<?xml version="1.0"?>
<oval_definitions xmlns:oval-def="http://oval.mitre.org/XMLSchema/oval-definitions-5" xmlns:oval="http://oval.mitre.org/XMLSchema/oval-common-5" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:ind-def="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" xmlns:unix-def="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" xmlns:lin-def="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" xsi:schemaLocation="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix unix-definitions-schema.xsd http://oval.mitre.org/XMLSchema/oval-definitions-5#independent independent-definitions-schema.xsd http://oval.mitre.org/XMLSchema/oval-definitions-5#linux linux-definitions-schema.xsd http://oval.mitre.org/XMLSchema/oval-definitions-5 oval-definitions-schema.xsd http://oval.mitre.org/XMLSchema/oval-common-5 oval-common-schema.xsd">
      <generator>
            <oval:product_name>IRS Autogenerator</oval:product_name>
            <oval:product_version>1.0</oval:product_version>
            <oval:schema_version>5.4</oval:schema_version>
            <oval:timestamp>2008-03-31T00:00:00-00:00</oval:timestamp>
      </generator>
      <definitions>
            <definition class="inventory" version="1" id="oval:gov.irs.rhel5:def:10000">
                  <metadata>
                        <title>Red Hat Enterprise Linux 5</title>
                        <affected family="unix">
                              <platform>Red Hat Enterprise Linux 5</platform>
                        </affected>
                        <reference ref_id="cpe:/o:redhat:enterprise_linux:5" source="CPE"/>
                        <description>The operating system installed on the system is Red Hat Enterprise Linux 5</description>
                  </metadata>
                  <criteria>
                        <criterion test_ref="oval:gov.irs.rhel5:tst:10000" comment="Red Hat Enterprise Linux 5 is installed"/>
                        <criterion test_ref="oval:gov.irs.rhel5:tst:10001" comment="Installed operating system is part of the unix family"/>
                  </criteria>
            </definition>
            <definition class="compliance" version="1" id="oval:gov.irs.rhel5:def:1">
                  <metadata>
                        <title>Service rhnsd should be disabled</title>
                        <affected family="unix">
                              <platform>Red Hat Enterprise Linux 5</platform>
                        </affected>
                        <reference ref_id="CCE-3416-5" source="CCE"/>
                        <description>Service rhnsd should be disabled</description>
                  </metadata>
                  <criteria>
                        <criterion test_ref="oval:gov.irs.rhel5:tst:1" comment="The rhnsd service should not be started at runlevel 2"/>
                        <criterion test_ref="oval:gov.irs.rhel5:tst:2" comment="The rhnsd service should not be started at runlevel 3"/>
                        <criterion test_ref="oval:gov.irs.rhel5:tst:3" comment="The rhnsd service should not be started at runlevel 4"/>
                        <criterion test_ref="oval:gov.irs.rhel5:tst:4" comment="The rhnsd service should not be started at runlevel 5"/>
                        <extend_definition definition_ref="oval:gov.irs.rhel5:def:10000" comment="Red Hat Enterprise Linux 5 is installed"/>
                  </criteria>
            </definition>
            <definition class="compliance" version="1" id="oval:gov.irs.rhel5:def:2">
                  <metadata>
                        <title>Service yum-updatesd should be disabled</title>
                        <affected family="unix">
                              <platform>Red Hat Enterprise Linux 5</platform>
                        </affected>
                        <reference ref_id="CCE-4218-4" source="CCE"/>
                        <description>Service yum-updatesd should be disabled</description>
                  </metadata>
                  <criteria>
                        <criterion test_ref="oval:gov.irs.rhel5:tst:5" comment="The yum-updatesd service should not be started at runlevel 2"/>
                        <criterion test_ref="oval:gov.irs.rhel5:tst:6" comment="The yum-updatesd service should not be started at runlevel 3"/>
                        <criterion test_ref="oval:gov.irs.rhel5:tst:7" comment="The yum-updatesd service should not be started at runlevel 4"/>
                        <criterion test_ref="oval:gov.irs.rhel5:tst:8" comment="The yum-updatesd service should not be started at runlevel 5"/>
                        <extend_definition definition_ref="oval:gov.irs.rhel5:def:10000" comment="Red Hat Enterprise Linux 5 is installed"/>
                  </criteria>
            </definition>
            <definition class="compliance" version="1" id="oval:gov.irs.rhel5:def:3">
                  <metadata>
                        <title>The aide package should be installed</title>
                        <affected family="unix">
                              <platform>Red Hat Enterprise Linux 5</platform>
                        </affected>
                        <reference ref_id="CCE-4209-3" source="CCE"/>
                        <description>The aide package should be installed</description>
                  </metadata>
                  <criteria>
                        <criterion test_ref="oval:gov.irs.rhel5:tst:9" comment="The aide package should be installed"/>
                        <extend_definition definition_ref="oval:gov.irs.rhel5:def:10000" comment="Red Hat Enterprise Linux 5 is installed"/>
                  </criteria>
            </definition>
            <definition class="compliance" version="1" id="oval:gov.irs.rhel5:def:4">
                  <metadata>
                        <title>The nodev option should be enabled or disabled as appropriate for all non-root partitions.</title>
                        <affected family="unix">
                              <platform>Red Hat Enterprise Linux 5</platform>
                        </affected>
                        <reference ref_id="CCE-4249-9" source="CCE"/>
                        <description>The nodev option should be enabled or disabled as appropriate for all non-root partitions.</description>
                  </metadata>
                  <criteria>
                        <criterion test_ref="oval:gov.irs.rhel5:tst:10"/>
                        <extend_definition definition_ref="oval:gov.irs.rhel5:def:10000" comment="Red Hat Enterprise Linux 5 is installed"/>
                  </criteria>
            </definition>
            <definition class="compliance" version="1" id="oval:gov.irs.rhel5:def:5">
                  <metadata>
                        <title>The nodev option should be enabled or disabled as appropriate for all removable media.</title>
                        <affected family="unix">
                              <platform>Red Hat Enterprise Linux 5</platform>
                        </affected>
                        <reference ref_id="CCE-3522-0" source="CCE"/>
                        <description>The nodev option should be enabled or disabled as appropriate for all removable media.</description>
                  </metadata>
                  <criteria>
                        <criterion test_ref="oval:gov.irs.rhel5:tst:11"/>
                        <extend_definition definition_ref="oval:gov.irs.rhel5:def:10000" comment="Red Hat Enterprise Linux 5 is installed"/>
                  </criteria>
            </definition>
            <definition class="compliance" version="1" id="oval:gov.irs.rhel5:def:6">
                  <metadata>
                        <title>The noexec option should be enabled or disabled as appropriate for all removable media.</title>
                        <affected family="unix">
                              <platform>Red Hat Enterprise Linux 5</platform>
                        </affected>
                        <reference ref_id="CCE-4275-4" source="CCE"/>
                        <description>The noexec option should be enabled or disabled as appropriate for all removable media.</description>
                  </metadata>
                  <criteria>
                        <criterion test_ref="oval:gov.irs.rhel5:tst:12"/>
                        <extend_definition definition_ref="oval:gov.irs.rhel5:def:10000" comment="Red Hat Enterprise Linux 5 is installed"/>
                  </criteria>
            </definition>
            <definition class="compliance" version="1" id="oval:gov.irs.rhel5:def:7">
                  <metadata>
                        <title>The nosuid option should be enabled or disabled as appropriate for all removable media.</title>
                        <affected family="unix">
                              <platform>Red Hat Enterprise Linux 5</platform>
                        </affected>
                        <reference ref_id="CCE-4042-8" source="CCE"/>
                        <description>The nosuid option should be enabled or disabled as appropriate for all removable media.</description>
                  </metadata>
                  <criteria>
                        <criterion test_ref="oval:gov.irs.rhel5:tst:13"/>
                        <extend_definition definition_ref="oval:gov.irs.rhel5:def:10000" comment="Red Hat Enterprise Linux 5 is installed"/>
                  </criteria>
            </definition>
            <definition class="compliance" version="1" id="oval:gov.irs.rhel5:def:8">
                  <metadata>
                        <title>Restrict Console Device Access </title>
                        <affected family="unix">
                              <platform>Red Hat Enterprise Linux 5</platform>
                        </affected>
                        <reference ref_id="CCE-3685-5" source="CCE"/>
                        <description>Console device ownership should be restricted to root-only as appropriate.</description>
                  </metadata>
                  <criteria>
                        <criterion test_ref="oval:gov.irs.rhel5:tst:14"/>
                        <criterion test_ref="oval:gov.irs.rhel5:tst:15"/>
                        <criterion test_ref="oval:gov.irs.rhel5:tst:16"/>
                        <extend_definition definition_ref="oval:gov.irs.rhel5:def:10000" comment="Red Hat Enterprise Linux 5 is installed"/>
                  </criteria>
            </definition>
            <definition class="compliance" version="1" id="oval:gov.irs.rhel5:def:9">
                  <metadata>
                        <title>Disable Modprobe Loading of USB Storage Driver </title>
                        <affected family="unix">
                              <platform>Red Hat Enterprise Linux 5</platform>
                        </affected>
                        <reference ref_id="CCE-4187-1" source="CCE"/>
                        <description>The USB device support module should be loaded or not as appropriate</description>
                  </metadata>
                  <criteria>
                        <criterion test_ref="oval:gov.irs.rhel5:tst:17" comment="The USB device support module should be loaded or not as appropriate"/>
                        <extend_definition definition_ref="oval:gov.irs.rhel5:def:10000" comment="Red Hat Enterprise Linux 5 is installed"/>
                  </criteria>
            </definition>
            <definition class="compliance" version="1" id="oval:gov.irs.rhel5:def:10">
                  <metadata>
                        <title>File /lib/modules/.*/kernel/drivers/usb/storage/usb-storage.ko should not exist</title>
                        <affected family="unix">
                              <platform>Red Hat Enterprise Linux 5</platform>
                        </affected>
                        <reference ref_id="CCE-4006-3" source="CCE"/>
                        <description>File /lib/modules/.*/kernel/drivers/usb/storage/usb-storage.ko should not exist</description>
                  </metadata>
                  <criteria>
                        <criterion test_ref="oval:gov.irs.rhel5:tst:18" comment="File /lib/modules/.*/kernel/drivers/usb/storage/usb-storage.ko should not exist"/>
                        <extend_definition definition_ref="oval:gov.irs.rhel5:def:10000" comment="Red Hat Enterprise Linux 5 is installed"/>
                  </criteria>
            </definition>
            <definition class="compliance" version="1" id="oval:gov.irs.rhel5:def:11">
                  <metadata>
                        <title>Disable Kernel Support for USB via Bootloader Configuration </title>
                        <affected family="unix">
                              <platform>Red Hat Enterprise Linux 5</platform>
                        </affected>
                        <reference ref_id="CCE-4173-1" source="CCE"/>
                        <description>USB kernel support should be enabled or disabled as appropriate.</description>
                  </metadata>
                  <criteria>
                        <criterion test_ref="oval:gov.irs.rhel5:tst:19" comment="USB kernel support should be enabled or disabled as appropriate."/>
                        <extend_definition definition_ref="oval:gov.irs.rhel5:def:10000" comment="Red Hat Enterprise Linux 5 is installed"/>
                  </criteria>
            </definition>
            <definition class="compliance" version="1" id="oval:gov.irs.rhel5:def:12">
                  <metadata>
                        <title>Disable Booting from USB Devices </title>
                        <affected family="unix">
                              <platform>Red Hat Enterprise Linux 5</platform>
                        </affected>
                        <reference ref_id="CCE-3944-6" source="CCE"/>
                        <description>The ability to boot from USB devices should be enabled or disabled as appropriate</description>
                  </metadata>
                  <criteria>
                        <criterion test_ref="oval:gov.irs.rhel5:tst:20" comment="Unknown test stub"/>
                        <extend_definition definition_ref="oval:gov.irs.rhel5:def:10000" comment="Red Hat Enterprise Linux 5 is installed"/>
                  </criteria>
            </definition>
            <definition class="compliance" version="1" id="oval:gov.irs.rhel5:def:13">
                  <metadata>
                        <title>Service autofs should be disabled</title>
                        <affected family="unix">
                              <platform>Red Hat Enterprise Linux 5</platform>
                        </affected>
                        <reference ref_id="CCE-4072-5" source="CCE"/>
                        <description>Service autofs should be disabled</description>
                  </metadata>
                  <criteria>
                        <criterion test_ref="oval:gov.irs.rhel5:tst:21" comment="The autofs service should not be started at runlevel 2"/>
                        <criterion test_ref="oval:gov.irs.rhel5:tst:22" comment="The autofs service should not be started at runlevel 3"/>
                        <criterion test_ref="oval:gov.irs.rhel5:tst:23" comment="The autofs service should not be started at runlevel 4"/>
                        <criterion test_ref="oval:gov.irs.rhel5:tst:24" comment="The autofs service should not be started at runlevel 5"/>
                        <extend_definition definition_ref="oval:gov.irs.rhel5:def:10000" comment="Red Hat Enterprise Linux 5 is installed"/>
                  </criteria>
            </definition>
            <definition class="compliance" version="1" id="oval:gov.irs.rhel5:def:14">
                  <metadata>
                        <title>The GNOME automounter (gnome-volume-manager) should be enabled or disabled as appropriate</title>
                        <affected family="unix">
                              <platform>Red Hat Enterprise Linux 5</platform>
                        </affected>
                        <reference ref_id="CCE-4231-7" source="CCE"/>
                        <description>The GNOME automounter (gnome-volume-manager) should be enabled or disabled as appropriate</description>
                  </metadata>
                  <criteria>
                        <criterion test_ref="oval:gov.irs.rhel5:tst:25"/>
                        <criterion test_ref="oval:gov.irs.rhel5:tst:26"/>
                        <extend_definition definition_ref="oval:gov.irs.rhel5:def:10000" comment="Red Hat Enterprise Linux 5 is installed"/>
                  </criteria>
            </definition>
            <definition class="compliance" version="1" id="oval:gov.irs.rhel5:def:15">
                  <metadata>
                        <title>File ownership for /etc/shadow</title>
                        <affected family="unix">
                              <platform>Red Hat Enterprise Linux 5</platform>
                        </affected>
                        <reference ref_id="CCE-3988-3" source="CCE"/>
                        <description>File ownership for /etc/shadow</description>
                  </metadata>
                  <criteria>
                        <criterion test_ref="oval:gov.irs.rhel5:tst:27" comment="File ownership check for /etc/shadow"/>
                        <extend_definition definition_ref="oval:gov.irs.rhel5:def:10000" comment="Red Hat Enterprise Linux 5 is installed"/>
                  </criteria>
            </definition>
            <definition class="compliance" version="1" id="oval:gov.irs.rhel5:def:16">
                  <metadata>
                        <title>File ownership for /etc/group</title>
                        <affected family="unix">
                              <platform>Red Hat Enterprise Linux 5</platform>
                        </affected>
                        <reference ref_id="CCE-3883-6" source="CCE"/>
                        <description>File ownership for /etc/group</description>
                  </metadata>
                  <criteria>
                        <criterion test_ref="oval:gov.irs.rhel5:tst:28" comment="File ownership check for /etc/group"/>
                        <extend_definition definition_ref="oval:gov.irs.rhel5:def:10000" comment="Red Hat Enterprise Linux 5 is installed"/>
                  </criteria>
            </definition>
            <definition class="compliance" version="1" id="oval:gov.irs.rhel5:def:17">
                  <metadata>
                        <title>File ownership for /etc/group</title>
                        <affected family="unix">
                              <platform>Red Hat Enterprise Linux 5</platform>
                        </affected>
                        <reference ref_id="CCE-3276-3" source="CCE"/>
                        <description>File ownership for /etc/group</description>
                  </metadata>
                  <criteria>
                        <criterion test_ref="oval:gov.irs.rhel5:tst:29" comment="File ownership check for /etc/group"/>
                        <extend_definition definition_ref="oval:gov.irs.rhel5:def:10000" comment="Red Hat Enterprise Linux 5 is installed"/>
                  </criteria>
            </definition>
            <definition class="compliance" version="1" id="oval:gov.irs.rhel5:def:18">
                  <metadata>
                        <title>File permissions for /etc/gshadow</title>
                        <affected family="unix">
                              <platform>Red Hat Enterprise Linux 5</platform>
                        </affected>
                        <reference ref_id="CCE-3932-1" source="CCE"/>
                        <description>File permissions for /etc/gshadow should be set to 400</description>
                  </metadata>
                  <criteria>
                        <criterion test_ref="oval:gov.irs.rhel5:tst:30" comment="File permissions test for /etc/gshadow"/>
                        <extend_definition definition_ref="oval:gov.irs.rhel5:def:10000" comment="Red Hat Enterprise Linux 5 is installed"/>
                  </criteria>
            </definition>
            <definition class="compliance" version="1" id="oval:gov.irs.rhel5:def:19">
                  <metadata>
                        <title>File ownership for /etc/gshadow</title>
                        <affected family="unix">
                              <platform>Red Hat Enterprise Linux 5</platform>
                        </affected>
                        <reference ref_id="CCE-4064-2" source="CCE"/>
                        <description>File ownership for /etc/gshadow</description>
                  </metadata>
                  <criteria>
                        <criterion test_ref="oval:gov.irs.rhel5:tst:31" comment="File ownership check for /etc/gshadow"/>
                        <extend_definition definition_ref="oval:gov.irs.rhel5:def:10000" comment="Red Hat Enterprise Linux 5 is installed"/>
                  </criteria>
            </definition>
            <definition class="compliance" version="1" id="oval:gov.irs.rhel5:def:20">
                  <metadata>
                        <title>File ownership for /etc/gshadow</title>
                        <affected family="unix">
                              <platform>Red Hat Enterprise Linux 5</platform>
                        </affected>
                        <reference ref_id="CCE-4210-1" source="CCE"/>
                        <description>File ownership for /etc/gshadow</description>
                  </metadata>
                  <criteria>
                        <criterion test_ref="oval:gov.irs.rhel5:tst:32" comment="File ownership check for /etc/gshadow"/>
                        <extend_definition definition_ref="oval:gov.irs.rhel5:def:10000" comment="Red Hat Enterprise Linux 5 is installed"/>
                  </criteria>
            </definition>
            <definition class="compliance" version="1" id="oval:gov.irs.rhel5:def:21">
                  <metadata>
                        <title>File ownership for /etc/shadow</title>
                        <affected family="unix">
                              <platform>Red Hat Enterprise Linux 5</platform>
                        </affected>
                        <reference ref_id="CCE-3918-0" source="CCE"/>
                        <description>File ownership for /etc/shadow</description>
                  </metadata>
                  <criteria>
                        <criterion test_ref="oval:gov.irs.rhel5:tst:33" comment="File ownership check for /etc/shadow"/>
                        <extend_definition definition_ref="oval:gov.irs.rhel5:def:10000" comment="Red Hat Enterprise Linux 5 is installed"/>
                  </criteria>
            </definition>
            <definition class="compliance" version="1" id="oval:gov.irs.rhel5:def:22">
                  <metadata>
                        <title>File permissions for /etc/passwd</title>
                        <affected family="unix">
                              <platform>Red Hat Enterprise Linux 5</platform>
                        </affected>
                        <reference ref_id="CCE-3566-7" source="CCE"/>
                        <description>File permissions for /etc/passwd should be set to 644</description>
                  </metadata>
                  <criteria>
                        <criterion test_ref="oval:gov.irs.rhel5:tst:34" comment="File permissions test for /etc/passwd"/>
                        <extend_definition definition_ref="oval:gov.irs.rhel5:def:10000" comment="Red Hat Enterprise Linux 5 is installed"/>
                  </criteria>
            </definition>
            <definition class="compliance" version="1" id="oval:gov.irs.rhel5:def:23">
                  <metadata>
                        <title>File ownership for /etc/passwd</title>
                        <affected family="unix">
                              <platform>Red Hat Enterprise Linux 5</platform>
                        </affected>
                        <reference ref_id="CCE-3958-6" source="CCE"/>
                        <description>File ownership for /etc/passwd</description>
                  </metadata>
                  <criteria>
                        <criterion test_ref="oval:gov.irs.rhel5:tst:35" comment="File ownership check for /etc/passwd"/>
                        <extend_definition definition_ref="oval:gov.irs.rhel5:def:10000" comment="Red Hat Enterprise Linux 5 is installed"/>
                  </criteria>
            </definition>
            <definition class="compliance" version="1" id="oval:gov.irs.rhel5:def:24">
                  <metadata>
                        <title>File permissions for /etc/group</title>
                        <affected family="unix">
                              <platform>Red Hat Enterprise Linux 5</platform>
                        </affected>
                        <reference ref_id="CCE-3967-7" source="CCE"/>
                        <description>File permissions for /etc/group should be set to 644</description>
                  </metadata>
                  <criteria>
                        <criterion test_ref="oval:gov.irs.rhel5:tst:36" comment="File permissions test for /etc/group"/>
                        <extend_definition definition_ref="oval:gov.irs.rhel5:def:10000" comment="Red Hat Enterprise Linux 5 is installed"/>
                  </criteria>
            </definition>
            <definition class="compliance" version="1" id="oval:gov.irs.rhel5:def:25">
                  <metadata>
                        <title>File ownership for /etc/passwd</title>
                        <affected family="unix">
                              <platform>Red Hat Enterprise Linux 5</platform>
                        </affected>
                        <reference ref_id="CCE-3495-9" source="CCE"/>
                        <description>File ownership for /etc/passwd</description>
                  </metadata>
                  <criteria>
                        <criterion test_ref="oval:gov.irs.rhel5:tst:37" comment="File ownership check for /etc/passwd"/>
                        <extend_definition definition_ref="oval:gov.irs.rhel5:def:10000" comment="Red Hat Enterprise Linux 5 is installed"/>
                  </criteria>
            </definition>
            <definition class="compliance" version="1" id="oval:gov.irs.rhel5:def:26">
                  <metadata>
                        <title>File permissions for /etc/shadow</title>
                        <affected family="unix">
                              <platform>Red Hat Enterprise Linux 5</platform>
                        </affected>
                        <reference ref_id="CCE-4130-1" source="CCE"/>
                        <description>File permissions for /etc/shadow should be set to 400</description>
                  </metadata>
                  <criteria>
                        <criterion test_ref="oval:gov.irs.rhel5:tst:38" comment="File permissions test for /etc/shadow"/>
                        <extend_definition definition_ref="oval:gov.irs.rhel5:def:10000" comment="Red Hat Enterprise Linux 5 is installed"/>
                  </criteria>
            </definition>
            <definition class="compliance" version="1" id="oval:gov.irs.rhel5:def:27">
                  <metadata>
                        <title>The sticky bit should be set or not set as appropriate for all world-writable directories.</title>
                        <affected family="unix">
                              <platform>Red Hat Enterprise Linux 5</platform>
                        </affected>
                        <reference ref_id="CCE-3399-3" source="CCE"/>
                        <description>The sticky bit should be set or not set as appropriate for all world-writable directories.</description>
                  </metadata>
                  <criteria>
                        <criterion test_ref="oval:gov.irs.rhel5:tst:39" comment="The sticky bit should be set or not set as appropriate for all world-writable directories."/>
                        <extend_definition definition_ref="oval:gov.irs.rhel5:def:10000" comment="Red Hat Enterprise Linux 5 is installed"/>
                  </criteria>
            </definition>
            <definition class="compliance" version="1" id="oval:gov.irs.rhel5:def:28">
                  <metadata>
                        <title>The world-write permission should be enabled or disabled as appropriate for all files.</title>
                        <affected family="unix">
                              <platform>Red Hat Enterprise Linux 5</platform>
                        </affected>
                        <reference ref_id="CCE-3795-2" source="CCE"/>
                        <description>The world-write permission should be enabled or disabled as appropriate for all files.</description>
                  </metadata>
                  <criteria>
                        <criterion test_ref="oval:gov.irs.rhel5:tst:40" comment="The world-write permission should be enabled or disabled as appropriate for all files."/>
                        <extend_definition definition_ref="oval:gov.irs.rhel5:def:10000" comment="Red Hat Enterprise Linux 5 is installed"/>
                  </criteria>
            </definition>
            <definition class="compliance" version="1" id="oval:gov.irs.rhel5:def:29">
                  <metadata>
                        <title>Find Unauthorized SUID/SGID System Executables </title>
                        <affected family="unix">
                              <platform>Red Hat Enterprise Linux 5</platform>
                        </affected>
                        <reference ref_id="CCE-4178-0" source="CCE"/>
                        <description>The sgid bit should be set or not set as appropriate for all files.</description>
                  </metadata>
                  <criteria>
                        <criterion test_ref="oval:gov.irs.rhel5:tst:41" comment="The sgid bit should be set or not set as appropriate for all files."/>
                        <extend_definition definition_ref="oval:gov.irs.rhel5:def:10000" comment="Red Hat Enterprise Linux 5 is installed"/>
                  </criteria>
            </definition>
            <definition class="compliance" version="1" id="oval:gov.irs.rhel5:def:30">
                  <metadata>
                        <title>Find Unauthorized SUID/SGID System Executables </title>
                        <affected family="unix">
                              <platform>Red Hat Enterprise Linux 5</platform>
                        </affected>
                        <reference ref_id="CCE-3324-1" source="CCE"/>
                        <description>The suid bit should be set or not set as appropriate for all files.</description>
                  </metadata>
                  <criteria>
                        <criterion test_ref="oval:gov.irs.rhel5:tst:42" comment="The suid bit should be set or not set as appropriate for all files."/>
                        <extend_definition definition_ref="oval:gov.irs.rhel5:def:10000" comment="Red Hat Enterprise Linux 5 is installed"/>
                  </criteria>
            </definition>
            <definition class="compliance" version="1" id="oval:gov.irs.rhel5:def:31">
                  <metadata>
                        <title>Find and Repair Unowned Files</title>
                        <affected family="unix">
                              <platform>Red Hat Enterprise Linux 5</platform>
                        </affected>
                        <reference ref_id="CCE-4223-4" source="CCE"/>
                        <description>All files should be owned by a user as appropriate</description>
                  </metadata>
                  <criteria>
                        <criterion test_ref="oval:gov.irs.rhel5:tst:43" comment="Unknown test stub"/>
                        <extend_definition definition_ref="oval:gov.irs.rhel5:def:10000" comment="Red Hat Enterprise Linux 5 is installed"/>
                  </criteria>
            </definition>
            <definition class="compliance" version="1" id="oval:gov.irs.rhel5:def:32">
                  <metadata>
                        <title>Find and Repair Unowned Files</title>
                        <affected family="unix">
                              <platform>Red Hat Enterprise Linux 5</platform>
                        </affected>
                        <reference ref_id="CCE-3573-3" source="CCE"/>
                        <description>All files should be owned by a group as appropriate</description>
                  </metadata>
                  <criteria>
                        <criterion test_ref="oval:gov.irs.rhel5:tst:44" comment="Unknown test stub"/>
                        <extend_definition definition_ref="oval:gov.irs.rhel5:def:10000" comment="Red Hat Enterprise Linux 5 is installed"/>
                  </criteria>
            </definition>
            <definition class="compliance" version="1" id="oval:gov.irs.rhel5:def:33">
                  <metadata>
                        <title>Set Daemon umask </title>
                        <affected family="unix">
                              <platform>Red Hat Enterprise Linux 5</platform>
                        </affected>
                        <reference ref_id="CCE-4220-0" source="CCE"/>
                        <description>The daemon umask should be set as appropriate</description>
                  </metadata>
                  <criteria>
                        <criterion test_ref="oval:gov.irs.rhel5:tst:45" comment="The daemon umask should be set as appropriate"/>
                        <extend_definition definition_ref="oval:gov.irs.rhel5:def:10000" comment="Red Hat Enterprise Linux 5 is installed"/>
                  </criteria>
            </definition>
            <definition class="compliance" version="1" id="oval:gov.irs.rhel5:def:34">
                  <metadata>
                        <title>Disable Core Dumps </title>
                        <affected family="unix">
                              <platform>Red Hat Enterprise Linux 5</platform>
                        </affected>
                        <reference ref_id="CCE-4225-9" source="CCE"/>
                        <description>Core dumps for all users should be enabled or disabled as appropriate</description>
                  </metadata>
                  <criteria>
                        <criterion test_ref="oval:gov.irs.rhel5:tst:46" comment="Core dumps for all users should be enabled or disabled as appropriate"/>
                        <extend_definition definition_ref="oval:gov.irs.rhel5:def:10000" comment="Red Hat Enterprise Linux 5 is installed"/>
                  </criteria>
            </definition>
            <definition class="compliance" version="1" id="oval:gov.irs.rhel5:def:35">
                  <metadata>
                        <title>Disable Core Dumps </title>
                        <affected family="unix">
                              <platform>Red Hat Enterprise Linux 5</platform>
                        </affected>
                        <reference ref_id="CCE-4247-3" source="CCE"/>
                        <description>Sysctl setting #{setting} is #{row[GUIDE_VAL]}</description>
                  </metadata>
                  <criteria>
                        <criterion test_ref="oval:gov.irs.rhel5:tst:47" comment="Sysctl setting fs.suid_dumpable is disabled"/>
                        <extend_definition definition_ref="oval:gov.irs.rhel5:def:10000" comment="Red Hat Enterprise Linux 5 is installed"/>
                  </criteria>
            </definition>
            <definition class="compliance" version="1" id="oval:gov.irs.rhel5:def:36">
                  <metadata>
                        <title>Enable ExecShield </title>
                        <affected family="unix">
                              <platform>Red Hat Enterprise Linux 5</platform>
                        </affected>
                        <reference ref_id="CCE-4146-7" source="CCE"/>
                        <description>Sysctl setting #{setting} is #{row[GUIDE_VAL]}</description>
                  </metadata>
                  <criteria>
                        <criterion test_ref="oval:gov.irs.rhel5:tst:48" comment="Sysctl setting kernel.randomize_va_space is enabled"/>
                        <extend_definition definition_ref="oval:gov.irs.rhel5:def:10000" comment="Red Hat Enterprise Linux 5 is installed"/>
                  </criteria>
            </definition>
            <definition class="compliance" version="1" id="oval:gov.irs.rhel5:def:37">
                  <metadata>
                        <title>Enable ExecShield </title>
                        <affected family="unix">
                              <platform>Red Hat Enterprise Linux 5</platform>
                        </affected>
                        <reference ref_id="CCE-4168-1" source="CCE"/>
                        <description>Sysctl setting #{setting} is #{row[GUIDE_VAL]}</description>
                  </metadata>
                  <criteria>
                        <criterion test_ref="oval:gov.irs.rhel5:tst:49" comment="Sysctl setting kernel.exec-shield is enabled"/>
                        <extend_definition definition_ref="oval:gov.irs.rhel5:def:10000" comment="Red Hat Enterprise Linux 5 is installed"/>
                  </criteria>
            </definition>
            <definition class="compliance" version="1" id="oval:gov.irs.rhel5:def:38">
                  <metadata>
                        <title>The kernel-PAE package should be installed</title>
                        <affected family="unix">
                              <platform>Red Hat Enterprise Linux 5</platform>
                        </affected>
                        <reference ref_id="CCE-4172-3" source="CCE"/>
                        <description>The kernel-PAE package should be installed</description>
                  </metadata>
                  <criteria>
                        <criterion test_ref="oval:gov.irs.rhel5:tst:50" comment="The kernel-PAE package should be installed"/>
                        <extend_definition definition_ref="oval:gov.irs.rhel5:def:10000" comment="Red Hat Enterprise Linux 5 is installed"/>
                  </criteria>
            </definition>
            <definition class="compliance" version="1" id="oval:gov.irs.rhel5:def:39">
                  <metadata>
                        <title>Enable Support in the BIOS </title>
                        <affected family="unix">
                              <platform>Red Hat Enterprise Linux 5</platform>
                        </affected>
                        <reference ref_id="CCE-4177-2" source="CCE"/>
                        <description>The XD/NX processor feature should be enabled or disabled as appropriate in the BIOS</description>
                  </metadata>
                  <criteria>
                        <criterion test_ref="oval:gov.irs.rhel5:tst:51" comment="Unknown test stub"/>
                        <extend_definition definition_ref="oval:gov.irs.rhel5:def:10000" comment="Red Hat Enterprise Linux 5 is installed"/>
                  </criteria>
            </definition>
            <definition class="compliance" version="1" id="oval:gov.irs.rhel5:def:40">
                  <metadata>
                        <title>Restrict Root Logins to System Console </title>
                        <affected family="unix">
                              <platform>Red Hat Enterprise Linux 5</platform>
                        </affected>
                        <reference ref_id="CCE-3820-8" source="CCE"/>
                        <description>Logins through the specified virtual console interface should be enabled or disabled as appropriate</description>
                  </metadata>
                  <criteria>
                        <criterion test_ref="oval:gov.irs.rhel5:tst:52" comment="Logins through the specified virtual console interface should be enabled or disabled as appropriate"/>
                        <extend_definition definition_ref="oval:gov.irs.rhel5:def:10000" comment="Red Hat Enterprise Linux 5 is installed"/>
                  </criteria>
            </definition>
            <definition class="compliance" version="1" id="oval:gov.irs.rhel5:def:41">
                  <metadata>
                        <title>Restrict Root Logins to System Console </title>
                        <affected family="unix">
                              <platform>Red Hat Enterprise Linux 5</platform>
                        </affected>
                        <reference ref_id="CCE-3485-0" source="CCE"/>
                        <description>Logins through the specified virtual console device should be enabled or disabled as appropriate</description>
                  </metadata>
                  <criteria>
                        <criterion test_ref="oval:gov.irs.rhel5:tst:53" comment="Logins through the specified virtual console device should be enabled or disabled as appropriate"/>
                        <extend_definition definition_ref="oval:gov.irs.rhel5:def:10000" comment="Red Hat Enterprise Linux 5 is installed"/>
                  </criteria>
            </definition>
            <definition class="compliance" version="1" id="oval:gov.irs.rhel5:def:42">
                  <metadata>
                        <title>Restrict Root Logins to System Console </title>
                        <affected family="unix">
                              <platform>Red Hat Enterprise Linux 5</platform>
                        </affected>
                        <reference ref_id="CCE-4111-1" source="CCE"/>
                        <description>Logins through the primary console device should be enabled or disabled as appropriate</description>
                  </metadata>
                  <criteria>
                        <criterion test_ref="oval:gov.irs.rhel5:tst:54" comment="Logins through the primary console device should be enabled or disabled as appropriate"/>
                        <extend_definition definition_ref="oval:gov.irs.rhel5:def:10000" comment="Red Hat Enterprise Linux 5 is installed"/>
                  </criteria>
            </definition>
            <definition class="compliance" version="1" id="oval:gov.irs.rhel5:def:43">
                  <metadata>
                        <title>Restrict Root Logins to System Console </title>
                        <affected family="unix">
                              <platform>Red Hat Enterprise Linux 5</platform>
                        </affected>
                        <reference ref_id="CCE-4256-4" source="CCE"/>
                        <description>Login prompts on serial ports should be enabled or disabled as appropriate.</description>
                  </metadata>
                  <criteria>
                        <criterion test_ref="oval:gov.irs.rhel5:tst:55" comment="Login prompts on serial ports should be enabled or disabled as appropriate."/>
                        <extend_definition definition_ref="oval:gov.irs.rhel5:def:10000" comment="Red Hat Enterprise Linux 5 is installed"/>
                  </criteria>
            </definition>
            <definition class="compliance" version="1" id="oval:gov.irs.rhel5:def:44">
                  <metadata>
                        <title>Limit su Access to the Root Account </title>
                        <affected family="unix">
                              <platform>Red Hat Enterprise Linux 5</platform>
                        </affected>
                        <reference ref_id="CCE-4274-7" source="CCE"/>
                        <description>Command access to the root account should be enabled or disabled as appropriate.</description>
                  </metadata>
                  <criteria>
                        <criterion test_ref="oval:gov.irs.rhel5:tst:56"/>
                        <criterion test_ref="oval:gov.irs.rhel5:tst:57"/>
                        <extend_definition definition_ref="oval:gov.irs.rhel5:def:10000" comment="Red Hat Enterprise Linux 5 is installed"/>
                  </criteria>
            </definition>
            <definition class="compliance" version="1" id="oval:gov.irs.rhel5:def:45">
                  <metadata>
                        <title>Configure sudo to Improve Auditing of Root Access </title>
                        <affected family="unix">
                              <platform>Red Hat Enterprise Linux 5</platform>
                        </affected>
                        <reference ref_id="CCE-4044-4" source="CCE"/>
                        <description>Sudo privileges should granted or rejected to the wheel group as appropriate</description>
                  </metadata>
                  <criteria>
                        <criterion test_ref="oval:gov.irs.rhel5:tst:58" comment="Sudo privileges should granted or rejected to the wheel group as appropriate"/>
                        <extend_definition definition_ref="oval:gov.irs.rhel5:def:10000" comment="Red Hat Enterprise Linux 5 is installed"/>
                  </criteria>
            </definition>
            <definition class="compliance" version="1" id="oval:gov.irs.rhel5:def:46">
                  <metadata>
                        <title>All system accounts should have their logins disabled</title>
                        <affected family="unix">
                              <platform>Red Hat Enterprise Linux 5</platform>
                        </affected>
                        <reference ref_id="CCE-3987-5" source="CCE"/>
                        <description>All system accounts should have passwords disabled and login shells set to /sbin/nologin</description>
                  </metadata>
                  <criteria>
                        <criterion test_ref="oval:gov.irs.rhel5:tst:59" comment="The password should be disabled for all system accounts"/>
                        <criterion test_ref="oval:gov.irs.rhel5:tst:60" comment="The login shell should be set to /sbin/nologin for all system accounts as appropriate"/>
                        <extend_definition definition_ref="oval:gov.irs.rhel5:def:10000" comment="Red Hat Enterprise Linux 5 is installed"/>
                  </criteria>
            </definition>
            <definition class="compliance" version="1" id="oval:gov.irs.rhel5:def:47">
                  <metadata>
                        <title>Verify that No Accounts Have Empty Password Fields </title>
                        <affected family="unix">
                              <platform>Red Hat Enterprise Linux 5</platform>
                        </affected>
                        <reference ref_id="CCE-4238-2" source="CCE"/>
                        <description>Login access to accounts without passwords should be enabled or disabled as appropriate</description>
                  </metadata>
                  <criteria>
                        <criterion test_ref="oval:gov.irs.rhel5:tst:61" comment="Login access to accounts without passwords should be enabled or disabled as appropriate"/>
                        <extend_definition definition_ref="oval:gov.irs.rhel5:def:10000" comment="Red Hat Enterprise Linux 5 is installed"/>
                  </criteria>
            </definition>
            <definition class="compliance" version="1" id="oval:gov.irs.rhel5:def:48">
                  <metadata>
                        <title>Verify that No Non-Root Accounts Have UID 0 </title>
                        <affected family="unix">
                              <platform>Red Hat Enterprise Linux 5</platform>
                        </affected>
                        <reference ref_id="CCE-4009-7" source="CCE"/>
                        <description>Anonymous root logins are enabled or disabled as appropriate</description>
                  </metadata>
                  <criteria>
                        <criterion test_ref="oval:gov.irs.rhel5:tst:62"/>
                        <extend_definition definition_ref="oval:gov.irs.rhel5:def:10000" comment="Red Hat Enterprise Linux 5 is installed"/>
                  </criteria>
            </definition>
            <definition class="compliance" version="1" id="oval:gov.irs.rhel5:def:49">
                  <metadata>
                        <title>Set Password Expiration Parameters </title>
                        <affected family="unix">
                              <platform>Red Hat Enterprise Linux 5</platform>
                        </affected>
                        <reference ref_id="CCE-4154-1" source="CCE"/>
                        <description>The password minimum length should be set appropriately</description>
                  </metadata>
                  <criteria>
                        <criterion test_ref="oval:gov.irs.rhel5:tst:63" comment="The password minimum length should be set appropriately"/>
                        <extend_definition definition_ref="oval:gov.irs.rhel5:def:10000" comment="Red Hat Enterprise Linux 5 is installed"/>
                  </criteria>
            </definition>
            <definition class="compliance" version="1" id="oval:gov.irs.rhel5:def:50">
                  <metadata>
                        <title>Set Password Expiration Parameters </title>
                        <affected family="unix">
                              <platform>Red Hat Enterprise Linux 5</platform>
                        </affected>
                        <reference ref_id="CCE-4180-6" source="CCE"/>
                        <description>The "minimum password age" policy should meet minimum requirements. </description>
                  </metadata>
                  <criteria>
                        <criterion test_ref="oval:gov.irs.rhel5:tst:64" comment="The &quot;minimum password age&quot; policy should meet minimum requirements.  "/>
                        <extend_definition definition_ref="oval:gov.irs.rhel5:def:10000" comment="Red Hat Enterprise Linux 5 is installed"/>
                  </criteria>
            </definition>
            <definition class="compliance" version="1" id="oval:gov.irs.rhel5:def:51">
                  <metadata>
                        <title>Set Password Expiration Parameters </title>
                        <affected family="unix">
                              <platform>Red Hat Enterprise Linux 5</platform>
                        </affected>
                        <reference ref_id="CCE-4092-3" source="CCE"/>
                        <description>The "maximum password age" policy should meet minimum requirements. </description>
                  </metadata>
                  <criteria>
                        <criterion test_ref="oval:gov.irs.rhel5:tst:65" comment="The &quot;maximum password age&quot; policy should meet minimum requirements.  "/>
                        <extend_definition definition_ref="oval:gov.irs.rhel5:def:10000" comment="Red Hat Enterprise Linux 5 is installed"/>
                  </criteria>
            </definition>
            <definition class="compliance" version="1" id="oval:gov.irs.rhel5:def:52">
                  <metadata>
                        <title>Set Password Expiration Parameters </title>
                        <affected family="unix">
                              <platform>Red Hat Enterprise Linux 5</platform>
                        </affected>
                        <reference ref_id="CCE-4097-2" source="CCE"/>
                        <description>The password warn age should be set appropriately</description>
                  </metadata>
                  <criteria>
                        <criterion test_ref="oval:gov.irs.rhel5:tst:66" comment="The password warn age should be set appropriately"/>
                        <extend_definition definition_ref="oval:gov.irs.rhel5:def:10000" comment="Red Hat Enterprise Linux 5 is installed"/>
                  </criteria>
            </definition>
            <definition class="compliance" version="1" id="oval:gov.irs.rhel5:def:53">
                  <metadata>
                        <title>Remove Legacy + Entries from Password Files </title>
                        <affected family="unix">
                              <platform>Red Hat Enterprise Linux 5</platform>
                        </affected>
                        <reference ref_id="CCE-4114-5" source="CCE"/>
                        <description>NIS file inclusions should be set appropriately in the /etc/passwd file</description>
                  </metadata>
                  <criteria>
                        <criterion test_ref="oval:gov.irs.rhel5:tst:67"/>
                        <criterion test_ref="oval:gov.irs.rhel5:tst:68"/>
                        <criterion test_ref="oval:gov.irs.rhel5:tst:69"/>
                        <extend_definition definition_ref="oval:gov.irs.rhel5:def:10000" comment="Red Hat Enterprise Linux 5 is installed"/>
                  </criteria>
            </definition>
            <definition class="compliance" version="1" id="oval:gov.irs.rhel5:def:54">
                  <metadata>
                        <title>Set Password Quality Requirements </title>
                        <affected family="unix">
                              <platform>Red Hat Enterprise Linux 5</platform>
                        </affected>
                        <reference ref_id="CCE-3762-2" source="CCE"/>
                        <description>The password strength should meet minimum requirements</description>
                  </metadata>
                  <criteria>
                        <criterion test_ref="oval:gov.irs.rhel5:tst:70" comment="Unknown test stub"/>
                        <extend_definition definition_ref="oval:gov.irs.rhel5:def:10000" comment="Red Hat Enterprise Linux 5 is installed"/>
                  </criteria>
            </definition>
            <definition class="compliance" version="1" id="oval:gov.irs.rhel5:def:55">
                  <metadata>
                        <title>Set Lockouts for Failed Password Attempts </title>
                        <affected family="unix">
                              <platform>Red Hat Enterprise Linux 5</platform>
                        </affected>
                        <reference ref_id="CCE-3410-8" source="CCE"/>
                        <description>The "account lockout threshold" policy should meet minimum requirements. </description>
                  </metadata>
                  <criteria>
                        <criterion test_ref="oval:gov.irs.rhel5:tst:71" comment="Unknown test stub"/>
                        <extend_definition definition_ref="oval:gov.irs.rhel5:def:10000" comment="Red Hat Enterprise Linux 5 is installed"/>
                  </criteria>
            </definition>
            <definition class="compliance" version="1" id="oval:gov.irs.rhel5:def:56">
                  <metadata>
                        <title>File ownership for /usr/sbin/userhelper</title>
                        <affected family="unix">
                              <platform>Red Hat Enterprise Linux 5</platform>
                        </affected>
                        <reference ref_id="CCE-4185-5" source="CCE"/>
                        <description>File ownership for /usr/sbin/userhelper</description>
                  </metadata>
                  <criteria>
                        <criterion test_ref="oval:gov.irs.rhel5:tst:72" comment="File ownership check for /usr/sbin/userhelper"/>
                        <extend_definition definition_ref="oval:gov.irs.rhel5:def:10000" comment="Red Hat Enterprise Linux 5 is installed"/>
                  </criteria>
            </definition>
            <definition class="compliance" version="1" id="oval:gov.irs.rhel5:def:57">
                  <metadata>
                        <title>File permissions for /usr/sbin/userhelper</title>
                        <affected family="unix">
                              <platform>Red Hat Enterprise Linux 5</platform>
                        </affected>
                        <reference ref_id="CCE-3952-9" source="CCE"/>
                        <description>File permissions for /usr/sbin/userhelper should be set to 4710</description>
                  </metadata>
                  <criteria>
                        <criterion test_ref="oval:gov.irs.rhel5:tst:73" comment="File permissions test for /usr/sbin/userhelper"/>
                        <extend_definition definition_ref="oval:gov.irs.rhel5:def:10000" comment="Red Hat Enterprise Linux 5 is installed"/>
                  </criteria>
            </definition>
            <definition class="compliance" version="1" id="oval:gov.irs.rhel5:def:58">
                  <metadata>
                        <title>Ensure that No Dangerous Directories Exist in Root's Path </title>
                        <affected family="unix">
                              <platform>Red Hat Enterprise Linux 5</platform>
                        </affected>
                        <reference ref_id="CCE-3301-9" source="CCE"/>
                        <description>The PATH variable should be set correctly for user root</description>
                  </metadata>
                  <criteria>
                        <criterion test_ref="oval:gov.irs.rhel5:tst:74" comment="Unknown test stub"/>
                        <extend_definition definition_ref="oval:gov.irs.rhel5:def:10000" comment="Red Hat Enterprise Linux 5 is installed"/>
                  </criteria>
            </definition>
            <definition class="compliance" version="1" id="oval:gov.irs.rhel5:def:59">
                  <metadata>
                        <title>File permissions for /home/.*</title>
                        <affected family="unix">
                              <platform>Red Hat Enterprise Linux 5</platform>
                        </affected>
                        <reference ref_id="CCE-4090-7" source="CCE"/>
                        <description>File permissions for /home/.* should be set to g-w,o-rwx</description>
                  </metadata>
                  <criteria>
                        <criterion test_ref="oval:gov.irs.rhel5:tst:75" comment="File permissions test for /home/.*"/>
                        <extend_definition definition_ref="oval:gov.irs.rhel5:def:10000" comment="Red Hat Enterprise Linux 5 is installed"/>
                  </criteria>
            </definition>
            <definition class="compliance" version="1" id="oval:gov.irs.rhel5:def:60">
                  <metadata>
                        <title>Ensure that Users Have Sensible Umask Values </title>
                        <affected family="unix">
                              <platform>Red Hat Enterprise Linux 5</platform>
                        </affected>
                        <reference ref_id="CCE-3844-8" source="CCE"/>
                        <description>The default umask for all users should be set correctly for the bash shell</description>
                  </metadata>
                  <criteria>
                        <criterion test_ref="oval:gov.irs.rhel5:tst:76"/>
                        <extend_definition definition_ref="oval:gov.irs.rhel5:def:10000" comment="Red Hat Enterprise Linux 5 is installed"/>
                  </criteria>
            </definition>
            <definition class="compliance" version="1" id="oval:gov.irs.rhel5:def:61">
                  <metadata>
                        <title>Ensure that Users Have Sensible Umask Values </title>
                        <affected family="unix">
                              <platform>Red Hat Enterprise Linux 5</platform>
                        </affected>
                        <reference ref_id="CCE-4227-5" source="CCE"/>
                        <description>The default umask for all users should be set correctly for the csh shell</description>
                  </metadata>
                  <criteria>
                        <criterion test_ref="oval:gov.irs.rhel5:tst:77"/>
                        <extend_definition definition_ref="oval:gov.irs.rhel5:def:10000" comment="Red Hat Enterprise Linux 5 is installed"/>
                  </criteria>
            </definition>
            <definition class="compliance" version="1" id="oval:gov.irs.rhel5:def:62">
                  <metadata>
                        <title>Ensure that Users Have Sensible Umask Values </title>
                        <affected family="unix">
                              <platform>Red Hat Enterprise Linux 5</platform>
                        </affected>
                        <reference ref_id="CCE-3870-3" source="CCE"/>
                        <description>The default umask for all users should be set correctly</description>
                  </metadata>
                  <criteria>
                        <criterion test_ref="oval:gov.irs.rhel5:tst:78"/>
                        <extend_definition definition_ref="oval:gov.irs.rhel5:def:10000" comment="Red Hat Enterprise Linux 5 is installed"/>
                  </criteria>
            </definition>
            <definition class="compliance" version="1" id="oval:gov.irs.rhel5:def:63">
                  <metadata>
                        <title>File ownership for /etc/grub.conf</title>
                        <affected family="unix">
                              <platform>Red Hat Enterprise Linux 5</platform>
                        </affected>
                        <reference ref_id="CCE-4144-2" source="CCE"/>
                        <description>File ownership for /etc/grub.conf</description>
                  </metadata>
                  <criteria>
                        <criterion test_ref="oval:gov.irs.rhel5:tst:79" comment="File ownership check for /etc/grub.conf"/>
                        <extend_definition definition_ref="oval:gov.irs.rhel5:def:10000" comment="Red Hat Enterprise Linux 5 is installed"/>
                  </criteria>
            </definition>
            <definition class="compliance" version="1" id="oval:gov.irs.rhel5:def:64">
                  <metadata>
                        <title>File permissions for /etc/grub.conf</title>
                        <affected family="unix">
                              <platform>Red Hat Enterprise Linux 5</platform>
                        </affected>
                        <reference ref_id="CCE-3923-0" source="CCE"/>
                        <description>File permissions for /etc/grub.conf should be set to 600</description>
                  </metadata>
                  <criteria>
                        <criterion test_ref="oval:gov.irs.rhel5:tst:80" comment="File permissions test for /etc/grub.conf"/>
                        <extend_definition definition_ref="oval:gov.irs.rhel5:def:10000" comment="Red Hat Enterprise Linux 5 is installed"/>
                  </criteria>
            </definition>
            <definition class="compliance" version="1" id="oval:gov.irs.rhel5:def:65">
                  <metadata>
                        <title>Set Boot Loader Password </title>
                        <affected family="unix">
                              <platform>Red Hat Enterprise Linux 5</platform>
                        </affected>
                        <reference ref_id="CCE-3818-2" source="CCE"/>
                        <description>The grub boot loader should have password protection enabled or disabled as appropriate</description>
                  </metadata>
                  <criteria>
                        <criterion test_ref="oval:gov.irs.rhel5:tst:81" comment="The grub boot loader should have password protection enabled or disabled as appropriate"/>
                        <extend_definition definition_ref="oval:gov.irs.rhel5:def:10000" comment="Red Hat Enterprise Linux 5 is installed"/>
                  </criteria>
            </definition>
            <definition class="compliance" version="1" id="oval:gov.irs.rhel5:def:66">
                  <metadata>
                        <title>File ownership for /etc/grub.conf</title>
                        <affected family="unix">
                              <platform>Red Hat Enterprise Linux 5</platform>
                        </affected>
                        <reference ref_id="CCE-4197-0" source="CCE"/>
                        <description>File ownership for /etc/grub.conf</description>
                  </metadata>
                  <criteria>
                        <criterion test_ref="oval:gov.irs.rhel5:tst:82" comment="File ownership check for /etc/grub.conf"/>
                        <extend_definition definition_ref="oval:gov.irs.rhel5:def:10000" comment="Red Hat Enterprise Linux 5 is installed"/>
                  </criteria>
            </definition>
            <definition class="compliance" version="1" id="oval:gov.irs.rhel5:def:67">
                  <metadata>
                        <title>Require Authentication for Single-User Mode </title>
                        <affected family="unix">
                              <platform>Red Hat Enterprise Linux 5</platform>
                        </affected>
                        <reference ref_id="CCE-4241-6" source="CCE"/>
                        <description>The requirement for a password to boot into single-user mode should be configured correctly.</description>
                  </metadata>
                  <criteria>
                        <criterion test_ref="oval:gov.irs.rhel5:tst:83" comment="The requirement for a password to boot into single-user mode should be configured correctly."/>
                        <extend_definition definition_ref="oval:gov.irs.rhel5:def:10000" comment="Red Hat Enterprise Linux 5 is installed"/>
                  </criteria>
            </definition>
            <definition class="compliance" version="1" id="oval:gov.irs.rhel5:def:68">
                  <metadata>
                        <title>Disable Interactive Boot</title>
                        <affected family="unix">
                              <platform>Red Hat Enterprise Linux 5</platform>
                        </affected>
                        <reference ref_id="CCE-4245-7" source="CCE"/>
                        <description>The ability for users to perform interactive startups should be enabled or disabled as appropriate.</description>
                  </metadata>
                  <criteria>
                        <criterion test_ref="oval:gov.irs.rhel5:tst:84" comment="The ability for users to perform interactive startups should be enabled or disabled as appropriate."/>
                        <extend_definition definition_ref="oval:gov.irs.rhel5:def:10000" comment="Red Hat Enterprise Linux 5 is installed"/>
                  </criteria>
            </definition>
            <definition class="compliance" version="1" id="oval:gov.irs.rhel5:def:69">
                  <metadata>
                        <title>Implement Inactivity Time-out for Login Shells </title>
                        <affected family="unix">
                              <platform>Red Hat Enterprise Linux 5</platform>
                        </affected>
                        <reference ref_id="CCE-3689-7" source="CCE"/>
                        <description>The idle time-out value for the default /bin/tcsh shell should meet the minimum requirements.</description>
                  </metadata>
                  <criteria>
                        <criterion test_ref="oval:gov.irs.rhel5:tst:85"/>
                        <extend_definition definition_ref="oval:gov.irs.rhel5:def:10000" comment="Red Hat Enterprise Linux 5 is installed"/>
                  </criteria>
            </definition>
            <definition class="compliance" version="1" id="oval:gov.irs.rhel5:def:70">
                  <metadata>
                        <title>Implement Inactivity Time-out for Login Shells </title>
                        <affected family="unix">
                              <platform>Red Hat Enterprise Linux 5</platform>
                        </affected>
                        <reference ref_id="CCE-3707-7" source="CCE"/>
                        <description>The idle time-out value for the default /bin/bash shell should meet the minimum requirements.</description>
                  </metadata>
                  <criteria>
                        <criterion test_ref="oval:gov.irs.rhel5:tst:86"/>
                        <criterion test_ref="oval:gov.irs.rhel5:tst:87"/>
                        <criterion test_ref="oval:gov.irs.rhel5:tst:88"/>
                        <extend_definition definition_ref="oval:gov.irs.rhel5:def:10000" comment="Red Hat Enterprise Linux 5 is installed"/>
                  </criteria>
            </definition>
            <definition class="compliance" version="1" id="oval:gov.irs.rhel5:def:71">
                  <metadata>
                        <title>The allowed period of inactivity gnome desktop lockout should be configured correctly.</title>
                        <affected family="unix">
                              <platform>Red Hat Enterprise Linux 5</platform>
                        </affected>
                        <reference ref_id="CCE-3315-9" source="CCE"/>
                        <description>The allowed period of inactivity gnome desktop lockout should be configured correctly.</description>
                  </metadata>
                  <criteria>
                        <criterion test_ref="oval:gov.irs.rhel5:tst:89"/>
                        <criterion test_ref="oval:gov.irs.rhel5:tst:90"/>
                        <criterion test_ref="oval:gov.irs.rhel5:tst:91"/>
                        <extend_definition definition_ref="oval:gov.irs.rhel5:def:10000" comment="Red Hat Enterprise Linux 5 is installed"/>
                  </criteria>
            </definition>
            <definition class="compliance" version="1" id="oval:gov.irs.rhel5:def:72">
                  <metadata>
                        <title>The vlock package should be installed</title>
                        <affected family="unix">
                              <platform>Red Hat Enterprise Linux 5</platform>
                        </affected>
                        <reference ref_id="CCE-3910-7" source="CCE"/>
                        <description>The vlock package should be installed</description>
                  </metadata>
                  <criteria>
                        <criterion test_ref="oval:gov.irs.rhel5:tst:92" comment="The vlock package should be installed"/>
                        <extend_definition definition_ref="oval:gov.irs.rhel5:def:10000" comment="Red Hat Enterprise Linux 5 is installed"/>
                  </criteria>
            </definition>
            <definition class="compliance" version="1" id="oval:gov.irs.rhel5:def:73">
                  <metadata>
                        <title>File /etc/issue should exist</title>
                        <affected family="unix">
                              <platform>Red Hat Enterprise Linux 5</platform>
                        </affected>
                        <reference ref_id="CCE-4060-0" source="CCE"/>
                        <description>File /etc/issue should exist</description>
                  </metadata>
                  <criteria>
                        <criterion test_ref="oval:gov.irs.rhel5:tst:93" comment="File /etc/issue should exist"/>
                        <extend_definition definition_ref="oval:gov.irs.rhel5:def:10000" comment="Red Hat Enterprise Linux 5 is installed"/>
                  </criteria>
            </definition>
            <definition class="compliance" version="1" id="oval:gov.irs.rhel5:def:74">
                  <metadata>
                        <title>Implement a GUI Warning Banner </title>
                        <affected family="unix">
                              <platform>Red Hat Enterprise Linux 5</platform>
                        </affected>
                        <reference ref_id="CCE-4188-9" source="CCE"/>
                        <description>The direct gnome login warning banner should be set correctly.</description>
                  </metadata>
                  <criteria>
                        <criterion test_ref="oval:gov.irs.rhel5:tst:94" comment="Unknown test stub"/>
                        <extend_definition definition_ref="oval:gov.irs.rhel5:def:10000" comment="Red Hat Enterprise Linux 5 is installed"/>
                  </criteria>
            </definition>
            <definition class="compliance" version="1" id="oval:gov.irs.rhel5:def:75">
                  <metadata>
                        <title>Enable SELinux</title>
                        <affected family="unix">
                              <platform>Red Hat Enterprise Linux 5</platform>
                        </affected>
                        <reference ref_id="CCE-3977-6" source="CCE"/>
                        <description>SELinux should be enabled or disabled as appropriate</description>
                  </metadata>
                  <criteria>
                        <criterion test_ref="oval:gov.irs.rhel5:tst:95"/>
                        <extend_definition definition_ref="oval:gov.irs.rhel5:def:10000" comment="Red Hat Enterprise Linux 5 is installed"/>
                  </criteria>
            </definition>
            <definition class="compliance" version="1" id="oval:gov.irs.rhel5:def:76">
                  <metadata>
                        <title>Enable SELinux</title>
                        <affected family="unix">
                              <platform>Red Hat Enterprise Linux 5</platform>
                        </affected>
                        <reference ref_id="CCE-3999-0" source="CCE"/>
                        <description>The SELinux state should be set appropriately.</description>
                  </metadata>
                  <criteria>
                        <criterion test_ref="oval:gov.irs.rhel5:tst:96"/>
                        <criterion test_ref="oval:gov.irs.rhel5:tst:97"/>
                        <extend_definition definition_ref="oval:gov.irs.rhel5:def:10000" comment="Red Hat Enterprise Linux 5 is installed"/>
                  </criteria>
            </definition>
            <definition class="compliance" version="1" id="oval:gov.irs.rhel5:def:77">
                  <metadata>
                        <title>Enable SELinux</title>
                        <affected family="unix">
                              <platform>Red Hat Enterprise Linux 5</platform>
                        </affected>
                        <reference ref_id="CCE-3624-4" source="CCE"/>
                        <description>The SELinux policy should be set appropriately.</description>
                  </metadata>
                  <criteria>
                        <criterion test_ref="oval:gov.irs.rhel5:tst:98" comment="The SELinux policy should be set appropriately."/>
                        <extend_definition definition_ref="oval:gov.irs.rhel5:def:10000" comment="Red Hat Enterprise Linux 5 is installed"/>
                  </criteria>
            </definition>
            <definition class="compliance" version="1" id="oval:gov.irs.rhel5:def:78">
                  <metadata>
                        <title>Service setroubleshoot should be disabled</title>
                        <affected family="unix">
                              <platform>Red Hat Enterprise Linux 5</platform>
                        </affected>
                        <reference ref_id="CCE-4254-9" source="CCE"/>
                        <description>Service setroubleshoot should be disabled</description>
                  </metadata>
                  <criteria>
                        <criterion test_ref="oval:gov.irs.rhel5:tst:99" comment="The setroubleshoot service should not be started at runlevel 2"/>
                        <criterion test_ref="oval:gov.irs.rhel5:tst:100" comment="The setroubleshoot service should not be started at runlevel 3"/>
                        <criterion test_ref="oval:gov.irs.rhel5:tst:101" comment="The setroubleshoot service should not be started at runlevel 4"/>
                        <criterion test_ref="oval:gov.irs.rhel5:tst:102" comment="The setroubleshoot service should not be started at runlevel 5"/>
                        <extend_definition definition_ref="oval:gov.irs.rhel5:def:10000" comment="Red Hat Enterprise Linux 5 is installed"/>
                  </criteria>
            </definition>
            <definition class="compliance" version="1" id="oval:gov.irs.rhel5:def:79">
                  <metadata>
                        <title>The setroubleshoot package should not be installed</title>
                        <affected family="unix">
                              <platform>Red Hat Enterprise Linux 5</platform>
                        </affected>
                        <reference ref_id="CCE-4148-3" source="CCE"/>
                        <description>The setroubleshoot package should not be installed</description>
                  </metadata>
                  <criteria>
                        <criterion test_ref="oval:gov.irs.rhel5:tst:103" comment="The setroubleshoot package should not be installed"/>
                        <extend_definition definition_ref="oval:gov.irs.rhel5:def:10000" comment="Red Hat Enterprise Linux 5 is installed"/>
                  </criteria>
            </definition>
            <definition class="compliance" version="1" id="oval:gov.irs.rhel5:def:80">
                  <metadata>
                        <title>Service mcstrans should be disabled</title>
                        <affected family="unix">
                              <platform>Red Hat Enterprise Linux 5</platform>
                        </affected>
                        <reference ref_id="CCE-3668-1" source="CCE"/>
                        <description>Service mcstrans should be disabled</description>
                  </metadata>
                  <criteria>
                        <criterion test_ref="oval:gov.irs.rhel5:tst:104" comment="The mcstrans service should not be started at runlevel 2"/>
                        <criterion test_ref="oval:gov.irs.rhel5:tst:105" comment="The mcstrans service should not be started at runlevel 3"/>
                        <criterion test_ref="oval:gov.irs.rhel5:tst:106" comment="The mcstrans service should not be started at runlevel 4"/>
                        <criterion test_ref="oval:gov.irs.rhel5:tst:107" comment="The mcstrans service should not be started at runlevel 5"/>
                        <extend_definition definition_ref="oval:gov.irs.rhel5:def:10000" comment="Red Hat Enterprise Linux 5 is installed"/>
                  </criteria>
            </definition>
            <definition class="compliance" version="1" id="oval:gov.irs.rhel5:def:81">
                  <metadata>
                        <title>Service restorecond should be enabled</title>
                        <affected family="unix">
                              <platform>Red Hat Enterprise Linux 5</platform>
                        </affected>
                        <reference ref_id="CCE-4129-3" source="CCE"/>
                        <description>Service restorecond should be enabled</description>
                  </metadata>
                  <criteria>
                        <criterion test_ref="oval:gov.irs.rhel5:tst:108" comment="The restorecond service should not be started at runlevel 2"/>
                        <criterion test_ref="oval:gov.irs.rhel5:tst:109" comment="The restorecond service should not be started at runlevel 3"/>
                        <criterion test_ref="oval:gov.irs.rhel5:tst:110" comment="The restorecond service should not be started at runlevel 4"/>
                        <criterion test_ref="oval:gov.irs.rhel5:tst:111" comment="The restorecond service should not be started at runlevel 5"/>
                        <extend_definition definition_ref="oval:gov.irs.rhel5:def:10000" comment="Red Hat Enterprise Linux 5 is installed"/>
                  </criteria>
            </definition>
            <definition class="compliance" version="1" id="oval:gov.irs.rhel5:def:82">
                  <metadata>
                        <title>Network Parameters for Hosts Only </title>
                        <affected family="unix">
                              <platform>Red Hat Enterprise Linux 5</platform>
                        </affected>
                        <reference ref_id="CCE-4151-7" source="CCE"/>
                        <description>Sysctl setting #{setting} is #{row[GUIDE_VAL]}</description>
                  </metadata>
                  <criteria>
                        <criterion test_ref="oval:gov.irs.rhel5:tst:112" comment="Sysctl setting net.ipv4.conf.default.send_redirects is disabled"/>
                        <extend_definition definition_ref="oval:gov.irs.rhel5:def:10000" comment="Red Hat Enterprise Linux 5 is installed"/>
                  </criteria>
            </definition>
            <definition class="compliance" version="1" id="oval:gov.irs.rhel5:def:83">
                  <metadata>
                        <title>Network Parameters for Hosts Only </title>
                        <affected family="unix">
                              <platform>Red Hat Enterprise Linux 5</platform>
                        </affected>
                        <reference ref_id="CCE-4155-8" source="CCE"/>
                        <description>Sysctl setting #{setting} is #{row[GUIDE_VAL]}</description>
                  </metadata>
                  <criteria>
                        <criterion test_ref="oval:gov.irs.rhel5:tst:113" comment="Sysctl setting net.ipv4.conf.all.send_redirects is disabled"/>
                        <extend_definition definition_ref="oval:gov.irs.rhel5:def:10000" comment="Red Hat Enterprise Linux 5 is installed"/>
                  </criteria>
            </definition>
            <definition class="compliance" version="1" id="oval:gov.irs.rhel5:def:84">
                  <metadata>
                        <title>Network Parameters for Hosts Only </title>
                        <affected family="unix">
                              <platform>Red Hat Enterprise Linux 5</platform>
                        </affected>
                        <reference ref_id="CCE-3561-8" source="CCE"/>
                        <description>Sysctl setting #{setting} is #{row[GUIDE_VAL]}</description>
                  </metadata>
                  <criteria>
                        <criterion test_ref="oval:gov.irs.rhel5:tst:114" comment="Sysctl setting net.ipv4.ip_forward is disabled"/>
                        <extend_definition definition_ref="oval:gov.irs.rhel5:def:10000" comment="Red Hat Enterprise Linux 5 is installed"/>
                  </criteria>
            </definition>
            <definition class="compliance" version="1" id="oval:gov.irs.rhel5:def:85">
                  <metadata>
                        <title>Network Parameters for Hosts and Routers </title>
                        <affected family="unix">
                              <platform>Red Hat Enterprise Linux 5</platform>
                        </affected>
                        <reference ref_id="CCE-3472-8" source="CCE"/>
                        <description>Sysctl setting #{setting} is #{row[GUIDE_VAL]}</description>
                  </metadata>
                  <criteria>
                        <criterion test_ref="oval:gov.irs.rhel5:tst:115" comment="Sysctl setting net.ipv4.conf.all.secure_redirects is disabled"/>
                        <extend_definition definition_ref="oval:gov.irs.rhel5:def:10000" comment="Red Hat Enterprise Linux 5 is installed"/>
                  </criteria>
            </definition>
            <definition class="compliance" version="1" id="oval:gov.irs.rhel5:def:86">
                  <metadata>
                        <title>Network Parameters for Hosts and Routers </title>
                        <affected family="unix">
                              <platform>Red Hat Enterprise Linux 5</platform>
                        </affected>
                        <reference ref_id="CCE-4217-6" source="CCE"/>
                        <description>Sysctl setting #{setting} is #{row[GUIDE_VAL]}</description>
                  </metadata>
                  <criteria>
                        <criterion test_ref="oval:gov.irs.rhel5:tst:116" comment="Sysctl setting net.ipv4.conf.all.accept_redirects is disabled"/>
                        <extend_definition definition_ref="oval:gov.irs.rhel5:def:10000" comment="Red Hat Enterprise Linux 5 is installed"/>
                  </criteria>
            </definition>
            <definition class="compliance" version="1" id="oval:gov.irs.rhel5:def:87">
                  <metadata>
                        <title>Network Parameters for Hosts and Routers </title>
                        <affected family="unix">
                              <platform>Red Hat Enterprise Linux 5</platform>
                        </affected>
                        <reference ref_id="CCE-4133-5" source="CCE"/>
                        <description>Sysctl setting #{setting} is #{row[GUIDE_VAL]}</description>
                  </metadata>
                  <criteria>
                        <criterion test_ref="oval:gov.irs.rhel5:tst:117" comment="Sysctl setting net.ipv4.icmp_ignore_bogus_error_messages is enabled"/>
                        <extend_definition definition_ref="oval:gov.irs.rhel5:def:10000" comment="Red Hat Enterprise Linux 5 is installed"/>
                  </criteria>
            </definition>
            <definition class="compliance" version="1" id="oval:gov.irs.rhel5:def:88">
                  <metadata>
                        <title>Network Parameters for Hosts and Routers </title>
                        <affected family="unix">
                              <platform>Red Hat Enterprise Linux 5</platform>
                        </affected>
                        <reference ref_id="CCE-4265-5" source="CCE"/>
                        <description>Sysctl setting #{setting} is #{row[GUIDE_VAL]}</description>
                  </metadata>
                  <criteria>
                        <criterion test_ref="oval:gov.irs.rhel5:tst:118" comment="Sysctl setting net.ipv4.tcp_syncookies is enabled"/>
                        <extend_definition definition_ref="oval:gov.irs.rhel5:def:10000" comment="Red Hat Enterprise Linux 5 is installed"/>
                  </criteria>
            </definition>
            <definition class="compliance" version="1" id="oval:gov.irs.rhel5:def:89">
                  <metadata>
                        <title>Network Parameters for Hosts and Routers </title>
                        <affected family="unix">
                              <platform>Red Hat Enterprise Linux 5</platform>
                        </affected>
                        <reference ref_id="CCE-3644-2" source="CCE"/>
                        <description>Sysctl setting #{setting} is #{row[GUIDE_VAL]}</description>
                  </metadata>
                  <criteria>
                        <criterion test_ref="oval:gov.irs.rhel5:tst:119" comment="Sysctl setting net.ipv4.icmp_echo_ignore_broadcasts is enabled"/>
                        <extend_definition definition_ref="oval:gov.irs.rhel5:def:10000" comment="Red Hat Enterprise Linux 5 is installed"/>
                  </criteria>
            </definition>
            <definition class="compliance" version="1" id="oval:gov.irs.rhel5:def:90">
                  <metadata>
                        <title>Network Parameters for Hosts and Routers </title>
                        <affected family="unix">
                              <platform>Red Hat Enterprise Linux 5</platform>
                        </affected>
                        <reference ref_id="CCE-4186-3" source="CCE"/>
                        <description>Sysctl setting #{setting} is #{row[GUIDE_VAL]}</description>
                  </metadata>
                  <criteria>
                        <criterion test_ref="oval:gov.irs.rhel5:tst:120" comment="Sysctl setting net.ipv4.conf.default.accept_redirects is disabled"/>
                        <extend_definition definition_ref="oval:gov.irs.rhel5:def:10000" comment="Red Hat Enterprise Linux 5 is installed"/>
                  </criteria>
            </definition>
            <definition class="compliance" version="1" id="oval:gov.irs.rhel5:def:91">
                  <metadata>
                        <title>Network Parameters for Hosts and Routers </title>
                        <affected family="unix">
                              <platform>Red Hat Enterprise Linux 5</platform>
                        </affected>
                        <reference ref_id="CCE-4080-8" source="CCE"/>
                        <description>Sysctl setting #{setting} is #{row[GUIDE_VAL]}</description>
                  </metadata>
                  <criteria>
                        <criterion test_ref="oval:gov.irs.rhel5:tst:121" comment="Sysctl setting net.ipv4.conf.all.rp_filter is enabled"/>
                        <extend_definition definition_ref="oval:gov.irs.rhel5:def:10000" comment="Red Hat Enterprise Linux 5 is installed"/>
                  </criteria>
            </definition>
            <definition class="compliance" version="1" id="oval:gov.irs.rhel5:def:92">
                  <metadata>
                        <title>Network Parameters for Hosts and Routers </title>
                        <affected family="unix">
                              <platform>Red Hat Enterprise Linux 5</platform>
                        </affected>
                        <reference ref_id="CCE-3339-9" source="CCE"/>
                        <description>Sysctl setting #{setting} is #{row[GUIDE_VAL]}</description>
                  </metadata>
                  <criteria>
                        <criterion test_ref="oval:gov.irs.rhel5:tst:122" comment="Sysctl setting net.ipv4.conf.default.secure_redirects is disabled"/>
                        <extend_definition definition_ref="oval:gov.irs.rhel5:def:10000" comment="Red Hat Enterprise Linux 5 is installed"/>
                  </criteria>
            </definition>
            <definition class="compliance" version="1" id="oval:gov.irs.rhel5:def:93">
                  <metadata>
                        <title>Network Parameters for Hosts and Routers </title>
                        <affected family="unix">
                              <platform>Red Hat Enterprise Linux 5</platform>
                        </affected>
                        <reference ref_id="CCE-4320-8" source="CCE"/>
                        <description>Sysctl setting #{setting} is #{row[GUIDE_VAL]}</description>
                  </metadata>
                  <criteria>
                        <criterion test_ref="oval:gov.irs.rhel5:tst:123" comment="Sysctl setting net.ipv4.conf.all.log_martians is enabled"/>
                        <extend_definition definition_ref="oval:gov.irs.rhel5:def:10000" comment="Red Hat Enterprise Linux 5 is installed"/>
                  </criteria>
            </definition>
            <definition class="compliance" version="1" id="oval:gov.irs.rhel5:def:94">
                  <metadata>
                        <title>Network Parameters for Hosts and Routers </title>
                        <affected family="unix">
                              <platform>Red Hat Enterprise Linux 5</platform>
                        </affected>
                        <reference ref_id="CCE-3840-6" source="CCE"/>
                        <description>Sysctl setting #{setting} is #{row[GUIDE_VAL]}</description>
                  </metadata>
                  <criteria>
                        <criterion test_ref="oval:gov.irs.rhel5:tst:124" comment="Sysctl setting net.ipv4.conf.default.rp_filter is enabled"/>
                        <extend_definition definition_ref="oval:gov.irs.rhel5:def:10000" comment="Red Hat Enterprise Linux 5 is installed"/>
                  </criteria>
            </definition>
            <definition class="compliance" version="1" id="oval:gov.irs.rhel5:def:95">
                  <metadata>
                        <title>Network Parameters for Hosts and Routers </title>
                        <affected family="unix">
                              <platform>Red Hat Enterprise Linux 5</platform>
                        </affected>
                        <reference ref_id="CCE-4091-5" source="CCE"/>
                        <description>Sysctl setting #{setting} is #{row[GUIDE_VAL]}</description>
                  </metadata>
                  <criteria>
                        <criterion test_ref="oval:gov.irs.rhel5:tst:125" comment="Sysctl setting net.ipv4.conf.default.accept_source_route is disabled"/>
                        <extend_definition definition_ref="oval:gov.irs.rhel5:def:10000" comment="Red Hat Enterprise Linux 5 is installed"/>
                  </criteria>
            </definition>
            <definition class="compliance" version="1" id="oval:gov.irs.rhel5:def:96">
                  <metadata>
                        <title>Network Parameters for Hosts and Routers </title>
                        <affected family="unix">
                              <platform>Red Hat Enterprise Linux 5</platform>
                        </affected>
                        <reference ref_id="CCE-4236-6" source="CCE"/>
                        <description>Sysctl setting #{setting} is #{row[GUIDE_VAL]}</description>
                  </metadata>
                  <criteria>
                        <criterion test_ref="oval:gov.irs.rhel5:tst:126" comment="Sysctl setting net.ipv4.conf.all.accept_source_route is disabled"/>
                        <extend_definition definition_ref="oval:gov.irs.rhel5:def:10000" comment="Red Hat Enterprise Linux 5 is installed"/>
                  </criteria>
            </definition>
            <definition class="compliance" version="1" id="oval:gov.irs.rhel5:def:97">
                  <metadata>
                        <title>Disable Wireless in BIOS </title>
                        <affected family="unix">
                              <platform>Red Hat Enterprise Linux 5</platform>
                        </affected>
                        <reference ref_id="CCE-3628-5" source="CCE"/>
                        <description>All wireless devices should be enabled or disabled in the BIOS as appropriate.</description>
                  </metadata>
                  <criteria>
                        <criterion test_ref="oval:gov.irs.rhel5:tst:127" comment="Unknown test stub"/>
                        <extend_definition definition_ref="oval:gov.irs.rhel5:def:10000" comment="Red Hat Enterprise Linux 5 is installed"/>
                  </criteria>
            </definition>
            <definition class="compliance" version="1" id="oval:gov.irs.rhel5:def:98">
                  <metadata>
                        <title>Deactivate Wireless Interfaces </title>
                        <affected family="unix">
                              <platform>Red Hat Enterprise Linux 5</platform>
                        </affected>
                        <reference ref_id="CCE-4276-2" source="CCE"/>
                        <description>All wireless interfaces should be enabled or disabled as appropriate.</description>
                  </metadata>
                  <criteria>
                        <criterion test_ref="oval:gov.irs.rhel5:tst:128" comment="Unknown test stub"/>
                        <extend_definition definition_ref="oval:gov.irs.rhel5:def:10000" comment="Red Hat Enterprise Linux 5 is installed"/>
                  </criteria>
            </definition>
            <definition class="compliance" version="1" id="oval:gov.irs.rhel5:def:99">
                  <metadata>
                        <title>File /lib/modules/.*/kernel/drivers/net/wireless/ should not exist</title>
                        <affected family="unix">
                              <platform>Red Hat Enterprise Linux 5</platform>
                        </affected>
                        <reference ref_id="CCE-4170-7" source="CCE"/>
                        <description>File /lib/modules/.*/kernel/drivers/net/wireless/ should not exist</description>
                  </metadata>
                  <criteria>
                        <criterion test_ref="oval:gov.irs.rhel5:tst:129" comment="File /lib/modules/.*/kernel/drivers/net/wireless/ should not exist"/>
                        <extend_definition definition_ref="oval:gov.irs.rhel5:def:10000" comment="Red Hat Enterprise Linux 5 is installed"/>
                  </criteria>
            </definition>
            <definition class="compliance" version="1" id="oval:gov.irs.rhel5:def:100">
                  <metadata>
                        <title>Disable Automatic Loading of IPv6 Kernel Module </title>
                        <affected family="unix">
                              <platform>Red Hat Enterprise Linux 5</platform>
                        </affected>
                        <reference ref_id="CCE-3562-6" source="CCE"/>
                        <description>Automatic loading of the IPv6 kernel module should be enabled or disabled as appropriate.</description>
                  </metadata>
                  <criteria>
                        <criterion test_ref="oval:gov.irs.rhel5:tst:130" comment="Automatic loading of the IPv6 kernel module should be enabled or disabled as appropriate."/>
                        <extend_definition definition_ref="oval:gov.irs.rhel5:def:10000" comment="Red Hat Enterprise Linux 5 is installed"/>
                  </criteria>
            </definition>
            <definition class="compliance" version="1" id="oval:gov.irs.rhel5:def:101">
                  <metadata>
                        <title>Disable Interface Usage of IPv6 </title>
                        <affected family="unix">
                              <platform>Red Hat Enterprise Linux 5</platform>
                        </affected>
                        <reference ref_id="CCE-3377-9" source="CCE"/>
                        <description>Global IPv6 initialization should be enabled or disabled as appropriate.</description>
                  </metadata>
                  <criteria>
                        <criterion test_ref="oval:gov.irs.rhel5:tst:131" comment="Global IPv6 initialization should be enabled or disabled as appropriate."/>
                        <extend_definition definition_ref="oval:gov.irs.rhel5:def:10000" comment="Red Hat Enterprise Linux 5 is installed"/>
                  </criteria>
            </definition>
            <definition class="compliance" version="1" id="oval:gov.irs.rhel5:def:102">
                  <metadata>
                        <title>Disable Interface Usage of IPv6 </title>
                        <affected family="unix">
                              <platform>Red Hat Enterprise Linux 5</platform>
                        </affected>
                        <reference ref_id="CCE-4296-0" source="CCE"/>
                        <description>IPv6 configuration should be enabled or disabled as appropriate for all interfaces.</description>
                  </metadata>
                  <criteria>
                        <criterion test_ref="oval:gov.irs.rhel5:tst:132"/>
                        <extend_definition definition_ref="oval:gov.irs.rhel5:def:10000" comment="Red Hat Enterprise Linux 5 is installed"/>
                  </criteria>
            </definition>
            <definition class="compliance" version="1" id="oval:gov.irs.rhel5:def:103">
                  <metadata>
                        <title>Disable Interface Usage of IPv6 </title>
                        <affected family="unix">
                              <platform>Red Hat Enterprise Linux 5</platform>
                        </affected>
                        <reference ref_id="CCE-3381-1" source="CCE"/>
                        <description>The default setting for IPv6 configuration should be enabled or disabled for network interfaces as appropriate.</description>
                  </metadata>
                  <criteria>
                        <criterion test_ref="oval:gov.irs.rhel5:tst:133" comment="The default setting for IPv6 configuration should be enabled or disabled for network interfaces as appropriate."/>
                        <extend_definition definition_ref="oval:gov.irs.rhel5:def:10000" comment="Red Hat Enterprise Linux 5 is installed"/>
                  </criteria>
            </definition>
            <definition class="compliance" version="1" id="oval:gov.irs.rhel5:def:104">
                  <metadata>
                        <title>Disable Automatic Configuration </title>
                        <affected family="unix">
                              <platform>Red Hat Enterprise Linux 5</platform>
                        </affected>
                        <reference ref_id="CCE-4269-7" source="CCE"/>
                        <description>Accepting IPv6 router advertisements should be enabled or disabled as appropriate for all network interfaces.</description>
                  </metadata>
                  <criteria>
                        <criteria operator="OR" comment="Definition alternatives">
                              <criterion test_ref="oval:gov.irs.rhel5:tst:134" comment="Accepting IPv6 router advertisements should be enabled or disabled as appropriate for all network interfaces."/>
                              <extend_definition definition_ref="oval:gov.irs.rhel5:def:101" comment="Dependency is met"/>
                              <extend_definition definition_ref="oval:gov.irs.rhel5:def:102" comment="Dependency is met"/>
                              <extend_definition definition_ref="oval:gov.irs.rhel5:def:103" comment="Dependency is met"/>
                        </criteria>
                        <extend_definition definition_ref="oval:gov.irs.rhel5:def:10000" comment="Red Hat Enterprise Linux 5 is installed"/>
                  </criteria>
            </definition>
            <definition class="compliance" version="1" id="oval:gov.irs.rhel5:def:105">
                  <metadata>
                        <title>Disable Automatic Configuration </title>
                        <affected family="unix">
                              <platform>Red Hat Enterprise Linux 5</platform>
                        </affected>
                        <reference ref_id="CCE-4291-1" source="CCE"/>
                        <description>The default setting for accepting IPv6 router advertisements should be enabled or disabled for network interfaces as appropriate.</description>
                  </metadata>
                  <criteria>
                        <criteria operator="OR" comment="Definition alternatives">
                              <criterion test_ref="oval:gov.irs.rhel5:tst:135" comment="Unknown test stub"/>
                              <extend_definition definition_ref="oval:gov.irs.rhel5:def:101" comment="Dependency is met"/>
                              <extend_definition definition_ref="oval:gov.irs.rhel5:def:102" comment="Dependency is met"/>
                              <extend_definition definition_ref="oval:gov.irs.rhel5:def:103" comment="Dependency is met"/>
                        </criteria>
                        <extend_definition definition_ref="oval:gov.irs.rhel5:def:10000" comment="Red Hat Enterprise Linux 5 is installed"/>
                  </criteria>
            </definition>
            <definition class="compliance" version="1" id="oval:gov.irs.rhel5:def:106">
                  <metadata>
                        <title>Disable Automatic Configuration </title>
                        <affected family="unix">
                              <platform>Red Hat Enterprise Linux 5</platform>
                        </affected>
                        <reference ref_id="CCE-4313-3" source="CCE"/>
                        <description>Accepting redirects from IPv6 routers should be enabled or disabled as appropriate for all network interfaces.</description>
                  </metadata>
                  <criteria>
                        <criteria operator="OR" comment="Definition alternatives">
                              <criterion test_ref="oval:gov.irs.rhel5:tst:136" comment="Unknown test stub"/>
                              <extend_definition definition_ref="oval:gov.irs.rhel5:def:101" comment="Dependency is met"/>
                              <extend_definition definition_ref="oval:gov.irs.rhel5:def:102" comment="Dependency is met"/>
                              <extend_definition definition_ref="oval:gov.irs.rhel5:def:103" comment="Dependency is met"/>
                        </criteria>
                        <extend_definition definition_ref="oval:gov.irs.rhel5:def:10000" comment="Red Hat Enterprise Linux 5 is installed"/>
                  </criteria>
            </definition>
            <definition class="compliance" version="1" id="oval:gov.irs.rhel5:def:107">
                  <metadata>
                        <title>Disable Automatic Configuration </title>
                        <affected family="unix">
                              <platform>Red Hat Enterprise Linux 5</platform>
                        </affected>
                        <reference ref_id="CCE-4198-8" source="CCE"/>
                        <description>The default setting for accepting redirects from IPv6 routers should be enabled or disabled for network interfaces as appropriate.</description>
                  </metadata>
                  <criteria>
                        <criteria operator="OR" comment="Definition alternatives">
                              <criterion test_ref="oval:gov.irs.rhel5:tst:137" comment="Unknown test stub"/>
                              <extend_definition definition_ref="oval:gov.irs.rhel5:def:101" comment="Dependency is met"/>
                              <extend_definition definition_ref="oval:gov.irs.rhel5:def:102" comment="Dependency is met"/>
                              <extend_definition definition_ref="oval:gov.irs.rhel5:def:103" comment="Dependency is met"/>
                        </criteria>
                        <extend_definition definition_ref="oval:gov.irs.rhel5:def:10000" comment="Red Hat Enterprise Linux 5 is installed"/>
                  </criteria>
            </definition>
            <definition class="compliance" version="1" id="oval:gov.irs.rhel5:def:108">
                  <metadata>
                        <title>Use Privacy Extensions for Address if Necessary </title>
                        <affected family="unix">
                              <platform>Red Hat Enterprise Linux 5</platform>
                        </affected>
                        <reference ref_id="CCE-3842-2" source="CCE"/>
                        <description>IPv6 privacy extensions should be configured appropriately for all interfaces.</description>
                  </metadata>
                  <criteria>
                        <criteria operator="OR" comment="Definition alternatives">
                              <criterion test_ref="oval:gov.irs.rhel5:tst:138" comment="Unknown test stub"/>
                              <extend_definition definition_ref="oval:gov.irs.rhel5:def:101" comment="Dependency is met"/>
                              <extend_definition definition_ref="oval:gov.irs.rhel5:def:102" comment="Dependency is met"/>
                              <extend_definition definition_ref="oval:gov.irs.rhel5:def:103" comment="Dependency is met"/>
                        </criteria>
                        <extend_definition definition_ref="oval:gov.irs.rhel5:def:10000" comment="Red Hat Enterprise Linux 5 is installed"/>
                  </criteria>
            </definition>
            <definition class="compliance" version="1" id="oval:gov.irs.rhel5:def:109">
                  <metadata>
                        <title>Limit Network-Transmitted Configuration </title>
                        <affected family="unix">
                              <platform>Red Hat Enterprise Linux 5</platform>
                        </affected>
                        <reference ref_id="CCE-4221-8" source="CCE"/>
                        <description>Sysctl setting #{setting} is #{row[GUIDE_VAL]}</description>
                  </metadata>
                  <criteria>
                        <criteria operator="OR" comment="Definition alternatives">
                              <criterion test_ref="oval:gov.irs.rhel5:tst:139" comment="Sysctl setting net.ipv6.conf.default.accept_ra_rtr_pref is disabled"/>
                              <extend_definition definition_ref="oval:gov.irs.rhel5:def:101" comment="Dependency is met"/>
                              <extend_definition definition_ref="oval:gov.irs.rhel5:def:102" comment="Dependency is met"/>
                              <extend_definition definition_ref="oval:gov.irs.rhel5:def:103" comment="Dependency is met"/>
                        </criteria>
                        <extend_definition definition_ref="oval:gov.irs.rhel5:def:10000" comment="Red Hat Enterprise Linux 5 is installed"/>
                  </criteria>
            </definition>
            <definition class="compliance" version="1" id="oval:gov.irs.rhel5:def:110">
                  <metadata>
                        <title>Limit Network-Transmitted Configuration </title>
                        <affected family="unix">
                              <platform>Red Hat Enterprise Linux 5</platform>
                        </affected>
                        <reference ref_id="CCE-4137-6" source="CCE"/>
                        <description>Sysctl setting #{setting} is #{row[GUIDE_VAL]}</description>
                  </metadata>
                  <criteria>
                        <criteria operator="OR" comment="Definition alternatives">
                              <criterion test_ref="oval:gov.irs.rhel5:tst:140" comment="Sysctl setting net.ipv6.conf.default.max_addresses is 1"/>
                              <extend_definition definition_ref="oval:gov.irs.rhel5:def:101" comment="Dependency is met"/>
                              <extend_definition definition_ref="oval:gov.irs.rhel5:def:102" comment="Dependency is met"/>
                              <extend_definition definition_ref="oval:gov.irs.rhel5:def:103" comment="Dependency is met"/>
                        </criteria>
                        <extend_definition definition_ref="oval:gov.irs.rhel5:def:10000" comment="Red Hat Enterprise Linux 5 is installed"/>
                  </criteria>
            </definition>
            <definition class="compliance" version="1" id="oval:gov.irs.rhel5:def:111">
                  <metadata>
                        <title>Limit Network-Transmitted Configuration </title>
                        <affected family="unix">
                              <platform>Red Hat Enterprise Linux 5</platform>
                        </affected>
                        <reference ref_id="CCE-4159-0" source="CCE"/>
                        <description>Sysctl setting #{setting} is #{row[GUIDE_VAL]}</description>
                  </metadata>
                  <criteria>
                        <criteria operator="OR" comment="Definition alternatives">
                              <criterion test_ref="oval:gov.irs.rhel5:tst:141" comment="Sysctl setting net.ipv6.conf.default.router_solicitations is 0"/>
                              <extend_definition definition_ref="oval:gov.irs.rhel5:def:101" comment="Dependency is met"/>
                              <extend_definition definition_ref="oval:gov.irs.rhel5:def:102" comment="Dependency is met"/>
                              <extend_definition definition_ref="oval:gov.irs.rhel5:def:103" comment="Dependency is met"/>
                        </criteria>
                        <extend_definition definition_ref="oval:gov.irs.rhel5:def:10000" comment="Red Hat Enterprise Linux 5 is installed"/>
                  </criteria>
            </definition>
            <definition class="compliance" version="1" id="oval:gov.irs.rhel5:def:112">
                  <metadata>
                        <title>Limit Network-Transmitted Configuration </title>
                        <affected family="unix">
                              <platform>Red Hat Enterprise Linux 5</platform>
                        </affected>
                        <reference ref_id="CCE-3895-0" source="CCE"/>
                        <description>Sysctl setting #{setting} is #{row[GUIDE_VAL]}</description>
                  </metadata>
                  <criteria>
                        <criteria operator="OR" comment="Definition alternatives">
                              <criterion test_ref="oval:gov.irs.rhel5:tst:142" comment="Sysctl setting net.ipv6.conf.default.dad_transmits is 0"/>
                              <extend_definition definition_ref="oval:gov.irs.rhel5:def:101" comment="Dependency is met"/>
                              <extend_definition definition_ref="oval:gov.irs.rhel5:def:102" comment="Dependency is met"/>
                              <extend_definition definition_ref="oval:gov.irs.rhel5:def:103" comment="Dependency is met"/>
                        </criteria>
                        <extend_definition definition_ref="oval:gov.irs.rhel5:def:10000" comment="Red Hat Enterprise Linux 5 is installed"/>
                  </criteria>
            </definition>
            <definition class="compliance" version="1" id="oval:gov.irs.rhel5:def:113">
                  <metadata>
                        <title>Limit Network-Transmitted Configuration </title>
                        <affected family="unix">
                              <platform>Red Hat Enterprise Linux 5</platform>
                        </affected>
                        <reference ref_id="CCE-4287-9" source="CCE"/>
                        <description>Sysctl setting #{setting} is #{row[GUIDE_VAL]}</description>
                  </metadata>
                  <criteria>
                        <criteria operator="OR" comment="Definition alternatives">
                              <criterion test_ref="oval:gov.irs.rhel5:tst:143" comment="Sysctl setting net.ipv6.conf.default.autoconf is disabled"/>
                              <extend_definition definition_ref="oval:gov.irs.rhel5:def:101" comment="Dependency is met"/>
                              <extend_definition definition_ref="oval:gov.irs.rhel5:def:102" comment="Dependency is met"/>
                              <extend_definition definition_ref="oval:gov.irs.rhel5:def:103" comment="Dependency is met"/>
                        </criteria>
                        <extend_definition definition_ref="oval:gov.irs.rhel5:def:10000" comment="Red Hat Enterprise Linux 5 is installed"/>
                  </criteria>
            </definition>
            <definition class="compliance" version="1" id="oval:gov.irs.rhel5:def:114">
                  <metadata>
                        <title>Limit Network-Transmitted Configuration </title>
                        <affected family="unix">
                              <platform>Red Hat Enterprise Linux 5</platform>
                        </affected>
                        <reference ref_id="CCE-4058-4" source="CCE"/>
                        <description>Sysctl setting #{setting} is #{row[GUIDE_VAL]}</description>
                  </metadata>
                  <criteria>
                        <criteria operator="OR" comment="Definition alternatives">
                              <criterion test_ref="oval:gov.irs.rhel5:tst:144" comment="Sysctl setting net.ipv6.conf.default.accept_ra_pinfo is disabled"/>
                              <extend_definition definition_ref="oval:gov.irs.rhel5:def:101" comment="Dependency is met"/>
                              <extend_definition definition_ref="oval:gov.irs.rhel5:def:102" comment="Dependency is met"/>
                              <extend_definition definition_ref="oval:gov.irs.rhel5:def:103" comment="Dependency is met"/>
                        </criteria>
                        <extend_definition definition_ref="oval:gov.irs.rhel5:def:10000" comment="Red Hat Enterprise Linux 5 is installed"/>
                  </criteria>
            </definition>
            <definition class="compliance" version="1" id="oval:gov.irs.rhel5:def:115">
                  <metadata>
                        <title>Limit Network-Transmitted Configuration </title>
                        <affected family="unix">
                              <platform>Red Hat Enterprise Linux 5</platform>
                        </affected>
                        <reference ref_id="CCE-4128-5" source="CCE"/>
                        <description>Sysctl setting #{setting} is #{row[GUIDE_VAL]}</description>
                  </metadata>
                  <criteria>
                        <criteria operator="OR" comment="Definition alternatives">
                              <criterion test_ref="oval:gov.irs.rhel5:tst:145" comment="Sysctl setting net.ipv6.conf.default.accept_ra_defrtr is disabled"/>
                              <extend_definition definition_ref="oval:gov.irs.rhel5:def:101" comment="Dependency is met"/>
                              <extend_definition definition_ref="oval:gov.irs.rhel5:def:102" comment="Dependency is met"/>
                              <extend_definition definition_ref="oval:gov.irs.rhel5:def:103" comment="Dependency is met"/>
                        </criteria>
                        <extend_definition definition_ref="oval:gov.irs.rhel5:def:10000" comment="Red Hat Enterprise Linux 5 is installed"/>
                  </criteria>
            </definition>
            <definition class="compliance" version="1" id="oval:gov.irs.rhel5:def:116">
                  <metadata>
                        <title>Service ip6tables should be enabled</title>
                        <affected family="unix">
                              <platform>Red Hat Enterprise Linux 5</platform>
                        </affected>
                        <reference ref_id="CCE-4167-3" source="CCE"/>
                        <description>Service ip6tables should be enabled</description>
                  </metadata>
                  <criteria>
                        <criterion test_ref="oval:gov.irs.rhel5:tst:146" comment="The ip6tables service should not be started at runlevel 2"/>
                        <criterion test_ref="oval:gov.irs.rhel5:tst:147" comment="The ip6tables service should not be started at runlevel 3"/>
                        <criterion test_ref="oval:gov.irs.rhel5:tst:148" comment="The ip6tables service should not be started at runlevel 4"/>
                        <criterion test_ref="oval:gov.irs.rhel5:tst:149" comment="The ip6tables service should not be started at runlevel 5"/>
                        <extend_definition definition_ref="oval:gov.irs.rhel5:def:10000" comment="Red Hat Enterprise Linux 5 is installed"/>
                  </criteria>
            </definition>
            <definition class="compliance" version="1" id="oval:gov.irs.rhel5:def:117">
                  <metadata>
                        <title>Service iptables should be enabled</title>
                        <affected family="unix">
                              <platform>Red Hat Enterprise Linux 5</platform>
                        </affected>
                        <reference ref_id="CCE-4189-7" source="CCE"/>
                        <description>Service iptables should be enabled</description>
                  </metadata>
                  <criteria>
                        <criterion test_ref="oval:gov.irs.rhel5:tst:150" comment="The iptables service should not be started at runlevel 2"/>
                        <criterion test_ref="oval:gov.irs.rhel5:tst:151" comment="The iptables service should not be started at runlevel 3"/>
                        <criterion test_ref="oval:gov.irs.rhel5:tst:152" comment="The iptables service should not be started at runlevel 4"/>
                        <criterion test_ref="oval:gov.irs.rhel5:tst:153" comment="The iptables service should not be started at runlevel 5"/>
                        <extend_definition definition_ref="oval:gov.irs.rhel5:def:10000" comment="Red Hat Enterprise Linux 5 is installed"/>
                  </criteria>
            </definition>
            <definition class="compliance" version="1" id="oval:gov.irs.rhel5:def:118">
                  <metadata>
                        <title>Service syslog should be enabled</title>
                        <affected family="unix">
                              <platform>Red Hat Enterprise Linux 5</platform>
                        </affected>
                        <reference ref_id="CCE-3679-8" source="CCE"/>
                        <description>Service syslog should be enabled</description>
                  </metadata>
                  <criteria>
                        <criterion test_ref="oval:gov.irs.rhel5:tst:154" comment="The syslog service should not be started at runlevel 2"/>
                        <criterion test_ref="oval:gov.irs.rhel5:tst:155" comment="The syslog service should not be started at runlevel 3"/>
                        <criterion test_ref="oval:gov.irs.rhel5:tst:156" comment="The syslog service should not be started at runlevel 4"/>
                        <criterion test_ref="oval:gov.irs.rhel5:tst:157" comment="The syslog service should not be started at runlevel 5"/>
                        <extend_definition definition_ref="oval:gov.irs.rhel5:def:10000" comment="Red Hat Enterprise Linux 5 is installed"/>
                  </criteria>
            </definition>
            <definition class="compliance" version="1" id="oval:gov.irs.rhel5:def:119">
                  <metadata>
                        <title>Group ownership for all syslog log files</title>
                        <affected family="unix">
                              <platform>Red Hat Enterprise Linux 5</platform>
                        </affected>
                        <reference ref_id="CCE-3701-0" source="CCE"/>
                        <description>Group ownership for all files specified in /etc/syslog.conf (currently OVAL doesn't support implementation)</description>
                  </metadata>
                  <criteria>
                        <criterion test_ref="oval:gov.irs.rhel5:tst:158" comment="Group ownership check for all syslog files"/>
                        <extend_definition definition_ref="oval:gov.irs.rhel5:def:10000" comment="Red Hat Enterprise Linux 5 is installed"/>
                  </criteria>
            </definition>
            <definition class="compliance" version="1" id="oval:gov.irs.rhel5:def:120">
                  <metadata>
                        <title>File permissions for all syslog log files</title>
                        <affected family="unix">
                              <platform>Red Hat Enterprise Linux 5</platform>
                        </affected>
                        <reference ref_id="CCE-4233-3" source="CCE"/>
                        <description>File permissions for all files specified in /etc/syslog.conf (currently OVAL doesn't support implementation)</description>
                  </metadata>
                  <criteria>
                        <criterion test_ref="oval:gov.irs.rhel5:tst:159" comment="File permissions check for all syslog files"/>
                        <extend_definition definition_ref="oval:gov.irs.rhel5:def:10000" comment="Red Hat Enterprise Linux 5 is installed"/>
                  </criteria>
            </definition>
            <definition class="compliance" version="1" id="oval:gov.irs.rhel5:def:121">
                  <metadata>
                        <title>File ownership for all syslog log files</title>
                        <affected family="unix">
                              <platform>Red Hat Enterprise Linux 5</platform>
                        </affected>
                        <reference ref_id="CCE-4366-1" source="CCE"/>
                        <description>File ownership for all files specified in /etc/syslog.conf (currently OVAL doesn't support implementation)</description>
                  </metadata>
                  <criteria>
                        <criterion test_ref="oval:gov.irs.rhel5:tst:160" comment="File ownership check for all syslog files"/>
                        <extend_definition definition_ref="oval:gov.irs.rhel5:def:10000" comment="Red Hat Enterprise Linux 5 is installed"/>
                  </criteria>
            </definition>
            <definition class="compliance" version="1" id="oval:gov.irs.rhel5:def:122">
                  <metadata>
                        <title>Send Logs to a Remote Loghost </title>
                        <affected family="unix">
                              <platform>Red Hat Enterprise Linux 5</platform>
                        </affected>
                        <reference ref_id="CCE-4260-6" source="CCE"/>
                        <description>Syslog logs should be sent to a remote loghost or not as appropriate</description>
                  </metadata>
                  <criteria>
                        <criterion test_ref="oval:gov.irs.rhel5:tst:161" comment="Syslog logs should be sent to a remote loghost or not as appropriate"/>
                        <extend_definition definition_ref="oval:gov.irs.rhel5:def:10000" comment="Red Hat Enterprise Linux 5 is installed"/>
                  </criteria>
            </definition>
            <definition class="compliance" version="1" id="oval:gov.irs.rhel5:def:123">
                  <metadata>
                        <title>Enable syslogd to Accept Remote Messages on Loghosts Only </title>
                        <affected family="unix">
                              <platform>Red Hat Enterprise Linux 5</platform>
                        </affected>
                        <reference ref_id="CCE-3382-9" source="CCE"/>
                        <description>Syslogd should accept remote messages or not as appropriate</description>
                  </metadata>
                  <criteria>
                        <criterion test_ref="oval:gov.irs.rhel5:tst:162" comment="Syslogd should accept remote messages or not as appropriate"/>
                        <extend_definition definition_ref="oval:gov.irs.rhel5:def:10000" comment="Red Hat Enterprise Linux 5 is installed"/>
                  </criteria>
            </definition>
            <definition class="compliance" version="1" id="oval:gov.irs.rhel5:def:124">
                  <metadata>
                        <title>Ensure All Logs are Rotated by logrotate </title>
                        <affected family="unix">
                              <platform>Red Hat Enterprise Linux 5</platform>
                        </affected>
                        <reference ref_id="CCE-4182-2" source="CCE"/>
                        <description>The logrotate (syslog rotater) service should be enabled or disabled as appropriate.</description>
                  </metadata>
                  <criteria>
                        <criterion test_ref="oval:gov.irs.rhel5:tst:163" comment="Unknown test stub"/>
                        <extend_definition definition_ref="oval:gov.irs.rhel5:def:10000" comment="Red Hat Enterprise Linux 5 is installed"/>
                  </criteria>
            </definition>
            <definition class="compliance" version="1" id="oval:gov.irs.rhel5:def:125">
                  <metadata>
                        <title>Monitor Suspicious Log Messages using Logwatch </title>
                        <affected family="unix">
                              <platform>Red Hat Enterprise Linux 5</platform>
                        </affected>
                        <reference ref_id="CCE-4323-2" source="CCE"/>
                        <description>The logwatch service should be enabled or disabled as appropriate</description>
                  </metadata>
                  <criteria>
                        <criterion test_ref="oval:gov.irs.rhel5:tst:164" comment="Unknown test stub"/>
                        <extend_definition definition_ref="oval:gov.irs.rhel5:def:10000" comment="Red Hat Enterprise Linux 5 is installed"/>
                  </criteria>
            </definition>
            <definition class="compliance" version="1" id="oval:gov.irs.rhel5:def:126">
                  <metadata>
                        <title>Service auditd should be enabled</title>
                        <affected family="unix">
                              <platform>Red Hat Enterprise Linux 5</platform>
                        </affected>
                        <reference ref_id="CCE-4292-9" source="CCE"/>
                        <description>Service auditd should be enabled</description>
                  </metadata>
                  <criteria>
                        <criterion test_ref="oval:gov.irs.rhel5:tst:165" comment="The auditd service should not be started at runlevel 2"/>
                        <criterion test_ref="oval:gov.irs.rhel5:tst:166" comment="The auditd service should not be started at runlevel 3"/>
                        <criterion test_ref="oval:gov.irs.rhel5:tst:167" comment="The auditd service should not be started at runlevel 4"/>
                        <criterion test_ref="oval:gov.irs.rhel5:tst:168" comment="The auditd service should not be started at runlevel 5"/>
                        <extend_definition definition_ref="oval:gov.irs.rhel5:def:10000" comment="Red Hat Enterprise Linux 5 is installed"/>
                  </criteria>
            </definition>
            <definition class="compliance" version="1" id="oval:gov.irs.rhel5:def:127">
                  <metadata>
                        <title>Service inetd should be disabled</title>
                        <affected family="unix">
                              <platform>Red Hat Enterprise Linux 5</platform>
                        </affected>
                        <reference ref_id="CCE-4234-1" source="CCE"/>
                        <description>Service inetd should be disabled</description>
                  </metadata>
                  <criteria>
                        <criterion test_ref="oval:gov.irs.rhel5:tst:169" comment="The inetd service should not be started at runlevel 2"/>
                        <criterion test_ref="oval:gov.irs.rhel5:tst:170" comment="The inetd service should not be started at runlevel 3"/>
                        <criterion test_ref="oval:gov.irs.rhel5:tst:171" comment="The inetd service should not be started at runlevel 4"/>
                        <criterion test_ref="oval:gov.irs.rhel5:tst:172" comment="The inetd service should not be started at runlevel 5"/>
                        <extend_definition definition_ref="oval:gov.irs.rhel5:def:10000" comment="Red Hat Enterprise Linux 5 is installed"/>
                  </criteria>
            </definition>
            <definition class="compliance" version="1" id="oval:gov.irs.rhel5:def:128">
                  <metadata>
                        <title>Service xinetd should be disabled</title>
                        <affected family="unix">
                              <platform>Red Hat Enterprise Linux 5</platform>
                        </affected>
                        <reference ref_id="CCE-4252-3" source="CCE"/>
                        <description>Service xinetd should be disabled</description>
                  </metadata>
                  <criteria>
                        <criterion test_ref="oval:gov.irs.rhel5:tst:173" comment="The xinetd service should not be started at runlevel 2"/>
                        <criterion test_ref="oval:gov.irs.rhel5:tst:174" comment="The xinetd service should not be started at runlevel 3"/>
                        <criterion test_ref="oval:gov.irs.rhel5:tst:175" comment="The xinetd service should not be started at runlevel 4"/>
                        <criterion test_ref="oval:gov.irs.rhel5:tst:176" comment="The xinetd service should not be started at runlevel 5"/>
                        <extend_definition definition_ref="oval:gov.irs.rhel5:def:10000" comment="Red Hat Enterprise Linux 5 is installed"/>
                  </criteria>
            </definition>
            <definition class="compliance" version="1" id="oval:gov.irs.rhel5:def:129">
                  <metadata>
                        <title>The inetd package should not be installed</title>
                        <affected family="unix">
                              <platform>Red Hat Enterprise Linux 5</platform>
                        </affected>
                        <reference ref_id="CCE-4023-8" source="CCE"/>
                        <description>The inetd package should not be installed</description>
                  </metadata>
                  <criteria>
                        <criterion test_ref="oval:gov.irs.rhel5:tst:177" comment="The inetd package should not be installed"/>
                        <extend_definition definition_ref="oval:gov.irs.rhel5:def:10000" comment="Red Hat Enterprise Linux 5 is installed"/>
                  </criteria>
            </definition>
            <definition class="compliance" version="1" id="oval:gov.irs.rhel5:def:130">
                  <metadata>
                        <title>The xinetd package should not be installed</title>
                        <affected family="unix">
                              <platform>Red Hat Enterprise Linux 5</platform>
                        </affected>
                        <reference ref_id="CCE-4164-0" source="CCE"/>
                        <description>The xinetd package should not be installed</description>
                  </metadata>
                  <criteria>
                        <criterion test_ref="oval:gov.irs.rhel5:tst:178" comment="The xinetd package should not be installed"/>
                        <extend_definition definition_ref="oval:gov.irs.rhel5:def:10000" comment="Red Hat Enterprise Linux 5 is installed"/>
                  </criteria>
            </definition>
            <definition class="compliance" version="1" id="oval:gov.irs.rhel5:def:131">
                  <metadata>
                        <title>Service telnet should be disabled</title>
                        <affected family="unix">
                              <platform>Red Hat Enterprise Linux 5</platform>
                        </affected>
                        <reference ref_id="CCE-3390-2" source="CCE"/>
                        <description>Service telnet should be disabled</description>
                  </metadata>
                  <criteria>
                        <criterion test_ref="oval:gov.irs.rhel5:tst:179" comment="The telnet service should not be started at runlevel 2"/>
                        <criterion test_ref="oval:gov.irs.rhel5:tst:180" comment="The telnet service should not be started at runlevel 3"/>
                        <criterion test_ref="oval:gov.irs.rhel5:tst:181" comment="The telnet service should not be started at runlevel 4"/>
                        <criterion test_ref="oval:gov.irs.rhel5:tst:182" comment="The telnet service should not be started at runlevel 5"/>
                        <extend_definition definition_ref="oval:gov.irs.rhel5:def:10000" comment="Red Hat Enterprise Linux 5 is installed"/>
                  </criteria>
            </definition>
            <definition class="compliance" version="1" id="oval:gov.irs.rhel5:def:132">
                  <metadata>
                        <title>The telnet-server package should not be installed</title>
                        <affected family="unix">
                              <platform>Red Hat Enterprise Linux 5</platform>
                        </affected>
                        <reference ref_id="CCE-4330-7" source="CCE"/>
                        <description>The telnet-server package should not be installed</description>
                  </metadata>
                  <criteria>
                        <criterion test_ref="oval:gov.irs.rhel5:tst:183" comment="The telnet-server package should not be installed"/>
                        <extend_definition definition_ref="oval:gov.irs.rhel5:def:10000" comment="Red Hat Enterprise Linux 5 is installed"/>
                  </criteria>
            </definition>
            <definition class="compliance" version="1" id="oval:gov.irs.rhel5:def:133">
                  <metadata>
                        <title>Service rcp should be disabled</title>
                        <affected family="unix">
                              <platform>Red Hat Enterprise Linux 5</platform>
                        </affected>
                        <reference ref_id="CCE-3974-3" source="CCE"/>
                        <description>Service rcp should be disabled</description>
                  </metadata>
                  <criteria>
                        <criterion test_ref="oval:gov.irs.rhel5:tst:184" comment="The rcp service should not be started at runlevel 2"/>
                        <criterion test_ref="oval:gov.irs.rhel5:tst:185" comment="The rcp service should not be started at runlevel 3"/>
                        <criterion test_ref="oval:gov.irs.rhel5:tst:186" comment="The rcp service should not be started at runlevel 4"/>
                        <criterion test_ref="oval:gov.irs.rhel5:tst:187" comment="The rcp service should not be started at runlevel 5"/>
                        <extend_definition definition_ref="oval:gov.irs.rhel5:def:10000" comment="Red Hat Enterprise Linux 5 is installed"/>
                  </criteria>
            </definition>
            <definition class="compliance" version="1" id="oval:gov.irs.rhel5:def:134">
                  <metadata>
                        <title>Service rsh should be disabled</title>
                        <affected family="unix">
                              <platform>Red Hat Enterprise Linux 5</platform>
                        </affected>
                        <reference ref_id="CCE-4141-8" source="CCE"/>
                        <description>Service rsh should be disabled</description>
                  </metadata>
                  <criteria>
                        <criterion test_ref="oval:gov.irs.rhel5:tst:188" comment="The rsh service should not be started at runlevel 2"/>
                        <criterion test_ref="oval:gov.irs.rhel5:tst:189" comment="The rsh service should not be started at runlevel 3"/>
                        <criterion test_ref="oval:gov.irs.rhel5:tst:190" comment="The rsh service should not be started at runlevel 4"/>
                        <criterion test_ref="oval:gov.irs.rhel5:tst:191" comment="The rsh service should not be started at runlevel 5"/>
                        <extend_definition definition_ref="oval:gov.irs.rhel5:def:10000" comment="Red Hat Enterprise Linux 5 is installed"/>
                  </criteria>
            </definition>
            <definition class="compliance" version="1" id="oval:gov.irs.rhel5:def:135">
                  <metadata>
                        <title>Service rlogin should be disabled</title>
                        <affected family="unix">
                              <platform>Red Hat Enterprise Linux 5</platform>
                        </affected>
                        <reference ref_id="CCE-3537-8" source="CCE"/>
                        <description>Service rlogin should be disabled</description>
                  </metadata>
                  <criteria>
                        <criterion test_ref="oval:gov.irs.rhel5:tst:192" comment="The rlogin service should not be started at runlevel 2"/>
                        <criterion test_ref="oval:gov.irs.rhel5:tst:193" comment="The rlogin service should not be started at runlevel 3"/>
                        <criterion test_ref="oval:gov.irs.rhel5:tst:194" comment="The rlogin service should not be started at runlevel 4"/>
                        <criterion test_ref="oval:gov.irs.rhel5:tst:195" comment="The rlogin service should not be started at runlevel 5"/>
                        <extend_definition definition_ref="oval:gov.irs.rhel5:def:10000" comment="Red Hat Enterprise Linux 5 is installed"/>
                  </criteria>
            </definition>
            <definition class="compliance" version="1" id="oval:gov.irs.rhel5:def:136">
                  <metadata>
                        <title>The rsh package should not be installed</title>
                        <affected family="unix">
                              <platform>Red Hat Enterprise Linux 5</platform>
                        </affected>
                        <reference ref_id="CCE-4308-3" source="CCE"/>
                        <description>The rsh package should not be installed</description>
                  </metadata>
                  <criteria>
                        <criterion test_ref="oval:gov.irs.rhel5:tst:196" comment="The rsh package should not be installed"/>
                        <extend_definition definition_ref="oval:gov.irs.rhel5:def:10000" comment="Red Hat Enterprise Linux 5 is installed"/>
                  </criteria>
            </definition>
            <definition class="compliance" version="1" id="oval:gov.irs.rhel5:def:137">
                  <metadata>
                        <title>Service ypbind should be disabled</title>
                        <affected family="unix">
                              <platform>Red Hat Enterprise Linux 5</platform>
                        </affected>
                        <reference ref_id="CCE-3705-1" source="CCE"/>
                        <description>Service ypbind should be disabled</description>
                  </metadata>
                  <criteria>
                        <criterion test_ref="oval:gov.irs.rhel5:tst:197" comment="The ypbind service should not be started at runlevel 2"/>
                        <criterion test_ref="oval:gov.irs.rhel5:tst:198" comment="The ypbind service should not be started at runlevel 3"/>
                        <criterion test_ref="oval:gov.irs.rhel5:tst:199" comment="The ypbind service should not be started at runlevel 4"/>
                        <criterion test_ref="oval:gov.irs.rhel5:tst:200" comment="The ypbind service should not be started at runlevel 5"/>
                        <extend_definition definition_ref="oval:gov.irs.rhel5:def:10000" comment="Red Hat Enterprise Linux 5 is installed"/>
                  </criteria>
            </definition>
            <definition class="compliance" version="1" id="oval:gov.irs.rhel5:def:138">
                  <metadata>
                        <title>The ypserv package should not be installed</title>
                        <affected family="unix">
                              <platform>Red Hat Enterprise Linux 5</platform>
                        </affected>
                        <reference ref_id="CCE-4348-9" source="CCE"/>
                        <description>The ypserv package should not be installed</description>
                  </metadata>
                  <criteria>
                        <criterion test_ref="oval:gov.irs.rhel5:tst:201" comment="The ypserv package should not be installed"/>
                        <extend_definition definition_ref="oval:gov.irs.rhel5:def:10000" comment="Red Hat Enterprise Linux 5 is installed"/>
                  </criteria>
            </definition>
            <definition class="compliance" version="1" id="oval:gov.irs.rhel5:def:139">
                  <metadata>
                        <title>Service tftp should be disabled</title>
                        <affected family="unix">
                              <platform>Red Hat Enterprise Linux 5</platform>
                        </affected>
                        <reference ref_id="CCE-4273-9" source="CCE"/>
                        <description>Service tftp should be disabled</description>
                  </metadata>
                  <criteria>
                        <criterion test_ref="oval:gov.irs.rhel5:tst:202" comment="The tftp service should not be started at runlevel 2"/>
                        <criterion test_ref="oval:gov.irs.rhel5:tst:203" comment="The tftp service should not be started at runlevel 3"/>
                        <criterion test_ref="oval:gov.irs.rhel5:tst:204" comment="The tftp service should not be started at runlevel 4"/>
                        <criterion test_ref="oval:gov.irs.rhel5:tst:205" comment="The tftp service should not be started at runlevel 5"/>
                        <extend_definition definition_ref="oval:gov.irs.rhel5:def:10000" comment="Red Hat Enterprise Linux 5 is installed"/>
                  </criteria>
            </definition>
            <definition class="compliance" version="1" id="oval:gov.irs.rhel5:def:140">
                  <metadata>
                        <title>The tftp-server package should not be installed</title>
                        <affected family="unix">
                              <platform>Red Hat Enterprise Linux 5</platform>
                        </affected>
                        <reference ref_id="CCE-3916-4" source="CCE"/>
                        <description>The tftp-server package should not be installed</description>
                  </metadata>
                  <criteria>
                        <criterion test_ref="oval:gov.irs.rhel5:tst:206" comment="The tftp-server package should not be installed"/>
                        <extend_definition definition_ref="oval:gov.irs.rhel5:def:10000" comment="Red Hat Enterprise Linux 5 is installed"/>
                  </criteria>
            </definition>
            <definition class="compliance" version="1" id="oval:gov.irs.rhel5:def:141">
                  <metadata>
                        <title>Service firstboot should be disabled</title>
                        <affected family="unix">
                              <platform>Red Hat Enterprise Linux 5</platform>
                        </affected>
                        <reference ref_id="CCE-3412-4" source="CCE"/>
                        <description>Service firstboot should be disabled</description>
                  </metadata>
                  <criteria>
                        <criterion test_ref="oval:gov.irs.rhel5:tst:207" comment="The firstboot service should not be started at runlevel 2"/>
                        <criterion test_ref="oval:gov.irs.rhel5:tst:208" comment="The firstboot service should not be started at runlevel 3"/>
                        <criterion test_ref="oval:gov.irs.rhel5:tst:209" comment="The firstboot service should not be started at runlevel 4"/>
                        <criterion test_ref="oval:gov.irs.rhel5:tst:210" comment="The firstboot service should not be started at runlevel 5"/>
                        <extend_definition definition_ref="oval:gov.irs.rhel5:def:10000" comment="Red Hat Enterprise Linux 5 is installed"/>
                  </criteria>
            </definition>
            <definition class="compliance" version="1" id="oval:gov.irs.rhel5:def:142">
                  <metadata>
                        <title>Service gpm should be disabled</title>
                        <affected family="unix">
                              <platform>Red Hat Enterprise Linux 5</platform>
                        </affected>
                        <reference ref_id="CCE-4229-1" source="CCE"/>
                        <description>Service gpm should be disabled</description>
                  </metadata>
                  <criteria>
                        <criterion test_ref="oval:gov.irs.rhel5:tst:211" comment="The gpm service should not be started at runlevel 2"/>
                        <criterion test_ref="oval:gov.irs.rhel5:tst:212" comment="The gpm service should not be started at runlevel 3"/>
                        <criterion test_ref="oval:gov.irs.rhel5:tst:213" comment="The gpm service should not be started at runlevel 4"/>
                        <criterion test_ref="oval:gov.irs.rhel5:tst:214" comment="The gpm service should not be started at runlevel 5"/>
                        <extend_definition definition_ref="oval:gov.irs.rhel5:def:10000" comment="Red Hat Enterprise Linux 5 is installed"/>
                  </criteria>
            </definition>
            <definition class="compliance" version="1" id="oval:gov.irs.rhel5:def:143">
                  <metadata>
                        <title>Service irqbalance should be enabled</title>
                        <affected family="unix">
                              <platform>Red Hat Enterprise Linux 5</platform>
                        </affected>
                        <reference ref_id="CCE-4123-6" source="CCE"/>
                        <description>Service irqbalance should be enabled</description>
                  </metadata>
                  <criteria>
                        <criterion test_ref="oval:gov.irs.rhel5:tst:215" comment="The irqbalance service should not be started at runlevel 2"/>
                        <criterion test_ref="oval:gov.irs.rhel5:tst:216" comment="The irqbalance service should not be started at runlevel 3"/>
                        <criterion test_ref="oval:gov.irs.rhel5:tst:217" comment="The irqbalance service should not be started at runlevel 4"/>
                        <criterion test_ref="oval:gov.irs.rhel5:tst:218" comment="The irqbalance service should not be started at runlevel 5"/>
                        <extend_definition definition_ref="oval:gov.irs.rhel5:def:10000" comment="Red Hat Enterprise Linux 5 is installed"/>
                  </criteria>
            </definition>
            <definition class="compliance" version="1" id="oval:gov.irs.rhel5:def:144">
                  <metadata>
                        <title>Service isdn should be disabled</title>
                        <affected family="unix">
                              <platform>Red Hat Enterprise Linux 5</platform>
                        </affected>
                        <reference ref_id="CCE-4286-1" source="CCE"/>
                        <description>Service isdn should be disabled</description>
                  </metadata>
                  <criteria>
                        <criterion test_ref="oval:gov.irs.rhel5:tst:219" comment="The isdn service should not be started at runlevel 2"/>
                        <criterion test_ref="oval:gov.irs.rhel5:tst:220" comment="The isdn service should not be started at runlevel 3"/>
                        <criterion test_ref="oval:gov.irs.rhel5:tst:221" comment="The isdn service should not be started at runlevel 4"/>
                        <criterion test_ref="oval:gov.irs.rhel5:tst:222" comment="The isdn service should not be started at runlevel 5"/>
                        <extend_definition definition_ref="oval:gov.irs.rhel5:def:10000" comment="Red Hat Enterprise Linux 5 is installed"/>
                  </criteria>
            </definition>
            <definition class="compliance" version="1" id="oval:gov.irs.rhel5:def:145">
                  <metadata>
                        <title>Service kdump should be disabled</title>
                        <affected family="unix">
                              <platform>Red Hat Enterprise Linux 5</platform>
                        </affected>
                        <reference ref_id="CCE-3425-6" source="CCE"/>
                        <description>Service kdump should be disabled</description>
                  </metadata>
                  <criteria>
                        <criterion test_ref="oval:gov.irs.rhel5:tst:223" comment="The kdump service should not be started at runlevel 2"/>
                        <criterion test_ref="oval:gov.irs.rhel5:tst:224" comment="The kdump service should not be started at runlevel 3"/>
                        <criterion test_ref="oval:gov.irs.rhel5:tst:225" comment="The kdump service should not be started at runlevel 4"/>
                        <criterion test_ref="oval:gov.irs.rhel5:tst:226" comment="The kdump service should not be started at runlevel 5"/>
                        <extend_definition definition_ref="oval:gov.irs.rhel5:def:10000" comment="Red Hat Enterprise Linux 5 is installed"/>
                  </criteria>
            </definition>
            <definition class="compliance" version="1" id="oval:gov.irs.rhel5:def:146">
                  <metadata>
                        <title>Service kudzu should be disabled</title>
                        <affected family="unix">
                              <platform>Red Hat Enterprise Linux 5</platform>
                        </affected>
                        <reference ref_id="CCE-4211-9" source="CCE"/>
                        <description>Service kudzu should be disabled</description>
                  </metadata>
                  <criteria>
                        <criterion test_ref="oval:gov.irs.rhel5:tst:227" comment="The kudzu service should not be started at runlevel 2"/>
                        <criterion test_ref="oval:gov.irs.rhel5:tst:228" comment="The kudzu service should not be started at runlevel 3"/>
                        <criterion test_ref="oval:gov.irs.rhel5:tst:229" comment="The kudzu service should not be started at runlevel 4"/>
                        <criterion test_ref="oval:gov.irs.rhel5:tst:230" comment="The kudzu service should not be started at runlevel 5"/>
                        <extend_definition definition_ref="oval:gov.irs.rhel5:def:10000" comment="Red Hat Enterprise Linux 5 is installed"/>
                  </criteria>
            </definition>
            <definition class="compliance" version="1" id="oval:gov.irs.rhel5:def:147">
                  <metadata>
                        <title>Service mdmonitor should be disabled</title>
                        <affected family="unix">
                              <platform>Red Hat Enterprise Linux 5</platform>
                        </affected>
                        <reference ref_id="CCE-3854-7" source="CCE"/>
                        <description>Service mdmonitor should be disabled</description>
                  </metadata>
                  <criteria>
                        <criterion test_ref="oval:gov.irs.rhel5:tst:231" comment="The mdmonitor service should not be started at runlevel 2"/>
                        <criterion test_ref="oval:gov.irs.rhel5:tst:232" comment="The mdmonitor service should not be started at runlevel 3"/>
                        <criterion test_ref="oval:gov.irs.rhel5:tst:233" comment="The mdmonitor service should not be started at runlevel 4"/>
                        <criterion test_ref="oval:gov.irs.rhel5:tst:234" comment="The mdmonitor service should not be started at runlevel 5"/>
                        <extend_definition definition_ref="oval:gov.irs.rhel5:def:10000" comment="Red Hat Enterprise Linux 5 is installed"/>
                  </criteria>
            </definition>
            <definition class="compliance" version="1" id="oval:gov.irs.rhel5:def:148">
                  <metadata>
                        <title>Service microcode_ctl should be disabled</title>
                        <affected family="unix">
                              <platform>Red Hat Enterprise Linux 5</platform>
                        </affected>
                        <reference ref_id="CCE-4356-2" source="CCE"/>
                        <description>Service microcode_ctl should be disabled</description>
                  </metadata>
                  <criteria>
                        <criterion test_ref="oval:gov.irs.rhel5:tst:235" comment="The microcode_ctl service should not be started at runlevel 2"/>
                        <criterion test_ref="oval:gov.irs.rhel5:tst:236" comment="The microcode_ctl service should not be started at runlevel 3"/>
                        <criterion test_ref="oval:gov.irs.rhel5:tst:237" comment="The microcode_ctl service should not be started at runlevel 4"/>
                        <criterion test_ref="oval:gov.irs.rhel5:tst:238" comment="The microcode_ctl service should not be started at runlevel 5"/>
                        <extend_definition definition_ref="oval:gov.irs.rhel5:def:10000" comment="Red Hat Enterprise Linux 5 is installed"/>
                  </criteria>
            </definition>
            <definition class="compliance" version="1" id="oval:gov.irs.rhel5:def:149">
                  <metadata>
                        <title>Service network should be enabled</title>
                        <affected family="unix">
                              <platform>Red Hat Enterprise Linux 5</platform>
                        </affected>
                        <reference ref_id="CCE-4369-5" source="CCE"/>
                        <description>Service network should be enabled</description>
                  </metadata>
                  <criteria>
                        <criterion test_ref="oval:gov.irs.rhel5:tst:239" comment="The network service should not be started at runlevel 2"/>
                        <criterion test_ref="oval:gov.irs.rhel5:tst:240" comment="The network service should not be started at runlevel 3"/>
                        <criterion test_ref="oval:gov.irs.rhel5:tst:241" comment="The network service should not be started at runlevel 4"/>
                        <criterion test_ref="oval:gov.irs.rhel5:tst:242" comment="The network service should not be started at runlevel 5"/>
                        <extend_definition definition_ref="oval:gov.irs.rhel5:def:10000" comment="Red Hat Enterprise Linux 5 is installed"/>
                  </criteria>
            </definition>
            <definition class="compliance" version="1" id="oval:gov.irs.rhel5:def:150">
                  <metadata>
                        <title>Service pcscd should be disabled</title>
                        <affected family="unix">
                              <platform>Red Hat Enterprise Linux 5</platform>
                        </affected>
                        <reference ref_id="CCE-4100-4" source="CCE"/>
                        <description>Service pcscd should be disabled</description>
                  </metadata>
                  <criteria>
                        <criterion test_ref="oval:gov.irs.rhel5:tst:243" comment="The pcscd service should not be started at runlevel 2"/>
                        <criterion test_ref="oval:gov.irs.rhel5:tst:244" comment="The pcscd service should not be started at runlevel 3"/>
                        <criterion test_ref="oval:gov.irs.rhel5:tst:245" comment="The pcscd service should not be started at runlevel 4"/>
                        <criterion test_ref="oval:gov.irs.rhel5:tst:246" comment="The pcscd service should not be started at runlevel 5"/>
                        <extend_definition definition_ref="oval:gov.irs.rhel5:def:10000" comment="Red Hat Enterprise Linux 5 is installed"/>
                  </criteria>
            </definition>
            <definition class="compliance" version="1" id="oval:gov.irs.rhel5:def:151">
                  <metadata>
                        <title>Service smartd should be enabled</title>
                        <affected family="unix">
                              <platform>Red Hat Enterprise Linux 5</platform>
                        </affected>
                        <reference ref_id="CCE-3455-3" source="CCE"/>
                        <description>Service smartd should be enabled</description>
                  </metadata>
                  <criteria>
                        <criterion test_ref="oval:gov.irs.rhel5:tst:247" comment="The smartd service should not be started at runlevel 2"/>
                        <criterion test_ref="oval:gov.irs.rhel5:tst:248" comment="The smartd service should not be started at runlevel 3"/>
                        <criterion test_ref="oval:gov.irs.rhel5:tst:249" comment="The smartd service should not be started at runlevel 4"/>
                        <criterion test_ref="oval:gov.irs.rhel5:tst:250" comment="The smartd service should not be started at runlevel 5"/>
                        <extend_definition definition_ref="oval:gov.irs.rhel5:def:10000" comment="Red Hat Enterprise Linux 5 is installed"/>
                  </criteria>
            </definition>
            <definition class="compliance" version="1" id="oval:gov.irs.rhel5:def:152">
                  <metadata>
                        <title>Service readahead_early should be disabled</title>
                        <affected family="unix">
                              <platform>Red Hat Enterprise Linux 5</platform>
                        </affected>
                        <reference ref_id="CCE-4421-4" source="CCE"/>
                        <description>Service readahead_early should be disabled</description>
                  </metadata>
                  <criteria>
                        <criterion test_ref="oval:gov.irs.rhel5:tst:251" comment="The readahead_early service should not be started at runlevel 2"/>
                        <criterion test_ref="oval:gov.irs.rhel5:tst:252" comment="The readahead_early service should not be started at runlevel 3"/>
                        <criterion test_ref="oval:gov.irs.rhel5:tst:253" comment="The readahead_early service should not be started at runlevel 4"/>
                        <criterion test_ref="oval:gov.irs.rhel5:tst:254" comment="The readahead_early service should not be started at runlevel 5"/>
                        <extend_definition definition_ref="oval:gov.irs.rhel5:def:10000" comment="Red Hat Enterprise Linux 5 is installed"/>
                  </criteria>
            </definition>
            <definition class="compliance" version="1" id="oval:gov.irs.rhel5:def:153">
                  <metadata>
                        <title>Service readahead_later should be disabled</title>
                        <affected family="unix">
                              <platform>Red Hat Enterprise Linux 5</platform>
                        </affected>
                        <reference ref_id="CCE-4302-6" source="CCE"/>
                        <description>Service readahead_later should be disabled</description>
                  </metadata>
                  <criteria>
                        <criterion test_ref="oval:gov.irs.rhel5:tst:255" comment="The readahead_later service should not be started at runlevel 2"/>
                        <criterion test_ref="oval:gov.irs.rhel5:tst:256" comment="The readahead_later service should not be started at runlevel 3"/>
                        <criterion test_ref="oval:gov.irs.rhel5:tst:257" comment="The readahead_later service should not be started at runlevel 4"/>
                        <criterion test_ref="oval:gov.irs.rhel5:tst:258" comment="The readahead_later service should not be started at runlevel 5"/>
                        <extend_definition definition_ref="oval:gov.irs.rhel5:def:10000" comment="Red Hat Enterprise Linux 5 is installed"/>
                  </criteria>
            </definition>
            <definition class="compliance" version="1" id="oval:gov.irs.rhel5:def:154">
                  <metadata>
                        <title>Service messagebus should be disabled</title>
                        <affected family="unix">
                              <platform>Red Hat Enterprise Linux 5</platform>
                        </affected>
                        <reference ref_id="CCE-3822-4" source="CCE"/>
                        <description>Service messagebus should be disabled</description>
                  </metadata>
                  <criteria>
                        <criterion test_ref="oval:gov.irs.rhel5:tst:259" comment="The messagebus service should not be started at runlevel 2"/>
                        <criterion test_ref="oval:gov.irs.rhel5:tst:260" comment="The messagebus service should not be started at runlevel 3"/>
                        <criterion test_ref="oval:gov.irs.rhel5:tst:261" comment="The messagebus service should not be started at runlevel 4"/>
                        <criterion test_ref="oval:gov.irs.rhel5:tst:262" comment="The messagebus service should not be started at runlevel 5"/>
                        <extend_definition definition_ref="oval:gov.irs.rhel5:def:10000" comment="Red Hat Enterprise Linux 5 is installed"/>
                  </criteria>
            </definition>
            <definition class="compliance" version="1" id="oval:gov.irs.rhel5:def:155">
                  <metadata>
                        <title>Service haldaemon should be disabled</title>
                        <affected family="unix">
                              <platform>Red Hat Enterprise Linux 5</platform>
                        </affected>
                        <reference ref_id="CCE-4364-6" source="CCE"/>
                        <description>Service haldaemon should be disabled</description>
                  </metadata>
                  <criteria>
                        <criterion test_ref="oval:gov.irs.rhel5:tst:263" comment="The haldaemon service should not be started at runlevel 2"/>
                        <criterion test_ref="oval:gov.irs.rhel5:tst:264" comment="The haldaemon service should not be started at runlevel 3"/>
                        <criterion test_ref="oval:gov.irs.rhel5:tst:265" comment="The haldaemon service should not be started at runlevel 4"/>
                        <criterion test_ref="oval:gov.irs.rhel5:tst:266" comment="The haldaemon service should not be started at runlevel 5"/>
                        <extend_definition definition_ref="oval:gov.irs.rhel5:def:10000" comment="Red Hat Enterprise Linux 5 is installed"/>
                  </criteria>
            </definition>
            <definition class="compliance" version="1" id="oval:gov.irs.rhel5:def:156">
                  <metadata>
                        <title>Service bluetooth should be disabled</title>
                        <affected family="unix">
                              <platform>Red Hat Enterprise Linux 5</platform>
                        </affected>
                        <reference ref_id="CCE-4355-4" source="CCE"/>
                        <description>Service bluetooth should be disabled</description>
                  </metadata>
                  <criteria>
                        <criterion test_ref="oval:gov.irs.rhel5:tst:267" comment="The bluetooth service should not be started at runlevel 2"/>
                        <criterion test_ref="oval:gov.irs.rhel5:tst:268" comment="The bluetooth service should not be started at runlevel 3"/>
                        <criterion test_ref="oval:gov.irs.rhel5:tst:269" comment="The bluetooth service should not be started at runlevel 4"/>
                        <criterion test_ref="oval:gov.irs.rhel5:tst:270" comment="The bluetooth service should not be started at runlevel 5"/>
                        <extend_definition definition_ref="oval:gov.irs.rhel5:def:10000" comment="Red Hat Enterprise Linux 5 is installed"/>
                  </criteria>
            </definition>
            <definition class="compliance" version="1" id="oval:gov.irs.rhel5:def:157">
                  <metadata>
                        <title>Service hidd should be disabled</title>
                        <affected family="unix">
                              <platform>Red Hat Enterprise Linux 5</platform>
                        </affected>
                        <reference ref_id="CCE-4377-8" source="CCE"/>
                        <description>Service hidd should be disabled</description>
                  </metadata>
                  <criteria>
                        <criterion test_ref="oval:gov.irs.rhel5:tst:271" comment="The hidd service should not be started at runlevel 2"/>
                        <criterion test_ref="oval:gov.irs.rhel5:tst:272" comment="The hidd service should not be started at runlevel 3"/>
                        <criterion test_ref="oval:gov.irs.rhel5:tst:273" comment="The hidd service should not be started at runlevel 4"/>
                        <criterion test_ref="oval:gov.irs.rhel5:tst:274" comment="The hidd service should not be started at runlevel 5"/>
                        <extend_definition definition_ref="oval:gov.irs.rhel5:def:10000" comment="Red Hat Enterprise Linux 5 is installed"/>
                  </criteria>
            </definition>
            <definition class="compliance" version="1" id="oval:gov.irs.rhel5:def:158">
                  <metadata>
                        <title>Service apmd should be disabled</title>
                        <affected family="unix">
                              <platform>Red Hat Enterprise Linux 5</platform>
                        </affected>
                        <reference ref_id="CCE-4289-5" source="CCE"/>
                        <description>Service apmd should be disabled</description>
                  </metadata>
                  <criteria>
                        <criterion test_ref="oval:gov.irs.rhel5:tst:275" comment="The apmd service should not be started at runlevel 2"/>
                        <criterion test_ref="oval:gov.irs.rhel5:tst:276" comment="The apmd service should not be started at runlevel 3"/>
                        <criterion test_ref="oval:gov.irs.rhel5:tst:277" comment="The apmd service should not be started at runlevel 4"/>
                        <criterion test_ref="oval:gov.irs.rhel5:tst:278" comment="The apmd service should not be started at runlevel 5"/>
                        <extend_definition definition_ref="oval:gov.irs.rhel5:def:10000" comment="Red Hat Enterprise Linux 5 is installed"/>
                  </criteria>
            </definition>
            <definition class="compliance" version="1" id="oval:gov.irs.rhel5:def:159">
                  <metadata>
                        <title>Service acpid should be enabled</title>
                        <affected family="unix">
                              <platform>Red Hat Enterprise Linux 5</platform>
                        </affected>
                        <reference ref_id="CCE-4298-6" source="CCE"/>
                        <description>Service acpid should be enabled</description>
                  </metadata>
                  <criteria>
                        <criterion test_ref="oval:gov.irs.rhel5:tst:279" comment="The acpid service should not be started at runlevel 2"/>
                        <criterion test_ref="oval:gov.irs.rhel5:tst:280" comment="The acpid service should not be started at runlevel 3"/>
                        <criterion test_ref="oval:gov.irs.rhel5:tst:281" comment="The acpid service should not be started at runlevel 4"/>
                        <criterion test_ref="oval:gov.irs.rhel5:tst:282" comment="The acpid service should not be started at runlevel 5"/>
                        <extend_definition definition_ref="oval:gov.irs.rhel5:def:10000" comment="Red Hat Enterprise Linux 5 is installed"/>
                  </criteria>
            </definition>
            <definition class="compliance" version="1" id="oval:gov.irs.rhel5:def:160">
                  <metadata>
                        <title>Service cpuspeed should be enabled</title>
                        <affected family="unix">
                              <platform>Red Hat Enterprise Linux 5</platform>
                        </affected>
                        <reference ref_id="CCE-4051-9" source="CCE"/>
                        <description>Service cpuspeed should be enabled</description>
                  </metadata>
                  <criteria>
                        <criterion test_ref="oval:gov.irs.rhel5:tst:283" comment="The cpuspeed service should not be started at runlevel 2"/>
                        <criterion test_ref="oval:gov.irs.rhel5:tst:284" comment="The cpuspeed service should not be started at runlevel 3"/>
                        <criterion test_ref="oval:gov.irs.rhel5:tst:285" comment="The cpuspeed service should not be started at runlevel 4"/>
                        <criterion test_ref="oval:gov.irs.rhel5:tst:286" comment="The cpuspeed service should not be started at runlevel 5"/>
                        <extend_definition definition_ref="oval:gov.irs.rhel5:def:10000" comment="Red Hat Enterprise Linux 5 is installed"/>
                  </criteria>
            </definition>
            <definition class="compliance" version="1" id="oval:gov.irs.rhel5:def:161">
                  <metadata>
                        <title>Service crond should be enabled</title>
                        <affected family="unix">
                              <platform>Red Hat Enterprise Linux 5</platform>
                        </affected>
                        <reference ref_id="CCE-4324-0" source="CCE"/>
                        <description>Service crond should be enabled</description>
                  </metadata>
                  <criteria>
                        <criterion test_ref="oval:gov.irs.rhel5:tst:287" comment="The crond service should not be started at runlevel 2"/>
                        <criterion test_ref="oval:gov.irs.rhel5:tst:288" comment="The crond service should not be started at runlevel 3"/>
                        <criterion test_ref="oval:gov.irs.rhel5:tst:289" comment="The crond service should not be started at runlevel 4"/>
                        <criterion test_ref="oval:gov.irs.rhel5:tst:290" comment="The crond service should not be started at runlevel 5"/>
                        <extend_definition definition_ref="oval:gov.irs.rhel5:def:10000" comment="Red Hat Enterprise Linux 5 is installed"/>
                  </criteria>
            </definition>
            <definition class="compliance" version="1" id="oval:gov.irs.rhel5:def:162">
                  <metadata>
                        <title>Service anacron should be disabled</title>
                        <affected family="unix">
                              <platform>Red Hat Enterprise Linux 5</platform>
                        </affected>
                        <reference ref_id="CCE-4406-5" source="CCE"/>
                        <description>Service anacron should be disabled</description>
                  </metadata>
                  <criteria>
                        <criterion test_ref="oval:gov.irs.rhel5:tst:291" comment="The anacron service should not be started at runlevel 2"/>
                        <criterion test_ref="oval:gov.irs.rhel5:tst:292" comment="The anacron service should not be started at runlevel 3"/>
                        <criterion test_ref="oval:gov.irs.rhel5:tst:293" comment="The anacron service should not be started at runlevel 4"/>
                        <criterion test_ref="oval:gov.irs.rhel5:tst:294" comment="The anacron service should not be started at runlevel 5"/>
                        <extend_definition definition_ref="oval:gov.irs.rhel5:def:10000" comment="Red Hat Enterprise Linux 5 is installed"/>
                  </criteria>
            </definition>
            <definition class="compliance" version="1" id="oval:gov.irs.rhel5:def:163">
                  <metadata>
                        <title>The anacron package should not be installed</title>
                        <affected family="unix">
                              <platform>Red Hat Enterprise Linux 5</platform>
                        </affected>
                        <reference ref_id="CCE-4428-9" source="CCE"/>
                        <description>The anacron package should not be installed</description>
                  </metadata>
                  <criteria>
                        <criterion test_ref="oval:gov.irs.rhel5:tst:295" comment="The anacron package should not be installed"/>
                        <extend_definition definition_ref="oval:gov.irs.rhel5:def:10000" comment="Red Hat Enterprise Linux 5 is installed"/>
                  </criteria>
            </definition>
            <definition class="compliance" version="1" id="oval:gov.irs.rhel5:def:164">
                  <metadata>
                        <title>File ownership for /etc/cron.monthly</title>
                        <affected family="unix">
                              <platform>Red Hat Enterprise Linux 5</platform>
                        </affected>
                        <reference ref_id="CCE-4322-4" source="CCE"/>
                        <description>File ownership for /etc/cron.monthly</description>
                  </metadata>
                  <criteria>
                        <criterion test_ref="oval:gov.irs.rhel5:tst:296" comment="File ownership check for /etc/cron.monthly"/>
                        <extend_definition definition_ref="oval:gov.irs.rhel5:def:10000" comment="Red Hat Enterprise Linux 5 is installed"/>
                  </criteria>
            </definition>
            <definition class="compliance" version="1" id="oval:gov.irs.rhel5:def:165">
                  <metadata>
                        <title>File permissions for /etc/cron.daily</title>
                        <affected family="unix">
                              <platform>Red Hat Enterprise Linux 5</platform>
                        </affected>
                        <reference ref_id="CCE-4450-3" source="CCE"/>
                        <description>File permissions for /etc/cron.daily should be set to 700</description>
                  </metadata>
                  <criteria>
                        <criterion test_ref="oval:gov.irs.rhel5:tst:297" comment="File permissions test for /etc/cron.daily"/>
                        <extend_definition definition_ref="oval:gov.irs.rhel5:def:10000" comment="Red Hat Enterprise Linux 5 is installed"/>
                  </criteria>
            </definition>
            <definition class="compliance" version="1" id="oval:gov.irs.rhel5:def:166">
                  <metadata>
                        <title>File ownership for /etc/cron.weekly</title>
                        <affected family="unix">
                              <platform>Red Hat Enterprise Linux 5</platform>
                        </affected>
                        <reference ref_id="CCE-4331-5" source="CCE"/>
                        <description>File ownership for /etc/cron.weekly</description>
                  </metadata>
                  <criteria>
                        <criterion test_ref="oval:gov.irs.rhel5:tst:298" comment="File ownership check for /etc/cron.weekly"/>
                        <extend_definition definition_ref="oval:gov.irs.rhel5:def:10000" comment="Red Hat Enterprise Linux 5 is installed"/>
                  </criteria>
            </definition>
            <definition class="compliance" version="1" id="oval:gov.irs.rhel5:def:167">
                  <metadata>
                        <title>File ownership for /etc/crontab</title>
                        <affected family="unix">
                              <platform>Red Hat Enterprise Linux 5</platform>
                        </affected>
                        <reference ref_id="CCE-3851-3" source="CCE"/>
                        <description>File ownership for /etc/crontab</description>
                  </metadata>
                  <criteria>
                        <criterion test_ref="oval:gov.irs.rhel5:tst:299" comment="File ownership check for /etc/crontab"/>
                        <extend_definition definition_ref="oval:gov.irs.rhel5:def:10000" comment="Red Hat Enterprise Linux 5 is installed"/>
                  </criteria>
            </definition>
            <definition class="compliance" version="1" id="oval:gov.irs.rhel5:def:168">
                  <metadata>
                        <title>File ownership for /etc/anacrontab</title>
                        <affected family="unix">
                              <platform>Red Hat Enterprise Linux 5</platform>
                        </affected>
                        <reference ref_id="CCE-4379-4" source="CCE"/>
                        <description>File ownership for /etc/anacrontab</description>
                  </metadata>
                  <criteria>
                        <criterion test_ref="oval:gov.irs.rhel5:tst:300" comment="File ownership check for /etc/anacrontab"/>
                        <extend_definition definition_ref="oval:gov.irs.rhel5:def:10000" comment="Red Hat Enterprise Linux 5 is installed"/>
                  </criteria>
            </definition>
            <definition class="compliance" version="1" id="oval:gov.irs.rhel5:def:169">
                  <metadata>
                        <title>File permissions for /etc/crontab</title>
                        <affected family="unix">
                              <platform>Red Hat Enterprise Linux 5</platform>
                        </affected>
                        <reference ref_id="CCE-4388-5" source="CCE"/>
                        <description>File permissions for /etc/crontab should be set to 600</description>
                  </metadata>
                  <criteria>
                        <criterion test_ref="oval:gov.irs.rhel5:tst:301" comment="File permissions test for /etc/crontab"/>
                        <extend_definition definition_ref="oval:gov.irs.rhel5:def:10000" comment="Red Hat Enterprise Linux 5 is installed"/>
                  </criteria>
            </definition>
            <definition class="compliance" version="1" id="oval:gov.irs.rhel5:def:170">
                  <metadata>
                        <title>File ownership for /etc/cron.hourly</title>
                        <affected family="unix">
                              <platform>Red Hat Enterprise Linux 5</platform>
                        </affected>
                        <reference ref_id="CCE-4054-3" source="CCE"/>
                        <description>File ownership for /etc/cron.hourly</description>
                  </metadata>
                  <criteria>
                        <criterion test_ref="oval:gov.irs.rhel5:tst:302" comment="File ownership check for /etc/cron.hourly"/>
                        <extend_definition definition_ref="oval:gov.irs.rhel5:def:10000" comment="Red Hat Enterprise Linux 5 is installed"/>
                  </criteria>
            </definition>
            <definition class="compliance" version="1" id="oval:gov.irs.rhel5:def:171">
                  <metadata>
                        <title>File ownership for /etc/cron.monthly</title>
                        <affected family="unix">
                              <platform>Red Hat Enterprise Linux 5</platform>
                        </affected>
                        <reference ref_id="CCE-4441-2" source="CCE"/>
                        <description>File ownership for /etc/cron.monthly</description>
                  </metadata>
                  <criteria>
                        <criterion test_ref="oval:gov.irs.rhel5:tst:303" comment="File ownership check for /etc/cron.monthly"/>
                        <extend_definition definition_ref="oval:gov.irs.rhel5:def:10000" comment="Red Hat Enterprise Linux 5 is installed"/>
                  </criteria>
            </definition>
            <definition class="compliance" version="1" id="oval:gov.irs.rhel5:def:172">
                  <metadata>
                        <title>File ownership for /etc/cron.d/.*</title>
                        <affected family="unix">
                              <platform>Red Hat Enterprise Linux 5</platform>
                        </affected>
                        <reference ref_id="CCE-4212-7" source="CCE"/>
                        <description>File ownership for /etc/cron.d/.*</description>
                  </metadata>
                  <criteria>
                        <criterion test_ref="oval:gov.irs.rhel5:tst:304" comment="File ownership check for /etc/cron.d/.*"/>
                        <extend_definition definition_ref="oval:gov.irs.rhel5:def:10000" comment="Red Hat Enterprise Linux 5 is installed"/>
                  </criteria>
            </definition>
            <definition class="compliance" version="1" id="oval:gov.irs.rhel5:def:173">
                  <metadata>
                        <title>File ownership for /etc/cron.d/.*</title>
                        <affected family="unix">
                              <platform>Red Hat Enterprise Linux 5</platform>
                        </affected>
                        <reference ref_id="CCE-4380-2" source="CCE"/>
                        <description>File ownership for /etc/cron.d/.*</description>
                  </metadata>
                  <criteria>
                        <criterion test_ref="oval:gov.irs.rhel5:tst:305" comment="File ownership check for /etc/cron.d/.*"/>
                        <extend_definition definition_ref="oval:gov.irs.rhel5:def:10000" comment="Red Hat Enterprise Linux 5 is installed"/>
                  </criteria>
            </definition>
            <definition class="compliance" version="1" id="oval:gov.irs.rhel5:def:174">
                  <metadata>
                        <title>File ownership for /etc/cron.weekly</title>
                        <affected family="unix">
                              <platform>Red Hat Enterprise Linux 5</platform>
                        </affected>
                        <reference ref_id="CCE-3833-1" source="CCE"/>
                        <description>File ownership for /etc/cron.weekly</description>
                  </metadata>
                  <criteria>
                        <criterion test_ref="oval:gov.irs.rhel5:tst:306" comment="File ownership check for /etc/cron.weekly"/>
                        <extend_definition definition_ref="oval:gov.irs.rhel5:def:10000" comment="Red Hat Enterprise Linux 5 is installed"/>
                  </criteria>
            </definition>
            <definition class="compliance" version="1" id="oval:gov.irs.rhel5:def:175">
                  <metadata>
                        <title>File ownership for /etc/anacrontab</title>
                        <affected family="unix">
                              <platform>Red Hat Enterprise Linux 5</platform>
                        </affected>
                        <reference ref_id="CCE-3604-6" source="CCE"/>
                        <description>File ownership for /etc/anacrontab</description>
                  </metadata>
                  <criteria>
                        <criterion test_ref="oval:gov.irs.rhel5:tst:307" comment="File ownership check for /etc/anacrontab"/>
                        <extend_definition definition_ref="oval:gov.irs.rhel5:def:10000" comment="Red Hat Enterprise Linux 5 is installed"/>
                  </criteria>
            </definition>
            <definition class="compliance" version="1" id="oval:gov.irs.rhel5:def:176">
                  <metadata>
                        <title>File permissions for /etc/cron.hourly</title>
                        <affected family="unix">
                              <platform>Red Hat Enterprise Linux 5</platform>
                        </affected>
                        <reference ref_id="CCE-4106-1" source="CCE"/>
                        <description>File permissions for /etc/cron.hourly should be set to 700</description>
                  </metadata>
                  <criteria>
                        <criterion test_ref="oval:gov.irs.rhel5:tst:308" comment="File permissions test for /etc/cron.hourly"/>
                        <extend_definition definition_ref="oval:gov.irs.rhel5:def:10000" comment="Red Hat Enterprise Linux 5 is installed"/>
                  </criteria>
            </definition>
            <definition class="compliance" version="1" id="oval:gov.irs.rhel5:def:177">
                  <metadata>
                        <title>File ownership for /etc/cron.hourly</title>
                        <affected family="unix">
                              <platform>Red Hat Enterprise Linux 5</platform>
                        </affected>
                        <reference ref_id="CCE-3983-4" source="CCE"/>
                        <description>File ownership for /etc/cron.hourly</description>
                  </metadata>
                  <criteria>
                        <criterion test_ref="oval:gov.irs.rhel5:tst:309" comment="File ownership check for /etc/cron.hourly"/>
                        <extend_definition definition_ref="oval:gov.irs.rhel5:def:10000" comment="Red Hat Enterprise Linux 5 is installed"/>
                  </criteria>
            </definition>
            <definition class="compliance" version="1" id="oval:gov.irs.rhel5:def:178">
                  <metadata>
                        <title>File ownership for /etc/crontab</title>
                        <affected family="unix">
                              <platform>Red Hat Enterprise Linux 5</platform>
                        </affected>
                        <reference ref_id="CCE-3626-9" source="CCE"/>
                        <description>File ownership for /etc/crontab</description>
                  </metadata>
                  <criteria>
                        <criterion test_ref="oval:gov.irs.rhel5:tst:310" comment="File ownership check for /etc/crontab"/>
                        <extend_definition definition_ref="oval:gov.irs.rhel5:def:10000" comment="Red Hat Enterprise Linux 5 is installed"/>
                  </criteria>
            </definition>
            <definition class="compliance" version="1" id="oval:gov.irs.rhel5:def:179">
                  <metadata>
                        <title>File ownership for /etc/cron.daily</title>
                        <affected family="unix">
                              <platform>Red Hat Enterprise Linux 5</platform>
                        </affected>
                        <reference ref_id="CCE-4022-0" source="CCE"/>
                        <description>File ownership for /etc/cron.daily</description>
                  </metadata>
                  <criteria>
                        <criterion test_ref="oval:gov.irs.rhel5:tst:311" comment="File ownership check for /etc/cron.daily"/>
                        <extend_definition definition_ref="oval:gov.irs.rhel5:def:10000" comment="Red Hat Enterprise Linux 5 is installed"/>
                  </criteria>
            </definition>
            <definition class="compliance" version="1" id="oval:gov.irs.rhel5:def:180">
                  <metadata>
                        <title>File permissions for /etc/anacrontab</title>
                        <affected family="unix">
                              <platform>Red Hat Enterprise Linux 5</platform>
                        </affected>
                        <reference ref_id="CCE-4304-2" source="CCE"/>
                        <description>File permissions for /etc/anacrontab should be set to 600</description>
                  </metadata>
                  <criteria>
                        <criterion test_ref="oval:gov.irs.rhel5:tst:312" comment="File permissions test for /etc/anacrontab"/>
                        <extend_definition definition_ref="oval:gov.irs.rhel5:def:10000" comment="Red Hat Enterprise Linux 5 is installed"/>
                  </criteria>
            </definition>
            <definition class="compliance" version="1" id="oval:gov.irs.rhel5:def:181">
                  <metadata>
                        <title>File permissions for /etc/cron.weekly</title>
                        <affected family="unix">
                              <platform>Red Hat Enterprise Linux 5</platform>
                        </affected>
                        <reference ref_id="CCE-4203-6" source="CCE"/>
                        <description>File permissions for /etc/cron.weekly should be set to 700</description>
                  </metadata>
                  <criteria>
                        <criterion test_ref="oval:gov.irs.rhel5:tst:313" comment="File permissions test for /etc/cron.weekly"/>
                        <extend_definition definition_ref="oval:gov.irs.rhel5:def:10000" comment="Red Hat Enterprise Linux 5 is installed"/>
                  </criteria>
            </definition>
            <definition class="compliance" version="1" id="oval:gov.irs.rhel5:def:182">
                  <metadata>
                        <title>File permissions for /etc/cron.monthly</title>
                        <affected family="unix">
                              <platform>Red Hat Enterprise Linux 5</platform>
                        </affected>
                        <reference ref_id="CCE-4251-5" source="CCE"/>
                        <description>File permissions for /etc/cron.monthly should be set to 700</description>
                  </metadata>
                  <criteria>
                        <criterion test_ref="oval:gov.irs.rhel5:tst:314" comment="File permissions test for /etc/cron.monthly"/>
                        <extend_definition definition_ref="oval:gov.irs.rhel5:def:10000" comment="Red Hat Enterprise Linux 5 is installed"/>
                  </criteria>
            </definition>
            <definition class="compliance" version="1" id="oval:gov.irs.rhel5:def:183">
                  <metadata>
                        <title>File ownership for /etc/cron.daily</title>
                        <affected family="unix">
                              <platform>Red Hat Enterprise Linux 5</platform>
                        </affected>
                        <reference ref_id="CCE-3481-9" source="CCE"/>
                        <description>File ownership for /etc/cron.daily</description>
                  </metadata>
                  <criteria>
                        <criterion test_ref="oval:gov.irs.rhel5:tst:315" comment="File ownership check for /etc/cron.daily"/>
                        <extend_definition definition_ref="oval:gov.irs.rhel5:def:10000" comment="Red Hat Enterprise Linux 5 is installed"/>
                  </criteria>
            </definition>
            <definition class="compliance" version="1" id="oval:gov.irs.rhel5:def:184">
                  <metadata>
                        <title>File permissions for /etc/cron.d/.*</title>
                        <affected family="unix">
                              <platform>Red Hat Enterprise Linux 5</platform>
                        </affected>
                        <reference ref_id="CCE-4250-7" source="CCE"/>
                        <description>File permissions for /etc/cron.d/.* should be set to 700</description>
                  </metadata>
                  <criteria>
                        <criterion test_ref="oval:gov.irs.rhel5:tst:316" comment="File permissions test for /etc/cron.d/.*"/>
                        <extend_definition definition_ref="oval:gov.irs.rhel5:def:10000" comment="Red Hat Enterprise Linux 5 is installed"/>
                  </criteria>
            </definition>
            <definition class="compliance" version="1" id="oval:gov.irs.rhel5:def:185">
                  <metadata>
                        <title>Service sshd should be disabled</title>
                        <affected family="unix">
                              <platform>Red Hat Enterprise Linux 5</platform>
                        </affected>
                        <reference ref_id="CCE-4268-9" source="CCE"/>
                        <description>Service sshd should be disabled</description>
                  </metadata>
                  <criteria>
                        <criterion test_ref="oval:gov.irs.rhel5:tst:317" comment="The sshd service should not be started at runlevel 2"/>
                        <criterion test_ref="oval:gov.irs.rhel5:tst:318" comment="The sshd service should not be started at runlevel 3"/>
                        <criterion test_ref="oval:gov.irs.rhel5:tst:319" comment="The sshd service should not be started at runlevel 4"/>
                        <criterion test_ref="oval:gov.irs.rhel5:tst:320" comment="The sshd service should not be started at runlevel 5"/>
                        <extend_definition definition_ref="oval:gov.irs.rhel5:def:10000" comment="Red Hat Enterprise Linux 5 is installed"/>
                  </criteria>
            </definition>
            <definition class="compliance" version="1" id="oval:gov.irs.rhel5:def:186">
                  <metadata>
                        <title>The openssh-server package should not be installed</title>
                        <affected family="unix">
                              <platform>Red Hat Enterprise Linux 5</platform>
                        </affected>
                        <reference ref_id="CCE-4272-1" source="CCE"/>
                        <description>The openssh-server package should not be installed</description>
                  </metadata>
                  <criteria>
                        <criterion test_ref="oval:gov.irs.rhel5:tst:321" comment="The openssh-server package should not be installed"/>
                        <extend_definition definition_ref="oval:gov.irs.rhel5:def:10000" comment="Red Hat Enterprise Linux 5 is installed"/>
                  </criteria>
            </definition>
            <definition class="compliance" version="1" id="oval:gov.irs.rhel5:def:187">
                  <metadata>
                        <title>Remove SSH Server iptables Firewall Exception </title>
                        <affected family="unix">
                              <platform>Red Hat Enterprise Linux 5</platform>
                        </affected>
                        <reference ref_id="CCE-4295-2" source="CCE"/>
                        <description>Inbound connections to the ssh port should be allowed or denied as appropriate</description>
                  </metadata>
                  <criteria>
                        <criteria operator="OR" comment="Definition alternatives">
                              <criterion test_ref="oval:gov.irs.rhel5:tst:322" comment="Inbound connections to the ssh port should be allowed or denied as appropriate"/>
                              <extend_definition definition_ref="oval:gov.irs.rhel5:def:185" comment="Dependency is met"/>
                              <extend_definition definition_ref="oval:gov.irs.rhel5:def:186" comment="Dependency is met"/>
                        </criteria>
                        <extend_definition definition_ref="oval:gov.irs.rhel5:def:10000" comment="Red Hat Enterprise Linux 5 is installed"/>
                  </criteria>
            </definition>
            <definition class="compliance" version="1" id="oval:gov.irs.rhel5:def:188">
                  <metadata>
                        <title>Ensure Only Protocol 2 Connections Allowed </title>
                        <affected family="unix">
                              <platform>Red Hat Enterprise Linux 5</platform>
                        </affected>
                        <reference ref_id="CCE-4325-7" source="CCE"/>
                        <description>SSH version 1 protocol support should be enabled or disabled as appropriate.</description>
                  </metadata>
                  <criteria>
                        <criteria operator="OR" comment="Definition alternatives">
                              <criterion test_ref="oval:gov.irs.rhel5:tst:323" comment="SSH version 1 protocol support should be enabled or disabled as appropriate."/>
                              <extend_definition definition_ref="oval:gov.irs.rhel5:def:185" comment="Dependency is met"/>
                              <extend_definition definition_ref="oval:gov.irs.rhel5:def:186" comment="Dependency is met"/>
                        </criteria>
                        <extend_definition definition_ref="oval:gov.irs.rhel5:def:10000" comment="Red Hat Enterprise Linux 5 is installed"/>
                  </criteria>
            </definition>
            <definition class="compliance" version="1" id="oval:gov.irs.rhel5:def:189">
                  <metadata>
                        <title>Set Idle Timeout Interval for User Logins </title>
                        <affected family="unix">
                              <platform>Red Hat Enterprise Linux 5</platform>
                        </affected>
                        <reference ref_id="CCE-3845-5" source="CCE"/>
                        <description>The SSH idle timout interval should be set to an appropriate value</description>
                  </metadata>
                  <criteria>
                        <criteria operator="OR" comment="Definition alternatives">
                              <criteria>
                                    <criterion test_ref="oval:gov.irs.rhel5:tst:324"/>
                                    <criterion test_ref="oval:gov.irs.rhel5:tst:325"/>
                              </criteria>
                              <extend_definition definition_ref="oval:gov.irs.rhel5:def:185" comment="Dependency is met"/>
                              <extend_definition definition_ref="oval:gov.irs.rhel5:def:186" comment="Dependency is met"/>
                        </criteria>
                        <extend_definition definition_ref="oval:gov.irs.rhel5:def:10000" comment="Red Hat Enterprise Linux 5 is installed"/>
                  </criteria>
            </definition>
            <definition class="compliance" version="1" id="oval:gov.irs.rhel5:def:190">
                  <metadata>
                        <title>Disable .rhosts Files </title>
                        <affected family="unix">
                              <platform>Red Hat Enterprise Linux 5</platform>
                        </affected>
                        <reference ref_id="CCE-4475-0" source="CCE"/>
                        <description>Emulation of the rsh command through the ssh server should be enabled or disabled as appropriate</description>
                  </metadata>
                  <criteria>
                        <criteria operator="OR" comment="Definition alternatives">
                              <criterion test_ref="oval:gov.irs.rhel5:tst:326" comment="Emulation of the rsh command through the ssh server should be enabled or disabled as appropriate"/>
                              <extend_definition definition_ref="oval:gov.irs.rhel5:def:185" comment="Dependency is met"/>
                              <extend_definition definition_ref="oval:gov.irs.rhel5:def:186" comment="Dependency is met"/>
                        </criteria>
                        <extend_definition definition_ref="oval:gov.irs.rhel5:def:10000" comment="Red Hat Enterprise Linux 5 is installed"/>
                  </criteria>
            </definition>
            <definition class="compliance" version="1" id="oval:gov.irs.rhel5:def:191">
                  <metadata>
                        <title>Disable Host-Based Authentication </title>
                        <affected family="unix">
                              <platform>Red Hat Enterprise Linux 5</platform>
                        </affected>
                        <reference ref_id="CCE-4370-3" source="CCE"/>
                        <description>SSH host-based authentication should be enabled or disabled as appropriate</description>
                  </metadata>
                  <criteria>
                        <criteria operator="OR" comment="Definition alternatives">
                              <criterion test_ref="oval:gov.irs.rhel5:tst:327" comment="SSH host-based authentication should be enabled or disabled as appropriate"/>
                              <extend_definition definition_ref="oval:gov.irs.rhel5:def:185" comment="Dependency is met"/>
                              <extend_definition definition_ref="oval:gov.irs.rhel5:def:186" comment="Dependency is met"/>
                        </criteria>
                        <extend_definition definition_ref="oval:gov.irs.rhel5:def:10000" comment="Red Hat Enterprise Linux 5 is installed"/>
                  </criteria>
            </definition>
            <definition class="compliance" version="1" id="oval:gov.irs.rhel5:def:192">
                  <metadata>
                        <title>Disable root Login via SSH </title>
                        <affected family="unix">
                              <platform>Red Hat Enterprise Linux 5</platform>
                        </affected>
                        <reference ref_id="CCE-4387-7" source="CCE"/>
                        <description>Root login via SSH should be enabled or disabled as appropriate</description>
                  </metadata>
                  <criteria>
                        <criteria operator="OR" comment="Definition alternatives">
                              <criterion test_ref="oval:gov.irs.rhel5:tst:328" comment="Root login via SSH should be enabled or disabled as appropriate"/>
                              <extend_definition definition_ref="oval:gov.irs.rhel5:def:185" comment="Dependency is met"/>
                              <extend_definition definition_ref="oval:gov.irs.rhel5:def:186" comment="Dependency is met"/>
                        </criteria>
                        <extend_definition definition_ref="oval:gov.irs.rhel5:def:10000" comment="Red Hat Enterprise Linux 5 is installed"/>
                  </criteria>
            </definition>
            <definition class="compliance" version="1" id="oval:gov.irs.rhel5:def:193">
                  <metadata>
                        <title>Disable Empty Passwords</title>
                        <affected family="unix">
                              <platform>Red Hat Enterprise Linux 5</platform>
                        </affected>
                        <reference ref_id="CCE-3660-8" source="CCE"/>
                        <description>Remote connections from accounts with empty passwords should be enabled or disabled as appropriate</description>
                  </metadata>
                  <criteria>
                        <criteria operator="OR" comment="Definition alternatives">
                              <criterion test_ref="oval:gov.irs.rhel5:tst:329" comment="Remote connections from accounts with empty passwords should be enabled or disabled as appropriate"/>
                              <extend_definition definition_ref="oval:gov.irs.rhel5:def:185" comment="Dependency is met"/>
                              <extend_definition definition_ref="oval:gov.irs.rhel5:def:186" comment="Dependency is met"/>
                        </criteria>
                        <extend_definition definition_ref="oval:gov.irs.rhel5:def:10000" comment="Red Hat Enterprise Linux 5 is installed"/>
                  </criteria>
            </definition>
            <definition class="compliance" version="1" id="oval:gov.irs.rhel5:def:194">
                  <metadata>
                        <title>Enable a Warning Banner </title>
                        <affected family="unix">
                              <platform>Red Hat Enterprise Linux 5</platform>
                        </affected>
                        <reference ref_id="CCE-4431-3" source="CCE"/>
                        <description>SSH warning banner should be enabled or disabled as appropriate</description>
                  </metadata>
                  <criteria>
                        <criteria operator="OR" comment="Definition alternatives">
                              <criterion test_ref="oval:gov.irs.rhel5:tst:330" comment="SSH warning banner should be enabled or disabled as appropriate"/>
                              <extend_definition definition_ref="oval:gov.irs.rhel5:def:185" comment="Dependency is met"/>
                              <extend_definition definition_ref="oval:gov.irs.rhel5:def:186" comment="Dependency is met"/>
                        </criteria>
                        <extend_definition definition_ref="oval:gov.irs.rhel5:def:10000" comment="Red Hat Enterprise Linux 5 is installed"/>
                  </criteria>
            </definition>
            <definition class="compliance" version="1" id="oval:gov.irs.rhel5:def:195">
                  <metadata>
                        <title>Disable X Windows at System Boot </title>
                        <affected family="unix">
                              <platform>Red Hat Enterprise Linux 5</platform>
                        </affected>
                        <reference ref_id="CCE-4462-8" source="CCE"/>
                        <description>X Windows should be enabled or disabled at system boot as appropriate</description>
                  </metadata>
                  <criteria>
                        <criterion test_ref="oval:gov.irs.rhel5:tst:331" comment="X Windows should be enabled or disabled at system boot as appropriate"/>
                        <extend_definition definition_ref="oval:gov.irs.rhel5:def:10000" comment="Red Hat Enterprise Linux 5 is installed"/>
                  </criteria>
            </definition>
            <definition class="compliance" version="1" id="oval:gov.irs.rhel5:def:196">
                  <metadata>
                        <title>Remove X Windows from the System if Possible </title>
                        <affected family="unix">
                              <platform>Red Hat Enterprise Linux 5</platform>
                        </affected>
                        <reference ref_id="CCE-4422-2" source="CCE"/>
                        <description>X Windows should be installed or removed as appropriate</description>
                  </metadata>
                  <criteria>
                        <criterion test_ref="oval:gov.irs.rhel5:tst:332" comment="Unknown test stub"/>
                        <extend_definition definition_ref="oval:gov.irs.rhel5:def:10000" comment="Red Hat Enterprise Linux 5 is installed"/>
                  </criteria>
            </definition>
            <definition class="compliance" version="1" id="oval:gov.irs.rhel5:def:201">
                  <metadata>
                        <title>Service avahi-daemon should be disabled</title>
                        <affected family="unix">
                              <platform>Red Hat Enterprise Linux 5</platform>
                        </affected>
                        <reference ref_id="CCE-4365-3" source="CCE"/>
                        <description>Service avahi-daemon should be disabled</description>
                  </metadata>
                  <criteria>
                        <criterion test_ref="oval:gov.irs.rhel5:tst:333" comment="The avahi-daemon service should not be started at runlevel 2"/>
                        <criterion test_ref="oval:gov.irs.rhel5:tst:334" comment="The avahi-daemon service should not be started at runlevel 3"/>
                        <criterion test_ref="oval:gov.irs.rhel5:tst:335" comment="The avahi-daemon service should not be started at runlevel 4"/>
                        <criterion test_ref="oval:gov.irs.rhel5:tst:336" comment="The avahi-daemon service should not be started at runlevel 5"/>
                        <extend_definition definition_ref="oval:gov.irs.rhel5:def:10000" comment="Red Hat Enterprise Linux 5 is installed"/>
                  </criteria>
            </definition>
            <definition class="compliance" version="1" id="oval:gov.irs.rhel5:def:202">
                  <metadata>
                        <title>Serve Only via Required Protocol </title>
                        <affected family="unix">
                              <platform>Red Hat Enterprise Linux 5</platform>
                        </affected>
                        <reference ref_id="CCE-4136-8" source="CCE"/>
                        <description>The Avahi daemon should be configured to serve via Ipv6 or not as appropriate</description>
                  </metadata>
                  <criteria>
                        <criteria operator="OR" comment="Definition alternatives">
                              <criterion test_ref="oval:gov.irs.rhel5:tst:337" comment="Unknown test stub"/>
                              <extend_definition definition_ref="oval:gov.irs.rhel5:def:201" comment="Dependency is met"/>
                        </criteria>
                        <extend_definition definition_ref="oval:gov.irs.rhel5:def:10000" comment="Red Hat Enterprise Linux 5 is installed"/>
                  </criteria>
            </definition>
            <definition class="compliance" version="1" id="oval:gov.irs.rhel5:def:203">
                  <metadata>
                        <title>Serve Only via Required Protocol </title>
                        <affected family="unix">
                              <platform>Red Hat Enterprise Linux 5</platform>
                        </affected>
                        <reference ref_id="CCE-4409-9" source="CCE"/>
                        <description>The Avahi daemon should be configured to serve via Ipv4 or not as appropriate</description>
                  </metadata>
                  <criteria>
                        <criteria operator="OR" comment="Definition alternatives">
                              <criterion test_ref="oval:gov.irs.rhel5:tst:338" comment="Unknown test stub"/>
                              <extend_definition definition_ref="oval:gov.irs.rhel5:def:201" comment="Dependency is met"/>
                        </criteria>
                        <extend_definition definition_ref="oval:gov.irs.rhel5:def:10000" comment="Red Hat Enterprise Linux 5 is installed"/>
                  </criteria>
            </definition>
            <definition class="compliance" version="1" id="oval:gov.irs.rhel5:def:204">
                  <metadata>
                        <title>Check Responses' TTL Field </title>
                        <affected family="unix">
                              <platform>Red Hat Enterprise Linux 5</platform>
                        </affected>
                        <reference ref_id="CCE-4426-3" source="CCE"/>
                        <description>Avahi should be configured to accept packets with a TTL field not equal to 255 or not as appropriate</description>
                  </metadata>
                  <criteria>
                        <criteria operator="OR" comment="Definition alternatives">
                              <criterion test_ref="oval:gov.irs.rhel5:tst:339" comment="Avahi should be configured to accept packets with a TTL field not equal to 255 or not as appropriate"/>
                              <extend_definition definition_ref="oval:gov.irs.rhel5:def:201" comment="Dependency is met"/>
                        </criteria>
                        <extend_definition definition_ref="oval:gov.irs.rhel5:def:10000" comment="Red Hat Enterprise Linux 5 is installed"/>
                  </criteria>
            </definition>
            <definition class="compliance" version="1" id="oval:gov.irs.rhel5:def:205">
                  <metadata>
                        <title>Prevent Other Programs from Using Avahi's Port </title>
                        <affected family="unix">
                              <platform>Red Hat Enterprise Linux 5</platform>
                        </affected>
                        <reference ref_id="CCE-4193-9" source="CCE"/>
                        <description>Avahi should be configured to allow other stacks from binding to port 5353 or not as appropriate</description>
                  </metadata>
                  <criteria>
                        <criteria operator="OR" comment="Definition alternatives">
                              <criterion test_ref="oval:gov.irs.rhel5:tst:340" comment="Avahi should be configured to allow other stacks from binding to port 5353 or not as appropriate"/>
                              <extend_definition definition_ref="oval:gov.irs.rhel5:def:201" comment="Dependency is met"/>
                        </criteria>
                        <extend_definition definition_ref="oval:gov.irs.rhel5:def:10000" comment="Red Hat Enterprise Linux 5 is installed"/>
                  </criteria>
            </definition>
            <definition class="compliance" version="1" id="oval:gov.irs.rhel5:def:206">
                  <metadata>
                        <title>Disable Publishing if Possible </title>
                        <affected family="unix">
                              <platform>Red Hat Enterprise Linux 5</platform>
                        </affected>
                        <reference ref_id="CCE-4444-6" source="CCE"/>
                        <description>Avahi publishing of local information should be enabled or disabled as appropriate</description>
                  </metadata>
                  <criteria>
                        <criteria operator="OR" comment="Definition alternatives">
                              <criterion test_ref="oval:gov.irs.rhel5:tst:341" comment="Avahi publishing of local information should be enabled or disabled as appropriate"/>
                              <extend_definition definition_ref="oval:gov.irs.rhel5:def:201" comment="Dependency is met"/>
                        </criteria>
                        <extend_definition definition_ref="oval:gov.irs.rhel5:def:10000" comment="Red Hat Enterprise Linux 5 is installed"/>
                  </criteria>
            </definition>
            <definition class="compliance" version="1" id="oval:gov.irs.rhel5:def:207">
                  <metadata>
                        <title>Restrict Published Information </title>
                        <affected family="unix">
                              <platform>Red Hat Enterprise Linux 5</platform>
                        </affected>
                        <reference ref_id="CCE-4352-1" source="CCE"/>
                        <description>Avahi publishing of local information by user applications should be enabled or disabled as appropriate</description>
                  </metadata>
                  <criteria>
                        <criteria operator="OR" comment="Definition alternatives">
                              <criterion test_ref="oval:gov.irs.rhel5:tst:342" comment="Avahi publishing of local information by user applications should be enabled or disabled as appropriate"/>
                              <extend_definition definition_ref="oval:gov.irs.rhel5:def:201" comment="Dependency is met"/>
                        </criteria>
                        <extend_definition definition_ref="oval:gov.irs.rhel5:def:10000" comment="Red Hat Enterprise Linux 5 is installed"/>
                  </criteria>
            </definition>
            <definition class="compliance" version="1" id="oval:gov.irs.rhel5:def:208">
                  <metadata>
                        <title>Restrict Published Information </title>
                        <affected family="unix">
                              <platform>Red Hat Enterprise Linux 5</platform>
                        </affected>
                        <reference ref_id="CCE-4433-9" source="CCE"/>
                        <description>Avahi publishing of hardware information should be enabled or disabled as appropriate</description>
                  </metadata>
                  <criteria>
                        <criteria operator="OR" comment="Definition alternatives">
                              <criterion test_ref="oval:gov.irs.rhel5:tst:343" comment="Avahi publishing of hardware information should be enabled or disabled as appropriate"/>
                              <extend_definition definition_ref="oval:gov.irs.rhel5:def:201" comment="Dependency is met"/>
                        </criteria>
                        <extend_definition definition_ref="oval:gov.irs.rhel5:def:10000" comment="Red Hat Enterprise Linux 5 is installed"/>
                  </criteria>
            </definition>
            <definition class="compliance" version="1" id="oval:gov.irs.rhel5:def:209">
                  <metadata>
                        <title>Restrict Published Information </title>
                        <affected family="unix">
                              <platform>Red Hat Enterprise Linux 5</platform>
                        </affected>
                        <reference ref_id="CCE-4451-1" source="CCE"/>
                        <description>Avahi publishing of workstation name should be enabled or disabled as appropriate</description>
                  </metadata>
                  <criteria>
                        <criteria operator="OR" comment="Definition alternatives">
                              <criterion test_ref="oval:gov.irs.rhel5:tst:344" comment="Avahi publishing of workstation name should be enabled or disabled as appropriate"/>
                              <extend_definition definition_ref="oval:gov.irs.rhel5:def:201" comment="Dependency is met"/>
                        </criteria>
                        <extend_definition definition_ref="oval:gov.irs.rhel5:def:10000" comment="Red Hat Enterprise Linux 5 is installed"/>
                  </criteria>
            </definition>
            <definition class="compliance" version="1" id="oval:gov.irs.rhel5:def:210">
                  <metadata>
                        <title>Restrict Published Information </title>
                        <affected family="unix">
                              <platform>Red Hat Enterprise Linux 5</platform>
                        </affected>
                        <reference ref_id="CCE-4341-4" source="CCE"/>
                        <description>Avahi publishing of IP addresses should be enabled or disabled as appropriate</description>
                  </metadata>
                  <criteria>
                        <criteria operator="OR" comment="Definition alternatives">
                              <criterion test_ref="oval:gov.irs.rhel5:tst:345" comment="Avahi publishing of IP addresses should be enabled or disabled as appropriate"/>
                              <extend_definition definition_ref="oval:gov.irs.rhel5:def:201" comment="Dependency is met"/>
                        </criteria>
                        <extend_definition definition_ref="oval:gov.irs.rhel5:def:10000" comment="Red Hat Enterprise Linux 5 is installed"/>
                  </criteria>
            </definition>
            <definition class="compliance" version="1" id="oval:gov.irs.rhel5:def:211">
                  <metadata>
                        <title>Restrict Published Information </title>
                        <affected family="unix">
                              <platform>Red Hat Enterprise Linux 5</platform>
                        </affected>
                        <reference ref_id="CCE-4358-8" source="CCE"/>
                        <description>Avahi publishing of domain name should be enabled or disabled as appropriate</description>
                  </metadata>
                  <criteria>
                        <criteria operator="OR" comment="Definition alternatives">
                              <criterion test_ref="oval:gov.irs.rhel5:tst:346" comment="Avahi publishing of domain name should be enabled or disabled as appropriate"/>
                              <extend_definition definition_ref="oval:gov.irs.rhel5:def:201" comment="Dependency is met"/>
                        </criteria>
                        <extend_definition definition_ref="oval:gov.irs.rhel5:def:10000" comment="Red Hat Enterprise Linux 5 is installed"/>
                  </criteria>
            </definition>
            <definition class="compliance" version="1" id="oval:gov.irs.rhel5:def:212">
                  <metadata>
                        <title>Service cups should be disabled</title>
                        <affected family="unix">
                              <platform>Red Hat Enterprise Linux 5</platform>
                        </affected>
                        <reference ref_id="CCE-4112-9" source="CCE"/>
                        <description>Service cups should be disabled</description>
                  </metadata>
                  <criteria>
                        <criterion test_ref="oval:gov.irs.rhel5:tst:347" comment="The cups service should not be started at runlevel 2"/>
                        <criterion test_ref="oval:gov.irs.rhel5:tst:348" comment="The cups service should not be started at runlevel 3"/>
                        <criterion test_ref="oval:gov.irs.rhel5:tst:349" comment="The cups service should not be started at runlevel 4"/>
                        <criterion test_ref="oval:gov.irs.rhel5:tst:350" comment="The cups service should not be started at runlevel 5"/>
                        <extend_definition definition_ref="oval:gov.irs.rhel5:def:10000" comment="Red Hat Enterprise Linux 5 is installed"/>
                  </criteria>
            </definition>
            <definition class="compliance" version="1" id="oval:gov.irs.rhel5:def:214">
                  <metadata>
                        <title>Disable Firewall Access to Printing Service if Possible</title>
                        <affected family="unix">
                              <platform>Red Hat Enterprise Linux 5</platform>
                        </affected>
                        <reference ref_id="CCE-3649-1" source="CCE"/>
                        <description>Firewall access to printing service should be enabled or disabled as appropriate</description>
                  </metadata>
                  <criteria>
                        <criterion test_ref="oval:gov.irs.rhel5:tst:351" comment="Firewall access to printing service should be enabled or disabled as appropriate"/>
                        <extend_definition definition_ref="oval:gov.irs.rhel5:def:10000" comment="Red Hat Enterprise Linux 5 is installed"/>
                  </criteria>
            </definition>
            <definition class="compliance" version="1" id="oval:gov.irs.rhel5:def:215">
                  <metadata>
                        <title>Disable Printer Browsing Entirely if Possible </title>
                        <affected family="unix">
                              <platform>Red Hat Enterprise Linux 5</platform>
                        </affected>
                        <reference ref_id="CCE-4420-6" source="CCE"/>
                        <description>Remote print browsing should be enabled or disabled as appropriate</description>
                  </metadata>
                  <criteria>
                        <criteria operator="OR" comment="Definition alternatives">
                              <criterion test_ref="oval:gov.irs.rhel5:tst:352" comment="Remote print browsing should be enabled or disabled as appropriate"/>
                              <extend_definition definition_ref="oval:gov.irs.rhel5:def:212" comment="Dependency is met"/>
                        </criteria>
                        <extend_definition definition_ref="oval:gov.irs.rhel5:def:10000" comment="Red Hat Enterprise Linux 5 is installed"/>
                  </criteria>
            </definition>
            <definition class="compliance" version="1" id="oval:gov.irs.rhel5:def:216">
                  <metadata>
                        <title>Disable Printer Browsing Entirely if Possible </title>
                        <affected family="unix">
                              <platform>Red Hat Enterprise Linux 5</platform>
                        </affected>
                        <reference ref_id="CCE-4407-3" source="CCE"/>
                        <description>CUPS should be allowed or denied the ability to listen for Incoming printer information as appropriate</description>
                  </metadata>
                  <criteria>
                        <criteria operator="OR" comment="Definition alternatives">
                              <criterion test_ref="oval:gov.irs.rhel5:tst:353" comment="CUPS should be allowed or denied the ability to listen for Incoming printer information as appropriate"/>
                              <extend_definition definition_ref="oval:gov.irs.rhel5:def:212" comment="Dependency is met"/>
                        </criteria>
                        <extend_definition definition_ref="oval:gov.irs.rhel5:def:10000" comment="Red Hat Enterprise Linux 5 is installed"/>
                  </criteria>
            </definition>
            <definition class="compliance" version="1" id="oval:gov.irs.rhel5:def:217">
                  <metadata>
                        <title>Service hplip should be disabled</title>
                        <affected family="unix">
                              <platform>Red Hat Enterprise Linux 5</platform>
                        </affected>
                        <reference ref_id="CCE-4425-5" source="CCE"/>
                        <description>Service hplip should be disabled</description>
                  </metadata>
                  <criteria>
                        <criterion test_ref="oval:gov.irs.rhel5:tst:354" comment="The hplip service should not be started at runlevel 2"/>
                        <criterion test_ref="oval:gov.irs.rhel5:tst:355" comment="The hplip service should not be started at runlevel 3"/>
                        <criterion test_ref="oval:gov.irs.rhel5:tst:356" comment="The hplip service should not be started at runlevel 4"/>
                        <criterion test_ref="oval:gov.irs.rhel5:tst:357" comment="The hplip service should not be started at runlevel 5"/>
                        <extend_definition definition_ref="oval:gov.irs.rhel5:def:10000" comment="Red Hat Enterprise Linux 5 is installed"/>
                  </criteria>
            </definition>
            <definition class="compliance" version="1" id="oval:gov.irs.rhel5:def:218">
                  <metadata>
                        <title>Disable DHCP Client if Possible</title>
                        <affected family="unix">
                              <platform>Red Hat Enterprise Linux 5</platform>
                        </affected>
                        <reference ref_id="CCE-4191-3" source="CCE"/>
                        <description>The dhcp client service should be enabled or disabled as appropriate for each interface.</description>
                  </metadata>
                  <criteria>
                        <criterion test_ref="oval:gov.irs.rhel5:tst:358"/>
                        <extend_definition definition_ref="oval:gov.irs.rhel5:def:10000" comment="Red Hat Enterprise Linux 5 is installed"/>
                  </criteria>
            </definition>
            <definition class="compliance" version="1" id="oval:gov.irs.rhel5:def:219">
                  <metadata>
                        <title>Service dhcpd should be disabled</title>
                        <affected family="unix">
                              <platform>Red Hat Enterprise Linux 5</platform>
                        </affected>
                        <reference ref_id="CCE-4336-4" source="CCE"/>
                        <description>Service dhcpd should be disabled</description>
                  </metadata>
                  <criteria>
                        <criterion test_ref="oval:gov.irs.rhel5:tst:359" comment="The dhcpd service should not be started at runlevel 2"/>
                        <criterion test_ref="oval:gov.irs.rhel5:tst:360" comment="The dhcpd service should not be started at runlevel 3"/>
                        <criterion test_ref="oval:gov.irs.rhel5:tst:361" comment="The dhcpd service should not be started at runlevel 4"/>
                        <criterion test_ref="oval:gov.irs.rhel5:tst:362" comment="The dhcpd service should not be started at runlevel 5"/>
                        <extend_definition definition_ref="oval:gov.irs.rhel5:def:10000" comment="Red Hat Enterprise Linux 5 is installed"/>
                  </criteria>
            </definition>
            <definition class="compliance" version="1" id="oval:gov.irs.rhel5:def:220">
                  <metadata>
                        <title>The dhcp package should not be installed</title>
                        <affected family="unix">
                              <platform>Red Hat Enterprise Linux 5</platform>
                        </affected>
                        <reference ref_id="CCE-4464-4" source="CCE"/>
                        <description>The dhcp package should not be installed</description>
                  </metadata>
                  <criteria>
                        <criterion test_ref="oval:gov.irs.rhel5:tst:363" comment="The dhcp package should not be installed"/>
                        <extend_definition definition_ref="oval:gov.irs.rhel5:def:10000" comment="Red Hat Enterprise Linux 5 is installed"/>
                  </criteria>
            </definition>
            <definition class="compliance" version="1" id="oval:gov.irs.rhel5:def:221">
                  <metadata>
                        <title>Do Not Use Dynamic DNS </title>
                        <affected family="unix">
                              <platform>Red Hat Enterprise Linux 5</platform>
                        </affected>
                        <reference ref_id="CCE-4257-2" source="CCE"/>
                        <description>The dynamic DNS feature of the DHCP server should be enabled or disabled as appropriate</description>
                  </metadata>
                  <criteria>
                        <criteria operator="OR" comment="Definition alternatives">
                              <criterion test_ref="oval:gov.irs.rhel5:tst:364" comment="The dynamic DNS feature of the DHCP server should be enabled or disabled as appropriate"/>
                              <extend_definition definition_ref="oval:gov.irs.rhel5:def:219" comment="Dependency is met"/>
                              <extend_definition definition_ref="oval:gov.irs.rhel5:def:220" comment="Dependency is met"/>
                        </criteria>
                        <extend_definition definition_ref="oval:gov.irs.rhel5:def:10000" comment="Red Hat Enterprise Linux 5 is installed"/>
                  </criteria>
            </definition>
            <definition class="compliance" version="1" id="oval:gov.irs.rhel5:def:222">
                  <metadata>
                        <title>Deny Decline Messages </title>
                        <affected family="unix">
                              <platform>Red Hat Enterprise Linux 5</platform>
                        </affected>
                        <reference ref_id="CCE-4403-2" source="CCE"/>
                        <description>DHCPDECLINE messages should be accepted or denied by the DHCP server as appropriate</description>
                  </metadata>
                  <criteria>
                        <criteria operator="OR" comment="Definition alternatives">
                              <criterion test_ref="oval:gov.irs.rhel5:tst:365" comment="DHCPDECLINE messages should be accepted or denied by the DHCP server as appropriate"/>
                              <extend_definition definition_ref="oval:gov.irs.rhel5:def:219" comment="Dependency is met"/>
                              <extend_definition definition_ref="oval:gov.irs.rhel5:def:220" comment="Dependency is met"/>
                        </criteria>
                        <extend_definition definition_ref="oval:gov.irs.rhel5:def:10000" comment="Red Hat Enterprise Linux 5 is installed"/>
                  </criteria>
            </definition>
            <definition class="compliance" version="1" id="oval:gov.irs.rhel5:def:223">
                  <metadata>
                        <title>Deny BOOTP Queries </title>
                        <affected family="unix">
                              <platform>Red Hat Enterprise Linux 5</platform>
                        </affected>
                        <reference ref_id="CCE-4345-5" source="CCE"/>
                        <description>BOOTP queries should be accepted or denied by the DHCP server as appropriate</description>
                  </metadata>
                  <criteria>
                        <criteria operator="OR" comment="Definition alternatives">
                              <criterion test_ref="oval:gov.irs.rhel5:tst:366" comment="BOOTP queries should be accepted or denied by the DHCP server as appropriate"/>
                              <extend_definition definition_ref="oval:gov.irs.rhel5:def:219" comment="Dependency is met"/>
                              <extend_definition definition_ref="oval:gov.irs.rhel5:def:220" comment="Dependency is met"/>
                        </criteria>
                        <extend_definition definition_ref="oval:gov.irs.rhel5:def:10000" comment="Red Hat Enterprise Linux 5 is installed"/>
                  </criteria>
            </definition>
            <definition class="compliance" version="1" id="oval:gov.irs.rhel5:def:224">
                  <metadata>
                        <title>Minimize Served Information </title>
                        <affected family="unix">
                              <platform>Red Hat Enterprise Linux 5</platform>
                        </affected>
                        <reference ref_id="CCE-3724-2" source="CCE"/>
                        <description>Domain name server information should be sent or not sent by the DHCP server as appropriate.</description>
                  </metadata>
                  <criteria>
                        <criteria operator="OR" comment="Definition alternatives">
                              <criterion test_ref="oval:gov.irs.rhel5:tst:367" comment="Domain name server information should be sent or not sent by the DHCP server as appropriate."/>
                              <extend_definition definition_ref="oval:gov.irs.rhel5:def:219" comment="Dependency is met"/>
                              <extend_definition definition_ref="oval:gov.irs.rhel5:def:220" comment="Dependency is met"/>
                        </criteria>
                        <extend_definition definition_ref="oval:gov.irs.rhel5:def:10000" comment="Red Hat Enterprise Linux 5 is installed"/>
                  </criteria>
            </definition>
            <definition class="compliance" version="1" id="oval:gov.irs.rhel5:def:225">
                  <metadata>
                        <title>Minimize Served Information </title>
                        <affected family="unix">
                              <platform>Red Hat Enterprise Linux 5</platform>
                        </affected>
                        <reference ref_id="CCE-4243-2" source="CCE"/>
                        <description>Default routers should be sent or not sent by the DHCP server as appropriate.</description>
                  </metadata>
                  <criteria>
                        <criteria operator="OR" comment="Definition alternatives">
                              <criterion test_ref="oval:gov.irs.rhel5:tst:368" comment="Default routers should be sent or not sent by the DHCP server as appropriate."/>
                              <extend_definition definition_ref="oval:gov.irs.rhel5:def:219" comment="Dependency is met"/>
                              <extend_definition definition_ref="oval:gov.irs.rhel5:def:220" comment="Dependency is met"/>
                        </criteria>
                        <extend_definition definition_ref="oval:gov.irs.rhel5:def:10000" comment="Red Hat Enterprise Linux 5 is installed"/>
                  </criteria>
            </definition>
            <definition class="compliance" version="1" id="oval:gov.irs.rhel5:def:226">
                  <metadata>
                        <title>Minimize Served Information </title>
                        <affected family="unix">
                              <platform>Red Hat Enterprise Linux 5</platform>
                        </affected>
                        <reference ref_id="CCE-4389-3" source="CCE"/>
                        <description>Domain name should be sent or not sent by the DHCP server as appropriate.</description>
                  </metadata>
                  <criteria>
                        <criteria operator="OR" comment="Definition alternatives">
                              <criterion test_ref="oval:gov.irs.rhel5:tst:369" comment="Domain name should be sent or not sent by the DHCP server as appropriate."/>
                              <extend_definition definition_ref="oval:gov.irs.rhel5:def:219" comment="Dependency is met"/>
                              <extend_definition definition_ref="oval:gov.irs.rhel5:def:220" comment="Dependency is met"/>
                        </criteria>
                        <extend_definition definition_ref="oval:gov.irs.rhel5:def:10000" comment="Red Hat Enterprise Linux 5 is installed"/>
                  </criteria>
            </definition>
            <definition class="compliance" version="1" id="oval:gov.irs.rhel5:def:227">
                  <metadata>
                        <title>Minimize Served Information </title>
                        <affected family="unix">
                              <platform>Red Hat Enterprise Linux 5</platform>
                        </affected>
                        <reference ref_id="CCE-3913-1" source="CCE"/>
                        <description>NIS domain should be sent or not sent by the DHCP server as appropriate.</description>
                  </metadata>
                  <criteria>
                        <criteria operator="OR" comment="Definition alternatives">
                              <criterion test_ref="oval:gov.irs.rhel5:tst:370" comment="NIS domain should be sent or not sent by the DHCP server as appropriate."/>
                              <extend_definition definition_ref="oval:gov.irs.rhel5:def:219" comment="Dependency is met"/>
                              <extend_definition definition_ref="oval:gov.irs.rhel5:def:220" comment="Dependency is met"/>
                        </criteria>
                        <extend_definition definition_ref="oval:gov.irs.rhel5:def:10000" comment="Red Hat Enterprise Linux 5 is installed"/>
                  </criteria>
            </definition>
            <definition class="compliance" version="1" id="oval:gov.irs.rhel5:def:228">
                  <metadata>
                        <title>Minimize Served Information </title>
                        <affected family="unix">
                              <platform>Red Hat Enterprise Linux 5</platform>
                        </affected>
                        <reference ref_id="CCE-4169-9" source="CCE"/>
                        <description>NIS servers should be sent or not sent by the DHCP server as appropriate.</description>
                  </metadata>
                  <criteria>
                        <criteria operator="OR" comment="Definition alternatives">
                              <criterion test_ref="oval:gov.irs.rhel5:tst:371" comment="NIS servers should be sent or not sent by the DHCP server as appropriate."/>
                              <extend_definition definition_ref="oval:gov.irs.rhel5:def:219" comment="Dependency is met"/>
                              <extend_definition definition_ref="oval:gov.irs.rhel5:def:220" comment="Dependency is met"/>
                        </criteria>
                        <extend_definition definition_ref="oval:gov.irs.rhel5:def:10000" comment="Red Hat Enterprise Linux 5 is installed"/>
                  </criteria>
            </definition>
            <definition class="compliance" version="1" id="oval:gov.irs.rhel5:def:229">
                  <metadata>
                        <title>Minimize Served Information </title>
                        <affected family="unix">
                              <platform>Red Hat Enterprise Linux 5</platform>
                        </affected>
                        <reference ref_id="CCE-4318-2" source="CCE"/>
                        <description>Time offset should be sent or not sent by the DHCP server as appropriate.</description>
                  </metadata>
                  <criteria>
                        <criteria operator="OR" comment="Definition alternatives">
                              <criterion test_ref="oval:gov.irs.rhel5:tst:372" comment="Time offset should be sent or not sent by the DHCP server as appropriate."/>
                              <extend_definition definition_ref="oval:gov.irs.rhel5:def:219" comment="Dependency is met"/>
                              <extend_definition definition_ref="oval:gov.irs.rhel5:def:220" comment="Dependency is met"/>
                        </criteria>
                        <extend_definition definition_ref="oval:gov.irs.rhel5:def:10000" comment="Red Hat Enterprise Linux 5 is installed"/>
                  </criteria>
            </definition>
            <definition class="compliance" version="1" id="oval:gov.irs.rhel5:def:230">
                  <metadata>
                        <title>Minimize Served Information </title>
                        <affected family="unix">
                              <platform>Red Hat Enterprise Linux 5</platform>
                        </affected>
                        <reference ref_id="CCE-4319-0" source="CCE"/>
                        <description>NTP servers should be sent or not sent by the DHCP server as appropriate.</description>
                  </metadata>
                  <criteria>
                        <criteria operator="OR" comment="Definition alternatives">
                              <criterion test_ref="oval:gov.irs.rhel5:tst:373" comment="NTP servers should be sent or not sent by the DHCP server as appropriate."/>
                              <extend_definition definition_ref="oval:gov.irs.rhel5:def:219" comment="Dependency is met"/>
                              <extend_definition definition_ref="oval:gov.irs.rhel5:def:220" comment="Dependency is met"/>
                        </criteria>
                        <extend_definition definition_ref="oval:gov.irs.rhel5:def:10000" comment="Red Hat Enterprise Linux 5 is installed"/>
                  </criteria>
            </definition>
            <definition class="compliance" version="1" id="oval:gov.irs.rhel5:def:231">
                  <metadata>
                        <title>Configure Logging </title>
                        <affected family="unix">
                              <platform>Red Hat Enterprise Linux 5</platform>
                        </affected>
                        <reference ref_id="CCE-3733-3" source="CCE"/>
                        <description>dhcpd logging should be enabled or disabled as appropriate.</description>
                  </metadata>
                  <criteria>
                        <criteria operator="OR" comment="Definition alternatives">
                              <criterion test_ref="oval:gov.irs.rhel5:tst:374" comment="dhcpd logging should be enabled or disabled as appropriate."/>
                              <extend_definition definition_ref="oval:gov.irs.rhel5:def:219" comment="Dependency is met"/>
                              <extend_definition definition_ref="oval:gov.irs.rhel5:def:220" comment="Dependency is met"/>
                        </criteria>
                        <extend_definition definition_ref="oval:gov.irs.rhel5:def:10000" comment="Red Hat Enterprise Linux 5 is installed"/>
                  </criteria>
            </definition>
            <definition class="compliance" version="1" id="oval:gov.irs.rhel5:def:232">
                  <metadata>
                        <title>Service ntpd should be disabled</title>
                        <affected family="unix">
                              <platform>Red Hat Enterprise Linux 5</platform>
                        </affected>
                        <reference ref_id="CCE-4376-0" source="CCE"/>
                        <description>Service ntpd should be disabled</description>
                  </metadata>
                  <criteria>
                        <criterion test_ref="oval:gov.irs.rhel5:tst:375" comment="The ntpd service should not be started at runlevel 2"/>
                        <criterion test_ref="oval:gov.irs.rhel5:tst:376" comment="The ntpd service should not be started at runlevel 3"/>
                        <criterion test_ref="oval:gov.irs.rhel5:tst:377" comment="The ntpd service should not be started at runlevel 4"/>
                        <criterion test_ref="oval:gov.irs.rhel5:tst:378" comment="The ntpd service should not be started at runlevel 5"/>
                        <extend_definition definition_ref="oval:gov.irs.rhel5:def:10000" comment="Red Hat Enterprise Linux 5 is installed"/>
                  </criteria>
            </definition>
            <definition class="compliance" version="1" id="oval:gov.irs.rhel5:def:233">
                  <metadata>
                        <title>Deny All Access to ntpd by Default </title>
                        <affected family="unix">
                              <platform>Red Hat Enterprise Linux 5</platform>
                        </affected>
                        <reference ref_id="CCE-4134-3" source="CCE"/>
                        <description>Network access to ntpd should be allowed or denied as appropriate</description>
                  </metadata>
                  <criteria>
                        <criteria operator="OR" comment="Definition alternatives">
                              <criterion test_ref="oval:gov.irs.rhel5:tst:379" comment="Network access to ntpd should be allowed or denied as appropriate"/>
                              <extend_definition definition_ref="oval:gov.irs.rhel5:def:232" comment="Dependency is met"/>
                        </criteria>
                        <extend_definition definition_ref="oval:gov.irs.rhel5:def:10000" comment="Red Hat Enterprise Linux 5 is installed"/>
                  </criteria>
            </definition>
            <definition class="compliance" version="1" id="oval:gov.irs.rhel5:def:234">
                  <metadata>
                        <title>Specify a Remote NTP Server for Time Data </title>
                        <affected family="unix">
                              <platform>Red Hat Enterprise Linux 5</platform>
                        </affected>
                        <reference ref_id="CCE-4385-1" source="CCE"/>
                        <description>A remote NTP Server for time synchronization should be specified or not as appropriate</description>
                  </metadata>
                  <criteria>
                        <criteria operator="OR" comment="Definition alternatives">
                              <criterion test_ref="oval:gov.irs.rhel5:tst:380" comment="Unknown test stub"/>
                              <extend_definition definition_ref="oval:gov.irs.rhel5:def:232" comment="Dependency is met"/>
                        </criteria>
                        <extend_definition definition_ref="oval:gov.irs.rhel5:def:10000" comment="Red Hat Enterprise Linux 5 is installed"/>
                  </criteria>
            </definition>
            <definition class="compliance" version="1" id="oval:gov.irs.rhel5:def:235">
                  <metadata>
                        <title>Obtain NTP Software </title>
                        <affected family="unix">
                              <platform>Red Hat Enterprise Linux 5</platform>
                        </affected>
                        <reference ref_id="CCE-4032-9" source="CCE"/>
                        <description>OpenNTPD should be installed or uninstalled as appropriate</description>
                  </metadata>
                  <criteria>
                        <criteria operator="OR" comment="Definition alternatives">
                              <criterion test_ref="oval:gov.irs.rhel5:tst:381" comment="Unknown test stub"/>
                              <extend_definition definition_ref="oval:gov.irs.rhel5:def:232" comment="Dependency is met"/>
                        </criteria>
                        <extend_definition definition_ref="oval:gov.irs.rhel5:def:10000" comment="Red Hat Enterprise Linux 5 is installed"/>
                  </criteria>
            </definition>
            <definition class="compliance" version="1" id="oval:gov.irs.rhel5:def:236">
                  <metadata>
                        <title>Enable the NTP Daemon </title>
                        <affected family="unix">
                              <platform>Red Hat Enterprise Linux 5</platform>
                        </affected>
                        <reference ref_id="CCE-4424-8" source="CCE"/>
                        <description>The ntp daemon should be enabled or disabled as appropriate</description>
                  </metadata>
                  <criteria>
                        <criteria operator="OR" comment="Definition alternatives">
                              <criterion test_ref="oval:gov.irs.rhel5:tst:382" comment="The ntp daemon should be enabled or disabled as appropriate"/>
                              <extend_definition definition_ref="oval:gov.irs.rhel5:def:232" comment="Dependency is met"/>
                        </criteria>
                        <extend_definition definition_ref="oval:gov.irs.rhel5:def:10000" comment="Red Hat Enterprise Linux 5 is installed"/>
                  </criteria>
            </definition>
            <definition class="compliance" version="1" id="oval:gov.irs.rhel5:def:237">
                  <metadata>
                        <title>Configure the Client NTP Daemon to Use the Local Server</title>
                        <affected family="unix">
                              <platform>Red Hat Enterprise Linux 5</platform>
                        </affected>
                        <reference ref_id="CCE-3487-6" source="CCE"/>
                        <description>The ntp daemon synchronization server should be set appropriately</description>
                  </metadata>
                  <criteria>
                        <criteria operator="OR" comment="Definition alternatives">
                              <criterion test_ref="oval:gov.irs.rhel5:tst:383" comment="Unknown test stub"/>
                              <extend_definition definition_ref="oval:gov.irs.rhel5:def:232" comment="Dependency is met"/>
                        </criteria>
                        <extend_definition definition_ref="oval:gov.irs.rhel5:def:10000" comment="Red Hat Enterprise Linux 5 is installed"/>
                  </criteria>
            </definition>
            <definition class="compliance" version="1" id="oval:gov.irs.rhel5:def:238">
                  <metadata>
                        <title>Service sendmail should be enabled</title>
                        <affected family="unix">
                              <platform>Red Hat Enterprise Linux 5</platform>
                        </affected>
                        <reference ref_id="CCE-4416-4" source="CCE"/>
                        <description>Service sendmail should be enabled</description>
                  </metadata>
                  <criteria>
                        <criterion test_ref="oval:gov.irs.rhel5:tst:384" comment="The sendmail service should not be started at runlevel 2"/>
                        <criterion test_ref="oval:gov.irs.rhel5:tst:385" comment="The sendmail service should not be started at runlevel 3"/>
                        <criterion test_ref="oval:gov.irs.rhel5:tst:386" comment="The sendmail service should not be started at runlevel 4"/>
                        <criterion test_ref="oval:gov.irs.rhel5:tst:387" comment="The sendmail service should not be started at runlevel 5"/>
                        <extend_definition definition_ref="oval:gov.irs.rhel5:def:10000" comment="Red Hat Enterprise Linux 5 is installed"/>
                  </criteria>
            </definition>
            <definition class="compliance" version="1" id="oval:gov.irs.rhel5:def:239">
                  <metadata>
                        <title>Disable the Listening Sendmail Daemon </title>
                        <affected family="unix">
                              <platform>Red Hat Enterprise Linux 5</platform>
                        </affected>
                        <reference ref_id="CCE-4293-7" source="CCE"/>
                        <description>The listening sendmail daemon should be enabled or disabled as appropriate.</description>
                  </metadata>
                  <criteria>
                        <criterion test_ref="oval:gov.irs.rhel5:tst:388" comment="The listening sendmail daemon should be enabled or disabled as appropriate."/>
                        <extend_definition definition_ref="oval:gov.irs.rhel5:def:10000" comment="Red Hat Enterprise Linux 5 is installed"/>
                  </criteria>
            </definition>
            <definition class="compliance" version="1" id="oval:gov.irs.rhel5:def:240">
                  <metadata>
                        <title>Service ldap should be disabled</title>
                        <affected family="unix">
                              <platform>Red Hat Enterprise Linux 5</platform>
                        </affected>
                        <reference ref_id="CCE-3501-4" source="CCE"/>
                        <description>Service ldap should be disabled</description>
                  </metadata>
                  <criteria>
                        <criterion test_ref="oval:gov.irs.rhel5:tst:389" comment="The ldap service should not be started at runlevel 2"/>
                        <criterion test_ref="oval:gov.irs.rhel5:tst:390" comment="The ldap service should not be started at runlevel 3"/>
                        <criterion test_ref="oval:gov.irs.rhel5:tst:391" comment="The ldap service should not be started at runlevel 4"/>
                        <criterion test_ref="oval:gov.irs.rhel5:tst:392" comment="The ldap service should not be started at runlevel 5"/>
                        <extend_definition definition_ref="oval:gov.irs.rhel5:def:10000" comment="Red Hat Enterprise Linux 5 is installed"/>
                  </criteria>
            </definition>
            <definition class="compliance" version="1" id="oval:gov.irs.rhel5:def:253">
                  <metadata>
                        <title>File ownership for /var/lib/ldap/*</title>
                        <affected family="unix">
                              <platform>Red Hat Enterprise Linux 5</platform>
                        </affected>
                        <reference ref_id="CCE-4484-2" source="CCE"/>
                        <description>File ownership for /var/lib/ldap/*</description>
                  </metadata>
                  <criteria>
                        <criterion test_ref="oval:gov.irs.rhel5:tst:393" comment="File ownership check for /var/lib/ldap/*"/>
                        <extend_definition definition_ref="oval:gov.irs.rhel5:def:10000" comment="Red Hat Enterprise Linux 5 is installed"/>
                  </criteria>
            </definition>
            <definition class="compliance" version="1" id="oval:gov.irs.rhel5:def:254">
                  <metadata>
                        <title>File ownership for /var/lib/ldap/*</title>
                        <affected family="unix">
                              <platform>Red Hat Enterprise Linux 5</platform>
                        </affected>
                        <reference ref_id="CCE-4502-1" source="CCE"/>
                        <description>File ownership for /var/lib/ldap/*</description>
                  </metadata>
                  <criteria>
                        <criterion test_ref="oval:gov.irs.rhel5:tst:394" comment="File ownership check for /var/lib/ldap/*"/>
                        <extend_definition definition_ref="oval:gov.irs.rhel5:def:10000" comment="Red Hat Enterprise Linux 5 is installed"/>
                  </criteria>
            </definition>
            <definition class="compliance" version="1" id="oval:gov.irs.rhel5:def:255">
                  <metadata>
                        <title>Service nfslock should be disabled</title>
                        <affected family="unix">
                              <platform>Red Hat Enterprise Linux 5</platform>
                        </affected>
                        <reference ref_id="CCE-4396-8" source="CCE"/>
                        <description>Service nfslock should be disabled</description>
                  </metadata>
                  <criteria>
                        <criterion test_ref="oval:gov.irs.rhel5:tst:395" comment="The nfslock service should not be started at runlevel 2"/>
                        <criterion test_ref="oval:gov.irs.rhel5:tst:396" comment="The nfslock service should not be started at runlevel 3"/>
                        <criterion test_ref="oval:gov.irs.rhel5:tst:397" comment="The nfslock service should not be started at runlevel 4"/>
                        <criterion test_ref="oval:gov.irs.rhel5:tst:398" comment="The nfslock service should not be started at runlevel 5"/>
                        <extend_definition definition_ref="oval:gov.irs.rhel5:def:10000" comment="Red Hat Enterprise Linux 5 is installed"/>
                  </criteria>
            </definition>
            <definition class="compliance" version="1" id="oval:gov.irs.rhel5:def:256">
                  <metadata>
                        <title>Service rpcgssd should be disabled</title>
                        <affected family="unix">
                              <platform>Red Hat Enterprise Linux 5</platform>
                        </affected>
                        <reference ref_id="CCE-3535-2" source="CCE"/>
                        <description>Service rpcgssd should be disabled</description>
                  </metadata>
                  <criteria>
                        <criterion test_ref="oval:gov.irs.rhel5:tst:399" comment="The rpcgssd service should not be started at runlevel 2"/>
                        <criterion test_ref="oval:gov.irs.rhel5:tst:400" comment="The rpcgssd service should not be started at runlevel 3"/>
                        <criterion test_ref="oval:gov.irs.rhel5:tst:401" comment="The rpcgssd service should not be started at runlevel 4"/>
                        <criterion test_ref="oval:gov.irs.rhel5:tst:402" comment="The rpcgssd service should not be started at runlevel 5"/>
                        <extend_definition definition_ref="oval:gov.irs.rhel5:def:10000" comment="Red Hat Enterprise Linux 5 is installed"/>
                  </criteria>
            </definition>
            <definition class="compliance" version="1" id="oval:gov.irs.rhel5:def:257">
                  <metadata>
                        <title>Service rpcidmapd should be disabled</title>
                        <affected family="unix">
                              <platform>Red Hat Enterprise Linux 5</platform>
                        </affected>
                        <reference ref_id="CCE-3568-3" source="CCE"/>
                        <description>Service rpcidmapd should be disabled</description>
                  </metadata>
                  <criteria>
                        <criterion test_ref="oval:gov.irs.rhel5:tst:403" comment="The rpcidmapd service should not be started at runlevel 2"/>
                        <criterion test_ref="oval:gov.irs.rhel5:tst:404" comment="The rpcidmapd service should not be started at runlevel 3"/>
                        <criterion test_ref="oval:gov.irs.rhel5:tst:405" comment="The rpcidmapd service should not be started at runlevel 4"/>
                        <criterion test_ref="oval:gov.irs.rhel5:tst:406" comment="The rpcidmapd service should not be started at runlevel 5"/>
                        <extend_definition definition_ref="oval:gov.irs.rhel5:def:10000" comment="Red Hat Enterprise Linux 5 is installed"/>
                  </criteria>
            </definition>
            <definition class="compliance" version="1" id="oval:gov.irs.rhel5:def:258">
                  <metadata>
                        <title>Service netfs should be disabled</title>
                        <affected family="unix">
                              <platform>Red Hat Enterprise Linux 5</platform>
                        </affected>
                        <reference ref_id="CCE-4533-6" source="CCE"/>
                        <description>Service netfs should be disabled</description>
                  </metadata>
                  <criteria>
                        <criterion test_ref="oval:gov.irs.rhel5:tst:407" comment="The netfs service should not be started at runlevel 2"/>
                        <criterion test_ref="oval:gov.irs.rhel5:tst:408" comment="The netfs service should not be started at runlevel 3"/>
                        <criterion test_ref="oval:gov.irs.rhel5:tst:409" comment="The netfs service should not be started at runlevel 4"/>
                        <criterion test_ref="oval:gov.irs.rhel5:tst:410" comment="The netfs service should not be started at runlevel 5"/>
                        <extend_definition definition_ref="oval:gov.irs.rhel5:def:10000" comment="Red Hat Enterprise Linux 5 is installed"/>
                  </criteria>
            </definition>
            <definition class="compliance" version="1" id="oval:gov.irs.rhel5:def:259">
                  <metadata>
                        <title>Service portmap should be disabled</title>
                        <affected family="unix">
                              <platform>Red Hat Enterprise Linux 5</platform>
                        </affected>
                        <reference ref_id="CCE-4550-0" source="CCE"/>
                        <description>Service portmap should be disabled</description>
                  </metadata>
                  <criteria>
                        <criterion test_ref="oval:gov.irs.rhel5:tst:411" comment="The portmap service should not be started at runlevel 2"/>
                        <criterion test_ref="oval:gov.irs.rhel5:tst:412" comment="The portmap service should not be started at runlevel 3"/>
                        <criterion test_ref="oval:gov.irs.rhel5:tst:413" comment="The portmap service should not be started at runlevel 4"/>
                        <criterion test_ref="oval:gov.irs.rhel5:tst:414" comment="The portmap service should not be started at runlevel 5"/>
                        <extend_definition definition_ref="oval:gov.irs.rhel5:def:10000" comment="Red Hat Enterprise Linux 5 is installed"/>
                  </criteria>
            </definition>
            <definition class="compliance" version="1" id="oval:gov.irs.rhel5:def:260">
                  <metadata>
                        <title>Configure NFS Services to Use Fixed Ports </title>
                        <affected family="unix">
                              <platform>Red Hat Enterprise Linux 5</platform>
                        </affected>
                        <reference ref_id="CCE-4559-1" source="CCE"/>
                        <description>The lockd service should be configured to use a static port or a dynamic portmapper port for TCP as appropriate</description>
                  </metadata>
                  <criteria>
                        <criterion test_ref="oval:gov.irs.rhel5:tst:415" comment="The lockd service should be configured to use a static port or a dynamic portmapper port for TCP as appropriate"/>
                        <extend_definition definition_ref="oval:gov.irs.rhel5:def:10000" comment="Red Hat Enterprise Linux 5 is installed"/>
                  </criteria>
            </definition>
            <definition class="compliance" version="1" id="oval:gov.irs.rhel5:def:261">
                  <metadata>
                        <title>Configure NFS Services to Use Fixed Ports </title>
                        <affected family="unix">
                              <platform>Red Hat Enterprise Linux 5</platform>
                        </affected>
                        <reference ref_id="CCE-4015-4" source="CCE"/>
                        <description>The statd service should be configured to use an outgoing static port or an outgoing dynamic portmapper port as appropriate</description>
                  </metadata>
                  <criteria>
                        <criterion test_ref="oval:gov.irs.rhel5:tst:416" comment="The statd service should be configured to use an outgoing static port or an outgoing dynamic portmapper port as appropriate"/>
                        <extend_definition definition_ref="oval:gov.irs.rhel5:def:10000" comment="Red Hat Enterprise Linux 5 is installed"/>
                  </criteria>
            </definition>
            <definition class="compliance" version="1" id="oval:gov.irs.rhel5:def:262">
                  <metadata>
                        <title>Configure NFS Services to Use Fixed Ports </title>
                        <affected family="unix">
                              <platform>Red Hat Enterprise Linux 5</platform>
                        </affected>
                        <reference ref_id="CCE-3667-3" source="CCE"/>
                        <description>The statd service should be configured to use a static port or a dynamic portmapper port as appropriate</description>
                  </metadata>
                  <criteria>
                        <criterion test_ref="oval:gov.irs.rhel5:tst:417" comment="The statd service should be configured to use a static port or a dynamic portmapper port as appropriate"/>
                        <extend_definition definition_ref="oval:gov.irs.rhel5:def:10000" comment="Red Hat Enterprise Linux 5 is installed"/>
                  </criteria>
            </definition>
            <definition class="compliance" version="1" id="oval:gov.irs.rhel5:def:263">
                  <metadata>
                        <title>Configure NFS Services to Use Fixed Ports </title>
                        <affected family="unix">
                              <platform>Red Hat Enterprise Linux 5</platform>
                        </affected>
                        <reference ref_id="CCE-4310-9" source="CCE"/>
                        <description>The lockd service should be configured to use a static port or a dynamic portmapper port for UDP as appropriate</description>
                  </metadata>
                  <criteria>
                        <criterion test_ref="oval:gov.irs.rhel5:tst:418" comment="The lockd service should be configured to use a static port or a dynamic portmapper port for UDP as appropriate"/>
                        <extend_definition definition_ref="oval:gov.irs.rhel5:def:10000" comment="Red Hat Enterprise Linux 5 is installed"/>
                  </criteria>
            </definition>
            <definition class="compliance" version="1" id="oval:gov.irs.rhel5:def:264">
                  <metadata>
                        <title>Configure NFS Services to Use Fixed Ports </title>
                        <affected family="unix">
                              <platform>Red Hat Enterprise Linux 5</platform>
                        </affected>
                        <reference ref_id="CCE-4438-8" source="CCE"/>
                        <description>The mountd service should be configured to use a static port or a dynamic portmapper port as appropriate</description>
                  </metadata>
                  <criteria>
                        <criterion test_ref="oval:gov.irs.rhel5:tst:419" comment="The mountd service should be configured to use a static port or a dynamic portmapper port as appropriate"/>
                        <extend_definition definition_ref="oval:gov.irs.rhel5:def:10000" comment="Red Hat Enterprise Linux 5 is installed"/>
                  </criteria>
            </definition>
            <definition class="compliance" version="1" id="oval:gov.irs.rhel5:def:265">
                  <metadata>
                        <title>Configure NFS Services to Use Fixed Ports </title>
                        <affected family="unix">
                              <platform>Red Hat Enterprise Linux 5</platform>
                        </affected>
                        <reference ref_id="CCE-3579-0" source="CCE"/>
                        <description>The rquotad service should be configured to use a static port or a dynamic portmapper port as appropriate</description>
                  </metadata>
                  <criteria>
                        <criterion test_ref="oval:gov.irs.rhel5:tst:420" comment="The rquotad service should be configured to use a static port or a dynamic portmapper port as appropriate"/>
                        <extend_definition definition_ref="oval:gov.irs.rhel5:def:10000" comment="Red Hat Enterprise Linux 5 is installed"/>
                  </criteria>
            </definition>
            <definition class="compliance" version="1" id="oval:gov.irs.rhel5:def:266">
                  <metadata>
                        <title>Service nfs should be disabled</title>
                        <affected family="unix">
                              <platform>Red Hat Enterprise Linux 5</platform>
                        </affected>
                        <reference ref_id="CCE-4473-5" source="CCE"/>
                        <description>Service nfs should be disabled</description>
                  </metadata>
                  <criteria>
                        <criterion test_ref="oval:gov.irs.rhel5:tst:421" comment="The nfs service should not be started at runlevel 2"/>
                        <criterion test_ref="oval:gov.irs.rhel5:tst:422" comment="The nfs service should not be started at runlevel 3"/>
                        <criterion test_ref="oval:gov.irs.rhel5:tst:423" comment="The nfs service should not be started at runlevel 4"/>
                        <criterion test_ref="oval:gov.irs.rhel5:tst:424" comment="The nfs service should not be started at runlevel 5"/>
                        <extend_definition definition_ref="oval:gov.irs.rhel5:def:10000" comment="Red Hat Enterprise Linux 5 is installed"/>
                  </criteria>
            </definition>
            <definition class="compliance" version="1" id="oval:gov.irs.rhel5:def:267">
                  <metadata>
                        <title>Service rpcsvcgssd should be disabled</title>
                        <affected family="unix">
                              <platform>Red Hat Enterprise Linux 5</platform>
                        </affected>
                        <reference ref_id="CCE-4491-7" source="CCE"/>
                        <description>Service rpcsvcgssd should be disabled</description>
                  </metadata>
                  <criteria>
                        <criterion test_ref="oval:gov.irs.rhel5:tst:425" comment="The rpcsvcgssd service should not be started at runlevel 2"/>
                        <criterion test_ref="oval:gov.irs.rhel5:tst:426" comment="The rpcsvcgssd service should not be started at runlevel 3"/>
                        <criterion test_ref="oval:gov.irs.rhel5:tst:427" comment="The rpcsvcgssd service should not be started at runlevel 4"/>
                        <criterion test_ref="oval:gov.irs.rhel5:tst:428" comment="The rpcsvcgssd service should not be started at runlevel 5"/>
                        <extend_definition definition_ref="oval:gov.irs.rhel5:def:10000" comment="Red Hat Enterprise Linux 5 is installed"/>
                  </criteria>
            </definition>
            <definition class="compliance" version="1" id="oval:gov.irs.rhel5:def:268">
                  <metadata>
                        <title>The nodev option should be enabled or disabled for all NFS mounts as appropriate</title>
                        <affected family="unix">
                              <platform>Red Hat Enterprise Linux 5</platform>
                        </affected>
                        <reference ref_id="CCE-4368-7" source="CCE"/>
                        <description>The nodev option should be enabled or disabled for all NFS mounts as appropriate</description>
                  </metadata>
                  <criteria>
                        <criterion test_ref="oval:gov.irs.rhel5:tst:429"/>
                        <extend_definition definition_ref="oval:gov.irs.rhel5:def:10000" comment="Red Hat Enterprise Linux 5 is installed"/>
                  </criteria>
            </definition>
            <definition class="compliance" version="1" id="oval:gov.irs.rhel5:def:269">
                  <metadata>
                        <title>The nosuid option should be enabled or disabled for all NFS mounts as appropriate</title>
                        <affected family="unix">
                              <platform>Red Hat Enterprise Linux 5</platform>
                        </affected>
                        <reference ref_id="CCE-4024-6" source="CCE"/>
                        <description>The nosuid option should be enabled or disabled for all NFS mounts as appropriate</description>
                  </metadata>
                  <criteria>
                        <criterion test_ref="oval:gov.irs.rhel5:tst:430"/>
                        <extend_definition definition_ref="oval:gov.irs.rhel5:def:10000" comment="Red Hat Enterprise Linux 5 is installed"/>
                  </criteria>
            </definition>
            <definition class="compliance" version="1" id="oval:gov.irs.rhel5:def:270">
                  <metadata>
                        <title>The noexec option should be enabled or disabled for all NFS mounts as appropriate</title>
                        <affected family="unix">
                              <platform>Red Hat Enterprise Linux 5</platform>
                        </affected>
                        <reference ref_id="CCE-4526-0" source="CCE"/>
                        <description>The noexec option should be enabled or disabled for all NFS mounts as appropriate</description>
                  </metadata>
                  <criteria>
                        <criterion test_ref="oval:gov.irs.rhel5:tst:431"/>
                        <extend_definition definition_ref="oval:gov.irs.rhel5:def:10000" comment="Red Hat Enterprise Linux 5 is installed"/>
                  </criteria>
            </definition>
            <definition class="compliance" version="1" id="oval:gov.irs.rhel5:def:271">
                  <metadata>
                        <title>Use Root-Squashing on All Exports </title>
                        <affected family="unix">
                              <platform>Red Hat Enterprise Linux 5</platform>
                        </affected>
                        <reference ref_id="CCE-4544-3" source="CCE"/>
                        <description>Root squashing should be enabled or disabled as appropriate for all NFS shares</description>
                  </metadata>
                  <criteria>
                        <criterion test_ref="oval:gov.irs.rhel5:tst:432" comment="Root squashing should be enabled or disabled as appropriate for all NFS shares"/>
                        <extend_definition definition_ref="oval:gov.irs.rhel5:def:10000" comment="Red Hat Enterprise Linux 5 is installed"/>
                  </criteria>
            </definition>
            <definition class="compliance" version="1" id="oval:gov.irs.rhel5:def:272">
                  <metadata>
                        <title>Restrict NFS Clients to Privileged Ports </title>
                        <affected family="unix">
                              <platform>Red Hat Enterprise Linux 5</platform>
                        </affected>
                        <reference ref_id="CCE-4465-1" source="CCE"/>
                        <description>Restriction of NFS clients to privileged ports should be enabled or disabled as appropriate</description>
                  </metadata>
                  <criteria>
                        <criterion test_ref="oval:gov.irs.rhel5:tst:433" comment="Restriction of NFS clients to privileged ports should be enabled or disabled as appropriate"/>
                        <extend_definition definition_ref="oval:gov.irs.rhel5:def:10000" comment="Red Hat Enterprise Linux 5 is installed"/>
                  </criteria>
            </definition>
            <definition class="compliance" version="1" id="oval:gov.irs.rhel5:def:273">
                  <metadata>
                        <title>Export Filesystems Read-Only if Possible </title>
                        <affected family="unix">
                              <platform>Red Hat Enterprise Linux 5</platform>
                        </affected>
                        <reference ref_id="CCE-4350-5" source="CCE"/>
                        <description>Write access to NFS shares should be enabled or disabled as appropriate</description>
                  </metadata>
                  <criteria>
                        <criterion test_ref="oval:gov.irs.rhel5:tst:434" comment="Write access to NFS shares should be enabled or disabled as appropriate"/>
                        <extend_definition definition_ref="oval:gov.irs.rhel5:def:10000" comment="Red Hat Enterprise Linux 5 is installed"/>
                  </criteria>
            </definition>
            <definition class="compliance" version="1" id="oval:gov.irs.rhel5:def:274">
                  <metadata>
                        <title>Service named should be disabled</title>
                        <affected family="unix">
                              <platform>Red Hat Enterprise Linux 5</platform>
                        </affected>
                        <reference ref_id="CCE-3578-2" source="CCE"/>
                        <description>Service named should be disabled</description>
                  </metadata>
                  <criteria>
                        <criterion test_ref="oval:gov.irs.rhel5:tst:435" comment="The named service should not be started at runlevel 2"/>
                        <criterion test_ref="oval:gov.irs.rhel5:tst:436" comment="The named service should not be started at runlevel 3"/>
                        <criterion test_ref="oval:gov.irs.rhel5:tst:437" comment="The named service should not be started at runlevel 4"/>
                        <criterion test_ref="oval:gov.irs.rhel5:tst:438" comment="The named service should not be started at runlevel 5"/>
                        <extend_definition definition_ref="oval:gov.irs.rhel5:def:10000" comment="Red Hat Enterprise Linux 5 is installed"/>
                  </criteria>
            </definition>
            <definition class="compliance" version="1" id="oval:gov.irs.rhel5:def:275">
                  <metadata>
                        <title>The bind package should not be installed</title>
                        <affected family="unix">
                              <platform>Red Hat Enterprise Linux 5</platform>
                        </affected>
                        <reference ref_id="CCE-4219-2" source="CCE"/>
                        <description>The bind package should not be installed</description>
                  </metadata>
                  <criteria>
                        <criterion test_ref="oval:gov.irs.rhel5:tst:439" comment="The bind package should not be installed"/>
                        <extend_definition definition_ref="oval:gov.irs.rhel5:def:10000" comment="Red Hat Enterprise Linux 5 is installed"/>
                  </criteria>
            </definition>
            <definition class="compliance" version="1" id="oval:gov.irs.rhel5:def:276">
                  <metadata>
                        <title>File ownership for /var/named/chroot/etc/named.conf</title>
                        <affected family="unix">
                              <platform>Red Hat Enterprise Linux 5</platform>
                        </affected>
                        <reference ref_id="CCE-3985-9" source="CCE"/>
                        <description>File ownership for /var/named/chroot/etc/named.conf</description>
                  </metadata>
                  <criteria>
                        <criteria operator="OR" comment="Definition alternatives">
                              <criterion test_ref="oval:gov.irs.rhel5:tst:440" comment="File ownership check for /var/named/chroot/etc/named.conf"/>
                              <extend_definition definition_ref="oval:gov.irs.rhel5:def:274" comment="Dependency is met"/>
                              <extend_definition definition_ref="oval:gov.irs.rhel5:def:275" comment="Dependency is met"/>
                        </criteria>
                        <extend_definition definition_ref="oval:gov.irs.rhel5:def:10000" comment="Red Hat Enterprise Linux 5 is installed"/>
                  </criteria>
            </definition>
            <definition class="compliance" version="1" id="oval:gov.irs.rhel5:def:277">
                  <metadata>
                        <title>File permissions for /var/named/chroot/etc/named.conf</title>
                        <affected family="unix">
                              <platform>Red Hat Enterprise Linux 5</platform>
                        </affected>
                        <reference ref_id="CCE-4487-5" source="CCE"/>
                        <description>File permissions for /var/named/chroot/etc/named.conf should be set to 644</description>
                  </metadata>
                  <criteria>
                        <criteria operator="OR" comment="Definition alternatives">
                              <criterion test_ref="oval:gov.irs.rhel5:tst:441" comment="File permissions test for /var/named/chroot/etc/named.conf"/>
                              <extend_definition definition_ref="oval:gov.irs.rhel5:def:274" comment="Dependency is met"/>
                              <extend_definition definition_ref="oval:gov.irs.rhel5:def:275" comment="Dependency is met"/>
                        </criteria>
                        <extend_definition definition_ref="oval:gov.irs.rhel5:def:10000" comment="Red Hat Enterprise Linux 5 is installed"/>
                  </criteria>
            </definition>
            <definition class="compliance" version="1" id="oval:gov.irs.rhel5:def:278">
                  <metadata>
                        <title>File ownership for /var/named/chroot/etc/named.conf</title>
                        <affected family="unix">
                              <platform>Red Hat Enterprise Linux 5</platform>
                        </affected>
                        <reference ref_id="CCE-4258-0" source="CCE"/>
                        <description>File ownership for /var/named/chroot/etc/named.conf</description>
                  </metadata>
                  <criteria>
                        <criteria operator="OR" comment="Definition alternatives">
                              <criterion test_ref="oval:gov.irs.rhel5:tst:442" comment="File ownership check for /var/named/chroot/etc/named.conf"/>
                              <extend_definition definition_ref="oval:gov.irs.rhel5:def:274" comment="Dependency is met"/>
                              <extend_definition definition_ref="oval:gov.irs.rhel5:def:275" comment="Dependency is met"/>
                        </criteria>
                        <extend_definition definition_ref="oval:gov.irs.rhel5:def:10000" comment="Red Hat Enterprise Linux 5 is installed"/>
                  </criteria>
            </definition>
            <definition class="compliance" version="1" id="oval:gov.irs.rhel5:def:279">
                  <metadata>
                        <title>Disable Dynamic Updates if Possible </title>
                        <affected family="unix">
                              <platform>Red Hat Enterprise Linux 5</platform>
                        </affected>
                        <reference ref_id="CCE-4399-2" source="CCE"/>
                        <description>LDAP's dynamic updates feature should be enabled or disabled as appropriate</description>
                  </metadata>
                  <criteria>
                        <criteria operator="OR" comment="Definition alternatives">
                              <criterion test_ref="oval:gov.irs.rhel5:tst:443" comment="Unknown test stub"/>
                              <extend_definition definition_ref="oval:gov.irs.rhel5:def:274" comment="Dependency is met"/>
                              <extend_definition definition_ref="oval:gov.irs.rhel5:def:275" comment="Dependency is met"/>
                        </criteria>
                        <extend_definition definition_ref="oval:gov.irs.rhel5:def:10000" comment="Red Hat Enterprise Linux 5 is installed"/>
                  </criteria>
            </definition>
            <definition class="compliance" version="1" id="oval:gov.irs.rhel5:def:280">
                  <metadata>
                        <title>Service vsftpd should be disabled</title>
                        <affected family="unix">
                              <platform>Red Hat Enterprise Linux 5</platform>
                        </affected>
                        <reference ref_id="CCE-3919-8" source="CCE"/>
                        <description>Service vsftpd should be disabled</description>
                  </metadata>
                  <criteria>
                        <criterion test_ref="oval:gov.irs.rhel5:tst:444" comment="The vsftpd service should not be started at runlevel 2"/>
                        <criterion test_ref="oval:gov.irs.rhel5:tst:445" comment="The vsftpd service should not be started at runlevel 3"/>
                        <criterion test_ref="oval:gov.irs.rhel5:tst:446" comment="The vsftpd service should not be started at runlevel 4"/>
                        <criterion test_ref="oval:gov.irs.rhel5:tst:447" comment="The vsftpd service should not be started at runlevel 5"/>
                        <extend_definition definition_ref="oval:gov.irs.rhel5:def:10000" comment="Red Hat Enterprise Linux 5 is installed"/>
                  </criteria>
            </definition>
            <definition class="compliance" version="1" id="oval:gov.irs.rhel5:def:281">
                  <metadata>
                        <title>Enable Logging of All FTP Transactions </title>
                        <affected family="unix">
                              <platform>Red Hat Enterprise Linux 5</platform>
                        </affected>
                        <reference ref_id="CCE-4549-2" source="CCE"/>
                        <description>Logging of vsftpd transactions should be enabled or disabled as appropriate</description>
                  </metadata>
                  <criteria>
                        <criteria operator="OR" comment="Definition alternatives">
                              <criteria>
                                    <criterion test_ref="oval:gov.irs.rhel5:tst:448"/>
                                    <criterion test_ref="oval:gov.irs.rhel5:tst:449"/>
                              </criteria>
                              <extend_definition definition_ref="oval:gov.irs.rhel5:def:280" comment="Dependency is met"/>
                        </criteria>
                        <extend_definition definition_ref="oval:gov.irs.rhel5:def:10000" comment="Red Hat Enterprise Linux 5 is installed"/>
                  </criteria>
            </definition>
            <definition class="compliance" version="1" id="oval:gov.irs.rhel5:def:282">
                  <metadata>
                        <title>Create Warning Banners for All FTP Users </title>
                        <affected family="unix">
                              <platform>Red Hat Enterprise Linux 5</platform>
                        </affected>
                        <reference ref_id="CCE-4554-2" source="CCE"/>
                        <description>A warning banner for all FTP users should be enabled or disabled as appropriate</description>
                  </metadata>
                  <criteria>
                        <criteria operator="OR" comment="Definition alternatives">
                              <criterion test_ref="oval:gov.irs.rhel5:tst:450" comment="A warning banner for all FTP users should be enabled or disabled as appropriate"/>
                              <extend_definition definition_ref="oval:gov.irs.rhel5:def:280" comment="Dependency is met"/>
                        </criteria>
                        <extend_definition definition_ref="oval:gov.irs.rhel5:def:10000" comment="Red Hat Enterprise Linux 5 is installed"/>
                  </criteria>
            </definition>
            <definition class="compliance" version="1" id="oval:gov.irs.rhel5:def:283">
                  <metadata>
                        <title>Restrict Access to Anonymous Users if Possible </title>
                        <affected family="unix">
                              <platform>Red Hat Enterprise Linux 5</platform>
                        </affected>
                        <reference ref_id="CCE-4443-8" source="CCE"/>
                        <description>Local user login to the vsftpd service should be enabled or disabled as appropriate</description>
                  </metadata>
                  <criteria>
                        <criteria operator="OR" comment="Definition alternatives">
                              <criterion test_ref="oval:gov.irs.rhel5:tst:451" comment="Local user login to the vsftpd service should be enabled or disabled as appropriate"/>
                              <extend_definition definition_ref="oval:gov.irs.rhel5:def:280" comment="Dependency is met"/>
                        </criteria>
                        <extend_definition definition_ref="oval:gov.irs.rhel5:def:10000" comment="Red Hat Enterprise Linux 5 is installed"/>
                  </criteria>
            </definition>
            <definition class="compliance" version="1" id="oval:gov.irs.rhel5:def:284">
                  <metadata>
                        <title>Disable FTP Uploads if Possible </title>
                        <affected family="unix">
                              <platform>Red Hat Enterprise Linux 5</platform>
                        </affected>
                        <reference ref_id="CCE-4461-0" source="CCE"/>
                        <description>File uploads via vsftpd should be enabled or disabled as appropriate</description>
                  </metadata>
                  <criteria>
                        <criteria operator="OR" comment="Definition alternatives">
                              <criterion test_ref="oval:gov.irs.rhel5:tst:452" comment="File uploads via vsftpd should be enabled or disabled as appropriate"/>
                              <extend_definition definition_ref="oval:gov.irs.rhel5:def:280" comment="Dependency is met"/>
                        </criteria>
                        <extend_definition definition_ref="oval:gov.irs.rhel5:def:10000" comment="Red Hat Enterprise Linux 5 is installed"/>
                  </criteria>
            </definition>
            <definition class="compliance" version="1" id="oval:gov.irs.rhel5:def:285">
                  <metadata>
                        <title>Service httpd should be disabled</title>
                        <affected family="unix">
                              <platform>Red Hat Enterprise Linux 5</platform>
                        </affected>
                        <reference ref_id="CCE-4338-0" source="CCE"/>
                        <description>Service httpd should be disabled</description>
                  </metadata>
                  <criteria>
                        <criterion test_ref="oval:gov.irs.rhel5:tst:453" comment="The httpd service should not be started at runlevel 2"/>
                        <criterion test_ref="oval:gov.irs.rhel5:tst:454" comment="The httpd service should not be started at runlevel 3"/>
                        <criterion test_ref="oval:gov.irs.rhel5:tst:455" comment="The httpd service should not be started at runlevel 4"/>
                        <criterion test_ref="oval:gov.irs.rhel5:tst:456" comment="The httpd service should not be started at runlevel 5"/>
                        <extend_definition definition_ref="oval:gov.irs.rhel5:def:10000" comment="Red Hat Enterprise Linux 5 is installed"/>
                  </criteria>
            </definition>
            <definition class="compliance" version="1" id="oval:gov.irs.rhel5:def:286">
                  <metadata>
                        <title>The httpd package should not be installed</title>
                        <affected family="unix">
                              <platform>Red Hat Enterprise Linux 5</platform>
                        </affected>
                        <reference ref_id="CCE-4514-6" source="CCE"/>
                        <description>The httpd package should not be installed</description>
                  </metadata>
                  <criteria>
                        <criterion test_ref="oval:gov.irs.rhel5:tst:457" comment="The httpd package should not be installed"/>
                        <extend_definition definition_ref="oval:gov.irs.rhel5:def:10000" comment="Red Hat Enterprise Linux 5 is installed"/>
                  </criteria>
            </definition>
            <definition class="compliance" version="1" id="oval:gov.irs.rhel5:def:288">
                  <metadata>
                        <title>Restrict Information Leakage </title>
                        <affected family="unix">
                              <platform>Red Hat Enterprise Linux 5</platform>
                        </affected>
                        <reference ref_id="CCE-4474-3" source="CCE"/>
                        <description>The apache2 server's ServerTokens value should be set appropriately</description>
                  </metadata>
                  <criteria>
                        <criteria operator="OR" comment="Definition alternatives">
                              <criterion test_ref="oval:gov.irs.rhel5:tst:458" comment="The apache2 server's ServerTokens value should be set appropriately"/>
                              <extend_definition definition_ref="oval:gov.irs.rhel5:def:285" comment="Dependency is met"/>
                              <extend_definition definition_ref="oval:gov.irs.rhel5:def:286" comment="Dependency is met"/>
                        </criteria>
                        <extend_definition definition_ref="oval:gov.irs.rhel5:def:10000" comment="Red Hat Enterprise Linux 5 is installed"/>
                  </criteria>
            </definition>
            <definition class="compliance" version="1" id="oval:gov.irs.rhel5:def:289">
                  <metadata>
                        <title>Restrict Information Leakage </title>
                        <affected family="unix">
                              <platform>Red Hat Enterprise Linux 5</platform>
                        </affected>
                        <reference ref_id="CCE-3756-4" source="CCE"/>
                        <description>The apache2 server's ServerSignature value should be set appropriately</description>
                  </metadata>
                  <criteria>
                        <criteria operator="OR" comment="Definition alternatives">
                              <criterion test_ref="oval:gov.irs.rhel5:tst:459" comment="The apache2 server's ServerSignature value should be set appropriately"/>
                              <extend_definition definition_ref="oval:gov.irs.rhel5:def:285" comment="Dependency is met"/>
                              <extend_definition definition_ref="oval:gov.irs.rhel5:def:286" comment="Dependency is met"/>
                        </criteria>
                        <extend_definition definition_ref="oval:gov.irs.rhel5:def:10000" comment="Red Hat Enterprise Linux 5 is installed"/>
                  </criteria>
            </definition>
            <definition class="compliance" version="1" id="oval:gov.irs.rhel5:def:290">
                  <metadata>
                        <title>File permissions for /etc/httpd/conf</title>
                        <affected family="unix">
                              <platform>Red Hat Enterprise Linux 5</platform>
                        </affected>
                        <reference ref_id="CCE-4509-6" source="CCE"/>
                        <description>File permissions for /etc/httpd/conf should be set to 750</description>
                  </metadata>
                  <criteria>
                        <criteria operator="OR" comment="Definition alternatives">
                              <criterion test_ref="oval:gov.irs.rhel5:tst:460" comment="File permissions test for /etc/httpd/conf"/>
                              <extend_definition definition_ref="oval:gov.irs.rhel5:def:285" comment="Dependency is met"/>
                              <extend_definition definition_ref="oval:gov.irs.rhel5:def:286" comment="Dependency is met"/>
                        </criteria>
                        <extend_definition definition_ref="oval:gov.irs.rhel5:def:10000" comment="Red Hat Enterprise Linux 5 is installed"/>
                  </criteria>
            </definition>
            <definition class="compliance" version="1" id="oval:gov.irs.rhel5:def:291">
                  <metadata>
                        <title>File permissions for /etc/httpd/conf/*</title>
                        <affected family="unix">
                              <platform>Red Hat Enterprise Linux 5</platform>
                        </affected>
                        <reference ref_id="CCE-4386-9" source="CCE"/>
                        <description>File permissions for /etc/httpd/conf/* should be set to 640</description>
                  </metadata>
                  <criteria>
                        <criteria operator="OR" comment="Definition alternatives">
                              <criterion test_ref="oval:gov.irs.rhel5:tst:461" comment="File permissions test for /etc/httpd/conf/*"/>
                              <extend_definition definition_ref="oval:gov.irs.rhel5:def:285" comment="Dependency is met"/>
                              <extend_definition definition_ref="oval:gov.irs.rhel5:def:286" comment="Dependency is met"/>
                        </criteria>
                        <extend_definition definition_ref="oval:gov.irs.rhel5:def:10000" comment="Red Hat Enterprise Linux 5 is installed"/>
                  </criteria>
            </definition>
            <definition class="compliance" version="1" id="oval:gov.irs.rhel5:def:292">
                  <metadata>
                        <title>File permissions for /usr/sbin/httpd</title>
                        <affected family="unix">
                              <platform>Red Hat Enterprise Linux 5</platform>
                        </affected>
                        <reference ref_id="CCE-4029-5" source="CCE"/>
                        <description>File permissions for /usr/sbin/httpd should be set to 511</description>
                  </metadata>
                  <criteria>
                        <criteria operator="OR" comment="Definition alternatives">
                              <criterion test_ref="oval:gov.irs.rhel5:tst:462" comment="File permissions test for /usr/sbin/httpd"/>
                              <extend_definition definition_ref="oval:gov.irs.rhel5:def:285" comment="Dependency is met"/>
                              <extend_definition definition_ref="oval:gov.irs.rhel5:def:286" comment="Dependency is met"/>
                        </criteria>
                        <extend_definition definition_ref="oval:gov.irs.rhel5:def:10000" comment="Red Hat Enterprise Linux 5 is installed"/>
                  </criteria>
            </definition>
            <definition class="compliance" version="1" id="oval:gov.irs.rhel5:def:293">
                  <metadata>
                        <title>File ownership for /etc/httpd/conf/*</title>
                        <affected family="unix">
                              <platform>Red Hat Enterprise Linux 5</platform>
                        </affected>
                        <reference ref_id="CCE-3581-6" source="CCE"/>
                        <description>File ownership for /etc/httpd/conf/*</description>
                  </metadata>
                  <criteria>
                        <criterion test_ref="oval:gov.irs.rhel5:tst:463" comment="File ownership check for /etc/httpd/conf/*"/>
                        <extend_definition definition_ref="oval:gov.irs.rhel5:def:10000" comment="Red Hat Enterprise Linux 5 is installed"/>
                  </criteria>
            </definition>
            <definition class="compliance" version="1" id="oval:gov.irs.rhel5:def:294">
                  <metadata>
                        <title>File permissions for /var/log/httpd</title>
                        <affected family="unix">
                              <platform>Red Hat Enterprise Linux 5</platform>
                        </affected>
                        <reference ref_id="CCE-4574-0" source="CCE"/>
                        <description>File permissions for /var/log/httpd should be set to 750</description>
                  </metadata>
                  <criteria>
                        <criteria operator="OR" comment="Definition alternatives">
                              <criterion test_ref="oval:gov.irs.rhel5:tst:464" comment="File permissions test for /var/log/httpd"/>
                              <extend_definition definition_ref="oval:gov.irs.rhel5:def:285" comment="Dependency is met"/>
                              <extend_definition definition_ref="oval:gov.irs.rhel5:def:286" comment="Dependency is met"/>
                        </criteria>
                        <extend_definition definition_ref="oval:gov.irs.rhel5:def:10000" comment="Red Hat Enterprise Linux 5 is installed"/>
                  </criteria>
            </definition>
            <definition class="compliance" version="1" id="oval:gov.irs.rhel5:def:295">
                  <metadata>
                        <title>Service dovecot should be disabled</title>
                        <affected family="unix">
                              <platform>Red Hat Enterprise Linux 5</platform>
                        </affected>
                        <reference ref_id="CCE-3847-1" source="CCE"/>
                        <description>Service dovecot should be disabled</description>
                  </metadata>
                  <criteria>
                        <criterion test_ref="oval:gov.irs.rhel5:tst:465" comment="The dovecot service should not be started at runlevel 2"/>
                        <criterion test_ref="oval:gov.irs.rhel5:tst:466" comment="The dovecot service should not be started at runlevel 3"/>
                        <criterion test_ref="oval:gov.irs.rhel5:tst:467" comment="The dovecot service should not be started at runlevel 4"/>
                        <criterion test_ref="oval:gov.irs.rhel5:tst:468" comment="The dovecot service should not be started at runlevel 5"/>
                        <extend_definition definition_ref="oval:gov.irs.rhel5:def:10000" comment="Red Hat Enterprise Linux 5 is installed"/>
                  </criteria>
            </definition>
            <definition class="compliance" version="1" id="oval:gov.irs.rhel5:def:296">
                  <metadata>
                        <title>The dovecot package should not be installed</title>
                        <affected family="unix">
                              <platform>Red Hat Enterprise Linux 5</platform>
                        </affected>
                        <reference ref_id="CCE-4239-0" source="CCE"/>
                        <description>The dovecot package should not be installed</description>
                  </metadata>
                  <criteria>
                        <criterion test_ref="oval:gov.irs.rhel5:tst:469" comment="The dovecot package should not be installed"/>
                        <extend_definition definition_ref="oval:gov.irs.rhel5:def:10000" comment="Red Hat Enterprise Linux 5 is installed"/>
                  </criteria>
            </definition>
            <definition class="compliance" version="1" id="oval:gov.irs.rhel5:def:297">
                  <metadata>
                        <title>Support Only the Necessary Protocols </title>
                        <affected family="unix">
                              <platform>Red Hat Enterprise Linux 5</platform>
                        </affected>
                        <reference ref_id="CCE-4384-4" source="CCE"/>
                        <description>Dovecot should be configured to support the imaps protocol or not as necessary</description>
                  </metadata>
                  <criteria>
                        <criteria operator="OR" comment="Definition alternatives">
                              <criterion test_ref="oval:gov.irs.rhel5:tst:470" comment="Dovecot should be configured to support the imaps protocol or not as necessary"/>
                              <extend_definition definition_ref="oval:gov.irs.rhel5:def:295" comment="Dependency is met"/>
                              <extend_definition definition_ref="oval:gov.irs.rhel5:def:296" comment="Dependency is met"/>
                        </criteria>
                        <extend_definition definition_ref="oval:gov.irs.rhel5:def:10000" comment="Red Hat Enterprise Linux 5 is installed"/>
                  </criteria>
            </definition>
            <definition class="compliance" version="1" id="oval:gov.irs.rhel5:def:298">
                  <metadata>
                        <title>Support Only the Necessary Protocols </title>
                        <affected family="unix">
                              <platform>Red Hat Enterprise Linux 5</platform>
                        </affected>
                        <reference ref_id="CCE-3887-7" source="CCE"/>
                        <description>Dovecot should be configured to support the pop3s protocol or not as necessary</description>
                  </metadata>
                  <criteria>
                        <criteria operator="OR" comment="Definition alternatives">
                              <criterion test_ref="oval:gov.irs.rhel5:tst:471" comment="Dovecot should be configured to support the pop3s protocol or not as necessary"/>
                              <extend_definition definition_ref="oval:gov.irs.rhel5:def:295" comment="Dependency is met"/>
                              <extend_definition definition_ref="oval:gov.irs.rhel5:def:296" comment="Dependency is met"/>
                        </criteria>
                        <extend_definition definition_ref="oval:gov.irs.rhel5:def:10000" comment="Red Hat Enterprise Linux 5 is installed"/>
                  </criteria>
            </definition>
            <definition class="compliance" version="1" id="oval:gov.irs.rhel5:def:299">
                  <metadata>
                        <title>Support Only the Necessary Protocols </title>
                        <affected family="unix">
                              <platform>Red Hat Enterprise Linux 5</platform>
                        </affected>
                        <reference ref_id="CCE-4530-2" source="CCE"/>
                        <description>Dovecot should be configured to support the pop3 protocol or not as necessary</description>
                  </metadata>
                  <criteria>
                        <criteria operator="OR" comment="Definition alternatives">
                              <criterion test_ref="oval:gov.irs.rhel5:tst:472" comment="Dovecot should be configured to support the pop3 protocol or not as necessary"/>
                              <extend_definition definition_ref="oval:gov.irs.rhel5:def:295" comment="Dependency is met"/>
                              <extend_definition definition_ref="oval:gov.irs.rhel5:def:296" comment="Dependency is met"/>
                        </criteria>
                        <extend_definition definition_ref="oval:gov.irs.rhel5:def:10000" comment="Red Hat Enterprise Linux 5 is installed"/>
                  </criteria>
            </definition>
            <definition class="compliance" version="1" id="oval:gov.irs.rhel5:def:300">
                  <metadata>
                        <title>Support Only the Necessary Protocols </title>
                        <affected family="unix">
                              <platform>Red Hat Enterprise Linux 5</platform>
                        </affected>
                        <reference ref_id="CCE-4547-6" source="CCE"/>
                        <description>Dovecot should be configured to support the imap protocol or not as necessary</description>
                  </metadata>
                  <criteria>
                        <criteria operator="OR" comment="Definition alternatives">
                              <criterion test_ref="oval:gov.irs.rhel5:tst:473" comment="Dovecot should be configured to support the imap protocol or not as necessary"/>
                              <extend_definition definition_ref="oval:gov.irs.rhel5:def:295" comment="Dependency is met"/>
                              <extend_definition definition_ref="oval:gov.irs.rhel5:def:296" comment="Dependency is met"/>
                        </criteria>
                        <extend_definition definition_ref="oval:gov.irs.rhel5:def:10000" comment="Red Hat Enterprise Linux 5 is installed"/>
                  </criteria>
            </definition>
            <definition class="compliance" version="1" id="oval:gov.irs.rhel5:def:301">
                  <metadata>
                        <title>Disable Plaintext Authentication </title>
                        <affected family="unix">
                              <platform>Red Hat Enterprise Linux 5</platform>
                        </affected>
                        <reference ref_id="CCE-4552-6" source="CCE"/>
                        <description>Dovecot plaintext authentication of clients should be enabled or disabled as necessary</description>
                  </metadata>
                  <criteria>
                        <criteria operator="OR" comment="Definition alternatives">
                              <criterion test_ref="oval:gov.irs.rhel5:tst:474" comment="Dovecot plaintext authentication of clients should be enabled or disabled as necessary"/>
                              <extend_definition definition_ref="oval:gov.irs.rhel5:def:295" comment="Dependency is met"/>
                              <extend_definition definition_ref="oval:gov.irs.rhel5:def:296" comment="Dependency is met"/>
                        </criteria>
                        <extend_definition definition_ref="oval:gov.irs.rhel5:def:10000" comment="Red Hat Enterprise Linux 5 is installed"/>
                  </criteria>
            </definition>
            <definition class="compliance" version="1" id="oval:gov.irs.rhel5:def:302">
                  <metadata>
                        <title>Enable Dovecot Options to Protect Against Code Flaws </title>
                        <affected family="unix">
                              <platform>Red Hat Enterprise Linux 5</platform>
                        </affected>
                        <reference ref_id="CCE-4371-1" source="CCE"/>
                        <description>The Dovecot option to drop privileges to user before executing mail process should be enabled or not as appropriate</description>
                  </metadata>
                  <criteria>
                        <criteria operator="OR" comment="Definition alternatives">
                              <criterion test_ref="oval:gov.irs.rhel5:tst:475" comment="The Dovecot option to drop privileges to user before executing mail process should be enabled or not as appropriate"/>
                              <extend_definition definition_ref="oval:gov.irs.rhel5:def:295" comment="Dependency is met"/>
                              <extend_definition definition_ref="oval:gov.irs.rhel5:def:296" comment="Dependency is met"/>
                        </criteria>
                        <extend_definition definition_ref="oval:gov.irs.rhel5:def:10000" comment="Red Hat Enterprise Linux 5 is installed"/>
                  </criteria>
            </definition>
            <definition class="compliance" version="1" id="oval:gov.irs.rhel5:def:303">
                  <metadata>
                        <title>Enable Dovecot Options to Protect Against Code Flaws </title>
                        <affected family="unix">
                              <platform>Red Hat Enterprise Linux 5</platform>
                        </affected>
                        <reference ref_id="CCE-4410-7" source="CCE"/>
                        <description>The Dovecot option to spawn a new login process per connection should be enabled or not as appropriate</description>
                  </metadata>
                  <criteria>
                        <criteria operator="OR" comment="Definition alternatives">
                              <criterion test_ref="oval:gov.irs.rhel5:tst:476" comment="The Dovecot option to spawn a new login process per connection should be enabled or not as appropriate"/>
                              <extend_definition definition_ref="oval:gov.irs.rhel5:def:295" comment="Dependency is met"/>
                              <extend_definition definition_ref="oval:gov.irs.rhel5:def:296" comment="Dependency is met"/>
                        </criteria>
                        <extend_definition definition_ref="oval:gov.irs.rhel5:def:10000" comment="Red Hat Enterprise Linux 5 is installed"/>
                  </criteria>
            </definition>
            <definition class="compliance" version="1" id="oval:gov.irs.rhel5:def:304">
                  <metadata>
                        <title>Service smb should be disabled</title>
                        <affected family="unix">
                              <platform>Red Hat Enterprise Linux 5</platform>
                        </affected>
                        <reference ref_id="CCE-4551-8" source="CCE"/>
                        <description>Service smb should be disabled</description>
                  </metadata>
                  <criteria>
                        <criterion test_ref="oval:gov.irs.rhel5:tst:477" comment="The smb service should not be started at runlevel 2"/>
                        <criterion test_ref="oval:gov.irs.rhel5:tst:478" comment="The smb service should not be started at runlevel 3"/>
                        <criterion test_ref="oval:gov.irs.rhel5:tst:479" comment="The smb service should not be started at runlevel 4"/>
                        <criterion test_ref="oval:gov.irs.rhel5:tst:480" comment="The smb service should not be started at runlevel 5"/>
                        <extend_definition definition_ref="oval:gov.irs.rhel5:def:10000" comment="Red Hat Enterprise Linux 5 is installed"/>
                  </criteria>
            </definition>
            <definition class="compliance" version="1" id="oval:gov.irs.rhel5:def:305">
                  <metadata>
                        <title>Service squid should be disabled</title>
                        <affected family="unix">
                              <platform>Red Hat Enterprise Linux 5</platform>
                        </affected>
                        <reference ref_id="CCE-4556-7" source="CCE"/>
                        <description>Service squid should be disabled</description>
                  </metadata>
                  <criteria>
                        <criterion test_ref="oval:gov.irs.rhel5:tst:481" comment="The squid service should not be started at runlevel 2"/>
                        <criterion test_ref="oval:gov.irs.rhel5:tst:482" comment="The squid service should not be started at runlevel 3"/>
                        <criterion test_ref="oval:gov.irs.rhel5:tst:483" comment="The squid service should not be started at runlevel 4"/>
                        <criterion test_ref="oval:gov.irs.rhel5:tst:484" comment="The squid service should not be started at runlevel 5"/>
                        <extend_definition definition_ref="oval:gov.irs.rhel5:def:10000" comment="Red Hat Enterprise Linux 5 is installed"/>
                  </criteria>
            </definition>
            <definition class="compliance" version="1" id="oval:gov.irs.rhel5:def:306">
                  <metadata>
                        <title>The squid package should not be installed</title>
                        <affected family="unix">
                              <platform>Red Hat Enterprise Linux 5</platform>
                        </affected>
                        <reference ref_id="CCE-4076-6" source="CCE"/>
                        <description>The squid package should not be installed</description>
                  </metadata>
                  <criteria>
                        <criterion test_ref="oval:gov.irs.rhel5:tst:485" comment="The squid package should not be installed"/>
                        <extend_definition definition_ref="oval:gov.irs.rhel5:def:10000" comment="Red Hat Enterprise Linux 5 is installed"/>
                  </criteria>
            </definition>
            <definition class="compliance" version="1" id="oval:gov.irs.rhel5:def:307">
                  <metadata>
                        <title>Verify Default Secure Settings </title>
                        <affected family="unix">
                              <platform>Red Hat Enterprise Linux 5</platform>
                        </affected>
                        <reference ref_id="CCE-4454-5" source="CCE"/>
                        <description>The Squid option to force FTP passive connections should be enabled or not as appropriate</description>
                  </metadata>
                  <criteria>
                        <criteria operator="OR" comment="Definition alternatives">
                              <criterion test_ref="oval:gov.irs.rhel5:tst:486" comment="The Squid option to force FTP passive connections should be enabled or not as appropriate"/>
                              <extend_definition definition_ref="oval:gov.irs.rhel5:def:305" comment="Dependency is met"/>
                              <extend_definition definition_ref="oval:gov.irs.rhel5:def:306" comment="Dependency is met"/>
                        </criteria>
                        <extend_definition definition_ref="oval:gov.irs.rhel5:def:10000" comment="Red Hat Enterprise Linux 5 is installed"/>
                  </criteria>
            </definition>
            <definition class="compliance" version="1" id="oval:gov.irs.rhel5:def:308">
                  <metadata>
                        <title>Verify Default Secure Settings </title>
                        <affected family="unix">
                              <platform>Red Hat Enterprise Linux 5</platform>
                        </affected>
                        <reference ref_id="CCE-4353-9" source="CCE"/>
                        <description>The Squid max request HTTP header length should be set to an appropriate value</description>
                  </metadata>
                  <criteria>
                        <criteria operator="OR" comment="Definition alternatives">
                              <criterion test_ref="oval:gov.irs.rhel5:tst:487" comment="The Squid max request HTTP header length should be set to an appropriate value"/>
                              <extend_definition definition_ref="oval:gov.irs.rhel5:def:305" comment="Dependency is met"/>
                              <extend_definition definition_ref="oval:gov.irs.rhel5:def:306" comment="Dependency is met"/>
                        </criteria>
                        <extend_definition definition_ref="oval:gov.irs.rhel5:def:10000" comment="Red Hat Enterprise Linux 5 is installed"/>
                  </criteria>
            </definition>
            <definition class="compliance" version="1" id="oval:gov.irs.rhel5:def:309">
                  <metadata>
                        <title>Verify Default Secure Settings </title>
                        <affected family="unix">
                              <platform>Red Hat Enterprise Linux 5</platform>
                        </affected>
                        <reference ref_id="CCE-4503-9" source="CCE"/>
                        <description>The Squid option to check for RFC compliant hostnames should be enabled or not as appropriate</description>
                  </metadata>
                  <criteria>
                        <criteria operator="OR" comment="Definition alternatives">
                              <criterion test_ref="oval:gov.irs.rhel5:tst:488" comment="The Squid option to check for RFC compliant hostnames should be enabled or not as appropriate"/>
                              <extend_definition definition_ref="oval:gov.irs.rhel5:def:305" comment="Dependency is met"/>
                              <extend_definition definition_ref="oval:gov.irs.rhel5:def:306" comment="Dependency is met"/>
                        </criteria>
                        <extend_definition definition_ref="oval:gov.irs.rhel5:def:10000" comment="Red Hat Enterprise Linux 5 is installed"/>
                  </criteria>
            </definition>
            <definition class="compliance" version="1" id="oval:gov.irs.rhel5:def:310">
                  <metadata>
                        <title>Verify Default Secure Settings </title>
                        <affected family="unix">
                              <platform>Red Hat Enterprise Linux 5</platform>
                        </affected>
                        <reference ref_id="CCE-3585-7" source="CCE"/>
                        <description>The Squid option to ignore unknown nameservers should be enabled or not as appropriate</description>
                  </metadata>
                  <criteria>
                        <criteria operator="OR" comment="Definition alternatives">
                              <criterion test_ref="oval:gov.irs.rhel5:tst:489" comment="The Squid option to ignore unknown nameservers should be enabled or not as appropriate"/>
                              <extend_definition definition_ref="oval:gov.irs.rhel5:def:305" comment="Dependency is met"/>
                              <extend_definition definition_ref="oval:gov.irs.rhel5:def:306" comment="Dependency is met"/>
                        </criteria>
                        <extend_definition definition_ref="oval:gov.irs.rhel5:def:10000" comment="Red Hat Enterprise Linux 5 is installed"/>
                  </criteria>
            </definition>
            <definition class="compliance" version="1" id="oval:gov.irs.rhel5:def:311">
                  <metadata>
                        <title>Verify Default Secure Settings </title>
                        <affected family="unix">
                              <platform>Red Hat Enterprise Linux 5</platform>
                        </affected>
                        <reference ref_id="CCE-4419-8" source="CCE"/>
                        <description>The Squid max reply HTTP header length should be set to an appropriate value</description>
                  </metadata>
                  <criteria>
                        <criteria operator="OR" comment="Definition alternatives">
                              <criterion test_ref="oval:gov.irs.rhel5:tst:490" comment="The Squid max reply HTTP header length should be set to an appropriate value"/>
                              <extend_definition definition_ref="oval:gov.irs.rhel5:def:305" comment="Dependency is met"/>
                              <extend_definition definition_ref="oval:gov.irs.rhel5:def:306" comment="Dependency is met"/>
                        </criteria>
                        <extend_definition definition_ref="oval:gov.irs.rhel5:def:10000" comment="Red Hat Enterprise Linux 5 is installed"/>
                  </criteria>
            </definition>
            <definition class="compliance" version="1" id="oval:gov.irs.rhel5:def:312">
                  <metadata>
                        <title>Verify Default Secure Settings </title>
                        <affected family="unix">
                              <platform>Red Hat Enterprise Linux 5</platform>
                        </affected>
                        <reference ref_id="CCE-3692-1" source="CCE"/>
                        <description>The Squid EUID should be set to an appropriate user</description>
                  </metadata>
                  <criteria>
                        <criteria operator="OR" comment="Definition alternatives">
                              <criterion test_ref="oval:gov.irs.rhel5:tst:491" comment="The Squid EUID should be set to an appropriate user"/>
                              <extend_definition definition_ref="oval:gov.irs.rhel5:def:305" comment="Dependency is met"/>
                              <extend_definition definition_ref="oval:gov.irs.rhel5:def:306" comment="Dependency is met"/>
                        </criteria>
                        <extend_definition definition_ref="oval:gov.irs.rhel5:def:10000" comment="Red Hat Enterprise Linux 5 is installed"/>
                  </criteria>
            </definition>
            <definition class="compliance" version="1" id="oval:gov.irs.rhel5:def:313">
                  <metadata>
                        <title>Verify Default Secure Settings </title>
                        <affected family="unix">
                              <platform>Red Hat Enterprise Linux 5</platform>
                        </affected>
                        <reference ref_id="CCE-4459-4" source="CCE"/>
                        <description>The Squid option to perform FTP sanity checks should be enabled or not as appropriate</description>
                  </metadata>
                  <criteria>
                        <criteria operator="OR" comment="Definition alternatives">
                              <criterion test_ref="oval:gov.irs.rhel5:tst:492" comment="The Squid option to perform FTP sanity checks should be enabled or not as appropriate"/>
                              <extend_definition definition_ref="oval:gov.irs.rhel5:def:305" comment="Dependency is met"/>
                              <extend_definition definition_ref="oval:gov.irs.rhel5:def:306" comment="Dependency is met"/>
                        </criteria>
                        <extend_definition definition_ref="oval:gov.irs.rhel5:def:10000" comment="Red Hat Enterprise Linux 5 is installed"/>
                  </criteria>
            </definition>
            <definition class="compliance" version="1" id="oval:gov.irs.rhel5:def:314">
                  <metadata>
                        <title>Verify Default Secure Settings </title>
                        <affected family="unix">
                              <platform>Red Hat Enterprise Linux 5</platform>
                        </affected>
                        <reference ref_id="CCE-4476-8" source="CCE"/>
                        <description>The Squid GUID should be set to an appropriate group</description>
                  </metadata>
                  <criteria>
                        <criteria operator="OR" comment="Definition alternatives">
                              <criterion test_ref="oval:gov.irs.rhel5:tst:493" comment="The Squid GUID should be set to an appropriate group"/>
                              <extend_definition definition_ref="oval:gov.irs.rhel5:def:305" comment="Dependency is met"/>
                              <extend_definition definition_ref="oval:gov.irs.rhel5:def:306" comment="Dependency is met"/>
                        </criteria>
                        <extend_definition definition_ref="oval:gov.irs.rhel5:def:10000" comment="Red Hat Enterprise Linux 5 is installed"/>
                  </criteria>
            </definition>
            <definition class="compliance" version="1" id="oval:gov.irs.rhel5:def:315">
                  <metadata>
                        <title>Change Default Insecure Settings </title>
                        <affected family="unix">
                              <platform>Red Hat Enterprise Linux 5</platform>
                        </affected>
                        <reference ref_id="CCE-4181-4" source="CCE"/>
                        <description>The Squid option to show proxy client IP addresses in HTTP headers should be enabled or disabled as appropriate</description>
                  </metadata>
                  <criteria>
                        <criteria operator="OR" comment="Definition alternatives">
                              <criterion test_ref="oval:gov.irs.rhel5:tst:494" comment="The Squid option to show proxy client IP addresses in HTTP headers should be enabled or disabled as appropriate"/>
                              <extend_definition definition_ref="oval:gov.irs.rhel5:def:305" comment="Dependency is met"/>
                              <extend_definition definition_ref="oval:gov.irs.rhel5:def:306" comment="Dependency is met"/>
                        </criteria>
                        <extend_definition definition_ref="oval:gov.irs.rhel5:def:10000" comment="Red Hat Enterprise Linux 5 is installed"/>
                  </criteria>
            </definition>
            <definition class="compliance" version="1" id="oval:gov.irs.rhel5:def:316">
                  <metadata>
                        <title>Change Default Insecure Settings </title>
                        <affected family="unix">
                              <platform>Red Hat Enterprise Linux 5</platform>
                        </affected>
                        <reference ref_id="CCE-4577-3" source="CCE"/>
                        <description>The Squid option to log HTTP MIME headers should be enabled or disabled as appropriate</description>
                  </metadata>
                  <criteria>
                        <criteria operator="OR" comment="Definition alternatives">
                              <criterion test_ref="oval:gov.irs.rhel5:tst:495" comment="The Squid option to log HTTP MIME headers should be enabled or disabled as appropriate"/>
                              <extend_definition definition_ref="oval:gov.irs.rhel5:def:305" comment="Dependency is met"/>
                              <extend_definition definition_ref="oval:gov.irs.rhel5:def:306" comment="Dependency is met"/>
                        </criteria>
                        <extend_definition definition_ref="oval:gov.irs.rhel5:def:10000" comment="Red Hat Enterprise Linux 5 is installed"/>
                  </criteria>
            </definition>
            <definition class="compliance" version="1" id="oval:gov.irs.rhel5:def:317">
                  <metadata>
                        <title>Change Default Insecure Settings </title>
                        <affected family="unix">
                              <platform>Red Hat Enterprise Linux 5</platform>
                        </affected>
                        <reference ref_id="CCE-4344-8" source="CCE"/>
                        <description>The Squid option to allow underscores in hostnames should be enabled or disabled as appropriate</description>
                  </metadata>
                  <criteria>
                        <criteria operator="OR" comment="Definition alternatives">
                              <criterion test_ref="oval:gov.irs.rhel5:tst:496" comment="The Squid option to allow underscores in hostnames should be enabled or disabled as appropriate"/>
                              <extend_definition definition_ref="oval:gov.irs.rhel5:def:305" comment="Dependency is met"/>
                              <extend_definition definition_ref="oval:gov.irs.rhel5:def:306" comment="Dependency is met"/>
                        </criteria>
                        <extend_definition definition_ref="oval:gov.irs.rhel5:def:10000" comment="Red Hat Enterprise Linux 5 is installed"/>
                  </criteria>
            </definition>
            <definition class="compliance" version="1" id="oval:gov.irs.rhel5:def:318">
                  <metadata>
                        <title>Change Default Insecure Settings </title>
                        <affected family="unix">
                              <platform>Red Hat Enterprise Linux 5</platform>
                        </affected>
                        <reference ref_id="CCE-4494-1" source="CCE"/>
                        <description>The Squid option to suppress the httpd version string should be enabled or disabled as appropriate</description>
                  </metadata>
                  <criteria>
                        <criteria operator="OR" comment="Definition alternatives">
                              <criterion test_ref="oval:gov.irs.rhel5:tst:497" comment="The Squid option to suppress the httpd version string should be enabled or disabled as appropriate"/>
                              <extend_definition definition_ref="oval:gov.irs.rhel5:def:305" comment="Dependency is met"/>
                              <extend_definition definition_ref="oval:gov.irs.rhel5:def:306" comment="Dependency is met"/>
                        </criteria>
                        <extend_definition definition_ref="oval:gov.irs.rhel5:def:10000" comment="Red Hat Enterprise Linux 5 is installed"/>
                  </criteria>
            </definition>
            <definition class="compliance" version="1" id="oval:gov.irs.rhel5:def:319">
                  <metadata>
                        <title>Access Control Lists (ACL) </title>
                        <affected family="unix">
                              <platform>Red Hat Enterprise Linux 5</platform>
                        </affected>
                        <reference ref_id="CCE-4511-2" source="CCE"/>
                        <description>Squid should be configured to allow gss-http traffic or not as appropriate</description>
                  </metadata>
                  <criteria>
                        <criteria operator="OR" comment="Definition alternatives">
                              <criterion test_ref="oval:gov.irs.rhel5:tst:498" comment="Unknown test stub"/>
                              <extend_definition definition_ref="oval:gov.irs.rhel5:def:305" comment="Dependency is met"/>
                              <extend_definition definition_ref="oval:gov.irs.rhel5:def:306" comment="Dependency is met"/>
                        </criteria>
                        <extend_definition definition_ref="oval:gov.irs.rhel5:def:10000" comment="Red Hat Enterprise Linux 5 is installed"/>
                  </criteria>
            </definition>
            <definition class="compliance" version="1" id="oval:gov.irs.rhel5:def:320">
                  <metadata>
                        <title>Access Control Lists (ACL) </title>
                        <affected family="unix">
                              <platform>Red Hat Enterprise Linux 5</platform>
                        </affected>
                        <reference ref_id="CCE-4529-4" source="CCE"/>
                        <description>Squid should be configured to allow https traffic or not as appropriate</description>
                  </metadata>
                  <criteria>
                        <criteria operator="OR" comment="Definition alternatives">
                              <criterion test_ref="oval:gov.irs.rhel5:tst:499" comment="Unknown test stub"/>
                              <extend_definition definition_ref="oval:gov.irs.rhel5:def:305" comment="Dependency is met"/>
                              <extend_definition definition_ref="oval:gov.irs.rhel5:def:306" comment="Dependency is met"/>
                        </criteria>
                        <extend_definition definition_ref="oval:gov.irs.rhel5:def:10000" comment="Red Hat Enterprise Linux 5 is installed"/>
                  </criteria>
            </definition>
            <definition class="compliance" version="1" id="oval:gov.irs.rhel5:def:321">
                  <metadata>
                        <title>Access Control Lists (ACL) </title>
                        <affected family="unix">
                              <platform>Red Hat Enterprise Linux 5</platform>
                        </affected>
                        <reference ref_id="CCE-3610-3" source="CCE"/>
                        <description>Squid should be configured to allow wais traffic or not as appropriate</description>
                  </metadata>
                  <criteria>
                        <criteria operator="OR" comment="Definition alternatives">
                              <criterion test_ref="oval:gov.irs.rhel5:tst:500" comment="Unknown test stub"/>
                              <extend_definition definition_ref="oval:gov.irs.rhel5:def:305" comment="Dependency is met"/>
                              <extend_definition definition_ref="oval:gov.irs.rhel5:def:306" comment="Dependency is met"/>
                        </criteria>
                        <extend_definition definition_ref="oval:gov.irs.rhel5:def:10000" comment="Red Hat Enterprise Linux 5 is installed"/>
                  </criteria>
            </definition>
            <definition class="compliance" version="1" id="oval:gov.irs.rhel5:def:322">
                  <metadata>
                        <title>Access Control Lists (ACL) </title>
                        <affected family="unix">
                              <platform>Red Hat Enterprise Linux 5</platform>
                        </affected>
                        <reference ref_id="CCE-4466-9" source="CCE"/>
                        <description>Squid should be configured to allow multiling http traffic or not as appropriate</description>
                  </metadata>
                  <criteria>
                        <criteria operator="OR" comment="Definition alternatives">
                              <criterion test_ref="oval:gov.irs.rhel5:tst:501" comment="Unknown test stub"/>
                              <extend_definition definition_ref="oval:gov.irs.rhel5:def:305" comment="Dependency is met"/>
                              <extend_definition definition_ref="oval:gov.irs.rhel5:def:306" comment="Dependency is met"/>
                        </criteria>
                        <extend_definition definition_ref="oval:gov.irs.rhel5:def:10000" comment="Red Hat Enterprise Linux 5 is installed"/>
                  </criteria>
            </definition>
            <definition class="compliance" version="1" id="oval:gov.irs.rhel5:def:323">
                  <metadata>
                        <title>Access Control Lists (ACL) </title>
                        <affected family="unix">
                              <platform>Red Hat Enterprise Linux 5</platform>
                        </affected>
                        <reference ref_id="CCE-4607-8" source="CCE"/>
                        <description>Squid should be configured to allow http traffic or not as appropriate</description>
                  </metadata>
                  <criteria>
                        <criteria operator="OR" comment="Definition alternatives">
                              <criterion test_ref="oval:gov.irs.rhel5:tst:502" comment="Unknown test stub"/>
                              <extend_definition definition_ref="oval:gov.irs.rhel5:def:305" comment="Dependency is met"/>
                              <extend_definition definition_ref="oval:gov.irs.rhel5:def:306" comment="Dependency is met"/>
                        </criteria>
                        <extend_definition definition_ref="oval:gov.irs.rhel5:def:10000" comment="Red Hat Enterprise Linux 5 is installed"/>
                  </criteria>
            </definition>
            <definition class="compliance" version="1" id="oval:gov.irs.rhel5:def:324">
                  <metadata>
                        <title>Access Control Lists (ACL) </title>
                        <affected family="unix">
                              <platform>Red Hat Enterprise Linux 5</platform>
                        </affected>
                        <reference ref_id="CCE-4255-6" source="CCE"/>
                        <description>Squid should be configured to allow ftp traffic or not as appropriate</description>
                  </metadata>
                  <criteria>
                        <criteria operator="OR" comment="Definition alternatives">
                              <criterion test_ref="oval:gov.irs.rhel5:tst:503" comment="Unknown test stub"/>
                              <extend_definition definition_ref="oval:gov.irs.rhel5:def:305" comment="Dependency is met"/>
                              <extend_definition definition_ref="oval:gov.irs.rhel5:def:306" comment="Dependency is met"/>
                        </criteria>
                        <extend_definition definition_ref="oval:gov.irs.rhel5:def:10000" comment="Red Hat Enterprise Linux 5 is installed"/>
                  </criteria>
            </definition>
            <definition class="compliance" version="1" id="oval:gov.irs.rhel5:def:325">
                  <metadata>
                        <title>Access Control Lists (ACL) </title>
                        <affected family="unix">
                              <platform>Red Hat Enterprise Linux 5</platform>
                        </affected>
                        <reference ref_id="CCE-4127-7" source="CCE"/>
                        <description>Squid should be configured to allow gopher traffic or not as appropriate</description>
                  </metadata>
                  <criteria>
                        <criteria operator="OR" comment="Definition alternatives">
                              <criterion test_ref="oval:gov.irs.rhel5:tst:504" comment="Unknown test stub"/>
                              <extend_definition definition_ref="oval:gov.irs.rhel5:def:305" comment="Dependency is met"/>
                              <extend_definition definition_ref="oval:gov.irs.rhel5:def:306" comment="Dependency is met"/>
                        </criteria>
                        <extend_definition definition_ref="oval:gov.irs.rhel5:def:10000" comment="Red Hat Enterprise Linux 5 is installed"/>
                  </criteria>
            </definition>
            <definition class="compliance" version="1" id="oval:gov.irs.rhel5:def:326">
                  <metadata>
                        <title>Access Control Lists (ACL) </title>
                        <affected family="unix">
                              <platform>Red Hat Enterprise Linux 5</platform>
                        </affected>
                        <reference ref_id="CCE-4519-5" source="CCE"/>
                        <description>Squid should be configured to allow filemaker traffic or not as appropriate</description>
                  </metadata>
                  <criteria>
                        <criteria operator="OR" comment="Definition alternatives">
                              <criterion test_ref="oval:gov.irs.rhel5:tst:505" comment="Unknown test stub"/>
                              <extend_definition definition_ref="oval:gov.irs.rhel5:def:305" comment="Dependency is met"/>
                              <extend_definition definition_ref="oval:gov.irs.rhel5:def:306" comment="Dependency is met"/>
                        </criteria>
                        <extend_definition definition_ref="oval:gov.irs.rhel5:def:10000" comment="Red Hat Enterprise Linux 5 is installed"/>
                  </criteria>
            </definition>
            <definition class="compliance" version="1" id="oval:gov.irs.rhel5:def:327">
                  <metadata>
                        <title>Access Control Lists (ACL) </title>
                        <affected family="unix">
                              <platform>Red Hat Enterprise Linux 5</platform>
                        </affected>
                        <reference ref_id="CCE-4413-1" source="CCE"/>
                        <description>Squid proxy access to localhost should be allowed or denied as appropriate</description>
                  </metadata>
                  <criteria>
                        <criteria operator="OR" comment="Definition alternatives">
                              <criterion test_ref="oval:gov.irs.rhel5:tst:506" comment="Unknown test stub"/>
                              <extend_definition definition_ref="oval:gov.irs.rhel5:def:305" comment="Dependency is met"/>
                              <extend_definition definition_ref="oval:gov.irs.rhel5:def:306" comment="Dependency is met"/>
                        </criteria>
                        <extend_definition definition_ref="oval:gov.irs.rhel5:def:10000" comment="Red Hat Enterprise Linux 5 is installed"/>
                  </criteria>
            </definition>
            <definition class="compliance" version="1" id="oval:gov.irs.rhel5:def:328">
                  <metadata>
                        <title>Access Control Lists (ACL) </title>
                        <affected family="unix">
                              <platform>Red Hat Enterprise Linux 5</platform>
                        </affected>
                        <reference ref_id="CCE-4373-7" source="CCE"/>
                        <description>Squid should be configured to allow http-mgmt traffic or not as appropriate</description>
                  </metadata>
                  <criteria>
                        <criteria operator="OR" comment="Definition alternatives">
                              <criterion test_ref="oval:gov.irs.rhel5:tst:507" comment="Unknown test stub"/>
                              <extend_definition definition_ref="oval:gov.irs.rhel5:def:305" comment="Dependency is met"/>
                              <extend_definition definition_ref="oval:gov.irs.rhel5:def:306" comment="Dependency is met"/>
                        </criteria>
                        <extend_definition definition_ref="oval:gov.irs.rhel5:def:10000" comment="Red Hat Enterprise Linux 5 is installed"/>
                  </criteria>
            </definition>
            <definition class="compliance" version="1" id="oval:gov.irs.rhel5:def:329">
                  <metadata>
                        <title>Service snmpd should be disabled</title>
                        <affected family="unix">
                              <platform>Red Hat Enterprise Linux 5</platform>
                        </affected>
                        <reference ref_id="CCE-3765-5" source="CCE"/>
                        <description>Service snmpd should be disabled</description>
                  </metadata>
                  <criteria>
                        <criterion test_ref="oval:gov.irs.rhel5:tst:508" comment="The snmpd service should not be started at runlevel 2"/>
                        <criterion test_ref="oval:gov.irs.rhel5:tst:509" comment="The snmpd service should not be started at runlevel 3"/>
                        <criterion test_ref="oval:gov.irs.rhel5:tst:510" comment="The snmpd service should not be started at runlevel 4"/>
                        <criterion test_ref="oval:gov.irs.rhel5:tst:511" comment="The snmpd service should not be started at runlevel 5"/>
                        <extend_definition definition_ref="oval:gov.irs.rhel5:def:10000" comment="Red Hat Enterprise Linux 5 is installed"/>
                  </criteria>
            </definition>
            <definition class="compliance" version="1" id="oval:gov.irs.rhel5:def:330">
                  <metadata>
                        <title>The net-smtp package should not be installed</title>
                        <affected family="unix">
                              <platform>Red Hat Enterprise Linux 5</platform>
                        </affected>
                        <reference ref_id="CCE-4404-0" source="CCE"/>
                        <description>The net-smtp package should not be installed</description>
                  </metadata>
                  <criteria>
                        <criterion test_ref="oval:gov.irs.rhel5:tst:512" comment="The net-smtp package should not be installed"/>
                        <extend_definition definition_ref="oval:gov.irs.rhel5:def:10000" comment="Red Hat Enterprise Linux 5 is installed"/>
                  </criteria>
            </definition>
      </definitions>
      <tests>
            <rpminfo_test check_existence="at_least_one_exists" comment="redhat-release is version 5" version="1" id="oval:gov.irs.rhel5:tst:10000" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
                  <object object_ref="oval:gov.irs.rhel5:obj:10000"/>
                  <state state_ref="oval:gov.irs.rhel5:ste:10000"/>
            </rpminfo_test>
            <family_test check_existence="at_least_one_exists" comment="installed operating system is part of the Unix family" version="1" id="oval:gov.irs.rhel5:tst:10001" check="only one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
                  <object object_ref="oval:gov.irs.rhel5:obj:10001"/>
                  <state state_ref="oval:gov.irs.rhel5:ste:10001"/>
            </family_test>
            <runlevel_test check_existence="any_exist" comment="The rhnsd service should not be started at runlevel 2" version="1" id="oval:gov.irs.rhel5:tst:1" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <object object_ref="oval:gov.irs.rhel5:obj:1"/>
                  <state state_ref="oval:gov.irs.rhel5:ste:1"/>
            </runlevel_test>
            <runlevel_test check_existence="any_exist" comment="The rhnsd service should not be started at runlevel 3" version="1" id="oval:gov.irs.rhel5:tst:2" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <object object_ref="oval:gov.irs.rhel5:obj:2"/>
                  <state state_ref="oval:gov.irs.rhel5:ste:1"/>
            </runlevel_test>
            <runlevel_test check_existence="any_exist" comment="The rhnsd service should not be started at runlevel 4" version="1" id="oval:gov.irs.rhel5:tst:3" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <object object_ref="oval:gov.irs.rhel5:obj:3"/>
                  <state state_ref="oval:gov.irs.rhel5:ste:1"/>
            </runlevel_test>
            <runlevel_test check_existence="any_exist" comment="The rhnsd service should not be started at runlevel 5" version="1" id="oval:gov.irs.rhel5:tst:4" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <object object_ref="oval:gov.irs.rhel5:obj:4"/>
                  <state state_ref="oval:gov.irs.rhel5:ste:1"/>
            </runlevel_test>
            <runlevel_test check_existence="any_exist" comment="The yum-updatesd service should not be started at runlevel 2" version="1" id="oval:gov.irs.rhel5:tst:5" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <object object_ref="oval:gov.irs.rhel5:obj:5"/>
                  <state state_ref="oval:gov.irs.rhel5:ste:2"/>
            </runlevel_test>
            <runlevel_test check_existence="any_exist" comment="The yum-updatesd service should not be started at runlevel 3" version="1" id="oval:gov.irs.rhel5:tst:6" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <object object_ref="oval:gov.irs.rhel5:obj:6"/>
                  <state state_ref="oval:gov.irs.rhel5:ste:2"/>
            </runlevel_test>
            <runlevel_test check_existence="any_exist" comment="The yum-updatesd service should not be started at runlevel 4" version="1" id="oval:gov.irs.rhel5:tst:7" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <object object_ref="oval:gov.irs.rhel5:obj:7"/>
                  <state state_ref="oval:gov.irs.rhel5:ste:2"/>
            </runlevel_test>
            <runlevel_test check_existence="any_exist" comment="The yum-updatesd service should not be started at runlevel 5" version="1" id="oval:gov.irs.rhel5:tst:8" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <object object_ref="oval:gov.irs.rhel5:obj:8"/>
                  <state state_ref="oval:gov.irs.rhel5:ste:2"/>
            </runlevel_test>
            <rpminfo_test check_existence="all_exist" comment="The aide package should be installed" version="1" id="oval:gov.irs.rhel5:tst:9" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
                  <object object_ref="oval:gov.irs.rhel5:obj:9"/>
            </rpminfo_test>
            <textfilecontent54_test check_existence="any_exist" comment="The nodev option should be enabled or disabled as appropriate for all non-root partitions." version="1" id="oval:gov.irs.rhel5:tst:10" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
                  <object object_ref="oval:gov.irs.rhel5:obj:10"/>
                  <state state_ref="oval:gov.irs.rhel5:ste:3"/>
            </textfilecontent54_test>
            <textfilecontent54_test check_existence="any_exist" comment="The nodev option should be enabled or disabled as appropriate for all removable media." version="1" id="oval:gov.irs.rhel5:tst:11" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
                  <object object_ref="oval:gov.irs.rhel5:obj:11"/>
                  <state state_ref="oval:gov.irs.rhel5:ste:4"/>
            </textfilecontent54_test>
            <textfilecontent54_test check_existence="any_exist" comment="The noexec option should be enabled or disabled as appropriate for all removable media." version="1" id="oval:gov.irs.rhel5:tst:12" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
                  <object object_ref="oval:gov.irs.rhel5:obj:17"/>
                  <state state_ref="oval:gov.irs.rhel5:ste:5"/>
            </textfilecontent54_test>
            <textfilecontent54_test check_existence="any_exist" comment="The nosuid option should be enabled or disabled as appropriate for all removable media." version="1" id="oval:gov.irs.rhel5:tst:13" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
                  <object object_ref="oval:gov.irs.rhel5:obj:23"/>
                  <state state_ref="oval:gov.irs.rhel5:ste:6"/>
            </textfilecontent54_test>
            <textfilecontent54_test check_existence="none_exist" comment="Console device ownership should be restricted to root-only as appropriate." version="1" id="oval:gov.irs.rhel5:tst:14" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
                  <object object_ref="oval:gov.irs.rhel5:obj:29"/>
            </textfilecontent54_test>
            <textfilecontent54_test check_existence="all_exist" comment="Console device ownership should be restricted to root-only as appropriate." version="1" id="oval:gov.irs.rhel5:tst:15" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
                  <object object_ref="oval:gov.irs.rhel5:obj:30"/>
            </textfilecontent54_test>
            <textfilecontent54_test check_existence="all_exist" comment="Console device ownership should be restricted to root-only as appropriate." version="1" id="oval:gov.irs.rhel5:tst:16" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
                  <object object_ref="oval:gov.irs.rhel5:obj:31"/>
            </textfilecontent54_test>
            <textfilecontent54_test check_existence="all_exist" comment="The USB device support module should be loaded or not as appropriate" version="1" id="oval:gov.irs.rhel5:tst:17" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
                  <object object_ref="oval:gov.irs.rhel5:obj:32"/>
            </textfilecontent54_test>
            <file_test check_existence="none_exist" comment="File existence test for /lib/modules/.*/kernel/drivers/usb/storage/usb-storage.ko" version="1" id="oval:gov.irs.rhel5:tst:18" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <object object_ref="oval:gov.irs.rhel5:obj:33"/>
            </file_test>
            <textfilecontent54_test check_existence="none_exist" comment="USB kernel support should be enabled or disabled as appropriate." version="1" id="oval:gov.irs.rhel5:tst:19" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
                  <object object_ref="oval:gov.irs.rhel5:obj:34"/>
            </textfilecontent54_test>
            <unknown_test comment="Test implementation is unknown, unavailable, or impossible" version="1" id="oval:gov.irs.rhel5:tst:20" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent"/>
            <runlevel_test check_existence="any_exist" comment="The autofs service should not be started at runlevel 2" version="1" id="oval:gov.irs.rhel5:tst:21" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <object object_ref="oval:gov.irs.rhel5:obj:35"/>
                  <state state_ref="oval:gov.irs.rhel5:ste:7"/>
            </runlevel_test>
            <runlevel_test check_existence="any_exist" comment="The autofs service should not be started at runlevel 3" version="1" id="oval:gov.irs.rhel5:tst:22" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <object object_ref="oval:gov.irs.rhel5:obj:36"/>
                  <state state_ref="oval:gov.irs.rhel5:ste:7"/>
            </runlevel_test>
            <runlevel_test check_existence="any_exist" comment="The autofs service should not be started at runlevel 4" version="1" id="oval:gov.irs.rhel5:tst:23" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <object object_ref="oval:gov.irs.rhel5:obj:37"/>
                  <state state_ref="oval:gov.irs.rhel5:ste:7"/>
            </runlevel_test>
            <runlevel_test check_existence="any_exist" comment="The autofs service should not be started at runlevel 5" version="1" id="oval:gov.irs.rhel5:tst:24" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <object object_ref="oval:gov.irs.rhel5:obj:38"/>
                  <state state_ref="oval:gov.irs.rhel5:ste:7"/>
            </runlevel_test>
            <xmlfilecontent_test check_existence="all_exist" comment="The GNOME automounter (gnome-volume-manager) should be enabled or disabled as appropriate" version="1" id="oval:gov.irs.rhel5:tst:25" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
                  <object object_ref="oval:gov.irs.rhel5:obj:39"/>
                  <state state_ref="oval:gov.irs.rhel5:ste:8"/>
            </xmlfilecontent_test>
            <xmlfilecontent_test check_existence="all_exist" comment="The GNOME automounter (gnome-volume-manager) should be enabled or disabled as appropriate" version="1" id="oval:gov.irs.rhel5:tst:26" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
                  <object object_ref="oval:gov.irs.rhel5:obj:40"/>
                  <state state_ref="oval:gov.irs.rhel5:ste:9"/>
            </xmlfilecontent_test>
            <file_test check_existence="all_exist" comment="File permissions test for /etc/shadow" version="1" id="oval:gov.irs.rhel5:tst:27" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <object object_ref="oval:gov.irs.rhel5:obj:41"/>
                  <state state_ref="oval:gov.irs.rhel5:ste:10"/>
            </file_test>
            <file_test check_existence="all_exist" comment="File permissions test for /etc/group" version="1" id="oval:gov.irs.rhel5:tst:28" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <object object_ref="oval:gov.irs.rhel5:obj:42"/>
                  <state state_ref="oval:gov.irs.rhel5:ste:11"/>
            </file_test>
            <file_test check_existence="all_exist" comment="File permissions test for /etc/group" version="1" id="oval:gov.irs.rhel5:tst:29" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <object object_ref="oval:gov.irs.rhel5:obj:42"/>
                  <state state_ref="oval:gov.irs.rhel5:ste:12"/>
            </file_test>
            <file_test check_existence="all_exist" comment="File permissions for /etc/gshadow should be set to 400" version="1" id="oval:gov.irs.rhel5:tst:30" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <object object_ref="oval:gov.irs.rhel5:obj:43"/>
                  <state state_ref="oval:gov.irs.rhel5:ste:13"/>
            </file_test>
            <file_test check_existence="all_exist" comment="File permissions test for /etc/gshadow" version="1" id="oval:gov.irs.rhel5:tst:31" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <object object_ref="oval:gov.irs.rhel5:obj:43"/>
                  <state state_ref="oval:gov.irs.rhel5:ste:14"/>
            </file_test>
            <file_test check_existence="all_exist" comment="File permissions test for /etc/gshadow" version="1" id="oval:gov.irs.rhel5:tst:32" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <object object_ref="oval:gov.irs.rhel5:obj:43"/>
                  <state state_ref="oval:gov.irs.rhel5:ste:15"/>
            </file_test>
            <file_test check_existence="all_exist" comment="File permissions test for /etc/shadow" version="1" id="oval:gov.irs.rhel5:tst:33" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <object object_ref="oval:gov.irs.rhel5:obj:41"/>
                  <state state_ref="oval:gov.irs.rhel5:ste:16"/>
            </file_test>
            <file_test check_existence="all_exist" comment="File permissions for /etc/passwd should be set to 644" version="1" id="oval:gov.irs.rhel5:tst:34" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <object object_ref="oval:gov.irs.rhel5:obj:44"/>
                  <state state_ref="oval:gov.irs.rhel5:ste:17"/>
            </file_test>
            <file_test check_existence="all_exist" comment="File permissions test for /etc/passwd" version="1" id="oval:gov.irs.rhel5:tst:35" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <object object_ref="oval:gov.irs.rhel5:obj:44"/>
                  <state state_ref="oval:gov.irs.rhel5:ste:18"/>
            </file_test>
            <file_test check_existence="all_exist" comment="File permissions for /etc/group should be set to 644" version="1" id="oval:gov.irs.rhel5:tst:36" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <object object_ref="oval:gov.irs.rhel5:obj:42"/>
                  <state state_ref="oval:gov.irs.rhel5:ste:19"/>
            </file_test>
            <file_test check_existence="all_exist" comment="File permissions test for /etc/passwd" version="1" id="oval:gov.irs.rhel5:tst:37" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <object object_ref="oval:gov.irs.rhel5:obj:44"/>
                  <state state_ref="oval:gov.irs.rhel5:ste:20"/>
            </file_test>
            <file_test check_existence="all_exist" comment="File permissions for /etc/shadow should be set to 400" version="1" id="oval:gov.irs.rhel5:tst:38" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <object object_ref="oval:gov.irs.rhel5:obj:41"/>
                  <state state_ref="oval:gov.irs.rhel5:ste:21"/>
            </file_test>
            <file_test check_existence="all_exist" comment="The sticky bit should be set or not set as appropriate for all world-writable directories." version="1" id="oval:gov.irs.rhel5:tst:39" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <object object_ref="oval:gov.irs.rhel5:obj:45"/>
                  <state state_ref="oval:gov.irs.rhel5:ste:23"/>
            </file_test>
            <file_test check_existence="all_exist" comment="The world-write permission should be enabled or disabled as appropriate for all files." version="1" id="oval:gov.irs.rhel5:tst:40" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <object object_ref="oval:gov.irs.rhel5:obj:47"/>
                  <state state_ref="oval:gov.irs.rhel5:ste:25"/>
            </file_test>
            <file_test check_existence="none_exist" comment="The sgid bit should be set or not set as appropriate for all files." version="1" id="oval:gov.irs.rhel5:tst:41" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <object object_ref="oval:gov.irs.rhel5:obj:49"/>
            </file_test>
            <file_test check_existence="none_exist" comment="The suid bit should be set or not set as appropriate for all files." version="1" id="oval:gov.irs.rhel5:tst:42" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <object object_ref="oval:gov.irs.rhel5:obj:56"/>
            </file_test>
            <unknown_test comment="Test implementation is unknown, unavailable, or impossible" version="1" id="oval:gov.irs.rhel5:tst:43" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent"/>
            <unknown_test comment="Test implementation is unknown, unavailable, or impossible" version="1" id="oval:gov.irs.rhel5:tst:44" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent"/>
            <textfilecontent54_test check_existence="all_exist" comment="The daemon umask should be set as appropriate" version="1" id="oval:gov.irs.rhel5:tst:45" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
                  <object object_ref="oval:gov.irs.rhel5:obj:58"/>
            </textfilecontent54_test>
            <textfilecontent54_test check_existence="all_exist" comment="Core dumps for all users should be enabled or disabled as appropriate" version="1" id="oval:gov.irs.rhel5:tst:46" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
                  <object object_ref="oval:gov.irs.rhel5:obj:59"/>
            </textfilecontent54_test>
            <textfilecontent54_test check_existence="all_exist" comment="Sysctl setting fs.suid_dumpable is disabled" version="1" id="oval:gov.irs.rhel5:tst:47" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
                  <object object_ref="oval:gov.irs.rhel5:obj:60"/>
            </textfilecontent54_test>
            <textfilecontent54_test check_existence="all_exist" comment="Sysctl setting kernel.randomize_va_space is enabled" version="1" id="oval:gov.irs.rhel5:tst:48" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
                  <object object_ref="oval:gov.irs.rhel5:obj:61"/>
            </textfilecontent54_test>
            <textfilecontent54_test check_existence="all_exist" comment="Sysctl setting kernel.exec-shield is enabled" version="1" id="oval:gov.irs.rhel5:tst:49" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
                  <object object_ref="oval:gov.irs.rhel5:obj:62"/>
            </textfilecontent54_test>
            <rpminfo_test check_existence="all_exist" comment="The kernel-PAE package should be installed" version="1" id="oval:gov.irs.rhel5:tst:50" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
                  <object object_ref="oval:gov.irs.rhel5:obj:63"/>
            </rpminfo_test>
            <unknown_test comment="Test implementation is unknown, unavailable, or impossible" version="1" id="oval:gov.irs.rhel5:tst:51" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent"/>
            <textfilecontent54_test check_existence="none_exist" comment="Logins through the specified virtual console interface should be enabled or disabled as appropriate" version="1" id="oval:gov.irs.rhel5:tst:52" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
                  <object object_ref="oval:gov.irs.rhel5:obj:64"/>
            </textfilecontent54_test>
            <textfilecontent54_test check_existence="none_exist" comment="Logins through the specified virtual console device should be enabled or disabled as appropriate" version="1" id="oval:gov.irs.rhel5:tst:53" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
                  <object object_ref="oval:gov.irs.rhel5:obj:65"/>
            </textfilecontent54_test>
            <textfilecontent54_test check_existence="none_exist" comment="Logins through the primary console device should be enabled or disabled as appropriate" version="1" id="oval:gov.irs.rhel5:tst:54" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
                  <object object_ref="oval:gov.irs.rhel5:obj:66"/>
            </textfilecontent54_test>
            <textfilecontent54_test check_existence="none_exist" comment="Login prompts on serial ports should be enabled or disabled as appropriate." version="1" id="oval:gov.irs.rhel5:tst:55" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
                  <object object_ref="oval:gov.irs.rhel5:obj:67"/>
            </textfilecontent54_test>
            <textfilecontent54_test check_existence="all_exist" comment="Command access to the root account should be enabled or disabled as appropriate." version="1" id="oval:gov.irs.rhel5:tst:56" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
                  <object object_ref="oval:gov.irs.rhel5:obj:68"/>
            </textfilecontent54_test>
            <textfilecontent54_test check_existence="all_exist" comment="Command access to the root account should be enabled or disabled as appropriate." version="1" id="oval:gov.irs.rhel5:tst:57" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
                  <object object_ref="oval:gov.irs.rhel5:obj:69"/>
            </textfilecontent54_test>
            <textfilecontent54_test check_existence="all_exist" comment="Sudo privileges should granted or rejected to the wheel group as appropriate" version="1" id="oval:gov.irs.rhel5:tst:58" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
                  <object object_ref="oval:gov.irs.rhel5:obj:70"/>
            </textfilecontent54_test>
            <textfilecontent54_test check_existence="all_exist" comment="The password should be disabled for all system accounts" version="1" id="oval:gov.irs.rhel5:tst:59" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
                  <object object_ref="oval:gov.irs.rhel5:obj:73"/>
            </textfilecontent54_test>
            <textfilecontent54_test check_existence="all_exist" comment="The login shell should be set to /sbin/nologin for all system accounts as appropriate" version="1" id="oval:gov.irs.rhel5:tst:60" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
                  <object object_ref="oval:gov.irs.rhel5:obj:74"/>
            </textfilecontent54_test>
            <textfilecontent54_test check_existence="none_exist" comment="Login access to accounts without passwords should be enabled or disabled as appropriate" version="1" id="oval:gov.irs.rhel5:tst:61" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
                  <object object_ref="oval:gov.irs.rhel5:obj:75"/>
            </textfilecontent54_test>
            <textfilecontent54_test check_existence="none_exist" comment="Anonymous root logins are enabled or disabled as appropriate" version="1" id="oval:gov.irs.rhel5:tst:62" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
                  <object object_ref="oval:gov.irs.rhel5:obj:76"/>
            </textfilecontent54_test>
            <textfilecontent54_test check_existence="all_exist" comment="The password minimum length should be set appropriately" version="1" id="oval:gov.irs.rhel5:tst:63" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
                  <object object_ref="oval:gov.irs.rhel5:obj:77"/>
            </textfilecontent54_test>
            <textfilecontent54_test check_existence="all_exist" comment="The &quot;minimum password age&quot; policy should meet minimum requirements.  " version="1" id="oval:gov.irs.rhel5:tst:64" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
                  <object object_ref="oval:gov.irs.rhel5:obj:78"/>
            </textfilecontent54_test>
            <textfilecontent54_test check_existence="all_exist" comment="The &quot;maximum password age&quot; policy should meet minimum requirements.  " version="1" id="oval:gov.irs.rhel5:tst:65" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
                  <object object_ref="oval:gov.irs.rhel5:obj:79"/>
            </textfilecontent54_test>
            <textfilecontent54_test check_existence="all_exist" comment="The password warn age should be set appropriately" version="1" id="oval:gov.irs.rhel5:tst:66" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
                  <object object_ref="oval:gov.irs.rhel5:obj:80"/>
            </textfilecontent54_test>
            <textfilecontent54_test check_existence="all_exist" comment="NIS file inclusions should be set appropriately in the /etc/passwd file" version="1" id="oval:gov.irs.rhel5:tst:67" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
                  <object object_ref="oval:gov.irs.rhel5:obj:81"/>
            </textfilecontent54_test>
            <textfilecontent54_test check_existence="all_exist" comment="NIS file inclusions should be set appropriately in the /etc/passwd file" version="1" id="oval:gov.irs.rhel5:tst:68" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
                  <object object_ref="oval:gov.irs.rhel5:obj:82"/>
            </textfilecontent54_test>
            <textfilecontent54_test check_existence="all_exist" comment="NIS file inclusions should be set appropriately in the /etc/passwd file" version="1" id="oval:gov.irs.rhel5:tst:69" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
                  <object object_ref="oval:gov.irs.rhel5:obj:83"/>
            </textfilecontent54_test>
            <unknown_test comment="Test implementation is unknown, unavailable, or impossible" version="1" id="oval:gov.irs.rhel5:tst:70" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent"/>
            <unknown_test comment="Test implementation is unknown, unavailable, or impossible" version="1" id="oval:gov.irs.rhel5:tst:71" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent"/>
            <file_test check_existence="all_exist" comment="File permissions test for /usr/sbin/userhelper" version="1" id="oval:gov.irs.rhel5:tst:72" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <object object_ref="oval:gov.irs.rhel5:obj:85"/>
                  <state state_ref="oval:gov.irs.rhel5:ste:48"/>
            </file_test>
            <file_test check_existence="all_exist" comment="File permissions for /usr/sbin/userhelper should be set to 4710" version="1" id="oval:gov.irs.rhel5:tst:73" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <object object_ref="oval:gov.irs.rhel5:obj:85"/>
                  <state state_ref="oval:gov.irs.rhel5:ste:49"/>
            </file_test>
            <unknown_test comment="Test implementation is unknown, unavailable, or impossible" version="1" id="oval:gov.irs.rhel5:tst:74" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent"/>
            <file_test check_existence="all_exist" comment="File permissions for /home/.* should be set to g-w,o-rwx" version="1" id="oval:gov.irs.rhel5:tst:75" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <object object_ref="oval:gov.irs.rhel5:obj:86"/>
                  <state state_ref="oval:gov.irs.rhel5:ste:50"/>
            </file_test>
            <textfilecontent54_test check_existence="all_exist" comment="The default umask for all users should be set correctly for the bash shell" version="1" id="oval:gov.irs.rhel5:tst:76" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
                  <object object_ref="oval:gov.irs.rhel5:obj:87"/>
            </textfilecontent54_test>
            <textfilecontent54_test check_existence="all_exist" comment="The default umask for all users should be set correctly for the csh shell" version="1" id="oval:gov.irs.rhel5:tst:77" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
                  <object object_ref="oval:gov.irs.rhel5:obj:88"/>
            </textfilecontent54_test>
            <textfilecontent54_test check_existence="all_exist" comment="The default umask for all users should be set correctly" version="1" id="oval:gov.irs.rhel5:tst:78" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
                  <object object_ref="oval:gov.irs.rhel5:obj:89"/>
            </textfilecontent54_test>
            <file_test check_existence="all_exist" comment="File permissions test for /etc/grub.conf" version="1" id="oval:gov.irs.rhel5:tst:79" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <object object_ref="oval:gov.irs.rhel5:obj:90"/>
                  <state state_ref="oval:gov.irs.rhel5:ste:51"/>
            </file_test>
            <file_test check_existence="all_exist" comment="File permissions for /etc/grub.conf should be set to 600" version="1" id="oval:gov.irs.rhel5:tst:80" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <object object_ref="oval:gov.irs.rhel5:obj:90"/>
                  <state state_ref="oval:gov.irs.rhel5:ste:52"/>
            </file_test>
            <textfilecontent54_test check_existence="all_exist" comment="The grub boot loader should have password protection enabled or disabled as appropriate" version="1" id="oval:gov.irs.rhel5:tst:81" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
                  <object object_ref="oval:gov.irs.rhel5:obj:91"/>
            </textfilecontent54_test>
            <file_test check_existence="all_exist" comment="File permissions test for /etc/grub.conf" version="1" id="oval:gov.irs.rhel5:tst:82" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <object object_ref="oval:gov.irs.rhel5:obj:90"/>
                  <state state_ref="oval:gov.irs.rhel5:ste:53"/>
            </file_test>
            <textfilecontent54_test check_existence="all_exist" comment="The requirement for a password to boot into single-user mode should be configured correctly." version="1" id="oval:gov.irs.rhel5:tst:83" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
                  <object object_ref="oval:gov.irs.rhel5:obj:92"/>
            </textfilecontent54_test>
            <textfilecontent54_test check_existence="all_exist" comment="The ability for users to perform interactive startups should be enabled or disabled as appropriate." version="1" id="oval:gov.irs.rhel5:tst:84" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
                  <object object_ref="oval:gov.irs.rhel5:obj:93"/>
            </textfilecontent54_test>
            <textfilecontent54_test check_existence="all_exist" comment="The idle time-out value for the default /bin/tcsh shell should meet the minimum requirements." version="1" id="oval:gov.irs.rhel5:tst:85" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
                  <object object_ref="oval:gov.irs.rhel5:obj:94"/>
            </textfilecontent54_test>
            <textfilecontent54_test check_existence="all_exist" comment="The idle time-out value for the default /bin/bash shell should meet the minimum requirements." version="1" id="oval:gov.irs.rhel5:tst:86" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
                  <object object_ref="oval:gov.irs.rhel5:obj:95"/>
            </textfilecontent54_test>
            <textfilecontent54_test check_existence="all_exist" comment="The idle time-out value for the default /bin/bash shell should meet the minimum requirements." version="1" id="oval:gov.irs.rhel5:tst:87" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
                  <object object_ref="oval:gov.irs.rhel5:obj:96"/>
            </textfilecontent54_test>
            <textfilecontent54_test check_existence="all_exist" comment="The idle time-out value for the default /bin/bash shell should meet the minimum requirements." version="1" id="oval:gov.irs.rhel5:tst:88" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
                  <object object_ref="oval:gov.irs.rhel5:obj:97"/>
            </textfilecontent54_test>
            <xmlfilecontent_test check_existence="all_exist" comment="The allowed period of inactivity gnome desktop lockout should be configured correctly." version="1" id="oval:gov.irs.rhel5:tst:89" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
                  <object object_ref="oval:gov.irs.rhel5:obj:98"/>
                  <state state_ref="oval:gov.irs.rhel5:ste:54"/>
            </xmlfilecontent_test>
            <xmlfilecontent_test check_existence="all_exist" comment="The allowed period of inactivity gnome desktop lockout should be configured correctly." version="1" id="oval:gov.irs.rhel5:tst:90" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
                  <object object_ref="oval:gov.irs.rhel5:obj:99"/>
                  <state state_ref="oval:gov.irs.rhel5:ste:55"/>
            </xmlfilecontent_test>
            <xmlfilecontent_test check_existence="all_exist" comment="The allowed period of inactivity gnome desktop lockout should be configured correctly." version="1" id="oval:gov.irs.rhel5:tst:91" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
                  <object object_ref="oval:gov.irs.rhel5:obj:100"/>
                  <state state_ref="oval:gov.irs.rhel5:ste:56"/>
            </xmlfilecontent_test>
            <rpminfo_test check_existence="all_exist" comment="The vlock package should be installed" version="1" id="oval:gov.irs.rhel5:tst:92" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
                  <object object_ref="oval:gov.irs.rhel5:obj:101"/>
            </rpminfo_test>
            <file_test check_existence="all_exist" comment="File existence test for /etc/issue" version="1" id="oval:gov.irs.rhel5:tst:93" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <object object_ref="oval:gov.irs.rhel5:obj:102"/>
            </file_test>
            <unknown_test comment="Test implementation is unknown, unavailable, or impossible" version="1" id="oval:gov.irs.rhel5:tst:94" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent"/>
            <textfilecontent54_test check_existence="all_exist" comment="SELinux should be enabled or disabled as appropriate" version="1" id="oval:gov.irs.rhel5:tst:95" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
                  <object object_ref="oval:gov.irs.rhel5:obj:103"/>
            </textfilecontent54_test>
            <textfilecontent54_test check_existence="all_exist" comment="The SELinux state should be set appropriately." version="1" id="oval:gov.irs.rhel5:tst:96" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
                  <object object_ref="oval:gov.irs.rhel5:obj:104"/>
            </textfilecontent54_test>
            <textfilecontent54_test check_existence="all_exist" comment="The SELinux state should be set appropriately." version="1" id="oval:gov.irs.rhel5:tst:97" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
                  <object object_ref="oval:gov.irs.rhel5:obj:105"/>
            </textfilecontent54_test>
            <textfilecontent54_test check_existence="all_exist" comment="The SELinux policy should be set appropriately." version="1" id="oval:gov.irs.rhel5:tst:98" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
                  <object object_ref="oval:gov.irs.rhel5:obj:106"/>
            </textfilecontent54_test>
            <runlevel_test check_existence="any_exist" comment="The setroubleshoot service should not be started at runlevel 2" version="1" id="oval:gov.irs.rhel5:tst:99" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <object object_ref="oval:gov.irs.rhel5:obj:107"/>
                  <state state_ref="oval:gov.irs.rhel5:ste:57"/>
            </runlevel_test>
            <runlevel_test check_existence="any_exist" comment="The setroubleshoot service should not be started at runlevel 3" version="1" id="oval:gov.irs.rhel5:tst:100" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <object object_ref="oval:gov.irs.rhel5:obj:108"/>
                  <state state_ref="oval:gov.irs.rhel5:ste:57"/>
            </runlevel_test>
            <runlevel_test check_existence="any_exist" comment="The setroubleshoot service should not be started at runlevel 4" version="1" id="oval:gov.irs.rhel5:tst:101" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <object object_ref="oval:gov.irs.rhel5:obj:109"/>
                  <state state_ref="oval:gov.irs.rhel5:ste:57"/>
            </runlevel_test>
            <runlevel_test check_existence="any_exist" comment="The setroubleshoot service should not be started at runlevel 5" version="1" id="oval:gov.irs.rhel5:tst:102" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <object object_ref="oval:gov.irs.rhel5:obj:110"/>
                  <state state_ref="oval:gov.irs.rhel5:ste:57"/>
            </runlevel_test>
            <rpminfo_test check_existence="none_exist" comment="The setroubleshoot package should not be installed" version="1" id="oval:gov.irs.rhel5:tst:103" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
                  <object object_ref="oval:gov.irs.rhel5:obj:111"/>
            </rpminfo_test>
            <runlevel_test check_existence="any_exist" comment="The mcstrans service should not be started at runlevel 2" version="1" id="oval:gov.irs.rhel5:tst:104" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <object object_ref="oval:gov.irs.rhel5:obj:112"/>
                  <state state_ref="oval:gov.irs.rhel5:ste:58"/>
            </runlevel_test>
            <runlevel_test check_existence="any_exist" comment="The mcstrans service should not be started at runlevel 3" version="1" id="oval:gov.irs.rhel5:tst:105" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <object object_ref="oval:gov.irs.rhel5:obj:113"/>
                  <state state_ref="oval:gov.irs.rhel5:ste:58"/>
            </runlevel_test>
            <runlevel_test check_existence="any_exist" comment="The mcstrans service should not be started at runlevel 4" version="1" id="oval:gov.irs.rhel5:tst:106" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <object object_ref="oval:gov.irs.rhel5:obj:114"/>
                  <state state_ref="oval:gov.irs.rhel5:ste:58"/>
            </runlevel_test>
            <runlevel_test check_existence="any_exist" comment="The mcstrans service should not be started at runlevel 5" version="1" id="oval:gov.irs.rhel5:tst:107" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <object object_ref="oval:gov.irs.rhel5:obj:115"/>
                  <state state_ref="oval:gov.irs.rhel5:ste:58"/>
            </runlevel_test>
            <runlevel_test check_existence="any_exist" comment="The restorecond service should not be started at runlevel 2" version="1" id="oval:gov.irs.rhel5:tst:108" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <object object_ref="oval:gov.irs.rhel5:obj:116"/>
                  <state state_ref="oval:gov.irs.rhel5:ste:59"/>
            </runlevel_test>
            <runlevel_test check_existence="any_exist" comment="The restorecond service should not be started at runlevel 3" version="1" id="oval:gov.irs.rhel5:tst:109" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <object object_ref="oval:gov.irs.rhel5:obj:117"/>
                  <state state_ref="oval:gov.irs.rhel5:ste:59"/>
            </runlevel_test>
            <runlevel_test check_existence="any_exist" comment="The restorecond service should not be started at runlevel 4" version="1" id="oval:gov.irs.rhel5:tst:110" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <object object_ref="oval:gov.irs.rhel5:obj:118"/>
                  <state state_ref="oval:gov.irs.rhel5:ste:59"/>
            </runlevel_test>
            <runlevel_test check_existence="any_exist" comment="The restorecond service should not be started at runlevel 5" version="1" id="oval:gov.irs.rhel5:tst:111" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <object object_ref="oval:gov.irs.rhel5:obj:119"/>
                  <state state_ref="oval:gov.irs.rhel5:ste:59"/>
            </runlevel_test>
            <textfilecontent54_test check_existence="all_exist" comment="Sysctl setting net.ipv4.conf.default.send_redirects is disabled" version="1" id="oval:gov.irs.rhel5:tst:112" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
                  <object object_ref="oval:gov.irs.rhel5:obj:120"/>
            </textfilecontent54_test>
            <textfilecontent54_test check_existence="all_exist" comment="Sysctl setting net.ipv4.conf.all.send_redirects is disabled" version="1" id="oval:gov.irs.rhel5:tst:113" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
                  <object object_ref="oval:gov.irs.rhel5:obj:121"/>
            </textfilecontent54_test>
            <textfilecontent54_test check_existence="all_exist" comment="Sysctl setting net.ipv4.ip_forward is disabled" version="1" id="oval:gov.irs.rhel5:tst:114" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
                  <object object_ref="oval:gov.irs.rhel5:obj:122"/>
            </textfilecontent54_test>
            <textfilecontent54_test check_existence="all_exist" comment="Sysctl setting net.ipv4.conf.all.secure_redirects is disabled" version="1" id="oval:gov.irs.rhel5:tst:115" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
                  <object object_ref="oval:gov.irs.rhel5:obj:123"/>
            </textfilecontent54_test>
            <textfilecontent54_test check_existence="all_exist" comment="Sysctl setting net.ipv4.conf.all.accept_redirects is disabled" version="1" id="oval:gov.irs.rhel5:tst:116" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
                  <object object_ref="oval:gov.irs.rhel5:obj:124"/>
            </textfilecontent54_test>
            <textfilecontent54_test check_existence="all_exist" comment="Sysctl setting net.ipv4.icmp_ignore_bogus_error_messages is enabled" version="1" id="oval:gov.irs.rhel5:tst:117" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
                  <object object_ref="oval:gov.irs.rhel5:obj:125"/>
            </textfilecontent54_test>
            <textfilecontent54_test check_existence="all_exist" comment="Sysctl setting net.ipv4.tcp_syncookies is enabled" version="1" id="oval:gov.irs.rhel5:tst:118" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
                  <object object_ref="oval:gov.irs.rhel5:obj:126"/>
            </textfilecontent54_test>
            <textfilecontent54_test check_existence="all_exist" comment="Sysctl setting net.ipv4.icmp_echo_ignore_broadcasts is enabled" version="1" id="oval:gov.irs.rhel5:tst:119" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
                  <object object_ref="oval:gov.irs.rhel5:obj:127"/>
            </textfilecontent54_test>
            <textfilecontent54_test check_existence="all_exist" comment="Sysctl setting net.ipv4.conf.default.accept_redirects is disabled" version="1" id="oval:gov.irs.rhel5:tst:120" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
                  <object object_ref="oval:gov.irs.rhel5:obj:128"/>
            </textfilecontent54_test>
            <textfilecontent54_test check_existence="all_exist" comment="Sysctl setting net.ipv4.conf.all.rp_filter is enabled" version="1" id="oval:gov.irs.rhel5:tst:121" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
                  <object object_ref="oval:gov.irs.rhel5:obj:129"/>
            </textfilecontent54_test>
            <textfilecontent54_test check_existence="all_exist" comment="Sysctl setting net.ipv4.conf.default.secure_redirects is disabled" version="1" id="oval:gov.irs.rhel5:tst:122" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
                  <object object_ref="oval:gov.irs.rhel5:obj:130"/>
            </textfilecontent54_test>
            <textfilecontent54_test check_existence="all_exist" comment="Sysctl setting net.ipv4.conf.all.log_martians is enabled" version="1" id="oval:gov.irs.rhel5:tst:123" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
                  <object object_ref="oval:gov.irs.rhel5:obj:131"/>
            </textfilecontent54_test>
            <textfilecontent54_test check_existence="all_exist" comment="Sysctl setting net.ipv4.conf.default.rp_filter is enabled" version="1" id="oval:gov.irs.rhel5:tst:124" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
                  <object object_ref="oval:gov.irs.rhel5:obj:132"/>
            </textfilecontent54_test>
            <textfilecontent54_test check_existence="all_exist" comment="Sysctl setting net.ipv4.conf.default.accept_source_route is disabled" version="1" id="oval:gov.irs.rhel5:tst:125" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
                  <object object_ref="oval:gov.irs.rhel5:obj:133"/>
            </textfilecontent54_test>
            <textfilecontent54_test check_existence="all_exist" comment="Sysctl setting net.ipv4.conf.all.accept_source_route is disabled" version="1" id="oval:gov.irs.rhel5:tst:126" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
                  <object object_ref="oval:gov.irs.rhel5:obj:134"/>
            </textfilecontent54_test>
            <unknown_test comment="Test implementation is unknown, unavailable, or impossible" version="1" id="oval:gov.irs.rhel5:tst:127" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent"/>
            <unknown_test comment="Test implementation is unknown, unavailable, or impossible" version="1" id="oval:gov.irs.rhel5:tst:128" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent"/>
            <file_test check_existence="none_exist" comment="File existence test for /lib/modules/.*/kernel/drivers/net/wireless/" version="1" id="oval:gov.irs.rhel5:tst:129" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <object object_ref="oval:gov.irs.rhel5:obj:135"/>
            </file_test>
            <textfilecontent54_test check_existence="all_exist" comment="Automatic loading of the IPv6 kernel module should be enabled or disabled as appropriate." version="1" id="oval:gov.irs.rhel5:tst:130" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
                  <object object_ref="oval:gov.irs.rhel5:obj:136"/>
            </textfilecontent54_test>
            <textfilecontent54_test check_existence="all_exist" comment="Global IPv6 initialization should be enabled or disabled as appropriate." version="1" id="oval:gov.irs.rhel5:tst:131" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
                  <object object_ref="oval:gov.irs.rhel5:obj:137"/>
            </textfilecontent54_test>
            <textfilecontent54_test check_existence="all_exist" comment="IPv6 configuration should be enabled or disabled as appropriate for all interfaces." version="1" id="oval:gov.irs.rhel5:tst:132" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
                  <object object_ref="oval:gov.irs.rhel5:obj:138"/>
            </textfilecontent54_test>
            <textfilecontent54_test check_existence="all_exist" comment="The default setting for IPv6 configuration should be enabled or disabled for network interfaces as appropriate." version="1" id="oval:gov.irs.rhel5:tst:133" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
                  <object object_ref="oval:gov.irs.rhel5:obj:139"/>
            </textfilecontent54_test>
            <textfilecontent54_test check_existence="all_exist" comment="Accepting IPv6 router advertisements should be enabled or disabled as appropriate for all network interfaces." version="1" id="oval:gov.irs.rhel5:tst:134" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
                  <object object_ref="oval:gov.irs.rhel5:obj:140"/>
            </textfilecontent54_test>
            <unknown_test comment="Test implementation is unknown, unavailable, or impossible" version="1" id="oval:gov.irs.rhel5:tst:135" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent"/>
            <unknown_test comment="Test implementation is unknown, unavailable, or impossible" version="1" id="oval:gov.irs.rhel5:tst:136" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent"/>
            <unknown_test comment="Test implementation is unknown, unavailable, or impossible" version="1" id="oval:gov.irs.rhel5:tst:137" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent"/>
            <unknown_test comment="Test implementation is unknown, unavailable, or impossible" version="1" id="oval:gov.irs.rhel5:tst:138" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent"/>
            <textfilecontent54_test check_existence="all_exist" comment="Sysctl setting net.ipv6.conf.default.accept_ra_rtr_pref is disabled" version="1" id="oval:gov.irs.rhel5:tst:139" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
                  <object object_ref="oval:gov.irs.rhel5:obj:141"/>
            </textfilecontent54_test>
            <textfilecontent54_test check_existence="all_exist" comment="Sysctl setting net.ipv6.conf.default.max_addresses is 1" version="1" id="oval:gov.irs.rhel5:tst:140" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
                  <object object_ref="oval:gov.irs.rhel5:obj:142"/>
            </textfilecontent54_test>
            <textfilecontent54_test check_existence="all_exist" comment="Sysctl setting net.ipv6.conf.default.router_solicitations is 0" version="1" id="oval:gov.irs.rhel5:tst:141" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
                  <object object_ref="oval:gov.irs.rhel5:obj:143"/>
            </textfilecontent54_test>
            <textfilecontent54_test check_existence="all_exist" comment="Sysctl setting net.ipv6.conf.default.dad_transmits is 0" version="1" id="oval:gov.irs.rhel5:tst:142" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
                  <object object_ref="oval:gov.irs.rhel5:obj:144"/>
            </textfilecontent54_test>
            <textfilecontent54_test check_existence="all_exist" comment="Sysctl setting net.ipv6.conf.default.autoconf is disabled" version="1" id="oval:gov.irs.rhel5:tst:143" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
                  <object object_ref="oval:gov.irs.rhel5:obj:145"/>
            </textfilecontent54_test>
            <textfilecontent54_test check_existence="all_exist" comment="Sysctl setting net.ipv6.conf.default.accept_ra_pinfo is disabled" version="1" id="oval:gov.irs.rhel5:tst:144" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
                  <object object_ref="oval:gov.irs.rhel5:obj:146"/>
            </textfilecontent54_test>
            <textfilecontent54_test check_existence="all_exist" comment="Sysctl setting net.ipv6.conf.default.accept_ra_defrtr is disabled" version="1" id="oval:gov.irs.rhel5:tst:145" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
                  <object object_ref="oval:gov.irs.rhel5:obj:147"/>
            </textfilecontent54_test>
            <runlevel_test check_existence="any_exist" comment="The ip6tables service should not be started at runlevel 2" version="1" id="oval:gov.irs.rhel5:tst:146" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <object object_ref="oval:gov.irs.rhel5:obj:148"/>
                  <state state_ref="oval:gov.irs.rhel5:ste:60"/>
            </runlevel_test>
            <runlevel_test check_existence="any_exist" comment="The ip6tables service should not be started at runlevel 3" version="1" id="oval:gov.irs.rhel5:tst:147" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <object object_ref="oval:gov.irs.rhel5:obj:149"/>
                  <state state_ref="oval:gov.irs.rhel5:ste:60"/>
            </runlevel_test>
            <runlevel_test check_existence="any_exist" comment="The ip6tables service should not be started at runlevel 4" version="1" id="oval:gov.irs.rhel5:tst:148" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <object object_ref="oval:gov.irs.rhel5:obj:150"/>
                  <state state_ref="oval:gov.irs.rhel5:ste:60"/>
            </runlevel_test>
            <runlevel_test check_existence="any_exist" comment="The ip6tables service should not be started at runlevel 5" version="1" id="oval:gov.irs.rhel5:tst:149" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <object object_ref="oval:gov.irs.rhel5:obj:151"/>
                  <state state_ref="oval:gov.irs.rhel5:ste:60"/>
            </runlevel_test>
            <runlevel_test check_existence="any_exist" comment="The iptables service should not be started at runlevel 2" version="1" id="oval:gov.irs.rhel5:tst:150" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <object object_ref="oval:gov.irs.rhel5:obj:152"/>
                  <state state_ref="oval:gov.irs.rhel5:ste:61"/>
            </runlevel_test>
            <runlevel_test check_existence="any_exist" comment="The iptables service should not be started at runlevel 3" version="1" id="oval:gov.irs.rhel5:tst:151" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <object object_ref="oval:gov.irs.rhel5:obj:153"/>
                  <state state_ref="oval:gov.irs.rhel5:ste:61"/>
            </runlevel_test>
            <runlevel_test check_existence="any_exist" comment="The iptables service should not be started at runlevel 4" version="1" id="oval:gov.irs.rhel5:tst:152" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <object object_ref="oval:gov.irs.rhel5:obj:154"/>
                  <state state_ref="oval:gov.irs.rhel5:ste:61"/>
            </runlevel_test>
            <runlevel_test check_existence="any_exist" comment="The iptables service should not be started at runlevel 5" version="1" id="oval:gov.irs.rhel5:tst:153" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <object object_ref="oval:gov.irs.rhel5:obj:155"/>
                  <state state_ref="oval:gov.irs.rhel5:ste:61"/>
            </runlevel_test>
            <runlevel_test check_existence="any_exist" comment="The syslog service should not be started at runlevel 2" version="1" id="oval:gov.irs.rhel5:tst:154" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <object object_ref="oval:gov.irs.rhel5:obj:156"/>
                  <state state_ref="oval:gov.irs.rhel5:ste:62"/>
            </runlevel_test>
            <runlevel_test check_existence="any_exist" comment="The syslog service should not be started at runlevel 3" version="1" id="oval:gov.irs.rhel5:tst:155" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <object object_ref="oval:gov.irs.rhel5:obj:157"/>
                  <state state_ref="oval:gov.irs.rhel5:ste:62"/>
            </runlevel_test>
            <runlevel_test check_existence="any_exist" comment="The syslog service should not be started at runlevel 4" version="1" id="oval:gov.irs.rhel5:tst:156" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <object object_ref="oval:gov.irs.rhel5:obj:158"/>
                  <state state_ref="oval:gov.irs.rhel5:ste:62"/>
            </runlevel_test>
            <runlevel_test check_existence="any_exist" comment="The syslog service should not be started at runlevel 5" version="1" id="oval:gov.irs.rhel5:tst:157" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <object object_ref="oval:gov.irs.rhel5:obj:159"/>
                  <state state_ref="oval:gov.irs.rhel5:ste:62"/>
            </runlevel_test>
            <unknown_test comment="Test implementation is unknown, unavailable, or impossible" version="1" id="oval:gov.irs.rhel5:tst:158" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent"/>
            <unknown_test comment="Test implementation is unknown, unavailable, or impossible" version="1" id="oval:gov.irs.rhel5:tst:159" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent"/>
            <unknown_test comment="Test implementation is unknown, unavailable, or impossible" version="1" id="oval:gov.irs.rhel5:tst:160" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent"/>
            <textfilecontent54_test check_existence="all_exist" comment="Syslog logs should be sent to a remote loghost or not as appropriate" version="1" id="oval:gov.irs.rhel5:tst:161" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
                  <object object_ref="oval:gov.irs.rhel5:obj:160"/>
            </textfilecontent54_test>
            <textfilecontent54_test check_existence="all_exist" comment="Syslogd should accept remote messages or not as appropriate" version="1" id="oval:gov.irs.rhel5:tst:162" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
                  <object object_ref="oval:gov.irs.rhel5:obj:161"/>
            </textfilecontent54_test>
            <unknown_test comment="Test implementation is unknown, unavailable, or impossible" version="1" id="oval:gov.irs.rhel5:tst:163" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent"/>
            <unknown_test comment="Test implementation is unknown, unavailable, or impossible" version="1" id="oval:gov.irs.rhel5:tst:164" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent"/>
            <runlevel_test check_existence="any_exist" comment="The auditd service should not be started at runlevel 2" version="1" id="oval:gov.irs.rhel5:tst:165" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <object object_ref="oval:gov.irs.rhel5:obj:162"/>
                  <state state_ref="oval:gov.irs.rhel5:ste:63"/>
            </runlevel_test>
            <runlevel_test check_existence="any_exist" comment="The auditd service should not be started at runlevel 3" version="1" id="oval:gov.irs.rhel5:tst:166" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <object object_ref="oval:gov.irs.rhel5:obj:163"/>
                  <state state_ref="oval:gov.irs.rhel5:ste:63"/>
            </runlevel_test>
            <runlevel_test check_existence="any_exist" comment="The auditd service should not be started at runlevel 4" version="1" id="oval:gov.irs.rhel5:tst:167" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <object object_ref="oval:gov.irs.rhel5:obj:164"/>
                  <state state_ref="oval:gov.irs.rhel5:ste:63"/>
            </runlevel_test>
            <runlevel_test check_existence="any_exist" comment="The auditd service should not be started at runlevel 5" version="1" id="oval:gov.irs.rhel5:tst:168" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <object object_ref="oval:gov.irs.rhel5:obj:165"/>
                  <state state_ref="oval:gov.irs.rhel5:ste:63"/>
            </runlevel_test>
            <runlevel_test check_existence="any_exist" comment="The inetd service should not be started at runlevel 2" version="1" id="oval:gov.irs.rhel5:tst:169" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <object object_ref="oval:gov.irs.rhel5:obj:166"/>
                  <state state_ref="oval:gov.irs.rhel5:ste:64"/>
            </runlevel_test>
            <runlevel_test check_existence="any_exist" comment="The inetd service should not be started at runlevel 3" version="1" id="oval:gov.irs.rhel5:tst:170" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <object object_ref="oval:gov.irs.rhel5:obj:167"/>
                  <state state_ref="oval:gov.irs.rhel5:ste:64"/>
            </runlevel_test>
            <runlevel_test check_existence="any_exist" comment="The inetd service should not be started at runlevel 4" version="1" id="oval:gov.irs.rhel5:tst:171" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <object object_ref="oval:gov.irs.rhel5:obj:168"/>
                  <state state_ref="oval:gov.irs.rhel5:ste:64"/>
            </runlevel_test>
            <runlevel_test check_existence="any_exist" comment="The inetd service should not be started at runlevel 5" version="1" id="oval:gov.irs.rhel5:tst:172" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <object object_ref="oval:gov.irs.rhel5:obj:169"/>
                  <state state_ref="oval:gov.irs.rhel5:ste:64"/>
            </runlevel_test>
            <runlevel_test check_existence="any_exist" comment="The xinetd service should not be started at runlevel 2" version="1" id="oval:gov.irs.rhel5:tst:173" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <object object_ref="oval:gov.irs.rhel5:obj:170"/>
                  <state state_ref="oval:gov.irs.rhel5:ste:65"/>
            </runlevel_test>
            <runlevel_test check_existence="any_exist" comment="The xinetd service should not be started at runlevel 3" version="1" id="oval:gov.irs.rhel5:tst:174" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <object object_ref="oval:gov.irs.rhel5:obj:171"/>
                  <state state_ref="oval:gov.irs.rhel5:ste:65"/>
            </runlevel_test>
            <runlevel_test check_existence="any_exist" comment="The xinetd service should not be started at runlevel 4" version="1" id="oval:gov.irs.rhel5:tst:175" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <object object_ref="oval:gov.irs.rhel5:obj:172"/>
                  <state state_ref="oval:gov.irs.rhel5:ste:65"/>
            </runlevel_test>
            <runlevel_test check_existence="any_exist" comment="The xinetd service should not be started at runlevel 5" version="1" id="oval:gov.irs.rhel5:tst:176" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <object object_ref="oval:gov.irs.rhel5:obj:173"/>
                  <state state_ref="oval:gov.irs.rhel5:ste:65"/>
            </runlevel_test>
            <rpminfo_test check_existence="none_exist" comment="The inetd package should not be installed" version="1" id="oval:gov.irs.rhel5:tst:177" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
                  <object object_ref="oval:gov.irs.rhel5:obj:174"/>
            </rpminfo_test>
            <rpminfo_test check_existence="none_exist" comment="The xinetd package should not be installed" version="1" id="oval:gov.irs.rhel5:tst:178" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
                  <object object_ref="oval:gov.irs.rhel5:obj:175"/>
            </rpminfo_test>
            <runlevel_test check_existence="any_exist" comment="The telnet service should not be started at runlevel 2" version="1" id="oval:gov.irs.rhel5:tst:179" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <object object_ref="oval:gov.irs.rhel5:obj:176"/>
                  <state state_ref="oval:gov.irs.rhel5:ste:66"/>
            </runlevel_test>
            <runlevel_test check_existence="any_exist" comment="The telnet service should not be started at runlevel 3" version="1" id="oval:gov.irs.rhel5:tst:180" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <object object_ref="oval:gov.irs.rhel5:obj:177"/>
                  <state state_ref="oval:gov.irs.rhel5:ste:66"/>
            </runlevel_test>
            <runlevel_test check_existence="any_exist" comment="The telnet service should not be started at runlevel 4" version="1" id="oval:gov.irs.rhel5:tst:181" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <object object_ref="oval:gov.irs.rhel5:obj:178"/>
                  <state state_ref="oval:gov.irs.rhel5:ste:66"/>
            </runlevel_test>
            <runlevel_test check_existence="any_exist" comment="The telnet service should not be started at runlevel 5" version="1" id="oval:gov.irs.rhel5:tst:182" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <object object_ref="oval:gov.irs.rhel5:obj:179"/>
                  <state state_ref="oval:gov.irs.rhel5:ste:66"/>
            </runlevel_test>
            <rpminfo_test check_existence="none_exist" comment="The telnet-server package should not be installed" version="1" id="oval:gov.irs.rhel5:tst:183" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
                  <object object_ref="oval:gov.irs.rhel5:obj:180"/>
            </rpminfo_test>
            <runlevel_test check_existence="any_exist" comment="The rcp service should not be started at runlevel 2" version="1" id="oval:gov.irs.rhel5:tst:184" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <object object_ref="oval:gov.irs.rhel5:obj:181"/>
                  <state state_ref="oval:gov.irs.rhel5:ste:67"/>
            </runlevel_test>
            <runlevel_test check_existence="any_exist" comment="The rcp service should not be started at runlevel 3" version="1" id="oval:gov.irs.rhel5:tst:185" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <object object_ref="oval:gov.irs.rhel5:obj:182"/>
                  <state state_ref="oval:gov.irs.rhel5:ste:67"/>
            </runlevel_test>
            <runlevel_test check_existence="any_exist" comment="The rcp service should not be started at runlevel 4" version="1" id="oval:gov.irs.rhel5:tst:186" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <object object_ref="oval:gov.irs.rhel5:obj:183"/>
                  <state state_ref="oval:gov.irs.rhel5:ste:67"/>
            </runlevel_test>
            <runlevel_test check_existence="any_exist" comment="The rcp service should not be started at runlevel 5" version="1" id="oval:gov.irs.rhel5:tst:187" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <object object_ref="oval:gov.irs.rhel5:obj:184"/>
                  <state state_ref="oval:gov.irs.rhel5:ste:67"/>
            </runlevel_test>
            <runlevel_test check_existence="any_exist" comment="The rsh service should not be started at runlevel 2" version="1" id="oval:gov.irs.rhel5:tst:188" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <object object_ref="oval:gov.irs.rhel5:obj:185"/>
                  <state state_ref="oval:gov.irs.rhel5:ste:68"/>
            </runlevel_test>
            <runlevel_test check_existence="any_exist" comment="The rsh service should not be started at runlevel 3" version="1" id="oval:gov.irs.rhel5:tst:189" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <object object_ref="oval:gov.irs.rhel5:obj:186"/>
                  <state state_ref="oval:gov.irs.rhel5:ste:68"/>
            </runlevel_test>
            <runlevel_test check_existence="any_exist" comment="The rsh service should not be started at runlevel 4" version="1" id="oval:gov.irs.rhel5:tst:190" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <object object_ref="oval:gov.irs.rhel5:obj:187"/>
                  <state state_ref="oval:gov.irs.rhel5:ste:68"/>
            </runlevel_test>
            <runlevel_test check_existence="any_exist" comment="The rsh service should not be started at runlevel 5" version="1" id="oval:gov.irs.rhel5:tst:191" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <object object_ref="oval:gov.irs.rhel5:obj:188"/>
                  <state state_ref="oval:gov.irs.rhel5:ste:68"/>
            </runlevel_test>
            <runlevel_test check_existence="any_exist" comment="The rlogin service should not be started at runlevel 2" version="1" id="oval:gov.irs.rhel5:tst:192" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <object object_ref="oval:gov.irs.rhel5:obj:189"/>
                  <state state_ref="oval:gov.irs.rhel5:ste:69"/>
            </runlevel_test>
            <runlevel_test check_existence="any_exist" comment="The rlogin service should not be started at runlevel 3" version="1" id="oval:gov.irs.rhel5:tst:193" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <object object_ref="oval:gov.irs.rhel5:obj:190"/>
                  <state state_ref="oval:gov.irs.rhel5:ste:69"/>
            </runlevel_test>
            <runlevel_test check_existence="any_exist" comment="The rlogin service should not be started at runlevel 4" version="1" id="oval:gov.irs.rhel5:tst:194" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <object object_ref="oval:gov.irs.rhel5:obj:191"/>
                  <state state_ref="oval:gov.irs.rhel5:ste:69"/>
            </runlevel_test>
            <runlevel_test check_existence="any_exist" comment="The rlogin service should not be started at runlevel 5" version="1" id="oval:gov.irs.rhel5:tst:195" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <object object_ref="oval:gov.irs.rhel5:obj:192"/>
                  <state state_ref="oval:gov.irs.rhel5:ste:69"/>
            </runlevel_test>
            <rpminfo_test check_existence="none_exist" comment="The rsh package should not be installed" version="1" id="oval:gov.irs.rhel5:tst:196" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
                  <object object_ref="oval:gov.irs.rhel5:obj:193"/>
            </rpminfo_test>
            <runlevel_test check_existence="any_exist" comment="The ypbind service should not be started at runlevel 2" version="1" id="oval:gov.irs.rhel5:tst:197" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <object object_ref="oval:gov.irs.rhel5:obj:194"/>
                  <state state_ref="oval:gov.irs.rhel5:ste:70"/>
            </runlevel_test>
            <runlevel_test check_existence="any_exist" comment="The ypbind service should not be started at runlevel 3" version="1" id="oval:gov.irs.rhel5:tst:198" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <object object_ref="oval:gov.irs.rhel5:obj:195"/>
                  <state state_ref="oval:gov.irs.rhel5:ste:70"/>
            </runlevel_test>
            <runlevel_test check_existence="any_exist" comment="The ypbind service should not be started at runlevel 4" version="1" id="oval:gov.irs.rhel5:tst:199" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <object object_ref="oval:gov.irs.rhel5:obj:196"/>
                  <state state_ref="oval:gov.irs.rhel5:ste:70"/>
            </runlevel_test>
            <runlevel_test check_existence="any_exist" comment="The ypbind service should not be started at runlevel 5" version="1" id="oval:gov.irs.rhel5:tst:200" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <object object_ref="oval:gov.irs.rhel5:obj:197"/>
                  <state state_ref="oval:gov.irs.rhel5:ste:70"/>
            </runlevel_test>
            <rpminfo_test check_existence="none_exist" comment="The ypserv package should not be installed" version="1" id="oval:gov.irs.rhel5:tst:201" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
                  <object object_ref="oval:gov.irs.rhel5:obj:198"/>
            </rpminfo_test>
            <runlevel_test check_existence="any_exist" comment="The tftp service should not be started at runlevel 2" version="1" id="oval:gov.irs.rhel5:tst:202" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <object object_ref="oval:gov.irs.rhel5:obj:199"/>
                  <state state_ref="oval:gov.irs.rhel5:ste:71"/>
            </runlevel_test>
            <runlevel_test check_existence="any_exist" comment="The tftp service should not be started at runlevel 3" version="1" id="oval:gov.irs.rhel5:tst:203" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <object object_ref="oval:gov.irs.rhel5:obj:200"/>
                  <state state_ref="oval:gov.irs.rhel5:ste:71"/>
            </runlevel_test>
            <runlevel_test check_existence="any_exist" comment="The tftp service should not be started at runlevel 4" version="1" id="oval:gov.irs.rhel5:tst:204" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <object object_ref="oval:gov.irs.rhel5:obj:201"/>
                  <state state_ref="oval:gov.irs.rhel5:ste:71"/>
            </runlevel_test>
            <runlevel_test check_existence="any_exist" comment="The tftp service should not be started at runlevel 5" version="1" id="oval:gov.irs.rhel5:tst:205" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <object object_ref="oval:gov.irs.rhel5:obj:202"/>
                  <state state_ref="oval:gov.irs.rhel5:ste:71"/>
            </runlevel_test>
            <rpminfo_test check_existence="none_exist" comment="The tftp-server package should not be installed" version="1" id="oval:gov.irs.rhel5:tst:206" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
                  <object object_ref="oval:gov.irs.rhel5:obj:203"/>
            </rpminfo_test>
            <runlevel_test check_existence="any_exist" comment="The firstboot service should not be started at runlevel 2" version="1" id="oval:gov.irs.rhel5:tst:207" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <object object_ref="oval:gov.irs.rhel5:obj:204"/>
                  <state state_ref="oval:gov.irs.rhel5:ste:72"/>
            </runlevel_test>
            <runlevel_test check_existence="any_exist" comment="The firstboot service should not be started at runlevel 3" version="1" id="oval:gov.irs.rhel5:tst:208" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <object object_ref="oval:gov.irs.rhel5:obj:205"/>
                  <state state_ref="oval:gov.irs.rhel5:ste:72"/>
            </runlevel_test>
            <runlevel_test check_existence="any_exist" comment="The firstboot service should not be started at runlevel 4" version="1" id="oval:gov.irs.rhel5:tst:209" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <object object_ref="oval:gov.irs.rhel5:obj:206"/>
                  <state state_ref="oval:gov.irs.rhel5:ste:72"/>
            </runlevel_test>
            <runlevel_test check_existence="any_exist" comment="The firstboot service should not be started at runlevel 5" version="1" id="oval:gov.irs.rhel5:tst:210" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <object object_ref="oval:gov.irs.rhel5:obj:207"/>
                  <state state_ref="oval:gov.irs.rhel5:ste:72"/>
            </runlevel_test>
            <runlevel_test check_existence="any_exist" comment="The gpm service should not be started at runlevel 2" version="1" id="oval:gov.irs.rhel5:tst:211" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <object object_ref="oval:gov.irs.rhel5:obj:208"/>
                  <state state_ref="oval:gov.irs.rhel5:ste:73"/>
            </runlevel_test>
            <runlevel_test check_existence="any_exist" comment="The gpm service should not be started at runlevel 3" version="1" id="oval:gov.irs.rhel5:tst:212" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <object object_ref="oval:gov.irs.rhel5:obj:209"/>
                  <state state_ref="oval:gov.irs.rhel5:ste:73"/>
            </runlevel_test>
            <runlevel_test check_existence="any_exist" comment="The gpm service should not be started at runlevel 4" version="1" id="oval:gov.irs.rhel5:tst:213" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <object object_ref="oval:gov.irs.rhel5:obj:210"/>
                  <state state_ref="oval:gov.irs.rhel5:ste:73"/>
            </runlevel_test>
            <runlevel_test check_existence="any_exist" comment="The gpm service should not be started at runlevel 5" version="1" id="oval:gov.irs.rhel5:tst:214" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <object object_ref="oval:gov.irs.rhel5:obj:211"/>
                  <state state_ref="oval:gov.irs.rhel5:ste:73"/>
            </runlevel_test>
            <runlevel_test check_existence="any_exist" comment="The irqbalance service should not be started at runlevel 2" version="1" id="oval:gov.irs.rhel5:tst:215" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <object object_ref="oval:gov.irs.rhel5:obj:212"/>
                  <state state_ref="oval:gov.irs.rhel5:ste:74"/>
            </runlevel_test>
            <runlevel_test check_existence="any_exist" comment="The irqbalance service should not be started at runlevel 3" version="1" id="oval:gov.irs.rhel5:tst:216" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <object object_ref="oval:gov.irs.rhel5:obj:213"/>
                  <state state_ref="oval:gov.irs.rhel5:ste:74"/>
            </runlevel_test>
            <runlevel_test check_existence="any_exist" comment="The irqbalance service should not be started at runlevel 4" version="1" id="oval:gov.irs.rhel5:tst:217" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <object object_ref="oval:gov.irs.rhel5:obj:214"/>
                  <state state_ref="oval:gov.irs.rhel5:ste:74"/>
            </runlevel_test>
            <runlevel_test check_existence="any_exist" comment="The irqbalance service should not be started at runlevel 5" version="1" id="oval:gov.irs.rhel5:tst:218" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <object object_ref="oval:gov.irs.rhel5:obj:215"/>
                  <state state_ref="oval:gov.irs.rhel5:ste:74"/>
            </runlevel_test>
            <runlevel_test check_existence="any_exist" comment="The isdn service should not be started at runlevel 2" version="1" id="oval:gov.irs.rhel5:tst:219" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <object object_ref="oval:gov.irs.rhel5:obj:216"/>
                  <state state_ref="oval:gov.irs.rhel5:ste:75"/>
            </runlevel_test>
            <runlevel_test check_existence="any_exist" comment="The isdn service should not be started at runlevel 3" version="1" id="oval:gov.irs.rhel5:tst:220" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <object object_ref="oval:gov.irs.rhel5:obj:217"/>
                  <state state_ref="oval:gov.irs.rhel5:ste:75"/>
            </runlevel_test>
            <runlevel_test check_existence="any_exist" comment="The isdn service should not be started at runlevel 4" version="1" id="oval:gov.irs.rhel5:tst:221" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <object object_ref="oval:gov.irs.rhel5:obj:218"/>
                  <state state_ref="oval:gov.irs.rhel5:ste:75"/>
            </runlevel_test>
            <runlevel_test check_existence="any_exist" comment="The isdn service should not be started at runlevel 5" version="1" id="oval:gov.irs.rhel5:tst:222" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <object object_ref="oval:gov.irs.rhel5:obj:219"/>
                  <state state_ref="oval:gov.irs.rhel5:ste:75"/>
            </runlevel_test>
            <runlevel_test check_existence="any_exist" comment="The kdump service should not be started at runlevel 2" version="1" id="oval:gov.irs.rhel5:tst:223" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <object object_ref="oval:gov.irs.rhel5:obj:220"/>
                  <state state_ref="oval:gov.irs.rhel5:ste:76"/>
            </runlevel_test>
            <runlevel_test check_existence="any_exist" comment="The kdump service should not be started at runlevel 3" version="1" id="oval:gov.irs.rhel5:tst:224" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <object object_ref="oval:gov.irs.rhel5:obj:221"/>
                  <state state_ref="oval:gov.irs.rhel5:ste:76"/>
            </runlevel_test>
            <runlevel_test check_existence="any_exist" comment="The kdump service should not be started at runlevel 4" version="1" id="oval:gov.irs.rhel5:tst:225" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <object object_ref="oval:gov.irs.rhel5:obj:222"/>
                  <state state_ref="oval:gov.irs.rhel5:ste:76"/>
            </runlevel_test>
            <runlevel_test check_existence="any_exist" comment="The kdump service should not be started at runlevel 5" version="1" id="oval:gov.irs.rhel5:tst:226" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <object object_ref="oval:gov.irs.rhel5:obj:223"/>
                  <state state_ref="oval:gov.irs.rhel5:ste:76"/>
            </runlevel_test>
            <runlevel_test check_existence="any_exist" comment="The kudzu service should not be started at runlevel 2" version="1" id="oval:gov.irs.rhel5:tst:227" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <object object_ref="oval:gov.irs.rhel5:obj:224"/>
                  <state state_ref="oval:gov.irs.rhel5:ste:77"/>
            </runlevel_test>
            <runlevel_test check_existence="any_exist" comment="The kudzu service should not be started at runlevel 3" version="1" id="oval:gov.irs.rhel5:tst:228" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <object object_ref="oval:gov.irs.rhel5:obj:225"/>
                  <state state_ref="oval:gov.irs.rhel5:ste:77"/>
            </runlevel_test>
            <runlevel_test check_existence="any_exist" comment="The kudzu service should not be started at runlevel 4" version="1" id="oval:gov.irs.rhel5:tst:229" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <object object_ref="oval:gov.irs.rhel5:obj:226"/>
                  <state state_ref="oval:gov.irs.rhel5:ste:77"/>
            </runlevel_test>
            <runlevel_test check_existence="any_exist" comment="The kudzu service should not be started at runlevel 5" version="1" id="oval:gov.irs.rhel5:tst:230" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <object object_ref="oval:gov.irs.rhel5:obj:227"/>
                  <state state_ref="oval:gov.irs.rhel5:ste:77"/>
            </runlevel_test>
            <runlevel_test check_existence="any_exist" comment="The mdmonitor service should not be started at runlevel 2" version="1" id="oval:gov.irs.rhel5:tst:231" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <object object_ref="oval:gov.irs.rhel5:obj:228"/>
                  <state state_ref="oval:gov.irs.rhel5:ste:78"/>
            </runlevel_test>
            <runlevel_test check_existence="any_exist" comment="The mdmonitor service should not be started at runlevel 3" version="1" id="oval:gov.irs.rhel5:tst:232" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <object object_ref="oval:gov.irs.rhel5:obj:229"/>
                  <state state_ref="oval:gov.irs.rhel5:ste:78"/>
            </runlevel_test>
            <runlevel_test check_existence="any_exist" comment="The mdmonitor service should not be started at runlevel 4" version="1" id="oval:gov.irs.rhel5:tst:233" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <object object_ref="oval:gov.irs.rhel5:obj:230"/>
                  <state state_ref="oval:gov.irs.rhel5:ste:78"/>
            </runlevel_test>
            <runlevel_test check_existence="any_exist" comment="The mdmonitor service should not be started at runlevel 5" version="1" id="oval:gov.irs.rhel5:tst:234" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <object object_ref="oval:gov.irs.rhel5:obj:231"/>
                  <state state_ref="oval:gov.irs.rhel5:ste:78"/>
            </runlevel_test>
            <runlevel_test check_existence="any_exist" comment="The microcode_ctl service should not be started at runlevel 2" version="1" id="oval:gov.irs.rhel5:tst:235" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <object object_ref="oval:gov.irs.rhel5:obj:232"/>
                  <state state_ref="oval:gov.irs.rhel5:ste:79"/>
            </runlevel_test>
            <runlevel_test check_existence="any_exist" comment="The microcode_ctl service should not be started at runlevel 3" version="1" id="oval:gov.irs.rhel5:tst:236" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <object object_ref="oval:gov.irs.rhel5:obj:233"/>
                  <state state_ref="oval:gov.irs.rhel5:ste:79"/>
            </runlevel_test>
            <runlevel_test check_existence="any_exist" comment="The microcode_ctl service should not be started at runlevel 4" version="1" id="oval:gov.irs.rhel5:tst:237" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <object object_ref="oval:gov.irs.rhel5:obj:234"/>
                  <state state_ref="oval:gov.irs.rhel5:ste:79"/>
            </runlevel_test>
            <runlevel_test check_existence="any_exist" comment="The microcode_ctl service should not be started at runlevel 5" version="1" id="oval:gov.irs.rhel5:tst:238" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <object object_ref="oval:gov.irs.rhel5:obj:235"/>
                  <state state_ref="oval:gov.irs.rhel5:ste:79"/>
            </runlevel_test>
            <runlevel_test check_existence="any_exist" comment="The network service should not be started at runlevel 2" version="1" id="oval:gov.irs.rhel5:tst:239" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <object object_ref="oval:gov.irs.rhel5:obj:236"/>
                  <state state_ref="oval:gov.irs.rhel5:ste:80"/>
            </runlevel_test>
            <runlevel_test check_existence="any_exist" comment="The network service should not be started at runlevel 3" version="1" id="oval:gov.irs.rhel5:tst:240" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <object object_ref="oval:gov.irs.rhel5:obj:237"/>
                  <state state_ref="oval:gov.irs.rhel5:ste:80"/>
            </runlevel_test>
            <runlevel_test check_existence="any_exist" comment="The network service should not be started at runlevel 4" version="1" id="oval:gov.irs.rhel5:tst:241" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <object object_ref="oval:gov.irs.rhel5:obj:238"/>
                  <state state_ref="oval:gov.irs.rhel5:ste:80"/>
            </runlevel_test>
            <runlevel_test check_existence="any_exist" comment="The network service should not be started at runlevel 5" version="1" id="oval:gov.irs.rhel5:tst:242" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <object object_ref="oval:gov.irs.rhel5:obj:239"/>
                  <state state_ref="oval:gov.irs.rhel5:ste:80"/>
            </runlevel_test>
            <runlevel_test check_existence="any_exist" comment="The pcscd service should not be started at runlevel 2" version="1" id="oval:gov.irs.rhel5:tst:243" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <object object_ref="oval:gov.irs.rhel5:obj:240"/>
                  <state state_ref="oval:gov.irs.rhel5:ste:81"/>
            </runlevel_test>
            <runlevel_test check_existence="any_exist" comment="The pcscd service should not be started at runlevel 3" version="1" id="oval:gov.irs.rhel5:tst:244" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <object object_ref="oval:gov.irs.rhel5:obj:241"/>
                  <state state_ref="oval:gov.irs.rhel5:ste:81"/>
            </runlevel_test>
            <runlevel_test check_existence="any_exist" comment="The pcscd service should not be started at runlevel 4" version="1" id="oval:gov.irs.rhel5:tst:245" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <object object_ref="oval:gov.irs.rhel5:obj:242"/>
                  <state state_ref="oval:gov.irs.rhel5:ste:81"/>
            </runlevel_test>
            <runlevel_test check_existence="any_exist" comment="The pcscd service should not be started at runlevel 5" version="1" id="oval:gov.irs.rhel5:tst:246" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <object object_ref="oval:gov.irs.rhel5:obj:243"/>
                  <state state_ref="oval:gov.irs.rhel5:ste:81"/>
            </runlevel_test>
            <runlevel_test check_existence="any_exist" comment="The smartd service should not be started at runlevel 2" version="1" id="oval:gov.irs.rhel5:tst:247" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <object object_ref="oval:gov.irs.rhel5:obj:244"/>
                  <state state_ref="oval:gov.irs.rhel5:ste:82"/>
            </runlevel_test>
            <runlevel_test check_existence="any_exist" comment="The smartd service should not be started at runlevel 3" version="1" id="oval:gov.irs.rhel5:tst:248" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <object object_ref="oval:gov.irs.rhel5:obj:245"/>
                  <state state_ref="oval:gov.irs.rhel5:ste:82"/>
            </runlevel_test>
            <runlevel_test check_existence="any_exist" comment="The smartd service should not be started at runlevel 4" version="1" id="oval:gov.irs.rhel5:tst:249" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <object object_ref="oval:gov.irs.rhel5:obj:246"/>
                  <state state_ref="oval:gov.irs.rhel5:ste:82"/>
            </runlevel_test>
            <runlevel_test check_existence="any_exist" comment="The smartd service should not be started at runlevel 5" version="1" id="oval:gov.irs.rhel5:tst:250" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <object object_ref="oval:gov.irs.rhel5:obj:247"/>
                  <state state_ref="oval:gov.irs.rhel5:ste:82"/>
            </runlevel_test>
            <runlevel_test check_existence="any_exist" comment="The readahead_early service should not be started at runlevel 2" version="1" id="oval:gov.irs.rhel5:tst:251" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <object object_ref="oval:gov.irs.rhel5:obj:248"/>
                  <state state_ref="oval:gov.irs.rhel5:ste:83"/>
            </runlevel_test>
            <runlevel_test check_existence="any_exist" comment="The readahead_early service should not be started at runlevel 3" version="1" id="oval:gov.irs.rhel5:tst:252" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <object object_ref="oval:gov.irs.rhel5:obj:249"/>
                  <state state_ref="oval:gov.irs.rhel5:ste:83"/>
            </runlevel_test>
            <runlevel_test check_existence="any_exist" comment="The readahead_early service should not be started at runlevel 4" version="1" id="oval:gov.irs.rhel5:tst:253" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <object object_ref="oval:gov.irs.rhel5:obj:250"/>
                  <state state_ref="oval:gov.irs.rhel5:ste:83"/>
            </runlevel_test>
            <runlevel_test check_existence="any_exist" comment="The readahead_early service should not be started at runlevel 5" version="1" id="oval:gov.irs.rhel5:tst:254" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <object object_ref="oval:gov.irs.rhel5:obj:251"/>
                  <state state_ref="oval:gov.irs.rhel5:ste:83"/>
            </runlevel_test>
            <runlevel_test check_existence="any_exist" comment="The readahead_later service should not be started at runlevel 2" version="1" id="oval:gov.irs.rhel5:tst:255" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <object object_ref="oval:gov.irs.rhel5:obj:252"/>
                  <state state_ref="oval:gov.irs.rhel5:ste:84"/>
            </runlevel_test>
            <runlevel_test check_existence="any_exist" comment="The readahead_later service should not be started at runlevel 3" version="1" id="oval:gov.irs.rhel5:tst:256" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <object object_ref="oval:gov.irs.rhel5:obj:253"/>
                  <state state_ref="oval:gov.irs.rhel5:ste:84"/>
            </runlevel_test>
            <runlevel_test check_existence="any_exist" comment="The readahead_later service should not be started at runlevel 4" version="1" id="oval:gov.irs.rhel5:tst:257" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <object object_ref="oval:gov.irs.rhel5:obj:254"/>
                  <state state_ref="oval:gov.irs.rhel5:ste:84"/>
            </runlevel_test>
            <runlevel_test check_existence="any_exist" comment="The readahead_later service should not be started at runlevel 5" version="1" id="oval:gov.irs.rhel5:tst:258" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <object object_ref="oval:gov.irs.rhel5:obj:255"/>
                  <state state_ref="oval:gov.irs.rhel5:ste:84"/>
            </runlevel_test>
            <runlevel_test check_existence="any_exist" comment="The messagebus service should not be started at runlevel 2" version="1" id="oval:gov.irs.rhel5:tst:259" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <object object_ref="oval:gov.irs.rhel5:obj:256"/>
                  <state state_ref="oval:gov.irs.rhel5:ste:85"/>
            </runlevel_test>
            <runlevel_test check_existence="any_exist" comment="The messagebus service should not be started at runlevel 3" version="1" id="oval:gov.irs.rhel5:tst:260" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <object object_ref="oval:gov.irs.rhel5:obj:257"/>
                  <state state_ref="oval:gov.irs.rhel5:ste:85"/>
            </runlevel_test>
            <runlevel_test check_existence="any_exist" comment="The messagebus service should not be started at runlevel 4" version="1" id="oval:gov.irs.rhel5:tst:261" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <object object_ref="oval:gov.irs.rhel5:obj:258"/>
                  <state state_ref="oval:gov.irs.rhel5:ste:85"/>
            </runlevel_test>
            <runlevel_test check_existence="any_exist" comment="The messagebus service should not be started at runlevel 5" version="1" id="oval:gov.irs.rhel5:tst:262" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <object object_ref="oval:gov.irs.rhel5:obj:259"/>
                  <state state_ref="oval:gov.irs.rhel5:ste:85"/>
            </runlevel_test>
            <runlevel_test check_existence="any_exist" comment="The haldaemon service should not be started at runlevel 2" version="1" id="oval:gov.irs.rhel5:tst:263" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <object object_ref="oval:gov.irs.rhel5:obj:260"/>
                  <state state_ref="oval:gov.irs.rhel5:ste:86"/>
            </runlevel_test>
            <runlevel_test check_existence="any_exist" comment="The haldaemon service should not be started at runlevel 3" version="1" id="oval:gov.irs.rhel5:tst:264" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <object object_ref="oval:gov.irs.rhel5:obj:261"/>
                  <state state_ref="oval:gov.irs.rhel5:ste:86"/>
            </runlevel_test>
            <runlevel_test check_existence="any_exist" comment="The haldaemon service should not be started at runlevel 4" version="1" id="oval:gov.irs.rhel5:tst:265" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <object object_ref="oval:gov.irs.rhel5:obj:262"/>
                  <state state_ref="oval:gov.irs.rhel5:ste:86"/>
            </runlevel_test>
            <runlevel_test check_existence="any_exist" comment="The haldaemon service should not be started at runlevel 5" version="1" id="oval:gov.irs.rhel5:tst:266" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <object object_ref="oval:gov.irs.rhel5:obj:263"/>
                  <state state_ref="oval:gov.irs.rhel5:ste:86"/>
            </runlevel_test>
            <runlevel_test check_existence="any_exist" comment="The bluetooth service should not be started at runlevel 2" version="1" id="oval:gov.irs.rhel5:tst:267" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <object object_ref="oval:gov.irs.rhel5:obj:264"/>
                  <state state_ref="oval:gov.irs.rhel5:ste:87"/>
            </runlevel_test>
            <runlevel_test check_existence="any_exist" comment="The bluetooth service should not be started at runlevel 3" version="1" id="oval:gov.irs.rhel5:tst:268" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <object object_ref="oval:gov.irs.rhel5:obj:265"/>
                  <state state_ref="oval:gov.irs.rhel5:ste:87"/>
            </runlevel_test>
            <runlevel_test check_existence="any_exist" comment="The bluetooth service should not be started at runlevel 4" version="1" id="oval:gov.irs.rhel5:tst:269" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <object object_ref="oval:gov.irs.rhel5:obj:266"/>
                  <state state_ref="oval:gov.irs.rhel5:ste:87"/>
            </runlevel_test>
            <runlevel_test check_existence="any_exist" comment="The bluetooth service should not be started at runlevel 5" version="1" id="oval:gov.irs.rhel5:tst:270" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <object object_ref="oval:gov.irs.rhel5:obj:267"/>
                  <state state_ref="oval:gov.irs.rhel5:ste:87"/>
            </runlevel_test>
            <runlevel_test check_existence="any_exist" comment="The hidd service should not be started at runlevel 2" version="1" id="oval:gov.irs.rhel5:tst:271" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <object object_ref="oval:gov.irs.rhel5:obj:268"/>
                  <state state_ref="oval:gov.irs.rhel5:ste:88"/>
            </runlevel_test>
            <runlevel_test check_existence="any_exist" comment="The hidd service should not be started at runlevel 3" version="1" id="oval:gov.irs.rhel5:tst:272" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <object object_ref="oval:gov.irs.rhel5:obj:269"/>
                  <state state_ref="oval:gov.irs.rhel5:ste:88"/>
            </runlevel_test>
            <runlevel_test check_existence="any_exist" comment="The hidd service should not be started at runlevel 4" version="1" id="oval:gov.irs.rhel5:tst:273" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <object object_ref="oval:gov.irs.rhel5:obj:270"/>
                  <state state_ref="oval:gov.irs.rhel5:ste:88"/>
            </runlevel_test>
            <runlevel_test check_existence="any_exist" comment="The hidd service should not be started at runlevel 5" version="1" id="oval:gov.irs.rhel5:tst:274" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <object object_ref="oval:gov.irs.rhel5:obj:271"/>
                  <state state_ref="oval:gov.irs.rhel5:ste:88"/>
            </runlevel_test>
            <runlevel_test check_existence="any_exist" comment="The apmd service should not be started at runlevel 2" version="1" id="oval:gov.irs.rhel5:tst:275" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <object object_ref="oval:gov.irs.rhel5:obj:272"/>
                  <state state_ref="oval:gov.irs.rhel5:ste:89"/>
            </runlevel_test>
            <runlevel_test check_existence="any_exist" comment="The apmd service should not be started at runlevel 3" version="1" id="oval:gov.irs.rhel5:tst:276" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <object object_ref="oval:gov.irs.rhel5:obj:273"/>
                  <state state_ref="oval:gov.irs.rhel5:ste:89"/>
            </runlevel_test>
            <runlevel_test check_existence="any_exist" comment="The apmd service should not be started at runlevel 4" version="1" id="oval:gov.irs.rhel5:tst:277" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <object object_ref="oval:gov.irs.rhel5:obj:274"/>
                  <state state_ref="oval:gov.irs.rhel5:ste:89"/>
            </runlevel_test>
            <runlevel_test check_existence="any_exist" comment="The apmd service should not be started at runlevel 5" version="1" id="oval:gov.irs.rhel5:tst:278" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <object object_ref="oval:gov.irs.rhel5:obj:275"/>
                  <state state_ref="oval:gov.irs.rhel5:ste:89"/>
            </runlevel_test>
            <runlevel_test check_existence="any_exist" comment="The acpid service should not be started at runlevel 2" version="1" id="oval:gov.irs.rhel5:tst:279" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <object object_ref="oval:gov.irs.rhel5:obj:276"/>
                  <state state_ref="oval:gov.irs.rhel5:ste:90"/>
            </runlevel_test>
            <runlevel_test check_existence="any_exist" comment="The acpid service should not be started at runlevel 3" version="1" id="oval:gov.irs.rhel5:tst:280" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <object object_ref="oval:gov.irs.rhel5:obj:277"/>
                  <state state_ref="oval:gov.irs.rhel5:ste:90"/>
            </runlevel_test>
            <runlevel_test check_existence="any_exist" comment="The acpid service should not be started at runlevel 4" version="1" id="oval:gov.irs.rhel5:tst:281" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <object object_ref="oval:gov.irs.rhel5:obj:278"/>
                  <state state_ref="oval:gov.irs.rhel5:ste:90"/>
            </runlevel_test>
            <runlevel_test check_existence="any_exist" comment="The acpid service should not be started at runlevel 5" version="1" id="oval:gov.irs.rhel5:tst:282" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <object object_ref="oval:gov.irs.rhel5:obj:279"/>
                  <state state_ref="oval:gov.irs.rhel5:ste:90"/>
            </runlevel_test>
            <runlevel_test check_existence="any_exist" comment="The cpuspeed service should not be started at runlevel 2" version="1" id="oval:gov.irs.rhel5:tst:283" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <object object_ref="oval:gov.irs.rhel5:obj:280"/>
                  <state state_ref="oval:gov.irs.rhel5:ste:91"/>
            </runlevel_test>
            <runlevel_test check_existence="any_exist" comment="The cpuspeed service should not be started at runlevel 3" version="1" id="oval:gov.irs.rhel5:tst:284" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <object object_ref="oval:gov.irs.rhel5:obj:281"/>
                  <state state_ref="oval:gov.irs.rhel5:ste:91"/>
            </runlevel_test>
            <runlevel_test check_existence="any_exist" comment="The cpuspeed service should not be started at runlevel 4" version="1" id="oval:gov.irs.rhel5:tst:285" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <object object_ref="oval:gov.irs.rhel5:obj:282"/>
                  <state state_ref="oval:gov.irs.rhel5:ste:91"/>
            </runlevel_test>
            <runlevel_test check_existence="any_exist" comment="The cpuspeed service should not be started at runlevel 5" version="1" id="oval:gov.irs.rhel5:tst:286" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <object object_ref="oval:gov.irs.rhel5:obj:283"/>
                  <state state_ref="oval:gov.irs.rhel5:ste:91"/>
            </runlevel_test>
            <runlevel_test check_existence="any_exist" comment="The crond service should not be started at runlevel 2" version="1" id="oval:gov.irs.rhel5:tst:287" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <object object_ref="oval:gov.irs.rhel5:obj:284"/>
                  <state state_ref="oval:gov.irs.rhel5:ste:92"/>
            </runlevel_test>
            <runlevel_test check_existence="any_exist" comment="The crond service should not be started at runlevel 3" version="1" id="oval:gov.irs.rhel5:tst:288" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <object object_ref="oval:gov.irs.rhel5:obj:285"/>
                  <state state_ref="oval:gov.irs.rhel5:ste:92"/>
            </runlevel_test>
            <runlevel_test check_existence="any_exist" comment="The crond service should not be started at runlevel 4" version="1" id="oval:gov.irs.rhel5:tst:289" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <object object_ref="oval:gov.irs.rhel5:obj:286"/>
                  <state state_ref="oval:gov.irs.rhel5:ste:92"/>
            </runlevel_test>
            <runlevel_test check_existence="any_exist" comment="The crond service should not be started at runlevel 5" version="1" id="oval:gov.irs.rhel5:tst:290" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <object object_ref="oval:gov.irs.rhel5:obj:287"/>
                  <state state_ref="oval:gov.irs.rhel5:ste:92"/>
            </runlevel_test>
            <runlevel_test check_existence="any_exist" comment="The anacron service should not be started at runlevel 2" version="1" id="oval:gov.irs.rhel5:tst:291" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <object object_ref="oval:gov.irs.rhel5:obj:288"/>
                  <state state_ref="oval:gov.irs.rhel5:ste:93"/>
            </runlevel_test>
            <runlevel_test check_existence="any_exist" comment="The anacron service should not be started at runlevel 3" version="1" id="oval:gov.irs.rhel5:tst:292" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <object object_ref="oval:gov.irs.rhel5:obj:289"/>
                  <state state_ref="oval:gov.irs.rhel5:ste:93"/>
            </runlevel_test>
            <runlevel_test check_existence="any_exist" comment="The anacron service should not be started at runlevel 4" version="1" id="oval:gov.irs.rhel5:tst:293" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <object object_ref="oval:gov.irs.rhel5:obj:290"/>
                  <state state_ref="oval:gov.irs.rhel5:ste:93"/>
            </runlevel_test>
            <runlevel_test check_existence="any_exist" comment="The anacron service should not be started at runlevel 5" version="1" id="oval:gov.irs.rhel5:tst:294" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <object object_ref="oval:gov.irs.rhel5:obj:291"/>
                  <state state_ref="oval:gov.irs.rhel5:ste:93"/>
            </runlevel_test>
            <rpminfo_test check_existence="none_exist" comment="The anacron package should not be installed" version="1" id="oval:gov.irs.rhel5:tst:295" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
                  <object object_ref="oval:gov.irs.rhel5:obj:292"/>
            </rpminfo_test>
            <file_test check_existence="all_exist" comment="File permissions test for /etc/cron.monthly" version="1" id="oval:gov.irs.rhel5:tst:296" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <object object_ref="oval:gov.irs.rhel5:obj:293"/>
                  <state state_ref="oval:gov.irs.rhel5:ste:94"/>
            </file_test>
            <file_test check_existence="all_exist" comment="File permissions for /etc/cron.daily should be set to 700" version="1" id="oval:gov.irs.rhel5:tst:297" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <object object_ref="oval:gov.irs.rhel5:obj:294"/>
                  <state state_ref="oval:gov.irs.rhel5:ste:95"/>
            </file_test>
            <file_test check_existence="all_exist" comment="File permissions test for /etc/cron.weekly" version="1" id="oval:gov.irs.rhel5:tst:298" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <object object_ref="oval:gov.irs.rhel5:obj:295"/>
                  <state state_ref="oval:gov.irs.rhel5:ste:96"/>
            </file_test>
            <file_test check_existence="all_exist" comment="File permissions test for /etc/crontab" version="1" id="oval:gov.irs.rhel5:tst:299" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <object object_ref="oval:gov.irs.rhel5:obj:296"/>
                  <state state_ref="oval:gov.irs.rhel5:ste:97"/>
            </file_test>
            <file_test check_existence="all_exist" comment="File permissions test for /etc/anacrontab" version="1" id="oval:gov.irs.rhel5:tst:300" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <object object_ref="oval:gov.irs.rhel5:obj:297"/>
                  <state state_ref="oval:gov.irs.rhel5:ste:98"/>
            </file_test>
            <file_test check_existence="all_exist" comment="File permissions for /etc/crontab should be set to 600" version="1" id="oval:gov.irs.rhel5:tst:301" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <object object_ref="oval:gov.irs.rhel5:obj:296"/>
                  <state state_ref="oval:gov.irs.rhel5:ste:99"/>
            </file_test>
            <file_test check_existence="all_exist" comment="File permissions test for /etc/cron.hourly" version="1" id="oval:gov.irs.rhel5:tst:302" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <object object_ref="oval:gov.irs.rhel5:obj:298"/>
                  <state state_ref="oval:gov.irs.rhel5:ste:100"/>
            </file_test>
            <file_test check_existence="all_exist" comment="File permissions test for /etc/cron.monthly" version="1" id="oval:gov.irs.rhel5:tst:303" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <object object_ref="oval:gov.irs.rhel5:obj:293"/>
                  <state state_ref="oval:gov.irs.rhel5:ste:101"/>
            </file_test>
            <file_test check_existence="all_exist" comment="File permissions test for /etc/cron.d/.*" version="1" id="oval:gov.irs.rhel5:tst:304" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <object object_ref="oval:gov.irs.rhel5:obj:299"/>
                  <state state_ref="oval:gov.irs.rhel5:ste:102"/>
            </file_test>
            <file_test check_existence="all_exist" comment="File permissions test for /etc/cron.d/.*" version="1" id="oval:gov.irs.rhel5:tst:305" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <object object_ref="oval:gov.irs.rhel5:obj:300"/>
                  <state state_ref="oval:gov.irs.rhel5:ste:103"/>
            </file_test>
            <file_test check_existence="all_exist" comment="File permissions test for /etc/cron.weekly" version="1" id="oval:gov.irs.rhel5:tst:306" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <object object_ref="oval:gov.irs.rhel5:obj:295"/>
                  <state state_ref="oval:gov.irs.rhel5:ste:104"/>
            </file_test>
            <file_test check_existence="all_exist" comment="File permissions test for /etc/anacrontab" version="1" id="oval:gov.irs.rhel5:tst:307" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <object object_ref="oval:gov.irs.rhel5:obj:297"/>
                  <state state_ref="oval:gov.irs.rhel5:ste:105"/>
            </file_test>
            <file_test check_existence="all_exist" comment="File permissions for /etc/cron.hourly should be set to 700" version="1" id="oval:gov.irs.rhel5:tst:308" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <object object_ref="oval:gov.irs.rhel5:obj:298"/>
                  <state state_ref="oval:gov.irs.rhel5:ste:106"/>
            </file_test>
            <file_test check_existence="all_exist" comment="File permissions test for /etc/cron.hourly" version="1" id="oval:gov.irs.rhel5:tst:309" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <object object_ref="oval:gov.irs.rhel5:obj:298"/>
                  <state state_ref="oval:gov.irs.rhel5:ste:107"/>
            </file_test>
            <file_test check_existence="all_exist" comment="File permissions test for /etc/crontab" version="1" id="oval:gov.irs.rhel5:tst:310" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <object object_ref="oval:gov.irs.rhel5:obj:296"/>
                  <state state_ref="oval:gov.irs.rhel5:ste:108"/>
            </file_test>
            <file_test check_existence="all_exist" comment="File permissions test for /etc/cron.daily" version="1" id="oval:gov.irs.rhel5:tst:311" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <object object_ref="oval:gov.irs.rhel5:obj:294"/>
                  <state state_ref="oval:gov.irs.rhel5:ste:109"/>
            </file_test>
            <file_test check_existence="all_exist" comment="File permissions for /etc/anacrontab should be set to 600" version="1" id="oval:gov.irs.rhel5:tst:312" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <object object_ref="oval:gov.irs.rhel5:obj:297"/>
                  <state state_ref="oval:gov.irs.rhel5:ste:110"/>
            </file_test>
            <file_test check_existence="all_exist" comment="File permissions for /etc/cron.weekly should be set to 700" version="1" id="oval:gov.irs.rhel5:tst:313" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <object object_ref="oval:gov.irs.rhel5:obj:295"/>
                  <state state_ref="oval:gov.irs.rhel5:ste:111"/>
            </file_test>
            <file_test check_existence="all_exist" comment="File permissions for /etc/cron.monthly should be set to 700" version="1" id="oval:gov.irs.rhel5:tst:314" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <object object_ref="oval:gov.irs.rhel5:obj:293"/>
                  <state state_ref="oval:gov.irs.rhel5:ste:112"/>
            </file_test>
            <file_test check_existence="all_exist" comment="File permissions test for /etc/cron.daily" version="1" id="oval:gov.irs.rhel5:tst:315" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <object object_ref="oval:gov.irs.rhel5:obj:294"/>
                  <state state_ref="oval:gov.irs.rhel5:ste:113"/>
            </file_test>
            <file_test check_existence="all_exist" comment="File permissions for /etc/cron.d/.* should be set to 700" version="1" id="oval:gov.irs.rhel5:tst:316" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <object object_ref="oval:gov.irs.rhel5:obj:301"/>
                  <state state_ref="oval:gov.irs.rhel5:ste:114"/>
            </file_test>
            <runlevel_test check_existence="any_exist" comment="The sshd service should not be started at runlevel 2" version="1" id="oval:gov.irs.rhel5:tst:317" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <object object_ref="oval:gov.irs.rhel5:obj:302"/>
                  <state state_ref="oval:gov.irs.rhel5:ste:115"/>
            </runlevel_test>
            <runlevel_test check_existence="any_exist" comment="The sshd service should not be started at runlevel 3" version="1" id="oval:gov.irs.rhel5:tst:318" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <object object_ref="oval:gov.irs.rhel5:obj:303"/>
                  <state state_ref="oval:gov.irs.rhel5:ste:115"/>
            </runlevel_test>
            <runlevel_test check_existence="any_exist" comment="The sshd service should not be started at runlevel 4" version="1" id="oval:gov.irs.rhel5:tst:319" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <object object_ref="oval:gov.irs.rhel5:obj:304"/>
                  <state state_ref="oval:gov.irs.rhel5:ste:115"/>
            </runlevel_test>
            <runlevel_test check_existence="any_exist" comment="The sshd service should not be started at runlevel 5" version="1" id="oval:gov.irs.rhel5:tst:320" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <object object_ref="oval:gov.irs.rhel5:obj:305"/>
                  <state state_ref="oval:gov.irs.rhel5:ste:115"/>
            </runlevel_test>
            <rpminfo_test check_existence="none_exist" comment="The openssh-server package should not be installed" version="1" id="oval:gov.irs.rhel5:tst:321" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
                  <object object_ref="oval:gov.irs.rhel5:obj:306"/>
            </rpminfo_test>
            <textfilecontent54_test check_existence="all_exist" comment="Inbound connections to the ssh port should be allowed or denied as appropriate" version="1" id="oval:gov.irs.rhel5:tst:322" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
                  <object object_ref="oval:gov.irs.rhel5:obj:307"/>
            </textfilecontent54_test>
            <textfilecontent54_test check_existence="all_exist" comment="SSH version 1 protocol support should be enabled or disabled as appropriate." version="1" id="oval:gov.irs.rhel5:tst:323" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
                  <object object_ref="oval:gov.irs.rhel5:obj:308"/>
            </textfilecontent54_test>
            <textfilecontent54_test check_existence="all_exist" comment="The SSH idle timout interval should be set to an appropriate value" version="1" id="oval:gov.irs.rhel5:tst:324" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
                  <object object_ref="oval:gov.irs.rhel5:obj:309"/>
            </textfilecontent54_test>
            <textfilecontent54_test check_existence="all_exist" comment="The SSH idle timout interval should be set to an appropriate value" version="1" id="oval:gov.irs.rhel5:tst:325" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
                  <object object_ref="oval:gov.irs.rhel5:obj:310"/>
            </textfilecontent54_test>
            <textfilecontent54_test check_existence="all_exist" comment="Emulation of the rsh command through the ssh server should be enabled or disabled as appropriate" version="1" id="oval:gov.irs.rhel5:tst:326" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
                  <object object_ref="oval:gov.irs.rhel5:obj:311"/>
            </textfilecontent54_test>
            <textfilecontent54_test check_existence="all_exist" comment="SSH host-based authentication should be enabled or disabled as appropriate" version="1" id="oval:gov.irs.rhel5:tst:327" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
                  <object object_ref="oval:gov.irs.rhel5:obj:312"/>
            </textfilecontent54_test>
            <textfilecontent54_test check_existence="all_exist" comment="Root login via SSH should be enabled or disabled as appropriate" version="1" id="oval:gov.irs.rhel5:tst:328" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
                  <object object_ref="oval:gov.irs.rhel5:obj:313"/>
            </textfilecontent54_test>
            <textfilecontent54_test check_existence="all_exist" comment="Remote connections from accounts with empty passwords should be enabled or disabled as appropriate" version="1" id="oval:gov.irs.rhel5:tst:329" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
                  <object object_ref="oval:gov.irs.rhel5:obj:314"/>
            </textfilecontent54_test>
            <textfilecontent54_test check_existence="all_exist" comment="SSH warning banner should be enabled or disabled as appropriate" version="1" id="oval:gov.irs.rhel5:tst:330" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
                  <object object_ref="oval:gov.irs.rhel5:obj:315"/>
            </textfilecontent54_test>
            <textfilecontent54_test check_existence="all_exist" comment="X Windows should be enabled or disabled at system boot as appropriate" version="1" id="oval:gov.irs.rhel5:tst:331" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
                  <object object_ref="oval:gov.irs.rhel5:obj:316"/>
            </textfilecontent54_test>
            <unknown_test comment="Test implementation is unknown, unavailable, or impossible" version="1" id="oval:gov.irs.rhel5:tst:332" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent"/>
            <runlevel_test check_existence="any_exist" comment="The avahi-daemon service should not be started at runlevel 2" version="1" id="oval:gov.irs.rhel5:tst:333" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <object object_ref="oval:gov.irs.rhel5:obj:317"/>
                  <state state_ref="oval:gov.irs.rhel5:ste:116"/>
            </runlevel_test>
            <runlevel_test check_existence="any_exist" comment="The avahi-daemon service should not be started at runlevel 3" version="1" id="oval:gov.irs.rhel5:tst:334" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <object object_ref="oval:gov.irs.rhel5:obj:318"/>
                  <state state_ref="oval:gov.irs.rhel5:ste:116"/>
            </runlevel_test>
            <runlevel_test check_existence="any_exist" comment="The avahi-daemon service should not be started at runlevel 4" version="1" id="oval:gov.irs.rhel5:tst:335" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <object object_ref="oval:gov.irs.rhel5:obj:319"/>
                  <state state_ref="oval:gov.irs.rhel5:ste:116"/>
            </runlevel_test>
            <runlevel_test check_existence="any_exist" comment="The avahi-daemon service should not be started at runlevel 5" version="1" id="oval:gov.irs.rhel5:tst:336" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <object object_ref="oval:gov.irs.rhel5:obj:320"/>
                  <state state_ref="oval:gov.irs.rhel5:ste:116"/>
            </runlevel_test>
            <unknown_test comment="Test implementation is unknown, unavailable, or impossible" version="1" id="oval:gov.irs.rhel5:tst:337" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent"/>
            <unknown_test comment="Test implementation is unknown, unavailable, or impossible" version="1" id="oval:gov.irs.rhel5:tst:338" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent"/>
            <textfilecontent54_test check_existence="all_exist" comment="Avahi should be configured to accept packets with a TTL field not equal to 255 or not as appropriate" version="1" id="oval:gov.irs.rhel5:tst:339" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
                  <object object_ref="oval:gov.irs.rhel5:obj:321"/>
            </textfilecontent54_test>
            <textfilecontent54_test check_existence="all_exist" comment="Avahi should be configured to allow other stacks from binding to port 5353 or not as appropriate" version="1" id="oval:gov.irs.rhel5:tst:340" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
                  <object object_ref="oval:gov.irs.rhel5:obj:322"/>
            </textfilecontent54_test>
            <textfilecontent54_test check_existence="all_exist" comment="Avahi publishing of local information should be enabled or disabled as appropriate" version="1" id="oval:gov.irs.rhel5:tst:341" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
                  <object object_ref="oval:gov.irs.rhel5:obj:323"/>
            </textfilecontent54_test>
            <textfilecontent54_test check_existence="all_exist" comment="Avahi publishing of local information by user applications should be enabled or disabled as appropriate" version="1" id="oval:gov.irs.rhel5:tst:342" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
                  <object object_ref="oval:gov.irs.rhel5:obj:324"/>
            </textfilecontent54_test>
            <textfilecontent54_test check_existence="all_exist" comment="Avahi publishing of hardware information should be enabled or disabled as appropriate" version="1" id="oval:gov.irs.rhel5:tst:343" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
                  <object object_ref="oval:gov.irs.rhel5:obj:325"/>
            </textfilecontent54_test>
            <textfilecontent54_test check_existence="all_exist" comment="Avahi publishing of workstation name should be enabled or disabled as appropriate" version="1" id="oval:gov.irs.rhel5:tst:344" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
                  <object object_ref="oval:gov.irs.rhel5:obj:326"/>
            </textfilecontent54_test>
            <textfilecontent54_test check_existence="all_exist" comment="Avahi publishing of IP addresses should be enabled or disabled as appropriate" version="1" id="oval:gov.irs.rhel5:tst:345" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
                  <object object_ref="oval:gov.irs.rhel5:obj:327"/>
            </textfilecontent54_test>
            <textfilecontent54_test check_existence="all_exist" comment="Avahi publishing of domain name should be enabled or disabled as appropriate" version="1" id="oval:gov.irs.rhel5:tst:346" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
                  <object object_ref="oval:gov.irs.rhel5:obj:328"/>
            </textfilecontent54_test>
            <runlevel_test check_existence="any_exist" comment="The cups service should not be started at runlevel 2" version="1" id="oval:gov.irs.rhel5:tst:347" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <object object_ref="oval:gov.irs.rhel5:obj:329"/>
                  <state state_ref="oval:gov.irs.rhel5:ste:117"/>
            </runlevel_test>
            <runlevel_test check_existence="any_exist" comment="The cups service should not be started at runlevel 3" version="1" id="oval:gov.irs.rhel5:tst:348" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <object object_ref="oval:gov.irs.rhel5:obj:330"/>
                  <state state_ref="oval:gov.irs.rhel5:ste:117"/>
            </runlevel_test>
            <runlevel_test check_existence="any_exist" comment="The cups service should not be started at runlevel 4" version="1" id="oval:gov.irs.rhel5:tst:349" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <object object_ref="oval:gov.irs.rhel5:obj:331"/>
                  <state state_ref="oval:gov.irs.rhel5:ste:117"/>
            </runlevel_test>
            <runlevel_test check_existence="any_exist" comment="The cups service should not be started at runlevel 5" version="1" id="oval:gov.irs.rhel5:tst:350" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <object object_ref="oval:gov.irs.rhel5:obj:332"/>
                  <state state_ref="oval:gov.irs.rhel5:ste:117"/>
            </runlevel_test>
            <textfilecontent54_test check_existence="none_exist" comment="Firewall access to printing service should be enabled or disabled as appropriate" version="1" id="oval:gov.irs.rhel5:tst:351" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
                  <object object_ref="oval:gov.irs.rhel5:obj:333"/>
            </textfilecontent54_test>
            <textfilecontent54_test check_existence="all_exist" comment="Remote print browsing should be enabled or disabled as appropriate" version="1" id="oval:gov.irs.rhel5:tst:352" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
                  <object object_ref="oval:gov.irs.rhel5:obj:334"/>
            </textfilecontent54_test>
            <textfilecontent54_test check_existence="all_exist" comment="CUPS should be allowed or denied the ability to listen for Incoming printer information as appropriate" version="1" id="oval:gov.irs.rhel5:tst:353" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
                  <object object_ref="oval:gov.irs.rhel5:obj:335"/>
            </textfilecontent54_test>
            <runlevel_test check_existence="any_exist" comment="The hplip service should not be started at runlevel 2" version="1" id="oval:gov.irs.rhel5:tst:354" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <object object_ref="oval:gov.irs.rhel5:obj:336"/>
                  <state state_ref="oval:gov.irs.rhel5:ste:118"/>
            </runlevel_test>
            <runlevel_test check_existence="any_exist" comment="The hplip service should not be started at runlevel 3" version="1" id="oval:gov.irs.rhel5:tst:355" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <object object_ref="oval:gov.irs.rhel5:obj:337"/>
                  <state state_ref="oval:gov.irs.rhel5:ste:118"/>
            </runlevel_test>
            <runlevel_test check_existence="any_exist" comment="The hplip service should not be started at runlevel 4" version="1" id="oval:gov.irs.rhel5:tst:356" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <object object_ref="oval:gov.irs.rhel5:obj:338"/>
                  <state state_ref="oval:gov.irs.rhel5:ste:118"/>
            </runlevel_test>
            <runlevel_test check_existence="any_exist" comment="The hplip service should not be started at runlevel 5" version="1" id="oval:gov.irs.rhel5:tst:357" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <object object_ref="oval:gov.irs.rhel5:obj:339"/>
                  <state state_ref="oval:gov.irs.rhel5:ste:118"/>
            </runlevel_test>
            <textfilecontent54_test check_existence="all_exist" comment="The dhcp client service should be enabled or disabled as appropriate for each interface." version="1" id="oval:gov.irs.rhel5:tst:358" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
                  <object object_ref="oval:gov.irs.rhel5:obj:340"/>
            </textfilecontent54_test>
            <runlevel_test check_existence="any_exist" comment="The dhcpd service should not be started at runlevel 2" version="1" id="oval:gov.irs.rhel5:tst:359" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <object object_ref="oval:gov.irs.rhel5:obj:341"/>
                  <state state_ref="oval:gov.irs.rhel5:ste:119"/>
            </runlevel_test>
            <runlevel_test check_existence="any_exist" comment="The dhcpd service should not be started at runlevel 3" version="1" id="oval:gov.irs.rhel5:tst:360" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <object object_ref="oval:gov.irs.rhel5:obj:342"/>
                  <state state_ref="oval:gov.irs.rhel5:ste:119"/>
            </runlevel_test>
            <runlevel_test check_existence="any_exist" comment="The dhcpd service should not be started at runlevel 4" version="1" id="oval:gov.irs.rhel5:tst:361" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <object object_ref="oval:gov.irs.rhel5:obj:343"/>
                  <state state_ref="oval:gov.irs.rhel5:ste:119"/>
            </runlevel_test>
            <runlevel_test check_existence="any_exist" comment="The dhcpd service should not be started at runlevel 5" version="1" id="oval:gov.irs.rhel5:tst:362" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <object object_ref="oval:gov.irs.rhel5:obj:344"/>
                  <state state_ref="oval:gov.irs.rhel5:ste:119"/>
            </runlevel_test>
            <rpminfo_test check_existence="none_exist" comment="The dhcp package should not be installed" version="1" id="oval:gov.irs.rhel5:tst:363" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
                  <object object_ref="oval:gov.irs.rhel5:obj:345"/>
            </rpminfo_test>
            <textfilecontent54_test check_existence="all_exist" comment="The dynamic DNS feature of the DHCP server should be enabled or disabled as appropriate" version="1" id="oval:gov.irs.rhel5:tst:364" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
                  <object object_ref="oval:gov.irs.rhel5:obj:346"/>
            </textfilecontent54_test>
            <textfilecontent54_test check_existence="all_exist" comment="DHCPDECLINE messages should be accepted or denied by the DHCP server as appropriate" version="1" id="oval:gov.irs.rhel5:tst:365" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
                  <object object_ref="oval:gov.irs.rhel5:obj:347"/>
            </textfilecontent54_test>
            <textfilecontent54_test check_existence="all_exist" comment="BOOTP queries should be accepted or denied by the DHCP server as appropriate" version="1" id="oval:gov.irs.rhel5:tst:366" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
                  <object object_ref="oval:gov.irs.rhel5:obj:348"/>
            </textfilecontent54_test>
            <textfilecontent54_test check_existence="none_exist" comment="Domain name server information should be sent or not sent by the DHCP server as appropriate." version="1" id="oval:gov.irs.rhel5:tst:367" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
                  <object object_ref="oval:gov.irs.rhel5:obj:349"/>
            </textfilecontent54_test>
            <textfilecontent54_test check_existence="none_exist" comment="Default routers should be sent or not sent by the DHCP server as appropriate." version="1" id="oval:gov.irs.rhel5:tst:368" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
                  <object object_ref="oval:gov.irs.rhel5:obj:350"/>
            </textfilecontent54_test>
            <textfilecontent54_test check_existence="none_exist" comment="Domain name should be sent or not sent by the DHCP server as appropriate." version="1" id="oval:gov.irs.rhel5:tst:369" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
                  <object object_ref="oval:gov.irs.rhel5:obj:351"/>
            </textfilecontent54_test>
            <textfilecontent54_test check_existence="none_exist" comment="NIS domain should be sent or not sent by the DHCP server as appropriate." version="1" id="oval:gov.irs.rhel5:tst:370" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
                  <object object_ref="oval:gov.irs.rhel5:obj:352"/>
            </textfilecontent54_test>
            <textfilecontent54_test check_existence="none_exist" comment="NIS servers should be sent or not sent by the DHCP server as appropriate." version="1" id="oval:gov.irs.rhel5:tst:371" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
                  <object object_ref="oval:gov.irs.rhel5:obj:353"/>
            </textfilecontent54_test>
            <textfilecontent54_test check_existence="none_exist" comment="Time offset should be sent or not sent by the DHCP server as appropriate." version="1" id="oval:gov.irs.rhel5:tst:372" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
                  <object object_ref="oval:gov.irs.rhel5:obj:354"/>
            </textfilecontent54_test>
            <textfilecontent54_test check_existence="none_exist" comment="NTP servers should be sent or not sent by the DHCP server as appropriate." version="1" id="oval:gov.irs.rhel5:tst:373" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
                  <object object_ref="oval:gov.irs.rhel5:obj:355"/>
            </textfilecontent54_test>
            <textfilecontent54_test check_existence="all_exist" comment="dhcpd logging should be enabled or disabled as appropriate." version="1" id="oval:gov.irs.rhel5:tst:374" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
                  <object object_ref="oval:gov.irs.rhel5:obj:356"/>
            </textfilecontent54_test>
            <runlevel_test check_existence="any_exist" comment="The ntpd service should not be started at runlevel 2" version="1" id="oval:gov.irs.rhel5:tst:375" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <object object_ref="oval:gov.irs.rhel5:obj:357"/>
                  <state state_ref="oval:gov.irs.rhel5:ste:120"/>
            </runlevel_test>
            <runlevel_test check_existence="any_exist" comment="The ntpd service should not be started at runlevel 3" version="1" id="oval:gov.irs.rhel5:tst:376" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <object object_ref="oval:gov.irs.rhel5:obj:358"/>
                  <state state_ref="oval:gov.irs.rhel5:ste:120"/>
            </runlevel_test>
            <runlevel_test check_existence="any_exist" comment="The ntpd service should not be started at runlevel 4" version="1" id="oval:gov.irs.rhel5:tst:377" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <object object_ref="oval:gov.irs.rhel5:obj:359"/>
                  <state state_ref="oval:gov.irs.rhel5:ste:120"/>
            </runlevel_test>
            <runlevel_test check_existence="any_exist" comment="The ntpd service should not be started at runlevel 5" version="1" id="oval:gov.irs.rhel5:tst:378" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <object object_ref="oval:gov.irs.rhel5:obj:360"/>
                  <state state_ref="oval:gov.irs.rhel5:ste:120"/>
            </runlevel_test>
            <textfilecontent54_test check_existence="all_exist" comment="Network access to ntpd should be allowed or denied as appropriate" version="1" id="oval:gov.irs.rhel5:tst:379" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
                  <object object_ref="oval:gov.irs.rhel5:obj:361"/>
            </textfilecontent54_test>
            <unknown_test comment="Test implementation is unknown, unavailable, or impossible" version="1" id="oval:gov.irs.rhel5:tst:380" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent"/>
            <unknown_test comment="Test implementation is unknown, unavailable, or impossible" version="1" id="oval:gov.irs.rhel5:tst:381" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent"/>
            <textfilecontent54_test check_existence="all_exist" comment="The ntp daemon should be enabled or disabled as appropriate" version="1" id="oval:gov.irs.rhel5:tst:382" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
                  <object object_ref="oval:gov.irs.rhel5:obj:362"/>
            </textfilecontent54_test>
            <unknown_test comment="Test implementation is unknown, unavailable, or impossible" version="1" id="oval:gov.irs.rhel5:tst:383" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent"/>
            <runlevel_test check_existence="any_exist" comment="The sendmail service should not be started at runlevel 2" version="1" id="oval:gov.irs.rhel5:tst:384" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <object object_ref="oval:gov.irs.rhel5:obj:363"/>
                  <state state_ref="oval:gov.irs.rhel5:ste:121"/>
            </runlevel_test>
            <runlevel_test check_existence="any_exist" comment="The sendmail service should not be started at runlevel 3" version="1" id="oval:gov.irs.rhel5:tst:385" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <object object_ref="oval:gov.irs.rhel5:obj:364"/>
                  <state state_ref="oval:gov.irs.rhel5:ste:121"/>
            </runlevel_test>
            <runlevel_test check_existence="any_exist" comment="The sendmail service should not be started at runlevel 4" version="1" id="oval:gov.irs.rhel5:tst:386" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <object object_ref="oval:gov.irs.rhel5:obj:365"/>
                  <state state_ref="oval:gov.irs.rhel5:ste:121"/>
            </runlevel_test>
            <runlevel_test check_existence="any_exist" comment="The sendmail service should not be started at runlevel 5" version="1" id="oval:gov.irs.rhel5:tst:387" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <object object_ref="oval:gov.irs.rhel5:obj:366"/>
                  <state state_ref="oval:gov.irs.rhel5:ste:121"/>
            </runlevel_test>
            <textfilecontent54_test check_existence="all_exist" comment="The listening sendmail daemon should be enabled or disabled as appropriate." version="1" id="oval:gov.irs.rhel5:tst:388" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
                  <object object_ref="oval:gov.irs.rhel5:obj:367"/>
            </textfilecontent54_test>
            <runlevel_test check_existence="any_exist" comment="The ldap service should not be started at runlevel 2" version="1" id="oval:gov.irs.rhel5:tst:389" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <object object_ref="oval:gov.irs.rhel5:obj:368"/>
                  <state state_ref="oval:gov.irs.rhel5:ste:122"/>
            </runlevel_test>
            <runlevel_test check_existence="any_exist" comment="The ldap service should not be started at runlevel 3" version="1" id="oval:gov.irs.rhel5:tst:390" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <object object_ref="oval:gov.irs.rhel5:obj:369"/>
                  <state state_ref="oval:gov.irs.rhel5:ste:122"/>
            </runlevel_test>
            <runlevel_test check_existence="any_exist" comment="The ldap service should not be started at runlevel 4" version="1" id="oval:gov.irs.rhel5:tst:391" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <object object_ref="oval:gov.irs.rhel5:obj:370"/>
                  <state state_ref="oval:gov.irs.rhel5:ste:122"/>
            </runlevel_test>
            <runlevel_test check_existence="any_exist" comment="The ldap service should not be started at runlevel 5" version="1" id="oval:gov.irs.rhel5:tst:392" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <object object_ref="oval:gov.irs.rhel5:obj:371"/>
                  <state state_ref="oval:gov.irs.rhel5:ste:122"/>
            </runlevel_test>
            <file_test check_existence="all_exist" comment="File permissions test for /var/lib/ldap/*" version="1" id="oval:gov.irs.rhel5:tst:393" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <object object_ref="oval:gov.irs.rhel5:obj:372"/>
                  <state state_ref="oval:gov.irs.rhel5:ste:123"/>
            </file_test>
            <file_test check_existence="all_exist" comment="File permissions test for /var/lib/ldap/*" version="1" id="oval:gov.irs.rhel5:tst:394" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <object object_ref="oval:gov.irs.rhel5:obj:372"/>
                  <state state_ref="oval:gov.irs.rhel5:ste:124"/>
            </file_test>
            <runlevel_test check_existence="any_exist" comment="The nfslock service should not be started at runlevel 2" version="1" id="oval:gov.irs.rhel5:tst:395" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <object object_ref="oval:gov.irs.rhel5:obj:374"/>
                  <state state_ref="oval:gov.irs.rhel5:ste:125"/>
            </runlevel_test>
            <runlevel_test check_existence="any_exist" comment="The nfslock service should not be started at runlevel 3" version="1" id="oval:gov.irs.rhel5:tst:396" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <object object_ref="oval:gov.irs.rhel5:obj:375"/>
                  <state state_ref="oval:gov.irs.rhel5:ste:125"/>
            </runlevel_test>
            <runlevel_test check_existence="any_exist" comment="The nfslock service should not be started at runlevel 4" version="1" id="oval:gov.irs.rhel5:tst:397" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <object object_ref="oval:gov.irs.rhel5:obj:376"/>
                  <state state_ref="oval:gov.irs.rhel5:ste:125"/>
            </runlevel_test>
            <runlevel_test check_existence="any_exist" comment="The nfslock service should not be started at runlevel 5" version="1" id="oval:gov.irs.rhel5:tst:398" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <object object_ref="oval:gov.irs.rhel5:obj:377"/>
                  <state state_ref="oval:gov.irs.rhel5:ste:125"/>
            </runlevel_test>
            <runlevel_test check_existence="any_exist" comment="The rpcgssd service should not be started at runlevel 2" version="1" id="oval:gov.irs.rhel5:tst:399" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <object object_ref="oval:gov.irs.rhel5:obj:378"/>
                  <state state_ref="oval:gov.irs.rhel5:ste:126"/>
            </runlevel_test>
            <runlevel_test check_existence="any_exist" comment="The rpcgssd service should not be started at runlevel 3" version="1" id="oval:gov.irs.rhel5:tst:400" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <object object_ref="oval:gov.irs.rhel5:obj:379"/>
                  <state state_ref="oval:gov.irs.rhel5:ste:126"/>
            </runlevel_test>
            <runlevel_test check_existence="any_exist" comment="The rpcgssd service should not be started at runlevel 4" version="1" id="oval:gov.irs.rhel5:tst:401" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <object object_ref="oval:gov.irs.rhel5:obj:380"/>
                  <state state_ref="oval:gov.irs.rhel5:ste:126"/>
            </runlevel_test>
            <runlevel_test check_existence="any_exist" comment="The rpcgssd service should not be started at runlevel 5" version="1" id="oval:gov.irs.rhel5:tst:402" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <object object_ref="oval:gov.irs.rhel5:obj:381"/>
                  <state state_ref="oval:gov.irs.rhel5:ste:126"/>
            </runlevel_test>
            <runlevel_test check_existence="any_exist" comment="The rpcidmapd service should not be started at runlevel 2" version="1" id="oval:gov.irs.rhel5:tst:403" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <object object_ref="oval:gov.irs.rhel5:obj:382"/>
                  <state state_ref="oval:gov.irs.rhel5:ste:127"/>
            </runlevel_test>
            <runlevel_test check_existence="any_exist" comment="The rpcidmapd service should not be started at runlevel 3" version="1" id="oval:gov.irs.rhel5:tst:404" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <object object_ref="oval:gov.irs.rhel5:obj:383"/>
                  <state state_ref="oval:gov.irs.rhel5:ste:127"/>
            </runlevel_test>
            <runlevel_test check_existence="any_exist" comment="The rpcidmapd service should not be started at runlevel 4" version="1" id="oval:gov.irs.rhel5:tst:405" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <object object_ref="oval:gov.irs.rhel5:obj:384"/>
                  <state state_ref="oval:gov.irs.rhel5:ste:127"/>
            </runlevel_test>
            <runlevel_test check_existence="any_exist" comment="The rpcidmapd service should not be started at runlevel 5" version="1" id="oval:gov.irs.rhel5:tst:406" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <object object_ref="oval:gov.irs.rhel5:obj:385"/>
                  <state state_ref="oval:gov.irs.rhel5:ste:127"/>
            </runlevel_test>
            <runlevel_test check_existence="any_exist" comment="The netfs service should not be started at runlevel 2" version="1" id="oval:gov.irs.rhel5:tst:407" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <object object_ref="oval:gov.irs.rhel5:obj:386"/>
                  <state state_ref="oval:gov.irs.rhel5:ste:128"/>
            </runlevel_test>
            <runlevel_test check_existence="any_exist" comment="The netfs service should not be started at runlevel 3" version="1" id="oval:gov.irs.rhel5:tst:408" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <object object_ref="oval:gov.irs.rhel5:obj:387"/>
                  <state state_ref="oval:gov.irs.rhel5:ste:128"/>
            </runlevel_test>
            <runlevel_test check_existence="any_exist" comment="The netfs service should not be started at runlevel 4" version="1" id="oval:gov.irs.rhel5:tst:409" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <object object_ref="oval:gov.irs.rhel5:obj:388"/>
                  <state state_ref="oval:gov.irs.rhel5:ste:128"/>
            </runlevel_test>
            <runlevel_test check_existence="any_exist" comment="The netfs service should not be started at runlevel 5" version="1" id="oval:gov.irs.rhel5:tst:410" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <object object_ref="oval:gov.irs.rhel5:obj:389"/>
                  <state state_ref="oval:gov.irs.rhel5:ste:128"/>
            </runlevel_test>
            <runlevel_test check_existence="any_exist" comment="The portmap service should not be started at runlevel 2" version="1" id="oval:gov.irs.rhel5:tst:411" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <object object_ref="oval:gov.irs.rhel5:obj:390"/>
                  <state state_ref="oval:gov.irs.rhel5:ste:129"/>
            </runlevel_test>
            <runlevel_test check_existence="any_exist" comment="The portmap service should not be started at runlevel 3" version="1" id="oval:gov.irs.rhel5:tst:412" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <object object_ref="oval:gov.irs.rhel5:obj:391"/>
                  <state state_ref="oval:gov.irs.rhel5:ste:129"/>
            </runlevel_test>
            <runlevel_test check_existence="any_exist" comment="The portmap service should not be started at runlevel 4" version="1" id="oval:gov.irs.rhel5:tst:413" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <object object_ref="oval:gov.irs.rhel5:obj:392"/>
                  <state state_ref="oval:gov.irs.rhel5:ste:129"/>
            </runlevel_test>
            <runlevel_test check_existence="any_exist" comment="The portmap service should not be started at runlevel 5" version="1" id="oval:gov.irs.rhel5:tst:414" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <object object_ref="oval:gov.irs.rhel5:obj:393"/>
                  <state state_ref="oval:gov.irs.rhel5:ste:129"/>
            </runlevel_test>
            <textfilecontent54_test check_existence="all_exist" comment="The lockd service should be configured to use a static port or a dynamic portmapper port for TCP as appropriate" version="1" id="oval:gov.irs.rhel5:tst:415" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
                  <object object_ref="oval:gov.irs.rhel5:obj:394"/>
            </textfilecontent54_test>
            <textfilecontent54_test check_existence="all_exist" comment="The statd service should be configured to use an outgoing static port or an outgoing dynamic portmapper port as appropriate" version="1" id="oval:gov.irs.rhel5:tst:416" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
                  <object object_ref="oval:gov.irs.rhel5:obj:395"/>
            </textfilecontent54_test>
            <textfilecontent54_test check_existence="all_exist" comment="The statd service should be configured to use a static port or a dynamic portmapper port as appropriate" version="1" id="oval:gov.irs.rhel5:tst:417" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
                  <object object_ref="oval:gov.irs.rhel5:obj:396"/>
            </textfilecontent54_test>
            <textfilecontent54_test check_existence="all_exist" comment="The lockd service should be configured to use a static port or a dynamic portmapper port for UDP as appropriate" version="1" id="oval:gov.irs.rhel5:tst:418" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
                  <object object_ref="oval:gov.irs.rhel5:obj:397"/>
            </textfilecontent54_test>
            <textfilecontent54_test check_existence="all_exist" comment="The mountd service should be configured to use a static port or a dynamic portmapper port as appropriate" version="1" id="oval:gov.irs.rhel5:tst:419" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
                  <object object_ref="oval:gov.irs.rhel5:obj:398"/>
            </textfilecontent54_test>
            <textfilecontent54_test check_existence="all_exist" comment="The rquotad service should be configured to use a static port or a dynamic portmapper port as appropriate" version="1" id="oval:gov.irs.rhel5:tst:420" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
                  <object object_ref="oval:gov.irs.rhel5:obj:399"/>
            </textfilecontent54_test>
            <runlevel_test check_existence="any_exist" comment="The nfs service should not be started at runlevel 2" version="1" id="oval:gov.irs.rhel5:tst:421" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <object object_ref="oval:gov.irs.rhel5:obj:400"/>
                  <state state_ref="oval:gov.irs.rhel5:ste:130"/>
            </runlevel_test>
            <runlevel_test check_existence="any_exist" comment="The nfs service should not be started at runlevel 3" version="1" id="oval:gov.irs.rhel5:tst:422" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <object object_ref="oval:gov.irs.rhel5:obj:401"/>
                  <state state_ref="oval:gov.irs.rhel5:ste:130"/>
            </runlevel_test>
            <runlevel_test check_existence="any_exist" comment="The nfs service should not be started at runlevel 4" version="1" id="oval:gov.irs.rhel5:tst:423" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <object object_ref="oval:gov.irs.rhel5:obj:402"/>
                  <state state_ref="oval:gov.irs.rhel5:ste:130"/>
            </runlevel_test>
            <runlevel_test check_existence="any_exist" comment="The nfs service should not be started at runlevel 5" version="1" id="oval:gov.irs.rhel5:tst:424" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <object object_ref="oval:gov.irs.rhel5:obj:403"/>
                  <state state_ref="oval:gov.irs.rhel5:ste:130"/>
            </runlevel_test>
            <runlevel_test check_existence="any_exist" comment="The rpcsvcgssd service should not be started at runlevel 2" version="1" id="oval:gov.irs.rhel5:tst:425" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <object object_ref="oval:gov.irs.rhel5:obj:404"/>
                  <state state_ref="oval:gov.irs.rhel5:ste:131"/>
            </runlevel_test>
            <runlevel_test check_existence="any_exist" comment="The rpcsvcgssd service should not be started at runlevel 3" version="1" id="oval:gov.irs.rhel5:tst:426" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <object object_ref="oval:gov.irs.rhel5:obj:405"/>
                  <state state_ref="oval:gov.irs.rhel5:ste:131"/>
            </runlevel_test>
            <runlevel_test check_existence="any_exist" comment="The rpcsvcgssd service should not be started at runlevel 4" version="1" id="oval:gov.irs.rhel5:tst:427" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <object object_ref="oval:gov.irs.rhel5:obj:406"/>
                  <state state_ref="oval:gov.irs.rhel5:ste:131"/>
            </runlevel_test>
            <runlevel_test check_existence="any_exist" comment="The rpcsvcgssd service should not be started at runlevel 5" version="1" id="oval:gov.irs.rhel5:tst:428" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <object object_ref="oval:gov.irs.rhel5:obj:407"/>
                  <state state_ref="oval:gov.irs.rhel5:ste:131"/>
            </runlevel_test>
            <textfilecontent54_test check_existence="any_exist" comment="The nodev option should be enabled or disabled for all NFS mounts as appropriate" version="1" id="oval:gov.irs.rhel5:tst:429" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
                  <object object_ref="oval:gov.irs.rhel5:obj:408"/>
                  <state state_ref="oval:gov.irs.rhel5:ste:132"/>
            </textfilecontent54_test>
            <textfilecontent54_test check_existence="any_exist" comment="The nosuid option should be enabled or disabled for all NFS mounts as appropriate" version="1" id="oval:gov.irs.rhel5:tst:430" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
                  <object object_ref="oval:gov.irs.rhel5:obj:409"/>
                  <state state_ref="oval:gov.irs.rhel5:ste:133"/>
            </textfilecontent54_test>
            <textfilecontent54_test check_existence="any_exist" comment="The noexec option should be enabled or disabled for all NFS mounts as appropriate" version="1" id="oval:gov.irs.rhel5:tst:431" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
                  <object object_ref="oval:gov.irs.rhel5:obj:410"/>
                  <state state_ref="oval:gov.irs.rhel5:ste:134"/>
            </textfilecontent54_test>
            <textfilecontent54_test check_existence="none_exist" comment="Root squashing should be enabled or disabled as appropriate for all NFS shares" version="1" id="oval:gov.irs.rhel5:tst:432" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
                  <object object_ref="oval:gov.irs.rhel5:obj:411"/>
            </textfilecontent54_test>
            <textfilecontent54_test check_existence="none_exist" comment="Restriction of NFS clients to privileged ports should be enabled or disabled as appropriate" version="1" id="oval:gov.irs.rhel5:tst:433" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
                  <object object_ref="oval:gov.irs.rhel5:obj:412"/>
            </textfilecontent54_test>
            <textfilecontent54_test check_existence="none_exist" comment="Write access to NFS shares should be enabled or disabled as appropriate" version="1" id="oval:gov.irs.rhel5:tst:434" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
                  <object object_ref="oval:gov.irs.rhel5:obj:413"/>
            </textfilecontent54_test>
            <runlevel_test check_existence="any_exist" comment="The named service should not be started at runlevel 2" version="1" id="oval:gov.irs.rhel5:tst:435" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <object object_ref="oval:gov.irs.rhel5:obj:414"/>
                  <state state_ref="oval:gov.irs.rhel5:ste:135"/>
            </runlevel_test>
            <runlevel_test check_existence="any_exist" comment="The named service should not be started at runlevel 3" version="1" id="oval:gov.irs.rhel5:tst:436" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <object object_ref="oval:gov.irs.rhel5:obj:415"/>
                  <state state_ref="oval:gov.irs.rhel5:ste:135"/>
            </runlevel_test>
            <runlevel_test check_existence="any_exist" comment="The named service should not be started at runlevel 4" version="1" id="oval:gov.irs.rhel5:tst:437" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <object object_ref="oval:gov.irs.rhel5:obj:416"/>
                  <state state_ref="oval:gov.irs.rhel5:ste:135"/>
            </runlevel_test>
            <runlevel_test check_existence="any_exist" comment="The named service should not be started at runlevel 5" version="1" id="oval:gov.irs.rhel5:tst:438" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <object object_ref="oval:gov.irs.rhel5:obj:417"/>
                  <state state_ref="oval:gov.irs.rhel5:ste:135"/>
            </runlevel_test>
            <rpminfo_test check_existence="none_exist" comment="The bind package should not be installed" version="1" id="oval:gov.irs.rhel5:tst:439" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
                  <object object_ref="oval:gov.irs.rhel5:obj:418"/>
            </rpminfo_test>
            <file_test check_existence="all_exist" comment="File permissions test for /var/named/chroot/etc/named.conf" version="1" id="oval:gov.irs.rhel5:tst:440" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <object object_ref="oval:gov.irs.rhel5:obj:419"/>
                  <state state_ref="oval:gov.irs.rhel5:ste:136"/>
            </file_test>
            <file_test check_existence="all_exist" comment="File permissions for /var/named/chroot/etc/named.conf should be set to 644" version="1" id="oval:gov.irs.rhel5:tst:441" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <object object_ref="oval:gov.irs.rhel5:obj:419"/>
                  <state state_ref="oval:gov.irs.rhel5:ste:137"/>
            </file_test>
            <file_test check_existence="all_exist" comment="File permissions test for /var/named/chroot/etc/named.conf" version="1" id="oval:gov.irs.rhel5:tst:442" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <object object_ref="oval:gov.irs.rhel5:obj:419"/>
                  <state state_ref="oval:gov.irs.rhel5:ste:138"/>
            </file_test>
            <unknown_test comment="Test implementation is unknown, unavailable, or impossible" version="1" id="oval:gov.irs.rhel5:tst:443" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent"/>
            <runlevel_test check_existence="any_exist" comment="The vsftpd service should not be started at runlevel 2" version="1" id="oval:gov.irs.rhel5:tst:444" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <object object_ref="oval:gov.irs.rhel5:obj:420"/>
                  <state state_ref="oval:gov.irs.rhel5:ste:139"/>
            </runlevel_test>
            <runlevel_test check_existence="any_exist" comment="The vsftpd service should not be started at runlevel 3" version="1" id="oval:gov.irs.rhel5:tst:445" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <object object_ref="oval:gov.irs.rhel5:obj:421"/>
                  <state state_ref="oval:gov.irs.rhel5:ste:139"/>
            </runlevel_test>
            <runlevel_test check_existence="any_exist" comment="The vsftpd service should not be started at runlevel 4" version="1" id="oval:gov.irs.rhel5:tst:446" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <object object_ref="oval:gov.irs.rhel5:obj:422"/>
                  <state state_ref="oval:gov.irs.rhel5:ste:139"/>
            </runlevel_test>
            <runlevel_test check_existence="any_exist" comment="The vsftpd service should not be started at runlevel 5" version="1" id="oval:gov.irs.rhel5:tst:447" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <object object_ref="oval:gov.irs.rhel5:obj:423"/>
                  <state state_ref="oval:gov.irs.rhel5:ste:139"/>
            </runlevel_test>
            <textfilecontent54_test check_existence="all_exist" comment="Logging of vsftpd transactions should be enabled or disabled as appropriate" version="1" id="oval:gov.irs.rhel5:tst:448" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
                  <object object_ref="oval:gov.irs.rhel5:obj:424"/>
            </textfilecontent54_test>
            <textfilecontent54_test check_existence="all_exist" comment="Logging of vsftpd transactions should be enabled or disabled as appropriate" version="1" id="oval:gov.irs.rhel5:tst:449" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
                  <object object_ref="oval:gov.irs.rhel5:obj:425"/>
            </textfilecontent54_test>
            <textfilecontent54_test check_existence="all_exist" comment="A warning banner for all FTP users should be enabled or disabled as appropriate" version="1" id="oval:gov.irs.rhel5:tst:450" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
                  <object object_ref="oval:gov.irs.rhel5:obj:426"/>
            </textfilecontent54_test>
            <textfilecontent54_test check_existence="all_exist" comment="Local user login to the vsftpd service should be enabled or disabled as appropriate" version="1" id="oval:gov.irs.rhel5:tst:451" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
                  <object object_ref="oval:gov.irs.rhel5:obj:427"/>
            </textfilecontent54_test>
            <textfilecontent54_test check_existence="all_exist" comment="File uploads via vsftpd should be enabled or disabled as appropriate" version="1" id="oval:gov.irs.rhel5:tst:452" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
                  <object object_ref="oval:gov.irs.rhel5:obj:428"/>
            </textfilecontent54_test>
            <runlevel_test check_existence="any_exist" comment="The httpd service should not be started at runlevel 2" version="1" id="oval:gov.irs.rhel5:tst:453" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <object object_ref="oval:gov.irs.rhel5:obj:429"/>
                  <state state_ref="oval:gov.irs.rhel5:ste:140"/>
            </runlevel_test>
            <runlevel_test check_existence="any_exist" comment="The httpd service should not be started at runlevel 3" version="1" id="oval:gov.irs.rhel5:tst:454" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <object object_ref="oval:gov.irs.rhel5:obj:430"/>
                  <state state_ref="oval:gov.irs.rhel5:ste:140"/>
            </runlevel_test>
            <runlevel_test check_existence="any_exist" comment="The httpd service should not be started at runlevel 4" version="1" id="oval:gov.irs.rhel5:tst:455" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <object object_ref="oval:gov.irs.rhel5:obj:431"/>
                  <state state_ref="oval:gov.irs.rhel5:ste:140"/>
            </runlevel_test>
            <runlevel_test check_existence="any_exist" comment="The httpd service should not be started at runlevel 5" version="1" id="oval:gov.irs.rhel5:tst:456" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <object object_ref="oval:gov.irs.rhel5:obj:432"/>
                  <state state_ref="oval:gov.irs.rhel5:ste:140"/>
            </runlevel_test>
            <rpminfo_test check_existence="none_exist" comment="The httpd package should not be installed" version="1" id="oval:gov.irs.rhel5:tst:457" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
                  <object object_ref="oval:gov.irs.rhel5:obj:433"/>
            </rpminfo_test>
            <textfilecontent54_test check_existence="all_exist" comment="The apache2 server's ServerTokens value should be set appropriately" version="1" id="oval:gov.irs.rhel5:tst:458" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
                  <object object_ref="oval:gov.irs.rhel5:obj:434"/>
            </textfilecontent54_test>
            <textfilecontent54_test check_existence="all_exist" comment="The apache2 server's ServerSignature value should be set appropriately" version="1" id="oval:gov.irs.rhel5:tst:459" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
                  <object object_ref="oval:gov.irs.rhel5:obj:435"/>
            </textfilecontent54_test>
            <file_test check_existence="all_exist" comment="File permissions for /etc/httpd/conf should be set to 750" version="1" id="oval:gov.irs.rhel5:tst:460" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <object object_ref="oval:gov.irs.rhel5:obj:436"/>
                  <state state_ref="oval:gov.irs.rhel5:ste:141"/>
            </file_test>
            <file_test check_existence="all_exist" comment="File permissions for /etc/httpd/conf/* should be set to 640" version="1" id="oval:gov.irs.rhel5:tst:461" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <object object_ref="oval:gov.irs.rhel5:obj:437"/>
                  <state state_ref="oval:gov.irs.rhel5:ste:142"/>
            </file_test>
            <file_test check_existence="all_exist" comment="File permissions for /usr/sbin/httpd should be set to 511" version="1" id="oval:gov.irs.rhel5:tst:462" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <object object_ref="oval:gov.irs.rhel5:obj:438"/>
                  <state state_ref="oval:gov.irs.rhel5:ste:143"/>
            </file_test>
            <file_test check_existence="all_exist" comment="File permissions test for /etc/httpd/conf/*" version="1" id="oval:gov.irs.rhel5:tst:463" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <object object_ref="oval:gov.irs.rhel5:obj:437"/>
                  <state state_ref="oval:gov.irs.rhel5:ste:144"/>
            </file_test>
            <file_test check_existence="all_exist" comment="File permissions for /var/log/httpd should be set to 750" version="1" id="oval:gov.irs.rhel5:tst:464" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <object object_ref="oval:gov.irs.rhel5:obj:440"/>
                  <state state_ref="oval:gov.irs.rhel5:ste:145"/>
            </file_test>
            <runlevel_test check_existence="any_exist" comment="The dovecot service should not be started at runlevel 2" version="1" id="oval:gov.irs.rhel5:tst:465" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <object object_ref="oval:gov.irs.rhel5:obj:441"/>
                  <state state_ref="oval:gov.irs.rhel5:ste:146"/>
            </runlevel_test>
            <runlevel_test check_existence="any_exist" comment="The dovecot service should not be started at runlevel 3" version="1" id="oval:gov.irs.rhel5:tst:466" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <object object_ref="oval:gov.irs.rhel5:obj:442"/>
                  <state state_ref="oval:gov.irs.rhel5:ste:146"/>
            </runlevel_test>
            <runlevel_test check_existence="any_exist" comment="The dovecot service should not be started at runlevel 4" version="1" id="oval:gov.irs.rhel5:tst:467" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <object object_ref="oval:gov.irs.rhel5:obj:443"/>
                  <state state_ref="oval:gov.irs.rhel5:ste:146"/>
            </runlevel_test>
            <runlevel_test check_existence="any_exist" comment="The dovecot service should not be started at runlevel 5" version="1" id="oval:gov.irs.rhel5:tst:468" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <object object_ref="oval:gov.irs.rhel5:obj:444"/>
                  <state state_ref="oval:gov.irs.rhel5:ste:146"/>
            </runlevel_test>
            <rpminfo_test check_existence="none_exist" comment="The dovecot package should not be installed" version="1" id="oval:gov.irs.rhel5:tst:469" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
                  <object object_ref="oval:gov.irs.rhel5:obj:445"/>
            </rpminfo_test>
            <textfilecontent54_test check_existence="none_exist" comment="Dovecot should be configured to support the imaps protocol or not as necessary" version="1" id="oval:gov.irs.rhel5:tst:470" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
                  <object object_ref="oval:gov.irs.rhel5:obj:446"/>
            </textfilecontent54_test>
            <textfilecontent54_test check_existence="none_exist" comment="Dovecot should be configured to support the pop3s protocol or not as necessary" version="1" id="oval:gov.irs.rhel5:tst:471" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
                  <object object_ref="oval:gov.irs.rhel5:obj:447"/>
            </textfilecontent54_test>
            <textfilecontent54_test check_existence="none_exist" comment="Dovecot should be configured to support the pop3 protocol or not as necessary" version="1" id="oval:gov.irs.rhel5:tst:472" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
                  <object object_ref="oval:gov.irs.rhel5:obj:448"/>
            </textfilecontent54_test>
            <textfilecontent54_test check_existence="none_exist" comment="Dovecot should be configured to support the imap protocol or not as necessary" version="1" id="oval:gov.irs.rhel5:tst:473" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
                  <object object_ref="oval:gov.irs.rhel5:obj:449"/>
            </textfilecontent54_test>
            <textfilecontent54_test check_existence="all_exist" comment="Dovecot plaintext authentication of clients should be enabled or disabled as necessary" version="1" id="oval:gov.irs.rhel5:tst:474" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
                  <object object_ref="oval:gov.irs.rhel5:obj:450"/>
            </textfilecontent54_test>
            <textfilecontent54_test check_existence="all_exist" comment="The Dovecot option to drop privileges to user before executing mail process should be enabled or not as appropriate" version="1" id="oval:gov.irs.rhel5:tst:475" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
                  <object object_ref="oval:gov.irs.rhel5:obj:451"/>
            </textfilecontent54_test>
            <textfilecontent54_test check_existence="all_exist" comment="The Dovecot option to spawn a new login process per connection should be enabled or not as appropriate" version="1" id="oval:gov.irs.rhel5:tst:476" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
                  <object object_ref="oval:gov.irs.rhel5:obj:452"/>
            </textfilecontent54_test>
            <runlevel_test check_existence="any_exist" comment="The smb service should not be started at runlevel 2" version="1" id="oval:gov.irs.rhel5:tst:477" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <object object_ref="oval:gov.irs.rhel5:obj:453"/>
                  <state state_ref="oval:gov.irs.rhel5:ste:147"/>
            </runlevel_test>
            <runlevel_test check_existence="any_exist" comment="The smb service should not be started at runlevel 3" version="1" id="oval:gov.irs.rhel5:tst:478" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <object object_ref="oval:gov.irs.rhel5:obj:454"/>
                  <state state_ref="oval:gov.irs.rhel5:ste:147"/>
            </runlevel_test>
            <runlevel_test check_existence="any_exist" comment="The smb service should not be started at runlevel 4" version="1" id="oval:gov.irs.rhel5:tst:479" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <object object_ref="oval:gov.irs.rhel5:obj:455"/>
                  <state state_ref="oval:gov.irs.rhel5:ste:147"/>
            </runlevel_test>
            <runlevel_test check_existence="any_exist" comment="The smb service should not be started at runlevel 5" version="1" id="oval:gov.irs.rhel5:tst:480" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <object object_ref="oval:gov.irs.rhel5:obj:456"/>
                  <state state_ref="oval:gov.irs.rhel5:ste:147"/>
            </runlevel_test>
            <runlevel_test check_existence="any_exist" comment="The squid service should not be started at runlevel 2" version="1" id="oval:gov.irs.rhel5:tst:481" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <object object_ref="oval:gov.irs.rhel5:obj:457"/>
                  <state state_ref="oval:gov.irs.rhel5:ste:148"/>
            </runlevel_test>
            <runlevel_test check_existence="any_exist" comment="The squid service should not be started at runlevel 3" version="1" id="oval:gov.irs.rhel5:tst:482" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <object object_ref="oval:gov.irs.rhel5:obj:458"/>
                  <state state_ref="oval:gov.irs.rhel5:ste:148"/>
            </runlevel_test>
            <runlevel_test check_existence="any_exist" comment="The squid service should not be started at runlevel 4" version="1" id="oval:gov.irs.rhel5:tst:483" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <object object_ref="oval:gov.irs.rhel5:obj:459"/>
                  <state state_ref="oval:gov.irs.rhel5:ste:148"/>
            </runlevel_test>
            <runlevel_test check_existence="any_exist" comment="The squid service should not be started at runlevel 5" version="1" id="oval:gov.irs.rhel5:tst:484" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <object object_ref="oval:gov.irs.rhel5:obj:460"/>
                  <state state_ref="oval:gov.irs.rhel5:ste:148"/>
            </runlevel_test>
            <rpminfo_test check_existence="none_exist" comment="The squid package should not be installed" version="1" id="oval:gov.irs.rhel5:tst:485" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
                  <object object_ref="oval:gov.irs.rhel5:obj:461"/>
            </rpminfo_test>
            <textfilecontent54_test check_existence="none_exist" comment="The Squid option to force FTP passive connections should be enabled or not as appropriate" version="1" id="oval:gov.irs.rhel5:tst:486" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
                  <object object_ref="oval:gov.irs.rhel5:obj:462"/>
            </textfilecontent54_test>
            <textfilecontent54_test check_existence="all_exist" comment="The Squid max request HTTP header length should be set to an appropriate value" version="1" id="oval:gov.irs.rhel5:tst:487" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
                  <object object_ref="oval:gov.irs.rhel5:obj:463"/>
            </textfilecontent54_test>
            <textfilecontent54_test check_existence="none_exist" comment="The Squid option to check for RFC compliant hostnames should be enabled or not as appropriate" version="1" id="oval:gov.irs.rhel5:tst:488" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
                  <object object_ref="oval:gov.irs.rhel5:obj:464"/>
            </textfilecontent54_test>
            <textfilecontent54_test check_existence="none_exist" comment="The Squid option to ignore unknown nameservers should be enabled or not as appropriate" version="1" id="oval:gov.irs.rhel5:tst:489" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
                  <object object_ref="oval:gov.irs.rhel5:obj:465"/>
            </textfilecontent54_test>
            <textfilecontent54_test check_existence="all_exist" comment="The Squid max reply HTTP header length should be set to an appropriate value" version="1" id="oval:gov.irs.rhel5:tst:490" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
                  <object object_ref="oval:gov.irs.rhel5:obj:466"/>
            </textfilecontent54_test>
            <textfilecontent54_test check_existence="all_exist" comment="The Squid EUID should be set to an appropriate user" version="1" id="oval:gov.irs.rhel5:tst:491" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
                  <object object_ref="oval:gov.irs.rhel5:obj:467"/>
            </textfilecontent54_test>
            <textfilecontent54_test check_existence="none_exist" comment="The Squid option to perform FTP sanity checks should be enabled or not as appropriate" version="1" id="oval:gov.irs.rhel5:tst:492" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
                  <object object_ref="oval:gov.irs.rhel5:obj:468"/>
            </textfilecontent54_test>
            <textfilecontent54_test check_existence="all_exist" comment="The Squid GUID should be set to an appropriate group" version="1" id="oval:gov.irs.rhel5:tst:493" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
                  <object object_ref="oval:gov.irs.rhel5:obj:469"/>
            </textfilecontent54_test>
            <textfilecontent54_test check_existence="all_exist" comment="The Squid option to show proxy client IP addresses in HTTP headers should be enabled or disabled as appropriate" version="1" id="oval:gov.irs.rhel5:tst:494" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
                  <object object_ref="oval:gov.irs.rhel5:obj:470"/>
            </textfilecontent54_test>
            <textfilecontent54_test check_existence="all_exist" comment="The Squid option to log HTTP MIME headers should be enabled or disabled as appropriate" version="1" id="oval:gov.irs.rhel5:tst:495" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
                  <object object_ref="oval:gov.irs.rhel5:obj:471"/>
            </textfilecontent54_test>
            <textfilecontent54_test check_existence="all_exist" comment="The Squid option to allow underscores in hostnames should be enabled or disabled as appropriate" version="1" id="oval:gov.irs.rhel5:tst:496" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
                  <object object_ref="oval:gov.irs.rhel5:obj:472"/>
            </textfilecontent54_test>
            <textfilecontent54_test check_existence="all_exist" comment="The Squid option to suppress the httpd version string should be enabled or disabled as appropriate" version="1" id="oval:gov.irs.rhel5:tst:497" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
                  <object object_ref="oval:gov.irs.rhel5:obj:473"/>
            </textfilecontent54_test>
            <unknown_test comment="Test implementation is unknown, unavailable, or impossible" version="1" id="oval:gov.irs.rhel5:tst:498" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent"/>
            <unknown_test comment="Test implementation is unknown, unavailable, or impossible" version="1" id="oval:gov.irs.rhel5:tst:499" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent"/>
            <unknown_test comment="Test implementation is unknown, unavailable, or impossible" version="1" id="oval:gov.irs.rhel5:tst:500" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent"/>
            <unknown_test comment="Test implementation is unknown, unavailable, or impossible" version="1" id="oval:gov.irs.rhel5:tst:501" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent"/>
            <unknown_test comment="Test implementation is unknown, unavailable, or impossible" version="1" id="oval:gov.irs.rhel5:tst:502" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent"/>
            <unknown_test comment="Test implementation is unknown, unavailable, or impossible" version="1" id="oval:gov.irs.rhel5:tst:503" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent"/>
            <unknown_test comment="Test implementation is unknown, unavailable, or impossible" version="1" id="oval:gov.irs.rhel5:tst:504" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent"/>
            <unknown_test comment="Test implementation is unknown, unavailable, or impossible" version="1" id="oval:gov.irs.rhel5:tst:505" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent"/>
            <unknown_test comment="Test implementation is unknown, unavailable, or impossible" version="1" id="oval:gov.irs.rhel5:tst:506" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent"/>
            <unknown_test comment="Test implementation is unknown, unavailable, or impossible" version="1" id="oval:gov.irs.rhel5:tst:507" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent"/>
            <runlevel_test check_existence="any_exist" comment="The snmpd service should not be started at runlevel 2" version="1" id="oval:gov.irs.rhel5:tst:508" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <object object_ref="oval:gov.irs.rhel5:obj:474"/>
                  <state state_ref="oval:gov.irs.rhel5:ste:149"/>
            </runlevel_test>
            <runlevel_test check_existence="any_exist" comment="The snmpd service should not be started at runlevel 3" version="1" id="oval:gov.irs.rhel5:tst:509" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <object object_ref="oval:gov.irs.rhel5:obj:475"/>
                  <state state_ref="oval:gov.irs.rhel5:ste:149"/>
            </runlevel_test>
            <runlevel_test check_existence="any_exist" comment="The snmpd service should not be started at runlevel 4" version="1" id="oval:gov.irs.rhel5:tst:510" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <object object_ref="oval:gov.irs.rhel5:obj:476"/>
                  <state state_ref="oval:gov.irs.rhel5:ste:149"/>
            </runlevel_test>
            <runlevel_test check_existence="any_exist" comment="The snmpd service should not be started at runlevel 5" version="1" id="oval:gov.irs.rhel5:tst:511" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <object object_ref="oval:gov.irs.rhel5:obj:477"/>
                  <state state_ref="oval:gov.irs.rhel5:ste:149"/>
            </runlevel_test>
            <rpminfo_test check_existence="none_exist" comment="The net-smtp package should not be installed" version="1" id="oval:gov.irs.rhel5:tst:512" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
                  <object object_ref="oval:gov.irs.rhel5:obj:478"/>
            </rpminfo_test>
      </tests>
      <objects>
            <rpminfo_object version="1" id="oval:gov.irs.rhel5:obj:10000" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
                  <name>redhat-release</name>
            </rpminfo_object>
            <family_object version="1" id="oval:gov.irs.rhel5:obj:10001" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent"/>
            <runlevel_object version="1" id="oval:gov.irs.rhel5:obj:1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <service_name>rhnsd</service_name>
                  <runlevel>2</runlevel>
            </runlevel_object>
            <runlevel_object version="1" id="oval:gov.irs.rhel5:obj:2" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <service_name>rhnsd</service_name>
                  <runlevel>3</runlevel>
            </runlevel_object>
            <runlevel_object version="1" id="oval:gov.irs.rhel5:obj:3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <service_name>rhnsd</service_name>
                  <runlevel>4</runlevel>
            </runlevel_object>
            <runlevel_object version="1" id="oval:gov.irs.rhel5:obj:4" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <service_name>rhnsd</service_name>
                  <runlevel>5</runlevel>
            </runlevel_object>
            <runlevel_object version="1" id="oval:gov.irs.rhel5:obj:5" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <service_name>yum-updatesd</service_name>
                  <runlevel>2</runlevel>
            </runlevel_object>
            <runlevel_object version="1" id="oval:gov.irs.rhel5:obj:6" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <service_name>yum-updatesd</service_name>
                  <runlevel>3</runlevel>
            </runlevel_object>
            <runlevel_object version="1" id="oval:gov.irs.rhel5:obj:7" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <service_name>yum-updatesd</service_name>
                  <runlevel>4</runlevel>
            </runlevel_object>
            <runlevel_object version="1" id="oval:gov.irs.rhel5:obj:8" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <service_name>yum-updatesd</service_name>
                  <runlevel>5</runlevel>
            </runlevel_object>
            <rpminfo_object version="1" id="oval:gov.irs.rhel5:obj:9" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
                  <name>aide</name>
            </rpminfo_object>
            <textfilecontent54_object version="1" id="oval:gov.irs.rhel5:obj:10" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
                  <path>/etc</path>
                  <filename>fstab</filename>
                  <pattern operation="pattern match">^[^#]*\/[^[:space:]]*ext[23]([^#])?</pattern>
                  <instance operation="greater than or equal" datatype="int">1</instance>
            </textfilecontent54_object>
            <textfilecontent54_object version="1" id="oval:gov.irs.rhel5:obj:12" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
                  <path>/etc</path>
                  <filename>fstab</filename>
                  <pattern operation="pattern match">^[^#]*\/[^[:space:]]*\/[^[:space:]]*floppy.*[:space:]([^#])?^</pattern>
                  <instance operation="greater than or equal" datatype="int">1</instance>
            </textfilecontent54_object>
            <textfilecontent54_object version="1" id="oval:gov.irs.rhel5:obj:13" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
                  <path>/etc</path>
                  <filename>fstab</filename>
                  <pattern operation="pattern match">[^#]*\/[^[:space:]]*\/[^[:space:]]*cdrom.*[:space:]([^#])?</pattern>
                  <instance operation="greater than or equal" datatype="int">1</instance>
            </textfilecontent54_object>
            <textfilecontent54_object version="1" id="oval:gov.irs.rhel5:obj:14" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
                  <path>/etc</path>
                  <filename>fstab</filename>
                  <pattern operation="pattern match">^[^#]*vfat(.*)#?</pattern>
                  <instance operation="greater than or equal" datatype="int">1</instance>
            </textfilecontent54_object>
            <textfilecontent54_object version="1" id="oval:gov.irs.rhel5:obj:15" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
                  <path>/etc</path>
                  <filename>fstab</filename>
                  <pattern operation="pattern match">^[^#]*iso9660(.*)#?</pattern>
                  <instance operation="greater than or equal" datatype="int">1</instance>
            </textfilecontent54_object>
            <textfilecontent54_object version="1" id="oval:gov.irs.rhel5:obj:16" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
                  <path>/etc</path>
                  <filename>fstab</filename>
                  <pattern operation="pattern match">^[^#]*msdos([^#])?</pattern>
                  <instance operation="greater than or equal" datatype="int">1</instance>
            </textfilecontent54_object>
            <textfilecontent54_object version="1" id="oval:gov.irs.rhel5:obj:11" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
                  <set set_operator="UNION" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5">
                        <set set_operator="UNION">
                              <object_reference>oval:gov.irs.rhel5:obj:12</object_reference>
                              <object_reference>oval:gov.irs.rhel5:obj:13</object_reference>
                        </set>
                        <set set_operator="UNION">
                              <object_reference>oval:gov.irs.rhel5:obj:14</object_reference>
                              <object_reference>oval:gov.irs.rhel5:obj:15</object_reference>
                        </set>
                  </set>
            </textfilecontent54_object>
            <textfilecontent54_object version="1" id="oval:gov.irs.rhel5:obj:18" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
                  <path>/etc</path>
                  <filename>fstab</filename>
                  <pattern operation="pattern match">^[^#]*\/[^[:space:]]*\/[^[:space:]]*floppy.*[:space:]([^#])?^</pattern>
                  <instance operation="greater than or equal" datatype="int">1</instance>
            </textfilecontent54_object>
            <textfilecontent54_object version="1" id="oval:gov.irs.rhel5:obj:19" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
                  <path>/etc</path>
                  <filename>fstab</filename>
                  <pattern operation="pattern match">[^#]*\/[^[:space:]]*\/[^[:space:]]*cdrom.*[:space:]([^#])?</pattern>
                  <instance operation="greater than or equal" datatype="int">1</instance>
            </textfilecontent54_object>
            <textfilecontent54_object version="1" id="oval:gov.irs.rhel5:obj:20" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
                  <path>/etc</path>
                  <filename>fstab</filename>
                  <pattern operation="pattern match">^[^#]*vfat(.*)#?</pattern>
                  <instance operation="greater than or equal" datatype="int">1</instance>
            </textfilecontent54_object>
            <textfilecontent54_object version="1" id="oval:gov.irs.rhel5:obj:21" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
                  <path>/etc</path>
                  <filename>fstab</filename>
                  <pattern operation="pattern match">^[^#]*iso9660(.*)#?</pattern>
                  <instance operation="greater than or equal" datatype="int">1</instance>
            </textfilecontent54_object>
            <textfilecontent54_object version="1" id="oval:gov.irs.rhel5:obj:22" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
                  <path>/etc</path>
                  <filename>fstab</filename>
                  <pattern operation="pattern match">^[^#]*msdos([^#])?</pattern>
                  <instance operation="greater than or equal" datatype="int">1</instance>
            </textfilecontent54_object>
            <textfilecontent54_object version="1" id="oval:gov.irs.rhel5:obj:17" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
                  <set set_operator="UNION" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5">
                        <set set_operator="UNION">
                              <object_reference>oval:gov.irs.rhel5:obj:18</object_reference>
                              <object_reference>oval:gov.irs.rhel5:obj:19</object_reference>
                        </set>
                        <set set_operator="UNION">
                              <object_reference>oval:gov.irs.rhel5:obj:20</object_reference>
                              <object_reference>oval:gov.irs.rhel5:obj:21</object_reference>
                        </set>
                  </set>
            </textfilecontent54_object>
            <textfilecontent54_object version="1" id="oval:gov.irs.rhel5:obj:24" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
                  <path>/etc</path>
                  <filename>fstab</filename>
                  <pattern operation="pattern match">^[^#]*\/[^[:space:]]*\/[^[:space:]]*floppy.*[:space:]([^#])?^</pattern>
                  <instance operation="greater than or equal" datatype="int">1</instance>
            </textfilecontent54_object>
            <textfilecontent54_object version="1" id="oval:gov.irs.rhel5:obj:25" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
                  <path>/etc</path>
                  <filename>fstab</filename>
                  <pattern operation="pattern match">[^#]*\/[^[:space:]]*\/[^[:space:]]*cdrom.*[:space:]([^#])?</pattern>
                  <instance operation="greater than or equal" datatype="int">1</instance>
            </textfilecontent54_object>
            <textfilecontent54_object version="1" id="oval:gov.irs.rhel5:obj:26" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
                  <path>/etc</path>
                  <filename>fstab</filename>
                  <pattern operation="pattern match">^[^#]*vfat(.*)#?</pattern>
                  <instance operation="greater than or equal" datatype="int">1</instance>
            </textfilecontent54_object>
            <textfilecontent54_object version="1" id="oval:gov.irs.rhel5:obj:27" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
                  <path>/etc</path>
                  <filename>fstab</filename>
                  <pattern operation="pattern match">^[^#]*iso9660(.*)#?</pattern>
                  <instance operation="greater than or equal" datatype="int">1</instance>
            </textfilecontent54_object>
            <textfilecontent54_object version="1" id="oval:gov.irs.rhel5:obj:28" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
                  <path>/etc</path>
                  <filename>fstab</filename>
                  <pattern operation="pattern match">^[^#]*msdos([^#])?</pattern>
                  <instance operation="greater than or equal" datatype="int">1</instance>
            </textfilecontent54_object>
            <textfilecontent54_object version="1" id="oval:gov.irs.rhel5:obj:23" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
                  <set set_operator="UNION" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5">
                        <set set_operator="UNION">
                              <object_reference>oval:gov.irs.rhel5:obj:24</object_reference>
                              <object_reference>oval:gov.irs.rhel5:obj:25</object_reference>
                        </set>
                        <set set_operator="UNION">
                              <object_reference>oval:gov.irs.rhel5:obj:26</object_reference>
                              <object_reference>oval:gov.irs.rhel5:obj:27</object_reference>
                        </set>
                  </set>
            </textfilecontent54_object>
            <textfilecontent54_object version="1" id="oval:gov.irs.rhel5:obj:29" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
                  <path>/etc/security/console.perms.d</path>
                  <filename>50-default.perms</filename>
                  <pattern operation="pattern match">^[:space:]*&lt;x?console&gt;</pattern>
                  <instance operation="greater than or equal" datatype="int">1</instance>
            </textfilecontent54_object>
            <textfilecontent54_object version="1" id="oval:gov.irs.rhel5:obj:30" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
                  <path>/etc/security</path>
                  <filename>console.perms</filename>
                  <pattern operation="pattern match">^[:space:]*&lt;console&gt;[:space:]*=[:space:]*tty\[0-9\]\[0-9\]\*[[:space:]]+vc\/\[0-9\]\[0-9\]\*[[:space:]]+:0\\\.\[0-9\][[:space:]]+:0[:space:]*(#.*)?$</pattern>
                  <instance operation="greater than or equal" datatype="int">1</instance>
            </textfilecontent54_object>
            <textfilecontent54_object version="1" id="oval:gov.irs.rhel5:obj:31" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
                  <path>/etc/security</path>
                  <filename>console.perms</filename>
                  <pattern operation="pattern match">^[:space:]*&lt;xconsole&gt;[:space:]*=[:space:]*:0\\\.\[0-9\][[:space:]]+:0[:space:]*(#.*)?$</pattern>
                  <instance operation="greater than or equal" datatype="int">1</instance>
            </textfilecontent54_object>
            <textfilecontent54_object version="1" id="oval:gov.irs.rhel5:obj:32" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
                  <path>/etc</path>
                  <filename>modprobe.conf</filename>
                  <pattern operation="pattern match">install[[:space:]]+usb-storage[[:space:]]+:</pattern>
                  <instance operation="greater than or equal" datatype="int">1</instance>
            </textfilecontent54_object>
            <file_object comment="/lib/modules/.*/kernel/drivers/usb/storage/usb-storage.ko" version="1" id="oval:gov.irs.rhel5:obj:33" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <behaviors/>
                  <path operation="pattern match">/lib/modules/.*/kernel/drivers/usb/storage</path>
                  <filename>usb-storage.ko</filename>
            </file_object>
            <textfilecontent54_object version="1" id="oval:gov.irs.rhel5:obj:34" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
                  <path>/etc</path>
                  <filename>grub.conf</filename>
                  <pattern operation="pattern match">kernel..*nousb</pattern>
                  <instance operation="greater than or equal" datatype="int">1</instance>
            </textfilecontent54_object>
            <runlevel_object version="1" id="oval:gov.irs.rhel5:obj:35" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <service_name>autofs</service_name>
                  <runlevel>2</runlevel>
            </runlevel_object>
            <runlevel_object version="1" id="oval:gov.irs.rhel5:obj:36" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <service_name>autofs</service_name>
                  <runlevel>3</runlevel>
            </runlevel_object>
            <runlevel_object version="1" id="oval:gov.irs.rhel5:obj:37" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <service_name>autofs</service_name>
                  <runlevel>4</runlevel>
            </runlevel_object>
            <runlevel_object version="1" id="oval:gov.irs.rhel5:obj:38" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <service_name>autofs</service_name>
                  <runlevel>5</runlevel>
            </runlevel_object>
            <xmlfilecontent_object version="1" id="oval:gov.irs.rhel5:obj:39" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
                  <path>/etc/gconf/gconf.xml.mandatory</path>
                  <filename operation="pattern match">.*</filename>
                  <xpath>/desktop/gnome/volume_manager/automount_media</xpath>
            </xmlfilecontent_object>
            <xmlfilecontent_object version="1" id="oval:gov.irs.rhel5:obj:40" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
                  <path>/etc/gconf/gconf.xml.mandatory</path>
                  <filename operation="pattern match">.*</filename>
                  <xpath>/desktop/gnome/volume_manager/automount_drives</xpath>
            </xmlfilecontent_object>
            <file_object comment="/etc/shadow" version="1" id="oval:gov.irs.rhel5:obj:41" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <path>/etc</path>
                  <filename>shadow</filename>
            </file_object>
            <file_object comment="/etc/group" version="1" id="oval:gov.irs.rhel5:obj:42" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <path>/etc</path>
                  <filename>group</filename>
            </file_object>
            <file_object comment="/etc/gshadow" version="1" id="oval:gov.irs.rhel5:obj:43" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <path>/etc</path>
                  <filename>gshadow</filename>
            </file_object>
            <file_object comment="/etc/passwd" version="1" id="oval:gov.irs.rhel5:obj:44" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <path>/etc</path>
                  <filename>passwd</filename>
            </file_object>
            <file_object version="1" id="oval:gov.irs.rhel5:obj:46" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <path>/</path>
                  <filename xsi:nil="true"/>
            </file_object>
            <file_object version="1" id="oval:gov.irs.rhel5:obj:45" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <set set_operator="UNION" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5">
                        <object_reference>oval:gov.irs.rhel5:obj:46</object_reference>
                        <filter>oval:gov.irs.rhel5:ste:22</filter>
                  </set>
            </file_object>
            <file_object comment="//.*" version="1" id="oval:gov.irs.rhel5:obj:48" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <path>/</path>
                  <filename>.*</filename>
            </file_object>
            <file_object version="1" id="oval:gov.irs.rhel5:obj:47" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <set set_operator="UNION" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5">
                        <object_reference>oval:gov.irs.rhel5:obj:48</object_reference>
                        <filter>oval:gov.irs.rhel5:ste:24</filter>
                  </set>
            </file_object>
            <file_object version="1" id="oval:gov.irs.rhel5:obj:50" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <behaviors recurse_file_system="local" recurse="symlinks and directories" recurse_direction="down"/>
                  <path>/</path>
                  <filename operation="pattern match">.*</filename>
            </file_object>
            <textfilecontent54_object version="1" id="oval:gov.irs.rhel5:obj:51" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
                  <path>/etc</path>
                  <filename>passwd</filename>
                  <pattern operation="pattern match">^slocate:.*:.*:([0-9]*):</pattern>
                  <instance operation="greater than or equal" datatype="int">1</instance>
            </textfilecontent54_object>
            <textfilecontent54_object version="1" id="oval:gov.irs.rhel5:obj:52" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
                  <path>/etc</path>
                  <filename>passwd</filename>
                  <pattern operation="pattern match">^nobody:.*:.*:([0-9]*):</pattern>
                  <instance operation="greater than or equal" datatype="int">1</instance>
            </textfilecontent54_object>
            <textfilecontent54_object version="1" id="oval:gov.irs.rhel5:obj:53" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
                  <path>/etc</path>
                  <filename>passwd</filename>
                  <pattern operation="pattern match">^utmp:.*:.*:([0-9]*):</pattern>
                  <instance operation="greater than or equal" datatype="int">1</instance>
            </textfilecontent54_object>
            <textfilecontent54_object version="1" id="oval:gov.irs.rhel5:obj:54" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
                  <path>/etc</path>
                  <filename>passwd</filename>
                  <pattern operation="pattern match">^lock:.*:.*:([0-9]*):</pattern>
                  <instance operation="greater than or equal" datatype="int">1</instance>
            </textfilecontent54_object>
            <textfilecontent54_object version="1" id="oval:gov.irs.rhel5:obj:55" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
                  <path>/etc</path>
                  <filename>passwd</filename>
                  <pattern operation="pattern match">^smmsp:.*:.*:([0-9]*):</pattern>
                  <instance operation="greater than or equal" datatype="int">1</instance>
            </textfilecontent54_object>
            <file_object version="1" id="oval:gov.irs.rhel5:obj:49" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <set xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5">
                        <object_reference>oval:gov.irs.rhel5:obj:50</object_reference>
                        <filter>oval:gov.irs.rhel5:ste:26</filter>
                        <filter>oval:gov.irs.rhel5:ste:27</filter>
                        <filter>oval:gov.irs.rhel5:ste:28</filter>
                        <filter>oval:gov.irs.rhel5:ste:29</filter>
                        <filter>oval:gov.irs.rhel5:ste:30</filter>
                        <filter>oval:gov.irs.rhel5:ste:31</filter>
                        <filter>oval:gov.irs.rhel5:ste:32</filter>
                  </set>
            </file_object>
            <file_object version="1" id="oval:gov.irs.rhel5:obj:57" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <behaviors recurse_file_system="local" recurse="symlinks and directories" recurse_direction="down"/>
                  <path>/</path>
                  <filename operation="pattern match">.*</filename>
            </file_object>
            <file_object version="1" id="oval:gov.irs.rhel5:obj:56" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <set xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5">
                        <object_reference>oval:gov.irs.rhel5:obj:57</object_reference>
                        <filter>oval:gov.irs.rhel5:ste:33</filter>
                        <filter>oval:gov.irs.rhel5:ste:34</filter>
                        <filter>oval:gov.irs.rhel5:ste:35</filter>
                        <filter>oval:gov.irs.rhel5:ste:36</filter>
                        <filter>oval:gov.irs.rhel5:ste:37</filter>
                        <filter>oval:gov.irs.rhel5:ste:38</filter>
                        <filter>oval:gov.irs.rhel5:ste:39</filter>
                        <filter>oval:gov.irs.rhel5:ste:40</filter>
                        <filter>oval:gov.irs.rhel5:ste:41</filter>
                        <filter>oval:gov.irs.rhel5:ste:42</filter>
                        <filter>oval:gov.irs.rhel5:ste:43</filter>
                        <filter>oval:gov.irs.rhel5:ste:44</filter>
                        <filter>oval:gov.irs.rhel5:ste:45</filter>
                        <filter>oval:gov.irs.rhel5:ste:46</filter>
                  </set>
            </file_object>
            <textfilecontent54_object version="1" id="oval:gov.irs.rhel5:obj:58" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
                  <path>/etc/sysconfig</path>
                  <filename>init</filename>
                  <pattern operation="pattern match">umask[[:space:]]+02[27]</pattern>
                  <instance operation="greater than or equal" datatype="int">1</instance>
            </textfilecontent54_object>
            <textfilecontent54_object version="1" id="oval:gov.irs.rhel5:obj:59" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
                  <path>/etc/security</path>
                  <filename>limits.conf</filename>
                  <pattern operation="pattern match">[[:space:]]+hard[[:space:]]+core[[:space:]]+0</pattern>
                  <instance operation="greater than or equal" datatype="int">1</instance>
            </textfilecontent54_object>
            <textfilecontent54_object version="1" id="oval:gov.irs.rhel5:obj:60" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
                  <path>/etc</path>
                  <filename>sysctl.conf</filename>
                  <pattern operation="pattern match">^[:space:]*fs\.suid_dumpable[:space:]*=[:space:]*0[:space:]*(#.*)?$</pattern>
                  <instance operation="greater than or equal" datatype="int">1</instance>
            </textfilecontent54_object>
            <textfilecontent54_object version="1" id="oval:gov.irs.rhel5:obj:61" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
                  <path>/etc</path>
                  <filename>sysctl.conf</filename>
                  <pattern operation="pattern match">^[:space:]*kernel\.randomize_va_space[:space:]*=[:space:]*1[:space:]*(#.*)?$</pattern>
                  <instance operation="greater than or equal" datatype="int">1</instance>
            </textfilecontent54_object>
            <textfilecontent54_object version="1" id="oval:gov.irs.rhel5:obj:62" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
                  <path>/etc</path>
                  <filename>sysctl.conf</filename>
                  <pattern operation="pattern match">^[:space:]*kernel\.exec-shield[:space:]*=[:space:]*1[:space:]*(#.*)?$</pattern>
                  <instance operation="greater than or equal" datatype="int">1</instance>
            </textfilecontent54_object>
            <rpminfo_object version="1" id="oval:gov.irs.rhel5:obj:63" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
                  <name>kernel-PAE</name>
            </rpminfo_object>
            <textfilecontent54_object version="1" id="oval:gov.irs.rhel5:obj:64" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
                  <path>/etc</path>
                  <filename>securetty</filename>
                  <pattern operation="pattern match">tty[0-9]+</pattern>
                  <instance operation="greater than or equal" datatype="int">1</instance>
            </textfilecontent54_object>
            <textfilecontent54_object version="1" id="oval:gov.irs.rhel5:obj:65" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
                  <path>/etc</path>
                  <filename>securetty</filename>
                  <pattern operation="pattern match">vc\/[0-9]+</pattern>
                  <instance operation="greater than or equal" datatype="int">1</instance>
            </textfilecontent54_object>
            <textfilecontent54_object version="1" id="oval:gov.irs.rhel5:obj:66" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
                  <path>/etc</path>
                  <filename>securetty</filename>
                  <pattern operation="pattern match">console</pattern>
                  <instance operation="greater than or equal" datatype="int">1</instance>
            </textfilecontent54_object>
            <textfilecontent54_object version="1" id="oval:gov.irs.rhel5:obj:67" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
                  <path>/etc</path>
                  <filename>securetty</filename>
                  <pattern operation="pattern match">ttyS[0-9]+</pattern>
                  <instance operation="greater than or equal" datatype="int">1</instance>
            </textfilecontent54_object>
            <textfilecontent54_object version="1" id="oval:gov.irs.rhel5:obj:68" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
                  <path>/etc</path>
                  <filename>group</filename>
                  <pattern operation="pattern match">^wheel</pattern>
                  <instance operation="greater than or equal" datatype="int">1</instance>
            </textfilecontent54_object>
            <textfilecontent54_object version="1" id="oval:gov.irs.rhel5:obj:69" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
                  <path>/etc/pam.d</path>
                  <filename>su</filename>
                  <pattern operation="pattern match">^[:space:]*auth[[:space:]]+required[[:space:]]+pam_wheel.so[[:space:]]+use_uid[:space:]*(#.*)?$</pattern>
                  <instance operation="greater than or equal" datatype="int">1</instance>
            </textfilecontent54_object>
            <textfilecontent54_object version="1" id="oval:gov.irs.rhel5:obj:70" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
                  <path>/etc</path>
                  <filename>sudoers</filename>
                  <pattern operation="pattern match">%wheel[[:space:]]+ALL=\(ALL\)[[:space:]]+ALL</pattern>
                  <instance operation="greater than or equal" datatype="int">1</instance>
            </textfilecontent54_object>
            <textfilecontent54_object version="1" id="oval:gov.irs.rhel5:obj:71" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
                  <set xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5">
                        <object_reference>oval:gov.irs.rhel5:obj:72</object_reference>
                        <filter>oval:gov.irs.rhel5:ste:47</filter>
                  </set>
            </textfilecontent54_object>
            <textfilecontent54_object version="1" id="oval:gov.irs.rhel5:obj:72" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
                  <path>/etc</path>
                  <filename>passwd</filename>
                  <pattern operation="pattern match">[[:space:]]*([[:alpha:]]+):[1234][0-9][0-9]?</pattern>
                  <instance operation="greater than or equal" datatype="int">1</instance>
            </textfilecontent54_object>
            <textfilecontent54_object version="1" id="oval:gov.irs.rhel5:obj:73" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
                  <path>/etc</path>
                  <filename>shadow</filename>
                  <pattern operation="pattern match" var_ref="oval:gov.irs.rhel5:var:6"/>
                  <instance operation="greater than or equal" datatype="int">1</instance>
            </textfilecontent54_object>
            <textfilecontent54_object version="1" id="oval:gov.irs.rhel5:obj:74" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
                  <path>/etc</path>
                  <filename>passwd</filename>
                  <pattern operation="pattern match" var_ref="oval:gov.irs.rhel5:var:7"/>
                  <instance operation="greater than or equal" datatype="int">1</instance>
            </textfilecontent54_object>
            <textfilecontent54_object version="1" id="oval:gov.irs.rhel5:obj:75" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
                  <path>/etc</path>
                  <filename>shadow</filename>
                  <pattern operation="pattern match">[^:].*:([^:]):</pattern>
                  <instance operation="greater than or equal" datatype="int">1</instance>
            </textfilecontent54_object>
            <textfilecontent54_object version="1" id="oval:gov.irs.rhel5:obj:76" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
                  <path>/etc</path>
                  <filename>passwd</filename>
                  <pattern operation="pattern match">^[^r][^o][^o][^t]:[^:]:0:</pattern>
                  <instance operation="greater than or equal" datatype="int">1</instance>
            </textfilecontent54_object>
            <textfilecontent54_object version="1" id="oval:gov.irs.rhel5:obj:77" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
                  <path>/etc</path>
                  <filename>login.defs</filename>
                  <pattern operation="pattern match">PASS_MIN_LEN[:space:].*=[:space:].*8</pattern>
                  <instance operation="greater than or equal" datatype="int">1</instance>
            </textfilecontent54_object>
            <textfilecontent54_object version="1" id="oval:gov.irs.rhel5:obj:78" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
                  <path>/etc</path>
                  <filename>login.defs</filename>
                  <pattern operation="pattern match">PASS_MIN_DAYS[:space:].*=[:space:].*7</pattern>
                  <instance operation="greater than or equal" datatype="int">1</instance>
            </textfilecontent54_object>
            <textfilecontent54_object version="1" id="oval:gov.irs.rhel5:obj:79" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
                  <path>/etc</path>
                  <filename>login.defs</filename>
                  <pattern operation="pattern match">PASS_MAX_DAYS[:space:].*=[:space:].*180</pattern>
                  <instance operation="greater than or equal" datatype="int">1</instance>
            </textfilecontent54_object>
            <textfilecontent54_object version="1" id="oval:gov.irs.rhel5:obj:80" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
                  <path>/etc</path>
                  <filename>login.defs</filename>
                  <pattern operation="pattern match">PASS_WARN_AGE[:space:].*=[:space:].*7</pattern>
                  <instance operation="greater than or equal" datatype="int">1</instance>
            </textfilecontent54_object>
            <textfilecontent54_object version="1" id="oval:gov.irs.rhel5:obj:81" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
                  <path>/etc</path>
                  <filename>passwd</filename>
                  <pattern operation="pattern match">^+:</pattern>
                  <instance operation="greater than or equal" datatype="int">1</instance>
            </textfilecontent54_object>
            <textfilecontent54_object version="1" id="oval:gov.irs.rhel5:obj:82" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
                  <path>/etc</path>
                  <filename>shadow</filename>
                  <pattern operation="pattern match">^+:</pattern>
                  <instance operation="greater than or equal" datatype="int">1</instance>
            </textfilecontent54_object>
            <textfilecontent54_object version="1" id="oval:gov.irs.rhel5:obj:83" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
                  <path>/etc</path>
                  <filename>group</filename>
                  <pattern operation="pattern match">^+:</pattern>
                  <instance operation="greater than or equal" datatype="int">1</instance>
            </textfilecontent54_object>
            <textfilecontent54_object version="1" id="oval:gov.irs.rhel5:obj:84" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
                  <path>/etc</path>
                  <filename>passwd</filename>
                  <pattern operation="pattern match">^usergroup:.*:.*:([0-9]*):</pattern>
                  <instance operation="greater than or equal" datatype="int">1</instance>
            </textfilecontent54_object>
            <file_object comment="/usr/sbin/userhelper" version="1" id="oval:gov.irs.rhel5:obj:85" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <path>/usr/sbin</path>
                  <filename>userhelper</filename>
            </file_object>
            <file_object comment="/home/.*" version="1" id="oval:gov.irs.rhel5:obj:86" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <behaviors/>
                  <path>/home</path>
                  <filename operation="pattern match">.*</filename>
            </file_object>
            <textfilecontent54_object version="1" id="oval:gov.irs.rhel5:obj:87" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
                  <path>/etc</path>
                  <filename>bashrc</filename>
                  <pattern operation="pattern match">^[:space:]*umask[[:space:]]+077[:space:]*(#.*)?$</pattern>
                  <instance operation="greater than or equal" datatype="int">1</instance>
            </textfilecontent54_object>
            <textfilecontent54_object version="1" id="oval:gov.irs.rhel5:obj:88" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
                  <path>/etc</path>
                  <filename>csh.cshrc</filename>
                  <pattern operation="pattern match">^[:space:]*umask[[:space:]]+077[:space:]*(#.*)?$</pattern>
                  <instance operation="greater than or equal" datatype="int">1</instance>
            </textfilecontent54_object>
            <textfilecontent54_object version="1" id="oval:gov.irs.rhel5:obj:89" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
                  <path>/etc</path>
                  <filename>profile</filename>
                  <pattern operation="pattern match">^[:space:]*umask[[:space:]]+077[:space:]*(#.*)?$</pattern>
                  <instance operation="greater than or equal" datatype="int">1</instance>
            </textfilecontent54_object>
            <file_object comment="/etc/grub.conf" version="1" id="oval:gov.irs.rhel5:obj:90" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <path>/etc</path>
                  <filename>grub.conf</filename>
            </file_object>
            <textfilecontent54_object version="1" id="oval:gov.irs.rhel5:obj:91" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
                  <path>/etc</path>
                  <filename>grub.conf</filename>
                  <pattern operation="pattern match">password[[:space:]]+--md5[[:space:]]+..*</pattern>
                  <instance operation="greater than or equal" datatype="int">1</instance>
            </textfilecontent54_object>
            <textfilecontent54_object version="1" id="oval:gov.irs.rhel5:obj:92" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
                  <path>/etc</path>
                  <filename>inittab</filename>
                  <pattern operation="pattern match">~~:S:wait:/sbin/sulogin</pattern>
                  <instance operation="greater than or equal" datatype="int">1</instance>
            </textfilecontent54_object>
            <textfilecontent54_object version="1" id="oval:gov.irs.rhel5:obj:93" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
                  <path>/etc/sysconfig</path>
                  <filename>init</filename>
                  <pattern operation="pattern match">PROMPT[:space:].*=[:space:].*no</pattern>
                  <instance operation="greater than or equal" datatype="int">1</instance>
            </textfilecontent54_object>
            <textfilecontent54_object version="1" id="oval:gov.irs.rhel5:obj:94" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
                  <path>/etc/profile.d</path>
                  <filename>autologout.csh</filename>
                  <pattern operation="pattern match">^[:space:]*set[[:space:]]+-r[[:space:]]+autologout[[:space:]]+10[:space:]*(#.*)?$</pattern>
                  <instance operation="greater than or equal" datatype="int">1</instance>
            </textfilecontent54_object>
            <textfilecontent54_object version="1" id="oval:gov.irs.rhel5:obj:95" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
                  <path>/etc/profile.d</path>
                  <filename>tmout.sh</filename>
                  <pattern operation="pattern match">^[:space:]*TMOUT[:space:]*=[:space:]*600[:space:]*(#.*)?$</pattern>
                  <instance operation="greater than or equal" datatype="int">1</instance>
            </textfilecontent54_object>
            <textfilecontent54_object version="1" id="oval:gov.irs.rhel5:obj:96" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
                  <path>/etc/profile.d</path>
                  <filename>tmout.sh</filename>
                  <pattern operation="pattern match">^[:space:]*readonly[[:space:]]+TMOUT[:space:]*(#.*)?$</pattern>
                  <instance operation="greater than or equal" datatype="int">1</instance>
            </textfilecontent54_object>
            <textfilecontent54_object version="1" id="oval:gov.irs.rhel5:obj:97" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
                  <path>/etc/profile.d</path>
                  <filename>tmout.sh</filename>
                  <pattern operation="pattern match">^[:space:]*export[[:space:]]+TMOUT[:space:]*(#.*)?$</pattern>
                  <instance operation="greater than or equal" datatype="int">1</instance>
            </textfilecontent54_object>
            <xmlfilecontent_object version="1" id="oval:gov.irs.rhel5:obj:98" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
                  <path>/etc/gconf/gconf.xml.mandatory</path>
                  <filename operation="pattern match">.*</filename>
                  <xpath>/apps/gnome-screensaver/idle_activation_enabled</xpath>
            </xmlfilecontent_object>
            <xmlfilecontent_object version="1" id="oval:gov.irs.rhel5:obj:99" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
                  <path>/etc/gconf/gconf.xml.mandatory</path>
                  <filename operation="pattern match">.*</filename>
                  <xpath>/apps/gnome-screensaver/lock_enabled</xpath>
            </xmlfilecontent_object>
            <xmlfilecontent_object version="1" id="oval:gov.irs.rhel5:obj:100" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
                  <path>/etc/gconf/gconf.xml.mandatory</path>
                  <filename operation="pattern match">.*</filename>
                  <xpath>/apps/gnome-screensaver/idle_delay</xpath>
            </xmlfilecontent_object>
            <rpminfo_object version="1" id="oval:gov.irs.rhel5:obj:101" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
                  <name>vlock</name>
            </rpminfo_object>
            <file_object comment="/etc/issue" version="1" id="oval:gov.irs.rhel5:obj:102" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <behaviors/>
                  <path>/etc</path>
                  <filename>issue</filename>
            </file_object>
            <textfilecontent54_object version="1" id="oval:gov.irs.rhel5:obj:103" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
                  <path>/etc</path>
                  <filename>grub.conf</filename>
                  <pattern operation="pattern match">^[:space:]*selinux[:space:]*=[:space:]*0[:space:]*(#.*)?$</pattern>
                  <instance operation="greater than or equal" datatype="int">1</instance>
            </textfilecontent54_object>
            <textfilecontent54_object version="1" id="oval:gov.irs.rhel5:obj:104" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
                  <path>/etc/selinux</path>
                  <filename>config</filename>
                  <pattern operation="pattern match">^[:space:]*SELINUX[:space:]*=[:space:]*enforcing[:space:]*(#.*)?$</pattern>
                  <instance operation="greater than or equal" datatype="int">1</instance>
            </textfilecontent54_object>
            <textfilecontent54_object version="1" id="oval:gov.irs.rhel5:obj:105" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
                  <path>/etc</path>
                  <filename>grub.conf</filename>
                  <pattern operation="pattern match">^[:space:]*selinux[:space:]*=[:space:]*0[:space:]*(#.*)?$</pattern>
                  <instance operation="greater than or equal" datatype="int">1</instance>
            </textfilecontent54_object>
            <textfilecontent54_object version="1" id="oval:gov.irs.rhel5:obj:106" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
                  <path>/etc/selinux</path>
                  <filename>config</filename>
                  <pattern operation="pattern match">SELINUXTYPE[:space:].*=[:space:].*targeted</pattern>
                  <instance operation="greater than or equal" datatype="int">1</instance>
            </textfilecontent54_object>
            <runlevel_object version="1" id="oval:gov.irs.rhel5:obj:107" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <service_name>setroubleshoot</service_name>
                  <runlevel>2</runlevel>
            </runlevel_object>
            <runlevel_object version="1" id="oval:gov.irs.rhel5:obj:108" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <service_name>setroubleshoot</service_name>
                  <runlevel>3</runlevel>
            </runlevel_object>
            <runlevel_object version="1" id="oval:gov.irs.rhel5:obj:109" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <service_name>setroubleshoot</service_name>
                  <runlevel>4</runlevel>
            </runlevel_object>
            <runlevel_object version="1" id="oval:gov.irs.rhel5:obj:110" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <service_name>setroubleshoot</service_name>
                  <runlevel>5</runlevel>
            </runlevel_object>
            <rpminfo_object version="1" id="oval:gov.irs.rhel5:obj:111" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
                  <name>setroubleshoot</name>
            </rpminfo_object>
            <runlevel_object version="1" id="oval:gov.irs.rhel5:obj:112" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <service_name>mcstrans</service_name>
                  <runlevel>2</runlevel>
            </runlevel_object>
            <runlevel_object version="1" id="oval:gov.irs.rhel5:obj:113" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <service_name>mcstrans</service_name>
                  <runlevel>3</runlevel>
            </runlevel_object>
            <runlevel_object version="1" id="oval:gov.irs.rhel5:obj:114" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <service_name>mcstrans</service_name>
                  <runlevel>4</runlevel>
            </runlevel_object>
            <runlevel_object version="1" id="oval:gov.irs.rhel5:obj:115" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <service_name>mcstrans</service_name>
                  <runlevel>5</runlevel>
            </runlevel_object>
            <runlevel_object version="1" id="oval:gov.irs.rhel5:obj:116" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <service_name>restorecond</service_name>
                  <runlevel>2</runlevel>
            </runlevel_object>
            <runlevel_object version="1" id="oval:gov.irs.rhel5:obj:117" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <service_name>restorecond</service_name>
                  <runlevel>3</runlevel>
            </runlevel_object>
            <runlevel_object version="1" id="oval:gov.irs.rhel5:obj:118" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <service_name>restorecond</service_name>
                  <runlevel>4</runlevel>
            </runlevel_object>
            <runlevel_object version="1" id="oval:gov.irs.rhel5:obj:119" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <service_name>restorecond</service_name>
                  <runlevel>5</runlevel>
            </runlevel_object>
            <textfilecontent54_object version="1" id="oval:gov.irs.rhel5:obj:120" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
                  <path>/etc</path>
                  <filename>sysctl.conf</filename>
                  <pattern operation="pattern match">^[:space:]*net\.ipv4\.conf\.default\.send_redirects[:space:]*=[:space:]*0[:space:]*(#.*)?$</pattern>
                  <instance operation="greater than or equal" datatype="int">1</instance>
            </textfilecontent54_object>
            <textfilecontent54_object version="1" id="oval:gov.irs.rhel5:obj:121" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
                  <path>/etc</path>
                  <filename>sysctl.conf</filename>
                  <pattern operation="pattern match">^[:space:]*net\.ipv4\.conf\.all\.send_redirects[:space:]*=[:space:]*0[:space:]*(#.*)?$</pattern>
                  <instance operation="greater than or equal" datatype="int">1</instance>
            </textfilecontent54_object>
            <textfilecontent54_object version="1" id="oval:gov.irs.rhel5:obj:122" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
                  <path>/etc</path>
                  <filename>sysctl.conf</filename>
                  <pattern operation="pattern match">^[:space:]*net\.ipv4\.ip_forward[:space:]*=[:space:]*0[:space:]*(#.*)?$</pattern>
                  <instance operation="greater than or equal" datatype="int">1</instance>
            </textfilecontent54_object>
            <textfilecontent54_object version="1" id="oval:gov.irs.rhel5:obj:123" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
                  <path>/etc</path>
                  <filename>sysctl.conf</filename>
                  <pattern operation="pattern match">^[:space:]*net\.ipv4\.conf\.all\.secure_redirects[:space:]*=[:space:]*0[:space:]*(#.*)?$</pattern>
                  <instance operation="greater than or equal" datatype="int">1</instance>
            </textfilecontent54_object>
            <textfilecontent54_object version="1" id="oval:gov.irs.rhel5:obj:124" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
                  <path>/etc</path>
                  <filename>sysctl.conf</filename>
                  <pattern operation="pattern match">^[:space:]*net\.ipv4\.conf\.all\.accept_redirects[:space:]*=[:space:]*0[:space:]*(#.*)?$</pattern>
                  <instance operation="greater than or equal" datatype="int">1</instance>
            </textfilecontent54_object>
            <textfilecontent54_object version="1" id="oval:gov.irs.rhel5:obj:125" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
                  <path>/etc</path>
                  <filename>sysctl.conf</filename>
                  <pattern operation="pattern match">^[:space:]*net\.ipv4\.icmp_ignore_bogus_error_messages[:space:]*=[:space:]*1[:space:]*(#.*)?$</pattern>
                  <instance operation="greater than or equal" datatype="int">1</instance>
            </textfilecontent54_object>
            <textfilecontent54_object version="1" id="oval:gov.irs.rhel5:obj:126" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
                  <path>/etc</path>
                  <filename>sysctl.conf</filename>
                  <pattern operation="pattern match">^[:space:]*net\.ipv4\.tcp_syncookies[:space:]*=[:space:]*1[:space:]*(#.*)?$</pattern>
                  <instance operation="greater than or equal" datatype="int">1</instance>
            </textfilecontent54_object>
            <textfilecontent54_object version="1" id="oval:gov.irs.rhel5:obj:127" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
                  <path>/etc</path>
                  <filename>sysctl.conf</filename>
                  <pattern operation="pattern match">^[:space:]*net\.ipv4\.icmp_echo_ignore_broadcasts[:space:]*=[:space:]*1[:space:]*(#.*)?$</pattern>
                  <instance operation="greater than or equal" datatype="int">1</instance>
            </textfilecontent54_object>
            <textfilecontent54_object version="1" id="oval:gov.irs.rhel5:obj:128" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
                  <path>/etc</path>
                  <filename>sysctl.conf</filename>
                  <pattern operation="pattern match">^[:space:]*net\.ipv4\.conf\.default\.accept_redirects[:space:]*=[:space:]*0[:space:]*(#.*)?$</pattern>
                  <instance operation="greater than or equal" datatype="int">1</instance>
            </textfilecontent54_object>
            <textfilecontent54_object version="1" id="oval:gov.irs.rhel5:obj:129" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
                  <path>/etc</path>
                  <filename>sysctl.conf</filename>
                  <pattern operation="pattern match">^[:space:]*net\.ipv4\.conf\.all\.rp_filter[:space:]*=[:space:]*1[:space:]*(#.*)?$</pattern>
                  <instance operation="greater than or equal" datatype="int">1</instance>
            </textfilecontent54_object>
            <textfilecontent54_object version="1" id="oval:gov.irs.rhel5:obj:130" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
                  <path>/etc</path>
                  <filename>sysctl.conf</filename>
                  <pattern operation="pattern match">^[:space:]*net\.ipv4\.conf\.default\.secure_redirects[:space:]*=[:space:]*0[:space:]*(#.*)?$</pattern>
                  <instance operation="greater than or equal" datatype="int">1</instance>
            </textfilecontent54_object>
            <textfilecontent54_object version="1" id="oval:gov.irs.rhel5:obj:131" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
                  <path>/etc</path>
                  <filename>sysctl.conf</filename>
                  <pattern operation="pattern match">^[:space:]*net\.ipv4\.conf\.all\.log_martians[:space:]*=[:space:]*1[:space:]*(#.*)?$</pattern>
                  <instance operation="greater than or equal" datatype="int">1</instance>
            </textfilecontent54_object>
            <textfilecontent54_object version="1" id="oval:gov.irs.rhel5:obj:132" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
                  <path>/etc</path>
                  <filename>sysctl.conf</filename>
                  <pattern operation="pattern match">^[:space:]*net\.ipv4\.conf\.default\.rp_filter[:space:]*=[:space:]*1[:space:]*(#.*)?$</pattern>
                  <instance operation="greater than or equal" datatype="int">1</instance>
            </textfilecontent54_object>
            <textfilecontent54_object version="1" id="oval:gov.irs.rhel5:obj:133" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
                  <path>/etc</path>
                  <filename>sysctl.conf</filename>
                  <pattern operation="pattern match">^[:space:]*net\.ipv4\.conf\.default\.accept_source_route[:space:]*=[:space:]*0[:space:]*(#.*)?$</pattern>
                  <instance operation="greater than or equal" datatype="int">1</instance>
            </textfilecontent54_object>
            <textfilecontent54_object version="1" id="oval:gov.irs.rhel5:obj:134" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
                  <path>/etc</path>
                  <filename>sysctl.conf</filename>
                  <pattern operation="pattern match">^[:space:]*net\.ipv4\.conf\.all\.accept_source_route[:space:]*=[:space:]*0[:space:]*(#.*)?$</pattern>
                  <instance operation="greater than or equal" datatype="int">1</instance>
            </textfilecontent54_object>
            <file_object version="1" id="oval:gov.irs.rhel5:obj:135" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <behaviors/>
                  <path operation="pattern match">/lib/modules/.*/kernel/drivers/net/wireless</path>
                  <filename xsi:nil="true"/>
            </file_object>
            <textfilecontent54_object version="1" id="oval:gov.irs.rhel5:obj:136" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
                  <path>/etc</path>
                  <filename>modprobe.conf</filename>
                  <pattern operation="pattern match">alias[[:space:]]+net-pf-10[[:space:]]+off</pattern>
                  <instance operation="greater than or equal" datatype="int">1</instance>
            </textfilecontent54_object>
            <textfilecontent54_object version="1" id="oval:gov.irs.rhel5:obj:137" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
                  <path>/etc/sysconfig</path>
                  <filename>network</filename>
                  <pattern operation="pattern match">NETWORKING_IPV6[:space:].*=[:space:].*no</pattern>
                  <instance operation="greater than or equal" datatype="int">1</instance>
            </textfilecontent54_object>
            <textfilecontent54_object version="1" id="oval:gov.irs.rhel5:obj:138" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
                  <path>/etc/sysconfig/network-scripts</path>
                  <filename operation="pattern match">ifcfg-.*</filename>
                  <pattern operation="pattern match">^[:space:]*NETWORKING_IPV6[:space:]*=[:space:]*no[:space:]*(#.*)?$</pattern>
                  <instance operation="greater than or equal" datatype="int">1</instance>
            </textfilecontent54_object>
            <textfilecontent54_object version="1" id="oval:gov.irs.rhel5:obj:139" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
                  <path>/etc/sysconfig</path>
                  <filename>network</filename>
                  <pattern operation="pattern match">IPV6INIT[:space:].*=[:space:].*no</pattern>
                  <instance operation="greater than or equal" datatype="int">1</instance>
            </textfilecontent54_object>
            <textfilecontent54_object version="1" id="oval:gov.irs.rhel5:obj:140" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
                  <path>/etc/sysconfig</path>
                  <filename>network</filename>
                  <pattern operation="pattern match">IPV6INIT[:space:].*=[:space:].*no</pattern>
                  <instance operation="greater than or equal" datatype="int">1</instance>
            </textfilecontent54_object>
            <textfilecontent54_object version="1" id="oval:gov.irs.rhel5:obj:141" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
                  <path>/etc</path>
                  <filename>sysctl.conf</filename>
                  <pattern operation="pattern match">^[:space:]*net\.ipv6\.conf\.default\.accept_ra_rtr_pref[:space:]*=[:space:]*0[:space:]*(#.*)?$</pattern>
                  <instance operation="greater than or equal" datatype="int">1</instance>
            </textfilecontent54_object>
            <textfilecontent54_object version="1" id="oval:gov.irs.rhel5:obj:142" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
                  <path>/etc</path>
                  <filename>sysctl.conf</filename>
                  <pattern operation="pattern match">^[:space:]*net\.ipv6\.conf\.default\.max_addresses[:space:]*=[:space:]*1[:space:]*(#.*)?$</pattern>
                  <instance operation="greater than or equal" datatype="int">1</instance>
            </textfilecontent54_object>
            <textfilecontent54_object version="1" id="oval:gov.irs.rhel5:obj:143" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
                  <path>/etc</path>
                  <filename>sysctl.conf</filename>
                  <pattern operation="pattern match">^[:space:]*net\.ipv6\.conf\.default\.router_solicitations[:space:]*=[:space:]*0[:space:]*(#.*)?$</pattern>
                  <instance operation="greater than or equal" datatype="int">1</instance>
            </textfilecontent54_object>
            <textfilecontent54_object version="1" id="oval:gov.irs.rhel5:obj:144" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
                  <path>/etc</path>
                  <filename>sysctl.conf</filename>
                  <pattern operation="pattern match">^[:space:]*net\.ipv6\.conf\.default\.dad_transmits[:space:]*=[:space:]*0[:space:]*(#.*)?$</pattern>
                  <instance operation="greater than or equal" datatype="int">1</instance>
            </textfilecontent54_object>
            <textfilecontent54_object version="1" id="oval:gov.irs.rhel5:obj:145" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
                  <path>/etc</path>
                  <filename>sysctl.conf</filename>
                  <pattern operation="pattern match">^[:space:]*net\.ipv6\.conf\.default\.autoconf[:space:]*=[:space:]*0[:space:]*(#.*)?$</pattern>
                  <instance operation="greater than or equal" datatype="int">1</instance>
            </textfilecontent54_object>
            <textfilecontent54_object version="1" id="oval:gov.irs.rhel5:obj:146" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
                  <path>/etc</path>
                  <filename>sysctl.conf</filename>
                  <pattern operation="pattern match">^[:space:]*net\.ipv6\.conf\.default\.accept_ra_pinfo[:space:]*=[:space:]*0[:space:]*(#.*)?$</pattern>
                  <instance operation="greater than or equal" datatype="int">1</instance>
            </textfilecontent54_object>
            <textfilecontent54_object version="1" id="oval:gov.irs.rhel5:obj:147" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
                  <path>/etc</path>
                  <filename>sysctl.conf</filename>
                  <pattern operation="pattern match">^[:space:]*net\.ipv6\.conf\.default\.accept_ra_defrtr[:space:]*=[:space:]*0[:space:]*(#.*)?$</pattern>
                  <instance operation="greater than or equal" datatype="int">1</instance>
            </textfilecontent54_object>
            <runlevel_object version="1" id="oval:gov.irs.rhel5:obj:148" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <service_name>ip6tables</service_name>
                  <runlevel>2</runlevel>
            </runlevel_object>
            <runlevel_object version="1" id="oval:gov.irs.rhel5:obj:149" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <service_name>ip6tables</service_name>
                  <runlevel>3</runlevel>
            </runlevel_object>
            <runlevel_object version="1" id="oval:gov.irs.rhel5:obj:150" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <service_name>ip6tables</service_name>
                  <runlevel>4</runlevel>
            </runlevel_object>
            <runlevel_object version="1" id="oval:gov.irs.rhel5:obj:151" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <service_name>ip6tables</service_name>
                  <runlevel>5</runlevel>
            </runlevel_object>
            <runlevel_object version="1" id="oval:gov.irs.rhel5:obj:152" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <service_name>iptables</service_name>
                  <runlevel>2</runlevel>
            </runlevel_object>
            <runlevel_object version="1" id="oval:gov.irs.rhel5:obj:153" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <service_name>iptables</service_name>
                  <runlevel>3</runlevel>
            </runlevel_object>
            <runlevel_object version="1" id="oval:gov.irs.rhel5:obj:154" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <service_name>iptables</service_name>
                  <runlevel>4</runlevel>
            </runlevel_object>
            <runlevel_object version="1" id="oval:gov.irs.rhel5:obj:155" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <service_name>iptables</service_name>
                  <runlevel>5</runlevel>
            </runlevel_object>
            <runlevel_object version="1" id="oval:gov.irs.rhel5:obj:156" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <service_name>syslog</service_name>
                  <runlevel>2</runlevel>
            </runlevel_object>
            <runlevel_object version="1" id="oval:gov.irs.rhel5:obj:157" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <service_name>syslog</service_name>
                  <runlevel>3</runlevel>
            </runlevel_object>
            <runlevel_object version="1" id="oval:gov.irs.rhel5:obj:158" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <service_name>syslog</service_name>
                  <runlevel>4</runlevel>
            </runlevel_object>
            <runlevel_object version="1" id="oval:gov.irs.rhel5:obj:159" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <service_name>syslog</service_name>
                  <runlevel>5</runlevel>
            </runlevel_object>
            <textfilecontent54_object version="1" id="oval:gov.irs.rhel5:obj:160" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
                  <path>/etc</path>
                  <filename>syslog.conf</filename>
                  <pattern operation="pattern match">\.*\.\.*[[:space:]]+@</pattern>
                  <instance operation="greater than or equal" datatype="int">1</instance>
            </textfilecontent54_object>
            <textfilecontent54_object version="1" id="oval:gov.irs.rhel5:obj:161" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
                  <path>/etc/sysconfig</path>
                  <filename>syslog</filename>
                  <pattern operation="pattern match">SYSLOGD_OPTIONS[:space:].*=[:space:].*&#x201D;-m 0&#x201D;</pattern>
                  <instance operation="greater than or equal" datatype="int">1</instance>
            </textfilecontent54_object>
            <runlevel_object version="1" id="oval:gov.irs.rhel5:obj:162" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <service_name>auditd</service_name>
                  <runlevel>2</runlevel>
            </runlevel_object>
            <runlevel_object version="1" id="oval:gov.irs.rhel5:obj:163" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <service_name>auditd</service_name>
                  <runlevel>3</runlevel>
            </runlevel_object>
            <runlevel_object version="1" id="oval:gov.irs.rhel5:obj:164" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <service_name>auditd</service_name>
                  <runlevel>4</runlevel>
            </runlevel_object>
            <runlevel_object version="1" id="oval:gov.irs.rhel5:obj:165" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <service_name>auditd</service_name>
                  <runlevel>5</runlevel>
            </runlevel_object>
            <runlevel_object version="1" id="oval:gov.irs.rhel5:obj:166" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <service_name>inetd</service_name>
                  <runlevel>2</runlevel>
            </runlevel_object>
            <runlevel_object version="1" id="oval:gov.irs.rhel5:obj:167" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <service_name>inetd</service_name>
                  <runlevel>3</runlevel>
            </runlevel_object>
            <runlevel_object version="1" id="oval:gov.irs.rhel5:obj:168" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <service_name>inetd</service_name>
                  <runlevel>4</runlevel>
            </runlevel_object>
            <runlevel_object version="1" id="oval:gov.irs.rhel5:obj:169" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <service_name>inetd</service_name>
                  <runlevel>5</runlevel>
            </runlevel_object>
            <runlevel_object version="1" id="oval:gov.irs.rhel5:obj:170" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <service_name>xinetd</service_name>
                  <runlevel>2</runlevel>
            </runlevel_object>
            <runlevel_object version="1" id="oval:gov.irs.rhel5:obj:171" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <service_name>xinetd</service_name>
                  <runlevel>3</runlevel>
            </runlevel_object>
            <runlevel_object version="1" id="oval:gov.irs.rhel5:obj:172" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <service_name>xinetd</service_name>
                  <runlevel>4</runlevel>
            </runlevel_object>
            <runlevel_object version="1" id="oval:gov.irs.rhel5:obj:173" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <service_name>xinetd</service_name>
                  <runlevel>5</runlevel>
            </runlevel_object>
            <rpminfo_object version="1" id="oval:gov.irs.rhel5:obj:174" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
                  <name>inetd</name>
            </rpminfo_object>
            <rpminfo_object version="1" id="oval:gov.irs.rhel5:obj:175" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
                  <name>xinetd</name>
            </rpminfo_object>
            <runlevel_object version="1" id="oval:gov.irs.rhel5:obj:176" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <service_name>telnet</service_name>
                  <runlevel>2</runlevel>
            </runlevel_object>
            <runlevel_object version="1" id="oval:gov.irs.rhel5:obj:177" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <service_name>telnet</service_name>
                  <runlevel>3</runlevel>
            </runlevel_object>
            <runlevel_object version="1" id="oval:gov.irs.rhel5:obj:178" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <service_name>telnet</service_name>
                  <runlevel>4</runlevel>
            </runlevel_object>
            <runlevel_object version="1" id="oval:gov.irs.rhel5:obj:179" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <service_name>telnet</service_name>
                  <runlevel>5</runlevel>
            </runlevel_object>
            <rpminfo_object version="1" id="oval:gov.irs.rhel5:obj:180" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
                  <name>telnet-server</name>
            </rpminfo_object>
            <runlevel_object version="1" id="oval:gov.irs.rhel5:obj:181" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <service_name>rcp</service_name>
                  <runlevel>2</runlevel>
            </runlevel_object>
            <runlevel_object version="1" id="oval:gov.irs.rhel5:obj:182" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <service_name>rcp</service_name>
                  <runlevel>3</runlevel>
            </runlevel_object>
            <runlevel_object version="1" id="oval:gov.irs.rhel5:obj:183" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <service_name>rcp</service_name>
                  <runlevel>4</runlevel>
            </runlevel_object>
            <runlevel_object version="1" id="oval:gov.irs.rhel5:obj:184" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <service_name>rcp</service_name>
                  <runlevel>5</runlevel>
            </runlevel_object>
            <runlevel_object version="1" id="oval:gov.irs.rhel5:obj:185" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <service_name>rsh</service_name>
                  <runlevel>2</runlevel>
            </runlevel_object>
            <runlevel_object version="1" id="oval:gov.irs.rhel5:obj:186" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <service_name>rsh</service_name>
                  <runlevel>3</runlevel>
            </runlevel_object>
            <runlevel_object version="1" id="oval:gov.irs.rhel5:obj:187" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <service_name>rsh</service_name>
                  <runlevel>4</runlevel>
            </runlevel_object>
            <runlevel_object version="1" id="oval:gov.irs.rhel5:obj:188" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <service_name>rsh</service_name>
                  <runlevel>5</runlevel>
            </runlevel_object>
            <runlevel_object version="1" id="oval:gov.irs.rhel5:obj:189" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <service_name>rlogin</service_name>
                  <runlevel>2</runlevel>
            </runlevel_object>
            <runlevel_object version="1" id="oval:gov.irs.rhel5:obj:190" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <service_name>rlogin</service_name>
                  <runlevel>3</runlevel>
            </runlevel_object>
            <runlevel_object version="1" id="oval:gov.irs.rhel5:obj:191" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <service_name>rlogin</service_name>
                  <runlevel>4</runlevel>
            </runlevel_object>
            <runlevel_object version="1" id="oval:gov.irs.rhel5:obj:192" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <service_name>rlogin</service_name>
                  <runlevel>5</runlevel>
            </runlevel_object>
            <rpminfo_object version="1" id="oval:gov.irs.rhel5:obj:193" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
                  <name>rsh</name>
            </rpminfo_object>
            <runlevel_object version="1" id="oval:gov.irs.rhel5:obj:194" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <service_name>ypbind</service_name>
                  <runlevel>2</runlevel>
            </runlevel_object>
            <runlevel_object version="1" id="oval:gov.irs.rhel5:obj:195" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <service_name>ypbind</service_name>
                  <runlevel>3</runlevel>
            </runlevel_object>
            <runlevel_object version="1" id="oval:gov.irs.rhel5:obj:196" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <service_name>ypbind</service_name>
                  <runlevel>4</runlevel>
            </runlevel_object>
            <runlevel_object version="1" id="oval:gov.irs.rhel5:obj:197" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <service_name>ypbind</service_name>
                  <runlevel>5</runlevel>
            </runlevel_object>
            <rpminfo_object version="1" id="oval:gov.irs.rhel5:obj:198" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
                  <name>ypserv</name>
            </rpminfo_object>
            <runlevel_object version="1" id="oval:gov.irs.rhel5:obj:199" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <service_name>tftp</service_name>
                  <runlevel>2</runlevel>
            </runlevel_object>
            <runlevel_object version="1" id="oval:gov.irs.rhel5:obj:200" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <service_name>tftp</service_name>
                  <runlevel>3</runlevel>
            </runlevel_object>
            <runlevel_object version="1" id="oval:gov.irs.rhel5:obj:201" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <service_name>tftp</service_name>
                  <runlevel>4</runlevel>
            </runlevel_object>
            <runlevel_object version="1" id="oval:gov.irs.rhel5:obj:202" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <service_name>tftp</service_name>
                  <runlevel>5</runlevel>
            </runlevel_object>
            <rpminfo_object version="1" id="oval:gov.irs.rhel5:obj:203" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
                  <name>tftp-server</name>
            </rpminfo_object>
            <runlevel_object version="1" id="oval:gov.irs.rhel5:obj:204" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <service_name>firstboot</service_name>
                  <runlevel>2</runlevel>
            </runlevel_object>
            <runlevel_object version="1" id="oval:gov.irs.rhel5:obj:205" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <service_name>firstboot</service_name>
                  <runlevel>3</runlevel>
            </runlevel_object>
            <runlevel_object version="1" id="oval:gov.irs.rhel5:obj:206" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <service_name>firstboot</service_name>
                  <runlevel>4</runlevel>
            </runlevel_object>
            <runlevel_object version="1" id="oval:gov.irs.rhel5:obj:207" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <service_name>firstboot</service_name>
                  <runlevel>5</runlevel>
            </runlevel_object>
            <runlevel_object version="1" id="oval:gov.irs.rhel5:obj:208" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <service_name>gpm</service_name>
                  <runlevel>2</runlevel>
            </runlevel_object>
            <runlevel_object version="1" id="oval:gov.irs.rhel5:obj:209" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <service_name>gpm</service_name>
                  <runlevel>3</runlevel>
            </runlevel_object>
            <runlevel_object version="1" id="oval:gov.irs.rhel5:obj:210" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <service_name>gpm</service_name>
                  <runlevel>4</runlevel>
            </runlevel_object>
            <runlevel_object version="1" id="oval:gov.irs.rhel5:obj:211" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <service_name>gpm</service_name>
                  <runlevel>5</runlevel>
            </runlevel_object>
            <runlevel_object version="1" id="oval:gov.irs.rhel5:obj:212" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <service_name>irqbalance</service_name>
                  <runlevel>2</runlevel>
            </runlevel_object>
            <runlevel_object version="1" id="oval:gov.irs.rhel5:obj:213" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <service_name>irqbalance</service_name>
                  <runlevel>3</runlevel>
            </runlevel_object>
            <runlevel_object version="1" id="oval:gov.irs.rhel5:obj:214" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <service_name>irqbalance</service_name>
                  <runlevel>4</runlevel>
            </runlevel_object>
            <runlevel_object version="1" id="oval:gov.irs.rhel5:obj:215" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <service_name>irqbalance</service_name>
                  <runlevel>5</runlevel>
            </runlevel_object>
            <runlevel_object version="1" id="oval:gov.irs.rhel5:obj:216" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <service_name>isdn</service_name>
                  <runlevel>2</runlevel>
            </runlevel_object>
            <runlevel_object version="1" id="oval:gov.irs.rhel5:obj:217" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <service_name>isdn</service_name>
                  <runlevel>3</runlevel>
            </runlevel_object>
            <runlevel_object version="1" id="oval:gov.irs.rhel5:obj:218" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <service_name>isdn</service_name>
                  <runlevel>4</runlevel>
            </runlevel_object>
            <runlevel_object version="1" id="oval:gov.irs.rhel5:obj:219" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <service_name>isdn</service_name>
                  <runlevel>5</runlevel>
            </runlevel_object>
            <runlevel_object version="1" id="oval:gov.irs.rhel5:obj:220" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <service_name>kdump</service_name>
                  <runlevel>2</runlevel>
            </runlevel_object>
            <runlevel_object version="1" id="oval:gov.irs.rhel5:obj:221" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <service_name>kdump</service_name>
                  <runlevel>3</runlevel>
            </runlevel_object>
            <runlevel_object version="1" id="oval:gov.irs.rhel5:obj:222" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <service_name>kdump</service_name>
                  <runlevel>4</runlevel>
            </runlevel_object>
            <runlevel_object version="1" id="oval:gov.irs.rhel5:obj:223" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <service_name>kdump</service_name>
                  <runlevel>5</runlevel>
            </runlevel_object>
            <runlevel_object version="1" id="oval:gov.irs.rhel5:obj:224" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <service_name>kudzu</service_name>
                  <runlevel>2</runlevel>
            </runlevel_object>
            <runlevel_object version="1" id="oval:gov.irs.rhel5:obj:225" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <service_name>kudzu</service_name>
                  <runlevel>3</runlevel>
            </runlevel_object>
            <runlevel_object version="1" id="oval:gov.irs.rhel5:obj:226" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <service_name>kudzu</service_name>
                  <runlevel>4</runlevel>
            </runlevel_object>
            <runlevel_object version="1" id="oval:gov.irs.rhel5:obj:227" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <service_name>kudzu</service_name>
                  <runlevel>5</runlevel>
            </runlevel_object>
            <runlevel_object version="1" id="oval:gov.irs.rhel5:obj:228" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <service_name>mdmonitor</service_name>
                  <runlevel>2</runlevel>
            </runlevel_object>
            <runlevel_object version="1" id="oval:gov.irs.rhel5:obj:229" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <service_name>mdmonitor</service_name>
                  <runlevel>3</runlevel>
            </runlevel_object>
            <runlevel_object version="1" id="oval:gov.irs.rhel5:obj:230" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <service_name>mdmonitor</service_name>
                  <runlevel>4</runlevel>
            </runlevel_object>
            <runlevel_object version="1" id="oval:gov.irs.rhel5:obj:231" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <service_name>mdmonitor</service_name>
                  <runlevel>5</runlevel>
            </runlevel_object>
            <runlevel_object version="1" id="oval:gov.irs.rhel5:obj:232" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <service_name>microcode_ctl</service_name>
                  <runlevel>2</runlevel>
            </runlevel_object>
            <runlevel_object version="1" id="oval:gov.irs.rhel5:obj:233" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <service_name>microcode_ctl</service_name>
                  <runlevel>3</runlevel>
            </runlevel_object>
            <runlevel_object version="1" id="oval:gov.irs.rhel5:obj:234" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <service_name>microcode_ctl</service_name>
                  <runlevel>4</runlevel>
            </runlevel_object>
            <runlevel_object version="1" id="oval:gov.irs.rhel5:obj:235" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <service_name>microcode_ctl</service_name>
                  <runlevel>5</runlevel>
            </runlevel_object>
            <runlevel_object version="1" id="oval:gov.irs.rhel5:obj:236" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <service_name>network</service_name>
                  <runlevel>2</runlevel>
            </runlevel_object>
            <runlevel_object version="1" id="oval:gov.irs.rhel5:obj:237" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <service_name>network</service_name>
                  <runlevel>3</runlevel>
            </runlevel_object>
            <runlevel_object version="1" id="oval:gov.irs.rhel5:obj:238" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <service_name>network</service_name>
                  <runlevel>4</runlevel>
            </runlevel_object>
            <runlevel_object version="1" id="oval:gov.irs.rhel5:obj:239" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <service_name>network</service_name>
                  <runlevel>5</runlevel>
            </runlevel_object>
            <runlevel_object version="1" id="oval:gov.irs.rhel5:obj:240" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <service_name>pcscd</service_name>
                  <runlevel>2</runlevel>
            </runlevel_object>
            <runlevel_object version="1" id="oval:gov.irs.rhel5:obj:241" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <service_name>pcscd</service_name>
                  <runlevel>3</runlevel>
            </runlevel_object>
            <runlevel_object version="1" id="oval:gov.irs.rhel5:obj:242" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <service_name>pcscd</service_name>
                  <runlevel>4</runlevel>
            </runlevel_object>
            <runlevel_object version="1" id="oval:gov.irs.rhel5:obj:243" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <service_name>pcscd</service_name>
                  <runlevel>5</runlevel>
            </runlevel_object>
            <runlevel_object version="1" id="oval:gov.irs.rhel5:obj:244" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <service_name>smartd</service_name>
                  <runlevel>2</runlevel>
            </runlevel_object>
            <runlevel_object version="1" id="oval:gov.irs.rhel5:obj:245" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <service_name>smartd</service_name>
                  <runlevel>3</runlevel>
            </runlevel_object>
            <runlevel_object version="1" id="oval:gov.irs.rhel5:obj:246" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <service_name>smartd</service_name>
                  <runlevel>4</runlevel>
            </runlevel_object>
            <runlevel_object version="1" id="oval:gov.irs.rhel5:obj:247" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <service_name>smartd</service_name>
                  <runlevel>5</runlevel>
            </runlevel_object>
            <runlevel_object version="1" id="oval:gov.irs.rhel5:obj:248" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <service_name>readahead_early</service_name>
                  <runlevel>2</runlevel>
            </runlevel_object>
            <runlevel_object version="1" id="oval:gov.irs.rhel5:obj:249" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <service_name>readahead_early</service_name>
                  <runlevel>3</runlevel>
            </runlevel_object>
            <runlevel_object version="1" id="oval:gov.irs.rhel5:obj:250" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <service_name>readahead_early</service_name>
                  <runlevel>4</runlevel>
            </runlevel_object>
            <runlevel_object version="1" id="oval:gov.irs.rhel5:obj:251" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <service_name>readahead_early</service_name>
                  <runlevel>5</runlevel>
            </runlevel_object>
            <runlevel_object version="1" id="oval:gov.irs.rhel5:obj:252" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <service_name>readahead_later</service_name>
                  <runlevel>2</runlevel>
            </runlevel_object>
            <runlevel_object version="1" id="oval:gov.irs.rhel5:obj:253" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <service_name>readahead_later</service_name>
                  <runlevel>3</runlevel>
            </runlevel_object>
            <runlevel_object version="1" id="oval:gov.irs.rhel5:obj:254" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <service_name>readahead_later</service_name>
                  <runlevel>4</runlevel>
            </runlevel_object>
            <runlevel_object version="1" id="oval:gov.irs.rhel5:obj:255" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <service_name>readahead_later</service_name>
                  <runlevel>5</runlevel>
            </runlevel_object>
            <runlevel_object version="1" id="oval:gov.irs.rhel5:obj:256" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <service_name>messagebus</service_name>
                  <runlevel>2</runlevel>
            </runlevel_object>
            <runlevel_object version="1" id="oval:gov.irs.rhel5:obj:257" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <service_name>messagebus</service_name>
                  <runlevel>3</runlevel>
            </runlevel_object>
            <runlevel_object version="1" id="oval:gov.irs.rhel5:obj:258" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <service_name>messagebus</service_name>
                  <runlevel>4</runlevel>
            </runlevel_object>
            <runlevel_object version="1" id="oval:gov.irs.rhel5:obj:259" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <service_name>messagebus</service_name>
                  <runlevel>5</runlevel>
            </runlevel_object>
            <runlevel_object version="1" id="oval:gov.irs.rhel5:obj:260" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <service_name>haldaemon</service_name>
                  <runlevel>2</runlevel>
            </runlevel_object>
            <runlevel_object version="1" id="oval:gov.irs.rhel5:obj:261" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <service_name>haldaemon</service_name>
                  <runlevel>3</runlevel>
            </runlevel_object>
            <runlevel_object version="1" id="oval:gov.irs.rhel5:obj:262" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <service_name>haldaemon</service_name>
                  <runlevel>4</runlevel>
            </runlevel_object>
            <runlevel_object version="1" id="oval:gov.irs.rhel5:obj:263" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <service_name>haldaemon</service_name>
                  <runlevel>5</runlevel>
            </runlevel_object>
            <runlevel_object version="1" id="oval:gov.irs.rhel5:obj:264" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <service_name>bluetooth</service_name>
                  <runlevel>2</runlevel>
            </runlevel_object>
            <runlevel_object version="1" id="oval:gov.irs.rhel5:obj:265" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <service_name>bluetooth</service_name>
                  <runlevel>3</runlevel>
            </runlevel_object>
            <runlevel_object version="1" id="oval:gov.irs.rhel5:obj:266" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <service_name>bluetooth</service_name>
                  <runlevel>4</runlevel>
            </runlevel_object>
            <runlevel_object version="1" id="oval:gov.irs.rhel5:obj:267" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <service_name>bluetooth</service_name>
                  <runlevel>5</runlevel>
            </runlevel_object>
            <runlevel_object version="1" id="oval:gov.irs.rhel5:obj:268" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <service_name>hidd</service_name>
                  <runlevel>2</runlevel>
            </runlevel_object>
            <runlevel_object version="1" id="oval:gov.irs.rhel5:obj:269" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <service_name>hidd</service_name>
                  <runlevel>3</runlevel>
            </runlevel_object>
            <runlevel_object version="1" id="oval:gov.irs.rhel5:obj:270" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <service_name>hidd</service_name>
                  <runlevel>4</runlevel>
            </runlevel_object>
            <runlevel_object version="1" id="oval:gov.irs.rhel5:obj:271" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <service_name>hidd</service_name>
                  <runlevel>5</runlevel>
            </runlevel_object>
            <runlevel_object version="1" id="oval:gov.irs.rhel5:obj:272" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <service_name>apmd</service_name>
                  <runlevel>2</runlevel>
            </runlevel_object>
            <runlevel_object version="1" id="oval:gov.irs.rhel5:obj:273" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <service_name>apmd</service_name>
                  <runlevel>3</runlevel>
            </runlevel_object>
            <runlevel_object version="1" id="oval:gov.irs.rhel5:obj:274" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <service_name>apmd</service_name>
                  <runlevel>4</runlevel>
            </runlevel_object>
            <runlevel_object version="1" id="oval:gov.irs.rhel5:obj:275" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <service_name>apmd</service_name>
                  <runlevel>5</runlevel>
            </runlevel_object>
            <runlevel_object version="1" id="oval:gov.irs.rhel5:obj:276" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <service_name>acpid</service_name>
                  <runlevel>2</runlevel>
            </runlevel_object>
            <runlevel_object version="1" id="oval:gov.irs.rhel5:obj:277" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <service_name>acpid</service_name>
                  <runlevel>3</runlevel>
            </runlevel_object>
            <runlevel_object version="1" id="oval:gov.irs.rhel5:obj:278" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <service_name>acpid</service_name>
                  <runlevel>4</runlevel>
            </runlevel_object>
            <runlevel_object version="1" id="oval:gov.irs.rhel5:obj:279" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <service_name>acpid</service_name>
                  <runlevel>5</runlevel>
            </runlevel_object>
            <runlevel_object version="1" id="oval:gov.irs.rhel5:obj:280" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <service_name>cpuspeed</service_name>
                  <runlevel>2</runlevel>
            </runlevel_object>
            <runlevel_object version="1" id="oval:gov.irs.rhel5:obj:281" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <service_name>cpuspeed</service_name>
                  <runlevel>3</runlevel>
            </runlevel_object>
            <runlevel_object version="1" id="oval:gov.irs.rhel5:obj:282" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <service_name>cpuspeed</service_name>
                  <runlevel>4</runlevel>
            </runlevel_object>
            <runlevel_object version="1" id="oval:gov.irs.rhel5:obj:283" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <service_name>cpuspeed</service_name>
                  <runlevel>5</runlevel>
            </runlevel_object>
            <runlevel_object version="1" id="oval:gov.irs.rhel5:obj:284" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <service_name>crond</service_name>
                  <runlevel>2</runlevel>
            </runlevel_object>
            <runlevel_object version="1" id="oval:gov.irs.rhel5:obj:285" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <service_name>crond</service_name>
                  <runlevel>3</runlevel>
            </runlevel_object>
            <runlevel_object version="1" id="oval:gov.irs.rhel5:obj:286" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <service_name>crond</service_name>
                  <runlevel>4</runlevel>
            </runlevel_object>
            <runlevel_object version="1" id="oval:gov.irs.rhel5:obj:287" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <service_name>crond</service_name>
                  <runlevel>5</runlevel>
            </runlevel_object>
            <runlevel_object version="1" id="oval:gov.irs.rhel5:obj:288" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <service_name>anacron</service_name>
                  <runlevel>2</runlevel>
            </runlevel_object>
            <runlevel_object version="1" id="oval:gov.irs.rhel5:obj:289" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <service_name>anacron</service_name>
                  <runlevel>3</runlevel>
            </runlevel_object>
            <runlevel_object version="1" id="oval:gov.irs.rhel5:obj:290" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <service_name>anacron</service_name>
                  <runlevel>4</runlevel>
            </runlevel_object>
            <runlevel_object version="1" id="oval:gov.irs.rhel5:obj:291" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <service_name>anacron</service_name>
                  <runlevel>5</runlevel>
            </runlevel_object>
            <rpminfo_object version="1" id="oval:gov.irs.rhel5:obj:292" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
                  <name>anacron</name>
            </rpminfo_object>
            <file_object comment="/etc/cron.monthly" version="1" id="oval:gov.irs.rhel5:obj:293" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <path>/etc</path>
                  <filename>cron.monthly</filename>
            </file_object>
            <file_object comment="/etc/cron.daily" version="1" id="oval:gov.irs.rhel5:obj:294" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <path>/etc</path>
                  <filename>cron.daily</filename>
            </file_object>
            <file_object comment="/etc/cron.weekly" version="1" id="oval:gov.irs.rhel5:obj:295" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <path>/etc</path>
                  <filename>cron.weekly</filename>
            </file_object>
            <file_object comment="/etc/crontab" version="1" id="oval:gov.irs.rhel5:obj:296" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <path>/etc</path>
                  <filename>crontab</filename>
            </file_object>
            <file_object comment="/etc/anacrontab" version="1" id="oval:gov.irs.rhel5:obj:297" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <path>/etc</path>
                  <filename>anacrontab</filename>
            </file_object>
            <file_object comment="/etc/cron.hourly" version="1" id="oval:gov.irs.rhel5:obj:298" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <path>/etc</path>
                  <filename>cron.hourly</filename>
            </file_object>
            <file_object comment="/etc/cron.d/.*" version="1" id="oval:gov.irs.rhel5:obj:299" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <behaviors recurse="symlinks and directories" recurse_direction="down"/>
                  <path>/etc/cron.d</path>
                  <filename operation="pattern match">.*</filename>
            </file_object>
            <file_object comment="/etc/cron.d/.*" version="1" id="oval:gov.irs.rhel5:obj:300" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <behaviors recurse="symlinks and directories" recurse_direction="down"/>
                  <path>/etc/cron.d</path>
                  <filename operation="pattern match">.*</filename>
            </file_object>
            <file_object comment="/etc/cron.d/.*" version="1" id="oval:gov.irs.rhel5:obj:301" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <behaviors recurse="symlinks and directories" recurse_direction="down"/>
                  <path>/etc/cron.d</path>
                  <filename operation="pattern match">.*</filename>
            </file_object>
            <runlevel_object version="1" id="oval:gov.irs.rhel5:obj:302" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <service_name>sshd</service_name>
                  <runlevel>2</runlevel>
            </runlevel_object>
            <runlevel_object version="1" id="oval:gov.irs.rhel5:obj:303" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <service_name>sshd</service_name>
                  <runlevel>3</runlevel>
            </runlevel_object>
            <runlevel_object version="1" id="oval:gov.irs.rhel5:obj:304" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <service_name>sshd</service_name>
                  <runlevel>4</runlevel>
            </runlevel_object>
            <runlevel_object version="1" id="oval:gov.irs.rhel5:obj:305" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <service_name>sshd</service_name>
                  <runlevel>5</runlevel>
            </runlevel_object>
            <rpminfo_object version="1" id="oval:gov.irs.rhel5:obj:306" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
                  <name>openssh-server</name>
            </rpminfo_object>
            <textfilecontent54_object version="1" id="oval:gov.irs.rhel5:obj:307" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
                  <path>/etc/sysconfig</path>
                  <filename>iptables</filename>
                  <pattern operation="pattern match">-A\.\.*dport 22\.\.*ACCEPT</pattern>
                  <instance operation="greater than or equal" datatype="int">1</instance>
            </textfilecontent54_object>
            <textfilecontent54_object version="1" id="oval:gov.irs.rhel5:obj:308" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
                  <path>/etc/ssh</path>
                  <filename>sshd_config</filename>
                  <pattern operation="pattern match">Protocol[:space:]+2</pattern>
                  <instance operation="greater than or equal" datatype="int">1</instance>
            </textfilecontent54_object>
            <textfilecontent54_object version="1" id="oval:gov.irs.rhel5:obj:309" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
                  <path>/etc/ssh</path>
                  <filename>sshd_config</filename>
                  <pattern operation="pattern match">^[:space:]*ClientAliveInterval[:space:]*(#.*)?$</pattern>
                  <instance operation="greater than or equal" datatype="int">1</instance>
            </textfilecontent54_object>
            <textfilecontent54_object version="1" id="oval:gov.irs.rhel5:obj:310" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
                  <path>/etc/ssh</path>
                  <filename>sshd_config</filename>
                  <pattern operation="pattern match">^[:space:]*ClientAliveCountMax[:space:]*(#.*)?$</pattern>
                  <instance operation="greater than or equal" datatype="int">1</instance>
            </textfilecontent54_object>
            <textfilecontent54_object version="1" id="oval:gov.irs.rhel5:obj:311" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
                  <path>/etc/ssh</path>
                  <filename>sshd_config</filename>
                  <pattern operation="pattern match">IgnoreRhosts[:space:].*yes</pattern>
                  <instance operation="greater than or equal" datatype="int">1</instance>
            </textfilecontent54_object>
            <textfilecontent54_object version="1" id="oval:gov.irs.rhel5:obj:312" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
                  <path>/etc/ssh</path>
                  <filename>sshd_config</filename>
                  <pattern operation="pattern match">HostbasedAuthentication[:space:].*no</pattern>
                  <instance operation="greater than or equal" datatype="int">1</instance>
            </textfilecontent54_object>
            <textfilecontent54_object version="1" id="oval:gov.irs.rhel5:obj:313" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
                  <path>/etc/ssh</path>
                  <filename>sshd_config</filename>
                  <pattern operation="pattern match">PermitRootLogin[:space:].*no</pattern>
                  <instance operation="greater than or equal" datatype="int">1</instance>
            </textfilecontent54_object>
            <textfilecontent54_object version="1" id="oval:gov.irs.rhel5:obj:314" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
                  <path>/etc/ssh</path>
                  <filename>sshd_config</filename>
                  <pattern operation="pattern match">PermitEmptyPasswords[:space:].*no</pattern>
                  <instance operation="greater than or equal" datatype="int">1</instance>
            </textfilecontent54_object>
            <textfilecontent54_object version="1" id="oval:gov.irs.rhel5:obj:315" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
                  <path>/etc/ssh</path>
                  <filename>sshd_config</filename>
                  <pattern operation="pattern match">Banner[:space:].*/etc/issue</pattern>
                  <instance operation="greater than or equal" datatype="int">1</instance>
            </textfilecontent54_object>
            <textfilecontent54_object version="1" id="oval:gov.irs.rhel5:obj:316" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
                  <path>/etc</path>
                  <filename>inittab</filename>
                  <pattern operation="pattern match">id:3:initdefault:</pattern>
                  <instance operation="greater than or equal" datatype="int">1</instance>
            </textfilecontent54_object>
            <runlevel_object version="1" id="oval:gov.irs.rhel5:obj:317" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <service_name>avahi-daemon</service_name>
                  <runlevel>2</runlevel>
            </runlevel_object>
            <runlevel_object version="1" id="oval:gov.irs.rhel5:obj:318" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <service_name>avahi-daemon</service_name>
                  <runlevel>3</runlevel>
            </runlevel_object>
            <runlevel_object version="1" id="oval:gov.irs.rhel5:obj:319" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <service_name>avahi-daemon</service_name>
                  <runlevel>4</runlevel>
            </runlevel_object>
            <runlevel_object version="1" id="oval:gov.irs.rhel5:obj:320" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <service_name>avahi-daemon</service_name>
                  <runlevel>5</runlevel>
            </runlevel_object>
            <textfilecontent54_object version="1" id="oval:gov.irs.rhel5:obj:321" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
                  <path>/etc/avahi</path>
                  <filename>avahi-daemon.conf</filename>
                  <pattern operation="pattern match">check-response-ttl[:space:].*=[:space:].*yes</pattern>
                  <instance operation="greater than or equal" datatype="int">1</instance>
            </textfilecontent54_object>
            <textfilecontent54_object version="1" id="oval:gov.irs.rhel5:obj:322" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
                  <path>/etc/avahi</path>
                  <filename>avahi-daemon.conf</filename>
                  <pattern operation="pattern match">disallow-other-stacks[:space:].*=[:space:].*yes</pattern>
                  <instance operation="greater than or equal" datatype="int">1</instance>
            </textfilecontent54_object>
            <textfilecontent54_object version="1" id="oval:gov.irs.rhel5:obj:323" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
                  <path>/etc/avahi</path>
                  <filename>avahi-daemon.conf</filename>
                  <pattern operation="pattern match">disable-publishing[:space:].*=[:space:].*yes</pattern>
                  <instance operation="greater than or equal" datatype="int">1</instance>
            </textfilecontent54_object>
            <textfilecontent54_object version="1" id="oval:gov.irs.rhel5:obj:324" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
                  <path>/etc/avahi</path>
                  <filename>avahi-daemon.conf</filename>
                  <pattern operation="pattern match">disable-user-service-publishing[:space:].*=[:space:].*yes</pattern>
                  <instance operation="greater than or equal" datatype="int">1</instance>
            </textfilecontent54_object>
            <textfilecontent54_object version="1" id="oval:gov.irs.rhel5:obj:325" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
                  <path>/etc/avahi</path>
                  <filename>avahi-daemon.conf</filename>
                  <pattern operation="pattern match">publish-hinfo[:space:].*=[:space:].*no</pattern>
                  <instance operation="greater than or equal" datatype="int">1</instance>
            </textfilecontent54_object>
            <textfilecontent54_object version="1" id="oval:gov.irs.rhel5:obj:326" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
                  <path>/etc/avahi</path>
                  <filename>avahi-daemon.conf</filename>
                  <pattern operation="pattern match">publish-workstation[:space:].*=[:space:].*no</pattern>
                  <instance operation="greater than or equal" datatype="int">1</instance>
            </textfilecontent54_object>
            <textfilecontent54_object version="1" id="oval:gov.irs.rhel5:obj:327" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
                  <path>/etc/avahi</path>
                  <filename>avahi-daemon.conf</filename>
                  <pattern operation="pattern match">publish-addresses[:space:].*=[:space:].*no</pattern>
                  <instance operation="greater than or equal" datatype="int">1</instance>
            </textfilecontent54_object>
            <textfilecontent54_object version="1" id="oval:gov.irs.rhel5:obj:328" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
                  <path>/etc/avahi</path>
                  <filename>avahi-daemon.conf</filename>
                  <pattern operation="pattern match">publish-domain[:space:].*=[:space:].*no</pattern>
                  <instance operation="greater than or equal" datatype="int">1</instance>
            </textfilecontent54_object>
            <runlevel_object version="1" id="oval:gov.irs.rhel5:obj:329" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <service_name>cups</service_name>
                  <runlevel>2</runlevel>
            </runlevel_object>
            <runlevel_object version="1" id="oval:gov.irs.rhel5:obj:330" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <service_name>cups</service_name>
                  <runlevel>3</runlevel>
            </runlevel_object>
            <runlevel_object version="1" id="oval:gov.irs.rhel5:obj:331" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <service_name>cups</service_name>
                  <runlevel>4</runlevel>
            </runlevel_object>
            <runlevel_object version="1" id="oval:gov.irs.rhel5:obj:332" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <service_name>cups</service_name>
                  <runlevel>5</runlevel>
            </runlevel_object>
            <textfilecontent54_object version="1" id="oval:gov.irs.rhel5:obj:333" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
                  <path>/etc/sysconfig</path>
                  <filename>iptables</filename>
                  <pattern operation="pattern match">-A[:space:]+RH-Firewall-1-INPUT [:space:]+-p[:space:]+(ud|tc)p[:space:]+-m[:space:]+(ud|tc)p[:space:]+--dport[:space:]+631[:space:]+-j[:space:]+ACCEPT</pattern>
                  <instance operation="greater than or equal" datatype="int">1</instance>
            </textfilecontent54_object>
            <textfilecontent54_object version="1" id="oval:gov.irs.rhel5:obj:334" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
                  <path>/etc/cups</path>
                  <filename>cupsd.conf</filename>
                  <pattern operation="pattern match">Browsing[:space:]+off</pattern>
                  <instance operation="greater than or equal" datatype="int">1</instance>
            </textfilecontent54_object>
            <textfilecontent54_object version="1" id="oval:gov.irs.rhel5:obj:335" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
                  <path>/etc/cups</path>
                  <filename>cupsd.conf</filename>
                  <pattern operation="pattern match">BrowseAllow[:space:]+none</pattern>
                  <instance operation="greater than or equal" datatype="int">1</instance>
            </textfilecontent54_object>
            <runlevel_object version="1" id="oval:gov.irs.rhel5:obj:336" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <service_name>hplip</service_name>
                  <runlevel>2</runlevel>
            </runlevel_object>
            <runlevel_object version="1" id="oval:gov.irs.rhel5:obj:337" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <service_name>hplip</service_name>
                  <runlevel>3</runlevel>
            </runlevel_object>
            <runlevel_object version="1" id="oval:gov.irs.rhel5:obj:338" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <service_name>hplip</service_name>
                  <runlevel>4</runlevel>
            </runlevel_object>
            <runlevel_object version="1" id="oval:gov.irs.rhel5:obj:339" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <service_name>hplip</service_name>
                  <runlevel>5</runlevel>
            </runlevel_object>
            <textfilecontent54_object version="1" id="oval:gov.irs.rhel5:obj:340" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
                  <path>/etc/sysconfig/network-scripts</path>
                  <filename operation="pattern match">ifcfg-.*</filename>
                  <pattern operation="pattern match">^[:space:]*BOOTPROTO[:space:]*=[:space:]*static[:space:]*(#.*)?$</pattern>
                  <instance operation="greater than or equal" datatype="int">1</instance>
            </textfilecontent54_object>
            <runlevel_object version="1" id="oval:gov.irs.rhel5:obj:341" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <service_name>dhcpd</service_name>
                  <runlevel>2</runlevel>
            </runlevel_object>
            <runlevel_object version="1" id="oval:gov.irs.rhel5:obj:342" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <service_name>dhcpd</service_name>
                  <runlevel>3</runlevel>
            </runlevel_object>
            <runlevel_object version="1" id="oval:gov.irs.rhel5:obj:343" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <service_name>dhcpd</service_name>
                  <runlevel>4</runlevel>
            </runlevel_object>
            <runlevel_object version="1" id="oval:gov.irs.rhel5:obj:344" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <service_name>dhcpd</service_name>
                  <runlevel>5</runlevel>
            </runlevel_object>
            <rpminfo_object version="1" id="oval:gov.irs.rhel5:obj:345" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
                  <name>dhcp</name>
            </rpminfo_object>
            <textfilecontent54_object version="1" id="oval:gov.irs.rhel5:obj:346" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
                  <path>/etc</path>
                  <filename>dhcpd.conf</filename>
                  <pattern operation="pattern match">ddns-update-style[[:space:]]+none;</pattern>
                  <instance operation="greater than or equal" datatype="int">1</instance>
            </textfilecontent54_object>
            <textfilecontent54_object version="1" id="oval:gov.irs.rhel5:obj:347" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
                  <path>/etc</path>
                  <filename>dhcpd.conf</filename>
                  <pattern operation="pattern match">deny[[:space:]]+declines;</pattern>
                  <instance operation="greater than or equal" datatype="int">1</instance>
            </textfilecontent54_object>
            <textfilecontent54_object version="1" id="oval:gov.irs.rhel5:obj:348" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
                  <path>/etc</path>
                  <filename>dhcpd.conf</filename>
                  <pattern operation="pattern match">deny[[:space:]]+bootp;</pattern>
                  <instance operation="greater than or equal" datatype="int">1</instance>
            </textfilecontent54_object>
            <textfilecontent54_object version="1" id="oval:gov.irs.rhel5:obj:349" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
                  <path>/etc</path>
                  <filename>dhcpd.conf</filename>
                  <pattern operation="pattern match">option[[:space:]]+domain-name-servers</pattern>
                  <instance operation="greater than or equal" datatype="int">1</instance>
            </textfilecontent54_object>
            <textfilecontent54_object version="1" id="oval:gov.irs.rhel5:obj:350" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
                  <path>/etc</path>
                  <filename>dhcpd.conf</filename>
                  <pattern operation="pattern match">option[[:space:]]+routers</pattern>
                  <instance operation="greater than or equal" datatype="int">1</instance>
            </textfilecontent54_object>
            <textfilecontent54_object version="1" id="oval:gov.irs.rhel5:obj:351" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
                  <path>/etc</path>
                  <filename>dhcpd.conf</filename>
                  <pattern operation="pattern match">option[[:space:]]+domain-name</pattern>
                  <instance operation="greater than or equal" datatype="int">1</instance>
            </textfilecontent54_object>
            <textfilecontent54_object version="1" id="oval:gov.irs.rhel5:obj:352" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
                  <path>/etc</path>
                  <filename>dhcpd.conf</filename>
                  <pattern operation="pattern match">option[[:space:]]+nis-domain</pattern>
                  <instance operation="greater than or equal" datatype="int">1</instance>
            </textfilecontent54_object>
            <textfilecontent54_object version="1" id="oval:gov.irs.rhel5:obj:353" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
                  <path>/etc</path>
                  <filename>dhcpd.conf</filename>
                  <pattern operation="pattern match">option[[:space:]]+nis-servers</pattern>
                  <instance operation="greater than or equal" datatype="int">1</instance>
            </textfilecontent54_object>
            <textfilecontent54_object version="1" id="oval:gov.irs.rhel5:obj:354" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
                  <path>/etc</path>
                  <filename>dhcpd.conf</filename>
                  <pattern operation="pattern match">option[[:space:]]+time-offset</pattern>
                  <instance operation="greater than or equal" datatype="int">1</instance>
            </textfilecontent54_object>
            <textfilecontent54_object version="1" id="oval:gov.irs.rhel5:obj:355" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
                  <path>/etc</path>
                  <filename>dhcpd.conf</filename>
                  <pattern operation="pattern match">option[[:space:]]+ntp-servers</pattern>
                  <instance operation="greater than or equal" datatype="int">1</instance>
            </textfilecontent54_object>
            <textfilecontent54_object version="1" id="oval:gov.irs.rhel5:obj:356" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
                  <path>/etc</path>
                  <filename>syslog.conf</filename>
                  <pattern operation="pattern match">daemon\.\.*[[:space:]]+/var/log/daemon\.log</pattern>
                  <instance operation="greater than or equal" datatype="int">1</instance>
            </textfilecontent54_object>
            <runlevel_object version="1" id="oval:gov.irs.rhel5:obj:357" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <service_name>ntpd</service_name>
                  <runlevel>2</runlevel>
            </runlevel_object>
            <runlevel_object version="1" id="oval:gov.irs.rhel5:obj:358" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <service_name>ntpd</service_name>
                  <runlevel>3</runlevel>
            </runlevel_object>
            <runlevel_object version="1" id="oval:gov.irs.rhel5:obj:359" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <service_name>ntpd</service_name>
                  <runlevel>4</runlevel>
            </runlevel_object>
            <runlevel_object version="1" id="oval:gov.irs.rhel5:obj:360" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <service_name>ntpd</service_name>
                  <runlevel>5</runlevel>
            </runlevel_object>
            <textfilecontent54_object version="1" id="oval:gov.irs.rhel5:obj:361" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
                  <path>/etc</path>
                  <filename>ntp.conf</filename>
                  <pattern operation="pattern match">restrict[[:space:]]+default[[:space:]]+ignore</pattern>
                  <instance operation="greater than or equal" datatype="int">1</instance>
            </textfilecontent54_object>
            <textfilecontent54_object version="1" id="oval:gov.irs.rhel5:obj:362" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
                  <path>/etc</path>
                  <filename>rc.local</filename>
                  <pattern operation="pattern match">/usr/local/sbin/ntpd -s</pattern>
                  <instance operation="greater than or equal" datatype="int">1</instance>
            </textfilecontent54_object>
            <runlevel_object version="1" id="oval:gov.irs.rhel5:obj:363" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <service_name>sendmail</service_name>
                  <runlevel>2</runlevel>
            </runlevel_object>
            <runlevel_object version="1" id="oval:gov.irs.rhel5:obj:364" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <service_name>sendmail</service_name>
                  <runlevel>3</runlevel>
            </runlevel_object>
            <runlevel_object version="1" id="oval:gov.irs.rhel5:obj:365" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <service_name>sendmail</service_name>
                  <runlevel>4</runlevel>
            </runlevel_object>
            <runlevel_object version="1" id="oval:gov.irs.rhel5:obj:366" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <service_name>sendmail</service_name>
                  <runlevel>5</runlevel>
            </runlevel_object>
            <textfilecontent54_object version="1" id="oval:gov.irs.rhel5:obj:367" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
                  <path>/etc/sysconfig</path>
                  <filename>sendmail</filename>
                  <pattern operation="pattern match">DAEMON[:space:].*=[:space:].*no</pattern>
                  <instance operation="greater than or equal" datatype="int">1</instance>
            </textfilecontent54_object>
            <runlevel_object version="1" id="oval:gov.irs.rhel5:obj:368" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <service_name>ldap</service_name>
                  <runlevel>2</runlevel>
            </runlevel_object>
            <runlevel_object version="1" id="oval:gov.irs.rhel5:obj:369" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <service_name>ldap</service_name>
                  <runlevel>3</runlevel>
            </runlevel_object>
            <runlevel_object version="1" id="oval:gov.irs.rhel5:obj:370" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <service_name>ldap</service_name>
                  <runlevel>4</runlevel>
            </runlevel_object>
            <runlevel_object version="1" id="oval:gov.irs.rhel5:obj:371" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <service_name>ldap</service_name>
                  <runlevel>5</runlevel>
            </runlevel_object>
            <file_object comment="/var/lib/ldap/*" version="1" id="oval:gov.irs.rhel5:obj:372" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <path>/var/lib/ldap</path>
                  <filename>*</filename>
            </file_object>
            <textfilecontent54_object version="1" id="oval:gov.irs.rhel5:obj:373" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
                  <path>/etc</path>
                  <filename>passwd</filename>
                  <pattern operation="pattern match">^ldap:.*:([0-9]*):</pattern>
                  <instance operation="greater than or equal" datatype="int">1</instance>
            </textfilecontent54_object>
            <runlevel_object version="1" id="oval:gov.irs.rhel5:obj:374" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <service_name>nfslock</service_name>
                  <runlevel>2</runlevel>
            </runlevel_object>
            <runlevel_object version="1" id="oval:gov.irs.rhel5:obj:375" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <service_name>nfslock</service_name>
                  <runlevel>3</runlevel>
            </runlevel_object>
            <runlevel_object version="1" id="oval:gov.irs.rhel5:obj:376" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <service_name>nfslock</service_name>
                  <runlevel>4</runlevel>
            </runlevel_object>
            <runlevel_object version="1" id="oval:gov.irs.rhel5:obj:377" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <service_name>nfslock</service_name>
                  <runlevel>5</runlevel>
            </runlevel_object>
            <runlevel_object version="1" id="oval:gov.irs.rhel5:obj:378" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <service_name>rpcgssd</service_name>
                  <runlevel>2</runlevel>
            </runlevel_object>
            <runlevel_object version="1" id="oval:gov.irs.rhel5:obj:379" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <service_name>rpcgssd</service_name>
                  <runlevel>3</runlevel>
            </runlevel_object>
            <runlevel_object version="1" id="oval:gov.irs.rhel5:obj:380" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <service_name>rpcgssd</service_name>
                  <runlevel>4</runlevel>
            </runlevel_object>
            <runlevel_object version="1" id="oval:gov.irs.rhel5:obj:381" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <service_name>rpcgssd</service_name>
                  <runlevel>5</runlevel>
            </runlevel_object>
            <runlevel_object version="1" id="oval:gov.irs.rhel5:obj:382" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <service_name>rpcidmapd</service_name>
                  <runlevel>2</runlevel>
            </runlevel_object>
            <runlevel_object version="1" id="oval:gov.irs.rhel5:obj:383" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <service_name>rpcidmapd</service_name>
                  <runlevel>3</runlevel>
            </runlevel_object>
            <runlevel_object version="1" id="oval:gov.irs.rhel5:obj:384" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <service_name>rpcidmapd</service_name>
                  <runlevel>4</runlevel>
            </runlevel_object>
            <runlevel_object version="1" id="oval:gov.irs.rhel5:obj:385" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <service_name>rpcidmapd</service_name>
                  <runlevel>5</runlevel>
            </runlevel_object>
            <runlevel_object version="1" id="oval:gov.irs.rhel5:obj:386" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <service_name>netfs</service_name>
                  <runlevel>2</runlevel>
            </runlevel_object>
            <runlevel_object version="1" id="oval:gov.irs.rhel5:obj:387" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <service_name>netfs</service_name>
                  <runlevel>3</runlevel>
            </runlevel_object>
            <runlevel_object version="1" id="oval:gov.irs.rhel5:obj:388" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <service_name>netfs</service_name>
                  <runlevel>4</runlevel>
            </runlevel_object>
            <runlevel_object version="1" id="oval:gov.irs.rhel5:obj:389" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <service_name>netfs</service_name>
                  <runlevel>5</runlevel>
            </runlevel_object>
            <runlevel_object version="1" id="oval:gov.irs.rhel5:obj:390" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <service_name>portmap</service_name>
                  <runlevel>2</runlevel>
            </runlevel_object>
            <runlevel_object version="1" id="oval:gov.irs.rhel5:obj:391" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <service_name>portmap</service_name>
                  <runlevel>3</runlevel>
            </runlevel_object>
            <runlevel_object version="1" id="oval:gov.irs.rhel5:obj:392" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <service_name>portmap</service_name>
                  <runlevel>4</runlevel>
            </runlevel_object>
            <runlevel_object version="1" id="oval:gov.irs.rhel5:obj:393" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <service_name>portmap</service_name>
                  <runlevel>5</runlevel>
            </runlevel_object>
            <textfilecontent54_object version="1" id="oval:gov.irs.rhel5:obj:394" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
                  <path>/etc/sysconfig</path>
                  <filename>nfs</filename>
                  <pattern operation="pattern match">LOCKD_TCPPORT[:space:].*=[:space:].*[0-9]</pattern>
                  <instance operation="greater than or equal" datatype="int">1</instance>
            </textfilecontent54_object>
            <textfilecontent54_object version="1" id="oval:gov.irs.rhel5:obj:395" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
                  <path>/etc/sysconfig</path>
                  <filename>nfs</filename>
                  <pattern operation="pattern match">STATD_OUTGOING_PORT[:space:].*=[:space:].*[0-9]</pattern>
                  <instance operation="greater than or equal" datatype="int">1</instance>
            </textfilecontent54_object>
            <textfilecontent54_object version="1" id="oval:gov.irs.rhel5:obj:396" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
                  <path>/etc/sysconfig</path>
                  <filename>nfs</filename>
                  <pattern operation="pattern match">STATD_PORT[:space:].*=[:space:].*[0-9]</pattern>
                  <instance operation="greater than or equal" datatype="int">1</instance>
            </textfilecontent54_object>
            <textfilecontent54_object version="1" id="oval:gov.irs.rhel5:obj:397" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
                  <path>/etc/sysconfig</path>
                  <filename>nfs</filename>
                  <pattern operation="pattern match">LOCKD_UDPPORT[:space:].*=[:space:].*[0-9]</pattern>
                  <instance operation="greater than or equal" datatype="int">1</instance>
            </textfilecontent54_object>
            <textfilecontent54_object version="1" id="oval:gov.irs.rhel5:obj:398" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
                  <path>/etc/sysconfig</path>
                  <filename>nfs</filename>
                  <pattern operation="pattern match">MOUNTD_PORT[:space:].*=[:space:].*[0-9]</pattern>
                  <instance operation="greater than or equal" datatype="int">1</instance>
            </textfilecontent54_object>
            <textfilecontent54_object version="1" id="oval:gov.irs.rhel5:obj:399" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
                  <path>/etc/sysconfig</path>
                  <filename>nfs</filename>
                  <pattern operation="pattern match">RQUOTAD_PORT[:space:].*=[:space:].*[0-9]</pattern>
                  <instance operation="greater than or equal" datatype="int">1</instance>
            </textfilecontent54_object>
            <runlevel_object version="1" id="oval:gov.irs.rhel5:obj:400" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <service_name>nfs</service_name>
                  <runlevel>2</runlevel>
            </runlevel_object>
            <runlevel_object version="1" id="oval:gov.irs.rhel5:obj:401" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <service_name>nfs</service_name>
                  <runlevel>3</runlevel>
            </runlevel_object>
            <runlevel_object version="1" id="oval:gov.irs.rhel5:obj:402" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <service_name>nfs</service_name>
                  <runlevel>4</runlevel>
            </runlevel_object>
            <runlevel_object version="1" id="oval:gov.irs.rhel5:obj:403" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <service_name>nfs</service_name>
                  <runlevel>5</runlevel>
            </runlevel_object>
            <runlevel_object version="1" id="oval:gov.irs.rhel5:obj:404" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <service_name>rpcsvcgssd</service_name>
                  <runlevel>2</runlevel>
            </runlevel_object>
            <runlevel_object version="1" id="oval:gov.irs.rhel5:obj:405" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <service_name>rpcsvcgssd</service_name>
                  <runlevel>3</runlevel>
            </runlevel_object>
            <runlevel_object version="1" id="oval:gov.irs.rhel5:obj:406" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <service_name>rpcsvcgssd</service_name>
                  <runlevel>4</runlevel>
            </runlevel_object>
            <runlevel_object version="1" id="oval:gov.irs.rhel5:obj:407" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <service_name>rpcsvcgssd</service_name>
                  <runlevel>5</runlevel>
            </runlevel_object>
            <textfilecontent54_object version="1" id="oval:gov.irs.rhel5:obj:408" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
                  <path>/etc/sysconfig</path>
                  <filename>nfs</filename>
                  <pattern operation="pattern match">[^#]*nfs4?([^#])*</pattern>
                  <instance operation="greater than or equal" datatype="int">1</instance>
            </textfilecontent54_object>
            <textfilecontent54_object version="1" id="oval:gov.irs.rhel5:obj:409" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
                  <path>/etc/sysconfig</path>
                  <filename>nfs</filename>
                  <pattern operation="pattern match">[^#]*nfs4?([^#])*</pattern>
                  <instance operation="greater than or equal" datatype="int">1</instance>
            </textfilecontent54_object>
            <textfilecontent54_object version="1" id="oval:gov.irs.rhel5:obj:410" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
                  <path>/etc/sysconfig</path>
                  <filename>nfs</filename>
                  <pattern operation="pattern match">[^#]*nfs4?([^#])*</pattern>
                  <instance operation="greater than or equal" datatype="int">1</instance>
            </textfilecontent54_object>
            <textfilecontent54_object version="1" id="oval:gov.irs.rhel5:obj:411" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
                  <path>/etc</path>
                  <filename>exports</filename>
                  <pattern operation="pattern match">no_root_squash</pattern>
                  <instance operation="greater than or equal" datatype="int">1</instance>
            </textfilecontent54_object>
            <textfilecontent54_object version="1" id="oval:gov.irs.rhel5:obj:412" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
                  <path>/etc</path>
                  <filename>exports</filename>
                  <pattern operation="pattern match">insecure</pattern>
                  <instance operation="greater than or equal" datatype="int">1</instance>
            </textfilecontent54_object>
            <textfilecontent54_object version="1" id="oval:gov.irs.rhel5:obj:413" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
                  <path>/etc</path>
                  <filename>exports</filename>
                  <pattern operation="pattern match">rw</pattern>
                  <instance operation="greater than or equal" datatype="int">1</instance>
            </textfilecontent54_object>
            <runlevel_object version="1" id="oval:gov.irs.rhel5:obj:414" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <service_name>named</service_name>
                  <runlevel>2</runlevel>
            </runlevel_object>
            <runlevel_object version="1" id="oval:gov.irs.rhel5:obj:415" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <service_name>named</service_name>
                  <runlevel>3</runlevel>
            </runlevel_object>
            <runlevel_object version="1" id="oval:gov.irs.rhel5:obj:416" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <service_name>named</service_name>
                  <runlevel>4</runlevel>
            </runlevel_object>
            <runlevel_object version="1" id="oval:gov.irs.rhel5:obj:417" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <service_name>named</service_name>
                  <runlevel>5</runlevel>
            </runlevel_object>
            <rpminfo_object version="1" id="oval:gov.irs.rhel5:obj:418" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
                  <name>bind</name>
            </rpminfo_object>
            <file_object comment="/var/named/chroot/etc/named.conf" version="1" id="oval:gov.irs.rhel5:obj:419" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <path>/var/named/chroot/etc</path>
                  <filename>named.conf</filename>
            </file_object>
            <runlevel_object version="1" id="oval:gov.irs.rhel5:obj:420" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <service_name>vsftpd</service_name>
                  <runlevel>2</runlevel>
            </runlevel_object>
            <runlevel_object version="1" id="oval:gov.irs.rhel5:obj:421" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <service_name>vsftpd</service_name>
                  <runlevel>3</runlevel>
            </runlevel_object>
            <runlevel_object version="1" id="oval:gov.irs.rhel5:obj:422" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <service_name>vsftpd</service_name>
                  <runlevel>4</runlevel>
            </runlevel_object>
            <runlevel_object version="1" id="oval:gov.irs.rhel5:obj:423" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <service_name>vsftpd</service_name>
                  <runlevel>5</runlevel>
            </runlevel_object>
            <textfilecontent54_object version="1" id="oval:gov.irs.rhel5:obj:424" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
                  <path>/etc</path>
                  <filename>vsftpd.conf</filename>
                  <pattern operation="pattern match">^[:space:]*xferlog_std_format[:space:]*=[:space:]*NO[:space:]*(#.*)?$</pattern>
                  <instance operation="greater than or equal" datatype="int">1</instance>
            </textfilecontent54_object>
            <textfilecontent54_object version="1" id="oval:gov.irs.rhel5:obj:425" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
                  <path>/etc</path>
                  <filename>vsftpd.conf</filename>
                  <pattern operation="pattern match">^[:space:]*log_ftp_protocol[:space:]*=[:space:]*YES[:space:]*(#.*)?$</pattern>
                  <instance operation="greater than or equal" datatype="int">1</instance>
            </textfilecontent54_object>
            <textfilecontent54_object version="1" id="oval:gov.irs.rhel5:obj:426" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
                  <path>/etc</path>
                  <filename>vsftpd.conf</filename>
                  <pattern operation="pattern match">banner_file[:space:].*=[:space:].*/etc/issue</pattern>
                  <instance operation="greater than or equal" datatype="int">1</instance>
            </textfilecontent54_object>
            <textfilecontent54_object version="1" id="oval:gov.irs.rhel5:obj:427" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
                  <path>/etc</path>
                  <filename>vsftpd.conf</filename>
                  <pattern operation="pattern match">local_enable[:space:].*=[:space:].*NO</pattern>
                  <instance operation="greater than or equal" datatype="int">1</instance>
            </textfilecontent54_object>
            <textfilecontent54_object version="1" id="oval:gov.irs.rhel5:obj:428" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
                  <path>/etc</path>
                  <filename>vsftpd.conf</filename>
                  <pattern operation="pattern match">write_enable[:space:].*=[:space:].*no</pattern>
                  <instance operation="greater than or equal" datatype="int">1</instance>
            </textfilecontent54_object>
            <runlevel_object version="1" id="oval:gov.irs.rhel5:obj:429" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <service_name>httpd</service_name>
                  <runlevel>2</runlevel>
            </runlevel_object>
            <runlevel_object version="1" id="oval:gov.irs.rhel5:obj:430" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <service_name>httpd</service_name>
                  <runlevel>3</runlevel>
            </runlevel_object>
            <runlevel_object version="1" id="oval:gov.irs.rhel5:obj:431" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <service_name>httpd</service_name>
                  <runlevel>4</runlevel>
            </runlevel_object>
            <runlevel_object version="1" id="oval:gov.irs.rhel5:obj:432" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <service_name>httpd</service_name>
                  <runlevel>5</runlevel>
            </runlevel_object>
            <rpminfo_object version="1" id="oval:gov.irs.rhel5:obj:433" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
                  <name>httpd</name>
            </rpminfo_object>
            <textfilecontent54_object version="1" id="oval:gov.irs.rhel5:obj:434" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
                  <path>/etc/httpd/conf</path>
                  <filename>httpd.conf</filename>
                  <pattern operation="pattern match">ServerTokens[:space:]+Prod</pattern>
                  <instance operation="greater than or equal" datatype="int">1</instance>
            </textfilecontent54_object>
            <textfilecontent54_object version="1" id="oval:gov.irs.rhel5:obj:435" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
                  <path>/etc/httpd/conf</path>
                  <filename>httpd.conf</filename>
                  <pattern operation="pattern match">ServerSignature[:space:]+Prod</pattern>
                  <instance operation="greater than or equal" datatype="int">1</instance>
            </textfilecontent54_object>
            <file_object comment="/etc/httpd/conf" version="1" id="oval:gov.irs.rhel5:obj:436" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <path>/etc/httpd</path>
                  <filename>conf</filename>
            </file_object>
            <file_object comment="/etc/httpd/conf/*" version="1" id="oval:gov.irs.rhel5:obj:437" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <path>/etc/httpd/conf</path>
                  <filename>*</filename>
            </file_object>
            <file_object comment="/usr/sbin/httpd" version="1" id="oval:gov.irs.rhel5:obj:438" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <path>/usr/sbin</path>
                  <filename>httpd</filename>
            </file_object>
            <textfilecontent54_object version="1" id="oval:gov.irs.rhel5:obj:439" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
                  <path>/etc</path>
                  <filename>passwd</filename>
                  <pattern operation="pattern match">^apache:.*:.*:([0-9]*):</pattern>
                  <instance operation="greater than or equal" datatype="int">1</instance>
            </textfilecontent54_object>
            <file_object comment="/var/log/httpd" version="1" id="oval:gov.irs.rhel5:obj:440" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <path>/var/log</path>
                  <filename>httpd</filename>
            </file_object>
            <runlevel_object version="1" id="oval:gov.irs.rhel5:obj:441" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <service_name>dovecot</service_name>
                  <runlevel>2</runlevel>
            </runlevel_object>
            <runlevel_object version="1" id="oval:gov.irs.rhel5:obj:442" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <service_name>dovecot</service_name>
                  <runlevel>3</runlevel>
            </runlevel_object>
            <runlevel_object version="1" id="oval:gov.irs.rhel5:obj:443" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <service_name>dovecot</service_name>
                  <runlevel>4</runlevel>
            </runlevel_object>
            <runlevel_object version="1" id="oval:gov.irs.rhel5:obj:444" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <service_name>dovecot</service_name>
                  <runlevel>5</runlevel>
            </runlevel_object>
            <rpminfo_object version="1" id="oval:gov.irs.rhel5:obj:445" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
                  <name>dovecot</name>
            </rpminfo_object>
            <textfilecontent54_object version="1" id="oval:gov.irs.rhel5:obj:446" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
                  <path>/etc</path>
                  <filename>dovecot.conf</filename>
                  <pattern operation="pattern match">protocols[:space:].*=..*imaps</pattern>
                  <instance operation="greater than or equal" datatype="int">1</instance>
            </textfilecontent54_object>
            <textfilecontent54_object version="1" id="oval:gov.irs.rhel5:obj:447" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
                  <path>/etc</path>
                  <filename>dovecot.conf</filename>
                  <pattern operation="pattern match">protocols[:space:].*=..*pop3s</pattern>
                  <instance operation="greater than or equal" datatype="int">1</instance>
            </textfilecontent54_object>
            <textfilecontent54_object version="1" id="oval:gov.irs.rhel5:obj:448" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
                  <path>/etc</path>
                  <filename>dovecot.conf</filename>
                  <pattern operation="pattern match">protocols[:space:].*=..*pop3</pattern>
                  <instance operation="greater than or equal" datatype="int">1</instance>
            </textfilecontent54_object>
            <textfilecontent54_object version="1" id="oval:gov.irs.rhel5:obj:449" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
                  <path>/etc</path>
                  <filename>dovecot.conf</filename>
                  <pattern operation="pattern match">protocols[:space:].*=..*imap</pattern>
                  <instance operation="greater than or equal" datatype="int">1</instance>
            </textfilecontent54_object>
            <textfilecontent54_object version="1" id="oval:gov.irs.rhel5:obj:450" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
                  <path>/etc</path>
                  <filename>dovecot.conf</filename>
                  <pattern operation="pattern match">disable_plaintext_auth[:space:].*=[:space:].*yes</pattern>
                  <instance operation="greater than or equal" datatype="int">1</instance>
            </textfilecontent54_object>
            <textfilecontent54_object version="1" id="oval:gov.irs.rhel5:obj:451" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
                  <path>/etc</path>
                  <filename>dovecot.conf</filename>
                  <pattern operation="pattern match">mail_drop_priv_before_exec[:space:].*=[:space:].*yes</pattern>
                  <instance operation="greater than or equal" datatype="int">1</instance>
            </textfilecontent54_object>
            <textfilecontent54_object version="1" id="oval:gov.irs.rhel5:obj:452" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
                  <path>/etc</path>
                  <filename>dovecot.conf</filename>
                  <pattern operation="pattern match">login_process_per_connection[:space:].*=[:space:].*yes</pattern>
                  <instance operation="greater than or equal" datatype="int">1</instance>
            </textfilecontent54_object>
            <runlevel_object version="1" id="oval:gov.irs.rhel5:obj:453" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <service_name>smb</service_name>
                  <runlevel>2</runlevel>
            </runlevel_object>
            <runlevel_object version="1" id="oval:gov.irs.rhel5:obj:454" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <service_name>smb</service_name>
                  <runlevel>3</runlevel>
            </runlevel_object>
            <runlevel_object version="1" id="oval:gov.irs.rhel5:obj:455" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <service_name>smb</service_name>
                  <runlevel>4</runlevel>
            </runlevel_object>
            <runlevel_object version="1" id="oval:gov.irs.rhel5:obj:456" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <service_name>smb</service_name>
                  <runlevel>5</runlevel>
            </runlevel_object>
            <runlevel_object version="1" id="oval:gov.irs.rhel5:obj:457" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <service_name>squid</service_name>
                  <runlevel>2</runlevel>
            </runlevel_object>
            <runlevel_object version="1" id="oval:gov.irs.rhel5:obj:458" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <service_name>squid</service_name>
                  <runlevel>3</runlevel>
            </runlevel_object>
            <runlevel_object version="1" id="oval:gov.irs.rhel5:obj:459" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <service_name>squid</service_name>
                  <runlevel>4</runlevel>
            </runlevel_object>
            <runlevel_object version="1" id="oval:gov.irs.rhel5:obj:460" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <service_name>squid</service_name>
                  <runlevel>5</runlevel>
            </runlevel_object>
            <rpminfo_object version="1" id="oval:gov.irs.rhel5:obj:461" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
                  <name>squid</name>
            </rpminfo_object>
            <textfilecontent54_object version="1" id="oval:gov.irs.rhel5:obj:462" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
                  <path>/etc/squid</path>
                  <filename>squid.conf</filename>
                  <pattern operation="pattern match">ftp_passive[[:space:]]+off</pattern>
                  <instance operation="greater than or equal" datatype="int">1</instance>
            </textfilecontent54_object>
            <textfilecontent54_object version="1" id="oval:gov.irs.rhel5:obj:463" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
                  <path>/etc/squid</path>
                  <filename>squid.conf</filename>
                  <pattern operation="pattern match">request_header_max_size[:space:]+20[:space:]+KB</pattern>
                  <instance operation="greater than or equal" datatype="int">1</instance>
            </textfilecontent54_object>
            <textfilecontent54_object version="1" id="oval:gov.irs.rhel5:obj:464" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
                  <path>/etc/squid</path>
                  <filename>squid.conf</filename>
                  <pattern operation="pattern match">check_hostnames[[:space:]]+off</pattern>
                  <instance operation="greater than or equal" datatype="int">1</instance>
            </textfilecontent54_object>
            <textfilecontent54_object version="1" id="oval:gov.irs.rhel5:obj:465" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
                  <path>/etc/squid</path>
                  <filename>squid.conf</filename>
                  <pattern operation="pattern match">ignore_unknown_nameservers[:space:][:space:]off</pattern>
                  <instance operation="greater than or equal" datatype="int">1</instance>
            </textfilecontent54_object>
            <textfilecontent54_object version="1" id="oval:gov.irs.rhel5:obj:466" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
                  <path>/etc/squid</path>
                  <filename>squid.conf</filename>
                  <pattern operation="pattern match">reply_header_max_size[:space:]+20[:space:]+KB</pattern>
                  <instance operation="greater than or equal" datatype="int">1</instance>
            </textfilecontent54_object>
            <textfilecontent54_object version="1" id="oval:gov.irs.rhel5:obj:467" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
                  <path>/etc/squid</path>
                  <filename>squid.conf</filename>
                  <pattern operation="pattern match">cache_effective_user[:space:]+squid</pattern>
                  <instance operation="greater than or equal" datatype="int">1</instance>
            </textfilecontent54_object>
            <textfilecontent54_object version="1" id="oval:gov.irs.rhel5:obj:468" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
                  <path>/etc/squid</path>
                  <filename>squid.conf</filename>
                  <pattern operation="pattern match">ftp_sanitycheck[[:space:]]+off</pattern>
                  <instance operation="greater than or equal" datatype="int">1</instance>
            </textfilecontent54_object>
            <textfilecontent54_object version="1" id="oval:gov.irs.rhel5:obj:469" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
                  <path>/etc/squid</path>
                  <filename>squid.conf</filename>
                  <pattern operation="pattern match">cache_effective_group[:space:]+squid</pattern>
                  <instance operation="greater than or equal" datatype="int">1</instance>
            </textfilecontent54_object>
            <textfilecontent54_object version="1" id="oval:gov.irs.rhel5:obj:470" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
                  <path>/etc/squid</path>
                  <filename>squid.conf</filename>
                  <pattern operation="pattern match">forwarded_for[[:space:]]+off</pattern>
                  <instance operation="greater than or equal" datatype="int">1</instance>
            </textfilecontent54_object>
            <textfilecontent54_object version="1" id="oval:gov.irs.rhel5:obj:471" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
                  <path>/etc/squid</path>
                  <filename>squid.conf</filename>
                  <pattern operation="pattern match">log_mime_hdrs[[:space:]]+on</pattern>
                  <instance operation="greater than or equal" datatype="int">1</instance>
            </textfilecontent54_object>
            <textfilecontent54_object version="1" id="oval:gov.irs.rhel5:obj:472" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
                  <path>/etc/squid</path>
                  <filename>squid.conf</filename>
                  <pattern operation="pattern match">allow_underscore[[:space:]]+off</pattern>
                  <instance operation="greater than or equal" datatype="int">1</instance>
            </textfilecontent54_object>
            <textfilecontent54_object version="1" id="oval:gov.irs.rhel5:obj:473" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
                  <path>/etc/squid</path>
                  <filename>squid.conf</filename>
                  <pattern operation="pattern match">http_suppress_version_string[[:space:]]+on</pattern>
                  <instance operation="greater than or equal" datatype="int">1</instance>
            </textfilecontent54_object>
            <runlevel_object version="1" id="oval:gov.irs.rhel5:obj:474" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <service_name>snmpd</service_name>
                  <runlevel>2</runlevel>
            </runlevel_object>
            <runlevel_object version="1" id="oval:gov.irs.rhel5:obj:475" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <service_name>snmpd</service_name>
                  <runlevel>3</runlevel>
            </runlevel_object>
            <runlevel_object version="1" id="oval:gov.irs.rhel5:obj:476" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <service_name>snmpd</service_name>
                  <runlevel>4</runlevel>
            </runlevel_object>
            <runlevel_object version="1" id="oval:gov.irs.rhel5:obj:477" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <service_name>snmpd</service_name>
                  <runlevel>5</runlevel>
            </runlevel_object>
            <rpminfo_object version="1" id="oval:gov.irs.rhel5:obj:478" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
                  <name>net-smtp</name>
            </rpminfo_object>
      </objects>
      <states>
            <rpminfo_state version="1" id="oval:gov.irs.rhel5:ste:10000" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
                  <version operation="pattern match">^5[^[:digit:]]</version>
            </rpminfo_state>
            <family_state version="1" id="oval:gov.irs.rhel5:ste:10001" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
                  <family>unix</family>
            </family_state>
            <runlevel_state version="1" id="oval:gov.irs.rhel5:ste:1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <start datatype="boolean">false</start>
            </runlevel_state>
            <runlevel_state version="1" id="oval:gov.irs.rhel5:ste:2" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <start datatype="boolean">false</start>
            </runlevel_state>
            <textfilecontent54_state version="1" id="oval:gov.irs.rhel5:ste:3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
                  <subexpression operation="pattern match">.*nodev.*</subexpression>
            </textfilecontent54_state>
            <textfilecontent54_state version="1" id="oval:gov.irs.rhel5:ste:4" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
                  <subexpression operation="pattern match">.*nodev.*</subexpression>
            </textfilecontent54_state>
            <textfilecontent54_state version="1" id="oval:gov.irs.rhel5:ste:5" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
                  <subexpression operation="pattern match">.*noexec.*</subexpression>
            </textfilecontent54_state>
            <textfilecontent54_state version="1" id="oval:gov.irs.rhel5:ste:6" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
                  <subexpression operation="pattern match">.*nosuid.*</subexpression>
            </textfilecontent54_state>
            <runlevel_state version="1" id="oval:gov.irs.rhel5:ste:7" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <start datatype="boolean">false</start>
            </runlevel_state>
            <xmlfilecontent_state version="1" id="oval:gov.irs.rhel5:ste:8" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
                  <value_of>false</value_of>
            </xmlfilecontent_state>
            <xmlfilecontent_state version="1" id="oval:gov.irs.rhel5:ste:9" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
                  <value_of>false</value_of>
            </xmlfilecontent_state>
            <file_state version="1" id="oval:gov.irs.rhel5:ste:10" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <group_id>0</group_id>
            </file_state>
            <file_state version="1" id="oval:gov.irs.rhel5:ste:11" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <group_id>0</group_id>
            </file_state>
            <file_state version="1" id="oval:gov.irs.rhel5:ste:12" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <user_id>0</user_id>
            </file_state>
            <file_state version="1" id="oval:gov.irs.rhel5:ste:13" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <uread datatype="boolean">true</uread>
                  <uwrite datatype="boolean">false</uwrite>
                  <uexec datatype="boolean">false</uexec>
                  <gread datatype="boolean">false</gread>
                  <gwrite datatype="boolean">false</gwrite>
                  <gexec datatype="boolean">false</gexec>
                  <oread datatype="boolean">false</oread>
                  <owrite datatype="boolean">false</owrite>
                  <oexec datatype="boolean">false</oexec>
            </file_state>
            <file_state version="1" id="oval:gov.irs.rhel5:ste:14" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <group_id>0</group_id>
            </file_state>
            <file_state version="1" id="oval:gov.irs.rhel5:ste:15" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <user_id>0</user_id>
            </file_state>
            <file_state version="1" id="oval:gov.irs.rhel5:ste:16" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <user_id>0</user_id>
            </file_state>
            <file_state version="1" id="oval:gov.irs.rhel5:ste:17" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <uread datatype="boolean">true</uread>
                  <uwrite datatype="boolean">true</uwrite>
                  <uexec datatype="boolean">false</uexec>
                  <gread datatype="boolean">true</gread>
                  <gwrite datatype="boolean">false</gwrite>
                  <gexec datatype="boolean">false</gexec>
                  <oread datatype="boolean">true</oread>
                  <owrite datatype="boolean">false</owrite>
                  <oexec datatype="boolean">false</oexec>
            </file_state>
            <file_state version="1" id="oval:gov.irs.rhel5:ste:18" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <user_id>0</user_id>
            </file_state>
            <file_state version="1" id="oval:gov.irs.rhel5:ste:19" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <uread datatype="boolean">true</uread>
                  <uwrite datatype="boolean">true</uwrite>
                  <uexec datatype="boolean">false</uexec>
                  <gread datatype="boolean">true</gread>
                  <gwrite datatype="boolean">false</gwrite>
                  <gexec datatype="boolean">false</gexec>
                  <oread datatype="boolean">true</oread>
                  <owrite datatype="boolean">false</owrite>
                  <oexec datatype="boolean">false</oexec>
            </file_state>
            <file_state version="1" id="oval:gov.irs.rhel5:ste:20" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <group_id>0</group_id>
            </file_state>
            <file_state version="1" id="oval:gov.irs.rhel5:ste:21" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <uread datatype="boolean">true</uread>
                  <uwrite datatype="boolean">false</uwrite>
                  <uexec datatype="boolean">false</uexec>
                  <gread datatype="boolean">false</gread>
                  <gwrite datatype="boolean">false</gwrite>
                  <gexec datatype="boolean">false</gexec>
                  <oread datatype="boolean">false</oread>
                  <owrite datatype="boolean">false</owrite>
                  <oexec datatype="boolean">false</oexec>
            </file_state>
            <file_state version="1" id="oval:gov.irs.rhel5:ste:22" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix"/>
            <file_state version="1" id="oval:gov.irs.rhel5:ste:23" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <sticky datatype="boolean">true</sticky>
            </file_state>
            <file_state version="1" id="oval:gov.irs.rhel5:ste:24" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix"/>
            <file_state version="1" id="oval:gov.irs.rhel5:ste:25" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix"/>
            <file_state version="1" id="oval:gov.irs.rhel5:ste:26" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <path>/proc</path>
            </file_state>
            <file_state version="1" id="oval:gov.irs.rhel5:ste:27" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <sgid datatype="boolean">true</sgid>
            </file_state>
            <file_state version="1" id="oval:gov.irs.rhel5:ste:28" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <path>/usr/bin</path>
                  <filename>locate</filename>
                  <group_id var_ref="oval:gov.irs.rhel5:var:1"/>
            </file_state>
            <file_state version="1" id="oval:gov.irs.rhel5:ste:29" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <path>/usr/bin</path>
                  <filename>ssh-agent</filename>
                  <group_id var_ref="oval:gov.irs.rhel5:var:2"/>
            </file_state>
            <file_state version="1" id="oval:gov.irs.rhel5:ste:30" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <path>/usr/libexec/utempter</path>
                  <filename>utempter</filename>
                  <group_id var_ref="oval:gov.irs.rhel5:var:3"/>
            </file_state>
            <file_state version="1" id="oval:gov.irs.rhel5:ste:31" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <path>/usr/sbin</path>
                  <filename>lockdev</filename>
                  <group_id var_ref="oval:gov.irs.rhel5:var:4"/>
            </file_state>
            <file_state version="1" id="oval:gov.irs.rhel5:ste:32" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <path>/usr/sbin</path>
                  <filename>sendmail.sendmail</filename>
                  <group_id var_ref="oval:gov.irs.rhel5:var:5"/>
            </file_state>
            <file_state version="1" id="oval:gov.irs.rhel5:ste:33" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <path>/proc</path>
            </file_state>
            <file_state version="1" id="oval:gov.irs.rhel5:ste:34" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <suid datatype="boolean">true</suid>
            </file_state>
            <file_state version="1" id="oval:gov.irs.rhel5:ste:35" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <path>/bin</path>
                  <filename>mount</filename>
                  <user_id>0</user_id>
            </file_state>
            <file_state version="1" id="oval:gov.irs.rhel5:ste:36" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <path>/bin</path>
                  <filename>ping</filename>
                  <user_id>0</user_id>
            </file_state>
            <file_state version="1" id="oval:gov.irs.rhel5:ste:37" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <path>/bin</path>
                  <filename>su</filename>
                  <user_id>0</user_id>
            </file_state>
            <file_state version="1" id="oval:gov.irs.rhel5:ste:38" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <path>/bin</path>
                  <filename>umount</filename>
                  <user_id>0</user_id>
            </file_state>
            <file_state version="1" id="oval:gov.irs.rhel5:ste:39" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <path>/sbin</path>
                  <filename>pam timestamp check</filename>
                  <user_id>0</user_id>
            </file_state>
            <file_state version="1" id="oval:gov.irs.rhel5:ste:40" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <path>/sbin</path>
                  <filename>unix chkpwd</filename>
                  <user_id>0</user_id>
            </file_state>
            <file_state version="1" id="oval:gov.irs.rhel5:ste:41" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <path>/usr/bin</path>
                  <filename>at</filename>
                  <user_id>0</user_id>
            </file_state>
            <file_state version="1" id="oval:gov.irs.rhel5:ste:42" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <path>/usr/bin</path>
                  <filename>gpasswd</filename>
                  <user_id>0</user_id>
            </file_state>
            <file_state version="1" id="oval:gov.irs.rhel5:ste:43" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <path>/usr/bin</path>
                  <filename>newgrp</filename>
                  <user_id>0</user_id>
            </file_state>
            <file_state version="1" id="oval:gov.irs.rhel5:ste:44" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <path>/usr/bin</path>
                  <filename>passwd</filename>
                  <user_id>0</user_id>
            </file_state>
            <file_state version="1" id="oval:gov.irs.rhel5:ste:45" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <path>/usr/bin</path>
                  <filename>sudo</filename>
                  <user_id>0</user_id>
            </file_state>
            <file_state version="1" id="oval:gov.irs.rhel5:ste:46" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <path>/usr/bin</path>
                  <filename>sudoedit</filename>
                  <user_id>0</user_id>
            </file_state>
            <textfilecontent54_state version="1" id="oval:gov.irs.rhel5:ste:47" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
                  <pattern>[[:space:]]*root:</pattern>
            </textfilecontent54_state>
            <file_state version="1" id="oval:gov.irs.rhel5:ste:48" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <group_id var_ref="oval:gov.irs.rhel5:var:8"/>
            </file_state>
            <file_state version="1" id="oval:gov.irs.rhel5:ste:49" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <suid datatype="boolean">true</suid>
                  <sgid datatype="boolean">false</sgid>
                  <sticky datatype="boolean">false</sticky>
                  <uread datatype="boolean">true</uread>
                  <uwrite datatype="boolean">true</uwrite>
                  <uexec datatype="boolean">true</uexec>
                  <gread datatype="boolean">false</gread>
                  <gwrite datatype="boolean">false</gwrite>
                  <gexec datatype="boolean">true</gexec>
                  <oread datatype="boolean">false</oread>
                  <owrite datatype="boolean">false</owrite>
                  <oexec datatype="boolean">false</oexec>
            </file_state>
            <file_state version="1" id="oval:gov.irs.rhel5:ste:50" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix"/>
            <file_state version="1" id="oval:gov.irs.rhel5:ste:51" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <user_id>0</user_id>
            </file_state>
            <file_state version="1" id="oval:gov.irs.rhel5:ste:52" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <uread datatype="boolean">true</uread>
                  <uwrite datatype="boolean">true</uwrite>
                  <uexec datatype="boolean">false</uexec>
                  <gread datatype="boolean">false</gread>
                  <gwrite datatype="boolean">false</gwrite>
                  <gexec datatype="boolean">false</gexec>
                  <oread datatype="boolean">false</oread>
                  <owrite datatype="boolean">false</owrite>
                  <oexec datatype="boolean">false</oexec>
            </file_state>
            <file_state version="1" id="oval:gov.irs.rhel5:ste:53" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <group_id>0</group_id>
            </file_state>
            <xmlfilecontent_state version="1" id="oval:gov.irs.rhel5:ste:54" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
                  <value_of>true</value_of>
            </xmlfilecontent_state>
            <xmlfilecontent_state version="1" id="oval:gov.irs.rhel5:ste:55" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
                  <value_of>true/etc/gconf/gconf.xml.mandatory</value_of>
            </xmlfilecontent_state>
            <xmlfilecontent_state version="1" id="oval:gov.irs.rhel5:ste:56" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
                  <value_of>10</value_of>
            </xmlfilecontent_state>
            <runlevel_state version="1" id="oval:gov.irs.rhel5:ste:57" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <start datatype="boolean">false</start>
            </runlevel_state>
            <runlevel_state version="1" id="oval:gov.irs.rhel5:ste:58" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <start datatype="boolean">false</start>
            </runlevel_state>
            <runlevel_state version="1" id="oval:gov.irs.rhel5:ste:59" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <start datatype="boolean">true</start>
            </runlevel_state>
            <runlevel_state version="1" id="oval:gov.irs.rhel5:ste:60" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <start datatype="boolean">true</start>
            </runlevel_state>
            <runlevel_state version="1" id="oval:gov.irs.rhel5:ste:61" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <start datatype="boolean">true</start>
            </runlevel_state>
            <runlevel_state version="1" id="oval:gov.irs.rhel5:ste:62" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <start datatype="boolean">true</start>
            </runlevel_state>
            <runlevel_state version="1" id="oval:gov.irs.rhel5:ste:63" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <start datatype="boolean">true</start>
            </runlevel_state>
            <runlevel_state version="1" id="oval:gov.irs.rhel5:ste:64" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <start datatype="boolean">false</start>
            </runlevel_state>
            <runlevel_state version="1" id="oval:gov.irs.rhel5:ste:65" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <start datatype="boolean">false</start>
            </runlevel_state>
            <runlevel_state version="1" id="oval:gov.irs.rhel5:ste:66" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <start datatype="boolean">false</start>
            </runlevel_state>
            <runlevel_state version="1" id="oval:gov.irs.rhel5:ste:67" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <start datatype="boolean">false</start>
            </runlevel_state>
            <runlevel_state version="1" id="oval:gov.irs.rhel5:ste:68" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <start datatype="boolean">false</start>
            </runlevel_state>
            <runlevel_state version="1" id="oval:gov.irs.rhel5:ste:69" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <start datatype="boolean">false</start>
            </runlevel_state>
            <runlevel_state version="1" id="oval:gov.irs.rhel5:ste:70" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <start datatype="boolean">false</start>
            </runlevel_state>
            <runlevel_state version="1" id="oval:gov.irs.rhel5:ste:71" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <start datatype="boolean">false</start>
            </runlevel_state>
            <runlevel_state version="1" id="oval:gov.irs.rhel5:ste:72" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <start datatype="boolean">false</start>
            </runlevel_state>
            <runlevel_state version="1" id="oval:gov.irs.rhel5:ste:73" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <start datatype="boolean">false</start>
            </runlevel_state>
            <runlevel_state version="1" id="oval:gov.irs.rhel5:ste:74" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <start datatype="boolean">true</start>
            </runlevel_state>
            <runlevel_state version="1" id="oval:gov.irs.rhel5:ste:75" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <start datatype="boolean">false</start>
            </runlevel_state>
            <runlevel_state version="1" id="oval:gov.irs.rhel5:ste:76" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <start datatype="boolean">false</start>
            </runlevel_state>
            <runlevel_state version="1" id="oval:gov.irs.rhel5:ste:77" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <start datatype="boolean">false</start>
            </runlevel_state>
            <runlevel_state version="1" id="oval:gov.irs.rhel5:ste:78" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <start datatype="boolean">false</start>
            </runlevel_state>
            <runlevel_state version="1" id="oval:gov.irs.rhel5:ste:79" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <start datatype="boolean">false</start>
            </runlevel_state>
            <runlevel_state version="1" id="oval:gov.irs.rhel5:ste:80" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <start datatype="boolean">true</start>
            </runlevel_state>
            <runlevel_state version="1" id="oval:gov.irs.rhel5:ste:81" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <start datatype="boolean">false</start>
            </runlevel_state>
            <runlevel_state version="1" id="oval:gov.irs.rhel5:ste:82" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <start datatype="boolean">true</start>
            </runlevel_state>
            <runlevel_state version="1" id="oval:gov.irs.rhel5:ste:83" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <start datatype="boolean">false</start>
            </runlevel_state>
            <runlevel_state version="1" id="oval:gov.irs.rhel5:ste:84" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <start datatype="boolean">false</start>
            </runlevel_state>
            <runlevel_state version="1" id="oval:gov.irs.rhel5:ste:85" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <start datatype="boolean">false</start>
            </runlevel_state>
            <runlevel_state version="1" id="oval:gov.irs.rhel5:ste:86" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <start datatype="boolean">false</start>
            </runlevel_state>
            <runlevel_state version="1" id="oval:gov.irs.rhel5:ste:87" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <start datatype="boolean">false</start>
            </runlevel_state>
            <runlevel_state version="1" id="oval:gov.irs.rhel5:ste:88" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <start datatype="boolean">false</start>
            </runlevel_state>
            <runlevel_state version="1" id="oval:gov.irs.rhel5:ste:89" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <start datatype="boolean">false</start>
            </runlevel_state>
            <runlevel_state version="1" id="oval:gov.irs.rhel5:ste:90" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <start datatype="boolean">true</start>
            </runlevel_state>
            <runlevel_state version="1" id="oval:gov.irs.rhel5:ste:91" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <start datatype="boolean">true</start>
            </runlevel_state>
            <runlevel_state version="1" id="oval:gov.irs.rhel5:ste:92" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <start datatype="boolean">true</start>
            </runlevel_state>
            <runlevel_state version="1" id="oval:gov.irs.rhel5:ste:93" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <start datatype="boolean">false</start>
            </runlevel_state>
            <file_state version="1" id="oval:gov.irs.rhel5:ste:94" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <group_id>0</group_id>
            </file_state>
            <file_state version="1" id="oval:gov.irs.rhel5:ste:95" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <uread datatype="boolean">true</uread>
                  <uwrite datatype="boolean">true</uwrite>
                  <uexec datatype="boolean">true</uexec>
                  <gread datatype="boolean">false</gread>
                  <gwrite datatype="boolean">false</gwrite>
                  <gexec datatype="boolean">false</gexec>
                  <oread datatype="boolean">false</oread>
                  <owrite datatype="boolean">false</owrite>
                  <oexec datatype="boolean">false</oexec>
            </file_state>
            <file_state version="1" id="oval:gov.irs.rhel5:ste:96" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <group_id>0</group_id>
            </file_state>
            <file_state version="1" id="oval:gov.irs.rhel5:ste:97" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <user_id>0</user_id>
            </file_state>
            <file_state version="1" id="oval:gov.irs.rhel5:ste:98" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <user_id>0</user_id>
            </file_state>
            <file_state version="1" id="oval:gov.irs.rhel5:ste:99" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <uread datatype="boolean">true</uread>
                  <uwrite datatype="boolean">true</uwrite>
                  <uexec datatype="boolean">false</uexec>
                  <gread datatype="boolean">false</gread>
                  <gwrite datatype="boolean">false</gwrite>
                  <gexec datatype="boolean">false</gexec>
                  <oread datatype="boolean">false</oread>
                  <owrite datatype="boolean">false</owrite>
                  <oexec datatype="boolean">false</oexec>
            </file_state>
            <file_state version="1" id="oval:gov.irs.rhel5:ste:100" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <group_id>0</group_id>
            </file_state>
            <file_state version="1" id="oval:gov.irs.rhel5:ste:101" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <user_id>0</user_id>
            </file_state>
            <file_state version="1" id="oval:gov.irs.rhel5:ste:102" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <group_id>0</group_id>
            </file_state>
            <file_state version="1" id="oval:gov.irs.rhel5:ste:103" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <user_id>0</user_id>
            </file_state>
            <file_state version="1" id="oval:gov.irs.rhel5:ste:104" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <user_id>0</user_id>
            </file_state>
            <file_state version="1" id="oval:gov.irs.rhel5:ste:105" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <group_id>0</group_id>
            </file_state>
            <file_state version="1" id="oval:gov.irs.rhel5:ste:106" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <uread datatype="boolean">true</uread>
                  <uwrite datatype="boolean">true</uwrite>
                  <uexec datatype="boolean">true</uexec>
                  <gread datatype="boolean">false</gread>
                  <gwrite datatype="boolean">false</gwrite>
                  <gexec datatype="boolean">false</gexec>
                  <oread datatype="boolean">false</oread>
                  <owrite datatype="boolean">false</owrite>
                  <oexec datatype="boolean">false</oexec>
            </file_state>
            <file_state version="1" id="oval:gov.irs.rhel5:ste:107" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <user_id>0</user_id>
            </file_state>
            <file_state version="1" id="oval:gov.irs.rhel5:ste:108" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <group_id>0</group_id>
            </file_state>
            <file_state version="1" id="oval:gov.irs.rhel5:ste:109" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <user_id>0</user_id>
            </file_state>
            <file_state version="1" id="oval:gov.irs.rhel5:ste:110" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <uread datatype="boolean">true</uread>
                  <uwrite datatype="boolean">true</uwrite>
                  <uexec datatype="boolean">false</uexec>
                  <gread datatype="boolean">false</gread>
                  <gwrite datatype="boolean">false</gwrite>
                  <gexec datatype="boolean">false</gexec>
                  <oread datatype="boolean">false</oread>
                  <owrite datatype="boolean">false</owrite>
                  <oexec datatype="boolean">false</oexec>
            </file_state>
            <file_state version="1" id="oval:gov.irs.rhel5:ste:111" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <uread datatype="boolean">true</uread>
                  <uwrite datatype="boolean">true</uwrite>
                  <uexec datatype="boolean">true</uexec>
                  <gread datatype="boolean">false</gread>
                  <gwrite datatype="boolean">false</gwrite>
                  <gexec datatype="boolean">false</gexec>
                  <oread datatype="boolean">false</oread>
                  <owrite datatype="boolean">false</owrite>
                  <oexec datatype="boolean">false</oexec>
            </file_state>
            <file_state version="1" id="oval:gov.irs.rhel5:ste:112" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <uread datatype="boolean">true</uread>
                  <uwrite datatype="boolean">true</uwrite>
                  <uexec datatype="boolean">true</uexec>
                  <gread datatype="boolean">false</gread>
                  <gwrite datatype="boolean">false</gwrite>
                  <gexec datatype="boolean">false</gexec>
                  <oread datatype="boolean">false</oread>
                  <owrite datatype="boolean">false</owrite>
                  <oexec datatype="boolean">false</oexec>
            </file_state>
            <file_state version="1" id="oval:gov.irs.rhel5:ste:113" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <group_id>0</group_id>
            </file_state>
            <file_state version="1" id="oval:gov.irs.rhel5:ste:114" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <uread datatype="boolean">true</uread>
                  <uwrite datatype="boolean">true</uwrite>
                  <uexec datatype="boolean">true</uexec>
                  <gread datatype="boolean">false</gread>
                  <gwrite datatype="boolean">false</gwrite>
                  <gexec datatype="boolean">false</gexec>
                  <oread datatype="boolean">false</oread>
                  <owrite datatype="boolean">false</owrite>
                  <oexec datatype="boolean">false</oexec>
            </file_state>
            <runlevel_state version="1" id="oval:gov.irs.rhel5:ste:115" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <start datatype="boolean">false</start>
            </runlevel_state>
            <runlevel_state version="1" id="oval:gov.irs.rhel5:ste:116" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <start datatype="boolean">false</start>
            </runlevel_state>
            <runlevel_state version="1" id="oval:gov.irs.rhel5:ste:117" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <start datatype="boolean">false</start>
            </runlevel_state>
            <runlevel_state version="1" id="oval:gov.irs.rhel5:ste:118" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <start datatype="boolean">false</start>
            </runlevel_state>
            <runlevel_state version="1" id="oval:gov.irs.rhel5:ste:119" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <start datatype="boolean">false</start>
            </runlevel_state>
            <runlevel_state version="1" id="oval:gov.irs.rhel5:ste:120" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <start datatype="boolean">false</start>
            </runlevel_state>
            <runlevel_state version="1" id="oval:gov.irs.rhel5:ste:121" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <start datatype="boolean">true</start>
            </runlevel_state>
            <runlevel_state version="1" id="oval:gov.irs.rhel5:ste:122" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <start datatype="boolean">false</start>
            </runlevel_state>
            <file_state version="1" id="oval:gov.irs.rhel5:ste:123" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <group_id>0</group_id>
            </file_state>
            <file_state version="1" id="oval:gov.irs.rhel5:ste:124" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <user_id var_ref="oval:gov.irs.rhel5:var:9"/>
            </file_state>
            <runlevel_state version="1" id="oval:gov.irs.rhel5:ste:125" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <start datatype="boolean">false</start>
            </runlevel_state>
            <runlevel_state version="1" id="oval:gov.irs.rhel5:ste:126" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <start datatype="boolean">false</start>
            </runlevel_state>
            <runlevel_state version="1" id="oval:gov.irs.rhel5:ste:127" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <start datatype="boolean">false</start>
            </runlevel_state>
            <runlevel_state version="1" id="oval:gov.irs.rhel5:ste:128" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <start datatype="boolean">false</start>
            </runlevel_state>
            <runlevel_state version="1" id="oval:gov.irs.rhel5:ste:129" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <start datatype="boolean">false</start>
            </runlevel_state>
            <runlevel_state version="1" id="oval:gov.irs.rhel5:ste:130" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <start datatype="boolean">false</start>
            </runlevel_state>
            <runlevel_state version="1" id="oval:gov.irs.rhel5:ste:131" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <start datatype="boolean">false</start>
            </runlevel_state>
            <textfilecontent54_state version="1" id="oval:gov.irs.rhel5:ste:132" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
                  <subexpression operation="pattern match">.*nodev.*</subexpression>
            </textfilecontent54_state>
            <textfilecontent54_state version="1" id="oval:gov.irs.rhel5:ste:133" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
                  <subexpression operation="pattern match">.*nosuid.*</subexpression>
            </textfilecontent54_state>
            <textfilecontent54_state version="1" id="oval:gov.irs.rhel5:ste:134" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
                  <subexpression operation="pattern match">.*noexec.*</subexpression>
            </textfilecontent54_state>
            <runlevel_state version="1" id="oval:gov.irs.rhel5:ste:135" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <start datatype="boolean">false</start>
            </runlevel_state>
            <file_state version="1" id="oval:gov.irs.rhel5:ste:136" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <group_id>0</group_id>
            </file_state>
            <file_state version="1" id="oval:gov.irs.rhel5:ste:137" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <uread datatype="boolean">true</uread>
                  <uwrite datatype="boolean">true</uwrite>
                  <uexec datatype="boolean">false</uexec>
                  <gread datatype="boolean">true</gread>
                  <gwrite datatype="boolean">false</gwrite>
                  <gexec datatype="boolean">false</gexec>
                  <oread datatype="boolean">true</oread>
                  <owrite datatype="boolean">false</owrite>
                  <oexec datatype="boolean">false</oexec>
            </file_state>
            <file_state version="1" id="oval:gov.irs.rhel5:ste:138" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <user_id>0</user_id>
            </file_state>
            <runlevel_state version="1" id="oval:gov.irs.rhel5:ste:139" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <start datatype="boolean">false</start>
            </runlevel_state>
            <runlevel_state version="1" id="oval:gov.irs.rhel5:ste:140" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <start datatype="boolean">false</start>
            </runlevel_state>
            <file_state version="1" id="oval:gov.irs.rhel5:ste:141" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <uread datatype="boolean">true</uread>
                  <uwrite datatype="boolean">true</uwrite>
                  <uexec datatype="boolean">true</uexec>
                  <gread datatype="boolean">true</gread>
                  <gwrite datatype="boolean">false</gwrite>
                  <gexec datatype="boolean">true</gexec>
                  <oread datatype="boolean">false</oread>
                  <owrite datatype="boolean">false</owrite>
                  <oexec datatype="boolean">false</oexec>
            </file_state>
            <file_state version="1" id="oval:gov.irs.rhel5:ste:142" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <uread datatype="boolean">true</uread>
                  <uwrite datatype="boolean">true</uwrite>
                  <uexec datatype="boolean">false</uexec>
                  <gread datatype="boolean">true</gread>
                  <gwrite datatype="boolean">false</gwrite>
                  <gexec datatype="boolean">false</gexec>
                  <oread datatype="boolean">false</oread>
                  <owrite datatype="boolean">false</owrite>
                  <oexec datatype="boolean">false</oexec>
            </file_state>
            <file_state version="1" id="oval:gov.irs.rhel5:ste:143" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <uread datatype="boolean">true</uread>
                  <uwrite datatype="boolean">false</uwrite>
                  <uexec datatype="boolean">true</uexec>
                  <gread datatype="boolean">false</gread>
                  <gwrite datatype="boolean">false</gwrite>
                  <gexec datatype="boolean">true</gexec>
                  <oread datatype="boolean">false</oread>
                  <owrite datatype="boolean">false</owrite>
                  <oexec datatype="boolean">true</oexec>
            </file_state>
            <file_state version="1" id="oval:gov.irs.rhel5:ste:144" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <group_id var_ref="oval:gov.irs.rhel5:var:10"/>
            </file_state>
            <file_state version="1" id="oval:gov.irs.rhel5:ste:145" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <uread datatype="boolean">true</uread>
                  <uwrite datatype="boolean">true</uwrite>
                  <uexec datatype="boolean">true</uexec>
                  <gread datatype="boolean">true</gread>
                  <gwrite datatype="boolean">false</gwrite>
                  <gexec datatype="boolean">true</gexec>
                  <oread datatype="boolean">false</oread>
                  <owrite datatype="boolean">false</owrite>
                  <oexec datatype="boolean">false</oexec>
            </file_state>
            <runlevel_state version="1" id="oval:gov.irs.rhel5:ste:146" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <start datatype="boolean">false</start>
            </runlevel_state>
            <runlevel_state version="1" id="oval:gov.irs.rhel5:ste:147" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <start datatype="boolean">false</start>
            </runlevel_state>
            <runlevel_state version="1" id="oval:gov.irs.rhel5:ste:148" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <start datatype="boolean">false</start>
            </runlevel_state>
            <runlevel_state version="1" id="oval:gov.irs.rhel5:ste:149" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
                  <start datatype="boolean">false</start>
            </runlevel_state>
      </states>
      <variables>
            <local_variable comment="Group_id for group name slocate" version="1" id="oval:gov.irs.rhel5:var:1" datatype="string" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5">
                  <object_component object_ref="oval:gov.irs.rhel5:obj:51" item_field="subexpression"/>
            </local_variable>
            <local_variable comment="Group_id for group name nobody" version="1" id="oval:gov.irs.rhel5:var:2" datatype="string" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5">
                  <object_component object_ref="oval:gov.irs.rhel5:obj:52" item_field="subexpression"/>
            </local_variable>
            <local_variable comment="Group_id for group name utmp" version="1" id="oval:gov.irs.rhel5:var:3" datatype="string" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5">
                  <object_component object_ref="oval:gov.irs.rhel5:obj:53" item_field="subexpression"/>
            </local_variable>
            <local_variable comment="Group_id for group name lock" version="1" id="oval:gov.irs.rhel5:var:4" datatype="string" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5">
                  <object_component object_ref="oval:gov.irs.rhel5:obj:54" item_field="subexpression"/>
            </local_variable>
            <local_variable comment="Group_id for group name smmsp" version="1" id="oval:gov.irs.rhel5:var:5" datatype="string" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5">
                  <object_component object_ref="oval:gov.irs.rhel5:obj:55" item_field="subexpression"/>
            </local_variable>
            <local_variable comment="Regular expression for /etc/shadow: All system accounts (0 &lt; UID &lt; 500) should have the password disabled" version="1" id="oval:gov.irs.rhel5:var:6" datatype="string" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5">
                  <end character=":!">
                        <object_component object_ref="oval:gov.irs.rhel5:obj:71" item_field="subexpression"/>
                  </end>
            </local_variable>
            <local_variable comment="Regular expression for /etc/passwd: All system accounts (0 &lt; UID &lt; 500) should have the login shell set to /sbin/nologin" version="1" id="oval:gov.irs.rhel5:var:7" datatype="string" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5">
                  <concat>
                        <literal_component>^</literal_component>
                        <object_component object_ref="oval:gov.irs.rhel5:obj:71" item_field="subexpression"/>
                        <literal_component>:[^:]*:[^:]*:[^:]*:[^:]*:[^:]*:(.*)</literal_component>
                  </concat>
            </local_variable>
            <local_variable comment="Group_id for group name usergroup" version="1" id="oval:gov.irs.rhel5:var:8" datatype="string" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5">
                  <object_component object_ref="oval:gov.irs.rhel5:obj:84" item_field="subexpression"/>
            </local_variable>
            <local_variable comment="User_id for user name ldap" version="1" id="oval:gov.irs.rhel5:var:9" datatype="string" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5">
                  <object_component object_ref="oval:gov.irs.rhel5:obj:373" item_field="subexpression"/>
            </local_variable>
            <local_variable comment="Group_id for group name apache" version="1" id="oval:gov.irs.rhel5:var:10" datatype="string" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5">
                  <object_component object_ref="oval:gov.irs.rhel5:obj:439" item_field="subexpression"/>
            </local_variable>
      </variables>
</oval_definitions>
