runlevel_test check_existence="any_exist" id="oval:gov.nist.usgcb.rhel:tst:20294" version="2" check="all" comment="Runlevel test">
			<unix-def:object object_ref="oval:gov.nist.usgcb.rhel:obj:20294"/>
			<unix-def:state state_ref="oval:gov.nist.usgcb.rhel:ste:20007"/>
		</unix-def:runlevel_test>
		<unix-def:runlevel_test check_existence="any_exist" id="oval:gov.nist.usgcb.rhel:tst:202941" version="2" check="all" comment="Runlevel test">
			<unix-def:object object_ref="oval:gov.nist.usgcb.rhel:obj:202941"/>
			<unix-def:state state_ref="oval:gov.nist.usgcb.rhel:ste:20007"/>
		</unix-def:runlevel_test>
		<unix-def:runlevel_test check_existence="any_exist" id="oval:gov.nist.usgcb.rhel:tst:202942" version="2" check="all" comment="Runlevel test">
			<unix-def:object object_ref="oval:gov.nist.usgcb.rhel:obj:202942"/>
			<unix-def:state state_ref="oval:gov.nist.usgcb.rhel:ste:20007"/>
		</unix-def:runlevel_test>
		<unix-def:runlevel_test check_existence="any_exist" id="oval:gov.nist.usgcb.rhel:tst:202943" version="2" check="all" comment="Runlevel test">
			<unix-def:object object_ref="oval:gov.nist.usgcb.rhel:obj:202943"/>
			<unix-def:state state_ref="oval:gov.nist.usgcb.rhel:ste:20007"/>
		</unix-def:runlevel_test>
		<unix-def:runlevel_test check_existence="any_exist" id="oval:gov.nist.usgcb.rhel:tst:202944" version="2" check="all" comment="Runlevel test">
			<unix-def:object object_ref="oval:gov.nist.usgcb.rhel:obj:202944"/>
			<unix-def:state state_ref="oval:gov.nist.usgcb.rhel:ste:20007"/>
		</unix-def:runlevel_test>
		<unix-def:runlevel_test check_existence="any_exist" id="oval:gov.nist.usgcb.rhel:tst:202945" version="2" check="all" comment="Runlevel test">
			<unix-def:object object_ref="oval:gov.nist.usgcb.rhel:obj:202945"/>
			<unix-def:state state_ref="oval:gov.nist.usgcb.rhel:ste:20007"/>
		</unix-def:runlevel_test>
		<unix-def:runlevel_test check_existence="any_exist" id="oval:gov.nist.usgcb.rhel:tst:202946" version="2" check="all" comment="Runlevel test">
			<unix-def:object object_ref="oval:gov.nist.usgcb.rhel:obj:202946"/>
			<unix-def:state state_ref="oval:gov.nist.usgcb.rhel:ste:20007"/>
		</unix-def:runlevel_test>
		<unix-def:runlevel_test check_existence="any_exist" id="oval:gov.nist.usgcb.rhel:tst:20295" version="2" check="all" comment="Runlevel test">
			<unix-def:object object_ref="oval:gov.nist.usgcb.rhel:obj:20295"/>
			<unix-def:state state_ref="oval:gov.nist.usgcb.rhel:ste:20007"/>
		</unix-def:runlevel_test>
		<unix-def:runlevel_test check_existence="any_exist" id="oval:gov.nist.usgcb.rhel:tst:202951" version="2" check="all" comment="Runlevel test">
			<unix-def:object object_ref="oval:gov.nist.usgcb.rhel:obj:202951"/>
			<unix-def:state state_ref="oval:gov.nist.usgcb.rhel:ste:20007"/>
		</unix-def:runlevel_test>
		<unix-def:runlevel_test check_existence="any_exist" id="oval:gov.nist.usgcb.rhel:tst:202952" version="2" check="all" comment="Runlevel test">
			<unix-def:object object_ref="oval:gov.nist.usgcb.rhel:obj:202952"/>
			<unix-def:state state_ref="oval:gov.nist.usgcb.rhel:ste:20007"/>
		</unix-def:runlevel_test>
		<unix-def:runlevel_test check_existence="any_exist" id="oval:gov.nist.usgcb.rhel:tst:202953" version="2" check="all" comment="Runlevel test">
			<unix-def:object object_ref="oval:gov.nist.usgcb.rhel:obj:202953"/>
			<unix-def:state state_ref="oval:gov.nist.usgcb.rhel:ste:20007"/>
		</unix-def:runlevel_test>
		<unix-def:runlevel_test check_existence="any_exist" id="oval:gov.nist.usgcb.rhel:tst:202954" version="2" check="all" comment="Runlevel test">
			<unix-def:object object_ref="oval:gov.nist.usgcb.rhel:obj:202954"/>
			<unix-def:state state_ref="oval:gov.nist.usgcb.rhel:ste:20007"/>
		</unix-def:runlevel_test>
		<unix-def:runlevel_test check_existence="any_exist" id="oval:gov.nist.usgcb.rhel:tst:202955" version="2" check="all" comment="Runlevel test">
			<unix-def:object object_ref="oval:gov.nist.usgcb.rhel:obj:202955"/>
			<unix-def:state state_ref="oval:gov.nist.usgcb.rhel:ste:20007"/>
		</unix-def:runlevel_test>
		<unix-def:runlevel_test check_existence="any_exist" id="oval:gov.nist.usgcb.rhel:tst:202956" version="2" check="all" comment="Runlevel test">
			<unix-def:object object_ref="oval:gov.nist.usgcb.rhel:obj:202956"/>
			<unix-def:state state_ref="oval:gov.nist.usgcb.rhel:ste:20007"/>
		</unix-def:runlevel_test>
		<unix-def:runlevel_test check_existence="any_exist" id="oval:gov.nist.usgcb.rhel:tst:20296" version="2" check="all" comment="Runlevel test">
			<unix-def:object object_ref="oval:gov.nist.usgcb.rhel:obj:20296"/>
			<unix-def:state state_ref="oval:gov.nist.usgcb.rhel:ste:20007"/>
		</unix-def:runlevel_test>
		<unix-def:runlevel_test check_existence="any_exist" id="oval:gov.nist.usgcb.rhel:tst:202961" version="2" check="all" comment="Runlevel test">
			<unix-def:object object_ref="oval:gov.nist.usgcb.rhel:obj:202961"/>
			<unix-def:state state_ref="oval:gov.nist.usgcb.rhel:ste:20007"/>
		</unix-def:runlevel_test>
		<unix-def:runlevel_test check_existence="any_exist" id="oval:gov.nist.usgcb.rhel:tst:202962" version="2" check="all" comment="Runlevel test">
			<unix-def:object object_ref="oval:gov.nist.usgcb.rhel:obj:202962"/>
			<unix-def:state state_ref="oval:gov.nist.usgcb.rhel:ste:20007"/>
		</unix-def:runlevel_test>
		<unix-def:runlevel_test check_existence="any_exist" id="oval:gov.nist.usgcb.rhel:tst:202963" version="2" check="all" comment="Runlevel test">
			<unix-def:object object_ref="oval:gov.nist.usgcb.rhel:obj:202963"/>
			<unix-def:state state_ref="oval:gov.nist.usgcb.rhel:ste:20007"/>
		</unix-def:runlevel_test>
		<unix-def:runlevel_test check_existence="any_exist" id="oval:gov.nist.usgcb.rhel:tst:202964" version="2" check="all" comment="Runlevel test">
			<unix-def:object object_ref="oval:gov.nist.usgcb.rhel:obj:202964"/>
			<unix-def:state state_ref="oval:gov.nist.usgcb.rhel:ste:20007"/>
		</unix-def:runlevel_test>
		<unix-def:runlevel_test check_existence="any_exist" id="oval:gov.nist.usgcb.rhel:tst:202965" version="2" check="all" comment="Runlevel test">
			<unix-def:object object_ref="oval:gov.nist.usgcb.rhel:obj:202965"/>
			<unix-def:state state_ref="oval:gov.nist.usgcb.rhel:ste:20007"/>
		</unix-def:runlevel_test>
		<unix-def:runlevel_test check_existence="any_exist" id="oval:gov.nist.usgcb.rhel:tst:202966" version="2" check="all" comment="Runlevel test">
			<unix-def:object object_ref="oval:gov.nist.usgcb.rhel:obj:202966"/>
			<unix-def:state state_ref="oval:gov.nist.usgcb.rhel:ste:20007"/>
		</unix-def:runlevel_test>
		<unix-def:runlevel_test check_existence="any_exist" id="oval:gov.nist.usgcb.rhel:tst:20303" version="2" check="all" comment="Runlevel test">
			<unix-def:object object_ref="oval:gov.nist.usgcb.rhel:obj:20303"/>
			<unix-def:state state_ref="oval:gov.nist.usgcb.rhel:ste:20007"/>
		</unix-def:runlevel_test>
		<unix-def:runlevel_test check_existence="any_exist" id="oval:gov.nist.usgcb.rhel:tst:203031" version="2" check="all" comment="Runlevel test">
			<unix-def:object object_ref="oval:gov.nist.usgcb.rhel:obj:203031"/>
			<unix-def:state state_ref="oval:gov.nist.usgcb.rhel:ste:20007"/>
		</unix-def:runlevel_test>
		<unix-def:runlevel_test check_existence="any_exist" id="oval:gov.nist.usgcb.rhel:tst:203032" version="2" check="all" comment="Runlevel test">
			<unix-def:object object_ref="oval:gov.nist.usgcb.rhel:obj:203032"/>
			<unix-def:state state_ref="oval:gov.nist.usgcb.rhel:ste:20007"/>
		</unix-def:runlevel_test>
		<unix-def:runlevel_test check_existence="any_exist" id="oval:gov.nist.usgcb.rhel:tst:203033" version="2" check="all" comment="Runlevel test">
			<unix-def:object object_ref="oval:gov.nist.usgcb.rhel:obj:203033"/>
			<unix-def:state state_ref="oval:gov.nist.usgcb.rhel:ste:20007"/>
		</unix-def:runlevel_test>
		<unix-def:runlevel_test check_existence="any_exist" id="oval:gov.nist.usgcb.rhel:tst:203034" version="2" check="all" comment="Runlevel test">
			<unix-def:object object_ref="oval:gov.nist.usgcb.rhel:obj:203034"/>
			<unix-def:state state_ref="oval:gov.nist.usgcb.rhel:ste:20007"/>
		</unix-def:runlevel_test>
		<unix-def:runlevel_test check_existence="any_exist" id="oval:gov.nist.usgcb.rhel:tst:203035" version="2" check="all" comment="Runlevel test">
			<unix-def:object object_ref="oval:gov.nist.usgcb.rhel:obj:203035"/>
			<unix-def:state state_ref="oval:gov.nist.usgcb.rhel:ste:20007"/>
		</unix-def:runlevel_test>
		<unix-def:runlevel_test check_existence="any_exist" id="oval:gov.nist.usgcb.rhel:tst:203036" version="2" check="all" comment="Runlevel test">
			<unix-def:object object_ref="oval:gov.nist.usgcb.rhel:obj:203036"/>
			<unix-def:state state_ref="oval:gov.nist.usgcb.rhel:ste:20007"/>
		</unix-def:runlevel_test>
		<unix-def:runlevel_test check_existence="any_exist" id="oval:gov.nist.usgcb.rhel:tst:20304" version="2" check="all" comment="Runlevel test">
			<unix-def:object object_ref="oval:gov.nist.usgcb.rhel:obj:20304"/>
			<unix-def:state state_ref="oval:gov.nist.usgcb.rhel:ste:20007"/>
		</unix-def:runlevel_test>
		<unix-def:runlevel_test check_existence="any_exist" id="oval:gov.nist.usgcb.rhel:tst:203041" version="2" check="all" comment="Runlevel test">
			<unix-def:object object_ref="oval:gov.nist.usgcb.rhel:obj:203041"/>
			<unix-def:state state_ref="oval:gov.nist.usgcb.rhel:ste:20007"/>
		</unix-def:runlevel_test>
		<unix-def:runlevel_test check_existence="any_exist" id="oval:gov.nist.usgcb.rhel:tst:203042" version="2" check="all" comment="Runlevel test">
			<unix-def:object object_ref="oval:gov.nist.usgcb.rhel:obj:203042"/>
			<unix-def:state state_ref="oval:gov.nist.usgcb.rhel:ste:20007"/>
		</unix-def:runlevel_test>
		<unix-def:runlevel_test check_existence="any_exist" id="oval:gov.nist.usgcb.rhel:tst:203043" version="2" check="all" comment="Runlevel test">
			<unix-def:object object_ref="oval:gov.nist.usgcb.rhel:obj:203043"/>
			<unix-def:state state_ref="oval:gov.nist.usgcb.rhel:ste:20007"/>
		</unix-def:runlevel_test>
		<unix-def:runlevel_test check_existence="any_exist" id="oval:gov.nist.usgcb.rhel:tst:203044" version="2" check="all" comment="Runlevel test">
			<unix-def:object object_ref="oval:gov.nist.usgcb.rhel:obj:203044"/>
			<unix-def:state state_ref="oval:gov.nist.usgcb.rhel:ste:20007"/>
		</unix-def:runlevel_test>
		<unix-def:runlevel_test check_existence="any_exist" id="oval:gov.nist.usgcb.rhel:tst:203045" version="2" check="all" comment="Runlevel test">
			<unix-def:object object_ref="oval:gov.nist.usgcb.rhel:obj:203045"/>
			<unix-def:state state_ref="oval:gov.nist.usgcb.rhel:ste:20007"/>
		</unix-def:runlevel_test>
		<unix-def:runlevel_test check_existence="any_exist" id="oval:gov.nist.usgcb.rhel:tst:203046" version="2" check="all" comment="Runlevel test">
			<unix-def:object object_ref="oval:gov.nist.usgcb.rhel:obj:203046"/>
			<unix-def:state state_ref="oval:gov.nist.usgcb.rhel:ste:20007"/>
		</unix-def:runlevel_test>
		<ind-def:textfilecontent54_test check_existence="any_exist" id="oval:gov.nist.usgcb.rhel:tst:203051" version="1" check="all" comment="if type is nfs[4] in /etc/fstab options should contain nodev">
			<ind-def:object object_ref="oval:gov.nist.usgcb.rhel:obj:20016"/>
			<ind-def:state state_ref="oval:gov.nist.usgcb.rhel:ste:200163"/>
		</ind-def:textfilecontent54_test>
		<ind-def:textfilecontent54_test check_existence="any_exist" id="oval:gov.nist.usgcb.rhel:tst:203052" version="1" check="all" comment="if type is nfs[4] in /etc/mtab options should contain nodev">
			<ind-def:object object_ref="oval:gov.nist.usgcb.rhel:obj:200162"/>
			<ind-def:state state_ref="oval:gov.nist.usgcb.rhel:ste:200163"/>
		</ind-def:textfilecontent54_test>
		<unix-def:runlevel_test check_existence="any_exist" id="oval:gov.nist.usgcb.rhel:tst:20311" version="2" check="all" comment="Runlevel test">
			<unix-def:object object_ref="oval:gov.nist.usgcb.rhel:obj:20311"/>
			<unix-def:state state_ref="oval:gov.nist.usgcb.rhel:ste:20007"/>
		</unix-def:runlevel_test>
		<unix-def:runlevel_test check_existence="any_exist" id="oval:gov.nist.usgcb.rhel:tst:203111" version="2" check="all" comment="Runlevel test">
			<unix-def:object object_ref="oval:gov.nist.usgcb.rhel:obj:203111"/>
			<unix-def:state state_ref="oval:gov.nist.usgcb.rhel:ste:20007"/>
		</unix-def:runlevel_test>
		<unix-def:runlevel_test check_existence="any_exist" id="oval:gov.nist.usgcb.rhel:tst:203112" version="2" check="all" comment="Runlevel test">
			<unix-def:object object_ref="oval:gov.nist.usgcb.rhel:obj:203112"/>
			<unix-def:state state_ref="oval:gov.nist.usgcb.rhel:ste:20007"/>
		</unix-def:runlevel_test>
		<unix-def:runlevel_test check_existence="any_exist" id="oval:gov.nist.usgcb.rhel:tst:203113" version="2" check="all" comment="Runlevel test">
			<unix-def:object object_ref="oval:gov.nist.usgcb.rhel:obj:203113"/>
			<unix-def:state state_ref="oval:gov.nist.usgcb.rhel:ste:20007"/>
		</unix-def:runlevel_test>
		<unix-def:runlevel_test check_existence="any_exist" id="oval:gov.nist.usgcb.rhel:tst:203114" version="2" check="all" comment="Runlevel test">
			<unix-def:object object_ref="oval:gov.nist.usgcb.rhel:obj:203114"/>
			<unix-def:state state_ref="oval:gov.nist.usgcb.rhel:ste:20007"/>
		</unix-def:runlevel_test>
		<unix-def:runlevel_test check_existence="any_exist" id="oval:gov.nist.usgcb.rhel:tst:203115" version="2" check="all" comment="Runlevel test">
			<unix-def:object object_ref="oval:gov.nist.usgcb.rhel:obj:203115"/>
			<unix-def:state state_ref="oval:gov.nist.usgcb.rhel:ste:20007"/>
		</unix-def:runlevel_test>
		<unix-def:runlevel_test check_existence="any_exist" id="oval:gov.nist.usgcb.rhel:tst:203116" version="2" check="all" comment="Runlevel test">
			<unix-def:object object_ref="oval:gov.nist.usgcb.rhel:obj:203116"/>
			<unix-def:state state_ref="oval:gov.nist.usgcb.rhel:ste:20007"/>
		</unix-def:runlevel_test>
		<lin-def:rpminfo_test check_existence="none_exist" id="oval:gov.nist.usgcb.rhel:tst:20312" version="1" check="all" comment="The bind package should be installed or not as appropriate">
			<lin-def:object object_ref="oval:gov.nist.usgcb.rhel:obj:20312"/>
		</lin-def:rpminfo_test>
		<unix-def:runlevel_test check_existence="any_exist" id="oval:gov.nist.usgcb.rhel:tst:203170" version="2" check="all" comment="Runlevel test">
			<unix-def:object object_ref="oval:gov.nist.usgcb.rhel:obj:203170"/>
			<unix-def:state state_ref="oval:gov.nist.usgcb.rhel:ste:20007"/>
		</unix-def:runlevel_test>
		<unix-def:runlevel_test check_existence="any_exist" id="oval:gov.nist.usgcb.rhel:tst:2031701" version="2" check="all" comment="Runlevel test">
			<unix-def:object object_ref="oval:gov.nist.usgcb.rhel:obj:2031701"/>
			<unix-def:state state_ref="oval:gov.nist.usgcb.rhel:ste:20007"/>
		</unix-def:runlevel_test>
		<unix-def:runlevel_test check_existence="any_exist" id="oval:gov.nist.usgcb.rhel:tst:2031702" version="2" check="all" comment="Runlevel test">
			<unix-def:object object_ref="oval:gov.nist.usgcb.rhel:obj:2031702"/>
			<unix-def:state state_ref="oval:gov.nist.usgcb.rhel:ste:20007"/>
		</unix-def:runlevel_test>
		<unix-def:runlevel_test check_existence="any_exist" id="oval:gov.nist.usgcb.rhel:tst:2031703" version="2" check="all" comment="Runlevel test">
			<unix-def:object object_ref="oval:gov.nist.usgcb.rhel:obj:2031703"/>
			<unix-def:state state_ref="oval:gov.nist.usgcb.rhel:ste:20007"/>
		</unix-def:runlevel_test>
		<unix-def:runlevel_test check_existence="any_exist" id="oval:gov.nist.usgcb.rhel:tst:2031704" version="2" check="all" comment="Runlevel test">
			<unix-def:object object_ref="oval:gov.nist.usgcb.rhel:obj:2031704"/>
			<unix-def:state state_ref="oval:gov.nist.usgcb.rhel:ste:20007"/>
		</unix-def:runlevel_test>
		<unix-def:runlevel_test check_existence="any_exist" id="oval:gov.nist.usgcb.rhel:tst:2031705" version="2" check="all" comment="Runlevel test">
			<unix-def:object object_ref="oval:gov.nist.usgcb.rhel:obj:2031705"/>
			<unix-def:state state_ref="oval:gov.nist.usgcb.rhel:ste:20007"/>
		</unix-def:runlevel_test>
		<unix-def:runlevel_test check_existence="any_exist" id="oval:gov.nist.usgcb.rhel:tst:2031706" version="2" check="all" comment="Runlevel test">
			<unix-def:object object_ref="oval:gov.nist.usgcb.rhel:obj:2031706"/>
			<unix-def:state state_ref="oval:gov.nist.usgcb.rhel:ste:20007"/>
		</unix-def:runlevel_test>
		<lin-def:rpminfo_test check_existence="none_exist" id="oval:gov.nist.usgcb.rhel:tst:203175" version="1" check="all" comment="The vsftpd package should be installed or not as appropriate">
			<lin-def:object object_ref="oval:gov.nist.usgcb.rhel:obj:203175"/>
		</lin-def:rpminfo_test>
		<unix-def:runlevel_test check_existence="any_exist" id="oval:gov.nist.usgcb.rhel:tst:20322" version="2" check="all" comment="Runlevel test">
			<unix-def:object object_ref="oval:gov.nist.usgcb.rhel:obj:20322"/>
			<unix-def:state state_ref="oval:gov.nist.usgcb.rhel:ste:20007"/>
		</unix-def:runlevel_test>
		<unix-def:runlevel_test check_existence="any_exist" id="oval:gov.nist.usgcb.rhel:tst:203221" version="2" check="all" comment="Runlevel test">
			<unix-def:object object_ref="oval:gov.nist.usgcb.rhel:obj:203221"/>
			<unix-def:state state_ref="oval:gov.nist.usgcb.rhel:ste:20007"/>
		</unix-def:runlevel_test>
		<unix-def:runlevel_test check_existence="any_exist" id="oval:gov.nist.usgcb.rhel:tst:203222" version="2" check="all" comment="Runlevel test">
			<unix-def:object object_ref="oval:gov.nist.usgcb.rhel:obj:203222"/>
			<unix-def:state state_ref="oval:gov.nist.usgcb.rhel:ste:20007"/>
		</unix-def:runlevel_test>
		<unix-def:runlevel_test check_existence="any_exist" id="oval:gov.nist.usgcb.rhel:tst:203223" version="2" check="all" comment="Runlevel test">
			<unix-def:object object_ref="oval:gov.nist.usgcb.rhel:obj:203223"/>
			<unix-def:state state_ref="oval:gov.nist.usgcb.rhel:ste:20007"/>
		</unix-def:runlevel_test>
		<unix-def:runlevel_test check_existence="any_exist" id="oval:gov.nist.usgcb.rhel:tst:203224" version="2" check="all" comment="Runlevel test">
			<unix-def:object object_ref="oval:gov.nist.usgcb.rhel:obj:203224"/>
			<unix-def:state state_ref="oval:gov.nist.usgcb.rhel:ste:20007"/>
		</unix-def:runlevel_test>
		<unix-def:runlevel_test check_existence="any_exist" id="oval:gov.nist.usgcb.rhel:tst:203225" version="2" check="all" comment="Runlevel test">
			<unix-def:object object_ref="oval:gov.nist.usgcb.rhel:obj:203225"/>
			<unix-def:state state_ref="oval:gov.nist.usgcb.rhel:ste:20007"/>
		</unix-def:runlevel_test>
		<unix-def:runlevel_test check_existence="any_exist" id="oval:gov.nist.usgcb.rhel:tst:203226" version="2" check="all" comment="Runlevel test">
			<unix-def:object object_ref="oval:gov.nist.usgcb.rhel:obj:203226"/>
			<unix-def:state state_ref="oval:gov.nist.usgcb.rhel:ste:20007"/>
		</unix-def:runlevel_test>
		<lin-def:rpminfo_test check_existence="none_exist" id="oval:gov.nist.usgcb.rhel:tst:20323" version="1" check="all" comment="The httpd package should be installed or not as appropriate">
			<lin-def:object object_ref="oval:gov.nist.usgcb.rhel:obj:20323"/>
		</lin-def:rpminfo_test>
		<unix-def:runlevel_test check_existence="any_exist" id="oval:gov.nist.usgcb.rhel:tst:20331" version="2" check="all" comment="Runlevel test">
			<unix-def:object object_ref="oval:gov.nist.usgcb.rhel:obj:20331"/>
			<unix-def:state state_ref="oval:gov.nist.usgcb.rhel:ste:20007"/>
		</unix-def:runlevel_test>
		<unix-def:runlevel_test check_existence="any_exist" id="oval:gov.nist.usgcb.rhel:tst:203311" version="2" check="all" comment="Runlevel test">
			<unix-def:object object_ref="oval:gov.nist.usgcb.rhel:obj:203311"/>
			<unix-def:state state_ref="oval:gov.nist.usgcb.rhel:ste:20007"/>
		</unix-def:runlevel_test>
		<unix-def:runlevel_test check_existence="any_exist" id="oval:gov.nist.usgcb.rhel:tst:203312" version="2" check="all" comment="Runlevel test">
			<unix-def:object object_ref="oval:gov.nist.usgcb.rhel:obj:203312"/>
			<unix-def:state state_ref="oval:gov.nist.usgcb.rhel:ste:20007"/>
		</unix-def:runlevel_test>
		<unix-def:runlevel_test check_existence="any_exist" id="oval:gov.nist.usgcb.rhel:tst:203313" version="2" check="all" comment="Runlevel test">
			<unix-def:object object_ref="oval:gov.nist.usgcb.rhel:obj:203313"/>
			<unix-def:state state_ref="oval:gov.nist.usgcb.rhel:ste:20007"/>
		</unix-def:runlevel_test>
		<unix-def:runlevel_test check_existence="any_exist" id="oval:gov.nist.usgcb.rhel:tst:203314" version="2" check="all" comment="Runlevel test">
			<unix-def:object object_ref="oval:gov.nist.usgcb.rhel:obj:203314"/>
			<unix-def:state state_ref="oval:gov.nist.usgcb.rhel:ste:20007"/>
		</unix-def:runlevel_test>
		<unix-def:runlevel_test check_existence="any_exist" id="oval:gov.nist.usgcb.rhel:tst:203315" version="2" check="all" comment="Runlevel test">
			<unix-def:object object_ref="oval:gov.nist.usgcb.rhel:obj:203315"/>
			<unix-def:state state_ref="oval:gov.nist.usgcb.rhel:ste:20007"/>
		</unix-def:runlevel_test>
		<unix-def:runlevel_test check_existence="any_exist" id="oval:gov.nist.usgcb.rhel:tst:203316" version="2" check="all" comment="Runlevel test">
			<unix-def:object object_ref="oval:gov.nist.usgcb.rhel:obj:203316"/>
			<unix-def:state state_ref="oval:gov.nist.usgcb.rhel:ste:20007"/>
		</unix-def:runlevel_test>
		<lin-def:rpminfo_test check_existence="none_exist" id="oval:gov.nist.usgcb.rhel:tst:20332" version="1" check="all" comment="The dovecot package should be installed or not as appropriate">
			<lin-def:object object_ref="oval:gov.nist.usgcb.rhel:obj:20332"/>
		</lin-def:rpminfo_test>
		<unix-def:runlevel_test check_existence="any_exist" id="oval:gov.nist.usgcb.rhel:tst:203400" version="2" check="all" comment="Runlevel test">
			<unix-def:object object_ref="oval:gov.nist.usgcb.rhel:obj:203400"/>
			<unix-def:state state_ref="oval:gov.nist.usgcb.rhel:ste:20007"/>
		</unix-def:runlevel_test>
		<unix-def:runlevel_test check_existence="any_exist" id="oval:gov.nist.usgcb.rhel:tst:2034001" version="2" check="all" comment="Runlevel test">
			<unix-def:object object_ref="oval:gov.nist.usgcb.rhel:obj:2034001"/>
			<unix-def:state state_ref="oval:gov.nist.usgcb.rhel:ste:20007"/>
		</unix-def:runlevel_test>
		<unix-def:runlevel_test check_existence="any_exist" id="oval:gov.nist.usgcb.rhel:tst:2034002" version="2" check="all" comment="Runlevel test">
			<unix-def:object object_ref="oval:gov.nist.usgcb.rhel:obj:2034002"/>
			<unix-def:state state_ref="oval:gov.nist.usgcb.rhel:ste:20007"/>
		</unix-def:runlevel_test>
		<unix-def:runlevel_test check_existence="any_exist" id="oval:gov.nist.usgcb.rhel:tst:2034003" version="2" check="all" comment="Runlevel test">
			<unix-def:object object_ref="oval:gov.nist.usgcb.rhel:obj:2034003"/>
			<unix-def:state state_ref="oval:gov.nist.usgcb.rhel:ste:20007"/>
		</unix-def:runlevel_test>
		<unix-def:runlevel_test check_existence="any_exist" id="oval:gov.nist.usgcb.rhel:tst:2034004" version="2" check="all" comment="Runlevel test">
			<unix-def:object object_ref="oval:gov.nist.usgcb.rhel:obj:2034004"/>
			<unix-def:state state_ref="oval:gov.nist.usgcb.rhel:ste:20007"/>
		</unix-def:runlevel_test>
		<unix-def:runlevel_test check_existence="any_exist" id="oval:gov.nist.usgcb.rhel:tst:2034005" version="2" check="all" comment="Runlevel test">
			<unix-def:object object_ref="oval:gov.nist.usgcb.rhel:obj:2034005"/>
			<unix-def:state state_ref="oval:gov.nist.usgcb.rhel:ste:20007"/>
		</unix-def:runlevel_test>
		<unix-def:runlevel_test check_existence="any_exist" id="oval:gov.nist.usgcb.rhel:tst:2034006" version="2" check="all" comment="Runlevel test">
			<unix-def:object object_ref="oval:gov.nist.usgcb.rhel:obj:2034006"/>
			<unix-def:state state_ref="oval:gov.nist.usgcb.rhel:ste:20007"/>
		</unix-def:runlevel_test>
		<ind-def:textfilecontent54_test check_existence="none_exist" id="oval:gov.nist.usgcb.rhel:tst:20340111" version="1" check="all" comment="check for no cifs in /etc/fstab">
			<ind-def:object object_ref="oval:gov.nist.usgcb.rhel:obj:20340111"/>
		</ind-def:textfilecontent54_test>
		<ind-def:textfilecontent54_test check_existence="at_least_one_exists" id="oval:gov.nist.usgcb.rhel:tst:20340112" version="1" check="all" comment="check for sec=krb5i or sec=ntlmv2i in /etc/fstab">
			<ind-def:object object_ref="oval:gov.nist.usgcb.rhel:obj:20340111"/>
			<ind-def:state state_ref="oval:gov.nist.usgcb.rhel:ste:20340112"/>
		</ind-def:textfilecontent54_test>
		<ind-def:textfilecontent54_test check_existence="none_exist" id="oval:gov.nist.usgcb.rhel:tst:20340113" version="1" check="all" comment="check for no cifs in /etc/mtab">
			<ind-def:object object_ref="oval:gov.nist.usgcb.rhel:obj:20340112"/>
		</ind-def:textfilecontent54_test>
		<ind-def:textfilecontent54_test check_existence="at_least_one_exists" id="oval:gov.nist.usgcb.rhel:tst:20340114" version="1" check="all" comment="check for sec=krb5i or sec=ntlmv2i in /etc/mtab">
			<ind-def:object object_ref="oval:gov.nist.usgcb.rhel:obj:20340112"/>
			<ind-def:state state_ref="oval:gov.nist.usgcb.rhel:ste:20340112"/>
		</ind-def:textfilecontent54_test>
		<unix-def:runlevel_test check_existence="any_exist" id="oval:gov.nist.usgcb.rhel:tst:20341" version="2" check="all" comment="Runlevel test">
			<unix-def:object object_ref="oval:gov.nist.usgcb.rhel:obj:20341"/>
			<unix-def:state state_ref="oval:gov.nist.usgcb.rhel:ste:20007"/>
		</unix-def:runlevel_test>
		<unix-def:runlevel_test check_existence="any_exist" id="oval:gov.nist.usgcb.rhel:tst:203411" version="2" check="all" comment="Runlevel test">
			<unix-def:object object_ref="oval:gov.nist.usgcb.rhel:obj:203411"/>
			<unix-def:state state_ref="oval:gov.nist.usgcb.rhel:ste:20007"/>
		</unix-def:runlevel_test>
		<unix-def:runlevel_test check_existence="any_exist" id="oval:gov.nist.usgcb.rhel:tst:203412" version="2" check="all" comment="Runlevel test">
			<unix-def:object object_ref="oval:gov.nist.usgcb.rhel:obj:203412"/>
			<unix-def:state state_ref="oval:gov.nist.usgcb.rhel:ste:20007"/>
		</unix-def:runlevel_test>
		<unix-def:runlevel_test check_existence="any_exist" id="oval:gov.nist.usgcb.rhel:tst:203413" version="2" check="all" comment="Runlevel test">
			<unix-def:object object_ref="oval:gov.nist.usgcb.rhel:obj:203413"/>
			<unix-def:state state_ref="oval:gov.nist.usgcb.rhel:ste:20007"/>
		</unix-def:runlevel_test>
		<unix-def:runlevel_test check_existence="any_exist" id="oval:gov.nist.usgcb.rhel:tst:203414" version="2" check="all" comment="Runlevel test">
			<unix-def:object object_ref="oval:gov.nist.usgcb.rhel:obj:203414"/>
			<unix-def:state state_ref="oval:gov.nist.usgcb.rhel:ste:20007"/>
		</unix-def:runlevel_test>
		<unix-def:runlevel_test check_existence="any_exist" id="oval:gov.nist.usgcb.rhel:tst:203415" version="2" check="all" comment="Runlevel test">
			<unix-def:object object_ref="oval:gov.nist.usgcb.rhel:obj:203415"/>
			<unix-def:state state_ref="oval:gov.nist.usgcb.rhel:ste:20007"/>
		</unix-def:runlevel_test>
		<unix-def:runlevel_test check_existence="any_exist" id="oval:gov.nist.usgcb.rhel:tst:203416" version="2" check="all" comment="Runlevel test">
			<unix-def:object object_ref="oval:gov.nist.usgcb.rhel:obj:203416"/>
			<unix-def:state state_ref="oval:gov.nist.usgcb.rhel:ste:20007"/>
		</unix-def:runlevel_test>
		<lin-def:rpminfo_test check_existence="none_exist" id="oval:gov.nist.usgcb.rhel:tst:20342" version="1" check="all" comment="The squid package should be installed or not as appropriate">
			<lin-def:object object_ref="oval:gov.nist.usgcb.rhel:obj:20342"/>
		</lin-def:rpminfo_test>
		<ind-def:textfilecontent54_test check_existence="all_exist" id="oval:gov.nist.usgcb.rhel:tst:20354" version="1" check="all" comment="Tests the value of the log_mime_hdrs[\s]+([^#]*) expression in the /etc/squid/squid.conf file">
			<ind-def:object object_ref="oval:gov.nist.usgcb.rhel:obj:20354"/>
			<ind-def:state state_ref="oval:gov.nist.usgcb.rhel:ste:20354"/>
		</ind-def:textfilecontent54_test>
		<unix-def:runlevel_test check_existence="any_exist" id="oval:gov.nist.usgcb.rhel:tst:20365" version="2" check="all" comment="Runlevel test">
			<unix-def:object object_ref="oval:gov.nist.usgcb.rhel:obj:20365"/>
			<unix-def:state state_ref="oval:gov.nist.usgcb.rhel:ste:20007"/>
		</unix-def:runlevel_test>
		<unix-def:runlevel_test check_existence="any_exist" id="oval:gov.nist.usgcb.rhel:tst:203651" version="2" check="all" comment="Runlevel test">
			<unix-def:object object_ref="oval:gov.nist.usgcb.rhel:obj:203651"/>
			<unix-def:state state_ref="oval:gov.nist.usgcb.rhel:ste:20007"/>
		</unix-def:runlevel_test>
		<unix-def:runlevel_test check_existence="any_exist" id="oval:gov.nist.usgcb.rhel:tst:203652" version="2" check="all" comment="Runlevel test">
			<unix-def:object object_ref="oval:gov.nist.usgcb.rhel:obj:203652"/>
			<unix-def:state state_ref="oval:gov.nist.usgcb.rhel:ste:20007"/>
		</unix-def:runlevel_test>
		<unix-def:runlevel_test check_existence="any_exist" id="oval:gov.nist.usgcb.rhel:tst:203653" version="2" check="all" comment="Runlevel test">
			<unix-def:object object_ref="oval:gov.nist.usgcb.rhel:obj:203653"/>
			<unix-def:state state_ref="oval:gov.nist.usgcb.rhel:ste:20007"/>
		</unix-def:runlevel_test>
		<unix-def:runlevel_test check_existence="any_exist" id="oval:gov.nist.usgcb.rhel:tst:203654" version="2" check="all" comment="Runlevel test">
			<unix-def:object object_ref="oval:gov.nist.usgcb.rhel:obj:203654"/>
			<unix-def:state state_ref="oval:gov.nist.usgcb.rhel:ste:20007"/>
		</unix-def:runlevel_test>
		<unix-def:runlevel_test check_existence="any_exist" id="oval:gov.nist.usgcb.rhel:tst:203655" version="2" check="all" comment="Runlevel test">
			<unix-def:object object_ref="oval:gov.nist.usgcb.rhel:obj:203655"/>
			<unix-def:state state_ref="oval:gov.nist.usgcb.rhel:ste:20007"/>
		</unix-def:runlevel_test>
		<unix-def:runlevel_test check_existence="any_exist" id="oval:gov.nist.usgcb.rhel:tst:203656" version="2" check="all" comment="Runlevel test">
			<unix-def:object object_ref="oval:gov.nist.usgcb.rhel:obj:203656"/>
			<unix-def:state state_ref="oval:gov.nist.usgcb.rhel:ste:20007"/>
		</unix-def:runlevel_test>
		<lin-def:rpminfo_test check_existence="none_exist" id="oval:gov.nist.usgcb.rhel:tst:20366" version="1" check="all" comment="The net-snmp package should be installed or not as appropriate">
			<lin-def:object object_ref="oval:gov.nist.usgcb.rhel:obj:20366"/>
		</lin-def:rpminfo_test>
		<lin-def:rpminfo_test check="all" check_existence="at_least_one_exists" comment="CCE-14068-1" version="1" id="oval:gov.nist.usgcb.rhel:tst:573891">
			<lin-def:object object_ref="oval:gov.nist.usgcb.rhel:obj:573891"/>
		</lin-def:rpminfo_test>
		<lin-def:rpminfo_test check="all" check_existence="none_exist" comment="CCE-14495-6" version="1" id="oval:gov.nist.usgcb.rhel:tst:573892">
			<lin-def:object object_ref="oval:gov.nist.usgcb.rhel:obj:573892"/>
		</lin-def:rpminfo_test>
		<lin-def:rpminfo_test check="all" check_existence="none_exist" comment="CCE-14825-4" version="1" id="oval:gov.nist.usgcb.rhel:tst:573893">
			<lin-def:object object_ref="oval:gov.nist.usgcb.rhel:obj:573893"/>
		</lin-def:rpminfo_test>
		<lin-def:rpminfo_test check="all" check_existence="none_exist" comment="CCE-18031-5" version="1" id="oval:gov.nist.usgcb.rhel:tst:573894">
			<lin-def:object object_ref="oval:gov.nist.usgcb.rhel:obj:573894"/>
		</lin-def:rpminfo_test>
		<lin-def:rpminfo_test check="all" check_existence="none_exist" comment="CCE-17250-2" version="1" id="oval:gov.nist.usgcb.rhel:tst:573895">
			<lin-def:object object_ref="oval:gov.nist.usgcb.rhel:obj:573895"/>
		</lin-def:rpminfo_test>
		<lin-def:rpminfo_test check="all" check_existence="none_exist" comment="CCE-18151-1" version="1" id="oval:gov.nist.usgcb.rhel:tst:573896">
			<lin-def:object object_ref="oval:gov.nist.usgcb.rhel:obj:573896"/>
		</lin-def:rpminfo_test>
		<lin-def:rpminfo_test check="all" check_existence="none_exist" comment="CCE-18200-6" version="1" id="oval:gov.nist.usgcb.rhel:tst:573897">
			<lin-def:object object_ref="oval:gov.nist.usgcb.rhel:obj:573897"/>
		</lin-def:rpminfo_test>
		<lin-def:rpminfo_test check="all" check_existence="none_exist" comment="CCE-17504-2" version="1" id="oval:gov.nist.usgcb.rhel:tst:573898">
			<lin-def:object object_ref="oval:gov.nist.usgcb.rhel:obj:573898"/>
		</lin-def:rpminfo_test>
		<ind-def:textfilecontent54_test check_existence="at_least_one_exists" id="oval:gov.nist.usgcb.rhel:tst:43130" version="1" check="all" comment="TODO::INSERT">
			<ind-def:object object_ref="oval:gov.nist.usgcb.rhel:obj:43130"/>
		</ind-def:textfilecontent54_test>
		<ind-def:textfilecontent54_test check_existence="at_least_one_exists" id="oval:gov.nist.usgcb.rhel:tst:42690" version="1" check="all" comment="TODO::INSERT">
			<ind-def:object object_ref="oval:gov.nist.usgcb.rhel:obj:42690"/>
		</ind-def:textfilecontent54_test>
		<ind-def:textfilecontent54_test check_existence="at_least_one_exists" id="oval:gov.nist.usgcb.rhel:tst:150180" version="1" check="all" comment="TODO::INSERT">
			<ind-def:object object_ref="oval:gov.nist.usgcb.rhel:obj:150180"/>
		</ind-def:textfilecontent54_test>
		<ind-def:textfilecontent54_test check_existence="none_exist" id="oval:gov.nist.usgcb.rhel:tst:36490" version="1" check="all" comment="TODO::INSERT">
			<ind-def:object object_ref="oval:gov.nist.usgcb.rhel:obj:36490"/>
		</ind-def:textfilecontent54_test>
		<ind-def:textfilecontent54_test check_existence="none_exist" id="oval:gov.nist.usgcb.rhel:tst:36491" version="1" check="all" comment="TODO::INSERT">
			<ind-def:object object_ref="oval:gov.nist.usgcb.rhel:obj:36491"/>
		</ind-def:textfilecontent54_test>
		<ind-def:textfilecontent54_test check_existence="none_exist" id="oval:gov.nist.usgcb.rhel:tst:180370" version="1" check="all" comment="TODO::INSERT">
			<ind-def:object object_ref="oval:gov.nist.usgcb.rhel:obj:180370"/>
		</ind-def:textfilecontent54_test>
		<ind-def:textfilecontent54_test check_existence="none_exist" id="oval:gov.nist.usgcb.rhel:tst:180371" version="1" check="all" comment="TODO::INSERT">
			<ind-def:object object_ref="oval:gov.nist.usgcb.rhel:obj:180371"/>
		</ind-def:textfilecontent54_test>
		<ind-def:unknown_test id="oval:gov.nist.usgcb.rhel:tst:43850" version="1" check="all" comment="remote NTP server is specified"/>
		<ind-def:textfilecontent54_test check_existence="at_least_one_exists" id="oval:gov.nist.usgcb.rhel:tst:178160" version="1" check="all" comment="TODO::INSERT">
			<ind-def:object object_ref="oval:gov.nist.usgcb.rhel:obj:178160"/>
		</ind-def:textfilecontent54_test>
		<ind-def:textfilecontent54_test check_existence="at_least_one_exists" id="oval:gov.nist.usgcb.rhel:tst:140630" version="1" check="all" comment="TODO::INSERT">
			<ind-def:object object_ref="oval:gov.nist.usgcb.rhel:obj:140630"/>
		</ind-def:textfilecontent54_test>
		<ind-def:textfilecontent54_test check_existence="at_least_one_exists" id="oval:gov.nist.usgcb.rhel:tst:140631" version="1" check="all" comment="TODO::INSERT">
			<ind-def:object object_ref="oval:gov.nist.usgcb.rhel:obj:140631"/>
		</ind-def:textfilecontent54_test>
		<ind-def:textfilecontent54_test check_existence="at_least_one_exists" id="oval:gov.nist.usgcb.rhel:tst:140632" version="1" check="all" comment="TODO::INSERT">
			<ind-def:object object_ref="oval:gov.nist.usgcb.rhel:obj:140632"/>
		</ind-def:textfilecontent54_test>
		<ind-def:unknown_test id="oval:gov.nist.usgcb.rhel:tst:182440" version="1" check="all" comment="Test implementation is unknown, unavailable, or impossible"/>
		<ind-def:unknown_test id="oval:gov.nist.usgcb.rhel:tst:40720" version="1" check="all" comment="Test implementation is unknown, unavailable, or impossible"/>
		<ind-def:unknown_test id="oval:gov.nist.usgcb.rhel:tst:181560" version="1" check="all" comment="Test implementation is unknown, unavailable, or impossible"/>
		<ind-def:unknown_test id="oval:gov.nist.usgcb.rhel:tst:43680" version="1" check="all" comment="Test implementation is unknown, unavailable, or impossible"/>
		
		<ind-def:unknown_test id="oval:gov.nist.usgcb.rhel:tst:140890" version="1" check="all" comment="Test implementation is unknown, unavailable, or impossible"/>
		<ind-def:unknown_test id="oval:gov.nist.usgcb.rhel:tst:140930" version="1" check="all" comment="Test implementation is unknown, unavailable, or impossible"/>
		<ind-def:unknown_test id="oval:gov.nist.usgcb.rhel:tst:141180" version="1" check="all" comment="Test implementation is unknown, unavailable, or impossible"/>
		<ind-def:unknown_test id="oval:gov.nist.usgcb.rhel:tst:144570" version="1" check="all" comment="Test implementation is unknown, unavailable, or impossible"/>
		<ind-def:unknown_test id="oval:gov.nist.usgcb.rhel:tst:148530" version="1" check="all" comment="Test implementation is unknown, unavailable, or impossible"/>
		<ind-def:unknown_test id="oval:gov.nist.usgcb.rhel:tst:148710" version="1" check="all" comment="Test implementation is unknown, unavailable, or impossible"/>
		<ind-def:unknown_test id="oval:gov.nist.usgcb.rhel:tst:150870" version="1" check="all" comment="Test implementation is unknown, unavailable, or impossible"/>
		<ind-def:unknown_test id="oval:gov.nist.usgcb.rhel:tst:35620" version="1" check="all" comment="Test implementation is unknown, unavailable, or impossible"/>
		<ind-def:unknown_test id="oval:gov.nist.usgcb.rhel:tst:140270" version="1" check="all" comment="Test implementation is unknown, unavailable, or impossible"/>
		<ind-def:unknown_test id="oval:gov.nist.usgcb.rhel:tst:141320" version="1" check="all" comment="Test implementation is unknown, unavailable, or impossible"/>
		<ind-def:unknown_test id="oval:gov.nist.usgcb.rhel:tst:149110" version="1" check="all" comment="Test implementation is unknown, unavailable, or impossible"/>
		<ind-def:unknown_test id="oval:gov.nist.usgcb.rhel:tst:142680" version="1" check="all" comment="Test implementation is unknown, unavailable, or impossible"/>
		<ind-def:unknown_test id="oval:gov.nist.usgcb.rhel:tst:41880" version="1" check="all" comment="Test implementation is unknown, unavailable, or impossible"/>
		<ind-def:unknown_test id="oval:gov.nist.usgcb.rhel:tst:42490" version="1" check="all" comment="Test implementation is unknown, unavailable, or impossible"/>
		<unix-def:file_test check="all"  check_existence="none_exist" comment="check for the existince of /proc/net/wireless" version="1" id="oval:gov.nist.usgcb.rhel:tst:42760">
			<unix-def:object object_ref="oval:gov.nist.usgcb.rhel:obj:42760"/>
		</unix-def:file_test>
		<ind-def:unknown_test id="oval:gov.nist.usgcb.rhel:tst:34850" version="1" check="all" comment="Test implementation is unknown, unavailable, or impossible"/>
		<ind-def:unknown_test id="oval:gov.nist.usgcb.rhel:tst:42560" version="1" check="all" comment="Test implementation is unknown, unavailable, or impossible"/>
		<lin-def:partition_test check="all" comment="check for nodev option on /tmp" version="1" id="oval:gov.nist.usgcb.rhel:tst:144120">
			<lin-def:object object_ref="oval:gov.nist.usgcb.rhel:obj:144120"/>
			<lin-def:state state_ref="oval:gov.nist.usgcb.rhel:ste:144120"/>
		</lin-def:partition_test>
		<ind-def:textfilecontent54_test id="oval:gov.nist.usgcb.rhel:tst:99900" version="1" check="all" comment="Test for INACTIVE=30 in /etc/default/useradd">
			<ind-def:object object_ref="oval:gov.nist.usgcb.rhel:obj:99900"/>
			<ind-def:state state_ref="oval:gov.nist.usgcb.rhel:ste:99900"/>
		</ind-def:textfilecontent54_test>
	</tests>
	<objects>
		<!-- OVAL Repository definition objects -->
		<uname_object id="oval:org.mitre.oval:obj:2759" version="1" comment="The single uname object." xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix"/>
		<rpminfo_object id="oval:org.mitre.oval:obj:1414" version="1" comment="the redhat-release rpm" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
			<name>redhat-release</name>
		</rpminfo_object>
		<!-- end OVAL repository definition objects -->
		<ind-def:textfilecontent54_object id="oval:gov.nist.usgcb.rhel:obj:201490" version="1" comment="paths in /etc/syslog.conf">
			<ind-def:path>/etc</ind-def:path>
			<ind-def:filename>syslog.conf</ind-def:filename>
			<ind-def:pattern operation="pattern match">^[^\#][\s]*[\S]+\.[\S]+[\s]+[\-]?.([\S]+)</ind-def:pattern>
			<ind-def:instance datatype="int">1</ind-def:instance>
		</ind-def:textfilecontent54_object>
		<rpminfo_object id="oval:gov.nist.usgcb.rhel:obj:10000" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
			<name>redhat-release</name>
		</rpminfo_object>
		<family_object id="oval:gov.nist.usgcb.rhel:obj:20001" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent"/>
		<ind-def:textfilecontent54_object id="oval:gov.nist.usgcb.rhel:obj:20000" version="1" comment="look for the partition mount point in /etc/fstab">
			<ind-def:path>/etc</ind-def:path>
			<ind-def:filename>fstab</ind-def:filename>
			<ind-def:pattern operation="pattern match">^[\s]*[\S]+[\s]+([\S]+)[\s]+[\S]+[\s]+[\S]+[\s]+[\S]+[\s]+[\S]+</ind-def:pattern>
			<ind-def:instance datatype="int" operation="greater than or equal">1</ind-def:instance>
		</ind-def:textfilecontent54_object>
		<lin-def:rpminfo_object id="oval:gov.nist.usgcb.rhel:obj:200065" version="1">
			<lin-def:name>gpg-pubkey</lin-def:name>
		</lin-def:rpminfo_object>
		<unix-def:file_object id="oval:gov.nist.usgcb.rhel:obj:20009" version="1" comment="Check existance of yum.cron">
			<unix-def:path operation="pattern match">^/etc/cron\.(hourly|daily|weekly|monthly)$</unix-def:path>
			<unix-def:filename>yum.cron</unix-def:filename>
		</unix-def:file_object>
		<ind-def:textfilecontent54_object id="oval:gov.nist.usgcb.rhel:obj:20010" version="1" comment="look for the value of gpgcheck in /etc/yum.conf">
			<ind-def:path>/etc</ind-def:path>
			<ind-def:filename>yum.conf</ind-def:filename>
			<ind-def:pattern operation="pattern match">^[\s]*gpgcheck[\s]*=[\s]*([0-1])</ind-def:pattern>
			<ind-def:instance datatype="int" operation="equals">1</ind-def:instance>
		</ind-def:textfilecontent54_object>
		<ind-def:textfilecontent54_object id="oval:gov.nist.usgcb.rhel:obj:20011" version="1" comment="look for the value of gpgcheck= in /etc/yum.repos.d">
			<ind-def:path>/etc/yum.repos.d</ind-def:path>
			<ind-def:filename operation="pattern match">.*</ind-def:filename>
			<ind-def:pattern operation="pattern match">^[\s]*gpgcheck[\s]*=[\s]*([0-1])</ind-def:pattern>
			<ind-def:instance datatype="int" operation="equals">1</ind-def:instance>
		</ind-def:textfilecontent54_object>
		<ind-def:textfilecontent54_object id="oval:gov.nist.usgcb.rhel:obj:20012" version="1" comment="look for the value of repo_gpgcheck in /etc/yum.conf">
			<ind-def:path>/etc</ind-def:path>
			<ind-def:filename>yum.conf</ind-def:filename>
			<ind-def:pattern operation="pattern match">^[\s]*repo_gpgcheck[\s]*=[\s]*([0-1])</ind-def:pattern>
			<ind-def:instance datatype="int" operation="equals">1</ind-def:instance>
		</ind-def:textfilecontent54_object>
		<ind-def:textfilecontent54_object id="oval:gov.nist.usgcb.rhel:obj:20013" version="1" comment="look for the value of repo_gpgcheck= in /etc/yum.repos.d">
			<ind-def:path>/etc/yum.repos.d</ind-def:path>
			<ind-def:filename operation="pattern match">.*</ind-def:filename>
			<ind-def:pattern operation="pattern match">^[\s]*repo_gpgcheck[\s]*=[\s]*([0-1])</ind-def:pattern>
			<ind-def:instance datatype="int" operation="equals">1</ind-def:instance>
		</ind-def:textfilecontent54_object>
		<ind-def:textfilecontent54_object id="oval:gov.nist.usgcb.rhel:obj:20016" version="1" comment="nfs4? file systems mounted not on / defined in /etc/fstab">
			<ind-def:path>/etc</ind-def:path>
			<ind-def:filename>fstab</ind-def:filename>
			<ind-def:pattern operation="pattern match">^[\w/\d=\-]+[\s]+/[\w/\d]+[\s]+nfs[4]?[\s]+([\w,]+)$</ind-def:pattern>
			<ind-def:instance datatype="int" operation="greater than or equal">0</ind-def:instance>
		</ind-def:textfilecontent54_object>
		<ind-def:textfilecontent54_object id="oval:gov.nist.usgcb.rhel:obj:200162" version="1" comment="nfs4? file systems mounted not on / defined in /etc/mtab">
			<ind-def:path>/etc</ind-def:path>
			<ind-def:filename>mtab</ind-def:filename>
			<ind-def:pattern operation="pattern match">^[\w/\d=\-]+[\s]+/[\w/\d]+[\s]+nfs[4]?[\s]+([\w,]+)$</ind-def:pattern>
			<ind-def:instance datatype="int" operation="greater than or equal">0</ind-def:instance>
		</ind-def:textfilecontent54_object>
		<unix-def:runlevel_object id="oval:gov.nist.usgcb.rhel:obj:20007" version="1">
			<unix-def:service_name>rhnsd</unix-def:service_name>
			<unix-def:runlevel operation="equals">0</unix-def:runlevel>
		</unix-def:runlevel_object>
		<unix-def:runlevel_object id="oval:gov.nist.usgcb.rhel:obj:200071" version="1">
			<unix-def:service_name>rhnsd</unix-def:service_name>
			<unix-def:runlevel operation="equals">1</unix-def:runlevel>
		</unix-def:runlevel_object>
		<unix-def:runlevel_object id="oval:gov.nist.usgcb.rhel:obj:200072" version="1">
			<unix-def:service_name>rhnsd</unix-def:service_name>
			<unix-def:runlevel operation="equals">2</unix-def:runlevel>
		</unix-def:runlevel_object>
		<unix-def:runlevel_object id="oval:gov.nist.usgcb.rhel:obj:200073" version="1">
			<unix-def:service_name>rhnsd</unix-def:service_name>
			<unix-def:runlevel operation="equals">3</unix-def:runlevel>
		</unix-def:runlevel_object>
		<unix-def:runlevel_object id="oval:gov.nist.usgcb.rhel:obj:200074" version="1">
			<unix-def:service_name>rhnsd</unix-def:service_name>
			<unix-def:runlevel operation="equals">4</unix-def:runlevel>
		</unix-def:runlevel_object>
		<unix-def:runlevel_object id="oval:gov.nist.usgcb.rhel:obj:200075" version="1">
			<unix-def:service_name>rhnsd</unix-def:service_name>
			<unix-def:runlevel operation="equals">5</unix-def:runlevel>
		</unix-def:runlevel_object>
		<unix-def:runlevel_object id="oval:gov.nist.usgcb.rhel:obj:200076" version="1">
			<unix-def:service_name>rhnsd</unix-def:service_name>
			<unix-def:runlevel operation="equals">6</unix-def:runlevel>
		</unix-def:runlevel_object>
		<unix-def:runlevel_object id="oval:gov.nist.usgcb.rhel:obj:20008" version="1">
			<unix-def:service_name>yum-updatesd</unix-def:service_name>
			<unix-def:runlevel operation="equals">0</unix-def:runlevel>
		</unix-def:runlevel_object>
		<unix-def:runlevel_object id="oval:gov.nist.usgcb.rhel:obj:200081" version="1">
			<unix-def:service_name>yum-updatesd</unix-def:service_name>
			<unix-def:runlevel operation="equals">1</unix-def:runlevel>
		</unix-def:runlevel_object>
		<unix-def:runlevel_object id="oval:gov.nist.usgcb.rhel:obj:200082" version="1">
			<unix-def:service_name>yum-updatesd</unix-def:service_name>
			<unix-def:runlevel operation="equals">2</unix-def:runlevel>
		</unix-def:runlevel_object>
		<unix-def:runlevel_object id="oval:gov.nist.usgcb.rhel:obj:200083" version="1">
			<unix-def:service_name>yum-updatesd</unix-def:service_name>
			<unix-def:runlevel operation="equals">3</unix-def:runlevel>
		</unix-def:runlevel_object>
		<unix-def:runlevel_object id="oval:gov.nist.usgcb.rhel:obj:200084" version="1">
			<unix-def:service_name>yum-updatesd</unix-def:service_name>
			<unix-def:runlevel operation="equals">4</unix-def:runlevel>
		</unix-def:runlevel_object>
		<unix-def:runlevel_object id="oval:gov.nist.usgcb.rhel:obj:200085" version="1">
			<unix-def:service_name>yum-updatesd</unix-def:service_name>
			<unix-def:runlevel operation="equals">5</unix-def:runlevel>
		</unix-def:runlevel_object>
		<unix-def:runlevel_object id="oval:gov.nist.usgcb.rhel:obj:200086" version="1">
			<unix-def:service_name>yum-updatesd</unix-def:service_name>
			<unix-def:runlevel operation="equals">6</unix-def:runlevel>
		</unix-def:runlevel_object>
		<lin-def:rpminfo_object id="oval:gov.nist.usgcb.rhel:obj:20014" version="1">
			<lin-def:name>aide</lin-def:name>
		</lin-def:rpminfo_object>
		<ind-def:textfilecontent54_object id="oval:gov.nist.usgcb.rhel:obj:20020" version="1" comment="&lt;console&gt; and &lt;xconsole&gt; in /etc/security/console.perms.d/50-default.perms">
			<ind-def:path>/etc/security/console.perms.d</ind-def:path>
			<ind-def:filename>50-default.perms</ind-def:filename>
			<ind-def:pattern operation="pattern match">^[\s]*(&lt;console&gt;|&lt;xconsole&gt;)</ind-def:pattern>
			<ind-def:instance datatype="int" operation="greater than or equal">1</ind-def:instance>
		</ind-def:textfilecontent54_object>
		<ind-def:textfilecontent54_object id="oval:gov.nist.usgcb.rhel:obj:20021" version="1">
			<ind-def:path>/etc</ind-def:path>
			<ind-def:filename>modprobe.conf</ind-def:filename>
			<ind-def:pattern operation="pattern match">^[\s]*install[\s]+usb\-storage[\s]+:([[\s]#].*)?$</ind-def:pattern>
			<ind-def:instance datatype="int">1</ind-def:instance>
		</ind-def:textfilecontent54_object>
		<unix-def:file_object id="oval:gov.nist.usgcb.rhel:obj:20022" version="1" comment="/lib/modules/*/kernel/drivers/usb/storage/usb-storage.ko">
			<unix-def:path operation="pattern match">^/lib/modules/*/kernel/drivers/usb/storage$</unix-def:path>
			<unix-def:filename>usb-storage.ko</unix-def:filename>
		</unix-def:file_object>
		<ind-def:textfilecontent54_object id="oval:gov.nist.usgcb.rhel:obj:20023" version="1">
			<ind-def:path>/boot/grub</ind-def:path>
			<ind-def:filename>grub.conf</ind-def:filename>
			<ind-def:pattern operation="pattern match">^[\s]*kernel[^#]nousb</ind-def:pattern>
			<ind-def:instance datatype="int">1</ind-def:instance>
		</ind-def:textfilecontent54_object>
		<!--<unix-def:runlevel_object id="oval:gov.nist.usgcb.rhel:obj:20025" version="1">
			<unix-def:service_name>autofs</unix-def:service_name>
			<unix-def:runlevel operation="equals">0</unix-def:runlevel>
		</unix-def:runlevel_object>
		<unix-def:runlevel_object id="oval:gov.nist.usgcb.rhel:obj:200251" version="1">
			<unix-def:service_name>autofs</unix-def:service_name>
			<unix-def:runlevel operation="equals">1</unix-def:runlevel>
		</unix-def:runlevel_object>
		<unix-def:runlevel_object id="oval:gov.nist.usgcb.rhel:obj:200252" version="1">
			<unix-def:service_name>autofs</unix-def:service_name>
			<unix-def:runlevel operation="equals">2</unix-def:runlevel>
		</unix-def:runlevel_object>
		<unix-def:runlevel_object id="oval:gov.nist.usgcb.rhel:obj:200253" version="1">
			<unix-def:service_name>autofs</unix-def:service_name>
			<unix-def:runlevel operation="equals">3</unix-def:runlevel>
		</unix-def:runlevel_object>
		<unix-def:runlevel_object id="oval:gov.nist.usgcb.rhel:obj:200254" version="1">
			<unix-def:service_name>autofs</unix-def:service_name>
			<unix-def:runlevel operation="equals">4</unix-def:runlevel>
		</unix-def:runlevel_object>
		<unix-def:runlevel_object id="oval:gov.nist.usgcb.rhel:obj:200255" version="1">
			<unix-def:service_name>autofs</unix-def:service_name>
			<unix-def:runlevel operation="equals">5</unix-def:runlevel>
		</unix-def:runlevel_object>
		<unix-def:runlevel_object id="oval:gov.nist.usgcb.rhel:obj:200256" version="1">
			<unix-def:service_name>autofs</unix-def:service_name>
			<unix-def:runlevel operation="equals">6</unix-def:runlevel>
		</unix-def:runlevel_object>-->
		<!--<ind-def:xmlfilecontent_object id="oval:gov.nist.usgcb.rhel:obj:20026" version="1">
			<ind-def:path>/etc/gconf</ind-def:path>
			<ind-def:filename>gconf.xml.mandatory</ind-def:filename>
			<ind-def:xpath>/desktop/gnome/volume_manager/automount_(media)|(drives)</ind-def:xpath>
		</ind-def:xmlfilecontent_object>-->
		<ind-def:textfilecontent54_object id="oval:gov.nist.usgcb.rhel:obj:20027" version="2" comment="Check in /etc/modprobe.d/usgcb-blacklist for modules being loaded">
			<ind-def:path>/etc/modprobe.d</ind-def:path>
			<ind-def:filename>usgcb-blacklist</ind-def:filename>
			<ind-def:pattern operation="pattern match">^[\s]*install[\s]+([\S]+)[\s]+/bin/true</ind-def:pattern>
			<ind-def:instance datatype="int" operation="greater than or equal">1</ind-def:instance>
		</ind-def:textfilecontent54_object>
		<unix-def:file_object id="oval:gov.nist.usgcb.rhel:obj:20034" version="1" comment="/etc/shadow">
			<unix-def:path>/etc</unix-def:path>
			<unix-def:filename>shadow</unix-def:filename>
		</unix-def:file_object>
		<unix-def:file_object id="oval:gov.nist.usgcb.rhel:obj:20036" version="1" comment="/etc/group">
			<unix-def:path>/etc</unix-def:path>
			<unix-def:filename>group</unix-def:filename>
		</unix-def:file_object>
		<unix-def:file_object id="oval:gov.nist.usgcb.rhel:obj:20038" version="1" comment="/etc/gshadow">
			<unix-def:path>/etc</unix-def:path>
			<unix-def:filename>gshadow</unix-def:filename>
		</unix-def:file_object>
		<unix-def:file_object id="oval:gov.nist.usgcb.rhel:obj:20040" version="1" comment="/etc/passwd">
			<unix-def:path>/etc</unix-def:path>
			<unix-def:filename>passwd</unix-def:filename>
		</unix-def:file_object>
		<unix-def:file_object id="oval:gov.nist.usgcb.rhel:obj:20046" version="1" comment="all local world writable directories">
			<unix-def:behaviors recurse_direction="down" recurse_file_system="local" recurse="directories"/>
			<unix-def:path>/</unix-def:path>
			<unix-def:filename xsi:nil="true"/>
			<filter>oval:gov.nist.usgcb.rhel:ste:200461</filter>
		</unix-def:file_object>
		<unix-def:file_object id="oval:gov.nist.usgcb.rhel:obj:20047" version="1" comment="all local world writable (regular) files">
			<unix-def:behaviors recurse="directories" recurse_direction="down" recurse_file_system="local"/>
			<unix-def:path>/</unix-def:path>
			<unix-def:filename operation="pattern match">.*</unix-def:filename>
			<filter>oval:gov.nist.usgcb.rhel:ste:200461</filter>
			<filter>oval:gov.nist.usgcb.rhel:ste:200471</filter>
		</unix-def:file_object>
		<unix-def:file_object id="oval:gov.nist.usgcb.rhel:obj:20048" version="1" comment="all local (regular) files with sgid bit set">
			<unix-def:behaviors recurse="directories" recurse_direction="down" recurse_file_system="local"/>
			<unix-def:path>/</unix-def:path>
			<unix-def:filename operation="pattern match">.*</unix-def:filename>
			<filter>oval:gov.nist.usgcb.rhel:ste:200471</filter>
			<filter>oval:gov.nist.usgcb.rhel:ste:200481</filter>
			<filter>oval:gov.nist.usgcb.rhel:ste:200482</filter>
		</unix-def:file_object>
		<unix-def:file_object id="oval:gov.nist.usgcb.rhel:obj:20049" version="1" comment="all local (regular) files with suid bit set">
			<unix-def:behaviors recurse="directories" recurse_direction="down" recurse_file_system="local"/>
			<unix-def:path>/</unix-def:path>
			<unix-def:filename operation="pattern match">.*</unix-def:filename>
			<filter>oval:gov.nist.usgcb.rhel:ste:200471</filter>
			<filter>oval:gov.nist.usgcb.rhel:ste:200491</filter>
			<filter>oval:gov.nist.usgcb.rhel:ste:200492</filter>
		</unix-def:file_object>
		<unix-def:file_object id="oval:gov.nist.usgcb.rhel:obj:20050" version="1" comment="all local files without a valid user assigned">
			<unix-def:behaviors recurse="directories" recurse_direction="down" recurse_file_system="local"/>
			<unix-def:path>/</unix-def:path>
			<unix-def:filename operation="pattern match">.*</unix-def:filename>
			<filter>oval:gov.nist.usgcb.rhel:ste:20050</filter>
		</unix-def:file_object>
		<ind-def:textfilecontent54_object id="oval:gov.nist.usgcb.rhel:obj:200501" version="1">
			<ind-def:filepath>/etc/passwd</ind-def:filepath>
			<ind-def:pattern operation="pattern match">^[^:]+:[^:]+:([\d]+):[\d]+:[^:]*:[^:]+:[^:]*$</ind-def:pattern>
			<ind-def:instance operation="greater than or equal" datatype="int">1</ind-def:instance>
		</ind-def:textfilecontent54_object>
		<unix-def:file_object id="oval:gov.nist.usgcb.rhel:obj:20051" version="1" comment="all local files without a valid group assigned">
			<unix-def:behaviors recurse="directories" recurse_direction="down" recurse_file_system="local"/>
			<unix-def:path>/</unix-def:path>
			<unix-def:filename operation="pattern match">.*</unix-def:filename>
			<filter>oval:gov.nist.usgcb.rhel:ste:20051</filter>
		</unix-def:file_object>
		<ind-def:textfilecontent54_object id="oval:gov.nist.usgcb.rhel:obj:200511" version="1">
			<ind-def:filepath>/etc/group</ind-def:filepath>
			<ind-def:pattern operation="pattern match">^[^:]+:[^:]*:([\d]+):[^:]*$</ind-def:pattern>
			<ind-def:instance operation="greater than or equal" datatype="int">1</ind-def:instance>
		</ind-def:textfilecontent54_object>
		<unix-def:file_object id="oval:gov.nist.usgcb.rhel:obj:20052" version="1" comment="world writable directories with uid not less than 500">
			<unix-def:behaviors recurse_direction="down" recurse_file_system="local" recurse="directories"/>
			<unix-def:path>/</unix-def:path>
			<unix-def:filename xsi:nil="true"/>
			<filter>oval:gov.nist.usgcb.rhel:ste:20052</filter>
		</unix-def:file_object>
		<ind-def:textfilecontent54_object id="oval:gov.nist.usgcb.rhel:obj:20053" version="1">
			<ind-def:path>/etc/sysconfig</ind-def:path>
			<ind-def:filename>init</ind-def:filename>
			<ind-def:pattern operation="pattern match">umask[\s]+(.*)</ind-def:pattern>
			<ind-def:instance datatype="int">1</ind-def:instance>
		</ind-def:textfilecontent54_object>
		<ind-def:textfilecontent54_object id="oval:gov.nist.usgcb.rhel:obj:20055" version="1">
			<ind-def:path>/etc/security</ind-def:path>
			<ind-def:filename>limits.conf</ind-def:filename>
			<ind-def:pattern operation="pattern match">^[\s]*\*[\s]+hard[\s]+core[\s]+([\d]+)</ind-def:pattern>
			<ind-def:instance datatype="int">1</ind-def:instance>
		</ind-def:textfilecontent54_object>
		<ind-def:textfilecontent54_object id="oval:gov.nist.usgcb.rhel:obj:20056" version="1">
			<ind-def:path>/etc/security</ind-def:path>
			<ind-def:filename>limits.conf</ind-def:filename>
			<ind-def:pattern operation="pattern match">^fs.suid_dumpable\s+=\s+1$</ind-def:pattern>
			<ind-def:instance datatype="int">1</ind-def:instance>
		</ind-def:textfilecontent54_object>
		<ind-def:textfilecontent54_object id="oval:gov.nist.usgcb.rhel:obj:20058" version="1">
			<ind-def:path>/proc/sys/kernel</ind-def:path>
			<ind-def:filename>randomize_va_space</ind-def:filename>
			<ind-def:pattern operation="pattern match">^1$</ind-def:pattern>
			<ind-def:instance datatype="int">1</ind-def:instance>
		</ind-def:textfilecontent54_object>
		<ind-def:textfilecontent54_object id="oval:gov.nist.usgcb.rhel:obj:20057" version="1">
			<ind-def:path>/proc/sys/kernel</ind-def:path>
			<ind-def:filename>exec-shield</ind-def:filename>
			<ind-def:pattern operation="pattern match">^1$</ind-def:pattern>
			<ind-def:instance datatype="int">1</ind-def:instance>
		</ind-def:textfilecontent54_object>
		<lin-def:rpminfo_object id="oval:gov.nist.usgcb.rhel:obj:20059" version="1">
			<lin-def:name>kernel-PAE</lin-def:name>
		</lin-def:rpminfo_object>
		<ind-def:textfilecontent54_object id="oval:gov.nist.usgcb.rhel:obj:20061" version="1">
			<ind-def:path>/etc/</ind-def:path>
			<ind-def:filename>securetty</ind-def:filename>
			<ind-def:pattern operation="pattern match">^[\s]*tty[0-9]+([[\s]#].*)?$</ind-def:pattern>
			<ind-def:instance datatype="int">1</ind-def:instance>
		</ind-def:textfilecontent54_object>
		<ind-def:textfilecontent54_object id="oval:gov.nist.usgcb.rhel:obj:20062" version="1">
			<ind-def:path>/etc</ind-def:path>
			<ind-def:filename>securetty</ind-def:filename>
			<ind-def:pattern operation="pattern match">^[\s]*Vc\/[0-9]+([[\s]#].*)?$</ind-def:pattern>
			<ind-def:instance datatype="int">1</ind-def:instance>
		</ind-def:textfilecontent54_object>
		<ind-def:textfilecontent54_object id="oval:gov.nist.usgcb.rhel:obj:20063" version="1">
			<ind-def:path>/etc</ind-def:path>
			<ind-def:filename>securetty</ind-def:filename>
			<ind-def:pattern operation="pattern match">^[\s]*console([[\s]#].*)?$</ind-def:pattern>
			<ind-def:instance datatype="int">1</ind-def:instance>
		</ind-def:textfilecontent54_object>
		<ind-def:textfilecontent54_object id="oval:gov.nist.usgcb.rhel:obj:20064" version="1">
			<ind-def:path>/etc</ind-def:path>
			<ind-def:filename>securetty</ind-def:filename>
			<ind-def:pattern operation="pattern match">^[\s]*ttyS[0-9]+([[\s]#].*)?$</ind-def:pattern>
			<ind-def:instance datatype="int">1</ind-def:instance>
		</ind-def:textfilecontent54_object>
		<ind-def:textfilecontent54_object id="oval:gov.nist.usgcb.rhel:obj:20065" version="1">
			<ind-def:path>/etc</ind-def:path>
			<ind-def:filename>group</ind-def:filename>
			<ind-def:pattern operation="pattern match">^[\s]*wheel:.*$</ind-def:pattern>
			<ind-def:instance datatype="int">1</ind-def:instance>
		</ind-def:textfilecontent54_object>
		<ind-def:textfilecontent54_object id="oval:gov.nist.usgcb.rhel:obj:20066" version="1">
			<ind-def:path>/etc/pam.d</ind-def:path>
			<ind-def:filename>su</ind-def:filename>
			<ind-def:pattern operation="pattern match">^[\s]*auth[\s]+required[\s]+pam_wheel\.so[\s]+use_uid([[\s]#].*)?$</ind-def:pattern>
			<ind-def:instance datatype="int">1</ind-def:instance>
		</ind-def:textfilecontent54_object>
		<ind-def:textfilecontent54_object id="oval:gov.nist.usgcb.rhel:obj:20067" version="1">
			<ind-def:path>/etc</ind-def:path>
			<ind-def:filename>sudoers</ind-def:filename>
			<ind-def:pattern operation="pattern match">^[\s]*%wheel[\s]+ALL=\(ALL\)[\s]+ALL</ind-def:pattern>
			<ind-def:instance datatype="int">1</ind-def:instance>
		</ind-def:textfilecontent54_object>
		<unix-def:password_object id="oval:gov.nist.usgcb.rhel:obj:20068" version="1">
			<unix-def:username operation="not equal">root</unix-def:username>
		</unix-def:password_object>
		<ind-def:textfilecontent54_object id="oval:gov.nist.usgcb.rhel:obj:20069" version="1">
			<ind-def:path>/etc</ind-def:path>
			<ind-def:filename>shadow</ind-def:filename>
			<ind-def:pattern operation="pattern match">^[^:]*::</ind-def:pattern>
			<ind-def:instance datatype="int">1</ind-def:instance>
		</ind-def:textfilecontent54_object>
		<unix-def:password_object id="oval:gov.nist.usgcb.rhel:obj:200695" version="1">
			<unix-def:username operation="pattern match">.*</unix-def:username>
		</unix-def:password_object>
		<ind-def:textfilecontent54_object id="oval:gov.nist.usgcb.rhel:obj:20070" version="1">
			<ind-def:path>/etc</ind-def:path>
			<ind-def:filename>passwd</ind-def:filename>
			<ind-def:pattern operation="pattern match">^(?!root:)[^:]*:[^:]:0</ind-def:pattern>
			<ind-def:instance datatype="int">1</ind-def:instance>
		</ind-def:textfilecontent54_object>
		<ind-def:textfilecontent54_object id="oval:gov.nist.usgcb.rhel:obj:20071" version="1">
			<ind-def:path>/etc</ind-def:path>
			<ind-def:filename>login.defs</ind-def:filename>
			<ind-def:pattern operation="pattern match">^[\s]*PASS_MIN_LEN[\s]*([\d]+)</ind-def:pattern>
			<ind-def:instance datatype="int">1</ind-def:instance>
		</ind-def:textfilecontent54_object>
		<ind-def:textfilecontent54_object id="oval:gov.nist.usgcb.rhel:obj:20072" version="1">
			<ind-def:path>/etc</ind-def:path>
			<ind-def:filename>login.defs</ind-def:filename>
			<ind-def:pattern operation="pattern match">^[\s]*PASS_MIN_DAYS[\s]*1$</ind-def:pattern>
			<ind-def:instance datatype="int">1</ind-def:instance>
		</ind-def:textfilecontent54_object>
		<ind-def:textfilecontent54_object id="oval:gov.nist.usgcb.rhel:obj:20073" version="1">
			<ind-def:path>/etc</ind-def:path>
			<ind-def:filename>login.defs</ind-def:filename>
			<ind-def:pattern operation="pattern match">^[\s]*PASS_MAX_DAYS[\s]*60$</ind-def:pattern>
			<ind-def:instance datatype="int">1</ind-def:instance>
		</ind-def:textfilecontent54_object>
		<ind-def:textfilecontent54_object id="oval:gov.nist.usgcb.rhel:obj:20074" version="1">
			<ind-def:path>/etc</ind-def:path>
			<ind-def:filename>login.defs</ind-def:filename>
			<ind-def:pattern operation="pattern match">^[\s]*PASS_WARN_AGE[\s]*14$</ind-def:pattern>
			<ind-def:instance datatype="int">1</ind-def:instance>
		</ind-def:textfilecontent54_object>
		<ind-def:textfilecontent54_object id="oval:gov.nist.usgcb.rhel:obj:20075" version="1">
			<ind-def:path>/etc</ind-def:path>
			<ind-def:filename>shadow</ind-def:filename>
			<ind-def:pattern operation="pattern match">^\+</ind-def:pattern>
			<ind-def:instance datatype="int">1</ind-def:instance>
		</ind-def:textfilecontent54_object>
		<ind-def:textfilecontent54_object id="oval:gov.nist.usgcb.rhel:obj:20076" version="1">
			<ind-def:path>/etc</ind-def:path>
			<ind-def:filename>group</ind-def:filename>
			<ind-def:pattern operation="pattern match">^\+</ind-def:pattern>
			<ind-def:instance datatype="int">1</ind-def:instance>
		</ind-def:textfilecontent54_object>
		<ind-def:textfilecontent54_object id="oval:gov.nist.usgcb.rhel:obj:20077" version="1">
			<ind-def:path>/etc</ind-def:path>
			<ind-def:filename>passwd</ind-def:filename>
			<ind-def:pattern operation="pattern match">^\+</ind-def:pattern>
			<ind-def:instance datatype="int">1</ind-def:instance>
		</ind-def:textfilecontent54_object>
		<ind-def:variable_object id="oval:gov.nist.usgcb.rhel:obj:200800" version="1">
			<ind-def:var_ref>oval:gov.nist.usgcb.rhel:var:200803</ind-def:var_ref>
		</ind-def:variable_object>
		<ind-def:textfilecontent54_object id="oval:gov.nist.usgcb.rhel:obj:200801" version="1">
			<ind-def:filepath>/etc/pam.d/system-auth</ind-def:filepath>
			<ind-def:pattern operation="pattern match">^\s*auth\s+required\s+pam_tally2\.so\s+deny=5\s+onerr=fail$</ind-def:pattern>
			<ind-def:instance operation="greater than or equal" datatype="int">1</ind-def:instance>
		</ind-def:textfilecontent54_object>
		<ind-def:textfilecontent54_object id="oval:gov.nist.usgcb.rhel:obj:200802" version="1">
			<ind-def:path>/etc/pam.d</ind-def:path>
			<ind-def:filename>system-auth</ind-def:filename>
			<ind-def:pattern operation="pattern match">^[\s]*auth[\s]+required[\s]+pam_tally2\.so.*[\s]lock_time=(\d+)</ind-def:pattern>
			<ind-def:instance operation="greater than or equal" datatype="int">1</ind-def:instance>
		</ind-def:textfilecontent54_object>
		<ind-def:textfilecontent54_object id="oval:gov.nist.usgcb.rhel:obj:200803" version="1">
			<ind-def:path>/etc/pam.d</ind-def:path>
			<ind-def:filename>system-auth</ind-def:filename>
			<ind-def:pattern operation="pattern match">^[\s]*auth[\s]+required[\s]+pam_tally2\.so.*[\s]unlock_time=(\d+)</ind-def:pattern>
			<ind-def:instance operation="greater than or equal" datatype="int">1</ind-def:instance>
		</ind-def:textfilecontent54_object>
		<unix-def:file_object id="oval:gov.nist.usgcb.rhel:obj:20081" version="1" comment="/usr/sbin/userhelper">
			<unix-def:path>/usr/sbin</unix-def:path>
			<unix-def:filename>userhelper</unix-def:filename>
		</unix-def:file_object>
		<ind-def:variable_object id="oval:gov.nist.usgcb.rhel:obj:200831" version="1">
			<ind-def:var_ref>oval:gov.nist.usgcb.rhel:var:20083</ind-def:var_ref>
		</ind-def:variable_object>
		<ind-def:textfilecontent54_object id="oval:gov.nist.usgcb.rhel:obj:200832" version="1">
			<ind-def:path>/etc</ind-def:path>
			<ind-def:filename>login.defs</ind-def:filename>
			<ind-def:pattern operation="pattern match">^\s*MD5_CRYPT_ENAB[\s]+(yes|no)</ind-def:pattern>
			<ind-def:instance datatype="int">1</ind-def:instance>
		</ind-def:textfilecontent54_object>
		<ind-def:textfilecontent54_object id="oval:gov.nist.usgcb.rhel:obj:200833" version="1">
			<ind-def:path>/etc</ind-def:path>
			<ind-def:filename>login.defs</ind-def:filename>
			<ind-def:pattern operation="pattern match">^\s*ENCRYPT_METHOD[\s]+(MD5|SHA256|SHA512)</ind-def:pattern>
			<ind-def:instance datatype="int">1</ind-def:instance>
		</ind-def:textfilecontent54_object>
		<ind-def:textfilecontent54_object id="oval:gov.nist.usgcb.rhel:obj:200834" version="1">
			<ind-def:path>/etc/pam.d</ind-def:path>
			<ind-def:filename>system-auth</ind-def:filename>
			<ind-def:pattern operation="pattern match">^\s*password[\s]+(?:sufficient|required)[\s]+pam_unix\.so[\s]+(sha256|sha512)</ind-def:pattern>
			<ind-def:instance datatype="int">1</ind-def:instance>
		</ind-def:textfilecontent54_object>
		<ind-def:textfilecontent54_object id="oval:gov.nist.usgcb.rhel:obj:200835" version="1">
			<ind-def:path>/etc</ind-def:path>
			<ind-def:filename>libuser.conf</ind-def:filename>
			<ind-def:pattern operation="pattern match">^\s*crypt_style[\s]+\=[\s]+(sha256|sha512)</ind-def:pattern>
			<ind-def:instance datatype="int">1</ind-def:instance>
		</ind-def:textfilecontent54_object>
		<ind-def:variable_object id="oval:gov.nist.usgcb.rhel:obj:200841" version="1">
			<ind-def:var_ref>oval:gov.nist.usgcb.rhel:var:20084</ind-def:var_ref>
		</ind-def:variable_object>
		<ind-def:textfilecontent54_object id="oval:gov.nist.usgcb.rhel:obj:200842" version="1">
			<ind-def:filepath>/etc/pam.d/system-auth</ind-def:filepath>
			<ind-def:pattern operation="pattern match">^\s*password[\s]+(?:sufficient|required)[\s]+pam_unix\.so[\s]+.*remember=([\d]+)</ind-def:pattern>
			<ind-def:instance datatype="int">1</ind-def:instance>
		</ind-def:textfilecontent54_object>
		<ind-def:environmentvariable_object id="oval:gov.nist.usgcb.rhel:obj:20085" version="1">
			<ind-def:name>PATH</ind-def:name>
		</ind-def:environmentvariable_object>
		<unix-def:file_object id="oval:gov.nist.usgcb.rhel:obj:200855" version="1" comment="root's PATH">
			<unix-def:path var_ref="oval:gov.nist.usgcb.rhel:var:200855" var_check="at least one"/>
			<unix-def:filename xsi:nil="true"/>
		</unix-def:file_object>
		<unix-def:file_object id="oval:gov.nist.usgcb.rhel:obj:20086" version="1" comment="/home/*">
			<unix-def:behaviors recurse="symlinks and directories" recurse_direction="down" max_depth="1"/>
			<unix-def:path>/home</unix-def:path>
			<unix-def:filename xsi:nil="true"/>
		</unix-def:file_object>
		<ind-def:textfilecontent54_object id="oval:gov.nist.usgcb.rhel:obj:20087" version="1">
			<ind-def:path>/etc</ind-def:path>
			<ind-def:filename>bashrc</ind-def:filename>
			<ind-def:pattern operation="pattern match">^[\s]*umask[\s]+([^#\s]*)</ind-def:pattern>
			<ind-def:instance datatype="int">2</ind-def:instance>
		</ind-def:textfilecontent54_object>
		<ind-def:textfilecontent54_object id="oval:gov.nist.usgcb.rhel:obj:20088" version="1">
			<ind-def:path>/etc</ind-def:path>
			<ind-def:filename>csh.cshrc</ind-def:filename>
			<ind-def:pattern operation="pattern match">^[\s]*umask[\s]+([^#\s]*)</ind-def:pattern>
			<ind-def:instance datatype="int">2</ind-def:instance>
		</ind-def:textfilecontent54_object>
		<ind-def:textfilecontent54_object id="oval:gov.nist.usgcb.rhel:obj:20089" version="1">
			<ind-def:path>/etc</ind-def:path>
			<ind-def:filename>login.defs</ind-def:filename>
			<ind-def:pattern operation="pattern match">^[\s]*UMASK[\s]+([^#\s]*)</ind-def:pattern>
			<ind-def:instance datatype="int">1</ind-def:instance>
		</ind-def:textfilecontent54_object>
		<ind-def:textfilecontent54_object id="oval:gov.nist.usgcb.rhel:obj:20090" version="1">
			<ind-def:path>/etc</ind-def:path>
			<ind-def:filename>profile</ind-def:filename>
			<ind-def:pattern operation="pattern match">^[\s]*umask[\s]+([^#\s]*)</ind-def:pattern>
			<ind-def:instance datatype="int">1</ind-def:instance>
		</ind-def:textfilecontent54_object>
		<unix-def:file_object id="oval:gov.nist.usgcb.rhel:obj:20092" version="1" comment="/boot/grub/grub.conf">
			<unix-def:path>/boot/grub</unix-def:path>
			<unix-def:filename>grub.conf</unix-def:filename>
		</unix-def:file_object>
		<unix-def:file_object id="oval:gov.nist.usgcb.rhel:obj:20094" version="1" comment="/boot/grub/grub.conf">
			<unix-def:path>/boot/grub</unix-def:path>
			<unix-def:filename>grub.conf</unix-def:filename>
		</unix-def:file_object>
		<ind-def:textfilecontent54_object id="oval:gov.nist.usgcb.rhel:obj:20095" version="1">
			<ind-def:path>/boot/grub</ind-def:path>
			<ind-def:filename>grub.conf</ind-def:filename>
			<ind-def:pattern operation="pattern match">password[\s]+--md5[\s]+.*</ind-def:pattern>
			<ind-def:instance datatype="int">1</ind-def:instance>
		</ind-def:textfilecontent54_object>
		<unix-def:file_object id="oval:gov.nist.usgcb.rhel:obj:20093" version="1" comment="/boot/grub/grub.conf">
			<unix-def:path>/boot/grub</unix-def:path>
			<unix-def:filename>grub.conf</unix-def:filename>
		</unix-def:file_object>
		<ind-def:textfilecontent54_object id="oval:gov.nist.usgcb.rhel:obj:73" version="1">
			<ind-def:path>/etc</ind-def:path>
			<ind-def:filename>inittab</ind-def:filename>
			<ind-def:pattern operation="pattern match">~:S:wait:/sbin/sulogin</ind-def:pattern>
			<ind-def:instance datatype="int">1</ind-def:instance>
		</ind-def:textfilecontent54_object>
		<ind-def:textfilecontent54_object id="oval:gov.nist.usgcb.rhel:obj:20096" version="1">
			<ind-def:path>/etc/sysconfig</ind-def:path>
			<ind-def:filename>init</ind-def:filename>
			<ind-def:pattern operation="pattern match">PROMPT[\s]*=[\s]*no\s*$</ind-def:pattern>
			<ind-def:instance datatype="int">1</ind-def:instance>
		</ind-def:textfilecontent54_object>
		<ind-def:textfilecontent54_object id="oval:gov.nist.usgcb.rhel:obj:20098" version="1">
			<ind-def:path>/etc/profile.d</ind-def:path>
			<ind-def:filename>autoogout.csh</ind-def:filename>
			<ind-def:pattern operation="pattern match">^[\s]*set[\s]+-r[\s]+autologout[\s]+([^#\s]*)</ind-def:pattern>
			<ind-def:instance datatype="int">1</ind-def:instance>
		</ind-def:textfilecontent54_object>
		<ind-def:xmlfilecontent_object id="oval:gov.nist.usgcb.rhel:obj:20100" version="1">
			<ind-def:filepath>/etc/gconf/gconf.xml.mandatory/apps/gnome-screensaver/%gconf.xml</ind-def:filepath>
			<ind-def:xpath>/gconf/entry[@name='idle_delay']/@value</ind-def:xpath>
		</ind-def:xmlfilecontent_object>
		<ind-def:xmlfilecontent_object id="oval:gov.nist.usgcb.rhel:obj:201005" version="1">
			<ind-def:filepath>/etc/gconf/gconf.xml.mandatory/apps/gnome-screensaver/%gconf.xml</ind-def:filepath>
			<ind-def:xpath>/gconf/entry[@name='idle_activation_enabled']/@value</ind-def:xpath>
		</ind-def:xmlfilecontent_object>
		<ind-def:xmlfilecontent_object id="oval:gov.nist.usgcb.rhel:obj:201006" version="1">
			<ind-def:filepath>/etc/gconf/gconf.xml.mandatory/apps/gnome-screensaver/%gconf.xml</ind-def:filepath>
			<ind-def:xpath>/gconf/entry[@name='lock_enabled']/@value</ind-def:xpath>
		</ind-def:xmlfilecontent_object>
		<ind-def:xmlfilecontent_object id="oval:gov.nist.usgcb.rhel:obj:201007" version="1">
			<ind-def:filepath>/etc/gconf/gconf.xml.mandatory/apps/gnome-screensaver/%gconf.xml</ind-def:filepath>
			<ind-def:xpath>/gconf/entry[@name='mode']/stringvalue/text()</ind-def:xpath>
		</ind-def:xmlfilecontent_object>
		<lin-def:rpminfo_object id="oval:gov.nist.usgcb.rhel:obj:20101" version="1">
			<lin-def:name>vlock</lin-def:name>
		</lin-def:rpminfo_object>
		<ind-def:textfilecontent54_object id="oval:gov.nist.usgcb.rhel:obj:20102" version="1">
			<ind-def:behaviors singleline="true"/>
			<ind-def:path>/etc</ind-def:path>
			<ind-def:filename>issue</ind-def:filename>
			<ind-def:pattern operation="pattern match">(.+)</ind-def:pattern>
			<ind-def:instance datatype="int" operation="greater than or equal">1</ind-def:instance>
		</ind-def:textfilecontent54_object>
		<ind-def:xmlfilecontent_object id="oval:gov.nist.usgcb.rhel:obj:20103" version="1">
			<ind-def:path>/usr/share/gdm/themes/RHEL</ind-def:path>
			<ind-def:filename>RHEL.xml</ind-def:filename>
			<ind-def:xpath>/greeter/item[@id='custom-usgcb-banner']/box[1]/text[1]</ind-def:xpath>
		</ind-def:xmlfilecontent_object>
		<unix-def:file_object id="oval:gov.nist.usgcb.rhel:obj:201035" version="1" comment="/selinux">
			<unix-def:path>/selinux</unix-def:path>
			<unix-def:filename xsi:nil="true"/>
		</unix-def:file_object>
		<ind-def:textfilecontent54_object id="oval:gov.nist.usgcb.rhel:obj:20104" version="1">
			<ind-def:path>/boot/grub</ind-def:path>
			<ind-def:filename>grub.conf</ind-def:filename>
			<ind-def:pattern operation="pattern match">^\s*kernel\s+[-=\\/\w\s]*(?:(?:selinux)|(?:enforcing))=0\s*[-=\\/\w\s]*$</ind-def:pattern>
			<ind-def:instance datatype="int">1</ind-def:instance>
		</ind-def:textfilecontent54_object>
		<ind-def:textfilecontent54_object id="oval:gov.nist.usgcb.rhel:obj:20105" version="1">
			<ind-def:path>/boot/grub</ind-def:path>
			<ind-def:filename>grub.conf</ind-def:filename>
			<ind-def:pattern operation="pattern match">^[\s]*selinux[\s]*=[\s]*([^#\s]*)</ind-def:pattern>
			<ind-def:instance datatype="int">1</ind-def:instance>
		</ind-def:textfilecontent54_object>
		<ind-def:textfilecontent54_object id="oval:gov.nist.usgcb.rhel:obj:20106" version="1">
			<ind-def:path>/etc/selinux</ind-def:path>
			<ind-def:filename>config</ind-def:filename>
			<ind-def:pattern operation="pattern match">^[\s]*SELINUX[\s]*=[\s]*([^#\s]*)</ind-def:pattern>
			<ind-def:instance datatype="int">1</ind-def:instance>
		</ind-def:textfilecontent54_object>
		<ind-def:variable_object id="oval:gov.nist.usgcb.rhel:obj:201061" version="1">
			<ind-def:var_ref>oval:gov.nist.usgcb.rhel:var:20106</ind-def:var_ref>
		</ind-def:variable_object>
		<ind-def:textfilecontent54_object id="oval:gov.nist.usgcb.rhel:obj:201064" version="1">
			<ind-def:path>/selinux</ind-def:path>
			<ind-def:filename>enforce</ind-def:filename>
			<ind-def:pattern operation="pattern match">^(\d)$</ind-def:pattern>
			<ind-def:instance datatype="int">1</ind-def:instance>
		</ind-def:textfilecontent54_object>
		<ind-def:textfilecontent54_object id="oval:gov.nist.usgcb.rhel:obj:20107" version="1">
			<ind-def:path>/etc/selinux</ind-def:path>
			<ind-def:filename>config</ind-def:filename>
			<ind-def:pattern operation="pattern match">^[\s]*SELINUXTYPE[\s]*=[\s]*([^#\s]*)</ind-def:pattern>
			<ind-def:instance datatype="int">1</ind-def:instance>
		</ind-def:textfilecontent54_object>
		<!--<unix-def:runlevel_object id="oval:gov.nist.usgcb.rhel:obj:20109" version="1">
			<unix-def:service_name>setroubleshoot</unix-def:service_name>
			<unix-def:runlevel operation="equals">0</unix-def:runlevel>
		</unix-def:runlevel_object>
		<unix-def:runlevel_object id="oval:gov.nist.usgcb.rhel:obj:201091" version="1">
			<unix-def:service_name>setroubleshoot</unix-def:service_name>
			<unix-def:runlevel operation="equals">1</unix-def:runlevel>
		</unix-def:runlevel_object>
		<unix-def:runlevel_object id="oval:gov.nist.usgcb.rhel:obj:201092" version="1">
			<unix-def:service_name>setroubleshoot</unix-def:service_name>
			<unix-def:runlevel operation="equals">2</unix-def:runlevel>
		</unix-def:runlevel_object>
		<unix-def:runlevel_object id="oval:gov.nist.usgcb.rhel:obj:201093" version="1">
			<unix-def:service_name>setroubleshoot</unix-def:service_name>
			<unix-def:runlevel operation="equals">3</unix-def:runlevel>
		</unix-def:runlevel_object>
		<unix-def:runlevel_object id="oval:gov.nist.usgcb.rhel:obj:201094" version="1">
			<unix-def:service_name>setroubleshoot</unix-def:service_name>
			<unix-def:runlevel operation="equals">4</unix-def:runlevel>
		</unix-def:runlevel_object>
		<unix-def:runlevel_object id="oval:gov.nist.usgcb.rhel:obj:201095" version="1">
			<unix-def:service_name>setroubleshoot</unix-def:service_name>
			<unix-def:runlevel operation="equals">5</unix-def:runlevel>
		</unix-def:runlevel_object>
		<unix-def:runlevel_object id="oval:gov.nist.usgcb.rhel:obj:201096" version="1">
			<unix-def:service_name>setroubleshoot</unix-def:service_name>
			<unix-def:runlevel operation="equals">6</unix-def:runlevel>
		</unix-def:runlevel_object>-->
		<unix-def:runlevel_object id="oval:gov.nist.usgcb.rhel:obj:20110" version="1">
			<unix-def:service_name>mcstrans</unix-def:service_name>
			<unix-def:runlevel operation="equals">0</unix-def:runlevel>
		</unix-def:runlevel_object>
		<unix-def:runlevel_object id="oval:gov.nist.usgcb.rhel:obj:201101" version="1">
			<unix-def:service_name>mcstrans</unix-def:service_name>
			<unix-def:runlevel operation="equals">1</unix-def:runlevel>
		</unix-def:runlevel_object>
		<unix-def:runlevel_object id="oval:gov.nist.usgcb.rhel:obj:201102" version="1">
			<unix-def:service_name>mcstrans</unix-def:service_name>
			<unix-def:runlevel operation="equals">2</unix-def:runlevel>
		</unix-def:runlevel_object>
		<unix-def:runlevel_object id="oval:gov.nist.usgcb.rhel:obj:201103" version="1">
			<unix-def:service_name>mcstrans</unix-def:service_name>
			<unix-def:runlevel operation="equals">3</unix-def:runlevel>
		</unix-def:runlevel_object>
		<unix-def:runlevel_object id="oval:gov.nist.usgcb.rhel:obj:201104" version="1">
			<unix-def:service_name>mcstrans</unix-def:service_name>
			<unix-def:runlevel operation="equals">4</unix-def:runlevel>
		</unix-def:runlevel_object>
		<unix-def:runlevel_object id="oval:gov.nist.usgcb.rhel:obj:201105" version="1">
			<unix-def:service_name>mcstrans</unix-def:service_name>
			<unix-def:runlevel operation="equals">5</unix-def:runlevel>
		</unix-def:runlevel_object>
		<unix-def:runlevel_object id="oval:gov.nist.usgcb.rhel:obj:201106" version="1">
			<unix-def:service_name>mcstrans</unix-def:service_name>
			<unix-def:runlevel operation="equals">6</unix-def:runlevel>
		</unix-def:runlevel_object>
		<!--<unix-def:runlevel_object id="oval:gov.nist.usgcb.rhel:obj:20111" version="1">
			<unix-def:service_name>restorecond</unix-def:service_name>
			<unix-def:runlevel operation="equals">0</unix-def:runlevel>
		</unix-def:runlevel_object>
		<unix-def:runlevel_object id="oval:gov.nist.usgcb.rhel:obj:201111" version="1">
			<unix-def:service_name>restorecond</unix-def:service_name>
			<unix-def:runlevel operation="equals">1</unix-def:runlevel>
		</unix-def:runlevel_object>
		<unix-def:runlevel_object id="oval:gov.nist.usgcb.rhel:obj:201112" version="1">
			<unix-def:service_name>restorecond</unix-def:service_name>
			<unix-def:runlevel operation="equals">2</unix-def:runlevel>
		</unix-def:runlevel_object>
		<unix-def:runlevel_object id="oval:gov.nist.usgcb.rhel:obj:201113" version="1">
			<unix-def:service_name>restorecond</unix-def:service_name>
			<unix-def:runlevel operation="equals">3</unix-def:runlevel>
		</unix-def:runlevel_object>
		<unix-def:runlevel_object id="oval:gov.nist.usgcb.rhel:obj:201114" version="1">
			<unix-def:service_name>restorecond</unix-def:service_name>
			<unix-def:runlevel operation="equals">4</unix-def:runlevel>
		</unix-def:runlevel_object>
		<unix-def:runlevel_object id="oval:gov.nist.usgcb.rhel:obj:201115" version="1">
			<unix-def:service_name>restorecond</unix-def:service_name>
			<unix-def:runlevel operation="equals">4</unix-def:runlevel>
		</unix-def:runlevel_object>
		<unix-def:runlevel_object id="oval:gov.nist.usgcb.rhel:obj:201116" version="1">
			<unix-def:service_name>restorecond</unix-def:service_name>
			<unix-def:runlevel operation="equals">6</unix-def:runlevel>
		</unix-def:runlevel_object>-->
		<ind-def:textfilecontent54_object id="oval:gov.nist.usgcb.rhel:obj:20112" version="1">
			<ind-def:path>/etc</ind-def:path>
			<ind-def:filename>sysctl.conf</ind-def:filename>
			<ind-def:pattern operation="pattern match">^[\s]*net\.ipv4\.conf\.default\.send_redirects[\s]*=[\s]*([\S].*)</ind-def:pattern>
			<ind-def:instance datatype="int">1</ind-def:instance>
		</ind-def:textfilecontent54_object>
		<ind-def:textfilecontent54_object id="oval:gov.nist.usgcb.rhel:obj:20113" version="1">
			<ind-def:path>/etc</ind-def:path>
			<ind-def:filename>sysctl.conf</ind-def:filename>
			<ind-def:pattern operation="pattern match">^[\s]*net\.ipv4\.conf\.all\.send_redirects[\s]*=[\s]*([\S].*)</ind-def:pattern>
			<ind-def:instance datatype="int">1</ind-def:instance>
		</ind-def:textfilecontent54_object>
		<ind-def:textfilecontent54_object id="oval:gov.nist.usgcb.rhel:obj:20114" version="1">
			<ind-def:path>/etc</ind-def:path>
			<ind-def:filename>sysctl.conf</ind-def:filename>
			<ind-def:pattern operation="pattern match">^[\s]*net\.ipv4\.ip_forward[\s]*=[\s]*([\S].*)</ind-def:pattern>
			<ind-def:instance datatype="int">1</ind-def:instance>
		</ind-def:textfilecontent54_object>
		<ind-def:textfilecontent54_object id="oval:gov.nist.usgcb.rhel:obj:20115" version="1">
			<ind-def:path>/etc</ind-def:path>
			<ind-def:filename>sysctl.conf</ind-def:filename>
			<ind-def:pattern operation="pattern match">^[\s]*net\.ipv4\.conf\.all\.accept_source_route[\s]*=[\s]*([\S].*)</ind-def:pattern>
			<ind-def:instance datatype="int">1</ind-def:instance>
		</ind-def:textfilecontent54_object>
		<ind-def:textfilecontent54_object id="oval:gov.nist.usgcb.rhel:obj:20116" version="1">
			<ind-def:path>/etc</ind-def:path>
			<ind-def:filename>sysctl.conf</ind-def:filename>
			<ind-def:pattern operation="pattern match">^[\s]*net\.ipv4\.conf\.all\.accept_redirects[\s]*=[\s]*([\S].*)</ind-def:pattern>
			<ind-def:instance datatype="int">1</ind-def:instance>
		</ind-def:textfilecontent54_object>
		<ind-def:textfilecontent54_object id="oval:gov.nist.usgcb.rhel:obj:20117" version="1">
			<ind-def:path>/etc</ind-def:path>
			<ind-def:filename>sysctl.conf</ind-def:filename>
			<ind-def:pattern operation="pattern match">^[\s]*net\.ipv4\.conf\.all\.secure_redirects[\s]*=[\s]*([\S].*)</ind-def:pattern>
			<ind-def:instance datatype="int">1</ind-def:instance>
		</ind-def:textfilecontent54_object>
		<ind-def:textfilecontent54_object id="oval:gov.nist.usgcb.rhel:obj:20118" version="1">
			<ind-def:path>/etc</ind-def:path>
			<ind-def:filename>sysctl.conf</ind-def:filename>
			<ind-def:pattern operation="pattern match">^[\s]*net\.ipv4\.conf\.all\.log_martians[\s]*=[\s]*([\S].*)</ind-def:pattern>
			<ind-def:instance datatype="int">1</ind-def:instance>
		</ind-def:textfilecontent54_object>
		<ind-def:textfilecontent54_object id="oval:gov.nist.usgcb.rhel:obj:20119" version="1">
			<ind-def:path>/etc</ind-def:path>
			<ind-def:filename>sysctl.conf</ind-def:filename>
			<ind-def:pattern operation="pattern match">^[\s]*net\.ipv4\.conf\.default\.accept_source_route[\s]*=[\s]*([\S].*)</ind-def:pattern>
			<ind-def:instance datatype="int">1</ind-def:instance>
		</ind-def:textfilecontent54_object>
		<ind-def:textfilecontent54_object id="oval:gov.nist.usgcb.rhel:obj:20120" version="1">
			<ind-def:path>/etc</ind-def:path>
			<ind-def:filename>sysctl.conf</ind-def:filename>
			<ind-def:pattern operation="pattern match">^[\s]*net\.ipv4\.conf\.default\.accept_redirects[\s]*=[\s]*([\S].*)</ind-def:pattern>
			<ind-def:instance datatype="int">1</ind-def:instance>
		</ind-def:textfilecontent54_object>
		<ind-def:textfilecontent54_object id="oval:gov.nist.usgcb.rhel:obj:20121" version="1">
			<ind-def:path>/etc</ind-def:path>
			<ind-def:filename>sysctl.conf</ind-def:filename>
			<ind-def:pattern operation="pattern match">^[\s]*net\.ipv4\.conf\.default\.secure_redirects[\s]*=[\s]*([\S].*)</ind-def:pattern>
			<ind-def:instance datatype="int">1</ind-def:instance>
		</ind-def:textfilecontent54_object>
		<ind-def:textfilecontent54_object id="oval:gov.nist.usgcb.rhel:obj:20122" version="1">
			<ind-def:path>/etc</ind-def:path>
			<ind-def:filename>sysctl.conf</ind-def:filename>
			<ind-def:pattern operation="pattern match">^[\s]*net\.ipv4\.icmp_echo_ignore_broadcasts[\s]*=[\s]*([\S].*)</ind-def:pattern>
			<ind-def:instance datatype="int">1</ind-def:instance>
		</ind-def:textfilecontent54_object>
		<ind-def:textfilecontent54_object id="oval:gov.nist.usgcb.rhel:obj:20123" version="2">
			<ind-def:path>/etc</ind-def:path>
			<ind-def:filename>sysctl.conf</ind-def:filename>
			<ind-def:pattern operation="pattern match">^[\s]*net\.ipv4\.icmp_ignore_bogus_error_responses[\s]*=[\s]*([\S].*)</ind-def:pattern>
			<ind-def:instance datatype="int">1</ind-def:instance>
		</ind-def:textfilecontent54_object>
		<ind-def:textfilecontent54_object id="oval:gov.nist.usgcb.rhel:obj:20124" version="1">
			<ind-def:path>/etc</ind-def:path>
			<ind-def:filename>sysctl.conf</ind-def:filename>
			<ind-def:pattern operation="pattern match">^[\s]*net\.ipv4\.tcp_syncookies[\s]*=[\s]*([^\s]*)</ind-def:pattern>
			<ind-def:instance datatype="int">1</ind-def:instance>
		</ind-def:textfilecontent54_object>
		<ind-def:textfilecontent54_object id="oval:gov.nist.usgcb.rhel:obj:20125" version="1">
			<ind-def:path>/etc</ind-def:path>
			<ind-def:filename>sysctl.conf</ind-def:filename>
			<ind-def:pattern operation="pattern match">^[\s]*net\.ipv4\.conf\.all\.rp_filter[\s]*=[\s]*([\S].*)</ind-def:pattern>
			<ind-def:instance datatype="int">1</ind-def:instance>
		</ind-def:textfilecontent54_object>
		<ind-def:textfilecontent54_object id="oval:gov.nist.usgcb.rhel:obj:20126" version="1">
			<ind-def:path>/etc</ind-def:path>
			<ind-def:filename>sysctl.conf</ind-def:filename>
			<ind-def:pattern operation="pattern match">^[\s]*net\.ipv4\.conf\.default\.rp_filter[\s]*=[\s]*([\S].*)</ind-def:pattern>
			<ind-def:instance datatype="int">1</ind-def:instance>
		</ind-def:textfilecontent54_object>
		<ind-def:textfilecontent54_object id="oval:gov.nist.usgcb.rhel:obj:20128" version="1">
			<ind-def:path>/proc/net</ind-def:path>
			<ind-def:filename>wireless</ind-def:filename>
			<ind-def:pattern operation="pattern match">^[\s]*([\S\d]+):</ind-def:pattern>
			<ind-def:instance operation="greater than or equal" datatype="int">1</ind-def:instance>
		</ind-def:textfilecontent54_object>
		<unix-def:file_object id="oval:gov.nist.usgcb.rhel:obj:20129" version="1" comment="/lib/modules/*/kernel/drivers/net/wireless">
			<unix-def:path operation="pattern match">^/lib/modules/*/kernel/drivers/net/wireless</unix-def:path>
			<unix-def:filename xsi:nil="true"/>
		</unix-def:file_object>
		<ind-def:textfilecontent54_object id="oval:gov.nist.usgcb.rhel:obj:20130" version="1" comment="Value of ipv6 option disable in /etc/modprobe.d/usgcb-blacklist">
			<ind-def:filepath>/etc/modprobe.d/usgcb-blacklist</ind-def:filepath>
			<ind-def:pattern operation="pattern match">^[\s]*options[\s]+ipv6\s+(?:[\w_\.\-=\s]+[\s])?disable=(\d+)(?:[\s]|$)</ind-def:pattern>
			<ind-def:instance datatype="int">1</ind-def:instance>
		</ind-def:textfilecontent54_object>
		<ind-def:textfilecontent54_object id="oval:gov.nist.usgcb.rhel:obj:20132" version="1">
			<ind-def:path>/etc/sysconfig</ind-def:path>
			<ind-def:filename>network</ind-def:filename>
			<ind-def:pattern operation="pattern match">^[\s]*NETWORKING_IPV6[\s]*=[\s]*([^#\s]*)</ind-def:pattern>
			<ind-def:instance datatype="int">1</ind-def:instance>
		</ind-def:textfilecontent54_object>
		<ind-def:textfilecontent54_object id="oval:gov.nist.usgcb.rhel:obj:20133" version="1">
			<ind-def:path>/etc/sysconfig/network-scripts</ind-def:path>
			<ind-def:filename operation="pattern match">ifcfg-.*</ind-def:filename>
			<ind-def:pattern operation="pattern match">^[\s]*NETWORKING_IPV6[\s]*=[\s]*([^#\s]*)</ind-def:pattern>
			<ind-def:instance datatype="int">1</ind-def:instance>
		</ind-def:textfilecontent54_object>
		<ind-def:textfilecontent54_object id="oval:gov.nist.usgcb.rhel:obj:20131" version="1">
			<ind-def:path>/etc/sysconfig</ind-def:path>
			<ind-def:filename>network</ind-def:filename>
			<ind-def:pattern operation="pattern match">^[\s]*IPV6INIT[\s]*=[\s]*([^#\s]*)</ind-def:pattern>
			<ind-def:instance datatype="int">1</ind-def:instance>
		</ind-def:textfilecontent54_object>
		<ind-def:textfilecontent54_object id="oval:gov.nist.usgcb.rhel:obj:20134" version="1">
			<ind-def:path>/etc/sysconfig</ind-def:path>
			<ind-def:filename>network</ind-def:filename>
			<ind-def:pattern operation="pattern match">^[\s]*IPV6INIT[\s]*=[\s]*([^#\s]*)</ind-def:pattern>
			<ind-def:instance datatype="int">1</ind-def:instance>
		</ind-def:textfilecontent54_object>
		<ind-def:textfilecontent54_object id="oval:gov.nist.usgcb.rhel:obj:20140" version="1">
			<ind-def:path>/etc</ind-def:path>
			<ind-def:filename>sysctl.conf</ind-def:filename>
			<ind-def:pattern operation="pattern match">^[\s]*net\.ipv6\.conf\.default\.accept_ra_rtr_pref[\s]*=[\s]*([\S].*)</ind-def:pattern>
			<ind-def:instance datatype="int">1</ind-def:instance>
		</ind-def:textfilecontent54_object>
		<ind-def:textfilecontent54_object id="oval:gov.nist.usgcb.rhel:obj:20145" version="1">
			<ind-def:path>/etc</ind-def:path>
			<ind-def:filename>sysctl.conf</ind-def:filename>
			<ind-def:pattern operation="pattern match">^[\s]*net\.ipv6\.conf\.default\.max_addresses[\s]*=[\s]*([\S].*)</ind-def:pattern>
			<ind-def:instance datatype="int">1</ind-def:instance>
		</ind-def:textfilecontent54_object>
		<ind-def:textfilecontent54_object id="oval:gov.nist.usgcb.rhel:obj:20139" version="1">
			<ind-def:path>/etc</ind-def:path>
			<ind-def:filename>sysctl.conf</ind-def:filename>
			<ind-def:pattern operation="pattern match">^[\s]*net\.ipv6\.conf\.default\.router_solicitations[\s]*=[\s]*([\S].*)</ind-def:pattern>
			<ind-def:instance datatype="int">1</ind-def:instance>
		</ind-def:textfilecontent54_object>
		<ind-def:textfilecontent54_object id="oval:gov.nist.usgcb.rhel:obj:20144" version="1">
			<ind-def:path>/etc</ind-def:path>
			<ind-def:filename>sysctl.conf</ind-def:filename>
			<ind-def:pattern operation="pattern match">^[\s]*net\.ipv6\.conf\.default\.dad_transmits[\s]*=[\s]*([\S].*)</ind-def:pattern>
			<ind-def:instance datatype="int">1</ind-def:instance>
		</ind-def:textfilecontent54_object>
		<ind-def:textfilecontent54_object id="oval:gov.nist.usgcb.rhel:obj:20143" version="1">
			<ind-def:path>/etc</ind-def:path>
			<ind-def:filename>sysctl.conf</ind-def:filename>
			<ind-def:pattern operation="pattern match">^[\s]*net\.ipv6\.conf\.default\.autoconf[\s]*=[\s]*([\S].*)</ind-def:pattern>
			<ind-def:instance datatype="int">1</ind-def:instance>
		</ind-def:textfilecontent54_object>
		<ind-def:textfilecontent54_object id="oval:gov.nist.usgcb.rhel:obj:20141" version="1">
			<ind-def:path>/etc</ind-def:path>
			<ind-def:filename>sysctl.conf</ind-def:filename>
			<ind-def:pattern operation="pattern match">^[\s]*net\.ipv6\.conf\.default\.accept_ra_pinfo[\s]*=[\s]*([\S].*)</ind-def:pattern>
			<ind-def:instance datatype="int">1</ind-def:instance>
		</ind-def:textfilecontent54_object>
		<ind-def:textfilecontent54_object id="oval:gov.nist.usgcb.rhel:obj:20142" version="1">
			<ind-def:path>/etc</ind-def:path>
			<ind-def:filename>sysctl.conf</ind-def:filename>
			<ind-def:pattern operation="pattern match">^[\s]*net\.ipv6\.conf\.default\.accept_ra_defrtr[\s]*=[\s]*([\S].*)</ind-def:pattern>
			<ind-def:instance datatype="int">1</ind-def:instance>
		</ind-def:textfilecontent54_object>
		<unix-def:runlevel_object id="oval:gov.nist.usgcb.rhel:obj:201462" version="1">
			<unix-def:service_name>ip6tables</unix-def:service_name>
			<unix-def:runlevel operation="equals">2</unix-def:runlevel>
		</unix-def:runlevel_object>
		<unix-def:runlevel_object id="oval:gov.nist.usgcb.rhel:obj:201463" version="1">
			<unix-def:service_name>ip6tables</unix-def:service_name>
			<unix-def:runlevel operation="equals">3</unix-def:runlevel>
		</unix-def:runlevel_object>
		<unix-def:runlevel_object id="oval:gov.nist.usgcb.rhel:obj:201464" version="1">
			<unix-def:service_name>ip6tables</unix-def:service_name>
			<unix-def:runlevel operation="equals">4</unix-def:runlevel>
		</unix-def:runlevel_object>
		<unix-def:runlevel_object id="oval:gov.nist.usgcb.rhel:obj:201465" version="1">
			<unix-def:service_name>ip6tables</unix-def:service_name>
			<unix-def:runlevel operation="equals">5</unix-def:runlevel>
		</unix-def:runlevel_object>
		<unix-def:runlevel_object id="oval:gov.nist.usgcb.rhel:obj:2014702" version="1">
			<unix-def:service_name>iptables</unix-def:service_name>
			<unix-def:runlevel operation="equals">2</unix-def:runlevel>
		</unix-def:runlevel_object>
		<unix-def:runlevel_object id="oval:gov.nist.usgcb.rhel:obj:2014703" version="1">
			<unix-def:service_name>iptables</unix-def:service_name>
			<unix-def:runlevel operation="equals">3</unix-def:runlevel>
		</unix-def:runlevel_object>
		<unix-def:runlevel_object id="oval:gov.nist.usgcb.rhel:obj:2014704" version="1">
			<unix-def:service_name>iptables</unix-def:service_name>
			<unix-def:runlevel operation="equals">4</unix-def:runlevel>
		</unix-def:runlevel_object>
		<unix-def:runlevel_object id="oval:gov.nist.usgcb.rhel:obj:2014705" version="1">
			<unix-def:service_name>iptables</unix-def:service_name>
			<unix-def:runlevel operation="equals">5</unix-def:runlevel>
		</unix-def:runlevel_object>
		<ind-def:textfilecontent54_object id="oval:gov.nist.usgcb.rhel:obj:2014741" version="1">
			<ind-def:path>/etc/sysconfig</ind-def:path>
			<ind-def:filename>iptables</ind-def:filename>
			<ind-def:pattern operation="pattern match">^[\s]*:INPUT\sDROP\s\[0:0\]</ind-def:pattern>
			<ind-def:instance datatype="int">1</ind-def:instance>
		</ind-def:textfilecontent54_object>
		<ind-def:textfilecontent54_object id="oval:gov.nist.usgcb.rhel:obj:2014742" version="1">
			<ind-def:path>/etc/sysconfig</ind-def:path>
			<ind-def:filename>iptables</ind-def:filename>
			<ind-def:pattern operation="pattern match">^[\s]*:INPUT\ACCEPT\s\[0:0\]</ind-def:pattern>
			<ind-def:instance datatype="int">1</ind-def:instance>
		</ind-def:textfilecontent54_object>
		<ind-def:textfilecontent54_object id="oval:gov.nist.usgcb.rhel:obj:2014751" version="1">
			<ind-def:path>/etc/sysconfig</ind-def:path>
			<ind-def:filename>iptables</ind-def:filename>
			<ind-def:pattern operation="pattern match">^[\s]*:FORWARD\sDROP\s\[0:0\]</ind-def:pattern>
			<ind-def:instance datatype="int">1</ind-def:instance>
		</ind-def:textfilecontent54_object>
		<ind-def:textfilecontent54_object id="oval:gov.nist.usgcb.rhel:obj:2014752" version="1">
			<ind-def:path>/etc/sysconfig</ind-def:path>
			<ind-def:filename>iptables</ind-def:filename>
			<ind-def:pattern operation="pattern match">^[\s]*:FORWARD\ACCEPT\s\[0:0\]</ind-def:pattern>
			<ind-def:instance datatype="int">1</ind-def:instance>
		</ind-def:textfilecontent54_object>
		<ind-def:textfilecontent54_object id="oval:gov.nist.usgcb.rhel:obj:201476" version="2">
			<ind-def:path>/etc/modprobe.d</ind-def:path>
			<ind-def:filename>usgcb-blacklist</ind-def:filename>
			<ind-def:pattern operation="pattern match">^[\s]*install[\s]+dccp[\s]+/bin/true$</ind-def:pattern>
			<ind-def:instance datatype="int">1</ind-def:instance>
		</ind-def:textfilecontent54_object>
		<ind-def:textfilecontent54_object id="oval:gov.nist.usgcb.rhel:obj:201477" version="2">
			<ind-def:path>/etc/modprobe.d</ind-def:path>
			<ind-def:filename>usgcb-blacklist</ind-def:filename>
			<ind-def:pattern operation="pattern match">^[\s]*install[\s]+sctp[\s]+/bin/true$</ind-def:pattern>
			<ind-def:instance datatype="int">1</ind-def:instance>
		</ind-def:textfilecontent54_object>
		<ind-def:textfilecontent54_object id="oval:gov.nist.usgcb.rhel:obj:201478" version="2">
			<ind-def:path>/etc/modprobe.d</ind-def:path>
			<ind-def:filename>usgcb-blacklist</ind-def:filename>
			<ind-def:pattern operation="pattern match">^[\s]*install[\s]+rds[\s]+/bin/true$</ind-def:pattern>
			<ind-def:instance datatype="int">1</ind-def:instance>
		</ind-def:textfilecontent54_object>
		<ind-def:textfilecontent54_object id="oval:gov.nist.usgcb.rhel:obj:201479" version="2">
			<ind-def:path>/etc/modprobe.d</ind-def:path>
			<ind-def:filename>usgcb-blacklist</ind-def:filename>
			<ind-def:pattern operation="pattern match">^[\s]*install[\s]+tipc[\s]+/bin/true$</ind-def:pattern>
			<ind-def:instance datatype="int">1</ind-def:instance>
		</ind-def:textfilecontent54_object>
		<lin-def:rpminfo_object id="oval:gov.nist.usgcb.rhel:obj:201480" version="1">
			<lin-def:name>rsyslog</lin-def:name>
		</lin-def:rpminfo_object>
		<unix-def:runlevel_object id="oval:gov.nist.usgcb.rhel:obj:20148" version="1">
			<unix-def:service_name>rsyslog</unix-def:service_name>
			<unix-def:runlevel operation="equals">0</unix-def:runlevel>
		</unix-def:runlevel_object>
		<unix-def:runlevel_object id="oval:gov.nist.usgcb.rhel:obj:201482" version="1">
			<unix-def:service_name>rsyslog</unix-def:service_name>
			<unix-def:runlevel operation="equals">2</unix-def:runlevel>
		</unix-def:runlevel_object>
		<unix-def:runlevel_object id="oval:gov.nist.usgcb.rhel:obj:201483" version="1">
			<unix-def:service_name>rsyslog</unix-def:service_name>
			<unix-def:runlevel operation="equals">3</unix-def:runlevel>
		</unix-def:runlevel_object>
		<unix-def:runlevel_object id="oval:gov.nist.usgcb.rhel:obj:201484" version="1">
			<unix-def:service_name>rsyslog</unix-def:service_name>
			<unix-def:runlevel operation="equals">4</unix-def:runlevel>
		</unix-def:runlevel_object>
		<unix-def:runlevel_object id="oval:gov.nist.usgcb.rhel:obj:201485" version="1">
			<unix-def:service_name>rsyslog</unix-def:service_name>
			<unix-def:runlevel operation="equals">5</unix-def:runlevel>
		</unix-def:runlevel_object>
		<unix-def:runlevel_object id="oval:gov.nist.usgcb.rhel:obj:201486" version="1">
			<unix-def:service_name>rsyslog</unix-def:service_name>
			<unix-def:runlevel operation="equals">6</unix-def:runlevel>
		</unix-def:runlevel_object>
		<ind-def:textfilecontent54_object id="oval:gov.nist.usgcb.rhel:obj:20152" version="1">
			<ind-def:path>/etc</ind-def:path>
			<ind-def:filename>rsyslog.conf</ind-def:filename>
			<ind-def:pattern operation="pattern match">^\*\.\*[\s]+@</ind-def:pattern>
			<ind-def:instance datatype="int">1</ind-def:instance>
		</ind-def:textfilecontent54_object>
		<ind-def:textfilecontent54_object id="oval:gov.nist.usgcb.rhel:obj:20153" version="1">
			<ind-def:path>/etc</ind-def:path>
			<ind-def:filename>rsyslog.conf</ind-def:filename>
			<ind-def:pattern operation="pattern match">^\$Input(?:(TCP)|(UDP)|(RELP))ServerRun\s*$</ind-def:pattern>
			<ind-def:instance datatype="int">1</ind-def:instance>
		</ind-def:textfilecontent54_object>
		<unix-def:runlevel_object id="oval:gov.nist.usgcb.rhel:obj:201562" version="1">
			<unix-def:service_name>auditd</unix-def:service_name>
			<unix-def:runlevel operation="equals">2</unix-def:runlevel>
		</unix-def:runlevel_object>
		<unix-def:runlevel_object id="oval:gov.nist.usgcb.rhel:obj:201563" version="1">
			<unix-def:service_name>auditd</unix-def:service_name>
			<unix-def:runlevel operation="equals">3</unix-def:runlevel>
		</unix-def:runlevel_object>
		<unix-def:runlevel_object id="oval:gov.nist.usgcb.rhel:obj:201564" version="1">
			<unix-def:service_name>auditd</unix-def:service_name>
			<unix-def:runlevel operation="equals">4</unix-def:runlevel>
		</unix-def:runlevel_object>
		<unix-def:runlevel_object id="oval:gov.nist.usgcb.rhel:obj:201565" version="1">
			<unix-def:service_name>auditd</unix-def:service_name>
			<unix-def:runlevel operation="equals">5</unix-def:runlevel>
		</unix-def:runlevel_object>
		<ind-def:textfilecontent54_object id="oval:gov.nist.usgcb.rhel:obj:20157" version="1">
			<ind-def:path>/boot/grub</ind-def:path>
			<ind-def:filename>grub.conf</ind-def:filename>
			<ind-def:pattern operation="pattern match">^[\s]*kernel.+\saudit=1</ind-def:pattern>
			<ind-def:instance datatype="int">1</ind-def:instance>
		</ind-def:textfilecontent54_object>
		<ind-def:textfilecontent54_object id="oval:gov.nist.usgcb.rhel:obj:2015750" version="1">
			<ind-def:path>/etc/audit</ind-def:path>
			<ind-def:filename>audit.rules</ind-def:filename>
			<ind-def:pattern operation="pattern match">^\-a\salways,exit\s\-F\sarch=b32\s\-S\sadjtimex\s\-S\ssettimeofday\s\-S\sstime\s\-k\stime\-change$</ind-def:pattern>
			<ind-def:instance datatype="int">1</ind-def:instance>
		</ind-def:textfilecontent54_object>
		<ind-def:textfilecontent54_object id="oval:gov.nist.usgcb.rhel:obj:2015751" version="1">
			<ind-def:path>/etc/audit</ind-def:path>
			<ind-def:filename>audit.rules</ind-def:filename>
			<ind-def:pattern operation="pattern match">^\-a\salways,exit\s\-F\sarch=b32\s\-S\sclock_settime\s-F\sa0=0\s\-k\stime\-change$</ind-def:pattern>
			<ind-def:instance datatype="int">1</ind-def:instance>
		</ind-def:textfilecontent54_object>
		<ind-def:textfilecontent54_object id="oval:gov.nist.usgcb.rhel:obj:2015752" version="1">
			<ind-def:path>/etc/audit</ind-def:path>
			<ind-def:filename>audit.rules</ind-def:filename>
			<ind-def:pattern operation="pattern match">^\-a\salways,exit\s\-F\sarch=b64\s\-S\sadjtimex\s\-S\ssettimeofday\s-k\stime\-change$</ind-def:pattern>
			<ind-def:instance datatype="int">1</ind-def:instance>
		</ind-def:textfilecontent54_object>
		<ind-def:textfilecontent54_object id="oval:gov.nist.usgcb.rhel:obj:2015753" version="1">
			<ind-def:path>/etc/audit</ind-def:path>
			<ind-def:filename>audit.rules</ind-def:filename>
			<ind-def:pattern operation="pattern match">^\-a\salways,exit\s\-F\sarch=b64\s\-S\sclock_settime\s-F\sa0=0\s\-k\stime\-change$</ind-def:pattern>
			<ind-def:instance datatype="int">1</ind-def:instance>
		</ind-def:textfilecontent54_object>
		<ind-def:textfilecontent54_object id="oval:gov.nist.usgcb.rhel:obj:2015754" version="1">
			<ind-def:path>/etc/audit</ind-def:path>
			<ind-def:filename>audit.rules</ind-def:filename>
			<ind-def:pattern operation="pattern match">^\-w\s/etc/localtime\s\-p\swa\s\-k\stime\-change$</ind-def:pattern>
			<ind-def:instance datatype="int">1</ind-def:instance>
		</ind-def:textfilecontent54_object>
		<ind-def:textfilecontent54_object id="oval:gov.nist.usgcb.rhel:obj:201580" version="1">
			<ind-def:path>/etc/audit</ind-def:path>
			<ind-def:filename>audit.rules</ind-def:filename>
			<ind-def:pattern operation="pattern match">^\-w\s/etc/group\s\-p\swa\s\-k\sidentity$</ind-def:pattern>
			<ind-def:instance datatype="int">1</ind-def:instance>
		</ind-def:textfilecontent54_object>
		<ind-def:textfilecontent54_object id="oval:gov.nist.usgcb.rhel:obj:201581" version="1">
			<ind-def:path>/etc/audit</ind-def:path>
			<ind-def:filename>audit.rules</ind-def:filename>
			<ind-def:pattern operation="pattern match">^\-w\s/etc/passwd\s\-p\swa\s\-k\sidentity$</ind-def:pattern>
			<ind-def:instance datatype="int">1</ind-def:instance>
		</ind-def:textfilecontent54_object>
		<ind-def:textfilecontent54_object id="oval:gov.nist.usgcb.rhel:obj:201582" version="1">
			<ind-def:path>/etc/audit</ind-def:path>
			<ind-def:filename>audit.rules</ind-def:filename>
			<ind-def:pattern operation="pattern match">^\-w\s/etc/gshadow\s\-p\swa\s\-k\sidentity$</ind-def:pattern>
			<ind-def:instance datatype="int">1</ind-def:instance>
		</ind-def:textfilecontent54_object>
		<ind-def:textfilecontent54_object id="oval:gov.nist.usgcb.rhel:obj:201583" version="1">
			<ind-def:path>/etc/audit</ind-def:path>
			<ind-def:filename>audit.rules</ind-def:filename>
			<ind-def:pattern operation="pattern match">^\-w\s/etc/shadow\s\-p\swa\s\-k\sidentity$</ind-def:pattern>
			<ind-def:instance datatype="int">1</ind-def:instance>
		</ind-def:textfilecontent54_object>
		<ind-def:textfilecontent54_object id="oval:gov.nist.usgcb.rhel:obj:201584" version="1">
			<ind-def:path>/etc/audit</ind-def:path>
			<ind-def:filename>audit.rules</ind-def:filename>
			<ind-def:pattern operation="pattern match">^\-w\s/etc/security/opasswd\s\-p\swa\s\-k\sidentity$</ind-def:pattern>
			<ind-def:instance datatype="int">1</ind-def:instance>
		</ind-def:textfilecontent54_object>
		<ind-def:textfilecontent54_object id="oval:gov.nist.usgcb.rhel:obj:201590" version="1">
			<ind-def:path>/etc/audit</ind-def:path>
			<ind-def:filename>audit.rules</ind-def:filename>
			<ind-def:pattern operation="pattern match">^\-a\sexit,always\s\-F\sarch=b32\s\-S\ssethostname\s\-S\ssetdomainname\s\-k\ssystem\-locale$</ind-def:pattern>
			<ind-def:instance datatype="int">1</ind-def:instance>
		</ind-def:textfilecontent54_object>
		<ind-def:textfilecontent54_object id="oval:gov.nist.usgcb.rhel:obj:201591" version="1">
			<ind-def:path>/etc/audit</ind-def:path>
			<ind-def:filename>audit.rules</ind-def:filename>
			<ind-def:pattern operation="pattern match">^\-a\sexit,always\s\-F\sarch=b64\s\-S\ssethostname\s\-S\ssetdomainname\s\-k\ssystem\-locale$</ind-def:pattern>
			<ind-def:instance datatype="int">1</ind-def:instance>
		</ind-def:textfilecontent54_object>
		<ind-def:textfilecontent54_object id="oval:gov.nist.usgcb.rhel:obj:201592" version="1">
			<ind-def:path>/etc/audit</ind-def:path>
			<ind-def:filename>audit.rules</ind-def:filename>
			<ind-def:pattern operation="pattern match">^\-w\s/etc/issue\s\-p\swa\s\-k\ssystem\-locale$</ind-def:pattern>
			<ind-def:instance datatype="int">1</ind-def:instance>
		</ind-def:textfilecontent54_object>
		<ind-def:textfilecontent54_object id="oval:gov.nist.usgcb.rhel:obj:201593" version="1">
			<ind-def:path>/etc/audit</ind-def:path>
			<ind-def:filename>audit.rules</ind-def:filename>
			<ind-def:pattern operation="pattern match">^\-w\s/etc/issue\.net\s\-p\swa\s\-k\ssystem\-locale$</ind-def:pattern>
			<ind-def:instance datatype="int">1</ind-def:instance>
		</ind-def:textfilecontent54_object>
		<ind-def:textfilecontent54_object id="oval:gov.nist.usgcb.rhel:obj:201594" version="1">
			<ind-def:path>/etc/audit</ind-def:path>
			<ind-def:filename>audit.rules</ind-def:filename>
			<ind-def:pattern operation="pattern match">^\-w\s/etc/hosts\s\-p\swa\s\-k\ssystem\-locale$</ind-def:pattern>
			<ind-def:instance datatype="int">1</ind-def:instance>
		</ind-def:textfilecontent54_object>
		<ind-def:textfilecontent54_object id="oval:gov.nist.usgcb.rhel:obj:201595" version="1">
			<ind-def:path>/etc/audit</ind-def:path>
			<ind-def:filename>audit.rules</ind-def:filename>
			<ind-def:pattern operation="pattern match">^\-w\s/etc/sysconfig/network\s\-p\swa\s\-k\ssystem\-locale$</ind-def:pattern>
			<ind-def:instance datatype="int">1</ind-def:instance>
		</ind-def:textfilecontent54_object>
		<ind-def:textfilecontent54_object id="oval:gov.nist.usgcb.rhel:obj:20160" version="1">
			<ind-def:path>/etc/audit</ind-def:path>
			<ind-def:filename>audit.rules</ind-def:filename>
			<ind-def:pattern operation="pattern match">^\-w\s/etc/selinux/\s\-p\swa\s\-k\sMAC\-policy$</ind-def:pattern>
			<ind-def:instance datatype="int">1</ind-def:instance>
		</ind-def:textfilecontent54_object>
		<ind-def:textfilecontent54_object id="oval:gov.nist.usgcb.rhel:obj:201610" version="1">
			<ind-def:path>/etc/audit</ind-def:path>
			<ind-def:filename>audit.rules</ind-def:filename>
			<ind-def:pattern operation="pattern match">^\-w\s/var/log/faillog\s\-p\swa\s\-k\slogins$</ind-def:pattern>
			<ind-def:instance datatype="int">1</ind-def:instance>
		</ind-def:textfilecontent54_object>
		<ind-def:textfilecontent54_object id="oval:gov.nist.usgcb.rhel:obj:201611" version="1">
			<ind-def:path>/etc/audit</ind-def:path>
			<ind-def:filename>audit.rules</ind-def:filename>
			<ind-def:pattern operation="pattern match">^\-w\s/var/log/lastlog\s\-p\swa\s\-k\slogins$</ind-def:pattern>
			<ind-def:instance datatype="int">1</ind-def:instance>
		</ind-def:textfilecontent54_object>
		<ind-def:textfilecontent54_object id="oval:gov.nist.usgcb.rhel:obj:201620" version="1">
			<ind-def:path>/etc/audit</ind-def:path>
			<ind-def:filename>audit.rules</ind-def:filename>
			<ind-def:pattern operation="pattern match">^\-w\s/var/run/utmp\s\-p\swa\s\-k\ssession$</ind-def:pattern>
			<ind-def:instance datatype="int">1</ind-def:instance>
		</ind-def:textfilecontent54_object>
		<ind-def:textfilecontent54_object id="oval:gov.nist.usgcb.rhel:obj:201621" version="1">
			<ind-def:path>/etc/audit</ind-def:path>
			<ind-def:filename>audit.rules</ind-def:filename>
			<ind-def:pattern operation="pattern match">^\-w\s/var/log/btmp\s\-p\swa\s\-k\ssession$</ind-def:pattern>
			<ind-def:instance datatype="int">1</ind-def:instance>
		</ind-def:textfilecontent54_object>
		<ind-def:textfilecontent54_object id="oval:gov.nist.usgcb.rhel:obj:201622" version="1">
			<ind-def:path>/etc/audit</ind-def:path>
			<ind-def:filename>audit.rules</ind-def:filename>
			<ind-def:pattern operation="pattern match">^\-w\s/var/log/wtmp\s\-p\swa\s\-k\ssession$</ind-def:pattern>
			<ind-def:instance datatype="int">1</ind-def:instance>
		</ind-def:textfilecontent54_object>
		<ind-def:textfilecontent54_object id="oval:gov.nist.usgcb.rhel:obj:201630" version="1">
			<ind-def:path>/etc/audit</ind-def:path>
			<ind-def:filename>audit.rules</ind-def:filename>
			<ind-def:pattern operation="pattern match">^\-a\salways,exit\s\-F\sarch=b32\s\-S\schmod\s\-S\sfchmod\s\-S\sfchmodat\s\-F\sauid>=500\s\-F\sauid!=4294967295\s\-k\sperm_mod$</ind-def:pattern>
			<ind-def:instance datatype="int">1</ind-def:instance>
		</ind-def:textfilecontent54_object>
		<ind-def:textfilecontent54_object id="oval:gov.nist.usgcb.rhel:obj:201631" version="1">
			<ind-def:path>/etc/audit</ind-def:path>
			<ind-def:filename>audit.rules</ind-def:filename>
			<ind-def:pattern operation="pattern match">^\-a\salways,exit\s\-F\sarch=b32\s\-S\schown\s\-S\sfchown\s\-S\sfchownat\s\-S\slchown\s\-F\sauid>=500\s\-F\sauid!=4294967295\s\-k\sperm_mod$</ind-def:pattern>
			<ind-def:instance datatype="int">1</ind-def:instance>
		</ind-def:textfilecontent54_object>
		<ind-def:textfilecontent54_object id="oval:gov.nist.usgcb.rhel:obj:201632" version="1">
			<ind-def:path>/etc/audit</ind-def:path>
			<ind-def:filename>audit.rules</ind-def:filename>
			<ind-def:pattern operation="pattern match">^\-a\salways,exit\s\-F\sarch=b32\s\-S\ssetxattr\s\-S\slsetxattr\s\-S\sfsetxattr\s\-S\sremovexattr\s\-S\slremovexattr\s\-S\sfremovexattr\s\-F\sauid>=500\s\-F\sauid!=4294967295\s\-k\sperm_mod$</ind-def:pattern>
			<ind-def:instance datatype="int">1</ind-def:instance>
		</ind-def:textfilecontent54_object>
		<ind-def:textfilecontent54_object id="oval:gov.nist.usgcb.rhel:obj:201633" version="1">
			<ind-def:path>/etc/audit</ind-def:path>
			<ind-def:filename>audit.rules</ind-def:filename>
			<ind-def:pattern operation="pattern match">^\-a\salways,exit\s\-F\sarch=b64\s\-S\schmod\s\-S\sfchmod\s\-S\sfchmodat\s\-F\sauid>=500\s\-F\sauid!=4294967295\s\-k\sperm_mod$</ind-def:pattern>
			<ind-def:instance datatype="int">1</ind-def:instance>
		</ind-def:textfilecontent54_object>
		<ind-def:textfilecontent54_object id="oval:gov.nist.usgcb.rhel:obj:201634" version="1">
			<ind-def:path>/etc/audit</ind-def:path>
			<ind-def:filename>audit.rules</ind-def:filename>
			<ind-def:pattern operation="pattern match">^\-a\salways,exit\s\-F\sarch=b64\s\-S\schown\s\-S\sfchown\s\-S\sfchownat\s\-S\slchown\s\-F\sauid>=500\s\-F\sauid!=4294967295\s\-k\sperm_mod$</ind-def:pattern>
			<ind-def:instance datatype="int">1</ind-def:instance>
		</ind-def:textfilecontent54_object>
		<ind-def:textfilecontent54_object id="oval:gov.nist.usgcb.rhel:obj:201635" version="1">
			<ind-def:path>/etc/audit</ind-def:path>
			<ind-def:filename>audit.rules</ind-def:filename>
			<ind-def:pattern operation="pattern match">^\-a\salways,exit\s\-F\sarch=b64\s\-S\ssetxattr\s\-S\slsetxattr\s\-S\sfsetxattr\s\-S\sremovexattr\s\-S\slremovexattr\s\-S\sfremovexattr\s\-F\sauid>=500\s\-F\sauid!=4294967295\s\-k\sperm_mod$</ind-def:pattern>
			<ind-def:instance datatype="int">1</ind-def:instance>
		</ind-def:textfilecontent54_object>
		<ind-def:textfilecontent54_object id="oval:gov.nist.usgcb.rhel:obj:201640" version="1">
			<ind-def:path>/etc/audit</ind-def:path>
			<ind-def:filename>audit.rules</ind-def:filename>
			<ind-def:pattern operation="pattern match">^\-a\salways,exit\s\-F\sarch=b32\s\-S\screat\s\-S\sopen\s\-S\sopenat\s\-S\struncate\s\-S\sftruncate\s\-F\sexit=\-EACCES\s\-F\sauid>=500\s\-F\sauid!=4294967295\s\-k\saccess$</ind-def:pattern>
			<ind-def:instance datatype="int">1</ind-def:instance>
		</ind-def:textfilecontent54_object>
		<ind-def:textfilecontent54_object id="oval:gov.nist.usgcb.rhel:obj:201641" version="1">
			<ind-def:path>/etc/audit</ind-def:path>
			<ind-def:filename>audit.rules</ind-def:filename>
			<ind-def:pattern operation="pattern match">^\-a\salways,exit\s\-F\sarch=b32\s\-S\screat\s\-S\sopen\s\-S\sopenat\s\-S\struncate\s\-S\sftruncate\s\-F\sexit=\-EPERM\s\-F\sauid>=500\s\-F\sauid!=4294967295\s\-k\saccess$</ind-def:pattern>
			<ind-def:instance datatype="int">1</ind-def:instance>
		</ind-def:textfilecontent54_object>
		<ind-def:textfilecontent54_object id="oval:gov.nist.usgcb.rhel:obj:201642" version="1">
			<ind-def:path>/etc/audit</ind-def:path>
			<ind-def:filename>audit.rules</ind-def:filename>
			<ind-def:pattern operation="pattern match">^\-a\salways,exit\s\-F\sarch=b64\s\-S\screat\s\-S\sopen\s\-S\sopenat\s\-S\struncate\s\-S\sftruncate\s\-F\sexit=\-EACCES\s\-F\sauid>=500\s\-F\sauid!=4294967295\s\-k\saccess$</ind-def:pattern>
			<ind-def:instance datatype="int">1</ind-def:instance>
		</ind-def:textfilecontent54_object>
		<ind-def:textfilecontent54_object id="oval:gov.nist.usgcb.rhel:obj:201643" version="1">
			<ind-def:path>/etc/audit</ind-def:path>
			<ind-def:filename>audit.rules</ind-def:filename>
			<ind-def:pattern operation="pattern match">^\-a\salways,exit\s\-F\sarch=b64\s\-S\screat\s\-S\sopen\s\-S\sopenat\s\-S\struncate\s\-S\sftruncate\s\-F\sexit=\-EPERM\s\-F\sauid>=500\s\-F\sauid!=4294967295\s\-k\saccess$</ind-def:pattern>
			<ind-def:instance datatype="int">1</ind-def:instance>
		</ind-def:textfilecontent54_object>
		<ind-def:textfilecontent54_object id="oval:gov.nist.usgcb.rhel:obj:20165" version="1">
			<ind-def:path>/etc/audit</ind-def:path>
			<ind-def:filename>audit.rules</ind-def:filename>
			<ind-def:pattern operation="pattern match">^\-a\salways,exit\s-F\spath=/bin/ping\s-F perm=x\s\-F\sauid>=500\s\-F\sauid!=4294967295\s\-k\sprivileged</ind-def:pattern>
			<ind-def:instance datatype="int">1</ind-def:instance>
		</ind-def:textfilecontent54_object>
		<ind-def:textfilecontent54_object id="oval:gov.nist.usgcb.rhel:obj:201660" version="1">
			<ind-def:path>/etc/audit</ind-def:path>
			<ind-def:filename>audit.rules</ind-def:filename>
			<ind-def:pattern operation="pattern match">^\-a\salways,exit\s\-F\sarch=b32\s\-S\smount\s\-F\sauid>=500\s\-F\sauid!=4294967295\s\-k\sexport$</ind-def:pattern>
			<ind-def:instance datatype="int">1</ind-def:instance>
		</ind-def:textfilecontent54_object>
		<ind-def:textfilecontent54_object id="oval:gov.nist.usgcb.rhel:obj:201661" version="1">
			<ind-def:path>/etc/audit</ind-def:path>
			<ind-def:filename>audit.rules</ind-def:filename>
			<ind-def:pattern operation="pattern match">^\-a\salways,exit\s\-F\sarch=b64\s\-S\smount\s\-F\sauid>=500\s\-F\sauid!=4294967295\s\-k\sexport$</ind-def:pattern>
			<ind-def:instance datatype="int">1</ind-def:instance>
		</ind-def:textfilecontent54_object>
		<unix-def:uname_object id="oval:gov.nist.usgcb.rhel:obj:201670" version="1"/>
		<ind-def:textfilecontent54_object id="oval:gov.nist.usgcb.rhel:obj:201671" version="1">
			<ind-def:path>/etc/audit</ind-def:path>
			<ind-def:filename>audit.rules</ind-def:filename>
			<ind-def:pattern operation="pattern match">^\-a\salways,exit\s\-F\sarch=b32\s\-S\sunlink\s\-S\sunlinkat\s\-S\srename\s\-S\srenameat\s\-F\sauid>=500\s\-F\sauid!=4294967295\s\-k\sdelete$</ind-def:pattern>
			<ind-def:instance datatype="int">1</ind-def:instance>
		</ind-def:textfilecontent54_object>
		<ind-def:textfilecontent54_object id="oval:gov.nist.usgcb.rhel:obj:201673" version="1">
			<ind-def:path>/etc/audit</ind-def:path>
			<ind-def:filename>audit.rules</ind-def:filename>
			<ind-def:pattern operation="pattern match">^\-a\salways,exit\s\-F\sarch=b64\s\-S\sunlink\s\-S\sunlinkat\s\-S\srename\s\-S\srenameat\s\-F\sauid>=500\s\-F\sauid!=4294967295\s\-k\sdelete$</ind-def:pattern>
			<ind-def:instance datatype="int">1</ind-def:instance>
		</ind-def:textfilecontent54_object>
		<ind-def:textfilecontent54_object id="oval:gov.nist.usgcb.rhel:obj:20168" version="1">
			<ind-def:path>/etc/audit</ind-def:path>
			<ind-def:filename>audit.rules</ind-def:filename>
			<ind-def:pattern operation="pattern match">^\-w\s/etc/sudoers\s\-p\swa\s\-k\sactions</ind-def:pattern>
			<ind-def:instance datatype="int">1</ind-def:instance>
		</ind-def:textfilecontent54_object>
		<ind-def:textfilecontent54_object id="oval:gov.nist.usgcb.rhel:obj:2016851" version="1">
			<ind-def:path>/etc/audit</ind-def:path>
			<ind-def:filename>audit.rules</ind-def:filename>
			<ind-def:pattern operation="pattern match">^\-w\s/sbin/insmod\s\-p\sx\s\-k\smodules$</ind-def:pattern>
			<ind-def:instance datatype="int">1</ind-def:instance>
		</ind-def:textfilecontent54_object>
		<ind-def:textfilecontent54_object id="oval:gov.nist.usgcb.rhel:obj:2016852" version="1">
			<ind-def:path>/etc/audit</ind-def:path>
			<ind-def:filename>audit.rules</ind-def:filename>
			<ind-def:pattern operation="pattern match">^\-w\s/sbin/rmmod\s\-p\sx\s\-k\smodules$</ind-def:pattern>
			<ind-def:instance datatype="int">1</ind-def:instance>
		</ind-def:textfilecontent54_object>
		<ind-def:textfilecontent54_object id="oval:gov.nist.usgcb.rhel:obj:2016853" version="1">
			<ind-def:path>/etc/audit</ind-def:path>
			<ind-def:filename>audit.rules</ind-def:filename>
			<ind-def:pattern operation="pattern match">^\-w\s/sbin/modprobe\s\-p\sx\s\-k\smodules$</ind-def:pattern>
			<ind-def:instance datatype="int">1</ind-def:instance>
		</ind-def:textfilecontent54_object>
		<ind-def:textfilecontent54_object id="oval:gov.nist.usgcb.rhel:obj:2016854" version="1">
			<ind-def:path>/etc/audit</ind-def:path>
			<ind-def:filename>audit.rules</ind-def:filename>
			<ind-def:pattern operation="pattern match">^\-a\salways,exit\s(?:-F arch=b[36][24]\s)?\-S\sinit_module\s\-S\sdelete_module\s\-k\smodules\s*$</ind-def:pattern>
			<ind-def:instance datatype="int">1</ind-def:instance>
		</ind-def:textfilecontent54_object>
		<ind-def:textfilecontent54_object id="oval:gov.nist.usgcb.rhel:obj:20169" version="1">
			<ind-def:path>/etc/audit</ind-def:path>
			<ind-def:filename>audit.rules</ind-def:filename>
			<ind-def:pattern operation="pattern match">^\-e\s2</ind-def:pattern>
			<ind-def:instance datatype="int">1</ind-def:instance>
		</ind-def:textfilecontent54_object>
		<unix-def:runlevel_object id="oval:gov.nist.usgcb.rhel:obj:20170" version="1">
			<unix-def:service_name>inetd</unix-def:service_name>
			<unix-def:runlevel operation="equals">0</unix-def:runlevel>
		</unix-def:runlevel_object>
		<unix-def:runlevel_object id="oval:gov.nist.usgcb.rhel:obj:201701" version="1">
			<unix-def:service_name>inetd</unix-def:service_name>
			<unix-def:runlevel operation="equals">1</unix-def:runlevel>
		</unix-def:runlevel_object>
		<unix-def:runlevel_object id="oval:gov.nist.usgcb.rhel:obj:201702" version="1">
			<unix-def:service_name>inetd</unix-def:service_name>
			<unix-def:runlevel operation="equals">2</unix-def:runlevel>
		</unix-def:runlevel_object>
		<unix-def:runlevel_object id="oval:gov.nist.usgcb.rhel:obj:201703" version="1">
			<unix-def:service_name>inetd</unix-def:service_name>
			<unix-def:runlevel operation="equals">3</unix-def:runlevel>
		</unix-def:runlevel_object>
		<unix-def:runlevel_object id="oval:gov.nist.usgcb.rhel:obj:201704" version="1">
			<unix-def:service_name>inetd</unix-def:service_name>
			<unix-def:runlevel operation="equals">4</unix-def:runlevel>
		</unix-def:runlevel_object>
		<unix-def:runlevel_object id="oval:gov.nist.usgcb.rhel:obj:201705" version="1">
			<unix-def:service_name>inetd</unix-def:service_name>
			<unix-def:runlevel operation="equals">5</unix-def:runlevel>
		</unix-def:runlevel_object>
		<unix-def:runlevel_object id="oval:gov.nist.usgcb.rhel:obj:201706" version="1">
			<unix-def:service_name>inetd</unix-def:service_name>
			<unix-def:runlevel operation="equals">6</unix-def:runlevel>
		</unix-def:runlevel_object>
		<unix-def:runlevel_object id="oval:gov.nist.usgcb.rhel:obj:20171" version="1">
			<unix-def:service_name>xinetd</unix-def:service_name>
			<unix-def:runlevel operation="equals">0</unix-def:runlevel>
		</unix-def:runlevel_object>
		<unix-def:runlevel_object id="oval:gov.nist.usgcb.rhel:obj:201711" version="1">
			<unix-def:service_name>xinetd</unix-def:service_name>
			<unix-def:runlevel operation="equals">1</unix-def:runlevel>
		</unix-def:runlevel_object>
		<unix-def:runlevel_object id="oval:gov.nist.usgcb.rhel:obj:201712" version="1">
			<unix-def:service_name>xinetd</unix-def:service_name>
			<unix-def:runlevel operation="equals">2</unix-def:runlevel>
		</unix-def:runlevel_object>
		<unix-def:runlevel_object id="oval:gov.nist.usgcb.rhel:obj:201713" version="1">
			<unix-def:service_name>xinetd</unix-def:service_name>
			<unix-def:runlevel operation="equals">3</unix-def:runlevel>
		</unix-def:runlevel_object>
		<unix-def:runlevel_object id="oval:gov.nist.usgcb.rhel:obj:201714" version="1">
			<unix-def:service_name>xinetd</unix-def:service_name>
			<unix-def:runlevel operation="equals">4</unix-def:runlevel>
		</unix-def:runlevel_object>
		<unix-def:runlevel_object id="oval:gov.nist.usgcb.rhel:obj:201715" version="1">
			<unix-def:service_name>xinetd</unix-def:service_name>
			<unix-def:runlevel operation="equals">5</unix-def:runlevel>
		</unix-def:runlevel_object>
		<unix-def:runlevel_object id="oval:gov.nist.usgcb.rhel:obj:201716" version="1">
			<unix-def:service_name>xinetd</unix-def:service_name>
			<unix-def:runlevel operation="equals">6</unix-def:runlevel>
		</unix-def:runlevel_object>
		<lin-def:rpminfo_object id="oval:gov.nist.usgcb.rhel:obj:20172" version="1">
			<lin-def:name>inetd</lin-def:name>
		</lin-def:rpminfo_object>
		<lin-def:rpminfo_object id="oval:gov.nist.usgcb.rhel:obj:20173" version="1">
			<lin-def:name>xinetd</lin-def:name>
		</lin-def:rpminfo_object>
		<lin-def:rpminfo_object id="oval:gov.nist.usgcb.rhel:obj:20174" version="1">
			<lin-def:name>telnet-server</lin-def:name>
		</lin-def:rpminfo_object>
		<lin-def:rpminfo_object id="oval:gov.nist.usgcb.rhel:obj:20177" version="1">
			<lin-def:name>rsh-server</lin-def:name>
		</lin-def:rpminfo_object>
		<unix-def:runlevel_object id="oval:gov.nist.usgcb.rhel:obj:20181" version="1">
			<unix-def:service_name>ypbind</unix-def:service_name>
			<unix-def:runlevel operation="equals">0</unix-def:runlevel>
		</unix-def:runlevel_object>
		<unix-def:runlevel_object id="oval:gov.nist.usgcb.rhel:obj:201811" version="1">
			<unix-def:service_name>ypbind</unix-def:service_name>
			<unix-def:runlevel operation="equals">1</unix-def:runlevel>
		</unix-def:runlevel_object>
		<unix-def:runlevel_object id="oval:gov.nist.usgcb.rhel:obj:201812" version="1">
			<unix-def:service_name>ypbind</unix-def:service_name>
			<unix-def:runlevel operation="equals">2</unix-def:runlevel>
		</unix-def:runlevel_object>
		<unix-def:runlevel_object id="oval:gov.nist.usgcb.rhel:obj:201813" version="1">
			<unix-def:service_name>ypbind</unix-def:service_name>
			<unix-def:runlevel operation="equals">3</unix-def:runlevel>
		</unix-def:runlevel_object>
		<unix-def:runlevel_object id="oval:gov.nist.usgcb.rhel:obj:201814" version="1">
			<unix-def:service_name>ypbind</unix-def:service_name>
			<unix-def:runlevel operation="equals">4</unix-def:runlevel>
		</unix-def:runlevel_object>
		<unix-def:runlevel_object id="oval:gov.nist.usgcb.rhel:obj:201815" version="1">
			<unix-def:service_name>ypbind</unix-def:service_name>
			<unix-def:runlevel operation="equals">5</unix-def:runlevel>
		</unix-def:runlevel_object>
		<unix-def:runlevel_object id="oval:gov.nist.usgcb.rhel:obj:201816" version="1">
			<unix-def:service_name>ypbind</unix-def:service_name>
			<unix-def:runlevel operation="equals">6</unix-def:runlevel>
		</unix-def:runlevel_object>
		<lin-def:rpminfo_object id="oval:gov.nist.usgcb.rhel:obj:20180" version="1">
			<lin-def:name>ypserv</lin-def:name>
		</lin-def:rpminfo_object>
		<lin-def:rpminfo_object id="oval:gov.nist.usgcb.rhel:obj:20182" version="1">
			<lin-def:name>tftp-server</lin-def:name>
		</lin-def:rpminfo_object>
		<unix-def:runlevel_object id="oval:gov.nist.usgcb.rhel:obj:201825" version="1">
			<unix-def:service_name>tftp</unix-def:service_name>
			<unix-def:runlevel operation="equals">0</unix-def:runlevel>
		</unix-def:runlevel_object>
		<unix-def:runlevel_object id="oval:gov.nist.usgcb.rhel:obj:2018251" version="1">
			<unix-def:service_name>tftp</unix-def:service_name>
			<unix-def:runlevel operation="equals">1</unix-def:runlevel>
		</unix-def:runlevel_object>
		<unix-def:runlevel_object id="oval:gov.nist.usgcb.rhel:obj:2018252" version="1">
			<unix-def:service_name>tftp</unix-def:service_name>
			<unix-def:runlevel operation="equals">2</unix-def:runlevel>
		</unix-def:runlevel_object>
		<unix-def:runlevel_object id="oval:gov.nist.usgcb.rhel:obj:2018253" version="1">
			<unix-def:service_name>tftp</unix-def:service_name>
			<unix-def:runlevel operation="equals">3</unix-def:runlevel>
		</unix-def:runlevel_object>
		<unix-def:runlevel_object id="oval:gov.nist.usgcb.rhel:obj:2018254" version="1">
			<unix-def:service_name>tftp</unix-def:service_name>
			<unix-def:runlevel operation="equals">4</unix-def:runlevel>
		</unix-def:runlevel_object>
		<unix-def:runlevel_object id="oval:gov.nist.usgcb.rhel:obj:2018255" version="1">
			<unix-def:service_name>tftp</unix-def:service_name>
			<unix-def:runlevel operation="equals">5</unix-def:runlevel>
		</unix-def:runlevel_object>
		<unix-def:runlevel_object id="oval:gov.nist.usgcb.rhel:obj:2018256" version="1">
			<unix-def:service_name>tftp</unix-def:service_name>
			<unix-def:runlevel operation="equals">6</unix-def:runlevel>
		</unix-def:runlevel_object>
		<!--<unix-def:runlevel_object id="oval:gov.nist.usgcb.rhel:obj:20183" version="1">
			<unix-def:service_name>firstboot</unix-def:service_name>
			<unix-def:runlevel operation="equals">0</unix-def:runlevel>
		</unix-def:runlevel_object>
		<unix-def:runlevel_object id="oval:gov.nist.usgcb.rhel:obj:201831" version="1">
			<unix-def:service_name>firstboot</unix-def:service_name>
			<unix-def:runlevel operation="equals">1</unix-def:runlevel>
		</unix-def:runlevel_object>
		<unix-def:runlevel_object id="oval:gov.nist.usgcb.rhel:obj:201832" version="1">
			<unix-def:service_name>firstboot</unix-def:service_name>
			<unix-def:runlevel operation="equals">2</unix-def:runlevel>
		</unix-def:runlevel_object>
		<unix-def:runlevel_object id="oval:gov.nist.usgcb.rhel:obj:201833" version="1">
			<unix-def:service_name>firstboot</unix-def:service_name>
			<unix-def:runlevel operation="equals">3</unix-def:runlevel>
		</unix-def:runlevel_object>
		<unix-def:runlevel_object id="oval:gov.nist.usgcb.rhel:obj:201834" version="1">
			<unix-def:service_name>firstboot</unix-def:service_name>
			<unix-def:runlevel operation="equals">4</unix-def:runlevel>
		</unix-def:runlevel_object>
		<unix-def:runlevel_object id="oval:gov.nist.usgcb.rhel:obj:201835" version="1">
			<unix-def:service_name>firstboot</unix-def:service_name>
			<unix-def:runlevel operation="equals">5</unix-def:runlevel>
		</unix-def:runlevel_object>
		<unix-def:runlevel_object id="oval:gov.nist.usgcb.rhel:obj:201836" version="1">
			<unix-def:service_name>firstboot</unix-def:service_name>
			<unix-def:runlevel operation="equals">6</unix-def:runlevel>
		</unix-def:runlevel_object>-->
		<!--<unix-def:runlevel_object id="oval:gov.nist.usgcb.rhel:obj:20184" version="1">
			<unix-def:service_name>gpm</unix-def:service_name>
			<unix-def:runlevel operation="equals">0</unix-def:runlevel>
		</unix-def:runlevel_object>
		<unix-def:runlevel_object id="oval:gov.nist.usgcb.rhel:obj:201841" version="1">
			<unix-def:service_name>gpm</unix-def:service_name>
			<unix-def:runlevel operation="equals">1</unix-def:runlevel>
		</unix-def:runlevel_object>
		<unix-def:runlevel_object id="oval:gov.nist.usgcb.rhel:obj:201842" version="1">
			<unix-def:service_name>gpm</unix-def:service_name>
			<unix-def:runlevel operation="equals">2</unix-def:runlevel>
		</unix-def:runlevel_object>
		<unix-def:runlevel_object id="oval:gov.nist.usgcb.rhel:obj:201843" version="1">
			<unix-def:service_name>gpm</unix-def:service_name>
			<unix-def:runlevel operation="equals">3</unix-def:runlevel>
		</unix-def:runlevel_object>
		<unix-def:runlevel_object id="oval:gov.nist.usgcb.rhel:obj:201844" version="1">
			<unix-def:service_name>gpm</unix-def:service_name>
			<unix-def:runlevel operation="equals">4</unix-def:runlevel>
		</unix-def:runlevel_object>
		<unix-def:runlevel_object id="oval:gov.nist.usgcb.rhel:obj:201845" version="1">
			<unix-def:service_name>gpm</unix-def:service_name>
			<unix-def:runlevel operation="equals">5</unix-def:runlevel>
		</unix-def:runlevel_object>
		<unix-def:runlevel_object id="oval:gov.nist.usgcb.rhel:obj:201846" version="1">
			<unix-def:service_name>gpm</unix-def:service_name>
			<unix-def:runlevel operation="equals">6</unix-def:runlevel>
		</unix-def:runlevel_object>-->
		<!--<unix-def:runlevel_object id="oval:gov.nist.usgcb.rhel:obj:20185" version="1">
			<unix-def:service_name>irqbalance</unix-def:service_name>
			<unix-def:runlevel operation="equals">0</unix-def:runlevel>
		</unix-def:runlevel_object>
		<unix-def:runlevel_object id="oval:gov.nist.usgcb.rhel:obj:201851" version="1">
			<unix-def:service_name>irqbalance</unix-def:service_name>
			<unix-def:runlevel operation="equals">1</unix-def:runlevel>
		</unix-def:runlevel_object>
		<unix-def:runlevel_object id="oval:gov.nist.usgcb.rhel:obj:201852" version="1">
			<unix-def:service_name>irqbalance</unix-def:service_name>
			<unix-def:runlevel operation="equals">2</unix-def:runlevel>
		</unix-def:runlevel_object>
		<unix-def:runlevel_object id="oval:gov.nist.usgcb.rhel:obj:201853" version="1">
			<unix-def:service_name>irqbalance</unix-def:service_name>
			<unix-def:runlevel operation="equals">3</unix-def:runlevel>
		</unix-def:runlevel_object>
		<unix-def:runlevel_object id="oval:gov.nist.usgcb.rhel:obj:201854" version="1">
			<unix-def:service_name>irqbalance</unix-def:service_name>
			<unix-def:runlevel operation="equals">4</unix-def:runlevel>
		</unix-def:runlevel_object>
		<unix-def:runlevel_object id="oval:gov.nist.usgcb.rhel:obj:201855" version="1">
			<unix-def:service_name>irqbalance</unix-def:service_name>
			<unix-def:runlevel operation="equals">5</unix-def:runlevel>
		</unix-def:runlevel_object>
		<unix-def:runlevel_object id="oval:gov.nist.usgcb.rhel:obj:201856" version="1">
			<unix-def:service_name>irqbalance</unix-def:service_name>
			<unix-def:runlevel operation="equals">6</unix-def:runlevel>
		</unix-def:runlevel_object>-->
		<unix-def:runlevel_object id="oval:gov.nist.usgcb.rhel:obj:20186" version="1">
			<unix-def:service_name>isdn</unix-def:service_name>
			<unix-def:runlevel operation="equals">0</unix-def:runlevel>
		</unix-def:runlevel_object>
		<unix-def:runlevel_object id="oval:gov.nist.usgcb.rhel:obj:201861" version="1">
			<unix-def:service_name>isdn</unix-def:service_name>
			<unix-def:runlevel operation="equals">1</unix-def:runlevel>
		</unix-def:runlevel_object>
		<unix-def:runlevel_object id="oval:gov.nist.usgcb.rhel:obj:201862" version="1">
			<unix-def:service_name>isdn</unix-def:service_name>
			<unix-def:runlevel operation="equals">2</unix-def:runlevel>
		</unix-def:runlevel_object>
		<unix-def:runlevel_object id="oval:gov.nist.usgcb.rhel:obj:201863" version="1">
			<unix-def:service_name>isdn</unix-def:service_name>
			<unix-def:runlevel operation="equals">3</unix-def:runlevel>
		</unix-def:runlevel_object>
		<unix-def:runlevel_object id="oval:gov.nist.usgcb.rhel:obj:201864" version="1">
			<unix-def:service_name>isdn</unix-def:service_name>
			<unix-def:runlevel operation="equals">4</unix-def:runlevel>
		</unix-def:runlevel_object>
		<unix-def:runlevel_object id="oval:gov.nist.usgcb.rhel:obj:201865" version="1">
			<unix-def:service_name>isdn</unix-def:service_name>
			<unix-def:runlevel operation="equals">5</unix-def:runlevel>
		</unix-def:runlevel_object>
		<unix-def:runlevel_object id="oval:gov.nist.usgcb.rhel:obj:201866" version="1">
			<unix-def:service_name>isdn</unix-def:service_name>
			<unix-def:runlevel operation="equals">6</unix-def:runlevel>
		</unix-def:runlevel_object>
		<unix-def:runlevel_object id="oval:gov.nist.usgcb.rhel:obj:20187" version="1">
			<unix-def:service_name>kdump</unix-def:service_name>
			<unix-def:runlevel operation="equals">0</unix-def:runlevel>
		</unix-def:runlevel_object>
		<unix-def:runlevel_object id="oval:gov.nist.usgcb.rhel:obj:201871" version="1">
			<unix-def:service_name>kdump</unix-def:service_name>
			<unix-def:runlevel operation="equals">1</unix-def:runlevel>
		</unix-def:runlevel_object>
		<unix-def:runlevel_object id="oval:gov.nist.usgcb.rhel:obj:201872" version="1">
			<unix-def:service_name>kdump</unix-def:service_name>
			<unix-def:runlevel operation="equals">2</unix-def:runlevel>
		</unix-def:runlevel_object>
		<unix-def:runlevel_object id="oval:gov.nist.usgcb.rhel:obj:201873" version="1">
			<unix-def:service_name>kdump</unix-def:service_name>
			<unix-def:runlevel operation="equals">3</unix-def:runlevel>
		</unix-def:runlevel_object>
		<unix-def:runlevel_object id="oval:gov.nist.usgcb.rhel:obj:201874" version="1">
			<unix-def:service_name>kdump</unix-def:service_name>
			<unix-def:runlevel operation="equals">4</unix-def:runlevel>
		</unix-def:runlevel_object>
		<unix-def:runlevel_object id="oval:gov.nist.usgcb.rhel:obj:201875" version="1">
			<unix-def:service_name>kdump</unix-def:service_name>
			<unix-def:runlevel operation="equals">5</unix-def:runlevel>
		</unix-def:runlevel_object>
		<unix-def:runlevel_object id="oval:gov.nist.usgcb.rhel:obj:201876" version="1">
			<unix-def:service_name>kdump</unix-def:service_name>
			<unix-def:runlevel operation="equals">6</unix-def:runlevel>
		</unix-def:runlevel_object>
		<!--<unix-def:runlevel_object id="oval:gov.nist.usgcb.rhel:obj:201880" version="1">
			<unix-def:service_name>kudzu</unix-def:service_name>
			<unix-def:runlevel operation="equals">0</unix-def:runlevel>
		</unix-def:runlevel_object>
		<unix-def:runlevel_object id="oval:gov.nist.usgcb.rhel:obj:2018801" version="1">
			<unix-def:service_name>kudzu</unix-def:service_name>
			<unix-def:runlevel operation="equals">1</unix-def:runlevel>
		</unix-def:runlevel_object>
		<unix-def:runlevel_object id="oval:gov.nist.usgcb.rhel:obj:2018802" version="1">
			<unix-def:service_name>kudzu</unix-def:service_name>
			<unix-def:runlevel operation="equals">2</unix-def:runlevel>
		</unix-def:runlevel_object>
		<unix-def:runlevel_object id="oval:gov.nist.usgcb.rhel:obj:2018803" version="1">
			<unix-def:service_name>kudzu</unix-def:service_name>
			<unix-def:runlevel operation="equals">3</unix-def:runlevel>
		</unix-def:runlevel_object>
		<unix-def:runlevel_object id="oval:gov.nist.usgcb.rhel:obj:2018804" version="1">
			<unix-def:service_name>kudzu</unix-def:service_name>
			<unix-def:runlevel operation="equals">4</unix-def:runlevel>
		</unix-def:runlevel_object>
		<unix-def:runlevel_object id="oval:gov.nist.usgcb.rhel:obj:2018805" version="1">
			<unix-def:service_name>kudzu</unix-def:service_name>
			<unix-def:runlevel operation="equals">5</unix-def:runlevel>
		</unix-def:runlevel_object>
		<unix-def:runlevel_object id="oval:gov.nist.usgcb.rhel:obj:2018806" version="1">
			<unix-def:service_name>kudzu</unix-def:service_name>
			<unix-def:runlevel operation="equals">6</unix-def:runlevel>
		</unix-def:runlevel_object>-->
		<!--<unix-def:runlevel_object id="oval:gov.nist.usgcb.rhel:obj:20189" version="1">
			<unix-def:service_name>mdmonitor</unix-def:service_name>
			<unix-def:runlevel operation="equals">0</unix-def:runlevel>
		</unix-def:runlevel_object>
		<unix-def:runlevel_object id="oval:gov.nist.usgcb.rhel:obj:201891" version="1">
			<unix-def:service_name>mdmonitor</unix-def:service_name>
			<unix-def:runlevel operation="equals">1</unix-def:runlevel>
		</unix-def:runlevel_object>
		<unix-def:runlevel_object id="oval:gov.nist.usgcb.rhel:obj:201892" version="1">
			<unix-def:service_name>mdmonitor</unix-def:service_name>
			<unix-def:runlevel operation="equals">2</unix-def:runlevel>
		</unix-def:runlevel_object>
		<unix-def:runlevel_object id="oval:gov.nist.usgcb.rhel:obj:201893" version="1">
			<unix-def:service_name>mdmonitor</unix-def:service_name>
			<unix-def:runlevel operation="equals">3</unix-def:runlevel>
		</unix-def:runlevel_object>
		<unix-def:runlevel_object id="oval:gov.nist.usgcb.rhel:obj:201894" version="1">
			<unix-def:service_name>mdmonitor</unix-def:service_name>
			<unix-def:runlevel operation="equals">4</unix-def:runlevel>
		</unix-def:runlevel_object>
		<unix-def:runlevel_object id="oval:gov.nist.usgcb.rhel:obj:201895" version="1">
			<unix-def:service_name>mdmonitor</unix-def:service_name>
			<unix-def:runlevel operation="equals">5</unix-def:runlevel>
		</unix-def:runlevel_object>
		<unix-def:runlevel_object id="oval:gov.nist.usgcb.rhel:obj:201896" version="1">
			<unix-def:service_name>mdmonitor</unix-def:service_name>
			<unix-def:runlevel operation="equals">6</unix-def:runlevel>
		</unix-def:runlevel_object>-->
		<!--<unix-def:runlevel_object id="oval:gov.nist.usgcb.rhel:obj:20190" version="1">
			<unix-def:service_name>microcode_ctl</unix-def:service_name>
			<unix-def:runlevel operation="equals">0</unix-def:runlevel>
		</unix-def:runlevel_object>
		<unix-def:runlevel_object id="oval:gov.nist.usgcb.rhel:obj:201901" version="1">
			<unix-def:service_name>microcode_ctl</unix-def:service_name>
			<unix-def:runlevel operation="equals">1</unix-def:runlevel>
		</unix-def:runlevel_object>
		<unix-def:runlevel_object id="oval:gov.nist.usgcb.rhel:obj:201902" version="1">
			<unix-def:service_name>microcode_ctl</unix-def:service_name>
			<unix-def:runlevel operation="equals">2</unix-def:runlevel>
		</unix-def:runlevel_object>
		<unix-def:runlevel_object id="oval:gov.nist.usgcb.rhel:obj:201903" version="1">
			<unix-def:service_name>microcode_ctl</unix-def:service_name>
			<unix-def:runlevel operation="equals">3</unix-def:runlevel>
		</unix-def:runlevel_object>
		<unix-def:runlevel_object id="oval:gov.nist.usgcb.rhel:obj:201904" version="1">
			<unix-def:service_name>microcode_ctl</unix-def:service_name>
			<unix-def:runlevel operation="equals">4</unix-def:runlevel>
		</unix-def:runlevel_object>
		<unix-def:runlevel_object id="oval:gov.nist.usgcb.rhel:obj:201905" version="1">
			<unix-def:service_name>microcode_ctl</unix-def:service_name>
			<unix-def:runlevel operation="equals">5</unix-def:runlevel>
		</unix-def:runlevel_object>
		<unix-def:runlevel_object id="oval:gov.nist.usgcb.rhel:obj:201906" version="1">
			<unix-def:service_name>microcode_ctl</unix-def:service_name>
			<unix-def:runlevel operation="equals">6</unix-def:runlevel>
		</unix-def:runlevel_object>-->
		<!--<unix-def:runlevel_object id="oval:gov.nist.usgcb.rhel:obj:20191" version="1">
			<unix-def:service_name>network</unix-def:service_name>
			<unix-def:runlevel operation="equals">0</unix-def:runlevel>
		</unix-def:runlevel_object>
		<unix-def:runlevel_object id="oval:gov.nist.usgcb.rhel:obj:201911" version="1">
			<unix-def:service_name>network</unix-def:service_name>
			<unix-def:runlevel operation="equals">1</unix-def:runlevel>
		</unix-def:runlevel_object>
		<unix-def:runlevel_object id="oval:gov.nist.usgcb.rhel:obj:201912" version="1">
			<unix-def:service_name>network</unix-def:service_name>
			<unix-def:runlevel operation="equals">2</unix-def:runlevel>
		</unix-def:runlevel_object>
		<unix-def:runlevel_object id="oval:gov.nist.usgcb.rhel:obj:201913" version="1">
			<unix-def:service_name>network</unix-def:service_name>
			<unix-def:runlevel operation="equals">3</unix-def:runlevel>
		</unix-def:runlevel_object>
		<unix-def:runlevel_object id="oval:gov.nist.usgcb.rhel:obj:201914" version="1">
			<unix-def:service_name>network</unix-def:service_name>
			<unix-def:runlevel operation="equals">4</unix-def:runlevel>
		</unix-def:runlevel_object>
		<unix-def:runlevel_object id="oval:gov.nist.usgcb.rhel:obj:201915" version="1">
			<unix-def:service_name>network</unix-def:service_name>
			<unix-def:runlevel operation="equals">5</unix-def:runlevel>
		</unix-def:runlevel_object>
		<unix-def:runlevel_object id="oval:gov.nist.usgcb.rhel:obj:201916" version="1">
			<unix-def:service_name>network</unix-def:service_name>
			<unix-def:runlevel operation="equals">6</unix-def:runlevel>
		</unix-def:runlevel_object>-->
		<ind-def:textfilecontent54_object id="oval:gov.nist.usgcb.rhel:obj:20193" version="1">
			<ind-def:path>/etc/sysconfig</ind-def:path>
			<ind-def:filename>network</ind-def:filename>
			<ind-def:pattern operation="pattern match">^\s*NOZEROCONF=yes</ind-def:pattern>
			<ind-def:instance datatype="int">1</ind-def:instance>
		</ind-def:textfilecontent54_object>
		<!--<unix-def:runlevel_object id="oval:gov.nist.usgcb.rhel:obj:20194" version="1">
			<unix-def:service_name>pcscd</unix-def:service_name>
			<unix-def:runlevel operation="equals">0</unix-def:runlevel>
		</unix-def:runlevel_object>
		<unix-def:runlevel_object id="oval:gov.nist.usgcb.rhel:obj:201941" version="1">
			<unix-def:service_name>pcscd</unix-def:service_name>
			<unix-def:runlevel operation="equals">1</unix-def:runlevel>
		</unix-def:runlevel_object>
		<unix-def:runlevel_object id="oval:gov.nist.usgcb.rhel:obj:201942" version="1">
			<unix-def:service_name>pcscd</unix-def:service_name>
			<unix-def:runlevel operation="equals">2</unix-def:runlevel>
		</unix-def:runlevel_object>
		<unix-def:runlevel_object id="oval:gov.nist.usgcb.rhel:obj:201943" version="1">
			<unix-def:service_name>pcscd</unix-def:service_name>
			<unix-def:runlevel operation="equals">3</unix-def:runlevel>
		</unix-def:runlevel_object>
		<unix-def:runlevel_object id="oval:gov.nist.usgcb.rhel:obj:201944" version="1">
			<unix-def:service_name>pcscd</unix-def:service_name>
			<unix-def:runlevel operation="equals">4</unix-def:runlevel>
		</unix-def:runlevel_object>
		<unix-def:runlevel_object id="oval:gov.nist.usgcb.rhel:obj:201945" version="1">
			<unix-def:service_name>pcscd</unix-def:service_name>
			<unix-def:runlevel operation="equals">5</unix-def:runlevel>
		</unix-def:runlevel_object>
		<unix-def:runlevel_object id="oval:gov.nist.usgcb.rhel:obj:201946" version="1">
			<unix-def:service_name>pcscd</unix-def:service_name>
			<unix-def:runlevel operation="equals">6</unix-def:runlevel>
		</unix-def:runlevel_object>-->
		<!--<unix-def:runlevel_object id="oval:gov.nist.usgcb.rhel:obj:20195" version="1">
			<unix-def:service_name>smartd</unix-def:service_name>
			<unix-def:runlevel operation="equals">0</unix-def:runlevel>
		</unix-def:runlevel_object>
		<unix-def:runlevel_object id="oval:gov.nist.usgcb.rhel:obj:201951" version="1">
			<unix-def:service_name>smartd</unix-def:service_name>
			<unix-def:runlevel operation="equals">1</unix-def:runlevel>
		</unix-def:runlevel_object>
		<unix-def:runlevel_object id="oval:gov.nist.usgcb.rhel:obj:201952" version="1">
			<unix-def:service_name>smartd</unix-def:service_name>
			<unix-def:runlevel operation="equals">2</unix-def:runlevel>
		</unix-def:runlevel_object>
		<unix-def:runlevel_object id="oval:gov.nist.usgcb.rhel:obj:201953" version="1">
			<unix-def:service_name>smartd</unix-def:service_name>
			<unix-def:runlevel operation="equals">3</unix-def:runlevel>
		</unix-def:runlevel_object>
		<unix-def:runlevel_object id="oval:gov.nist.usgcb.rhel:obj:201954" version="1">
			<unix-def:service_name>smartd</unix-def:service_name>
			<unix-def:runlevel operation="equals">4</unix-def:runlevel>
		</unix-def:runlevel_object>
		<unix-def:runlevel_object id="oval:gov.nist.usgcb.rhel:obj:201955" version="1">
			<unix-def:service_name>smartd</unix-def:service_name>
			<unix-def:runlevel operation="equals">5</unix-def:runlevel>
		</unix-def:runlevel_object>
		<unix-def:runlevel_object id="oval:gov.nist.usgcb.rhel:obj:201956" version="1">
			<unix-def:service_name>smartd</unix-def:service_name>
			<unix-def:runlevel operation="equals">6</unix-def:runlevel>
		</unix-def:runlevel_object>-->
		<unix-def:runlevel_object id="oval:gov.nist.usgcb.rhel:obj:20196" version="1">
			<unix-def:service_name>readahead_early</unix-def:service_name>
			<unix-def:runlevel operation="equals">0</unix-def:runlevel>
		</unix-def:runlevel_object>
		<unix-def:runlevel_object id="oval:gov.nist.usgcb.rhel:obj:201961" version="1">
			<unix-def:service_name>readahead_early</unix-def:service_name>
			<unix-def:runlevel operation="equals">1</unix-def:runlevel>
		</unix-def:runlevel_object>
		<unix-def:runlevel_object id="oval:gov.nist.usgcb.rhel:obj:201962" version="1">
			<unix-def:service_name>readahead_early</unix-def:service_name>
			<unix-def:runlevel operation="equals">2</unix-def:runlevel>
		</unix-def:runlevel_object>
		<unix-def:runlevel_object id="oval:gov.nist.usgcb.rhel:obj:201963" version="1">
			<unix-def:service_name>readahead_early</unix-def:service_name>
			<unix-def:runlevel operation="equals">3</unix-def:runlevel>
		</unix-def:runlevel_object>
		<unix-def:runlevel_object id="oval:gov.nist.usgcb.rhel:obj:201964" version="1">
			<unix-def:service_name>readahead_early</unix-def:service_name>
			<unix-def:runlevel operation="equals">4</unix-def:runlevel>
		</unix-def:runlevel_object>
		<unix-def:runlevel_object id="oval:gov.nist.usgcb.rhel:obj:201965" version="1">
			<unix-def:service_name>readahead_early</unix-def:service_name>
			<unix-def:runlevel operation="equals">5</unix-def:runlevel>
		</unix-def:runlevel_object>
		<unix-def:runlevel_object id="oval:gov.nist.usgcb.rhel:obj:201966" version="1">
			<unix-def:service_name>readahead_early</unix-def:service_name>
			<unix-def:runlevel operation="equals">6</unix-def:runlevel>
		</unix-def:runlevel_object>
		<unix-def:runlevel_object id="oval:gov.nist.usgcb.rhel:obj:20197" version="1">
			<unix-def:service_name>readahead_later</unix-def:service_name>
			<unix-def:runlevel operation="equals">0</unix-def:runlevel>
		</unix-def:runlevel_object>
		<unix-def:runlevel_object id="oval:gov.nist.usgcb.rhel:obj:201971" version="1">
			<unix-def:service_name>readahead_later</unix-def:service_name>
			<unix-def:runlevel operation="equals">1</unix-def:runlevel>
		</unix-def:runlevel_object>
		<unix-def:runlevel_object id="oval:gov.nist.usgcb.rhel:obj:201972" version="1">
			<unix-def:service_name>readahead_later</unix-def:service_name>
			<unix-def:runlevel operation="equals">2</unix-def:runlevel>
		</unix-def:runlevel_object>
		<unix-def:runlevel_object id="oval:gov.nist.usgcb.rhel:obj:201973" version="1">
			<unix-def:service_name>readahead_later</unix-def:service_name>
			<unix-def:runlevel operation="equals">3</unix-def:runlevel>
		</unix-def:runlevel_object>
		<unix-def:runlevel_object id="oval:gov.nist.usgcb.rhel:obj:201974" version="1">
			<unix-def:service_name>readahead_later</unix-def:service_name>
			<unix-def:runlevel operation="equals">4</unix-def:runlevel>
		</unix-def:runlevel_object>
		<unix-def:runlevel_object id="oval:gov.nist.usgcb.rhel:obj:201975" version="1">
			<unix-def:service_name>readahead_later</unix-def:service_name>
			<unix-def:runlevel operation="equals">5</unix-def:runlevel>
		</unix-def:runlevel_object>
		<unix-def:runlevel_object id="oval:gov.nist.usgcb.rhel:obj:201976" version="1">
			<unix-def:service_name>readahead_later</unix-def:service_name>
			<unix-def:runlevel operation="equals">6</unix-def:runlevel>
		</unix-def:runlevel_object>
		<!--<unix-def:runlevel_object id="oval:gov.nist.usgcb.rhel:obj:20198" version="1">
			<unix-def:service_name>messagebus</unix-def:service_name>
			<unix-def:runlevel operation="equals">0</unix-def:runlevel>
		</unix-def:runlevel_object>
		<unix-def:runlevel_object id="oval:gov.nist.usgcb.rhel:obj:201981" version="1">
			<unix-def:service_name>messagebus</unix-def:service_name>
			<unix-def:runlevel operation="equals">1</unix-def:runlevel>
		</unix-def:runlevel_object>
		<unix-def:runlevel_object id="oval:gov.nist.usgcb.rhel:obj:201982" version="1">
			<unix-def:service_name>messagebus</unix-def:service_name>
			<unix-def:runlevel operation="equals">2</unix-def:runlevel>
		</unix-def:runlevel_object>
		<unix-def:runlevel_object id="oval:gov.nist.usgcb.rhel:obj:201983" version="1">
			<unix-def:service_name>messagebus</unix-def:service_name>
			<unix-def:runlevel operation="equals">3</unix-def:runlevel>
		</unix-def:runlevel_object>
		<unix-def:runlevel_object id="oval:gov.nist.usgcb.rhel:obj:201984" version="1">
			<unix-def:service_name>messagebus</unix-def:service_name>
			<unix-def:runlevel operation="equals">4</unix-def:runlevel>
		</unix-def:runlevel_object>
		<unix-def:runlevel_object id="oval:gov.nist.usgcb.rhel:obj:201985" version="1">
			<unix-def:service_name>messagebus</unix-def:service_name>
			<unix-def:runlevel operation="equals">5</unix-def:runlevel>
		</unix-def:runlevel_object>
		<unix-def:runlevel_object id="oval:gov.nist.usgcb.rhel:obj:201986" version="1">
			<unix-def:service_name>messagebus</unix-def:service_name>
			<unix-def:runlevel operation="equals">6</unix-def:runlevel>
		</unix-def:runlevel_object>-->
		<!--<unix-def:runlevel_object id="oval:gov.nist.usgcb.rhel:obj:20199" version="1">
			<unix-def:service_name>haldaemon</unix-def:service_name>
			<unix-def:runlevel operation="equals">0</unix-def:runlevel>
		</unix-def:runlevel_object>
		<unix-def:runlevel_object id="oval:gov.nist.usgcb.rhel:obj:201991" version="1">
			<unix-def:service_name>haldaemon</unix-def:service_name>
			<unix-def:runlevel operation="equals">1</unix-def:runlevel>
		</unix-def:runlevel_object>
		<unix-def:runlevel_object id="oval:gov.nist.usgcb.rhel:obj:201992" version="1">
			<unix-def:service_name>haldaemon</unix-def:service_name>
			<unix-def:runlevel operation="equals">2</unix-def:runlevel>
		</unix-def:runlevel_object>
		<unix-def:runlevel_object id="oval:gov.nist.usgcb.rhel:obj:201993" version="1">
			<unix-def:service_name>haldaemon</unix-def:service_name>
			<unix-def:runlevel operation="equals">3</unix-def:runlevel>
		</unix-def:runlevel_object>
		<unix-def:runlevel_object id="oval:gov.nist.usgcb.rhel:obj:201994" version="1">
			<unix-def:service_name>haldaemon</unix-def:service_name>
			<unix-def:runlevel operation="equals">4</unix-def:runlevel>
		</unix-def:runlevel_object>
		<unix-def:runlevel_object id="oval:gov.nist.usgcb.rhel:obj:201995" version="1">
			<unix-def:service_name>haldaemon</unix-def:service_name>
			<unix-def:runlevel operation="equals">5</unix-def:runlevel>
		</unix-def:runlevel_object>
		<unix-def:runlevel_object id="oval:gov.nist.usgcb.rhel:obj:201996" version="1">
			<unix-def:service_name>haldaemon</unix-def:service_name>
			<unix-def:runlevel operation="equals">6</unix-def:runlevel>
		</unix-def:runlevel_object>-->
		<unix-def:runlevel_object id="oval:gov.nist.usgcb.rhel:obj:20200" version="1">
			<unix-def:service_name>bluetooth</unix-def:service_name>
			<unix-def:runlevel operation="equals">0</unix-def:runlevel>
		</unix-def:runlevel_object>
		<unix-def:runlevel_object id="oval:gov.nist.usgcb.rhel:obj:202001" version="1">
			<unix-def:service_name>bluetooth</unix-def:service_name>
			<unix-def:runlevel operation="equals">1</unix-def:runlevel>
		</unix-def:runlevel_object>
		<unix-def:runlevel_object id="oval:gov.nist.usgcb.rhel:obj:202002" version="1">
			<unix-def:service_name>bluetooth</unix-def:service_name>
			<unix-def:runlevel operation="equals">2</unix-def:runlevel>
		</unix-def:runlevel_object>
		<unix-def:runlevel_object id="oval:gov.nist.usgcb.rhel:obj:202003" version="1">
			<unix-def:service_name>bluetooth</unix-def:service_name>
			<unix-def:runlevel operation="equals">3</unix-def:runlevel>
		</unix-def:runlevel_object>
		<unix-def:runlevel_object id="oval:gov.nist.usgcb.rhel:obj:202004" version="1">
			<unix-def:service_name>bluetooth</unix-def:service_name>
			<unix-def:runlevel operation="equals">4</unix-def:runlevel>
		</unix-def:runlevel_object>
		<unix-def:runlevel_object id="oval:gov.nist.usgcb.rhel:obj:202005" version="1">
			<unix-def:service_name>bluetooth</unix-def:service_name>
			<unix-def:runlevel operation="equals">5</unix-def:runlevel>
		</unix-def:runlevel_object>
		<unix-def:runlevel_object id="oval:gov.nist.usgcb.rhel:obj:202006" version="1">
			<unix-def:service_name>bluetooth</unix-def:service_name>
			<unix-def:runlevel operation="equals">6</unix-def:runlevel>
		</unix-def:runlevel_object>
		<unix-def:runlevel_object id="oval:gov.nist.usgcb.rhel:obj:20201" version="1">
			<unix-def:service_name>hidd</unix-def:service_name>
			<unix-def:runlevel operation="equals">0</unix-def:runlevel>
		</unix-def:runlevel_object>
		<unix-def:runlevel_object id="oval:gov.nist.usgcb.rhel:obj:202011" version="1">
			<unix-def:service_name>hidd</unix-def:service_name>
			<unix-def:runlevel operation="equals">1</unix-def:runlevel>
		</unix-def:runlevel_object>
		<unix-def:runlevel_object id="oval:gov.nist.usgcb.rhel:obj:202012" version="1">
			<unix-def:service_name>hidd</unix-def:service_name>
			<unix-def:runlevel operation="equals">2</unix-def:runlevel>
		</unix-def:runlevel_object>
		<unix-def:runlevel_object id="oval:gov.nist.usgcb.rhel:obj:202013" version="1">
			<unix-def:service_name>hidd</unix-def:service_name>
			<unix-def:runlevel operation="equals">3</unix-def:runlevel>
		</unix-def:runlevel_object>
		<unix-def:runlevel_object id="oval:gov.nist.usgcb.rhel:obj:202014" version="1">
			<unix-def:service_name>hidd</unix-def:service_name>
			<unix-def:runlevel operation="equals">4</unix-def:runlevel>
		</unix-def:runlevel_object>
		<unix-def:runlevel_object id="oval:gov.nist.usgcb.rhel:obj:202015" version="1">
			<unix-def:service_name>hidd</unix-def:service_name>
			<unix-def:runlevel operation="equals">5</unix-def:runlevel>
		</unix-def:runlevel_object>
		<unix-def:runlevel_object id="oval:gov.nist.usgcb.rhel:obj:202016" version="1">
			<unix-def:service_name>hidd</unix-def:service_name>
			<unix-def:runlevel operation="equals">6</unix-def:runlevel>
		</unix-def:runlevel_object>
		<ind-def:textfilecontent54_object id="oval:gov.nist.usgcb.rhel:obj:2020151" version="1">
			<ind-def:path>/etc</ind-def:path>
			<ind-def:filename>modprobe.conf</ind-def:filename>
			<ind-def:pattern operation="pattern match">alias\snet\-pf\-31\soff</ind-def:pattern>
			<ind-def:instance datatype="int">1</ind-def:instance>
		</ind-def:textfilecontent54_object>
		<ind-def:textfilecontent54_object id="oval:gov.nist.usgcb.rhel:obj:2020152" version="1">
			<ind-def:path>/etc</ind-def:path>
			<ind-def:filename>modprobe.conf</ind-def:filename>
			<ind-def:pattern operation="pattern match">alias\sbluetooth\soff</ind-def:pattern>
			<ind-def:instance datatype="int">1</ind-def:instance>
		</ind-def:textfilecontent54_object>
		<!--<unix-def:runlevel_object id="oval:gov.nist.usgcb.rhel:obj:20202" version="1">
			<unix-def:service_name>apmd</unix-def:service_name>
			<unix-def:runlevel operation="equals">0</unix-def:runlevel>
		</unix-def:runlevel_object>
		<unix-def:runlevel_object id="oval:gov.nist.usgcb.rhel:obj:202021" version="1">
			<unix-def:service_name>apmd</unix-def:service_name>
			<unix-def:runlevel operation="equals">1</unix-def:runlevel>
		</unix-def:runlevel_object>
		<unix-def:runlevel_object id="oval:gov.nist.usgcb.rhel:obj:202022" version="1">
			<unix-def:service_name>apmd</unix-def:service_name>
			<unix-def:runlevel operation="equals">2</unix-def:runlevel>
		</unix-def:runlevel_object>
		<unix-def:runlevel_object id="oval:gov.nist.usgcb.rhel:obj:202023" version="1">
			<unix-def:service_name>apmd</unix-def:service_name>
			<unix-def:runlevel operation="equals">3</unix-def:runlevel>
		</unix-def:runlevel_object>
		<unix-def:runlevel_object id="oval:gov.nist.usgcb.rhel:obj:202024" version="1">
			<unix-def:service_name>apmd</unix-def:service_name>
			<unix-def:runlevel operation="equals">4</unix-def:runlevel>
		</unix-def:runlevel_object>
		<unix-def:runlevel_object id="oval:gov.nist.usgcb.rhel:obj:202025" version="1">
			<unix-def:service_name>apmd</unix-def:service_name>
			<unix-def:runlevel operation="equals">5</unix-def:runlevel>
		</unix-def:runlevel_object>
		<unix-def:runlevel_object id="oval:gov.nist.usgcb.rhel:obj:202026" version="1">
			<unix-def:service_name>apmd</unix-def:service_name>
			<unix-def:runlevel operation="equals">6</unix-def:runlevel>
		</unix-def:runlevel_object>-->
		<!--<unix-def:runlevel_object id="oval:gov.nist.usgcb.rhel:obj:20203" version="1">
			<unix-def:service_name>acpid</unix-def:service_name>
			<unix-def:runlevel operation="equals">0</unix-def:runlevel>
		</unix-def:runlevel_object>
		<unix-def:runlevel_object id="oval:gov.nist.usgcb.rhel:obj:202031" version="1">
			<unix-def:service_name>acpid</unix-def:service_name>
			<unix-def:runlevel operation="equals">1</unix-def:runlevel>
		</unix-def:runlevel_object>
		<unix-def:runlevel_object id="oval:gov.nist.usgcb.rhel:obj:202032" version="1">
			<unix-def:service_name>acpid</unix-def:service_name>
			<unix-def:runlevel operation="equals">2</unix-def:runlevel>
		</unix-def:runlevel_object>
		<unix-def:runlevel_object id="oval:gov.nist.usgcb.rhel:obj:202033" version="1">
			<unix-def:service_name>acpid</unix-def:service_name>
			<unix-def:runlevel operation="equals">3</unix-def:runlevel>
		</unix-def:runlevel_object>
		<unix-def:runlevel_object id="oval:gov.nist.usgcb.rhel:obj:202034" version="1">
			<unix-def:service_name>acpid</unix-def:service_name>
			<unix-def:runlevel operation="equals">4</unix-def:runlevel>
		</unix-def:runlevel_object>
		<unix-def:runlevel_object id="oval:gov.nist.usgcb.rhel:obj:202035" version="1">
			<unix-def:service_name>acpid</unix-def:service_name>
			<unix-def:runlevel operation="equals">5</unix-def:runlevel>
		</unix-def:runlevel_object>
		<unix-def:runlevel_object id="oval:gov.nist.usgcb.rhel:obj:202036" version="1">
			<unix-def:service_name>acpid</unix-def:service_name>
			<unix-def:runlevel operation="equals">6</unix-def:runlevel>
		</unix-def:runlevel_object>-->
		<!--<unix-def:runlevel_object id="oval:gov.nist.usgcb.rhel:obj:20204" version="1">
			<unix-def:service_name>cpuspeed</unix-def:service_name>
			<unix-def:runlevel operation="equals">0</unix-def:runlevel>
		</unix-def:runlevel_object>
		<unix-def:runlevel_object id="oval:gov.nist.usgcb.rhel:obj:202041" version="1">
			<unix-def:service_name>cpuspeed</unix-def:service_name>
			<unix-def:runlevel operation="equals">1</unix-def:runlevel>
		</unix-def:runlevel_object>
		<unix-def:runlevel_object id="oval:gov.nist.usgcb.rhel:obj:202042" version="1">
			<unix-def:service_name>cpuspeed</unix-def:service_name>
			<unix-def:runlevel operation="equals">2</unix-def:runlevel>
		</unix-def:runlevel_object>
		<unix-def:runlevel_object id="oval:gov.nist.usgcb.rhel:obj:202043" version="1">
			<unix-def:service_name>cpuspeed</unix-def:service_name>
			<unix-def:runlevel operation="equals">3</unix-def:runlevel>
		</unix-def:runlevel_object>
		<unix-def:runlevel_object id="oval:gov.nist.usgcb.rhel:obj:202044" version="1">
			<unix-def:service_name>cpuspeed</unix-def:service_name>
			<unix-def:runlevel operation="equals">4</unix-def:runlevel>
		</unix-def:runlevel_object>
		<unix-def:runlevel_object id="oval:gov.nist.usgcb.rhel:obj:202045" version="1">
			<unix-def:service_name>cpuspeed</unix-def:service_name>
			<unix-def:runlevel operation="equals">5</unix-def:runlevel>
		</unix-def:runlevel_object>
		<unix-def:runlevel_object id="oval:gov.nist.usgcb.rhel:obj:202046" version="1">
			<unix-def:service_name>cpuspeed</unix-def:service_name>
			<unix-def:runlevel operation="equals">6</unix-def:runlevel>
		</unix-def:runlevel_object>-->
		<unix-def:runlevel_object id="oval:gov.nist.usgcb.rhel:obj:20200052" version="1">
			<unix-def:service_name>crond</unix-def:service_name>
			<unix-def:runlevel operation="equals">2</unix-def:runlevel>
		</unix-def:runlevel_object>
		<unix-def:runlevel_object id="oval:gov.nist.usgcb.rhel:obj:20200053" version="1">
			<unix-def:service_name>crond</unix-def:service_name>
			<unix-def:runlevel operation="equals">3</unix-def:runlevel>
		</unix-def:runlevel_object>
		<unix-def:runlevel_object id="oval:gov.nist.usgcb.rhel:obj:20200054" version="1">
			<unix-def:service_name>crond</unix-def:service_name>
			<unix-def:runlevel operation="equals">4</unix-def:runlevel>
		</unix-def:runlevel_object>
		<unix-def:runlevel_object id="oval:gov.nist.usgcb.rhel:obj:20200055" version="1">
			<unix-def:service_name>crond</unix-def:service_name>
			<unix-def:runlevel operation="equals">5</unix-def:runlevel>
		</unix-def:runlevel_object>
		<unix-def:runlevel_object id="oval:gov.nist.usgcb.rhel:obj:202052" version="1">
			<unix-def:service_name>atd</unix-def:service_name>
			<unix-def:runlevel operation="equals">0</unix-def:runlevel>
		</unix-def:runlevel_object>
		<unix-def:runlevel_object id="oval:gov.nist.usgcb.rhel:obj:2020521" version="1">
			<unix-def:service_name>atd</unix-def:service_name>
			<unix-def:runlevel operation="equals">1</unix-def:runlevel>
		</unix-def:runlevel_object>
		<unix-def:runlevel_object id="oval:gov.nist.usgcb.rhel:obj:2020522" version="1">
			<unix-def:service_name>atd</unix-def:service_name>
			<unix-def:runlevel operation="equals">2</unix-def:runlevel>
		</unix-def:runlevel_object>
		<unix-def:runlevel_object id="oval:gov.nist.usgcb.rhel:obj:2020523" version="1">
			<unix-def:service_name>atd</unix-def:service_name>
			<unix-def:runlevel operation="equals">3</unix-def:runlevel>
		</unix-def:runlevel_object>
		<unix-def:runlevel_object id="oval:gov.nist.usgcb.rhel:obj:2020524" version="1">
			<unix-def:service_name>atd</unix-def:service_name>
			<unix-def:runlevel operation="equals">4</unix-def:runlevel>
		</unix-def:runlevel_object>
		<unix-def:runlevel_object id="oval:gov.nist.usgcb.rhel:obj:2020525" version="1">
			<unix-def:service_name>atd</unix-def:service_name>
			<unix-def:runlevel operation="equals">5</unix-def:runlevel>
		</unix-def:runlevel_object>
		<unix-def:runlevel_object id="oval:gov.nist.usgcb.rhel:obj:2020526" version="1">
			<unix-def:service_name>atd</unix-def:service_name>
			<unix-def:runlevel operation="equals">6</unix-def:runlevel>
		</unix-def:runlevel_object>
		<lin-def:rpminfo_object id="oval:gov.nist.usgcb.rhel:obj:202053" version="1">
			<lin-def:name>at</lin-def:name>
		</lin-def:rpminfo_object>
		<!--<unix-def:runlevel_object id="oval:gov.nist.usgcb.rhel:obj:20206" version="1">
			<unix-def:service_name>anacron</unix-def:service_name>
			<unix-def:runlevel operation="equals">0</unix-def:runlevel>
		</unix-def:runlevel_object>
		<unix-def:runlevel_object id="oval:gov.nist.usgcb.rhel:obj:202061" version="1">
			<unix-def:service_name>anacron</unix-def:service_name>
			<unix-def:runlevel operation="equals">1</unix-def:runlevel>
		</unix-def:runlevel_object>
		<unix-def:runlevel_object id="oval:gov.nist.usgcb.rhel:obj:202062" version="1">
			<unix-def:service_name>anacron</unix-def:service_name>
			<unix-def:runlevel operation="equals">2</unix-def:runlevel>
		</unix-def:runlevel_object>
		<unix-def:runlevel_object id="oval:gov.nist.usgcb.rhel:obj:202063" version="1">
			<unix-def:service_name>anacron</unix-def:service_name>
			<unix-def:runlevel operation="equals">3</unix-def:runlevel>
		</unix-def:runlevel_object>
		<unix-def:runlevel_object id="oval:gov.nist.usgcb.rhel:obj:202064" version="1">
			<unix-def:service_name>anacron</unix-def:service_name>
			<unix-def:runlevel operation="equals">4</unix-def:runlevel>
		</unix-def:runlevel_object>
		<unix-def:runlevel_object id="oval:gov.nist.usgcb.rhel:obj:202065" version="1">
			<unix-def:service_name>anacron</unix-def:service_name>
			<unix-def:runlevel operation="equals">5</unix-def:runlevel>
		</unix-def:runlevel_object>
		<unix-def:runlevel_object id="oval:gov.nist.usgcb.rhel:obj:202066" version="1">
			<unix-def:service_name>anacron</unix-def:service_name>
			<unix-def:runlevel operation="equals">6</unix-def:runlevel>
		</unix-def:runlevel_object>-->
		<lin-def:rpminfo_object id="oval:gov.nist.usgcb.rhel:obj:20207" version="1">
			<lin-def:name>anacron</lin-def:name>
		</lin-def:rpminfo_object>
		<unix-def:file_object id="oval:gov.nist.usgcb.rhel:obj:20217" version="1" comment="/etc/cron.monthly">
			<unix-def:path>/etc/cron.monthly</unix-def:path>
			<unix-def:filename xsi:nil="true"/>
		</unix-def:file_object>
		<unix-def:file_object id="oval:gov.nist.usgcb.rhel:obj:20225" version="1" comment="/etc/cron.daily">
			<unix-def:path>/etc/cron.daily</unix-def:path>
			<unix-def:filename xsi:nil="true"/>
		</unix-def:file_object>
		<unix-def:file_object id="oval:gov.nist.usgcb.rhel:obj:20216" version="1" comment="/etc/cron.weekly">
			<unix-def:path>/etc/cron.weekly</unix-def:path>
			<unix-def:filename xsi:nil="true"/>
		</unix-def:file_object>
		<unix-def:file_object id="oval:gov.nist.usgcb.rhel:obj:20209" version="1" comment="/etc/crontab">
			<unix-def:path>/etc</unix-def:path>
			<unix-def:filename>crontab</unix-def:filename>
		</unix-def:file_object>
		<unix-def:file_object id="oval:gov.nist.usgcb.rhel:obj:20212" version="1" comment="/etc/anacrontab">
			<unix-def:path>/etc</unix-def:path>
			<unix-def:filename>anacrontab</unix-def:filename>
		</unix-def:file_object>
		<unix-def:file_object id="oval:gov.nist.usgcb.rhel:obj:20210" version="1" comment="/etc/crontab">
			<unix-def:path>/etc</unix-def:path>
			<unix-def:filename>crontab</unix-def:filename>
		</unix-def:file_object>
		<unix-def:file_object id="oval:gov.nist.usgcb.rhel:obj:20214" version="1" comment="/etc/cron.hourly">
			<unix-def:path>/etc/cron.hourly</unix-def:path>
			<unix-def:filename xsi:nil="true"/>
		</unix-def:file_object>
		<unix-def:file_object id="oval:gov.nist.usgcb.rhel:obj:20222" version="1" comment="/etc/cron.monthly">
			<unix-def:path>/etc/cron.monthly</unix-def:path>
			<unix-def:filename xsi:nil="true"/>
		</unix-def:file_object>
		<unix-def:file_object id="oval:gov.nist.usgcb.rhel:obj:20218" version="1" comment="/etc/cron.d">
			<unix-def:path>/etc/cron.d</unix-def:path>
			<unix-def:filename xsi:nil="true"/>
		</unix-def:file_object>
		<unix-def:file_object id="oval:gov.nist.usgcb.rhel:obj:20223" version="1" comment="/etc/cron.d">
			<unix-def:path>/etc/cron.d</unix-def:path>
			<unix-def:filename xsi:nil="true"/>
		</unix-def:file_object>
		<unix-def:file_object id="oval:gov.nist.usgcb.rhel:obj:20221" version="1" comment="/etc/cron.weekly">
			<unix-def:path>/etc/cron.weekly</unix-def:path>
			<unix-def:filename xsi:nil="true"/>
		</unix-def:file_object>
		<unix-def:file_object id="oval:gov.nist.usgcb.rhel:obj:20211" version="1" comment="/etc/anacrontab">
			<unix-def:path>/etc</unix-def:path>
			<unix-def:filename>anacrontab</unix-def:filename>
		</unix-def:file_object>
		<unix-def:file_object id="oval:gov.nist.usgcb.rhel:obj:20224" version="1" comment="/etc/cron.hourly">
			<unix-def:path>/etc/cron.hourly</unix-def:path>
			<unix-def:filename xsi:nil="true"/>
		</unix-def:file_object>
		<unix-def:file_object id="oval:gov.nist.usgcb.rhel:obj:20219" version="1" comment="/etc/cron.hourly">
			<unix-def:path>/etc/cron.hourly</unix-def:path>
			<unix-def:filename xsi:nil="true"/>
		</unix-def:file_object>
		<unix-def:file_object id="oval:gov.nist.usgcb.rhel:obj:20208" version="1" comment="/etc/crontab">
			<unix-def:path>/etc</unix-def:path>
			<unix-def:filename>crontab</unix-def:filename>
		</unix-def:file_object>
		<unix-def:file_object id="oval:gov.nist.usgcb.rhel:obj:20220" version="1" comment="/etc/cron.daily">
			<unix-def:path>/etc/cron.daily</unix-def:path>
			<unix-def:filename xsi:nil="true"/>
		</unix-def:file_object>
		<unix-def:file_object id="oval:gov.nist.usgcb.rhel:obj:20213" version="1" comment="/etc/anacrontab">
			<unix-def:path>/etc</unix-def:path>
			<unix-def:filename>anacrontab</unix-def:filename>
		</unix-def:file_object>
		<unix-def:file_object id="oval:gov.nist.usgcb.rhel:obj:20226" version="1" comment="/etc/cron.weekly">
			<unix-def:path>/etc/cron.weekly</unix-def:path>
			<unix-def:filename xsi:nil="true"/>
		</unix-def:file_object>
		<unix-def:file_object id="oval:gov.nist.usgcb.rhel:obj:20227" version="1" comment="/etc/cron.monthly">
			<unix-def:path>/etc/cron.monthly</unix-def:path>
			<unix-def:filename xsi:nil="true"/>
		</unix-def:file_object>
		<unix-def:file_object id="oval:gov.nist.usgcb.rhel:obj:20215" version="1" comment="/etc/cron.daily">
			<unix-def:path>/etc/cron.daily</unix-def:path>
			<unix-def:filename xsi:nil="true"/>
		</unix-def:file_object>
		<unix-def:file_object id="oval:gov.nist.usgcb.rhel:obj:20228" version="1" comment="/etc/cron.d">
			<unix-def:path>/etc/cron.d</unix-def:path>
			<unix-def:filename xsi:nil="true"/>
		</unix-def:file_object>
		<unix-def:file_object id="oval:gov.nist.usgcb.rhel:obj:20233" version="1" comment="/etc/at.deny">
			<unix-def:path>/etc</unix-def:path>
			<unix-def:filename>at.deny</unix-def:filename>
		</unix-def:file_object>
		<unix-def:runlevel_object id="oval:gov.nist.usgcb.rhel:obj:20234" version="1">
			<unix-def:service_name>sshd</unix-def:service_name>
			<unix-def:runlevel operation="equals">0</unix-def:runlevel>
		</unix-def:runlevel_object>
		<unix-def:runlevel_object id="oval:gov.nist.usgcb.rhel:obj:202341" version="1">
			<unix-def:service_name>sshd</unix-def:service_name>
			<unix-def:runlevel operation="equals">1</unix-def:runlevel>
		</unix-def:runlevel_object>
		<unix-def:runlevel_object id="oval:gov.nist.usgcb.rhel:obj:202342" version="1">
			<unix-def:service_name>sshd</unix-def:service_name>
			<unix-def:runlevel operation="equals">2</unix-def:runlevel>
		</unix-def:runlevel_object>
		<unix-def:runlevel_object id="oval:gov.nist.usgcb.rhel:obj:202343" version="1">
			<unix-def:service_name>sshd</unix-def:service_name>
			<unix-def:runlevel operation="equals">3</unix-def:runlevel>
		</unix-def:runlevel_object>
		<unix-def:runlevel_object id="oval:gov.nist.usgcb.rhel:obj:202344" version="1">
			<unix-def:service_name>sshd</unix-def:service_name>
			<unix-def:runlevel operation="equals">4</unix-def:runlevel>
		</unix-def:runlevel_object>
		<unix-def:runlevel_object id="oval:gov.nist.usgcb.rhel:obj:202345" version="1">
			<unix-def:service_name>sshd</unix-def:service_name>
			<unix-def:runlevel operation="equals">5</unix-def:runlevel>
		</unix-def:runlevel_object>
		<unix-def:runlevel_object id="oval:gov.nist.usgcb.rhel:obj:202346" version="1">
			<unix-def:service_name>sshd</unix-def:service_name>
			<unix-def:runlevel operation="equals">6</unix-def:runlevel>
		</unix-def:runlevel_object>
		<lin-def:rpminfo_object id="oval:gov.nist.usgcb.rhel:obj:20235" version="1">
			<lin-def:name>openssh-server</lin-def:name>
		</lin-def:rpminfo_object>
		<ind-def:textfilecontent54_object id="oval:gov.nist.usgcb.rhel:obj:20238" version="2">
			<ind-def:path>/etc/ssh</ind-def:path>
			<ind-def:filename>sshd_config</ind-def:filename>
			<ind-def:pattern operation="pattern match">^[\s]*[Pp][Rr][Oo][Tt][Oo][Cc][Oo][lL][\s]+2(?:(?:[\s]+)|(?:$)|(?:#[\w\d\s]*))</ind-def:pattern>
			<ind-def:instance datatype="int">1</ind-def:instance>
		</ind-def:textfilecontent54_object>
		<ind-def:textfilecontent54_object id="oval:gov.nist.usgcb.rhel:obj:20239" version="1">
			<ind-def:path>/etc/ssh</ind-def:path>
			<ind-def:filename>sshd_config</ind-def:filename>
			<ind-def:pattern operation="pattern match">^[\s]*ClientAliveInterval[\s]*([\d]+)</ind-def:pattern>
			<ind-def:instance datatype="int">1</ind-def:instance>
		</ind-def:textfilecontent54_object>
		<ind-def:textfilecontent54_object id="oval:gov.nist.usgcb.rhel:obj:20240" version="1">
			<ind-def:path>/etc/ssh</ind-def:path>
			<ind-def:filename>sshd_config</ind-def:filename>
			<ind-def:pattern operation="pattern match">^[\s]*ClientAliveCountMax[\s]*([\d]+)</ind-def:pattern>
			<ind-def:instance datatype="int">1</ind-def:instance>
		</ind-def:textfilecontent54_object>
		<ind-def:textfilecontent54_object id="oval:gov.nist.usgcb.rhel:obj:20241" version="1">
			<ind-def:path>/etc/ssh</ind-def:path>
			<ind-def:filename>sshd_config</ind-def:filename>
			<ind-def:pattern operation="pattern match">^[\s]*[Ii][Gg][Nn][Oo][Rr][Ee][Rr][Hh][Oo][Ss][Tt][Ss][\s]*no\s*$</ind-def:pattern>
			<ind-def:instance datatype="int">1</ind-def:instance>
		</ind-def:textfilecontent54_object>
		<ind-def:textfilecontent54_object id="oval:gov.nist.usgcb.rhel:obj:20242" version="1">
			<ind-def:path>/etc/ssh</ind-def:path>
			<ind-def:filename>sshd_config</ind-def:filename>
			<ind-def:pattern operation="pattern match">^[\s]*[Hh][Oo][Ss][Tt][Bb][Aa][Ss][Ee][Dd][Aa][Uu][Tt][Hh][Ee][Nn][Tt][Ii][Cc][Aa][Tt][Ii][Oo][Nn][\s]*yes\s*$</ind-def:pattern>
			<ind-def:instance datatype="int">1</ind-def:instance>
		</ind-def:textfilecontent54_object>
		<ind-def:textfilecontent54_object id="oval:gov.nist.usgcb.rhel:obj:20243" version="1">
			<ind-def:path>/etc/ssh</ind-def:path>
			<ind-def:filename>sshd_config</ind-def:filename>
			<ind-def:pattern operation="pattern match">^[\s]*[Pp][Ee][Rr][Mm][Ii][Tt][Rr][Oo][Oo][Tt][Ll][Oo][Gg][Ii][Nn][\s]*yes</ind-def:pattern>
			<ind-def:instance datatype="int">1</ind-def:instance>
		</ind-def:textfilecontent54_object>
		<ind-def:textfilecontent54_object id="oval:gov.nist.usgcb.rhel:obj:20244" version="1">
			<ind-def:path>/etc/ssh</ind-def:path>
			<ind-def:filename>sshd_config</ind-def:filename>
			<ind-def:pattern operation="pattern match">^[\s]*[Pp][Ee][Rr][Mm][Ii][Tt][Ee][Mm][Pp][Tt][Yy][Pp][Aa][Ss][Ss][Ww][Oo][Rr][Dd][Ss][\s]*yes\s*$</ind-def:pattern>
			<ind-def:instance datatype="int">1</ind-def:instance>
		</ind-def:textfilecontent54_object>
		<ind-def:textfilecontent54_object id="oval:gov.nist.usgcb.rhel:obj:20245" version="1">
			<ind-def:path>/etc/ssh</ind-def:path>
			<ind-def:filename>sshd_config</ind-def:filename>
			<ind-def:pattern operation="pattern match">^[\s]*Banner[\s]+/etc/issue$</ind-def:pattern>
			<ind-def:instance datatype="int">1</ind-def:instance>
		</ind-def:textfilecontent54_object>
		<ind-def:textfilecontent54_object id="oval:gov.nist.usgcb.rhel:obj:202455" version="1">
			<ind-def:path>/etc/ssh</ind-def:path>
			<ind-def:filename>sshd_config</ind-def:filename>
			<ind-def:pattern operation="pattern match">^[\s]*[Pp][Ee][Rr][Mm][Ii][Tt][Uu][Ss][Ee][Rr][Ee][Nn][Vv][Ii][Rr][Oo][Nn][Mm][Ee][Nn][Tt][\s]*yes\s*$</ind-def:pattern>
			<ind-def:instance datatype="int">1</ind-def:instance>
		</ind-def:textfilecontent54_object>
		<ind-def:textfilecontent54_object id="oval:gov.nist.usgcb.rhel:obj:202456" version="1">
			<ind-def:path>/etc/ssh</ind-def:path>
			<ind-def:filename>sshd_config</ind-def:filename>
			<ind-def:pattern operation="pattern match">^[\s]*Ciphers[\s]+([\S]+)</ind-def:pattern>
			<ind-def:instance datatype="int">1</ind-def:instance>
		</ind-def:textfilecontent54_object>
		<ind-def:textfilecontent54_object id="oval:gov.nist.usgcb.rhel:obj:20246" version="1">
			<ind-def:path>/etc</ind-def:path>
			<ind-def:filename>inittab</ind-def:filename>
			<ind-def:pattern operation="pattern match">^[\s]*id:([^:]*):initdefault:</ind-def:pattern>
			<ind-def:instance datatype="int">1</ind-def:instance>
		</ind-def:textfilecontent54_object>
		<ind-def:textfilecontent54_object id="oval:gov.nist.usgcb.rhel:obj:20248" version="1">
			<ind-def:path>/etc/X11/xinit</ind-def:path>
			<ind-def:filename>xserverrc</ind-def:filename>
			<ind-def:pattern operation="pattern match">^[\s]*exec\sX\s:0\s\-nolisten\stcp\s\$@</ind-def:pattern>
			<ind-def:instance datatype="int">1</ind-def:instance>
		</ind-def:textfilecontent54_object>
		<ind-def:textfilecontent54_object id="oval:gov.nist.usgcb.rhel:obj:20249" version="1">
			<ind-def:path>/etc/gdm</ind-def:path>
			<ind-def:filename>custom.conf</ind-def:filename>
			<ind-def:pattern operation="pattern match">^[\s]*InfoMsgFile[\s]*=[\s]*/etc/issue</ind-def:pattern>
			<ind-def:instance datatype="int">1</ind-def:instance>
		</ind-def:textfilecontent54_object>
		<unix-def:runlevel_object id="oval:gov.nist.usgcb.rhel:obj:20250" version="1">
			<unix-def:service_name>avahi-daemon</unix-def:service_name>
			<unix-def:runlevel operation="equals">0</unix-def:runlevel>
		</unix-def:runlevel_object>
		<unix-def:runlevel_object id="oval:gov.nist.usgcb.rhel:obj:202501" version="1">
			<unix-def:service_name>avahi-daemon</unix-def:service_name>
			<unix-def:runlevel operation="equals">1</unix-def:runlevel>
		</unix-def:runlevel_object>
		<unix-def:runlevel_object id="oval:gov.nist.usgcb.rhel:obj:202502" version="1">
			<unix-def:service_name>avahi-daemon</unix-def:service_name>
			<unix-def:runlevel operation="equals">2</unix-def:runlevel>
		</unix-def:runlevel_object>
		<unix-def:runlevel_object id="oval:gov.nist.usgcb.rhel:obj:202503" version="1">
			<unix-def:service_name>avahi-daemon</unix-def:service_name>
			<unix-def:runlevel operation="equals">3</unix-def:runlevel>
		</unix-def:runlevel_object>
		<unix-def:runlevel_object id="oval:gov.nist.usgcb.rhel:obj:202504" version="1">
			<unix-def:service_name>avahi-daemon</unix-def:service_name>
			<unix-def:runlevel operation="equals">4</unix-def:runlevel>
		</unix-def:runlevel_object>
		<unix-def:runlevel_object id="oval:gov.nist.usgcb.rhel:obj:202505" version="1">
			<unix-def:service_name>avahi-daemon</unix-def:service_name>
			<unix-def:runlevel operation="equals">5</unix-def:runlevel>
		</unix-def:runlevel_object>
		<unix-def:runlevel_object id="oval:gov.nist.usgcb.rhel:obj:202506" version="1">
			<unix-def:service_name>avahi-daemon</unix-def:service_name>
			<unix-def:runlevel operation="equals">6</unix-def:runlevel>
		</unix-def:runlevel_object>
		<ind-def:textfilecontent54_object id="oval:gov.nist.usgcb.rhel:obj:20253" version="1">
			<ind-def:path>/etc/avahi</ind-def:path>
			<ind-def:filename>avahi-daemon.conf</ind-def:filename>
			<ind-def:pattern operation="pattern match">check-response-ttl[\s]*=[\s]*([^#\s]*)</ind-def:pattern>
			<ind-def:instance datatype="int">1</ind-def:instance>
		</ind-def:textfilecontent54_object>
		<ind-def:textfilecontent54_object id="oval:gov.nist.usgcb.rhel:obj:20254" version="1">
			<ind-def:path>/etc/avahi</ind-def:path>
			<ind-def:filename>avahi-daemon.conf</ind-def:filename>
			<ind-def:pattern operation="pattern match">disallow-other-stacks[\s]*=[\s]*([^#\s]*)</ind-def:pattern>
			<ind-def:instance datatype="int">1</ind-def:instance>
		</ind-def:textfilecontent54_object>
		<ind-def:textfilecontent54_object id="oval:gov.nist.usgcb.rhel:obj:20255" version="1">
			<ind-def:path>/etc/avahi</ind-def:path>
			<ind-def:filename>avahi-daemon.conf</ind-def:filename>
			<ind-def:pattern operation="pattern match">disable-publishing[\s]*=[\s]*([^#\s]*)</ind-def:pattern>
			<ind-def:instance datatype="int">1</ind-def:instance>
		</ind-def:textfilecontent54_object>
		<ind-def:textfilecontent54_object id="oval:gov.nist.usgcb.rhel:obj:20256" version="1">
			<ind-def:path>/etc/avahi</ind-def:path>
			<ind-def:filename>avahi-daemon.conf</ind-def:filename>
			<ind-def:pattern operation="pattern match">disable-user-service-publishing[\s]*=[\s]*([^#\s]*)</ind-def:pattern>
			<ind-def:instance datatype="int">1</ind-def:instance>
		</ind-def:textfilecontent54_object>
		<ind-def:textfilecontent54_object id="oval:gov.nist.usgcb.rhel:obj:20257" version="1">
			<ind-def:path>/etc/avahi</ind-def:path>
			<ind-def:filename>avahi-daemon.conf</ind-def:filename>
			<ind-def:pattern operation="pattern match">publish-hinfo[\s]*=[\s]*([^#\s]*)</ind-def:pattern>
			<ind-def:instance datatype="int">1</ind-def:instance>
		</ind-def:textfilecontent54_object>
		<ind-def:textfilecontent54_object id="oval:gov.nist.usgcb.rhel:obj:20258" version="1">
			<ind-def:path>/etc/avahi</ind-def:path>
			<ind-def:filename>avahi-daemon.conf</ind-def:filename>
			<ind-def:pattern operation="pattern match">publish-workstation[\s]*=[\s]*([^#\s]*)</ind-def:pattern>
			<ind-def:instance datatype="int">1</ind-def:instance>
		</ind-def:textfilecontent54_object>
		<ind-def:textfilecontent54_object id="oval:gov.nist.usgcb.rhel:obj:20259" version="1">
			<ind-def:path>/etc/avahi</ind-def:path>
			<ind-def:filename>avahi-daemon.conf</ind-def:filename>
			<ind-def:pattern operation="pattern match">publish-addresses[\s]*=[\s]*([^#\s]*)</ind-def:pattern>
			<ind-def:instance datatype="int">1</ind-def:instance>
		</ind-def:textfilecontent54_object>
		<ind-def:textfilecontent54_object id="oval:gov.nist.usgcb.rhel:obj:20260" version="1">
			<ind-def:path>/etc/avahi</ind-def:path>
			<ind-def:filename>avahi-daemon.conf</ind-def:filename>
			<ind-def:pattern operation="pattern match">publish-domain[\s]*=[\s]*([^#\s]*)</ind-def:pattern>
			<ind-def:instance datatype="int">1</ind-def:instance>
		</ind-def:textfilecontent54_object>
		<ind-def:textfilecontent54_object id="oval:gov.nist.usgcb.rhel:obj:20264" version="1">
			<ind-def:path>/etc/cups</ind-def:path>
			<ind-def:filename>cupsd.conf</ind-def:filename>
			<ind-def:pattern operation="pattern match">Browsing[\s]+([^#\s]*)</ind-def:pattern>
			<ind-def:instance datatype="int">1</ind-def:instance>
		</ind-def:textfilecontent54_object>
		<ind-def:textfilecontent54_object id="oval:gov.nist.usgcb.rhel:obj:20265" version="1">
			<ind-def:path>/etc/cups</ind-def:path>
			<ind-def:filename>cupsd.conf</ind-def:filename>
			<ind-def:pattern operation="pattern match">BrowseAllow[\s]+none</ind-def:pattern>
			<ind-def:instance datatype="int">1</ind-def:instance>
		</ind-def:textfilecontent54_object>
		<unix-def:runlevel_object id="oval:gov.nist.usgcb.rhel:obj:20266" version="1">
			<unix-def:service_name>hplip</unix-def:service_name>
			<unix-def:runlevel operation="equals">0</unix-def:runlevel>
		</unix-def:runlevel_object>
		<unix-def:runlevel_object id="oval:gov.nist.usgcb.rhel:obj:202661" version="1">
			<unix-def:service_name>hplip</unix-def:service_name>
			<unix-def:runlevel operation="equals">1</unix-def:runlevel>
		</unix-def:runlevel_object>
		<unix-def:runlevel_object id="oval:gov.nist.usgcb.rhel:obj:202662" version="1">
			<unix-def:service_name>hplip</unix-def:service_name>
			<unix-def:runlevel operation="equals">2</unix-def:runlevel>
		</unix-def:runlevel_object>
		<unix-def:runlevel_object id="oval:gov.nist.usgcb.rhel:obj:202663" version="1">
			<unix-def:service_name>hplip</unix-def:service_name>
			<unix-def:runlevel operation="equals">3</unix-def:runlevel>
		</unix-def:runlevel_object>
		<unix-def:runlevel_object id="oval:gov.nist.usgcb.rhel:obj:202664" version="1">
			<unix-def:service_name>hplip</unix-def:service_name>
			<unix-def:runlevel operation="equals">4</unix-def:runlevel>
		</unix-def:runlevel_object>
		<unix-def:runlevel_object id="oval:gov.nist.usgcb.rhel:obj:202665" version="1">
			<unix-def:service_name>hplip</unix-def:service_name>
			<unix-def:runlevel operation="equals">5</unix-def:runlevel>
		</unix-def:runlevel_object>
		<unix-def:runlevel_object id="oval:gov.nist.usgcb.rhel:obj:202666" version="1">
			<unix-def:service_name>hplip</unix-def:service_name>
			<unix-def:runlevel operation="equals">6</unix-def:runlevel>
		</unix-def:runlevel_object>
		<ind-def:textfilecontent54_object id="oval:gov.nist.usgcb.rhel:obj:20267" version="1">
			<ind-def:path>/etc/sysconfig/network-scripts</ind-def:path>
			<ind-def:filename operation="pattern match">ifcfg-eth.*</ind-def:filename>
			<ind-def:pattern operation="pattern match">^[\s]*BOOTPROTO[\s]*=[\s]*([^#\s]*)</ind-def:pattern>
			<ind-def:instance datatype="int">1</ind-def:instance>
		</ind-def:textfilecontent54_object>
		<ind-def:variable_object id="oval:gov.nist.usgcb.rhel:obj:256" version="1">
			<ind-def:var_ref>oval:gov.nist.usgcb.rhel:var:20267</ind-def:var_ref>
		</ind-def:variable_object>
		<unix-def:runlevel_object id="oval:gov.nist.usgcb.rhel:obj:20268" version="1">
			<unix-def:service_name>dhcpd</unix-def:service_name>
			<unix-def:runlevel operation="equals">0</unix-def:runlevel>
		</unix-def:runlevel_object>
		<unix-def:runlevel_object id="oval:gov.nist.usgcb.rhel:obj:202681" version="1">
			<unix-def:service_name>dhcpd</unix-def:service_name>
			<unix-def:runlevel operation="equals">1</unix-def:runlevel>
		</unix-def:runlevel_object>
		<unix-def:runlevel_object id="oval:gov.nist.usgcb.rhel:obj:202682" version="1">
			<unix-def:service_name>dhcpd</unix-def:service_name>
			<unix-def:runlevel operation="equals">2</unix-def:runlevel>
		</unix-def:runlevel_object>
		<unix-def:runlevel_object id="oval:gov.nist.usgcb.rhel:obj:202683" version="1">
			<unix-def:service_name>dhcpd</unix-def:service_name>
			<unix-def:runlevel operation="equals">3</unix-def:runlevel>
		</unix-def:runlevel_object>
		<unix-def:runlevel_object id="oval:gov.nist.usgcb.rhel:obj:202684" version="1">
			<unix-def:service_name>dhcpd</unix-def:service_name>
			<unix-def:runlevel operation="equals">4</unix-def:runlevel>
		</unix-def:runlevel_object>
		<unix-def:runlevel_object id="oval:gov.nist.usgcb.rhel:obj:202685" version="1">
			<unix-def:service_name>dhcpd</unix-def:service_name>
			<unix-def:runlevel operation="equals">5</unix-def:runlevel>
		</unix-def:runlevel_object>
		<unix-def:runlevel_object id="oval:gov.nist.usgcb.rhel:obj:202686" version="1">
			<unix-def:service_name>dhcpd</unix-def:service_name>
			<unix-def:runlevel operation="equals">6</unix-def:runlevel>
		</unix-def:runlevel_object>
		<lin-def:rpminfo_object id="oval:gov.nist.usgcb.rhel:obj:20269" version="1">
			<lin-def:name>dhcp</lin-def:name>
		</lin-def:rpminfo_object>
		<ind-def:textfilecontent54_object id="oval:gov.nist.usgcb.rhel:obj:20270" version="1">
			<ind-def:path>/etc</ind-def:path>
			<ind-def:filename>dhcpd.conf</ind-def:filename>
			<ind-def:pattern operation="pattern match">ddns-update-style[\s]+none;</ind-def:pattern>
			<ind-def:instance datatype="int">1</ind-def:instance>
		</ind-def:textfilecontent54_object>
		<ind-def:textfilecontent54_object id="oval:gov.nist.usgcb.rhel:obj:20271" version="1">
			<ind-def:path>/etc</ind-def:path>
			<ind-def:filename>dhcpd.conf</ind-def:filename>
			<ind-def:pattern operation="pattern match">deny[\s]+declines;</ind-def:pattern>
			<ind-def:instance datatype="int">1</ind-def:instance>
		</ind-def:textfilecontent54_object>
		<ind-def:textfilecontent54_object id="oval:gov.nist.usgcb.rhel:obj:20272" version="1">
			<ind-def:path>/etc</ind-def:path>
			<ind-def:filename>dhcpd.conf</ind-def:filename>
			<ind-def:pattern operation="pattern match">deny[\s]+bootp;</ind-def:pattern>
			<ind-def:instance datatype="int">1</ind-def:instance>
		</ind-def:textfilecontent54_object>
		<ind-def:textfilecontent54_object id="oval:gov.nist.usgcb.rhel:obj:267" version="1">
			<ind-def:path>/etc</ind-def:path>
			<ind-def:filename>dhcpd.conf</ind-def:filename>
			<ind-def:pattern operation="pattern match">option[\s]+domain-name-servers</ind-def:pattern>
			<ind-def:instance datatype="int">1</ind-def:instance>
		</ind-def:textfilecontent54_object>
		<ind-def:textfilecontent54_object id="oval:gov.nist.usgcb.rhel:obj:269" version="1">
			<ind-def:path>/etc</ind-def:path>
			<ind-def:filename>dhcpd.conf</ind-def:filename>
			<ind-def:pattern operation="pattern match">option[\s]+routers</ind-def:pattern>
			<ind-def:instance datatype="int">1</ind-def:instance>
		</ind-def:textfilecontent54_object>
		<ind-def:textfilecontent54_object id="oval:gov.nist.usgcb.rhel:obj:271" version="1">
			<ind-def:path>/etc</ind-def:path>
			<ind-def:filename>dhcpd.conf</ind-def:filename>
			<ind-def:pattern operation="pattern match">option[\s]+domain-name</ind-def:pattern>
			<ind-def:instance datatype="int">1</ind-def:instance>
		</ind-def:textfilecontent54_object>
		<ind-def:textfilecontent54_object id="oval:gov.nist.usgcb.rhel:obj:273" version="1">
			<ind-def:path>/etc</ind-def:path>
			<ind-def:filename>dhcpd.conf</ind-def:filename>
			<ind-def:pattern operation="pattern match">option[\s]+nis-domain</ind-def:pattern>
			<ind-def:instance datatype="int">1</ind-def:instance>
		</ind-def:textfilecontent54_object>
		<ind-def:textfilecontent54_object id="oval:gov.nist.usgcb.rhel:obj:275" version="1">
			<ind-def:path>/etc</ind-def:path>
			<ind-def:filename>dhcpd.conf</ind-def:filename>
			<ind-def:pattern operation="pattern match">option[\s]+nis-servers</ind-def:pattern>
			<ind-def:instance datatype="int">1</ind-def:instance>
		</ind-def:textfilecontent54_object>
		<ind-def:textfilecontent54_object id="oval:gov.nist.usgcb.rhel:obj:277" version="1">
			<ind-def:path>/etc</ind-def:path>
			<ind-def:filename>dhcpd.conf</ind-def:filename>
			<ind-def:pattern operation="pattern match">option[\s]+time-offset</ind-def:pattern>
			<ind-def:instance datatype="int">1</ind-def:instance>
		</ind-def:textfilecontent54_object>
		<ind-def:textfilecontent54_object id="oval:gov.nist.usgcb.rhel:obj:279" version="1">
			<ind-def:path>/etc</ind-def:path>
			<ind-def:filename>dhcpd.conf</ind-def:filename>
			<ind-def:pattern operation="pattern match">option[\s]+ntp-servers</ind-def:pattern>
			<ind-def:instance datatype="int">1</ind-def:instance>
		</ind-def:textfilecontent54_object>
		<ind-def:textfilecontent54_object id="oval:gov.nist.usgcb.rhel:obj:20280" version="1">
			<ind-def:path>/etc</ind-def:path>
			<ind-def:filename>syslog.conf</ind-def:filename>
			<ind-def:pattern operation="pattern match">daemon\.\*[\s]+/var/log/daemon\.log</ind-def:pattern>
			<ind-def:instance datatype="int">1</ind-def:instance>
		</ind-def:textfilecontent54_object>
		<unix-def:runlevel_object id="oval:gov.nist.usgcb.rhel:obj:202812" version="1">
			<unix-def:service_name>ntpd</unix-def:service_name>
			<unix-def:runlevel operation="equals">2</unix-def:runlevel>
		</unix-def:runlevel_object>
		<unix-def:runlevel_object id="oval:gov.nist.usgcb.rhel:obj:202813" version="1">
			<unix-def:service_name>ntpd</unix-def:service_name>
			<unix-def:runlevel operation="equals">3</unix-def:runlevel>
		</unix-def:runlevel_object>
		<unix-def:runlevel_object id="oval:gov.nist.usgcb.rhel:obj:202814" version="1">
			<unix-def:service_name>ntpd</unix-def:service_name>
			<unix-def:runlevel operation="equals">4</unix-def:runlevel>
		</unix-def:runlevel_object>
		<unix-def:runlevel_object id="oval:gov.nist.usgcb.rhel:obj:202815" version="1">
			<unix-def:service_name>ntpd</unix-def:service_name>
			<unix-def:runlevel operation="equals">5</unix-def:runlevel>
		</unix-def:runlevel_object>
		<ind-def:textfilecontent54_object id="oval:gov.nist.usgcb.rhel:obj:20282" version="1">
			<ind-def:path>/etc</ind-def:path>
			<ind-def:filename>ntp.conf</ind-def:filename>
			<ind-def:pattern operation="pattern match">restrict[\s]+default[\s]+ignore</ind-def:pattern>
			<ind-def:instance datatype="int">1</ind-def:instance>
		</ind-def:textfilecontent54_object>
		<ind-def:textfilecontent54_object id="oval:gov.nist.usgcb.rhel:obj:20285" version="1">
			<ind-def:path>/etc</ind-def:path>
			<ind-def:filename>rc.local</ind-def:filename>
			<ind-def:pattern operation="pattern match">/usr/local/sbin/ntpd -s</ind-def:pattern>
			<ind-def:instance datatype="int">1</ind-def:instance>
		</ind-def:textfilecontent54_object>
		<unix-def:runlevel_object id="oval:gov.nist.usgcb.rhel:obj:20287" version="1">
			<unix-def:service_name>sendmail</unix-def:service_name>
			<unix-def:runlevel operation="equals">0</unix-def:runlevel>
		</unix-def:runlevel_object>
		<unix-def:runlevel_object id="oval:gov.nist.usgcb.rhel:obj:202871" version="1">
			<unix-def:service_name>sendmail</unix-def:service_name>
			<unix-def:runlevel operation="equals">1</unix-def:runlevel>
		</unix-def:runlevel_object>
		<unix-def:runlevel_object id="oval:gov.nist.usgcb.rhel:obj:202872" version="1">
			<unix-def:service_name>sendmail</unix-def:service_name>
			<unix-def:runlevel operation="equals">2</unix-def:runlevel>
		</unix-def:runlevel_object>
		<unix-def:runlevel_object id="oval:gov.nist.usgcb.rhel:obj:202873" version="1">
			<unix-def:service_name>sendmail</unix-def:service_name>
			<unix-def:runlevel operation="equals">3</unix-def:runlevel>
		</unix-def:runlevel_object>
		<unix-def:runlevel_object id="oval:gov.nist.usgcb.rhel:obj:202874" version="1">
			<unix-def:service_name>sendmail</unix-def:service_name>
			<unix-def:runlevel operation="equals">4</unix-def:runlevel>
		</unix-def:runlevel_object>
		<unix-def:runlevel_object id="oval:gov.nist.usgcb.rhel:obj:202875" version="1">
			<unix-def:service_name>sendmail</unix-def:service_name>
			<unix-def:runlevel operation="equals">5</unix-def:runlevel>
		</unix-def:runlevel_object>
		<unix-def:runlevel_object id="oval:gov.nist.usgcb.rhel:obj:202876" version="1">
			<unix-def:service_name>sendmail</unix-def:service_name>
			<unix-def:runlevel operation="equals">6</unix-def:runlevel>
		</unix-def:runlevel_object>
		<ind-def:textfilecontent54_object id="oval:gov.nist.usgcb.rhel:obj:20288" version="1">
			<ind-def:path>/etc/sysconfig</ind-def:path>
			<ind-def:filename>sendmail</ind-def:filename>
			<ind-def:pattern operation="pattern match">DAEMON[\s]*=[\s]*yes</ind-def:pattern>
			<ind-def:instance datatype="int">1</ind-def:instance>
		</ind-def:textfilecontent54_object>
		<ind-def:textfilecontent54_object id="oval:gov.nist.usgcb.rhel:obj:202885" version="1">
			<ind-def:path>/etc</ind-def:path>
			<ind-def:filename>ldap.conf</ind-def:filename>
			<ind-def:pattern operation="pattern match">^[\s]*tls_checkpeer[\s]+yes</ind-def:pattern>
			<ind-def:instance datatype="int">1</ind-def:instance>
		</ind-def:textfilecontent54_object>
		<unix-def:runlevel_object id="oval:gov.nist.usgcb.rhel:obj:20289" version="1">
			<unix-def:service_name>ldap</unix-def:service_name>
			<unix-def:runlevel operation="equals">0</unix-def:runlevel>
		</unix-def:runlevel_object>
		<unix-def:runlevel_object id="oval:gov.nist.usgcb.rhel:obj:202891" version="1">
			<unix-def:service_name>ldap</unix-def:service_name>
			<unix-def:runlevel operation="equals">1</unix-def:runlevel>
		</unix-def:runlevel_object>
		<unix-def:runlevel_object id="oval:gov.nist.usgcb.rhel:obj:202892" version="1">
			<unix-def:service_name>ldap</unix-def:service_name>
			<unix-def:runlevel operation="equals">2</unix-def:runlevel>
		</unix-def:runlevel_object>
		<unix-def:runlevel_object id="oval:gov.nist.usgcb.rhel:obj:202893" version="1">
			<unix-def:service_name>ldap</unix-def:service_name>
			<unix-def:runlevel operation="equals">3</unix-def:runlevel>
		</unix-def:runlevel_object>
		<unix-def:runlevel_object id="oval:gov.nist.usgcb.rhel:obj:202894" version="1">
			<unix-def:service_name>ldap</unix-def:service_name>
			<unix-def:runlevel operation="equals">4</unix-def:runlevel>
		</unix-def:runlevel_object>
		<unix-def:runlevel_object id="oval:gov.nist.usgcb.rhel:obj:202895" version="1">
			<unix-def:service_name>ldap</unix-def:service_name>
			<unix-def:runlevel operation="equals">5</unix-def:runlevel>
		</unix-def:runlevel_object>
		<unix-def:runlevel_object id="oval:gov.nist.usgcb.rhel:obj:202896" version="1">
			<unix-def:service_name>ldap</unix-def:service_name>
			<unix-def:runlevel operation="equals">6</unix-def:runlevel>
		</unix-def:runlevel_object>
		<unix-def:file_object id="oval:gov.nist.usgcb.rhel:obj:20290" version="1" comment="/var/lib/ldap/.*">
			<unix-def:path>/var/lib/ldap</unix-def:path>
			<unix-def:filename operation="pattern match">.*</unix-def:filename>
		</unix-def:file_object>
		<unix-def:file_object id="oval:gov.nist.usgcb.rhel:obj:20291" version="1" comment="/var/lib/ldap/.*">
			<unix-def:path>/var/lib/ldap</unix-def:path>
			<unix-def:filename operation="pattern match">.*</unix-def:filename>
		</unix-def:file_object>
		<unix-def:runlevel_object id="oval:gov.nist.usgcb.rhel:obj:20292" version="1">
			<unix-def:service_name>nfslock</unix-def:service_name>
			<unix-def:runlevel operation="equals">0</unix-def:runlevel>
		</unix-def:runlevel_object>
		<unix-def:runlevel_object id="oval:gov.nist.usgcb.rhel:obj:202921" version="1">
			<unix-def:service_name>nfslock</unix-def:service_name>
			<unix-def:runlevel operation="equals">1</unix-def:runlevel>
		</unix-def:runlevel_object>
		<unix-def:runlevel_object id="oval:gov.nist.usgcb.rhel:obj:202922" version="1">
			<unix-def:service_name>nfslock</unix-def:service_name>
			<unix-def:runlevel operation="equals">2</unix-def:runlevel>
		</unix-def:runlevel_object>
		<unix-def:runlevel_object id="oval:gov.nist.usgcb.rhel:obj:202923" version="1">
			<unix-def:service_name>nfslock</unix-def:service_name>
			<unix-def:runlevel operation="equals">3</unix-def:runlevel>
		</unix-def:runlevel_object>
		<unix-def:runlevel_object id="oval:gov.nist.usgcb.rhel:obj:202924" version="1">
			<unix-def:service_name>nfslock</unix-def:service_name>
			<unix-def:runlevel operation="equals">4</unix-def:runlevel>
		</unix-def:runlevel_object>
		<unix-def:runlevel_object id="oval:gov.nist.usgcb.rhel:obj:202925" version="1">
			<unix-def:service_name>nfslock</unix-def:service_name>
			<unix-def:runlevel operation="equals">5</unix-def:runlevel>
		</unix-def:runlevel_object>
		<unix-def:runlevel_object id="oval:gov.nist.usgcb.rhel:obj:202926" version="1">
			<unix-def:service_name>nfslock</unix-def:service_name>
			<unix-def:runlevel operation="equals">6</unix-def:runlevel>
		</unix-def:runlevel_object>
		<unix-def:runlevel_object id="oval:gov.nist.usgcb.rhel:obj:20293" version="1">
			<unix-def:service_name>rpcgssd</unix-def:service_name>
			<unix-def:runlevel operation="equals">0</unix-def:runlevel>
		</unix-def:runlevel_object>
		<unix-def:runlevel_object id="oval:gov.nist.usgcb.rhel:obj:202931" version="1">
			<unix-def:service_name>rpcgssd</unix-def:service_name>
			<unix-def:runlevel operation="equals">1</unix-def:runlevel>
		</unix-def:runlevel_object>
		<unix-def:runlevel_object id="oval:gov.nist.usgcb.rhel:obj:202932" version="1">
			<unix-def:service_name>rpcgssd</unix-def:service_name>
			<unix-def:runlevel operation="equals">2</unix-def:runlevel>
		</unix-def:runlevel_object>
		<unix-def:runlevel_object id="oval:gov.nist.usgcb.rhel:obj:202933" version="1">
			<unix-def:service_name>rpcgssd</unix-def:service_name>
			<unix-def:runlevel operation="equals">3</unix-def:runlevel>
		</unix-def:runlevel_object>
		<unix-def:runlevel_object id="oval:gov.nist.usgcb.rhel:obj:202934" version="1">
			<unix-def:service_name>rpcgssd</unix-def:service_name>
			<unix-def:runlevel operation="equals">4</unix-def:runlevel>
		</unix-def:runlevel_object>
		<unix-def:runlevel_object id="oval:gov.nist.usgcb.rhel:obj:202935" version="1">
			<unix-def:service_name>rpcgssd</unix-def:service_name>
			<unix-def:runlevel operation="equals">5</unix-def:runlevel>
		</unix-def:runlevel_object>
		<unix-def:runlevel_object id="oval:gov.nist.usgcb.rhel:obj:202936" version="1">
			<unix-def:service_name>rpcgssd</unix-def:service_name>
			<unix-def:runlevel operation="equals">6</unix-def:runlevel>
		</unix-def:runlevel_object>
		<unix-def:runlevel_object id="oval:gov.nist.usgcb.rhel:obj:20294" version="1">
			<unix-def:service_name>rpcidmapd</unix-def:service_name>
			<unix-def:runlevel operation="equals">0</unix-def:runlevel>
		</unix-def:runlevel_object>
		<unix-def:runlevel_object id="oval:gov.nist.usgcb.rhel:obj:202941" version="1">
			<unix-def:service_name>rpcidmapd</unix-def:service_name>
			<unix-def:runlevel operation="equals">1</unix-def:runlevel>
		</unix-def:runlevel_object>
		<unix-def:runlevel_object id="oval:gov.nist.usgcb.rhel:obj:202942" version="1">
			<unix-def:service_name>rpcidmapd</unix-def:service_name>
			<unix-def:runlevel operation="equals">2</unix-def:runlevel>
		</unix-def:runlevel_object>
		<unix-def:runlevel_object id="oval:gov.nist.usgcb.rhel:obj:202943" version="1">
			<unix-def:service_name>rpcidmapd</unix-def:service_name>
			<unix-def:runlevel operation="equals">3</unix-def:runlevel>
		</unix-def:runlevel_object>
		<unix-def:runlevel_object id="oval:gov.nist.usgcb.rhel:obj:202944" version="1">
			<unix-def:service_name>rpcidmapd</unix-def:service_name>
			<unix-def:runlevel operation="equals">4</unix-def:runlevel>
		</unix-def:runlevel_object>
		<unix-def:runlevel_object id="oval:gov.nist.usgcb.rhel:obj:202945" version="1">
			<unix-def:service_name>rpcidmapd</unix-def:service_name>
			<unix-def:runlevel operation="equals">5</unix-def:runlevel>
		</unix-def:runlevel_object>
		<unix-def:runlevel_object id="oval:gov.nist.usgcb.rhel:obj:202946" version="1">
			<unix-def:service_name>rpcidmapd</unix-def:service_name>
			<unix-def:runlevel operation="equals">6</unix-def:runlevel>
		</unix-def:runlevel_object>
		<unix-def:runlevel_object id="oval:gov.nist.usgcb.rhel:obj:20295" version="1">
			<unix-def:service_name>netfs</unix-def:service_name>
			<unix-def:runlevel operation="equals">0</unix-def:runlevel>
		</unix-def:runlevel_object>
		<unix-def:runlevel_object id="oval:gov.nist.usgcb.rhel:obj:202951" version="1">
			<unix-def:service_name>netfs</unix-def:service_name>
			<unix-def:runlevel operation="equals">1</unix-def:runlevel>
		</unix-def:runlevel_object>
		<unix-def:runlevel_object id="oval:gov.nist.usgcb.rhel:obj:202952" version="1">
			<unix-def:service_name>netfs</unix-def:service_name>
			<unix-def:runlevel operation="equals">2</unix-def:runlevel>
		</unix-def:runlevel_object>
		<unix-def:runlevel_object id="oval:gov.nist.usgcb.rhel:obj:202953" version="1">
			<unix-def:service_name>netfs</unix-def:service_name>
			<unix-def:runlevel operation="equals">3</unix-def:runlevel>
		</unix-def:runlevel_object>
		<unix-def:runlevel_object id="oval:gov.nist.usgcb.rhel:obj:202954" version="1">
			<unix-def:service_name>netfs</unix-def:service_name>
			<unix-def:runlevel operation="equals">4</unix-def:runlevel>
		</unix-def:runlevel_object>
		<unix-def:runlevel_object id="oval:gov.nist.usgcb.rhel:obj:202955" version="1">
			<unix-def:service_name>netfs</unix-def:service_name>
			<unix-def:runlevel operation="equals">5</unix-def:runlevel>
		</unix-def:runlevel_object>
		<unix-def:runlevel_object id="oval:gov.nist.usgcb.rhel:obj:202956" version="1">
			<unix-def:service_name>netfs</unix-def:service_name>
			<unix-def:runlevel operation="equals">6</unix-def:runlevel>
		</unix-def:runlevel_object>
		<unix-def:runlevel_object id="oval:gov.nist.usgcb.rhel:obj:20296" version="1">
			<unix-def:service_name>portmap</unix-def:service_name>
			<unix-def:runlevel operation="equals">0</unix-def:runlevel>
		</unix-def:runlevel_object>
		<unix-def:runlevel_object id="oval:gov.nist.usgcb.rhel:obj:202961" version="1">
			<unix-def:service_name>portmap</unix-def:service_name>
			<unix-def:runlevel operation="equals">1</unix-def:runlevel>
		</unix-def:runlevel_object>
		<unix-def:runlevel_object id="oval:gov.nist.usgcb.rhel:obj:202962" version="1">
			<unix-def:service_name>portmap</unix-def:service_name>
			<unix-def:runlevel operation="equals">2</unix-def:runlevel>
		</unix-def:runlevel_object>
		<unix-def:runlevel_object id="oval:gov.nist.usgcb.rhel:obj:202963" version="1">
			<unix-def:service_name>portmap</unix-def:service_name>
			<unix-def:runlevel operation="equals">3</unix-def:runlevel>
		</unix-def:runlevel_object>
		<unix-def:runlevel_object id="oval:gov.nist.usgcb.rhel:obj:202964" version="1">
			<unix-def:service_name>portmap</unix-def:service_name>
			<unix-def:runlevel operation="equals">4</unix-def:runlevel>
		</unix-def:runlevel_object>
		<unix-def:runlevel_object id="oval:gov.nist.usgcb.rhel:obj:202965" version="1">
			<unix-def:service_name>portmap</unix-def:service_name>
			<unix-def:runlevel operation="equals">5</unix-def:runlevel>
		</unix-def:runlevel_object>
		<unix-def:runlevel_object id="oval:gov.nist.usgcb.rhel:obj:202966" version="1">
			<unix-def:service_name>portmap</unix-def:service_name>
			<unix-def:runlevel operation="equals">6</unix-def:runlevel>
		</unix-def:runlevel_object>
		<ind-def:textfilecontent54_object id="oval:gov.nist.usgcb.rhel:obj:20297" version="1">
			<ind-def:path>/etc/sysconfig</ind-def:path>
			<ind-def:filename>nfs</ind-def:filename>
			<ind-def:pattern operation="pattern match">LOCKD_TCPPORT[\s]*=[\s]*[0-9]</ind-def:pattern>
			<ind-def:instance datatype="int">1</ind-def:instance>
		</ind-def:textfilecontent54_object>
		<ind-def:textfilecontent54_object id="oval:gov.nist.usgcb.rhel:obj:20298" version="1">
			<ind-def:path>/etc/sysconfig</ind-def:path>
			<ind-def:filename>nfs</ind-def:filename>
			<ind-def:pattern operation="pattern match">STATD_OUTGOING_PORT[\s]*=[\s]*[0-9]</ind-def:pattern>
			<ind-def:instance datatype="int">1</ind-def:instance>
		</ind-def:textfilecontent54_object>
		<ind-def:textfilecontent54_object id="oval:gov.nist.usgcb.rhel:obj:20299" version="1">
			<ind-def:path>/etc/sysconfig</ind-def:path>
			<ind-def:filename>nfs</ind-def:filename>
			<ind-def:pattern operation="pattern match">STATD_PORT[\s]*=[\s]*[0-9]</ind-def:pattern>
			<ind-def:instance datatype="int">1</ind-def:instance>
		</ind-def:textfilecontent54_object>
		<ind-def:textfilecontent54_object id="oval:gov.nist.usgcb.rhel:obj:20300" version="1">
			<ind-def:path>/etc/sysconfig</ind-def:path>
			<ind-def:filename>nfs</ind-def:filename>
			<ind-def:pattern operation="pattern match">LOCKD_UDPPORT[\s]*=[\s]*[0-9]</ind-def:pattern>
			<ind-def:instance datatype="int">1</ind-def:instance>
		</ind-def:textfilecontent54_object>
		<ind-def:textfilecontent54_object id="oval:gov.nist.usgcb.rhel:obj:20301" version="1">
			<ind-def:path>/etc/sysconfig</ind-def:path>
			<ind-def:filename>nfs</ind-def:filename>
			<ind-def:pattern operation="pattern match">MOUNTD_PORT[\s]*=[\s]*[0-9]</ind-def:pattern>
			<ind-def:instance datatype="int">1</ind-def:instance>
		</ind-def:textfilecontent54_object>
		<ind-def:textfilecontent54_object id="oval:gov.nist.usgcb.rhel:obj:20302" version="1">
			<ind-def:path>/etc/sysconfig</ind-def:path>
			<ind-def:filename>nfs</ind-def:filename>
			<ind-def:pattern operation="pattern match">RQUOTAD_PORT[\s]*=[\s]*[0-9]</ind-def:pattern>
			<ind-def:instance datatype="int">1</ind-def:instance>
		</ind-def:textfilecontent54_object>
		<unix-def:runlevel_object id="oval:gov.nist.usgcb.rhel:obj:20303" version="1">
			<unix-def:service_name>nfs</unix-def:service_name>
			<unix-def:runlevel operation="equals">0</unix-def:runlevel>
		</unix-def:runlevel_object>
		<unix-def:runlevel_object id="oval:gov.nist.usgcb.rhel:obj:203031" version="1">
			<unix-def:service_name>nfs</unix-def:service_name>
			<unix-def:runlevel operation="equals">1</unix-def:runlevel>
		</unix-def:runlevel_object>
		<unix-def:runlevel_object id="oval:gov.nist.usgcb.rhel:obj:203032" version="1">
			<unix-def:service_name>nfs</unix-def:service_name>
			<unix-def:runlevel operation="equals">2</unix-def:runlevel>
		</unix-def:runlevel_object>
		<unix-def:runlevel_object id="oval:gov.nist.usgcb.rhel:obj:203033" version="1">
			<unix-def:service_name>nfs</unix-def:service_name>
			<unix-def:runlevel operation="equals">3</unix-def:runlevel>
		</unix-def:runlevel_object>
		<unix-def:runlevel_object id="oval:gov.nist.usgcb.rhel:obj:203034" version="1">
			<unix-def:service_name>nfs</unix-def:service_name>
			<unix-def:runlevel operation="equals">4</unix-def:runlevel>
		</unix-def:runlevel_object>
		<unix-def:runlevel_object id="oval:gov.nist.usgcb.rhel:obj:203035" version="1">
			<unix-def:service_name>nfs</unix-def:service_name>
			<unix-def:runlevel operation="equals">5</unix-def:runlevel>
		</unix-def:runlevel_object>
		<unix-def:runlevel_object id="oval:gov.nist.usgcb.rhel:obj:203036" version="1">
			<unix-def:service_name>nfs</unix-def:service_name>
			<unix-def:runlevel operation="equals">6</unix-def:runlevel>
		</unix-def:runlevel_object>
		<unix-def:runlevel_object id="oval:gov.nist.usgcb.rhel:obj:20304" version="1">
			<unix-def:service_name>rpcsvcgssd</unix-def:service_name>
			<unix-def:runlevel operation="equals">0</unix-def:runlevel>
		</unix-def:runlevel_object>
		<unix-def:runlevel_object id="oval:gov.nist.usgcb.rhel:obj:203041" version="1">
			<unix-def:service_name>rpcsvcgssd</unix-def:service_name>
			<unix-def:runlevel operation="equals">1</unix-def:runlevel>
		</unix-def:runlevel_object>
		<unix-def:runlevel_object id="oval:gov.nist.usgcb.rhel:obj:203042" version="1">
			<unix-def:service_name>rpcsvcgssd</unix-def:service_name>
			<unix-def:runlevel operation="equals">2</unix-def:runlevel>
		</unix-def:runlevel_object>
		<unix-def:runlevel_object id="oval:gov.nist.usgcb.rhel:obj:203043" version="1">
			<unix-def:service_name>rpcsvcgssd</unix-def:service_name>
			<unix-def:runlevel operation="equals">3</unix-def:runlevel>
		</unix-def:runlevel_object>
		<unix-def:runlevel_object id="oval:gov.nist.usgcb.rhel:obj:203044" version="1">
			<unix-def:service_name>rpcsvcgssd</unix-def:service_name>
			<unix-def:runlevel operation="equals">4</unix-def:runlevel>
		</unix-def:runlevel_object>
		<unix-def:runlevel_object id="oval:gov.nist.usgcb.rhel:obj:203045" version="1">
			<unix-def:service_name>rpcsvcgssd</unix-def:service_name>
			<unix-def:runlevel operation="equals">5</unix-def:runlevel>
		</unix-def:runlevel_object>
		<unix-def:runlevel_object id="oval:gov.nist.usgcb.rhel:obj:203046" version="1">
			<unix-def:service_name>rpcsvcgssd</unix-def:service_name>
			<unix-def:runlevel operation="equals">6</unix-def:runlevel>
		</unix-def:runlevel_object>
		<ind-def:textfilecontent54_object id="oval:gov.nist.usgcb.rhel:obj:20308" version="1">
			<ind-def:path>/etc</ind-def:path>
			<ind-def:filename>exports</ind-def:filename>
			<ind-def:pattern operation="pattern match">no_root_squash</ind-def:pattern>
			<ind-def:instance datatype="int">1</ind-def:instance>
		</ind-def:textfilecontent54_object>
		<ind-def:textfilecontent54_object id="oval:gov.nist.usgcb.rhel:obj:20309" version="1">
			<ind-def:path>/etc</ind-def:path>
			<ind-def:filename>exports</ind-def:filename>
			<ind-def:pattern operation="pattern match">insecure</ind-def:pattern>
			<ind-def:instance datatype="int">1</ind-def:instance>
		</ind-def:textfilecontent54_object>
		<ind-def:textfilecontent54_object id="oval:gov.nist.usgcb.rhel:obj:20310" version="1">
			<ind-def:path>/etc</ind-def:path>
			<ind-def:filename>exports</ind-def:filename>
			<ind-def:pattern operation="pattern match">rw</ind-def:pattern>
			<ind-def:instance datatype="int">1</ind-def:instance>
		</ind-def:textfilecontent54_object>
		<unix-def:runlevel_object id="oval:gov.nist.usgcb.rhel:obj:20311" version="1">
			<unix-def:service_name>named</unix-def:service_name>
			<unix-def:runlevel operation="equals">0</unix-def:runlevel>
		</unix-def:runlevel_object>
		<unix-def:runlevel_object id="oval:gov.nist.usgcb.rhel:obj:203111" version="1">
			<unix-def:service_name>named</unix-def:service_name>
			<unix-def:runlevel operation="equals">1</unix-def:runlevel>
		</unix-def:runlevel_object>
		<unix-def:runlevel_object id="oval:gov.nist.usgcb.rhel:obj:203112" version="1">
			<unix-def:service_name>named</unix-def:service_name>
			<unix-def:runlevel operation="equals">2</unix-def:runlevel>
		</unix-def:runlevel_object>
		<unix-def:runlevel_object id="oval:gov.nist.usgcb.rhel:obj:203113" version="1">
			<unix-def:service_name>named</unix-def:service_name>
			<unix-def:runlevel operation="equals">3</unix-def:runlevel>
		</unix-def:runlevel_object>
		<unix-def:runlevel_object id="oval:gov.nist.usgcb.rhel:obj:203114" version="1">
			<unix-def:service_name>named</unix-def:service_name>
			<unix-def:runlevel operation="equals">4</unix-def:runlevel>
		</unix-def:runlevel_object>
		<unix-def:runlevel_object id="oval:gov.nist.usgcb.rhel:obj:203115" version="1">
			<unix-def:service_name>named</unix-def:service_name>
			<unix-def:runlevel operation="equals">5</unix-def:runlevel>
		</unix-def:runlevel_object>
		<unix-def:runlevel_object id="oval:gov.nist.usgcb.rhel:obj:203116" version="1">
			<unix-def:service_name>named</unix-def:service_name>
			<unix-def:runlevel operation="equals">6</unix-def:runlevel>
		</unix-def:runlevel_object>
		<lin-def:rpminfo_object id="oval:gov.nist.usgcb.rhel:obj:20312" version="1">
			<lin-def:name>bind</lin-def:name>
		</lin-def:rpminfo_object>
		<unix-def:file_object id="oval:gov.nist.usgcb.rhel:obj:20313" version="1" comment="/var/named/chroot/etc/named.conf">
			<unix-def:path>/var/named/chroot/etc</unix-def:path>
			<unix-def:filename>named.conf</unix-def:filename>
		</unix-def:file_object>
		<unix-def:file_object id="oval:gov.nist.usgcb.rhel:obj:20315" version="1" comment="/var/named/chroot/etc/named.conf">
			<unix-def:path>/var/named/chroot/etc</unix-def:path>
			<unix-def:filename>named.conf</unix-def:filename>
		</unix-def:file_object>
		<unix-def:file_object id="oval:gov.nist.usgcb.rhel:obj:20314" version="1" comment="/var/named/chroot/etc/named.conf">
			<unix-def:path>/var/named/chroot/etc</unix-def:path>
			<unix-def:filename>named.conf</unix-def:filename>
		</unix-def:file_object>
		<unix-def:runlevel_object id="oval:gov.nist.usgcb.rhel:obj:203170" version="1">
			<unix-def:service_name>vsftpd</unix-def:service_name>
			<unix-def:runlevel operation="equals">on</unix-def:runlevel>
		</unix-def:runlevel_object>
		<unix-def:runlevel_object id="oval:gov.nist.usgcb.rhel:obj:2031701" version="1">
			<unix-def:service_name>vsftpd</unix-def:service_name>
			<unix-def:runlevel operation="equals">1</unix-def:runlevel>
		</unix-def:runlevel_object>
		<unix-def:runlevel_object id="oval:gov.nist.usgcb.rhel:obj:2031702" version="1">
			<unix-def:service_name>vsftpd</unix-def:service_name>
			<unix-def:runlevel operation="equals">2</unix-def:runlevel>
		</unix-def:runlevel_object>
		<unix-def:runlevel_object id="oval:gov.nist.usgcb.rhel:obj:2031703" version="1">
			<unix-def:service_name>vsftpd</unix-def:service_name>
			<unix-def:runlevel operation="equals">3</unix-def:runlevel>
		</unix-def:runlevel_object>
		<unix-def:runlevel_object id="oval:gov.nist.usgcb.rhel:obj:2031704" version="1">
			<unix-def:service_name>vsftpd</unix-def:service_name>
			<unix-def:runlevel operation="equals">4</unix-def:runlevel>
		</unix-def:runlevel_object>
		<unix-def:runlevel_object id="oval:gov.nist.usgcb.rhel:obj:2031705" version="1">
			<unix-def:service_name>vsftpd</unix-def:service_name>
			<unix-def:runlevel operation="equals">5</unix-def:runlevel>
		</unix-def:runlevel_object>
		<unix-def:runlevel_object id="oval:gov.nist.usgcb.rhel:obj:2031706" version="1">
			<unix-def:service_name>vsftpd</unix-def:service_name>
			<unix-def:runlevel operation="equals">6</unix-def:runlevel>
		</unix-def:runlevel_object>
		<lin-def:rpminfo_object id="oval:gov.nist.usgcb.rhel:obj:203175" version="1">
			<lin-def:name>vsftpd</lin-def:name>
		</lin-def:rpminfo_object>
		<ind-def:textfilecontent54_object id="oval:gov.nist.usgcb.rhel:obj:20319" version="1">
			<ind-def:path>/etc</ind-def:path>
			<ind-def:filename>vsftpd.conf</ind-def:filename>
			<ind-def:pattern operation="pattern match">banner_file[\s]*=[\s]*/etc/issue</ind-def:pattern>
			<ind-def:instance datatype="int">1</ind-def:instance>
		</ind-def:textfilecontent54_object>
		<ind-def:textfilecontent54_object id="oval:gov.nist.usgcb.rhel:obj:340" version="1">
			<ind-def:path>/etc</ind-def:path>
			<ind-def:filename>vsftpd.conf</ind-def:filename>
			<ind-def:pattern operation="pattern match">local_enable[\s]*=[\s]*([^#\s]*)</ind-def:pattern>
			<ind-def:instance datatype="int">1</ind-def:instance>
		</ind-def:textfilecontent54_object>
		<ind-def:textfilecontent54_object id="oval:gov.nist.usgcb.rhel:obj:341" version="1">
			<ind-def:path>/etc</ind-def:path>
			<ind-def:filename>vsftpd.conf</ind-def:filename>
			<ind-def:pattern operation="pattern match">write_enable[\s]*=[\s]*([^#\s]*)</ind-def:pattern>
			<ind-def:instance datatype="int">1</ind-def:instance>
		</ind-def:textfilecontent54_object>
		<unix-def:runlevel_object id="oval:gov.nist.usgcb.rhel:obj:20322" version="1">
			<unix-def:service_name>httpd</unix-def:service_name>
			<unix-def:runlevel operation="equals">0</unix-def:runlevel>
		</unix-def:runlevel_object>
		<unix-def:runlevel_object id="oval:gov.nist.usgcb.rhel:obj:203221" version="1">
			<unix-def:service_name>httpd</unix-def:service_name>
			<unix-def:runlevel operation="equals">1</unix-def:runlevel>
		</unix-def:runlevel_object>
		<unix-def:runlevel_object id="oval:gov.nist.usgcb.rhel:obj:203222" version="1">
			<unix-def:service_name>httpd</unix-def:service_name>
			<unix-def:runlevel operation="equals">2</unix-def:runlevel>
		</unix-def:runlevel_object>
		<unix-def:runlevel_object id="oval:gov.nist.usgcb.rhel:obj:203223" version="1">
			<unix-def:service_name>httpd</unix-def:service_name>
			<unix-def:runlevel operation="equals">3</unix-def:runlevel>
		</unix-def:runlevel_object>
		<unix-def:runlevel_object id="oval:gov.nist.usgcb.rhel:obj:203224" version="1">
			<unix-def:service_name>httpd</unix-def:service_name>
			<unix-def:runlevel operation="equals">4</unix-def:runlevel>
		</unix-def:runlevel_object>
		<unix-def:runlevel_object id="oval:gov.nist.usgcb.rhel:obj:203225" version="1">
			<unix-def:service_name>httpd</unix-def:service_name>
			<unix-def:runlevel operation="equals">5</unix-def:runlevel>
		</unix-def:runlevel_object>
		<unix-def:runlevel_object id="oval:gov.nist.usgcb.rhel:obj:203226" version="1">
			<unix-def:service_name>httpd</unix-def:service_name>
			<unix-def:runlevel operation="equals">6</unix-def:runlevel>
		</unix-def:runlevel_object>
		<lin-def:rpminfo_object id="oval:gov.nist.usgcb.rhel:obj:20323" version="1">
			<lin-def:name>httpd</lin-def:name>
		</lin-def:rpminfo_object>
		<ind-def:textfilecontent54_object id="oval:gov.nist.usgcb.rhel:obj:20324" version="1">
			<ind-def:path>/etc/httpd/conf</ind-def:path>
			<ind-def:filename>httpd.conf</ind-def:filename>
			<ind-def:pattern operation="pattern match">ServerTokens[\s]+([^#\s]*)</ind-def:pattern>
			<ind-def:instance datatype="int">1</ind-def:instance>
		</ind-def:textfilecontent54_object>
		<ind-def:textfilecontent54_object id="oval:gov.nist.usgcb.rhel:obj:20325" version="1">
			<ind-def:path>/etc/httpd/conf</ind-def:path>
			<ind-def:filename>httpd.conf</ind-def:filename>
			<ind-def:pattern operation="pattern match">ServerSignature[\s]+([^#\s]*)</ind-def:pattern>
			<ind-def:instance datatype="int">1</ind-def:instance>
		</ind-def:textfilecontent54_object>
		<unix-def:file_object id="oval:gov.nist.usgcb.rhel:obj:20326" version="1" comment="/etc/httpd/conf">
			<unix-def:path>/etc/httpd/conf</unix-def:path>
			<unix-def:filename xsi:nil="true"/>
		</unix-def:file_object>
		<unix-def:file_object id="oval:gov.nist.usgcb.rhel:obj:20327" version="1" comment="/etc/httpd/conf/.*">
			<unix-def:path>/etc/httpd/conf</unix-def:path>
			<unix-def:filename operation="pattern match">.*</unix-def:filename>
		</unix-def:file_object>
		<unix-def:file_object id="oval:gov.nist.usgcb.rhel:obj:20328" version="1" comment="/usr/sbin/httpd">
			<unix-def:path>/usr/sbin</unix-def:path>
			<unix-def:filename>httpd</unix-def:filename>
		</unix-def:file_object>
		<unix-def:file_object id="oval:gov.nist.usgcb.rhel:obj:20329" version="1" comment="/etc/httpd/conf/.*">
			<unix-def:path>/etc/httpd/conf</unix-def:path>
			<unix-def:filename operation="pattern match">.*</unix-def:filename>
		</unix-def:file_object>
		<unix-def:file_object id="oval:gov.nist.usgcb.rhel:obj:20330" version="1" comment="/var/log/httpd">
			<unix-def:path>/var/log/httpd</unix-def:path>
			<unix-def:filename xsi:nil="true"/>
		</unix-def:file_object>
		<unix-def:runlevel_object id="oval:gov.nist.usgcb.rhel:obj:20331" version="1">
			<unix-def:service_name>dovecot</unix-def:service_name>
			<unix-def:runlevel operation="equals">0</unix-def:runlevel>
		</unix-def:runlevel_object>
		<unix-def:runlevel_object id="oval:gov.nist.usgcb.rhel:obj:203311" version="1">
			<unix-def:service_name>dovecot</unix-def:service_name>
			<unix-def:runlevel operation="equals">1</unix-def:runlevel>
		</unix-def:runlevel_object>
		<unix-def:runlevel_object id="oval:gov.nist.usgcb.rhel:obj:203312" version="1">
			<unix-def:service_name>dovecot</unix-def:service_name>
			<unix-def:runlevel operation="equals">2</unix-def:runlevel>
		</unix-def:runlevel_object>
		<unix-def:runlevel_object id="oval:gov.nist.usgcb.rhel:obj:203313" version="1">
			<unix-def:service_name>dovecot</unix-def:service_name>
			<unix-def:runlevel operation="equals">3</unix-def:runlevel>
		</unix-def:runlevel_object>
		<unix-def:runlevel_object id="oval:gov.nist.usgcb.rhel:obj:203314" version="1">
			<unix-def:service_name>dovecot</unix-def:service_name>
			<unix-def:runlevel operation="equals">4</unix-def:runlevel>
		</unix-def:runlevel_object>
		<unix-def:runlevel_object id="oval:gov.nist.usgcb.rhel:obj:203315" version="1">
			<unix-def:service_name>dovecot</unix-def:service_name>
			<unix-def:runlevel operation="equals">5</unix-def:runlevel>
		</unix-def:runlevel_object>
		<unix-def:runlevel_object id="oval:gov.nist.usgcb.rhel:obj:203316" version="1">
			<unix-def:service_name>dovecot</unix-def:service_name>
			<unix-def:runlevel operation="equals">6</unix-def:runlevel>
		</unix-def:runlevel_object>
		<lin-def:rpminfo_object id="oval:gov.nist.usgcb.rhel:obj:20332" version="1">
			<lin-def:name>dovecot</lin-def:name>
		</lin-def:rpminfo_object>
		<ind-def:textfilecontent54_object id="oval:gov.nist.usgcb.rhel:obj:20333" version="1">
			<ind-def:path>/etc</ind-def:path>
			<ind-def:filename>dovecot.conf</ind-def:filename>
			<ind-def:pattern operation="pattern match">protocols[\s]*=.*imaps</ind-def:pattern>
			<ind-def:instance datatype="int">1</ind-def:instance>
		</ind-def:textfilecontent54_object>
		<ind-def:textfilecontent54_object id="oval:gov.nist.usgcb.rhel:obj:20334" version="1">
			<ind-def:path>/etc</ind-def:path>
			<ind-def:filename>dovecot.conf</ind-def:filename>
			<ind-def:pattern operation="pattern match">protocols[\s]*=.*pop3s</ind-def:pattern>
			<ind-def:instance datatype="int">1</ind-def:instance>
		</ind-def:textfilecontent54_object>
		<ind-def:textfilecontent54_object id="oval:gov.nist.usgcb.rhel:obj:20335" version="1">
			<ind-def:path>/etc</ind-def:path>
			<ind-def:filename>dovecot.conf</ind-def:filename>
			<ind-def:pattern operation="pattern match">protocols[\s]*=.*pop3</ind-def:pattern>
			<ind-def:instance datatype="int">1</ind-def:instance>
		</ind-def:textfilecontent54_object>
		<ind-def:textfilecontent54_object id="oval:gov.nist.usgcb.rhel:obj:20336" version="1">
			<ind-def:path>/etc</ind-def:path>
			<ind-def:filename>dovecot.conf</ind-def:filename>
			<ind-def:pattern operation="pattern match">protocols[\s]*=.*imap</ind-def:pattern>
			<ind-def:instance datatype="int">1</ind-def:instance>
		</ind-def:textfilecontent54_object>
		<ind-def:textfilecontent54_object id="oval:gov.nist.usgcb.rhel:obj:20337" version="1">
			<ind-def:path>/etc</ind-def:path>
			<ind-def:filename>dovecot.conf</ind-def:filename>
			<ind-def:pattern operation="pattern match">disable_plaintext_auth[\s]*=[\s]*([^#\s]*)</ind-def:pattern>
			<ind-def:instance datatype="int">1</ind-def:instance>
		</ind-def:textfilecontent54_object>
		<ind-def:textfilecontent54_object id="oval:gov.nist.usgcb.rhel:obj:20338" version="1">
			<ind-def:path>/etc</ind-def:path>
			<ind-def:filename>dovecot.conf</ind-def:filename>
			<ind-def:pattern operation="pattern match">mail_drop_priv_before_exec[\s]*=[\s]*([^#\s]*)</ind-def:pattern>
			<ind-def:instance datatype="int">1</ind-def:instance>
		</ind-def:textfilecontent54_object>
		<ind-def:textfilecontent54_object id="oval:gov.nist.usgcb.rhel:obj:20339" version="1">
			<ind-def:path>/etc</ind-def:path>
			<ind-def:filename>dovecot.conf</ind-def:filename>
			<ind-def:pattern operation="pattern match">login_process_per_connection[\s]*=[\s]*([^#\s]*)</ind-def:pattern>
			<ind-def:instance datatype="int">1</ind-def:instance>
		</ind-def:textfilecontent54_object>
		<unix-def:runlevel_object id="oval:gov.nist.usgcb.rhel:obj:203400" version="1">
			<unix-def:service_name>smb</unix-def:service_name>
			<unix-def:runlevel operation="equals">on</unix-def:runlevel>
		</unix-def:runlevel_object>
		<unix-def:runlevel_object id="oval:gov.nist.usgcb.rhel:obj:2034001" version="1">
			<unix-def:service_name>smb</unix-def:service_name>
			<unix-def:runlevel operation="equals">1</unix-def:runlevel>
		</unix-def:runlevel_object>
		<unix-def:runlevel_object id="oval:gov.nist.usgcb.rhel:obj:2034002" version="1">
			<unix-def:service_name>smb</unix-def:service_name>
			<unix-def:runlevel operation="equals">2</unix-def:runlevel>
		</unix-def:runlevel_object>
		<unix-def:runlevel_object id="oval:gov.nist.usgcb.rhel:obj:2034003" version="1">
			<unix-def:service_name>smb</unix-def:service_name>
			<unix-def:runlevel operation="equals">3</unix-def:runlevel>
		</unix-def:runlevel_object>
		<unix-def:runlevel_object id="oval:gov.nist.usgcb.rhel:obj:2034004" version="1">
			<unix-def:service_name>smb</unix-def:service_name>
			<unix-def:runlevel operation="equals">4</unix-def:runlevel>
		</unix-def:runlevel_object>
		<unix-def:runlevel_object id="oval:gov.nist.usgcb.rhel:obj:2034005" version="1">
			<unix-def:service_name>smb</unix-def:service_name>
			<unix-def:runlevel operation="equals">5</unix-def:runlevel>
		</unix-def:runlevel_object>
		<unix-def:runlevel_object id="oval:gov.nist.usgcb.rhel:obj:2034006" version="1">
			<unix-def:service_name>smb</unix-def:service_name>
			<unix-def:runlevel operation="equals">6</unix-def:runlevel>
		</unix-def:runlevel_object>
		<lin-def:rpminfo_object id="oval:gov.nist.usgcb.rhel:obj:203401" version="1">
			<lin-def:name>samba</lin-def:name>
		</lin-def:rpminfo_object>
		<ind-def:textfilecontent54_object id="oval:gov.nist.usgcb.rhel:obj:203403" version="1">
			<ind-def:path>/etc/samba</ind-def:path>
			<ind-def:filename>smb.conf</ind-def:filename>
			<ind-def:pattern operation="pattern match">^[\s]*guest[\s]+ok[\s]*=[\s]yes</ind-def:pattern>
			<ind-def:instance datatype="int">1</ind-def:instance>
		</ind-def:textfilecontent54_object>
		<ind-def:textfilecontent54_object id="oval:gov.nist.usgcb.rhel:obj:2034010" version="1">
			<ind-def:path>/etc/samba</ind-def:path>
			<ind-def:filename>smb.conf</ind-def:filename>
			<ind-def:pattern operation="pattern match">^[\s]*client[\s]+signing[\s]*=[\s]mandatory</ind-def:pattern>
			<ind-def:instance datatype="int">1</ind-def:instance>
		</ind-def:textfilecontent54_object>
		<ind-def:textfilecontent54_object id="oval:gov.nist.usgcb.rhel:obj:20340111" version="1">
			<ind-def:path>/etc</ind-def:path>
			<ind-def:filename>fstab</ind-def:filename>
			<ind-def:pattern operation="pattern match">^[\s]*[\S]+[\s]+[\S]+[\s]+cifs[\s]+([\S]+)</ind-def:pattern>
			<ind-def:instance datatype="int">1</ind-def:instance>
		</ind-def:textfilecontent54_object>
		<ind-def:textfilecontent54_object id="oval:gov.nist.usgcb.rhel:obj:20340112" version="1">
			<ind-def:path>/etc</ind-def:path>
			<ind-def:filename>mtab</ind-def:filename>
			<ind-def:pattern operation="pattern match">^[\s]*[\S]+[\s]+[\S]+[\s]+cifs[\s]+([\S]+)</ind-def:pattern>
			<ind-def:instance datatype="int">1</ind-def:instance>
		</ind-def:textfilecontent54_object>
		<unix-def:runlevel_object id="oval:gov.nist.usgcb.rhel:obj:20341" version="1">
			<unix-def:service_name>squid</unix-def:service_name>
			<unix-def:runlevel operation="equals">0</unix-def:runlevel>
		</unix-def:runlevel_object>
		<unix-def:runlevel_object id="oval:gov.nist.usgcb.rhel:obj:203411" version="1">
			<unix-def:service_name>squid</unix-def:service_name>
			<unix-def:runlevel operation="equals">1</unix-def:runlevel>
		</unix-def:runlevel_object>
		<unix-def:runlevel_object id="oval:gov.nist.usgcb.rhel:obj:203412" version="1">
			<unix-def:service_name>squid</unix-def:service_name>
			<unix-def:runlevel operation="equals">2</unix-def:runlevel>
		</unix-def:runlevel_object>
		<unix-def:runlevel_object id="oval:gov.nist.usgcb.rhel:obj:203413" version="1">
			<unix-def:service_name>squid</unix-def:service_name>
			<unix-def:runlevel operation="equals">3</unix-def:runlevel>
		</unix-def:runlevel_object>
		<unix-def:runlevel_object id="oval:gov.nist.usgcb.rhel:obj:203414" version="1">
			<unix-def:service_name>squid</unix-def:service_name>
			<unix-def:runlevel operation="equals">4</unix-def:runlevel>
		</unix-def:runlevel_object>
		<unix-def:runlevel_object id="oval:gov.nist.usgcb.rhel:obj:203415" version="1">
			<unix-def:service_name>squid</unix-def:service_name>
			<unix-def:runlevel operation="equals">5</unix-def:runlevel>
		</unix-def:runlevel_object>
		<unix-def:runlevel_object id="oval:gov.nist.usgcb.rhel:obj:203416" version="1">
			<unix-def:service_name>squid</unix-def:service_name>
			<unix-def:runlevel operation="equals">6</unix-def:runlevel>
		</unix-def:runlevel_object>
		<lin-def:rpminfo_object id="oval:gov.nist.usgcb.rhel:obj:20342" version="1">
			<lin-def:name>squid</lin-def:name>
		</lin-def:rpminfo_object>
		<ind-def:textfilecontent54_object id="oval:gov.nist.usgcb.rhel:obj:20343" version="1">
			<ind-def:path>/etc/squid</ind-def:path>
			<ind-def:filename>squid.conf</ind-def:filename>
			<ind-def:pattern operation="pattern match">ftp_passive[\s]+([^#\s]*)</ind-def:pattern>
			<ind-def:instance datatype="int">1</ind-def:instance>
		</ind-def:textfilecontent54_object>
		<ind-def:textfilecontent54_object id="oval:gov.nist.usgcb.rhel:obj:20346" version="1">
			<ind-def:path>/etc/squid</ind-def:path>
			<ind-def:filename>squid.conf</ind-def:filename>
			<ind-def:pattern operation="pattern match">request_header_max_size[\s]+([^#\s]*)</ind-def:pattern>
			<ind-def:instance datatype="int">1</ind-def:instance>
		</ind-def:textfilecontent54_object>
		<ind-def:textfilecontent54_object id="oval:gov.nist.usgcb.rhel:obj:20345" version="1">
			<ind-def:path>/etc/squid</ind-def:path>
			<ind-def:filename>squid.conf</ind-def:filename>
			<ind-def:pattern operation="pattern match">check_hostnames[\s]+([^#\s]*)</ind-def:pattern>
			<ind-def:instance datatype="int">1</ind-def:instance>
		</ind-def:textfilecontent54_object>
		<ind-def:textfilecontent54_object id="oval:gov.nist.usgcb.rhel:obj:20350" version="1">
			<ind-def:path>/etc/squid</ind-def:path>
			<ind-def:filename>squid.conf</ind-def:filename>
			<ind-def:pattern operation="pattern match">ignore_unknown_nameservers[\s][\s]([^#\s]*)</ind-def:pattern>
			<ind-def:instance datatype="int">1</ind-def:instance>
		</ind-def:textfilecontent54_object>
		<ind-def:textfilecontent54_object id="oval:gov.nist.usgcb.rhel:obj:20347" version="1">
			<ind-def:path>/etc/squid</ind-def:path>
			<ind-def:filename>squid.conf</ind-def:filename>
			<ind-def:pattern operation="pattern match">reply_header_max_size[\s]+([^#]\s*)</ind-def:pattern>
			<ind-def:instance datatype="int">1</ind-def:instance>
		</ind-def:textfilecontent54_object>
		<ind-def:textfilecontent54_object id="oval:gov.nist.usgcb.rhel:obj:20348" version="1">
			<ind-def:path>/etc/squid</ind-def:path>
			<ind-def:filename>squid.conf</ind-def:filename>
			<ind-def:pattern operation="pattern match">cache_effective_user[\s]+([^#\s]*)</ind-def:pattern>
			<ind-def:instance datatype="int">1</ind-def:instance>
		</ind-def:textfilecontent54_object>
		<ind-def:textfilecontent54_object id="oval:gov.nist.usgcb.rhel:obj:20344" version="1">
			<ind-def:path>/etc/squid</ind-def:path>
			<ind-def:filename>squid.conf</ind-def:filename>
			<ind-def:pattern operation="pattern match">ftp_sanitycheck[\s]+([^#]*)</ind-def:pattern>
			<ind-def:instance datatype="int">1</ind-def:instance>
		</ind-def:textfilecontent54_object>
		<ind-def:textfilecontent54_object id="oval:gov.nist.usgcb.rhel:obj:20349" version="1">
			<ind-def:path>/etc/squid</ind-def:path>
			<ind-def:filename>squid.conf</ind-def:filename>
			<ind-def:pattern operation="pattern match">cache_effective_group[\s]+([^#]*)</ind-def:pattern>
			<ind-def:instance datatype="int">1</ind-def:instance>
		</ind-def:textfilecontent54_object>
		<ind-def:textfilecontent54_object id="oval:gov.nist.usgcb.rhel:obj:20353" version="1">
			<ind-def:path>/etc/squid</ind-def:path>
			<ind-def:filename>squid.conf</ind-def:filename>
			<ind-def:pattern operation="pattern match">forwarded_for[\s]+([^#]*)</ind-def:pattern>
			<ind-def:instance datatype="int">1</ind-def:instance>
		</ind-def:textfilecontent54_object>
		<ind-def:textfilecontent54_object id="oval:gov.nist.usgcb.rhel:obj:20354" version="1">
			<ind-def:path>/etc/squid</ind-def:path>
			<ind-def:filename>squid.conf</ind-def:filename>
			<ind-def:pattern operation="pattern match">log_mime_hdrs[\s]+([^#]*)</ind-def:pattern>
			<ind-def:instance datatype="int">1</ind-def:instance>
		</ind-def:textfilecontent54_object>
		<ind-def:textfilecontent54_object id="oval:gov.nist.usgcb.rhel:obj:20351" version="1">
			<ind-def:path>/etc/squid</ind-def:path>
			<ind-def:filename>squid.conf</ind-def:filename>
			<ind-def:pattern operation="pattern match">allow_underscore[\s]+([^#]*)</ind-def:pattern>
			<ind-def:instance datatype="int">1</ind-def:instance>
		</ind-def:textfilecontent54_object>
		<ind-def:textfilecontent54_object id="oval:gov.nist.usgcb.rhel:obj:20352" version="1">
			<ind-def:path>/etc/squid</ind-def:path>
			<ind-def:filename>squid.conf</ind-def:filename>
			<ind-def:pattern operation="pattern match">http_suppress_version_string[\s]+([^#]*)</ind-def:pattern>
			<ind-def:instance datatype="int">1</ind-def:instance>
		</ind-def:textfilecontent54_object>
		<unix-def:runlevel_object id="oval:gov.nist.usgcb.rhel:obj:20365" version="1">
			<unix-def:service_name>snmpd</unix-def:service_name>
			<unix-def:runlevel operation="equals">0</unix-def:runlevel>
		</unix-def:runlevel_object>
		<unix-def:runlevel_object id="oval:gov.nist.usgcb.rhel:obj:203651" version="1">
			<unix-def:service_name>snmpd</unix-def:service_name>
			<unix-def:runlevel operation="equals">1</unix-def:runlevel>
		</unix-def:runlevel_object>
		<unix-def:runlevel_object id="oval:gov.nist.usgcb.rhel:obj:203652" version="1">
			<unix-def:service_name>snmpd</unix-def:service_name>
			<unix-def:runlevel operation="equals">2</unix-def:runlevel>
		</unix-def:runlevel_object>
		<unix-def:runlevel_object id="oval:gov.nist.usgcb.rhel:obj:203653" version="1">
			<unix-def:service_name>snmpd</unix-def:service_name>
			<unix-def:runlevel operation="equals">3</unix-def:runlevel>
		</unix-def:runlevel_object>
		<unix-def:runlevel_object id="oval:gov.nist.usgcb.rhel:obj:203654" version="1">
			<unix-def:service_name>snmpd</unix-def:service_name>
			<unix-def:runlevel operation="equals">4</unix-def:runlevel>
		</unix-def:runlevel_object>
		<unix-def:runlevel_object id="oval:gov.nist.usgcb.rhel:obj:203655" version="1">
			<unix-def:service_name>snmpd</unix-def:service_name>
			<unix-def:runlevel operation="equals">5</unix-def:runlevel>
		</unix-def:runlevel_object>
		<unix-def:runlevel_object id="oval:gov.nist.usgcb.rhel:obj:203656" version="1">
			<unix-def:service_name>snmpd</unix-def:service_name>
			<unix-def:runlevel operation="equals">6</unix-def:runlevel>
		</unix-def:runlevel_object>
		<lin-def:rpminfo_object id="oval:gov.nist.usgcb.rhel:obj:20366" version="1">
			<lin-def:name>net-snmp</lin-def:name>
		</lin-def:rpminfo_object>
		<!-- Added objects -->
		<ind-def:textfilecontent54_object id="oval:gov.nist.usgcb.rhel:obj:100000" version="1">
			<ind-def:filepath>/etc/pam.d/system-auth</ind-def:filepath>
			<ind-def:pattern operation="pattern match">^[\s]*password[\s]+(?:(?:required)|(?:requisite))[\s]+[\w_\.\-=\s]+[\s]lcredit=(-?[[:digit:]]+)(?:[\s]|$)</ind-def:pattern>
			<ind-def:instance operation="greater than or equal" datatype="int">1</ind-def:instance>
		</ind-def:textfilecontent54_object>
		<ind-def:textfilecontent54_object id="oval:gov.nist.usgcb.rhel:obj:100001" version="1">
			<ind-def:filepath>/etc/pam.d/system-auth</ind-def:filepath>
			<ind-def:pattern operation="pattern match">^[\s]*password[\s]+(?:(?:required)|(?:requisite))[\s]+[\w_\.\-=\s]+[\s]minlen=([[:digit:]]+)(?:[\s]|$)</ind-def:pattern>
			<ind-def:instance operation="greater than or equal" datatype="int">1</ind-def:instance>
		</ind-def:textfilecontent54_object>
		<ind-def:textfilecontent54_object id="oval:gov.nist.usgcb.rhel:obj:100002" version="1">
			<ind-def:filepath>/etc/pam.d/system-auth</ind-def:filepath>
			<ind-def:pattern operation="pattern match">^[\s]*password[\s]+(?:(?:required)|(?:requisite))[\s]+[\w_\.\-=\s]+[\s]retry=([[:digit:]]+)(?:[\s]|$)</ind-def:pattern>
			<ind-def:instance operation="greater than or equal" datatype="int">1</ind-def:instance>
		</ind-def:textfilecontent54_object>
		<ind-def:textfilecontent54_object id="oval:gov.nist.usgcb.rhel:obj:100003" version="1">
			<ind-def:filepath>/etc/pam.d/system-auth</ind-def:filepath>
			<ind-def:pattern operation="pattern match">^[\s]*password[\s]+(?:(?:required)|(?:requisite))[\s]+[\w_\.\-=\s]+[\s]ocredit=(-?[[:digit:]]+)(?:[\s]|$)</ind-def:pattern>
			<ind-def:instance operation="greater than or equal" datatype="int">1</ind-def:instance>
		</ind-def:textfilecontent54_object>
		<ind-def:textfilecontent54_object id="oval:gov.nist.usgcb.rhel:obj:141130" version="1">
			<ind-def:filepath>/etc/pam.d/system-auth</ind-def:filepath>
			<ind-def:pattern operation="pattern match">^[\s]*password[\s]+(?:(?:required)|(?:requisite))[\s]+[\w_\.\-=\s]+[\s]dcredit=(-?\d+)(?:[\s]|$)</ind-def:pattern>
			<ind-def:instance operation="less than or equal" datatype="int">1</ind-def:instance>
		</ind-def:textfilecontent54_object>
		<ind-def:textfilecontent54_object id="oval:gov.nist.usgcb.rhel:obj:100005" version="1">
			<ind-def:filepath>/etc/pam.d/system-auth</ind-def:filepath>
			<ind-def:pattern operation="pattern match">^[\s]*password[\s]+(?:(?:required)|(?:requisite))[\s]+[\w_\.\-=\s]+[\s]ucredit=(-?[[:digit:]]+)(?:[\s]|$)</ind-def:pattern>
			<ind-def:instance operation="greater than or equal" datatype="int">1</ind-def:instance>
		</ind-def:textfilecontent54_object>
		<ind-def:textfilecontent54_object id="oval:gov.nist.usgcb.rhel:obj:100006" version="1">
			<ind-def:filepath>/etc/pam.d/system-auth</ind-def:filepath>
			<ind-def:pattern operation="pattern match">^[\s]*password[\s]+(?:(?:required)|(?:requisite))[\s]+[\w_\.\-=\s]+[\s]difok=([[:digit:]]+)(?:[\s]|$)</ind-def:pattern>
			<ind-def:instance operation="greater than or equal" datatype="int">1</ind-def:instance>
		</ind-def:textfilecontent54_object>
		<lin-def:rpminfo_object id="oval:gov.nist.usgcb.rhel:obj:573891" version="1" comment="CCE-14068-1">
			<lin-def:name>postfix</lin-def:name>
		</lin-def:rpminfo_object>
		<lin-def:rpminfo_object id="oval:gov.nist.usgcb.rhel:obj:573892" version="1" comment="CCE-14495-6">
			<lin-def:name>sendmail</lin-def:name>
		</lin-def:rpminfo_object>
		<lin-def:rpminfo_object id="oval:gov.nist.usgcb.rhel:obj:573893" version="1" comment="CCE-14825-4">
			<lin-def:name>isdn4k-utils</lin-def:name>
		</lin-def:rpminfo_object>
		<lin-def:rpminfo_object id="oval:gov.nist.usgcb.rhel:obj:573894" version="1" comment="CCE-18031-5">
			<lin-def:name>ipsec-tools</lin-def:name>
		</lin-def:rpminfo_object>
		<lin-def:rpminfo_object id="oval:gov.nist.usgcb.rhel:obj:573895" version="1" comment="CCE-17250-2">
			<lin-def:name>pam_ccreds</lin-def:name>
		</lin-def:rpminfo_object>
		<lin-def:rpminfo_object id="oval:gov.nist.usgcb.rhel:obj:573896" version="1" comment="CCE-18151-1">
			<lin-def:name>talk-server</lin-def:name>
		</lin-def:rpminfo_object>
		<lin-def:rpminfo_object id="oval:gov.nist.usgcb.rhel:obj:573897" version="1" comment="CCE-18200-6">
			<lin-def:name>talk</lin-def:name>
		</lin-def:rpminfo_object>
		<lin-def:rpminfo_object id="oval:gov.nist.usgcb.rhel:obj:573898" version="1" comment="CCE-17504-2">
			<lin-def:name>irda-utils</lin-def:name>
		</lin-def:rpminfo_object>
		<ind-def:textfilecontent54_object id="oval:gov.nist.usgcb.rhel:obj:43130" version="1" comment="TODO::INSERT">
			<ind-def:path>/etc/sysconfig</ind-def:path>
			<ind-def:filename>network</ind-def:filename>
			<ind-def:pattern operation="pattern match">^IPV6_AUTOCONF=no$</ind-def:pattern>
			<ind-def:instance datatype="int">1</ind-def:instance>
		</ind-def:textfilecontent54_object>
		<ind-def:textfilecontent54_object id="oval:gov.nist.usgcb.rhel:obj:42690" version="1" comment="TODO::INSERT">
			<ind-def:path>/etc/sysconfig</ind-def:path>
			<ind-def:filename>network</ind-def:filename>
			<ind-def:pattern operation="pattern match">^IPV6_AUTOCONF=no$</ind-def:pattern>
			<ind-def:instance datatype="int">1</ind-def:instance>
		</ind-def:textfilecontent54_object>
		<ind-def:textfilecontent54_object id="oval:gov.nist.usgcb.rhel:obj:150180" version="1" comment="TODO::INSERT">
			<ind-def:path>/etc/postfix</ind-def:path>
			<ind-def:filename>main.cf</ind-def:filename>
			<ind-def:pattern operation="pattern match">^inet_interfaces = localhost$</ind-def:pattern>
			<ind-def:instance datatype="int">1</ind-def:instance>
		</ind-def:textfilecontent54_object>
		<ind-def:textfilecontent54_object id="oval:gov.nist.usgcb.rhel:obj:36490" version="1" comment="TODO::INSERT">
			<ind-def:path>/etc/sysconfig</ind-def:path>
			<ind-def:filename>iptables</ind-def:filename>
			<ind-def:pattern operation="pattern match">^-A RH-Firewall-1-INPUT -p (?:(?:udp)|(?:tcp)) -m (?:(?:udp)|(?:tcp)) --dport 631 -j ACCEPT$</ind-def:pattern>
			<ind-def:instance datatype="int">1</ind-def:instance>
		</ind-def:textfilecontent54_object>
		<ind-def:textfilecontent54_object id="oval:gov.nist.usgcb.rhel:obj:36491" version="1" comment="TODO::INSERT">
			<ind-def:path>etc/sysconfig</ind-def:path>
			<ind-def:filename>ip6tables</ind-def:filename>
			<ind-def:pattern operation="pattern match">^-A RH-Firewall-1-INPUT -p (?:(?:udp)|(?:tcp)) -m (?:(?:udp)|(?:tcp)) --dport 631 -j ACCEPT$</ind-def:pattern>
			<ind-def:instance datatype="int">1</ind-def:instance>
		</ind-def:textfilecontent54_object>
		<ind-def:textfilecontent54_object id="oval:gov.nist.usgcb.rhel:obj:180370" version="1" comment="TODO::INSERT">
			<ind-def:path>/etc/sysconfig</ind-def:path>
			<ind-def:filename>iptables</ind-def:filename>
			<ind-def:pattern operation="pattern match">^-A RH-Firewall-1-INPUT -p udp --dport 5353 -d 224.0.0.251 -j ACCEPT$</ind-def:pattern>
			<ind-def:instance datatype="int">1</ind-def:instance>
		</ind-def:textfilecontent54_object>
		<ind-def:textfilecontent54_object id="oval:gov.nist.usgcb.rhel:obj:180371" version="1" comment="TODO::INSERT">
			<ind-def:path>/etc/sysconfig</ind-def:path>
			<ind-def:filename>ip6tables</ind-def:filename>
			<ind-def:pattern operation="pattern match">^-A RH-Firewall-1-INPUT -p udp --dport 5353 -d 224.0.0.251 -j ACCEPT$</ind-def:pattern>
			<ind-def:instance datatype="int">1</ind-def:instance>
		</ind-def:textfilecontent54_object>
		<ind-def:textfilecontent54_object id="oval:gov.nist.usgcb.rhel:obj:178160" version="1" comment="TODO::INSERT">
			<ind-def:path>/etc</ind-def:path>
			<ind-def:filename>libuser.conf</ind-def:filename>
			<ind-def:pattern operation="pattern match">^login_defs = /etc/login.defs$</ind-def:pattern>
			<ind-def:instance datatype="int">1</ind-def:instance>
		</ind-def:textfilecontent54_object>
		<ind-def:textfilecontent54_object id="oval:gov.nist.usgcb.rhel:obj:140630" version="1" comment="TODO::INSERT">
			<ind-def:filepath>/etc/pam.d/system-auth</ind-def:filepath>
			<ind-def:pattern operation="pattern match">^password\s+sufficient\s+pam_unix.so\s+sha512($|(\s.*$))</ind-def:pattern>
			<ind-def:instance datatype="int">1</ind-def:instance>
		</ind-def:textfilecontent54_object>
		<ind-def:textfilecontent54_object id="oval:gov.nist.usgcb.rhel:obj:140631" version="1" comment="TODO::INSERT">
			<ind-def:path>/etc</ind-def:path>
			<ind-def:filename>login.defs</ind-def:filename>
			<ind-def:pattern operation="pattern match">^MD5_CRYPT_ENAB no$</ind-def:pattern>
			<ind-def:instance datatype="int">1</ind-def:instance>
		</ind-def:textfilecontent54_object>
		<ind-def:textfilecontent54_object id="oval:gov.nist.usgcb.rhel:obj:140632" version="1" comment="TODO::INSERT">
			<ind-def:path>/etc</ind-def:path>
			<ind-def:filename>login.defs</ind-def:filename>
			<ind-def:pattern operation="pattern match">^ENCRYPT_METHOD SHA512$</ind-def:pattern>
			<ind-def:instance datatype="int">1</ind-def:instance>
		</ind-def:textfilecontent54_object>
		<unix-def:file_object version="1" id="oval:gov.nist.usgcb.rhel:obj:42760">
			<unix-def:path>/proc/net</unix-def:path>
			<unix-def:filename xsi:nil="false">wireless</unix-def:filename>
		</unix-def:file_object>
		<lin-def:partition_object version="1" id="oval:gov.nist.usgcb.rhel:obj:144120">
			<lin-def:mount_point>/tmp</lin-def:mount_point>
		</lin-def:partition_object>
		<ind-def:textfilecontent54_object id="oval:gov.nist.usgcb.rhel:obj:99900" version="1" comment="Value of INACTIVE in /etc/default/useradd">
			<ind-def:filepath>/etc/default/useradd</ind-def:filepath>
			<ind-def:pattern operation="pattern match">^INACTIVE=(-?\d+)$</ind-def:pattern>
			<ind-def:instance datatype="int">1</ind-def:instance>
		</ind-def:textfilecontent54_object>
	</objects>
	<states>
		<!-- OVAL Repository defintion states -->
		<uname_state id="oval:org.mitre.oval:ste:3081" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
			<processor_type>x86_64</processor_type>
		</uname_state>
		<rpminfo_state id="oval:org.mitre.oval:ste:11314" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
			<version operation="pattern match">^.*5.</version>
		</rpminfo_state>
		<!-- end OVAL Reposition definition states -->
		<family_state id="oval:gov.nist.usgcb.rhel:ste:20001" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
			<family>unix</family>
		</family_state>
		<rpminfo_state id="oval:gov.nist.usgcb.rhel:ste:10000" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
			<version operation="pattern match">^5[^\d]</version>
		</rpminfo_state>
		<rpminfo_state id="oval:gov.nist.usgcb.rhel:ste:10001" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
			<release operation="pattern match">^5\.[1-9]</release>
		</rpminfo_state>
		<rpminfo_state id="oval:gov.nist.usgcb.rhel:ste:10002" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
			<release operation="pattern match">^5\.[2-9]</release>
		</rpminfo_state>
		<rpminfo_state id="oval:gov.nist.usgcb.rhel:ste:10003" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
			<release operation="pattern match">^5\.[3-9]</release>
		</rpminfo_state>
		<rpminfo_state id="oval:gov.nist.usgcb.rhel:ste:10004" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
			<release operation="pattern match">^5\.[4-9]</release>
		</rpminfo_state>
		<rpminfo_state id="oval:gov.nist.usgcb.rhel:ste:10005" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
			<release operation="pattern match">^5\.[5-9]</release>
		</rpminfo_state>
		<rpminfo_state id="oval:gov.nist.usgcb.rhel:ste:10006" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
			<release operation="pattern match">^5\.[6-9]</release>
		</rpminfo_state>
		<rpminfo_state id="oval:gov.nist.usgcb.rhel:ste:30000" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
			<version operation="pattern match">^5Desktop</version>
		</rpminfo_state>
		<rpminfo_state id="oval:gov.nist.usgcb.rhel:ste:40000" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
			<version operation="pattern match">^5Workstation</version>
		</rpminfo_state>
		<rpminfo_state id="oval:gov.nist.usgcb.rhel:ste:50000" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
			<version operation="pattern match">^5Server</version>
		</rpminfo_state>
		<ind-def:textfilecontent54_state id="oval:gov.nist.usgcb.rhel:ste:20000" version="2" comment="/tmp mount point is defined">
			<ind-def:subexpression datatype="string" operation="equals" entity_check="at least one">/tmp</ind-def:subexpression>
		</ind-def:textfilecontent54_state>
		<ind-def:textfilecontent54_state id="oval:gov.nist.usgcb.rhel:ste:20002" version="2" comment="/var mount point is defined">
			<ind-def:subexpression datatype="string" operation="equals" entity_check="at least one">/var</ind-def:subexpression>
		</ind-def:textfilecontent54_state>
		<ind-def:textfilecontent54_state id="oval:gov.nist.usgcb.rhel:ste:20004" version="2" comment="/var/log mount point is defined">
			<ind-def:subexpression datatype="string" operation="equals" entity_check="at least one">/var/log</ind-def:subexpression>
		</ind-def:textfilecontent54_state>
		<ind-def:textfilecontent54_state id="oval:gov.nist.usgcb.rhel:ste:20005" version="2" comment="/var/log/audit mount point is defined">
			<ind-def:subexpression datatype="string" operation="equals" entity_check="at least one">/var/log/audit</ind-def:subexpression>
		</ind-def:textfilecontent54_state>
		<ind-def:textfilecontent54_state id="oval:gov.nist.usgcb.rhel:ste:20006" version="2" comment="/home mount point is defined">
			<ind-def:subexpression datatype="string" operation="equals" entity_check="at least one">/home</ind-def:subexpression>
		</ind-def:textfilecontent54_state>
		<lin-def:rpminfo_state id="oval:gov.nist.usgcb.rhel:ste:200065" version="1" comment="gpg(Red Hat, Inc. (release key) &lt;security@redhat.com&gt;)">
			<lin-def:release>45761324</lin-def:release>
			<lin-def:version>37017186</lin-def:version>
		</lin-def:rpminfo_state>
		<ind-def:textfilecontent54_state id="oval:gov.nist.usgcb.rhel:ste:20010" version="2" comment="Expected value of gpgcheck should be enabled">
			<ind-def:instance datatype="int">1</ind-def:instance>
			<ind-def:subexpression datatype="int" operation="equals" entity_check="at least one">1</ind-def:subexpression>
		</ind-def:textfilecontent54_state>
		<ind-def:textfilecontent54_state id="oval:gov.nist.usgcb.rhel:ste:20011" version="1" comment="Expected value of gpgcheck should be disabled because test is none exist">
			<ind-def:subexpression datatype="int" operation="equals" entity_check="at least one">0</ind-def:subexpression>
		</ind-def:textfilecontent54_state>
		<ind-def:textfilecontent54_state id="oval:gov.nist.usgcb.rhel:ste:20012" version="1" comment="Expected value of repo_gpgcheck should be enabled">
			<ind-def:subexpression datatype="int" operation="equals" entity_check="at least one">1</ind-def:subexpression>
		</ind-def:textfilecontent54_state>
		<ind-def:textfilecontent54_state id="oval:gov.nist.usgcb.rhel:ste:20013" version="1" comment="Expected value of repo_gpgcheck should be disabled because test is none exist">
			<ind-def:subexpression datatype="int" operation="equals" entity_check="at least one">0</ind-def:subexpression>
		</ind-def:textfilecontent54_state>
		<!--
            <ind-def:textfilecontent54_state id="oval:gov.nist.usgcb.rhel:ste:200161" version="1" comment="ext2 and ext3 filing systems">
                  <ind-def:instance datatype="int">1</ind-def:instance>
                  <ind-def:subexpression datatype="string" operation="pattern match" entity_check="all">ext[2-3]</ind-def:subexpression>
            </ind-def:textfilecontent54_state>
            <ind-def:textfilecontent54_state id="oval:gov.nist.usgcb.rhel:ste:200162" version="1" comment="All mount points other than /">
                  <ind-def:instance datatype="int">2</ind-def:instance>
                  <ind-def:subexpression datatype="string" operation="pattern match" entity_check="all">[^/]</ind-def:subexpression>
            </ind-def:textfilecontent54_state>
            -->
		<ind-def:textfilecontent54_state id="oval:gov.nist.usgcb.rhel:ste:200163" version="1" comment="Check for the nodev option">
			<ind-def:instance datatype="int">1</ind-def:instance>
			<ind-def:subexpression datatype="string" operation="pattern match" entity_check="all">(.*,)?nodev.*</ind-def:subexpression>
		</ind-def:textfilecontent54_state>
		<ind-def:xmlfilecontent_state id="oval:gov.nist.usgcb.rhel:ste:20026" version="1">
			<ind-def:value_of operation="equals">false</ind-def:value_of>
		</ind-def:xmlfilecontent_state>
		<ind-def:textfilecontent54_state id="oval:gov.nist.usgcb.rhel:ste:20027" version="1" comment="Check for the cramfs file system">
			<ind-def:subexpression datatype="string" entity_check="all">cramfs</ind-def:subexpression>
		</ind-def:textfilecontent54_state>
		<ind-def:textfilecontent54_state id="oval:gov.nist.usgcb.rhel:ste:20028" version="1" comment="Check for the freevxfs file system">
			<ind-def:subexpression datatype="string" entity_check="all">freevxfs</ind-def:subexpression>
		</ind-def:textfilecontent54_state>
		<ind-def:textfilecontent54_state id="oval:gov.nist.usgcb.rhel:ste:20029" version="1" comment="Check for the jffs2 file system">
			<ind-def:subexpression datatype="string" entity_check="all">jffs2</ind-def:subexpression>
		</ind-def:textfilecontent54_state>
		<ind-def:textfilecontent54_state id="oval:gov.nist.usgcb.rhel:ste:20030" version="1" comment="Check for the hfs file system">
			<ind-def:subexpression datatype="string" entity_check="all">hfs</ind-def:subexpression>
		</ind-def:textfilecontent54_state>
		<ind-def:textfilecontent54_state id="oval:gov.nist.usgcb.rhel:ste:20031" version="1" comment="Check for the hfsplus file system">
			<ind-def:subexpression datatype="string" entity_check="all">hfsplus</ind-def:subexpression>
		</ind-def:textfilecontent54_state>
		<ind-def:textfilecontent54_state id="oval:gov.nist.usgcb.rhel:ste:20032" version="1" comment="Check for the squashfs file system">
			<ind-def:subexpression datatype="string" entity_check="all">squashfs</ind-def:subexpression>
		</ind-def:textfilecontent54_state>
		<ind-def:textfilecontent54_state id="oval:gov.nist.usgcb.rhel:ste:20033" version="1" comment="Check for the udf file system">
			<ind-def:subexpression datatype="string" entity_check="all">udf</ind-def:subexpression>
		</ind-def:textfilecontent54_state>
		<unix-def:file_state id="oval:gov.nist.usgcb.rhel:ste:20034" version="1">
			<unix-def:user_id datatype="int">0</unix-def:user_id>
		</unix-def:file_state>
		<unix-def:file_state id="oval:gov.nist.usgcb.rhel:ste:20035" version="1">
			<unix-def:group_id datatype="int">0</unix-def:group_id>
		</unix-def:file_state>
		<unix-def:file_state id="oval:gov.nist.usgcb.rhel:ste:20042" version="1">
			<unix-def:uread var_check="all" datatype="boolean" var_ref="oval:gov.nist.usgcb.rhel:var:1"/>
			<unix-def:uwrite var_check="all" datatype="boolean" var_ref="oval:gov.nist.usgcb.rhel:var:2"/>
			<unix-def:uexec var_check="all" datatype="boolean" var_ref="oval:gov.nist.usgcb.rhel:var:3"/>
			<unix-def:gread var_check="all" datatype="boolean" var_ref="oval:gov.nist.usgcb.rhel:var:4"/>
			<unix-def:gwrite var_check="all" datatype="boolean" var_ref="oval:gov.nist.usgcb.rhel:var:5"/>
			<unix-def:gexec var_check="all" datatype="boolean" var_ref="oval:gov.nist.usgcb.rhel:var:6"/>
			<unix-def:oread var_check="all" datatype="boolean" var_ref="oval:gov.nist.usgcb.rhel:var:7"/>
			<unix-def:owrite var_check="all" datatype="boolean" var_ref="oval:gov.nist.usgcb.rhel:var:8"/>
			<unix-def:oexec var_check="all" datatype="boolean" var_ref="oval:gov.nist.usgcb.rhel:var:9"/>
		</unix-def:file_state>
		<unix-def:file_state id="oval:gov.nist.usgcb.rhel:ste:20036" version="1">
			<unix-def:user_id datatype="int">0</unix-def:user_id>
		</unix-def:file_state>
		<unix-def:file_state id="oval:gov.nist.usgcb.rhel:ste:20037" version="1">
			<unix-def:group_id datatype="int">0</unix-def:group_id>
		</unix-def:file_state>
		<unix-def:file_state id="oval:gov.nist.usgcb.rhel:ste:20043" version="1">
			<unix-def:uread var_check="all" datatype="boolean" var_ref="oval:gov.nist.usgcb.rhel:var:10"/>
			<unix-def:uwrite var_check="all" datatype="boolean" var_ref="oval:gov.nist.usgcb.rhel:var:11"/>
			<unix-def:uexec var_check="all" datatype="boolean" var_ref="oval:gov.nist.usgcb.rhel:var:12"/>
			<unix-def:gread var_check="all" datatype="boolean" var_ref="oval:gov.nist.usgcb.rhel:var:13"/>
			<unix-def:gwrite var_check="all" datatype="boolean" var_ref="oval:gov.nist.usgcb.rhel:var:14"/>
			<unix-def:gexec var_check="all" datatype="boolean" var_ref="oval:gov.nist.usgcb.rhel:var:15"/>
			<unix-def:oread var_check="all" datatype="boolean" var_ref="oval:gov.nist.usgcb.rhel:var:16"/>
			<unix-def:owrite var_check="all" datatype="boolean" var_ref="oval:gov.nist.usgcb.rhel:var:17"/>
			<unix-def:oexec var_check="all" datatype="boolean" var_ref="oval:gov.nist.usgcb.rhel:var:18"/>
		</unix-def:file_state>
		<unix-def:file_state id="oval:gov.nist.usgcb.rhel:ste:20038" version="1">
			<unix-def:user_id datatype="int">0</unix-def:user_id>
		</unix-def:file_state>
		<unix-def:file_state id="oval:gov.nist.usgcb.rhel:ste:20039" version="1">
			<unix-def:group_id datatype="int">0</unix-def:group_id>
		</unix-def:file_state>
		<unix-def:file_state id="oval:gov.nist.usgcb.rhel:ste:20044" version="1">
			<unix-def:uread var_check="all" datatype="boolean" var_ref="oval:gov.nist.usgcb.rhel:var:19"/>
			<unix-def:uwrite var_check="all" datatype="boolean" var_ref="oval:gov.nist.usgcb.rhel:var:20"/>
			<unix-def:uexec var_check="all" datatype="boolean" var_ref="oval:gov.nist.usgcb.rhel:var:21"/>
			<unix-def:gread var_check="all" datatype="boolean" var_ref="oval:gov.nist.usgcb.rhel:var:22"/>
			<unix-def:gwrite var_check="all" datatype="boolean" var_ref="oval:gov.nist.usgcb.rhel:var:23"/>
			<unix-def:gexec var_check="all" datatype="boolean" var_ref="oval:gov.nist.usgcb.rhel:var:24"/>
			<unix-def:oread var_check="all" datatype="boolean" var_ref="oval:gov.nist.usgcb.rhel:var:25"/>
			<unix-def:owrite var_check="all" datatype="boolean" var_ref="oval:gov.nist.usgcb.rhel:var:26"/>
			<unix-def:oexec var_check="all" datatype="boolean" var_ref="oval:gov.nist.usgcb.rhel:var:27"/>
		</unix-def:file_state>
		<unix-def:file_state id="oval:gov.nist.usgcb.rhel:ste:20040" version="1">
			<unix-def:user_id datatype="int">0</unix-def:user_id>
		</unix-def:file_state>
		<unix-def:file_state id="oval:gov.nist.usgcb.rhel:ste:20041" version="1">
			<unix-def:group_id datatype="int">0</unix-def:group_id>
		</unix-def:file_state>
		<unix-def:file_state id="oval:gov.nist.usgcb.rhel:ste:20045" version="1">
			<unix-def:uread var_check="all" datatype="boolean" var_ref="oval:gov.nist.usgcb.rhel:var:28"/>
			<unix-def:uwrite var_check="all" datatype="boolean" var_ref="oval:gov.nist.usgcb.rhel:var:29"/>
			<unix-def:uexec var_check="all" datatype="boolean" var_ref="oval:gov.nist.usgcb.rhel:var:30"/>
			<unix-def:gread var_check="all" datatype="boolean" var_ref="oval:gov.nist.usgcb.rhel:var:31"/>
			<unix-def:gwrite var_check="all" datatype="boolean" var_ref="oval:gov.nist.usgcb.rhel:var:32"/>
			<unix-def:gexec var_check="all" datatype="boolean" var_ref="oval:gov.nist.usgcb.rhel:var:33"/>
			<unix-def:oread var_check="all" datatype="boolean" var_ref="oval:gov.nist.usgcb.rhel:var:34"/>
			<unix-def:owrite var_check="all" datatype="boolean" var_ref="oval:gov.nist.usgcb.rhel:var:35"/>
			<unix-def:oexec var_check="all" datatype="boolean" var_ref="oval:gov.nist.usgcb.rhel:var:36"/>
		</unix-def:file_state>
		<unix-def:file_state id="oval:gov.nist.usgcb.rhel:ste:20046" version="1" comment="u+s">
			<unix-def:sticky datatype="boolean">1</unix-def:sticky>
		</unix-def:file_state>
		<unix-def:file_state id="oval:gov.nist.usgcb.rhel:ste:200461" version="1" comment="o-w">
			<unix-def:owrite datatype="boolean">0</unix-def:owrite>
		</unix-def:file_state>
		<unix-def:file_state id="oval:gov.nist.usgcb.rhel:ste:200471" version="1" comment="not regular file">
			<unix-def:type datatype="string" operation="not equal">regular</unix-def:type>
		</unix-def:file_state>
		<unix-def:file_state id="oval:gov.nist.usgcb.rhel:ste:200481" version="1" comment="g-s">
			<unix-def:sgid datatype="boolean">0</unix-def:sgid>
		</unix-def:file_state>
		<unix-def:file_state id="oval:gov.nist.usgcb.rhel:ste:200482" version="1" comment="sgid whitelist">
			<unix-def:filepath var_check="at least one" var_ref="oval:gov.nist.usgcb.rhel:var:200482"/>
		</unix-def:file_state>
		<unix-def:file_state id="oval:gov.nist.usgcb.rhel:ste:200491" version="1" comment="u-s">
			<unix-def:suid datatype="boolean">0</unix-def:suid>
		</unix-def:file_state>
		<unix-def:file_state id="oval:gov.nist.usgcb.rhel:ste:200492" version="1" comment="suid whitelist">
			<unix-def:filepath var_check="at least one" var_ref="oval:gov.nist.usgcb.rhel:var:200492"/>
		</unix-def:file_state>
		<unix-def:file_state id="oval:gov.nist.usgcb.rhel:ste:20050" version="1" comment="Files with a valid user id assigned">
			<unix-def:user_id datatype="int" var_check="at least one" var_ref="oval:gov.nist.usgcb.rhel:var:200501"/>
		</unix-def:file_state>
		<unix-def:file_state id="oval:gov.nist.usgcb.rhel:ste:20051" version="1" comment="Files with a valid group id assigned">
			<unix-def:group_id datatype="int" var_check="at least one" var_ref="oval:gov.nist.usgcb.rhel:var:200511"/>
		</unix-def:file_state>
		<unix-def:file_state id="oval:gov.nist.usgcb.rhel:ste:20052" version="1" operator="OR">
			<unix-def:user_id datatype="int" operation="less than">500</unix-def:user_id>
			<unix-def:owrite datatype="boolean">0</unix-def:owrite>
		</unix-def:file_state>
		<ind-def:textfilecontent54_state id="oval:gov.nist.usgcb.rhel:ste:20053" version="1">
			<ind-def:subexpression var_check="all" operation="equals" var_ref="oval:gov.nist.usgcb.rhel:var:20053"/>
		</ind-def:textfilecontent54_state>
		<ind-def:textfilecontent54_state id="oval:gov.nist.usgcb.rhel:ste:20055" version="1">
			<ind-def:subexpression operation="equals">0</ind-def:subexpression>
		</ind-def:textfilecontent54_state>
		<ind-def:textfilecontent54_state id="oval:gov.nist.usgcb.rhel:ste:20056" version="1">
			<ind-def:subexpression operation="equals">0</ind-def:subexpression>
		</ind-def:textfilecontent54_state>
		<unix-def:password_state id="oval:gov.nist.usgcb.rhel:ste:20068" version="1">
			<unix-def:user_id operation="less than" datatype="int">500</unix-def:user_id>
			<unix-def:login_shell operation="not equal">/sbin/nologin</unix-def:login_shell>
		</unix-def:password_state>
		<unix-def:password_state id="oval:gov.nist.usgcb.rhel:ste:200695" version="1">
			<unix-def:password>x</unix-def:password>
		</unix-def:password_state>
		<ind-def:textfilecontent54_state id="oval:gov.nist.usgcb.rhel:ste:20071" version="1">
			<ind-def:subexpression var_check="all" operation="equals" var_ref="oval:gov.nist.usgcb.rhel:var:20071"/>
		</ind-def:textfilecontent54_state>
		<ind-def:variable_state id="oval:gov.nist.usgcb.rhel:ste:200800" version="1" comment="expected value of unlock_time">
			<ind-def:value>0</ind-def:value>
		</ind-def:variable_state>
		<ind-def:textfilecontent54_state id="oval:gov.nist.usgcb.rhel:ste:200802" version="1" comment="lock_time">
			<ind-def:instance datatype="int">2</ind-def:instance>
			<ind-def:subexpression datatype="int" var_check="all" var_ref="oval:gov.nist.usgcb.rhel:var:200802"/>
		</ind-def:textfilecontent54_state>
		<ind-def:textfilecontent54_state id="oval:gov.nist.usgcb.rhel:ste:200803" version="1" comment="unlock_time">
			<ind-def:instance datatype="int">3</ind-def:instance>
			<ind-def:subexpression datatype="int" var_check="all" var_ref="oval:gov.nist.usgcb.rhel:var:200803"/>
		</ind-def:textfilecontent54_state>
		<unix-def:file_state id="oval:gov.nist.usgcb.rhel:ste:20081" version="1">
			<unix-def:group_id datatype="int">0</unix-def:group_id>
		</unix-def:file_state>
		<unix-def:file_state id="oval:gov.nist.usgcb.rhel:ste:20082" version="1">
			<unix-def:uread var_check="all" datatype="boolean" var_ref="oval:gov.nist.usgcb.rhel:var:200821"/>
			<unix-def:uwrite var_check="all" datatype="boolean" var_ref="oval:gov.nist.usgcb.rhel:var:200822"/>
			<unix-def:uexec var_check="all" datatype="boolean" var_ref="oval:gov.nist.usgcb.rhel:var:200823"/>
			<unix-def:gread var_check="all" datatype="boolean" var_ref="oval:gov.nist.usgcb.rhel:var:200824"/>
			<unix-def:gwrite var_check="all" datatype="boolean" var_ref="oval:gov.nist.usgcb.rhel:var:200825"/>
			<unix-def:gexec var_check="all" datatype="boolean" var_ref="oval:gov.nist.usgcb.rhel:var:200826"/>
			<unix-def:oread var_check="all" datatype="boolean" var_ref="oval:gov.nist.usgcb.rhel:var:200827"/>
			<unix-def:owrite var_check="all" datatype="boolean" var_ref="oval:gov.nist.usgcb.rhel:var:200828"/>
			<unix-def:oexec var_check="all" datatype="boolean" var_ref="oval:gov.nist.usgcb.rhel:var:200829"/>
		</unix-def:file_state>
		<ind-def:variable_state id="oval:gov.nist.usgcb.rhel:ste:200831" version="1" comment="hashing algorithm is md5">
			<ind-def:value>sha512</ind-def:value>
		</ind-def:variable_state>
		<ind-def:textfilecontent54_state id="oval:gov.nist.usgcb.rhel:ste:200832" version="1">
			<ind-def:subexpression operation="equals">yes</ind-def:subexpression>
		</ind-def:textfilecontent54_state>
		<ind-def:textfilecontent54_state id="oval:gov.nist.usgcb.rhel:ste:200833" version="1">
			<ind-def:subexpression var_check="all" operation="case insensitive equals" var_ref="oval:gov.nist.usgcb.rhel:var:20083"/>
		</ind-def:textfilecontent54_state>
		<ind-def:variable_state id="oval:gov.nist.usgcb.rhel:ste:200841" version="1" comment="remember is set to 0">
			<ind-def:value datatype="int">0</ind-def:value>
		</ind-def:variable_state>
		<ind-def:textfilecontent54_state id="oval:gov.nist.usgcb.rhel:ste:200842" version="1">
			<ind-def:subexpression datatype="int" var_check="all" operation="equals" var_ref="oval:gov.nist.usgcb.rhel:var:20084"/>
		</ind-def:textfilecontent54_state>
		<ind-def:environmentvariable_state id="oval:gov.nist.usgcb.rhel:ste:20085" version="1" comment="starts with . or :">
			<ind-def:name operation="pattern match">(?:^[:.])|(?:::)|(?::\.:)|(?:[:.]$)</ind-def:name>
		</ind-def:environmentvariable_state>
		<unix-def:file_state id="oval:gov.nist.usgcb.rhel:ste:2008551" version="1" comment="Group has write privilege">
			<unix-def:gwrite datatype="boolean">1</unix-def:gwrite>
		</unix-def:file_state>
		<unix-def:file_state id="oval:gov.nist.usgcb.rhel:ste:2008552" version="1" comment="Other has write privilege">
			<unix-def:owrite datatype="boolean">1</unix-def:owrite>
		</unix-def:file_state>
		<unix-def:file_state id="oval:gov.nist.usgcb.rhel:ste:200861" version="1">
			<unix-def:gwrite datatype="boolean">1</unix-def:gwrite>
		</unix-def:file_state>
		<unix-def:file_state id="oval:gov.nist.usgcb.rhel:ste:200862" version="1">
			<unix-def:oread datatype="boolean">1</unix-def:oread>
		</unix-def:file_state>
		<ind-def:textfilecontent54_state id="oval:gov.nist.usgcb.rhel:ste:20087" version="1">
			<ind-def:subexpression var_check="all" operation="equals" var_ref="oval:gov.nist.usgcb.rhel:var:20087"/>
		</ind-def:textfilecontent54_state>
		<unix-def:file_state id="oval:gov.nist.usgcb.rhel:ste:20092" version="1">
			<unix-def:user_id datatype="int">0</unix-def:user_id>
		</unix-def:file_state>
		<unix-def:file_state id="oval:gov.nist.usgcb.rhel:ste:20094" version="1">
			<unix-def:uread var_check="all" datatype="boolean" var_ref="oval:gov.nist.usgcb.rhel:var:200941"/>
			<unix-def:uwrite var_check="all" datatype="boolean" var_ref="oval:gov.nist.usgcb.rhel:var:200942"/>
			<unix-def:uexec var_check="all" datatype="boolean" var_ref="oval:gov.nist.usgcb.rhel:var:200943"/>
			<unix-def:gread var_check="all" datatype="boolean" var_ref="oval:gov.nist.usgcb.rhel:var:200944"/>
			<unix-def:gwrite var_check="all" datatype="boolean" var_ref="oval:gov.nist.usgcb.rhel:var:200945"/>
			<unix-def:gexec var_check="all" datatype="boolean" var_ref="oval:gov.nist.usgcb.rhel:var:200946"/>
			<unix-def:oread var_check="all" datatype="boolean" var_ref="oval:gov.nist.usgcb.rhel:var:200947"/>
			<unix-def:owrite var_check="all" datatype="boolean" var_ref="oval:gov.nist.usgcb.rhel:var:200948"/>
			<unix-def:oexec var_check="all" datatype="boolean" var_ref="oval:gov.nist.usgcb.rhel:var:200949"/>
		</unix-def:file_state>
		<unix-def:file_state id="oval:gov.nist.usgcb.rhel:ste:20093" version="1">
			<unix-def:group_id datatype="int">0</unix-def:group_id>
		</unix-def:file_state>
		<ind-def:textfilecontent54_state id="oval:gov.nist.usgcb.rhel:ste:20097" version="1">
			<ind-def:subexpression>no</ind-def:subexpression>
		</ind-def:textfilecontent54_state>
		<!--<ind-def:textfilecontent54_state id="oval:gov.nist.usgcb.rhel:ste:20098" version="1">
			<ind-def:subexpression datatype="int" var_check="all" operation="less than or equal" var_ref="oval:gov.nist.usgcb.rhel:var:20098"/>
		</ind-def:textfilecontent54_state>-->
		<ind-def:xmlfilecontent_state id="oval:gov.nist.usgcb.rhel:ste:20100" version="1" comment="idle_delay (time before activation in minutes)">
			<ind-def:value_of datatype="string" operation="equals" var_check="all" var_ref="oval:gov.nist.usgcb.rhel:var:20098"/>
		</ind-def:xmlfilecontent_state>
		<ind-def:xmlfilecontent_state id="oval:gov.nist.usgcb.rhel:ste:201005" version="1" comment="idle_activation_enabled (Activation when idle)">
			<ind-def:value_of datatype="string">true</ind-def:value_of>
		</ind-def:xmlfilecontent_state>
		<ind-def:xmlfilecontent_state id="oval:gov.nist.usgcb.rhel:ste:201006" version="1" comment="lock_enabled (lock on Activation)">
			<ind-def:value_of datatype="string">true</ind-def:value_of>
		</ind-def:xmlfilecontent_state>
		<ind-def:xmlfilecontent_state id="oval:gov.nist.usgcb.rhel:ste:201007" version="1" comment="mode (Screensaver theme selection mode)">
			<ind-def:value_of datatype="string">blank-only</ind-def:value_of>
		</ind-def:xmlfilecontent_state>
		<ind-def:textfilecontent54_state id="oval:gov.nist.usgcb.rhel:ste:20102" version="1">
			<ind-def:subexpression var_check="all" var_ref="oval:gov.nist.usgcb.rhel:var:20102"/>
		</ind-def:textfilecontent54_state>
		<ind-def:xmlfilecontent_state id="oval:gov.nist.usgcb.rhel:ste:20103" version="1" comment="Logon banner">
			<ind-def:value_of var_check="all" var_ref="oval:gov.nist.usgcb.rhel:var:20102"/>
		</ind-def:xmlfilecontent_state>
		<ind-def:textfilecontent54_state id="oval:gov.nist.usgcb.rhel:ste:20105" version="1">
			<ind-def:subexpression datatype="int" operation="equals">1</ind-def:subexpression>
		</ind-def:textfilecontent54_state>
		<ind-def:textfilecontent54_state id="oval:gov.nist.usgcb.rhel:ste:20106" version="1">
			<ind-def:subexpression var_check="all" operation="equals" var_ref="oval:gov.nist.usgcb.rhel:var:20106"/>
		</ind-def:textfilecontent54_state>
		<ind-def:variable_state id="oval:gov.nist.usgcb.rhel:ste:201061" version="1" comment="selinux state is disabled">
			<ind-def:value>disabled</ind-def:value>
		</ind-def:variable_state>
		<ind-def:variable_state id="oval:gov.nist.usgcb.rhel:ste:201062" version="1" comment="selinux state is permissive">
			<ind-def:value>permissive</ind-def:value>
		</ind-def:variable_state>
		<ind-def:variable_state id="oval:gov.nist.usgcb.rhel:ste:201063" version="1" comment="selinux state is enforcing">
			<ind-def:value>enforcing</ind-def:value>
		</ind-def:variable_state>
		<ind-def:textfilecontent54_state id="oval:gov.nist.usgcb.rhel:ste:201064" version="1">
			<ind-def:subexpression datatype="int" operation="equals">0</ind-def:subexpression>
		</ind-def:textfilecontent54_state>
		<ind-def:textfilecontent54_state id="oval:gov.nist.usgcb.rhel:ste:201065" version="1">
			<ind-def:subexpression datatype="int" operation="equals">1</ind-def:subexpression>
		</ind-def:textfilecontent54_state>
		<ind-def:textfilecontent54_state id="oval:gov.nist.usgcb.rhel:ste:20107" version="1">
			<ind-def:subexpression var_check="all" operation="equals" var_ref="oval:gov.nist.usgcb.rhel:var:20107"/>
		</ind-def:textfilecontent54_state>
		<ind-def:textfilecontent54_state id="oval:gov.nist.usgcb.rhel:ste:20112" version="1">
			<ind-def:subexpression datatype="int" operation="equals">0</ind-def:subexpression>
		</ind-def:textfilecontent54_state>
		<ind-def:textfilecontent54_state id="oval:gov.nist.usgcb.rhel:ste:20113" version="1">
			<ind-def:subexpression datatype="int" operation="equals">0</ind-def:subexpression>
		</ind-def:textfilecontent54_state>
		<ind-def:textfilecontent54_state id="oval:gov.nist.usgcb.rhel:ste:20114" version="1">
			<ind-def:subexpression datatype="int" operation="equals">0</ind-def:subexpression>
		</ind-def:textfilecontent54_state>
		<ind-def:textfilecontent54_state id="oval:gov.nist.usgcb.rhel:ste:20117" version="1">
			<ind-def:subexpression var_check="all" operation="equals" var_ref="oval:gov.nist.usgcb.rhel:var:20117"/>
		</ind-def:textfilecontent54_state>
		<ind-def:textfilecontent54_state id="oval:gov.nist.usgcb.rhel:ste:20116" version="1">
			<ind-def:subexpression var_check="all" operation="equals" var_ref="oval:gov.nist.usgcb.rhel:var:20116"/>
		</ind-def:textfilecontent54_state>
		<ind-def:textfilecontent54_state id="oval:gov.nist.usgcb.rhel:ste:20123" version="1">
			<ind-def:subexpression var_check="all" operation="equals" var_ref="oval:gov.nist.usgcb.rhel:var:20123"/>
		</ind-def:textfilecontent54_state>
		<ind-def:textfilecontent54_state id="oval:gov.nist.usgcb.rhel:ste:20124" version="1">
			<ind-def:subexpression var_check="all" operation="equals" var_ref="oval:gov.nist.usgcb.rhel:var:20124"/>
		</ind-def:textfilecontent54_state>
		<ind-def:textfilecontent54_state id="oval:gov.nist.usgcb.rhel:ste:20122" version="1">
			<ind-def:subexpression var_check="all" operation="equals" var_ref="oval:gov.nist.usgcb.rhel:var:20122"/>
		</ind-def:textfilecontent54_state>
		<ind-def:textfilecontent54_state id="oval:gov.nist.usgcb.rhel:ste:20120" version="1">
			<ind-def:subexpression var_check="all" operation="equals" var_ref="oval:gov.nist.usgcb.rhel:var:20120"/>
		</ind-def:textfilecontent54_state>
		<ind-def:textfilecontent54_state id="oval:gov.nist.usgcb.rhel:ste:20125" version="1">
			<ind-def:subexpression var_check="all" operation="equals" var_ref="oval:gov.nist.usgcb.rhel:var:20125"/>
		</ind-def:textfilecontent54_state>
		<ind-def:textfilecontent54_state id="oval:gov.nist.usgcb.rhel:ste:20121" version="1">
			<ind-def:subexpression var_check="all" operation="equals" var_ref="oval:gov.nist.usgcb.rhel:var:20121"/>
		</ind-def:textfilecontent54_state>
		<ind-def:textfilecontent54_state id="oval:gov.nist.usgcb.rhel:ste:20118" version="1">
			<ind-def:subexpression var_check="all" operation="equals" var_ref="oval:gov.nist.usgcb.rhel:var:20118"/>
		</ind-def:textfilecontent54_state>
		<ind-def:textfilecontent54_state id="oval:gov.nist.usgcb.rhel:ste:20126" version="1">
			<ind-def:subexpression var_check="all" operation="equals" var_ref="oval:gov.nist.usgcb.rhel:var:20126"/>
		</ind-def:textfilecontent54_state>
		<ind-def:textfilecontent54_state id="oval:gov.nist.usgcb.rhel:ste:20119" version="1">
			<ind-def:subexpression var_check="all" operation="equals" var_ref="oval:gov.nist.usgcb.rhel:var:20119"/>
		</ind-def:textfilecontent54_state>
		<ind-def:textfilecontent54_state id="oval:gov.nist.usgcb.rhel:ste:20115" version="1">
			<ind-def:subexpression var_check="all" operation="equals" var_ref="oval:gov.nist.usgcb.rhel:var:20115"/>
		</ind-def:textfilecontent54_state>
		<ind-def:textfilecontent54_state id="oval:gov.nist.usgcb.rhel:ste:20130" version="1" comment="Expected value of ipv6 option disable">
			<ind-def:subexpression datatype="int" operation="equals">1</ind-def:subexpression>
		</ind-def:textfilecontent54_state>
		<ind-def:textfilecontent54_state id="oval:gov.nist.usgcb.rhel:ste:20132" version="1">
			<ind-def:subexpression operation="equals">no</ind-def:subexpression>
		</ind-def:textfilecontent54_state>
		<ind-def:textfilecontent54_state id="oval:gov.nist.usgcb.rhel:ste:20133" version="1">
			<ind-def:subexpression operation="equals">no</ind-def:subexpression>
		</ind-def:textfilecontent54_state>
		<ind-def:textfilecontent54_state id="oval:gov.nist.usgcb.rhel:ste:20131" version="1">
			<ind-def:subexpression operation="equals">no</ind-def:subexpression>
		</ind-def:textfilecontent54_state>
		<ind-def:textfilecontent54_state id="oval:gov.nist.usgcb.rhel:ste:20134" version="1">
			<ind-def:subexpression var_check="all" operation="equals" var_ref="oval:gov.nist.usgcb.rhel:var:20134"/>
		</ind-def:textfilecontent54_state>
		<ind-def:textfilecontent54_state id="oval:gov.nist.usgcb.rhel:ste:20140" version="1">
			<ind-def:subexpression var_check="all" operation="equals" var_ref="oval:gov.nist.usgcb.rhel:var:20140"/>
		</ind-def:textfilecontent54_state>
		<ind-def:textfilecontent54_state id="oval:gov.nist.usgcb.rhel:ste:20145" version="1">
			<ind-def:subexpression var_check="all" operation="equals" var_ref="oval:gov.nist.usgcb.rhel:var:20145"/>
		</ind-def:textfilecontent54_state>
		<ind-def:textfilecontent54_state id="oval:gov.nist.usgcb.rhel:ste:20139" version="1">
			<ind-def:subexpression var_check="all" operation="equals" var_ref="oval:gov.nist.usgcb.rhel:var:20139"/>
		</ind-def:textfilecontent54_state>
		<ind-def:textfilecontent54_state id="oval:gov.nist.usgcb.rhel:ste:20144" version="1">
			<ind-def:subexpression var_check="all" operation="equals" var_ref="oval:gov.nist.usgcb.rhel:var:20144"/>
		</ind-def:textfilecontent54_state>
		<ind-def:textfilecontent54_state id="oval:gov.nist.usgcb.rhel:ste:20143" version="1">
			<ind-def:subexpression var_check="all" operation="equals" var_ref="oval:gov.nist.usgcb.rhel:var:20143"/>
		</ind-def:textfilecontent54_state>
		<ind-def:textfilecontent54_state id="oval:gov.nist.usgcb.rhel:ste:20141" version="1">
			<ind-def:subexpression var_check="all" operation="equals" var_ref="oval:gov.nist.usgcb.rhel:var:20141"/>
		</ind-def:textfilecontent54_state>
		<ind-def:textfilecontent54_state id="oval:gov.nist.usgcb.rhel:ste:20142" version="1">
			<ind-def:subexpression var_check="all" operation="equals" var_ref="oval:gov.nist.usgcb.rhel:var:20142"/>
		</ind-def:textfilecontent54_state>
		<unix-def:uname_state id="oval:gov.nist.usgcb.rhel:ste:201670" version="1">
			<unix-def:processor_type operation="pattern match">^.*$</unix-def:processor_type>
		</unix-def:uname_state>
		<unix-def:uname_state id="oval:gov.nist.usgcb.rhel:ste:201672" version="1">
			<unix-def:processor_type operation="pattern match">^x86_64$|^ia64$</unix-def:processor_type>
		</unix-def:uname_state>
		<unix-def:file_state id="oval:gov.nist.usgcb.rhel:ste:20217" version="1">
			<unix-def:group_id datatype="int">0</unix-def:group_id>
		</unix-def:file_state>
		<unix-def:file_state id="oval:gov.nist.usgcb.rhel:ste:20216" version="1">
			<unix-def:group_id datatype="int">0</unix-def:group_id>
		</unix-def:file_state>
		<unix-def:file_state id="oval:gov.nist.usgcb.rhel:ste:20209" version="1">
			<unix-def:user_id datatype="int">0</unix-def:user_id>
		</unix-def:file_state>
		<unix-def:file_state id="oval:gov.nist.usgcb.rhel:ste:20212" version="1">
			<unix-def:user_id datatype="int">0</unix-def:user_id>
		</unix-def:file_state>
		<unix-def:file_state id="oval:gov.nist.usgcb.rhel:ste:20210" version="1">
			<unix-def:uread var_check="all" datatype="boolean" var_ref="oval:gov.nist.usgcb.rhel:var:202101"/>
			<unix-def:uwrite var_check="all" datatype="boolean" var_ref="oval:gov.nist.usgcb.rhel:var:202102"/>
			<unix-def:uexec var_check="all" datatype="boolean" var_ref="oval:gov.nist.usgcb.rhel:var:202103"/>
			<unix-def:gread var_check="all" datatype="boolean" var_ref="oval:gov.nist.usgcb.rhel:var:202104"/>
			<unix-def:gwrite var_check="all" datatype="boolean" var_ref="oval:gov.nist.usgcb.rhel:var:202105"/>
			<unix-def:gexec var_check="all" datatype="boolean" var_ref="oval:gov.nist.usgcb.rhel:var:202106"/>
			<unix-def:oread var_check="all" datatype="boolean" var_ref="oval:gov.nist.usgcb.rhel:var:202107"/>
			<unix-def:owrite var_check="all" datatype="boolean" var_ref="oval:gov.nist.usgcb.rhel:var:202108"/>
			<unix-def:oexec var_check="all" datatype="boolean" var_ref="oval:gov.nist.usgcb.rhel:var:202109"/>
		</unix-def:file_state>
		<unix-def:file_state id="oval:gov.nist.usgcb.rhel:ste:20214" version="1">
			<unix-def:group_id datatype="int">0</unix-def:group_id>
		</unix-def:file_state>
		<unix-def:file_state id="oval:gov.nist.usgcb.rhel:ste:20222" version="1">
			<unix-def:user_id datatype="int">0</unix-def:user_id>
		</unix-def:file_state>
		<unix-def:file_state id="oval:gov.nist.usgcb.rhel:ste:20218" version="1">
			<unix-def:group_id datatype="int">0</unix-def:group_id>
		</unix-def:file_state>
		<unix-def:file_state id="oval:gov.nist.usgcb.rhel:ste:20223" version="1">
			<unix-def:user_id datatype="int">0</unix-def:user_id>
		</unix-def:file_state>
		<unix-def:file_state id="oval:gov.nist.usgcb.rhel:ste:20221" version="1">
			<unix-def:user_id datatype="int">0</unix-def:user_id>
		</unix-def:file_state>
		<unix-def:file_state id="oval:gov.nist.usgcb.rhel:ste:20211" version="1">
			<unix-def:group_id datatype="int">0</unix-def:group_id>
		</unix-def:file_state>
		<unix-def:file_state id="oval:gov.nist.usgcb.rhel:ste:20219" version="1">
			<unix-def:user_id datatype="int">0</unix-def:user_id>
		</unix-def:file_state>
		<unix-def:file_state id="oval:gov.nist.usgcb.rhel:ste:20208" version="1">
			<unix-def:group_id datatype="int">0</unix-def:group_id>
		</unix-def:file_state>
		<unix-def:file_state id="oval:gov.nist.usgcb.rhel:ste:20220" version="1">
			<unix-def:user_id datatype="int">0</unix-def:user_id>
		</unix-def:file_state>
		<unix-def:file_state id="oval:gov.nist.usgcb.rhel:ste:20213" version="1">
			<unix-def:uread var_check="all" datatype="boolean" var_ref="oval:gov.nist.usgcb.rhel:var:73"/>
			<unix-def:uwrite var_check="all" datatype="boolean" var_ref="oval:gov.nist.usgcb.rhel:var:74"/>
			<unix-def:uexec var_check="all" datatype="boolean" var_ref="oval:gov.nist.usgcb.rhel:var:75"/>
			<unix-def:gread var_check="all" datatype="boolean" var_ref="oval:gov.nist.usgcb.rhel:var:76"/>
			<unix-def:gwrite var_check="all" datatype="boolean" var_ref="oval:gov.nist.usgcb.rhel:var:77"/>
			<unix-def:gexec var_check="all" datatype="boolean" var_ref="oval:gov.nist.usgcb.rhel:var:78"/>
			<unix-def:oread var_check="all" datatype="boolean" var_ref="oval:gov.nist.usgcb.rhel:var:79"/>
			<unix-def:owrite var_check="all" datatype="boolean" var_ref="oval:gov.nist.usgcb.rhel:var:80"/>
			<unix-def:oexec var_check="all" datatype="boolean" var_ref="oval:gov.nist.usgcb.rhel:var:81"/>
		</unix-def:file_state>
		<unix-def:file_state id="oval:gov.nist.usgcb.rhel:ste:20215" version="1">
			<unix-def:group_id datatype="int">0</unix-def:group_id>
		</unix-def:file_state>
		<unix-def:file_state id="oval:gov.nist.usgcb.rhel:ste:20224" version="1">
			<unix-def:uread var_check="all" datatype="boolean" var_ref="oval:gov.nist.usgcb.rhel:var:202241"/>
			<unix-def:uwrite var_check="all" datatype="boolean" var_ref="oval:gov.nist.usgcb.rhel:var:202242"/>
			<unix-def:uexec var_check="all" datatype="boolean" var_ref="oval:gov.nist.usgcb.rhel:var:202243"/>
			<unix-def:gread var_check="all" datatype="boolean" var_ref="oval:gov.nist.usgcb.rhel:var:202244"/>
			<unix-def:gwrite var_check="all" datatype="boolean" var_ref="oval:gov.nist.usgcb.rhel:var:202245"/>
			<unix-def:gexec var_check="all" datatype="boolean" var_ref="oval:gov.nist.usgcb.rhel:var:202246"/>
			<unix-def:oread var_check="all" datatype="boolean" var_ref="oval:gov.nist.usgcb.rhel:var:202247"/>
			<unix-def:owrite var_check="all" datatype="boolean" var_ref="oval:gov.nist.usgcb.rhel:var:202248"/>
			<unix-def:oexec var_check="all" datatype="boolean" var_ref="oval:gov.nist.usgcb.rhel:var:202249"/>
		</unix-def:file_state>
		<unix-def:file_state id="oval:gov.nist.usgcb.rhel:ste:20225" version="1">
			<unix-def:uread var_check="all" datatype="boolean" var_ref="oval:gov.nist.usgcb.rhel:var:202251"/>
			<unix-def:uwrite var_check="all" datatype="boolean" var_ref="oval:gov.nist.usgcb.rhel:var:202252"/>
			<unix-def:uexec var_check="all" datatype="boolean" var_ref="oval:gov.nist.usgcb.rhel:var:202253"/>
			<unix-def:gread var_check="all" datatype="boolean" var_ref="oval:gov.nist.usgcb.rhel:var:202254"/>
			<unix-def:gwrite var_check="all" datatype="boolean" var_ref="oval:gov.nist.usgcb.rhel:var:202255"/>
			<unix-def:gexec var_check="all" datatype="boolean" var_ref="oval:gov.nist.usgcb.rhel:var:202256"/>
			<unix-def:oread var_check="all" datatype="boolean" var_ref="oval:gov.nist.usgcb.rhel:var:202257"/>
			<unix-def:owrite var_check="all" datatype="boolean" var_ref="oval:gov.nist.usgcb.rhel:var:202258"/>
			<unix-def:oexec var_check="all" datatype="boolean" var_ref="oval:gov.nist.usgcb.rhel:var:202259"/>
		</unix-def:file_state>
		<unix-def:file_state id="oval:gov.nist.usgcb.rhel:ste:20226" version="1">
			<unix-def:uread var_check="all" datatype="boolean" var_ref="oval:gov.nist.usgcb.rhel:var:202261"/>
			<unix-def:uwrite var_check="all" datatype="boolean" var_ref="oval:gov.nist.usgcb.rhel:var:202262"/>
			<unix-def:uexec var_check="all" datatype="boolean" var_ref="oval:gov.nist.usgcb.rhel:var:202263"/>
			<unix-def:gread var_check="all" datatype="boolean" var_ref="oval:gov.nist.usgcb.rhel:var:202264"/>
			<unix-def:gwrite var_check="all" datatype="boolean" var_ref="oval:gov.nist.usgcb.rhel:var:202265"/>
			<unix-def:gexec var_check="all" datatype="boolean" var_ref="oval:gov.nist.usgcb.rhel:var:202266"/>
			<unix-def:oread var_check="all" datatype="boolean" var_ref="oval:gov.nist.usgcb.rhel:var:202267"/>
			<unix-def:owrite var_check="all" datatype="boolean" var_ref="oval:gov.nist.usgcb.rhel:var:202268"/>
			<unix-def:oexec var_check="all" datatype="boolean" var_ref="oval:gov.nist.usgcb.rhel:var:202269"/>
		</unix-def:file_state>
		<unix-def:file_state id="oval:gov.nist.usgcb.rhel:ste:20227" version="1">
			<unix-def:uread var_check="all" datatype="boolean" var_ref="oval:gov.nist.usgcb.rhel:var:202271"/>
			<unix-def:uwrite var_check="all" datatype="boolean" var_ref="oval:gov.nist.usgcb.rhel:var:202272"/>
			<unix-def:uexec var_check="all" datatype="boolean" var_ref="oval:gov.nist.usgcb.rhel:var:202273"/>
			<unix-def:gread var_check="all" datatype="boolean" var_ref="oval:gov.nist.usgcb.rhel:var:202274"/>
			<unix-def:gwrite var_check="all" datatype="boolean" var_ref="oval:gov.nist.usgcb.rhel:var:202275"/>
			<unix-def:gexec var_check="all" datatype="boolean" var_ref="oval:gov.nist.usgcb.rhel:var:202276"/>
			<unix-def:oread var_check="all" datatype="boolean" var_ref="oval:gov.nist.usgcb.rhel:var:202277"/>
			<unix-def:owrite var_check="all" datatype="boolean" var_ref="oval:gov.nist.usgcb.rhel:var:202278"/>
			<unix-def:oexec var_check="all" datatype="boolean" var_ref="oval:gov.nist.usgcb.rhel:var:202279"/>
		</unix-def:file_state>
		<unix-def:file_state id="oval:gov.nist.usgcb.rhel:ste:20228" version="1">
			<unix-def:uread var_check="all" datatype="boolean" var_ref="oval:gov.nist.usgcb.rhel:var:202281"/>
			<unix-def:uwrite var_check="all" datatype="boolean" var_ref="oval:gov.nist.usgcb.rhel:var:202282"/>
			<unix-def:uexec var_check="all" datatype="boolean" var_ref="oval:gov.nist.usgcb.rhel:var:202283"/>
			<unix-def:gread var_check="all" datatype="boolean" var_ref="oval:gov.nist.usgcb.rhel:var:202284"/>
			<unix-def:gwrite var_check="all" datatype="boolean" var_ref="oval:gov.nist.usgcb.rhel:var:202285"/>
			<unix-def:gexec var_check="all" datatype="boolean" var_ref="oval:gov.nist.usgcb.rhel:var:202286"/>
			<unix-def:oread var_check="all" datatype="boolean" var_ref="oval:gov.nist.usgcb.rhel:var:202287"/>
			<unix-def:owrite var_check="all" datatype="boolean" var_ref="oval:gov.nist.usgcb.rhel:var:202288"/>
			<unix-def:oexec var_check="all" datatype="boolean" var_ref="oval:gov.nist.usgcb.rhel:var:202289"/>
		</unix-def:file_state>
		<ind-def:textfilecontent54_state id="oval:gov.nist.usgcb.rhel:ste:20246" version="1">
			<ind-def:subexpression var_check="all" operation="equals" var_ref="oval:gov.nist.usgcb.rhel:var:20246"/>
		</ind-def:textfilecontent54_state>
		<ind-def:textfilecontent54_state id="oval:gov.nist.usgcb.rhel:ste:20239" version="1" comment="ClientAliveInterval in seconds">
			<ind-def:subexpression datatype="int" operation="equals" var_check="all" var_ref="oval:gov.nist.usgcb.rhel:var:20239"/>
		</ind-def:textfilecontent54_state>
		<ind-def:textfilecontent54_state id="oval:gov.nist.usgcb.rhel:ste:20240" version="1">
			<ind-def:subexpression datatype="int" operation="equals">0</ind-def:subexpression>
		</ind-def:textfilecontent54_state>
		<ind-def:textfilecontent54_state id="oval:gov.nist.usgcb.rhel:ste:202456" version="1">
			<ind-def:subexpression operation="equals">aes128-ctr,aes192-ctr,aes256-ctr</ind-def:subexpression>
		</ind-def:textfilecontent54_state>
		<ind-def:textfilecontent54_state id="oval:gov.nist.usgcb.rhel:ste:20253" version="1">
			<ind-def:subexpression operation="equals">yes</ind-def:subexpression>
		</ind-def:textfilecontent54_state>
		<ind-def:textfilecontent54_state id="oval:gov.nist.usgcb.rhel:ste:20254" version="1">
			<ind-def:subexpression operation="equals">yes</ind-def:subexpression>
		</ind-def:textfilecontent54_state>
		<ind-def:textfilecontent54_state id="oval:gov.nist.usgcb.rhel:ste:20255" version="1">
			<ind-def:subexpression operation="equals">yes</ind-def:subexpression>
		</ind-def:textfilecontent54_state>
		<ind-def:textfilecontent54_state id="oval:gov.nist.usgcb.rhel:ste:20256" version="1">
			<ind-def:subexpression operation="equals">yes</ind-def:subexpression>
		</ind-def:textfilecontent54_state>
		<ind-def:textfilecontent54_state id="oval:gov.nist.usgcb.rhel:ste:20257" version="1">
			<ind-def:subexpression operation="equals">no</ind-def:subexpression>
		</ind-def:textfilecontent54_state>
		<ind-def:textfilecontent54_state id="oval:gov.nist.usgcb.rhel:ste:20258" version="1">
			<ind-def:subexpression operation="equals">no</ind-def:subexpression>
		</ind-def:textfilecontent54_state>
		<ind-def:textfilecontent54_state id="oval:gov.nist.usgcb.rhel:ste:20259" version="1">
			<ind-def:subexpression operation="equals">no</ind-def:subexpression>
		</ind-def:textfilecontent54_state>
		<ind-def:textfilecontent54_state id="oval:gov.nist.usgcb.rhel:ste:20260" version="1">
			<ind-def:subexpression operation="equals">no</ind-def:subexpression>
		</ind-def:textfilecontent54_state>
		<ind-def:textfilecontent54_state id="oval:gov.nist.usgcb.rhel:ste:20264" version="1">
			<ind-def:subexpression operation="equals">off</ind-def:subexpression>
		</ind-def:textfilecontent54_state>
		<unix-def:file_state id="oval:gov.nist.usgcb.rhel:ste:20290" version="1">
			<unix-def:group_id datatype="int">0</unix-def:group_id>
		</unix-def:file_state>
		<unix-def:file_state id="oval:gov.nist.usgcb.rhel:ste:20291" version="1">
			<unix-def:user_id datatype="int">0</unix-def:user_id>
		</unix-def:file_state>
		<unix-def:file_state id="oval:gov.nist.usgcb.rhel:ste:20313" version="1">
			<unix-def:group_id datatype="int">0</unix-def:group_id>
		</unix-def:file_state>
		<unix-def:file_state id="oval:gov.nist.usgcb.rhel:ste:20315" version="1">
			<unix-def:uread var_check="all" datatype="boolean" var_ref="oval:gov.nist.usgcb.rhel:var:109"/>
			<unix-def:uwrite var_check="all" datatype="boolean" var_ref="oval:gov.nist.usgcb.rhel:var:110"/>
			<unix-def:uexec var_check="all" datatype="boolean" var_ref="oval:gov.nist.usgcb.rhel:var:111"/>
			<unix-def:gread var_check="all" datatype="boolean" var_ref="oval:gov.nist.usgcb.rhel:var:112"/>
			<unix-def:gwrite var_check="all" datatype="boolean" var_ref="oval:gov.nist.usgcb.rhel:var:113"/>
			<unix-def:gexec var_check="all" datatype="boolean" var_ref="oval:gov.nist.usgcb.rhel:var:114"/>
			<unix-def:oread var_check="all" datatype="boolean" var_ref="oval:gov.nist.usgcb.rhel:var:115"/>
			<unix-def:owrite var_check="all" datatype="boolean" var_ref="oval:gov.nist.usgcb.rhel:var:116"/>
			<unix-def:oexec var_check="all" datatype="boolean" var_ref="oval:gov.nist.usgcb.rhel:var:117"/>
		</unix-def:file_state>
		<unix-def:file_state id="oval:gov.nist.usgcb.rhel:ste:20314" version="1">
			<unix-def:user_id datatype="int">0</unix-def:user_id>
		</unix-def:file_state>
		<ind-def:textfilecontent54_state id="oval:gov.nist.usgcb.rhel:ste:20324" version="1">
			<ind-def:subexpression var_check="all" operation="equals" var_ref="oval:gov.nist.usgcb.rhel:var:20324"/>
		</ind-def:textfilecontent54_state>
		<ind-def:textfilecontent54_state id="oval:gov.nist.usgcb.rhel:ste:20325" version="1">
			<ind-def:subexpression var_check="all" operation="equals" var_ref="oval:gov.nist.usgcb.rhel:var:20325"/>
		</ind-def:textfilecontent54_state>
		<unix-def:file_state id="oval:gov.nist.usgcb.rhel:ste:20326" version="1">
			<unix-def:uread var_check="all" datatype="boolean" var_ref="oval:gov.nist.usgcb.rhel:var:118"/>
			<unix-def:uwrite var_check="all" datatype="boolean" var_ref="oval:gov.nist.usgcb.rhel:var:119"/>
			<unix-def:uexec var_check="all" datatype="boolean" var_ref="oval:gov.nist.usgcb.rhel:var:120"/>
			<unix-def:gread var_check="all" datatype="boolean" var_ref="oval:gov.nist.usgcb.rhel:var:121"/>
			<unix-def:gwrite var_check="all" datatype="boolean" var_ref="oval:gov.nist.usgcb.rhel:var:122"/>
			<unix-def:gexec var_check="all" datatype="boolean" var_ref="oval:gov.nist.usgcb.rhel:var:123"/>
			<unix-def:oread var_check="all" datatype="boolean" var_ref="oval:gov.nist.usgcb.rhel:var:124"/>
			<unix-def:owrite var_check="all" datatype="boolean" var_ref="oval:gov.nist.usgcb.rhel:var:125"/>
			<unix-def:oexec var_check="all" datatype="boolean" var_ref="oval:gov.nist.usgcb.rhel:var:126"/>
		</unix-def:file_state>
		<unix-def:file_state id="oval:gov.nist.usgcb.rhel:ste:20327" version="1">
			<unix-def:uread var_check="all" datatype="boolean" var_ref="oval:gov.nist.usgcb.rhel:var:127"/>
			<unix-def:uwrite var_check="all" datatype="boolean" var_ref="oval:gov.nist.usgcb.rhel:var:128"/>
			<unix-def:uexec var_check="all" datatype="boolean" var_ref="oval:gov.nist.usgcb.rhel:var:129"/>
			<unix-def:gread var_check="all" datatype="boolean" var_ref="oval:gov.nist.usgcb.rhel:var:130"/>
			<unix-def:gwrite var_check="all" datatype="boolean" var_ref="oval:gov.nist.usgcb.rhel:var:131"/>
			<unix-def:gexec var_check="all" datatype="boolean" var_ref="oval:gov.nist.usgcb.rhel:var:132"/>
			<unix-def:oread var_check="all" datatype="boolean" var_ref="oval:gov.nist.usgcb.rhel:var:133"/>
			<unix-def:owrite var_check="all" datatype="boolean" var_ref="oval:gov.nist.usgcb.rhel:var:134"/>
			<unix-def:oexec var_check="all" datatype="boolean" var_ref="oval:gov.nist.usgcb.rhel:var:135"/>
		</unix-def:file_state>
		<unix-def:file_state id="oval:gov.nist.usgcb.rhel:ste:20328" version="1">
			<unix-def:uread var_check="all" datatype="boolean" var_ref="oval:gov.nist.usgcb.rhel:var:136"/>
			<unix-def:uwrite var_check="all" datatype="boolean" var_ref="oval:gov.nist.usgcb.rhel:var:137"/>
			<unix-def:uexec var_check="all" datatype="boolean" var_ref="oval:gov.nist.usgcb.rhel:var:138"/>
			<unix-def:gread var_check="all" datatype="boolean" var_ref="oval:gov.nist.usgcb.rhel:var:139"/>
			<unix-def:gwrite var_check="all" datatype="boolean" var_ref="oval:gov.nist.usgcb.rhel:var:140"/>
			<unix-def:gexec var_check="all" datatype="boolean" var_ref="oval:gov.nist.usgcb.rhel:var:141"/>
			<unix-def:oread var_check="all" datatype="boolean" var_ref="oval:gov.nist.usgcb.rhel:var:142"/>
			<unix-def:owrite var_check="all" datatype="boolean" var_ref="oval:gov.nist.usgcb.rhel:var:143"/>
			<unix-def:oexec var_check="all" datatype="boolean" var_ref="oval:gov.nist.usgcb.rhel:var:144"/>
		</unix-def:file_state>
		<unix-def:file_state id="oval:gov.nist.usgcb.rhel:ste:20329" version="1">
			<unix-def:group_id datatype="int">0</unix-def:group_id>
		</unix-def:file_state>
		<unix-def:file_state id="oval:gov.nist.usgcb.rhel:ste:20330" version="1">
			<unix-def:uread var_check="all" datatype="boolean" var_ref="oval:gov.nist.usgcb.rhel:var:145"/>
			<unix-def:uwrite var_check="all" datatype="boolean" var_ref="oval:gov.nist.usgcb.rhel:var:146"/>
			<unix-def:uexec var_check="all" datatype="boolean" var_ref="oval:gov.nist.usgcb.rhel:var:147"/>
			<unix-def:gread var_check="all" datatype="boolean" var_ref="oval:gov.nist.usgcb.rhel:var:148"/>
			<unix-def:gwrite var_check="all" datatype="boolean" var_ref="oval:gov.nist.usgcb.rhel:var:149"/>
			<unix-def:gexec var_check="all" datatype="boolean" var_ref="oval:gov.nist.usgcb.rhel:var:150"/>
			<unix-def:oread var_check="all" datatype="boolean" var_ref="oval:gov.nist.usgcb.rhel:var:151"/>
			<unix-def:owrite var_check="all" datatype="boolean" var_ref="oval:gov.nist.usgcb.rhel:var:152"/>
			<unix-def:oexec var_check="all" datatype="boolean" var_ref="oval:gov.nist.usgcb.rhel:var:153"/>
		</unix-def:file_state>
		<ind-def:textfilecontent54_state id="oval:gov.nist.usgcb.rhel:ste:20337" version="1">
			<ind-def:subexpression operation="equals">yes</ind-def:subexpression>
		</ind-def:textfilecontent54_state>
		<ind-def:textfilecontent54_state id="oval:gov.nist.usgcb.rhel:ste:20338" version="1">
			<ind-def:subexpression operation="equals">yes</ind-def:subexpression>
		</ind-def:textfilecontent54_state>
		<ind-def:textfilecontent54_state id="oval:gov.nist.usgcb.rhel:ste:20339" version="1">
			<ind-def:subexpression operation="equals">yes</ind-def:subexpression>
		</ind-def:textfilecontent54_state>
		<ind-def:textfilecontent54_state id="oval:gov.nist.usgcb.rhel:ste:20340112" version="1">
			<ind-def:subexpression operation="pattern match">sec=(krb5i|ntlmv2i)</ind-def:subexpression>
		</ind-def:textfilecontent54_state>
		<ind-def:textfilecontent54_state id="oval:gov.nist.usgcb.rhel:ste:20343" version="1">
			<ind-def:subexpression operation="equals">on</ind-def:subexpression>
		</ind-def:textfilecontent54_state>
		<ind-def:textfilecontent54_state id="oval:gov.nist.usgcb.rhel:ste:20346" version="1">
			<ind-def:subexpression var_check="all" operation="equals" var_ref="oval:gov.nist.usgcb.rhel:var:20346"/>
		</ind-def:textfilecontent54_state>
		<ind-def:textfilecontent54_state id="oval:gov.nist.usgcb.rhel:ste:20345" version="1">
			<ind-def:subexpression operation="equals">on</ind-def:subexpression>
		</ind-def:textfilecontent54_state>
		<ind-def:textfilecontent54_state id="oval:gov.nist.usgcb.rhel:ste:20350" version="1">
			<ind-def:subexpression var_check="all" operation="equals" var_ref="oval:gov.nist.usgcb.rhel:var:20350"/>
		</ind-def:textfilecontent54_state>
		<ind-def:textfilecontent54_state id="oval:gov.nist.usgcb.rhel:ste:20347" version="1">
			<ind-def:subexpression var_check="all" operation="equals" var_ref="oval:gov.nist.usgcb.rhel:var:20347"/>
		</ind-def:textfilecontent54_state>
		<ind-def:textfilecontent54_state id="oval:gov.nist.usgcb.rhel:ste:20348" version="1">
			<ind-def:subexpression var_check="all" operation="equals" var_ref="oval:gov.nist.usgcb.rhel:var:20348"/>
		</ind-def:textfilecontent54_state>
		<ind-def:textfilecontent54_state id="oval:gov.nist.usgcb.rhel:ste:20344" version="1">
			<ind-def:subexpression operation="equals">on</ind-def:subexpression>
		</ind-def:textfilecontent54_state>
		<ind-def:textfilecontent54_state id="oval:gov.nist.usgcb.rhel:ste:20349" version="1">
			<ind-def:subexpression var_check="all" operation="equals" var_ref="oval:gov.nist.usgcb.rhel:var:20349"/>
		</ind-def:textfilecontent54_state>
		<ind-def:textfilecontent54_state id="oval:gov.nist.usgcb.rhel:ste:20353" version="1">
			<ind-def:subexpression var_check="all" operation="equals" var_ref="oval:gov.nist.usgcb.rhel:var:20353"/>
		</ind-def:textfilecontent54_state>
		<ind-def:textfilecontent54_state id="oval:gov.nist.usgcb.rhel:ste:20354" version="1">
			<ind-def:subexpression var_check="all" operation="equals" var_ref="oval:gov.nist.usgcb.rhel:var:20354"/>
		</ind-def:textfilecontent54_state>
		<ind-def:textfilecontent54_state id="oval:gov.nist.usgcb.rhel:ste:20351" version="1">
			<ind-def:subexpression var_check="all" operation="equals" var_ref="oval:gov.nist.usgcb.rhel:var:20351"/>
		</ind-def:textfilecontent54_state>
		<ind-def:textfilecontent54_state id="oval:gov.nist.usgcb.rhel:ste:20352" version="1">
			<ind-def:subexpression var_check="all" operation="equals" var_ref="oval:gov.nist.usgcb.rhel:var:20352"/>
		</ind-def:textfilecontent54_state>
		<!-- Added States -->
		<unix-def:file_state id="oval:gov.nist.usgcb.rhel:ste:1000400" version="1">
			<unix-def:uread datatype="boolean">true</unix-def:uread>
			<unix-def:uwrite datatype="boolean">false</unix-def:uwrite>
			<unix-def:uexec datatype="boolean">false</unix-def:uexec>
			<unix-def:gread datatype="boolean">false</unix-def:gread>
			<unix-def:gwrite datatype="boolean">false</unix-def:gwrite>
			<unix-def:gexec datatype="boolean">false</unix-def:gexec>
			<unix-def:oread datatype="boolean">false</unix-def:oread>
			<unix-def:owrite datatype="boolean">false</unix-def:owrite>
			<unix-def:oexec datatype="boolean">false</unix-def:oexec>
		</unix-def:file_state>
		<unix-def:file_state id="oval:gov.nist.usgcb.rhel:ste:1000644" version="1">
			<unix-def:uread datatype="boolean">true</unix-def:uread>
			<unix-def:uwrite datatype="boolean">true</unix-def:uwrite>
			<unix-def:uexec datatype="boolean">false</unix-def:uexec>
			<unix-def:gread datatype="boolean">true</unix-def:gread>
			<unix-def:gwrite datatype="boolean">false</unix-def:gwrite>
			<unix-def:gexec datatype="boolean">false</unix-def:gexec>
			<unix-def:oread datatype="boolean">true</unix-def:oread>
			<unix-def:owrite datatype="boolean">false</unix-def:owrite>
			<unix-def:oexec datatype="boolean">false</unix-def:oexec>
		</unix-def:file_state>
		<unix-def:file_state id="oval:gov.nist.usgcb.rhel:ste:10004710" version="1">
			<unix-def:uread datatype="boolean">true</unix-def:uread>
			<unix-def:uwrite datatype="boolean">true</unix-def:uwrite>
			<unix-def:uexec datatype="boolean">true</unix-def:uexec>
			<unix-def:gread datatype="boolean">false</unix-def:gread>
			<unix-def:gwrite datatype="boolean">false</unix-def:gwrite>
			<unix-def:gexec datatype="boolean">true</unix-def:gexec>
			<unix-def:oread datatype="boolean">false</unix-def:oread>
			<unix-def:owrite datatype="boolean">false</unix-def:owrite>
			<unix-def:oexec datatype="boolean">false</unix-def:oexec>
		</unix-def:file_state>
		<unix-def:file_state id="oval:gov.nist.usgcb.rhel:ste:1000600" version="1">
			<unix-def:uread datatype="boolean">true</unix-def:uread>
			<unix-def:uwrite datatype="boolean">true</unix-def:uwrite>
			<unix-def:uexec datatype="boolean">false</unix-def:uexec>
			<unix-def:gread datatype="boolean">false</unix-def:gread>
			<unix-def:gwrite datatype="boolean">false</unix-def:gwrite>
			<unix-def:gexec datatype="boolean">false</unix-def:gexec>
			<unix-def:oread datatype="boolean">false</unix-def:oread>
			<unix-def:owrite datatype="boolean">false</unix-def:owrite>
			<unix-def:oexec datatype="boolean">false</unix-def:oexec>
		</unix-def:file_state>
		<unix-def:file_state id="oval:gov.nist.usgcb.rhel:ste:1000700" version="1">
			<unix-def:uread datatype="boolean">true</unix-def:uread>
			<unix-def:uwrite datatype="boolean">true</unix-def:uwrite>
			<unix-def:uexec datatype="boolean">true</unix-def:uexec>
			<unix-def:gread datatype="boolean">false</unix-def:gread>
			<unix-def:gwrite datatype="boolean">false</unix-def:gwrite>
			<unix-def:gexec datatype="boolean">false</unix-def:gexec>
			<unix-def:oread datatype="boolean">false</unix-def:oread>
			<unix-def:owrite datatype="boolean">false</unix-def:owrite>
			<unix-def:oexec datatype="boolean">false</unix-def:oexec>
		</unix-def:file_state>
		<unix-def:file_state id="oval:gov.nist.usgcb.rhel:ste:1000701" version="1">
			<unix-def:uread datatype="boolean">true</unix-def:uread>
			<unix-def:uwrite datatype="boolean">true</unix-def:uwrite>
			<unix-def:uexec datatype="boolean">true</unix-def:uexec>
			<unix-def:gread datatype="boolean">true</unix-def:gread>
			<unix-def:gwrite datatype="boolean">false</unix-def:gwrite>
			<unix-def:gexec datatype="boolean">false</unix-def:gexec>
			<unix-def:oread datatype="boolean">false</unix-def:oread>
			<unix-def:owrite datatype="boolean">false</unix-def:owrite>
			<unix-def:oexec datatype="boolean">false</unix-def:oexec>
		</unix-def:file_state>
		<ind-def:textfilecontent54_state id="oval:gov.nist.usgcb.rhel:ste:100000" version="1">
			<ind-def:instance datatype="int">1</ind-def:instance>
			<ind-def:subexpression datatype="int" operation="less than or equal" var_ref="oval:gov.nist.usgcb.rhel:var:200786" var_check="all"/>
		</ind-def:textfilecontent54_state>
		<ind-def:textfilecontent54_state id="oval:gov.nist.usgcb.rhel:ste:100001" version="1">
			<ind-def:instance datatype="int">1</ind-def:instance>
			<ind-def:subexpression datatype="string" operation="equals" var_ref="oval:gov.nist.usgcb.rhel:var:20071" var_check="all"/>
		</ind-def:textfilecontent54_state>
		<ind-def:textfilecontent54_state id="oval:gov.nist.usgcb.rhel:ste:100002" version="1">
			<ind-def:instance datatype="int">1</ind-def:instance>
			<ind-def:subexpression datatype="int" operation="less than or equal" var_ref="oval:gov.nist.usgcb.rhel:var:200781" var_check="all"/>
		</ind-def:textfilecontent54_state>
		<ind-def:textfilecontent54_state id="oval:gov.nist.usgcb.rhel:ste:100003" version="1">
			<ind-def:instance datatype="int">1</ind-def:instance>
			<ind-def:subexpression datatype="int" operation="less than or equal" var_ref="oval:gov.nist.usgcb.rhel:var:200785" var_check="all"/>
		</ind-def:textfilecontent54_state>
		<ind-def:textfilecontent54_state id="oval:gov.nist.usgcb.rhel:ste:141130" version="1">
			<ind-def:instance datatype="int">1</ind-def:instance>
			<ind-def:subexpression datatype="int" operation="less than or equal" var_ref="oval:gov.nist.usgcb.rhel:var:141130" var_check="all"/>
		</ind-def:textfilecontent54_state>
		<ind-def:textfilecontent54_state id="oval:gov.nist.usgcb.rhel:ste:100005" version="1">
			<ind-def:instance datatype="int">1</ind-def:instance>
			<ind-def:subexpression datatype="int" operation="less than or equal" var_ref="oval:gov.nist.usgcb.rhel:var:200784" var_check="all"/>
		</ind-def:textfilecontent54_state>
		<ind-def:textfilecontent54_state id="oval:gov.nist.usgcb.rhel:ste:100006" version="1">
			<ind-def:instance datatype="int">1</ind-def:instance>
			<ind-def:subexpression datatype="int" operation="greater than or equal" var_ref="oval:gov.nist.usgcb.rhel:var:200787" var_check="all"/>
		</ind-def:textfilecontent54_state>
		<lin-def:partition_state version="1" id="oval:gov.nist.usgcb.rhel:ste:144120">
			<lin-def:mount_options entity_check="at least one">nodev</lin-def:mount_options>
		</lin-def:partition_state>
		<unix-def:runlevel_state version="1" id="oval:gov.nist.usgcb.rhel:ste:20007" comment="daemon is not running or is stopping">
			<unix-def:start datatype="boolean">false</unix-def:start>
			<unix-def:kill datatype="boolean">true</unix-def:kill>
		</unix-def:runlevel_state>
		<unix-def:runlevel_state version="1" id="oval:gov.nist.usgcb.rhel:ste:20008" comment="daemon is running and not stopping">
			<unix-def:start datatype="boolean">true</unix-def:start>
			<unix-def:kill datatype="boolean">false</unix-def:kill>
		</unix-def:runlevel_state>
		<ind-def:textfilecontent54_state id="oval:gov.nist.usgcb.rhel:ste:99900" version="1" comment="Required value of INACTIVE in /etc/default/useradd">
			<ind-def:instance datatype="int">1</ind-def:instance>
			<ind-def:subexpression datatype="int">30</ind-def:subexpression>
		</ind-def:textfilecontent54_state>
	</states>
	<variables>
		<external_variable id="oval:gov.nist.usgcb.rhel:var:141130" version="1" datatype="int" comment="External variable for definition 141130"/>
		<external_variable id="oval:gov.nist.usgcb.rhel:var:20042" version="1" datatype="string" comment="External variable for definition 20042"/>
		<external_variable id="oval:gov.nist.usgcb.rhel:var:20043" version="1" datatype="string" comment="External variable for definition 20043"/>
		<external_variable id="oval:gov.nist.usgcb.rhel:var:20044" version="1" datatype="string" comment="External variable for definition 20044"/>
		<external_variable id="oval:gov.nist.usgcb.rhel:var:20045" version="1" datatype="string" comment="External variable for definition 20045"/>
		<external_variable id="oval:gov.nist.usgcb.rhel:var:20053" version="1" datatype="string" comment="External variable for definition 20053"/>
		<external_variable id="oval:gov.nist.usgcb.rhel:var:20071" version="1" datatype="string" comment="External variable for definition 20071"/>
		<external_variable id="oval:gov.nist.usgcb.rhel:var:200781" version="1" datatype="int" comment="External variable for definition 20078"/>
		<external_variable id="oval:gov.nist.usgcb.rhel:var:200783" version="1" datatype="int" comment="External variable for definition 20078"/>
		<external_variable id="oval:gov.nist.usgcb.rhel:var:200784" version="1" datatype="int" comment="External variable for definition 20078"/>
		<external_variable id="oval:gov.nist.usgcb.rhel:var:200785" version="1" datatype="int" comment="External variable for definition 20078"/>
		<external_variable id="oval:gov.nist.usgcb.rhel:var:200786" version="1" datatype="int" comment="External variable for definition 20078"/>
		<external_variable id="oval:gov.nist.usgcb.rhel:var:200787" version="1" datatype="int" comment="External variable for definition 20078"/>
		<external_variable id="oval:gov.nist.usgcb.rhel:var:200801" version="1" datatype="int" comment="External variable for definition 20080 deny"/>
		<external_variable id="oval:gov.nist.usgcb.rhel:var:200802" version="1" datatype="int" comment="External variable for definition 20080 lock_time"/>
		<external_variable id="oval:gov.nist.usgcb.rhel:var:200803" version="1" datatype="int" comment="External variable for definition 20080 unlock_time"/>
		<external_variable id="oval:gov.nist.usgcb.rhel:var:20081" version="1" datatype="string" comment="External variable for definition 20081"/>
		<external_variable id="oval:gov.nist.usgcb.rhel:var:20082" version="1" datatype="string" comment="External variable for definition 20082"/>
		<external_variable id="oval:gov.nist.usgcb.rhel:var:20083" version="1" datatype="string" comment="External variable for definition 20083 Password hashing algorithm"/>
		<external_variable id="oval:gov.nist.usgcb.rhel:var:20084" version="1" datatype="int" comment="External variable for definition 20084 number of passwords to remember"/>
		<external_variable id="oval:gov.nist.usgcb.rhel:var:20087" version="1" datatype="string" comment="External variable for definition 20087 - 20090"/>
		<external_variable id="oval:gov.nist.usgcb.rhel:var:20092" version="1" datatype="string" comment="External variable for definition 20092"/>
		<external_variable id="oval:gov.nist.usgcb.rhel:var:20094" version="1" datatype="string" comment="External variable for definition 20094"/>
		<external_variable id="oval:gov.nist.usgcb.rhel:var:20093" version="1" datatype="string" comment="External variable for definition 20093"/>
		<external_variable id="oval:gov.nist.usgcb.rhel:var:20098" version="1" datatype="string" comment="External variable for definitions 20098 20100 Inactivity timout"/>
		<external_variable id="oval:gov.nist.usgcb.rhel:var:20099" version="1" datatype="int" comment="External variable for definitions 20099"/>
		<!-- turn minutes into seconds -->
		<external_variable id="oval:gov.nist.usgcb.rhel:var:20102" version="1" datatype="string" comment="External variable for definitions 200102 20103 Warning Banner"/>
		<external_variable id="oval:gov.nist.usgcb.rhel:var:20106" version="1" datatype="string" comment="External variable for definition 20106 enforcing"/>
		<external_variable id="oval:gov.nist.usgcb.rhel:var:20107" version="1" datatype="string" comment="External variable for definition 20107"/>
		<external_variable id="oval:gov.nist.usgcb.rhel:var:20115" version="1" datatype="string" comment="External variable for definition 20115"/>
		<external_variable id="oval:gov.nist.usgcb.rhel:var:20116" version="1" datatype="string" comment="External variable for definition 20116"/>
		<external_variable id="oval:gov.nist.usgcb.rhel:var:20117" version="1" datatype="string" comment="External variable for definition 20117"/>
		<external_variable id="oval:gov.nist.usgcb.rhel:var:20118" version="1" datatype="string" comment="External variable for definition 20118"/>
		<external_variable id="oval:gov.nist.usgcb.rhel:var:20119" version="1" datatype="string" comment="External variable for definition 20119"/>
		<external_variable id="oval:gov.nist.usgcb.rhel:var:20120" version="1" datatype="string" comment="External variable for definition 20120"/>
		<external_variable id="oval:gov.nist.usgcb.rhel:var:20121" version="1" datatype="string" comment="External variable for definition 20121"/>
		<external_variable id="oval:gov.nist.usgcb.rhel:var:20122" version="1" datatype="string" comment="External variable for definition 20122"/>
		<external_variable id="oval:gov.nist.usgcb.rhel:var:20123" version="1" datatype="string" comment="External variable for definition 20123"/>
		<external_variable id="oval:gov.nist.usgcb.rhel:var:20124" version="1" datatype="string" comment="External variable for definition 20124"/>
		<external_variable id="oval:gov.nist.usgcb.rhel:var:20125" version="1" datatype="string" comment="External variable for definition 20125"/>
		<external_variable id="oval:gov.nist.usgcb.rhel:var:20126" version="1" datatype="string" comment="External variable for definition 20126"/>
		<external_variable id="oval:gov.nist.usgcb.rhel:var:20134" version="1" datatype="string" comment="External variable for definition 20134"/>
		<external_variable id="oval:gov.nist.usgcb.rhel:var:20135" version="1" datatype="string" comment="External variable for definition 20135"/>
		<external_variable id="oval:gov.nist.usgcb.rhel:var:20136" version="1" datatype="string" comment="External variable for definition 20136"/>
		<external_variable id="oval:gov.nist.usgcb.rhel:var:20137" version="1" datatype="string" comment="External variable for definition 20137"/>
		<external_variable id="oval:gov.nist.usgcb.rhel:var:20138" version="1" datatype="string" comment="External variable for definition 20138"/>
		<external_variable id="oval:gov.nist.usgcb.rhel:var:20139" version="1" datatype="string" comment="External variable for definition 20139"/>
		<external_variable id="oval:gov.nist.usgcb.rhel:var:20140" version="1" datatype="string" comment="External variable for definition 20140"/>
		<external_variable id="oval:gov.nist.usgcb.rhel:var:20141" version="1" datatype="string" comment="External variable for definition 20141"/>
		<external_variable id="oval:gov.nist.usgcb.rhel:var:20142" version="1" datatype="string" comment="External variable for definition 20142"/>
		<external_variable id="oval:gov.nist.usgcb.rhel:var:20143" version="1" datatype="string" comment="External variable for definition 20143"/>
		<external_variable id="oval:gov.nist.usgcb.rhel:var:20144" version="1" datatype="string" comment="External variable for definition 20144"/>
		<external_variable id="oval:gov.nist.usgcb.rhel:var:20145" version="1" datatype="string" comment="External variable for definition 20145"/>
		<external_variable id="oval:gov.nist.usgcb.rhel:var:20149" version="1" datatype="string" comment="External variable for definition 20149"/>
		<external_variable id="oval:gov.nist.usgcb.rhel:var:20150" version="1" datatype="string" comment="External variable for definition 20150"/>
		<external_variable id="oval:gov.nist.usgcb.rhel:var:20151" version="1" datatype="string" comment="External variable for definition 20151"/>
		<external_variable id="oval:gov.nist.usgcb.rhel:var:20208" version="1" datatype="string" comment="External variable for definition 20208"/>
		<external_variable id="oval:gov.nist.usgcb.rhel:var:20209" version="1" datatype="string" comment="External variable for definition 20209"/>
		<external_variable id="oval:gov.nist.usgcb.rhel:var:20210" version="1" datatype="string" comment="External variable for definition 20210"/>
		<external_variable id="oval:gov.nist.usgcb.rhel:var:20211" version="1" datatype="string" comment="External variable for definition 20211"/>
		<external_variable id="oval:gov.nist.usgcb.rhel:var:20212" version="1" datatype="string" comment="External variable for definition 20212"/>
		<external_variable id="oval:gov.nist.usgcb.rhel:var:20213" version="1" datatype="string" comment="External variable for definition 20213"/>
		<external_variable id="oval:gov.nist.usgcb.rhel:var:20214" version="1" datatype="string" comment="External variable for definition 20214 20216 20217 20218"/>
		<external_variable id="oval:gov.nist.usgcb.rhel:var:20219" version="1" datatype="string" comment="External variable for definition 20219 20220 20221 20222 20223"/>
		<external_variable id="oval:gov.nist.usgcb.rhel:var:20224" version="1" datatype="string" comment="External variable for definition 20224"/>
		<external_variable id="oval:gov.nist.usgcb.rhel:var:20225" version="1" datatype="string" comment="External variable for definition 20225"/>
		<external_variable id="oval:gov.nist.usgcb.rhel:var:20226" version="1" datatype="string" comment="External variable for definition 20226"/>
		<external_variable id="oval:gov.nist.usgcb.rhel:var:20227" version="1" datatype="string" comment="External variable for definition 20227"/>
		<external_variable id="oval:gov.nist.usgcb.rhel:var:20228" version="1" datatype="string" comment="External variable for definition 20228"/>
		<external_variable id="oval:gov.nist.usgcb.rhel:var:20239" version="1" datatype="int" comment="External variable for ClientActiveinterval in definition 20239"/>
		<external_variable id="oval:gov.nist.usgcb.rhel:var:20246" version="1" datatype="string" comment="External variable for definition 20246"/>
		<external_variable id="oval:gov.nist.usgcb.rhel:var:20262" version="1" datatype="string" comment="External variable for definition 20262"/>
		<external_variable id="oval:gov.nist.usgcb.rhel:var:20264" version="1" datatype="string" comment="External variable for definition 20264"/>
		<external_variable id="oval:gov.nist.usgcb.rhel:var:20267" version="1" datatype="string" comment="External variable for definition 20267"/>
		<external_variable id="oval:gov.nist.usgcb.rhel:var:20290" version="1" datatype="string" comment="External variable for definition 20290"/>
		<external_variable id="oval:gov.nist.usgcb.rhel:var:20291" version="1" datatype="string" comment="External variable for definition 20291"/>
		<external_variable id="oval:gov.nist.usgcb.rhel:var:20313" version="1" datatype="string" comment="External variable for definition 20313"/>
		<external_variable id="oval:gov.nist.usgcb.rhel:var:20314" version="1" datatype="string" comment="External variable for definition 20314"/>
		<external_variable id="oval:gov.nist.usgcb.rhel:var:20315" version="1" datatype="string" comment="External variable for definition 20315"/>
		<external_variable id="oval:gov.nist.usgcb.rhel:var:20324" version="1" datatype="string" comment="External variable for definition 20324"/>
		<external_variable id="oval:gov.nist.usgcb.rhel:var:20325" version="1" datatype="string" comment="External variable for definition 20325"/>
		<external_variable id="oval:gov.nist.usgcb.rhel:var:20326" version="1" datatype="string" comment="External variable for definition 20326"/>
		<external_variable id="oval:gov.nist.usgcb.rhel:var:20327" version="1" datatype="string" comment="External variable for definition 20327"/>
		<external_variable id="oval:gov.nist.usgcb.rhel:var:20328" version="1" datatype="string" comment="External variable for definition 20328"/>
		<external_variable id="oval:gov.nist.usgcb.rhel:var:20329" version="1" datatype="string" comment="External variable for definition 20329"/>
		<external_variable id="oval:gov.nist.usgcb.rhel:var:20330" version="1" datatype="string" comment="External variable for definition 20330"/>
		<external_variable id="oval:gov.nist.usgcb.rhel:var:20346" version="1" datatype="string" comment="External variable for definition 20346"/>
		<external_variable id="oval:gov.nist.usgcb.rhel:var:20347" version="1" datatype="string" comment="External variable for definition 20347"/>
		<external_variable id="oval:gov.nist.usgcb.rhel:var:20348" version="1" datatype="string" comment="External variable for definition 20348"/>
		<external_variable id="oval:gov.nist.usgcb.rhel:var:20349" version="1" datatype="string" comment="External variable for definition 20349"/>
		<external_variable id="oval:gov.nist.usgcb.rhel:var:20350" version="1" datatype="string" comment="External variable for definition 20350"/>
		<external_variable id="oval:gov.nist.usgcb.rhel:var:20351" version="1" datatype="string" comment="External variable for definition 20351"/>
		<external_variable id="oval:gov.nist.usgcb.rhel:var:20352" version="1" datatype="string" comment="External variable for definition 20352"/>
		<external_variable id="oval:gov.nist.usgcb.rhel:var:20353" version="1" datatype="string" comment="External variable for definition 20353"/>
		<external_variable id="oval:gov.nist.usgcb.rhel:var:20354" version="1" datatype="string" comment="External variable for definition 20354"/>
		<local_variable id="oval:gov.nist.usgcb.rhel:var:201490" version="1" datatype="string" comment="list of paths in /etc/syslog.conf">
			<object_component item_field="subexpression" object_ref="oval:gov.nist.usgcb.rhel:obj:201490"/>
		</local_variable>
		<local_variable id="oval:gov.nist.usgcb.rhel:var:1" version="1" datatype="boolean" comment="Bit for a permission type">
			<substring substring_length="1" substring_start="1">
				<variable_component var_ref="oval:gov.nist.usgcb.rhel:var:20042"/>
			</substring>
		</local_variable>
		<local_variable id="oval:gov.nist.usgcb.rhel:var:2" version="1" datatype="boolean" comment="Bit for a permission type">
			<substring substring_length="1" substring_start="2">
				<variable_component var_ref="oval:gov.nist.usgcb.rhel:var:20042"/>
			</substring>
		</local_variable>
		<local_variable id="oval:gov.nist.usgcb.rhel:var:3" version="1" datatype="boolean" comment="Bit for a permission type">
			<substring substring_length="1" substring_start="3">
				<variable_component var_ref="oval:gov.nist.usgcb.rhel:var:20042"/>
			</substring>
		</local_variable>
		<local_variable id="oval:gov.nist.usgcb.rhel:var:4" version="1" datatype="boolean" comment="Bit for a permission type">
			<substring substring_length="1" substring_start="4">
				<variable_component var_ref="oval:gov.nist.usgcb.rhel:var:20042"/>
			</substring>
		</local_variable>
		<local_variable id="oval:gov.nist.usgcb.rhel:var:5" version="1" datatype="boolean" comment="Bit for a permission type">
			<substring substring_length="1" substring_start="5">
				<variable_component var_ref="oval:gov.nist.usgcb.rhel:var:20042"/>
			</substring>
		</local_variable>
		<local_variable id="oval:gov.nist.usgcb.rhel:var:6" version="1" datatype="boolean" comment="Bit for a permission type">
			<substring substring_length="1" substring_start="6">
				<variable_component var_ref="oval:gov.nist.usgcb.rhel:var:20042"/>
			</substring>
		</local_variable>
		<local_variable id="oval:gov.nist.usgcb.rhel:var:7" version="1" datatype="boolean" comment="Bit for a permission type">
			<substring substring_length="1" substring_start="7">
				<variable_component var_ref="oval:gov.nist.usgcb.rhel:var:20042"/>
			</substring>
		</local_variable>
		<local_variable id="oval:gov.nist.usgcb.rhel:var:8" version="1" datatype="boolean" comment="Bit for a permission type">
			<substring substring_length="1" substring_start="8">
				<variable_component var_ref="oval:gov.nist.usgcb.rhel:var:20042"/>
			</substring>
		</local_variable>
		<local_variable id="oval:gov.nist.usgcb.rhel:var:9" version="1" datatype="boolean" comment="Bit for a permission type">
			<substring substring_length="1" substring_start="9">
				<variable_component var_ref="oval:gov.nist.usgcb.rhel:var:20042"/>
			</substring>
		</local_variable>
		<local_variable id="oval:gov.nist.usgcb.rhel:var:10" version="1" datatype="boolean" comment="Bit for a permission type">
			<substring substring_length="1" substring_start="1">
				<variable_component var_ref="oval:gov.nist.usgcb.rhel:var:20043"/>
			</substring>
		</local_variable>
		<local_variable id="oval:gov.nist.usgcb.rhel:var:11" version="1" datatype="boolean" comment="Bit for a permission type">
			<substring substring_length="1" substring_start="2">
				<variable_component var_ref="oval:gov.nist.usgcb.rhel:var:20043"/>
			</substring>
		</local_variable>
		<local_variable id="oval:gov.nist.usgcb.rhel:var:12" version="1" datatype="boolean" comment="Bit for a permission type">
			<substring substring_length="1" substring_start="3">
				<variable_component var_ref="oval:gov.nist.usgcb.rhel:var:20043"/>
			</substring>
		</local_variable>
		<local_variable id="oval:gov.nist.usgcb.rhel:var:13" version="1" datatype="boolean" comment="Bit for a permission type">
			<substring substring_length="1" substring_start="4">
				<variable_component var_ref="oval:gov.nist.usgcb.rhel:var:20043"/>
			</substring>
		</local_variable>
		<local_variable id="oval:gov.nist.usgcb.rhel:var:14" version="1" datatype="boolean" comment="Bit for a permission type">
			<substring substring_length="1" substring_start="5">
				<variable_component var_ref="oval:gov.nist.usgcb.rhel:var:20043"/>
			</substring>
		</local_variable>
		<local_variable id="oval:gov.nist.usgcb.rhel:var:15" version="1" datatype="boolean" comment="Bit for a permission type">
			<substring substring_length="1" substring_start="6">
				<variable_component var_ref="oval:gov.nist.usgcb.rhel:var:20043"/>
			</substring>
		</local_variable>
		<local_variable id="oval:gov.nist.usgcb.rhel:var:16" version="1" datatype="boolean" comment="Bit for a permission type">
			<substring substring_length="1" substring_start="7">
				<variable_component var_ref="oval:gov.nist.usgcb.rhel:var:20043"/>
			</substring>
		</local_variable>
		<local_variable id="oval:gov.nist.usgcb.rhel:var:17" version="1" datatype="boolean" comment="Bit for a permission type">
			<substring substring_length="1" substring_start="8">
				<variable_component var_ref="oval:gov.nist.usgcb.rhel:var:20043"/>
			</substring>
		</local_variable>
		<local_variable id="oval:gov.nist.usgcb.rhel:var:18" version="1" datatype="boolean" comment="Bit for a permission type">
			<substring substring_length="1" substring_start="9">
				<variable_component var_ref="oval:gov.nist.usgcb.rhel:var:20043"/>
			</substring>
		</local_variable>
		<local_variable id="oval:gov.nist.usgcb.rhel:var:19" version="1" datatype="boolean" comment="Bit for a permission type">
			<substring substring_length="1" substring_start="1">
				<variable_component var_ref="oval:gov.nist.usgcb.rhel:var:20044"/>
			</substring>
		</local_variable>
		<local_variable id="oval:gov.nist.usgcb.rhel:var:20" version="1" datatype="boolean" comment="Bit for a permission type">
			<substring substring_length="1" substring_start="2">
				<variable_component var_ref="oval:gov.nist.usgcb.rhel:var:20044"/>
			</substring>
		</local_variable>
		<local_variable id="oval:gov.nist.usgcb.rhel:var:21" version="1" datatype="boolean" comment="Bit for a permission type">
			<substring substring_length="1" substring_start="3">
				<variable_component var_ref="oval:gov.nist.usgcb.rhel:var:20044"/>
			</substring>
		</local_variable>
		<local_variable id="oval:gov.nist.usgcb.rhel:var:22" version="1" datatype="boolean" comment="Bit for a permission type">
			<substring substring_length="1" substring_start="4">
				<variable_component var_ref="oval:gov.nist.usgcb.rhel:var:20044"/>
			</substring>
		</local_variable>
		<local_variable id="oval:gov.nist.usgcb.rhel:var:23" version="1" datatype="boolean" comment="Bit for a permission type">
			<substring substring_length="1" substring_start="5">
				<variable_component var_ref="oval:gov.nist.usgcb.rhel:var:20044"/>
			</substring>
		</local_variable>
		<local_variable id="oval:gov.nist.usgcb.rhel:var:24" version="1" datatype="boolean" comment="Bit for a permission type">
			<substring substring_length="1" substring_start="6">
				<variable_component var_ref="oval:gov.nist.usgcb.rhel:var:20044"/>
			</substring>
		</local_variable>
		<local_variable id="oval:gov.nist.usgcb.rhel:var:25" version="1" datatype="boolean" comment="Bit for a permission type">
			<substring substring_length="1" substring_start="7">
				<variable_component var_ref="oval:gov.nist.usgcb.rhel:var:20044"/>
			</substring>
		</local_variable>
		<local_variable id="oval:gov.nist.usgcb.rhel:var:26" version="1" datatype="boolean" comment="Bit for a permission type">
			<substring substring_length="1" substring_start="8">
				<variable_component var_ref="oval:gov.nist.usgcb.rhel:var:20044"/>
			</substring>
		</local_variable>
		<local_variable id="oval:gov.nist.usgcb.rhel:var:27" version="1" datatype="boolean" comment="Bit for a permission type">
			<substring substring_length="1" substring_start="9">
				<variable_component var_ref="oval:gov.nist.usgcb.rhel:var:20044"/>
			</substring>
		</local_variable>
		<local_variable id="oval:gov.nist.usgcb.rhel:var:28" version="1" datatype="boolean" comment="Bit for a permission type">
			<substring substring_length="1" substring_start="1">
				<variable_component var_ref="oval:gov.nist.usgcb.rhel:var:20045"/>
			</substring>
		</local_variable>
		<local_variable id="oval:gov.nist.usgcb.rhel:var:29" version="1" datatype="boolean" comment="Bit for a permission type">
			<substring substring_length="1" substring_start="2">
				<variable_component var_ref="oval:gov.nist.usgcb.rhel:var:20045"/>
			</substring>
		</local_variable>
		<local_variable id="oval:gov.nist.usgcb.rhel:var:30" version="1" datatype="boolean" comment="Bit for a permission type">
			<substring substring_length="1" substring_start="3">
				<variable_component var_ref="oval:gov.nist.usgcb.rhel:var:20045"/>
			</substring>
		</local_variable>
		<local_variable id="oval:gov.nist.usgcb.rhel:var:31" version="1" datatype="boolean" comment="Bit for a permission type">
			<substring substring_length="1" substring_start="4">
				<variable_component var_ref="oval:gov.nist.usgcb.rhel:var:20045"/>
			</substring>
		</local_variable>
		<local_variable id="oval:gov.nist.usgcb.rhel:var:32" version="1" datatype="boolean" comment="Bit for a permission type">
			<substring substring_length="1" substring_start="5">
				<variable_component var_ref="oval:gov.nist.usgcb.rhel:var:20045"/>
			</substring>
		</local_variable>
		<local_variable id="oval:gov.nist.usgcb.rhel:var:33" version="1" datatype="boolean" comment="Bit for a permission type">
			<substring substring_length="1" substring_start="6">
				<variable_component var_ref="oval:gov.nist.usgcb.rhel:var:20045"/>
			</substring>
		</local_variable>
		<local_variable id="oval:gov.nist.usgcb.rhel:var:34" version="1" datatype="boolean" comment="Bit for a permission type">
			<substring substring_length="1" substring_start="7">
				<variable_component var_ref="oval:gov.nist.usgcb.rhel:var:20045"/>
			</substring>
		</local_variable>
		<local_variable id="oval:gov.nist.usgcb.rhel:var:35" version="1" datatype="boolean" comment="Bit for a permission type">
			<substring substring_length="1" substring_start="8">
				<variable_component var_ref="oval:gov.nist.usgcb.rhel:var:20045"/>
			</substring>
		</local_variable>
		<local_variable id="oval:gov.nist.usgcb.rhel:var:36" version="1" datatype="boolean" comment="Bit for a permission type">
			<substring substring_length="1" substring_start="9">
				<variable_component var_ref="oval:gov.nist.usgcb.rhel:var:20045"/>
			</substring>
		</local_variable>
		<local_variable id="oval:gov.nist.usgcb.rhel:var:200821" version="1" datatype="boolean" comment="Bit for a permission type">
			<substring substring_length="1" substring_start="1">
				<variable_component var_ref="oval:gov.nist.usgcb.rhel:var:20082"/>
			</substring>
		</local_variable>
		<local_variable id="oval:gov.nist.usgcb.rhel:var:200822" version="1" datatype="boolean" comment="Bit for a permission type">
			<substring substring_length="1" substring_start="2">
				<variable_component var_ref="oval:gov.nist.usgcb.rhel:var:20082"/>
			</substring>
		</local_variable>
		<local_variable id="oval:gov.nist.usgcb.rhel:var:200823" version="1" datatype="boolean" comment="Bit for a permission type">
			<substring substring_length="1" substring_start="3">
				<variable_component var_ref="oval:gov.nist.usgcb.rhel:var:20082"/>
			</substring>
		</local_variable>
		<local_variable id="oval:gov.nist.usgcb.rhel:var:200824" version="1" datatype="boolean" comment="Bit for a permission type">
			<substring substring_length="1" substring_start="4">
				<variable_component var_ref="oval:gov.nist.usgcb.rhel:var:20082"/>
			</substring>
		</local_variable>
		<local_variable id="oval:gov.nist.usgcb.rhel:var:200825" version="1" datatype="boolean" comment="Bit for a permission type">
			<substring substring_length="1" substring_start="5">
				<variable_component var_ref="oval:gov.nist.usgcb.rhel:var:20082"/>
			</substring>
		</local_variable>
		<local_variable id="oval:gov.nist.usgcb.rhel:var:200826" version="1" datatype="boolean" comment="Bit for a permission type">
			<substring substring_length="1" substring_start="6">
				<variable_component var_ref="oval:gov.nist.usgcb.rhel:var:20082"/>
			</substring>
		</local_variable>
		<local_variable id="oval:gov.nist.usgcb.rhel:var:200827" version="1" datatype="boolean" comment="Bit for a permission type">
			<substring substring_length="1" substring_start="7">
				<variable_component var_ref="oval:gov.nist.usgcb.rhel:var:20082"/>
			</substring>
		</local_variable>
		<local_variable id="oval:gov.nist.usgcb.rhel:var:200828" version="1" datatype="boolean" comment="Bit for a permission type">
			<substring substring_length="1" substring_start="8">
				<variable_component var_ref="oval:gov.nist.usgcb.rhel:var:20082"/>
			</substring>
		</local_variable>
		<local_variable id="oval:gov.nist.usgcb.rhel:var:200829" version="1" datatype="boolean" comment="Bit for a permission type">
			<substring substring_length="1" substring_start="9">
				<variable_component var_ref="oval:gov.nist.usgcb.rhel:var:20082"/>
			</substring>
		</local_variable>
		<local_variable id="oval:gov.nist.usgcb.rhel:var:200941" version="1" datatype="boolean" comment="Bit for a permission type">
			<substring substring_length="1" substring_start="1">
				<variable_component var_ref="oval:gov.nist.usgcb.rhel:var:20094"/>
			</substring>
		</local_variable>
		<local_variable id="oval:gov.nist.usgcb.rhel:var:200942" version="1" datatype="boolean" comment="Bit for a permission type">
			<substring substring_length="1" substring_start="2">
				<variable_component var_ref="oval:gov.nist.usgcb.rhel:var:20094"/>
			</substring>
		</local_variable>
		<local_variable id="oval:gov.nist.usgcb.rhel:var:200943" version="1" datatype="boolean" comment="Bit for a permission type">
			<substring substring_length="1" substring_start="3">
				<variable_component var_ref="oval:gov.nist.usgcb.rhel:var:20094"/>
			</substring>
		</local_variable>
		<local_variable id="oval:gov.nist.usgcb.rhel:var:200944" version="1" datatype="boolean" comment="Bit for a permission type">
			<substring substring_length="1" substring_start="4">
				<variable_component var_ref="oval:gov.nist.usgcb.rhel:var:20094"/>
			</substring>
		</local_variable>
		<local_variable id="oval:gov.nist.usgcb.rhel:var:200945" version="1" datatype="boolean" comment="Bit for a permission type">
			<substring substring_length="1" substring_start="5">
				<variable_component var_ref="oval:gov.nist.usgcb.rhel:var:20094"/>
			</substring>
		</local_variable>
		<local_variable id="oval:gov.nist.usgcb.rhel:var:200946" version="1" datatype="boolean" comment="Bit for a permission type">
			<substring substring_length="1" substring_start="6">
				<variable_component var_ref="oval:gov.nist.usgcb.rhel:var:20094"/>
			</substring>
		</local_variable>
		<local_variable id="oval:gov.nist.usgcb.rhel:var:200947" version="1" datatype="boolean" comment="Bit for a permission type">
			<substring substring_length="1" substring_start="7">
				<variable_component var_ref="oval:gov.nist.usgcb.rhel:var:20094"/>
			</substring>
		</local_variable>
		<local_variable id="oval:gov.nist.usgcb.rhel:var:200948" version="1" datatype="boolean" comment="Bit for a permission type">
			<substring substring_length="1" substring_start="8">
				<variable_component var_ref="oval:gov.nist.usgcb.rhel:var:20094"/>
			</substring>
		</local_variable>
		<local_variable id="oval:gov.nist.usgcb.rhel:var:200949" version="1" datatype="boolean" comment="Bit for a permission type">
			<substring substring_length="1" substring_start="9">
				<variable_component var_ref="oval:gov.nist.usgcb.rhel:var:20094"/>
			</substring>
		</local_variable>
		<local_variable id="oval:gov.nist.usgcb.rhel:var:202101" version="1" datatype="boolean" comment="Bit for a permission type">
			<substring substring_length="1" substring_start="1">
				<variable_component var_ref="oval:gov.nist.usgcb.rhel:var:20210"/>
			</substring>
		</local_variable>
		<local_variable id="oval:gov.nist.usgcb.rhel:var:202102" version="1" datatype="boolean" comment="Bit for a permission type">
			<substring substring_length="1" substring_start="2">
				<variable_component var_ref="oval:gov.nist.usgcb.rhel:var:20210"/>
			</substring>
		</local_variable>
		<local_variable id="oval:gov.nist.usgcb.rhel:var:202103" version="1" datatype="boolean" comment="Bit for a permission type">
			<substring substring_length="1" substring_start="3">
				<variable_component var_ref="oval:gov.nist.usgcb.rhel:var:20210"/>
			</substring>
		</local_variable>
		<local_variable id="oval:gov.nist.usgcb.rhel:var:202104" version="1" datatype="boolean" comment="Bit for a permission type">
			<substring substring_length="1" substring_start="4">
				<variable_component var_ref="oval:gov.nist.usgcb.rhel:var:20210"/>
			</substring>
		</local_variable>
		<local_variable id="oval:gov.nist.usgcb.rhel:var:202105" version="1" datatype="boolean" comment="Bit for a permission type">
			<substring substring_length="1" substring_start="5">
				<variable_component var_ref="oval:gov.nist.usgcb.rhel:var:20210"/>
			</substring>
		</local_variable>
		<local_variable id="oval:gov.nist.usgcb.rhel:var:202106" version="1" datatype="boolean" comment="Bit for a permission type">
			<substring substring_length="1" substring_start="6">
				<variable_component var_ref="oval:gov.nist.usgcb.rhel:var:20210"/>
			</substring>
		</local_variable>
		<local_variable id="oval:gov.nist.usgcb.rhel:var:202107" version="1" datatype="boolean" comment="Bit for a permission type">
			<substring substring_length="1" substring_start="7">
				<variable_component var_ref="oval:gov.nist.usgcb.rhel:var:20210"/>
			</substring>
		</local_variable>
		<local_variable id="oval:gov.nist.usgcb.rhel:var:202108" version="1" datatype="boolean" comment="Bit for a permission type">
			<substring substring_length="1" substring_start="8">
				<variable_component var_ref="oval:gov.nist.usgcb.rhel:var:20210"/>
			</substring>
		</local_variable>
		<local_variable id="oval:gov.nist.usgcb.rhel:var:202109" version="1" datatype="boolean" comment="Bit for a permission type">
			<substring substring_length="1" substring_start="9">
				<variable_component var_ref="oval:gov.nist.usgcb.rhel:var:20210"/>
			</substring>
		</local_variable>
		<local_variable id="oval:gov.nist.usgcb.rhel:var:73" version="1" datatype="boolean" comment="Bit for a permission type">
			<substring substring_length="1" substring_start="1">
				<variable_component var_ref="oval:gov.nist.usgcb.rhel:var:20213"/>
			</substring>
		</local_variable>
		<local_variable id="oval:gov.nist.usgcb.rhel:var:74" version="1" datatype="boolean" comment="Bit for a permission type">
			<substring substring_length="1" substring_start="2">
				<variable_component var_ref="oval:gov.nist.usgcb.rhel:var:20213"/>
			</substring>
		</local_variable>
		<local_variable id="oval:gov.nist.usgcb.rhel:var:75" version="1" datatype="boolean" comment="Bit for a permission type">
			<substring substring_length="1" substring_start="3">
				<variable_component var_ref="oval:gov.nist.usgcb.rhel:var:20213"/>
			</substring>
		</local_variable>
		<local_variable id="oval:gov.nist.usgcb.rhel:var:76" version="1" datatype="boolean" comment="Bit for a permission type">
			<substring substring_length="1" substring_start="4">
				<variable_component var_ref="oval:gov.nist.usgcb.rhel:var:20213"/>
			</substring>
		</local_variable>
		<local_variable id="oval:gov.nist.usgcb.rhel:var:77" version="1" datatype="boolean" comment="Bit for a permission type">
			<substring substring_length="1" substring_start="5">
				<variable_component var_ref="oval:gov.nist.usgcb.rhel:var:20213"/>
			</substring>
		</local_variable>
		<local_variable id="oval:gov.nist.usgcb.rhel:var:78" version="1" datatype="boolean" comment="Bit for a permission type">
			<substring substring_length="1" substring_start="6">
				<variable_component var_ref="oval:gov.nist.usgcb.rhel:var:20213"/>
			</substring>
		</local_variable>
		<local_variable id="oval:gov.nist.usgcb.rhel:var:79" version="1" datatype="boolean" comment="Bit for a permission type">
			<substring substring_length="1" substring_start="7">
				<variable_component var_ref="oval:gov.nist.usgcb.rhel:var:20213"/>
			</substring>
		</local_variable>
		<local_variable id="oval:gov.nist.usgcb.rhel:var:80" version="1" datatype="boolean" comment="Bit for a permission type">
			<substring substring_length="1" substring_start="8">
				<variable_component var_ref="oval:gov.nist.usgcb.rhel:var:20213"/>
			</substring>
		</local_variable>
		<local_variable id="oval:gov.nist.usgcb.rhel:var:81" version="1" datatype="boolean" comment="Bit for a permission type">
			<substring substring_length="1" substring_start="9">
				<variable_component var_ref="oval:gov.nist.usgcb.rhel:var:20213"/>
			</substring>
		</local_variable>
		<local_variable id="oval:gov.nist.usgcb.rhel:var:202241" version="1" datatype="boolean" comment="Bit for a permission type">
			<substring substring_length="1" substring_start="1">
				<variable_component var_ref="oval:gov.nist.usgcb.rhel:var:20224"/>
			</substring>
		</local_variable>
		<local_variable id="oval:gov.nist.usgcb.rhel:var:202242" version="1" datatype="boolean" comment="Bit for a permission type">
			<substring substring_length="1" substring_start="2">
				<variable_component var_ref="oval:gov.nist.usgcb.rhel:var:20224"/>
			</substring>
		</local_variable>
		<local_variable id="oval:gov.nist.usgcb.rhel:var:202243" version="1" datatype="boolean" comment="Bit for a permission type">
			<substring substring_length="1" substring_start="3">
				<variable_component var_ref="oval:gov.nist.usgcb.rhel:var:20224"/>
			</substring>
		</local_variable>
		<local_variable id="oval:gov.nist.usgcb.rhel:var:202244" version="1" datatype="boolean" comment="Bit for a permission type">
			<substring substring_length="1" substring_start="4">
				<variable_component var_ref="oval:gov.nist.usgcb.rhel:var:20224"/>
			</substring>
		</local_variable>
		<local_variable id="oval:gov.nist.usgcb.rhel:var:202245" version="1" datatype="boolean" comment="Bit for a permission type">
			<substring substring_length="1" substring_start="5">
				<variable_component var_ref="oval:gov.nist.usgcb.rhel:var:20224"/>
			</substring>
		</local_variable>
		<local_variable id="oval:gov.nist.usgcb.rhel:var:202246" version="1" datatype="boolean" comment="Bit for a permission type">
			<substring substring_length="1" substring_start="6">
				<variable_component var_ref="oval:gov.nist.usgcb.rhel:var:20224"/>
			</substring>
		</local_variable>
		<local_variable id="oval:gov.nist.usgcb.rhel:var:202247" version="1" datatype="boolean" comment="Bit for a permission type">
			<substring substring_length="1" substring_start="7">
				<variable_component var_ref="oval:gov.nist.usgcb.rhel:var:20224"/>
			</substring>
		</local_variable>
		<local_variable id="oval:gov.nist.usgcb.rhel:var:202248" version="1" datatype="boolean" comment="Bit for a permission type">
			<substring substring_length="1" substring_start="8">
				<variable_component var_ref="oval:gov.nist.usgcb.rhel:var:20224"/>
			</substring>
		</local_variable>
		<local_variable id="oval:gov.nist.usgcb.rhel:var:202249" version="1" datatype="boolean" comment="Bit for a permission type">
			<substring substring_length="1" substring_start="9">
				<variable_component var_ref="oval:gov.nist.usgcb.rhel:var:20224"/>
			</substring>
		</local_variable>
		<local_variable id="oval:gov.nist.usgcb.rhel:var:202251" version="1" datatype="boolean" comment="Bit for a permission type">
			<substring substring_length="1" substring_start="1">
				<variable_component var_ref="oval:gov.nist.usgcb.rhel:var:20225"/>
			</substring>
		</local_variable>
		<local_variable id="oval:gov.nist.usgcb.rhel:var:202252" version="1" datatype="boolean" comment="Bit for a permission type">
			<substring substring_length="1" substring_start="2">
				<variable_component var_ref="oval:gov.nist.usgcb.rhel:var:20225"/>
			</substring>
		</local_variable>
		<local_variable id="oval:gov.nist.usgcb.rhel:var:202253" version="1" datatype="boolean" comment="Bit for a permission type">
			<substring substring_length="1" substring_start="3">
				<variable_component var_ref="oval:gov.nist.usgcb.rhel:var:20225"/>
			</substring>
		</local_variable>
		<local_variable id="oval:gov.nist.usgcb.rhel:var:202254" version="1" datatype="boolean" comment="Bit for a permission type">
			<substring substring_length="1" substring_start="4">
				<variable_component var_ref="oval:gov.nist.usgcb.rhel:var:20225"/>
			</substring>
		</local_variable>
		<local_variable id="oval:gov.nist.usgcb.rhel:var:202255" version="1" datatype="boolean" comment="Bit for a permission type">
			<substring substring_length="1" substring_start="5">
				<variable_component var_ref="oval:gov.nist.usgcb.rhel:var:20225"/>
			</substring>
		</local_variable>
		<local_variable id="oval:gov.nist.usgcb.rhel:var:202256" version="1" datatype="boolean" comment="Bit for a permission type">
			<substring substring_length="1" substring_start="6">
				<variable_component var_ref="oval:gov.nist.usgcb.rhel:var:20225"/>
			</substring>
		</local_variable>
		<local_variable id="oval:gov.nist.usgcb.rhel:var:202257" version="1" datatype="boolean" comment="Bit for a permission type">
			<substring substring_length="1" substring_start="7">
				<variable_component var_ref="oval:gov.nist.usgcb.rhel:var:20225"/>
			</substring>
		</local_variable>
		<local_variable id="oval:gov.nist.usgcb.rhel:var:202258" version="1" datatype="boolean" comment="Bit for a permission type">
			<substring substring_length="1" substring_start="8">
				<variable_component var_ref="oval:gov.nist.usgcb.rhel:var:20225"/>
			</substring>
		</local_variable>
		<local_variable id="oval:gov.nist.usgcb.rhel:var:202259" version="1" datatype="boolean" comment="Bit for a permission type">
			<substring substring_length="1" substring_start="9">
				<variable_component var_ref="oval:gov.nist.usgcb.rhel:var:20225"/>
			</substring>
		</local_variable>
		<local_variable id="oval:gov.nist.usgcb.rhel:var:202261" version="1" datatype="boolean" comment="Bit for a permission type">
			<substring substring_length="1" substring_start="1">
				<variable_component var_ref="oval:gov.nist.usgcb.rhel:var:20226"/>
			</substring>
		</local_variable>
		<local_variable id="oval:gov.nist.usgcb.rhel:var:202262" version="1" datatype="boolean" comment="Bit for a permission type">
			<substring substring_length="1" substring_start="2">
				<variable_component var_ref="oval:gov.nist.usgcb.rhel:var:20226"/>
			</substring>
		</local_variable>
		<local_variable id="oval:gov.nist.usgcb.rhel:var:202263" version="1" datatype="boolean" comment="Bit for a permission type">
			<substring substring_length="1" substring_start="3">
				<variable_component var_ref="oval:gov.nist.usgcb.rhel:var:20226"/>
			</substring>
		</local_variable>
		<local_variable id="oval:gov.nist.usgcb.rhel:var:202264" version="1" datatype="boolean" comment="Bit for a permission type">
			<substring substring_length="1" substring_start="4">
				<variable_component var_ref="oval:gov.nist.usgcb.rhel:var:20226"/>
			</substring>
		</local_variable>
		<local_variable id="oval:gov.nist.usgcb.rhel:var:202265" version="1" datatype="boolean" comment="Bit for a permission type">
			<substring substring_length="1" substring_start="5">
				<variable_component var_ref="oval:gov.nist.usgcb.rhel:var:20226"/>
			</substring>
		</local_variable>
		<local_variable id="oval:gov.nist.usgcb.rhel:var:202266" version="1" datatype="boolean" comment="Bit for a permission type">
			<substring substring_length="1" substring_start="6">
				<variable_component var_ref="oval:gov.nist.usgcb.rhel:var:20226"/>
			</substring>
		</local_variable>
		<local_variable id="oval:gov.nist.usgcb.rhel:var:202267" version="1" datatype="boolean" comment="Bit for a permission type">
			<substring substring_length="1" substring_start="7">
				<variable_component var_ref="oval:gov.nist.usgcb.rhel:var:20226"/>
			</substring>
		</local_variable>
		<local_variable id="oval:gov.nist.usgcb.rhel:var:202268" version="1" datatype="boolean" comment="Bit for a permission type">
			<substring substring_length="1" substring_start="8">
				<variable_component var_ref="oval:gov.nist.usgcb.rhel:var:20226"/>
			</substring>
		</local_variable>
		<local_variable id="oval:gov.nist.usgcb.rhel:var:202269" version="1" datatype="boolean" comment="Bit for a permission type">
			<substring substring_length="1" substring_start="9">
				<variable_component var_ref="oval:gov.nist.usgcb.rhel:var:20226"/>
			</substring>
		</local_variable>
		<local_variable id="oval:gov.nist.usgcb.rhel:var:202271" version="1" datatype="boolean" comment="Bit for a permission type">
			<substring substring_length="1" substring_start="1">
				<variable_component var_ref="oval:gov.nist.usgcb.rhel:var:20227"/>
			</substring>
		</local_variable>
		<local_variable id="oval:gov.nist.usgcb.rhel:var:202272" version="1" datatype="boolean" comment="Bit for a permission type">
			<substring substring_length="1" substring_start="2">
				<variable_component var_ref="oval:gov.nist.usgcb.rhel:var:20227"/>
			</substring>
		</local_variable>
		<local_variable id="oval:gov.nist.usgcb.rhel:var:202273" version="1" datatype="boolean" comment="Bit for a permission type">
			<substring substring_length="1" substring_start="3">
				<variable_component var_ref="oval:gov.nist.usgcb.rhel:var:20227"/>
			</substring>
		</local_variable>
		<local_variable id="oval:gov.nist.usgcb.rhel:var:202274" version="1" datatype="boolean" comment="Bit for a permission type">
			<substring substring_length="1" substring_start="4">
				<variable_component var_ref="oval:gov.nist.usgcb.rhel:var:20227"/>
			</substring>
		</local_variable>
		<local_variable id="oval:gov.nist.usgcb.rhel:var:202275" version="1" datatype="boolean" comment="Bit for a permission type">
			<substring substring_length="1" substring_start="5">
				<variable_component var_ref="oval:gov.nist.usgcb.rhel:var:20227"/>
			</substring>
		</local_variable>
		<local_variable id="oval:gov.nist.usgcb.rhel:var:202276" version="1" datatype="boolean" comment="Bit for a permission type">
			<substring substring_length="1" substring_start="6">
				<variable_component var_ref="oval:gov.nist.usgcb.rhel:var:20227"/>
			</substring>
		</local_variable>
		<local_variable id="oval:gov.nist.usgcb.rhel:var:202277" version="1" datatype="boolean" comment="Bit for a permission type">
			<substring substring_length="1" substring_start="7">
				<variable_component var_ref="oval:gov.nist.usgcb.rhel:var:20227"/>
			</substring>
		</local_variable>
		<local_variable id="oval:gov.nist.usgcb.rhel:var:202278" version="1" datatype="boolean" comment="Bit for a permission type">
			<substring substring_length="1" substring_start="8">
				<variable_component var_ref="oval:gov.nist.usgcb.rhel:var:20227"/>
			</substring>
		</local_variable>
		<local_variable id="oval:gov.nist.usgcb.rhel:var:202279" version="1" datatype="boolean" comment="Bit for a permission type">
			<substring substring_length="1" substring_start="9">
				<variable_component var_ref="oval:gov.nist.usgcb.rhel:var:20227"/>
			</substring>
		</local_variable>
		<local_variable id="oval:gov.nist.usgcb.rhel:var:202281" version="1" datatype="boolean" comment="Bit for a permission type">
			<substring substring_length="1" substring_start="1">
				<variable_component var_ref="oval:gov.nist.usgcb.rhel:var:20228"/>
			</substring>
		</local_variable>
		<local_variable id="oval:gov.nist.usgcb.rhel:var:202282" version="1" datatype="boolean" comment="Bit for a permission type">
			<substring substring_length="1" substring_start="2">
				<variable_component var_ref="oval:gov.nist.usgcb.rhel:var:20228"/>
			</substring>
		</local_variable>
		<local_variable id="oval:gov.nist.usgcb.rhel:var:202283" version="1" datatype="boolean" comment="Bit for a permission type">
			<substring substring_length="1" substring_start="3">
				<variable_component var_ref="oval:gov.nist.usgcb.rhel:var:20228"/>
			</substring>
		</local_variable>
		<local_variable id="oval:gov.nist.usgcb.rhel:var:202284" version="1" datatype="boolean" comment="Bit for a permission type">
			<substring substring_length="1" substring_start="4">
				<variable_component var_ref="oval:gov.nist.usgcb.rhel:var:20228"/>
			</substring>
		</local_variable>
		<local_variable id="oval:gov.nist.usgcb.rhel:var:202285" version="1" datatype="boolean" comment="Bit for a permission type">
			<substring substring_length="1" substring_start="5">
				<variable_component var_ref="oval:gov.nist.usgcb.rhel:var:20228"/>
			</substring>
		</local_variable>
		<local_variable id="oval:gov.nist.usgcb.rhel:var:202286" version="1" datatype="boolean" comment="Bit for a permission type">
			<substring substring_length="1" substring_start="6">
				<variable_component var_ref="oval:gov.nist.usgcb.rhel:var:20228"/>
			</substring>
		</local_variable>
		<local_variable id="oval:gov.nist.usgcb.rhel:var:202287" version="1" datatype="boolean" comment="Bit for a permission type">
			<substring substring_length="1" substring_start="7">
				<variable_component var_ref="oval:gov.nist.usgcb.rhel:var:20228"/>
			</substring>
		</local_variable>
		<local_variable id="oval:gov.nist.usgcb.rhel:var:202288" version="1" datatype="boolean" comment="Bit for a permission type">
			<substring substring_length="1" substring_start="8">
				<variable_component var_ref="oval:gov.nist.usgcb.rhel:var:20228"/>
			</substring>
		</local_variable>
		<local_variable id="oval:gov.nist.usgcb.rhel:var:202289" version="1" datatype="boolean" comment="Bit for a permission type">
			<substring substring_length="1" substring_start="9">
				<variable_component var_ref="oval:gov.nist.usgcb.rhel:var:20228"/>
			</substring>
		</local_variable>
		<local_variable id="oval:gov.nist.usgcb.rhel:var:109" version="1" datatype="boolean" comment="Bit for a permission type">
			<substring substring_length="1" substring_start="1">
				<variable_component var_ref="oval:gov.nist.usgcb.rhel:var:20315"/>
			</substring>
		</local_variable>
		<local_variable id="oval:gov.nist.usgcb.rhel:var:110" version="1" datatype="boolean" comment="Bit for a permission type">
			<substring substring_length="1" substring_start="2">
				<variable_component var_ref="oval:gov.nist.usgcb.rhel:var:20315"/>
			</substring>
		</local_variable>
		<local_variable id="oval:gov.nist.usgcb.rhel:var:111" version="1" datatype="boolean" comment="Bit for a permission type">
			<substring substring_length="1" substring_start="3">
				<variable_component var_ref="oval:gov.nist.usgcb.rhel:var:20315"/>
			</substring>
		</local_variable>
		<local_variable id="oval:gov.nist.usgcb.rhel:var:112" version="1" datatype="boolean" comment="Bit for a permission type">
			<substring substring_length="1" substring_start="4">
				<variable_component var_ref="oval:gov.nist.usgcb.rhel:var:20315"/>
			</substring>
		</local_variable>
		<local_variable id="oval:gov.nist.usgcb.rhel:var:113" version="1" datatype="boolean" comment="Bit for a permission type">
			<substring substring_length="1" substring_start="5">
				<variable_component var_ref="oval:gov.nist.usgcb.rhel:var:20315"/>
			</substring>
		</local_variable>
		<local_variable id="oval:gov.nist.usgcb.rhel:var:114" version="1" datatype="boolean" comment="Bit for a permission type">
			<substring substring_length="1" substring_start="6">
				<variable_component var_ref="oval:gov.nist.usgcb.rhel:var:20315"/>
			</substring>
		</local_variable>
		<local_variable id="oval:gov.nist.usgcb.rhel:var:115" version="1" datatype="boolean" comment="Bit for a permission type">
			<substring substring_length="1" substring_start="7">
				<variable_component var_ref="oval:gov.nist.usgcb.rhel:var:20315"/>
			</substring>
		</local_variable>
		<local_variable id="oval:gov.nist.usgcb.rhel:var:116" version="1" datatype="boolean" comment="Bit for a permission type">
			<substring substring_length="1" substring_start="8">
				<variable_component var_ref="oval:gov.nist.usgcb.rhel:var:20315"/>
			</substring>
		</local_variable>
		<local_variable id="oval:gov.nist.usgcb.rhel:var:117" version="1" datatype="boolean" comment="Bit for a permission type">
			<substring substring_length="1" substring_start="9">
				<variable_component var_ref="oval:gov.nist.usgcb.rhel:var:20315"/>
			</substring>
		</local_variable>
		<local_variable id="oval:gov.nist.usgcb.rhel:var:118" version="1" datatype="boolean" comment="Bit for a permission type">
			<substring substring_length="1" substring_start="1">
				<variable_component var_ref="oval:gov.nist.usgcb.rhel:var:20326"/>
			</substring>
		</local_variable>
		<local_variable id="oval:gov.nist.usgcb.rhel:var:119" version="1" datatype="boolean" comment="Bit for a permission type">
			<substring substring_length="1" substring_start="2">
				<variable_component var_ref="oval:gov.nist.usgcb.rhel:var:20326"/>
			</substring>
		</local_variable>
		<local_variable id="oval:gov.nist.usgcb.rhel:var:120" version="1" datatype="boolean" comment="Bit for a permission type">
			<substring substring_length="1" substring_start="3">
				<variable_component var_ref="oval:gov.nist.usgcb.rhel:var:20326"/>
			</substring>
		</local_variable>
		<local_variable id="oval:gov.nist.usgcb.rhel:var:121" version="1" datatype="boolean" comment="Bit for a permission type">
			<substring substring_length="1" substring_start="4">
				<variable_component var_ref="oval:gov.nist.usgcb.rhel:var:20326"/>
			</substring>
		</local_variable>
		<local_variable id="oval:gov.nist.usgcb.rhel:var:122" version="1" datatype="boolean" comment="Bit for a permission type">
			<substring substring_length="1" substring_start="5">
				<variable_component var_ref="oval:gov.nist.usgcb.rhel:var:20326"/>
			</substring>
		</local_variable>
		<local_variable id="oval:gov.nist.usgcb.rhel:var:123" version="1" datatype="boolean" comment="Bit for a permission type">
			<substring substring_length="1" substring_start="6">
				<variable_component var_ref="oval:gov.nist.usgcb.rhel:var:20326"/>
			</substring>
		</local_variable>
		<local_variable id="oval:gov.nist.usgcb.rhel:var:124" version="1" datatype="boolean" comment="Bit for a permission type">
			<substring substring_length="1" substring_start="7">
				<variable_component var_ref="oval:gov.nist.usgcb.rhel:var:20326"/>
			</substring>
		</local_variable>
		<local_variable id="oval:gov.nist.usgcb.rhel:var:125" version="1" datatype="boolean" comment="Bit for a permission type">
			<substring substring_length="1" substring_start="8">
				<variable_component var_ref="oval:gov.nist.usgcb.rhel:var:20326"/>
			</substring>
		</local_variable>
		<local_variable id="oval:gov.nist.usgcb.rhel:var:126" version="1" datatype="boolean" comment="Bit for a permission type">
			<substring substring_length="1" substring_start="9">
				<variable_component var_ref="oval:gov.nist.usgcb.rhel:var:20326"/>
			</substring>
		</local_variable>
		<local_variable id="oval:gov.nist.usgcb.rhel:var:127" version="1" datatype="boolean" comment="Bit for a permission type">
			<substring substring_length="1" substring_start="1">
				<variable_component var_ref="oval:gov.nist.usgcb.rhel:var:20327"/>
			</substring>
		</local_variable>
		<local_variable id="oval:gov.nist.usgcb.rhel:var:128" version="1" datatype="boolean" comment="Bit for a permission type">
			<substring substring_length="1" substring_start="2">
				<variable_component var_ref="oval:gov.nist.usgcb.rhel:var:20327"/>
			</substring>
		</local_variable>
		<local_variable id="oval:gov.nist.usgcb.rhel:var:129" version="1" datatype="boolean" comment="Bit for a permission type">
			<substring substring_length="1" substring_start="3">
				<variable_component var_ref="oval:gov.nist.usgcb.rhel:var:20327"/>
			</substring>
		</local_variable>
		<local_variable id="oval:gov.nist.usgcb.rhel:var:130" version="1" datatype="boolean" comment="Bit for a permission type">
			<substring substring_length="1" substring_start="4">
				<variable_component var_ref="oval:gov.nist.usgcb.rhel:var:20327"/>
			</substring>
		</local_variable>
		<local_variable id="oval:gov.nist.usgcb.rhel:var:131" version="1" datatype="boolean" comment="Bit for a permission type">
			<substring substring_length="1" substring_start="5">
				<variable_component var_ref="oval:gov.nist.usgcb.rhel:var:20327"/>
			</substring>
		</local_variable>
		<local_variable id="oval:gov.nist.usgcb.rhel:var:132" version="1" datatype="boolean" comment="Bit for a permission type">
			<substring substring_length="1" substring_start="6">
				<variable_component var_ref="oval:gov.nist.usgcb.rhel:var:20327"/>
			</substring>
		</local_variable>
		<local_variable id="oval:gov.nist.usgcb.rhel:var:133" version="1" datatype="boolean" comment="Bit for a permission type">
			<substring substring_length="1" substring_start="7">
				<variable_component var_ref="oval:gov.nist.usgcb.rhel:var:20327"/>
			</substring>
		</local_variable>
		<local_variable id="oval:gov.nist.usgcb.rhel:var:134" version="1" datatype="boolean" comment="Bit for a permission type">
			<substring substring_length="1" substring_start="8">
				<variable_component var_ref="oval:gov.nist.usgcb.rhel:var:20327"/>
			</substring>
		</local_variable>
		<local_variable id="oval:gov.nist.usgcb.rhel:var:135" version="1" datatype="boolean" comment="Bit for a permission type">
			<substring substring_length="1" substring_start="9">
				<variable_component var_ref="oval:gov.nist.usgcb.rhel:var:20327"/>
			</substring>
		</local_variable>
		<local_variable id="oval:gov.nist.usgcb.rhel:var:136" version="1" datatype="boolean" comment="Bit for a permission type">
			<substring substring_length="1" substring_start="1">
				<variable_component var_ref="oval:gov.nist.usgcb.rhel:var:20328"/>
			</substring>
		</local_variable>
		<local_variable id="oval:gov.nist.usgcb.rhel:var:137" version="1" datatype="boolean" comment="Bit for a permission type">
			<substring substring_length="1" substring_start="2">
				<variable_component var_ref="oval:gov.nist.usgcb.rhel:var:20328"/>
			</substring>
		</local_variable>
		<local_variable id="oval:gov.nist.usgcb.rhel:var:138" version="1" datatype="boolean" comment="Bit for a permission type">
			<substring substring_length="1" substring_start="3">
				<variable_component var_ref="oval:gov.nist.usgcb.rhel:var:20328"/>
			</substring>
		</local_variable>
		<local_variable id="oval:gov.nist.usgcb.rhel:var:139" version="1" datatype="boolean" comment="Bit for a permission type">
			<substring substring_length="1" substring_start="4">
				<variable_component var_ref="oval:gov.nist.usgcb.rhel:var:20328"/>
			</substring>
		</local_variable>
		<local_variable id="oval:gov.nist.usgcb.rhel:var:140" version="1" datatype="boolean" comment="Bit for a permission type">
			<substring substring_length="1" substring_start="5">
				<variable_component var_ref="oval:gov.nist.usgcb.rhel:var:20328"/>
			</substring>
		</local_variable>
		<local_variable id="oval:gov.nist.usgcb.rhel:var:141" version="1" datatype="boolean" comment="Bit for a permission type">
			<substring substring_length="1" substring_start="6">
				<variable_component var_ref="oval:gov.nist.usgcb.rhel:var:20328"/>
			</substring>
		</local_variable>
		<local_variable id="oval:gov.nist.usgcb.rhel:var:142" version="1" datatype="boolean" comment="Bit for a permission type">
			<substring substring_length="1" substring_start="7">
				<variable_component var_ref="oval:gov.nist.usgcb.rhel:var:20328"/>
			</substring>
		</local_variable>
		<local_variable id="oval:gov.nist.usgcb.rhel:var:143" version="1" datatype="boolean" comment="Bit for a permission type">
			<substring substring_length="1" substring_start="8">
				<variable_component var_ref="oval:gov.nist.usgcb.rhel:var:20328"/>
			</substring>
		</local_variable>
		<local_variable id="oval:gov.nist.usgcb.rhel:var:144" version="1" datatype="boolean" comment="Bit for a permission type">
			<substring substring_length="1" substring_start="9">
				<variable_component var_ref="oval:gov.nist.usgcb.rhel:var:20328"/>
			</substring>
		</local_variable>
		<local_variable id="oval:gov.nist.usgcb.rhel:var:145" version="1" datatype="boolean" comment="Bit for a permission type">
			<substring substring_length="1" substring_start="1">
				<variable_component var_ref="oval:gov.nist.usgcb.rhel:var:20330"/>
			</substring>
		</local_variable>
		<local_variable id="oval:gov.nist.usgcb.rhel:var:146" version="1" datatype="boolean" comment="Bit for a permission type">
			<substring substring_length="1" substring_start="2">
				<variable_component var_ref="oval:gov.nist.usgcb.rhel:var:20330"/>
			</substring>
		</local_variable>
		<local_variable id="oval:gov.nist.usgcb.rhel:var:147" version="1" datatype="boolean" comment="Bit for a permission type">
			<substring substring_length="1" substring_start="3">
				<variable_component var_ref="oval:gov.nist.usgcb.rhel:var:20330"/>
			</substring>
		</local_variable>
		<local_variable id="oval:gov.nist.usgcb.rhel:var:148" version="1" datatype="boolean" comment="Bit for a permission type">
			<substring substring_length="1" substring_start="4">
				<variable_component var_ref="oval:gov.nist.usgcb.rhel:var:20330"/>
			</substring>
		</local_variable>
		<local_variable id="oval:gov.nist.usgcb.rhel:var:149" version="1" datatype="boolean" comment="Bit for a permission type">
			<substring substring_length="1" substring_start="5">
				<variable_component var_ref="oval:gov.nist.usgcb.rhel:var:20330"/>
			</substring>
		</local_variable>
		<local_variable id="oval:gov.nist.usgcb.rhel:var:150" version="1" datatype="boolean" comment="Bit for a permission type">
			<substring substring_length="1" substring_start="6">
				<variable_component var_ref="oval:gov.nist.usgcb.rhel:var:20330"/>
			</substring>
		</local_variable>
		<local_variable id="oval:gov.nist.usgcb.rhel:var:151" version="1" datatype="boolean" comment="Bit for a permission type">
			<substring substring_length="1" substring_start="7">
				<variable_component var_ref="oval:gov.nist.usgcb.rhel:var:20330"/>
			</substring>
		</local_variable>
		<local_variable id="oval:gov.nist.usgcb.rhel:var:152" version="1" datatype="boolean" comment="Bit for a permission type">
			<substring substring_length="1" substring_start="8">
				<variable_component var_ref="oval:gov.nist.usgcb.rhel:var:20330"/>
			</substring>
		</local_variable>
		<local_variable id="oval:gov.nist.usgcb.rhel:var:153" version="1" datatype="boolean" comment="Bit for a permission type">
			<substring substring_length="1" substring_start="9">
				<variable_component var_ref="oval:gov.nist.usgcb.rhel:var:20330"/>
			</substring>
		</local_variable>
		<local_variable id="oval:gov.nist.usgcb.rhel:var:200855" version="1" datatype="string" comment="Split the PATH on the : delimiter">
			<split delimiter=":">
				<object_component item_field="value" object_ref="oval:gov.nist.usgcb.rhel:obj:20085"/>
			</split>
		</local_variable>
		<constant_variable id="oval:gov.nist.usgcb.rhel:var:200482" version="1" datatype="string" comment="sgid whitelist">
			<!-- Based on RHEL5.6, both client and server, with cluster, cluster/storage, VT, workstation options -->
			<!-- FIXME: do the same for x86_64 -->
			<value>/sbin/netreport</value>
			<value>/usr/bin/crontab</value>
			<value>/usr/bin/cu</value>
			<value>/usr/bin/gataxx</value>
			<value>/usr/bin/glines</value>
			<value>/usr/bin/gnibbles</value>
			<value>/usr/bin/gnobots2</value>
			<value>/usr/bin/gnomine</value>
			<value>/usr/bin/gnotravex</value>
			<value>/usr/bin/gnotski</value>
			<value>/usr/bin/gtali</value>
			<value>/usr/bin/iagno</value>
			<value>/usr/bin/konsole</value>
			<value>/usr/bin/locate</value>
			<value>/usr/bin/lockfile</value>
			<value>/usr/bin/mahjongg</value>
			<value>/usr/bin/same-gnome</value>
			<value>/usr/bin/screen</value>
			<value>/usr/bin/slrnpull</value>
			<value>/usr/bin/ssh-agent</value>
			<value>/usr/bin/uuname</value>
			<value>/usr/bin/wall</value>
			<value>/usr/bin/write</value>
			<value>/usr/lib/mailman/cgi-bin/admin</value>
			<value>/usr/lib/mailman/cgi-bin/admindb</value>
			<value>/usr/lib/mailman/cgi-bin/confirm</value>
			<value>/usr/lib/mailman/cgi-bin/create</value>
			<value>/usr/lib/mailman/cgi-bin/edithtml</value>
			<value>/usr/lib/mailman/cgi-bin/listinfo</value>
			<value>/usr/lib/mailman/cgi-bin/options</value>
			<value>/usr/lib/mailman/cgi-bin/private</value>
			<value>/usr/lib/mailman/cgi-bin/rmlist</value>
			<value>/usr/lib/mailman/cgi-bin/roster</value>
			<value>/usr/lib/mailman/cgi-bin/subscribe</value>
			<value>/usr/lib/mailman/mail/mailman</value>
			<value>/usr/lib/vte/gnome-pty-helper</value>
			<value>/usr/lib64/vte/gnome-pty-helper</value>
			<value>/usr/libexec/utempter/utempter</value>
			<value>/usr/sbin/lockdev</value>
			<value>/usr/sbin/postdrop</value>
			<value>/usr/sbin/postqueue</value>
			<value>/usr/sbin/sendmail.sendmail</value>
			<value>/usr/sbin/uucico</value>
			<value>/usr/sbin/uuxqt</value>
		</constant_variable>
		<constant_variable id="oval:gov.nist.usgcb.rhel:var:200492" version="1" datatype="string" comment="suid whitelist">
			<!-- Based on RHEL5.6, both client and server, with cluster, cluster/storage, VT, workstation options -->
			<!-- FIXME: do the same for x86_64 -->
			<value>/bin/fusermount</value>
			<value>/bin/mount</value>
			<value>/bin/ping</value>
			<value>/bin/ping6</value>
			<value>/bin/su</value>
			<value>/bin/umount</value>
			<value>/lib/dbus-1/dbus-daemon-launch-helper</value>
			<value>/lib64/dbus-1/dbus-daemon-launch-helper</value>
			<value>/sbin/mount.ecryptfs_private</value>
			<value>/sbin/mount.nfs</value>
			<value>/sbin/mount.nfs4</value>
			<value>/sbin/pam_timestamp_check</value>
			<value>/sbin/umount.nfs</value>
			<value>/sbin/umount.nfs4</value>
			<value>/sbin/unix_chkpwd</value>
			<value>/usr/bin/Xorg</value>
			<value>/usr/bin/at</value>
			<value>/usr/bin/chage</value>
			<value>/usr/bin/chfn</value>
			<value>/usr/bin/chsh</value>
			<value>/usr/bin/crontab</value>
			<value>/usr/bin/cu</value>
			<value>/usr/bin/gpasswd</value>
			<value>/usr/bin/kgrantpty</value>
			<value>/usr/bin/kpac_dhcp_helper</value>
			<value>/usr/bin/newgrp</value>
			<value>/usr/bin/newrole</value>
			<value>/usr/bin/passwd</value>
			<value>/usr/bin/rcp</value>
			<value>/usr/bin/rlogin</value>
			<value>/usr/bin/rsh</value>
			<value>/usr/bin/sperl5.8.8</value>
			<value>/usr/bin/staprun</value>
			<value>/usr/bin/sudo</value>
			<value>/usr/bin/sudoedit</value>
			<value>/usr/bin/uucp</value>
			<value>/usr/bin/uuname</value>
			<value>/usr/bin/uustat</value>
			<value>/usr/bin/uux</value>
			<value>/usr/kerberos/bin/ksu</value>
			<value>/usr/lib/amanda/calcsize</value>
			<value>/usr/lib/amanda/dumper</value>
			<value>/usr/lib/amanda/killpgrp</value>
			<value>/usr/lib/amanda/planner</value>
			<value>/usr/lib/amanda/rundump</value>
			<value>/usr/lib/amanda/runtar</value>
			<value>/usr/lib/mgetty+sendfax/faxq-helper</value>
			<value>/usr/lib/news/bin/inndstart</value>
			<value>/usr/lib/news/bin/rnews</value>
			<value>/usr/lib/news/bin/startinnfeed</value>
			<value>/usr/lib/nspluginwrapper/plugin-config</value>
			<value>/usr/lib/squid/ncsa_auth</value>
			<value>/usr/lib/squid/pam_auth</value>
			<value>/usr/lib64/amanda/calcsize</value>
			<value>/usr/lib64/amanda/dumper</value>
			<value>/usr/lib64/amanda/killpgrp</value>
			<value>/usr/lib64/amanda/planner</value>
			<value>/usr/lib64/amanda/rundump</value>
			<value>/usr/lib64/amanda/runtar</value>
			<value>/usr/lib64/mgetty+sendfax/faxq-helper</value>
			<value>/usr/lib64/nspluginwrapper/plugin-config</value>
			<value>/usr/lib64/squid/ncsa_auth</value>
			<value>/usr/lib64/squid/pam_auth</value>
			<value>/usr/libexec/libvirt_proxy</value>
			<value>/usr/libexec/mc/cons.saver</value>
			<value>/usr/libexec/openssh/ssh-keysign</value>
			<value>/usr/sbin/amcheck</value>
			<value>/usr/sbin/ccreds_validate</value>
			<value>/usr/sbin/exim</value>
			<value>/usr/sbin/suexec</value>
			<value>/usr/sbin/userhelper</value>
			<value>/usr/sbin/userisdnctl</value>
			<value>/usr/sbin/usernetctl</value>
			<value>/usr/sbin/uucico</value>
			<value>/usr/sbin/uuxqt</value>
		</constant_variable>
		<local_variable id="oval:gov.nist.usgcb.rhel:var:200501" version="1" datatype="int" comment="List of user ids">
			<object_component item_field="subexpression" object_ref="oval:gov.nist.usgcb.rhel:obj:200501"/>
		</local_variable>
		<local_variable id="oval:gov.nist.usgcb.rhel:var:200511" version="1" datatype="int" comment="List of group ids">
			<object_component item_field="subexpression" object_ref="oval:gov.nist.usgcb.rhel:obj:200511"/>
		</local_variable>
	</variables>
</oval_definitions>
