/usr/share/openscap/scap-fedora14-oval.xml

<?xml version="1.0"?>
<oval_definitions xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
 xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5"
 xmlns:oval="http://oval.mitre.org/XMLSchema/oval-common-5"
 xmlns:oval-def="http://oval.mitre.org/XMLSchema/oval-definitions-5"
 xmlns:ind-def="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent"
 xmlns:lin-def="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux"
 xmlns:unix-def="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <generator>
            <oval:product_name>vim, emacs</oval:product_name>
            <oval:schema_version>5.5</oval:schema_version>
            <oval:timestamp>2010-08-30T12:00:00-04:00</oval:timestamp>
      </generator>
      <definitions>
            <definition class="compliance" id="oval:org.open-scap.f14:def:20000" version="1">
                  <metadata>
                        <title>Ensure that /tmp has its own partition or logical volume</title>
                        <reference ref_id="TBD" source="CCE"/>
                        <description>The /tmp directory is a world-writable directory used for temporary ﬁle storage. Verify that it has its own partition or logical volume.</description>
                  </metadata>
                  <criteria>
                        <criterion test_ref="oval:org.open-scap.f14:tst:20000" comment="Check in /etc/fstab for a /tmp mount point" />
                  </criteria>
            </definition>
            <definition class="compliance" id="oval:org.open-scap.f14:def:20001" version="1">
                  <metadata>
                        <title>Ensure that /tmp is of adequate size</title>
                        <reference ref_id="TBD" source="CCE"/>
                        <description>Because software may need to use /tmp to temporarily store large ﬁles, ensure that it is of adequate size.</description>
                  </metadata>
                  <criteria>
                        <criterion comment="Unknown test stub" test_ref="oval:org.open-scap.f14:tst:22"/>
                  </criteria>
            </definition>
            <definition class="compliance" id="oval:org.open-scap.f14:def:20002" version="1">
                  <metadata>
                        <title>Ensure that /var has its own partition or logical volume</title>
                        <reference ref_id="TBD" source="CCE"/>
                        <description>The /var directory is used by daemons and other system 
                              services to store frequently-changing data. It is not uncommon for the /var directory 
                              to contain world-writable directories, installed by other software packages.
                              Ensure that /var has its own partition or logical volume.</description>
                  </metadata>
                  <criteria>
                        <criterion test_ref="oval:org.open-scap.f14:tst:20002" comment="Check in /etc/fstab for a /var mount point" />
                  </criteria>
            </definition>
            <definition class="compliance" id="oval:org.open-scap.f14:def:20003" version="1">
                  <metadata>
                        <title>Ensure that /var is of adequate size</title>
                        <reference ref_id="TBD" source="CCE"/>
                        <description>Because the yum package manager and other software uses /var to temporarily store 
                              large ﬁles, ensure that it is of adequate size. For a modern, general-purpose system, 
                              10GB should be adequate.</description>
                  </metadata>
                  <criteria>
                        <criterion comment="Unknown test stub" test_ref="oval:org.open-scap.f14:tst:22"/>
                  </criteria>
            </definition>
            <definition class="compliance" id="oval:org.open-scap.f14:def:20004" version="1">
                  <metadata>
                        <title>Ensure that /var/log has its own partition or logical volum</title>
                        <reference ref_id="TBD" source="CCE"/>
                        <description>System logs are stored in the /var/log directory. Ensure that it has its own partition or logical volume.</description>
                  </metadata>
                  <criteria>
                        <criterion test_ref="oval:org.open-scap.f14:tst:20004" comment="Check in /etc/fstab for a /var/log mount point" />
                  </criteria>
            </definition>
            <definition class="compliance" id="oval:org.open-scap.f14:def:20005" version="1">
                  <metadata>
                        <title>Ensure that /var/log/audit has its own partition or logical volume</title>
                        <reference ref_id="TBD" source="CCE"/>
                        <description>Audit logs are stored in the /var/log/audit directory. 
                              Ensure that it has its own partition or logical volume.  Make absolutely certain 
                              that it is large enough to store all audit logs that will be created by the auditing
                              daemon.</description>
                  </metadata>
                  <criteria>
                        <criterion test_ref="oval:org.open-scap.f14:tst:20005" comment="Check in /etc/fstab for a /var/log/audit mount point" />
                  </criteria>
            </definition>
            <definition class="compliance" id="oval:org.open-scap.f14:def:20006" version="1">
                  <metadata>
                        <title>Ensure that /home has its own partition or logical volume</title>
                        <reference ref_id="TBD" source="CCE"/>
                        <description>If user home directories will be stored locally, create a separate 
                              partition for /home. If /home will be mounted from another system such as an NFS server, then 
                              creating a separate partition is not necessary at this time, and the mountpoint can 
                              instead be conﬁgured later.</description>
                  </metadata>
                  <criteria>
                        <criterion test_ref="oval:org.open-scap.f14:tst:20006" comment="Check in /etc/fstab for a /home mount point" />
                  </criteria>
            </definition>
            <definition class="compliance" id="oval:org.open-scap.f14:def:200065" version="1">
                  <metadata>
                        <title>Ensure that GPG Key for Fedora is installed</title>
                        <reference ref_id="TBD" source="CCE"/>
                        <description>The GPG key should be installed.</description>
                  </metadata>
                  <criteria>
                        <criterion test_ref="oval:org.open-scap.f14:tst:200065" comment="check gpg signature" />
                  </criteria>
            </definition>
            <definition class="compliance" id="oval:org.open-scap.f14:def:20008" version="1">
                  <metadata>
                        <title>yum-updatesd service should be disabled</title>
                        <reference ref_id="CCE-4218-4" source="CCE"/>
                        <description>The yum-updatesd service should be disabled</description>
                  </metadata>
                  <criteria>
                        <criterion comment="check that yum-updatesd service is disabled" test_ref="oval:org.open-scap.f14:tst:20008"/>
                  </criteria>
            </definition>
            <definition class="compliance" id="oval:org.open-scap.f14:def:20009" version="1">
                  <metadata>
                        <title>Automatic Update Retrieval should be scheduled with Cron</title>
                        <reference ref_id="TBD" source="CCE"/>
                        <description>Place the yum.cron script somewhere in /etc/cron.*/</description>
                  </metadata>
                  <criteria>
                        <criterion comment="check for existence of yum.cron" test_ref="oval:org.open-scap.f14:tst:20009" />
                  </criteria>
            </definition>
            <definition class="compliance" id="oval:org.open-scap.f14:def:20010" version="1">
                  <metadata>
                        <title>Ensure gpgcheck is Globally Activated</title>
                        <reference ref_id="TBD" source="CCE"/>
                        <description>The gpgcheck option should be used to ensure that checking of an RPM package’s signature always occurs prior
                              to its installation./</description>
                  </metadata>
                  <criteria>
                        <criterion comment="check value of gpgcheck in /etc/yum.conf" test_ref="oval:org.open-scap.f14:tst:20010" />
                  </criteria>
            </definition>
            <definition class="compliance" id="oval:org.open-scap.f14:def:20011" version="1">
                  <metadata>
                        <title>Ensure Package Signature Checking is Not Disabled For Any Repos</title>
                        <reference ref_id="TBD" source="CCE"/>
                        <description>To ensure that signature checking is not disabled for any repos, ensure that the following line DOES NOT
                              appear in any repo conﬁguration ﬁles in /etc/yum.repos.d or elsewhere</description>
                  </metadata>
                  <criteria>
                        <criterion comment="check value of gpgcheck=0 in /etc/yum.repos.d/*" test_ref="oval:org.open-scap.f14:tst:20011" negate="true" />
                  </criteria>
            </definition>
            <definition class="compliance" id="oval:org.open-scap.f14:def:20012" version="1">
                  <metadata>
                        <title>Ensure Repodata Signature Checking is Globally Activated</title>
                        <reference ref_id="TBD" source="CCE"/>
                        <description>The repo_gpgcheck option should be used to ensure that checking of a signature on repodata is performed prior
                              to using it.</description>
                  </metadata>
                  <criteria>
                        <criterion comment="check value of repo_gpgcheck in /etc/yum.conf" test_ref="oval:org.open-scap.f14:tst:20012" />
                  </criteria>
            </definition>
            <definition class="compliance" id="oval:org.open-scap.f14:def:20013" version="1">
                  <metadata>
                        <title>Ensure Repodata Signature Checking is Not Disabled For Any Repos</title>
                        <reference ref_id="TBD" source="CCE"/>
                        <description>To ensure that signature checking is not disabled for any repos, ensure that the following line DOES NOT
                              appear in any repo conﬁguration ﬁles in /etc/yum.repos.d or elsewhere:</description>
                  </metadata>
                  <criteria>
                        <criterion comment="check value of repo_gpgcheck=0 in /etc/yum.repos.d/*" test_ref="oval:org.open-scap.f14:tst:20013" negate="true" />
                  </criteria>
            </definition>
            <definition class="compliance" id="oval:org.open-scap.f14:def:20014" version="1">
                  <metadata>
                        <title>Install AIDE</title>
                        <reference ref_id="CCE-4209-3" source="CCE"/>
                        <description>The AIDE package should be installed</description>
                  </metadata>
                  <criteria>
                        <criterion comment="Conditions are satisfied" test_ref="oval:org.open-scap.f14:tst:20014"/>
                  </criteria>
            </definition>
            <definition class="compliance" id="oval:org.open-scap.f14:def:20015" version="1">
                  <metadata>
                        <title>Run AIDE periodically</title>
                        <reference ref_id="CCE-4209-3" source="CCE"/>
                        <description>>Setup cron to run AIDE periodically using cron.</description>
                  </metadata>
                  <criteria>
                        <criterion comment="Conditions are satisfied" test_ref="oval:org.open-scap.f14:tst:22"/>
                  </criteria>
            </definition>
            <definition class="compliance" id="oval:org.open-scap.f14:def:200155" version="1">
                  <metadata>
                        <title>Verify Package Integrity Using RPM</title>
                        <reference ref_id="CCE-4209-3" source="CCE"/>
                        <description>>Verify the integrity of installed packages by comparing the installed ﬁles with 
                              information about the ﬁles taken from the package metadata stored in the RPM
                              database.</description>
                  </metadata>
                  <criteria>
                        <criterion comment="Unknown test stub" test_ref="oval:org.open-scap.f14:tst:22"/>
                  </criteria>
            </definition>
            <definition class="compliance" id="oval:org.open-scap.f14:def:20016" version="1">
                  <metadata>
                        <title>Add nodev Option to Non-Root Local Partitions</title>
                        <reference ref_id="CCE-4249-9" source="CCE"/>
                        <description>The nodev option should be enabled for all non-root partitions.</description>
                  </metadata>
                  <criteria>
                        <criterion test_ref="oval:org.open-scap.f14:tst:20016" comment="Check options for nodev in /etc/fstab for all non-root partitions" />
                        <criterion test_ref="oval:org.open-scap.f14:tst:200162" comment="Check options for nodev in /etc/mtab for all non-root partitions" /> 
                  </criteria>
            </definition>
            <definition class="compliance" id="oval:org.open-scap.f14:def:20017" version="1">
                  <metadata>
                        <title>Add nodev Option to Removable Media Partitions</title>
                        <reference ref_id="CCE-3522-0" source="CCE"/>
                        <description>The nodev option should be enabled for all removable media.</description>
                  </metadata>
                  <criteria>
                        <!-- TODO create a udev rule and make sure it is present -->
                        <criterion comment="Unknown test stub" test_ref="oval:org.open-scap.f14:tst:22"/>
                  </criteria>
            </definition>
            <definition class="compliance" id="oval:org.open-scap.f14:def:20018" version="1">
                  <metadata>
                        <title>Add noexec Option to Removable Media Partitions</title>
                        <reference ref_id="CCE-4275-4" source="CCE"/>
                        <description>The noexec option should be enabled for all removable media.</description>
                  </metadata>
                  <criteria>
                        <!-- TODO create a udev rule and make sure it is present -->
                        <criterion comment="Unknown test stub" test_ref="oval:org.open-scap.f14:tst:22"/>
                  </criteria>
            </definition>
            <definition class="compliance" id="oval:org.open-scap.f14:def:20019" version="1">
                  <metadata>
                        <title>Add nosuid Option to Removable Media Partitions</title>
                        <reference ref_id="CCE-4042-8" source="CCE"/>
                        <description>The nosuid option should be enabled for all removable media.</description>
                  </metadata>
                  <criteria>
                        <!-- TODO create a udev rule and make sure it is present -->
                        <criterion comment="Unknown test stub" test_ref="oval:org.open-scap.f14:tst:22"/>
                  </criteria>
            </definition>
            <definition class="compliance" id="oval:org.open-scap.f14:def:20020" version="1">
                  <metadata>
                        <title>Restrict Console Device Access</title>
                        <reference ref_id="CCE-3685-5" source="CCE"/>
                        <description>Console device ownership should be restricted to root-only as appropriate.</description>
                  </metadata>
                  <criteria>
                        <criterion comment="check file /etc/security/console.perms.d/50-default.perms for &lt;console&gt; or &lt;xconsole&gt;" test_ref="oval:org.open-scap.f14:tst:20020"/>
                  </criteria>
            </definition>
            <definition class="compliance" id="oval:org.open-scap.f14:def:20021" version="1">
                  <metadata>
                        <title>Disable Modprobe Loading of USB Storage Driver</title>
                        <reference ref_id="CCE-4187-1" source="CCE"/>
                        <description>The USB device support module should not be loaded</description>
                  </metadata>
                  <criteria>
                        <criterion comment="check the usb storage support" test_ref="oval:org.open-scap.f14:tst:20021"/>
                  </criteria>
            </definition>
            <definition class="compliance" id="oval:org.open-scap.f14:def:20022" version="1">
                  <metadata>
                        <title>Remove USB Storage Driver</title>
                        <reference ref_id="CCE-4006-3" source="CCE"/>
                        <description>The USB device support module should not be installed.</description>
                  </metadata>
                  <criteria>
                        <criterion comment="Check if The USB device support module is not installed" test_ref="oval:org.open-scap.f14:tst:20022"/>
                  </criteria>
            </definition>
            <definition class="compliance" id="oval:org.open-scap.f14:def:20023" version="1">
                  <metadata>
                        <title>Disable Kernel Support for USB via Bootloader Configuration</title>
                        <reference ref_id="CCE-4173-1" source="CCE"/>
                        <description>USB kernel support should be disabled.</description>
                  </metadata>
                  <criteria>
                        <criterion comment="Conditions are satisfied" test_ref="oval:org.open-scap.f14:tst:20023"/>
                  </criteria>
            </definition>
            <definition class="compliance" id="oval:org.open-scap.f14:def:20024" version="1">
                  <metadata>
                        <title>Disable Booting from USB Devices in the BIOS</title>
                        <reference ref_id="CCE-3944-6" source="CCE"/>
                        <description>The ability to boot from USB devices should be disabled</description>
                  </metadata>
                  <criteria>
                        <criterion comment="Unknown test stub" test_ref="oval:org.open-scap.f14:tst:22"/>
                  </criteria>
            </definition>
            <definition class="compliance" id="oval:org.open-scap.f14:def:20025" version="1">
                  <metadata>
                        <title>Disable the Automounter if Possible</title>
                        <reference ref_id="CCE-4072-5" source="CCE"/>
                        <description>The autofs service is disabled.</description>
                  </metadata>
                  <criteria>
                        <criterion comment="Conditions are satisfied" test_ref="oval:org.open-scap.f14:tst:20025"/>
                  </criteria>
            </definition>
            <definition class="compliance" id="oval:org.open-scap.f14:def:20026" version="1">
                  <metadata>
                        <title>Disable GNOME Automounting if Possible</title>
                        <reference ref_id="CCE-4231-7" source="CCE"/>
                        <description>The GNOME automounter (gnome-volume-manager) should be disabled</description>
                  </metadata>
                  <criteria>
                        <criterion test_ref="oval:org.open-scap.f14:tst:20026" comment="XMLFile test"/>
                  </criteria>
            </definition>
            <definition class="compliance" id="oval:org.open-scap.f14:def:20027" version="1">
                  <metadata>
                        <title>Disable Mounting of cramfs</title>
                        <reference ref_id="CCE-4231-7" source="CCE"/>
                        <description>prevents usage of this uncommon ﬁlesystems.</description>
                  </metadata>
                  <criteria>
                        <criterion test_ref="oval:org.open-scap.f14:tst:20027" comment="check for cramfs"/>
                  </criteria>
            </definition>
            <definition class="compliance" id="oval:org.open-scap.f14:def:20028" version="1">
                  <metadata>
                        <title>Disable Mounting of freevxfs</title>
                        <reference ref_id="CCE-4231-7" source="CCE"/>
                        <description>prevents usage of this uncommon ﬁlesystems.</description>
                  </metadata>
                  <criteria>
                        <criterion test_ref="oval:org.open-scap.f14:tst:20028" comment="check for freevxfs"/>
                  </criteria>
            </definition>
            <definition class="compliance" id="oval:org.open-scap.f14:def:20029" version="1">
                  <metadata>
                        <title>Disable Mounting of jffs2</title>
                        <reference ref_id="CCE-4231-7" source="CCE"/>
                        <description>prevents usage of this uncommon ﬁlesystems.</description>
                  </metadata>
                  <criteria>
                        <criterion test_ref="oval:org.open-scap.f14:tst:20029" comment="check for jffs2"/>
                  </criteria>
            </definition>
            <definition class="compliance" id="oval:org.open-scap.f14:def:20030" version="1">
                  <metadata>
                        <title>Disable Mounting of hfs</title>
                        <reference ref_id="CCE-4231-7" source="CCE"/>
                        <description>prevents usage of this uncommon ﬁlesystems.</description>
                  </metadata>
                  <criteria>
                        <criterion test_ref="oval:org.open-scap.f14:tst:20030" comment="check for hfs"/>
                  </criteria>
            </definition>
            <definition class="compliance" id="oval:org.open-scap.f14:def:20031" version="1">
                  <metadata>
                        <title>Disable Mounting of hfsplus</title>
                        <reference ref_id="CCE-4231-7" source="CCE"/>
                        <description>prevents usage of this uncommon ﬁlesystems.</description>
                  </metadata>
                  <criteria>
                        <criterion test_ref="oval:org.open-scap.f14:tst:20031" comment="check for hfsplus"/>
                  </criteria>
            </definition>
            <definition class="compliance" id="oval:org.open-scap.f14:def:20032" version="1">
                  <metadata>
                        <title>Disable Mounting of squashfs</title>
                        <reference ref_id="CCE-4231-7" source="CCE"/>
                        <description>prevents usage of this uncommon ﬁlesystems.</description>
                  </metadata>
                  <criteria>
                        <criterion test_ref="oval:org.open-scap.f14:tst:20032" comment="check for squashfs"/>
                  </criteria>
            </definition>
            <definition class="compliance" id="oval:org.open-scap.f14:def:20033" version="1">
                  <metadata>
                        <title>Disable Mounting of udf</title>
                        <reference ref_id="CCE-4231-7" source="CCE"/>
                        <description>prevents usage of this uncommon ﬁlesystems.</description>
                  </metadata>
                  <criteria>
                        <criterion test_ref="oval:org.open-scap.f14:tst:20033" comment="check for udf"/>
                  </criteria>
            </definition>
            <definition class="compliance" id="oval:org.open-scap.f14:def:20034" version="1">
                  <metadata>
                        <title>Verify user who owns 'shadow' file</title>
                        <reference ref_id="CCE-3918-0" source="CCE"/>
                        <description>The /etc/shadow file should be owned by the appropriate user.</description>
                  </metadata>
                  <criteria>
                        <criterion test_ref="oval:org.open-scap.f14:tst:20034" comment="Check file ownership of /etc/shadow"/>
                  </criteria>
            </definition>
            <definition class="compliance" id="oval:org.open-scap.f14:def:20035" version="1">
                  <metadata>
                        <title>Verify group who owns 'shadow' file</title>
                        <reference ref_id="CCE-3988-3" source="CCE"/>
                        <description>The /etc/shadow file should be owned by the appropriate group.</description>
                  </metadata>
                  <criteria>
                        <criterion test_ref="oval:org.open-scap.f14:tst:20035"/>
                  </criteria>
            </definition>
            <definition class="compliance" id="oval:org.open-scap.f14:def:20036" version="1">
                  <metadata>
                        <title>Verify user who owns 'group' file</title>
                        <reference ref_id="CCE-3276-3" source="CCE"/>
                        <description>The /etc/group file should be owned by the appropriate user.</description>
                  </metadata>
                  <criteria>
                        <criterion test_ref="oval:org.open-scap.f14:tst:20036"/>
                  </criteria>
            </definition>
            <definition class="compliance" id="oval:org.open-scap.f14:def:20037" version="1">
                  <metadata>
                        <title>Verify group who owns 'group' file</title>
                        <reference ref_id="CCE-3883-6" source="CCE"/>
                        <description>The /etc/group file should be owned by the appropriate group.</description>
                  </metadata>
                  <criteria>
                        <criterion test_ref="oval:org.open-scap.f14:tst:20037"/>
                  </criteria>
            </definition>
            <definition class="compliance" id="oval:org.open-scap.f14:def:20038" version="1">
                  <metadata>
                        <title>Verify user who owns 'gshadow' file</title>
                        <reference ref_id="CCE-4210-1" source="CCE"/>
                        <description>The /etc/gshadow file should be owned by the appropriate user.</description>
                  </metadata>
                  <criteria>
                        <criterion test_ref="oval:org.open-scap.f14:tst:20038"/>
                  </criteria>
            </definition>
            <definition class="compliance" id="oval:org.open-scap.f14:def:20039" version="1">
                  <metadata>
                        <title>Verify group who owns 'gshadow' file</title>
                        <reference ref_id="CCE-4064-2" source="CCE"/>
                        <description>The /etc/gshadow file should be owned by the appropriate group.</description>
                  </metadata>
                  <criteria>
                        <criterion test_ref="oval:org.open-scap.f14:tst:20039"/>
                  </criteria>
            </definition>
            <definition class="compliance" id="oval:org.open-scap.f14:def:20040" version="1">
                  <metadata>
                        <title>Verify user who owns 'passwd' file</title>
                        <reference ref_id="CCE-3958-6" source="CCE"/>
                        <description>The /etc/passwd file should be owned by the appropriate user.</description>
                  </metadata>
                  <criteria>
                        <criterion test_ref="oval:org.open-scap.f14:tst:20040"/>
                  </criteria>
            </definition>
            <definition class="compliance" id="oval:org.open-scap.f14:def:20041" version="1">
                  <metadata>
                        <title>Verify group who owns 'passwd' file</title>
                        <reference ref_id="CCE-3495-9" source="CCE"/>
                        <description>The /etc/passwd file should be owned by the appropriate group.</description>
                  </metadata>
                  <criteria>
                        <criterion test_ref="oval:org.open-scap.f14:tst:20041"/>
                  </criteria>
            </definition>
            <definition class="compliance" id="oval:org.open-scap.f14:def:20042" version="1">
                  <metadata>
                        <title>Verify permissions on 'shadow' file</title>
                        <reference ref_id="CCE-4130-1" source="CCE"/>
                        <description>File permissions for /etc/shadow should be set correctly.</description>
                  </metadata>
                  <criteria>
                        <criterion test_ref="oval:org.open-scap.f14:tst:20042"/>
                  </criteria>
            </definition>
            <definition class="compliance" id="oval:org.open-scap.f14:def:20043" version="1">
                  <metadata>
                        <title>Verify permissions on 'group' file</title>
                        <reference ref_id="CCE-3967-7" source="CCE"/>
                        <description>File permissions for /etc/group should be set correctly.</description>
                  </metadata>
                  <criteria>
                        <criterion test_ref="oval:org.open-scap.f14:tst:20043"/>
                  </criteria>
            </definition>
            <definition class="compliance" id="oval:org.open-scap.f14:def:20044" version="1">
                  <metadata>
                        <title>Verify permissions on 'gshadow' file</title>
                        <reference ref_id="CCE-3932-1" source="CCE"/>
                        <description>File permissions for /etc/gshadow should be set correctly.</description>
                  </metadata>
                  <criteria>
                        <criterion test_ref="oval:org.open-scap.f14:tst:20044"/>
                  </criteria>
            </definition>
            <definition class="compliance" id="oval:org.open-scap.f14:def:20045" version="1">
                  <metadata>
                        <title>Verify permissions on 'passwd' file</title>
                        <reference ref_id="CCE-3566-7" source="CCE"/>
                        <description>File permissions for /etc/passwd should be set correctly.</description>
                  </metadata>
                  <criteria>
                        <criterion test_ref="oval:org.open-scap.f14:tst:20045"/>
                  </criteria>
            </definition>
            <definition class="compliance" id="oval:org.open-scap.f14:def:20046" version="1">
                  <metadata>
                        <title>Verify that All World-Writable Directories Have Sticky Bits Set</title>
                        <reference ref_id="CCE-3399-3" source="CCE"/>
                        <description>The sticky bit should be set for all world-writable directories.</description>
                  </metadata>
                  <criteria>
                        <criterion comment="Check all directories and make sure they are either not world writable or if they are they have the sticky bit set" test_ref="oval:org.open-scap.f14:tst:20046"/>
                  </criteria>
            </definition>
            <definition class="compliance" id="oval:org.open-scap.f14:def:20047" version="1">
                  <metadata>
                        <title>Find Unauthorized World-Writable Files</title>
                        <reference ref_id="CCE-3795-2" source="CCE"/>
                        <description>The world-write permission should be disabled for all files.</description>
                  </metadata>
                  <criteria>
                        <!-- Need a way to add exceptions to a list somehow -->
                        <criterion comment="Check all files and make sure they are not world writable" test_ref="oval:org.open-scap.f14:tst:20047" negate="true"/>
                  </criteria>
            </definition>
            <definition class="compliance" id="oval:org.open-scap.f14:def:20048" version="1">
                  <metadata>
                        <title>Find Unauthorized SGID System Executables</title>
                        <reference ref_id="CCE-4178-0" source="CCE"/>
                        <description>The sgid bit should be not set for all executable files.</description>
                  </metadata>
                  <criteria>
                        <criterion comment="Check that there are no unexpected files with sgid bit set" test_ref="oval:org.open-scap.f14:tst:20048"/>
                  </criteria>
            </definition>
            <definition class="compliance" id="oval:org.open-scap.f14:def:20049" version="1">
                  <metadata>
                        <title>Find Unauthorized SUID System Executables</title>
                        <reference ref_id="CCE-3324-1" source="CCE"/>
                        <description>The suid bit should be not set for all files.</description>
                  </metadata>
                  <criteria>
                        <criterion comment="Check that there are no unexpected files with suid bit set" test_ref="oval:org.open-scap.f14:tst:20049"/>
                  </criteria>
            </definition>
            <definition class="compliance" id="oval:org.open-scap.f14:def:20050" version="1">
                  <metadata>
                        <title>Find files unowned by a user</title>
                        <reference ref_id="CCE-4223-4" source="CCE"/>
                        <description>All files should be owned by a user</description>
                  </metadata>
                  <criteria>
                        <criterion comment="Check all files and make sure they are owned by a user" test_ref="oval:org.open-scap.f14:tst:20050"/>
                  </criteria>
            </definition>
            <definition class="compliance" id="oval:org.open-scap.f14:def:20051" version="1">
                  <metadata>
                        <title>Find files unowned by a group</title>
                        <reference ref_id="CCE-3573-3" source="CCE"/>
                        <description>All files should be owned by a group</description>
                  </metadata>
                  <criteria>
                        <criterion comment="Check all files and make sure they are owned by a group" test_ref="oval:org.open-scap.f14:tst:20051"/>
                  </criteria>
            </definition>
            <definition class="compliance" id="oval:org.open-scap.f14:def:20052" version="1">
                  <metadata>
                        <title>Find world writable directories not owned by a system account</title>
                        <reference ref_id="TBD" source="CCE"/>
                        <description>All world writable directories should be owned by a system user</description>
                  </metadata>
                  <criteria>
                        <criterion comment="Check all directories are not world writable or owned by a user with uid less than 500" test_ref="oval:org.open-scap.f14:tst:20052"/>
                  </criteria>
            </definition>
            <definition class="compliance" id="oval:org.open-scap.f14:def:20053" version="1">
                  <metadata>
                        <title>Set Daemon umask</title>
                        <reference ref_id="CCE-4220-0" source="CCE"/>
                        <description>The daemon umask should be set as appropriate</description>
                  </metadata>
                  <criteria>
                        <criterion test_ref="oval:org.open-scap.f14:tst:20053"/>
                  </criteria>
            </definition>
            <definition class="compliance" id="oval:org.open-scap.f14:def:20055" version="1">
                  <metadata>
                        <title>Disable Core Dumps</title>
                        <reference ref_id="CCE-4225-9" source="CCE"/>
                        <description>Core dumps for all users should be disabled</description>
                  </metadata>
                  <criteria>
                        <criterion comment="Are core dumps disabled" test_ref="oval:org.open-scap.f14:tst:20055"/>
                  </criteria>
            </definition>
            <definition class="compliance" id="oval:org.open-scap.f14:def:20056" version="1">
                  <metadata>
                        <title>Disable Core Dumps for setuid programs</title>
                        <reference ref_id="CCE-4247-3" source="CCE"/>
                        <description>Core dumps for setuid programs should be disabled</description>
                  </metadata>
                  <criteria>
                        <criterion comment="Are core dumps for setuid programs disabled?" test_ref="oval:org.open-scap.f14:tst:20056"/>
                  </criteria>
            </definition>
            <definition class="compliance" id="oval:org.open-scap.f14:def:20057" version="1">
                  <metadata>
                        <title>Enable ExecShield</title>
                        <reference ref_id="CCE-4168-1" source="CCE"/>
                        <description>ExecShield should be enabled</description>
                  </metadata>
                  <criteria>
                        <criterion comment="Is execshield enabled" test_ref="oval:org.open-scap.f14:tst:20057"/>
                  </criteria>
            </definition>
            <definition class="compliance" id="oval:org.open-scap.f14:def:20058" version="1">
                  <metadata>
                        <title>Enable ExecShield randomized placement of virtual memory regions</title>
                        <reference ref_id="CCE-4146-7" source="CCE"/>
                        <description>ExecShield randomized placement of virtual memory regions should be enabled</description>
                  </metadata>
                  <criteria>
                        <criterion comment="check ExecShield randomized placement of virtual memory regions" test_ref="oval:org.open-scap.f14:tst:20058"/>
                  </criteria>
            </definition>
            <definition class="compliance" id="oval:org.open-scap.f14:def:20060" version="1">
                  <metadata>
                        <title>Enable XD/NX processor support in the BIOS</title>
                        <reference ref_id="CCE-4177-2" source="CCE"/>
                        <description>The XD/NX processor feature should be enabled in the BIOS</description>
                  </metadata>
                  <criteria>
                        <criterion comment="Unknown test stub" test_ref="oval:org.open-scap.f14:tst:20060"/>
                  </criteria>
            </definition>
            <definition class="compliance" id="oval:org.open-scap.f14:def:20061" version="1">
                  <metadata>
                        <title>Restrict Root Logins to System Console</title>
                        <reference ref_id="CCE-3820-8" source="CCE"/>
                        <description>Logins through the specified virtual console interface should be enabled</description>
                  </metadata>
                  <criteria>
                        <criterion comment="Conditions are satisfied" test_ref="oval:org.open-scap.f14:tst:20061"/>
                  </criteria>
            </definition>
            <definition class="compliance" id="oval:org.open-scap.f14:def:20062" version="1">
                  <metadata>
                        <title>Restrict Root Logins to System Console</title>
                        <reference ref_id="CCE-3485-0" source="CCE"/>
                        <description>Logins through the specified virtual console device should be enabled</description>
                  </metadata>
                  <criteria>
                        <criterion comment="Conditions are satisfied" test_ref="oval:org.open-scap.f14:tst:20062"/>
                  </criteria>
            </definition>
            <definition class="compliance" id="oval:org.open-scap.f14:def:20063" version="1">
                  <metadata>
                        <title>Restrict Root Logins to System Console</title>
                        <reference ref_id="CCE-4111-1" source="CCE"/>
                        <description>Logins through the primary console device should be disabled</description>
                  </metadata>
                  <criteria>
                        <criterion comment="Conditions are satisfied" test_ref="oval:org.open-scap.f14:tst:20063"/>
                  </criteria>
            </definition>
            <definition class="compliance" id="oval:org.open-scap.f14:def:20064" version="1">
                  <metadata>
                        <title>Restrict Root Logins to System Console</title>
                        <reference ref_id="CCE-4256-4" source="CCE"/>
                        <description>Login prompts on serial ports should be disabled.</description>
                  </metadata>
                  <criteria>
                        <criterion comment="Conditions are satisfied" test_ref="oval:org.open-scap.f14:tst:20064"/>
                  </criteria>
            </definition>
            <definition class="compliance" id="oval:org.open-scap.f14:def:20065" version="1">
                  <metadata>
                        <title>Limit su Access to the wheel group</title>
                        <description>The wheel group should exist</description>
                  </metadata>
                  <criteria>
                        <criterion comment="Does wheel group exist" test_ref="oval:org.open-scap.f14:tst:20065"/>
                  </criteria>
            </definition>
            <definition class="compliance" id="oval:org.open-scap.f14:def:20066" version="1">
                  <metadata>
                        <title>Limit command Access to the Root Account</title>
                        <description>Command access to the root account should be restricted to the wheel group.</description>
                  </metadata>
                  <criteria>
                        <criterion comment="Conditions are satisfied" test_ref="oval:org.open-scap.f14:tst:20066"/>
                  </criteria>
            </definition>
            <definition class="compliance" id="oval:org.open-scap.f14:def:20067" version="1">
                  <metadata>
                        <title>Configure sudo to Improve Auditing of Root Access</title>
                        <reference ref_id="CCE-4044-4" source="CCE"/>
                        <description>Sudo privileges should be granted to the wheel group</description>
                  </metadata>
                  <criteria>
                        <criterion comment="Conditions are satisfied" test_ref="oval:org.open-scap.f14:tst:20067"/>
                  </criteria>
            </definition>
            <definition class="compliance" id="oval:org.open-scap.f14:def:20068" version="1">
                  <metadata>
                        <title>Block Shell and Login Access for Non-Root System Accounts</title>
                        <reference ref_id="CCE-3987-5" source="CCE"/>
                        <description>Login access to non-root system accounts should be disabled</description>
                  </metadata>
                  <criteria>
                        <criterion comment="check /etc/passwd for /sbin/nologin on non root system accounts" test_ref="oval:org.open-scap.f14:tst:20068" negate="true"/>
                  </criteria>
            </definition>
            <definition class="compliance" id="oval:org.open-scap.f14:def:20069" version="1">
                  <metadata>
                        <title>Verify that No Accounts Have Empty Password Fields</title>
                        <reference ref_id="CCE-4238-2" source="CCE"/>
                        <description>Login access to accounts without passwords should be disabled</description>
                  </metadata>
                  <criteria>
                        <criterion comment="Conditions are satisfied" test_ref="oval:org.open-scap.f14:tst:20069"/>
                  </criteria>
            </definition>
            <definition class="compliance" id="oval:org.open-scap.f14:def:200695" version="1">
                  <metadata>
                        <title>Verify that All Account Password Hashes are Shadowed</title>
                        <reference ref_id="CCE-4238-2" source="CCE"/>
                        <description>Check that passwords are shadowed</description>
                  </metadata>
                  <criteria>
                        <criterion comment="Conditions are satisfied" test_ref="oval:org.open-scap.f14:tst:200695"/>
                  </criteria>
            </definition>
            <definition class="compliance" id="oval:org.open-scap.f14:def:20070" version="1">
                  <metadata>
                        <title>Verify that No Non-Root Accounts Have UID 0</title>
                        <reference ref_id="CCE-4009-7" source="CCE"/>
                        <description>Anonymous root logins are disabled</description>
                  </metadata>
                  <criteria>
                        <criterion comment="Conditions are satisfied" test_ref="oval:org.open-scap.f14:tst:20070"/>
                  </criteria>
            </definition>
            <definition class="compliance" id="oval:org.open-scap.f14:def:20071" version="1">
                  <metadata>
                        <title>Set Password Expiration Parameters</title>
                        <reference ref_id="CCE-4154-1" source="CCE"/>
                        <description>The password minimum length should be set appropriately</description>
                  </metadata>
                  <criteria>
                        <criterion test_ref="oval:org.open-scap.f14:tst:20071"/>
                  </criteria>
            </definition>
            <definition class="compliance" id="oval:org.open-scap.f14:def:20072" version="1">
                  <metadata>
                        <title>Set Password Expiration Parameters</title>
                        <reference ref_id="CCE-4180-6" source="CCE"/>
                        <description>The "minimum password age" policy should meet minimum requirements. </description>
                  </metadata>
                  <criteria>
                        <criterion test_ref="oval:org.open-scap.f14:tst:20072"/>
                  </criteria>
            </definition>
            <definition class="compliance" id="oval:org.open-scap.f14:def:20073" version="1">
                  <metadata>
                        <title>Set Password Expiration Parameters</title>
                        <reference ref_id="CCE-4092-3" source="CCE"/>
                        <description>The "maximum password age" policy should meet minimum requirements. </description>
                  </metadata>
                  <criteria>
                        <criterion test_ref="oval:org.open-scap.f14:tst:20073"/>
                  </criteria>
            </definition>
            <definition class="compliance" id="oval:org.open-scap.f14:def:20074" version="1">
                  <metadata>
                        <title>Set Password Expiration Parameters</title>
                        <reference ref_id="CCE-4097-2" source="CCE"/>
                        <description>The password warn age should be set appropriately</description>
                  </metadata>
                  <criteria>
                        <criterion test_ref="oval:org.open-scap.f14:tst:20074"/>
                  </criteria>
            </definition>
            <definition class="compliance" id="oval:org.open-scap.f14:def:20075" version="1">
                  <metadata>
                        <title>Remove Legacy + Entries from Password Files</title>
                        <description>NIS file inclusions should be set appropriately in the /etc/shadow file</description>
                  </metadata>
                  <criteria>
                        <criterion comment="Conditions are satisfied" test_ref="oval:org.open-scap.f14:tst:20075"/>
                  </criteria>
            </definition>
            <definition class="compliance" id="oval:org.open-scap.f14:def:20076" version="1">
                  <metadata>
                        <title>Remove Legacy + Entries from Password Files</title>
                        <description>NIS file inclusions should be set appropriately in the /etc/group file</description>
                  </metadata>
                  <criteria>
                        <criterion comment="Conditions are satisfied" test_ref="oval:org.open-scap.f14:tst:20076"/>
                  </criteria>
            </definition>
            <definition class="compliance" id="oval:org.open-scap.f14:def:20077" version="1">
                  <metadata>
                        <title>Remove Legacy + Entries from Password Files</title>
                        <reference ref_id="CCE-4114-5" source="CCE"/>
                        <description>NIS file inclusions should be set appropriately in the /etc/passwd file</description>
                  </metadata>
                  <criteria>
                        <criterion comment="Conditions are satisfied" test_ref="oval:org.open-scap.f14:tst:20077"/>
                  </criteria>
            </definition>
            <definition class="compliance" id="oval:org.open-scap.f14:def:20078" version="1">
                  <metadata>
                        <title>Set Password Quality Requirements</title>
                        <reference ref_id="CCE-3762-2" source="CCE"/>
                        <description>The password strength should meet minimum requirements using pam_cracklib</description>
                  </metadata>
                  <criteria operator="AND" comment="Conditions for retry, minlen, dcredit, ucredit, ocredit, lcredit and difok are satisfied">
                        <criterion comment="Test retry" test_ref="oval:org.open-scap.f14:tst:200781"/>
                        <criterion comment="Test minlen" test_ref="oval:org.open-scap.f14:tst:200782"/>
                        <criterion comment="Test dcredit" test_ref="oval:org.open-scap.f14:tst:200783"/>
                        <criterion comment="Test ucredit" test_ref="oval:org.open-scap.f14:tst:200784"/>
                        <criterion comment="Test ocredit" test_ref="oval:org.open-scap.f14:tst:200785"/>
                        <criterion comment="Test lcredit" test_ref="oval:org.open-scap.f14:tst:200786"/>
                        <criterion comment="Test difok" test_ref="oval:org.open-scap.f14:tst:200787"/>
                  </criteria>
            </definition>
            <definition class="compliance" id="oval:org.open-scap.f14:def:20079" version="1">
                  <metadata>
                        <title>Set Password Quality Requirements</title>
                        <reference ref_id="CCE-3762-2" source="CCE"/>
                        <description>The password strength should meet minimum requirements using pam_passwdqc</description>
                  </metadata>
                  <criteria>
                        <criterion comment="Unknown test stub" test_ref="oval:org.open-scap.f14:tst:20079"/>
                  </criteria>
            </definition>
            <definition class="compliance" id="oval:org.open-scap.f14:def:20080" version="1">
                  <metadata>
                        <title>Set Lockouts for Failed Password Attempts</title>
                        <reference ref_id="CCE-3410-8" source="CCE"/>
                        <description>The "account lockout threshold" policy should meet minimum requirements.</description>
                  </metadata>
                  <criteria>
                        <criteria comment="check that pam_tally2 authorization module is configured correctly" operator="OR">
                            <criteria comment="unlock_time is not present">
                                <criterion comment="check unlock_time is 0" test_ref="oval:org.open-scap.f14:tst:200800"/>
                                <criteria comment="check that pam_tally2 authorization module is configured correctly" operator="OR">
                                    <criterion comment="check system-auth pam_tally2 excluding unlock_time" test_ref="oval:org.open-scap.f14:tst:2008011"/>
                                    <criterion comment="check system-auth pam_tally2 excluding unlock_time" test_ref="oval:org.open-scap.f14:tst:2008012"/>
                                </criteria>
                            </criteria>
                            <criteria comment="unlock_time is present">
                                <criterion comment="check unlock_time is not 0 (by checking for zero and negating)" test_ref="oval:org.open-scap.f14:tst:200800" negate="true"/>
                                <criteria comment="check that pam_tally2 authorization module is configured correctly" operator="OR">
                                    <criterion comment="check system-auth pam_tally2 including unlock_time" test_ref="oval:org.open-scap.f14:tst:2008011"/>
                                    <criterion comment="check system-auth pam_tally2 including unlock_time" test_ref="oval:org.open-scap.f14:tst:2008012"/>
                                    <criterion comment="check system-auth pam_tally2 including unlock_time" test_ref="oval:org.open-scap.f14:tst:2008013"/>
                                </criteria>
                            </criteria>
                        </criteria>
                        <criterion comment="check that pam_tally2 account module is configured correctly" test_ref="oval:org.open-scap.f14:tst:200803"/>
                  </criteria>
            </definition>
            <definition class="compliance" id="oval:org.open-scap.f14:def:200805" version="1">
                  <metadata>
                        <title>Do not leak information on authorization failure</title>
                        <reference ref_id="TBD" source="CCE"/>
                        <description>Authorization failures should not alert attackers as to what went wrong.</description>
                  </metadata>
                  <criteria>
                        <criterion comment="Unknown test stub (use required instead of sufficient)" test_ref="oval:org.open-scap.f14:tst:200805"/>
                  </criteria>
            </definition>
            <definition class="compliance" id="oval:org.open-scap.f14:def:200806" version="1">
                  <metadata>
                        <title>Do not log authorization failures and successes</title>
                        <reference ref_id="TBD" source="CCE"/>
                        <description>Remove pam_succeed_if module with quiet option and remove auth pam_deny line.</description>
                  </metadata>
                  <criteria>
                        <criterion comment="Unknown test stub (check that pam_succeed_if is not there with quiet option)" test_ref="oval:org.open-scap.f14:tst:2008061"/>
                        <criterion comment="Unknown test stub (check that pam_deny is not there)" test_ref="oval:org.open-scap.f14:tst:2008062"/>
                  </criteria>
            </definition>
            <definition class="compliance" id="oval:org.open-scap.f14:def:20081" version="1">
                  <metadata>
                        <title>Restrict Execution of userhelper to Console Users</title>
                        <reference ref_id="CCE-4185-5" source="CCE"/>
                        <description>The /usr/sbin/userhelper file should be owned by the appropriate group.</description>
                  </metadata>
                  <criteria operator="AND">
                        <criterion comment="test group owner of /usr/sbin/userhelper file" test_ref="oval:org.open-scap.f14:tst:20081"/>
                        <criterion comment="test group existence" test_ref="oval:org.open-scap.f14:tst:200811"/>
                  </criteria>
            </definition>
            <definition class="compliance" id="oval:org.open-scap.f14:def:20082" version="1">
                  <metadata>
                        <title>Restrict Execution of userhelper to Console Users</title>
                        <reference ref_id="CCE-3952-9" source="CCE"/>
                        <description>File permissions for /usr/sbin/userhelper should be set correctly.</description>
                  </metadata>
                  <criteria>
                        <criterion comment="check permissions of /usr/sbin/userhelper file" test_ref="oval:org.open-scap.f14:tst:20082"/>
                  </criteria>
            </definition>
            <definition class="compliance" id="oval:org.open-scap.f14:def:20083" version="1">
                  <metadata>
                        <title>Set Password hashing algorithm</title>
                        <reference ref_id="TBD" source="CCE"/>
                        <description>The password hashing algorithm should be set correctly.</description>
                  </metadata>
                  <criteria operator="ONE">
                        <criteria>
                              <criterion comment="check that desired hashing algorithm is MD5" test_ref="oval:org.open-scap.f14:tst:200831"/>
                              <criterion comment="Make sure /etc/login.defs is set to use md5" test_ref="oval:org.open-scap.f14:tst:200832"/>
                        </criteria>
                        <criteria>
                              <criterion comment="check that desired hashing algorithm is not MD5 (negate previous test)" test_ref="oval:org.open-scap.f14:tst:200831" negate="true"/>
                              <criterion comment="Make sure /etc/login.defs is not set to use md5 (negate previous test)" test_ref="oval:org.open-scap.f14:tst:200832" negate="true"/>
                              <criterion comment="Make sure /etc/login.defs is set to use ENCRYPT_METHOD" test_ref="oval:org.open-scap.f14:tst:200833"/>
                              <criterion comment="Make sure /etc/pam.d/system-auth is set to use hashing algorithm" test_ref="oval:org.open-scap.f14:tst:200834"/>
                              <criterion comment="Make sure /etc/libuser.conf is set to use hashing algorithm as crypt_style" test_ref="oval:org.open-scap.f14:tst:200835"/>
                        </criteria>
      		</criteria>
            </definition>
            <definition class="compliance" id="oval:org.open-scap.f14:def:20084" version="1">
                  <metadata>
                        <title>Limit password reuse</title>
                        <reference ref_id="TBD" source="CCE"/>
                        <description>The passwords to remember should be set correctly.</description>
                  </metadata>
                  <criteria operator="ONE">
                        <criteria>
                              <criterion test_ref="oval:org.open-scap.f14:tst:200841" comment="remember parameter is set to 0"/>
                        </criteria>
                        <criteria>
                              <criterion test_ref="oval:org.open-scap.f14:tst:200841" comment="remember parameter is set to 0 (note this is negated)" negate="true"/>
                              <criterion comment="check the /etc/pam.d/system-auth password module has a remember option set appropriately" test_ref="oval:org.open-scap.f14:tst:200842"/>
                        </criteria>
                  </criteria>
            </definition>
            <definition class="compliance" id="oval:org.open-scap.f14:def:20085" version="1">
                  <metadata>
                        <title>Ensure that No Dangerous Directories Exist in Root's Path</title>
                        <reference ref_id="CCE-3301-9" source="CCE"/>
                        <description>The PATH variable should be set correctly for user root</description>
                  </metadata>
                  <criteria operator="OR" negate="true" comment="(not OR) means PATH does not start with : or . AND PATH does not start with : or . AND PATH does not contain :: or :.:">
                        <criterion comment="PATH starts with : or ." test_ref="oval:org.open-scap.f14:tst:200851"/>
                        <criterion comment="PATH ends with : or ." test_ref="oval:org.open-scap.f14:tst:200852"/>
                        <criterion comment="PATH contains :: or :.:" test_ref="oval:org.open-scap.f14:tst:200853"/>
                  </criteria>
            </definition>
            <definition class="compliance" id="oval:org.open-scap.f14:def:200855" version="1">
                  <metadata>
                        <title>Write permissions are disabled for group and other in all directories in Root's Path</title>
                        <reference ref_id="TBD" source="CCE"/>
                        <description>Check each directory in root's path and make use it does not grant write permission to group and other</description>
                  </metadata>
                  <criteria>
                        <criterion comment="Check that write permission to group and other in root's path is denied" test_ref="oval:org.open-scap.f14:tst:200855"/>
                  </criteria>
            </definition>
            <definition class="compliance" id="oval:org.open-scap.f14:def:20086" version="1">
                  <metadata>
                        <title>Ensure that User Home Directories are not Group-Writable or World-Readable</title>
                        <reference ref_id="CCE-4090-7" source="CCE"/>
                        <description>File permissions should be set correctly for the home directories for all user accounts.</description>
                  </metadata>
                  <criteria comment="Both criterion are negated to get desired result">
                        <criterion comment="Home directories are group writable" test_ref="oval:org.open-scap.f14:tst:200861"/>
                        <criterion comment="Home directories are world readable" test_ref="oval:org.open-scap.f14:tst:200862"/> 
                  </criteria>
            </definition>
            <definition class="compliance" id="oval:org.open-scap.f14:def:20087" version="1">
                  <metadata>
                        <title>Ensure that Users Have Sensible Umask Values set for bash</title>
                        <reference ref_id="CCE-3844-8" source="CCE"/>
                        <description>The default umask for all users should be set correctly for the bash shell</description>
                  </metadata>
                  <criteria>
                        <criterion test_ref="oval:org.open-scap.f14:tst:20087"/>
                  </criteria>
            </definition>
            <definition class="compliance" id="oval:org.open-scap.f14:def:20088" version="1">
                  <metadata>
                        <title>Ensure that Users Have Sensible Umask Values set for csh</title>
                        <reference ref_id="CCE-4227-5" source="CCE"/>
                        <description>The default umask for all users should be set correctly for the csh shell</description>
                  </metadata>
                  <criteria>
                        <criterion test_ref="oval:org.open-scap.f14:tst:20088"/>
                  </criteria>
            </definition>
            <definition class="compliance" id="oval:org.open-scap.f14:def:20091" version="1">
                  <metadata>
                        <title>Check for existance of .netrc file</title>
                        <reference ref_id="TBD" source="CCE"/>
                        <description>No user directory should contain file .netrc</description>
                  </metadata>
                  <criteria>
                        <criterion comment="Unknown test stub" test_ref="oval:org.open-scap.f14:tst:22"/>
                  </criteria>
            </definition>
            <definition class="compliance" id="oval:org.open-scap.f14:def:20092" version="1">
                  <metadata>
                        <title>Set Boot Loader Password</title>
                        <reference ref_id="CCE-4144-2" source="CCE"/>
                        <description>The /etc/grub.conf file should be owned by the appropriate user.</description>
                  </metadata>
                  <criteria>
                        <criterion test_ref="oval:org.open-scap.f14:tst:20092"/>
                  </criteria>
            </definition>
            <definition class="compliance" id="oval:org.open-scap.f14:def:20093" version="1">
                  <metadata>
                        <title>Set Boot Loader Password</title>
                        <reference ref_id="CCE-4197-0" source="CCE"/>
                        <description>The /etc/grub.conf file should be owned by the appropriate group.</description>
                  </metadata>
                  <criteria>
                        <criterion test_ref="oval:org.open-scap.f14:tst:20093"/>
                  </criteria>
            </definition>
            <definition class="compliance" id="oval:org.open-scap.f14:def:20094" version="1">
                  <metadata>
                        <title>Set Boot Loader Password</title>
                        <reference ref_id="CCE-3923-0" source="CCE"/>
                        <description>File permissions for /etc/grub.conf should be set correctly.</description>
                  </metadata>
                  <criteria>
                        <criterion test_ref="oval:org.open-scap.f14:tst:20094"/>
                  </criteria>
            </definition>
            <definition class="compliance" id="oval:org.open-scap.f14:def:20095" version="1">
                  <metadata>
                        <title>Set Boot Loader Password</title>
                        <reference ref_id="CCE-3818-2" source="CCE"/>
                        <description>The grub boot loader should have password protection enabled</description>
                  </metadata>
                  <criteria>
                        <criterion comment="Conditions are satisfied" test_ref="oval:org.open-scap.f14:tst:20095"/>
                  </criteria>
            </definition>
            <definition class="compliance" id="oval:org.open-scap.f14:def:20096" version="1">
                  <metadata>
                        <title>Require Authentication for Single-User Mode</title>
                        <reference ref_id="CCE-4241-6" source="CCE"/>
                        <description>The requirement for a password to boot into single-user mode should be configured correctly.</description>
                  </metadata>
                  <criteria>
                        <criterion comment="Conditions are satisfied" test_ref="oval:org.open-scap.f14:tst:20096"/>
                  </criteria>
            </definition>
            <definition class="compliance" id="oval:org.open-scap.f14:def:20097" version="1">
                  <metadata>
                        <title>Disable Interactive Boot</title>
                        <reference ref_id="CCE-4245-7" source="CCE"/>
                        <description>The ability for users to perform interactive startups should be disabled.</description>
                  </metadata>
                  <criteria>
                        <criterion test_ref="oval:org.open-scap.f14:tst:20097"/>
                  </criteria>
            </definition>
            <definition class="compliance" id="oval:org.open-scap.f14:def:20098" version="1">
                  <metadata>
                        <title>Implement Inactivity Time-out for Login Shells</title>
                        <reference ref_id="CCE-3689-7" source="CCE"/>
                        <description>The idle time-out value for the default /bin/tcsh shell should meet the minimum requirements.</description>
                  </metadata>
                  <criteria>
                        <criterion test_ref="oval:org.open-scap.f14:tst:20098"/>
                  </criteria>
            </definition>
            <definition class="compliance" id="oval:org.open-scap.f14:def:20099" version="1">
                  <metadata>
                        <title>Implement Inactivity Time-out for Login Shells</title>
                        <reference ref_id="CCE-3707-7" source="CCE"/>
                        <description>The idle time-out value for the default /bin/bash shell should meet the minimum requirements.</description>
                  </metadata>
                  <criteria>
                        <criterion comment="Unknown test stub" test_ref="oval:org.open-scap.f14:tst:20099"/>
                  </criteria>
            </definition>
            <definition class="compliance" id="oval:org.open-scap.f14:def:20100" version="1">
                  <metadata>
                        <title>Configure GUI Screen Locking</title>
                        <reference ref_id="CCE-3315-9" source="CCE"/>
                        <description>The allowed period of inactivity gnome desktop lockout should be configured correctly.</description>
                  </metadata>
                  <criteria>
                        <criterion comment="check value of idle_delay in GCONF" test_ref="oval:org.open-scap.f14:tst:20100"/>
                  </criteria>
            </definition>
            <definition class="compliance" id="oval:org.open-scap.f14:def:201005" version="1">
                  <metadata>
                        <title>Implement idle activation of screen saver</title>
                        <reference ref_id="TBD" source="CCE"/>
                        <description>Idle activation of the screen saver should be enabled.</description>
                  </metadata>
                  <criteria>
                        <criterion comment="check value of idle_activation_enabled in GCONF" test_ref="oval:org.open-scap.f14:tst:201005"/>
                  </criteria>
            </definition>
            <definition class="compliance" id="oval:org.open-scap.f14:def:201006" version="1">
                  <metadata>
                        <title>Implement idle activation of screen lock</title>
                        <reference ref_id="TBD" source="CCE"/>
                        <description>Idle activation of the screen lock should be enabled.</description>
                  </metadata>
                  <criteria>
                        <criterion comment="check value of lock_enabled in GCONF" test_ref="oval:org.open-scap.f14:tst:201006"/>
                  </criteria>
            </definition>
            <definition class="compliance" id="oval:org.open-scap.f14:def:201007" version="1">
                  <metadata>
                        <title>Implement blank screen saver</title>
                        <reference ref_id="TBD" source="CCE"/>
                        <description>The screen saver should be blank.</description>
                  </metadata>
                  <criteria>
                        <criterion comment="Unknown test stub" test_ref="oval:org.open-scap.f14:tst:201007"/>
                  </criteria>
            </definition>
            <definition class="compliance" id="oval:org.open-scap.f14:def:20101" version="1">
                  <metadata>
                        <title>Configure GUI Screen Locking</title>
                        <reference ref_id="CCE-3910-7" source="CCE"/>
                        <description>The vlock package should be installed</description>
                  </metadata>
                  <criteria>
                        <criterion comment="Conditions are satisfied" test_ref="oval:org.open-scap.f14:tst:20101"/>
                  </criteria>
            </definition>
            <definition class="compliance" id="oval:org.open-scap.f14:def:20102" version="1">
                  <metadata>
                        <title>Modify the System Login Banner</title>
                        <reference ref_id="CCE-4060-0" source="CCE"/>
                        <description>The system login banner text should be set correctly.</description>
                  </metadata>
                  <criteria>
                        <criterion comment="/etc/issue is set appropriately" test_ref="oval:org.open-scap.f14:tst:20102"/>
                  </criteria>
            </definition>
            <definition class="compliance" id="oval:org.open-scap.f14:def:20103" version="1">
                  <metadata>
                        <title>Implement a GUI Warning Banner</title>
                        <reference ref_id="CCE-4188-9" source="CCE"/>
                        <description>The direct gnome login warning banner should be set correctly.</description>
                  </metadata>
                  <criteria>
                        <criterion comment="Check that the GConf setting for the login banner is set correctly" test_ref="oval:org.open-scap.f14:tst:20103"/>
                  </criteria>
            </definition>
            <definition class="compliance" id="oval:org.open-scap.f14:def:201035" version="1">
                  <metadata>
                        <title>Ensure SELinux is Properly Enabled</title>
                        <reference ref_id="TBD" source="CCE"/>
                        <description>Check output of /usr/sbin/sestatus.</description>
                  </metadata>
                  <criteria>
                        <criterion comment="Unknown test stub" test_ref="oval:org.open-scap.f14:tst:22"/>
                  </criteria>
            </definition>
            <definition class="compliance" id="oval:org.open-scap.f14:def:20104" version="1">
                  <metadata>
                        <title>Enable SELinux</title>
                        <reference ref_id="CCE-3977-6" source="CCE"/>
                        <description>SELinux should be enabled</description>
                  </metadata>
                  <criteria>
                        <criterion test_ref="oval:org.open-scap.f14:tst:20104"/>
                  </criteria>
            </definition>
            <definition class="compliance" id="oval:org.open-scap.f14:def:20105" version="1">
                  <metadata>
                        <title>Enable SELinux enforcing</title>
                        <reference ref_id="TBD" source="CCE"/>
                        <description>SELinux should be enforcing in the bootloader</description>
                  </metadata>
                  <criteria>
                        <criterion test_ref="oval:org.open-scap.f14:tst:20105"/>
                  </criteria>
            </definition>
            <definition class="compliance" id="oval:org.open-scap.f14:def:20106" version="1">
                  <metadata>
                        <title>Enable SELinux state</title>
                        <reference ref_id="TBD" source="CCE"/>
                        <description>The SELinux state should be set appropriately.</description>
                  </metadata>
                  <criteria>
                        <criterion test_ref="oval:org.open-scap.f14:tst:20106"/>
                  </criteria>
            </definition>
            <definition class="compliance" id="oval:org.open-scap.f14:def:20107" version="1">
                  <metadata>
                        <title>Enable SELinux</title>
                        <reference ref_id="CCE-3624-4" source="CCE"/>
                        <description>The SELinux policy should be set appropriately.</description>
                  </metadata>
                  <criteria>
                        <criterion test_ref="oval:org.open-scap.f14:tst:20107"/>
                  </criteria>
            </definition>
            <definition class="compliance" id="oval:org.open-scap.f14:def:20108" version="1">
                  <metadata>
                        <title>Disable and Remove SETroubleshoot if Possible</title>
                        <reference ref_id="CCE-4148-3" source="CCE"/>
                        <description>The setroubleshoot package should be uninstalled.</description>
                  </metadata>
                  <criteria>
                        <criterion comment="Conditions are satisfied" test_ref="oval:org.open-scap.f14:tst:20108"/>
                  </criteria>
            </definition>
            <definition class="compliance" id="oval:org.open-scap.f14:def:20109" version="1">
                  <metadata>
                        <title>Disable and Remove SETroubleshoot if Possible</title>
                        <reference ref_id="CCE-4254-9" source="CCE"/>
                        <description>The setroubleshoot service should be disabled.</description>
                  </metadata>
                  <criteria operator="OR" comment="The setroubleshoot package should be uninstalled or conditions are met">
                        <extend_definition definition_ref="oval:org.open-scap.f14:def:20108" comment="setroubleshoot is not installed"/>
                        <criterion comment="Conditions are satisfied" test_ref="oval:org.open-scap.f14:tst:20109"/>
                  </criteria>
            </definition>
            <definition class="compliance" id="oval:org.open-scap.f14:def:20110" version="1">
                  <metadata>
                        <title>Disable MCS Translation Service (mcstrans) if Possible</title>
                        <reference ref_id="CCE-3668-1" source="CCE"/>
                        <description>The mcstrans service should be disabled.</description>
                  </metadata>
                  <criteria>
                        <criterion comment="Conditions are satisfied" test_ref="oval:org.open-scap.f14:tst:20110"/>
                  </criteria>
            </definition>
            <definition class="compliance" id="oval:org.open-scap.f14:def:201115" version="1">
                  <metadata>
                        <title>Check for Unconfined Daemons</title>
                        <reference ref_id="TBD" source="CCE"/>
                        <description>Check for device ﬁle that is not labeled.</description>
                  </metadata>
                  <criteria>
                        <criterion comment="Unknown test stub" test_ref="oval:org.open-scap.f14:tst:22"/>
                  </criteria>
            </definition>
            <definition class="compliance" id="oval:org.open-scap.f14:def:20111" version="1">
                  <metadata>
                        <title>Restorecon Service (restorecond)</title>
                        <reference ref_id="CCE-4129-3" source="CCE"/>
                        <description>The restorecond service should be disabled.</description>
                  </metadata>
                  <criteria>
                        <criterion comment="Conditions are satisfied" test_ref="oval:org.open-scap.f14:tst:20111"/>
                  </criteria>
            </definition>

	    <!-- BEGIN -->

            <definition class="compliance" id="oval:org.open-scap.f14:def:20112" version="1">
                  <metadata>
                        <title>Network Parameters for Hosts Only</title>
                        <reference ref_id="CCE-4151-7" source="CCE"/>
                        <description>The default setting for sending ICMP redirects should be disabled for network interfaces.</description>
			<tested_by name="dkopecek" time="1282130094"/>
                  </metadata>
                  <criteria operator="AND">
		    <criterion test_ref="oval:org.open-scap.f14:tst:201120"/>
		    <criteria operator="OR">
                        <criterion test_ref="oval:org.open-scap.f14:tst:201121" negate="true"/>
			<criterion test_ref="oval:org.open-scap.f14:tst:201122"/>
		    </criteria>
                  </criteria>
            </definition>

	    <!-- ^^^ ok ^^^ -->

            <definition class="compliance" id="oval:org.open-scap.f14:def:20113" version="1">
                  <metadata>
                        <title>Network Parameters for Hosts Only</title>
                        <reference ref_id="CCE-4155-8" source="CCE"/>
                        <description>Sending ICMP redirects should be disabled for all interfaces.</description>
			<tested_by name="dkopecek" time="1282130094"/>
                  </metadata>
                  <criteria operator="AND">
		    <criterion test_ref="oval:org.open-scap.f14:tst:201130"/>
		    <criteria operator="OR">
		      <criterion test_ref="oval:org.open-scap.f14:tst:201131" negate="true"/>
		      <criterion test_ref="oval:org.open-scap.f14:tst:201132"/>
		    </criteria>
                  </criteria>
            </definition>

            <definition class="compliance" id="oval:org.open-scap.f14:def:20114" version="1">
                  <metadata>
                        <title>Network Parameters for Hosts Only</title>
                        <reference ref_id="CCE-3561-8" source="CCE"/>
                        <description>IP forwarding should be disabled.</description>
			<tested_by name="dkopecek" time="1282130094"/>
                  </metadata>
                  <criteria operator="AND">
		    <criterion test_ref="oval:org.open-scap.f14:tst:201140"/>
		    <criteria operator="OR">
		      <criterion test_ref="oval:org.open-scap.f14:tst:201141" negate="true"/>
		      <criterion test_ref="oval:org.open-scap.f14:tst:201142"/>
		    </criteria>
                  </criteria>
            </definition>

            <definition class="compliance" id="oval:org.open-scap.f14:def:20115" version="1">
                  <metadata>
                        <title>Network Parameters for Hosts and Routers</title>
                        <reference ref_id="CCE-4236-6" source="CCE"/>
                        <description>Accepting source routed packets should be enabled or disabled for all interfaces as appropriate.</description>
                  </metadata>
                  <criteria operator="AND">
		    <criterion test_ref="oval:org.open-scap.f14:tst:201150"/>
		    <criteria operator="OR">
		      <criterion test_ref="oval:org.open-scap.f14:tst:201151" negate="true"/>
		      <criterion test_ref="oval:org.open-scap.f14:tst:201152"/>
		    </criteria>
                  </criteria>
            </definition>

            <definition class="compliance" id="oval:org.open-scap.f14:def:20116" version="1">
                  <metadata>
                        <title>Network Parameters for Hosts and Routers</title>
                        <reference ref_id="CCE-4217-6" source="CCE"/>
                        <description>Accepting ICMP redirects should be enabled or disabled for all interfaces as appropriate.</description>
                  </metadata>
                  <criteria operator="AND">
		    <criterion test_ref="oval:org.open-scap.f14:tst:201160"/>
		    <criteria operator="OR">
		      <criterion test_ref="oval:org.open-scap.f14:tst:201161" negate="true"/>
		      <criterion test_ref="oval:org.open-scap.f14:tst:201162"/>
		    </criteria>
                  </criteria>
            </definition>

            <definition class="compliance" id="oval:org.open-scap.f14:def:20117" version="1">
                  <metadata>
                        <title>Network Parameters for Hosts and Routers</title>
                        <reference ref_id="CCE-3472-8" source="CCE"/>
                        <description>Accepting "secure" ICMP redirects (those from gateways listed in the default gateways list) should be enabled or disabled for all interfaces as appropriate.</description>
                  </metadata>
                  <criteria operator="AND">
		    <criterion test_ref="oval:org.open-scap.f14:tst:201170"/>
		    <criteria operator="OR">
		      <criterion test_ref="oval:org.open-scap.f14:tst:201171" negate="true"/>
		      <criterion test_ref="oval:org.open-scap.f14:tst:201172"/>
		    </criteria>
                  </criteria>
            </definition>

            <definition class="compliance" id="oval:org.open-scap.f14:def:20118" version="1">
                  <metadata>
                        <title>Network Parameters for Hosts and Routers</title>
                        <reference ref_id="CCE-4320-8" source="CCE"/>
                        <description>Logging of "martian" packets (those with impossible addresses) should be enabled or disabled for all interfaces as appropriate.</description>
                  </metadata>
                  <criteria operator="AND">
		    <criterion test_ref="oval:org.open-scap.f14:tst:201180"/>
		    <criteria operator="OR">
		      <criterion test_ref="oval:org.open-scap.f14:tst:201181" negate="true"/>
		      <criterion test_ref="oval:org.open-scap.f14:tst:201182"/>
		    </criteria>
                  </criteria>
            </definition>

            <definition class="compliance" id="oval:org.open-scap.f14:def:20119" version="1">
                  <metadata>
                        <title>Network Parameters for Hosts and Routers</title>
                        <reference ref_id="CCE-4091-5" source="CCE"/>
                        <description>The default setting for accepting source routed packets should be enabled or disabled for network interfaces as appropriate.</description>
                  </metadata>
                  <criteria operator="AND">
		    <criterion test_ref="oval:org.open-scap.f14:tst:201190"/>
		    <criteria operator="OR">
		      <criterion test_ref="oval:org.open-scap.f14:tst:201191" negate="true"/>
		      <criterion test_ref="oval:org.open-scap.f14:tst:201192"/>
		    </criteria>
                  </criteria>
            </definition>

            <definition class="compliance" id="oval:org.open-scap.f14:def:20120" version="1">
                  <metadata>
                        <title>Network Parameters for Hosts and Routers</title>
                        <reference ref_id="CCE-4186-3" source="CCE"/>
                        <description>The default setting for accepting ICMP redirects should be enabled or disabled for network interfaces as appropriate.</description>
                  </metadata>
                  <criteria operator="AND">
		    <criterion test_ref="oval:org.open-scap.f14:tst:201200"/>
		    <criteria operator="OR">
		      <criterion test_ref="oval:org.open-scap.f14:tst:201201" negate="true"/>
		      <criterion test_ref="oval:org.open-scap.f14:tst:201202"/>
		    </criteria>
                  </criteria>
            </definition>

            <definition class="compliance" id="oval:org.open-scap.f14:def:20121" version="1">
                  <metadata>
                        <title>Network Parameters for Hosts and Routers</title>
                        <reference ref_id="CCE-3339-9" source="CCE"/>
                        <description>The default setting for accepting "secure" ICMP redirects (those from gateways listed in the default gateways list) should be enabled or disabled for network interfaces as appropriate.</description>
                  </metadata>
                  <criteria operator="AND">
		    <criterion test_ref="oval:org.open-scap.f14:tst:201210"/>
		    <criteria operator="OR">
		      <criterion test_ref="oval:org.open-scap.f14:tst:201211" negate="true"/>
		      <criterion test_ref="oval:org.open-scap.f14:tst:201212"/>
		    </criteria>
                  </criteria>
            </definition>

            <definition class="compliance" id="oval:org.open-scap.f14:def:20122" version="1">
                  <metadata>
                        <title>Network Parameters for Hosts and Routers</title>
                        <reference ref_id="CCE-3644-2" source="CCE"/>
                        <description>Ignoring ICMP echo requests (pings) sent to broadcast / multicast addresses should be enabled or disabled as appropriate.</description>
                  </metadata>
                  <criteria operator="AND">
		    <criterion test_ref="oval:org.open-scap.f14:tst:201220"/>
		    <criteria operator="OR">
		      <criterion test_ref="oval:org.open-scap.f14:tst:201221" negate="true"/>
		      <criterion test_ref="oval:org.open-scap.f14:tst:201222"/>
		    </criteria>
                  </criteria>
            </definition>

            <definition class="compliance" id="oval:org.open-scap.f14:def:20123" version="1">
                  <metadata>
                        <title>Network Parameters for Hosts and Routers</title>
                        <reference ref_id="CCE-4133-5" source="CCE"/>
                        <description>Ignoring bogus ICMP responses to broadcasts should be enabled or disabled as appropriate.</description>
                  </metadata>
                  <criteria operator="AND">
		    <criterion test_ref="oval:org.open-scap.f14:tst:201230"/>
		    <criteria operator="OR">
		      <criterion test_ref="oval:org.open-scap.f14:tst:201231" negate="true"/>
		      <criterion test_ref="oval:org.open-scap.f14:tst:201232"/>
		    </criteria>
                  </criteria>
            </definition>

            <definition class="compliance" id="oval:org.open-scap.f14:def:20124" version="1">
                  <metadata>
                        <title>Network Parameters for Hosts and Routers</title>
                        <reference ref_id="CCE-4265-5" source="CCE"/>
                        <description>Sending TCP syncookies should be enabled or disabled as appropriate.</description>
                  </metadata>
                  <criteria operator="AND">
		    <criterion test_ref="oval:org.open-scap.f14:tst:201240"/>
		    <criteria operator="OR">
		      <criterion test_ref="oval:org.open-scap.f14:tst:201241" negate="true"/>
		      <criterion test_ref="oval:org.open-scap.f14:tst:201242"/>
		    </criteria>
                  </criteria>
            </definition>

            <definition class="compliance" id="oval:org.open-scap.f14:def:20125" version="1">
                  <metadata>
                        <title>Network Parameters for Hosts and Routers</title>
                        <reference ref_id="CCE-4080-8" source="CCE"/>
                        <description>Performing source validation by reverse path should be enabled or disabled for all interfaces as appropriate.</description>
                  </metadata>
                  <criteria operator="AND">
		    <criterion test_ref="oval:org.open-scap.f14:tst:201250"/>
		    <criteria operator="OR">
		      <criterion test_ref="oval:org.open-scap.f14:tst:201251" negate="true"/>
		      <criterion test_ref="oval:org.open-scap.f14:tst:201252"/>
		    </criteria>
                  </criteria>
            </definition>

            <definition class="compliance" id="oval:org.open-scap.f14:def:20126" version="1">
                  <metadata>
                        <title>Network Parameters for Hosts and Routers</title>
                        <reference ref_id="CCE-3840-6" source="CCE"/>
                        <description>The default setting for performing source validation by reverse path should be enabled or disabled for network interfaces as appropriate.</description>
                  </metadata>
                  <criteria operator="AND">
		    <criterion test_ref="oval:org.open-scap.f14:tst:201260"/>
		    <criteria operator="OR">
		      <criterion test_ref="oval:org.open-scap.f14:tst:201261" negate="true"/>
		      <criterion test_ref="oval:org.open-scap.f14:tst:201262"/>
		    </criteria>
                  </criteria>
            </definition>

            <definition class="compliance" id="oval:org.open-scap.f14:def:20127" version="1">
                  <metadata>
                        <title>Disable Wireless in BIOS</title>
                        <reference ref_id="CCE-3628-5" source="CCE"/>
                        <description>All wireless devices should be disabled in the BIOS.</description>
                  </metadata>
                  <criteria>
                        <criterion comment="Unknown test stub" test_ref="oval:org.open-scap.f14:tst:22"/>
                  </criteria>
            </definition>

            <definition class="compliance" id="oval:org.open-scap.f14:def:20128" version="1">
                  <metadata>
                        <title>Deactivate Wireless Interfaces</title>
                        <reference ref_id="CCE-4276-2" source="CCE"/>
                        <description>All wireless interfaces should be disabled.</description>
                  </metadata>
                  <criteria>
                        <criterion comment="Find wireless interfaces" test_ref="oval:org.open-scap.f14:tst:20128"/>
                  </criteria>
            </definition>

            <definition class="compliance" id="oval:org.open-scap.f14:def:20129" version="1">
                  <metadata>
                        <title>Disable Wireless Drivers</title>
                        <reference ref_id="CCE-4170-7" source="CCE"/>
                        <description>Device drivers for wireless devices should be excluded from the kernel.</description>
                  </metadata>
                  <criteria>
                        <criterion comment="Conditions are satisfied" test_ref="oval:org.open-scap.f14:tst:20129"/>
                  </criteria>
            </definition>

	    <!-- ipv6 -->

            <definition class="compliance" id="oval:org.open-scap.f14:def:20130" version="1">
                  <metadata>
                        <title>Disable Automatic Loading of IPv6 Kernel Module</title>
                        <reference ref_id="CCE-3562-6" source="CCE"/>
                        <description>Automatic loading of the IPv6 kernel module should be disabled.</description>
                  </metadata>
                  <criteria>
                        <criterion comment="Conditions are satisfied" test_ref="oval:org.open-scap.f14:tst:20130"/>
                  </criteria>
            </definition>

            <definition class="compliance" id="oval:org.open-scap.f14:def:20131" version="1">
                  <metadata>
                        <title>Disable Interface Usage of IPv6</title>
                        <reference ref_id="CCE-3381-1" source="CCE"/>
                        <description>The default setting for IPv6 configuration should be disabled for network interfaces.</description>
                  </metadata>
                  <criteria operator="OR" comment="Either IPv6 kernel module is not loaded or this feature should be disabled">
                        <extend_definition definition_ref="oval:org.open-scap.f14:def:20130" comment="Automatic loading of the IPv6 kernel module should be disabled"/>
                        <criterion test_ref="oval:org.open-scap.f14:tst:20131"/>
                  </criteria>
            </definition>

            <definition class="compliance" id="oval:org.open-scap.f14:def:20132" version="1">
                  <metadata>
                        <title>Disable Interface Usage of IPv6</title>
                        <reference ref_id="CCE-3377-9" source="CCE"/>
                        <description>Global IPv6 initialization should be disabled.</description>
                  </metadata>
                  <criteria operator="OR" comment="Either IPv6 kernel module is not loaded or this feature should be disabled">
                        <extend_definition definition_ref="oval:org.open-scap.f14:def:20130" comment="Automatic loading of the IPv6 kernel module should be disabled"/>
                        <criterion test_ref="oval:org.open-scap.f14:tst:20132"/>
                  </criteria>

            </definition>
            <definition class="compliance" id="oval:org.open-scap.f14:def:20133" version="1">
                  <metadata>
                        <title>Disable Interface Usage of IPv6</title>
                        <reference ref_id="CCE-4296-0" source="CCE"/>
                        <description>IPv6 configuration should be disabled for all interfaces.</description>
                  </metadata>
                  <criteria operator="OR" comment="Either IPv6 kernel module is not loaded or this feature should be disabled">
                        <extend_definition definition_ref="oval:org.open-scap.f14:def:20130" comment="Automatic loading of the IPv6 kernel module should be disabled"/>
                        <criterion test_ref="oval:org.open-scap.f14:tst:20133"/>
                  </criteria>
            </definition>

            <definition class="compliance" id="oval:org.open-scap.f14:def:20134" version="1">
                  <metadata>
                        <title>Disable Automatic Configuration</title>
                        <reference ref_id="CCE-4269-7" source="CCE"/>
                        <description>Accepting IPv6 router advertisements should be disabled for all network interfaces.</description>
                  </metadata>
                  <criteria operator="OR" comment="Either IPv6 kernel module is not loaded or this feature should be disabled">
                        <extend_definition definition_ref="oval:org.open-scap.f14:def:20130" comment="Automatic loading of the IPv6 kernel module should be disabled"/>
                        <criterion test_ref="oval:org.open-scap.f14:tst:20134"/>
                  </criteria>
            </definition>

            <definition class="compliance" id="oval:org.open-scap.f14:def:20135" version="1">
                  <metadata>
                        <title>Disable Automatic Configuration</title>
                        <reference ref_id="CCE-4291-1" source="CCE"/>
                        <description>The default setting for accepting IPv6 router advertisements should be disabled for network interfaces. (and dependencies are met)</description>
                  </metadata>
                  <criteria operator="OR" comment="Either IPv6 kernel module is not loaded or this feature should be disabled">
                        <extend_definition definition_ref="oval:org.open-scap.f14:def:20130" comment="Automatic loading of the IPv6 kernel module should be disabled"/> 
                        <criterion comment="Unknown test stub" test_ref="oval:org.open-scap.f14:tst:22"/>
                  </criteria>
            </definition>

            <definition class="compliance" id="oval:org.open-scap.f14:def:20136" version="1">
                  <metadata>
                        <title>Disable Automatic Configuration</title>
                        <reference ref_id="CCE-4313-3" source="CCE"/>
                        <description>Accepting redirects from IPv6 routers should be disabled as appropriate for all network interfaces. (and dependencies are met)</description>
                  </metadata>
                  <criteria operator="OR" comment="Either IPv6 kernel module is not loaded or this feature should be disabled">
                        <extend_definition definition_ref="oval:org.open-scap.f14:def:20130" comment="Automatic loading of the IPv6 kernel module should be disabled"/>
                        <criterion comment="Unknown test stub" test_ref="oval:org.open-scap.f14:tst:22"/>
                  </criteria>
            </definition>

            <definition class="compliance" id="oval:org.open-scap.f14:def:20137" version="1">
                  <metadata>
                        <title>Disable Automatic Configuration</title>
                        <reference ref_id="CCE-4198-8" source="CCE"/>
                        <description>The default setting for accepting redirects from IPv6 routers should be disabled for network interfaces. (and dependencies are met)</description>
                  </metadata>
                  <criteria operator="OR" comment="Either IPv6 kernel module is not loaded or this feature should be disabled">
                        <extend_definition definition_ref="oval:org.open-scap.f14:def:20130" comment="Automatic loading of the IPv6 kernel module should be disabled"/>
                        <criterion comment="Unknown test stub" test_ref="oval:org.open-scap.f14:tst:22"/>
                  </criteria>
            </definition>

            <definition class="compliance" id="oval:org.open-scap.f14:def:20138" version="1">
                  <metadata>
                        <title>Use Privacy Extensions for Address if Necessary</title>
                        <reference ref_id="CCE-3842-2" source="CCE"/>
                        <description>IPv6 privacy extensions should be configured appropriately for all interfaces. (and dependencies are met)</description>
                  </metadata>
                  <criteria operator="OR" comment="Either IPv6 kernel module is not loaded or this feature should be disabled">
                        <extend_definition definition_ref="oval:org.open-scap.f14:def:20130" comment="Automatic loading of the IPv6 kernel module should be disabled"/>
                        <criterion comment="Unknown test stub" test_ref="oval:org.open-scap.f14:tst:22"/>
                  </criteria>
            </definition>

	    <!-- sysctl -->

            <definition class="compliance" id="oval:org.open-scap.f14:def:20139" version="1">
                  <metadata>
                        <title>Limit Network-Transmitted Configuration</title>
                        <reference ref_id="CCE-4159-0" source="CCE"/>
                        <description>The default number of IPv6 router solicitations for network interfaces to send should be set appropriately. (and dependencies are met)</description>
                  </metadata>
                  <criteria operator="OR" comment="Either IPv6 is disabled or this feature should be">
                        <extend_definition definition_ref="oval:org.open-scap.f14:def:20131" comment="The default setting for IPv6 configuration should be disabled for network interfaces"/>
                        <extend_definition definition_ref="oval:org.open-scap.f14:def:20132" comment="Global IPv6 initialization should be disabled"/>
                        <extend_definition definition_ref="oval:org.open-scap.f14:def:20133" comment="IPv6 configuration should be disabled for all interfaces"/>

			<criteria operator="AND">
			  <criterion test_ref="oval:org.open-scap.f14:tst:201390"/>
			  <criteria operator="OR">
			    <criterion test_ref="oval:org.open-scap.f14:tst:201391" negate="true"/>
			    <criterion test_ref="oval:org.open-scap.f14:tst:201392"/>
			  </criteria>
			</criteria>

                  </criteria>
            </definition>


            <definition class="compliance" id="oval:org.open-scap.f14:def:20140" version="1">
                  <metadata>
                        <title>Limit Network-Transmitted Configuration</title>
                        <reference ref_id="CCE-4221-8" source="CCE"/>
                        <description>The default setting for accepting router preference via IPv6 router advertisement should be disabled for network interfaces. (and dependencies are met)</description>
                  </metadata>
                  <criteria operator="OR" comment="Either IPv6 is disabled or this feature should be">
                        <extend_definition definition_ref="oval:org.open-scap.f14:def:20131" comment="The default setting for IPv6 configuration should be disabled for network interfaces"/>
                        <extend_definition definition_ref="oval:org.open-scap.f14:def:20132" comment="Global IPv6 initialization should be disabled"/>
                        <extend_definition definition_ref="oval:org.open-scap.f14:def:20133" comment="IPv6 configuration should be disabled for all interfaces"/>

			<criteria operator="AND">
			  <criterion test_ref="oval:org.open-scap.f14:tst:201400"/>
			  <criteria operator="OR">
			    <criterion test_ref="oval:org.open-scap.f14:tst:201401" negate="true"/>
			    <criterion test_ref="oval:org.open-scap.f14:tst:201402"/>
			  </criteria>
			</criteria>

                  </criteria>
            </definition>

            <definition class="compliance" id="oval:org.open-scap.f14:def:20141" version="1">
                  <metadata>
                        <title>Limit Network-Transmitted Configuration</title>
                        <reference ref_id="CCE-4058-4" source="CCE"/>
                        <description>The default setting for accepting prefix information via IPv6 router advertisement should be enabled or disabled for network interfaces as appropriate. (and dependencies are met)</description>
                  </metadata>
                  <criteria operator="OR" comment="Either IPv6 is disabled or this feature should be">
                        <extend_definition definition_ref="oval:org.open-scap.f14:def:20131" comment="The default setting for IPv6 configuration should be disabled for network interfaces"/>
                        <extend_definition definition_ref="oval:org.open-scap.f14:def:20132" comment="Global IPv6 initialization should be disabled"/>
                        <extend_definition definition_ref="oval:org.open-scap.f14:def:20133" comment="IPv6 configuration should be disabled for all interfaces"/>

			<criteria operator="AND">
			  <criterion test_ref="oval:org.open-scap.f14:tst:201410"/>
			  <criteria operator="OR">
			    <criterion test_ref="oval:org.open-scap.f14:tst:201411" negate="true"/>
			    <criterion test_ref="oval:org.open-scap.f14:tst:201412"/>
			  </criteria>
			</criteria>

                  </criteria>
            </definition>

            <definition class="compliance" id="oval:org.open-scap.f14:def:20142" version="1">
                  <metadata>
                        <title>Limit Network-Transmitted Configuration</title>
                        <reference ref_id="CCE-4128-5" source="CCE"/>
                        <description>The default setting for accepting a default router via IPv6 router advertisement should be enabled or disabled for network interfaces as appropriate. (and dependencies are met)</description>
                  </metadata>
                  <criteria operator="OR" comment="Either IPv6 is disabled or this feature should be">
                        <extend_definition definition_ref="oval:org.open-scap.f14:def:20131" comment="The default setting for IPv6 configuration should be disabled for network interfaces"/>
                        <extend_definition definition_ref="oval:org.open-scap.f14:def:20132" comment="Global IPv6 initialization should be disabled"/>
                        <extend_definition definition_ref="oval:org.open-scap.f14:def:20133" comment="IPv6 configuration should be disabled for all interfaces"/>

			<criteria operator="AND">
			  <criterion test_ref="oval:org.open-scap.f14:tst:201420"/>
			  <criteria operator="OR">
			    <criterion test_ref="oval:org.open-scap.f14:tst:201421" negate="true"/>
			    <criterion test_ref="oval:org.open-scap.f14:tst:201422"/>
			  </criteria>
			</criteria>

                  </criteria>
            </definition>

            <definition class="compliance" id="oval:org.open-scap.f14:def:20143" version="1">
                  <metadata>
                        <title>Limit Network-Transmitted Configuration</title>
                        <reference ref_id="CCE-4287-9" source="CCE"/>
                        <description>The default setting for autoconfiguring network interfaces using prefix information in IPv6 router advertisements should be enabled or disabled as appropriate. (and dependencies are met)</description>
                  </metadata>
                  <criteria operator="OR" comment="Either IPv6 is disabled or this feature should be">
                        <extend_definition definition_ref="oval:org.open-scap.f14:def:20131" comment="The default setting for IPv6 configuration should be disabled for network interfaces"/>
                        <extend_definition definition_ref="oval:org.open-scap.f14:def:20132" comment="Global IPv6 initialization should be disabled"/>
                        <extend_definition definition_ref="oval:org.open-scap.f14:def:20133" comment="IPv6 configuration should be disabled for all interfaces"/>

			<criteria operator="AND">
			  <criterion test_ref="oval:org.open-scap.f14:tst:201430"/>
			  <criteria operator="OR">
			    <criterion test_ref="oval:org.open-scap.f14:tst:201431" negate="true"/>
			    <criterion test_ref="oval:org.open-scap.f14:tst:201432"/>
			  </criteria>
			</criteria>

                  </criteria>
            </definition>

            <definition class="compliance" id="oval:org.open-scap.f14:def:20144" version="1">
                  <metadata>
                        <title>Limit Network-Transmitted Configuration</title>
                        <reference ref_id="CCE-3895-0" source="CCE"/>
                        <description>The default number of IPv6 duplicate address detection solicitations for network interfaces to send per configured address should be set appropriately. (and dependencies are met)</description>
                  </metadata>
                  <criteria operator="OR" comment="Either IPv6 is disabled or this feature should be">
                        <extend_definition definition_ref="oval:org.open-scap.f14:def:20131" comment="The default setting for IPv6 configuration should be disabled for network interfaces"/>
                        <extend_definition definition_ref="oval:org.open-scap.f14:def:20132" comment="Global IPv6 initialization should be disabled"/>
                        <extend_definition definition_ref="oval:org.open-scap.f14:def:20133" comment="IPv6 configuration should be disabled for all interfaces"/>

			<criteria operator="AND">
			  <criterion test_ref="oval:org.open-scap.f14:tst:201440"/>
			  <criteria operator="OR">
			    <criterion test_ref="oval:org.open-scap.f14:tst:201441" negate="true"/>
			    <criterion test_ref="oval:org.open-scap.f14:tst:201442"/>
			  </criteria>
			</criteria>

                  </criteria>
            </definition>

            <definition class="compliance" id="oval:org.open-scap.f14:def:20145" version="1">
                  <metadata>
                        <title>Limit Network-Transmitted Configuration</title>
                        <reference ref_id="CCE-4137-6" source="CCE"/>
                        <description>The default number of global unicast IPv6 addresses allowed per network interface should be set appropriately. (and dependencies are met)</description>
                  </metadata>
                  <criteria operator="OR" comment="Either IPv6 is disabled or this feature should be">
                        <extend_definition definition_ref="oval:org.open-scap.f14:def:20131" comment="The default setting for IPv6 configuration should be disabled for network interfaces"/>
                        <extend_definition definition_ref="oval:org.open-scap.f14:def:20132" comment="Global IPv6 initialization should be disabled"/>
                        <extend_definition definition_ref="oval:org.open-scap.f14:def:20133" comment="IPv6 configuration should be disabled for all interfaces"/>

			<criteria operator="AND">
			  <criterion test_ref="oval:org.open-scap.f14:tst:201450"/>
			  <criteria operator="OR">
			    <criterion test_ref="oval:org.open-scap.f14:tst:201451" negate="true"/>
			    <criterion test_ref="oval:org.open-scap.f14:tst:201452"/>
			  </criteria>
			</criteria>

                  </criteria>
            </definition>

            <definition class="compliance" id="oval:org.open-scap.f14:def:20146" version="1">
                  <metadata>
                        <title>Verify ip6tables is enabled</title>
                        <reference ref_id="CCE-4167-3" source="CCE"/>
                        <description>The ip6tables service should be enabled.</description>
                  </metadata>
                  <criteria>
                        <criterion comment="Conditions are satisfied" test_ref="oval:org.open-scap.f14:tst:20146"/>
                  </criteria>
            </definition>

	    <!-- non sysctl -->

            <definition class="compliance" id="oval:org.open-scap.f14:def:20147" version="1">
                  <metadata>
                        <title>Inspect and Activate Default Rules </title>
                        <reference ref_id="CCE-4189-7" source="CCE"/>
                        <description>The iptables service should be enabled.</description>
                  </metadata>
                  <criteria>
                        <criterion comment="Conditions are satisfied" test_ref="oval:org.open-scap.f14:tst:20147"/>
                  </criteria>
            </definition>

            <definition class="compliance" id="oval:org.open-scap.f14:def:201474" version="1">
                  <metadata>
                        <title>Change the default policy to DROP (from ACCEPT) for the INPUT built-in chain</title>
                        <reference ref_id="TBD" source="CCE"/>
                        <description>Change the default policy to DROP (from ACCEPT) for the INPUT built-in chain.</description>
                  </metadata>
                  <criteria>
                        <criterion comment=":INPUT DROP [0:0]" test_ref="oval:org.open-scap.f14:tst:2014741"/>
                        <criterion comment=":INPUT ACCEPT [0:0]" test_ref="oval:org.open-scap.f14:tst:2014742" negate="true"/>
                  </criteria>
            </definition>

            <definition class="compliance" id="oval:org.open-scap.f14:def:201475" version="1">
                  <metadata>
                        <title>Change the default policy to DROP (from ACCEPT) for the FORWARD built-in chain</title>
                        <reference ref_id="TBD" source="CCE"/>
                        <description>Change the default policy to DROP (from ACCEPT) for the FORWARD built-in chain.</description>
                  </metadata>
                  <criteria>
                        <criterion comment=":FORWARD DROP [0:0]" test_ref="oval:org.open-scap.f14:tst:2014751"/>
                        <criterion comment=":FORWARD ACCEPT [0:0]" test_ref="oval:org.open-scap.f14:tst:2014752" negate="true"/>
                  </criteria>
            </definition>

	    <!--
            <definition class="compliance" id="oval:org.open-scap.f14:def:201476" version="1">
                  <metadata>
                        <title>Disable Support for DCCP</title>
                        <reference ref_id="TBD" source="CCE"/>
                        <description>Support for DCCP should be disabled.</description>
                  </metadata>
                  <criteria>
                        <criterion comment="check for DCCP in /etc/modprobe.conf" test_ref="oval:org.open-scap.f14:tst:201476"/>
                  </criteria>
            </definition>

            <definition class="compliance" id="oval:org.open-scap.f14:def:201477" version="1">
                  <metadata>
                        <title>Disable Support for SCTP</title>
                        <reference ref_id="TBD" source="CCE"/>
                        <description>Support for SCTP should be disabled.</description>
                  </metadata>
                  <criteria>
                        <criterion comment="check for SCTP in /etc/modprobe.conf" test_ref="oval:org.open-scap.f14:tst:201477"/>
                  </criteria>
            </definition>

            <definition class="compliance" id="oval:org.open-scap.f14:def:201478" version="1">
                  <metadata>
                        <title>Disable Support for RDS</title>
                        <reference ref_id="TBD" source="CCE"/>
                        <description>Support for RDS should be disabled.</description>
                  </metadata>
                  <criteria>
                        <criterion comment="check for RDS in /etc/modprobe.conf" test_ref="oval:org.open-scap.f14:tst:201478"/>
                  </criteria>
            </definition>

            <definition class="compliance" id="oval:org.open-scap.f14:def:201479" version="1">
                  <metadata>
                        <title>Disable Support for TIPC</title>
                        <reference ref_id="TBD" source="CCE"/>
                        <description>Support for TIPC should be disabled.</description>
                  </metadata>
                  <criteria>
                        <criterion comment="check for TIPC in /etc/modprobe.conf" test_ref="oval:org.open-scap.f14:tst:201479"/>
                  </criteria>
            </definition>
	    -->

            <definition class="compliance" id="oval:org.open-scap.f14:def:20148" version="1">
                  <metadata>
                        <title>Configure Syslog</title>
                        <reference ref_id="CCE-3679-8" source="CCE"/>
                        <description>The syslog service should be enabled or disabled as appropriate.</description>
                  </metadata>
                  <criteria>
                        <criterion comment="Conditions are satisfied" test_ref="oval:org.open-scap.f14:tst:20148"/>
                  </criteria>
            </definition>

            <definition class="compliance" id="oval:org.open-scap.f14:def:20149" version="1">
                  <metadata>
                        <title>Confirm Existence and Permissions of System Log Files </title>
                        <reference ref_id="CCE-4366-1" source="CCE"/>
                        <description>All mandatory log files should be owned by root user.</description>
                  </metadata>
                  <criteria operator="AND">
                        <criterion comment="check if user owns all mandatory log files" test_ref="oval:org.open-scap.f14:tst:20149"/>
                        <criterion comment="check if user exists" test_ref="oval:org.open-scap.f14:tst:201491"/>
                  </criteria>
            </definition>
            <definition class="compliance" id="oval:org.open-scap.f14:def:20150" version="1">
                  <metadata>
                        <title>Confirm Existence and Permissions of System Log Files</title>
                        <reference ref_id="CCE-3701-0" source="CCE"/>
                        <description>All syslog log files should be owned by the appropriate group.</description>
                  </metadata>
                  <criteria operator="AND">
                        <criterion comment="check if group root owns all syslog log files" test_ref="oval:org.open-scap.f14:tst:20150"/>
                        <criterion comment="check if group exists" test_ref="oval:org.open-scap.f14:tst:201501"/>
                  </criteria>
            </definition>
            <definition class="compliance" id="oval:org.open-scap.f14:def:20151" version="1">
                  <metadata>
                        <title>Confirm Existence and Permissions of System Log Files </title>
                        <reference ref_id="CCE-4233-3" source="CCE"/>
                        <description>File permissions for all syslog log files should be set correctly.</description>
                  </metadata>
                  <criteria>
                        <criterion comment="check permissions of all syslog log files" test_ref="oval:org.open-scap.f14:tst:20151"/>
                  </criteria>
            </definition>
            <definition class="compliance" id="oval:org.open-scap.f14:def:20152" version="1">
                  <metadata>
                        <title>Send Logs to a Remote Loghost </title>
                        <reference ref_id="CCE-4260-6" source="CCE"/>
                        <description>Syslog logs should be sent to a remote loghost</description>
                  </metadata>
                  <criteria>
                        <criterion comment="Conditions are satisfied" test_ref="oval:org.open-scap.f14:tst:20152"/>
                  </criteria>
            </definition>

            <definition class="compliance" id="oval:org.open-scap.f14:def:20153" version="1">
                  <metadata>
                        <title>Disable syslogd from Accepting Remote Messages on Loghosts Only</title>
                        <reference ref_id="CCE-3382-9" source="CCE"/>
                        <description>Syslogd should reject remote messages</description>
                  </metadata>
                  <criteria>
                        <criterion comment="Conditions are satisfied" test_ref="oval:org.open-scap.f14:tst:20153"/>
                  </criteria>
            </definition>

	    <!--
            <definition class="compliance" id="oval:org.open-scap.f14:def:20154" version="1">
                  <metadata>
                        <title>Ensure All Logs are Rotated by logrotate</title>
                        <reference ref_id="CCE-4182-2" source="CCE"/>
                        <description>The logrotate (syslog rotater) service should be enabled.</description>
                  </metadata>
                  <criteria>
                        <criterion comment="Find each file in /etc/syslog.conf in /etc/logrotate.d/syslog" test_ref="oval:org.open-scap.f14:tst:20154"/>
                  </criteria>
            </definition>
	    -->

            <definition class="compliance" id="oval:org.open-scap.f14:def:20155" version="1">
                  <metadata>
                        <title>Monitor Suspicious Log Messages using Logwatch</title>
                        <reference ref_id="CCE-4323-2" source="CCE"/>
                        <description>The logwatch service should be enabled or disabled as appropriate</description>
                  </metadata>
                  <criteria>
                        <criterion comment="Unknown test stub" test_ref="oval:org.open-scap.f14:tst:22"/>
                  </criteria>
            </definition>

	    <!-- END -->

            <definition class="compliance" id="oval:org.open-scap.f14:def:20156" version="1">
                  <metadata>
                        <title>Enable the auditd Service</title>
                        <reference ref_id="CCE-4292-9" source="CCE"/>
                        <description>The auditd service should be enabled.</description>
                  </metadata>
                  <criteria>
                        <criterion comment="Conditions are satisfied" test_ref="oval:org.open-scap.f14:tst:20156"/>
                  </criteria>
            </definition>

            <definition class="compliance" id="oval:org.open-scap.f14:def:20157" version="1">
                  <metadata>
                        <title>Enable Auditing for Processes Which Start Prior to the Audit Daemon</title>
                        <reference ref_id="TBD" source="CCE"/>
                        <description>Look for argument audit=1 in the kernel line in /etc/grub.conf</description>
                  </metadata>
                  <criteria>
                        <criterion comment="check for audit=1 in /etc/grub.conf" test_ref="oval:org.open-scap.f14:tst:20157"/>
                  </criteria>
            </definition>

            <definition class="compliance" id="oval:org.open-scap.f14:def:201575" version="1">
                  <metadata>
                        <title>Records Events that Modify Date and Time Information</title>
                        <reference ref_id="TBD" source="CCE"/>
                        <description>Audit rules about time are enabled</description>
                  </metadata>
                  <criteria>
                        <criteria operator="OR" comment="Architecture is 32 bit or 64 bit">
                              <criteria comment="32bit arch">
                                    <criterion comment="check that arch is i386 or i686" test_ref="oval:org.open-scap.f14:tst:201670"/>
                                    <criterion comment="/etc/audit/audit.rules contains -a always,exit -F arch=ARCH -S adjtimex -S settimeofday -S stime -k time-change" test_ref="oval:org.open-scap.f14:tst:2015750"/>
                                    <criterion comment="/etc/audit/audit.rules contains -a always,exit -F arch=ARCH -S clock_settime -k time-change" test_ref="oval:org.open-scap.f14:tst:2015751"/>
                              </criteria>
                              <criteria comment="62bit arch">
                                    <criterion comment="check that arch is x86_64 ia64 amd64 ppc64 s390x" test_ref="oval:org.open-scap.f14:tst:201672"/>
                                    <criterion comment="/etc/audit/audit.rules contains -a always,exit -F arch=ARCH -S adjtimex -S settimeofday -S stime -k time-change" test_ref="oval:org.open-scap.f14:tst:2015752"/>
                                    <criterion comment="/etc/audit/audit.rules contains -a always,exit -F arch=ARCH -S clock_settime -k time-change" test_ref="oval:org.open-scap.f14:tst:2015753"/>
                              </criteria>
                        </criteria>
                        <criterion comment="/etc/audit/audit.rules contains -w /etc/localtime -p wa -k time-change" test_ref="oval:org.open-scap.f14:tst:2015754"/>
                  </criteria>
            </definition>
            <definition class="compliance" id="oval:org.open-scap.f14:def:20158" version="1">
                  <metadata>
                        <title>Record Events that Modify User/Group Information</title>
                        <reference ref_id="TBD" source="CCE"/>
                        <description>Audit rules about User/Group Information are enabled</description>
                  </metadata>
                  <criteria>
                        <criterion comment="/etc/audit/audit.rules contains -w /etc/group -p wa -k identity" test_ref="oval:org.open-scap.f14:tst:201580"/>
                        <criterion comment="/etc/audit/audit.rules contains -w /etc/passwd -p wa -k identity" test_ref="oval:org.open-scap.f14:tst:201581"/>
                        <criterion comment="/etc/audit/audit.rules contains -w /etc/gshadow -p wa -k identity" test_ref="oval:org.open-scap.f14:tst:201582"/>
                        <criterion comment="/etc/audit/audit.rules contains -w /etc/shadow -p wa -k identity" test_ref="oval:org.open-scap.f14:tst:201583"/>
                        <criterion comment="/etc/audit/audit.rules contains -w /etc/security/opasswd -p wa -k identity" test_ref="oval:org.open-scap.f14:tst:201584"/>
                  </criteria>
            </definition>
            <definition class="compliance" id="oval:org.open-scap.f14:def:20159" version="1">
                  <metadata>
                        <title>Record Events that Modify the System’s Network Environment</title>
                        <reference ref_id="TBD" source="CCE"/>
                        <description>Audit rules about the System’s Network Environment are enabled</description>
                  </metadata>
                  <criteria>
                        <criteria operator="OR" comment="Architecture is 32 bit or 64 bit">
                              <criteria comment="32bit arch">
                                    <criterion comment="check that arch is i386 or i686" test_ref="oval:org.open-scap.f14:tst:201670"/>
                                    <criterion comment="/etc/audit/audit.rules contains -a exit,always -F arch=ARCH -S sethostname -S setdomainname -k system-locale" test_ref="oval:org.open-scap.f14:tst:201590"/>
                              </criteria>
                              <criteria comment="62bit arch">
                                    <criterion comment="check that arch is x86_64 ia64 amd64 ppc64 s390x" test_ref="oval:org.open-scap.f14:tst:201672"/>
                                    <criterion comment="/etc/audit/audit.rules contains -a exit,always -F arch=ARCH -S sethostname -S setdomainname -k system-locale" test_ref="oval:org.open-scap.f14:tst:201591"/>
                              </criteria>
                        </criteria>
                        <criterion comment="/etc/audit/audit.rules contains -w /etc/issue -p wa -k system-locale" test_ref="oval:org.open-scap.f14:tst:201592"/>
                        <criterion comment="/etc/audit/audit.rules contains -w /etc/issue.net -p wa -k system-locale" test_ref="oval:org.open-scap.f14:tst:201593"/>
                        <criterion comment="/etc/audit/audit.rules contains -w /etc/hosts -p wa -k system-locale" test_ref="oval:org.open-scap.f14:tst:201594"/>
                        <criterion comment="/etc/audit/audit.rules contains -w /etc/sysconfig/network -p wa -k system-locale" test_ref="oval:org.open-scap.f14:tst:201595"/>
                  </criteria>
            </definition>
            <definition class="compliance" id="oval:org.open-scap.f14:def:20160" version="1">
                  <metadata>
                        <title>Record Events that Modify the System’s Mandatory Access Controls</title>
                        <reference ref_id="TBD" source="CCE"/>
                        <description>Audit rules about the System’s Mandatory Access Controls are enabled</description>
                  </metadata>
                  <criteria>
                        <criterion comment="/etc/audit/audit.rules contains -w /etc/selinux/ -p wa -k MAC-policy" test_ref="oval:org.open-scap.f14:tst:20160"/>
                  </criteria>
            </definition>
            <definition class="compliance" id="oval:org.open-scap.f14:def:20161" version="1">
                  <metadata>
                        <title>Ensure auditd Collects Logon and Logout Events</title>
                        <reference ref_id="TBD" source="CCE"/>
                        <description>Audit rules about the Logon and Logout Events are enabled</description>
                  </metadata>
                  <criteria>
                        <criterion comment="/etc/audit/audit.rules contains -w /var/log/faillog -p wa -k logins" test_ref="oval:org.open-scap.f14:tst:201610"/>
                        <criterion comment="/etc/audit/audit.rules contains -w /var/log/lastlog -p wa -k logins" test_ref="oval:org.open-scap.f14:tst:201611"/>
                  </criteria>
            </definition>
            <definition class="compliance" id="oval:org.open-scap.f14:def:20162" version="1">
                  <metadata>
                        <title>Ensure auditd Collects Process and Session Initiation Information</title>
                        <reference ref_id="TBD" source="CCE"/>
                        <description>Audit rules about the Process and Session Initiation Information are enabled</description>
                  </metadata>
                  <criteria>
                        <criterion comment="/etc/audit/audit.rules contains -w /var/run/utmp -p wa -k session" test_ref="oval:org.open-scap.f14:tst:201620"/>
                        <criterion comment="/etc/audit/audit.rules contains -w /var/log/btmp -p wa -k session" test_ref="oval:org.open-scap.f14:tst:201621"/>
                        <criterion comment="/etc/audit/audit.rules contains -w /var/log/wtmp -p wa -k session" test_ref="oval:org.open-scap.f14:tst:201622"/>
                  </criteria>
            </definition>
            <definition class="compliance" id="oval:org.open-scap.f14:def:20163" version="1">
                  <metadata>
                        <title>Ensure auditd Collects Discretionary Access Control Permission Modiﬁcation Events</title>
                        <reference ref_id="TBD" source="CCE"/>
                        <description>Audit rules about the Discretionary Access Control Permission Modiﬁcation Events are enabled</description>
                  </metadata>
                  <criteria operator="OR" comment="Architecture is 32 bit or 64 bit">
                        <criteria comment="32bit arch">
                              <criterion comment="check that arch is i386 or i686" test_ref="oval:org.open-scap.f14:tst:201670"/>
                              <criterion comment="/etc/audit/audit.rules contains -a always,exit -F arch=ARCH -S chmod -S fchmod -S fchmodat -F auid>=500 -F auid!=4294967295 -k perm_mod" test_ref="oval:org.open-scap.f14:tst:201630"/>
                              <criterion comment="/etc/audit/audit.rules contains -a always,exit -F arch=ARCH -S chown -S fchown -S fchownat -S lchown -F auid>=500 -F auid!=4294967295 -k perm_mod" test_ref="oval:org.open-scap.f14:tst:201631"/>
                              <criterion comment="/etc/audit/audit.rules contains -a always,exit -F arch=ARCH -S setxattr -S lsetxattr -S fsetxattr -S removexattr -S lremovexattr -S fremovexattr -F auid>=500 -F auid!=4294967295 -k perm_mod" test_ref="oval:org.open-scap.f14:tst:201632"/>
                        </criteria>
                        <criteria comment="62bit arch">
                              <criterion comment="check that arch is x86_64 ia64 amd64 ppc64 s390x" test_ref="oval:org.open-scap.f14:tst:201672"/>
                              <criterion comment="/etc/audit/audit.rules contains -a always,exit -F arch=ARCH -S chmod -S fchmod -S fchmodat -F auid>=500 -F auid!=4294967295 -k perm_mod" test_ref="oval:org.open-scap.f14:tst:201633"/>
                              <criterion comment="/etc/audit/audit.rules contains -a always,exit -F arch=ARCH -S chown -S fchown -S fchownat -S lchown -F auid>=500 -F auid!=4294967295 -k perm_mod" test_ref="oval:org.open-scap.f14:tst:201634"/>
                              <criterion comment="/etc/audit/audit.rules contains -a always,exit -F arch=ARCH -S setxattr -S lsetxattr -S fsetxattr -S removexattr -S lremovexattr -S fremovexattr -F auid>=500 -F auid!=4294967295 -k perm_mod" test_ref="oval:org.open-scap.f14:tst:201635"/>
                        </criteria>
                  </criteria>
            </definition>
            <definition class="compliance" id="oval:org.open-scap.f14:def:20164" version="1">
                  <metadata>
                        <title>Ensure auditd Collects Unauthorized Access Attempts to Files (unsuccessful)</title>
                        <reference ref_id="TBD" source="CCE"/>
                        <description>Audit rules about the Unauthorized Access Attempts to Files (unsuccessful) are enabled</description>
                  </metadata>
                  <criteria operator="OR" comment="Architecture is 32 bit or 64 bit">
                        <criteria comment="32bit arch">
                              <criterion comment="check that arch is i386 or i686" test_ref="oval:org.open-scap.f14:tst:201670"/>
                              <criterion comment="/etc/audit/audit.rules contains -a always,exit -F arch=ARCH -S creat -S open -S openat -S truncate -S ftruncate -F exit=-EACCES -F auid>=500 -F auid!=4294967295 -k access" test_ref="oval:org.open-scap.f14:tst:201640"/>
                              <criterion comment="/etc/audit/audit.rules contains -a always,exit -F arch=ARCH -S creat -S open -S openat -S truncate -S ftruncate -F exit=-EPERM -F auid>=500 -F auid!=4294967295 -k access" test_ref="oval:org.open-scap.f14:tst:201641"/>
                        </criteria>
                        <criteria comment="62bit arch">
                              <criterion comment="check that arch is x86_64 ia64 amd64 ppc64 s390x" test_ref="oval:org.open-scap.f14:tst:201672"/>
                              <criterion comment="/etc/audit/audit.rules contains -a always,exit -F arch=ARCH -S creat -S open -S openat -S truncate -S ftruncate -F exit=-EACCES -F auid>=500 -F auid!=4294967295 -k access" test_ref="oval:org.open-scap.f14:tst:201642"/>
                              <criterion comment="/etc/audit/audit.rules contains -a always,exit -F arch=ARCH -S creat -S open -S openat -S truncate -S ftruncate -F exit=-EPERM -F auid>=500 -F auid!=4294967295 -k access" test_ref="oval:org.open-scap.f14:tst:201643"/>
                        </criteria>
                  </criteria>
            </definition>
            <definition class="compliance" id="oval:org.open-scap.f14:def:20165" version="1">
                  <metadata>
                        <title>Ensure auditd Collects Information on the Use of Privileged Commands</title>
                        <reference ref_id="TBD" source="CCE"/>
                        <description>Audit rules about the Information on the Use of Privileged Commands are enabled</description>
                  </metadata>
                  <criteria>
                        <criterion comment="/etc/audit/audit.rules contains -a always,exit -F path=/bin/ping -F perm=x -F auid>=500 -F auid!=4294967295 -k privileged" test_ref="oval:org.open-scap.f14:tst:20165"/>
                  </criteria>
            </definition>
            <definition class="compliance" id="oval:org.open-scap.f14:def:20166" version="1">
                  <metadata>
                        <title>Ensure auditd Collects Information on Exporting to Media (successful)</title>
                        <reference ref_id="TBD" source="CCE"/>
                        <description>Audit rules about the Information on Exporting to Media (successful) are enabled</description>
                  </metadata>
                  <criteria operator="OR" comment="Architecture is 32 bit or 64 bit">
                        <criteria comment="32bit arch">
                              <criterion comment="check that arch is i386 or i686" test_ref="oval:org.open-scap.f14:tst:201670"/>
                              <criterion comment="/etc/audit/audit.rules contains -a always,exit -F arch=ARCH -S mount -F auid>=500 -F auid!=4294967295 -k export" test_ref="oval:org.open-scap.f14:tst:201660"/>
                        </criteria>
                        <criteria comment="62bit arch">
                              <criterion comment="check that arch is x86_64 ia64 amd64 ppc64 s390x" test_ref="oval:org.open-scap.f14:tst:201672"/>
                              <criterion comment="/etc/audit/audit.rules contains -a always,exit -F arch=ARCH -S mount -F auid>=500 -F auid!=4294967295 -k export" test_ref="oval:org.open-scap.f14:tst:201661"/>
                        </criteria>
                  </criteria>
            </definition>
            <definition class="compliance" id="oval:org.open-scap.f14:def:20167" version="1">
                  <metadata>
                        <title>Ensure auditd Collects Files Deletion Events by User (successful and unsuccessful)</title>
                        <reference ref_id="TBD" source="CCE"/>
                        <description>Audit rules about the Files Deletion Events by User (successful and unsuccessful) are enabled</description>
                  </metadata>
                  <criteria operator="OR" comment="Architecture is 32 bit or 64 bit">
                        <criteria comment="32bit arch">
                              <criterion comment="check that arch is i386 or i686" test_ref="oval:org.open-scap.f14:tst:201670"/>
                              <criterion comment="/etc/audit/audit.rules contains -a always,exit -F arch=ARCH -S unlink -S unlinkat -S rename -S renameat -F auid>=500 -F auid!=4294967295 -k delete" test_ref="oval:org.open-scap.f14:tst:201671"/>
                        </criteria>
                        <criteria comment="62bit arch">
                              <criterion comment="check that arch is x86_64 ia64 amd64 ppc64 s390x" test_ref="oval:org.open-scap.f14:tst:201672"/>
                              <criterion comment="/etc/audit/audit.rules contains -a always,exit -F arch=ARCH -S unlink -S unlinkat -S rename -S renameat -F auid>=500 -F auid!=4294967295 -k delete" test_ref="oval:org.open-scap.f14:tst:201673"/>
                        </criteria>
                  </criteria>
            </definition>
            <definition class="compliance" id="oval:org.open-scap.f14:def:20168" version="1">
                  <metadata>
                        <title>Ensure auditd Collects System Administrator Actions</title>
                        <reference ref_id="TBD" source="CCE"/>
                        <description>Audit rules about the System Administrator Actions are enabled</description>
                  </metadata>
                  <criteria>
                        <criterion comment="/etc/audit/audit.rules contains -w /etc/sudoers -p wa -k actions" test_ref="oval:org.open-scap.f14:tst:20168"/>
                  </criteria>
            </definition>
            <definition class="compliance" id="oval:org.open-scap.f14:def:201685" version="1">
                  <metadata>
                        <title>Ensure auditd Collects Information on Kernel Module Loading and Unloading</title>
                        <reference ref_id="TBD" source="CCE"/>
                        <description>Audit rules about the Information on Kernel Module Loading and Unloading.</description>
                  </metadata>
                  <criteria>
<!--                        <criterion comment="/etc/audit/audit.rules contains -w /sbin/insmod -p x -k modules" test_ref="oval:org.open-scap.f14:tst:2016851"/> -->
                        <criterion comment="/etc/audit/audit.rules contains -w /sbin/rmmod -p x -k modules" test_ref="oval:org.open-scap.f14:tst:2016852"/>
                        <criterion comment="/etc/audit/audit.rules contains -w /sbin/modprobe -p x -k modules" test_ref="oval:org.open-scap.f14:tst:2016853"/>
                        <criterion comment="/etc/audit/audit.rules contains -a always,exit -S init_module -S delete_module -k modules" test_ref="oval:org.open-scap.f14:tst:2016854"/>
                  </criteria>
            </definition>
            <definition class="compliance" id="oval:org.open-scap.f14:def:20169" version="1">
                  <metadata>
                        <title>Make the auditd Conﬁguration Immutable</title>
                        <reference ref_id="TBD" source="CCE"/>
                        <description>Force a reboot to change audit rules is enabled</description>
                  </metadata>
                  <criteria>
                        <criterion comment="look in /etc/audit/audit.rules for -e 2" test_ref="oval:org.open-scap.f14:tst:20169"/>
                  </criteria>
            </definition>
            <definition class="compliance" id="oval:org.open-scap.f14:def:20170" version="1">
                  <metadata>
                        <title>Inetd and Xinetd</title>
                        <reference ref_id="CCE-4234-1" source="CCE"/>
                        <description>The inetd service should be disabled.</description>
                  </metadata>
                  <criteria operator="OR" comment="inetd is not installed or conditions are met">
                        <extend_definition definition_ref="oval:org.open-scap.f14:def:20172" comment="inetd is not installed"/>
                        <criterion comment="Conditions are satisfied" test_ref="oval:org.open-scap.f14:tst:20170"/>
                  </criteria>
            </definition>
            <definition class="compliance" id="oval:org.open-scap.f14:def:20171" version="1">
                  <metadata>
                        <title>Inetd and Xinetd</title>
                        <reference ref_id="CCE-4252-3" source="CCE"/>
                        <description>The xinetd service should be disabled.</description>
                  </metadata>
                  <criteria operator="OR" comment="xinetd is not installed or conditions are met">
                        <extend_definition definition_ref="oval:org.open-scap.f14:def:20173" comment="xinetd is not installed"/>
                        <criterion comment="Conditions are satisfied" test_ref="oval:org.open-scap.f14:tst:20171"/>
                  </criteria>
            </definition>
            <definition class="compliance" id="oval:org.open-scap.f14:def:20172" version="1">
                  <metadata>
                        <title>Inetd and Xinetd</title>
                        <reference ref_id="CCE-4023-8" source="CCE"/>
                        <description>The inetd package should be uninstalled.</description>
                  </metadata>
                  <criteria>
                        <criterion comment="Conditions are satisfied" test_ref="oval:org.open-scap.f14:tst:20172"/>
                  </criteria>
            </definition>
            <definition class="compliance" id="oval:org.open-scap.f14:def:20173" version="1">
                  <metadata>
                        <title>Inetd and Xinetd</title>
                        <reference ref_id="CCE-4164-0" source="CCE"/>
                        <description>The xinetd package should be uninstalled.</description>
                  </metadata>
                  <criteria>
                        <criterion comment="Conditions are satisfied" test_ref="oval:org.open-scap.f14:tst:20173"/>
                  </criteria>
            </definition>
            <definition class="compliance" id="oval:org.open-scap.f14:def:20174" version="1">
                  <metadata>
                        <title>Telnet</title>
                        <reference ref_id="CCE-4330-7" source="CCE"/>
                        <description>The telnet-server package should be uninstalled.</description>
                  </metadata>
                  <criteria>
                        <criterion comment="Conditions are satisfied" test_ref="oval:org.open-scap.f14:tst:20174"/>
                  </criteria>
            </definition>
            <definition class="compliance" id="oval:org.open-scap.f14:def:201745" version="1">
                  <metadata>
                        <title>Disable Telnet service</title>
                        <reference ref_id="CCE-3390-2" source="CCE"/>
                        <description>The telnet service should be disabled.</description>
                  </metadata>
                  <criteria operator="OR" comment="telnet is not installed or conditions are met">
                        <extend_definition definition_ref="oval:org.open-scap.f14:def:20174" comment="telnet is not installed"/>
                        <criterion comment="Conditions are satisfied" test_ref="oval:org.open-scap.f14:tst:201745"/>
                  </criteria>
            </definition>
            <definition class="compliance" id="oval:org.open-scap.f14:def:20175" version="1">
                  <metadata>
                        <title>Telnet Client installation</title>
                        <reference ref_id="TBD" source="CCE"/>
                        <description>The telnet package should be uninstalled.</description>
                  </metadata>
                  <criteria>
                        <criterion comment="Conditions are satisfied" test_ref="oval:org.open-scap.f14:tst:20175"/>
                  </criteria>
            </definition>
            <definition class="compliance" id="oval:org.open-scap.f14:def:20176" version="1">
                  <metadata>
                        <title>Telnet kerberos client</title>
                        <reference ref_id="TBD" source="CCE"/>
                        <description>The krb5-workstation package should be uninstalled.</description>
                  </metadata>
                  <criteria>
                        <criterion comment="Conditions are satisfied" test_ref="oval:org.open-scap.f14:tst:20176"/>
                  </criteria>
            </definition>
            <definition class="compliance" id="oval:org.open-scap.f14:def:20177" version="1">
                  <metadata>
                        <title>Remove the Rsh Server Commands from the System</title>
                        <reference ref_id="CCE-4308-3" source="CCE"/>
                        <description>The rsh-server package should be uninstalled.</description>
                  </metadata>
                  <criteria>
                        <criterion comment="Conditions are satisfied" test_ref="oval:org.open-scap.f14:tst:20177"/>
                  </criteria>
            </definition>
            <definition class="compliance" id="oval:org.open-scap.f14:def:201774" version="1">
                  <metadata>
                        <title>disable rcp</title>
                        <reference ref_id="CCE-3974-3" source="CCE"/>
                        <description>The rcp service should be disabled.</description>
                  </metadata>
                  <criteria operator="OR" comment="telnet-server is not installed or conditions are met">
                        <extend_definition definition_ref="oval:org.open-scap.f14:def:20177" comment="rsh-server is not installed"/>
                        <criterion comment="Unknown test stub" test_ref="oval:org.open-scap.f14:tst:22"/>
                  </criteria>
            </definition>
            <definition class="compliance" id="oval:org.open-scap.f14:def:201775" version="1">
                  <metadata>
                        <title>disable rsh</title>
                        <reference ref_id="CCE-4141-8" source="CCE"/>
                        <description>The rsh service should be disabled.</description>
                  </metadata>
                  <criteria operator="OR" comment="telnet-server is not installed or conditions are met">
                        <extend_definition definition_ref="oval:org.open-scap.f14:def:20177" comment="rsh-server is not installed"/>
                        <criterion comment="Conditions are satisfied" test_ref="oval:org.open-scap.f14:tst:201775"/>
                  </criteria>
            </definition>
            <definition class="compliance" id="oval:org.open-scap.f14:def:201776" version="1">
                  <metadata>
                        <title>disable rlogin</title>
                        <reference ref_id="CCE-3537-8" source="CCE"/>
                        <description>The rlogin service should be disabled.</description>
                  </metadata>
                  <criteria operator="OR" comment="telnet-server is not installed or conditions are met">
                        <extend_definition definition_ref="oval:org.open-scap.f14:def:20177" comment="rsh-server is not installed"/>
                        <criterion comment="Conditions are satisfied" test_ref="oval:org.open-scap.f14:tst:201776"/>
                  </criteria>
            </definition>
            <definition class="compliance" id="oval:org.open-scap.f14:def:20178" version="1">
                  <metadata>
                        <title>Remove .rhosts Support from PAM Configuration Files</title>
                        <reference ref_id="TBD" source="CCE"/>
                        <description>Check that pam rhosts authentication is not used by any PAM services.</description>
                  </metadata>
                  <criteria>
                        <criterion comment="Conditions are satisfied" test_ref="oval:org.open-scap.f14:tst:20178"/>
                  </criteria>
            </definition>
            <definition class="compliance" id="oval:org.open-scap.f14:def:20179" version="1">
                  <metadata>
                        <title>Remove the Rsh Client Commands from the System</title>
                        <reference ref_id="TBD" source="CCE"/>
                        <description>The rsh package, which contains client programs for many of r-commands should be uninstalled.</description>
                  </metadata>
                  <criteria>
                        <criterion comment="Conditions are satisfied" test_ref="oval:org.open-scap.f14:tst:20179"/>
                  </criteria>
            </definition>
            <definition class="compliance" id="oval:org.open-scap.f14:def:20180" version="1">
                  <metadata>
                        <title>NIS</title>
                        <reference ref_id="CCE-4348-9" source="CCE"/>
                        <description>The ypserv package should be uninstalled.</description>
                  </metadata>
                  <criteria>
                        <criterion comment="Conditions are satisfied" test_ref="oval:org.open-scap.f14:tst:20180"/>
                  </criteria>
            </definition>
            <definition class="compliance" id="oval:org.open-scap.f14:def:20181" version="1">
                  <metadata>
                        <title>NIS</title>
                        <reference ref_id="CCE-3705-1" source="CCE"/>
                        <description>The ypbind service should be disabled.</description>
                  </metadata>
                  <criteria operator="OR" comment="ypserv is not installed or conditions are met">
                        <extend_definition definition_ref="oval:org.open-scap.f14:def:20180" comment="ypserv is not installed"/>
                        <criterion comment="Conditions are satisfied" test_ref="oval:org.open-scap.f14:tst:20181"/>
                  </criteria>
            </definition>
            <definition class="compliance" id="oval:org.open-scap.f14:def:20182" version="1">
                  <metadata>
                        <title>Uninstall TFTP Server</title>
                        <reference ref_id="CCE-3916-4" source="CCE"/>
                        <description>The tftp-server package should be uninstalled.</description>
                  </metadata>
                  <criteria>
                        <criterion comment="Conditions are satisfied" test_ref="oval:org.open-scap.f14:tst:20182"/>
                  </criteria>
            </definition>
            <definition class="compliance" id="oval:org.open-scap.f14:def:201825" version="1">
                  <metadata>
                        <title>Disable TFTP Server</title>
                        <reference ref_id="CCE-4273-9" source="CCE"/>
                        <description>The tftp service should be disabled.</description>
                  </metadata>
                  <criteria operator="OR" comment="tftp-server is not installed or conditions are met">
                        <extend_definition definition_ref="oval:org.open-scap.f14:def:20182" comment="tftp-server is not installed"/>
                        <criterion comment="Conditions are satisfied" test_ref="oval:org.open-scap.f14:tst:201825"/>
                  </criteria>
            </definition>
            <definition class="compliance" id="oval:org.open-scap.f14:def:20183" version="1">
                  <metadata>
                        <title>Installation Helper Service (firstboot)</title>
                        <reference ref_id="CCE-3412-4" source="CCE"/>
                        <description>The firstboot service should be disabled.</description>
                  </metadata>
                  <criteria>
                        <criterion comment="Conditions are satisfied" test_ref="oval:org.open-scap.f14:tst:20183"/>
                  </criteria>
            </definition>
            <definition class="compliance" id="oval:org.open-scap.f14:def:20184" version="1">
                  <metadata>
                        <title>Console Mouse Service (gpm)</title>
                        <reference ref_id="CCE-4229-1" source="CCE"/>
                        <description>The gpm service should be disabled.</description>
                  </metadata>
                  <criteria>
                        <criterion comment="Conditions are satisfied" test_ref="oval:org.open-scap.f14:tst:20184"/>
                  </criteria>
            </definition>
            <definition class="compliance" id="oval:org.open-scap.f14:def:20185" version="1">
                  <metadata>
                        <title>Interrupt Distribution on Multiprocessor Systems (irqbalance)</title>
                        <reference ref_id="CCE-4123-6" source="CCE"/>
                        <description>The irqbalance service should be disabled.</description>
                  </metadata>
                  <criteria>
                        <criterion comment="Conditions are satisfied" test_ref="oval:org.open-scap.f14:tst:20185"/>
                  </criteria>
            </definition>
            <definition class="compliance" id="oval:org.open-scap.f14:def:20186" version="1">
                  <metadata>
                        <title>ISDN Support (isdn)</title>
                        <reference ref_id="CCE-4286-1" source="CCE"/>
                        <description>The isdn service should be disabled.</description>
                  </metadata>
                  <criteria>
                        <criterion comment="Conditions are satisfied" test_ref="oval:org.open-scap.f14:tst:20186"/>
                  </criteria>
            </definition>
            <definition class="compliance" id="oval:org.open-scap.f14:def:20187" version="1">
                  <metadata>
                        <title>Kdump Kernel Crash Analyzer (kdump)</title>
                        <reference ref_id="CCE-3425-6" source="CCE"/>
                        <description>The kdump service should be disabled.</description>
                  </metadata>
                  <criteria>
                        <criterion comment="Conditions are satisfied" test_ref="oval:org.open-scap.f14:tst:20187"/>
                  </criteria>
            </definition>
            <definition class="compliance" id="oval:org.open-scap.f14:def:20188" version="1">
                  <metadata>
                        <title>Kudzu Hardware Probing Utility (kudzu)</title>
                        <reference ref_id="CCE-4211-9" source="CCE"/>
                        <description>The kudzu service should be disabled.</description>
                  </metadata>
                  <criteria>
                        <criterion comment="Conditions are satisfied" test_ref="oval:org.open-scap.f14:tst:20188"/>
                  </criteria>
            </definition>
            <definition class="compliance" id="oval:org.open-scap.f14:def:20189" version="1">
                  <metadata>
                        <title>Software RAID Monitor (mdmonitor)</title>
                        <reference ref_id="CCE-3854-7" source="CCE"/>
                        <description>The mdmonitor service should be disabled.</description>
                  </metadata>
                  <criteria>
                        <criterion comment="Conditions are satisfied" test_ref="oval:org.open-scap.f14:tst:20189"/>
                  </criteria>
            </definition>
            <definition class="compliance" id="oval:org.open-scap.f14:def:20190" version="1">
                  <metadata>
                        <title>IA32 Microcode Utility(microcodectl)</title>
                        <reference ref_id="CCE-4356-2" source="CCE"/>
                        <description>The microcode_ctl service should be disabled.</description>
                  </metadata>
                  <criteria>
                        <criterion comment="Conditions are satisfied" test_ref="oval:org.open-scap.f14:tst:20190"/>
                  </criteria>
            </definition>
            <definition class="compliance" id="oval:org.open-scap.f14:def:20191" version="1">
                  <metadata>
                        <title>Disable All Networking if Not Needed</title>
                        <reference ref_id="TBD" source="CCE"/>
                        <description>The network service should be disabled.</description>
                  </metadata>
                  <criteria>
                        <criterion comment="Conditions are satisfied" test_ref="oval:org.open-scap.f14:tst:20191"/>
                  </criteria>
            </definition>
            <definition class="compliance" id="oval:org.open-scap.f14:def:20192" version="1">
                  <metadata>
                        <title>Disable All External Network Interfaces if Not Needed</title>
                        <reference ref_id="CCE-4369-5" source="CCE"/>
                        <description>All files of the form ifcfg-interface except
                              for ifcfg-lo in /etc/sysconfig/network-scripts should be removed</description>
                  </metadata>
                  <criteria>
                        <criterion comment="Conditions are satisfied" test_ref="oval:org.open-scap.f14:tst:20192"/>
                  </criteria>
            </definition>
            <definition class="compliance" id="oval:org.open-scap.f14:def:20193" version="1">
                  <metadata>
                        <title>Disable Zeroconf Networking</title>
                        <reference ref_id="CCE-4369-5" source="CCE"/>
                        <description>Disable Zeroconf automatic route assignment in the 169.245.0.0 subnet.</description>
                  </metadata>
                  <criteria>
                        <criterion comment="Look for NOZEROCONF=yes in /etc/sysconfig/network" test_ref="oval:org.open-scap.f14:tst:20193"/>
                  </criteria>
            </definition>
            <definition class="compliance" id="oval:org.open-scap.f14:def:20194" version="1">
                  <metadata>
                        <title>Smart Card Support (pcscd)</title>
                        <reference ref_id="CCE-4100-4" source="CCE"/>
                        <description>The pcscd service should be disabled.</description>
                  </metadata>
                  <criteria>
                        <criterion comment="Conditions are satisfied" test_ref="oval:org.open-scap.f14:tst:20194"/>
                  </criteria>
            </definition>
            <definition class="compliance" id="oval:org.open-scap.f14:def:20195" version="1">
                  <metadata>
                        <title>SMART Disk Monitoring Support (smartd)</title>
                        <reference ref_id="CCE-3455-3" source="CCE"/>
                        <description>The smartd service should be disabled.</description>
                  </metadata>
                  <criteria>
                        <criterion comment="Conditions are satisfied" test_ref="oval:org.open-scap.f14:tst:20195"/>
                  </criteria>
            </definition>
            <definition class="compliance" id="oval:org.open-scap.f14:def:20196" version="1">
                  <metadata>
                        <title>Boot Caching (readahead early/readahead later)</title>
                        <reference ref_id="CCE-4421-4" source="CCE"/>
                        <description>The readahead_early service should be disabled.</description>
                  </metadata>
                  <criteria>
                        <criterion comment="Conditions are satisfied" test_ref="oval:org.open-scap.f14:tst:20196"/>
                  </criteria>
            </definition>
            <definition class="compliance" id="oval:org.open-scap.f14:def:20197" version="1">
                  <metadata>
                        <title>Boot Caching (readahead early/readahead later)</title>
                        <reference ref_id="CCE-4302-6" source="CCE"/>
                        <description>The readahead_later service should be disabled.</description>
                  </metadata>
                  <criteria>
                        <criterion comment="Conditions are satisfied" test_ref="oval:org.open-scap.f14:tst:20197"/>
                  </criteria>
            </definition>
            <definition class="compliance" id="oval:org.open-scap.f14:def:20198" version="1">
                  <metadata>
                        <title>D-Bus IPC Service (messagebus)</title>
                        <reference ref_id="CCE-3822-4" source="CCE"/>
                        <description>The messagebus service should be disabled.</description>
                  </metadata>
                  <criteria>
                        <criterion comment="Conditions are satisfied" test_ref="oval:org.open-scap.f14:tst:20198"/>
                  </criteria>
            </definition>
            <definition class="compliance" id="oval:org.open-scap.f14:def:20199" version="1">
                  <metadata>
                        <title>HAL Daemon (haldaemon)</title>
                        <reference ref_id="CCE-4364-6" source="CCE"/>
                        <description>The haldaemon service should be disabled.</description>
                  </metadata>
                  <criteria>
                        <criterion comment="Conditions are satisfied" test_ref="oval:org.open-scap.f14:tst:20199"/>
                  </criteria>
            </definition>
            <definition class="compliance" id="oval:org.open-scap.f14:def:20200" version="1">
                  <metadata>
                        <title>Bluetooth Host Controller Interface Daemon (bluetooth)</title>
                        <reference ref_id="CCE-4355-4" source="CCE"/>
                        <description>The bluetooth service should be disabled.</description>
                  </metadata>
                  <criteria>
                        <criterion comment="Conditions are satisfied" test_ref="oval:org.open-scap.f14:tst:20200"/>
                  </criteria>
            </definition>
            <definition class="compliance" id="oval:org.open-scap.f14:def:20201" version="1">
                  <metadata>
                        <title>Bluetooth Input Devices (hidd)</title>
                        <reference ref_id="CCE-4377-8" source="CCE"/>
                        <description>The hidd service should be disabled.</description>
                  </metadata>
                  <criteria>
                        <criterion comment="Conditions are satisfied" test_ref="oval:org.open-scap.f14:tst:20201"/>
                  </criteria>
            </definition>
            <definition class="compliance" id="oval:org.open-scap.f14:def:202015" version="1">
                  <metadata>
                        <title>Disable Bluetooth Kernel Modules</title>
                        <reference ref_id="TBD" source="CCE"/>
                        <description>Prevent loading of the Bluetooth module.</description>
                  </metadata>
                  <criteria>
                        <criterion comment="check that net-pf-31 is off in /etc/modprobe.conf" test_ref="oval:org.open-scap.f14:tst:2020151"/>
                        <criterion comment="check that bluetooth is off in /etc/modprobe.conf" test_ref="oval:org.open-scap.f14:tst:2020152"/>
                  </criteria>
            </definition>
            <definition class="compliance" id="oval:org.open-scap.f14:def:20202" version="1">
                  <metadata>
                        <title>Advanced Power Management Subsystem (apmd)</title>
                        <reference ref_id="CCE-4289-5" source="CCE"/>
                        <description>The apmd service should be disabled.</description>
                  </metadata>
                  <criteria>
                        <criterion comment="Conditions are satisfied" test_ref="oval:org.open-scap.f14:tst:20202"/>
                  </criteria>
            </definition>
            <definition class="compliance" id="oval:org.open-scap.f14:def:20203" version="1">
                  <metadata>
                        <title>Advanced Configuration and Power Interface (acpid)</title>
                        <reference ref_id="CCE-4298-6" source="CCE"/>
                        <description>The acpid service should be disabled.</description>
                  </metadata>
                  <criteria>
                        <criterion comment="Conditions are satisfied" test_ref="oval:org.open-scap.f14:tst:20203"/>
                  </criteria>
            </definition>
            <definition class="compliance" id="oval:org.open-scap.f14:def:20204" version="1">
                  <metadata>
                        <title>CPU Throttling (cpuspeed)</title>
                        <reference ref_id="CCE-4051-9" source="CCE"/>
                        <description>The cpuspeed service should be disabled.</description>
                  </metadata>
                  <criteria>
                        <criterion comment="Conditions are satisfied" test_ref="oval:org.open-scap.f14:tst:20204"/>
                  </criteria>
            </definition>
            <definition class="compliance" id="oval:org.open-scap.f14:def:20205" version="1">
                  <metadata>
                        <title>Cron Daemon running state</title>
                        <reference ref_id="CCE-4324-0" source="CCE"/>
                        <description>The crond service should be enabled.</description>
                  </metadata>
                  <criteria>
                        <criterion comment="Conditions are satisfied" test_ref="oval:org.open-scap.f14:tst:20205"/>
                  </criteria>
            </definition>
            <definition class="compliance" id="oval:org.open-scap.f14:def:202052" version="1">
                  <metadata>
                        <title>At Daemon running state</title>
                        <reference ref_id="TBD" source="CCE"/>
                        <description>The atd service should be disabled.</description>
                  </metadata>
                  <criteria operator="OR" comment="at is not installed or conditions are met">
                        <extend_definition definition_ref="oval:org.open-scap.f14:def:202053" comment="at is not installed"/>
                        <criterion comment="Conditions are satisfied" test_ref="oval:org.open-scap.f14:tst:202052"/>
                  </criteria>
            </definition>
            <definition class="compliance" id="oval:org.open-scap.f14:def:202053" version="1">
                  <metadata>
                        <title>At Daemons package is installed</title>
                        <reference ref_id="TBD" source="CCE"/>
                        <description>The at package should be removed.</description>
                  </metadata>
                  <criteria>
                        <criterion comment="Check for package at" test_ref="oval:org.open-scap.f14:tst:202053"/>
                  </criteria>
            </definition>
            <definition class="compliance" id="oval:org.open-scap.f14:def:20206" version="1">
                  <metadata>
                        <title>Disable anacron if Possible</title>
                        <reference ref_id="CCE-4406-5" source="CCE"/>
                        <description>The anacron service should be disabled.</description>
                  </metadata>
                  <criteria>
                        <criterion comment="Conditions are satisfied" test_ref="oval:org.open-scap.f14:tst:20206"/>
                  </criteria>
            </definition>
            <definition class="compliance" id="oval:org.open-scap.f14:def:20207" version="1">
                  <metadata>
                        <title>Disable anacron if Possible</title>
                        <reference ref_id="CCE-4428-9" source="CCE"/>
                        <description>The anacron package should be uninstalled.</description>
                  </metadata>
                  <criteria>
                        <criterion comment="Conditions are satisfied" test_ref="oval:org.open-scap.f14:tst:20207"/>
                  </criteria>
            </definition>
            <definition class="compliance" id="oval:org.open-scap.f14:def:20208" version="1">
                  <metadata>
                        <title>Restrict Permissions on Files Used by cron</title>
                        <reference ref_id="CCE-3626-9" source="CCE"/>
                        <description>The /etc/crontab file should be owned by the appropriate group.</description>
                  </metadata>
                  <criteria>
                        <criterion test_ref="oval:org.open-scap.f14:tst:20208"/>
                  </criteria>
            </definition>
            <definition class="compliance" id="oval:org.open-scap.f14:def:20209" version="1">
                  <metadata>
                        <title>Restrict Permissions on Files Used by cron</title>
                        <reference ref_id="CCE-3851-3" source="CCE"/>
                        <description>The /etc/crontab file should be owned by the appropriate user.</description>
                  </metadata>
                  <criteria>
                        <criterion test_ref="oval:org.open-scap.f14:tst:20209"/>
                  </criteria>
            </definition>
            <definition class="compliance" id="oval:org.open-scap.f14:def:20210" version="1">
                  <metadata>
                        <title>Restrict Permissions on Files Used by cron</title>
                        <reference ref_id="CCE-4388-5" source="CCE"/>
                        <description>File permissions for /etc/crontab should be set correctly.</description>
                  </metadata>
                  <criteria>
                        <criterion test_ref="oval:org.open-scap.f14:tst:20210"/>
                  </criteria>
            </definition>
            <definition class="compliance" id="oval:org.open-scap.f14:def:20211" version="1">
                  <metadata>
                        <title>Restrict Permissions on Files Used by cron</title>
                        <reference ref_id="CCE-3604-6" source="CCE"/>
                        <description>The /etc/anacrontab file should be owned by the appropriate group.</description>
                  </metadata>
                  <criteria>
                        <criterion test_ref="oval:org.open-scap.f14:tst:20211"/>
                  </criteria>
            </definition>
            <definition class="compliance" id="oval:org.open-scap.f14:def:20212" version="1">
                  <metadata>
                        <title>Restrict Permissions on Files Used by cron</title>
                        <reference ref_id="CCE-4379-4" source="CCE"/>
                        <description>The /etc/anacrontab file should be owned by the appropriate user.</description>
                  </metadata>
                  <criteria>
                        <criterion test_ref="oval:org.open-scap.f14:tst:20212"/>
                  </criteria>
            </definition>
            <definition class="compliance" id="oval:org.open-scap.f14:def:20213" version="1">
                  <metadata>
                        <title>Restrict Permissions on Files Used by cron</title>
                        <reference ref_id="CCE-4304-2" source="CCE"/>
                        <description>File permissions for /etc/anacrontab should be set correctly.</description>
                  </metadata>
                  <criteria>
                        <criterion test_ref="oval:org.open-scap.f14:tst:20213"/>
                  </criteria>
            </definition>
            <definition class="compliance" id="oval:org.open-scap.f14:def:20214" version="1">
                  <metadata>
                        <title>Restrict Permissions on Files Used by cron</title>
                        <reference ref_id="CCE-4054-3" source="CCE"/>
                        <description>The /etc/cron.hourly file should be owned by the appropriate group.</description>
                  </metadata>
                  <criteria>
                        <criterion test_ref="oval:org.open-scap.f14:tst:20214"/>
                  </criteria>
            </definition>
            <definition class="compliance" id="oval:org.open-scap.f14:def:20215" version="1">
                  <metadata>
                        <title>Restrict Permissions on Files Used by cron</title>
                        <reference ref_id="CCE-3481-9" source="CCE"/>
                        <description>The /etc/cron.daily file should be owned by the appropriate group.</description>
                  </metadata>
                  <criteria>
                        <criterion test_ref="oval:org.open-scap.f14:tst:20215"/>
                  </criteria>
            </definition>
            <definition class="compliance" id="oval:org.open-scap.f14:def:20216" version="1">
                  <metadata>
                        <title>Restrict Permissions on Files Used by cron</title>
                        <reference ref_id="CCE-4331-5" source="CCE"/>
                        <description>The /etc/cron.weekly file should be owned by the appropriate group.</description>
                  </metadata>
                  <criteria>
                        <criterion test_ref="oval:org.open-scap.f14:tst:20216"/>
                  </criteria>
            </definition>
            <definition class="compliance" id="oval:org.open-scap.f14:def:20217" version="1">
                  <metadata>
                        <title>Restrict Permissions on Files Used by cron</title>
                        <reference ref_id="CCE-4322-4" source="CCE"/>
                        <description>The /etc/cron.monthly file should be owned by the appropriate group.</description>
                  </metadata>
                  <criteria>
                        <criterion test_ref="oval:org.open-scap.f14:tst:20217"/>
                  </criteria>
            </definition>
            <definition class="compliance" id="oval:org.open-scap.f14:def:20218" version="1">
                  <metadata>
                        <title>Restrict Permissions on Files Used by cron</title>
                        <reference ref_id="CCE-4212-7" source="CCE"/>
                        <description>The /etc/cron.d file should be owned by the appropriate group.</description>
                  </metadata>
                  <criteria>
                        <criterion test_ref="oval:org.open-scap.f14:tst:20218"/>
                  </criteria>
            </definition>
            <definition class="compliance" id="oval:org.open-scap.f14:def:20219" version="1">
                  <metadata>
                        <title>Restrict Permissions on Files Used by cron</title>
                        <reference ref_id="CCE-3983-4" source="CCE"/>
                        <description>The /etc/cron.hourly file should be owned by the appropriate user.</description>
                  </metadata>
                  <criteria>
                        <criterion test_ref="oval:org.open-scap.f14:tst:20219"/>
                  </criteria>
            </definition>
            <definition class="compliance" id="oval:org.open-scap.f14:def:20220" version="1">
                  <metadata>
                        <title>Restrict Permissions on Files Used by cron</title>
                        <reference ref_id="CCE-4022-0" source="CCE"/>
                        <description>The /etc/cron.daily file should be owned by the appropriate user.</description>
                  </metadata>
                  <criteria>
                        <criterion test_ref="oval:org.open-scap.f14:tst:20220"/>
                  </criteria>
            </definition>
            <definition class="compliance" id="oval:org.open-scap.f14:def:20221" version="1">
                  <metadata>
                        <title>Restrict Permissions on Files Used by cron</title>
                        <reference ref_id="CCE-3833-1" source="CCE"/>
                        <description>The /etc/cron.weekly file should be owned by the appropriate user.</description>
                  </metadata>
                  <criteria>
                        <criterion test_ref="oval:org.open-scap.f14:tst:20221"/>
                  </criteria>
            </definition>
            <definition class="compliance" id="oval:org.open-scap.f14:def:20222" version="1">
                  <metadata>
                        <title>Restrict Permissions on Files Used by cron</title>
                        <reference ref_id="CCE-4441-2" source="CCE"/>
                        <description>The /etc/cron.monthly file should be owned by the appropriate user.</description>
                  </metadata>
                  <criteria>
                        <criterion test_ref="oval:org.open-scap.f14:tst:20222"/>
                  </criteria>
            </definition>
            <definition class="compliance" id="oval:org.open-scap.f14:def:20223" version="1">
                  <metadata>
                        <title>Restrict Permissions on Files Used by cron</title>
                        <reference ref_id="CCE-4380-2" source="CCE"/>
                        <description>The /etc/cron.d file should be owned by the appropriate user.</description>
                  </metadata>
                  <criteria>
                        <criterion test_ref="oval:org.open-scap.f14:tst:20223"/>
                  </criteria>
            </definition>
            <definition class="compliance" id="oval:org.open-scap.f14:def:20224" version="1">
                  <metadata>
                        <title>Restrict Permissions on Files Used by cron</title>
                        <reference ref_id="CCE-4106-1" source="CCE"/>
                        <description>File permissions for /etc/cron.hourly should be set correctly.</description>
                  </metadata>
                  <criteria>
                        <criterion test_ref="oval:org.open-scap.f14:tst:20224"/>
                  </criteria>
            </definition>
            <definition class="compliance" id="oval:org.open-scap.f14:def:20225" version="1">
                  <metadata>
                        <title>Restrict Permissions on Files Used by cron</title>
                        <reference ref_id="CCE-4450-3" source="CCE"/>
                        <description>File permissions for /etc/cron.daily should be set correctly.</description>
                  </metadata>
                  <criteria>
                        <criterion test_ref="oval:org.open-scap.f14:tst:20225"/>
                  </criteria>
            </definition>
            <definition class="compliance" id="oval:org.open-scap.f14:def:20226" version="1">
                  <metadata>
                        <title>Restrict Permissions on Files Used by cron</title>
                        <reference ref_id="CCE-4203-6" source="CCE"/>
                        <description>File permissions for /etc/cron.weekly should be set correctly.</description>
                  </metadata>
                  <criteria>
                        <criterion test_ref="oval:org.open-scap.f14:tst:20226"/>
                  </criteria>
            </definition>
            <definition class="compliance" id="oval:org.open-scap.f14:def:20227" version="1">
                  <metadata>
                        <title>Restrict Permissions on Files Used by cron</title>
                        <reference ref_id="CCE-4251-5" source="CCE"/>
                        <description>File permissions for /etc/cron.monthly should be set correctly.</description>
                  </metadata>
                  <criteria>
                        <criterion test_ref="oval:org.open-scap.f14:tst:20227"/>
                  </criteria>
            </definition>
            <definition class="compliance" id="oval:org.open-scap.f14:def:20228" version="1">
                  <metadata>
                        <title>Restrict Permissions on Files Used by cron</title>
                        <reference ref_id="CCE-4250-7" source="CCE"/>
                        <description>File permissions for /etc/cron.d should be set correctly.</description>
                  </metadata>
                  <criteria>
                        <criterion test_ref="oval:org.open-scap.f14:tst:20228"/>
                  </criteria>
            </definition>
            <definition class="compliance" id="oval:org.open-scap.f14:def:20229" version="1">
                  <metadata>
                        <title>Restrict group owner on /var/spool/cron file</title>
                        <reference ref_id="TBD" source="CCE"/>
                        <description>The /var/spool/cron file should be owned by the appropriate group.</description>
                  </metadata>
                  <criteria>
                        <criterion test_ref="oval:org.open-scap.f14:tst:20229"/>
                  </criteria>
            </definition>
            <definition class="compliance" id="oval:org.open-scap.f14:def:20230" version="1">
                  <metadata>
                        <title>Restrict user owner on /var/spool/cron file</title>
                        <reference ref_id="TBD" source="CCE"/>
                        <description>The /var/spool/cron file should be owned by the appropriate user.</description>
                  </metadata>
                  <criteria>
                        <criterion test_ref="oval:org.open-scap.f14:tst:20230"/>
                  </criteria>
            </definition>
            <definition class="compliance" id="oval:org.open-scap.f14:def:20231" version="1">
                  <metadata>
                        <title>Restrict Permissions on /var/spool/cron file</title>
                        <reference ref_id="TBD" source="CCE"/>
                        <description>File permissions for /var/spool/cron should be set correctly.</description>
                  </metadata>
                  <criteria>
                        <criterion test_ref="oval:org.open-scap.f14:tst:20231"/>
                  </criteria>
            </definition>
            <definition class="compliance" id="oval:org.open-scap.f14:def:20232" version="1">
                  <metadata>
                        <title>Remove /etc/cron.deny</title>
                        <reference ref_id="TBD" source="CCE"/>
                        <description>/etc/cron.deny file should not exist.</description>
                  </metadata>
                  <criteria>
                        <criterion comment="Check existence of file /etc/cron.deny" test_ref="oval:org.open-scap.f14:tst:20232"/>
                  </criteria>
            </definition>
            <definition class="compliance" id="oval:org.open-scap.f14:def:20233" version="1">
                  <metadata>
                        <title>Remove /etc/at.deny</title>
                        <reference ref_id="TBD" source="CCE"/>
                        <description>/etc/at.deny file should not exist.</description>
                  </metadata>
                  <criteria>
                        <criterion comment="Check existence of file /etc/at.deny" test_ref="oval:org.open-scap.f14:tst:20233"/>
                  </criteria>
            </definition>
            <definition class="compliance" id="oval:org.open-scap.f14:def:20234" version="1">
                  <metadata>
                        <title>Disable OpenSSH Software</title>
                        <reference ref_id="CCE-4268-9" source="CCE"/>
                        <description>The sshd service should be disabled.</description>
                  </metadata>
                  <criteria operator="OR" comment="SSH is not installed or conditions are met">
                        <extend_definition definition_ref="oval:org.open-scap.f14:def:20235" comment="ssh is not installed"/>
                        <criterion comment="Conditions are satisfied" test_ref="oval:org.open-scap.f14:tst:20234"/>
                  </criteria>
            </definition>
            <definition class="compliance" id="oval:org.open-scap.f14:def:20235" version="1">
                  <metadata>
                        <title>Remove OpenSSH Software</title>
                        <reference ref_id="CCE-4272-1" source="CCE"/>
                        <description>SSH should be uninstalled</description>
                  </metadata>
                  <criteria>
                        <criterion comment="Conditions are satisfied" test_ref="oval:org.open-scap.f14:tst:20235"/>
                  </criteria>
            </definition>
            <definition class="compliance" id="oval:org.open-scap.f14:def:20236" version="1">
                  <metadata>
                        <title>Remove SSH Server iptables Firewall Exception</title>
                        <reference ref_id="CCE-4295-2" source="CCE"/>
                        <description>Inbound connections to the ssh port should be denied (and dependencies are met)</description>
                  </metadata>
                  <criteria operator="OR" comment="SSH is not being used or conditions are met">
                        <extend_definition definition_ref="oval:org.open-scap.f14:def:20234" comment="sshd service is disabled"/>
                        <criterion comment="Remove IPv4 inbound connections" test_ref="oval:org.open-scap.f14:tst:20236"/>
                  </criteria>
            </definition>
            <definition class="compliance" id="oval:org.open-scap.f14:def:20237" version="1">
                  <metadata>
                        <title>Remove SSH Server ip6tables Firewall Exception</title>
                        <reference ref_id="TBD" source="CCE"/>
                        <description>Inbound connections to the ssh port should be denied (and dependencies are met)</description>
                  </metadata>
                  <criteria operator="OR" comment="SSH is not being used or conditions are met">
                        <extend_definition definition_ref="oval:org.open-scap.f14:def:20234" comment="sshd service is disabled"/>
                        <criterion comment="Remove IPv6 inbound connections" test_ref="oval:org.open-scap.f14:tst:20237"/>
                  </criteria>
            </definition>
            <definition class="compliance" id="oval:org.open-scap.f14:def:20238" version="1">
                  <metadata>
                        <title>Ensure Only Protocol 2 Connections Allowed</title>
                        <reference ref_id="CCE-4325-7" source="CCE"/>
                        <description>SSH version 1 protocol support should be disabled. (and dependencies are met)</description>
                  </metadata>
                  <criteria operator="OR" comment="SSH is not being used or conditions are met">
                        <extend_definition definition_ref="oval:org.open-scap.f14:def:20234" comment="sshd service is disabled"/>
                        <criterion comment="Conditions are satisfied" test_ref="oval:org.open-scap.f14:tst:20238"/>
                  </criteria>
            </definition>
            <definition class="compliance" id="oval:org.open-scap.f14:def:20239" version="1">
                  <metadata>
                        <title>Set Idle Timeout Interval for User Logins</title>
                        <reference ref_id="CCE-3845-5" source="CCE"/>
                        <description>The SSH idle timout interval should be set to an appropriate value (and dependencies are met)</description>
                  </metadata>
                  <criteria operator="OR" comment="SSH is not being used or conditions are met">
                        <extend_definition definition_ref="oval:org.open-scap.f14:def:20234" comment="sshd service is disabled"/>
                        <criterion comment="check ClientAliveInterval in /etc/ssh/sshd_config" test_ref="oval:org.open-scap.f14:tst:20239"/>
                  </criteria>
            </definition>
            <definition class="compliance" id="oval:org.open-scap.f14:def:20240" version="1">
                  <metadata>
                        <title>Set ClientAliveCountMax for User Logins</title>
                        <reference ref_id="TBD" source="CCE"/>
                        <description>The SSH ClientAliveCountMax should be set to an appropriate value (and dependencies are met)</description>
                  </metadata>
                  <criteria operator="OR" comment="SSH is not being used or conditions are met">
                        <extend_definition definition_ref="oval:org.open-scap.f14:def:20234" comment="sshd service is disabled"/>
                        <criterion comment="check ClientAliveCountMax in /etc/ssh/sshd_config" test_ref="oval:org.open-scap.f14:tst:20240"/>
                  </criteria>
            </definition>
            <definition class="compliance" id="oval:org.open-scap.f14:def:20241" version="1">
                  <metadata>
                        <title>Disable .rhosts Files</title>
                        <reference ref_id="CCE-4475-0" source="CCE"/>
                        <description>Emulation of the rsh command through the ssh server should be disabled (and dependencies are met)</description>
                  </metadata>
                  <criteria operator="OR" comment="SSH is not being used or conditions are met">
                        <extend_definition definition_ref="oval:org.open-scap.f14:def:20234" comment="sshd service is disabled"/>
                        <criterion comment="Conditions are satisfied" test_ref="oval:org.open-scap.f14:tst:20241"/>
                  </criteria>
            </definition>
            <definition class="compliance" id="oval:org.open-scap.f14:def:20242" version="1">
                  <metadata>
                        <title>Disable Host-Based Authentication</title>
                        <reference ref_id="CCE-4370-3" source="CCE"/>
                        <description>SSH host-based authentication should be disabled (and dependencies are met)</description>
                  </metadata>
                  <criteria operator="OR" comment="SSH is not being used or conditions are met">
                        <extend_definition definition_ref="oval:org.open-scap.f14:def:20234" comment="sshd service is disabled"/>
                        <criterion comment="Conditions are satisfied" test_ref="oval:org.open-scap.f14:tst:20242"/>
                  </criteria>
            </definition>
            <definition class="compliance" id="oval:org.open-scap.f14:def:20243" version="1">
                  <metadata>
                        <title>Disable root Login via SSH</title>
                        <reference ref_id="CCE-4387-7" source="CCE"/>
                        <description>Root login via SSH should be disabled (and dependencies are met)</description>
                  </metadata>
                  <criteria operator="OR" comment="SSH is not being used or conditions are met">
                        <extend_definition definition_ref="oval:org.open-scap.f14:def:20234" comment="sshd service is disabled"/>
                        <criterion comment="Conditions are satisfied" test_ref="oval:org.open-scap.f14:tst:20243"/>
                  </criteria>
            </definition>
            <definition class="compliance" id="oval:org.open-scap.f14:def:20244" version="1">
                  <metadata>
                        <title>Disable Empty Passwords</title>
                        <reference ref_id="CCE-3660-8" source="CCE"/>
                        <description>Remote connections from accounts with empty passwords should be disabled (and dependencies are met)</description>
                  </metadata>
                  <criteria operator="OR" comment="SSH is not being used or conditions are met">
                        <extend_definition definition_ref="oval:org.open-scap.f14:def:20234" comment="sshd service is disabled"/>
                        <criterion comment="Conditions are satisfied" test_ref="oval:org.open-scap.f14:tst:20244"/>
                  </criteria>
            </definition>
            <definition class="compliance" id="oval:org.open-scap.f14:def:20245" version="1">
                  <metadata>
                        <title>Enable a Warning Banner</title>
                        <reference ref_id="CCE-4431-3" source="CCE"/>
                        <description>SSH warning banner should be enabled (and dependencies are met)</description>
                  </metadata>
                  <criteria operator="OR" comment="SSH is not being used or conditions are met">
                        <extend_definition definition_ref="oval:org.open-scap.f14:def:20234" comment="sshd service is disabled"/>
                        <criterion comment="Conditions are satisfied" test_ref="oval:org.open-scap.f14:tst:20245"/>
                  </criteria>
            </definition>
            <definition class="compliance" id="oval:org.open-scap.f14:def:202455" version="1">
                  <metadata>
                        <title>Do Not Allow Users to Set Environment Options</title>
                        <reference ref_id="CCE-4422-2" source="CCE"/>
                        <description>PermitUserEnvironment should be disabled</description>
                  </metadata>
                  <criteria operator="OR" comment="SSH is not being used or conditions are met">
                        <extend_definition definition_ref="oval:org.open-scap.f14:def:20234" comment="sshd service is disabled"/>
                        <criterion comment="Check value of PermitUserEnvironment in /etc/ssh/sshd_config" test_ref="oval:org.open-scap.f14:tst:202455"/>
                  </criteria>
            </definition>
            <definition class="compliance" id="oval:org.open-scap.f14:def:202456" version="1">
                  <metadata>
                        <title>Use Only Approved Ciphers</title>
                        <reference ref_id="CCE-4422-2" source="CCE"/>
                        <description>Use only approved ciphers</description>
                  </metadata>
                  <criteria operator="OR" comment="SSH is not being used or conditions are met">
                        <extend_definition definition_ref="oval:org.open-scap.f14:def:20234" comment="sshd service is disabled"/>
                        <criterion comment="Check value of Ciphers in /etc/ssh/sshd_config" test_ref="oval:org.open-scap.f14:tst:202456"/>
                  </criteria>
            </definition>
            <definition class="compliance" id="oval:org.open-scap.f14:def:20246" version="1">
                  <metadata>
                        <title>Disable X Windows at System Boot</title>
                        <reference ref_id="CCE-4462-8" source="CCE"/>
                        <description>X Windows should be disabled at system boot</description>
                  </metadata>
                  <criteria>
                        <criterion test_ref="oval:org.open-scap.f14:tst:20246"/>
                  </criteria>
            </definition>
            <definition class="compliance" id="oval:org.open-scap.f14:def:20247" version="1">
                  <metadata>
                        <title>Remove X Windows from the System if Possible</title>
                        <reference ref_id="CCE-4422-2" source="CCE"/>
                        <description>X Windows should be removed</description>
                  </metadata>
                  <criteria>
                        <criterion comment="Unknown test stub" test_ref="oval:org.open-scap.f14:tst:22"/>
                  </criteria>
            </definition>
            <definition class="compliance" id="oval:org.open-scap.f14:def:20248" version="1">
                  <metadata>
                        <title>Disable X Window System Listening</title>
                        <reference ref_id="CCE-4074-1" source="CCE"/>
                        <description>Disable the ability to provide remote graphical display</description>
                  </metadata>
                  <criteria>
                        <criterion comment="Check for existence of line exec X :0 -nolisten tcp $@ in file /etc/X11/xinit/xserverrc" test_ref="oval:org.open-scap.f14:tst:20248"/>
                  </criteria>
            </definition>
            <definition class="compliance" id="oval:org.open-scap.f14:def:20249" version="1">
                  <metadata>
                        <title>Create Warning Banners for GUI Login Users</title>
                        <reference ref_id="CCE-3717-6" source="CCE"/>
                        <description>Enable warning banner for GUI login</description>
                  </metadata>
                  <criteria>
                        <criterion comment="check the value of InfoMsgFile=/etc/issue in /etc/gdm/custom.conf" test_ref="oval:org.open-scap.f14:tst:20249"/>
                  </criteria>
            </definition>
            <definition class="compliance" id="oval:org.open-scap.f14:def:20250" version="1">
                  <metadata>
                        <title>Disable Avahi Server Software</title>
                        <reference ref_id="CCE-4365-3" source="CCE"/>
                        <description>The avahi-daemon service should be disabled.</description>
                  </metadata>
                  <criteria>
                        <criterion comment="Conditions are satisfied" test_ref="oval:org.open-scap.f14:tst:20250"/>
                  </criteria>
            </definition>
            <definition class="compliance" id="oval:org.open-scap.f14:def:20251" version="1">
                  <metadata>
                        <title>Serve Only via Required Protocol</title>
                        <reference ref_id="CCE-4136-8" source="CCE"/>
                        <description>The Avahi daemon should be configured not to serve via Ipv6 (and dependencies are met)</description>
                  </metadata>
                  <criteria operator="OR" comment="avahi is diabled or do not use ipv6">
                        <extend_definition definition_ref="oval:org.open-scap.f14:def:20250" comment="avahi is disabled"/>
                        <criterion comment="Unknown test stub" test_ref="oval:org.open-scap.f14:tst:20251"/>
                  </criteria>
            </definition>
            <definition class="compliance" id="oval:org.open-scap.f14:def:20252" version="1">
                  <metadata>
                        <title>Serve Only via Required Protocol</title>
                        <reference ref_id="CCE-4409-9" source="CCE"/>
                        <description>The Avahi daemon should be configured not to serve via Ipv4 (and dependencies are met)</description>
                  </metadata>
                  <criteria operator="OR" comment="avahi is diabled or do not use ipv4">
                        <extend_definition definition_ref="oval:org.open-scap.f14:def:20250" comment="avahi is disabled"/>
                        <criterion comment="Unknown test stub" test_ref="oval:org.open-scap.f14:tst:20252"/>
                  </criteria>
            </definition>
            <definition class="compliance" id="oval:org.open-scap.f14:def:20253" version="1">
                  <metadata>
                        <title>Check Responses' TTL Field</title>
                        <reference ref_id="CCE-4426-3" source="CCE"/>
                        <description>Avahi should be configured to reject packets with a TTL field not equal to 255 (and dependencies are met)</description>
                  </metadata>
                  <criteria operator="OR" comment="avahi is diabled or conditions are met">
                        <extend_definition definition_ref="oval:org.open-scap.f14:def:20250" comment="avahi is disabled"/>
                        <criterion test_ref="oval:org.open-scap.f14:tst:20253"/>
                  </criteria>
            </definition>
            <definition class="compliance" id="oval:org.open-scap.f14:def:20254" version="1">
                  <metadata>
                        <title>Prevent Other Programs from Using Avahi's Port</title>
                        <reference ref_id="CCE-4193-9" source="CCE"/>
                        <description>Avahi should be configured to not allow other stacks from binding to port 5353 (and dependencies are met)</description>
                  </metadata>
                  <criteria operator="OR" comment="avahi is diabled or conditions are met">
                        <extend_definition definition_ref="oval:org.open-scap.f14:def:20250" comment="avahi is disabled"/>
                        <criterion test_ref="oval:org.open-scap.f14:tst:20254"/>
                  </criteria>
            </definition>
            <definition class="compliance" id="oval:org.open-scap.f14:def:20255" version="1">
                  <metadata>
                        <title>Disable Publishing if Possible</title>
                        <reference ref_id="CCE-4444-6" source="CCE"/>
                        <description>Avahi publishing of local information should be disabled (and dependencies are met)</description>
                  </metadata>
                  <criteria operator="OR" comment="avahi is diabled or conditions are met">
                        <extend_definition definition_ref="oval:org.open-scap.f14:def:20250" comment="avahi is disabled"/>
                        <criterion test_ref="oval:org.open-scap.f14:tst:20255"/>
                  </criteria>
            </definition>
            <definition class="compliance" id="oval:org.open-scap.f14:def:20256" version="1">
                  <metadata>
                        <title>Restrict Published Information</title>
                        <reference ref_id="CCE-4352-1" source="CCE"/>
                        <description>Avahi publishing of local information by user applications should be disabled (and dependencies are met)</description>
                  </metadata>
                  <criteria operator="OR" comment="avahi is diabled or conditions are met">
                        <extend_definition definition_ref="oval:org.open-scap.f14:def:20250" comment="avahi is disabled"/>
                        <criterion test_ref="oval:org.open-scap.f14:tst:20256"/>
                  </criteria>
            </definition>
            <definition class="compliance" id="oval:org.open-scap.f14:def:20257" version="1">
                  <metadata>
                        <title>Restrict Published Information</title>
                        <reference ref_id="CCE-4433-9" source="CCE"/>
                        <description>Avahi publishing of hardware information should be disabled (and dependencies are met)</description>
                  </metadata>
                  <criteria operator="OR" comment="avahi is diabled or conditions are met">
                        <extend_definition definition_ref="oval:org.open-scap.f14:def:20250" comment="avahi is disabled"/>
                        <criterion test_ref="oval:org.open-scap.f14:tst:20257"/>
                  </criteria>
            </definition>
            <definition class="compliance" id="oval:org.open-scap.f14:def:20258" version="1">
                  <metadata>
                        <title>Restrict Published Information</title>
                        <reference ref_id="CCE-4451-1" source="CCE"/>
                        <description>Avahi publishing of workstation name should be disabled (and dependencies are met)</description>
                  </metadata>
                  <criteria operator="OR" comment="avahi is diabled or conditions are met">
                        <extend_definition definition_ref="oval:org.open-scap.f14:def:20250" comment="avahi is disabled"/>
                        <criterion test_ref="oval:org.open-scap.f14:tst:20258"/>
                  </criteria>
            </definition>
            <definition class="compliance" id="oval:org.open-scap.f14:def:20259" version="1">
                  <metadata>
                        <title>Restrict Published Information</title>
                        <reference ref_id="CCE-4341-4" source="CCE"/>
                        <description>Avahi publishing of IP addresses should be disabled (and dependencies are met)</description>
                  </metadata>
                  <criteria operator="OR" comment="avahi is diabled or conditions are met">
                        <extend_definition definition_ref="oval:org.open-scap.f14:def:20250" comment="avahi is disabled"/>
                        <criterion test_ref="oval:org.open-scap.f14:tst:20259"/>
                  </criteria>
            </definition>
            <definition class="compliance" id="oval:org.open-scap.f14:def:20260" version="1">
                  <metadata>
                        <title>Restrict Published Information</title>
                        <reference ref_id="CCE-4358-8" source="CCE"/>
                        <description>Avahi publishing of domain name should be disabled (and dependencies are met)</description>
                  </metadata>
                  <criteria operator="OR" comment="avahi is diabled or conditions are met">
                        <extend_definition definition_ref="oval:org.open-scap.f14:def:20250" comment="avahi is disabled"/>
                        <criterion test_ref="oval:org.open-scap.f14:tst:20260"/>
                  </criteria>
            </definition>
            <definition class="compliance" id="oval:org.open-scap.f14:def:20261" version="1">
                  <metadata>
                        <title>Disable the CUPS Service if Possible</title>
                        <reference ref_id="CCE-4112-9" source="CCE"/>
                        <description>The cups service should be disabled.</description>
                  </metadata>
                  <criteria>
                        <criterion comment="Conditions are satisfied" test_ref="oval:org.open-scap.f14:tst:20261"/>
                  </criteria>
            </definition>
            <definition class="compliance" id="oval:org.open-scap.f14:def:20262" version="1">
                  <metadata>
                        <title>Disable Firewall Access to Printing Service over IPv4 if Possible</title>
                        <reference ref_id="CCE-3649-1" source="CCE"/>
                        <description>Firewall access to printing service should be disabled</description>
                  </metadata>
                  <criteria>
                        <criterion comment="Unknown test stub" test_ref="oval:org.open-scap.f14:tst:22"/>
                  </criteria>
            </definition>
            <definition class="compliance" id="oval:org.open-scap.f14:def:20263" version="1">
                  <metadata>
                        <title>Disable Firewall Access to Printing Service over IPv6 if Possible</title>
                        <reference ref_id="TBD" source="CCE"/>
                        <description>Firewall access to printing service should be disabled</description>
                  </metadata>
                  <criteria>
                        <criterion comment="Unknown test stub" test_ref="oval:org.open-scap.f14:tst:22"/>
                  </criteria>
            </definition>
            <definition class="compliance" id="oval:org.open-scap.f14:def:20264" version="1">
                  <metadata>
                        <title>Disable Printer Browsing Entirely if Possible</title>
                        <reference ref_id="CCE-4420-6" source="CCE"/>
                        <description>Remote print browsing should be disabled (and dependencies are met)</description>
                  </metadata>
                  <criteria operator="OR" comment="CUPS is disabled or conditions are met">
                        <extend_definition definition_ref="oval:org.open-scap.f14:def:20261" comment="CUPS is disabled"/>
                        <criterion test_ref="oval:org.open-scap.f14:tst:20264"/>
                  </criteria>
            </definition>
            <definition class="compliance" id="oval:org.open-scap.f14:def:20265" version="1">
                  <metadata>
                        <title>Disable Printer Browsing Entirely if Possible</title>
                        <reference ref_id="CCE-4407-3" source="CCE"/>
                        <description>CUPS should be allowed or denied the ability to listen for Incoming printer information as appropriate (and dependencies are met)</description>
                  </metadata>
                  <criteria operator="OR" comment="CUPS is disabled or conditions are met">
                        <extend_definition definition_ref="oval:org.open-scap.f14:def:20261" comment="CUPS is disabled"/>
                        <criterion comment="Conditions are satisfied" test_ref="oval:org.open-scap.f14:tst:20265"/>
                  </criteria>
            </definition>
            <definition class="compliance" id="oval:org.open-scap.f14:def:20266" version="1">
                  <metadata>
                        <title>Disable HPLIP Service if Possible</title>
                        <reference ref_id="CCE-4425-5" source="CCE"/>
                        <description>The hplip service should be disabled.</description>
                  </metadata>
                  <criteria>
                        <criterion comment="Conditions are satisfied" test_ref="oval:org.open-scap.f14:tst:20266"/>
                  </criteria>
            </definition>
            <definition class="compliance" id="oval:org.open-scap.f14:def:20267" version="1">
                  <metadata>
                        <title>Disable DHCP Client if Possible</title>
                        <reference ref_id="CCE-4191-3" source="CCE"/>
                        <description>The dhcp client service should be disabled for each interface.</description>
                  </metadata>
                  <criteria>
                        <criterion comment="Conditions are satisfied" test_ref="oval:org.open-scap.f14:tst:20267"/>
                  </criteria>
            </definition>
            <definition class="compliance" id="oval:org.open-scap.f14:def:20268" version="1">
                  <metadata>
                        <title>Disable DHCP Server if possible</title>
                        <reference ref_id="CCE-4336-4" source="CCE"/>
                        <description>The dhcpd service should be enabled or disabled as appropriate.</description>
                  </metadata>
                  <criteria operator="OR" comment="dhcp is not installed or conditions are met">
                        <extend_definition definition_ref="oval:org.open-scap.f14:def:20269" comment="dhcp is not installed"/>
                        <criterion comment="Conditions are satisfied" test_ref="oval:org.open-scap.f14:tst:20268"/>
                  </criteria>
            </definition>
            <definition class="compliance" id="oval:org.open-scap.f14:def:20269" version="1">
                  <metadata>
                        <title>Disable DHCP Server if possible</title>
                        <reference ref_id="CCE-4464-4" source="CCE"/>
                        <description>The dhcp package should be uninstalled.</description>
                  </metadata>
                  <criteria>
                        <criterion comment="Conditions are satisfied" test_ref="oval:org.open-scap.f14:tst:20269"/>
                  </criteria>
            </definition>
            <definition class="compliance" id="oval:org.open-scap.f14:def:20270" version="1">
                  <metadata>
                        <title>Do Not Use Dynamic DNS</title>
                        <reference ref_id="CCE-4257-2" source="CCE"/>
                        <description>The dynamic DNS feature of the DHCP server should be disabled (and dependencies are met)</description>
                  </metadata>
                  <criteria operator="OR" comment="dhcp is not enabled or conditions are met">
                        <extend_definition definition_ref="oval:org.open-scap.f14:def:20268" comment="dhcp is not enabled"/>
                        <criterion comment="Conditions are satisfied" test_ref="oval:org.open-scap.f14:tst:20270"/>
                  </criteria>
            </definition>
            <definition class="compliance" id="oval:org.open-scap.f14:def:20271" version="1">
                  <metadata>
                        <title>Deny Decline Messages</title>
                        <reference ref_id="CCE-4403-2" source="CCE"/>
                        <description>DHCPDECLINE messages should be denied by the DHCP server (and dependencies are met)</description>
                  </metadata>
                  <criteria operator="OR" comment="dhcp is not enabled or conditions are met">
                        <extend_definition definition_ref="oval:org.open-scap.f14:def:20268" comment="dhcp is not enabled"/>
                        <criterion comment="Conditions are satisfied" test_ref="oval:org.open-scap.f14:tst:20271"/>
                  </criteria>
            </definition>
            <definition class="compliance" id="oval:org.open-scap.f14:def:20272" version="1">
                  <metadata>
                        <title>Deny BOOTP Queries</title>
                        <reference ref_id="CCE-4345-5" source="CCE"/>
                        <description>BOOTP queries should be accepted or denied by the DHCP server as appropriate (and dependencies are met)</description>
                  </metadata>
                  <criteria operator="OR" comment="dhcp is not enabled or conditions are met">
                        <extend_definition definition_ref="oval:org.open-scap.f14:def:20268" comment="dhcp is not enabled"/>
                        <criterion comment="Conditions are satisfied" test_ref="oval:org.open-scap.f14:tst:20272"/>
                  </criteria>
            </definition>
            <definition class="compliance" id="oval:org.open-scap.f14:def:20273" version="1">
                  <metadata>
                        <title>Minimize Served Information</title>
                        <reference ref_id="CCE-3724-2" source="CCE"/>
                        <description>Domain name server information should be sent or not sent by the DHCP server as appropriate. (and dependencies are met)</description>
                  </metadata>
                  <criteria operator="OR" comment="dhcp is not enabled or conditions are met">
                        <extend_definition definition_ref="oval:org.open-scap.f14:def:20268" comment="dhcp is not enabled"/>
                        <criterion comment="Unknown test stub" test_ref="oval:org.open-scap.f14:tst:22"/>
                  </criteria>
            </definition>
            <definition class="compliance" id="oval:org.open-scap.f14:def:20274" version="1">
                  <metadata>
                        <title>Minimize Served Information</title>
                        <reference ref_id="CCE-4243-2" source="CCE"/>
                        <description>Default routers should be sent or not sent by the DHCP server as appropriate. (and dependencies are met)</description>
                  </metadata>
                  <criteria operator="OR" comment="dhcp is not enabled or conditions are met">
                        <extend_definition definition_ref="oval:org.open-scap.f14:def:20268" comment="dhcp is not enabled"/>
                        <criterion comment="Unknown test stub" test_ref="oval:org.open-scap.f14:tst:22"/>
                  </criteria>
            </definition>
            <definition class="compliance" id="oval:org.open-scap.f14:def:20275" version="1">
                  <metadata>
                        <title>Minimize Served Information</title>
                        <reference ref_id="CCE-4389-3" source="CCE"/>
                        <description>Domain name should be sent or not sent by the DHCP server as appropriate. (and dependencies are met)</description>
                  </metadata>
                  <criteria operator="OR" comment="dhcp is not enabled or conditions are met">
                        <extend_definition definition_ref="oval:org.open-scap.f14:def:20268" comment="dhcp is not enabled"/>
                        <criterion comment="Unknown test stub" test_ref="oval:org.open-scap.f14:tst:22"/>
                  </criteria>
            </definition>
            <definition class="compliance" id="oval:org.open-scap.f14:def:20276" version="1">
                  <metadata>
                        <title>Minimize Served Information</title>
                        <reference ref_id="CCE-3913-1" source="CCE"/>
                        <description>NIS domain should be sent or not sent by the DHCP server as appropriate. (and dependencies are met)</description>
                  </metadata>
                  <criteria operator="OR" comment="dhcp is not enabled or conditions are met">
                        <extend_definition definition_ref="oval:org.open-scap.f14:def:20268" comment="dhcp is not enabled"/>
                        <criterion comment="Unknown test stub" test_ref="oval:org.open-scap.f14:tst:22"/>
                  </criteria>
            </definition>
            <definition class="compliance" id="oval:org.open-scap.f14:def:20277" version="1">
                  <metadata>
                        <title>Minimize Served Information</title>
                        <reference ref_id="CCE-4169-9" source="CCE"/>
                        <description>NIS servers should be sent or not sent by the DHCP server as appropriate. (and dependencies are met)</description>
                  </metadata>
                  <criteria operator="OR" comment="dhcp is not enabled or conditions are met">
                        <extend_definition definition_ref="oval:org.open-scap.f14:def:20268" comment="dhcp is not enabled"/>
                        <criterion comment="Unknown test stub" test_ref="oval:org.open-scap.f14:tst:22"/>
                  </criteria>
            </definition>
            <definition class="compliance" id="oval:org.open-scap.f14:def:20278" version="1">
                  <metadata>
                        <title>Minimize Served Information</title>
                        <reference ref_id="CCE-4318-2" source="CCE"/>
                        <description>Time offset should be sent or not sent by the DHCP server as appropriate. (and dependencies are met)</description>
                  </metadata>
                  <criteria operator="OR" comment="dhcp is not enabled or conditions are met">
                        <extend_definition definition_ref="oval:org.open-scap.f14:def:20268" comment="dhcp is not enabled"/>
                        <criterion comment="Unknown test stub" test_ref="oval:org.open-scap.f14:tst:22"/>
                  </criteria>
            </definition>
            <definition class="compliance" id="oval:org.open-scap.f14:def:20279" version="1">
                  <metadata>
                        <title>Minimize Served Information</title>
                        <reference ref_id="CCE-4319-0" source="CCE"/>
                        <description>NTP servers should be sent or not sent by the DHCP server as appropriate. (and dependencies are met)</description>
                  </metadata>
                  <criteria operator="OR" comment="dhcp is not enabled or conditions are met">
                        <extend_definition definition_ref="oval:org.open-scap.f14:def:20268" comment="dhcp is not enabled"/>
                        <criterion comment="Unknown test stub" test_ref="oval:org.open-scap.f14:tst:22"/>
                  </criteria>
            </definition>
            <definition class="compliance" id="oval:org.open-scap.f14:def:20280" version="1">
                  <metadata>
                        <title>Configure DHCP Logging</title>
                        <reference ref_id="CCE-3733-3" source="CCE"/>
                        <description>dhcpd logging should be enabled. (and dependencies are met)</description>
                  </metadata>
                  <criteria operator="OR" comment="dhcp is not enabled or conditions are met">
                        <extend_definition definition_ref="oval:org.open-scap.f14:def:20268" comment="dhcp is not enabled"/>
                        <criterion comment="Conditions are satisfied" test_ref="oval:org.open-scap.f14:tst:20280"/>
                  </criteria>
            </definition>
            <definition class="compliance" id="oval:org.open-scap.f14:def:20281" version="1">
                  <metadata>
                        <title>Enable the NTP Daemon</title>
                        <reference ref_id="CCE-4376-0" source="CCE"/>
                        <description>The ntpd service should be enabled.</description>
                  </metadata>
                  <criteria>
                        <criterion comment="Conditions are satisfied" test_ref="oval:org.open-scap.f14:tst:20281"/>
                  </criteria>
            </definition>
            <definition class="compliance" id="oval:org.open-scap.f14:def:20282" version="1">
                  <metadata>
                        <title>Deny All Access to ntpd by Default</title>
                        <reference ref_id="CCE-4134-3" source="CCE"/>
                        <description>Network access to ntpd should be denied (and dependencies are met)</description>
                  </metadata>
                  <criteria operator="AND" comment="ntpd is enabled and conditions are met">
                        <extend_definition definition_ref="oval:org.open-scap.f14:def:20281" comment="ntpd is enabled"/>
                        <criterion comment="Conditions are satisfied" test_ref="oval:org.open-scap.f14:tst:20282"/>
                  </criteria>
            </definition>
            <definition class="compliance" id="oval:org.open-scap.f14:def:20283" version="1">
                  <metadata>
                        <title>Specify a Remote NTP Server for Time Data</title>
                        <reference ref_id="CCE-4385-1" source="CCE"/>
                        <description>A remote NTP Server for time synchronization should be specified (and dependencies are met)</description>
                  </metadata>
                  <criteria operator="AND" comment="ntpd is enabled and conditions are met">
                        <extend_definition definition_ref="oval:org.open-scap.f14:def:20281" comment="ntpd is enabled"/>
                        <criterion comment="Unknown test stub" test_ref="oval:org.open-scap.f14:tst:22"/>
                  </criteria>
            </definition>
            <definition class="compliance" id="oval:org.open-scap.f14:def:20284" version="1">
                  <metadata>
                        <title>Obtain NTP Software</title>
                        <reference ref_id="CCE-4032-9" source="CCE"/>
                        <description>OpenNTPD should be installed</description>
                  </metadata>
                  <criteria>
                        <criterion comment="Unknown test stub" test_ref="oval:org.open-scap.f14:tst:22"/>
                  </criteria>
            </definition>
            <definition class="compliance" id="oval:org.open-scap.f14:def:20285" version="1">
                  <metadata>
                        <title>Enable the NTP Daemon</title>
                        <reference ref_id="CCE-4424-8" source="CCE"/>
                        <description>The ntp daemon should be enabled (and dependencies are met)</description>
                  </metadata>
                  <criteria operator="AND" comment="OpenNTPD is installed and conditions are met">
                        <extend_definition definition_ref="oval:org.open-scap.f14:def:20284" comment="OpenNTPD is installed"/>
                        <extend_definition negate="true" definition_ref="oval:org.open-scap.f14:def:20281" comment="ntpd is enabled"/>
                        <criterion comment="Conditions are satisfied" test_ref="oval:org.open-scap.f14:tst:20285"/>
                  </criteria>
            </definition>
            <definition class="compliance" id="oval:org.open-scap.f14:def:20286" version="1">
                  <metadata>
                        <title>Configure the Client NTP Daemon to Use the Local Server</title>
                        <reference ref_id="CCE-3487-6" source="CCE"/>
                        <description>The ntp daemon synchronization server should be set appropriately (and dependencies are met)</description>
                  </metadata>
                  <criteria operator="AND" comment="OpenNTPD is installed and conditions are met">
                        <extend_definition definition_ref="oval:org.open-scap.f14:def:20284" comment="OpenNTPD is installed"/>
                        <criterion comment="Unknown test stub" test_ref="oval:org.open-scap.f14:tst:22"/>
                  </criteria>
            </definition>
            <definition class="compliance" id="oval:org.open-scap.f14:def:20287" version="1">
                  <metadata>
                        <title>Mail Transfer Agent</title>
                        <reference ref_id="CCE-4416-4" source="CCE"/>
                        <description>The sendmail service should be disabled.</description>
                  </metadata>
                  <criteria>
                        <criterion comment="Conditions are satisfied" test_ref="oval:org.open-scap.f14:tst:20287"/>
                  </criteria>
            </definition>
            <definition class="compliance" id="oval:org.open-scap.f14:def:20288" version="1">
                  <metadata>
                        <title>Disable the Listening Sendmail Daemon</title>
                        <reference ref_id="CCE-4293-7" source="CCE"/>
                        <description>The listening sendmail daemon should be disabled. (and dependencies are met)</description>
                  </metadata>
                  <criteria operator="OR" comment="sendmail is not enabled or conditions are met">
                        <extend_definition definition_ref="oval:org.open-scap.f14:def:20287" comment="sendmail is not enabled"/>
                        <criterion comment="Conditions are satisfied" test_ref="oval:org.open-scap.f14:tst:20288"/>
                  </criteria>
            </definition>
            <definition class="compliance" id="oval:org.open-scap.f14:def:202885" version="1">
                  <metadata>
                        <title>Configure LDAP to Use TLS for All Transactions</title>
                        <reference ref_id="TBD" source="CCE"/>
                        <description>Clients require LDAP servers to provide valid certificates for SSL communications.</description>
                  </metadata>
                  <criteria>
                        <criterion comment="look for tls_checkpeer yess in /etc/ldap.conf" test_ref="oval:org.open-scap.f14:tst:202885"/>
                  </criteria>
            </definition>
            <definition class="compliance" id="oval:org.open-scap.f14:def:20289" version="1">
                  <metadata>
                        <title>Install OpenLDAP Server RPM</title>
                        <reference ref_id="CCE-3501-4" source="CCE"/>
                        <description>The ldap service should be disabled.</description>
                  </metadata>
                  <criteria>
                        <criterion comment="Conditions are satisfied" test_ref="oval:org.open-scap.f14:tst:20289"/>
                  </criteria>
            </definition>
            <definition class="compliance" id="oval:org.open-scap.f14:def:20290" version="1">
                  <metadata>
                        <title>Correct Permissions on LDAP Server Files</title>
                        <reference ref_id="CCE-4484-2" source="CCE"/>
                        <description>The /var/lib/ldap/* files should be owned by the appropriate group.</description>
                  </metadata>
                  <criteria>
                        <criterion test_ref="oval:org.open-scap.f14:tst:20290"/>
                  </criteria>
            </definition>
            <definition class="compliance" id="oval:org.open-scap.f14:def:20291" version="1">
                  <metadata>
                        <title>Correct Permissions on LDAP Server Files</title>
                        <reference ref_id="CCE-4502-1" source="CCE"/>
                        <description>The /var/lib/ldap/* files should be owned by the appropriate user.</description>
                  </metadata>
                  <criteria>
                        <criterion test_ref="oval:org.open-scap.f14:tst:20291"/>
                  </criteria>
            </definition>
            <definition class="compliance" id="oval:org.open-scap.f14:def:20292" version="1">
                  <metadata>
                        <title>Disable Services Used Only by NFS</title>
                        <reference ref_id="CCE-4396-8" source="CCE"/>
                        <description>The nfslock service should be disabled.</description>
                  </metadata>
                  <criteria>
                        <criterion comment="Conditions are satisfied" test_ref="oval:org.open-scap.f14:tst:20292"/>
                  </criteria>
            </definition>
            <definition class="compliance" id="oval:org.open-scap.f14:def:20293" version="1">
                  <metadata>
                        <title>Disable Services Used Only by NFS</title>
                        <reference ref_id="CCE-3535-2" source="CCE"/>
                        <description>The rpcgssd service should be disabled.</description>
                  </metadata>
                  <criteria>
                        <criterion comment="Conditions are satisfied" test_ref="oval:org.open-scap.f14:tst:20293"/>
                  </criteria>
            </definition>
            <definition class="compliance" id="oval:org.open-scap.f14:def:20294" version="1">
                  <metadata>
                        <title>Disable Services Used Only by NFS</title>
                        <reference ref_id="CCE-3568-3" source="CCE"/>
                        <description>The rpcidmapd service should be disabled.</description>
                  </metadata>
                  <criteria>
                        <criterion comment="Conditions are satisfied" test_ref="oval:org.open-scap.f14:tst:20294"/>
                  </criteria>
            </definition>
            <definition class="compliance" id="oval:org.open-scap.f14:def:20295" version="1">
                  <metadata>
                        <title>Disable netfs if Possible</title>
                        <reference ref_id="CCE-4533-6" source="CCE"/>
                        <description>The netfs service should be disabled.</description>
                  </metadata>
                  <criteria>
                        <criterion comment="Conditions are satisfied" test_ref="oval:org.open-scap.f14:tst:20295"/>
                  </criteria>
            </definition>
            <definition class="compliance" id="oval:org.open-scap.f14:def:20296" version="1">
                  <metadata>
                        <title>Disable RPC Portmapper if Possible</title>
                        <reference ref_id="CCE-4550-0" source="CCE"/>
                        <description>The portmap service should be disabled.</description>
                  </metadata>
                  <criteria>
                        <criterion comment="Conditions are satisfied" test_ref="oval:org.open-scap.f14:tst:20296"/>
                  </criteria>
            </definition>
            <definition class="compliance" id="oval:org.open-scap.f14:def:20297" version="1">
                  <metadata>
                        <title>Configure NFS Services to Use Fixed Ports</title>
                        <reference ref_id="CCE-4559-1" source="CCE"/>
                        <description>The lockd service should be configured to use a static port for TCP</description>
                  </metadata>
                  <criteria>
                        <criterion comment="Conditions are satisfied" test_ref="oval:org.open-scap.f14:tst:20297"/>
                  </criteria>
            </definition>
            <definition class="compliance" id="oval:org.open-scap.f14:def:20298" version="1">
                  <metadata>
                        <title>Configure NFS Services to Use Fixed Ports</title>
                        <reference ref_id="CCE-4015-4" source="CCE"/>
                        <description>The statd service should be configured to use an outgoing static port</description>
                  </metadata>
                  <criteria>
                        <criterion comment="Conditions are satisfied" test_ref="oval:org.open-scap.f14:tst:20298"/>
                  </criteria>
            </definition>
            <definition class="compliance" id="oval:org.open-scap.f14:def:20299" version="1">
                  <metadata>
                        <title>Configure NFS Services to Use Fixed Ports</title>
                        <reference ref_id="CCE-3667-3" source="CCE"/>
                        <description>The statd service should be configured to use a static port</description>
                  </metadata>
                  <criteria>
                        <criterion comment="Conditions are satisfied" test_ref="oval:org.open-scap.f14:tst:20299"/>
                  </criteria>
            </definition>
            <definition class="compliance" id="oval:org.open-scap.f14:def:20300" version="1">
                  <metadata>
                        <title>Configure NFS Services to Use Fixed Ports</title>
                        <reference ref_id="CCE-4310-9" source="CCE"/>
                        <description>The lockd service should be configured to use a static port for UDP</description>
                  </metadata>
                  <criteria>
                        <criterion comment="Conditions are satisfied" test_ref="oval:org.open-scap.f14:tst:20300"/>
                  </criteria>
            </definition>
            <definition class="compliance" id="oval:org.open-scap.f14:def:20301" version="1">
                  <metadata>
                        <title>Configure NFS Services to Use Fixed Ports</title>
                        <reference ref_id="CCE-4438-8" source="CCE"/>
                        <description>The mountd service should be configured to use a static port</description>
                  </metadata>
                  <criteria>
                        <criterion comment="Conditions are satisfied" test_ref="oval:org.open-scap.f14:tst:20301"/>
                  </criteria>
            </definition>
            <definition class="compliance" id="oval:org.open-scap.f14:def:20302" version="1">
                  <metadata>
                        <title>Configure NFS Services to Use Fixed Ports</title>
                        <reference ref_id="CCE-3579-0" source="CCE"/>
                        <description>The rquotad service should be configured to use a static port</description>
                  </metadata>
                  <criteria>
                        <criterion comment="Conditions are satisfied" test_ref="oval:org.open-scap.f14:tst:20302"/>
                  </criteria>
            </definition>
            <definition class="compliance" id="oval:org.open-scap.f14:def:20303" version="1">
                  <metadata>
                        <title>Disable NFS Server Daemons</title>
                        <reference ref_id="CCE-4473-5" source="CCE"/>
                        <description>The nfs service should be disabled</description>
                  </metadata>
                  <criteria>
                        <criterion comment="Conditions are satisfied" test_ref="oval:org.open-scap.f14:tst:20303"/>
                  </criteria>
            </definition>
            <definition class="compliance" id="oval:org.open-scap.f14:def:20304" version="1">
                  <metadata>
                        <title>Disable NFS Server Daemons</title>
                        <reference ref_id="CCE-4491-7" source="CCE"/>
                        <description>The rpcsvcgssd service should be disabled</description>
                  </metadata>
                  <criteria>
                        <criterion comment="Conditions are satisfied" test_ref="oval:org.open-scap.f14:tst:20304"/>
                  </criteria>
            </definition>
<!--            <definition class="compliance" id="oval:org.open-scap.f14:def:20305" version="1">
                  <metadata>
                        <title>Mount Remote Filesystems with nodev</title>
                        <reference ref_id="CCE-4368-7" source="CCE"/>
                        <description>The nodev option should be enabled for all NFS mounts</description>
                  </metadata>
                  <criteria>
                        <criterion comment="if type is nfs[4] in /etc/fstab options should contain nodev" test_ref="oval:org.open-scap.f14:tst:203051"/> 
                        <criterion comment="if type is nfs[4] in /etc/mtab options should contain nodev" test_ref="oval:org.open-scap.f14:tst:203052"/>
                  </criteria>
            </definition> -->
            <definition class="compliance" id="oval:org.open-scap.f14:def:20306" version="1">
                  <metadata>
                        <title>Mount Remote Filesystems with nosuid</title>
                        <reference ref_id="CCE-4024-6" source="CCE"/>
                        <description>The nosuid option should be enabled for all NFS mounts</description>
                  </metadata>
                  <criteria>
                        <criterion comment="Unknown test stub" test_ref="oval:org.open-scap.f14:tst:22"/>
                  </criteria>
            </definition>
            <definition class="compliance" id="oval:org.open-scap.f14:def:20307" version="1">
                  <metadata>
                        <title>Mount Remote Filesystems with noexec</title>
                        <reference ref_id="CCE-4526-0" source="CCE"/>
                        <description>The noexec option should be enabled for all NFS mounts</description>
                  </metadata>
                  <criteria>
                        <criterion comment="Unknown test stub" test_ref="oval:org.open-scap.f14:tst:22"/>
                  </criteria>
            </definition>
            <definition class="compliance" id="oval:org.open-scap.f14:def:20308" version="1">
                  <metadata>
                        <title>Use Root-Squashing on All Exports</title>
                        <reference ref_id="CCE-4544-3" source="CCE"/>
                        <description>Root squashing should be enabled for all NFS shares</description>
                  </metadata>
                  <criteria operator="OR" comment="nfs is not running or conditions are met">
                        <extend_definition definition_ref="oval:org.open-scap.f14:def:20312" comment="nfs is not running"/>
                        <criterion comment="Conditions are satisfied" test_ref="oval:org.open-scap.f14:tst:20308"/>
                  </criteria>
            </definition>
            <definition class="compliance" id="oval:org.open-scap.f14:def:20309" version="1">
                  <metadata>
                        <title>Restrict NFS Clients to Privileged Ports</title>
                        <reference ref_id="CCE-4465-1" source="CCE"/>
                        <description>Restriction of NFS clients to privileged ports should be enabled</description>
                  </metadata>
                  <criteria operator="OR" comment="nfs is not running or conditions are met">
                        <extend_definition definition_ref="oval:org.open-scap.f14:def:20312" comment="nfs is not running"/>
                        <criterion comment="Conditions are satisfied" test_ref="oval:org.open-scap.f14:tst:20309"/>
                  </criteria>
            </definition>
            <definition class="compliance" id="oval:org.open-scap.f14:def:20310" version="1">
                  <metadata>
                        <title>Export Filesystems Read-Only if Possible</title>
                        <reference ref_id="CCE-4350-5" source="CCE"/>
                        <description>Write access to NFS shares should be disabled</description>
                  </metadata>
                  <criteria>
                        <criterion comment="Conditions are satisfied" test_ref="oval:org.open-scap.f14:tst:20310"/>
                  </criteria>
            </definition>
            <definition class="compliance" id="oval:org.open-scap.f14:def:20311" version="1">
                  <metadata>
                        <title>Disable DNS Server if Possible</title>
                        <reference ref_id="CCE-3578-2" source="CCE"/>
                        <description>The named service should be disabled.</description>
                  </metadata>
                  <criteria operator="OR" comment="bind is not installed or conditions are met">
                        <extend_definition definition_ref="oval:org.open-scap.f14:def:20312" comment="bind is not installed"/>
                        <criterion comment="Conditions are satisfied" test_ref="oval:org.open-scap.f14:tst:20311"/>
                  </criteria>
            </definition>
            <definition class="compliance" id="oval:org.open-scap.f14:def:20312" version="1">
                  <metadata>
                        <title>Disable DNS Server if Possible</title>
                        <reference ref_id="CCE-4219-2" source="CCE"/>
                        <description>The bind package should be uninstalled.</description>
                  </metadata>
                  <criteria>
                        <criterion comment="Conditions are satisfied" test_ref="oval:org.open-scap.f14:tst:20312"/>
                  </criteria>
            </definition>
            <definition class="compliance" id="oval:org.open-scap.f14:def:20313" version="1">
                  <metadata>
                        <title>Run DNS Software in a chroot Jail</title>
                        <reference ref_id="CCE-3985-9" source="CCE"/>
                        <description>The /var/named/chroot/etc/named.conf file should be owned by the appropriate group. (and dependencies are met)</description>
                  </metadata>
                  <criteria operator="OR" comment="DNS is not enabled or conditions are met">
                        <extend_definition definition_ref="oval:org.open-scap.f14:def:20311" comment="DNS is not enabled"/>
                        <criterion test_ref="oval:org.open-scap.f14:tst:20313"/>
                  </criteria>
            </definition>
            <definition class="compliance" id="oval:org.open-scap.f14:def:20314" version="1">
                  <metadata>
                        <title>Run DNS Software in a chroot Jail</title>
                        <reference ref_id="CCE-4258-0" source="CCE"/>
                        <description>The /var/named/chroot/etc/named.conf file should be owned by the appropriate user. (and dependencies are met)</description>
                  </metadata>
                  <criteria operator="OR" comment="DNS is not enabled or conditions are met">
                        <extend_definition definition_ref="oval:org.open-scap.f14:def:20311" comment="DNS is not enabled"/>
                        <criterion test_ref="oval:org.open-scap.f14:tst:20314"/>
                  </criteria>
            </definition>
            <definition class="compliance" id="oval:org.open-scap.f14:def:20315" version="1">
                  <metadata>
                        <title>Run DNS Software in a chroot Jail</title>
                        <reference ref_id="CCE-4487-5" source="CCE"/>
                        <description>File permissions for /var/named/chroot/etc/named.conf should be set correctly. (and dependencies are met)</description>
                  </metadata>
                  <criteria operator="OR" comment="DNS is not enabled or conditions are met">
                        <extend_definition definition_ref="oval:org.open-scap.f14:def:20311" comment="DNS is not enabled"/>
                        <criterion test_ref="oval:org.open-scap.f14:tst:20315"/>
                  </criteria>
            </definition>
            <definition class="compliance" id="oval:org.open-scap.f14:def:20316" version="1">
                  <metadata>
                        <title>Disable Dynamic Updates if Possible</title>
                        <reference ref_id="CCE-4399-2" source="CCE"/>
                        <description>LDAP's dynamic updates feature should be disabled as appropriate (and dependencies are met)</description>
                  </metadata>
                  <criteria operator="OR" comment="DNS is not enabled or conditions are met">
                        <extend_definition definition_ref="oval:org.open-scap.f14:def:20311" comment="DNS is not enabled"/>
                        <criterion comment="Unknown test stub" test_ref="oval:org.open-scap.f14:tst:22"/>
                  </criteria>
            </definition>
            <definition class="compliance" id="oval:org.open-scap.f14:def:20317" version="1">
                  <metadata>
                        <title>Disable vsftpd if Possible</title>
                        <reference ref_id="CCE-3919-8" source="CCE"/>
                        <description>The vsftpd service should be disabled.</description>
                  </metadata>
                  <criteria operator="OR" comment="vsftpd is not installed or conditions are met">
                        <extend_definition definition_ref="oval:org.open-scap.f14:def:203175" comment="vsftpd is not installed"/>
                        <criterion comment="Conditions are satisfied" test_ref="oval:org.open-scap.f14:tst:20317"/>
                  </criteria>
            </definition>
            <definition class="compliance" id="oval:org.open-scap.f14:def:203175" version="1">
                  <metadata>
                        <title>Uninstall vsftpd if Possible</title>
                        <reference ref_id="CCE-3919-8" source="CCE"/>
                        <description>The vsftpd service should be uninstalled.</description>
                  </metadata>
                  <criteria>
                        <criterion comment="Conditions are satisfied" test_ref="oval:org.open-scap.f14:tst:203175"/>
                  </criteria>
            </definition>
            <definition class="compliance" id="oval:org.open-scap.f14:def:20318" version="1">
                  <metadata>
                        <title>Enable Logging of All FTP Transactions</title>
                        <reference ref_id="CCE-4549-2" source="CCE"/>
                        <description>Logging of vsftpd transactions should be enabled (and dependencies are met)</description>
                  </metadata>
                  <criteria operator="OR" comment="vsftpd is not enabled or conditions are met">
                        <extend_definition definition_ref="oval:org.open-scap.f14:def:20317" comment="vsftpd is not enabled"/>
                        <criterion comment="Unknown test stub" test_ref="oval:org.open-scap.f14:tst:22"/>
                  </criteria>
            </definition>
            <definition class="compliance" id="oval:org.open-scap.f14:def:20319" version="1">
                  <metadata>
                        <title>Create Warning Banners for All FTP Users</title>
                        <reference ref_id="CCE-4554-2" source="CCE"/>
                        <description>A warning banner for all FTP users should be enabled (and dependencies are met)</description>
                  </metadata>
                  <criteria operator="OR" comment="vsftpd is not enabled or conditions are met">
                        <extend_definition definition_ref="oval:org.open-scap.f14:def:20317" comment="vsftpd is not enabled"/>
                        <criterion comment="Conditions are satisfied" test_ref="oval:org.open-scap.f14:tst:20319"/>
                  </criteria>
            </definition>
            <definition class="compliance" id="oval:org.open-scap.f14:def:20320" version="1">
                  <metadata>
                        <title>Restrict Access to Anonymous Users if Possible</title>
                        <reference ref_id="CCE-4443-8" source="CCE"/>
                        <description>Local user login to the vsftpd service should be disabled (and dependencies are met)</description>
                  </metadata>
                  <criteria operator="OR" comment="vsftpd is not enabled or conditions are met">
                        <extend_definition definition_ref="oval:org.open-scap.f14:def:20317" comment="vsftpd is not enabled"/>
                        <criterion comment="Unknown test stub" test_ref="oval:org.open-scap.f14:tst:22"/>
                  </criteria>
            </definition>
            <definition class="compliance" id="oval:org.open-scap.f14:def:20321" version="1">
                  <metadata>
                        <title>Disable FTP Uploads if Possible</title>
                        <reference ref_id="CCE-4461-0" source="CCE"/>
                        <description>File uploads via vsftpd should be disabled (and dependencies are met)</description>
                  </metadata>
                  <criteria operator="OR" comment="vsftpd is not enabled or conditions are met">
                        <extend_definition definition_ref="oval:org.open-scap.f14:def:20317" comment="vsftpd is not enabled"/>
                        <criterion comment="Unknown test stub" test_ref="oval:org.open-scap.f14:tst:22"/>
                  </criteria>
            </definition>
            <definition class="compliance" id="oval:org.open-scap.f14:def:20322" version="1">
                  <metadata>
                        <title>Disable Apache if Possible</title>
                        <reference ref_id="CCE-4338-0" source="CCE"/>
                        <description>The httpd service should be disabled.</description>
                  </metadata>
                  <criteria operator="OR" comment="httpd is not installed or conditions are met">
                        <extend_definition definition_ref="oval:org.open-scap.f14:def:20323" comment="httpd is not installed"/>
                        <criterion comment="Conditions are satisfied" test_ref="oval:org.open-scap.f14:tst:20322"/>
                  </criteria>
            </definition>
            <definition class="compliance" id="oval:org.open-scap.f14:def:20323" version="1">
                  <metadata>
                        <title>Uninstall Apache if Possible</title>
                        <reference ref_id="CCE-4514-6" source="CCE"/>
                        <description>The httpd package should be uninstalled.</description>
                  </metadata>
                  <criteria>
                        <criterion comment="Conditions are satisfied" test_ref="oval:org.open-scap.f14:tst:20323"/>
                  </criteria>
            </definition>
            <definition class="compliance" id="oval:org.open-scap.f14:def:20324" version="1">
                  <metadata>
                        <title>Restrict Information Leakage</title>
                        <reference ref_id="CCE-4474-3" source="CCE"/>
                        <description>The apache2 server's ServerTokens value should be set appropriately (and dependencies are met)</description>
                  </metadata>
                  <criteria operator="OR" comment="httpd is disabled or conditions are met">
                        <extend_definition definition_ref="oval:org.open-scap.f14:def:20323" comment="httpd is disabled"/>
                        <criterion test_ref="oval:org.open-scap.f14:tst:20324"/>
                  </criteria>
            </definition>
            <definition class="compliance" id="oval:org.open-scap.f14:def:20325" version="1">
                  <metadata>
                        <title>Restrict Information Leakage</title>
                        <reference ref_id="CCE-3756-4" source="CCE"/>
                        <description>The apache2 server's ServerSignature value should be set appropriately (and dependencies are met)</description>
                  </metadata>
                  <criteria operator="OR" comment="httpd is disabled or conditions are met">
                        <extend_definition definition_ref="oval:org.open-scap.f14:def:20323" comment="httpd is disabled"/>
                        <criterion test_ref="oval:org.open-scap.f14:tst:20325"/>
                  </criteria>
            </definition>
            <definition class="compliance" id="oval:org.open-scap.f14:def:20326" version="1">
                  <metadata>
                        <title>Restrict File and Directory Access</title>
                        <reference ref_id="CCE-4509-6" source="CCE"/>
                        <description>File permissions for /etc/httpd/conf should be set correctly. (and dependencies are met)</description>
                  </metadata>
                  <criteria operator="OR" comment="httpd is disabled or conditions are met">
                        <extend_definition definition_ref="oval:org.open-scap.f14:def:20323" comment="httpd is disabled"/>
                        <criterion test_ref="oval:org.open-scap.f14:tst:20326"/>
                  </criteria>
            </definition>
            <definition class="compliance" id="oval:org.open-scap.f14:def:20327" version="1">
                  <metadata>
                        <title>Restrict File and Directory Access</title>
                        <reference ref_id="CCE-4386-9" source="CCE"/>
                        <description>File permissions for /etc/httpd/conf/* should be set correctly. (and dependencies are met)</description>
                  </metadata>
                  <criteria operator="OR" comment="httpd is disabled or conditions are met">
                        <extend_definition definition_ref="oval:org.open-scap.f14:def:20323" comment="httpd is disabled"/>
                        <criterion test_ref="oval:org.open-scap.f14:tst:20327"/>
                  </criteria>
            </definition>
            <definition class="compliance" id="oval:org.open-scap.f14:def:20328" version="1">
                  <metadata>
                        <title>Restrict File and Directory Access</title>
                        <reference ref_id="CCE-4029-5" source="CCE"/>
                        <description>File permissions for /usr/sbin/httpd should be set correctly. (and dependencies are met)</description>
                  </metadata>
                  <criteria operator="OR" comment="httpd is disabled or conditions are met">
                        <extend_definition definition_ref="oval:org.open-scap.f14:def:20323" comment="httpd is disabled"/>
                        <criterion test_ref="oval:org.open-scap.f14:tst:20328"/>
                  </criteria>
            </definition>
            <definition class="compliance" id="oval:org.open-scap.f14:def:20329" version="1">
                  <metadata>
                        <title>Restrict File and Directory Access</title>
                        <reference ref_id="CCE-3581-6" source="CCE"/>
                        <description>The /etc/httpd/conf/* files should be owned by the appropriate group.</description>
                  </metadata>
                  <criteria operator="OR" comment="httpd is disabled or conditions are met">
                        <extend_definition definition_ref="oval:org.open-scap.f14:def:20323" comment="httpd is disabled"/>
                        <criterion test_ref="oval:org.open-scap.f14:tst:20329"/>
                  </criteria>
            </definition>
            <definition class="compliance" id="oval:org.open-scap.f14:def:20330" version="1">
                  <metadata>
                        <title>Restrict File and Directory Access</title>
                        <reference ref_id="CCE-4574-0" source="CCE"/>
                        <description>File permissions for /var/log/httpd should be set correctly. (and dependencies are met)</description>
                  </metadata>
                  <criteria operator="OR" comment="httpd is disabled or conditions are met">
                        <extend_definition definition_ref="oval:org.open-scap.f14:def:20323" comment="httpd is disabled"/>
                        <criterion test_ref="oval:org.open-scap.f14:tst:20330"/>
                  </criteria>
            </definition>
            <definition class="compliance" id="oval:org.open-scap.f14:def:20331" version="1">
                  <metadata>
                        <title>Disable Dovecot if Possible</title>
                        <reference ref_id="CCE-3847-1" source="CCE"/>
                        <description>The dovecot service should be disabled.</description>
                  </metadata>
                  <criteria operator="OR" comment="dovecot is not installed or conditions are met">
                        <extend_definition definition_ref="oval:org.open-scap.f14:def:20332" comment="dovecot is not installed"/>
                        <criterion comment="Conditions are satisfied" test_ref="oval:org.open-scap.f14:tst:20331"/>
                  </criteria>
            </definition>
            <definition class="compliance" id="oval:org.open-scap.f14:def:20332" version="1">
                  <metadata>
                        <title>Disable Dovecot if Possible</title>
                        <reference ref_id="CCE-4239-0" source="CCE"/>
                        <description>The dovecot package should be uninstalled.</description>
                  </metadata>
                  <criteria>
                        <criterion comment="Conditions are satisfied" test_ref="oval:org.open-scap.f14:tst:20332"/>
                  </criteria>
            </definition>
            <definition class="compliance" id="oval:org.open-scap.f14:def:20333" version="1">
                  <metadata>
                        <title>Support Only the Necessary Protocols</title>
                        <reference ref_id="CCE-4384-4" source="CCE"/>
                        <description>Dovecot should be configured to not support the imaps protocol (and dependencies are met)</description>
                  </metadata>
                  <criteria operator="OR" comment="dovecot is disabled or conditions are met">
                        <extend_definition definition_ref="oval:org.open-scap.f14:def:20331" comment="dovecot is disabled"/>
                        <criterion comment="Conditions are satisfied" test_ref="oval:org.open-scap.f14:tst:20333"/>
                  </criteria>
            </definition>
            <definition class="compliance" id="oval:org.open-scap.f14:def:20334" version="1">
                  <metadata>
                        <title>Support Only the Necessary Protocols</title>
                        <reference ref_id="CCE-3887-7" source="CCE"/>
                        <description>Dovecot should be configured to not support the pop3s protocol (and dependencies are met)</description>
                  </metadata>
                  <criteria operator="OR" comment="dovecot is disabled or conditions are met">
                        <extend_definition definition_ref="oval:org.open-scap.f14:def:20331" comment="dovecot is disabled"/>
                        <criterion comment="Conditions are satisfied" test_ref="oval:org.open-scap.f14:tst:20334"/>
                  </criteria>
            </definition>
            <definition class="compliance" id="oval:org.open-scap.f14:def:20335" version="1">
                  <metadata>
                        <title>Support Only the Necessary Protocols</title>
                        <reference ref_id="CCE-4530-2" source="CCE"/>
                        <description>Dovecot should be configured to not support the pop3 (and dependencies are met)</description>
                  </metadata>
                  <criteria operator="OR" comment="dovecot is disabled or conditions are met">
                        <extend_definition definition_ref="oval:org.open-scap.f14:def:20331" comment="dovecot is disabled"/>
                        <criterion comment="Conditions are satisfied" test_ref="oval:org.open-scap.f14:tst:20335"/>
                  </criteria>
            </definition>
            <definition class="compliance" id="oval:org.open-scap.f14:def:20336" version="1">
                  <metadata>
                        <title>Support Only the Necessary Protocols</title>
                        <reference ref_id="CCE-4547-6" source="CCE"/>
                        <description>Dovecot should be configured to not support the imap protocol (and dependencies are met)</description>
                  </metadata>
                  <criteria operator="OR" comment="dovecot is disabled or conditions are met">
                        <extend_definition definition_ref="oval:org.open-scap.f14:def:20331" comment="dovecot is disabled"/>
                        <criterion comment="Conditions are satisfied" test_ref="oval:org.open-scap.f14:tst:20336"/>
                  </criteria>
            </definition>
            <definition class="compliance" id="oval:org.open-scap.f14:def:20337" version="1">
                  <metadata>
                        <title>Disable Plaintext Authentication</title>
                        <reference ref_id="CCE-4552-6" source="CCE"/>
                        <description>Dovecot plaintext authentication of clients should be disabled as necessary (and dependencies are met)</description>
                  </metadata>
                  <criteria operator="OR" comment="dovecot is disabled or conditions are met">
                        <extend_definition definition_ref="oval:org.open-scap.f14:def:20331" comment="dovecot is disabled"/>
                        <criterion test_ref="oval:org.open-scap.f14:tst:20337"/>
                  </criteria>
            </definition>
            <definition class="compliance" id="oval:org.open-scap.f14:def:20338" version="1">
                  <metadata>
                        <title>Enable Dovecot Options to Protect Against Code Flaws</title>
                        <reference ref_id="CCE-4371-1" source="CCE"/>
                        <description>The Dovecot option to drop privileges to user before executing mail process should be enabled (and dependencies are met)</description>
                  </metadata>
                  <criteria operator="OR" comment="dovecot is disabled or conditions are met">
                        <extend_definition definition_ref="oval:org.open-scap.f14:def:20331" comment="dovecot is disabled"/>
                        <criterion test_ref="oval:org.open-scap.f14:tst:20338"/>
                  </criteria>
            </definition>
            <definition class="compliance" id="oval:org.open-scap.f14:def:20339" version="1">
                  <metadata>
                        <title>Enable Dovecot Options to Protect Against Code Flaws</title>
                        <reference ref_id="CCE-4410-7" source="CCE"/>
                        <description>The Dovecot option to spawn a new login process per connection should be enabled (and dependencies are met)</description>
                  </metadata>
                  <criteria operator="OR" comment="dovecot is disabled or conditions are met">
                        <extend_definition definition_ref="oval:org.open-scap.f14:def:20331" comment="dovecot is disabled"/>
                        <criterion test_ref="oval:org.open-scap.f14:tst:20339"/>
                  </criteria>
            </definition>
            <definition class="compliance" id="oval:org.open-scap.f14:def:20340" version="1">
                  <metadata>
                        <title>Disable Samba if Possible</title>
                        <reference ref_id="CCE-4551-8" source="CCE"/>
                        <description>The smb service should be disabled.</description>
                  </metadata>
                  <criteria>
                        <criterion comment="Conditions are satisfied" test_ref="oval:org.open-scap.f14:tst:20340"/>
                  </criteria>
            </definition>
            <definition class="compliance" id="oval:org.open-scap.f14:def:203403" version="1">
                  <metadata>
                        <title>Disable Guest Access and Local Login Support</title>
                        <reference ref_id="CCE-4551-8" source="CCE"/>
                        <description>Do not allow guest users to access local file or printer shares.</description>
                  </metadata>
                  <criteria>
                        <criterion comment="Conditions are satisfied" test_ref="oval:org.open-scap.f14:tst:203403" />
                  </criteria>
            </definition>
            <definition class="compliance" id="oval:org.open-scap.f14:def:2034010" version="1">
                  <metadata>
                        <title>Require Client SMB Packet Signing, if using smbclient</title>
                        <reference ref_id="CCE-4551-8" source="CCE"/>
                        <description>Require samba clients running smbclient to use packet signing.  A Samba client should only communicate with servers who can support SMB packet signing.</description>
                  </metadata>
                  <criteria>
                        <criterion comment="check for client signing = mandatory in /etc/samba/smb.conf" test_ref="oval:org.open-scap.f14:tst:2034010"/>
                  </criteria>
            </definition>
            <definition class="compliance" id="oval:org.open-scap.f14:def:2034011" version="1">
                  <metadata>
                        <title>Disable Samba if Possible</title>
                        <reference ref_id="CCE-4551-8" source="CCE"/>
                        <description>The smb service should be disabled.</description>
                  </metadata>
                  <criteria>
                        <criterion comment="check for sec=krb5i or sec=ntlmv2i in /etc/fstab" test_ref="oval:org.open-scap.f14:tst:20340111"/>
                        <criterion comment="check for sec=krb5i or sec=ntlmv2i in /etc/mtab" test_ref="oval:org.open-scap.f14:tst:20340112"/>
                  </criteria>
            </definition>
            <definition class="compliance" id="oval:org.open-scap.f14:def:20341" version="1">
                  <metadata>
                        <title>Disable Squid if Possible</title>
                        <reference ref_id="CCE-4556-7" source="CCE"/>
                        <description>The squid service should be disabled.</description>
                  </metadata>
                  <criteria operator="OR" comment="squid is not installed or conditions are met">
                        <extend_definition definition_ref="oval:org.open-scap.f14:def:20342" comment="squid is not installed"/>
                        <criterion comment="Conditions are satisfied" test_ref="oval:org.open-scap.f14:tst:20341"/>
                  </criteria>
            </definition>
            <definition class="compliance" id="oval:org.open-scap.f14:def:20342" version="1">
                  <metadata>
                        <title>Disable Squid if Possible</title>
                        <reference ref_id="CCE-4076-6" source="CCE"/>
                        <description>The squid package should be uninstalled.</description>
                  </metadata>
                  <criteria>
                        <criterion comment="Conditions are satisfied" test_ref="oval:org.open-scap.f14:tst:20342"/>
                  </criteria>
            </definition>
            <definition class="compliance" id="oval:org.open-scap.f14:def:20343" version="1">
                  <metadata>
                        <title>Verify Default Secure Settings</title>
                        <reference ref_id="CCE-4454-5" source="CCE"/>
                        <description>The Squid option to force FTP passive connections should be enabled (and dependencies are met)</description>
                  </metadata>
                  <criteria operator="OR" comment="Squid is disabled or conditions are met">
                        <extend_definition definition_ref="oval:org.open-scap.f14:def:20341" comment="Squid is disabled"/>
                        <criterion test_ref="oval:org.open-scap.f14:tst:20343"/>
                  </criteria>
            </definition>
            <definition class="compliance" id="oval:org.open-scap.f14:def:20344" version="1">
                  <metadata>
                        <title>Verify Default Secure Settings</title>
                        <reference ref_id="CCE-4459-4" source="CCE"/>
                        <description>The Squid option to perform FTP sanity checks should be enabled or not as appropriate (and dependencies are met)</description>
                  </metadata>
                  <criteria operator="OR" comment="Squid is disabled or conditions are met">
                        <extend_definition definition_ref="oval:org.open-scap.f14:def:20341" comment="Squid is disabled"/>
                        <criterion test_ref="oval:org.open-scap.f14:tst:20344"/>
                  </criteria>
            </definition>
            <definition class="compliance" id="oval:org.open-scap.f14:def:20345" version="1">
                  <metadata>
                        <title>Verify Default Secure Settings</title>
                        <reference ref_id="CCE-4503-9" source="CCE"/>
                        <description>The Squid option to check for RFC compliant hostnames should be enabled or not as appropriate (and dependencies are met)</description>
                  </metadata>
                  <criteria operator="OR" comment="Squid is disabled or conditions are met">
                        <extend_definition definition_ref="oval:org.open-scap.f14:def:20341" comment="Squid is disabled"/>
                        <criterion test_ref="oval:org.open-scap.f14:tst:20345"/>
                  </criteria>
            </definition>
            <definition class="compliance" id="oval:org.open-scap.f14:def:20346" version="1">
                  <metadata>
                        <title>Verify Default Secure Settings</title>
                        <reference ref_id="CCE-4353-9" source="CCE"/>
                        <description>The Squid max request HTTP header length should be set to an appropriate value (and dependencies are met)</description>
                  </metadata>
                  <criteria operator="OR" comment="Squid is disabled or conditions are met">
                        <extend_definition definition_ref="oval:org.open-scap.f14:def:20341" comment="Squid is disabled"/>
                        <criterion test_ref="oval:org.open-scap.f14:tst:20346"/>
                  </criteria>
            </definition>
            <definition class="compliance" id="oval:org.open-scap.f14:def:20347" version="1">
                  <metadata>
                        <title>Verify Default Secure Settings</title>
                        <reference ref_id="CCE-4419-8" source="CCE"/>
                        <description>The Squid max reply HTTP header length should be set to an appropriate value (and dependencies are met)</description>
                  </metadata>
                  <criteria operator="OR" comment="Squid is disabled or conditions are met">
                        <extend_definition definition_ref="oval:org.open-scap.f14:def:20341" comment="Squid is disabled"/>
                        <criterion test_ref="oval:org.open-scap.f14:tst:20347"/>
                  </criteria>
            </definition>
            <definition class="compliance" id="oval:org.open-scap.f14:def:20348" version="1">
                  <metadata>
                        <title>Verify Default Secure Settings</title>
                        <reference ref_id="CCE-3692-1" source="CCE"/>
                        <description>The Squid EUID should be set to an appropriate user (and dependencies are met)</description>
                  </metadata>
                  <criteria operator="OR" comment="Squid is disabled or conditions are met">
                        <extend_definition definition_ref="oval:org.open-scap.f14:def:20341" comment="Squid is disabled"/>
                        <criterion test_ref="oval:org.open-scap.f14:tst:20348"/>
                  </criteria>
            </definition>
            <definition class="compliance" id="oval:org.open-scap.f14:def:20349" version="1">
                  <metadata>
                        <title>Verify Default Secure Settings</title>
                        <reference ref_id="CCE-4476-8" source="CCE"/>
                        <description>The Squid GUID should be set to an appropriate group (and dependencies are met)</description>
                  </metadata>
                  <criteria operator="OR" comment="Squid is disabled or conditions are met">
                        <extend_definition definition_ref="oval:org.open-scap.f14:def:20341" comment="Squid is disabled"/>
                        <criterion test_ref="oval:org.open-scap.f14:tst:20349"/>
                  </criteria>
            </definition>
            <definition class="compliance" id="oval:org.open-scap.f14:def:20350" version="1">
                  <metadata>
                        <title>Verify Default Secure Settings</title>
                        <reference ref_id="CCE-3585-7" source="CCE"/>
                        <description>The Squid option to ignore unknown nameservers should be enabled (and dependencies are met)</description>
                  </metadata>
                  <criteria operator="OR" comment="Squid is disabled or conditions are met">
                        <extend_definition definition_ref="oval:org.open-scap.f14:def:20341" comment="Squid is disabled"/>
                        <criterion test_ref="oval:org.open-scap.f14:tst:20350"/>
                  </criteria>
            </definition>
            <definition class="compliance" id="oval:org.open-scap.f14:def:20351" version="1">
                  <metadata>
                        <title>Change Default Insecure Settings</title>
                        <reference ref_id="CCE-4344-8" source="CCE"/>
                        <description>The Squid option to allow underscores in hostnames should be disabled (and dependencies are met)</description>
                  </metadata>
                  <criteria operator="OR" comment="Squid is disabled or conditions are met">
                        <extend_definition definition_ref="oval:org.open-scap.f14:def:20341" comment="Squid is disabled"/>
                        <criterion test_ref="oval:org.open-scap.f14:tst:20351"/>
                  </criteria>
            </definition>
            <definition class="compliance" id="oval:org.open-scap.f14:def:20352" version="1">
                  <metadata>
                        <title>Change Default Insecure Settings</title>
                        <reference ref_id="CCE-4494-1" source="CCE"/>
                        <description>The Squid option to suppress the httpd version string should be enabled (and dependencies are met)</description>
                  </metadata>
                  <criteria operator="OR" comment="Squid is disabled or conditions are met">
                        <extend_definition definition_ref="oval:org.open-scap.f14:def:20341" comment="Squid is disabled"/>
                        <criterion test_ref="oval:org.open-scap.f14:tst:20352"/>
                  </criteria>
            </definition>
            <definition class="compliance" id="oval:org.open-scap.f14:def:20353" version="1">
                  <metadata>
                        <title>Change Default Insecure Settings</title>
                        <reference ref_id="CCE-4181-4" source="CCE"/>
                        <description>The Squid option to show proxy client IP addresses in HTTP headers should be disabled (and dependencies are met)</description>
                  </metadata>
                  <criteria operator="OR" comment="Squid is disabled or conditions are met">
                        <extend_definition definition_ref="oval:org.open-scap.f14:def:20341" comment="Squid is disabled"/>
                        <criterion test_ref="oval:org.open-scap.f14:tst:20353"/>
                  </criteria>
            </definition>
            <definition class="compliance" id="oval:org.open-scap.f14:def:20354" version="1">
                  <metadata>
                        <title>Change Default Insecure Settings</title>
                        <reference ref_id="CCE-4577-3" source="CCE"/>
                        <description>The Squid option to log HTTP MIME headers should be enabled (and dependencies are met)</description>
                  </metadata>
                  <criteria operator="OR" comment="Squid is disabled or conditions are met">
                        <extend_definition definition_ref="oval:org.open-scap.f14:def:20341" comment="Squid is disabled"/>
                        <criterion test_ref="oval:org.open-scap.f14:tst:20354"/>
                  </criteria>
            </definition>
            <definition class="compliance" id="oval:org.open-scap.f14:def:20355" version="1">
                  <metadata>
                        <title>Access Control Lists (ACL)</title>
                        <reference ref_id="CCE-4511-2" source="CCE"/>
                        <description>Squid should be configured to not allow gss-http traffic (and dependencies are met)</description>
                  </metadata>
                  <criteria operator="OR" comment="Squid is disabled or conditions are met">
                        <extend_definition definition_ref="oval:org.open-scap.f14:def:20341" comment="Squid is disabled"/>
                        <criterion comment="Unknown test stub" test_ref="oval:org.open-scap.f14:tst:22"/>
                  </criteria>
            </definition>
            <definition class="compliance" id="oval:org.open-scap.f14:def:20356" version="1">
                  <metadata>
                        <title>Access Control Lists (ACL)</title>
                        <reference ref_id="CCE-4529-4" source="CCE"/>
                        <description>Squid should be configured to not allow https traffic (and dependencies are met)</description>
                  </metadata>
                  <criteria operator="OR" comment="Squid is disabled or conditions are met">
                        <extend_definition definition_ref="oval:org.open-scap.f14:def:20341" comment="Squid is disabled"/>
                        <criterion comment="Unknown test stub" test_ref="oval:org.open-scap.f14:tst:22"/>
                  </criteria>
            </definition>
            <definition class="compliance" id="oval:org.open-scap.f14:def:20357" version="1">
                  <metadata>
                        <title>Access Control Lists (ACL)</title>
                        <reference ref_id="CCE-3610-3" source="CCE"/>
                        <description>Squid should be configured to not allow wais traffic (and dependencies are met)</description>
                  </metadata>
                  <criteria operator="OR" comment="Squid is disabled or conditions are met">
                        <extend_definition definition_ref="oval:org.open-scap.f14:def:20341" comment="Squid is disabled"/>
                        <criterion comment="Unknown test stub" test_ref="oval:org.open-scap.f14:tst:22"/>
                  </criteria>
            </definition>
            <definition class="compliance" id="oval:org.open-scap.f14:def:20358" version="1">
                  <metadata>
                        <title>Access Control Lists (ACL)</title>
                        <reference ref_id="CCE-4466-9" source="CCE"/>
                        <description>Squid should be configured to not allow multiling http traffic (and dependencies are met)</description>
                  </metadata>
                  <criteria operator="OR" comment="Squid is disabled or conditions are met">
                        <extend_definition definition_ref="oval:org.open-scap.f14:def:20341" comment="Squid is disabled"/>
                        <criterion comment="Unknown test stub" test_ref="oval:org.open-scap.f14:tst:22"/>
                  </criteria>
            </definition>
            <definition class="compliance" id="oval:org.open-scap.f14:def:20359" version="1">
                  <metadata>
                        <title>Access Control Lists (ACL)</title>
                        <reference ref_id="CCE-4607-8" source="CCE"/>
                        <description>Squid should be configured to not allow http traffic (and dependencies are met)</description>
                  </metadata>
                  <criteria operator="OR" comment="Squid is disabled or conditions are met">
                        <extend_definition definition_ref="oval:org.open-scap.f14:def:20341" comment="Squid is disabled"/>
                        <criterion comment="Unknown test stub" test_ref="oval:org.open-scap.f14:tst:22"/>
                  </criteria>
            </definition>
            <definition class="compliance" id="oval:org.open-scap.f14:def:20360" version="1">
                  <metadata>
                        <title>Access Control Lists (ACL)</title>
                        <reference ref_id="CCE-4255-6" source="CCE"/>
                        <description>Squid should be configured to not allow ftp traffic (and dependencies are met)</description>
                  </metadata>
                  <criteria operator="OR" comment="Squid is disabled or conditions are met">
                        <extend_definition definition_ref="oval:org.open-scap.f14:def:20341" comment="Squid is disabled"/>
                        <criterion comment="Unknown test stub" test_ref="oval:org.open-scap.f14:tst:22"/>
                  </criteria>
            </definition>
            <definition class="compliance" id="oval:org.open-scap.f14:def:20361" version="1">
                  <metadata>
                        <title>Access Control Lists (ACL)</title>
                        <reference ref_id="CCE-4127-7" source="CCE"/>
                        <description>Squid should be configured to not allow gopher traffic (and dependencies are met)</description>
                  </metadata>
                  <criteria operator="OR" comment="Squid is disabled or conditions are met">
                        <extend_definition definition_ref="oval:org.open-scap.f14:def:20341" comment="Squid is disabled"/>
                        <criterion comment="Unknown test stub" test_ref="oval:org.open-scap.f14:tst:22"/>
                  </criteria>
            </definition>
            <definition class="compliance" id="oval:org.open-scap.f14:def:20362" version="1">
                  <metadata>
                        <title>Access Control Lists (ACL)</title>
                        <reference ref_id="CCE-4519-5" source="CCE"/>
                        <description>Squid should be configured to not allow filemaker traffic (and dependencies are met)</description>
                  </metadata>
                  <criteria operator="OR" comment="Squid is disabled or conditions are met">
                        <extend_definition definition_ref="oval:org.open-scap.f14:def:20341" comment="Squid is disabled"/>
                        <criterion comment="Unknown test stub" test_ref="oval:org.open-scap.f14:tst:22"/>
                  </criteria>
            </definition>
            <definition class="compliance" id="oval:org.open-scap.f14:def:20363" version="1">
                  <metadata>
                        <title>Access Control Lists (ACL)</title>
                        <reference ref_id="CCE-4413-1" source="CCE"/>
                        <description>Squid proxy access to localhost should be denied (and dependencies are met)</description>
                  </metadata>
                  <criteria operator="OR" comment="Squid is disabled or conditions are met">
                        <extend_definition definition_ref="oval:org.open-scap.f14:def:20341" comment="Squid is disabled"/>
                        <criterion comment="Unknown test stub" test_ref="oval:org.open-scap.f14:tst:22"/>
                  </criteria>
            </definition>
            <definition class="compliance" id="oval:org.open-scap.f14:def:20364" version="1">
                  <metadata>
                        <title>Access Control Lists (ACL)</title>
                        <reference ref_id="CCE-4373-7" source="CCE"/>
                        <description>Squid should be configured to not allow http-mgmt traffic (and dependencies are met)</description>
                  </metadata>
                  <criteria operator="OR" comment="Squid is disabled or conditions are met">
                        <extend_definition definition_ref="oval:org.open-scap.f14:def:20341" comment="Squid is disabled"/>
                        <criterion comment="Unknown test stub" test_ref="oval:org.open-scap.f14:tst:22"/>
                  </criteria>
            </definition>
            <definition class="compliance" id="oval:org.open-scap.f14:def:20365" version="1">
                  <metadata>
                        <title>Disable SNMP Server if Possible</title>
                        <reference ref_id="CCE-3765-5" source="CCE"/>
                        <description>The snmpd service should be disabled.</description>
                  </metadata>
                  <criteria operator="OR" comment="net-snmp is not installed or conditions are met">
                        <extend_definition definition_ref="oval:org.open-scap.f14:def:20366" comment="net-snmp is not installed"/>
                        <criterion comment="Conditions are satisfied" test_ref="oval:org.open-scap.f14:tst:20365"/>
                  </criteria>
            </definition>
            <definition class="compliance" id="oval:org.open-scap.f14:def:20366" version="1">
                  <metadata>
                        <title>Disable SNMP Server if Possible</title>
                        <reference ref_id="CCE-4404-0" source="CCE"/>
                        <description>The net-snmp package should be uninstalled.</description>
                  </metadata>
                  <criteria>
                        <criterion comment="Conditions are satisfied" test_ref="oval:org.open-scap.f14:tst:20366"/>
                  </criteria>
            </definition>
      </definitions>
      <tests>
            <ind-def:textfilecontent54_test id="oval:org.open-scap.f14:tst:20000" version="1" check="only one" comment="look for /tmp partition or logical volume in /etc/fstab" check_existence="at_least_one_exists">
                  <ind-def:object object_ref="oval:org.open-scap.f14:obj:20000" />
                  <ind-def:state state_ref="oval:org.open-scap.f14:ste:20000" />
            </ind-def:textfilecontent54_test>
            <ind-def:textfilecontent54_test id="oval:org.open-scap.f14:tst:20002" version="1" check="only one" comment="look for /var partition or logical volume in /etc/fstab" check_existence="at_least_one_exists">
                  <ind-def:object object_ref="oval:org.open-scap.f14:obj:20000" />
                  <ind-def:state state_ref="oval:org.open-scap.f14:ste:20002" />
            </ind-def:textfilecontent54_test>
            <ind-def:textfilecontent54_test id="oval:org.open-scap.f14:tst:20004" version="1" check="only one" comment="look for /var/log partition or logical volume in /etc/fstab" check_existence="at_least_one_exists">
                  <ind-def:object object_ref="oval:org.open-scap.f14:obj:20000" />
                  <ind-def:state state_ref="oval:org.open-scap.f14:ste:20004" />
            </ind-def:textfilecontent54_test>
            <ind-def:textfilecontent54_test id="oval:org.open-scap.f14:tst:20005" version="1" check="only one" comment="look for /var/log/audit partition or logical volume in /etc/fstab" check_existence="at_least_one_exists">
                  <ind-def:object object_ref="oval:org.open-scap.f14:obj:20000" />
                  <ind-def:state state_ref="oval:org.open-scap.f14:ste:20005" />
            </ind-def:textfilecontent54_test>
            <ind-def:textfilecontent54_test id="oval:org.open-scap.f14:tst:20006" version="1" check="only one" comment="look for /home partition or logical volume in /etc/fstab" check_existence="at_least_one_exists">
                  <ind-def:object object_ref="oval:org.open-scap.f14:obj:20000" />
                  <ind-def:state state_ref="oval:org.open-scap.f14:ste:20006" />
            </ind-def:textfilecontent54_test>


            <lin-def:rpminfo_test check_existence="any_exist" id="oval:org.open-scap.f14:tst:200065" version="1" check="at least one" comment="proper gpg-pubkey version is installed">
                  <lin-def:object object_ref="oval:org.open-scap.f14:obj:200065"/>
		  <lin-def:state state_ref="oval:org.open-scap.f14:ste:200065"/>
            </lin-def:rpminfo_test>

            <unix-def:file_test id="oval:org.open-scap.f14:tst:20009" version="1" check="all" comment="Existence check for path ^/etc/cron\.(hourly|daily|weekly|monthly)$ for filename yum.cron" check_existence="at_least_one_exists">
                  <unix-def:object object_ref="oval:org.open-scap.f14:obj:20009" />
            </unix-def:file_test>
            <ind-def:textfilecontent54_test id="oval:org.open-scap.f14:tst:20010" version="1" check="all" comment="check value of gpgcheck in /etc/yum.conf" check_existence="at_least_one_exists">
                  <ind-def:object object_ref="oval:org.open-scap.f14:obj:20010" />
                  <ind-def:state state_ref="oval:org.open-scap.f14:ste:20010" />
            </ind-def:textfilecontent54_test>
            <ind-def:textfilecontent54_test id="oval:org.open-scap.f14:tst:20011" version="1" check="at least one" comment="check value of gpgcheck=0 in /etc/yum.repos.d/">
                  <ind-def:object object_ref="oval:org.open-scap.f14:obj:20011" />
                  <ind-def:state state_ref="oval:org.open-scap.f14:ste:20011" />
            </ind-def:textfilecontent54_test>
            <ind-def:textfilecontent54_test id="oval:org.open-scap.f14:tst:20012" version="1" check="all" comment="check value of gpgcheck in /etc/yum.conf" check_existence="at_least_one_exists">
                  <ind-def:object object_ref="oval:org.open-scap.f14:obj:20012" />
                  <ind-def:state state_ref="oval:org.open-scap.f14:ste:20012" />
            </ind-def:textfilecontent54_test>
            <ind-def:textfilecontent54_test id="oval:org.open-scap.f14:tst:20013" version="1" check="all" comment="check value of repo_gpgcheck=0 in /etc/yum.repos.d/">
                  <ind-def:object object_ref="oval:org.open-scap.f14:obj:20013" />
                  <ind-def:state state_ref="oval:org.open-scap.f14:ste:20013" />
            </ind-def:textfilecontent54_test>
            <ind-def:textfilecontent54_test id="oval:org.open-scap.f14:tst:20016" version="1" check="all" comment="Check options for nodev in /etc/fstab for all non-root partitions" check_existence="at_least_one_exists">
                  <ind-def:object object_ref="oval:org.open-scap.f14:obj:20016" />
                  <ind-def:state state_ref="oval:org.open-scap.f14:ste:200161" />
            </ind-def:textfilecontent54_test>
            <ind-def:textfilecontent54_test id="oval:org.open-scap.f14:tst:200162" version="1" check="all" comment="Check options for nodev in /etc/mtab for all non-root partitions" check_existence="at_least_one_exists">
                  <ind-def:object object_ref="oval:org.open-scap.f14:obj:200162" />
                  <ind-def:state state_ref="oval:org.open-scap.f14:ste:200161" />
            </ind-def:textfilecontent54_test>
            <lin-def:rpminfo_test check_existence="at_least_one_exists" id="oval:org.open-scap.f14:tst:10000" version="1" check="at least one" comment="redhat-release is version 5">
                  <lin-def:object object_ref="oval:org.open-scap.f14:obj:10000"/>
                  <lin-def:state state_ref="oval:org.open-scap.f14:ste:10000"/>
            </lin-def:rpminfo_test>
            <lin-def:rpminfo_test check_existence="at_least_one_exists" id="oval:org.open-scap.f14:tst:11000" version="1" check="at least one" comment="redhat-release is version 5.2">
                  <lin-def:object object_ref="oval:org.open-scap.f14:obj:10000"/>
                  <lin-def:state state_ref="oval:org.open-scap.f14:ste:11000"/>
            </lin-def:rpminfo_test>
            <ind-def:family_test check_existence="at_least_one_exists" id="oval:org.open-scap.f14:tst:10001" version="1" check="only one" comment="installed operating system is part of the Unix family">
                  <ind-def:object object_ref="oval:org.open-scap.f14:obj:10001"/>
                  <ind-def:state state_ref="oval:org.open-scap.f14:ste:10001"/>
            </ind-def:family_test>
            <unix-def:runlevel_test check_existence="none_exist" id="oval:org.open-scap.f14:tst:20008" version="1" check="all" comment="Runlevel test">
                  <unix-def:object object_ref="oval:org.open-scap.f14:obj:20008"/>
            </unix-def:runlevel_test>
            <lin-def:rpminfo_test check_existence="all_exist" id="oval:org.open-scap.f14:tst:20014" version="1" check="all" comment="The aide package should be installed or not as appropriate">
                  <lin-def:object object_ref="oval:org.open-scap.f14:obj:20014"/>
            </lin-def:rpminfo_test>
            <ind-def:unknown_test id="oval:org.open-scap.f14:tst:22" version="1" check="all" comment="Test implementation is unknown, unavailable, or impossible"/>
            <ind-def:textfilecontent54_test id="oval:org.open-scap.f14:tst:20020" version="1" check="all" comment="Check /etc/security/console.perms.d/50-default.perms for lines starting with &lt;console&gt; or &lt;xconsole&gt;" check_existence="none_exist">
                  <ind-def:object object_ref="oval:org.open-scap.f14:obj:20020" />
            </ind-def:textfilecontent54_test>
            <ind-def:textfilecontent54_test check="at least one" id="oval:org.open-scap.f14:tst:20021" version="1" comment="Check /etc/modprobe.d/blacklist.conf for usb_storage">
                  <ind-def:object object_ref="oval:org.open-scap.f14:obj:20027"/>
                  <ind-def:state state_ref="oval:org.open-scap.f14:ste:20021" />
            </ind-def:textfilecontent54_test>
            <unix-def:file_test check_existence="none_exist" id="oval:org.open-scap.f14:tst:20022" version="1" check="all" comment="Actual file existence test">
                  <unix-def:object object_ref="oval:org.open-scap.f14:obj:20022"/>
            </unix-def:file_test>
            <ind-def:textfilecontent54_test check_existence="all_exist" id="oval:org.open-scap.f14:tst:20023" version="1" check="all" comment="Tests the value of the &lt;:begin:&gt;kernel&lt;:nocomment:&gt;nousb setting in the /etc/grub.conf file">
                  <ind-def:object object_ref="oval:org.open-scap.f14:obj:20023"/>
            </ind-def:textfilecontent54_test>
            <unix-def:runlevel_test check_existence="none_exist" id="oval:org.open-scap.f14:tst:20025" version="1" check="all" comment="Runlevel test">
                  <unix-def:object object_ref="oval:org.open-scap.f14:obj:20025"/>
            </unix-def:runlevel_test>
            <ind-def:xmlfilecontent_test check_existence="all_exist" id="oval:org.open-scap.f14:tst:20026" version="1" check="all" comment="The XPath expression /desktop/gnome/volume_manager/automount_(media)|(drives) for /etc/gconf/gconf.xml.mandatory should evaluate to the passed value">
                  <ind-def:object object_ref="oval:org.open-scap.f14:obj:20026"/>
                  <ind-def:state state_ref="oval:org.open-scap.f14:ste:20026"/>
            </ind-def:xmlfilecontent_test>
            <ind-def:textfilecontent54_test id="oval:org.open-scap.f14:tst:20027" version="1" check="at least one" comment="Check /etc/modprobe.d/blacklist.conf for cramfs">
                  <ind-def:object object_ref="oval:org.open-scap.f14:obj:20027" />
                  <ind-def:state state_ref="oval:org.open-scap.f14:ste:20027" />
            </ind-def:textfilecontent54_test>
            <ind-def:textfilecontent54_test id="oval:org.open-scap.f14:tst:20028" version="1" check="at least one" comment="Check /etc/modprobe.d/blacklist.conf for freevxfs">
                  <ind-def:object object_ref="oval:org.open-scap.f14:obj:20027" />
                  <ind-def:state state_ref="oval:org.open-scap.f14:ste:20028" />
            </ind-def:textfilecontent54_test>
            <ind-def:textfilecontent54_test id="oval:org.open-scap.f14:tst:20029" version="1" check="at least one" comment="Check /etc/modprobe.d/blacklist.conf for jffs2">
                  <ind-def:object object_ref="oval:org.open-scap.f14:obj:20027" />
                  <ind-def:state state_ref="oval:org.open-scap.f14:ste:20029" />
            </ind-def:textfilecontent54_test>
            <ind-def:textfilecontent54_test id="oval:org.open-scap.f14:tst:20030" version="1" check="at least one" comment="Check /etc/modprobe.d/blacklist.conf for hfs">
                  <ind-def:object object_ref="oval:org.open-scap.f14:obj:20027" />
                  <ind-def:state state_ref="oval:org.open-scap.f14:ste:20030" />
            </ind-def:textfilecontent54_test>
            <ind-def:textfilecontent54_test id="oval:org.open-scap.f14:tst:20031" version="1" check="at least one" comment="Check /etc/modprobe.d/blacklist.conf for hfsplus">
                  <ind-def:object object_ref="oval:org.open-scap.f14:obj:20027" />
                  <ind-def:state state_ref="oval:org.open-scap.f14:ste:20031" />
            </ind-def:textfilecontent54_test>
            <ind-def:textfilecontent54_test id="oval:org.open-scap.f14:tst:20032" version="1" check="at least one" comment="Check /etc/modprobe.d/blacklist.conf for squashfs">
                  <ind-def:object object_ref="oval:org.open-scap.f14:obj:20027" />
                  <ind-def:state state_ref="oval:org.open-scap.f14:ste:20032" />
            </ind-def:textfilecontent54_test>
            <ind-def:textfilecontent54_test id="oval:org.open-scap.f14:tst:20033" version="1" check="at least one" comment="Check /etc/modprobe.d/blacklist.conf for udf">
                  <ind-def:object object_ref="oval:org.open-scap.f14:obj:20027" />
                  <ind-def:state state_ref="oval:org.open-scap.f14:ste:20033" />
            </ind-def:textfilecontent54_test>
            <unix-def:file_test check_existence="all_exist" id="oval:org.open-scap.f14:tst:20034" version="1" check="all" comment="Testing user ownership of /etc/shadow">
                  <unix-def:object object_ref="oval:org.open-scap.f14:obj:20034"/>
                  <unix-def:state state_ref="oval:org.open-scap.f14:ste:20034"/>
            </unix-def:file_test>
            <unix-def:file_test check_existence="all_exist" id="oval:org.open-scap.f14:tst:20035" version="1" check="all" comment="Testing group ownership /etc/shadow">
                  <unix-def:object object_ref="oval:org.open-scap.f14:obj:20034"/>
                  <unix-def:state state_ref="oval:org.open-scap.f14:ste:20035"/>
            </unix-def:file_test>
            <unix-def:file_test check_existence="all_exist" id="oval:org.open-scap.f14:tst:20036" version="1" check="all" comment="Testing user ownership">
                  <unix-def:object object_ref="oval:org.open-scap.f14:obj:20036"/>
                  <unix-def:state state_ref="oval:org.open-scap.f14:ste:20036"/>
            </unix-def:file_test>
            <unix-def:file_test check_existence="all_exist" id="oval:org.open-scap.f14:tst:20037" version="1" check="all" comment="Testing group ownership">
                  <unix-def:object object_ref="oval:org.open-scap.f14:obj:20036"/>
                  <unix-def:state state_ref="oval:org.open-scap.f14:ste:20037"/>
            </unix-def:file_test>
            <unix-def:file_test check_existence="all_exist" id="oval:org.open-scap.f14:tst:20038" version="1" check="all" comment="Testing gshadow ownership">
                  <unix-def:object object_ref="oval:org.open-scap.f14:obj:20038"/>
                  <unix-def:state state_ref="oval:org.open-scap.f14:ste:20038"/>
            </unix-def:file_test>
            <unix-def:file_test check_existence="all_exist" id="oval:org.open-scap.f14:tst:20039" version="1" check="all" comment="Testing gshadow ownership">
                  <unix-def:object object_ref="oval:org.open-scap.f14:obj:20038"/>
                  <unix-def:state state_ref="oval:org.open-scap.f14:ste:20039"/>
            </unix-def:file_test>
            <unix-def:file_test check_existence="all_exist" id="oval:org.open-scap.f14:tst:20040" version="1" check="all" comment="Testing user ownership">
                  <unix-def:object object_ref="oval:org.open-scap.f14:obj:20040"/>
                  <unix-def:state state_ref="oval:org.open-scap.f14:ste:20040"/>
            </unix-def:file_test>
            <unix-def:file_test check_existence="all_exist" id="oval:org.open-scap.f14:tst:20041" version="1" check="all" comment="Testing group ownership of /etc/passwd">
                  <unix-def:object object_ref="oval:org.open-scap.f14:obj:20040"/>
                  <unix-def:state state_ref="oval:org.open-scap.f14:ste:20041"/>
            </unix-def:file_test>
            <unix-def:file_test check_existence="all_exist" id="oval:org.open-scap.f14:tst:20042" version="1" check="all" comment="Testing file permissions of /etc/shadow">
                  <unix-def:object object_ref="oval:org.open-scap.f14:obj:20034"/>
                  <unix-def:state state_ref="oval:org.open-scap.f14:ste:20042"/>
            </unix-def:file_test>
            <unix-def:file_test check_existence="all_exist" id="oval:org.open-scap.f14:tst:20043" version="1" check="all" comment="Testing /etc/group permissions">
                  <unix-def:object object_ref="oval:org.open-scap.f14:obj:20036"/>
                  <unix-def:state state_ref="oval:org.open-scap.f14:ste:20043"/>
            </unix-def:file_test>
            <unix-def:file_test check_existence="all_exist" id="oval:org.open-scap.f14:tst:20044" version="1" check="all" comment="Testing gshadow permissions">
                  <unix-def:object object_ref="oval:org.open-scap.f14:obj:20038"/>
                  <unix-def:state state_ref="oval:org.open-scap.f14:ste:20044"/>
            </unix-def:file_test>
            <unix-def:file_test check_existence="all_exist" id="oval:org.open-scap.f14:tst:20045" version="1" check="all" comment="Testing /etc/passwd permissions">
                  <unix-def:object object_ref="oval:org.open-scap.f14:obj:20040"/>
                  <unix-def:state state_ref="oval:org.open-scap.f14:ste:20045"/>
            </unix-def:file_test>

           <unix-def:file_test check_existence="all_exist" id="oval:org.open-scap.f14:tst:20046" version="1" check="all" comment="sticky bit on all world writable directories" >
                  <notes>
                        <note>This will enumerate all world writable directories on local partitions</note>
                  </notes>
                  <unix-def:object object_ref="oval:org.open-scap.f14:obj:200461"/>
                  <unix-def:state state_ref="oval:org.open-scap.f14:ste:20046"/>
            </unix-def:file_test>

            <unix-def:file_test id="oval:org.open-scap.f14:tst:20047" version="1" check="all" comment="world writable files">
                  <notes>
                        <note>This will enumerate all world writable files on local partitions</note>
                  </notes>
                  <unix-def:object object_ref="oval:org.open-scap.f14:obj:200471"/>
            </unix-def:file_test>

            <unix-def:file_test id="oval:org.open-scap.f14:tst:20048" version="1" check_existence="none_exist" check="all" comment="executable files with sgid set">
                  <notes>
                        <note>This will enumerate all files on local partitions</note>
                  </notes>
                  <unix-def:object object_ref="oval:org.open-scap.f14:obj:20048"/>
            </unix-def:file_test>
            <unix-def:file_test id="oval:org.open-scap.f14:tst:20049" version="1" check_existence="none_exist" check="all" comment="executable files with suid set">
                  <notes>
                        <note>This will enumerate all files on local partitions</note>
                  </notes>
                  <unix-def:object object_ref="oval:org.open-scap.f14:obj:20049"/>
            </unix-def:file_test>
            <unix-def:file_test id="oval:org.open-scap.f14:tst:20050" version="1" check_existence="none_exist" check="all" comment="files with no user owner">
                  <notes>
                        <note>This will enumerate all files on local partitions</note>
                  </notes>
                  <unix-def:object object_ref="oval:org.open-scap.f14:obj:20050"/>
            </unix-def:file_test>
            <unix-def:file_test id="oval:org.open-scap.f14:tst:20051" version="1" check_existence="none_exist" check="all" comment="files with no group owner">
                  <notes>
                        <note>This will enumerate all files on local partitions</note>
                  </notes>
                  <unix-def:object object_ref="oval:org.open-scap.f14:obj:20051"/>
            </unix-def:file_test>
            <unix-def:file_test id="oval:org.open-scap.f14:tst:20052" version="1" check_existence="none_exist" check="all" comment="world writable directories have a uid greater than or equal to 500" >
                  <notes>
                        <note>This will enumerate all directories on local partitions</note>
                  </notes>
                  <unix-def:object object_ref="oval:org.open-scap.f14:obj:20052"/>
            </unix-def:file_test>
            <ind-def:textfilecontent54_test check_existence="all_exist" id="oval:org.open-scap.f14:tst:20053" version="1" check="all" comment="Tests the value of the umask[\s]+(.*) expression in the /etc/rc.d/init.d/functions file">
                  <ind-def:object object_ref="oval:org.open-scap.f14:obj:20053"/>
                  <ind-def:state state_ref="oval:org.open-scap.f14:ste:20053"/>
            </ind-def:textfilecontent54_test>
            <ind-def:textfilecontent54_test id="oval:org.open-scap.f14:tst:20055" version="1" check="all" comment="Tests the value of the ^[\s]*\*[\s]+hard[\s]+core[\s]+([\d]+) setting in the /etc/security/limits.conf file">
                  <ind-def:object object_ref="oval:org.open-scap.f14:obj:20055"/>
                  <ind-def:state state_ref="oval:org.open-scap.f14:ste:20055"/>
            </ind-def:textfilecontent54_test>
            <ind-def:textfilecontent54_test check_existence="all_exist" id="oval:org.open-scap.f14:tst:20056" version="1" check="all" comment="Tests the value of the /proc/sys/fs/suid_dumpable">
                  <ind-def:object object_ref="oval:org.open-scap.f14:obj:20056"/>
                  <ind-def:state state_ref="oval:org.open-scap.f14:ste:20056"/>
            </ind-def:textfilecontent54_test>
            <ind-def:textfilecontent54_test check_existence="any_exist" id="oval:org.open-scap.f14:tst:20057" version="1" check="all" comment="Tests the value of the /proc/sys/kernel/exec-shield">
                  <ind-def:object object_ref="oval:org.open-scap.f14:obj:20057"/>
                  <ind-def:state state_ref="oval:org.open-scap.f14:ste:20057"/>
            </ind-def:textfilecontent54_test>
            <ind-def:textfilecontent54_test check_existence="any_exist" id="oval:org.open-scap.f14:tst:20058" version="1" check="all" comment="Tests the value of the /proc/sys/kernel/randomize_va_space">
                  <ind-def:object object_ref="oval:org.open-scap.f14:obj:20058"/>
                  <ind-def:state state_ref="oval:org.open-scap.f14:ste:20058"/>
            </ind-def:textfilecontent54_test>
            <ind-def:unknown_test id="oval:org.open-scap.f14:tst:20060" version="1" check="all" comment="BIOS test cannot be automated" />
            <ind-def:textfilecontent54_test check_existence="none_exist" id="oval:org.open-scap.f14:tst:20061" version="1" check="all" comment="Tests the value of the &lt;:begin:&gt;tty[0-9]+&lt;:end:&gt; setting in the /etc//securetty file">
                  <ind-def:object object_ref="oval:org.open-scap.f14:obj:20061"/>
            </ind-def:textfilecontent54_test>
            <ind-def:textfilecontent54_test check_existence="none_exist" id="oval:org.open-scap.f14:tst:20062" version="1" check="all" comment="Tests the value of the &lt;:begin:&gt;Vc\/[0-9]+&lt;:end:&gt; setting in the /etc/securetty file">
                  <ind-def:object object_ref="oval:org.open-scap.f14:obj:20062"/>
            </ind-def:textfilecontent54_test>
            <ind-def:textfilecontent54_test check_existence="none_exist" id="oval:org.open-scap.f14:tst:20063" version="1" check="all" comment="Tests the value of the &lt;:begin:&gt;console&lt;:end:&gt; setting in the /etc/securetty file">
                  <ind-def:object object_ref="oval:org.open-scap.f14:obj:20063"/>
            </ind-def:textfilecontent54_test>
            <ind-def:textfilecontent54_test check_existence="none_exist" id="oval:org.open-scap.f14:tst:20064" version="1" check="all" comment="Tests the value of the &lt;:begin:&gt;ttyS[0-9]+&lt;:end:&gt; setting in the /etc/securetty file">
                  <ind-def:object object_ref="oval:org.open-scap.f14:obj:20064"/>
            </ind-def:textfilecontent54_test>
            <ind-def:textfilecontent54_test check_existence="all_exist" id="oval:org.open-scap.f14:tst:20065" version="1" check="all" comment="Tests the value of the &lt;:begin:&gt;wheel setting in the /etc/group file">
                  <ind-def:object object_ref="oval:org.open-scap.f14:obj:20065"/>
            </ind-def:textfilecontent54_test>
            <ind-def:textfilecontent54_test check_existence="all_exist" id="oval:org.open-scap.f14:tst:20066" version="1" check="all" comment="Tests the value of the &lt;:begin:&gt;auth[\s]+required[\s]+pam_wheel.so[\s]+use_uid&lt;:end:&gt; setting in the /etc/pam.d/su file">
                  <ind-def:object object_ref="oval:org.open-scap.f14:obj:20066"/>
            </ind-def:textfilecontent54_test>
            <ind-def:textfilecontent54_test check_existence="all_exist" id="oval:org.open-scap.f14:tst:20067" version="1" check="all" comment="Tests the value of the %wheel[\s]+ALL=\(ALL\)[\s]+ALL setting in the /etc/sudoers file">
                  <ind-def:object object_ref="oval:org.open-scap.f14:obj:20067"/>
            </ind-def:textfilecontent54_test>
            <unix-def:password_test id="oval:org.open-scap.f14:tst:20068" version="1" check="at least one" comment="Tests the login shell for non root system accounts">
                  <unix-def:object object_ref="oval:org.open-scap.f14:obj:20068"/>
                  <unix-def:state state_ref="oval:org.open-scap.f14:ste:20068"/>
            </unix-def:password_test>
            <ind-def:textfilecontent54_test check_existence="none_exist" id="oval:org.open-scap.f14:tst:20069" version="1" check="all" comment="Tests the value of the ^[^:]*:: setting in the /etc/shadow file">
                  <ind-def:object object_ref="oval:org.open-scap.f14:obj:20069"/>
            </ind-def:textfilecontent54_test>
            <unix-def:password_test id="oval:org.open-scap.f14:tst:200695" version="1" check="all" comment="Check that passwords are shadowed">
                  <unix-def:object object_ref="oval:org.open-scap.f14:obj:200695"/>
                  <unix-def:state state_ref="oval:org.open-scap.f14:ste:200695"/>
            </unix-def:password_test>
            <ind-def:textfilecontent54_test check_existence="all_exist" id="oval:org.open-scap.f14:tst:20070" version="1" check="all" comment="Check if there is only root account with UID 0">
                  <ind-def:object object_ref="oval:org.open-scap.f14:obj:20070"/>
                  <ind-def:state state_ref="oval:org.open-scap.f14:ste:20070"/>
            </ind-def:textfilecontent54_test>
            <ind-def:textfilecontent54_test check_existence="all_exist" id="oval:org.open-scap.f14:tst:20071" version="1" check="all" comment="Tests the value of the PASS_MIN_LEN[\s]*=[\s]*(.*) expression in the /etc/login.defs file">
                  <ind-def:object object_ref="oval:org.open-scap.f14:obj:20071"/>
                  <ind-def:state state_ref="oval:org.open-scap.f14:ste:20071"/>
            </ind-def:textfilecontent54_test>
            <ind-def:textfilecontent54_test check_existence="all_exist" id="oval:org.open-scap.f14:tst:20072" version="1" check="all" comment="Tests the value of the PASS_MIN_DAYS[\s]*=[\s]*(.*) expression in the /etc/login.defs file">
                  <ind-def:object object_ref="oval:org.open-scap.f14:obj:20072"/>
                  <ind-def:state state_ref="oval:org.open-scap.f14:ste:20072"/>
            </ind-def:textfilecontent54_test>
            <ind-def:textfilecontent54_test check_existence="all_exist" id="oval:org.open-scap.f14:tst:20073" version="1" check="all" comment="Tests the value of the PASS_MAX_DAYS[\s]*=[\s]*(.*) expression in the /etc/login.defs file">
                  <ind-def:object object_ref="oval:org.open-scap.f14:obj:20073"/>
                  <ind-def:state state_ref="oval:org.open-scap.f14:ste:20073"/>
            </ind-def:textfilecontent54_test>
            <ind-def:textfilecontent54_test check_existence="all_exist" id="oval:org.open-scap.f14:tst:20074" version="1" check="all" comment="Tests the value of the PASS_WARN_AGE[\s]*=[\s]*(.*) expression in the /etc/login.defs file">
                  <ind-def:object object_ref="oval:org.open-scap.f14:obj:20074"/>
                  <ind-def:state state_ref="oval:org.open-scap.f14:ste:20074"/>
            </ind-def:textfilecontent54_test>
            <ind-def:textfilecontent54_test check_existence="none_exist" id="oval:org.open-scap.f14:tst:20075" version="1" check="all" comment="Tests the value of the ^+: setting in the /etc/shadow file">
                  <ind-def:object object_ref="oval:org.open-scap.f14:obj:20075"/>
            </ind-def:textfilecontent54_test>
            <ind-def:textfilecontent54_test check_existence="none_exist" id="oval:org.open-scap.f14:tst:20076" version="1" check="all" comment="Tests the value of the ^+: setting in the /etc/group file">
                  <ind-def:object object_ref="oval:org.open-scap.f14:obj:20076"/>
            </ind-def:textfilecontent54_test>
            <ind-def:textfilecontent54_test check_existence="none_exist" id="oval:org.open-scap.f14:tst:20077" version="1" check="all" comment="Tests the value of the ^+: setting in the /etc/passwd file">
                  <ind-def:object object_ref="oval:org.open-scap.f14:obj:20077"/>
            </ind-def:textfilecontent54_test>
            <ind-def:textfilecontent54_test id="oval:org.open-scap.f14:tst:200781" version="1" check="all" comment="check the configuration of /etc/pam.d/system-auth">
                  <ind-def:object object_ref="oval:org.open-scap.f14:obj:200781"/>
                  <ind-def:state state_ref="oval:org.open-scap.f14:ste:200781"/>
            </ind-def:textfilecontent54_test>
            <ind-def:textfilecontent54_test id="oval:org.open-scap.f14:tst:200782" version="1" check="all" comment="check the configuration of /etc/pam.d/system-auth">
                  <ind-def:object object_ref="oval:org.open-scap.f14:obj:200782"/>
                  <ind-def:state state_ref="oval:org.open-scap.f14:ste:200782"/>
            </ind-def:textfilecontent54_test>
            <ind-def:textfilecontent54_test id="oval:org.open-scap.f14:tst:200783" version="1" check="all" comment="check the configuration of /etc/pam.d/system-auth">
                  <ind-def:object object_ref="oval:org.open-scap.f14:obj:200783"/>
                   <ind-def:state state_ref="oval:org.open-scap.f14:ste:200783"/>
            </ind-def:textfilecontent54_test>
            <ind-def:textfilecontent54_test id="oval:org.open-scap.f14:tst:200784" version="1" check="all" comment="check the configuration of /etc/pam.d/system-auth">
                  <ind-def:object object_ref="oval:org.open-scap.f14:obj:200784"/>
                   <ind-def:state state_ref="oval:org.open-scap.f14:ste:200784"/>
            </ind-def:textfilecontent54_test>
            <ind-def:textfilecontent54_test id="oval:org.open-scap.f14:tst:200785" version="1" check="all" comment="check the configuration of /etc/pam.d/system-auth">
                  <ind-def:object object_ref="oval:org.open-scap.f14:obj:200785"/>
                   <ind-def:state state_ref="oval:org.open-scap.f14:ste:200785"/>
            </ind-def:textfilecontent54_test>
            <ind-def:textfilecontent54_test id="oval:org.open-scap.f14:tst:200786" version="1" check="all" comment="check the configuration of /etc/pam.d/system-auth">
                  <ind-def:object object_ref="oval:org.open-scap.f14:obj:200786"/>
                   <ind-def:state state_ref="oval:org.open-scap.f14:ste:200786"/>
            </ind-def:textfilecontent54_test>
            <ind-def:textfilecontent54_test id="oval:org.open-scap.f14:tst:200787" version="1" check="all" comment="check the configuration of /etc/pam.d/system-auth">
                  <ind-def:object object_ref="oval:org.open-scap.f14:obj:200787"/>
                  <ind-def:state state_ref="oval:org.open-scap.f14:ste:200787"/>
             </ind-def:textfilecontent54_test>
            <ind-def:unknown_test id="oval:org.open-scap.f14:tst:20079" version="1" check="all" comment="pam_passwdqc is not implemented" />
            <ind-def:variable_test id="oval:org.open-scap.f14:tst:200800" version="1" check="all" comment="check value of unlock_time">
                  <ind-def:object object_ref="oval:org.open-scap.f14:obj:200800"/>
                  <ind-def:state state_ref="oval:org.open-scap.f14:ste:200800"/>
            </ind-def:variable_test>
            <ind-def:textfilecontent54_test check_existence="only_one_exists" id="oval:org.open-scap.f14:tst:2008011" version="1" check="all" comment="check system-auth pam_tally2 excluding unlock_time">
                  <ind-def:object object_ref="oval:org.open-scap.f14:obj:2008011"/>
                  <ind-def:state state_ref="oval:org.open-scap.f14:ste:2008011"/>
            </ind-def:textfilecontent54_test>
            <ind-def:textfilecontent54_test check_existence="only_one_exists" id="oval:org.open-scap.f14:tst:2008012" version="1" check="all" comment="check system-auth pam_tally2 excluding unlock_time">
                  <ind-def:object object_ref="oval:org.open-scap.f14:obj:2008012"/>
                  <ind-def:state state_ref="oval:org.open-scap.f14:ste:2008012"/> 
            </ind-def:textfilecontent54_test>
            <ind-def:textfilecontent54_test check_existence="only_one_exists" id="oval:org.open-scap.f14:tst:2008013" version="1" check="all" comment="check system-auth pam_tally2 including unlock_time" >
                  <ind-def:object object_ref="oval:org.open-scap.f14:obj:2008013"/>
                  <ind-def:state state_ref="oval:org.open-scap.f14:ste:2008013"/> 
            </ind-def:textfilecontent54_test>
<!-- TODO           <ind-def:textfilecontent54_test check_existence="only_one_exists" id="oval:org.open-scap.f14:tst:200803" version="1" check="all" comment="check system-auth pam_tally2 account is configured correctly" state_operator="OR"> -->
            <ind-def:textfilecontent54_test check_existence="only_one_exists" id="oval:org.open-scap.f14:tst:200803" version="1" check="all" comment="check system-auth pam_tally2 account is configured correctly">
                  <ind-def:object object_ref="oval:org.open-scap.f14:obj:200803"/>
            </ind-def:textfilecontent54_test>
            <ind-def:unknown_test id="oval:org.open-scap.f14:tst:200805" version="1" check="all" comment="Check for required in pam_unix auth" />
            <ind-def:unknown_test id="oval:org.open-scap.f14:tst:2008061" version="1" check="all" comment="check that pam_succeed_if is not there with quiet option" />
            <ind-def:unknown_test id="oval:org.open-scap.f14:tst:2008062" version="1" check="all" comment="check that pam_deny is not there" />
            <unix-def:file_test check_existence="all_exist" id="oval:org.open-scap.f14:tst:20081" version="1" check="all" comment="Testing group ownership">
                  <unix-def:object object_ref="oval:org.open-scap.f14:obj:20081"/>
                  <unix-def:state state_ref="oval:org.open-scap.f14:ste:20081"/>
            </unix-def:file_test>
            <ind-def:textfilecontent54_test check_existence="at_least_one_exists" id="oval:org.open-scap.f14:tst:200811" version="1" check="all" comment="Group existance">
                  <ind-def:object object_ref="oval:org.open-scap.f14:obj:200811"/>
            </ind-def:textfilecontent54_test>
            <unix-def:file_test check_existence="all_exist" id="oval:org.open-scap.f14:tst:20082" version="1" check="all" comment="Testing file permissions">
                  <unix-def:object object_ref="oval:org.open-scap.f14:obj:20081"/>
                  <unix-def:state state_ref="oval:org.open-scap.f14:ste:20082"/>
            </unix-def:file_test>
            <ind-def:variable_test id="oval:org.open-scap.f14:tst:200831" version="1" check="all" comment="check value of hashing algorithm is md5">
                  <ind-def:object object_ref="oval:org.open-scap.f14:obj:200831"/>
                  <ind-def:state state_ref="oval:org.open-scap.f14:ste:200831"/>
            </ind-def:variable_test>
            <ind-def:textfilecontent54_test check_existence="all_exist" id="oval:org.open-scap.f14:tst:200832" version="1" check="all" comment="check the /etc/login.defs file for MD5_CRYPT_ENAB setting">
                  <ind-def:object object_ref="oval:org.open-scap.f14:obj:200832"/>
                  <ind-def:state state_ref="oval:org.open-scap.f14:ste:200832"/>
            </ind-def:textfilecontent54_test>
            <ind-def:textfilecontent54_test check_existence="all_exist" id="oval:org.open-scap.f14:tst:200833" version="1" check="all" comment="check the /etc/login.defs file for ENCRYPT_METHOD setting">
                  <ind-def:object object_ref="oval:org.open-scap.f14:obj:200833"/>
                  <ind-def:state state_ref="oval:org.open-scap.f14:ste:200833"/>
            </ind-def:textfilecontent54_test>
            <ind-def:textfilecontent54_test check_existence="all_exist" id="oval:org.open-scap.f14:tst:200834" version="1" check="at least one" comment="check the /etc/pam.d/system-auth file for the hash algorithm setting">
                  <ind-def:object object_ref="oval:org.open-scap.f14:obj:200834"/>
                  <ind-def:state state_ref="oval:org.open-scap.f14:ste:200833"/>
            </ind-def:textfilecontent54_test>
            <ind-def:textfilecontent54_test check_existence="all_exist" id="oval:org.open-scap.f14:tst:200835" version="1" check="all" comment="check the /etc/libuser.conf file for the crypt_style setting">
                  <ind-def:object object_ref="oval:org.open-scap.f14:obj:200835"/>
                  <ind-def:state state_ref="oval:org.open-scap.f14:ste:200833"/>
            </ind-def:textfilecontent54_test>
            <ind-def:variable_test id="oval:org.open-scap.f14:tst:200841" version="1" check="all" comment="check remember parameter is set to 0">
                  <ind-def:object object_ref="oval:org.open-scap.f14:obj:200841"/>
                  <ind-def:state state_ref="oval:org.open-scap.f14:ste:200841"/>
            </ind-def:variable_test>
            <ind-def:textfilecontent54_test check_existence="all_exist" id="oval:org.open-scap.f14:tst:200842" version="1" check="all" comment="check that remember is set appropriately in /etc/pam.d/system-auth">
                  <ind-def:object object_ref="oval:org.open-scap.f14:obj:200842"/>
                  <ind-def:state state_ref="oval:org.open-scap.f14:ste:200842"/>
            </ind-def:textfilecontent54_test>
            <ind-def:environmentvariable_test version="1" id="oval:org.open-scap.f14:tst:200851" check="all" comment="PATH starts with : or .">
                  <ind-def:object object_ref="oval:org.open-scap.f14:obj:20085" />
                  <ind-def:state state_ref="oval:org.open-scap.f14:ste:200851"/>
            </ind-def:environmentvariable_test> 
            <ind-def:environmentvariable_test version="1" id="oval:org.open-scap.f14:tst:200852" check="all" check_existence="at_least_one_exists"  comment="PATH ends with : or .">
                  <ind-def:object object_ref="oval:org.open-scap.f14:obj:20085" />
                  <ind-def:state state_ref="oval:org.open-scap.f14:ste:200852"/>
            </ind-def:environmentvariable_test> 
            <ind-def:environmentvariable_test version="1" id="oval:org.open-scap.f14:tst:200853" check="all" comment="PATH contains :: or :.:">
                  <ind-def:object object_ref="oval:org.open-scap.f14:obj:20085" />
                  <ind-def:state state_ref="oval:org.open-scap.f14:ste:200853"/>
            </ind-def:environmentvariable_test>
            <unix-def:file_test id="oval:org.open-scap.f14:tst:200855" check_existence="none_exist" version="1" check="all" comment="Check that write permission to group and other in root's path is denied">
                  <unix-def:object object_ref="oval:org.open-scap.f14:obj:2008551"/>
            </unix-def:file_test>
            <unix-def:file_test id="oval:org.open-scap.f14:tst:200861" version="1" check="none satisfy" comment="home directories are group writeable">
                  <unix-def:object object_ref="oval:org.open-scap.f14:obj:20086"/>
                  <unix-def:state state_ref="oval:org.open-scap.f14:ste:200861"/>
            </unix-def:file_test>
            <unix-def:file_test id="oval:org.open-scap.f14:tst:200862" version="1" check="none satisfy" comment="home directories are world readable">
                  <unix-def:object object_ref="oval:org.open-scap.f14:obj:20086"/>
                  <unix-def:state state_ref="oval:org.open-scap.f14:ste:200862"/>
            </unix-def:file_test>
            <ind-def:textfilecontent54_test check_existence="all_exist" id="oval:org.open-scap.f14:tst:20087" version="1" check="all" comment="Tests the value of the ^[\s]*umask[\s]+([^#]*) expression in the /etc/bashrc file">
                  <ind-def:object object_ref="oval:org.open-scap.f14:obj:20087"/>
                  <ind-def:state state_ref="oval:org.open-scap.f14:ste:20087"/>
            </ind-def:textfilecontent54_test>
            <ind-def:textfilecontent54_test check_existence="all_exist" id="oval:org.open-scap.f14:tst:20088" version="1" check="all" comment="Tests the value of the ^[\s]*umask[\s]+([^#]*) expression in the /etc/csh.cshrc file">
                  <ind-def:object object_ref="oval:org.open-scap.f14:obj:20088"/>
                  <ind-def:state state_ref="oval:org.open-scap.f14:ste:20087"/>
            </ind-def:textfilecontent54_test>
            <unix-def:file_test check_existence="all_exist" id="oval:org.open-scap.f14:tst:20092" version="1" check="all" comment="Testing user ownership">
                  <unix-def:object object_ref="oval:org.open-scap.f14:obj:20092"/>
                  <unix-def:state state_ref="oval:org.open-scap.f14:ste:20092"/>
            </unix-def:file_test>
            <unix-def:file_test check_existence="all_exist" id="oval:org.open-scap.f14:tst:20093" version="1" check="all" comment="Testing group ownership">
                  <unix-def:object object_ref="oval:org.open-scap.f14:obj:20093"/>
                  <unix-def:state state_ref="oval:org.open-scap.f14:ste:20093"/>
            </unix-def:file_test>
            <unix-def:file_test check_existence="all_exist" id="oval:org.open-scap.f14:tst:20094" version="1" check="all" comment="Testing file permissions">
                  <unix-def:object object_ref="oval:org.open-scap.f14:obj:20094"/>
                  <unix-def:state state_ref="oval:org.open-scap.f14:ste:20094"/>
            </unix-def:file_test>
            <ind-def:textfilecontent54_test check_existence="all_exist" id="oval:org.open-scap.f14:tst:20095" version="1" check="all" comment="Tests the value of the password[\s]+--md5[\s]+.* setting in the /etc/grub.conf file">
                  <ind-def:object object_ref="oval:org.open-scap.f14:obj:20095"/>
            </ind-def:textfilecontent54_test>
            <ind-def:textfilecontent54_test check_existence="all_exist" id="oval:org.open-scap.f14:tst:20096" version="1" check="all" comment="Tests the value of the ~~:S:wait:/sbin/sulogin setting in the /etc/inittab file">
                  <ind-def:object object_ref="oval:org.open-scap.f14:obj:73"/>
            </ind-def:textfilecontent54_test>
            <ind-def:textfilecontent54_test check_existence="all_exist" id="oval:org.open-scap.f14:tst:20097" version="1" check="all" comment="Tests the value of the PROMPT[\s]*=[\s]*([^#]*) expression in the /etc/sysconfig/init file">
                  <ind-def:object object_ref="oval:org.open-scap.f14:obj:20096"/>
                  <ind-def:state state_ref="oval:org.open-scap.f14:ste:20097"/>
            </ind-def:textfilecontent54_test>
            <ind-def:textfilecontent54_test check_existence="all_exist" id="oval:org.open-scap.f14:tst:20098" version="1" check="all" comment="Tests the value of the ^[\s]*set[\s]+-r[\s]+autologout[\s]+([^#]*) expression in the /etc/profile.d/autologout.csh file">
                  <ind-def:object object_ref="oval:org.open-scap.f14:obj:20098"/>
                  <ind-def:state state_ref="oval:org.open-scap.f14:ste:20098"/>
            </ind-def:textfilecontent54_test>
            <ind-def:unknown_test id="oval:org.open-scap.f14:tst:20099" version="1" check="all" comment="Test implementation is unknown, unavailable, or impossible"/>
            <ind-def:xmlfilecontent_test id="oval:org.open-scap.f14:tst:20100" version="1" check="all" comment="/gconf/dir[@name='schemas']/dir[@name='apps']/dir[@name='gnome-screensaver']/entry[@name='idle_delay']/local_schema[1]/default[1]/@value">
                  <ind-def:object object_ref="oval:org.open-scap.f14:obj:20100"/>
                  <ind-def:state state_ref="oval:org.open-scap.f14:ste:20100"/>
            </ind-def:xmlfilecontent_test>
            <ind-def:xmlfilecontent_test id="oval:org.open-scap.f14:tst:201005" version="1" check="all" comment="/gconf/dir[@name='schemas']/dir[@name='apps']/dir[@name='gnome-screensaver']/entry[@name='idle_activation_enabled']/local_schema[1]/default[1]/@value">
                  <ind-def:object object_ref="oval:org.open-scap.f14:obj:201005"/>
                  <ind-def:state state_ref="oval:org.open-scap.f14:ste:201005"/>
            </ind-def:xmlfilecontent_test>
            <ind-def:xmlfilecontent_test id="oval:org.open-scap.f14:tst:201006" version="1" check="all" comment="/gconf/dir[@name='schemas']/dir[@name='apps']/dir[@name='gnome-screensaver']/entry[@name='lock_enabled']/local_schema[1]/default[1]/@value">
                  <ind-def:object object_ref="oval:org.open-scap.f14:obj:201006"/>
                  <ind-def:state state_ref="oval:org.open-scap.f14:ste:201006"/>
            </ind-def:xmlfilecontent_test>
            <ind-def:xmlfilecontent_test id="oval:org.open-scap.f14:tst:201007" version="1" check="all" comment="/gconf/dir[@name='schemas']/dir[@name='apps']/dir[@name='gnome-screensaver']/entry[@name='mode']/local_schema[1]/default[1]/stringvalue[1]">
                  <ind-def:object object_ref="oval:org.open-scap.f14:obj:201007"/>
                  <ind-def:state state_ref="oval:org.open-scap.f14:ste:201007"/>
            </ind-def:xmlfilecontent_test>
		<lin-def:rpminfo_test check_existence="all_exist" id="oval:org.open-scap.f14:tst:20101" version="1" check="all" comment="The vlock package should be installed or not as appropriate">
                  <lin-def:object object_ref="oval:org.open-scap.f14:obj:20101"/>
            </lin-def:rpminfo_test>
            <ind-def:textfilecontent54_test check_existence="all_exist" id="oval:org.open-scap.f14:tst:20102" version="1" check="all" comment="Tests the value of the (.*) setting in the /etc/issue file">
                  <ind-def:object object_ref="oval:org.open-scap.f14:obj:20102"/>
                  <ind-def:state state_ref="oval:org.open-scap.f14:ste:20102"/>
            </ind-def:textfilecontent54_test>
            <ind-def:xmlfilecontent_test id="oval:org.open-scap.f14:tst:20103" version="1" check="all" comment="/greeter/item[@id='banner']/box[1]/item[@id='DOD_Banner']/text[1]">
                  <ind-def:object object_ref="oval:org.open-scap.f14:obj:20103"/>
                  <ind-def:state state_ref="oval:org.open-scap.f14:ste:20103"/>
            </ind-def:xmlfilecontent_test>
            <ind-def:textfilecontent54_test check_existence="any_exist" id="oval:org.open-scap.f14:tst:20104" version="1" check="all" comment="Tests the value of the [\s]selinux=([^\s]*) expression in the /etc/grub.conf file">
                  <ind-def:object object_ref="oval:org.open-scap.f14:obj:20104"/>
                  <ind-def:state state_ref="oval:org.open-scap.f14:ste:20104"/>
            </ind-def:textfilecontent54_test>
            <ind-def:textfilecontent54_test check_existence="all_exist" id="oval:org.open-scap.f14:tst:20105" version="1" check="all" comment="Tests the value of the [\s]enforcing=([^\s]*) expression in the /etc/grub.conf file">
                  <ind-def:object object_ref="oval:org.open-scap.f14:obj:20105"/>
                  <ind-def:state state_ref="oval:org.open-scap.f14:ste:20105"/>
            </ind-def:textfilecontent54_test>
            <ind-def:textfilecontent54_test check_existence="all_exist" id="oval:org.open-scap.f14:tst:20106" version="1" check="all" comment="Tests the value of the ^[\s]*selinux[\s]*=[\s]*([^#]*) expression in the /etc/selinux/config file">
                  <ind-def:object object_ref="oval:org.open-scap.f14:obj:20106"/>
                  <ind-def:state state_ref="oval:org.open-scap.f14:ste:20106"/>
            </ind-def:textfilecontent54_test>
            <ind-def:textfilecontent54_test check_existence="all_exist" id="oval:org.open-scap.f14:tst:20107" version="1" check="all" comment="Tests the value of the ^[\s]*SELINUXTYPE[\s]*=[\s]*([^#]*) expression in the /etc/selinux/config file">
                  <ind-def:object object_ref="oval:org.open-scap.f14:obj:20107"/>
                  <ind-def:state state_ref="oval:org.open-scap.f14:ste:20107"/>
            </ind-def:textfilecontent54_test>
            <lin-def:rpminfo_test check_existence="none_exist" id="oval:org.open-scap.f14:tst:20108" version="1" check="all" comment="The setroubleshoot package should be installed or not as appropriate">
                  <lin-def:object object_ref="oval:org.open-scap.f14:obj:20108"/>
            </lin-def:rpminfo_test>
            <unix-def:runlevel_test check_existence="none_exist" id="oval:org.open-scap.f14:tst:20109" version="1" check="all" comment="Runlevel test">
                  <unix-def:object object_ref="oval:org.open-scap.f14:obj:20109"/>
            </unix-def:runlevel_test>
            <unix-def:runlevel_test check_existence="any_exist" id="oval:org.open-scap.f14:tst:20110" version="1" check="all" comment="Runlevel test">
                  <unix-def:object object_ref="oval:org.open-scap.f14:obj:20110"/>
                  <unix-def:state state_ref="oval:org.open-scap.f14:ste:20111"/>
            </unix-def:runlevel_test>
            <unix-def:runlevel_test check_existence="any_exist" id="oval:org.open-scap.f14:tst:20111" version="1" check="all" comment="Runlevel test">
                  <unix-def:object object_ref="oval:org.open-scap.f14:obj:20111"/>
                  <unix-def:state state_ref="oval:org.open-scap.f14:ste:20111"/>
            </unix-def:runlevel_test>

	    <!-- BEGIN -->
	    <!-- def:20112 -->
	    <ind-def:textfilecontent54_test id="oval:org.open-scap.f14:tst:201120" version="1" check_existence="all_exist" check="all"
					    comment="Tests the value of the /proc/sys/net/ipv4/conf/default/send_redirects file">
	      <ind-def:object object_ref="oval:org.open-scap.f14:obj:201120"/>
	      <ind-def:state   state_ref="oval:org.open-scap.f14:ste:201120"/>
	    </ind-def:textfilecontent54_test>
            <ind-def:textfilecontent54_test id="oval:org.open-scap.f14:tst:201121" version="1" check_existence="all_exist" check="all"
					    comment="Tests the presence of the ^[\s]*net\.ipv4\.conf\.default\.send_redirects[\s]*=([\s]*) expression in the /etc/sysctl.conf file">
                  <ind-def:object object_ref="oval:org.open-scap.f14:obj:201121"/>
            </ind-def:textfilecontent54_test>
            <ind-def:textfilecontent54_test id="oval:org.open-scap.f14:tst:201122" version="1" check_existence="all_exist" check="all"
					    comment="Tests the value of the ^[\s]*net\.ipv4\.conf\.default\.send_redirects[\s]*=([\s]*) expression in the /etc/sysctl.conf file">
                  <ind-def:object object_ref="oval:org.open-scap.f14:obj:201121"/>
                  <ind-def:state   state_ref="oval:org.open-scap.f14:ste:201120"/>
            </ind-def:textfilecontent54_test>

	    <!-- def:20113 -->
	    <ind-def:textfilecontent54_test id="oval:org.open-scap.f14:tst:201130" version="1" check_existence="all_exist" check="all"
					    comment="Tests the value of the /proc/sys/net/ipv4/conf/all/send_redirects file">
	      <ind-def:object object_ref="oval:org.open-scap.f14:obj:201130"/>
	      <ind-def:state   state_ref="oval:org.open-scap.f14:ste:201120"/>
	    </ind-def:textfilecontent54_test>
            <ind-def:textfilecontent54_test id="oval:org.open-scap.f14:tst:201131" version="1" check_existence="all_exist" check="all"
					    comment="Tests the presence of the ^[\s]*net\.ipv4\.conf\.all\.send_redirects[\s]*=([\s]*) expression in the /etc/sysctl.conf file">
                  <ind-def:object object_ref="oval:org.open-scap.f14:obj:201131"/>
            </ind-def:textfilecontent54_test>
            <ind-def:textfilecontent54_test id="oval:org.open-scap.f14:tst:201132" version="1" check_existence="all_exist" check="all"
					    comment="Tests the value of the ^[\s]*net\.ipv4\.conf\.all\.send_redirects[\s]*=([\s]*) expression in the /etc/sysctl.conf file">
                  <ind-def:object object_ref="oval:org.open-scap.f14:obj:201131"/>
                  <ind-def:state   state_ref="oval:org.open-scap.f14:ste:201120"/>
            </ind-def:textfilecontent54_test>

	    <!-- def:20114 -->
	    <ind-def:textfilecontent54_test id="oval:org.open-scap.f14:tst:201140" version="1" check_existence="all_exist" check="all"
					    comment="Tests the value of the /proc/sys/net/ipv4/ip_forward file">
	      <ind-def:object object_ref="oval:org.open-scap.f14:obj:201140"/>
	      <ind-def:state   state_ref="oval:org.open-scap.f14:ste:201120"/>
	    </ind-def:textfilecontent54_test>
            <ind-def:textfilecontent54_test id="oval:org.open-scap.f14:tst:201141" version="1" check_existence="all_exist" check="all"
					    comment="Tests the presence of the ^[\s]*net\.ipv4\.ip_forward[\s]*=([\s]*) expression in the /etc/sysctl.conf file">
                  <ind-def:object object_ref="oval:org.open-scap.f14:obj:201141"/>
            </ind-def:textfilecontent54_test>
            <ind-def:textfilecontent54_test id="oval:org.open-scap.f14:tst:201142" version="1" check_existence="all_exist" check="all"
					    comment="Tests the value of the ^[\s]*net\.ipv4\.ip_forward[\s]*=([\s]*) expression in the /etc/sysctl.conf file">
                  <ind-def:object object_ref="oval:org.open-scap.f14:obj:201141"/>
                  <ind-def:state   state_ref="oval:org.open-scap.f14:ste:201120"/>
            </ind-def:textfilecontent54_test>

	    <!-- def:20115 -->
	    <ind-def:textfilecontent54_test id="oval:org.open-scap.f14:tst:201150" version="1" check_existence="all_exist" check="all"
					    comment="Tests the value of the /proc/sys/net/ipv4/conf/all/accept_source_route file">
	      <ind-def:object object_ref="oval:org.open-scap.f14:obj:201150"/>
	      <ind-def:state   state_ref="oval:org.open-scap.f14:ste:201120"/>
	    </ind-def:textfilecontent54_test>
            <ind-def:textfilecontent54_test id="oval:org.open-scap.f14:tst:201151" version="1" check_existence="all_exist" check="all"
					    comment="Tests the presence of the ^[\s]*net\.ipv4\.conf\.all\.accept_source_route[\s]*=([\s]*) expression in the /etc/sysctl.conf file">
                  <ind-def:object object_ref="oval:org.open-scap.f14:obj:201151"/>
            </ind-def:textfilecontent54_test>
            <ind-def:textfilecontent54_test id="oval:org.open-scap.f14:tst:201152" version="1" check_existence="all_exist" check="all"
					    comment="Tests the value of the ^[\s]*net\.ipv4\.conf\.all\.accept_source_route[\s]*=([\s]*) expression in the /etc/sysctl.conf file">
                  <ind-def:object object_ref="oval:org.open-scap.f14:obj:201151"/>
                  <ind-def:state   state_ref="oval:org.open-scap.f14:ste:201120"/>
            </ind-def:textfilecontent54_test>

	    <!-- def:20116 -->
	    <ind-def:textfilecontent54_test id="oval:org.open-scap.f14:tst:201160" version="1" check_existence="all_exist" check="all"
					    comment="Tests the value of the /proc/sys/net/ipv4/conf/all/accept_redirects file">
	      <ind-def:object object_ref="oval:org.open-scap.f14:obj:201160"/>
	      <ind-def:state   state_ref="oval:org.open-scap.f14:ste:201120"/>
	    </ind-def:textfilecontent54_test>
            <ind-def:textfilecontent54_test id="oval:org.open-scap.f14:tst:201161" version="1" check_existence="all_exist" check="all"
					    comment="Tests the presence of the ^[\s]*net\.ipv4\.conf\.all\.accept_redirects[\s]*=([\s]*) expression in the /etc/sysctl.conf file">
                  <ind-def:object object_ref="oval:org.open-scap.f14:obj:201161"/>
            </ind-def:textfilecontent54_test>
            <ind-def:textfilecontent54_test id="oval:org.open-scap.f14:tst:201162" version="1" check_existence="all_exist" check="all"
					    comment="Tests the value of the ^[\s]*net\.ipv4\.conf\.all\.accept_redirects[\s]*=([\s]*) expression in the /etc/sysctl.conf file">
                  <ind-def:object object_ref="oval:org.open-scap.f14:obj:201161"/>
                  <ind-def:state   state_ref="oval:org.open-scap.f14:ste:201120"/>
            </ind-def:textfilecontent54_test>

	    <!-- def:20117 -->
	    <ind-def:textfilecontent54_test id="oval:org.open-scap.f14:tst:201170" version="1" check_existence="all_exist" check="all"
					    comment="Tests the value of the /proc/sys/net/ipv4/conf/all/secure_redirects file">
	      <ind-def:object object_ref="oval:org.open-scap.f14:obj:201170"/>
	      <ind-def:state   state_ref="oval:org.open-scap.f14:ste:201121"/>
	    </ind-def:textfilecontent54_test>
            <ind-def:textfilecontent54_test id="oval:org.open-scap.f14:tst:201171" version="1" check_existence="all_exist" check="all"
					    comment="Tests the presence of the ^[\s]*net\.ipv4\.conf\.all\.secure_redirects[\s]*=([\s]*) expression in the /etc/sysctl.conf file">
                  <ind-def:object object_ref="oval:org.open-scap.f14:obj:201171"/>
            </ind-def:textfilecontent54_test>
            <ind-def:textfilecontent54_test id="oval:org.open-scap.f14:tst:201172" version="1" check_existence="all_exist" check="all"
					    comment="Tests the value of the ^[\s]*net\.ipv4\.conf\.all\.secure_redirects[\s]*=([\s]*) expression in the /etc/sysctl.conf file">
                  <ind-def:object object_ref="oval:org.open-scap.f14:obj:201171"/>
                  <ind-def:state   state_ref="oval:org.open-scap.f14:ste:201121"/>
            </ind-def:textfilecontent54_test>

	    <!-- def:20118 -->
	    <ind-def:textfilecontent54_test id="oval:org.open-scap.f14:tst:201180" version="1" check_existence="all_exist" check="all"
					    comment="Tests the value of the /proc/sys/net/ipv4/conf/all/log_martians file">
	      <ind-def:object object_ref="oval:org.open-scap.f14:obj:201180"/>
	      <ind-def:state   state_ref="oval:org.open-scap.f14:ste:201121"/>
	    </ind-def:textfilecontent54_test>
            <ind-def:textfilecontent54_test id="oval:org.open-scap.f14:tst:201181" version="1" check_existence="all_exist" check="all"
					    comment="Tests the presence of the ^[\s]*net\.ipv4\.conf\.all\.log_martians[\s]*=([\s]*) expression in the /etc/sysctl.conf file">
                  <ind-def:object object_ref="oval:org.open-scap.f14:obj:201181"/>
            </ind-def:textfilecontent54_test>
            <ind-def:textfilecontent54_test id="oval:org.open-scap.f14:tst:201182" version="1" check_existence="all_exist" check="all"
					    comment="Tests the value of the ^[\s]*net\.ipv4\.conf\.all\.log_martians[\s]*=([\s]*) expression in the /etc/sysctl.conf file">
                  <ind-def:object object_ref="oval:org.open-scap.f14:obj:201181"/>
                  <ind-def:state   state_ref="oval:org.open-scap.f14:ste:201121"/>
            </ind-def:textfilecontent54_test>

	    <!-- def:20119 -->
	    <ind-def:textfilecontent54_test id="oval:org.open-scap.f14:tst:201190" version="1" check_existence="all_exist" check="all"
					    comment="Tests the value of the /proc/sys/net/ipv4/conf/default/accept_source_route file">
	      <ind-def:object object_ref="oval:org.open-scap.f14:obj:201190"/>
	      <ind-def:state   state_ref="oval:org.open-scap.f14:ste:201120"/>
	    </ind-def:textfilecontent54_test>
            <ind-def:textfilecontent54_test id="oval:org.open-scap.f14:tst:201191" version="1" check_existence="all_exist" check="all"
					    comment="Tests the presence of the ^[\s]*net\.ipv4\.conf\.default\.accept_source_route[\s]*=([\s]*) expression in the /etc/sysctl.conf file">
                  <ind-def:object object_ref="oval:org.open-scap.f14:obj:201191"/>
            </ind-def:textfilecontent54_test>
            <ind-def:textfilecontent54_test id="oval:org.open-scap.f14:tst:201192" version="1" check_existence="all_exist" check="all"
					    comment="Tests the value of the ^[\s]*net\.ipv4\.conf\.default\.accept_source_route[\s]*=([\s]*) expression in the /etc/sysctl.conf file">
                  <ind-def:object object_ref="oval:org.open-scap.f14:obj:201191"/>
                  <ind-def:state   state_ref="oval:org.open-scap.f14:ste:201120"/>
            </ind-def:textfilecontent54_test>

	    <!-- def:20120 -->
	    <ind-def:textfilecontent54_test id="oval:org.open-scap.f14:tst:201200" version="1" check_existence="all_exist" check="all"
					    comment="Tests the value of the /proc/sys/net/ipv4/conf/default/accept_redirects file">
	      <ind-def:object object_ref="oval:org.open-scap.f14:obj:201200"/>
	      <ind-def:state   state_ref="oval:org.open-scap.f14:ste:201120"/>
	    </ind-def:textfilecontent54_test>
            <ind-def:textfilecontent54_test id="oval:org.open-scap.f14:tst:201201" version="1" check_existence="all_exist" check="all"
					    comment="Tests the presence of the ^[\s]*net\.ipv4\.conf\.default\.accept_redirects[\s]*=([\s]*) expression in the /etc/sysctl.conf file">
                  <ind-def:object object_ref="oval:org.open-scap.f14:obj:201201"/>
            </ind-def:textfilecontent54_test>
            <ind-def:textfilecontent54_test id="oval:org.open-scap.f14:tst:201202" version="1" check_existence="all_exist" check="all"
					    comment="Tests the value of the ^[\s]*net\.ipv4\.conf\.default\.accept_redirects[\s]*=([\s]*) expression in the /etc/sysctl.conf file">
                  <ind-def:object object_ref="oval:org.open-scap.f14:obj:201201"/>
                  <ind-def:state   state_ref="oval:org.open-scap.f14:ste:201120"/>
            </ind-def:textfilecontent54_test>

	    <!-- def:20121 -->
	    <ind-def:textfilecontent54_test id="oval:org.open-scap.f14:tst:201210" version="1" check_existence="all_exist" check="all"
					    comment="Tests the value of the /proc/sys/net/ipv4/conf/default/secure_redirects file">
	      <ind-def:object object_ref="oval:org.open-scap.f14:obj:201210"/>
	      <ind-def:state   state_ref="oval:org.open-scap.f14:ste:201121"/>
	    </ind-def:textfilecontent54_test>
            <ind-def:textfilecontent54_test id="oval:org.open-scap.f14:tst:201211" version="1" check_existence="all_exist" check="all"
					    comment="Tests the presence of the ^[\s]*net\.ipv4\.conf\.default\.secure_redirects[\s]*=([\s]*) expression in the /etc/sysctl.conf file">
                  <ind-def:object object_ref="oval:org.open-scap.f14:obj:201211"/>
            </ind-def:textfilecontent54_test>
            <ind-def:textfilecontent54_test id="oval:org.open-scap.f14:tst:201212" version="1" check_existence="all_exist" check="all"
					    comment="Tests the value of the ^[\s]*net\.ipv4\.conf\.default\.secure_redirects[\s]*=([\s]*) expression in the /etc/sysctl.conf file">
                  <ind-def:object object_ref="oval:org.open-scap.f14:obj:201211"/>
                  <ind-def:state   state_ref="oval:org.open-scap.f14:ste:201121"/>
            </ind-def:textfilecontent54_test>

	    <!-- def:20122 -->
	    <ind-def:textfilecontent54_test id="oval:org.open-scap.f14:tst:201220" version="1" check_existence="all_exist" check="all"
					    comment="Tests the value of the /proc/sys/net/ipv4/icmp_echo_ignore_broadcasts file">
	      <ind-def:object object_ref="oval:org.open-scap.f14:obj:201220"/>
	      <ind-def:state   state_ref="oval:org.open-scap.f14:ste:201121"/>
	    </ind-def:textfilecontent54_test>
            <ind-def:textfilecontent54_test id="oval:org.open-scap.f14:tst:201221" version="1" check_existence="all_exist" check="all"
					    comment="Tests the presence of the ^[\s]*net\.ipv4\.icmp_echo_ignore_broadcasts[\s]*=([\s]*) expression in the /etc/sysctl.conf file">
                  <ind-def:object object_ref="oval:org.open-scap.f14:obj:201221"/>
            </ind-def:textfilecontent54_test>
            <ind-def:textfilecontent54_test id="oval:org.open-scap.f14:tst:201222" version="1" check_existence="all_exist" check="all"
					    comment="Tests the value of the ^[\s]*net\.ipv4\.icmp_echo_ignore_broadcasts[\s]*=([\s]*) expression in the /etc/sysctl.conf file">
                  <ind-def:object object_ref="oval:org.open-scap.f14:obj:201221"/>
                  <ind-def:state   state_ref="oval:org.open-scap.f14:ste:201121"/>
            </ind-def:textfilecontent54_test>

	    <!-- def:20123 -->
	    <ind-def:textfilecontent54_test id="oval:org.open-scap.f14:tst:201230" version="1" check_existence="all_exist" check="all"
					    comment="Tests the value of the /proc/sys/net/ipv4/icmp_ignore_bogus_error_responses file">
	      <ind-def:object object_ref="oval:org.open-scap.f14:obj:201230"/>
	      <ind-def:state   state_ref="oval:org.open-scap.f14:ste:201121"/>
	    </ind-def:textfilecontent54_test>
            <ind-def:textfilecontent54_test id="oval:org.open-scap.f14:tst:201231" version="1" check_existence="all_exist" check="all"
					    comment="Tests the presence of the ^[\s]*net\.ipv4\.icmp_ignore_bogus_error_responses[\s]*=([\s]*) expression in the /etc/sysctl.conf file">
                  <ind-def:object object_ref="oval:org.open-scap.f14:obj:201231"/>
            </ind-def:textfilecontent54_test>
            <ind-def:textfilecontent54_test id="oval:org.open-scap.f14:tst:201232" version="1" check_existence="all_exist" check="all"
					    comment="Tests the value of the ^[\s]*net\.ipv4\.icmp_ignore_bogus_error_responses[\s]*=([\s]*) expression in the /etc/sysctl.conf file">
                  <ind-def:object object_ref="oval:org.open-scap.f14:obj:201231"/>
                  <ind-def:state   state_ref="oval:org.open-scap.f14:ste:201121"/>
            </ind-def:textfilecontent54_test>

	    <!-- def:20124 -->
	    <ind-def:textfilecontent54_test id="oval:org.open-scap.f14:tst:201240" version="1" check_existence="all_exist" check="all"
					    comment="Tests the value of the /proc/sys/net/ipv4/tcp_syncookies file">
	      <ind-def:object object_ref="oval:org.open-scap.f14:obj:201240"/>
	      <ind-def:state   state_ref="oval:org.open-scap.f14:ste:201121"/>
	    </ind-def:textfilecontent54_test>
            <ind-def:textfilecontent54_test id="oval:org.open-scap.f14:tst:201241" version="1" check_existence="all_exist" check="all"
					    comment="Tests the presence of the ^[\s]*net\.ipv4\.tcp_syncookies[\s]*=([\s]*) expression in the /etc/sysctl.conf file">
                  <ind-def:object object_ref="oval:org.open-scap.f14:obj:201241"/>
            </ind-def:textfilecontent54_test>
            <ind-def:textfilecontent54_test id="oval:org.open-scap.f14:tst:201242" version="1" check_existence="all_exist" check="all"
					    comment="Tests the value of the ^[\s]*net\.ipv4\.tcp_syncookies[\s]*=([\s]*) expression in the /etc/sysctl.conf file">
                  <ind-def:object object_ref="oval:org.open-scap.f14:obj:201241"/>
                  <ind-def:state   state_ref="oval:org.open-scap.f14:ste:201121"/>
            </ind-def:textfilecontent54_test>

	    <!-- def:20125 -->
	    <ind-def:textfilecontent54_test id="oval:org.open-scap.f14:tst:201250" version="1" check_existence="all_exist" check="all"
					    comment="Tests the value of the /proc/sys/net/ipv4/conf/all/rp_filter file">
	      <ind-def:object object_ref="oval:org.open-scap.f14:obj:201250"/>
	      <ind-def:state   state_ref="oval:org.open-scap.f14:ste:201120"/>
	    </ind-def:textfilecontent54_test>
            <ind-def:textfilecontent54_test id="oval:org.open-scap.f14:tst:201251" version="1" check_existence="all_exist" check="all"
					    comment="Tests the presence of the ^[\s]*net\.ipv4\.conf\.all\.rp_filter[\s]*=([\s]*) expression in the /etc/sysctl.conf file">
                  <ind-def:object object_ref="oval:org.open-scap.f14:obj:201251"/>
            </ind-def:textfilecontent54_test>
            <ind-def:textfilecontent54_test id="oval:org.open-scap.f14:tst:201252" version="1" check_existence="all_exist" check="all"
					    comment="Tests the value of the ^[\s]*net\.ipv4\.conf\.all\.rp_filter[\s]*=([\s]*) expression in the /etc/sysctl.conf file">
                  <ind-def:object object_ref="oval:org.open-scap.f14:obj:201251"/>
                  <ind-def:state   state_ref="oval:org.open-scap.f14:ste:201120"/>
            </ind-def:textfilecontent54_test>

	    <!-- def:20126 -->
	    <ind-def:textfilecontent54_test id="oval:org.open-scap.f14:tst:201260" version="1" check_existence="all_exist" check="all"
					    comment="Tests the value of the /proc/sys/net/ipv4/conf/default/rp_filter file">
	      <ind-def:object object_ref="oval:org.open-scap.f14:obj:201260"/>
	      <ind-def:state   state_ref="oval:org.open-scap.f14:ste:201121"/>
	    </ind-def:textfilecontent54_test>
            <ind-def:textfilecontent54_test id="oval:org.open-scap.f14:tst:201261" version="1" check_existence="all_exist" check="all"
					    comment="Tests the presence of the ^[\s]*net\.ipv4\.conf\.default\.rp_filter[\s]*=([\s]*) expression in the /etc/sysctl.conf file">
                  <ind-def:object object_ref="oval:org.open-scap.f14:obj:201261"/>
            </ind-def:textfilecontent54_test>
            <ind-def:textfilecontent54_test id="oval:org.open-scap.f14:tst:201262" version="1" check_existence="all_exist" check="all"
					    comment="Tests the value of the ^[\s]*net\.ipv4\.conf\.default\.rp_filter[\s]*=([\s]*) expression in the /etc/sysctl.conf file">
                  <ind-def:object object_ref="oval:org.open-scap.f14:obj:201261"/>
                  <ind-def:state   state_ref="oval:org.open-scap.f14:ste:201121"/>
            </ind-def:textfilecontent54_test>

	    <!-- ^^^ ok ^^^ -->
            <ind-def:textfilecontent54_test check_existence="none_exist" id="oval:org.open-scap.f14:tst:20128" version="1" check="all" comment="Look in /proc/net/wireless">
                  <ind-def:object object_ref="oval:org.open-scap.f14:obj:20128"/>
            </ind-def:textfilecontent54_test>

            <unix-def:file_test check_existence="none_exist" id="oval:org.open-scap.f14:tst:20129" version="1" check="all" comment="Actual file existence test">
                  <unix-def:object object_ref="oval:org.open-scap.f14:obj:20129"/>
            </unix-def:file_test>
	
            <ind-def:textfilecontent54_test check_existence="all_exist" id="oval:org.open-scap.f14:tst:20130" version="1" check="all" comment="Tests the value of the &lt;:begin:&gt;alias[\s]+net-pf-10[\s]+off&lt;:end:&gt; setting in the /etc/modprobe.d/dist.conf file">
                  <ind-def:object object_ref="oval:org.open-scap.f14:obj:20130"/>
            </ind-def:textfilecontent54_test>

	    <!-- assuming the default is "no" i.e. if IPV6INIT is not present -->
            <ind-def:textfilecontent54_test check_existence="any_exist" id="oval:org.open-scap.f14:tst:20131" version="1" check="all" comment="Tests the value of the ^[\s]*IPV6INIT[\s]*=[\s]*([^#]*) expression in the /etc/sysconfig/network file">
                  <ind-def:object object_ref="oval:org.open-scap.f14:obj:20131"/>
                  <ind-def:state   state_ref="oval:org.open-scap.f14:ste:20131"/>
            </ind-def:textfilecontent54_test>

            <ind-def:textfilecontent54_test check_existence="any_exist" id="oval:org.open-scap.f14:tst:20132" version="1" check="all" comment="Tests the value of the ^[\s]*NETWORKING_IPV6[\s]*=[\s]*([^#]*) expression in the /etc/sysconfig/network file">
                  <ind-def:object object_ref="oval:org.open-scap.f14:obj:20132"/>
                  <ind-def:state   state_ref="oval:org.open-scap.f14:ste:20132"/>
            </ind-def:textfilecontent54_test>

            <ind-def:textfilecontent54_test check_existence="any_exist" id="oval:org.open-scap.f14:tst:20133" version="1" check="all" comment="Tests the value of the ^[\s]*NETWORKING_IPV6[\s]*=[\s]*([^#]*) expression in the /etc/sysconfig/network-scripts/ifcfg-.* file">
                  <ind-def:object object_ref="oval:org.open-scap.f14:obj:20133"/>
                  <ind-def:state   state_ref="oval:org.open-scap.f14:ste:20133"/>
            </ind-def:textfilecontent54_test>

            <ind-def:textfilecontent54_test check_existence="any_exist" id="oval:org.open-scap.f14:tst:20134" version="1" check="all" comment="Tests the value of the ^[\s]*IPV6INIT[\s]*=[\s]*([^#]*) expression in the /etc/sysconfig/network file">
                  <ind-def:object object_ref="oval:org.open-scap.f14:obj:20134"/>
                  <ind-def:state   state_ref="oval:org.open-scap.f14:ste:20134"/>
            </ind-def:textfilecontent54_test>

	    <!-- sysctl (ip6) -->
            <ind-def:textfilecontent54_test id="oval:org.open-scap.f14:tst:201390" version="1" check_existence="all_exist" check="all"
					    comment="Tests the value of the /proc/sys/net/ipv6/conf/default/router_solicitations file">
                  <ind-def:object object_ref="oval:org.open-scap.f14:obj:201390"/>
                  <ind-def:state   state_ref="oval:org.open-scap.f14:ste:20139"/>
            </ind-def:textfilecontent54_test>
            <ind-def:textfilecontent54_test id="oval:org.open-scap.f14:tst:201391" version="1" check_existence="all_exist" check="all"
					    comment="Tests the presence of the ^[[:space:]]*net\.ipv6\.conf\.default\.router_solicitations[[:space:]]*=[[:space:]]*([01])[[:space:]]*$ expression in the /etc/sysctl.conf file">
                  <ind-def:object object_ref="oval:org.open-scap.f14:obj:201391"/>
            </ind-def:textfilecontent54_test>
            <ind-def:textfilecontent54_test id="oval:org.open-scap.f14:tst:201392" version="1" check_existence="all_exist" check="all"
					    comment="Tests the value of the ^[[:space:]]*net\.ipv6\.conf\.default\.router_solicitations[[:space:]]*=[[:space:]]*([01])[[:space:]]*$ expression in the /etc/sysctl.conf file">
                  <ind-def:object object_ref="oval:org.open-scap.f14:obj:201391"/>
                  <ind-def:state   state_ref="oval:org.open-scap.f14:ste:20139"/>
            </ind-def:textfilecontent54_test>


            <ind-def:textfilecontent54_test id="oval:org.open-scap.f14:tst:201400" version="1" check_existence="all_exist" check="all"
					    comment="Tests the value of the /proc/sys/net/ipv6/conf/default/accept_ra_rtr_pref file">
                  <ind-def:object object_ref="oval:org.open-scap.f14:obj:201400"/>
                  <ind-def:state   state_ref="oval:org.open-scap.f14:ste:201120"/>
            </ind-def:textfilecontent54_test>
            <ind-def:textfilecontent54_test id="oval:org.open-scap.f14:tst:201401" version="1" check_existence="all_exist" check="all"
					    comment="Tests the presence of the ^[[:space:]]*net\.ipv6\.conf\.default\.accept_ra_rtr_pref[[:space:]]*=[[:space:]]*([01])[[:space:]]*$ expression in the /etc/sysctl.conf file">
                  <ind-def:object object_ref="oval:org.open-scap.f14:obj:201401"/>
            </ind-def:textfilecontent54_test>
            <ind-def:textfilecontent54_test id="oval:org.open-scap.f14:tst:201402" version="1" check_existence="all_exist" check="all"
					    comment="Tests the value of the ^[[:space:]]*net\.ipv6\.conf\.default\.accept_ra_rtr_pref[[:space:]]*=[[:space:]]*([01])[[:space:]]*$ expression in the /etc/sysctl.conf file">
                  <ind-def:object object_ref="oval:org.open-scap.f14:obj:201401"/>
                  <ind-def:state   state_ref="oval:org.open-scap.f14:ste:201120"/>
            </ind-def:textfilecontent54_test>


            <ind-def:textfilecontent54_test id="oval:org.open-scap.f14:tst:201410" version="1" check_existence="all_exist" check="all"
					    comment="Tests the value of the /proc/sys/net/ipv6/conf/default/accept_ra_pinfo file">
                  <ind-def:object object_ref="oval:org.open-scap.f14:obj:201410"/>
                  <ind-def:state   state_ref="oval:org.open-scap.f14:ste:201120"/>
            </ind-def:textfilecontent54_test>
            <ind-def:textfilecontent54_test id="oval:org.open-scap.f14:tst:201411" version="1" check_existence="all_exist" check="all"
					    comment="Tests the presence of the ^[[:space:]]*net\.ipv6\.conf\.default\.accept_ra_pinfo[[:space:]]*=[[:space:]]*([01])[[:space:]]*$ expression in the /etc/sysctl.conf file">
                  <ind-def:object object_ref="oval:org.open-scap.f14:obj:201411"/>
            </ind-def:textfilecontent54_test>
            <ind-def:textfilecontent54_test id="oval:org.open-scap.f14:tst:201412" version="1" check_existence="all_exist" check="all"
					    comment="Tests the value of the ^[[:space:]]*net\.ipv6\.conf\.default\.accept_ra_pinfo[[:space:]]*=[[:space:]]*([01])[[:space:]]*$ expression in the /etc/sysctl.conf file">
                  <ind-def:object object_ref="oval:org.open-scap.f14:obj:201411"/>
                  <ind-def:state   state_ref="oval:org.open-scap.f14:ste:201120"/>
            </ind-def:textfilecontent54_test>


            <ind-def:textfilecontent54_test id="oval:org.open-scap.f14:tst:201420" version="1" check_existence="all_exist" check="all"
					    comment="Tests the value of the /proc/sys/net/ipv6/conf/default/accept_ra_defrtr file">
                  <ind-def:object object_ref="oval:org.open-scap.f14:obj:201420"/>
                  <ind-def:state   state_ref="oval:org.open-scap.f14:ste:201120"/>
            </ind-def:textfilecontent54_test>
            <ind-def:textfilecontent54_test id="oval:org.open-scap.f14:tst:201421" version="1" check_existence="all_exist" check="all"
					    comment="Tests the presence of the ^[[:space:]]*net\.ipv6\.conf\.default\.accept_ra_defrtr[[:space:]]*=[[:space:]]*([01])[[:space:]]*$ expression in the /etc/sysctl.conf file">
                  <ind-def:object object_ref="oval:org.open-scap.f14:obj:201421"/>
            </ind-def:textfilecontent54_test>
            <ind-def:textfilecontent54_test id="oval:org.open-scap.f14:tst:201422" version="1" check_existence="all_exist" check="all"
					    comment="Tests the value of the ^[[:space:]]*net\.ipv6\.conf\.default\.accept_ra_defrtr[[:space:]]*=[[:space:]]*([01])[[:space:]]*$ expression in the /etc/sysctl.conf file">
                  <ind-def:object object_ref="oval:org.open-scap.f14:obj:201421"/>
                  <ind-def:state   state_ref="oval:org.open-scap.f14:ste:201120"/>
            </ind-def:textfilecontent54_test>


            <ind-def:textfilecontent54_test id="oval:org.open-scap.f14:tst:201430" version="1" check_existence="all_exist" check="all"
					    comment="Tests the value of the /proc/sys/net/ipv6/conf/default/autoconf file">
                  <ind-def:object object_ref="oval:org.open-scap.f14:obj:201430"/>
                  <ind-def:state   state_ref="oval:org.open-scap.f14:ste:201120"/>
            </ind-def:textfilecontent54_test>
            <ind-def:textfilecontent54_test id="oval:org.open-scap.f14:tst:201431" version="1" check_existence="all_exist" check="all"
					    comment="Tests the presence of the ^[[:space:]]*net\.ipv6\.conf\.default\.autoconf[[:space:]]*=[[:space:]]*([01])[[:space:]]*$ expression in the /etc/sysctl.conf file">
                  <ind-def:object object_ref="oval:org.open-scap.f14:obj:201431"/>
            </ind-def:textfilecontent54_test>
            <ind-def:textfilecontent54_test id="oval:org.open-scap.f14:tst:201432" version="1" check_existence="all_exist" check="all"
					    comment="Tests the value of the ^[[:space:]]*net\.ipv6\.conf\.default\.autoconf[[:space:]]*=[[:space:]]*([01])[[:space:]]*$ expression in the /etc/sysctl.conf file">
                  <ind-def:object object_ref="oval:org.open-scap.f14:obj:201431"/>
                  <ind-def:state   state_ref="oval:org.open-scap.f14:ste:201120"/>
            </ind-def:textfilecontent54_test>


            <ind-def:textfilecontent54_test id="oval:org.open-scap.f14:tst:201440" version="1" check_existence="all_exist" check="all"
					    comment="Tests the value of the /proc/sys/net/ipv6/conf/default/dad_transmits file">
                  <ind-def:object object_ref="oval:org.open-scap.f14:obj:201440"/>
                  <ind-def:state   state_ref="oval:org.open-scap.f14:ste:20144"/>
            </ind-def:textfilecontent54_test>
            <ind-def:textfilecontent54_test id="oval:org.open-scap.f14:tst:201441" version="1" check_existence="all_exist" check="all"
					    comment="Tests the presence of the ^[[:space:]]*net\.ipv6\.conf\.default\.dad_transmits[[:space:]]*=[[:space:]]*([01])[[:space:]]*$ expression in the /etc/sysctl.conf file">
                  <ind-def:object object_ref="oval:org.open-scap.f14:obj:201441"/>
            </ind-def:textfilecontent54_test>
            <ind-def:textfilecontent54_test id="oval:org.open-scap.f14:tst:201442" version="1" check_existence="all_exist" check="all"
					    comment="Tests the value of the ^[[:space:]]*net\.ipv6\.conf\.default\.dad_transmits[[:space:]]*=[[:space:]]*([01])[[:space:]]*$ expression in the /etc/sysctl.conf file">
                  <ind-def:object object_ref="oval:org.open-scap.f14:obj:201441"/>
                  <ind-def:state   state_ref="oval:org.open-scap.f14:ste:20144"/>
            </ind-def:textfilecontent54_test>


            <ind-def:textfilecontent54_test id="oval:org.open-scap.f14:tst:201450" version="1" check_existence="all_exist" check="all"
					    comment="Tests the value of the /proc/sys/net/ipv6/conf/default/max_addresses file">
                  <ind-def:object object_ref="oval:org.open-scap.f14:obj:201450"/>
                  <ind-def:state   state_ref="oval:org.open-scap.f14:ste:20145"/>
            </ind-def:textfilecontent54_test>
            <ind-def:textfilecontent54_test id="oval:org.open-scap.f14:tst:201451" version="1" check_existence="all_exist" check="all"
					    comment="Tests the presence of the ^[[:space:]]*net\.ipv6\.conf\.default\.max_addresses[[:space:]]*=[[:space:]]*([01])[[:space:]]*$ expression in the /etc/sysctl.conf file">
                  <ind-def:object object_ref="oval:org.open-scap.f14:obj:201451"/>
            </ind-def:textfilecontent54_test>
            <ind-def:textfilecontent54_test id="oval:org.open-scap.f14:tst:201452" version="1" check_existence="all_exist" check="all"
					    comment="Tests the value of the ^[[:space:]]*net\.ipv6\.conf\.default\.max_addresses[[:space:]]*=[[:space:]]*([01])[[:space:]]*$ expression in the /etc/sysctl.conf file">
                  <ind-def:object object_ref="oval:org.open-scap.f14:obj:201451"/>
                  <ind-def:state   state_ref="oval:org.open-scap.f14:ste:20145"/>
            </ind-def:textfilecontent54_test>

            <unix-def:runlevel_test check_existence="at_least_one_exists" id="oval:org.open-scap.f14:tst:20146" version="1" check="at least one" comment="Check whether the ip6tables service is enabled">
                  <unix-def:object object_ref="oval:org.open-scap.f14:obj:20146"/>
		  <unix-def:state   state_ref="oval:org.open-scap.f14:ste:20146"/>
            </unix-def:runlevel_test>

            <unix-def:runlevel_test check_existence="at_least_one_exists" id="oval:org.open-scap.f14:tst:20147" version="1" check="at least one" comment="Check whether the iptables service is enabled">
                  <unix-def:object object_ref="oval:org.open-scap.f14:obj:20147"/>
		  <unix-def:state   state_ref="oval:org.open-scap.f14:ste:20146"/>
            </unix-def:runlevel_test>

	    <!--- New end -->

            <ind-def:textfilecontent54_test id="oval:org.open-scap.f14:tst:2014741" check_existence="at_least_one_exists" version="1" check="all" comment="Check /etc/sysconfig/iptables for line :INPUT DROP [0:0]">
                  <ind-def:object object_ref="oval:org.open-scap.f14:obj:2014741" />
            </ind-def:textfilecontent54_test>

            <ind-def:textfilecontent54_test id="oval:org.open-scap.f14:tst:2014742" check_existence="at_least_one_exists" version="1" check="all" comment="Check /etc/sysconfig/iptables for line :INPUT ACCEPT [0:0]">
                  <ind-def:object object_ref="oval:org.open-scap.f14:obj:2014742" />
            </ind-def:textfilecontent54_test>

            <ind-def:textfilecontent54_test id="oval:org.open-scap.f14:tst:2014751" check_existence="at_least_one_exists" version="1" check="all" comment="Check /etc/sysconfig/iptables for line :FORWARD DROP [0:0]">
                  <ind-def:object object_ref="oval:org.open-scap.f14:obj:2014751" />
            </ind-def:textfilecontent54_test>

            <ind-def:textfilecontent54_test id="oval:org.open-scap.f14:tst:2014752" check_existence="at_least_one_exists" version="1" check="all" comment="Check /etc/sysconfig/iptables for line :FORWARD ACCEPT [0:0]">
                  <ind-def:object object_ref="oval:org.open-scap.f14:obj:2014752" />
            </ind-def:textfilecontent54_test>

	    <!--
            <ind-def:textfilecontent54_test id="oval:org.open-scap.f14:tst:201476" check_existence="at_least_one_exists" version="1" check="all" comment="Check /etc/modprobe.conf for line install DCCP /bin/true">
                  <ind-def:object object_ref="oval:org.open-scap.f14:obj:201476" />
            </ind-def:textfilecontent54_test>
            <ind-def:textfilecontent54_test id="oval:org.open-scap.f14:tst:201477" check_existence="at_least_one_exists" version="1" check="all" comment="Check /etc/modprobe.conf for line install SCTP /bin/true">
                  <ind-def:object object_ref="oval:org.open-scap.f14:obj:201477" />
            </ind-def:textfilecontent54_test>
            <ind-def:textfilecontent54_test id="oval:org.open-scap.f14:tst:201478" check_existence="at_least_one_exists" version="1" check="all" comment="Check /etc/modprobe.conf for line install RDS /bin/true">
                  <ind-def:object object_ref="oval:org.open-scap.f14:obj:201478" />
            </ind-def:textfilecontent54_test>
            <ind-def:textfilecontent54_test id="oval:org.open-scap.f14:tst:201479" check_existence="at_least_one_exists" version="1" check="all" comment="Check /etc/modprobe.conf for line install TIPC /bin/true">
                  <ind-def:object object_ref="oval:org.open-scap.f14:obj:201479" />
            </ind-def:textfilecontent54_test>
	    -->

            <unix-def:runlevel_test check_existence="at_least_one_exists" id="oval:org.open-scap.f14:tst:20148" version="1" check="at least one" comment="Check whether rsyslogd is enabled">
                  <unix-def:object object_ref="oval:org.open-scap.f14:obj:20148"/>
		  <unix-def:state   state_ref="oval:org.open-scap.f14:ste:20148"/>
            </unix-def:runlevel_test>

            <unix-def:file_test check_existence="any_exist" id="oval:org.open-scap.f14:tst:20149" version="1" check="all" comment="If any of the mandatory log files exist, their owner must be set to root">
                  <unix-def:object object_ref="oval:org.open-scap.f14:obj:201491"/>
                  <unix-def:state   state_ref="oval:org.open-scap.f14:ste:20149"/>
            </unix-def:file_test>
            <unix-def:file_test check_existence="all_exist" id="oval:org.open-scap.f14:tst:20150" version="1" check="all" comment="root group owns log files">
                  <unix-def:object object_ref="oval:org.open-scap.f14:obj:201491"/>
                  <unix-def:state state_ref="oval:org.open-scap.f14:ste:20150"/>
            </unix-def:file_test>
            <unix-def:file_test check_existence="all_exist" id="oval:org.open-scap.f14:tst:20151" version="1" check="all" comment="log files have correct permissions">
                  <unix-def:object object_ref="oval:org.open-scap.f14:obj:201491"/>
                  <unix-def:state state_ref="oval:org.open-scap.f14:ste:20151"/>
            </unix-def:file_test>
            <unix-def:password_test check_existence="at_least_one_exists" id="oval:org.open-scap.f14:tst:201491" version="1" check="all" comment="Check if user exists">
                  <unix-def:object object_ref="oval:org.open-scap.f14:obj:2014911"/>
            </unix-def:password_test>
            <ind-def:textfilecontent54_test check_existence="at_least_one_exists" id="oval:org.open-scap.f14:tst:201501" version="1" check="all" comment="Check if group exists">
                  <ind-def:object object_ref="oval:org.open-scap.f14:obj:201501"/>
            </ind-def:textfilecontent54_test>
            <ind-def:textfilecontent54_test check_existence="at_least_one_exists" id="oval:org.open-scap.f14:tst:20152" version="1" check="all" comment="Tests the value of the \*\.\*[\s]+@ setting in the /etc/rsyslog.conf file">
                  <ind-def:object object_ref="oval:org.open-scap.f14:obj:20152"/>
            </ind-def:textfilecontent54_test>

            <ind-def:textfilecontent54_test check_existence="none_exist" id="oval:org.open-scap.f14:tst:20153" version="1" check="all" comment="Tests the value of the SYSLOGD_OPTIONS[\s]*=[\s]*.*-r.* setting in the /etc/sysconfig/rsyslog file">
                  <ind-def:object object_ref="oval:org.open-scap.f14:obj:20153"/>
            </ind-def:textfilecontent54_test>

<!--
            <ind-def:textfilecontent54_test check_existence="all_exist" id="oval:org.open-scap.f14:tst:20154" version="1" check="all" comment="Find each file in /etc/syslog.conf in /etc/logrotate.d/syslog">
                  <ind-def:object object_ref="oval:org.open-scap.f14:obj:20154"/>
            </ind-def:textfilecontent54_test>
-->
            <unix-def:runlevel_test check_existence="all_exist" id="oval:org.open-scap.f14:tst:20156" version="1" check="at least one" comment="Runlevel test">
                  <unix-def:object object_ref="oval:org.open-scap.f14:obj:20156"/>
                  <unix-def:state state_ref="oval:org.open-scap.f14:ste:20156"/>
            </unix-def:runlevel_test>
            <ind-def:textfilecontent54_test check_existence="at_least_one_exists" id="oval:org.open-scap.f14:tst:20157" version="1" check="all" comment="check for audit=1 in /etc/grub.conf">
                  <ind-def:object object_ref="oval:org.open-scap.f14:obj:20157"/>
            </ind-def:textfilecontent54_test>
            <ind-def:textfilecontent54_test check_existence="at_least_one_exists" id="oval:org.open-scap.f14:tst:2015750" version="1" check="all" comment="/etc/audit/audit.rules contains -a always,exit -F arch=b32 -S adjtimex -S settimeofday -S stime -k time-change">
                  <ind-def:object object_ref="oval:org.open-scap.f14:obj:2015750"/>
            </ind-def:textfilecontent54_test>
            <ind-def:textfilecontent54_test check_existence="at_least_one_exists" id="oval:org.open-scap.f14:tst:2015751" version="1" check="all" comment="/etc/audit/audit.rules contains -a always,exit -F arch=b32 -S clock_settime -k time-change">
                  <ind-def:object object_ref="oval:org.open-scap.f14:obj:2015751"/>
            </ind-def:textfilecontent54_test>
            <ind-def:textfilecontent54_test check_existence="at_least_one_exists" id="oval:org.open-scap.f14:tst:2015752" version="1" check="all" comment="/etc/audit/audit.rules contains -a always,exit -F arch=b64 -S adjtimex -S settimeofday -S stime -k time-change">
                  <ind-def:object object_ref="oval:org.open-scap.f14:obj:2015752"/>
            </ind-def:textfilecontent54_test>
            <ind-def:textfilecontent54_test check_existence="at_least_one_exists" id="oval:org.open-scap.f14:tst:2015753" version="1" check="all" comment="/etc/audit/audit.rules contains -a always,exit -F arch=b64 -S clock_settime -k time-change">
                  <ind-def:object object_ref="oval:org.open-scap.f14:obj:2015753"/>
            </ind-def:textfilecontent54_test>
            <ind-def:textfilecontent54_test check_existence="at_least_one_exists" id="oval:org.open-scap.f14:tst:2015754" version="1" check="all" comment="/etc/audit/audit.rules contains -w /etc/localtime -p wa -k time-change">
                  <ind-def:object object_ref="oval:org.open-scap.f14:obj:2015754"/>
            </ind-def:textfilecontent54_test>
            <ind-def:textfilecontent54_test check_existence="at_least_one_exists" id="oval:org.open-scap.f14:tst:201580" version="1" check="all" comment="/etc/audit/audit.rules contains -w /etc/group -p wa -k identity">
                  <ind-def:object object_ref="oval:org.open-scap.f14:obj:201580"/>
            </ind-def:textfilecontent54_test>
            <ind-def:textfilecontent54_test check_existence="at_least_one_exists" id="oval:org.open-scap.f14:tst:201581" version="1" check="all" comment="/etc/audit/audit.rules contains -w /etc/passwd -p wa -k identity">
                  <ind-def:object object_ref="oval:org.open-scap.f14:obj:201581"/>
            </ind-def:textfilecontent54_test>
            <ind-def:textfilecontent54_test check_existence="at_least_one_exists" id="oval:org.open-scap.f14:tst:201582" version="1" check="all" comment="/etc/audit/audit.rules contains -w /etc/gshadow -p wa -k identity">
                  <ind-def:object object_ref="oval:org.open-scap.f14:obj:201582"/>
            </ind-def:textfilecontent54_test>
            <ind-def:textfilecontent54_test check_existence="at_least_one_exists" id="oval:org.open-scap.f14:tst:201583" version="1" check="all" comment="/etc/audit/audit.rules contains -w /etc/shadow -p wa -k identity">
                  <ind-def:object object_ref="oval:org.open-scap.f14:obj:201583"/>
            </ind-def:textfilecontent54_test>
            <ind-def:textfilecontent54_test check_existence="at_least_one_exists" id="oval:org.open-scap.f14:tst:201584" version="1" check="all" comment="/etc/audit/audit.rules contains -w /etc/security/opasswd -p wa -k identity">
                  <ind-def:object object_ref="oval:org.open-scap.f14:obj:201584"/>
            </ind-def:textfilecontent54_test>
            <ind-def:textfilecontent54_test check_existence="at_least_one_exists" id="oval:org.open-scap.f14:tst:201590" version="1" check="all" comment="/etc/audit/audit.rules contains -a exit,always -F arch=b32 -S sethostname -S setdomainname -k system-locale">
                  <ind-def:object object_ref="oval:org.open-scap.f14:obj:201590"/>
            </ind-def:textfilecontent54_test>
            <ind-def:textfilecontent54_test check_existence="at_least_one_exists" id="oval:org.open-scap.f14:tst:201591" version="1" check="all" comment="/etc/audit/audit.rules contains -a exit,always -F arch=b64 -S sethostname -S setdomainname -k system-locale">
                  <ind-def:object object_ref="oval:org.open-scap.f14:obj:201591"/>
            </ind-def:textfilecontent54_test>
            <ind-def:textfilecontent54_test check_existence="at_least_one_exists" id="oval:org.open-scap.f14:tst:201592" version="1" check="all" comment="/etc/audit/audit.rules contains -w /etc/issue -p wa -k system-locale">
                  <ind-def:object object_ref="oval:org.open-scap.f14:obj:201592"/>
            </ind-def:textfilecontent54_test>
            <ind-def:textfilecontent54_test check_existence="at_least_one_exists" id="oval:org.open-scap.f14:tst:201593" version="1" check="all" comment="/etc/audit/audit.rules contains -w /etc/issue.net -p wa -k system-locale">
                  <ind-def:object object_ref="oval:org.open-scap.f14:obj:201593"/>
            </ind-def:textfilecontent54_test>
            <ind-def:textfilecontent54_test check_existence="at_least_one_exists" id="oval:org.open-scap.f14:tst:201594" version="1" check="all" comment="/etc/audit/audit.rules contains -w /etc/hosts -p wa -k system-locale">
                  <ind-def:object object_ref="oval:org.open-scap.f14:obj:201594"/>
            </ind-def:textfilecontent54_test>
            <ind-def:textfilecontent54_test check_existence="at_least_one_exists" id="oval:org.open-scap.f14:tst:201595" version="1" check="all" comment="/etc/audit/audit.rules contains -w /etc/sysconfig/network -p wa -k system-locale">
                  <ind-def:object object_ref="oval:org.open-scap.f14:obj:201595"/>
            </ind-def:textfilecontent54_test>
            <ind-def:textfilecontent54_test check_existence="at_least_one_exists" id="oval:org.open-scap.f14:tst:20160" version="1" check="all" comment="/etc/audit/audit.rules contains -w /etc/selinux/ -p wa -k MAC-policy">
                  <ind-def:object object_ref="oval:org.open-scap.f14:obj:20160"/>
            </ind-def:textfilecontent54_test>
            <ind-def:textfilecontent54_test check_existence="at_least_one_exists" id="oval:org.open-scap.f14:tst:201610" version="1" check="all" comment="/etc/audit/audit.rules contains -w /var/log/faillog -p wa -k logins">
                  <ind-def:object object_ref="oval:org.open-scap.f14:obj:201610"/>
            </ind-def:textfilecontent54_test>
            <ind-def:textfilecontent54_test check_existence="at_least_one_exists" id="oval:org.open-scap.f14:tst:201611" version="1" check="all" comment="/etc/audit/audit.rules contains -w /var/log/lastlog -p wa -k logins">
                  <ind-def:object object_ref="oval:org.open-scap.f14:obj:201611"/>
            </ind-def:textfilecontent54_test>
            <ind-def:textfilecontent54_test check_existence="at_least_one_exists" id="oval:org.open-scap.f14:tst:201620" version="1" check="all" comment="/etc/audit/audit.rules contains -w /var/run/utmp -p wa -k session">
                  <ind-def:object object_ref="oval:org.open-scap.f14:obj:201620"/>
            </ind-def:textfilecontent54_test>
            <ind-def:textfilecontent54_test check_existence="at_least_one_exists" id="oval:org.open-scap.f14:tst:201621" version="1" check="all" comment="/etc/audit/audit.rules contains -w /var/log/btmp -p wa -k session">
                  <ind-def:object object_ref="oval:org.open-scap.f14:obj:201621"/>
            </ind-def:textfilecontent54_test>
            <ind-def:textfilecontent54_test check_existence="at_least_one_exists" id="oval:org.open-scap.f14:tst:201622" version="1" check="all" comment="/etc/audit/audit.rules contains -w /var/log/wtmp -p wa -k session">
                  <ind-def:object object_ref="oval:org.open-scap.f14:obj:201622"/>
            </ind-def:textfilecontent54_test>
            <ind-def:textfilecontent54_test check_existence="at_least_one_exists" id="oval:org.open-scap.f14:tst:201630" version="1" check="all" comment="/etc/audit/audit.rules contains -a always,exit -F arch=ARCH -S chmod -S fchmod -S fchmodat -F auid>=500 -F auid!=4294967295 -k perm_mod">
                  <ind-def:object object_ref="oval:org.open-scap.f14:obj:201630"/>
            </ind-def:textfilecontent54_test>
            <ind-def:textfilecontent54_test check_existence="at_least_one_exists" id="oval:org.open-scap.f14:tst:201631" version="1" check="all" comment="/etc/audit/audit.rules contains -a always,exit -F arch=ARCH -S chown -S fchown -S fchownat -S lchown -F auid>=500 -F auid!=4294967295 -k perm_mod">
                  <ind-def:object object_ref="oval:org.open-scap.f14:obj:201631"/>
            </ind-def:textfilecontent54_test>
            <ind-def:textfilecontent54_test check_existence="at_least_one_exists" id="oval:org.open-scap.f14:tst:201632" version="1" check="all" comment="/etc/audit/audit.rules contains -a always,exit -F arch=ARCH -S setxattr -S lsetxattr -S fsetxattr -S removexattr -S lremovexattr -S fremovexattr -F auid>=500 -F auid!=4294967295 -k perm_mod">
                  <ind-def:object object_ref="oval:org.open-scap.f14:obj:201632"/>
            </ind-def:textfilecontent54_test>
            <ind-def:textfilecontent54_test check_existence="at_least_one_exists" id="oval:org.open-scap.f14:tst:201633" version="1" check="all" comment="/etc/audit/audit.rules contains -a always,exit -F arch=ARCH -S chmod -S fchmod -S fchmodat -F auid>=500 -F auid!=4294967295 -k perm_mod">
                  <ind-def:object object_ref="oval:org.open-scap.f14:obj:201633"/>
            </ind-def:textfilecontent54_test>
            <ind-def:textfilecontent54_test check_existence="at_least_one_exists" id="oval:org.open-scap.f14:tst:201634" version="1" check="all" comment="/etc/audit/audit.rules contains -a always,exit -F arch=ARCH -S chown -S fchown -S fchownat -S lchown -F auid>=500 -F auid!=4294967295 -k perm_mod">
                  <ind-def:object object_ref="oval:org.open-scap.f14:obj:201634"/>
            </ind-def:textfilecontent54_test>
            <ind-def:textfilecontent54_test check_existence="at_least_one_exists" id="oval:org.open-scap.f14:tst:201635" version="1" check="all" comment="/etc/audit/audit.rules contains -a always,exit -F arch=ARCH -S setxattr -S lsetxattr -S fsetxattr -S removexattr -S lremovexattr -S fremovexattr -F auid>=500 -F auid!=4294967295 -k perm_mod">
                  <ind-def:object object_ref="oval:org.open-scap.f14:obj:201635"/>
            </ind-def:textfilecontent54_test>
            <ind-def:textfilecontent54_test check_existence="at_least_one_exists" id="oval:org.open-scap.f14:tst:201640" version="1" check="all" comment="/etc/audit/audit.rules contains -a always,exit -F arch=b32 -S creat -S open -S openat -S truncate -S ftruncate -F exit=-EACCES -F auid>=500 -F auid!=4294967295 -k access">
                  <ind-def:object object_ref="oval:org.open-scap.f14:obj:201640"/>
            </ind-def:textfilecontent54_test>
            <ind-def:textfilecontent54_test check_existence="at_least_one_exists" id="oval:org.open-scap.f14:tst:201641" version="1" check="all" comment="/etc/audit/audit.rules contains -a always,exit -F arch=b32 -S creat -S open -S openat -S truncate -S ftruncate -F exit=-EPERM -F auid>=500 -F auid!=4294967295 -k access">
                  <ind-def:object object_ref="oval:org.open-scap.f14:obj:201641"/>
            </ind-def:textfilecontent54_test>
            <ind-def:textfilecontent54_test check_existence="at_least_one_exists" id="oval:org.open-scap.f14:tst:201642" version="1" check="all" comment="/etc/audit/audit.rules contains -a always,exit -F arch=b64 -S creat -S open -S openat -S truncate -S ftruncate -F exit=-EACCES -F auid>=500 -F auid!=4294967295 -k access">
                  <ind-def:object object_ref="oval:org.open-scap.f14:obj:201642"/>
            </ind-def:textfilecontent54_test>
            <ind-def:textfilecontent54_test check_existence="at_least_one_exists" id="oval:org.open-scap.f14:tst:201643" version="1" check="all" comment="/etc/audit/audit.rules contains -a always,exit -F arch=b64 -S creat -S open -S openat -S truncate -S ftruncate -F exit=-EPERM -F auid>=500 -F auid!=4294967295 -k access">
                  <ind-def:object object_ref="oval:org.open-scap.f14:obj:201643"/>
            </ind-def:textfilecontent54_test>
            <ind-def:textfilecontent54_test check_existence="at_least_one_exists" id="oval:org.open-scap.f14:tst:20165" version="1" check="all" comment="/etc/audit/audit.rules contains -a always,exit -F path=/bin/ping -F perm=x -F auid>=500 -F auid!=4294967295 -k privileged">
                  <ind-def:object object_ref="oval:org.open-scap.f14:obj:20165"/>
            </ind-def:textfilecontent54_test>
            <ind-def:textfilecontent54_test check_existence="at_least_one_exists" id="oval:org.open-scap.f14:tst:201660" version="1" check="all" comment="/etc/audit/audit.rules contains -a always,exit -F arch=ARCH -S mount -F auid>=500 -F auid!=4294967295 -k export">
                  <ind-def:object object_ref="oval:org.open-scap.f14:obj:201660"/>
            </ind-def:textfilecontent54_test>
            <ind-def:textfilecontent54_test check_existence="at_least_one_exists" id="oval:org.open-scap.f14:tst:201661" version="1" check="all" comment="/etc/audit/audit.rules contains -a always,exit -F arch=ARCH -S mount -F auid>=500 -F auid!=4294967295 -k export">
                  <ind-def:object object_ref="oval:org.open-scap.f14:obj:201661"/>
            </ind-def:textfilecontent54_test>
            <unix-def:uname_test id="oval:org.open-scap.f14:tst:201670" version="1" check="all" comment="check architecture is 32 bit">
                  <unix-def:object object_ref="oval:org.open-scap.f14:obj:201670"/>
                  <unix-def:state state_ref="oval:org.open-scap.f14:ste:201670"/>
            </unix-def:uname_test>
            <ind-def:textfilecontent54_test check_existence="at_least_one_exists" id="oval:org.open-scap.f14:tst:201671" version="1" check="all" comment="/etc/audit/audit.rules contains -a always,exit -F arch=b32 -S unlink -S unlinkat -S rename -S renameat -F auid>=500 -F auid!=4294967295 -k delete">
                  <ind-def:object object_ref="oval:org.open-scap.f14:obj:201671"/>
            </ind-def:textfilecontent54_test>
            <unix-def:uname_test id="oval:org.open-scap.f14:tst:201672" version="1" check="all" comment="check architecture is 64 bit">
                  <unix-def:object object_ref="oval:org.open-scap.f14:obj:201670"/>
                  <unix-def:state state_ref="oval:org.open-scap.f14:ste:201672"/>
            </unix-def:uname_test>
            <ind-def:textfilecontent54_test check_existence="at_least_one_exists" id="oval:org.open-scap.f14:tst:201673" version="1" check="all" comment="/etc/audit/audit.rules contains -a always,exit -F arch=b64 -S unlink -S unlinkat -S rename -S renameat -F auid>=500 -F auid!=4294967295 -k delete">
                  <ind-def:object object_ref="oval:org.open-scap.f14:obj:201673"/>
            </ind-def:textfilecontent54_test>
            <ind-def:textfilecontent54_test check_existence="at_least_one_exists" id="oval:org.open-scap.f14:tst:20168" version="1" check="all" comment="/etc/audit/audit.rules contains -w /etc/sudoers -p wa -k actions">
                  <ind-def:object object_ref="oval:org.open-scap.f14:obj:20168"/>
            </ind-def:textfilecontent54_test>
         <!--   <ind-def:textfilecontent54_test check_existence="at_least_one_exists" id="oval:org.open-scap.f14:tst:2016851" version="1" check="all" comment="/etc/audit/audit.rules contains -w /sbin/insmod -p x -k modules">
                  <ind-def:object object_ref="oval:org.open-scap.f14:obj:2016861"/> 
            </ind-def:textfilecontent54_test> -->
            <ind-def:textfilecontent54_test check_existence="at_least_one_exists" id="oval:org.open-scap.f14:tst:2016852" version="1" check="all" comment="/etc/audit/audit.rules contains -w /sbin/rmmod -p x -k modules">
                  <ind-def:object object_ref="oval:org.open-scap.f14:obj:2016852"/>
            </ind-def:textfilecontent54_test>
            <ind-def:textfilecontent54_test check_existence="at_least_one_exists" id="oval:org.open-scap.f14:tst:2016853" version="1" check="all" comment="/etc/audit/audit.rules contains -w /sbin/modprobe -p x -k modules">
                  <ind-def:object object_ref="oval:org.open-scap.f14:obj:2016853"/>
            </ind-def:textfilecontent54_test>
            <ind-def:textfilecontent54_test check_existence="at_least_one_exists" id="oval:org.open-scap.f14:tst:2016854" version="1" check="all" comment="/etc/audit/audit.rules contains -a always,exit -S init_module -S delete_module -k modules">
                  <ind-def:object object_ref="oval:org.open-scap.f14:obj:2016854"/>
            </ind-def:textfilecontent54_test>
            <ind-def:textfilecontent54_test check_existence="at_least_one_exists" id="oval:org.open-scap.f14:tst:20169" version="1" check="all" comment="look in /etc/audit/audit.rules for -e 2">
                  <ind-def:object object_ref="oval:org.open-scap.f14:obj:20169"/>
            </ind-def:textfilecontent54_test>
            <unix-def:runlevel_test check_existence="any_exist" id="oval:org.open-scap.f14:tst:20170" version="1" check="all" comment="Runlevel test">
                  <unix-def:object object_ref="oval:org.open-scap.f14:obj:20170"/>
                  <unix-def:state state_ref="oval:org.open-scap.f14:ste:20171"/>
            </unix-def:runlevel_test>
            <unix-def:runlevel_test check_existence="any_exist" id="oval:org.open-scap.f14:tst:20171" version="1" check="all" comment="Runlevel test">
                  <unix-def:object object_ref="oval:org.open-scap.f14:obj:20171"/>
                  <unix-def:state state_ref="oval:org.open-scap.f14:ste:20171"/>
            </unix-def:runlevel_test>
            <ind-def:textfilecontent54_test check_existence="all_exist" id="oval:org.open-scap.f14:tst:201745" version="1" check="all" comment="Xinetd runlevel test">
                  <ind-def:object object_ref="oval:org.open-scap.f14:obj:201745"/>
                  <ind-def:state state_ref="oval:org.open-scap.f14:ste:201745"/>
            </ind-def:textfilecontent54_test>
            <ind-def:textfilecontent54_test check_existence="all_exist" id="oval:org.open-scap.f14:tst:201774" version="1" check="all" comment="Xinetd runlevel test">
                  <ind-def:object object_ref="oval:org.open-scap.f14:obj:201774"/>
                  <ind-def:state state_ref="oval:org.open-scap.f14:ste:201745"/>
            </ind-def:textfilecontent54_test>
            <ind-def:textfilecontent54_test check_existence="all_exist" id="oval:org.open-scap.f14:tst:201775" version="1" check="all" comment="Xinetd runlevel test">
                  <ind-def:object object_ref="oval:org.open-scap.f14:obj:201775"/>
                  <ind-def:state state_ref="oval:org.open-scap.f14:ste:201745"/>
            </ind-def:textfilecontent54_test>
            <ind-def:textfilecontent54_test check_existence="all_exist" id="oval:org.open-scap.f14:tst:201776" version="1" check="all" comment="Xinetd runlevel test">
                  <ind-def:object object_ref="oval:org.open-scap.f14:obj:201776"/>
                  <ind-def:state state_ref="oval:org.open-scap.f14:ste:201745"/>
            </ind-def:textfilecontent54_test>
            <ind-def:textfilecontent54_test check_existence="none_exist" id="oval:org.open-scap.f14:tst:20178" version="1" check="all" comment="Xinetd services test">
                  <ind-def:object object_ref="oval:org.open-scap.f14:obj:20178"/>
            </ind-def:textfilecontent54_test>
            <ind-def:textfilecontent54_test check_existence="all_exist" id="oval:org.open-scap.f14:tst:201825" version="1" check="all" comment="Xinetd runlevel test">
                  <ind-def:object object_ref="oval:org.open-scap.f14:obj:201825"/>
                  <ind-def:state state_ref="oval:org.open-scap.f14:ste:201745"/>
            </ind-def:textfilecontent54_test>
            <lin-def:rpminfo_test check_existence="none_exist" id="oval:org.open-scap.f14:tst:20179" version="1" check="all" comment="The inetd package should be installed or not as appropriate">
                  <lin-def:object object_ref="oval:org.open-scap.f14:obj:20179"/>
            </lin-def:rpminfo_test>
            <lin-def:rpminfo_test check_existence="none_exist" id="oval:org.open-scap.f14:tst:20172" version="1" check="all" comment="The inetd package should be installed or not as appropriate">
                  <lin-def:object object_ref="oval:org.open-scap.f14:obj:20172"/>
            </lin-def:rpminfo_test>
            <lin-def:rpminfo_test check_existence="none_exist" id="oval:org.open-scap.f14:tst:20173" version="1" check="all" comment="The xinetd package should be installed or not as appropriate">
                  <lin-def:object object_ref="oval:org.open-scap.f14:obj:20173"/>
            </lin-def:rpminfo_test>
            <lin-def:rpminfo_test check_existence="none_exist" id="oval:org.open-scap.f14:tst:20174" version="1" check="all" comment="The telnet-server package should be installed or not as appropriate">
                  <lin-def:object object_ref="oval:org.open-scap.f14:obj:20174"/>
            </lin-def:rpminfo_test>
            <lin-def:rpminfo_test check_existence="none_exist" id="oval:org.open-scap.f14:tst:20175" version="1" check="all" comment="The telnet-server package should be installed or not as appropriate">
                  <lin-def:object object_ref="oval:org.open-scap.f14:obj:20175"/>
            </lin-def:rpminfo_test>
            <lin-def:rpminfo_test check_existence="none_exist" id="oval:org.open-scap.f14:tst:20176" version="1" check="all" comment="The telnet-server package should be installed or not as appropriate">
                  <lin-def:object object_ref="oval:org.open-scap.f14:obj:20176"/>
            </lin-def:rpminfo_test>
            <lin-def:rpminfo_test check_existence="none_exist" id="oval:org.open-scap.f14:tst:20177" version="1" check="all" comment="The rsh-server package should be installed or not as appropriate">
                  <lin-def:object object_ref="oval:org.open-scap.f14:obj:20177"/>
            </lin-def:rpminfo_test>
            <lin-def:rpminfo_test check_existence="none_exist" id="oval:org.open-scap.f14:tst:20180" version="1" check="all" comment="The ypserv package should be installed or not as appropriate">
                  <lin-def:object object_ref="oval:org.open-scap.f14:obj:20180"/>
            </lin-def:rpminfo_test>
            <unix-def:runlevel_test check_existence="any_exist" id="oval:org.open-scap.f14:tst:20181" version="1" check="all" comment="Runlevel test">
                  <unix-def:object object_ref="oval:org.open-scap.f14:obj:20181"/>
                  <unix-def:state state_ref="oval:org.open-scap.f14:ste:20171"/>
            </unix-def:runlevel_test>
            <lin-def:rpminfo_test check_existence="none_exist" id="oval:org.open-scap.f14:tst:20182" version="1" check="all" comment="The tftp-server package should be installed or not as appropriate">
                  <lin-def:object object_ref="oval:org.open-scap.f14:obj:20182"/>
            </lin-def:rpminfo_test>
            <unix-def:runlevel_test check_existence="any_exist" id="oval:org.open-scap.f14:tst:20183" version="1" check="all" comment="Runlevel test">
                  <unix-def:object object_ref="oval:org.open-scap.f14:obj:20183"/>
                  <unix-def:state state_ref="oval:org.open-scap.f14:ste:20171"/>
            </unix-def:runlevel_test>
            <unix-def:runlevel_test check_existence="any_exist" id="oval:org.open-scap.f14:tst:20184" version="1" check="all" comment="Runlevel test">
                  <unix-def:object object_ref="oval:org.open-scap.f14:obj:20184"/>
                  <unix-def:state state_ref="oval:org.open-scap.f14:ste:20171"/>
            </unix-def:runlevel_test>
            <unix-def:runlevel_test check_existence="any_exist" id="oval:org.open-scap.f14:tst:20185" version="1" check="all" comment="Runlevel test">
                  <unix-def:object object_ref="oval:org.open-scap.f14:obj:20185"/>
                  <unix-def:state state_ref="oval:org.open-scap.f14:ste:20171"/>
            </unix-def:runlevel_test>
            <unix-def:runlevel_test check_existence="any_exist" id="oval:org.open-scap.f14:tst:20186" version="1" check="all" comment="Runlevel test">
                  <unix-def:object object_ref="oval:org.open-scap.f14:obj:20186"/>
                  <unix-def:state state_ref="oval:org.open-scap.f14:ste:20171"/>
            </unix-def:runlevel_test>
            <unix-def:runlevel_test check_existence="any_exist" id="oval:org.open-scap.f14:tst:20187" version="1" check="all" comment="Runlevel test">
                  <unix-def:object object_ref="oval:org.open-scap.f14:obj:20187"/>
                  <unix-def:state state_ref="oval:org.open-scap.f14:ste:20171"/>
            </unix-def:runlevel_test>
            <unix-def:runlevel_test check_existence="any_exist" id="oval:org.open-scap.f14:tst:20188" version="1" check="all" comment="Runlevel test">
                  <unix-def:object object_ref="oval:org.open-scap.f14:obj:20188"/>
                  <unix-def:state state_ref="oval:org.open-scap.f14:ste:20171"/>
            </unix-def:runlevel_test>
            <unix-def:runlevel_test check_existence="any_exist" id="oval:org.open-scap.f14:tst:20189" version="1" check="all" comment="Runlevel test">
                  <unix-def:object object_ref="oval:org.open-scap.f14:obj:20189"/>
                  <unix-def:state state_ref="oval:org.open-scap.f14:ste:20171"/>
            </unix-def:runlevel_test>
            <unix-def:runlevel_test check_existence="any_exist" id="oval:org.open-scap.f14:tst:20190" version="1" check="all" comment="Runlevel test">
                  <unix-def:object object_ref="oval:org.open-scap.f14:obj:20190"/>
                  <unix-def:state state_ref="oval:org.open-scap.f14:ste:20171"/>
            </unix-def:runlevel_test>
            <unix-def:runlevel_test check_existence="any_exist" id="oval:org.open-scap.f14:tst:20191" version="1" check="all" comment="Runlevel test">
                  <unix-def:object object_ref="oval:org.open-scap.f14:obj:20191"/>
                  <unix-def:state state_ref="oval:org.open-scap.f14:ste:20171"/>
            </unix-def:runlevel_test>
            <unix-def:file_test check_existence="none_exist" id="oval:org.open-scap.f14:tst:20192" version="1" check="all" comment="check for ifcfg-interface in /etc/sysconfig/network-scripts">
                  <unix-def:object object_ref="oval:org.open-scap.f14:obj:20192"/>
            </unix-def:file_test>
            <ind-def:textfilecontent54_test check_existence="at_least_one_exists" id="oval:org.open-scap.f14:tst:20193" version="1" check="all" comment="check NOZEROCONF=yes in /etc/sysconfig/network">
                  <ind-def:object object_ref="oval:org.open-scap.f14:obj:20193"/>
            </ind-def:textfilecontent54_test>
            <unix-def:runlevel_test check_existence="any_exist" id="oval:org.open-scap.f14:tst:20194" version="1" check="all" comment="Runlevel test">
                  <unix-def:object object_ref="oval:org.open-scap.f14:obj:20194"/>
                  <unix-def:state state_ref="oval:org.open-scap.f14:ste:20171"/>
            </unix-def:runlevel_test>
            <unix-def:runlevel_test check_existence="any_exist" id="oval:org.open-scap.f14:tst:20195" version="1" check="all" comment="Runlevel test">
                  <unix-def:object object_ref="oval:org.open-scap.f14:obj:20195"/>
                  <unix-def:state state_ref="oval:org.open-scap.f14:ste:20171"/>
            </unix-def:runlevel_test>
            <unix-def:runlevel_test check_existence="any_exist" id="oval:org.open-scap.f14:tst:20196" version="1" check="all" comment="Runlevel test">
                  <unix-def:object object_ref="oval:org.open-scap.f14:obj:20196"/>
                  <unix-def:state state_ref="oval:org.open-scap.f14:ste:20171"/>
            </unix-def:runlevel_test>
            <unix-def:runlevel_test check_existence="any_exist" id="oval:org.open-scap.f14:tst:20197" version="1" check="all" comment="Runlevel test">
                  <unix-def:object object_ref="oval:org.open-scap.f14:obj:20197"/>
                  <unix-def:state state_ref="oval:org.open-scap.f14:ste:20171"/>
            </unix-def:runlevel_test>
            <unix-def:runlevel_test check_existence="any_exist" id="oval:org.open-scap.f14:tst:20198" version="1" check="all" comment="Runlevel test">
                  <unix-def:object object_ref="oval:org.open-scap.f14:obj:20198"/>
                  <unix-def:state state_ref="oval:org.open-scap.f14:ste:20171"/>
            </unix-def:runlevel_test>
            <unix-def:runlevel_test check_existence="any_exist" id="oval:org.open-scap.f14:tst:20199" version="1" check="all" comment="Runlevel test">
                  <unix-def:object object_ref="oval:org.open-scap.f14:obj:20199"/>
                  <unix-def:state state_ref="oval:org.open-scap.f14:ste:20171"/>
            </unix-def:runlevel_test>
            <unix-def:runlevel_test check_existence="any_exist" id="oval:org.open-scap.f14:tst:20200" version="1" check="all" comment="Runlevel test">
                  <unix-def:object object_ref="oval:org.open-scap.f14:obj:20200"/>
                  <unix-def:state state_ref="oval:org.open-scap.f14:ste:20171"/>
            </unix-def:runlevel_test>
            <unix-def:runlevel_test check_existence="any_exist" id="oval:org.open-scap.f14:tst:20201" version="1" check="all" comment="Runlevel test">
                  <unix-def:object object_ref="oval:org.open-scap.f14:obj:20201"/>
                  <unix-def:state state_ref="oval:org.open-scap.f14:ste:20171"/>
            </unix-def:runlevel_test>
            <ind-def:textfilecontent54_test check_existence="at_least_one_exists" id="oval:org.open-scap.f14:tst:2020151" version="1" check="all" comment="net-pf-31 is off in /etc/modprobe.conf">
                  <ind-def:object object_ref="oval:org.open-scap.f14:obj:2020151"/>
            </ind-def:textfilecontent54_test>
            <ind-def:textfilecontent54_test check_existence="at_least_one_exists" id="oval:org.open-scap.f14:tst:2020152" version="1" check="all" comment="bluetooth is off in /etc/modprobe.conf">
                  <ind-def:object object_ref="oval:org.open-scap.f14:obj:2020152"/>
            </ind-def:textfilecontent54_test>
            <unix-def:runlevel_test check_existence="any_exist" id="oval:org.open-scap.f14:tst:20202" version="1" check="all" comment="Runlevel test">
                  <unix-def:object object_ref="oval:org.open-scap.f14:obj:20202"/>
                  <unix-def:state state_ref="oval:org.open-scap.f14:ste:20171"/>
            </unix-def:runlevel_test>
            <unix-def:runlevel_test check_existence="any_exist" id="oval:org.open-scap.f14:tst:20203" version="1" check="all" comment="Runlevel test">
                  <unix-def:object object_ref="oval:org.open-scap.f14:obj:20203"/>
                  <unix-def:state state_ref="oval:org.open-scap.f14:ste:20171"/>
            </unix-def:runlevel_test>
            <unix-def:runlevel_test check_existence="any_exist" id="oval:org.open-scap.f14:tst:20204" version="1" check="all" comment="Runlevel test">
                  <unix-def:object object_ref="oval:org.open-scap.f14:obj:20204"/>
                  <unix-def:state state_ref="oval:org.open-scap.f14:ste:20171"/>
            </unix-def:runlevel_test>
            <unix-def:runlevel_test check_existence="at_least_one_exists" id="oval:org.open-scap.f14:tst:20205" version="1" check="at least one" comment="Runlevel test">
                  <unix-def:object object_ref="oval:org.open-scap.f14:obj:20205"/>
                  <unix-def:state state_ref="oval:org.open-scap.f14:ste:20172"/>
            </unix-def:runlevel_test>
            <unix-def:runlevel_test check_existence="any_exist" id="oval:org.open-scap.f14:tst:202052" version="1" check="all" comment="Runlevel test">
                  <unix-def:object object_ref="oval:org.open-scap.f14:obj:202052"/>
                  <unix-def:state state_ref="oval:org.open-scap.f14:ste:20171"/>
            </unix-def:runlevel_test>
            <lin-def:rpminfo_test check_existence="none_exist" id="oval:org.open-scap.f14:tst:202053" version="1" check="all" comment="Is the at package installed?">
                  <lin-def:object object_ref="oval:org.open-scap.f14:obj:202053"/>
            </lin-def:rpminfo_test>
            <unix-def:runlevel_test check_existence="any_exist" id="oval:org.open-scap.f14:tst:20206" version="1" check="all" comment="Runlevel test">
                  <unix-def:object object_ref="oval:org.open-scap.f14:obj:20206"/>
                  <unix-def:state state_ref="oval:org.open-scap.f14:ste:20171"/>
            </unix-def:runlevel_test>
            <lin-def:rpminfo_test check_existence="none_exist" id="oval:org.open-scap.f14:tst:20207" version="1" check="all" comment="The anacron package should be installed or not as appropriate">
                  <lin-def:object object_ref="oval:org.open-scap.f14:obj:20207"/>
            </lin-def:rpminfo_test>
            <unix-def:file_test check_existence="all_exist" id="oval:org.open-scap.f14:tst:20208" version="1" check="all" comment="Testing group ownership">
                  <unix-def:object object_ref="oval:org.open-scap.f14:obj:20208"/>
                  <unix-def:state state_ref="oval:org.open-scap.f14:ste:20208"/>
            </unix-def:file_test>
            <unix-def:file_test check_existence="all_exist" id="oval:org.open-scap.f14:tst:20209" version="1" check="all" comment="Testing user ownership">
                  <unix-def:object object_ref="oval:org.open-scap.f14:obj:20209"/>
                  <unix-def:state state_ref="oval:org.open-scap.f14:ste:20209"/>
            </unix-def:file_test>
            <unix-def:file_test check_existence="all_exist" id="oval:org.open-scap.f14:tst:20210" version="1" check="all" comment="Testing file permissions">
                  <unix-def:object object_ref="oval:org.open-scap.f14:obj:20210"/>
                  <unix-def:state state_ref="oval:org.open-scap.f14:ste:20210"/>
            </unix-def:file_test>
            <unix-def:file_test check_existence="all_exist" id="oval:org.open-scap.f14:tst:20211" version="1" check="all" comment="Testing group ownership">
                  <unix-def:object object_ref="oval:org.open-scap.f14:obj:20211"/>
                  <unix-def:state state_ref="oval:org.open-scap.f14:ste:20211"/>
            </unix-def:file_test>
            <unix-def:file_test check_existence="all_exist" id="oval:org.open-scap.f14:tst:20212" version="1" check="all" comment="Testing user ownership">
                  <unix-def:object object_ref="oval:org.open-scap.f14:obj:20212"/>
                  <unix-def:state state_ref="oval:org.open-scap.f14:ste:20212"/>
            </unix-def:file_test>
            <unix-def:file_test check_existence="all_exist" id="oval:org.open-scap.f14:tst:20213" version="1" check="all" comment="Testing file permissions">
                  <unix-def:object object_ref="oval:org.open-scap.f14:obj:20213"/>
                  <unix-def:state state_ref="oval:org.open-scap.f14:ste:20213"/>
            </unix-def:file_test>
            <unix-def:file_test check_existence="all_exist" id="oval:org.open-scap.f14:tst:20214" version="1" check="all" comment="Testing group ownership">
                  <unix-def:object object_ref="oval:org.open-scap.f14:obj:20214"/>
                  <unix-def:state state_ref="oval:org.open-scap.f14:ste:20214"/>
            </unix-def:file_test>
            <unix-def:file_test check_existence="all_exist" id="oval:org.open-scap.f14:tst:20215" version="1" check="all" comment="Testing group ownership">
                  <unix-def:object object_ref="oval:org.open-scap.f14:obj:20215"/>
                  <unix-def:state state_ref="oval:org.open-scap.f14:ste:20215"/>
            </unix-def:file_test>
            <unix-def:file_test check_existence="all_exist" id="oval:org.open-scap.f14:tst:20216" version="1" check="all" comment="Testing group ownership">
                  <unix-def:object object_ref="oval:org.open-scap.f14:obj:20216"/>
                  <unix-def:state state_ref="oval:org.open-scap.f14:ste:20216"/>
            </unix-def:file_test>
            <unix-def:file_test check_existence="all_exist" id="oval:org.open-scap.f14:tst:20217" version="1" check="all" comment="Testing group ownership">
                  <unix-def:object object_ref="oval:org.open-scap.f14:obj:20217"/>
                  <unix-def:state state_ref="oval:org.open-scap.f14:ste:20217"/>
            </unix-def:file_test>
            <unix-def:file_test check_existence="all_exist" id="oval:org.open-scap.f14:tst:20218" version="1" check="all" comment="Testing group ownership">
                  <unix-def:object object_ref="oval:org.open-scap.f14:obj:20218"/>
                  <unix-def:state state_ref="oval:org.open-scap.f14:ste:20218"/>
            </unix-def:file_test>
            <unix-def:file_test check_existence="all_exist" id="oval:org.open-scap.f14:tst:20219" version="1" check="all" comment="Testing user ownership">
                  <unix-def:object object_ref="oval:org.open-scap.f14:obj:20219"/>
                  <unix-def:state state_ref="oval:org.open-scap.f14:ste:20219"/>
            </unix-def:file_test>
            <unix-def:file_test check_existence="all_exist" id="oval:org.open-scap.f14:tst:20220" version="1" check="all" comment="Testing user ownership">
                  <unix-def:object object_ref="oval:org.open-scap.f14:obj:20220"/>
                  <unix-def:state state_ref="oval:org.open-scap.f14:ste:20220"/>
            </unix-def:file_test>
            <unix-def:file_test check_existence="all_exist" id="oval:org.open-scap.f14:tst:20221" version="1" check="all" comment="Testing user ownership">
                  <unix-def:object object_ref="oval:org.open-scap.f14:obj:20221"/>
                  <unix-def:state state_ref="oval:org.open-scap.f14:ste:20221"/>
            </unix-def:file_test>
            <unix-def:file_test check_existence="all_exist" id="oval:org.open-scap.f14:tst:20222" version="1" check="all" comment="Testing user ownership">
                  <unix-def:object object_ref="oval:org.open-scap.f14:obj:20222"/>
                  <unix-def:state state_ref="oval:org.open-scap.f14:ste:20222"/>
            </unix-def:file_test>
            <unix-def:file_test check_existence="all_exist" id="oval:org.open-scap.f14:tst:20223" version="1" check="all" comment="Testing user ownership">
                  <unix-def:object object_ref="oval:org.open-scap.f14:obj:20223"/>
                  <unix-def:state state_ref="oval:org.open-scap.f14:ste:20223"/>
            </unix-def:file_test>
            <unix-def:file_test check_existence="all_exist" id="oval:org.open-scap.f14:tst:20224" version="1" check="all" comment="Testing file permissions">
                  <unix-def:object object_ref="oval:org.open-scap.f14:obj:20224"/>
                  <unix-def:state state_ref="oval:org.open-scap.f14:ste:20224"/>
            </unix-def:file_test>
            <unix-def:file_test check_existence="all_exist" id="oval:org.open-scap.f14:tst:20225" version="1" check="all" comment="Testing file permissions">
                  <unix-def:object object_ref="oval:org.open-scap.f14:obj:20225"/>
                  <unix-def:state state_ref="oval:org.open-scap.f14:ste:20225"/>
            </unix-def:file_test>
            <unix-def:file_test check_existence="all_exist" id="oval:org.open-scap.f14:tst:20226" version="1" check="all" comment="Testing file permissions">
                  <unix-def:object object_ref="oval:org.open-scap.f14:obj:20226"/>
                  <unix-def:state state_ref="oval:org.open-scap.f14:ste:20226"/>
            </unix-def:file_test>
            <unix-def:file_test check_existence="all_exist" id="oval:org.open-scap.f14:tst:20227" version="1" check="all" comment="Testing file permissions">
                  <unix-def:object object_ref="oval:org.open-scap.f14:obj:20227"/>
                  <unix-def:state state_ref="oval:org.open-scap.f14:ste:20227"/>
            </unix-def:file_test>
            <unix-def:file_test check_existence="all_exist" id="oval:org.open-scap.f14:tst:20228" version="1" check="all" comment="Testing file permissions">
                  <unix-def:object object_ref="oval:org.open-scap.f14:obj:20228"/>
                  <unix-def:state state_ref="oval:org.open-scap.f14:ste:20228"/>
            </unix-def:file_test>
            <unix-def:file_test check_existence="all_exist" id="oval:org.open-scap.f14:tst:20229" version="1" check="all" comment="Testing group ownership">
                  <unix-def:object object_ref="oval:org.open-scap.f14:obj:20229"/>
                  <unix-def:state state_ref="oval:org.open-scap.f14:ste:20229"/>
            </unix-def:file_test>
            <unix-def:file_test check_existence="all_exist" id="oval:org.open-scap.f14:tst:20230" version="1" check="all" comment="Testing user ownership">
                  <unix-def:object object_ref="oval:org.open-scap.f14:obj:20229"/>
                  <unix-def:state state_ref="oval:org.open-scap.f14:ste:20230"/>
            </unix-def:file_test>
            <unix-def:file_test check_existence="all_exist" id="oval:org.open-scap.f14:tst:20231" version="1" check="all" comment="Testing file permissions">
                  <unix-def:object object_ref="oval:org.open-scap.f14:obj:20229"/>
                  <unix-def:state state_ref="oval:org.open-scap.f14:ste:20231"/>
            </unix-def:file_test>
            <unix-def:file_test check_existence="none_exist" id="oval:org.open-scap.f14:tst:20232" version="1" check="all" comment="Existence check of /etc/cron.deny">
                  <unix-def:object object_ref="oval:org.open-scap.f14:obj:20232"/>
            </unix-def:file_test>
            <unix-def:file_test check_existence="none_exist" id="oval:org.open-scap.f14:tst:20233" version="1" check="all" comment="Existence check of /etc/at.deny">
                  <unix-def:object object_ref="oval:org.open-scap.f14:obj:20233"/>
            </unix-def:file_test>
            <unix-def:runlevel_test check_existence="any_exist" id="oval:org.open-scap.f14:tst:20234" version="1" check="all" comment="Runlevel test">
                  <unix-def:object object_ref="oval:org.open-scap.f14:obj:20234"/>
                  <unix-def:state state_ref="oval:org.open-scap.f14:ste:20171"/>
            </unix-def:runlevel_test>
            <lin-def:rpminfo_test check_existence="none_exist" id="oval:org.open-scap.f14:tst:20235" version="1" check="all" comment="The openssh-server package should be installed or not as appropriate">
                  <lin-def:object object_ref="oval:org.open-scap.f14:obj:20235"/>
            </lin-def:rpminfo_test>
            <ind-def:textfilecontent54_test check_existence="none_exist" id="oval:org.open-scap.f14:tst:20236" version="1" check="all" comment="Inbound connections to the ssh port should be denied">
                  <ind-def:object object_ref="oval:org.open-scap.f14:obj:20236"/>
            </ind-def:textfilecontent54_test>
            <ind-def:textfilecontent54_test check_existence="none_exist" id="oval:org.open-scap.f14:tst:20237" version="1" check="all" comment="Inbound connections to the ssh port should be denied">
                  <ind-def:object object_ref="oval:org.open-scap.f14:obj:20237"/>
            </ind-def:textfilecontent54_test>
            <ind-def:textfilecontent54_test check_existence="all_exist" id="oval:org.open-scap.f14:tst:20238" version="1" check="all" comment="Tests the value of the Protocol[\s]&lt;:nocomment:&gt;1 setting in the /etc/ssh/sshd_config file">
                  <ind-def:object object_ref="oval:org.open-scap.f14:obj:20238"/>
            </ind-def:textfilecontent54_test>
            <ind-def:textfilecontent54_test check_existence="all_exist" id="oval:org.open-scap.f14:tst:20239" version="1" check="all" comment="Tests the value of the ClientAliveInterval setting in the /etc/ssh/sshd_config file">
                  <ind-def:object object_ref="oval:org.open-scap.f14:obj:20239"/>
                  <ind-def:state state_ref="oval:org.open-scap.f14:ste:20239"/>
            </ind-def:textfilecontent54_test>
            <ind-def:textfilecontent54_test check_existence="all_exist" id="oval:org.open-scap.f14:tst:20240" version="1" check="all" comment="Tests the value of the ClientAliveCountMax setting in the /etc/ssh/sshd_config file">
                  <ind-def:object object_ref="oval:org.open-scap.f14:obj:20240"/>
                  <ind-def:state state_ref="oval:org.open-scap.f14:ste:20240"/>
            </ind-def:textfilecontent54_test>
            <ind-def:textfilecontent54_test check_existence="all_exist" id="oval:org.open-scap.f14:tst:20241" version="1" check="all" comment="Tests the value of the IgnoreRhosts[\s]*(&lt;:nocomment:&gt;*) setting in the /etc/ssh/sshd_config file">
                  <ind-def:object object_ref="oval:org.open-scap.f14:obj:20241"/>
            </ind-def:textfilecontent54_test>
            <ind-def:textfilecontent54_test check_existence="all_exist" id="oval:org.open-scap.f14:tst:20242" version="1" check="all" comment="Tests the value of the HostbasedAuthentication[\s]*(&lt;:nocomment:&gt;*) setting in the /etc/ssh/sshd_config file">
                  <ind-def:object object_ref="oval:org.open-scap.f14:obj:20242"/>
            </ind-def:textfilecontent54_test>
            <ind-def:textfilecontent54_test check_existence="all_exist" id="oval:org.open-scap.f14:tst:20243" version="1" check="all" comment="Tests the value of the PermitRootLogin[\s]*(&lt;:nocomment:&gt;*) setting in the /etc/ssh/sshd_config file">
                  <ind-def:object object_ref="oval:org.open-scap.f14:obj:20243"/>
            </ind-def:textfilecontent54_test>
            <ind-def:textfilecontent54_test check_existence="all_exist" id="oval:org.open-scap.f14:tst:20244" version="1" check="all" comment="Tests the value of the PermitEmptyPasswords[\s]*(&lt;:nocomment:&gt;*) setting in the /etc/ssh/sshd_config file">
                  <ind-def:object object_ref="oval:org.open-scap.f14:obj:20244"/>
            </ind-def:textfilecontent54_test>
            <ind-def:textfilecontent54_test check_existence="all_exist" id="oval:org.open-scap.f14:tst:20245" version="1" check="all" comment="Tests the value of the Banner[\s]+/etc/issue setting in the /etc/ssh/sshd_config file">
                  <ind-def:object object_ref="oval:org.open-scap.f14:obj:20245"/>
            </ind-def:textfilecontent54_test>
            <ind-def:textfilecontent54_test check_existence="all_exist" id="oval:org.open-scap.f14:tst:202455" version="1" check="all" comment="Check value of PermitUserEnvironment in /etc/ssh/sshd_config">
                  <ind-def:object object_ref="oval:org.open-scap.f14:obj:202455"/>
            </ind-def:textfilecontent54_test>
            <ind-def:textfilecontent54_test check_existence="all_exist" id="oval:org.open-scap.f14:tst:202456" version="1" check="all" comment="Check value of Ciphers in /etc/ssh/sshd_config">
                  <ind-def:object object_ref="oval:org.open-scap.f14:obj:202456"/>
                  <ind-def:state state_ref="oval:org.open-scap.f14:ste:202456"/>
            </ind-def:textfilecontent54_test>
            <ind-def:textfilecontent54_test check_existence="all_exist" id="oval:org.open-scap.f14:tst:20246" version="1" check="all" comment="Tests the value of the id:([^:]*):initdefault: expression in the /etc/inittab file">
                  <ind-def:object object_ref="oval:org.open-scap.f14:obj:20246"/>
                  <ind-def:state state_ref="oval:org.open-scap.f14:ste:87"/>
            </ind-def:textfilecontent54_test>
            <ind-def:textfilecontent54_test check_existence="all_exist" id="oval:org.open-scap.f14:tst:20248" version="1" check="all" comment="Check for existence of line exec X :0 -nolisten tcp $@ in file /etc/X11/xinit/xserverrc">
                  <ind-def:object object_ref="oval:org.open-scap.f14:obj:20248"/>
            </ind-def:textfilecontent54_test>
            <ind-def:textfilecontent54_test check_existence="all_exist" id="oval:org.open-scap.f14:tst:20249" version="1" check="all" comment="Tests the value of the InfoMsgFile=/etc/issue expression in the /etc/gdm/custom.conf file">
                  <ind-def:object object_ref="oval:org.open-scap.f14:obj:20249"/>
            </ind-def:textfilecontent54_test>
            <unix-def:runlevel_test check_existence="none_exist" id="oval:org.open-scap.f14:tst:20250" version="1" check="all" comment="Runlevel test">
                  <unix-def:object object_ref="oval:org.open-scap.f14:obj:20250"/>
            </unix-def:runlevel_test>
            <ind-def:unknown_test id="oval:org.open-scap.f14:tst:20251" version="1" check="all" comment="Test implementation is unknown, unavailable, or impossible"/>
            <ind-def:unknown_test id="oval:org.open-scap.f14:tst:20252" version="1" check="all" comment="Test implementation is unknown, unavailable, or impossible"/>
            <ind-def:textfilecontent54_test check_existence="all_exist" id="oval:org.open-scap.f14:tst:20253" version="1" check="all" comment="Tests the value of the check-response-ttl[\s]*=[\s]*([^#]*) expression in the /etc/avahi/avahi-daemon.conf file">
                  <ind-def:object object_ref="oval:org.open-scap.f14:obj:20253"/>
                  <ind-def:state state_ref="oval:org.open-scap.f14:ste:20253"/>
            </ind-def:textfilecontent54_test>
            <ind-def:textfilecontent54_test check_existence="all_exist" id="oval:org.open-scap.f14:tst:20254" version="1" check="all" comment="Tests the value of the disallow-other-stacks[\s]*=[\s]*([^#]*) expression in the /etc/avahi/avahi-daemon.conf file">
                  <ind-def:object object_ref="oval:org.open-scap.f14:obj:20254"/>
                  <ind-def:state state_ref="oval:org.open-scap.f14:ste:20254"/>
            </ind-def:textfilecontent54_test>
            <ind-def:textfilecontent54_test check_existence="all_exist" id="oval:org.open-scap.f14:tst:20255" version="1" check="all" comment="Tests the value of the disable-publishing[\s]*=[\s]*([^#]*) expression in the /etc/avahi/avahi-daemon.conf file">
                  <ind-def:object object_ref="oval:org.open-scap.f14:obj:20255"/>
                  <ind-def:state state_ref="oval:org.open-scap.f14:ste:20255"/>
            </ind-def:textfilecontent54_test>
            <ind-def:textfilecontent54_test check_existence="all_exist" id="oval:org.open-scap.f14:tst:20256" version="1" check="all" comment="Tests the value of the disable-user-service-publishing[\s]*=[\s]*([^#]*) expression in the /etc/avahi/avahi-daemon.conf file">
                  <ind-def:object object_ref="oval:org.open-scap.f14:obj:20256"/>
                  <ind-def:state state_ref="oval:org.open-scap.f14:ste:20256"/>
            </ind-def:textfilecontent54_test>
            <ind-def:textfilecontent54_test check_existence="all_exist" id="oval:org.open-scap.f14:tst:20257" version="1" check="all" comment="Tests the value of the publish-hinfo[\s]*=[\s]*([^#]*) expression in the /etc/avahi/avahi-daemon.conf file">
                  <ind-def:object object_ref="oval:org.open-scap.f14:obj:20257"/>
                  <ind-def:state state_ref="oval:org.open-scap.f14:ste:20257"/>
            </ind-def:textfilecontent54_test>
            <ind-def:textfilecontent54_test check_existence="all_exist" id="oval:org.open-scap.f14:tst:20258" version="1" check="all" comment="Tests the value of the publish-workstation[\s]*=[\s]*([^#]*) expression in the /etc/avahi/avahi-daemon.conf file">
                  <ind-def:object object_ref="oval:org.open-scap.f14:obj:20258"/>
                  <ind-def:state state_ref="oval:org.open-scap.f14:ste:20258"/>
            </ind-def:textfilecontent54_test>
            <ind-def:textfilecontent54_test check_existence="all_exist" id="oval:org.open-scap.f14:tst:20259" version="1" check="all" comment="Tests the value of the publish-addresses[\s]*=[\s]*([^#]*) expression in the /etc/avahi/avahi-daemon.conf file">
                  <ind-def:object object_ref="oval:org.open-scap.f14:obj:20259"/>
                  <ind-def:state state_ref="oval:org.open-scap.f14:ste:20259"/>
            </ind-def:textfilecontent54_test>
            <ind-def:textfilecontent54_test check_existence="all_exist" id="oval:org.open-scap.f14:tst:20260" version="1" check="all" comment="Tests the value of the publish-domain[\s]*=[\s]*([^#]*) expression in the /etc/avahi/avahi-daemon.conf file">
                  <ind-def:object object_ref="oval:org.open-scap.f14:obj:20260"/>
                  <ind-def:state state_ref="oval:org.open-scap.f14:ste:20260"/>
            </ind-def:textfilecontent54_test>
            <unix-def:runlevel_test check_existence="none_exist" id="oval:org.open-scap.f14:tst:20261" version="1" check="all" comment="Runlevel test">
                  <unix-def:object object_ref="oval:org.open-scap.f14:obj:20261"/>
            </unix-def:runlevel_test>
            <ind-def:textfilecontent54_test check_existence="all_exist" id="oval:org.open-scap.f14:tst:20264" version="1" check="all" comment="Tests the value of the Browsing[\s]+([^#]*) expression in the /etc/cups/cupsd.conf file">
                  <ind-def:object object_ref="oval:org.open-scap.f14:obj:20264"/>
                  <ind-def:state state_ref="oval:org.open-scap.f14:ste:20264"/>
            </ind-def:textfilecontent54_test>
            <ind-def:textfilecontent54_test check_existence="none_exist" id="oval:org.open-scap.f14:tst:20265" version="1" check="all" comment="Tests the value of the BrowseAllow[\s]+none setting in the /etc/cups/cupsd.conf file">
                  <ind-def:object object_ref="oval:org.open-scap.f14:obj:20265"/>
            </ind-def:textfilecontent54_test>
            <unix-def:runlevel_test check_existence="none_exist" id="oval:org.open-scap.f14:tst:20266" version="1" check="all" comment="Runlevel test">
                  <unix-def:object object_ref="oval:org.open-scap.f14:obj:20266"/>
            </unix-def:runlevel_test>
            <ind-def:textfilecontent54_test check_existence="none_exist" id="oval:org.open-scap.f14:tst:20267" version="1" check="all" comment="Tests the value of the &lt;:begin:&gt;BOOTPROTO[\s]*=[\s]*(&lt;:nocomment:&gt;*) setting in the /etc/sysconfig/network-scripts/ifcfg-eth.* file">
                  <ind-def:object object_ref="oval:org.open-scap.f14:obj:20267"/>
            </ind-def:textfilecontent54_test>
            <unix-def:runlevel_test check_existence="none_exist" id="oval:org.open-scap.f14:tst:20268" version="1" check="all" comment="Runlevel test">
                  <unix-def:object object_ref="oval:org.open-scap.f14:obj:20268"/>
            </unix-def:runlevel_test>
            <lin-def:rpminfo_test check_existence="none_exist" id="oval:org.open-scap.f14:tst:20269" version="1" check="all" comment="The dhcp package should be installed or not as appropriate">
                  <lin-def:object object_ref="oval:org.open-scap.f14:obj:20269"/>
            </lin-def:rpminfo_test>
            <ind-def:textfilecontent54_test check_existence="none_exist" id="oval:org.open-scap.f14:tst:20270" version="1" check="all" comment="Tests the value of the ddns-update-style[\s]+none; setting in the /etc/dhcpd.conf file">
                  <ind-def:object object_ref="oval:org.open-scap.f14:obj:20270"/>
            </ind-def:textfilecontent54_test>
            <ind-def:textfilecontent54_test check_existence="all_exist" id="oval:org.open-scap.f14:tst:20271" version="1" check="all" comment="Tests the value of the deny[\s]+declines; setting in the /etc/dhcpd.conf file">
                  <ind-def:object object_ref="oval:org.open-scap.f14:obj:20271"/>
            </ind-def:textfilecontent54_test>
            <ind-def:textfilecontent54_test check_existence="none_exist" id="oval:org.open-scap.f14:tst:20272" version="1" check="all" comment="Tests the value of the deny[\s]+bootp; setting in the /etc/dhcpd.conf file">
                  <ind-def:object object_ref="oval:org.open-scap.f14:obj:20272"/>
            </ind-def:textfilecontent54_test>
            <ind-def:textfilecontent54_test check_existence="all_exist" id="oval:org.open-scap.f14:tst:20280" version="1" check="all" comment="Tests the value of the daemon\.\*[\s]+/var/log/daemon\.log setting in the /etc/syslog.conf file">
                  <ind-def:object object_ref="oval:org.open-scap.f14:obj:20280"/>
            </ind-def:textfilecontent54_test>
            <unix-def:runlevel_test check_existence="any_exist" id="oval:org.open-scap.f14:tst:20281" version="1" check="all" comment="Runlevel test">
                  <unix-def:object object_ref="oval:org.open-scap.f14:obj:20281"/>
            </unix-def:runlevel_test>
            <ind-def:textfilecontent54_test check_existence="all_exist" id="oval:org.open-scap.f14:tst:20282" version="1" check="all" comment="Tests the value of the restrict[\s]+default[\s]+ignore setting in the /etc/ntp.conf file">
                  <ind-def:object object_ref="oval:org.open-scap.f14:obj:20282"/>
            </ind-def:textfilecontent54_test>
            <ind-def:textfilecontent54_test check_existence="all_exist" id="oval:org.open-scap.f14:tst:20285" version="1" check="all" comment="Tests the value of the /usr/local/sbin/ntpd -s setting in the /etc/rc.local file">
                  <ind-def:object object_ref="oval:org.open-scap.f14:obj:20285"/>
            </ind-def:textfilecontent54_test>
            <unix-def:runlevel_test check_existence="none_exist" id="oval:org.open-scap.f14:tst:20287" version="1" check="all" comment="Runlevel test">
                  <unix-def:object object_ref="oval:org.open-scap.f14:obj:20287"/>
            </unix-def:runlevel_test>
            <ind-def:textfilecontent54_test check_existence="none_exist" id="oval:org.open-scap.f14:tst:20288" version="1" check="all" comment="Tests the value of the DAEMON[\s]*=[\s]*yes setting in the /etc/sysconfig/sendmail file">
                  <ind-def:object object_ref="oval:org.open-scap.f14:obj:20288"/>
            </ind-def:textfilecontent54_test>
            <ind-def:textfilecontent54_test check_existence="at_least_one_exists" id="oval:org.open-scap.f14:tst:202885" version="1" check="all" comment="Tests the value of the tls_checkpeer[\s]+yes setting in the /etc/ldap.conf file">
                  <ind-def:object object_ref="oval:org.open-scap.f14:obj:202885"/>
            </ind-def:textfilecontent54_test>
            <unix-def:runlevel_test check_existence="none_exist" id="oval:org.open-scap.f14:tst:20289" version="1" check="all" comment="Runlevel test">
                  <unix-def:object object_ref="oval:org.open-scap.f14:obj:20289"/>
            </unix-def:runlevel_test>
            <unix-def:file_test check_existence="all_exist" id="oval:org.open-scap.f14:tst:20290" version="1" check="all" comment="Testing group ownership">
                  <unix-def:object object_ref="oval:org.open-scap.f14:obj:20290"/>
                  <unix-def:state state_ref="oval:org.open-scap.f14:ste:20290"/>
            </unix-def:file_test>
            <unix-def:file_test check_existence="all_exist" id="oval:org.open-scap.f14:tst:20291" version="1" check="all" comment="Testing user ownership">
                  <unix-def:object object_ref="oval:org.open-scap.f14:obj:20291"/>
                  <unix-def:state state_ref="oval:org.open-scap.f14:ste:20291"/>
            </unix-def:file_test>
            <unix-def:runlevel_test check_existence="none_exist" id="oval:org.open-scap.f14:tst:20292" version="1" check="all" comment="Runlevel test">
                  <unix-def:object object_ref="oval:org.open-scap.f14:obj:20292"/>
            </unix-def:runlevel_test>
            <unix-def:runlevel_test check_existence="none_exist" id="oval:org.open-scap.f14:tst:20293" version="1" check="all" comment="Runlevel test">
                  <unix-def:object object_ref="oval:org.open-scap.f14:obj:20293"/>
            </unix-def:runlevel_test>
            <unix-def:runlevel_test check_existence="none_exist" id="oval:org.open-scap.f14:tst:20294" version="1" check="all" comment="Runlevel test">
                  <unix-def:object object_ref="oval:org.open-scap.f14:obj:20294"/>
            </unix-def:runlevel_test>
            <unix-def:runlevel_test check_existence="none_exist" id="oval:org.open-scap.f14:tst:20295" version="1" check="all" comment="Runlevel test">
                  <unix-def:object object_ref="oval:org.open-scap.f14:obj:20295"/>
            </unix-def:runlevel_test>
            <unix-def:runlevel_test check_existence="none_exist" id="oval:org.open-scap.f14:tst:20296" version="1" check="all" comment="Runlevel test">
                  <unix-def:object object_ref="oval:org.open-scap.f14:obj:20296"/>
            </unix-def:runlevel_test>
            <ind-def:textfilecontent54_test check_existence="all_exist" id="oval:org.open-scap.f14:tst:20297" version="1" check="all" comment="Tests the value of the LOCKD_TCPPORT[\s]*=[\s]*[0-9] setting in the /etc/sysconfig/nfs file">
                  <ind-def:object object_ref="oval:org.open-scap.f14:obj:20297"/>
            </ind-def:textfilecontent54_test>
            <ind-def:textfilecontent54_test check_existence="all_exist" id="oval:org.open-scap.f14:tst:20298" version="1" check="all" comment="Tests the value of the STATD_OUTGOING_PORT[\s]*=[\s]*[0-9] setting in the /etc/sysconfig/nfs file">
                  <ind-def:object object_ref="oval:org.open-scap.f14:obj:20298"/>
            </ind-def:textfilecontent54_test>
            <ind-def:textfilecontent54_test check_existence="all_exist" id="oval:org.open-scap.f14:tst:20299" version="1" check="all" comment="Tests the value of the STATD_PORT[\s]*=[\s]*[0-9] setting in the /etc/sysconfig/nfs file">
                  <ind-def:object object_ref="oval:org.open-scap.f14:obj:20299"/>
            </ind-def:textfilecontent54_test>
            <ind-def:textfilecontent54_test check_existence="all_exist" id="oval:org.open-scap.f14:tst:20300" version="1" check="all" comment="Tests the value of the LOCKD_UDPPORT[\s]*=[\s]*[0-9] setting in the /etc/sysconfig/nfs file">
                  <ind-def:object object_ref="oval:org.open-scap.f14:obj:20300"/>
            </ind-def:textfilecontent54_test>
            <ind-def:textfilecontent54_test check_existence="all_exist" id="oval:org.open-scap.f14:tst:20301" version="1" check="all" comment="Tests the value of the MOUNTD_PORT[\s]*=[\s]*[0-9] setting in the /etc/sysconfig/nfs file">
                  <ind-def:object object_ref="oval:org.open-scap.f14:obj:20301"/>
            </ind-def:textfilecontent54_test>
            <ind-def:textfilecontent54_test check_existence="all_exist" id="oval:org.open-scap.f14:tst:20302" version="1" check="all" comment="Tests the value of the RQUOTAD_PORT[\s]*=[\s]*[0-9] setting in the /etc/sysconfig/nfs file">
                  <ind-def:object object_ref="oval:org.open-scap.f14:obj:20302"/>
            </ind-def:textfilecontent54_test>
            <unix-def:runlevel_test check_existence="none_exist" id="oval:org.open-scap.f14:tst:20303" version="1" check="all" comment="Runlevel test">
                  <unix-def:object object_ref="oval:org.open-scap.f14:obj:20303"/>
            </unix-def:runlevel_test>
            <unix-def:runlevel_test check_existence="none_exist" id="oval:org.open-scap.f14:tst:20304" version="1" check="all" comment="Runlevel test">
                  <unix-def:object object_ref="oval:org.open-scap.f14:obj:20304"/>
            </unix-def:runlevel_test>
<!--            <ind-def:textfilecontent54_test check_existence="all_exist" id="oval:org.open-scap.f14:tst:203051" version="1" check="all" comment="if type is nfs[4] in /etc/fstab options should contain nodev">
                  <ind-def:object object_ref="oval:org.open-scap.f14:obj:20016"/>
                  <ind-def:state state_ref="oval:org.open-scap.f14:ste:203051"/>
            </ind-def:textfilecontent54_test> -->
<!--            <ind-def:textfilecontent54_test check_existence="all_exist" id="oval:org.open-scap.f14:tst:203052" version="1" check="all" comment="if type is nfs[4] in /etc/mtab options should contain nodev">
                  <ind-def:object object_ref="oval:org.open-scap.f14:obj:200162"/>
                  <ind-def:state state_ref="oval:org.open-scap.f14:ste:203052"/>
            </ind-def:textfilecontent54_test> -->
            <ind-def:textfilecontent54_test check_existence="none_exist" id="oval:org.open-scap.f14:tst:20308" version="1" check="all" comment="Tests the value of the no_root_squash setting in the /etc/exports file">
                  <ind-def:object object_ref="oval:org.open-scap.f14:obj:20308"/>
            </ind-def:textfilecontent54_test>
            <ind-def:textfilecontent54_test check_existence="none_exist" id="oval:org.open-scap.f14:tst:20309" version="1" check="all" comment="Tests the value of the insecure setting in the /etc/exports file">
                  <ind-def:object object_ref="oval:org.open-scap.f14:obj:20309"/>
            </ind-def:textfilecontent54_test>
            <ind-def:textfilecontent54_test check_existence="none_exist" id="oval:org.open-scap.f14:tst:20310" version="1" check="all" comment="Tests the value of the rw setting in the /etc/exports file">
                  <ind-def:object object_ref="oval:org.open-scap.f14:obj:20310"/>
            </ind-def:textfilecontent54_test>
            <unix-def:runlevel_test check_existence="none_exist" id="oval:org.open-scap.f14:tst:20311" version="1" check="all" comment="Runlevel test">
                  <unix-def:object object_ref="oval:org.open-scap.f14:obj:20311"/>
            </unix-def:runlevel_test>
            <lin-def:rpminfo_test check_existence="none_exist" id="oval:org.open-scap.f14:tst:20312" version="1" check="all" comment="The bind package should be installed or not as appropriate">
                  <lin-def:object object_ref="oval:org.open-scap.f14:obj:20312"/>
            </lin-def:rpminfo_test>
            <unix-def:file_test check_existence="all_exist" id="oval:org.open-scap.f14:tst:20313" version="1" check="all" comment="Testing group ownership">
                  <unix-def:object object_ref="oval:org.open-scap.f14:obj:20313"/>
                  <unix-def:state state_ref="oval:org.open-scap.f14:ste:20313"/>
            </unix-def:file_test>
            <unix-def:file_test check_existence="all_exist" id="oval:org.open-scap.f14:tst:20314" version="1" check="all" comment="Testing user ownership">
                  <unix-def:object object_ref="oval:org.open-scap.f14:obj:20314"/>
                  <unix-def:state state_ref="oval:org.open-scap.f14:ste:20314"/>
            </unix-def:file_test>
            <unix-def:file_test check_existence="all_exist" id="oval:org.open-scap.f14:tst:20315" version="1" check="all" comment="Testing file permissions">
                  <unix-def:object object_ref="oval:org.open-scap.f14:obj:20315"/>
                  <unix-def:state state_ref="oval:org.open-scap.f14:ste:20315"/>
            </unix-def:file_test>
            <unix-def:runlevel_test check_existence="none_exist" id="oval:org.open-scap.f14:tst:20317" version="1" check="all" comment="Runlevel test">
                  <unix-def:object object_ref="oval:org.open-scap.f14:obj:20317"/>
            </unix-def:runlevel_test>
            <lin-def:rpminfo_test check_existence="none_exist" id="oval:org.open-scap.f14:tst:203175" version="1" check="all" comment="The vsftpd package should be installed or not as appropriate">
                  <lin-def:object object_ref="oval:org.open-scap.f14:obj:203175"/>
            </lin-def:rpminfo_test>
            <ind-def:textfilecontent54_test check_existence="all_exist" id="oval:org.open-scap.f14:tst:20319" version="1" check="all" comment="Tests the value of the banner_file[\s]*=[\s]*/etc/issue setting in the /etc/vsftpd.conf file">
                  <ind-def:object object_ref="oval:org.open-scap.f14:obj:20319"/>
            </ind-def:textfilecontent54_test>
            <unix-def:runlevel_test check_existence="none_exist" id="oval:org.open-scap.f14:tst:20322" version="1" check="all" comment="Runlevel test">
                  <unix-def:object object_ref="oval:org.open-scap.f14:obj:20322"/>
            </unix-def:runlevel_test>
            <lin-def:rpminfo_test check_existence="none_exist" id="oval:org.open-scap.f14:tst:20323" version="1" check="all" comment="The httpd package should be installed or not as appropriate">
                  <lin-def:object object_ref="oval:org.open-scap.f14:obj:20323"/>
            </lin-def:rpminfo_test>
            <ind-def:textfilecontent54_test check_existence="all_exist" id="oval:org.open-scap.f14:tst:20324" version="1" check="all" comment="Tests the value of the ServerTokens[\s]+([^#]*) expression in the /etc/httpd/conf/httpd.conf file">
                  <ind-def:object object_ref="oval:org.open-scap.f14:obj:20324"/>
                  <ind-def:state state_ref="oval:org.open-scap.f14:ste:20324"/>
            </ind-def:textfilecontent54_test>
            <ind-def:textfilecontent54_test check_existence="all_exist" id="oval:org.open-scap.f14:tst:20325" version="1" check="all" comment="Tests the value of the ServerSignature[\s]+([^#]*) expression in the /etc/httpd/conf/httpd.conf file">
                  <ind-def:object object_ref="oval:org.open-scap.f14:obj:20325"/>
                  <ind-def:state state_ref="oval:org.open-scap.f14:ste:20325"/>
            </ind-def:textfilecontent54_test>
            <unix-def:file_test check_existence="all_exist" id="oval:org.open-scap.f14:tst:20326" version="1" check="all" comment="Testing file permissions">
                  <unix-def:object object_ref="oval:org.open-scap.f14:obj:20326"/>
                  <unix-def:state state_ref="oval:org.open-scap.f14:ste:20326"/>
            </unix-def:file_test>
            <unix-def:file_test check_existence="all_exist" id="oval:org.open-scap.f14:tst:20327" version="1" check="all" comment="Testing file permissions">
                  <unix-def:object object_ref="oval:org.open-scap.f14:obj:20327"/>
                  <unix-def:state state_ref="oval:org.open-scap.f14:ste:20327"/>
            </unix-def:file_test>
            <unix-def:file_test check_existence="all_exist" id="oval:org.open-scap.f14:tst:20328" version="1" check="all" comment="Testing file permissions">
                  <unix-def:object object_ref="oval:org.open-scap.f14:obj:20328"/>
                  <unix-def:state state_ref="oval:org.open-scap.f14:ste:20328"/>
            </unix-def:file_test>
            <unix-def:file_test check_existence="all_exist" id="oval:org.open-scap.f14:tst:20329" version="1" check="all" comment="Testing group ownership">
                  <unix-def:object object_ref="oval:org.open-scap.f14:obj:20329"/>
                  <unix-def:state state_ref="oval:org.open-scap.f14:ste:20329"/>
            </unix-def:file_test>
            <unix-def:file_test check_existence="all_exist" id="oval:org.open-scap.f14:tst:20330" version="1" check="all" comment="Testing file permissions">
                  <unix-def:object object_ref="oval:org.open-scap.f14:obj:20330"/>
                  <unix-def:state state_ref="oval:org.open-scap.f14:ste:20330"/>
            </unix-def:file_test>
            <unix-def:runlevel_test check_existence="none_exist" id="oval:org.open-scap.f14:tst:20331" version="1" check="all" comment="Runlevel test">
                  <unix-def:object object_ref="oval:org.open-scap.f14:obj:20331"/>
            </unix-def:runlevel_test>
            <lin-def:rpminfo_test check_existence="none_exist" id="oval:org.open-scap.f14:tst:20332" version="1" check="all" comment="The dovecot package should be installed or not as appropriate">
                  <lin-def:object object_ref="oval:org.open-scap.f14:obj:20332"/>
            </lin-def:rpminfo_test>
            <ind-def:textfilecontent54_test check_existence="none_exist" id="oval:org.open-scap.f14:tst:20333" version="1" check="all" comment="Tests the value of the protocols[\s]*=.*imaps setting in the /etc/dovecot.conf file">
                  <ind-def:object object_ref="oval:org.open-scap.f14:obj:20333"/>
            </ind-def:textfilecontent54_test>
            <ind-def:textfilecontent54_test check_existence="none_exist" id="oval:org.open-scap.f14:tst:20334" version="1" check="all" comment="Tests the value of the protocols[\s]*=.*pop3s setting in the /etc/dovecot.conf file">
                  <ind-def:object object_ref="oval:org.open-scap.f14:obj:20334"/>
            </ind-def:textfilecontent54_test>
            <ind-def:textfilecontent54_test check_existence="none_exist" id="oval:org.open-scap.f14:tst:20335" version="1" check="all" comment="Tests the value of the protocols[\s]*=.*pop3 setting in the /etc/dovecot.conf file">
                  <ind-def:object object_ref="oval:org.open-scap.f14:obj:20335"/>
            </ind-def:textfilecontent54_test>
            <ind-def:textfilecontent54_test check_existence="none_exist" id="oval:org.open-scap.f14:tst:20336" version="1" check="all" comment="Tests the value of the protocols[\s]*=.*imap setting in the /etc/dovecot.conf file">
                  <ind-def:object object_ref="oval:org.open-scap.f14:obj:20336"/>
            </ind-def:textfilecontent54_test>
            <ind-def:textfilecontent54_test check_existence="all_exist" id="oval:org.open-scap.f14:tst:20337" version="1" check="all" comment="Tests the value of the disable_plaintext_auth[\s]*=[\s]*([^#]*) expression in the /etc/dovecot.conf file">
                  <ind-def:object object_ref="oval:org.open-scap.f14:obj:20337"/>
                  <ind-def:state state_ref="oval:org.open-scap.f14:ste:20337"/>
            </ind-def:textfilecontent54_test>
            <ind-def:textfilecontent54_test check_existence="all_exist" id="oval:org.open-scap.f14:tst:20338" version="1" check="all" comment="Tests the value of the mail_drop_priv_before_exec[\s]*=[\s]*([^#]*) expression in the /etc/dovecot.conf file">
                  <ind-def:object object_ref="oval:org.open-scap.f14:obj:20338"/>
                  <ind-def:state state_ref="oval:org.open-scap.f14:ste:20338"/>
            </ind-def:textfilecontent54_test>
            <ind-def:textfilecontent54_test check_existence="all_exist" id="oval:org.open-scap.f14:tst:20339" version="1" check="all" comment="Tests the value of the login_process_per_connection[\s]*=[\s]*([^#]*) expression in the /etc/dovecot.conf file">
                  <ind-def:object object_ref="oval:org.open-scap.f14:obj:20339"/>
                  <ind-def:state state_ref="oval:org.open-scap.f14:ste:20339"/>
            </ind-def:textfilecontent54_test>
            <unix-def:runlevel_test check_existence="none_exist" id="oval:org.open-scap.f14:tst:20340" version="1" check="all" comment="Runlevel test">
                  <unix-def:object object_ref="oval:org.open-scap.f14:obj:20340"/>
            </unix-def:runlevel_test>
            <ind-def:textfilecontent54_test check_existence="none_exist" id="oval:org.open-scap.f14:tst:203403" version="1" check="all" comment="check guest access in /etc/samba/smb.conf">
                  <ind-def:object object_ref="oval:org.open-scap.f14:obj:203403"/>
            </ind-def:textfilecontent54_test>
            <ind-def:textfilecontent54_test check_existence="at_least_one_exists" id="oval:org.open-scap.f14:tst:2034010" version="1" check="all" comment="check for client signing = mandatory in /etc/samba/smb.conf">
                  <ind-def:object object_ref="oval:org.open-scap.f14:obj:2034010"/>
            </ind-def:textfilecontent54_test>
<!--            <ind-def:textfilecontent54_test check_existence="at_least_one_exists" id="oval:org.open-scap.f14:tst:20340111" version="1" check="all" comment="check for sec=krb5i or sec=ntlmv2i in /etc/fstab" state_operator="OR"> -->
            <ind-def:textfilecontent54_test check_existence="at_least_one_exists" id="oval:org.open-scap.f14:tst:20340111" version="1" check="all" comment="check for sec=krb5i or sec=ntlmv2i in /etc/fstab">
                  <ind-def:object object_ref="oval:org.open-scap.f14:obj:20340111"/>
                  <ind-def:state state_ref="oval:org.open-scap.f14:ste:20340111"/>
<!--                  <ind-def:state state_ref="oval:org.open-scap.f14:ste:20340112"/> -->
            </ind-def:textfilecontent54_test>
<!--            <ind-def:textfilecontent54_test check_existence="at_least_one_exists" id="oval:org.open-scap.f14:tst:20340112" version="1" check="all" comment="check for sec=krb5i or sec=ntlmv2i in /etc/mtab" state_operator="OR"> -->
            <ind-def:textfilecontent54_test check_existence="at_least_one_exists" id="oval:org.open-scap.f14:tst:20340112" version="1" check="all" comment="check for sec=krb5i or sec=ntlmv2i in /etc/mtab" >
      <ind-def:object object_ref="oval:org.open-scap.f14:obj:20340112"/>
                  <ind-def:state state_ref="oval:org.open-scap.f14:ste:20340111"/>
<!--                  <ind-def:state state_ref="oval:org.open-scap.f14:ste:20340112"/> -->
            </ind-def:textfilecontent54_test>
            <unix-def:runlevel_test check_existence="none_exist" id="oval:org.open-scap.f14:tst:20341" version="1" check="all" comment="Runlevel test">
                  <unix-def:object object_ref="oval:org.open-scap.f14:obj:20341"/>
            </unix-def:runlevel_test>
            <lin-def:rpminfo_test check_existence="none_exist" id="oval:org.open-scap.f14:tst:20342" version="1" check="all" comment="The squid package should be installed or not as appropriate">
                  <lin-def:object object_ref="oval:org.open-scap.f14:obj:20342"/>
            </lin-def:rpminfo_test>
            <ind-def:textfilecontent54_test check_existence="all_exist" id="oval:org.open-scap.f14:tst:20343" version="1" check="all" comment="Tests the value of the ftp_passive[\s]+([^#]*) expression in the /etc/squid/squid.conf file">
                  <ind-def:object object_ref="oval:org.open-scap.f14:obj:20343"/>
                  <ind-def:state state_ref="oval:org.open-scap.f14:ste:20343"/>
            </ind-def:textfilecontent54_test>
            <ind-def:textfilecontent54_test check_existence="all_exist" id="oval:org.open-scap.f14:tst:20344" version="1" check="all" comment="Tests the value of the ftp_sanitycheck[\s]+([^#]*) expression in the /etc/squid/squid.conf file">
                  <ind-def:object object_ref="oval:org.open-scap.f14:obj:20344"/>
                  <ind-def:state state_ref="oval:org.open-scap.f14:ste:20344"/>
            </ind-def:textfilecontent54_test>
            <ind-def:textfilecontent54_test check_existence="all_exist" id="oval:org.open-scap.f14:tst:20345" version="1" check="all" comment="Tests the value of the check_hostnames[\s]+([^#]*) expression in the /etc/squid/squid.conf file">
                  <ind-def:object object_ref="oval:org.open-scap.f14:obj:20345"/>
                  <ind-def:state state_ref="oval:org.open-scap.f14:ste:20345"/>
            </ind-def:textfilecontent54_test>
            <ind-def:textfilecontent54_test check_existence="all_exist" id="oval:org.open-scap.f14:tst:20346" version="1" check="all" comment="Tests the value of the request_header_max_size[\s]+([^#]*) expression in the /etc/squid/squid.conf file">
                  <ind-def:object object_ref="oval:org.open-scap.f14:obj:20346"/>
                  <ind-def:state state_ref="oval:org.open-scap.f14:ste:20346"/>
            </ind-def:textfilecontent54_test>
            <ind-def:textfilecontent54_test check_existence="all_exist" id="oval:org.open-scap.f14:tst:20347" version="1" check="all" comment="Tests the value of the reply_header_max_size[\s]+([^#]*) expression in the /etc/squid/squid.conf file">
                  <ind-def:object object_ref="oval:org.open-scap.f14:obj:20347"/>
                  <ind-def:state state_ref="oval:org.open-scap.f14:ste:20347"/>
            </ind-def:textfilecontent54_test>
            <ind-def:textfilecontent54_test check_existence="all_exist" id="oval:org.open-scap.f14:tst:20348" version="1" check="all" comment="Tests the value of the cache_effective_user[\s]+([^#]*) expression in the /etc/squid/squid.conf file">
                  <ind-def:object object_ref="oval:org.open-scap.f14:obj:20348"/>
                  <ind-def:state state_ref="oval:org.open-scap.f14:ste:20348"/>
            </ind-def:textfilecontent54_test>
            <ind-def:textfilecontent54_test check_existence="all_exist" id="oval:org.open-scap.f14:tst:20349" version="1" check="all" comment="Tests the value of the cache_effective_group[\s]+([^#]*) expression in the /etc/squid/squid.conf file">
                  <ind-def:object object_ref="oval:org.open-scap.f14:obj:20349"/>
                  <ind-def:state state_ref="oval:org.open-scap.f14:ste:20349"/>
            </ind-def:textfilecontent54_test>
            <ind-def:textfilecontent54_test check_existence="all_exist" id="oval:org.open-scap.f14:tst:20350" version="1" check="all" comment="Tests the value of the ignore_unknown_nameservers[\s][\s]([^#]*) expression in the /etc/squid/squid.conf file">
                  <ind-def:object object_ref="oval:org.open-scap.f14:obj:20350"/>
                  <ind-def:state state_ref="oval:org.open-scap.f14:ste:20350"/>
            </ind-def:textfilecontent54_test>
            <ind-def:textfilecontent54_test check_existence="all_exist" id="oval:org.open-scap.f14:tst:20351" version="1" check="all" comment="Tests the value of the allow_underscore[\s]+([^#]*) expression in the /etc/squid/squid.conf file">
                  <ind-def:object object_ref="oval:org.open-scap.f14:obj:20351"/>
                  <ind-def:state state_ref="oval:org.open-scap.f14:ste:20351"/>
            </ind-def:textfilecontent54_test>
            <ind-def:textfilecontent54_test check_existence="all_exist" id="oval:org.open-scap.f14:tst:20352" version="1" check="all" comment="Tests the value of the http_suppress_version_string[\s]+([^#]*) expression in the /etc/squid/squid.conf file">
                  <ind-def:object object_ref="oval:org.open-scap.f14:obj:20352"/>
                  <ind-def:state state_ref="oval:org.open-scap.f14:ste:20352"/>
            </ind-def:textfilecontent54_test>
            <ind-def:textfilecontent54_test check_existence="all_exist" id="oval:org.open-scap.f14:tst:20353" version="1" check="all" comment="Tests the value of the forwarded_for[\s]+([^#]*) expression in the /etc/squid/squid.conf file">
                  <ind-def:object object_ref="oval:org.open-scap.f14:obj:20353"/>
                  <ind-def:state state_ref="oval:org.open-scap.f14:ste:20353"/>
            </ind-def:textfilecontent54_test>
            <ind-def:textfilecontent54_test check_existence="all_exist" id="oval:org.open-scap.f14:tst:20354" version="1" check="all" comment="Tests the value of the log_mime_hdrs[\s]+([^#]*) expression in the /etc/squid/squid.conf file">
                  <ind-def:object object_ref="oval:org.open-scap.f14:obj:20354"/>
                  <ind-def:state state_ref="oval:org.open-scap.f14:ste:20354"/>
            </ind-def:textfilecontent54_test>
            <unix-def:runlevel_test check_existence="none_exist" id="oval:org.open-scap.f14:tst:20365" version="1" check="all" comment="Runlevel test">
                  <unix-def:object object_ref="oval:org.open-scap.f14:obj:20365"/>
            </unix-def:runlevel_test>
            <lin-def:rpminfo_test check_existence="none_exist" id="oval:org.open-scap.f14:tst:20366" version="1" check="all" comment="The net-snmp package should be installed or not as appropriate">
                  <lin-def:object object_ref="oval:org.open-scap.f14:obj:20366"/>
            </lin-def:rpminfo_test>
      </tests>
      <objects>
            <ind-def:textfilecontent54_object id="oval:org.open-scap.f14:obj:20000" version="1" comment="look for the partition mount point in /etc/fstab">
                  <ind-def:path>/etc</ind-def:path>
                  <ind-def:filename>fstab</ind-def:filename>
                  <ind-def:pattern operation="pattern match">^[[:space:]]*[^[:space:]]+[[:space:]]+([^[:space:]]+)[[:space:]]+[^[:space:]]+[[:space:]]+[^[:space:]]+[[:space:]]+[^[:space:]]+[[:space:]]+[^[:space:]]+</ind-def:pattern>
 <!--                 <ind-def:pattern operation="pattern match">^[\s]*[\S]+[\s]+([\S]+)[\s]+[\S]+[\s]+[\S]+[\s]+[\S]+[\s]+[\S]+</ind-def:pattern> -->
                  <ind-def:instance datatype="int" operation="greater than or equal">1</ind-def:instance>
            </ind-def:textfilecontent54_object>
            <unix-def:file_object id="oval:org.open-scap.f14:obj:20009" version="1" comment="Check existance of yum.cron"> 
                  <unix-def:path operation="pattern match">^/etc/cron\.(hourly|daily|weekly|monthly)$</unix-def:path>
                  <unix-def:filename>0yum.cron</unix-def:filename>
            </unix-def:file_object>
            <ind-def:textfilecontent54_object id="oval:org.open-scap.f14:obj:20010" version="1" comment="look for the value of gpgcheck in /etc/yum.conf">
                  <ind-def:path>/etc</ind-def:path>
                  <ind-def:filename>yum.conf</ind-def:filename>
                  <ind-def:pattern operation="pattern match">^[[:space:]]*gpgcheck[[:space:]]*=[[:space:]]*([0-1])</ind-def:pattern>
                  <ind-def:instance datatype="int" operation="equals">1</ind-def:instance>
            </ind-def:textfilecontent54_object>
            <ind-def:textfilecontent54_object id="oval:org.open-scap.f14:obj:20011" version="1" comment="look for the value of gpgcheck= in /etc/yum.repos.d">
                  <ind-def:path>/etc/yum.repos.d</ind-def:path>
                  <ind-def:filename operation="pattern match">.*</ind-def:filename>
                  <ind-def:pattern operation="pattern match">^[[:space:]]*gpgcheck[[:space:]]*=[[:space:]]*([0-1])</ind-def:pattern>
                  <ind-def:instance datatype="int" operation="equals">1</ind-def:instance>
            </ind-def:textfilecontent54_object>
            <ind-def:textfilecontent54_object id="oval:org.open-scap.f14:obj:20012" version="1" comment="look for the value of repo_gpgcheck in /etc/yum.conf">
                  <ind-def:path>/etc</ind-def:path>
                  <ind-def:filename>yum.conf</ind-def:filename>
                  <ind-def:pattern operation="pattern match">^[[:space:]]*repo_gpgcheck[[:space:]]*=[[:space:]]*([0-1])</ind-def:pattern>
                  <ind-def:instance datatype="int" operation="equals">1</ind-def:instance>
            </ind-def:textfilecontent54_object>
            <ind-def:textfilecontent54_object id="oval:org.open-scap.f14:obj:20013" version="1" comment="look for the value of repo_gpgcheck= in /etc/yum.repos.d">
                  <ind-def:path>/etc/yum.repos.d</ind-def:path>
                  <ind-def:filename operation="pattern match">.*</ind-def:filename>
                  <ind-def:pattern operation="pattern match">^[[:space:]]*repo_gpgcheck[[:space:]]*=[[:space:]]*([0-1])</ind-def:pattern>
                  <ind-def:instance datatype="int" operation="equals">1</ind-def:instance>
            </ind-def:textfilecontent54_object>
            <ind-def:textfilecontent54_object id="oval:org.open-scap.f14:obj:20016" version="1" comment="file systems defined in /etc/fstab">
                  <ind-def:path>/etc</ind-def:path>
                  <ind-def:filename>fstab</ind-def:filename>
                  <ind-def:pattern operation="pattern match">^[^#]*\/.+*ext[234]([^#]*)</ind-def:pattern>
                  <ind-def:instance datatype="int" operation="greater than or equal">1</ind-def:instance>
            </ind-def:textfilecontent54_object>
            <ind-def:textfilecontent54_object id="oval:org.open-scap.f14:obj:200162" version="1" comment="file systems defined in /etc/mtab">
                  <ind-def:path>/etc</ind-def:path>
                  <ind-def:filename>mtab</ind-def:filename>
                  <ind-def:pattern operation="pattern match">^[^#]*\/[^[:space:]]*ext[234]([^#])?</ind-def:pattern>
                  <ind-def:instance datatype="int" operation="greater than or equal">1</ind-def:instance>
            </ind-def:textfilecontent54_object>

            <lin-def:rpminfo_object id="oval:org.open-scap.f14:obj:10000" version="1">
                  <lin-def:name>redhat-release</lin-def:name>
            </lin-def:rpminfo_object>
            <lin-def:rpminfo_object id="oval:org.open-scap.f14:obj:200065" version="1">
                  <lin-def:name>gpg-pubkey</lin-def:name>
            </lin-def:rpminfo_object>
            <ind-def:family_object id="oval:org.open-scap.f14:obj:10001" version="1"/>
            <unix-def:runlevel_object id="oval:org.open-scap.f14:obj:20008" version="1">
                  <unix-def:service_name>yum-updatesd</unix-def:service_name>
                  <unix-def:runlevel operation="pattern match">.*</unix-def:runlevel>
            </unix-def:runlevel_object>
            <lin-def:rpminfo_object id="oval:org.open-scap.f14:obj:20014" version="1">
                  <lin-def:name>aide</lin-def:name>
            </lin-def:rpminfo_object>
            <ind-def:textfilecontent54_object id="oval:org.open-scap.f14:obj:20020" version="1" comment="&lt;console&gt; and &lt;xconsole&gt; in /etc/security/console.perms.d/50-default.perms">
                  <ind-def:path>/etc/security/console.perms.d</ind-def:path>
                  <ind-def:filename>50-default.perms</ind-def:filename>
                  <ind-def:pattern operation="pattern match">^[\s]*(&lt;console&gt;|&lt;xconsole&gt;)</ind-def:pattern>
                  <ind-def:instance datatype="int" operation="greater than or equal">1</ind-def:instance>
            </ind-def:textfilecontent54_object>
            <unix-def:file_object id="oval:org.open-scap.f14:obj:20022" version="1" comment="/lib/modules/*/kernel/drivers/usb/storage/usb-storage.ko">
                  <unix-def:path operation="pattern match">/lib/modules/.*/kernel/drivers/usb/storage</unix-def:path>
                  <unix-def:filename>usb-storage.ko</unix-def:filename>
            </unix-def:file_object>
            <ind-def:textfilecontent54_object id="oval:org.open-scap.f14:obj:20023" version="1">
                  <ind-def:path>/etc</ind-def:path>
                  <ind-def:filename>grub.conf</ind-def:filename>
                  <ind-def:pattern operation="pattern match">^[[:space:]]*kernel[^#]nousb</ind-def:pattern>
                  <ind-def:instance datatype="int">1</ind-def:instance>
            </ind-def:textfilecontent54_object>
            <unix-def:runlevel_object id="oval:org.open-scap.f14:obj:20025" version="1">
                  <unix-def:service_name>autofs</unix-def:service_name>
                  <unix-def:runlevel operation="pattern match">.*</unix-def:runlevel>
            </unix-def:runlevel_object>
            <ind-def:xmlfilecontent_object id="oval:org.open-scap.f14:obj:20026" version="1">
                  <ind-def:path>/etc/gconf</ind-def:path>
                  <ind-def:filename>gconf.xml.mandatory</ind-def:filename>
                  <ind-def:xpath>/desktop/gnome/volume_manager/automount_(media)|(drives)</ind-def:xpath>
            </ind-def:xmlfilecontent_object>
            <ind-def:textfilecontent54_object id="oval:org.open-scap.f14:obj:20027" version="1" comment="Check in /etc/modprobe.conf for modules being loaded">
                  <ind-def:path>/etc/modprobe.d</ind-def:path>
                  <ind-def:filename>blacklist.conf</ind-def:filename>
                  <ind-def:pattern operation="pattern match">^[^#]*blacklist[[:space:]]+([^#]*)$</ind-def:pattern>
                  <ind-def:instance datatype="int" operation="greater than or equal">1</ind-def:instance>
            </ind-def:textfilecontent54_object>
            <unix-def:file_object id="oval:org.open-scap.f14:obj:20034" version="1" comment="/etc/shadow">
                  <unix-def:path>/etc</unix-def:path>
                  <unix-def:filename>shadow</unix-def:filename>
            </unix-def:file_object>
            <unix-def:file_object id="oval:org.open-scap.f14:obj:20036" version="1" comment="/etc/group">
                  <unix-def:path>/etc</unix-def:path>
                  <unix-def:filename>group</unix-def:filename>
            </unix-def:file_object>
            <unix-def:file_object id="oval:org.open-scap.f14:obj:20038" version="1" comment="/etc/gshadow">
                  <unix-def:path>/etc</unix-def:path>
                  <unix-def:filename>gshadow</unix-def:filename>
            </unix-def:file_object>
            <unix-def:file_object id="oval:org.open-scap.f14:obj:20040" version="1" comment="/etc/passwd">
                  <unix-def:path>/etc</unix-def:path>
                  <unix-def:filename>passwd</unix-def:filename>
            </unix-def:file_object>

            <unix-def:file_object id="oval:org.open-scap.f14:obj:200461" version="1" comment="all local files">
            	  <set set_operator="UNION" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5">
            	  	<object_reference>oval:org.open-scap.f14:obj:20046</object_reference>
            	  	<filter>oval:org.open-scap.f14:ste:200462</filter>
            	  </set>
            </unix-def:file_object>
            <unix-def:file_object id="oval:org.open-scap.f14:obj:20046" version="1" comment="all local directories">
                  <unix-def:behaviors recurse_direction="down" recurse_file_system="local" recurse="directories"/>
                  <unix-def:path>/</unix-def:path>
                  <unix-def:filename xsi:nil="true"/>
            </unix-def:file_object>

            <unix-def:file_object id="oval:org.open-scap.f14:obj:200471" version="1" comment="all local files">
            	  <set set_operator="UNION" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5">
            	  	<object_reference>oval:org.open-scap.f14:obj:20047</object_reference>
            	  	<filter>oval:org.open-scap.f14:ste:200471</filter>
            	  	<filter>oval:org.open-scap.f14:ste:200472</filter> 
            	  </set>
            </unix-def:file_object>
            <unix-def:file_object id="oval:org.open-scap.f14:obj:20047" version="1" comment="all local files">
                  <unix-def:behaviors recurse_direction="down" recurse_file_system="local" recurse="directories"/>
                  <unix-def:path>/</unix-def:path>
                  <unix-def:filename operation="pattern match">.*</unix-def:filename>
            </unix-def:file_object>
            <unix-def:file_object id="oval:org.open-scap.f14:obj:20048" version="1" comment="all local files with sgid bit set">
                  <set set_operator="UNION" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5">
                        <object_reference>oval:org.open-scap.f14:obj:20047</object_reference>
                        <filter>oval:org.open-scap.f14:ste:200481</filter>
                        <filter>oval:org.open-scap.f14:ste:200482</filter>
                        <filter>oval:org.open-scap.f14:ste:200483</filter>
                        <filter>oval:org.open-scap.f14:ste:200484</filter>
                        <filter>oval:org.open-scap.f14:ste:200485</filter>
                        <filter>oval:org.open-scap.f14:ste:200486</filter>
                        <filter>oval:org.open-scap.f14:ste:200487</filter>
                        <filter>oval:org.open-scap.f14:ste:200488</filter>
                  </set>
            </unix-def:file_object>
            <unix-def:file_object id="oval:org.open-scap.f14:obj:20049" version="1" comment="all local files with suid bit set">
                  <set set_operator="UNION" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5">
                        <object_reference>oval:org.open-scap.f14:obj:20047</object_reference>
                        <filter>oval:org.open-scap.f14:ste:2004901</filter>
                        <filter>oval:org.open-scap.f14:ste:2004902</filter>
                        <filter>oval:org.open-scap.f14:ste:2004903</filter>
                        <filter>oval:org.open-scap.f14:ste:2004904</filter>
                        <filter>oval:org.open-scap.f14:ste:2004905</filter>
                        <filter>oval:org.open-scap.f14:ste:2004906</filter>
                        <filter>oval:org.open-scap.f14:ste:2004907</filter>
                        <filter>oval:org.open-scap.f14:ste:2004908</filter>
                        <filter>oval:org.open-scap.f14:ste:2004909</filter>
                        <filter>oval:org.open-scap.f14:ste:2004910</filter>
                        <filter>oval:org.open-scap.f14:ste:2004911</filter>
                        <filter>oval:org.open-scap.f14:ste:2004912</filter>
                        <filter>oval:org.open-scap.f14:ste:2004913</filter>
                        <filter>oval:org.open-scap.f14:ste:2004914</filter>
                        <filter>oval:org.open-scap.f14:ste:2004915</filter>
                        <filter>oval:org.open-scap.f14:ste:2004916</filter>
                  </set>
            </unix-def:file_object>
            <unix-def:file_object id="oval:org.open-scap.f14:obj:20050" version="1" comment="all local files without a valid user assigned">
                  <set set_operator="UNION" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5">
                        <object_reference>oval:org.open-scap.f14:obj:20047</object_reference>
                        <filter>oval:org.open-scap.f14:ste:20050</filter>
                  </set>
            </unix-def:file_object>
            <ind-def:textfilecontent54_object id="oval:org.open-scap.f14:obj:200501" version="1">
                  <ind-def:path>/etc</ind-def:path>
                  <ind-def:filename>passwd</ind-def:filename>
                  <ind-def:pattern operation="pattern match">^[^:]+:[^:]+:([[:digit:]]+):[[:digit:]]+:[^:]*:[^:]+:[^:]*</ind-def:pattern>
                  <ind-def:instance operation="greater than or equal" datatype="int">1</ind-def:instance>
            </ind-def:textfilecontent54_object>
            <unix-def:file_object id="oval:org.open-scap.f14:obj:20051" version="1" comment="all local files without a valid group assigned">
                  <set set_operator="UNION" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5">
                        <object_reference>oval:org.open-scap.f14:obj:20047</object_reference>
                        <filter>oval:org.open-scap.f14:ste:20051</filter>
                  </set>
            </unix-def:file_object>
            <ind-def:textfilecontent54_object id="oval:org.open-scap.f14:obj:200511" version="1">
                  <ind-def:path>/etc</ind-def:path>
                  <ind-def:filename>group</ind-def:filename>
                  <ind-def:pattern operation="pattern match">^[^:]+:[^:]*:([[:digit:]]+):[^:]*</ind-def:pattern>
                  <ind-def:instance operation="greater than or equal" datatype="int">1</ind-def:instance>
            </ind-def:textfilecontent54_object>
            <unix-def:file_object id="oval:org.open-scap.f14:obj:20052" version="1" comment="world writable directories with uid not less than 500">
                  <set set_operator="UNION" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5">
                        <object_reference>oval:org.open-scap.f14:obj:20046</object_reference>
                        <filter>oval:org.open-scap.f14:ste:20052</filter>
                  </set>
            </unix-def:file_object>

            <ind-def:textfilecontent54_object id="oval:org.open-scap.f14:obj:20053" version="1">
                  <ind-def:path>/etc/rc.d/init.d</ind-def:path>
                  <ind-def:filename>functions</ind-def:filename>
                  <ind-def:pattern operation="pattern match">^[[:space:]]*umask[[:space:]]+([[:digit:]]+).*</ind-def:pattern>
                  <ind-def:instance datatype="int">1</ind-def:instance>
            </ind-def:textfilecontent54_object>
            <ind-def:textfilecontent54_object id="oval:org.open-scap.f14:obj:20055" version="1">
                  <ind-def:path>/etc/security</ind-def:path>
                  <ind-def:filename>limits.conf</ind-def:filename>
                  <ind-def:pattern operation="pattern match">^[[:space:]]*\*[[:space:]]+hard[[:space:]]+core[[:space:]]+([[:digit:]]+)</ind-def:pattern>
                  <ind-def:instance datatype="int">1</ind-def:instance>
            </ind-def:textfilecontent54_object>
            <ind-def:textfilecontent54_object id="oval:org.open-scap.f14:obj:20056" version="1">
                  <ind-def:path>/proc/sys/fs</ind-def:path>
                  <ind-def:filename>suid_dumpable</ind-def:filename>
                  <ind-def:pattern operation="pattern match">^(.*)$</ind-def:pattern>
                  <ind-def:instance datatype="int">1</ind-def:instance>
            </ind-def:textfilecontent54_object>
            <ind-def:textfilecontent54_object id="oval:org.open-scap.f14:obj:20058" version="1">
                  <ind-def:path>/proc/sys/kernel</ind-def:path>
                  <ind-def:filename>randomize_va_space</ind-def:filename>
                  <ind-def:pattern operation="pattern match">^(.*)$</ind-def:pattern>
                  <ind-def:instance datatype="int">1</ind-def:instance>
            </ind-def:textfilecontent54_object>
            <ind-def:textfilecontent54_object id="oval:org.open-scap.f14:obj:20057" version="1">
                  <ind-def:path>/proc/sys/kernel</ind-def:path>
                  <ind-def:filename>exec-shield</ind-def:filename>
                  <ind-def:pattern operation="pattern match">^(.*)$</ind-def:pattern>
                  <ind-def:instance datatype="int">1</ind-def:instance>
            </ind-def:textfilecontent54_object>
            <ind-def:textfilecontent54_object id="oval:org.open-scap.f14:obj:20061" version="1">
                  <ind-def:path>/etc</ind-def:path>
                  <ind-def:filename>securetty</ind-def:filename>
                  <ind-def:pattern operation="pattern match">^[[:space:]]*tty[0-9]+[[:space:]]*(#.*)?$</ind-def:pattern>
                  <ind-def:instance datatype="int">1</ind-def:instance>
            </ind-def:textfilecontent54_object>
            <ind-def:textfilecontent54_object id="oval:org.open-scap.f14:obj:20062" version="1">
                  <ind-def:path>/etc</ind-def:path>
                  <ind-def:filename>securetty</ind-def:filename>
                  <ind-def:pattern operation="pattern match">^[[:space:]]*vc\/[0-9]+[[:space:]]*(#.*)?$</ind-def:pattern>
                  <ind-def:instance datatype="int">1</ind-def:instance>
            </ind-def:textfilecontent54_object>
            <ind-def:textfilecontent54_object id="oval:org.open-scap.f14:obj:20063" version="1">
                  <ind-def:path>/etc</ind-def:path>
                  <ind-def:filename>securetty</ind-def:filename>
                  <ind-def:pattern operation="pattern match">^[[:space:]]*console[[:space:]]*(#.*)?$</ind-def:pattern>
                  <ind-def:instance datatype="int">1</ind-def:instance>
            </ind-def:textfilecontent54_object>
            <ind-def:textfilecontent54_object id="oval:org.open-scap.f14:obj:20064" version="1">
                  <ind-def:path>/etc</ind-def:path>
                  <ind-def:filename>securetty</ind-def:filename>
                  <ind-def:pattern operation="pattern match">^[[:space:]]*ttyS[0-9]+[[:space:]]*(#.*)?$</ind-def:pattern>
                  <ind-def:instance datatype="int">1</ind-def:instance>
            </ind-def:textfilecontent54_object>
            <ind-def:textfilecontent54_object id="oval:org.open-scap.f14:obj:20065" version="1">
                  <ind-def:path>/etc</ind-def:path>
                  <ind-def:filename>group</ind-def:filename>
                  <ind-def:pattern operation="pattern match">^[[:space:]]*wheel.*$</ind-def:pattern>
                  <ind-def:instance datatype="int">1</ind-def:instance>
            </ind-def:textfilecontent54_object>
            <ind-def:textfilecontent54_object id="oval:org.open-scap.f14:obj:20066" version="1">
                  <ind-def:path>/etc/pam.d</ind-def:path>
                  <ind-def:filename>su</ind-def:filename>
                  <ind-def:pattern operation="pattern match">^[[:space:]]*auth[[:space:]]+required[[:space:]]+pam_wheel\.so[[:space:]]+use_uid([[[:space:]]#].*)?$</ind-def:pattern>
                  <ind-def:instance datatype="int">1</ind-def:instance>
            </ind-def:textfilecontent54_object>
            <ind-def:textfilecontent54_object id="oval:org.open-scap.f14:obj:20067" version="1">
                  <ind-def:path>/etc</ind-def:path>
                  <ind-def:filename>sudoers</ind-def:filename>
                  <ind-def:pattern operation="pattern match">^[[:space:]]*%wheel[[:space:]]+ALL=\(ALL\)[[:space:]]+ALL</ind-def:pattern>
                  <ind-def:instance datatype="int">1</ind-def:instance>
            </ind-def:textfilecontent54_object>
            <unix-def:password_object id="oval:org.open-scap.f14:obj:20068" version="1">
                  <unix-def:username operation="not equal">root</unix-def:username>
            </unix-def:password_object>
            <ind-def:textfilecontent54_object id="oval:org.open-scap.f14:obj:20069" version="1">
                  <ind-def:path>/etc</ind-def:path>
                  <ind-def:filename>shadow</ind-def:filename>
                  <ind-def:pattern operation="pattern match">^[^:]*::</ind-def:pattern>
                  <ind-def:instance datatype="int">1</ind-def:instance>
            </ind-def:textfilecontent54_object>
            <unix-def:password_object id="oval:org.open-scap.f14:obj:200695" version="1">
                  <unix-def:username operation="pattern match">.*</unix-def:username>
            </unix-def:password_object>
            <ind-def:textfilecontent54_object id="oval:org.open-scap.f14:obj:20070" version="1">
                  <ind-def:path>/etc</ind-def:path>
                  <ind-def:filename>passwd</ind-def:filename>
                  <ind-def:pattern operation="pattern match">^([^:]+):[^:]*:0:.*</ind-def:pattern>
                  <ind-def:instance datatype="int" operation="greater than or equal">1</ind-def:instance>
            </ind-def:textfilecontent54_object>
            <ind-def:textfilecontent54_object id="oval:org.open-scap.f14:obj:20071" version="1">
                  <ind-def:path>/etc</ind-def:path>
                  <ind-def:filename>login.defs</ind-def:filename>
                  <ind-def:pattern operation="pattern match">^PASS_MIN_LEN[[:space:]]*(.*)</ind-def:pattern>
                  <ind-def:instance datatype="int">1</ind-def:instance>
            </ind-def:textfilecontent54_object>
            <ind-def:textfilecontent54_object id="oval:org.open-scap.f14:obj:20072" version="1">
                  <ind-def:path>/etc</ind-def:path>
                  <ind-def:filename>login.defs</ind-def:filename>
                  <ind-def:pattern operation="pattern match">^PASS_MIN_DAYS[[:space:]]*(.*)</ind-def:pattern>
                  <ind-def:instance datatype="int">1</ind-def:instance>
            </ind-def:textfilecontent54_object>
            <ind-def:textfilecontent54_object id="oval:org.open-scap.f14:obj:20073" version="1">
                  <ind-def:path>/etc</ind-def:path>
                  <ind-def:filename>login.defs</ind-def:filename>
                  <ind-def:pattern operation="pattern match">^PASS_MAX_DAYS[[:space:]]*(.*)</ind-def:pattern>
                  <ind-def:instance datatype="int">1</ind-def:instance>
            </ind-def:textfilecontent54_object>
            <ind-def:textfilecontent54_object id="oval:org.open-scap.f14:obj:20074" version="1">
                  <ind-def:path>/etc</ind-def:path>
                  <ind-def:filename>login.defs</ind-def:filename>
                  <ind-def:pattern operation="pattern match">^PASS_WARN_AGE[[:space:]]*(.*)</ind-def:pattern>
                  <ind-def:instance datatype="int">1</ind-def:instance>
            </ind-def:textfilecontent54_object>
            <ind-def:textfilecontent54_object id="oval:org.open-scap.f14:obj:20075" version="1">
                  <ind-def:path>/etc</ind-def:path>
                  <ind-def:filename>passwd</ind-def:filename>
                  <ind-def:pattern operation="pattern match">^\+:</ind-def:pattern>
                  <ind-def:instance datatype="int">1</ind-def:instance>
            </ind-def:textfilecontent54_object>
            <ind-def:textfilecontent54_object id="oval:org.open-scap.f14:obj:20076" version="1">
                  <ind-def:path>/etc</ind-def:path>
                  <ind-def:filename>group</ind-def:filename>
                  <ind-def:pattern operation="pattern match">^\+:</ind-def:pattern>
                  <ind-def:instance datatype="int">1</ind-def:instance>
            </ind-def:textfilecontent54_object>
            <ind-def:textfilecontent54_object id="oval:org.open-scap.f14:obj:20077" version="1">
                  <ind-def:path>/etc</ind-def:path>
                  <ind-def:filename>passwd</ind-def:filename>
                  <ind-def:pattern operation="pattern match">^\+:</ind-def:pattern>
                  <ind-def:instance datatype="int">1</ind-def:instance>
            </ind-def:textfilecontent54_object>
            <ind-def:textfilecontent54_object id="oval:org.open-scap.f14:obj:200781" version="1">
                  <ind-def:path>/etc/pam.d</ind-def:path>
                  <ind-def:filename>system-auth</ind-def:filename>
                  <ind-def:pattern operation="pattern match">^[[:space:]]*password[[:space:]]+required[[:space:]]+pam_cracklib\.so[[:space:]]+try_first_pass[[:space:]]+.*retry=([[:digit:]]+)</ind-def:pattern>
                  <ind-def:instance operation="greater than or equal" datatype="int">1</ind-def:instance>
            </ind-def:textfilecontent54_object>
            <ind-def:textfilecontent54_object id="oval:org.open-scap.f14:obj:200782" version="1">
                  <ind-def:path>/etc/pam.d</ind-def:path>
                  <ind-def:filename>system-auth</ind-def:filename>
                  <ind-def:pattern operation="pattern match">^[[:space:]]*password[[:space:]]+required[[:space:]]+pam_cracklib\.so[[:space:]]+try_first_pass[[:space:]]+.*minlen=([1-9][[:digit:]]*)</ind-def:pattern>
                  <ind-def:instance operation="greater than or equal" datatype="int">1</ind-def:instance>
            </ind-def:textfilecontent54_object>
            <ind-def:textfilecontent54_object id="oval:org.open-scap.f14:obj:200783" version="1">
                  <ind-def:path>/etc/pam.d</ind-def:path>
                  <ind-def:filename>system-auth</ind-def:filename>
                  <ind-def:pattern operation="pattern match">^[[:space:]]*password[[:space:]]+required[[:space:]]+pam_cracklib\.so[[:space:]]+try_first_pass[[:space:]]+.*dcredit=([-]?[[:digit:]]+)</ind-def:pattern>
                  <ind-def:instance operation="greater than or equal" datatype="int">1</ind-def:instance>
            </ind-def:textfilecontent54_object>
            <ind-def:textfilecontent54_object id="oval:org.open-scap.f14:obj:200784" version="1">
                  <ind-def:path>/etc/pam.d</ind-def:path>
                  <ind-def:filename>system-auth</ind-def:filename>
                  <ind-def:pattern operation="pattern match">^[[:space:]]*password[[:space:]]+required[[:space:]]+pam_cracklib\.so[[:space:]]+try_first_pass[[:space:]]+.*ucredit=([-]?[[:digit:]]+)</ind-def:pattern>
                  <ind-def:instance operation="greater than or equal" datatype="int">1</ind-def:instance>
            </ind-def:textfilecontent54_object>
            <ind-def:textfilecontent54_object id="oval:org.open-scap.f14:obj:200785" version="1">
                  <ind-def:path>/etc/pam.d</ind-def:path>
                  <ind-def:filename>system-auth</ind-def:filename>
                  <ind-def:pattern operation="pattern match">^[[:space:]]*password[[:space:]]+required[[:space:]]+pam_cracklib\.so[[:space:]]+try_first_pass[[:space:]]+.*ocredit=([-]?[[:digit:]]+)</ind-def:pattern>
                  <ind-def:instance operation="greater than or equal" datatype="int">1</ind-def:instance>
            </ind-def:textfilecontent54_object>
            <ind-def:textfilecontent54_object id="oval:org.open-scap.f14:obj:200786" version="1">
                  <ind-def:path>/etc/pam.d</ind-def:path>
                  <ind-def:filename>system-auth</ind-def:filename>
                  <ind-def:pattern operation="pattern match">^[[:space:]]*password[[:space:]]+required[[:space:]]+pam_cracklib\.so[[:space:]]+try_first_pass[[:space:]]+.*lcredit=([-]?[[:digit:]]+)</ind-def:pattern>
                  <ind-def:instance operation="greater than or equal" datatype="int">1</ind-def:instance>
            </ind-def:textfilecontent54_object>
            <ind-def:textfilecontent54_object id="oval:org.open-scap.f14:obj:200787" version="1">
                  <ind-def:path>/etc/pam.d</ind-def:path>
                  <ind-def:filename>system-auth</ind-def:filename>
                  <ind-def:pattern operation="pattern match">^[[:space:]]*password[[:space:]]+required[[:space:]]+pam_cracklib\.so[[:space:]]+try_first_pass[[:space:]]+.*difok=([[:digit:]]+)</ind-def:pattern>
                  <ind-def:instance operation="greater than or equal" datatype="int">1</ind-def:instance>
            </ind-def:textfilecontent54_object>
            <ind-def:variable_object id="oval:org.open-scap.f14:obj:200800" version="1">
                  <ind-def:var_ref>oval:org.open-scap.f14:var:200803</ind-def:var_ref>
            </ind-def:variable_object>
            <ind-def:textfilecontent54_object id="oval:org.open-scap.f14:obj:2008011" version="1">
                  <ind-def:path>/etc/pam.d</ind-def:path>
                  <ind-def:filename>system-auth</ind-def:filename>
                  <ind-def:pattern operation="pattern match">^[[:space:]]*auth[[:space:]]+required[[:space:]]+pam_tally2\.so[[:space:]]+onerr\=fail[[:space:]]+.*deny=([[:digit:]]+)</ind-def:pattern>
                  <ind-def:instance operation="greater than or equal" datatype="int">1</ind-def:instance>
            </ind-def:textfilecontent54_object>
            <ind-def:textfilecontent54_object id="oval:org.open-scap.f14:obj:2008012" version="1">
                  <ind-def:path>/etc/pam.d</ind-def:path>
                  <ind-def:filename>system-auth</ind-def:filename>
                  <ind-def:pattern operation="pattern match">^[[:space:]]*auth[[:space:]]+required[[:space:]]+pam_tally2\.so[[:space:]]+onerr\=fail[[:space:]]+.*[^u][^n]lock_time=([[:digit:]]+)</ind-def:pattern>
                  <ind-def:instance operation="greater than or equal" datatype="int">1</ind-def:instance>
            </ind-def:textfilecontent54_object>
            <ind-def:textfilecontent54_object id="oval:org.open-scap.f14:obj:2008013" version="1">
                  <ind-def:path>/etc/pam.d</ind-def:path>
                  <ind-def:filename>system-auth</ind-def:filename>
                  <ind-def:pattern operation="pattern match">^[[:space:]]*auth[[:space:]]+required[[:space:]]+pam_tally2\.so[[:space:]]+onerr\=fail[[:space:]]+.*unlock_time=([[:digit:]]+)</ind-def:pattern>
                  <ind-def:instance operation="greater than or equal" datatype="int">1</ind-def:instance>
            </ind-def:textfilecontent54_object>
            <ind-def:textfilecontent54_object id="oval:org.open-scap.f14:obj:200803" version="1">
                  <ind-def:path>/etc/pam.d</ind-def:path>
                  <ind-def:filename>system-auth</ind-def:filename>
                  <ind-def:pattern operation="pattern match">^[[:space:]]*account[[:space:]]+required[[:space:]]+pam_tally2\.so$</ind-def:pattern>
                  <ind-def:instance operation="equals" datatype="int">1</ind-def:instance>
            </ind-def:textfilecontent54_object>
            <unix-def:file_object id="oval:org.open-scap.f14:obj:20081" version="1" comment="/usr/sbin/userhelper">
                  <unix-def:path>/usr/sbin</unix-def:path>
                  <unix-def:filename>userhelper</unix-def:filename>
            </unix-def:file_object>
            <ind-def:variable_object id="oval:org.open-scap.f14:obj:200831" version="1">
                  <ind-def:var_ref>oval:org.open-scap.f14:var:20083</ind-def:var_ref>
            </ind-def:variable_object>
            <ind-def:textfilecontent54_object id="oval:org.open-scap.f14:obj:200832" version="1">
                  <ind-def:path>/etc</ind-def:path>
                  <ind-def:filename>login.defs</ind-def:filename>
                  <ind-def:pattern operation="pattern match">^MD5_CRYPT_ENAB[[:space:]]+(yes|no)</ind-def:pattern>
                  <ind-def:instance datatype="int">1</ind-def:instance>
            </ind-def:textfilecontent54_object>
            <ind-def:textfilecontent54_object id="oval:org.open-scap.f14:obj:200833" version="1">
                  <ind-def:path>/etc</ind-def:path>
                  <ind-def:filename>login.defs</ind-def:filename>
                  <ind-def:pattern operation="pattern match">^ENCRYPT_METHOD[[:space:]]+(MD5|SHA256|SHA512)</ind-def:pattern>
                  <ind-def:instance datatype="int">1</ind-def:instance>
            </ind-def:textfilecontent54_object>
            <ind-def:textfilecontent54_object id="oval:org.open-scap.f14:obj:200834" version="1">
                  <ind-def:path>/etc/pam.d</ind-def:path>
                  <ind-def:filename>system-auth</ind-def:filename>
                  <ind-def:pattern operation="pattern match">^password[[:space:]]+sufficient[[:space:]]+pam_unix\.so[[:space:]]+(sha256|sha512)*|^password[[:space:]]+required[[:space:]]+pam_unix\.so[[:space:]]+(sha256|sha512)*</ind-def:pattern>
                  <ind-def:instance datatype="int">1</ind-def:instance>
            </ind-def:textfilecontent54_object>
            <ind-def:textfilecontent54_object id="oval:org.open-scap.f14:obj:200835" version="1">
                  <ind-def:path>/etc</ind-def:path>
                  <ind-def:filename>libuser.conf</ind-def:filename>
                  <ind-def:pattern operation="pattern match">^crypt_style[[:space:]]+\=[[:space:]]+(sha256|sha512)</ind-def:pattern>
                  <ind-def:instance datatype="int">1</ind-def:instance>
            </ind-def:textfilecontent54_object>
            <ind-def:variable_object id="oval:org.open-scap.f14:obj:200841" version="1">
                  <ind-def:var_ref>oval:org.open-scap.f14:var:20084</ind-def:var_ref>
            </ind-def:variable_object>
            <ind-def:textfilecontent54_object id="oval:org.open-scap.f14:obj:200842" version="1">
                  <ind-def:path>/etc/pam.d</ind-def:path>
                  <ind-def:filename>system-auth</ind-def:filename>
                  <ind-def:pattern operation="pattern match">^password[[:space:]]+sufficient[[:space:]]+pam_unix\.so[[:space:]]+.*remember=([[:digit:]]+)|^password[[:space:]]+required[[:space:]]+pam_unix\.so[[:space:]]+.*remember=([[:digit:]]+)</ind-def:pattern>
                  <ind-def:instance datatype="int">1</ind-def:instance>
            </ind-def:textfilecontent54_object>

            <ind-def:environmentvariable_object id="oval:org.open-scap.f14:obj:20085" version="1">
                  <ind-def:name>PATH</ind-def:name>
            </ind-def:environmentvariable_object>
            <unix-def:file_object id="oval:org.open-scap.f14:obj:2008551" version="1" comment="root's PATH filtered">
            	  <set set_operator="UNION" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5">
            	  	<object_reference>oval:org.open-scap.f14:obj:200855</object_reference>
            	  	<filter>oval:org.open-scap.f14:ste:2008551</filter>
            	  </set>
            </unix-def:file_object>
            <unix-def:file_object id="oval:org.open-scap.f14:obj:200855" version="1" comment="root's PATH">
                  <unix-def:path var_check="at least one" var_ref="oval:org.open-scap.f14:var:200855"/>
                  <unix-def:filename xsi:nil="true"/>
            </unix-def:file_object>

            <unix-def:file_object id="oval:org.open-scap.f14:obj:20086" version="1" comment="/home/*">
                  <unix-def:behaviors recurse_direction="down" recurse="directories" max_depth="1" />
                  <unix-def:path>/home</unix-def:path>
                  <unix-def:filename xsi:nil="true"/>
            </unix-def:file_object>

            <ind-def:textfilecontent54_object id="oval:org.open-scap.f14:obj:20087" version="1">
                  <ind-def:path>/etc</ind-def:path>
                  <ind-def:filename>bashrc</ind-def:filename>
                  <ind-def:pattern operation="pattern match">^[[:space:]]*umask[[:space:]]+([[:alnum:]]*)</ind-def:pattern>
                  <ind-def:instance datatype="int">1</ind-def:instance>
            </ind-def:textfilecontent54_object>
            <ind-def:textfilecontent54_object id="oval:org.open-scap.f14:obj:20088" version="1">
                  <ind-def:path>/etc</ind-def:path>
                  <ind-def:filename>csh.cshrc</ind-def:filename>
                  <ind-def:pattern operation="pattern match">^[[:space:]]*umask[[:space:]]+([[:alnum:]]*)</ind-def:pattern>
                  <ind-def:instance datatype="int">1</ind-def:instance>
            </ind-def:textfilecontent54_object>
            <unix-def:file_object id="oval:org.open-scap.f14:obj:20092" version="1" comment="/boot/grub/grub.conf">
                  <unix-def:path>/boot/grub</unix-def:path>
                  <unix-def:filename>grub.conf</unix-def:filename>
            </unix-def:file_object>
            <unix-def:file_object id="oval:org.open-scap.f14:obj:20094" version="1" comment="/boot/grub/grub.conf">
                  <unix-def:path>/boot/grub</unix-def:path>
                  <unix-def:filename>grub.conf</unix-def:filename>
            </unix-def:file_object>
            <ind-def:textfilecontent54_object id="oval:org.open-scap.f14:obj:20095" version="1">
                  <ind-def:path>/boot/grub</ind-def:path>
                  <ind-def:filename>grub.conf</ind-def:filename>
                  <ind-def:pattern operation="pattern match">password[[:space:]]+--md5[[:space:]]+.*</ind-def:pattern>
                  <ind-def:instance datatype="int">1</ind-def:instance>
            </ind-def:textfilecontent54_object>
            <unix-def:file_object id="oval:org.open-scap.f14:obj:20093" version="1" comment="/etc/grub.conf">
                  <unix-def:path>/etc</unix-def:path>
                  <unix-def:filename>grub.conf</unix-def:filename>
            </unix-def:file_object>
            <ind-def:textfilecontent54_object id="oval:org.open-scap.f14:obj:73" version="1">
                  <ind-def:path>/etc</ind-def:path>
                  <ind-def:filename>inittab</ind-def:filename>
                  <ind-def:pattern operation="pattern match">~~:S:wait:/sbin/sulogin</ind-def:pattern>
                  <ind-def:instance datatype="int">1</ind-def:instance>
            </ind-def:textfilecontent54_object>
            <ind-def:textfilecontent54_object id="oval:org.open-scap.f14:obj:20096" version="1">
                  <ind-def:path>/etc/sysconfig</ind-def:path>
                  <ind-def:filename>init</ind-def:filename>
                  <ind-def:pattern operation="pattern match">PROMPT[\s]*=[\s]*([^#]*)</ind-def:pattern>
                  <ind-def:instance datatype="int">1</ind-def:instance>
            </ind-def:textfilecontent54_object>
            <ind-def:textfilecontent54_object id="oval:org.open-scap.f14:obj:20098" version="1">
                  <ind-def:path>/etc/profile.d</ind-def:path>
                  <ind-def:filename>autologout.csh</ind-def:filename>
                  <ind-def:pattern operation="pattern match">^[\s]*set[\s]+-r[\s]+autologout[\s]+([^#]*)</ind-def:pattern>
                  <ind-def:instance datatype="int">1</ind-def:instance>
            </ind-def:textfilecontent54_object>
            <ind-def:xmlfilecontent_object id="oval:org.open-scap.f14:obj:20100" version="1">
                  <ind-def:path>/etc/gconf/gconf.xml.defaults</ind-def:path>
                  <ind-def:filename>%gconf-tree.xml</ind-def:filename>
                  <ind-def:xpath>/gconf/dir[@name='schemas']/dir[@name='apps']/dir[@name='gnome-screensaver']/entry[@name='idle_delay']/local_schema[1]/default[1]/@value</ind-def:xpath>
            </ind-def:xmlfilecontent_object>
            <ind-def:xmlfilecontent_object id="oval:org.open-scap.f14:obj:201005" version="1">
                  <ind-def:path>/etc/gconf/gconf.xml.defaults</ind-def:path>
                  <ind-def:filename>%gconf-tree.xml</ind-def:filename>
                  <ind-def:xpath>/gconf/dir[@name='schemas']/dir[@name='apps']/dir[@name='gnome-screensaver']/entry[@name='idle_activation_enabled']/local_schema[1]/default[1]/@value</ind-def:xpath>
            </ind-def:xmlfilecontent_object>
            <ind-def:xmlfilecontent_object id="oval:org.open-scap.f14:obj:201006" version="1">
                  <ind-def:path>/etc/gconf/gconf.xml.defaults</ind-def:path>
                  <ind-def:filename>%gconf-tree.xml</ind-def:filename>
                  <ind-def:xpath>/gconf/dir[@name='schemas']/dir[@name='apps']/dir[@name='gnome-screensaver']/entry[@name='lock_enabled']/local_schema[1]/default[1]/@value</ind-def:xpath>
            </ind-def:xmlfilecontent_object>
            <ind-def:xmlfilecontent_object id="oval:org.open-scap.f14:obj:201007" version="1">
                  <ind-def:path>/etc/gconf/gconf.xml.defaults</ind-def:path>
                  <ind-def:filename>%gconf-tree.xml</ind-def:filename>
                  <ind-def:xpath>/gconf/dir[@name='schemas']/dir[@name='apps']/dir[@name='gnome-screensaver']/entry[@name='mode']/local_schema[1]/default[1]/stringvalue[1]/text()</ind-def:xpath>
            </ind-def:xmlfilecontent_object>
            <lin-def:rpminfo_object id="oval:org.open-scap.f14:obj:20101" version="1">
                  <lin-def:name>vlock</lin-def:name>
            </lin-def:rpminfo_object>
            <ind-def:textfilecontent54_object id="oval:org.open-scap.f14:obj:20102" version="1">
                  <ind-def:path>/etc</ind-def:path>
                  <ind-def:filename>issue</ind-def:filename>
                  <ind-def:pattern operation="pattern match">(.*)</ind-def:pattern>
                  <ind-def:instance datatype="int">1</ind-def:instance>
            </ind-def:textfilecontent54_object>
            <ind-def:xmlfilecontent_object id="oval:org.open-scap.f14:obj:20103" version="1">
                  <ind-def:path>/usr/share/gdm/themes/RHEL</ind-def:path>
                  <ind-def:filename>RHEL.xml</ind-def:filename>
                  <ind-def:xpath>/greeter/item[@id='banner']/box[1]/item[@id='DOD_Banner']/text[1]</ind-def:xpath>
            </ind-def:xmlfilecontent_object>
            <ind-def:textfilecontent54_object id="oval:org.open-scap.f14:obj:20104" version="1">
                  <ind-def:path>/etc</ind-def:path>
                  <ind-def:filename>grub.conf</ind-def:filename>
                  <ind-def:pattern operation="pattern match">[[:space:]]selinux=([^[:space:]]*)</ind-def:pattern>
                  <ind-def:instance datatype="int">1</ind-def:instance>
            </ind-def:textfilecontent54_object>
            <ind-def:textfilecontent54_object id="oval:org.open-scap.f14:obj:20105" version="1">
                  <ind-def:path>/etc</ind-def:path>
                  <ind-def:filename>grub.conf</ind-def:filename>
                  <ind-def:pattern operation="pattern match">[[:space:]]enforcing=([^[:space:]]*)</ind-def:pattern>
                  <ind-def:instance datatype="int">1</ind-def:instance>
            </ind-def:textfilecontent54_object>
            <ind-def:textfilecontent54_object id="oval:org.open-scap.f14:obj:20106" version="1">
                  <ind-def:path>/etc/selinux</ind-def:path>
                  <ind-def:filename>config</ind-def:filename>
                  <ind-def:pattern operation="pattern match">^[[:space:]]*SELINUX[[:space:]]*=[[:space:]]*([[:alnum:]]*)</ind-def:pattern>
                  <ind-def:instance datatype="int">1</ind-def:instance>
            </ind-def:textfilecontent54_object>
            <ind-def:textfilecontent54_object id="oval:org.open-scap.f14:obj:20107" version="1">
                  <ind-def:path>/etc/selinux</ind-def:path>
                  <ind-def:filename>config</ind-def:filename>
                  <ind-def:pattern operation="pattern match">^[[:space:]]*SELINUXTYPE[[:space:]]*=[[:space:]]*([[:alnum:]]*)</ind-def:pattern>
                  <ind-def:instance datatype="int">1</ind-def:instance>
            </ind-def:textfilecontent54_object>
            <unix-def:runlevel_object id="oval:org.open-scap.f14:obj:20109" version="1">
                  <unix-def:service_name>setroubleshoot</unix-def:service_name>
                  <unix-def:runlevel operation="pattern match">.*</unix-def:runlevel>
            </unix-def:runlevel_object>
            <lin-def:rpminfo_object id="oval:org.open-scap.f14:obj:20108" version="1">
                  <lin-def:name>setroubleshoot</lin-def:name>
            </lin-def:rpminfo_object>
            <unix-def:runlevel_object id="oval:org.open-scap.f14:obj:20110" version="1">
                  <unix-def:service_name>mcstrans</unix-def:service_name>
                  <unix-def:runlevel operation="pattern match">.*</unix-def:runlevel>
            </unix-def:runlevel_object>
            <unix-def:runlevel_object id="oval:org.open-scap.f14:obj:20111" version="1">
                  <unix-def:service_name>restorecond</unix-def:service_name>
                  <unix-def:runlevel operation="pattern match">.*</unix-def:runlevel>
            </unix-def:runlevel_object>

	    <!-- EDIT -->
            <ind-def:textfilecontent54_object id="oval:org.open-scap.f14:obj:201120" version="1">
                  <ind-def:path>/proc/sys/net/ipv4/conf/default</ind-def:path>
                  <ind-def:filename>send_redirects</ind-def:filename>
                  <ind-def:pattern operation="pattern match">^([01])$</ind-def:pattern>
                  <ind-def:instance datatype="int">1</ind-def:instance>
            </ind-def:textfilecontent54_object>
            <ind-def:textfilecontent54_object id="oval:org.open-scap.f14:obj:201121" version="1">
                  <ind-def:path>/etc</ind-def:path>
                  <ind-def:filename>sysctl.conf</ind-def:filename>
                  <ind-def:pattern operation="pattern match">^[[:space:]]*net\.ipv4\.conf\.default\.send_redirects[[:space:]]*=[[:space:]]*([01])[[:space:]]*$</ind-def:pattern>
                  <ind-def:instance datatype="int">1</ind-def:instance>
            </ind-def:textfilecontent54_object>


            <ind-def:textfilecontent54_object id="oval:org.open-scap.f14:obj:201130" version="1">
                  <ind-def:path>/proc/sys/net/ipv4/conf/all</ind-def:path>
                  <ind-def:filename>send_redirects</ind-def:filename>
                  <ind-def:pattern operation="pattern match">^([01])$</ind-def:pattern>
                  <ind-def:instance datatype="int">1</ind-def:instance>
            </ind-def:textfilecontent54_object>
            <ind-def:textfilecontent54_object id="oval:org.open-scap.f14:obj:201131" version="1">
                  <ind-def:path>/etc</ind-def:path>
                  <ind-def:filename>sysctl.conf</ind-def:filename>
                  <ind-def:pattern operation="pattern match">^[[:space:]]*net\.ipv4\.conf\.all\.send_redirects[[:space:]]*=[[:space:]]*([01])[[:space:]]*$</ind-def:pattern>
                  <ind-def:instance datatype="int">1</ind-def:instance>
            </ind-def:textfilecontent54_object>
	    <!-- ^^^ ok ^^^ -->


            <ind-def:textfilecontent54_object id="oval:org.open-scap.f14:obj:201140" version="1">
                  <ind-def:path>/proc/sys/net/ipv4</ind-def:path>
                  <ind-def:filename>ip_forward</ind-def:filename>
                  <ind-def:pattern operation="pattern match">^([01])$</ind-def:pattern>
                  <ind-def:instance datatype="int">1</ind-def:instance>
            </ind-def:textfilecontent54_object>
            <ind-def:textfilecontent54_object id="oval:org.open-scap.f14:obj:201141" version="1">
                  <ind-def:path>/etc</ind-def:path>
                  <ind-def:filename>sysctl.conf</ind-def:filename>
                  <ind-def:pattern operation="pattern match">^[[:space:]]*net\.ipv4\.ip_forward[[:space:]]*=[[:space:]]*([01])[[:space:]]*$</ind-def:pattern>
                  <ind-def:instance datatype="int">1</ind-def:instance>
            </ind-def:textfilecontent54_object>


            <ind-def:textfilecontent54_object id="oval:org.open-scap.f14:obj:201150" version="1">
                  <ind-def:path>/proc/sys/net/ipv4/conf/all</ind-def:path>
                  <ind-def:filename>accept_source_route</ind-def:filename>
                  <ind-def:pattern operation="pattern match">^([01])$</ind-def:pattern>
                  <ind-def:instance datatype="int">1</ind-def:instance>
            </ind-def:textfilecontent54_object>
            <ind-def:textfilecontent54_object id="oval:org.open-scap.f14:obj:201151" version="1">
                  <ind-def:path>/etc</ind-def:path>
                  <ind-def:filename>sysctl.conf</ind-def:filename>
                  <ind-def:pattern operation="pattern match">^[[:space:]]*net\.ipv4\.conf\.all\.accept_source_route[[:space:]]*=[[:space:]]*([01])[[:space:]]*$</ind-def:pattern>
                  <ind-def:instance datatype="int">1</ind-def:instance>
            </ind-def:textfilecontent54_object>


            <ind-def:textfilecontent54_object id="oval:org.open-scap.f14:obj:201160" version="1">
                  <ind-def:path>/proc/sys/net/ipv4/conf/all</ind-def:path>
                  <ind-def:filename>accept_redirects</ind-def:filename>
                  <ind-def:pattern operation="pattern match">^([01])$</ind-def:pattern>
                  <ind-def:instance datatype="int">1</ind-def:instance>
            </ind-def:textfilecontent54_object>
            <ind-def:textfilecontent54_object id="oval:org.open-scap.f14:obj:201161" version="1">
                  <ind-def:path>/etc</ind-def:path>
                  <ind-def:filename>sysctl.conf</ind-def:filename>
                  <ind-def:pattern operation="pattern match">^[[:space:]]*net\.ipv4\.conf\.all\.accept_redirects[[:space:]]*=[[:space:]]*([01])[[:space:]]*$</ind-def:pattern>
                  <ind-def:instance datatype="int">1</ind-def:instance>
            </ind-def:textfilecontent54_object>


            <ind-def:textfilecontent54_object id="oval:org.open-scap.f14:obj:201170" version="1">
                  <ind-def:path>/proc/sys/net/ipv4/conf/all</ind-def:path>
                  <ind-def:filename>secure_redirects</ind-def:filename>
                  <ind-def:pattern operation="pattern match">^([01])$</ind-def:pattern>
                  <ind-def:instance datatype="int">1</ind-def:instance>
            </ind-def:textfilecontent54_object>
            <ind-def:textfilecontent54_object id="oval:org.open-scap.f14:obj:201171" version="1">
                  <ind-def:path>/etc</ind-def:path>
                  <ind-def:filename>sysctl.conf</ind-def:filename>
                  <ind-def:pattern operation="pattern match">^[[:space:]]*net\.ipv4\.conf\.all\.secure_redirects[[:space:]]*=[[:space:]]*([01])[[:space:]]*$</ind-def:pattern>
                  <ind-def:instance datatype="int">1</ind-def:instance>
            </ind-def:textfilecontent54_object>


            <ind-def:textfilecontent54_object id="oval:org.open-scap.f14:obj:201180" version="1">
                  <ind-def:path>/proc/sys/net/ipv4/conf/all</ind-def:path>
                  <ind-def:filename>log_martians</ind-def:filename>
                  <ind-def:pattern operation="pattern match">^([01])$</ind-def:pattern>
                  <ind-def:instance datatype="int">1</ind-def:instance>
            </ind-def:textfilecontent54_object>
            <ind-def:textfilecontent54_object id="oval:org.open-scap.f14:obj:201181" version="1">
                  <ind-def:path>/etc</ind-def:path>
                  <ind-def:filename>sysctl.conf</ind-def:filename>
                  <ind-def:pattern operation="pattern match">^[[:space:]]*net\.ipv4\.conf\.all\.log_martians[[:space:]]*=[[:space:]]*([01])[[:space:]]*$</ind-def:pattern>
                  <ind-def:instance datatype="int">1</ind-def:instance>
            </ind-def:textfilecontent54_object>


            <ind-def:textfilecontent54_object id="oval:org.open-scap.f14:obj:201190" version="1">
                  <ind-def:path>/proc/sys/net/ipv4/conf/default</ind-def:path>
                  <ind-def:filename>accept_source_route</ind-def:filename>
                  <ind-def:pattern operation="pattern match">^([01])$</ind-def:pattern>
                  <ind-def:instance datatype="int">1</ind-def:instance>
            </ind-def:textfilecontent54_object>
            <ind-def:textfilecontent54_object id="oval:org.open-scap.f14:obj:201191" version="1">
                  <ind-def:path>/etc</ind-def:path>
                  <ind-def:filename>sysctl.conf</ind-def:filename>
                  <ind-def:pattern operation="pattern match">^[[:space:]]*net\.ipv4\.conf\.default\.accept_source_route[[:space:]]*=[[:space:]]*([01])[[:space:]]*$</ind-def:pattern>
                  <ind-def:instance datatype="int">1</ind-def:instance>
            </ind-def:textfilecontent54_object>


            <ind-def:textfilecontent54_object id="oval:org.open-scap.f14:obj:201200" version="1">
                  <ind-def:path>/proc/sys/net/ipv4/conf/default</ind-def:path>
                  <ind-def:filename>accept_redirects</ind-def:filename>
                  <ind-def:pattern operation="pattern match">^([01])$</ind-def:pattern>
                  <ind-def:instance datatype="int">1</ind-def:instance>
            </ind-def:textfilecontent54_object>
            <ind-def:textfilecontent54_object id="oval:org.open-scap.f14:obj:201201" version="1">
                  <ind-def:path>/etc</ind-def:path>
                  <ind-def:filename>sysctl.conf</ind-def:filename>
                  <ind-def:pattern operation="pattern match">^[[:space:]]*net\.ipv4\.conf\.default\.accept_redirects[[:space:]]*=[[:space:]]*([01])[[:space:]]*$</ind-def:pattern>
                  <ind-def:instance datatype="int">1</ind-def:instance>
            </ind-def:textfilecontent54_object>


            <ind-def:textfilecontent54_object id="oval:org.open-scap.f14:obj:201210" version="1">
                  <ind-def:path>/proc/sys/net/ipv4/conf/default</ind-def:path>
                  <ind-def:filename>secure_redirects</ind-def:filename>
                  <ind-def:pattern operation="pattern match">^([01])$</ind-def:pattern>
                  <ind-def:instance datatype="int">1</ind-def:instance>
            </ind-def:textfilecontent54_object>
            <ind-def:textfilecontent54_object id="oval:org.open-scap.f14:obj:201211" version="1">
                  <ind-def:path>/etc</ind-def:path>
                  <ind-def:filename>sysctl.conf</ind-def:filename>
                  <ind-def:pattern operation="pattern match">^[[:space:]]*net\.ipv4\.conf\.default\.secure_redirects[[:space:]]*=[[:space:]]*([01])[[:space:]]*$</ind-def:pattern>
                  <ind-def:instance datatype="int">1</ind-def:instance>
            </ind-def:textfilecontent54_object>


            <ind-def:textfilecontent54_object id="oval:org.open-scap.f14:obj:201220" version="1">
                  <ind-def:path>/proc/sys/net/ipv4</ind-def:path>
                  <ind-def:filename>icmp_echo_ignore_broadcasts</ind-def:filename>
                  <ind-def:pattern operation="pattern match">^([01])$</ind-def:pattern>
                  <ind-def:instance datatype="int">1</ind-def:instance>
            </ind-def:textfilecontent54_object>
            <ind-def:textfilecontent54_object id="oval:org.open-scap.f14:obj:201221" version="1">
                  <ind-def:path>/etc</ind-def:path>
                  <ind-def:filename>sysctl.conf</ind-def:filename>
                  <ind-def:pattern operation="pattern match">^[[:space:]]*net\.ipv4\.icmp_echo_ignore_broadcasts[[:space:]]*=[[:space:]]*([01])[[:space:]]*$</ind-def:pattern>
                  <ind-def:instance datatype="int">1</ind-def:instance>
            </ind-def:textfilecontent54_object>


            <ind-def:textfilecontent54_object id="oval:org.open-scap.f14:obj:201230" version="1">
                  <ind-def:path>/proc/sys/net/ipv4</ind-def:path>
                  <ind-def:filename>icmp_ignore_bogus_error_responses</ind-def:filename>
                  <ind-def:pattern operation="pattern match">^([01])$</ind-def:pattern>
                  <ind-def:instance datatype="int">1</ind-def:instance>
            </ind-def:textfilecontent54_object>
            <ind-def:textfilecontent54_object id="oval:org.open-scap.f14:obj:201231" version="1">
                  <ind-def:path>/etc</ind-def:path>
                  <ind-def:filename>sysctl.conf</ind-def:filename>
                  <ind-def:pattern operation="pattern match">^[[:space:]]*net\.ipv4\.icmp_ignore_bogus_error_responses[[:space:]]*=[[:space:]]*([01])[[:space:]]*$</ind-def:pattern>
                  <ind-def:instance datatype="int">1</ind-def:instance>
            </ind-def:textfilecontent54_object>


            <ind-def:textfilecontent54_object id="oval:org.open-scap.f14:obj:201240" version="1">
                  <ind-def:path>/proc/sys/net/ipv4</ind-def:path>
                  <ind-def:filename>tcp_syncookies</ind-def:filename>
                  <ind-def:pattern operation="pattern match">^([01])$</ind-def:pattern>
                  <ind-def:instance datatype="int">1</ind-def:instance>
            </ind-def:textfilecontent54_object>
            <ind-def:textfilecontent54_object id="oval:org.open-scap.f14:obj:201241" version="1">
                  <ind-def:path>/etc</ind-def:path>
                  <ind-def:filename>sysctl.conf</ind-def:filename>
                  <ind-def:pattern operation="pattern match">^[[:space:]]*net\.ipv4\.tcp_syncookies[[:space:]]*=[[:space:]]*([01])[[:space:]]*$</ind-def:pattern>
                  <ind-def:instance datatype="int">1</ind-def:instance>
            </ind-def:textfilecontent54_object>


            <ind-def:textfilecontent54_object id="oval:org.open-scap.f14:obj:201250" version="1">
                  <ind-def:path>/proc/sys/net/ipv4/conf/all</ind-def:path>
                  <ind-def:filename>rp_filter</ind-def:filename>
                  <ind-def:pattern operation="pattern match">^([01])$</ind-def:pattern>
                  <ind-def:instance datatype="int">1</ind-def:instance>
            </ind-def:textfilecontent54_object>
            <ind-def:textfilecontent54_object id="oval:org.open-scap.f14:obj:201251" version="1">
                  <ind-def:path>/etc</ind-def:path>
                  <ind-def:filename>sysctl.conf</ind-def:filename>
                  <ind-def:pattern operation="pattern match">^[[:space:]]*net\.ipv4\.conf\.all\.rp_filter[[:space:]]*=[[:space:]]*([01])[[:space:]]*$</ind-def:pattern>
                  <ind-def:instance datatype="int">1</ind-def:instance>
            </ind-def:textfilecontent54_object>


            <ind-def:textfilecontent54_object id="oval:org.open-scap.f14:obj:201260" version="1">
                  <ind-def:path>/proc/sys/net/ipv4/conf/default</ind-def:path>
                  <ind-def:filename>rp_filter</ind-def:filename>
                  <ind-def:pattern operation="pattern match">^([01])$</ind-def:pattern>
                  <ind-def:instance datatype="int">1</ind-def:instance>
            </ind-def:textfilecontent54_object>
            <ind-def:textfilecontent54_object id="oval:org.open-scap.f14:obj:201261" version="1">
                  <ind-def:path>/etc</ind-def:path>
                  <ind-def:filename>sysctl.conf</ind-def:filename>
                  <ind-def:pattern operation="pattern match">^[[:space:]]*net\.ipv4\.conf\.default\.rp_filter[[:space:]]*=[[:space:]]*([01])[[:space:]]*$</ind-def:pattern>
                  <ind-def:instance datatype="int">1</ind-def:instance>
            </ind-def:textfilecontent54_object>

	    <!-- ^^^ ok ^^^ -->



            <ind-def:textfilecontent54_object id="oval:org.open-scap.f14:obj:20128" version="1">
                  <ind-def:path>/proc/net</ind-def:path>
                  <ind-def:filename>wireless</ind-def:filename>
                  <ind-def:pattern operation="pattern match">^[[:space:]]*([^[:space:]]*):.*</ind-def:pattern>
                  <ind-def:instance operation="greater than or equal" datatype="int">1</ind-def:instance>
            </ind-def:textfilecontent54_object>

            <unix-def:file_object id="oval:org.open-scap.f14:obj:20129" version="1" comment="/lib/modules/*/kernel/drivers/net/wireless">
                  <unix-def:path operation="pattern match">/lib/modules/.*/kernel/drivers/net/wireless$</unix-def:path>
		  <unix-def:filename xsi:nil="true"/>
            </unix-def:file_object>

            <ind-def:textfilecontent54_object id="oval:org.open-scap.f14:obj:20130" version="1">
                  <ind-def:path>/etc/modprobe.d</ind-def:path>
                  <ind-def:filename>dist.conf</ind-def:filename>
                  <ind-def:pattern operation="pattern match">^[[:space:]]*alias[[:space:]]+net-pf-10[[:space:]]+off[[:space:]]*(#.*)?$</ind-def:pattern>
                  <ind-def:instance datatype="int">1</ind-def:instance>
            </ind-def:textfilecontent54_object>

            <ind-def:textfilecontent54_object id="oval:org.open-scap.f14:obj:20132" version="1">
                  <ind-def:path>/etc/sysconfig</ind-def:path>
                  <ind-def:filename>network</ind-def:filename>
                  <ind-def:pattern operation="pattern match">^[[:space:]]*NETWORKING_IPV6[[:space:]]*=[[:space:]]*([^#]*).*$</ind-def:pattern>
                  <ind-def:instance datatype="int">1</ind-def:instance>
            </ind-def:textfilecontent54_object>

            <ind-def:textfilecontent54_object id="oval:org.open-scap.f14:obj:20133" version="1">
                  <ind-def:path>/etc/sysconfig/network-scripts</ind-def:path>
                  <ind-def:filename operation="pattern match">ifcfg-.*</ind-def:filename>
                  <ind-def:pattern operation="pattern match">^[[:space:]]*NETWORKING_IPV6[[:space:]]*=[[:space:]]*([^#]*).*$</ind-def:pattern>
                  <ind-def:instance datatype="int">1</ind-def:instance>
            </ind-def:textfilecontent54_object>

            <ind-def:textfilecontent54_object id="oval:org.open-scap.f14:obj:20131" version="1">
                  <ind-def:path>/etc/sysconfig</ind-def:path>
                  <ind-def:filename>network</ind-def:filename>
                  <ind-def:pattern operation="pattern match">^[[:space:]]*IPV6INIT[[:space:]]*=[[:space:]]*([^#]*).*$</ind-def:pattern>
                  <ind-def:instance datatype="int">1</ind-def:instance>
            </ind-def:textfilecontent54_object>

            <ind-def:textfilecontent54_object id="oval:org.open-scap.f14:obj:20134" version="1">
                  <ind-def:path>/etc/sysconfig</ind-def:path>
                  <ind-def:filename>network</ind-def:filename>
                  <ind-def:pattern operation="pattern match">^[[:space:]]*IPV6INIT[[:space:]]*=[[:space:]]*([^#]*).*$</ind-def:pattern>
                  <ind-def:instance datatype="int">1</ind-def:instance>
            </ind-def:textfilecontent54_object>

	    <!-- sysctl -->

            <ind-def:textfilecontent54_object id="oval:org.open-scap.f14:obj:201400" version="1">
                  <ind-def:path>/proc/sys/net/ipv6/conf/default</ind-def:path>
                  <ind-def:filename>accept_ra_rtr_pref</ind-def:filename>
                  <ind-def:pattern operation="pattern match">^([01])$</ind-def:pattern>
                  <ind-def:instance datatype="int">1</ind-def:instance>
            </ind-def:textfilecontent54_object>
            <ind-def:textfilecontent54_object id="oval:org.open-scap.f14:obj:201401" version="1">
                  <ind-def:path>/etc</ind-def:path>
                  <ind-def:filename>sysctl.conf</ind-def:filename>
                  <ind-def:pattern operation="pattern match">^[[:space:]]*net\.ipv6\.conf\.default\.accept_ra_rtr_pref[[:space:]]*=[[:space:]]*([01])[[:space:]]*$</ind-def:pattern>
                  <ind-def:instance datatype="int">1</ind-def:instance>
            </ind-def:textfilecontent54_object>


            <ind-def:textfilecontent54_object id="oval:org.open-scap.f14:obj:201450" version="1">
                  <ind-def:path>/proc/sys/net/ipv6/conf/default</ind-def:path>
                  <ind-def:filename>max_addresses</ind-def:filename>
                  <ind-def:pattern operation="pattern match">^([0-9]+)$</ind-def:pattern>
                  <ind-def:instance datatype="int">1</ind-def:instance>
            </ind-def:textfilecontent54_object>
            <ind-def:textfilecontent54_object id="oval:org.open-scap.f14:obj:201451" version="1">
                  <ind-def:path>/etc</ind-def:path>
                  <ind-def:filename>sysctl.conf</ind-def:filename>
                  <ind-def:pattern operation="pattern match">^[[:space:]]*net\.ipv6\.conf\.default\.max_addresses[[:space:]]*=[[:space:]]*([0-9]+)[[:space:]]*$</ind-def:pattern>
                  <ind-def:instance datatype="int">1</ind-def:instance>
            </ind-def:textfilecontent54_object>


            <ind-def:textfilecontent54_object id="oval:org.open-scap.f14:obj:201390" version="1">
                  <ind-def:path>/proc/sys/net/ipv6/conf/default</ind-def:path>
                  <ind-def:filename>router_solicitations</ind-def:filename>
                  <ind-def:pattern operation="pattern match">^([0-9]+)$</ind-def:pattern>
                  <ind-def:instance datatype="int">1</ind-def:instance>
            </ind-def:textfilecontent54_object>
            <ind-def:textfilecontent54_object id="oval:org.open-scap.f14:obj:201391" version="1">
                  <ind-def:path>/etc</ind-def:path>
                  <ind-def:filename>sysctl.conf</ind-def:filename>
                  <ind-def:pattern operation="pattern match">^[[:space:]]*net\.ipv6\.conf\.default\.router_solicitations[[:space:]]*=[[:space:]]*([0-9]+)[[:space:]]*$</ind-def:pattern>
                  <ind-def:instance datatype="int">1</ind-def:instance>
            </ind-def:textfilecontent54_object>


            <ind-def:textfilecontent54_object id="oval:org.open-scap.f14:obj:201440" version="1">
                  <ind-def:path>/proc/sys/net/ipv6/conf/default</ind-def:path>
                  <ind-def:filename>dad_transmits</ind-def:filename>
                  <ind-def:pattern operation="pattern match">^([0-9]+)$</ind-def:pattern>
                  <ind-def:instance datatype="int">1</ind-def:instance>
            </ind-def:textfilecontent54_object>
            <ind-def:textfilecontent54_object id="oval:org.open-scap.f14:obj:201441" version="1">
                  <ind-def:path>/etc</ind-def:path>
                  <ind-def:filename>sysctl.conf</ind-def:filename>
                  <ind-def:pattern operation="pattern match">^[[:space:]]*net\.ipv6\.conf\.default\.dad_transmits[[:space:]]*=[[:space:]]*([0-9]+)[[:space:]]*$</ind-def:pattern>
                  <ind-def:instance datatype="int">1</ind-def:instance>
            </ind-def:textfilecontent54_object>


            <ind-def:textfilecontent54_object id="oval:org.open-scap.f14:obj:201430" version="1">
                  <ind-def:path>/proc/sys/net/ipv6/conf/default</ind-def:path>
                  <ind-def:filename>autoconf</ind-def:filename>
                  <ind-def:pattern operation="pattern match">^([01])$</ind-def:pattern>
                  <ind-def:instance datatype="int">1</ind-def:instance>
            </ind-def:textfilecontent54_object>
            <ind-def:textfilecontent54_object id="oval:org.open-scap.f14:obj:201431" version="1">
                  <ind-def:path>/etc</ind-def:path>
                  <ind-def:filename>sysctl.conf</ind-def:filename>
                  <ind-def:pattern operation="pattern match">^[[:space:]]*net\.ipv6\.conf\.default\.autoconf[[:space:]]*=[[:space:]]*([01])[[:space:]]*$</ind-def:pattern>
                  <ind-def:instance datatype="int">1</ind-def:instance>
            </ind-def:textfilecontent54_object>


            <ind-def:textfilecontent54_object id="oval:org.open-scap.f14:obj:201410" version="1">
                  <ind-def:path>/proc/sys/net/ipv6/conf/default</ind-def:path>
                  <ind-def:filename>accept_ra_pinfo</ind-def:filename>
                  <ind-def:pattern operation="pattern match">^([01])$</ind-def:pattern>
                  <ind-def:instance datatype="int">1</ind-def:instance>
            </ind-def:textfilecontent54_object>
            <ind-def:textfilecontent54_object id="oval:org.open-scap.f14:obj:201411" version="1">
                  <ind-def:path>/etc</ind-def:path>
                  <ind-def:filename>sysctl.conf</ind-def:filename>
                  <ind-def:pattern operation="pattern match">^[[:space:]]*net\.ipv6\.conf\.default\.accept_ra_pinfo[[:space:]]*=[[:space:]]*([01])[[:space:]]*$</ind-def:pattern>
                  <ind-def:instance datatype="int">1</ind-def:instance>
            </ind-def:textfilecontent54_object>


            <ind-def:textfilecontent54_object id="oval:org.open-scap.f14:obj:201420" version="1">
                  <ind-def:path>/proc/sys/net/ipv6/conf/default</ind-def:path>
                  <ind-def:filename>accept_ra_defrtr</ind-def:filename>
                  <ind-def:pattern operation="pattern match">^([01])$</ind-def:pattern>
                  <ind-def:instance datatype="int">1</ind-def:instance>
            </ind-def:textfilecontent54_object>
            <ind-def:textfilecontent54_object id="oval:org.open-scap.f14:obj:201421" version="1">
                  <ind-def:path>/etc</ind-def:path>
                  <ind-def:filename>sysctl.conf</ind-def:filename>
                  <ind-def:pattern operation="pattern match">^[[:space:]]*net\.ipv6\.conf\.default\.accept_ra_defrtr[[:space:]]*=[[:space:]]*([01])[[:space:]]*$</ind-def:pattern>
                  <ind-def:instance datatype="int">1</ind-def:instance>
            </ind-def:textfilecontent54_object>

	    <!-- non-sysctl -->

            <unix-def:runlevel_object id="oval:org.open-scap.f14:obj:20146" version="1">
                  <unix-def:service_name>ip6tables</unix-def:service_name>
                  <unix-def:runlevel operation="pattern match">.*</unix-def:runlevel>
            </unix-def:runlevel_object>

            <unix-def:runlevel_object id="oval:org.open-scap.f14:obj:20147" version="1">
                  <unix-def:service_name>iptables</unix-def:service_name>
                  <unix-def:runlevel operation="pattern match">.*</unix-def:runlevel>
            </unix-def:runlevel_object>

            <ind-def:textfilecontent54_object id="oval:org.open-scap.f14:obj:2014741" version="1">
                  <ind-def:path>/etc/sysconfig</ind-def:path>
                  <ind-def:filename>iptables</ind-def:filename>
                  <ind-def:pattern operation="pattern match">^[[:space:]]*:INPUT[:space:]DROP[:space:]\[0:0\]</ind-def:pattern>
                  <ind-def:instance datatype="int">1</ind-def:instance>
            </ind-def:textfilecontent54_object>

            <ind-def:textfilecontent54_object id="oval:org.open-scap.f14:obj:2014742" version="1">
                  <ind-def:path>/etc/sysconfig</ind-def:path>
                  <ind-def:filename>iptables</ind-def:filename>
                  <ind-def:pattern operation="pattern match">^[[:space:]]*:INPUT[:space:]ACCEPT[:space:]\[0:0\]</ind-def:pattern>
                  <ind-def:instance datatype="int">1</ind-def:instance>
            </ind-def:textfilecontent54_object>

            <ind-def:textfilecontent54_object id="oval:org.open-scap.f14:obj:2014751" version="1">
                  <ind-def:path>/etc/sysconfig</ind-def:path>
                  <ind-def:filename>iptables</ind-def:filename>
                  <ind-def:pattern operation="pattern match">^[[:space:]]*:FORWARD[:space:]DROP[:space:]\[0:0\]</ind-def:pattern>
                  <ind-def:instance datatype="int">1</ind-def:instance>
            </ind-def:textfilecontent54_object>

            <ind-def:textfilecontent54_object id="oval:org.open-scap.f14:obj:2014752" version="1">
                  <ind-def:path>/etc/sysconfig</ind-def:path>
                  <ind-def:filename>iptables</ind-def:filename>
                  <ind-def:pattern operation="pattern match">^[[:space:]]*:FORWARD[:space:]ACCEPT[:space:]\[0:0\]</ind-def:pattern>
                  <ind-def:instance datatype="int">1</ind-def:instance>
            </ind-def:textfilecontent54_object>

            <ind-def:textfilecontent54_object id="oval:org.open-scap.f14:obj:201476" version="1">
                  <ind-def:path>/etc/modprobe.d</ind-def:path>
                  <ind-def:filename>dist.conf</ind-def:filename>
                  <ind-def:pattern operation="pattern match">^[[:space:]]*install[[:space:]]+DCCP[[:space:]]+/bin/true</ind-def:pattern>
                  <ind-def:instance datatype="int">1</ind-def:instance>
            </ind-def:textfilecontent54_object>

            <ind-def:textfilecontent54_object id="oval:org.open-scap.f14:obj:201477" version="1">
                  <ind-def:path>/etc/modprobe.d</ind-def:path>
                  <ind-def:filename>dist.conf</ind-def:filename>
                  <ind-def:pattern operation="pattern match">^[[:space:]]*install[[:space:]]+SCTP[[:space:]]+/bin/true</ind-def:pattern>
                  <ind-def:instance datatype="int">1</ind-def:instance>
            </ind-def:textfilecontent54_object>

            <ind-def:textfilecontent54_object id="oval:org.open-scap.f14:obj:201478" version="1">
                  <ind-def:path>/etc/modprobe.d</ind-def:path>
                  <ind-def:filename>dist.conf</ind-def:filename>
                  <ind-def:pattern operation="pattern match">^[[:space:]]*install[[:space:]]+RDS[[:space:]]+/bin/true</ind-def:pattern>
                  <ind-def:instance datatype="int">1</ind-def:instance>
            </ind-def:textfilecontent54_object>

            <ind-def:textfilecontent54_object id="oval:org.open-scap.f14:obj:201479" version="1">
                  <ind-def:path>/etc/modprobe.d</ind-def:path>
                  <ind-def:filename>dist.conf</ind-def:filename>
                  <ind-def:pattern operation="pattern match">^[[:space:]]*install[[:space:]]+TIPC[[:space:]]+/bin/true</ind-def:pattern>
                  <ind-def:instance datatype="int">1</ind-def:instance>
            </ind-def:textfilecontent54_object>

            <unix-def:runlevel_object id="oval:org.open-scap.f14:obj:20148" version="1">
                  <unix-def:service_name>rsyslog</unix-def:service_name>
                  <unix-def:runlevel operation="pattern match">.*</unix-def:runlevel>
            </unix-def:runlevel_object>

            <ind-def:textfilecontent54_object id="oval:org.open-scap.f14:obj:201490" version="1" comment="paths in /etc/syslog.conf">
                  <ind-def:path>/etc</ind-def:path>
                  <ind-def:filename>rsyslog.conf</ind-def:filename>
                  <ind-def:pattern operation="pattern match">^[^\#][[:space:]]*[^[:space:]]+\.[^[:space:]]+[[:space:]]+[\-]?([^[:space:]]+)</ind-def:pattern>
                  <ind-def:instance datatype="int">1</ind-def:instance>
            </ind-def:textfilecontent54_object>

            <unix-def:file_object id="oval:org.open-scap.f14:obj:201491" version="1" comment="Mandatory log files">
	      <unix-def:behaviors recurse_direction="down" recurse="directories" max_depth="4"/>
	      <unix-def:path>/var/log</unix-def:path>
	      <unix-def:filename var_ref="oval:org.open-scap.f14:var:201490" var_check="at least one"/>
            </unix-def:file_object>

            <ind-def:textfilecontent54_object id="oval:org.open-scap.f14:obj:20152" version="1">
                  <ind-def:path>/etc</ind-def:path>
                  <ind-def:filename>rsyslog.conf</ind-def:filename>
                  <ind-def:pattern operation="pattern match">^[^#]*\*\.\*[[:space:]]+@</ind-def:pattern>
                  <ind-def:instance datatype="int">1</ind-def:instance>
            </ind-def:textfilecontent54_object>

            <ind-def:textfilecontent54_object id="oval:org.open-scap.f14:obj:20153" version="1">
                  <ind-def:path>/etc/sysconfig</ind-def:path>
                  <ind-def:filename>rsyslog</ind-def:filename>
                  <ind-def:pattern operation="pattern match">SYSLOGD_OPTIONS[[:space:]]*=[[:space:]]*.*-r.*</ind-def:pattern>
                  <ind-def:instance datatype="int">1</ind-def:instance>
            </ind-def:textfilecontent54_object>

	    <!--
            <ind-def:textfilecontent54_object id="oval:org.open-scap.f14:obj:20154" version="1" comment="paths in /etc/rsyslog.conf should be in /etc/logrotate.d/syslog">
                  <ind-def:path>/etc/logrotate.d</ind-def:path>
                  <ind-def:filename>syslog</ind-def:filename>
                  <ind-def:pattern operation="pattern match" var_check="at least one" var_ref="oval:org.open-scap.f14:var:201490"></ind-def:pattern>
                  <ind-def:instance datatype="int">1</ind-def:instance>
            </ind-def:textfilecontent54_object>
-->
	    <!-- END -->

            <unix-def:runlevel_object id="oval:org.open-scap.f14:obj:20156" version="1">
                  <unix-def:service_name>auditd</unix-def:service_name>
                  <unix-def:runlevel operation="pattern match">.*</unix-def:runlevel>
            </unix-def:runlevel_object>
            <ind-def:textfilecontent54_object id="oval:org.open-scap.f14:obj:20157" version="1">
                  <ind-def:path>/etc</ind-def:path>
                  <ind-def:filename>grub.conf</ind-def:filename>
                  <ind-def:pattern operation="pattern match">^[[:space:]]*kernel.+[[:space:]]audit=1</ind-def:pattern>
                  <ind-def:instance datatype="int">1</ind-def:instance>
            </ind-def:textfilecontent54_object>
            <ind-def:textfilecontent54_object id="oval:org.open-scap.f14:obj:2015750" version="1">
                  <ind-def:path>/etc/audit</ind-def:path>
                  <ind-def:filename>audit.rules</ind-def:filename>
                  <ind-def:pattern operation="pattern match">^\-a[[:space:]]always,exit[[:space:]]\-F[[:space:]]arch=b32[[:space:]]\-S[[:space:]]adjtimex[[:space:]]\-S[[:space:]]settimeofday[[:space:]]\-S[[:space:]]stime[[:space:]]\-k[[:space:]]time\-change$</ind-def:pattern>
                  <ind-def:instance datatype="int">1</ind-def:instance>
            </ind-def:textfilecontent54_object>
            <ind-def:textfilecontent54_object id="oval:org.open-scap.f14:obj:2015751" version="1">
                  <ind-def:path>/etc/audit</ind-def:path>
                  <ind-def:filename>audit.rules</ind-def:filename>
                  <ind-def:pattern operation="pattern match">^\-a[[:space:]]always,exit[[:space:]]\-F[[:space:]]arch=b32[[:space:]]\-S[[:space:]]clock_settime[[:space:]]\-k[[:space:]]time\-change$</ind-def:pattern>
                  <ind-def:instance datatype="int">1</ind-def:instance>
            </ind-def:textfilecontent54_object>
            <ind-def:textfilecontent54_object id="oval:org.open-scap.f14:obj:2015752" version="1">
                  <ind-def:path>/etc/audit</ind-def:path>
                  <ind-def:filename>audit.rules</ind-def:filename>
                  <ind-def:pattern operation="pattern match">^\-a[[:space:]]always,exit[[:space:]]\-F[[:space:]]arch=b64[[:space:]]\-S[[:space:]]adjtimex[[:space:]]\-S[[:space:]]settimeofday[[:space:]]\-S[[:space:]]stime[[:space:]]\-k[[:space:]]time\-change$</ind-def:pattern>
                  <ind-def:instance datatype="int">1</ind-def:instance>
            </ind-def:textfilecontent54_object>
            <ind-def:textfilecontent54_object id="oval:org.open-scap.f14:obj:2015753" version="1">
                  <ind-def:path>/etc/audit</ind-def:path>
                  <ind-def:filename>audit.rules</ind-def:filename>
                  <ind-def:pattern operation="pattern match">^\-a[[:space:]]always,exit[[:space:]]\-F[[:space:]]arch=b64[[:space:]]\-S[[:space:]]clock_settime[[:space:]]\-k[[:space:]]time\-change$</ind-def:pattern>
                  <ind-def:instance datatype="int">1</ind-def:instance>
            </ind-def:textfilecontent54_object>
            <ind-def:textfilecontent54_object id="oval:org.open-scap.f14:obj:2015754" version="1">
                  <ind-def:path>/etc/audit</ind-def:path>
                  <ind-def:filename>audit.rules</ind-def:filename>
                  <ind-def:pattern operation="pattern match">^\-w[[:space:]]/etc/localtime[[:space:]]\-p[[:space:]]wa[[:space:]]\-k[[:space:]]time\-change$</ind-def:pattern>
                  <ind-def:instance datatype="int">1</ind-def:instance>
            </ind-def:textfilecontent54_object>
            <ind-def:textfilecontent54_object id="oval:org.open-scap.f14:obj:201580" version="1">
                  <ind-def:path>/etc/audit</ind-def:path>
                  <ind-def:filename>audit.rules</ind-def:filename>
                  <ind-def:pattern operation="pattern match">^\-w[[:space:]]/etc/group[[:space:]]\-p[[:space:]]wa[[:space:]]\-k[[:space:]]identity$</ind-def:pattern>
                  <ind-def:instance datatype="int">1</ind-def:instance>
            </ind-def:textfilecontent54_object>
            <ind-def:textfilecontent54_object id="oval:org.open-scap.f14:obj:201581" version="1">
                  <ind-def:path>/etc/audit</ind-def:path>
                  <ind-def:filename>audit.rules</ind-def:filename>
                  <ind-def:pattern operation="pattern match">^\-w[[:space:]]/etc/passwd[[:space:]]\-p[[:space:]]wa[[:space:]]\-k[[:space:]]identity$</ind-def:pattern>
                  <ind-def:instance datatype="int">1</ind-def:instance>
            </ind-def:textfilecontent54_object>
            <ind-def:textfilecontent54_object id="oval:org.open-scap.f14:obj:201582" version="1">
                  <ind-def:path>/etc/audit</ind-def:path>
                  <ind-def:filename>audit.rules</ind-def:filename>
                  <ind-def:pattern operation="pattern match">^\-w[[:space:]]/etc/gshadow[[:space:]]\-p[[:space:]]wa[[:space:]]\-k[[:space:]]identity$</ind-def:pattern>
                  <ind-def:instance datatype="int">1</ind-def:instance>
            </ind-def:textfilecontent54_object>
            <ind-def:textfilecontent54_object id="oval:org.open-scap.f14:obj:201583" version="1">
                  <ind-def:path>/etc/audit</ind-def:path>
                  <ind-def:filename>audit.rules</ind-def:filename>
                  <ind-def:pattern operation="pattern match">^\-w[[:space:]]/etc/shadow[[:space:]]\-p[[:space:]]wa[[:space:]]\-k[[:space:]]identity$</ind-def:pattern>
                  <ind-def:instance datatype="int">1</ind-def:instance>
            </ind-def:textfilecontent54_object>
            <ind-def:textfilecontent54_object id="oval:org.open-scap.f14:obj:201584" version="1">
                  <ind-def:path>/etc/audit</ind-def:path>
                  <ind-def:filename>audit.rules</ind-def:filename>
                  <ind-def:pattern operation="pattern match">^\-w[[:space:]]/etc/security/opasswd[[:space:]]\-p[[:space:]]wa[[:space:]]\-k[[:space:]]identity$</ind-def:pattern>
                  <ind-def:instance datatype="int">1</ind-def:instance>
            </ind-def:textfilecontent54_object>
            <ind-def:textfilecontent54_object id="oval:org.open-scap.f14:obj:201590" version="1">
                  <ind-def:path>/etc/audit</ind-def:path>
                  <ind-def:filename>audit.rules</ind-def:filename>
                  <ind-def:pattern operation="pattern match">^\-a[[:space:]]exit,always[[:space:]]\-F[[:space:]]arch=b32[[:space:]]\-S[[:space:]]sethostname[[:space:]]\-S[[:space:]]setdomainname[[:space:]]\-k[[:space:]]system\-locale$</ind-def:pattern>
                  <ind-def:instance datatype="int">1</ind-def:instance>
            </ind-def:textfilecontent54_object>
            <ind-def:textfilecontent54_object id="oval:org.open-scap.f14:obj:201591" version="1">
                  <ind-def:path>/etc/audit</ind-def:path>
                  <ind-def:filename>audit.rules</ind-def:filename>
                  <ind-def:pattern operation="pattern match">^\-a[[:space:]]exit,always[[:space:]]\-F[[:space:]]arch=b64[[:space:]]\-S[[:space:]]sethostname[[:space:]]\-S[[:space:]]setdomainname[[:space:]]\-k[[:space:]]system\-locale$</ind-def:pattern>
                  <ind-def:instance datatype="int">1</ind-def:instance>
            </ind-def:textfilecontent54_object>
            <ind-def:textfilecontent54_object id="oval:org.open-scap.f14:obj:201592" version="1">
                  <ind-def:path>/etc/audit</ind-def:path>
                  <ind-def:filename>audit.rules</ind-def:filename>
                  <ind-def:pattern operation="pattern match">^\-w[[:space:]]/etc/issue[[:space:]]\-p[[:space:]]wa[[:space:]]\-k[[:space:]]system\-locale$</ind-def:pattern>
                  <ind-def:instance datatype="int">1</ind-def:instance>
            </ind-def:textfilecontent54_object>
            <ind-def:textfilecontent54_object id="oval:org.open-scap.f14:obj:201593" version="1">
                  <ind-def:path>/etc/audit</ind-def:path>
                  <ind-def:filename>audit.rules</ind-def:filename>
                  <ind-def:pattern operation="pattern match">^\-w[[:space:]]/etc/issue\.net[[:space:]]\-p[[:space:]]wa[[:space:]]\-k[[:space:]]system\-locale$</ind-def:pattern>
                  <ind-def:instance datatype="int">1</ind-def:instance>
            </ind-def:textfilecontent54_object>
            <ind-def:textfilecontent54_object id="oval:org.open-scap.f14:obj:201594" version="1">
                  <ind-def:path>/etc/audit</ind-def:path>
                  <ind-def:filename>audit.rules</ind-def:filename>
                  <ind-def:pattern operation="pattern match">^\-w[[:space:]]/etc/hosts[[:space:]]\-p[[:space:]]wa[[:space:]]\-k[[:space:]]system\-locale$</ind-def:pattern>
                  <ind-def:instance datatype="int">1</ind-def:instance>
            </ind-def:textfilecontent54_object>
            <ind-def:textfilecontent54_object id="oval:org.open-scap.f14:obj:201595" version="1">
                  <ind-def:path>/etc/audit</ind-def:path>
                  <ind-def:filename>audit.rules</ind-def:filename>
                  <ind-def:pattern operation="pattern match">^\-w[[:space:]]/etc/sysconfig/network[[:space:]]\-p[[:space:]]wa[[:space:]]\-k[[:space:]]system\-locale$</ind-def:pattern>
                  <ind-def:instance datatype="int">1</ind-def:instance>
            </ind-def:textfilecontent54_object>
            <ind-def:textfilecontent54_object id="oval:org.open-scap.f14:obj:20160" version="1">
                  <ind-def:path>/etc/audit</ind-def:path>
                  <ind-def:filename>audit.rules</ind-def:filename>
                  <ind-def:pattern operation="pattern match">^\-w[[:space:]]/etc/selinux/[[:space:]]\-p[[:space:]]wa[[:space:]]\-k[[:space:]]MAC\-policy$</ind-def:pattern>
                  <ind-def:instance datatype="int">1</ind-def:instance>
            </ind-def:textfilecontent54_object>
            <ind-def:textfilecontent54_object id="oval:org.open-scap.f14:obj:201610" version="1">
                  <ind-def:path>/etc/audit</ind-def:path>
                  <ind-def:filename>audit.rules</ind-def:filename>
                  <ind-def:pattern operation="pattern match">^\-w[[:space:]]/var/log/faillog[[:space:]]\-p[[:space:]]wa[[:space:]]\-k[[:space:]]logins$</ind-def:pattern>
                  <ind-def:instance datatype="int">1</ind-def:instance>
            </ind-def:textfilecontent54_object>
            <ind-def:textfilecontent54_object id="oval:org.open-scap.f14:obj:201611" version="1">
                  <ind-def:path>/etc/audit</ind-def:path>
                  <ind-def:filename>audit.rules</ind-def:filename>
                  <ind-def:pattern operation="pattern match">^\-w[[:space:]]/var/log/lastlog[[:space:]]\-p[[:space:]]wa[[:space:]]\-k[[:space:]]logins$</ind-def:pattern>
                  <ind-def:instance datatype="int">1</ind-def:instance>
            </ind-def:textfilecontent54_object>
            <ind-def:textfilecontent54_object id="oval:org.open-scap.f14:obj:201620" version="1">
                  <ind-def:path>/etc/audit</ind-def:path>
                  <ind-def:filename>audit.rules</ind-def:filename>
                  <ind-def:pattern operation="pattern match">^\-w[[:space:]]/var/run/utmp[[:space:]]\-p[[:space:]]wa[[:space:]]\-k[[:space:]]session$</ind-def:pattern>
                  <ind-def:instance datatype="int">1</ind-def:instance>
            </ind-def:textfilecontent54_object>
            <ind-def:textfilecontent54_object id="oval:org.open-scap.f14:obj:201621" version="1">
                  <ind-def:path>/etc/audit</ind-def:path>
                  <ind-def:filename>audit.rules</ind-def:filename>
                  <ind-def:pattern operation="pattern match">^\-w[[:space:]]/var/log/btmp[[:space:]]\-p[[:space:]]wa[[:space:]]\-k[[:space:]]session$</ind-def:pattern>
                  <ind-def:instance datatype="int">1</ind-def:instance>
            </ind-def:textfilecontent54_object>
            <ind-def:textfilecontent54_object id="oval:org.open-scap.f14:obj:201622" version="1">
                  <ind-def:path>/etc/audit</ind-def:path>
                  <ind-def:filename>audit.rules</ind-def:filename>
                  <ind-def:pattern operation="pattern match">^\-w[[:space:]]/var/log/wtmp[[:space:]]\-p[[:space:]]wa[[:space:]]\-k[[:space:]]session$</ind-def:pattern>
                  <ind-def:instance datatype="int">1</ind-def:instance>
            </ind-def:textfilecontent54_object>
            <ind-def:textfilecontent54_object id="oval:org.open-scap.f14:obj:201630" version="1">
                  <ind-def:path>/etc/audit</ind-def:path>
                  <ind-def:filename>audit.rules</ind-def:filename>
                  <ind-def:pattern operation="pattern match">^\-a[[:space:]]always,exit[[:space:]]\-F[[:space:]]arch=b32[[:space:]]\-S[[:space:]]chmod[[:space:]]\-S[[:space:]]fchmod[[:space:]]\-S[[:space:]]fchmodat[[:space:]]\-F[[:space:]]auid>=500[[:space:]]\-F[[:space:]]auid!=4294967295[[:space:]]\-k[[:space:]]perm_mod$</ind-def:pattern>
                  <ind-def:instance datatype="int">1</ind-def:instance>
            </ind-def:textfilecontent54_object>
            <ind-def:textfilecontent54_object id="oval:org.open-scap.f14:obj:201631" version="1">
                  <ind-def:path>/etc/audit</ind-def:path>
                  <ind-def:filename>audit.rules</ind-def:filename>
                  <ind-def:pattern operation="pattern match">^\-a[[:space:]]always,exit[[:space:]]\-F[[:space:]]arch=b32[[:space:]]\-S[[:space:]]chown[[:space:]]\-S[[:space:]]fchown[[:space:]]\-S[[:space:]]fchownat[[:space:]]\-S[[:space:]]lchown[[:space:]]\-F[[:space:]]auid>=500[[:space:]]\-F[[:space:]]auid!=4294967295[[:space:]]\-k[[:space:]]perm_mod$</ind-def:pattern>
                  <ind-def:instance datatype="int">1</ind-def:instance>
            </ind-def:textfilecontent54_object>
            <ind-def:textfilecontent54_object id="oval:org.open-scap.f14:obj:201632" version="1">
                  <ind-def:path>/etc/audit</ind-def:path>
                  <ind-def:filename>audit.rules</ind-def:filename>
                  <ind-def:pattern operation="pattern match">^\-a[[:space:]]always,exit[[:space:]]\-F[[:space:]]arch=b32[[:space:]]\-S[[:space:]]setxattr[[:space:]]\-S[[:space:]]lsetxattr[[:space:]]\-S[[:space:]]fsetxattr[[:space:]]\-S[[:space:]]removexattr[[:space:]]\-S[[:space:]]lremovexattr[[:space:]]\-S[[:space:]]fremovexattr[[:space:]]\-F[[:space:]]auid>=500[[:space:]]\-F[[:space:]]auid!=4294967295[[:space:]]\-k[[:space:]]perm_mod$</ind-def:pattern>
                  <ind-def:instance datatype="int">1</ind-def:instance>
            </ind-def:textfilecontent54_object>
            <ind-def:textfilecontent54_object id="oval:org.open-scap.f14:obj:201633" version="1">
                  <ind-def:path>/etc/audit</ind-def:path>
                  <ind-def:filename>audit.rules</ind-def:filename>
                  <ind-def:pattern operation="pattern match">^\-a[[:space:]]always,exit[[:space:]]\-F[[:space:]]arch=b64[[:space:]]\-S[[:space:]]chmod[[:space:]]\-S[[:space:]]fchmod[[:space:]]\-S[[:space:]]fchmodat[[:space:]]\-F[[:space:]]auid>=500[[:space:]]\-F[[:space:]]auid!=4294967295[[:space:]]\-k[[:space:]]perm_mod$</ind-def:pattern>
                  <ind-def:instance datatype="int">1</ind-def:instance>
            </ind-def:textfilecontent54_object>
            <ind-def:textfilecontent54_object id="oval:org.open-scap.f14:obj:201634" version="1">
                  <ind-def:path>/etc/audit</ind-def:path>
                  <ind-def:filename>audit.rules</ind-def:filename>
                  <ind-def:pattern operation="pattern match">^\-a[[:space:]]always,exit[[:space:]]\-F[[:space:]]arch=b64[[:space:]]\-S[[:space:]]chown[[:space:]]\-S[[:space:]]fchown[[:space:]]\-S[[:space:]]fchownat[[:space:]]\-S[[:space:]]lchown[[:space:]]\-F[[:space:]]auid>=500[[:space:]]\-F[[:space:]]auid!=4294967295[[:space:]]\-k[[:space:]]perm_mod$</ind-def:pattern>
                  <ind-def:instance datatype="int">1</ind-def:instance>
            </ind-def:textfilecontent54_object>
            <ind-def:textfilecontent54_object id="oval:org.open-scap.f14:obj:201635" version="1">
                  <ind-def:path>/etc/audit</ind-def:path>
                  <ind-def:filename>audit.rules</ind-def:filename>
                  <ind-def:pattern operation="pattern match">^\-a[[:space:]]always,exit[[:space:]]\-F[[:space:]]arch=b64[[:space:]]\-S[[:space:]]setxattr[[:space:]]\-S[[:space:]]lsetxattr[[:space:]]\-S[[:space:]]fsetxattr[[:space:]]\-S[[:space:]]removexattr[[:space:]]\-S[[:space:]]lremovexattr[[:space:]]\-S[[:space:]]fremovexattr[[:space:]]\-F[[:space:]]auid>=500[[:space:]]\-F[[:space:]]auid!=4294967295[[:space:]]\-k[[:space:]]perm_mod$</ind-def:pattern>
                  <ind-def:instance datatype="int">1</ind-def:instance>
            </ind-def:textfilecontent54_object>
            <ind-def:textfilecontent54_object id="oval:org.open-scap.f14:obj:201640" version="1">
                  <ind-def:path>/etc/audit</ind-def:path>
                  <ind-def:filename>audit.rules</ind-def:filename>
                  <ind-def:pattern operation="pattern match">^\-a[[:space:]]always,exit[[:space:]]\-F[[:space:]]arch=b32[[:space:]]\-S[[:space:]]creat[[:space:]]\-S[[:space:]]open[[:space:]]\-S[[:space:]]openat[[:space:]]\-S[[:space:]]truncate[[:space:]]\-S[[:space:]]ftruncate[[:space:]]\-F[[:space:]]exit=\-EACCES[[:space:]]\-F[[:space:]]auid>=500[[:space:]]\-F[[:space:]]auid!=4294967295[[:space:]]\-k[[:space:]]access$</ind-def:pattern>
                  <ind-def:instance datatype="int">1</ind-def:instance>
            </ind-def:textfilecontent54_object>
            <ind-def:textfilecontent54_object id="oval:org.open-scap.f14:obj:201641" version="1">
                  <ind-def:path>/etc/audit</ind-def:path>
                  <ind-def:filename>audit.rules</ind-def:filename>
                  <ind-def:pattern operation="pattern match">^\-a[[:space:]]always,exit[[:space:]]\-F[[:space:]]arch=b32[[:space:]]\-S[[:space:]]creat[[:space:]]\-S[[:space:]]open[[:space:]]\-S[[:space:]]openat[[:space:]]\-S[[:space:]]truncate[[:space:]]\-S[[:space:]]ftruncate[[:space:]]\-F[[:space:]]exit=\-EPERM[[:space:]]\-F[[:space:]]auid>=500[[:space:]]\-F[[:space:]]auid!=4294967295[[:space:]]\-k[[:space:]]access$</ind-def:pattern>
                  <ind-def:instance datatype="int">1</ind-def:instance>
            </ind-def:textfilecontent54_object>
            <ind-def:textfilecontent54_object id="oval:org.open-scap.f14:obj:201642" version="1">
                  <ind-def:path>/etc/audit</ind-def:path>
                  <ind-def:filename>audit.rules</ind-def:filename>
                  <ind-def:pattern operation="pattern match">^\-a[[:space:]]always,exit[[:space:]]\-F[[:space:]]arch=b64[[:space:]]\-S[[:space:]]creat[[:space:]]\-S[[:space:]]open[[:space:]]\-S[[:space:]]openat[[:space:]]\-S[[:space:]]truncate[[:space:]]\-S[[:space:]]ftruncate[[:space:]]\-F[[:space:]]exit=\-EACCES[[:space:]]\-F[[:space:]]auid>=500[[:space:]]\-F[[:space:]]auid!=4294967295[[:space:]]\-k[[:space:]]access$</ind-def:pattern>
                  <ind-def:instance datatype="int">1</ind-def:instance>
            </ind-def:textfilecontent54_object>
            <ind-def:textfilecontent54_object id="oval:org.open-scap.f14:obj:201643" version="1">
                  <ind-def:path>/etc/audit</ind-def:path>
                  <ind-def:filename>audit.rules</ind-def:filename>
                  <ind-def:pattern operation="pattern match">^\-a[[:space:]]always,exit[[:space:]]\-F[[:space:]]arch=b64[[:space:]]\-S[[:space:]]creat[[:space:]]\-S[[:space:]]open[[:space:]]\-S[[:space:]]openat[[:space:]]\-S[[:space:]]truncate[[:space:]]\-S[[:space:]]ftruncate[[:space:]]\-F[[:space:]]exit=\-EPERM[[:space:]]\-F[[:space:]]auid>=500[[:space:]]\-F[[:space:]]auid!=4294967295[[:space:]]\-k[[:space:]]access$</ind-def:pattern>
                  <ind-def:instance datatype="int">1</ind-def:instance>
            </ind-def:textfilecontent54_object>
            <ind-def:textfilecontent54_object id="oval:org.open-scap.f14:obj:20165" version="1">
                  <ind-def:path>/etc/audit</ind-def:path>
                  <ind-def:filename>audit.rules</ind-def:filename>
                  <ind-def:pattern operation="pattern match">^\-a[[:space:]]always,exit[[:space:]]-F[[:space:]]path=/bin/ping[[:space:]]-F perm=x[[:space:]]\-F[[:space:]]auid>=500[[:space:]]\-F[[:space:]]auid!=4294967295[[:space:]]\-k[[:space:]]privileged</ind-def:pattern>
                  <ind-def:instance datatype="int">1</ind-def:instance>
            </ind-def:textfilecontent54_object>
            <ind-def:textfilecontent54_object id="oval:org.open-scap.f14:obj:201660" version="1">
                  <ind-def:path>/etc/audit</ind-def:path>
                  <ind-def:filename>audit.rules</ind-def:filename>
                  <ind-def:pattern operation="pattern match">^\-a[[:space:]]always,exit[[:space:]]\-F[[:space:]]arch=b32[[:space:]]\-S[[:space:]]mount[[:space:]]\-F[[:space:]]auid>=500[[:space:]]\-F[[:space:]]auid!=4294967295[[:space:]]\-k[[:space:]]export$</ind-def:pattern>
                  <ind-def:instance datatype="int">1</ind-def:instance>
            </ind-def:textfilecontent54_object>
            <ind-def:textfilecontent54_object id="oval:org.open-scap.f14:obj:201661" version="1">
                  <ind-def:path>/etc/audit</ind-def:path>
                  <ind-def:filename>audit.rules</ind-def:filename>
                  <ind-def:pattern operation="pattern match">^\-a[[:space:]]always,exit[[:space:]]\-F[[:space:]]arch=b64[[:space:]]\-S[[:space:]]mount[[:space:]]\-F[[:space:]]auid>=500[[:space:]]\-F[[:space:]]auid!=4294967295[[:space:]]\-k[[:space:]]export$</ind-def:pattern>
                  <ind-def:instance datatype="int">1</ind-def:instance>
            </ind-def:textfilecontent54_object>
            <unix-def:uname_object id="oval:org.open-scap.f14:obj:201670" version="1"/>
            <ind-def:textfilecontent54_object id="oval:org.open-scap.f14:obj:201671" version="1">
                  <ind-def:path>/etc/audit</ind-def:path>
                  <ind-def:filename>audit.rules</ind-def:filename>
                  <ind-def:pattern operation="pattern match">^\-a[[:space:]]always,exit[[:space:]]\-F[[:space:]]arch=b32[[:space:]]\-S[[:space:]]unlink[[:space:]]\-S[[:space:]]unlinkat[[:space:]]\-S[[:space:]]rename[[:space:]]\-S[[:space:]]renameat[[:space:]]\-F[[:space:]]auid>=500[[:space:]]\-F[[:space:]]auid!=4294967295[[:space:]]\-k[[:space:]]delete$</ind-def:pattern>
                  <ind-def:instance datatype="int">1</ind-def:instance>
            </ind-def:textfilecontent54_object>
            <ind-def:textfilecontent54_object id="oval:org.open-scap.f14:obj:201673" version="1">
                  <ind-def:path>/etc/audit</ind-def:path>
                  <ind-def:filename>audit.rules</ind-def:filename>
                  <ind-def:pattern operation="pattern match">^\-a[[:space:]]always,exit[[:space:]]\-F[[:space:]]arch=b64[[:space:]]\-S[[:space:]]unlink[[:space:]]\-S[[:space:]]unlinkat[[:space:]]\-S[[:space:]]rename[[:space:]]\-S[[:space:]]renameat[[:space:]]\-F[[:space:]]auid>=500[[:space:]]\-F[[:space:]]auid!=4294967295[[:space:]]\-k[[:space:]]delete$</ind-def:pattern>
                  <ind-def:instance datatype="int">1</ind-def:instance>
            </ind-def:textfilecontent54_object>
            <ind-def:textfilecontent54_object id="oval:org.open-scap.f14:obj:20168" version="1">
                  <ind-def:path>/etc/audit</ind-def:path>
                  <ind-def:filename>audit.rules</ind-def:filename>
                  <ind-def:pattern operation="pattern match">^\-w[[:space:]]/etc/sudoers[[:space:]]\-p[[:space:]]wa[[:space:]]\-k[[:space:]]actions</ind-def:pattern>
                  <ind-def:instance datatype="int">1</ind-def:instance>
            </ind-def:textfilecontent54_object>
            <ind-def:textfilecontent54_object id="oval:org.open-scap.f14:obj:2016851" version="1">
                  <ind-def:path>/etc/audit</ind-def:path>
                  <ind-def:filename>audit.rules</ind-def:filename>
                  <ind-def:pattern operation="pattern match">^\-w[[:space:]]/sbin/insmod[[:space:]]\-p[[:space:]]x[[:space:]]\-k[[:space:]]modules</ind-def:pattern>
                  <ind-def:instance datatype="int">1</ind-def:instance>
            </ind-def:textfilecontent54_object>
            <ind-def:textfilecontent54_object id="oval:org.open-scap.f14:obj:2016852" version="1">
                  <ind-def:path>/etc/audit</ind-def:path>
                  <ind-def:filename>audit.rules</ind-def:filename>
                  <ind-def:pattern operation="pattern match">^\-w[[:space:]]/sbin/rmmod[[:space:]]\-p[[:space:]]x[[:space:]]\-k[[:space:]]modules</ind-def:pattern>
                  <ind-def:instance datatype="int">1</ind-def:instance>
            </ind-def:textfilecontent54_object>
            <ind-def:textfilecontent54_object id="oval:org.open-scap.f14:obj:2016853" version="1">
                  <ind-def:path>/etc/audit</ind-def:path>
                  <ind-def:filename>audit.rules</ind-def:filename>
                  <ind-def:pattern operation="pattern match">^\-w[[:space:]]/sbin/modprobe[[:space:]]\-p[[:space:]]x[[:space:]]\-k[[:space:]]modules</ind-def:pattern>
                  <ind-def:instance datatype="int">1</ind-def:instance>
            </ind-def:textfilecontent54_object>
            <ind-def:textfilecontent54_object id="oval:org.open-scap.f14:obj:2016854" version="1">
                  <ind-def:path>/etc/audit</ind-def:path>
                  <ind-def:filename>audit.rules</ind-def:filename>
                  <ind-def:pattern operation="pattern match">^\-a[[:space:]]always,exit[[:space:]]\-S[[:space:]]init_module[[:space:]]\-S[[:space:]]delete_module[[:space:]]\-k[[:space:]]modules</ind-def:pattern>
                  <ind-def:instance datatype="int">1</ind-def:instance>
            </ind-def:textfilecontent54_object>
            <ind-def:textfilecontent54_object id="oval:org.open-scap.f14:obj:201745" version="1">
                  <ind-def:path>/etc/xinetd.d</ind-def:path>
                  <ind-def:filename>telnet</ind-def:filename>
                  <ind-def:pattern var_check="all" operation="pattern match" var_ref="oval:org.open-scap.f14:var:2017"/>
                  <ind-def:instance datatype="int">1</ind-def:instance>
            </ind-def:textfilecontent54_object>
            <ind-def:textfilecontent54_object id="oval:org.open-scap.f14:obj:201774" version="1">
                  <ind-def:path>/etc/xinetd.d</ind-def:path>
                  <ind-def:filename>rcp</ind-def:filename>
                  <ind-def:pattern var_check="all" operation="pattern match" var_ref="oval:org.open-scap.f14:var:2017"/>
                  <ind-def:instance datatype="int">1</ind-def:instance>
            </ind-def:textfilecontent54_object>
            <ind-def:textfilecontent54_object id="oval:org.open-scap.f14:obj:201775" version="1">
                  <ind-def:path>/etc/xinetd.d</ind-def:path>
                  <ind-def:filename>rsh</ind-def:filename>
                  <ind-def:pattern var_check="all" operation="pattern match" var_ref="oval:org.open-scap.f14:var:2017"/>
                  <ind-def:instance datatype="int">1</ind-def:instance>
            </ind-def:textfilecontent54_object>
            <ind-def:textfilecontent54_object id="oval:org.open-scap.f14:obj:201776" version="1">
                  <ind-def:path>/etc/xinetd.d</ind-def:path>
                  <ind-def:filename>rlogin</ind-def:filename>
                  <ind-def:pattern var_check="all" operation="pattern match" var_ref="oval:org.open-scap.f14:var:2017"/>
                  <ind-def:instance datatype="int">1</ind-def:instance>
            </ind-def:textfilecontent54_object>
            <ind-def:textfilecontent54_object id="oval:org.open-scap.f14:obj:201825" version="1">
                  <ind-def:path>/etc/xinetd.d</ind-def:path>
                  <ind-def:filename>tftp</ind-def:filename>
                  <ind-def:pattern var_check="all" operation="pattern match" var_ref="oval:org.open-scap.f14:var:2017"/>
                  <ind-def:instance datatype="int">1</ind-def:instance>
            </ind-def:textfilecontent54_object>
            <ind-def:textfilecontent54_object id="oval:org.open-scap.f14:obj:20178" version="1">
                  <ind-def:path>/etc/pam.d</ind-def:path>
                  <ind-def:filename operation="pattern match">.*</ind-def:filename>
                  <ind-def:pattern operation="pattern match">^[[:space:]]*.*pam_rhosts</ind-def:pattern>
                  <ind-def:instance datatype="int">1</ind-def:instance>
            </ind-def:textfilecontent54_object>
            <ind-def:textfilecontent54_object id="oval:org.open-scap.f14:obj:20169" version="1">
                  <ind-def:path>/etc/audit</ind-def:path>
                  <ind-def:filename>audit.rules</ind-def:filename>
                  <ind-def:pattern operation="pattern match">^\-e[[:space:]]2</ind-def:pattern>
                  <ind-def:instance datatype="int">1</ind-def:instance>
            </ind-def:textfilecontent54_object>
            <unix-def:runlevel_object id="oval:org.open-scap.f14:obj:20170" version="1">
                  <unix-def:service_name>inetd</unix-def:service_name>
                  <unix-def:runlevel operation="pattern match">.*</unix-def:runlevel>
            </unix-def:runlevel_object>
            <unix-def:runlevel_object id="oval:org.open-scap.f14:obj:20171" version="1">
                  <unix-def:service_name>xinetd</unix-def:service_name>
                  <unix-def:runlevel operation="pattern match">.*</unix-def:runlevel>
            </unix-def:runlevel_object>
            <lin-def:rpminfo_object id="oval:org.open-scap.f14:obj:20179" version="1">
                  <lin-def:name>rsh</lin-def:name>
            </lin-def:rpminfo_object>
            <lin-def:rpminfo_object id="oval:org.open-scap.f14:obj:20172" version="1">
                  <lin-def:name>inetd</lin-def:name>
            </lin-def:rpminfo_object>
            <lin-def:rpminfo_object id="oval:org.open-scap.f14:obj:20173" version="1">
                  <lin-def:name>xinetd</lin-def:name>
            </lin-def:rpminfo_object>
            <lin-def:rpminfo_object id="oval:org.open-scap.f14:obj:20174" version="1">
                  <lin-def:name>telnet-server</lin-def:name>
            </lin-def:rpminfo_object>
            <lin-def:rpminfo_object id="oval:org.open-scap.f14:obj:20175" version="1">
                  <lin-def:name>telnet</lin-def:name>
            </lin-def:rpminfo_object>
            <lin-def:rpminfo_object id="oval:org.open-scap.f14:obj:20176" version="1">
                  <lin-def:name>krb5-workstation</lin-def:name>
            </lin-def:rpminfo_object>
            <lin-def:rpminfo_object id="oval:org.open-scap.f14:obj:20177" version="1">
                  <lin-def:name>rsh-server</lin-def:name>
            </lin-def:rpminfo_object>
            <unix-def:runlevel_object id="oval:org.open-scap.f14:obj:20181" version="1">
                  <unix-def:service_name>ypbind</unix-def:service_name>
                  <unix-def:runlevel operation="pattern match">.*</unix-def:runlevel>
            </unix-def:runlevel_object>
            <lin-def:rpminfo_object id="oval:org.open-scap.f14:obj:20180" version="1">
                  <lin-def:name>ypserv</lin-def:name>
            </lin-def:rpminfo_object>
            <lin-def:rpminfo_object id="oval:org.open-scap.f14:obj:20182" version="1">
                  <lin-def:name>tftp-server</lin-def:name>
            </lin-def:rpminfo_object>
            <unix-def:runlevel_object id="oval:org.open-scap.f14:obj:20183" version="1">
                  <unix-def:service_name>firstboot</unix-def:service_name>
                  <unix-def:runlevel operation="pattern match">.*</unix-def:runlevel>
            </unix-def:runlevel_object>
            <unix-def:runlevel_object id="oval:org.open-scap.f14:obj:20184" version="1">
                  <unix-def:service_name>gpm</unix-def:service_name>
                  <unix-def:runlevel operation="pattern match">.*</unix-def:runlevel>
            </unix-def:runlevel_object>
            <unix-def:runlevel_object id="oval:org.open-scap.f14:obj:20185" version="1">
                  <unix-def:service_name>irqbalance</unix-def:service_name>
                  <unix-def:runlevel operation="pattern match">.*</unix-def:runlevel>
            </unix-def:runlevel_object>
            <unix-def:runlevel_object id="oval:org.open-scap.f14:obj:20186" version="1">
                  <unix-def:service_name>isdn</unix-def:service_name>
                  <unix-def:runlevel operation="pattern match">.*</unix-def:runlevel>
            </unix-def:runlevel_object>
            <unix-def:runlevel_object id="oval:org.open-scap.f14:obj:20187" version="1">
                  <unix-def:service_name>kdump</unix-def:service_name>
                  <unix-def:runlevel operation="pattern match">.*</unix-def:runlevel>
            </unix-def:runlevel_object>
            <unix-def:runlevel_object id="oval:org.open-scap.f14:obj:20188" version="1">
                  <unix-def:service_name>kudzu</unix-def:service_name>
                  <unix-def:runlevel operation="pattern match">.*</unix-def:runlevel>
            </unix-def:runlevel_object>
            <unix-def:runlevel_object id="oval:org.open-scap.f14:obj:20189" version="1">
                  <unix-def:service_name>mdmonitor</unix-def:service_name>
                  <unix-def:runlevel operation="pattern match">.*</unix-def:runlevel>
            </unix-def:runlevel_object>
            <unix-def:runlevel_object id="oval:org.open-scap.f14:obj:20190" version="1">
                  <unix-def:service_name>microcode_ctl</unix-def:service_name>
                  <unix-def:runlevel operation="pattern match">.*</unix-def:runlevel>
            </unix-def:runlevel_object>
            <unix-def:runlevel_object id="oval:org.open-scap.f14:obj:20191" version="1">
                  <unix-def:service_name>network</unix-def:service_name>
                  <unix-def:runlevel operation="pattern match">.*</unix-def:runlevel>
            </unix-def:runlevel_object>
            <unix-def:file_object id="oval:org.open-scap.f14:obj:20192" version="1" comment="Check existance of yum.cron"> 
                  <unix-def:path>/etc/sysconfig/network-scripts</unix-def:path>
                  <unix-def:filename operation="pattern match">ifcfg-[^l][^o].*</unix-def:filename>
            </unix-def:file_object>
            <ind-def:textfilecontent54_object id="oval:org.open-scap.f14:obj:20193" version="1">
                  <ind-def:path>/etc/sysconfig</ind-def:path>
                  <ind-def:filename>network</ind-def:filename>
                  <ind-def:pattern operation="pattern match">^[:space:]*NOZEROCONF=yes</ind-def:pattern>
                  <ind-def:instance datatype="int">1</ind-def:instance>
            </ind-def:textfilecontent54_object>
            <unix-def:runlevel_object id="oval:org.open-scap.f14:obj:20194" version="1">
                  <unix-def:service_name>pcscd</unix-def:service_name>
                  <unix-def:runlevel operation="pattern match">.*</unix-def:runlevel>
            </unix-def:runlevel_object>
            <unix-def:runlevel_object id="oval:org.open-scap.f14:obj:20195" version="1">
                  <unix-def:service_name>smartd</unix-def:service_name>
                  <unix-def:runlevel operation="pattern match">.*</unix-def:runlevel>
            </unix-def:runlevel_object>
            <unix-def:runlevel_object id="oval:org.open-scap.f14:obj:20196" version="1">
                  <unix-def:service_name>readahead_early</unix-def:service_name>
                  <unix-def:runlevel operation="pattern match">.*</unix-def:runlevel>
            </unix-def:runlevel_object>
            <unix-def:runlevel_object id="oval:org.open-scap.f14:obj:20197" version="1">
                  <unix-def:service_name>readahead_later</unix-def:service_name>
                  <unix-def:runlevel operation="pattern match">.*</unix-def:runlevel>
            </unix-def:runlevel_object>
            <unix-def:runlevel_object id="oval:org.open-scap.f14:obj:20198" version="1">
                  <unix-def:service_name>messagebus</unix-def:service_name>
                  <unix-def:runlevel operation="pattern match">.*</unix-def:runlevel>
            </unix-def:runlevel_object>
            <unix-def:runlevel_object id="oval:org.open-scap.f14:obj:20199" version="1">
                  <unix-def:service_name>haldaemon</unix-def:service_name>
                  <unix-def:runlevel operation="pattern match">.*</unix-def:runlevel>
            </unix-def:runlevel_object>
            <unix-def:runlevel_object id="oval:org.open-scap.f14:obj:20200" version="1">
                  <unix-def:service_name>bluetooth</unix-def:service_name>
                  <unix-def:runlevel operation="pattern match">.*</unix-def:runlevel>
            </unix-def:runlevel_object>
            <unix-def:runlevel_object id="oval:org.open-scap.f14:obj:20201" version="1">
                  <unix-def:service_name>hidd</unix-def:service_name>
                  <unix-def:runlevel operation="pattern match">.*</unix-def:runlevel>
            </unix-def:runlevel_object>
            <ind-def:textfilecontent54_object id="oval:org.open-scap.f14:obj:2020151" version="1">
                  <ind-def:path>/etc/modprobe.d</ind-def:path>
                  <ind-def:filename operation="pattern match">.*\.conf</ind-def:filename>
                  <ind-def:pattern operation="pattern match">alias[:space:]net\-pf\-31[:space:]off</ind-def:pattern>
                  <ind-def:instance datatype="int">1</ind-def:instance>
            </ind-def:textfilecontent54_object>
            <ind-def:textfilecontent54_object id="oval:org.open-scap.f14:obj:2020152" version="1">
                  <ind-def:path>/etc/modprobe.d</ind-def:path>
                  <ind-def:filename operation="pattern match">.*\.conf</ind-def:filename>
                  <ind-def:pattern operation="pattern match">alias[:space:]bluetooth[:space:]off</ind-def:pattern>
                  <ind-def:instance datatype="int">1</ind-def:instance>
            </ind-def:textfilecontent54_object>
            <unix-def:runlevel_object id="oval:org.open-scap.f14:obj:20202" version="1">
                  <unix-def:service_name>apmd</unix-def:service_name>
                  <unix-def:runlevel operation="pattern match">.*</unix-def:runlevel>
            </unix-def:runlevel_object>
            <unix-def:runlevel_object id="oval:org.open-scap.f14:obj:20203" version="1">
                  <unix-def:service_name>acpid</unix-def:service_name>
                  <unix-def:runlevel operation="pattern match">.*</unix-def:runlevel>
            </unix-def:runlevel_object>
            <unix-def:runlevel_object id="oval:org.open-scap.f14:obj:20204" version="1">
                  <unix-def:service_name>cpuspeed</unix-def:service_name>
                  <unix-def:runlevel operation="pattern match">.*</unix-def:runlevel>
            </unix-def:runlevel_object>
            <unix-def:runlevel_object id="oval:org.open-scap.f14:obj:20205" version="1">
                  <unix-def:service_name>crond</unix-def:service_name>
                  <unix-def:runlevel operation="pattern match">.*</unix-def:runlevel>
            </unix-def:runlevel_object>
            <unix-def:runlevel_object id="oval:org.open-scap.f14:obj:202052" version="1">
                  <unix-def:service_name>atd</unix-def:service_name>
                  <unix-def:runlevel operation="pattern match">.*</unix-def:runlevel>
            </unix-def:runlevel_object>
            <lin-def:rpminfo_object id="oval:org.open-scap.f14:obj:202053" version="1">
                  <lin-def:name>at</lin-def:name>
            </lin-def:rpminfo_object>
            <unix-def:runlevel_object id="oval:org.open-scap.f14:obj:20206" version="1">
                  <unix-def:service_name>anacron</unix-def:service_name>
                  <unix-def:runlevel operation="pattern match">.*</unix-def:runlevel>
            </unix-def:runlevel_object>
            <lin-def:rpminfo_object id="oval:org.open-scap.f14:obj:20207" version="1">
                  <lin-def:name>cronie-anacron</lin-def:name>
            </lin-def:rpminfo_object>
            <unix-def:file_object id="oval:org.open-scap.f14:obj:20217" version="1" comment="/etc/cron.monthly">
                  <unix-def:path>/etc/cron.monthly</unix-def:path>
                  <unix-def:filename xsi:nil="true"/>
            </unix-def:file_object>
            <unix-def:file_object id="oval:org.open-scap.f14:obj:20225" version="1" comment="/etc/cron.daily">
                  <unix-def:path>/etc/cron.daily</unix-def:path>
                  <unix-def:filename xsi:nil="true"/>
            </unix-def:file_object>
            <unix-def:file_object id="oval:org.open-scap.f14:obj:20216" version="1" comment="/etc/cron.weekly">
                  <unix-def:path>/etc/cron.weekly</unix-def:path>
                  <unix-def:filename xsi:nil="true"/>
            </unix-def:file_object>
            <unix-def:file_object id="oval:org.open-scap.f14:obj:20209" version="1" comment="/etc/crontab">
                  <unix-def:path>/etc</unix-def:path>
                  <unix-def:filename>crontab</unix-def:filename>
            </unix-def:file_object>
            <unix-def:password_object id="oval:org.open-scap.f14:obj:202091" version="1">
                  <unix-def:username operation="equals" var_ref="oval:org.open-scap.f14:var:20209"/>
            </unix-def:password_object>
            <unix-def:file_object id="oval:org.open-scap.f14:obj:20212" version="1" comment="/etc/anacrontab">
                  <unix-def:path>/etc</unix-def:path>
                  <unix-def:filename>anacrontab</unix-def:filename>
            </unix-def:file_object>
            <unix-def:password_object id="oval:org.open-scap.f14:obj:202121" version="1">
                  <unix-def:username operation="equals" var_ref="oval:org.open-scap.f14:var:20212"/>
            </unix-def:password_object>
            <unix-def:file_object id="oval:org.open-scap.f14:obj:20210" version="1" comment="/etc/crontab">
                  <unix-def:path>/etc</unix-def:path>
                  <unix-def:filename>crontab</unix-def:filename>
            </unix-def:file_object>
            <unix-def:file_object id="oval:org.open-scap.f14:obj:20214" version="1" comment="/etc/cron.hourly">
                  <unix-def:path>/etc/cron.hourly</unix-def:path>
                  <unix-def:filename xsi:nil="true"/>
            </unix-def:file_object>
            <unix-def:file_object id="oval:org.open-scap.f14:obj:20222" version="1" comment="/etc/cron.monthly">
                  <unix-def:path>/etc/cron.monthly</unix-def:path>
                  <unix-def:filename xsi:nil="true"/>
            </unix-def:file_object>
            <unix-def:file_object id="oval:org.open-scap.f14:obj:20218" version="1" comment="/etc/cron.d">
                  <unix-def:behaviors recurse="symlinks and directories"/>
                  <unix-def:path>/etc/cron.d</unix-def:path>
                  <unix-def:filename xsi:nil="true"/>
            </unix-def:file_object>
            <unix-def:file_object id="oval:org.open-scap.f14:obj:20223" version="1" comment="/etc/cron.d">
                  <unix-def:behaviors recurse="symlinks and directories"/>
                  <unix-def:path>/etc/cron.d</unix-def:path>
                  <unix-def:filename xsi:nil="true"/>
            </unix-def:file_object>
            <unix-def:file_object id="oval:org.open-scap.f14:obj:20221" version="1" comment="/etc/cron.weekly">
                  <unix-def:path>/etc/cron.weekly</unix-def:path>
                  <unix-def:filename xsi:nil="true"/>
            </unix-def:file_object>
            <unix-def:file_object id="oval:org.open-scap.f14:obj:20211" version="1" comment="/etc/anacrontab">
                  <unix-def:path>/etc</unix-def:path>
                  <unix-def:filename>anacrontab</unix-def:filename>
            </unix-def:file_object>
            <unix-def:file_object id="oval:org.open-scap.f14:obj:20224" version="1" comment="/etc/cron.hourly">
                  <unix-def:path>/etc/cron.hourly</unix-def:path>
                  <unix-def:filename xsi:nil="true"/>
            </unix-def:file_object>
            <unix-def:file_object id="oval:org.open-scap.f14:obj:20219" version="1" comment="/etc/cron.hourly">
                  <unix-def:path>/etc/cron.hourly</unix-def:path>
                  <unix-def:filename xsi:nil="true"/>
            </unix-def:file_object>
            <unix-def:password_object id="oval:org.open-scap.f14:obj:202191" version="1">
                  <unix-def:username operation="equals" var_ref="oval:org.open-scap.f14:var:20219"/>
            </unix-def:password_object>
            <unix-def:password_object id="oval:org.open-scap.f14:obj:2014911" version="1">
                  <unix-def:username operation="equals" var_ref="oval:org.open-scap.f14:var:20149"/>
            </unix-def:password_object>
            <unix-def:file_object id="oval:org.open-scap.f14:obj:20208" version="1" comment="/etc/crontab">
                  <unix-def:path>/etc</unix-def:path>
                  <unix-def:filename>crontab</unix-def:filename>
            </unix-def:file_object>
            <unix-def:file_object id="oval:org.open-scap.f14:obj:20220" version="1" comment="/etc/cron.daily">
                  <unix-def:path>/etc/cron.daily</unix-def:path>
                  <unix-def:filename xsi:nil="true"/>
            </unix-def:file_object>
            <unix-def:file_object id="oval:org.open-scap.f14:obj:20213" version="1" comment="/etc/anacrontab">
                  <unix-def:path>/etc</unix-def:path>
                  <unix-def:filename>anacrontab</unix-def:filename>
            </unix-def:file_object>
            <unix-def:file_object id="oval:org.open-scap.f14:obj:20226" version="1" comment="/etc/cron.weekly">
                  <unix-def:path>/etc/cron.weekly</unix-def:path>
                  <unix-def:filename xsi:nil="true"/>
            </unix-def:file_object>
            <unix-def:file_object id="oval:org.open-scap.f14:obj:20227" version="1" comment="/etc/cron.monthly">
                  <unix-def:path>/etc/cron.monthly</unix-def:path>
                  <unix-def:filename xsi:nil="true"/>
            </unix-def:file_object>
            <unix-def:file_object id="oval:org.open-scap.f14:obj:20215" version="1" comment="/etc/cron.daily">
                  <unix-def:path>/etc/cron.daily</unix-def:path>
                  <unix-def:filename xsi:nil="true"/>
            </unix-def:file_object>
            <unix-def:file_object id="oval:org.open-scap.f14:obj:20228" version="1" comment="/etc/cron.d">
                  <unix-def:behaviors recurse="symlinks and directories"/>
                  <unix-def:path>/etc/cron.d</unix-def:path>
                  <unix-def:filename xsi:nil="true"/>
            </unix-def:file_object>
            <unix-def:file_object id="oval:org.open-scap.f14:obj:20229" version="1" comment="/var/spool/cron">
                  <unix-def:path>/var/spool/cron</unix-def:path>
                  <unix-def:filename xsi:nil="true"/>
            </unix-def:file_object>
            <unix-def:file_object id="oval:org.open-scap.f14:obj:20232" version="1" comment="/var/spool/cron">
                  <unix-def:path>/etc</unix-def:path>
                  <unix-def:filename>cron.deny</unix-def:filename>
            </unix-def:file_object>
            <unix-def:file_object id="oval:org.open-scap.f14:obj:20233" version="1" comment="/etc/at.deny">
                  <unix-def:path>/etc</unix-def:path>
                  <unix-def:filename>at.deny</unix-def:filename>
            </unix-def:file_object>
            <unix-def:runlevel_object id="oval:org.open-scap.f14:obj:20234" version="1">
                  <unix-def:service_name>sshd</unix-def:service_name>
                  <unix-def:runlevel operation="pattern match">.*</unix-def:runlevel>
            </unix-def:runlevel_object>
            <lin-def:rpminfo_object id="oval:org.open-scap.f14:obj:20235" version="1">
                  <lin-def:name>openssh-server</lin-def:name>
            </lin-def:rpminfo_object>
            <ind-def:textfilecontent54_object id="oval:org.open-scap.f14:obj:20236" version="1">
                  <ind-def:path>/etc/sysconfig</ind-def:path>
                  <ind-def:filename>iptables</ind-def:filename>
                  <ind-def:pattern operation="pattern match">^[[:space:]]*-A[[:space:]]+.*INPUT[[:space:]]+-m[[:space:]]+state[[:space:]]+--state[[:space:]]+NEW[[:space:]]+-m[[:space:]]+tcp[[:space:]]+-p[[:space:]]+tcp[[:space:]]+--dport[[:space:]]+22[[:space:]]+-j[[:space:]]+ACCEPT[[:space:]]*$</ind-def:pattern>
                  <ind-def:instance datatype="int">1</ind-def:instance>
            </ind-def:textfilecontent54_object>
            <ind-def:textfilecontent54_object id="oval:org.open-scap.f14:obj:20237" version="1">
                  <ind-def:path>/etc/sysconfig</ind-def:path>
                  <ind-def:filename>ip6tables</ind-def:filename>
                  <ind-def:pattern operation="pattern match">^[[:space:]]*-A[[:space:]]+.*INPUT[[:space:]]+-m[[:space:]]+state[[:space:]]+--state[[:space:]]+NEW[[:space:]]+-m[[:space:]]+tcp[[:space:]]+-p[[:space:]]+tcp[[:space:]]+--dport[[:space:]]+22[[:space:]]+-j[[:space:]]+ACCEPT[[:space:]]*$</ind-def:pattern>
                  <ind-def:instance datatype="int">1</ind-def:instance>
            </ind-def:textfilecontent54_object>
            <ind-def:textfilecontent54_object id="oval:org.open-scap.f14:obj:20238" version="1">
                  <ind-def:path>/etc/ssh</ind-def:path>
                  <ind-def:filename>sshd_config</ind-def:filename>
                  <ind-def:pattern operation="pattern match">^[[:space:]]*Protocol[[:space:]](2)</ind-def:pattern>
                  <ind-def:instance datatype="int">1</ind-def:instance>
            </ind-def:textfilecontent54_object>
            <ind-def:textfilecontent54_object id="oval:org.open-scap.f14:obj:20239" version="1">
                  <ind-def:path>/etc/ssh</ind-def:path>
                  <ind-def:filename>sshd_config</ind-def:filename>
                  <ind-def:pattern operation="pattern match">^[[:space:]]*ClientAliveInterval[[:space:]]*([[:digit:]]+)</ind-def:pattern>
                  <ind-def:instance datatype="int">1</ind-def:instance>
            </ind-def:textfilecontent54_object>
            <ind-def:textfilecontent54_object id="oval:org.open-scap.f14:obj:20240" version="1">
                  <ind-def:path>/etc/ssh</ind-def:path>
                  <ind-def:filename>sshd_config</ind-def:filename>
                  <ind-def:pattern operation="pattern match">^[[:space:]]*ClientAliveCountMax[[:space:]]*([[:digit:]]+)</ind-def:pattern>
                  <ind-def:instance datatype="int">1</ind-def:instance>
            </ind-def:textfilecontent54_object>
            <ind-def:textfilecontent54_object id="oval:org.open-scap.f14:obj:20241" version="1">
                  <ind-def:path>/etc/ssh</ind-def:path>
                  <ind-def:filename>sshd_config</ind-def:filename>
                  <ind-def:pattern operation="pattern match">^[[:space:]]*IgnoreRhosts[[:space:]]*yes</ind-def:pattern>
                  <ind-def:instance datatype="int">1</ind-def:instance>
            </ind-def:textfilecontent54_object>
            <ind-def:textfilecontent54_object id="oval:org.open-scap.f14:obj:20242" version="1">
                  <ind-def:path>/etc/ssh</ind-def:path>
                  <ind-def:filename>sshd_config</ind-def:filename>
                  <ind-def:pattern operation="pattern match">^[[:space:]]*HostbasedAuthentication[[:space:]]*no</ind-def:pattern>
                  <ind-def:instance datatype="int">1</ind-def:instance>
            </ind-def:textfilecontent54_object>
            <ind-def:textfilecontent54_object id="oval:org.open-scap.f14:obj:20243" version="1">
                  <ind-def:path>/etc/ssh</ind-def:path>
                  <ind-def:filename>sshd_config</ind-def:filename>
                  <ind-def:pattern operation="pattern match">^[[:space:]]*PermitRootLogin[[:space:]]*no</ind-def:pattern>
                  <ind-def:instance datatype="int">1</ind-def:instance>
            </ind-def:textfilecontent54_object>
            <ind-def:textfilecontent54_object id="oval:org.open-scap.f14:obj:20244" version="1">
                  <ind-def:path>/etc/ssh</ind-def:path>
                  <ind-def:filename>sshd_config</ind-def:filename>
                  <ind-def:pattern operation="pattern match">^[[:space:]]*PermitEmptyPasswords[[:space:]]*no</ind-def:pattern>
                  <ind-def:instance datatype="int">1</ind-def:instance>
            </ind-def:textfilecontent54_object>
            <ind-def:textfilecontent54_object id="oval:org.open-scap.f14:obj:20245" version="1">
                  <ind-def:path>/etc/ssh</ind-def:path>
                  <ind-def:filename>sshd_config</ind-def:filename>
                  <ind-def:pattern operation="pattern match">^[[:space:]]*Banner[[:space:]]+/etc/issue$</ind-def:pattern>
                  <ind-def:instance datatype="int">1</ind-def:instance>
            </ind-def:textfilecontent54_object>
            <ind-def:textfilecontent54_object id="oval:org.open-scap.f14:obj:202455" version="1">
                  <ind-def:path>/etc/ssh</ind-def:path>
                  <ind-def:filename>sshd_config</ind-def:filename>
                  <ind-def:pattern operation="pattern match">^[[:space:]]*PermitUserEnvironment[[:space:]]+no</ind-def:pattern>
                  <ind-def:instance datatype="int">1</ind-def:instance>
            </ind-def:textfilecontent54_object>
            <ind-def:textfilecontent54_object id="oval:org.open-scap.f14:obj:202456" version="1">
                  <ind-def:path>/etc/ssh</ind-def:path>
                  <ind-def:filename>sshd_config</ind-def:filename>
                  <ind-def:pattern operation="pattern match">^[[:space:]]*Ciphers[[:space:]]+([^ \t\r\n\v\f]+)</ind-def:pattern>
                  <ind-def:instance datatype="int">1</ind-def:instance>
            </ind-def:textfilecontent54_object>
            <ind-def:textfilecontent54_object id="oval:org.open-scap.f14:obj:20246" version="1">
                  <ind-def:path>/etc</ind-def:path>
                  <ind-def:filename>inittab</ind-def:filename>
                  <ind-def:pattern operation="pattern match">^[\s]*id:([^:]*):initdefault:</ind-def:pattern>
                  <ind-def:instance datatype="int">1</ind-def:instance>
            </ind-def:textfilecontent54_object>
            <ind-def:textfilecontent54_object id="oval:org.open-scap.f14:obj:20248" version="1">
                  <ind-def:path>/etc/X11/xinit</ind-def:path>
                  <ind-def:filename>xserverrc</ind-def:filename>
                  <ind-def:pattern operation="pattern match">^[\s]*exec\sX\s:0\s\-nolisten\stcp\s\$@</ind-def:pattern>
                  <ind-def:instance datatype="int">1</ind-def:instance>
            </ind-def:textfilecontent54_object>
            <ind-def:textfilecontent54_object id="oval:org.open-scap.f14:obj:20249" version="1">
                  <ind-def:path>/etc/gdm</ind-def:path>
                  <ind-def:filename>custom.conf</ind-def:filename>
                  <ind-def:pattern operation="pattern match">^[\s]*InfoMsgFile[\s]*=[\s]*/etc/issue</ind-def:pattern>
                  <ind-def:instance datatype="int">1</ind-def:instance>
            </ind-def:textfilecontent54_object>
            <unix-def:runlevel_object id="oval:org.open-scap.f14:obj:20250" version="1">
                  <unix-def:service_name>avahi-daemon</unix-def:service_name>
                  <unix-def:runlevel operation="pattern match">.*</unix-def:runlevel>
            </unix-def:runlevel_object>
            <ind-def:textfilecontent54_object id="oval:org.open-scap.f14:obj:20253" version="1">
                  <ind-def:path>/etc/avahi</ind-def:path>
                  <ind-def:filename>avahi-daemon.conf</ind-def:filename>
                  <ind-def:pattern operation="pattern match">check-response-ttl[\s]*=[\s]*([^#]*)</ind-def:pattern>
                  <ind-def:instance datatype="int">1</ind-def:instance>
            </ind-def:textfilecontent54_object>
            <ind-def:textfilecontent54_object id="oval:org.open-scap.f14:obj:20254" version="1">
                  <ind-def:path>/etc/avahi</ind-def:path>
                  <ind-def:filename>avahi-daemon.conf</ind-def:filename>
                  <ind-def:pattern operation="pattern match">disallow-other-stacks[\s]*=[\s]*([^#]*)</ind-def:pattern>
                  <ind-def:instance datatype="int">1</ind-def:instance>
            </ind-def:textfilecontent54_object>
            <ind-def:textfilecontent54_object id="oval:org.open-scap.f14:obj:20255" version="1">
                  <ind-def:path>/etc/avahi</ind-def:path>
                  <ind-def:filename>avahi-daemon.conf</ind-def:filename>
                  <ind-def:pattern operation="pattern match">disable-publishing[\s]*=[\s]*([^#]*)</ind-def:pattern>
                  <ind-def:instance datatype="int">1</ind-def:instance>
            </ind-def:textfilecontent54_object>
            <ind-def:textfilecontent54_object id="oval:org.open-scap.f14:obj:20256" version="1">
                  <ind-def:path>/etc/avahi</ind-def:path>
                  <ind-def:filename>avahi-daemon.conf</ind-def:filename>
                  <ind-def:pattern operation="pattern match">disable-user-service-publishing[\s]*=[\s]*([^#]*)</ind-def:pattern>
                  <ind-def:instance datatype="int">1</ind-def:instance>
            </ind-def:textfilecontent54_object>
            <ind-def:textfilecontent54_object id="oval:org.open-scap.f14:obj:20257" version="1">
                  <ind-def:path>/etc/avahi</ind-def:path>
                  <ind-def:filename>avahi-daemon.conf</ind-def:filename>
                  <ind-def:pattern operation="pattern match">publish-hinfo[\s]*=[\s]*([^#]*)</ind-def:pattern>
                  <ind-def:instance datatype="int">1</ind-def:instance>
            </ind-def:textfilecontent54_object>
            <ind-def:textfilecontent54_object id="oval:org.open-scap.f14:obj:20258" version="1">
                  <ind-def:path>/etc/avahi</ind-def:path>
                  <ind-def:filename>avahi-daemon.conf</ind-def:filename>
                  <ind-def:pattern operation="pattern match">publish-workstation[\s]*=[\s]*([^#]*)</ind-def:pattern>
                  <ind-def:instance datatype="int">1</ind-def:instance>
            </ind-def:textfilecontent54_object>
            <ind-def:textfilecontent54_object id="oval:org.open-scap.f14:obj:20259" version="1">
                  <ind-def:path>/etc/avahi</ind-def:path>
                  <ind-def:filename>avahi-daemon.conf</ind-def:filename>
                  <ind-def:pattern operation="pattern match">publish-addresses[\s]*=[\s]*([^#]*)</ind-def:pattern>
                  <ind-def:instance datatype="int">1</ind-def:instance>
            </ind-def:textfilecontent54_object>
            <ind-def:textfilecontent54_object id="oval:org.open-scap.f14:obj:20260" version="1">
                  <ind-def:path>/etc/avahi</ind-def:path>
                  <ind-def:filename>avahi-daemon.conf</ind-def:filename>
                  <ind-def:pattern operation="pattern match">publish-domain[\s]*=[\s]*([^#]*)</ind-def:pattern>
                  <ind-def:instance datatype="int">1</ind-def:instance>
            </ind-def:textfilecontent54_object>
            <unix-def:runlevel_object id="oval:org.open-scap.f14:obj:20261" version="1">
                  <unix-def:service_name>cups</unix-def:service_name>
                  <unix-def:runlevel operation="pattern match">.*</unix-def:runlevel>
            </unix-def:runlevel_object>
            <ind-def:textfilecontent54_object id="oval:org.open-scap.f14:obj:20264" version="1">
                  <ind-def:path>/etc/cups</ind-def:path>
                  <ind-def:filename>cupsd.conf</ind-def:filename>
                  <ind-def:pattern operation="pattern match">Browsing[\s]+([^#]*)</ind-def:pattern>
                  <ind-def:instance datatype="int">1</ind-def:instance>
            </ind-def:textfilecontent54_object>
            <ind-def:textfilecontent54_object id="oval:org.open-scap.f14:obj:20265" version="1">
                  <ind-def:path>/etc/cups</ind-def:path>
                  <ind-def:filename>cupsd.conf</ind-def:filename>
                  <ind-def:pattern operation="pattern match">BrowseAllow[\s]+none</ind-def:pattern>
                  <ind-def:instance datatype="int">1</ind-def:instance>
            </ind-def:textfilecontent54_object>
            <unix-def:runlevel_object id="oval:org.open-scap.f14:obj:20266" version="1">
                  <unix-def:service_name>hplip</unix-def:service_name>
                  <unix-def:runlevel operation="pattern match">.*</unix-def:runlevel>
            </unix-def:runlevel_object>
            <ind-def:textfilecontent54_object id="oval:org.open-scap.f14:obj:20267" version="1">
                  <ind-def:path>/etc/sysconfig/network-scripts</ind-def:path>
                  <ind-def:filename operation="pattern match">ifcfg-eth.*</ind-def:filename>
                  <ind-def:pattern operation="pattern match">^[\s]*BOOTPROTO[\s]*=[\s]*([^#]*)</ind-def:pattern>
                  <ind-def:instance datatype="int">1</ind-def:instance>
            </ind-def:textfilecontent54_object>
            <ind-def:variable_object id="oval:org.open-scap.f14:obj:256" version="1">
                  <ind-def:var_ref>oval:org.open-scap.f14:var:20267</ind-def:var_ref>
            </ind-def:variable_object>
            <unix-def:runlevel_object id="oval:org.open-scap.f14:obj:20268" version="1">
                  <unix-def:service_name>dhcpd</unix-def:service_name>
                  <unix-def:runlevel operation="pattern match">.*</unix-def:runlevel>
            </unix-def:runlevel_object>
            <lin-def:rpminfo_object id="oval:org.open-scap.f14:obj:20269" version="1">
                  <lin-def:name>dhcp</lin-def:name>
            </lin-def:rpminfo_object>
            <ind-def:textfilecontent54_object id="oval:org.open-scap.f14:obj:20270" version="1">
                  <ind-def:path>/etc</ind-def:path>
                  <ind-def:filename>dhcpd.conf</ind-def:filename>
                  <ind-def:pattern operation="pattern match">ddns-update-style[\s]+none;</ind-def:pattern>
                  <ind-def:instance datatype="int">1</ind-def:instance>
            </ind-def:textfilecontent54_object>
            <ind-def:textfilecontent54_object id="oval:org.open-scap.f14:obj:20271" version="1">
                  <ind-def:path>/etc</ind-def:path>
                  <ind-def:filename>dhcpd.conf</ind-def:filename>
                  <ind-def:pattern operation="pattern match">deny[\s]+declines;</ind-def:pattern>
                  <ind-def:instance datatype="int">1</ind-def:instance>
            </ind-def:textfilecontent54_object>
            <ind-def:textfilecontent54_object id="oval:org.open-scap.f14:obj:20272" version="1">
                  <ind-def:path>/etc</ind-def:path>
                  <ind-def:filename>dhcpd.conf</ind-def:filename>
                  <ind-def:pattern operation="pattern match">deny[\s]+bootp;</ind-def:pattern>
                  <ind-def:instance datatype="int">1</ind-def:instance>
            </ind-def:textfilecontent54_object>
            <ind-def:textfilecontent54_object id="oval:org.open-scap.f14:obj:267" version="1">
                  <ind-def:path>/etc</ind-def:path>
                  <ind-def:filename>dhcpd.conf</ind-def:filename>
                  <ind-def:pattern operation="pattern match">option[\s]+domain-name-servers</ind-def:pattern>
                  <ind-def:instance datatype="int">1</ind-def:instance>
            </ind-def:textfilecontent54_object>
            <ind-def:textfilecontent54_object id="oval:org.open-scap.f14:obj:269" version="1">
                  <ind-def:path>/etc</ind-def:path>
                  <ind-def:filename>dhcpd.conf</ind-def:filename>
                  <ind-def:pattern operation="pattern match">option[\s]+routers</ind-def:pattern>
                  <ind-def:instance datatype="int">1</ind-def:instance>
            </ind-def:textfilecontent54_object>
            <ind-def:textfilecontent54_object id="oval:org.open-scap.f14:obj:271" version="1">
                  <ind-def:path>/etc</ind-def:path>
                  <ind-def:filename>dhcpd.conf</ind-def:filename>
                  <ind-def:pattern operation="pattern match">option[\s]+domain-name</ind-def:pattern>
                  <ind-def:instance datatype="int">1</ind-def:instance>
            </ind-def:textfilecontent54_object>
            <ind-def:textfilecontent54_object id="oval:org.open-scap.f14:obj:273" version="1">
                  <ind-def:path>/etc</ind-def:path>
                  <ind-def:filename>dhcpd.conf</ind-def:filename>
                  <ind-def:pattern operation="pattern match">option[\s]+nis-domain</ind-def:pattern>
                  <ind-def:instance datatype="int">1</ind-def:instance>
            </ind-def:textfilecontent54_object>
            <ind-def:textfilecontent54_object id="oval:org.open-scap.f14:obj:275" version="1">
                  <ind-def:path>/etc</ind-def:path>
                  <ind-def:filename>dhcpd.conf</ind-def:filename>
                  <ind-def:pattern operation="pattern match">option[\s]+nis-servers</ind-def:pattern>
                  <ind-def:instance datatype="int">1</ind-def:instance>
            </ind-def:textfilecontent54_object>
            <ind-def:textfilecontent54_object id="oval:org.open-scap.f14:obj:277" version="1">
                  <ind-def:path>/etc</ind-def:path>
                  <ind-def:filename>dhcpd.conf</ind-def:filename>
                  <ind-def:pattern operation="pattern match">option[\s]+time-offset</ind-def:pattern>
                  <ind-def:instance datatype="int">1</ind-def:instance>
            </ind-def:textfilecontent54_object>
            <ind-def:textfilecontent54_object id="oval:org.open-scap.f14:obj:279" version="1">
                  <ind-def:path>/etc</ind-def:path>
                  <ind-def:filename>dhcpd.conf</ind-def:filename>
                  <ind-def:pattern operation="pattern match">option[\s]+ntp-servers</ind-def:pattern>
                  <ind-def:instance datatype="int">1</ind-def:instance>
            </ind-def:textfilecontent54_object>
            <ind-def:textfilecontent54_object id="oval:org.open-scap.f14:obj:20280" version="1">
                  <ind-def:path>/etc</ind-def:path>
                  <ind-def:filename>syslog.conf</ind-def:filename>
                  <ind-def:pattern operation="pattern match">daemon\.\*[\s]+/var/log/daemon\.log</ind-def:pattern>
                  <ind-def:instance datatype="int">1</ind-def:instance>
            </ind-def:textfilecontent54_object>
            <unix-def:runlevel_object id="oval:org.open-scap.f14:obj:20281" version="1">
                  <unix-def:service_name>ntpd</unix-def:service_name>
                  <unix-def:runlevel operation="pattern match">.*</unix-def:runlevel>
            </unix-def:runlevel_object>
            <ind-def:textfilecontent54_object id="oval:org.open-scap.f14:obj:20282" version="1">
                  <ind-def:path>/etc</ind-def:path>
                  <ind-def:filename>ntp.conf</ind-def:filename>
                  <ind-def:pattern operation="pattern match">restrict[\s]+default[\s]+ignore</ind-def:pattern>
                  <ind-def:instance datatype="int">1</ind-def:instance>
            </ind-def:textfilecontent54_object>
            <ind-def:textfilecontent54_object id="oval:org.open-scap.f14:obj:20285" version="1">
                  <ind-def:path>/etc</ind-def:path>
                  <ind-def:filename>rc.local</ind-def:filename>
                  <ind-def:pattern operation="pattern match">/usr/local/sbin/ntpd -s</ind-def:pattern>
                  <ind-def:instance datatype="int">1</ind-def:instance>
            </ind-def:textfilecontent54_object>
            <unix-def:runlevel_object id="oval:org.open-scap.f14:obj:20287" version="1">
                  <unix-def:service_name>sendmail</unix-def:service_name>
                  <unix-def:runlevel operation="pattern match">.*</unix-def:runlevel>
            </unix-def:runlevel_object>
            <ind-def:textfilecontent54_object id="oval:org.open-scap.f14:obj:20288" version="1">
                  <ind-def:path>/etc/sysconfig</ind-def:path>
                  <ind-def:filename>sendmail</ind-def:filename>
                  <ind-def:pattern operation="pattern match">DAEMON[\s]*=[\s]*yes</ind-def:pattern>
                  <ind-def:instance datatype="int">1</ind-def:instance>
            </ind-def:textfilecontent54_object>
            <ind-def:textfilecontent54_object id="oval:org.open-scap.f14:obj:202885" version="1">
                  <ind-def:path>/etc</ind-def:path>
                  <ind-def:filename>ldap.conf</ind-def:filename>
                  <ind-def:pattern operation="pattern match">^[\s]*tls_checkpeer[\s]+yes</ind-def:pattern>
                  <ind-def:instance datatype="int">1</ind-def:instance>
            </ind-def:textfilecontent54_object>
            <unix-def:runlevel_object id="oval:org.open-scap.f14:obj:20289" version="1">
                  <unix-def:service_name>ldap</unix-def:service_name>
                  <unix-def:runlevel operation="pattern match">.*</unix-def:runlevel>
            </unix-def:runlevel_object>
            <unix-def:file_object id="oval:org.open-scap.f14:obj:20290" version="1" comment="/var/lib/ldap/.*">
                  <unix-def:path>/var/lib/ldap</unix-def:path>
                  <unix-def:filename operation="pattern match">.*</unix-def:filename>
            </unix-def:file_object>
            <unix-def:file_object id="oval:org.open-scap.f14:obj:20291" version="1" comment="/var/lib/ldap/.*">
                  <unix-def:path>/var/lib/ldap</unix-def:path>
                  <unix-def:filename operation="pattern match">.*</unix-def:filename>
            </unix-def:file_object>
            <unix-def:runlevel_object id="oval:org.open-scap.f14:obj:20292" version="1">
                  <unix-def:service_name>nfslock</unix-def:service_name>
                  <unix-def:runlevel operation="pattern match">.*</unix-def:runlevel>
            </unix-def:runlevel_object>
            <unix-def:runlevel_object id="oval:org.open-scap.f14:obj:20293" version="1">
                  <unix-def:service_name>rpcgssd</unix-def:service_name>
                  <unix-def:runlevel operation="pattern match">.*</unix-def:runlevel>
            </unix-def:runlevel_object>
            <unix-def:runlevel_object id="oval:org.open-scap.f14:obj:20294" version="1">
                  <unix-def:service_name>rpcidmapd</unix-def:service_name>
                  <unix-def:runlevel operation="pattern match">.*</unix-def:runlevel>
            </unix-def:runlevel_object>
            <unix-def:runlevel_object id="oval:org.open-scap.f14:obj:20295" version="1">
                  <unix-def:service_name>netfs</unix-def:service_name>
                  <unix-def:runlevel operation="pattern match">.*</unix-def:runlevel>
            </unix-def:runlevel_object>
            <unix-def:runlevel_object id="oval:org.open-scap.f14:obj:20296" version="1">
                  <unix-def:service_name>portmap</unix-def:service_name>
                  <unix-def:runlevel operation="pattern match">.*</unix-def:runlevel>
            </unix-def:runlevel_object>
            <ind-def:textfilecontent54_object id="oval:org.open-scap.f14:obj:20297" version="1">
                  <ind-def:path>/etc/sysconfig</ind-def:path>
                  <ind-def:filename>nfs</ind-def:filename>
                  <ind-def:pattern operation="pattern match">LOCKD_TCPPORT[\s]*=[\s]*[0-9]</ind-def:pattern>
                  <ind-def:instance datatype="int">1</ind-def:instance>
            </ind-def:textfilecontent54_object>
            <ind-def:textfilecontent54_object id="oval:org.open-scap.f14:obj:20298" version="1">
                  <ind-def:path>/etc/sysconfig</ind-def:path>
                  <ind-def:filename>nfs</ind-def:filename>
                  <ind-def:pattern operation="pattern match">STATD_OUTGOING_PORT[\s]*=[\s]*[0-9]</ind-def:pattern>
                  <ind-def:instance datatype="int">1</ind-def:instance>
            </ind-def:textfilecontent54_object>
            <ind-def:textfilecontent54_object id="oval:org.open-scap.f14:obj:20299" version="1">
                  <ind-def:path>/etc/sysconfig</ind-def:path>
                  <ind-def:filename>nfs</ind-def:filename>
                  <ind-def:pattern operation="pattern match">STATD_PORT[\s]*=[\s]*[0-9]</ind-def:pattern>
                  <ind-def:instance datatype="int">1</ind-def:instance>
            </ind-def:textfilecontent54_object>
            <ind-def:textfilecontent54_object id="oval:org.open-scap.f14:obj:20300" version="1">
                  <ind-def:path>/etc/sysconfig</ind-def:path>
                  <ind-def:filename>nfs</ind-def:filename>
                  <ind-def:pattern operation="pattern match">LOCKD_UDPPORT[\s]*=[\s]*[0-9]</ind-def:pattern>
                  <ind-def:instance datatype="int">1</ind-def:instance>
            </ind-def:textfilecontent54_object>
            <ind-def:textfilecontent54_object id="oval:org.open-scap.f14:obj:20301" version="1">
                  <ind-def:path>/etc/sysconfig</ind-def:path>
                  <ind-def:filename>nfs</ind-def:filename>
                  <ind-def:pattern operation="pattern match">MOUNTD_PORT[\s]*=[\s]*[0-9]</ind-def:pattern>
                  <ind-def:instance datatype="int">1</ind-def:instance>
            </ind-def:textfilecontent54_object>
            <ind-def:textfilecontent54_object id="oval:org.open-scap.f14:obj:20302" version="1">
                  <ind-def:path>/etc/sysconfig</ind-def:path>
                  <ind-def:filename>nfs</ind-def:filename>
                  <ind-def:pattern operation="pattern match">RQUOTAD_PORT[\s]*=[\s]*[0-9]</ind-def:pattern>
                  <ind-def:instance datatype="int">1</ind-def:instance>
            </ind-def:textfilecontent54_object>
            <unix-def:runlevel_object id="oval:org.open-scap.f14:obj:20303" version="1">
                  <unix-def:service_name>nfs</unix-def:service_name>
                  <unix-def:runlevel operation="pattern match">.*</unix-def:runlevel>
            </unix-def:runlevel_object>
            <unix-def:runlevel_object id="oval:org.open-scap.f14:obj:20304" version="1">
                  <unix-def:service_name>rpcsvcgssd</unix-def:service_name>
                  <unix-def:runlevel operation="pattern match">.*</unix-def:runlevel>
            </unix-def:runlevel_object>
            <ind-def:textfilecontent54_object id="oval:org.open-scap.f14:obj:20308" version="1">
                  <ind-def:path>/etc</ind-def:path>
                  <ind-def:filename>exports</ind-def:filename>
                  <ind-def:pattern operation="pattern match">no_root_squash</ind-def:pattern>
                  <ind-def:instance datatype="int">1</ind-def:instance>
            </ind-def:textfilecontent54_object>
            <ind-def:textfilecontent54_object id="oval:org.open-scap.f14:obj:20309" version="1">
                  <ind-def:path>/etc</ind-def:path>
                  <ind-def:filename>exports</ind-def:filename>
                  <ind-def:pattern operation="pattern match">insecure</ind-def:pattern>
                  <ind-def:instance datatype="int">1</ind-def:instance>
            </ind-def:textfilecontent54_object>
            <ind-def:textfilecontent54_object id="oval:org.open-scap.f14:obj:20310" version="1">
                  <ind-def:path>/etc</ind-def:path>
                  <ind-def:filename>exports</ind-def:filename>
                  <ind-def:pattern operation="pattern match">rw</ind-def:pattern>
                  <ind-def:instance datatype="int">1</ind-def:instance>
            </ind-def:textfilecontent54_object>
            <unix-def:runlevel_object id="oval:org.open-scap.f14:obj:20311" version="1">
                  <unix-def:service_name>named</unix-def:service_name>
                  <unix-def:runlevel operation="pattern match">.*</unix-def:runlevel>
            </unix-def:runlevel_object>
            <lin-def:rpminfo_object id="oval:org.open-scap.f14:obj:20312" version="1">
                  <lin-def:name>bind</lin-def:name>
            </lin-def:rpminfo_object>
            <unix-def:file_object id="oval:org.open-scap.f14:obj:20313" version="1" comment="/var/named/chroot/etc/named.conf">
                  <unix-def:path>/var/named/chroot/etc</unix-def:path>
                  <unix-def:filename>named.conf</unix-def:filename>
            </unix-def:file_object>
            <unix-def:file_object id="oval:org.open-scap.f14:obj:20315" version="1" comment="/var/named/chroot/etc/named.conf">
                  <unix-def:path>/var/named/chroot/etc</unix-def:path>
                  <unix-def:filename>named.conf</unix-def:filename>
            </unix-def:file_object>
            <unix-def:file_object id="oval:org.open-scap.f14:obj:20314" version="1" comment="/var/named/chroot/etc/named.conf">
                  <unix-def:path>/var/named/chroot/etc</unix-def:path>
                  <unix-def:filename>named.conf</unix-def:filename>
            </unix-def:file_object>
            <unix-def:runlevel_object id="oval:org.open-scap.f14:obj:20317" version="1">
                  <unix-def:service_name>vsftpd</unix-def:service_name>
                  <unix-def:runlevel operation="pattern match">.*</unix-def:runlevel>
            </unix-def:runlevel_object>
            <lin-def:rpminfo_object id="oval:org.open-scap.f14:obj:203175" version="1">
                  <lin-def:name>vsftpd</lin-def:name>
            </lin-def:rpminfo_object>
            <ind-def:textfilecontent54_object id="oval:org.open-scap.f14:obj:20319" version="1">
                  <ind-def:path>/etc</ind-def:path>
                  <ind-def:filename>vsftpd.conf</ind-def:filename>
                  <ind-def:pattern operation="pattern match">banner_file[\s]*=[\s]*/etc/issue</ind-def:pattern>
                  <ind-def:instance datatype="int">1</ind-def:instance>
            </ind-def:textfilecontent54_object>
            <ind-def:textfilecontent54_object id="oval:org.open-scap.f14:obj:340" version="1">
                  <ind-def:path>/etc</ind-def:path>
                  <ind-def:filename>vsftpd.conf</ind-def:filename>
                  <ind-def:pattern operation="pattern match">local_enable[\s]*=[\s]*([^#]*)</ind-def:pattern>
                  <ind-def:instance datatype="int">1</ind-def:instance>
            </ind-def:textfilecontent54_object>
            <ind-def:textfilecontent54_object id="oval:org.open-scap.f14:obj:341" version="1">
                  <ind-def:path>/etc</ind-def:path>
                  <ind-def:filename>vsftpd.conf</ind-def:filename>
                  <ind-def:pattern operation="pattern match">write_enable[\s]*=[\s]*([^#]*)</ind-def:pattern>
                  <ind-def:instance datatype="int">1</ind-def:instance>
            </ind-def:textfilecontent54_object>
            <unix-def:runlevel_object id="oval:org.open-scap.f14:obj:20322" version="1">
                  <unix-def:service_name>httpd</unix-def:service_name>
                  <unix-def:runlevel operation="pattern match">.*</unix-def:runlevel>
            </unix-def:runlevel_object>
            <lin-def:rpminfo_object id="oval:org.open-scap.f14:obj:20323" version="1">
                  <lin-def:name>httpd</lin-def:name>
            </lin-def:rpminfo_object>
            <ind-def:textfilecontent54_object id="oval:org.open-scap.f14:obj:20324" version="1">
                  <ind-def:path>/etc/httpd/conf</ind-def:path>
                  <ind-def:filename>httpd.conf</ind-def:filename>
                  <ind-def:pattern operation="pattern match">ServerTokens[\s]+([^#]*)</ind-def:pattern>
                  <ind-def:instance datatype="int">1</ind-def:instance>
            </ind-def:textfilecontent54_object>
            <ind-def:textfilecontent54_object id="oval:org.open-scap.f14:obj:20325" version="1">
                  <ind-def:path>/etc/httpd/conf</ind-def:path>
                  <ind-def:filename>httpd.conf</ind-def:filename>
                  <ind-def:pattern operation="pattern match">ServerSignature[\s]+([^#]*)</ind-def:pattern>
                  <ind-def:instance datatype="int">1</ind-def:instance>
            </ind-def:textfilecontent54_object>
            <unix-def:file_object id="oval:org.open-scap.f14:obj:20326" version="1" comment="/etc/httpd/conf">
                  <unix-def:path>/etc/httpd/conf</unix-def:path>
                  <unix-def:filename xsi:nil="true"/>
            </unix-def:file_object>
            <unix-def:file_object id="oval:org.open-scap.f14:obj:20327" version="1" comment="/etc/httpd/conf/.*">
                  <unix-def:path>/etc/httpd/conf</unix-def:path>
                  <unix-def:filename operation="pattern match">.*</unix-def:filename>
            </unix-def:file_object>
            <unix-def:file_object id="oval:org.open-scap.f14:obj:20328" version="1" comment="/usr/sbin/httpd">
                  <unix-def:path>/usr/sbin</unix-def:path>
                  <unix-def:filename>httpd</unix-def:filename>
            </unix-def:file_object>
            <unix-def:file_object id="oval:org.open-scap.f14:obj:20329" version="1" comment="/etc/httpd/conf/.*">
                  <unix-def:path>/etc/httpd/conf</unix-def:path>
                  <unix-def:filename operation="pattern match">.*</unix-def:filename>
            </unix-def:file_object>
            <unix-def:file_object id="oval:org.open-scap.f14:obj:20330" version="1" comment="/var/log/httpd">
                  <unix-def:path>/var/log/httpd</unix-def:path>
                  <unix-def:filename xsi:nil="true"/>
            </unix-def:file_object>
            <unix-def:runlevel_object id="oval:org.open-scap.f14:obj:20331" version="1">
                  <unix-def:service_name>dovecot</unix-def:service_name>
                  <unix-def:runlevel operation="pattern match">.*</unix-def:runlevel>
            </unix-def:runlevel_object>
            <lin-def:rpminfo_object id="oval:org.open-scap.f14:obj:20332" version="1">
                  <lin-def:name>dovecot</lin-def:name>
            </lin-def:rpminfo_object>
            <ind-def:textfilecontent54_object id="oval:org.open-scap.f14:obj:20333" version="1">
                  <ind-def:path>/etc</ind-def:path>
                  <ind-def:filename>dovecot.conf</ind-def:filename>
                  <ind-def:pattern operation="pattern match">protocols[\s]*=.*imaps</ind-def:pattern>
                  <ind-def:instance datatype="int">1</ind-def:instance>
            </ind-def:textfilecontent54_object>
            <ind-def:textfilecontent54_object id="oval:org.open-scap.f14:obj:20334" version="1">
                  <ind-def:path>/etc</ind-def:path>
                  <ind-def:filename>dovecot.conf</ind-def:filename>
                  <ind-def:pattern operation="pattern match">protocols[\s]*=.*pop3s</ind-def:pattern>
                  <ind-def:instance datatype="int">1</ind-def:instance>
            </ind-def:textfilecontent54_object>
            <ind-def:textfilecontent54_object id="oval:org.open-scap.f14:obj:20335" version="1">
                  <ind-def:path>/etc</ind-def:path>
                  <ind-def:filename>dovecot.conf</ind-def:filename>
                  <ind-def:pattern operation="pattern match">protocols[\s]*=.*pop3</ind-def:pattern>
                  <ind-def:instance datatype="int">1</ind-def:instance>
            </ind-def:textfilecontent54_object>
            <ind-def:textfilecontent54_object id="oval:org.open-scap.f14:obj:20336" version="1">
                  <ind-def:path>/etc</ind-def:path>
                  <ind-def:filename>dovecot.conf</ind-def:filename>
                  <ind-def:pattern operation="pattern match">protocols[\s]*=.*imap</ind-def:pattern>
                  <ind-def:instance datatype="int">1</ind-def:instance>
            </ind-def:textfilecontent54_object>
            <ind-def:textfilecontent54_object id="oval:org.open-scap.f14:obj:20337" version="1">
                  <ind-def:path>/etc</ind-def:path>
                  <ind-def:filename>dovecot.conf</ind-def:filename>
                  <ind-def:pattern operation="pattern match">disable_plaintext_auth[\s]*=[\s]*([^#]*)</ind-def:pattern>
                  <ind-def:instance datatype="int">1</ind-def:instance>
            </ind-def:textfilecontent54_object>
            <ind-def:textfilecontent54_object id="oval:org.open-scap.f14:obj:20338" version="1">
                  <ind-def:path>/etc</ind-def:path>
                  <ind-def:filename>dovecot.conf</ind-def:filename>
                  <ind-def:pattern operation="pattern match">mail_drop_priv_before_exec[\s]*=[\s]*([^#]*)</ind-def:pattern>
                  <ind-def:instance datatype="int">1</ind-def:instance>
            </ind-def:textfilecontent54_object>
            <ind-def:textfilecontent54_object id="oval:org.open-scap.f14:obj:20339" version="1">
                  <ind-def:path>/etc</ind-def:path>
                  <ind-def:filename>dovecot.conf</ind-def:filename>
                  <ind-def:pattern operation="pattern match">login_process_per_connection[\s]*=[\s]*([^#]*)</ind-def:pattern>
                  <ind-def:instance datatype="int">1</ind-def:instance>
            </ind-def:textfilecontent54_object>
            <unix-def:runlevel_object id="oval:org.open-scap.f14:obj:20340" version="1">
                  <unix-def:service_name>smb</unix-def:service_name>
                  <unix-def:runlevel operation="pattern match">.*</unix-def:runlevel>
            </unix-def:runlevel_object>
            <ind-def:textfilecontent54_object id="oval:org.open-scap.f14:obj:203403" version="1">
                  <ind-def:path>/etc/samba</ind-def:path>
                  <ind-def:filename>smb.conf</ind-def:filename>
                  <ind-def:pattern operation="pattern match">^[\s]*guest[\s]+ok[\s]*=[\s]yes</ind-def:pattern>
                  <ind-def:instance datatype="int">1</ind-def:instance>
            </ind-def:textfilecontent54_object>
            <ind-def:textfilecontent54_object id="oval:org.open-scap.f14:obj:2034010" version="1">
                  <ind-def:path>/etc/samba</ind-def:path>
                  <ind-def:filename>smb.conf</ind-def:filename>
                  <ind-def:pattern operation="pattern match">^[\s]*client[\s]+signing[\s]*=[\s]mandatory</ind-def:pattern>
                  <ind-def:instance datatype="int">1</ind-def:instance>
            </ind-def:textfilecontent54_object>
            <ind-def:textfilecontent54_object id="oval:org.open-scap.f14:obj:20340111" version="1">
                  <ind-def:path>/etc</ind-def:path>
                  <ind-def:filename>fstab</ind-def:filename>
                  <ind-def:pattern operation="pattern match">^[\s]*[\S]+[\s]+[\S]+[\s]+([\S]+)[\s]+([\S]+)</ind-def:pattern>
                  <ind-def:instance datatype="int">1</ind-def:instance>
            </ind-def:textfilecontent54_object>
            <ind-def:textfilecontent54_object id="oval:org.open-scap.f14:obj:20340112" version="1">
                  <ind-def:path>/etc</ind-def:path>
                  <ind-def:filename>mtab</ind-def:filename>
                  <ind-def:pattern operation="pattern match">^[\s]*[\S]+[\s]+[\S]+[\s]+([\S]+)[\s]+([\S]+)</ind-def:pattern>
                  <ind-def:instance datatype="int">1</ind-def:instance>
            </ind-def:textfilecontent54_object>
            <unix-def:runlevel_object id="oval:org.open-scap.f14:obj:20341" version="1">
                  <unix-def:service_name>squid</unix-def:service_name>
                  <unix-def:runlevel operation="pattern match">.*</unix-def:runlevel>
            </unix-def:runlevel_object>
            <lin-def:rpminfo_object id="oval:org.open-scap.f14:obj:20342" version="1">
                  <lin-def:name>squid</lin-def:name>
            </lin-def:rpminfo_object>
            <ind-def:textfilecontent54_object id="oval:org.open-scap.f14:obj:20343" version="1">
                  <ind-def:path>/etc/squid</ind-def:path>
                  <ind-def:filename>squid.conf</ind-def:filename>
                  <ind-def:pattern operation="pattern match">^[[:space:]]*ftp_passive[[:space:]]+([^#]*)</ind-def:pattern>
                  <ind-def:instance datatype="int">1</ind-def:instance>
            </ind-def:textfilecontent54_object>
            <ind-def:textfilecontent54_object id="oval:org.open-scap.f14:obj:20346" version="1">
                  <ind-def:path>/etc/squid</ind-def:path>
                  <ind-def:filename>squid.conf</ind-def:filename>
                  <ind-def:pattern operation="pattern match">^[[:space:]]*request_header_max_size[[:space:]]+([^#]*)</ind-def:pattern>
                  <ind-def:instance datatype="int">1</ind-def:instance>
            </ind-def:textfilecontent54_object>
            <ind-def:textfilecontent54_object id="oval:org.open-scap.f14:obj:20345" version="1">
                  <ind-def:path>/etc/squid</ind-def:path>
                  <ind-def:filename>squid.conf</ind-def:filename>
                  <ind-def:pattern operation="pattern match">^[[:space:]]*check_hostnames[[:space:]]+([^#]*)</ind-def:pattern>
                  <ind-def:instance datatype="int">1</ind-def:instance>
            </ind-def:textfilecontent54_object>
            <ind-def:textfilecontent54_object id="oval:org.open-scap.f14:obj:20350" version="1">
                  <ind-def:path>/etc/squid</ind-def:path>
                  <ind-def:filename>squid.conf</ind-def:filename>
                  <ind-def:pattern operation="pattern match">^[[:space:]]*ignore_unknown_nameservers[[:space:]]+([^#]*)</ind-def:pattern>
                  <ind-def:instance datatype="int">1</ind-def:instance>
            </ind-def:textfilecontent54_object>
            <ind-def:textfilecontent54_object id="oval:org.open-scap.f14:obj:20347" version="1">
                  <ind-def:path>/etc/squid</ind-def:path>
                  <ind-def:filename>squid.conf</ind-def:filename>
                  <ind-def:pattern operation="pattern match">^[[:space:]]*reply_header_max_size[[:space:]]+([^#]*)</ind-def:pattern>
                  <ind-def:instance datatype="int">1</ind-def:instance>
            </ind-def:textfilecontent54_object>
            <ind-def:textfilecontent54_object id="oval:org.open-scap.f14:obj:20348" version="1">
                  <ind-def:path>/etc/squid</ind-def:path>
                  <ind-def:filename>squid.conf</ind-def:filename>
                  <ind-def:pattern operation="pattern match">^[[:space:]]*cache_effective_user[[:space:]]+([^#]*)</ind-def:pattern>
                  <ind-def:instance datatype="int">1</ind-def:instance>
            </ind-def:textfilecontent54_object>
            <ind-def:textfilecontent54_object id="oval:org.open-scap.f14:obj:20344" version="1">
                  <ind-def:path>/etc/squid</ind-def:path>
                  <ind-def:filename>squid.conf</ind-def:filename>
                  <ind-def:pattern operation="pattern match">^[[:space:]]*ftp_sanitycheck[[:space:]]+([^#]*)</ind-def:pattern>
                  <ind-def:instance datatype="int">1</ind-def:instance>
            </ind-def:textfilecontent54_object>
            <ind-def:textfilecontent54_object id="oval:org.open-scap.f14:obj:20349" version="1">
                  <ind-def:path>/etc/squid</ind-def:path>
                  <ind-def:filename>squid.conf</ind-def:filename>
                  <ind-def:pattern operation="pattern match">^[[:space:]]*cache_effective_group[[:space:]]+([^#]*)</ind-def:pattern>
                  <ind-def:instance datatype="int">1</ind-def:instance>
            </ind-def:textfilecontent54_object>
            <ind-def:textfilecontent54_object id="oval:org.open-scap.f14:obj:20353" version="1">
                  <ind-def:path>/etc/squid</ind-def:path>
                  <ind-def:filename>squid.conf</ind-def:filename>
                  <ind-def:pattern operation="pattern match">^[[:space:]]*forwarded_for[[:space:]]+([^#]*)</ind-def:pattern>
                  <ind-def:instance datatype="int">1</ind-def:instance>
            </ind-def:textfilecontent54_object>
            <ind-def:textfilecontent54_object id="oval:org.open-scap.f14:obj:20354" version="1">
                  <ind-def:path>/etc/squid</ind-def:path>
                  <ind-def:filename>squid.conf</ind-def:filename>
                  <ind-def:pattern operation="pattern match">^[[:space:]]*log_mime_hdrs[[:space:]]+([^#]*)</ind-def:pattern>
                  <ind-def:instance datatype="int">1</ind-def:instance>
            </ind-def:textfilecontent54_object>
            <ind-def:textfilecontent54_object id="oval:org.open-scap.f14:obj:20351" version="1">
                  <ind-def:path>/etc/squid</ind-def:path>
                  <ind-def:filename>squid.conf</ind-def:filename>
                  <ind-def:pattern operation="pattern match">^[[:space:]]*allow_underscore[[:space:]]+([^#]*)</ind-def:pattern>
                  <ind-def:instance datatype="int">1</ind-def:instance>
            </ind-def:textfilecontent54_object>
            <ind-def:textfilecontent54_object id="oval:org.open-scap.f14:obj:20352" version="1">
                  <ind-def:path>/etc/squid</ind-def:path>
                  <ind-def:filename>squid.conf</ind-def:filename>
                  <ind-def:pattern operation="pattern match">^[[:space:]]*httpd_suppress_version_string[[:space:]]+([^#]*)</ind-def:pattern>
                  <ind-def:instance datatype="int">1</ind-def:instance>
            </ind-def:textfilecontent54_object>
            <unix-def:runlevel_object id="oval:org.open-scap.f14:obj:20365" version="1">
                  <unix-def:service_name>snmpd</unix-def:service_name>
                  <unix-def:runlevel operation="pattern match">.*</unix-def:runlevel>
            </unix-def:runlevel_object>
            <lin-def:rpminfo_object id="oval:org.open-scap.f14:obj:20366" version="1">
                  <lin-def:name>net-snmp</lin-def:name>
            </lin-def:rpminfo_object>
            <ind-def:textfilecontent54_object id="oval:org.open-scap.f14:obj:202081" version="1" comment="Get group ID">
                  <ind-def:path>/etc</ind-def:path>
                  <ind-def:filename>group</ind-def:filename>
                  <ind-def:pattern operation="pattern match" var_ref="oval:org.open-scap.f14:var:202081"/>
                  <ind-def:instance datatype="int">1</ind-def:instance>
            </ind-def:textfilecontent54_object>
            <ind-def:textfilecontent54_object id="oval:org.open-scap.f14:obj:202111" version="1" comment="Get group ID">
                  <ind-def:path>/etc</ind-def:path>
                  <ind-def:filename>group</ind-def:filename>
                  <ind-def:pattern operation="pattern match" var_ref="oval:org.open-scap.f14:var:202111"/>
                  <ind-def:instance datatype="int">1</ind-def:instance>
            </ind-def:textfilecontent54_object>
            <ind-def:textfilecontent54_object id="oval:org.open-scap.f14:obj:202141" version="1" comment="Get group ID">
                  <ind-def:path>/etc</ind-def:path>
                  <ind-def:filename>group</ind-def:filename>
                  <ind-def:pattern operation="pattern match" var_ref="oval:org.open-scap.f14:var:202141"/>
                  <ind-def:instance datatype="int">1</ind-def:instance>
            </ind-def:textfilecontent54_object>
            <ind-def:textfilecontent54_object id="oval:org.open-scap.f14:obj:202291" version="1" comment="Get group ID">
                  <ind-def:path>/etc</ind-def:path>
                  <ind-def:filename>group</ind-def:filename>
                  <ind-def:pattern operation="pattern match" var_ref="oval:org.open-scap.f14:var:202291"/>
                  <ind-def:instance datatype="int">1</ind-def:instance>
            </ind-def:textfilecontent54_object>
            <ind-def:textfilecontent54_object id="oval:org.open-scap.f14:obj:202301" version="1" comment="Get group ID">
                  <ind-def:path>/etc</ind-def:path>
                  <ind-def:filename>group</ind-def:filename>
                  <ind-def:pattern operation="pattern match" var_ref="oval:org.open-scap.f14:var:202301"/>
                  <ind-def:instance datatype="int">1</ind-def:instance>
            </ind-def:textfilecontent54_object>
            <ind-def:textfilecontent54_object id="oval:org.open-scap.f14:obj:200811" version="1" comment="Get group ID">
                  <ind-def:path>/etc</ind-def:path>
                  <ind-def:filename>group</ind-def:filename>
                  <ind-def:pattern operation="pattern match" var_ref="oval:org.open-scap.f14:var:200811"/>
                  <ind-def:instance datatype="int">1</ind-def:instance>
            </ind-def:textfilecontent54_object>
            <ind-def:textfilecontent54_object id="oval:org.open-scap.f14:obj:201501" version="1" comment="Get group ID">
                  <ind-def:path>/etc</ind-def:path>
                  <ind-def:filename>group</ind-def:filename>
                  <ind-def:pattern operation="pattern match" var_ref="oval:org.open-scap.f14:var:201501"/>
                  <ind-def:instance datatype="int">1</ind-def:instance>
            </ind-def:textfilecontent54_object>
      </objects>
      <states>
            <ind-def:textfilecontent54_state id="oval:org.open-scap.f14:ste:20000" version="1" comment="/tmp mount point is defined">
                  <ind-def:subexpression datatype="string" operation="equals" entity_check="all">/tmp</ind-def:subexpression>
            </ind-def:textfilecontent54_state>
            <ind-def:textfilecontent54_state id="oval:org.open-scap.f14:ste:20002" version="1" comment="/var mount point is defined">
                  <ind-def:subexpression datatype="string" operation="equals" entity_check="all">/var</ind-def:subexpression>
            </ind-def:textfilecontent54_state>
            <ind-def:textfilecontent54_state id="oval:org.open-scap.f14:ste:20004" version="1" comment="/var/log mount point is defined">
                  <ind-def:subexpression datatype="string" operation="equals" entity_check="all">/var/log</ind-def:subexpression>
            </ind-def:textfilecontent54_state>
            <ind-def:textfilecontent54_state id="oval:org.open-scap.f14:ste:20005" version="1" comment="/var/log/audit mount point is defined">
                  <ind-def:subexpression datatype="string" operation="equals" entity_check="all">/var/log/audit</ind-def:subexpression>
            </ind-def:textfilecontent54_state>
            <ind-def:textfilecontent54_state id="oval:org.open-scap.f14:ste:20006" version="1" comment="/home mount point is defined">
                  <ind-def:subexpression datatype="string" operation="equals" entity_check="all">/home</ind-def:subexpression>
            </ind-def:textfilecontent54_state>
            <ind-def:textfilecontent54_state id="oval:org.open-scap.f14:ste:20010" version="1" comment="Expected value of gpgcheck should be enabled">
                  <ind-def:instance datatype="int">1</ind-def:instance>
                  <ind-def:subexpression datatype="int" operation="equals" entity_check="all">1</ind-def:subexpression>
            </ind-def:textfilecontent54_state>
            <ind-def:textfilecontent54_state id="oval:org.open-scap.f14:ste:20011" version="1" comment="Expected value of gpgcheck should be disabled because test is none exist">
                  <ind-def:subexpression datatype="int" operation="equals" entity_check="all">0</ind-def:subexpression>
            </ind-def:textfilecontent54_state>
            <ind-def:textfilecontent54_state id="oval:org.open-scap.f14:ste:20012" version="1" comment="Expected value of repo_gpgcheck should be enabled">
                  <ind-def:subexpression datatype="int" operation="equals" entity_check="all">1</ind-def:subexpression>
            </ind-def:textfilecontent54_state>
            <ind-def:textfilecontent54_state id="oval:org.open-scap.f14:ste:20013" version="1" comment="Expected value of repo_gpgcheck should be disabled because test is none exist">
                  <ind-def:subexpression datatype="int" operation="equals" entity_check="all">0</ind-def:subexpression>
            </ind-def:textfilecontent54_state>
            <ind-def:textfilecontent54_state id="oval:org.open-scap.f14:ste:200161" version="1" comment="ext2 and ext3 filing systems">
                  <ind-def:subexpression datatype="string" operation="pattern match" entity_check="all">.*,nodev.*</ind-def:subexpression>
            </ind-def:textfilecontent54_state>
            <lin-def:rpminfo_state id="oval:org.open-scap.f14:ste:10000" version="1">
                  <lin-def:version operation="pattern match">^5[^\d]</lin-def:version>
            </lin-def:rpminfo_state>
            <lin-def:rpminfo_state id="oval:org.open-scap.f14:ste:200065" version="1">
                  <lin-def:release>4c49d6fe</lin-def:release>
                  <lin-def:version>97a1071f</lin-def:version>
            </lin-def:rpminfo_state>
            <lin-def:rpminfo_state id="oval:org.open-scap.f14:ste:11000" version="1">
                  <lin-def:release operation="pattern match">^5\.[2-9]</lin-def:release>
            </lin-def:rpminfo_state>
            <ind-def:family_state id="oval:org.open-scap.f14:ste:10001" version="1">
                  <ind-def:family>unix</ind-def:family>
            </ind-def:family_state>
            <ind-def:xmlfilecontent_state id="oval:org.open-scap.f14:ste:20026" version="1">
                  <ind-def:value_of operation="equals">false</ind-def:value_of>
            </ind-def:xmlfilecontent_state>

            <ind-def:textfilecontent54_state id="oval:org.open-scap.f14:ste:20021" version="1" comment="Check for the usb_storage module">
                  <ind-def:subexpression datatype="string" entity_check="all" >usb_storage</ind-def:subexpression>
            </ind-def:textfilecontent54_state>
<ind-def:textfilecontent54_state id="oval:org.open-scap.f14:ste:20027" version="1" comment="Check for the cramfs file system">
                  <ind-def:subexpression datatype="string" entity_check="all" >cramfs</ind-def:subexpression>
            </ind-def:textfilecontent54_state>
            <ind-def:textfilecontent54_state id="oval:org.open-scap.f14:ste:20028" version="1" comment="Check for the freevxfs file system">
                  <ind-def:subexpression datatype="string" entity_check="all" >freevxfs</ind-def:subexpression>
            </ind-def:textfilecontent54_state>
            <ind-def:textfilecontent54_state id="oval:org.open-scap.f14:ste:20029" version="1" comment="Check for the jffs2 file system">
                  <ind-def:subexpression datatype="string" entity_check="all" >jffs2</ind-def:subexpression>
            </ind-def:textfilecontent54_state>
            <ind-def:textfilecontent54_state id="oval:org.open-scap.f14:ste:20030" version="1" comment="Check for the hfs file system">
                  <ind-def:subexpression datatype="string" entity_check="all" >hfs</ind-def:subexpression>
            </ind-def:textfilecontent54_state>
            <ind-def:textfilecontent54_state id="oval:org.open-scap.f14:ste:20031" version="1" comment="Check for the hfsplus file system">
                  <ind-def:subexpression datatype="string" entity_check="all" >hfsplus</ind-def:subexpression>
            </ind-def:textfilecontent54_state>
            <ind-def:textfilecontent54_state id="oval:org.open-scap.f14:ste:20032" version="1" comment="Check for the squashfs file system">
                  <ind-def:subexpression datatype="string" entity_check="all" >squashfs</ind-def:subexpression>
            </ind-def:textfilecontent54_state>
            <ind-def:textfilecontent54_state id="oval:org.open-scap.f14:ste:20033" version="1" comment="Check for the udf file system">
                  <ind-def:subexpression datatype="string" entity_check="all" >udf</ind-def:subexpression>
            </ind-def:textfilecontent54_state>
            <unix-def:file_state id="oval:org.open-scap.f14:ste:20034" version="1">
                  <unix-def:user_id datatype="int">0</unix-def:user_id>
            </unix-def:file_state>
            <unix-def:file_state id="oval:org.open-scap.f14:ste:20035" version="1">
                  <unix-def:group_id datatype="int">0</unix-def:group_id>
            </unix-def:file_state>
            <unix-def:file_state id="oval:org.open-scap.f14:ste:20042" version="1">
                  <unix-def:uread var_check="all" datatype="boolean" var_ref="oval:org.open-scap.f14:var:1"/>
                  <unix-def:uwrite var_check="all" datatype="boolean" var_ref="oval:org.open-scap.f14:var:2"/>
                  <unix-def:uexec var_check="all" datatype="boolean" var_ref="oval:org.open-scap.f14:var:3"/>
                  <unix-def:gread var_check="all" datatype="boolean" var_ref="oval:org.open-scap.f14:var:4"/>
                  <unix-def:gwrite var_check="all" datatype="boolean" var_ref="oval:org.open-scap.f14:var:5"/>
                  <unix-def:gexec var_check="all" datatype="boolean" var_ref="oval:org.open-scap.f14:var:6"/>
                  <unix-def:oread var_check="all" datatype="boolean" var_ref="oval:org.open-scap.f14:var:7"/>
                  <unix-def:owrite var_check="all" datatype="boolean" var_ref="oval:org.open-scap.f14:var:8"/>
                  <unix-def:oexec var_check="all" datatype="boolean" var_ref="oval:org.open-scap.f14:var:9"/>
            </unix-def:file_state>
            <unix-def:file_state id="oval:org.open-scap.f14:ste:20036" version="1">
                  <unix-def:user_id datatype="int">0</unix-def:user_id>
            </unix-def:file_state>
            <unix-def:file_state id="oval:org.open-scap.f14:ste:20037" version="1">
                  <unix-def:group_id datatype="int">0</unix-def:group_id>
            </unix-def:file_state>
            <unix-def:file_state id="oval:org.open-scap.f14:ste:20043" version="1">
                  <unix-def:uread var_check="all" datatype="boolean" var_ref="oval:org.open-scap.f14:var:10"/>
                  <unix-def:uwrite var_check="all" datatype="boolean" var_ref="oval:org.open-scap.f14:var:11"/>
                  <unix-def:uexec var_check="all" datatype="boolean" var_ref="oval:org.open-scap.f14:var:12"/>
                  <unix-def:gread var_check="all" datatype="boolean" var_ref="oval:org.open-scap.f14:var:13"/>
                  <unix-def:gwrite var_check="all" datatype="boolean" var_ref="oval:org.open-scap.f14:var:14"/>
                  <unix-def:gexec var_check="all" datatype="boolean" var_ref="oval:org.open-scap.f14:var:15"/>
                  <unix-def:oread var_check="all" datatype="boolean" var_ref="oval:org.open-scap.f14:var:16"/>
                  <unix-def:owrite var_check="all" datatype="boolean" var_ref="oval:org.open-scap.f14:var:17"/>
                  <unix-def:oexec var_check="all" datatype="boolean" var_ref="oval:org.open-scap.f14:var:18"/>
            </unix-def:file_state>
            <unix-def:file_state id="oval:org.open-scap.f14:ste:20038" version="1">
                  <unix-def:user_id datatype="int">0</unix-def:user_id>
            </unix-def:file_state>
            <unix-def:file_state id="oval:org.open-scap.f14:ste:20039" version="1">
                  <unix-def:group_id datatype="int">0</unix-def:group_id>
            </unix-def:file_state>
            <unix-def:file_state id="oval:org.open-scap.f14:ste:20044" version="1">
                  <unix-def:uread var_check="all" datatype="boolean" var_ref="oval:org.open-scap.f14:var:19"/>
                  <unix-def:uwrite var_check="all" datatype="boolean" var_ref="oval:org.open-scap.f14:var:20"/>
                  <unix-def:uexec var_check="all" datatype="boolean" var_ref="oval:org.open-scap.f14:var:21"/>
                  <unix-def:gread var_check="all" datatype="boolean" var_ref="oval:org.open-scap.f14:var:22"/>
                  <unix-def:gwrite var_check="all" datatype="boolean" var_ref="oval:org.open-scap.f14:var:23"/>
                  <unix-def:gexec var_check="all" datatype="boolean" var_ref="oval:org.open-scap.f14:var:24"/>
                  <unix-def:oread var_check="all" datatype="boolean" var_ref="oval:org.open-scap.f14:var:25"/>
                  <unix-def:owrite var_check="all" datatype="boolean" var_ref="oval:org.open-scap.f14:var:26"/>
                  <unix-def:oexec var_check="all" datatype="boolean" var_ref="oval:org.open-scap.f14:var:27"/>
            </unix-def:file_state>
            <unix-def:file_state id="oval:org.open-scap.f14:ste:20040" version="1">
                  <unix-def:user_id datatype="int">0</unix-def:user_id>
            </unix-def:file_state>
            <unix-def:file_state id="oval:org.open-scap.f14:ste:20041" version="1">
                  <unix-def:group_id datatype="int">0</unix-def:group_id>
            </unix-def:file_state>
            <unix-def:file_state id="oval:org.open-scap.f14:ste:20045" version="1">
                  <unix-def:uread var_check="all" datatype="boolean" var_ref="oval:org.open-scap.f14:var:28"/>
                  <unix-def:uwrite var_check="all" datatype="boolean" var_ref="oval:org.open-scap.f14:var:29"/>
                  <unix-def:uexec var_check="all" datatype="boolean" var_ref="oval:org.open-scap.f14:var:30"/>
                  <unix-def:gread var_check="all" datatype="boolean" var_ref="oval:org.open-scap.f14:var:31"/>
                  <unix-def:gwrite var_check="all" datatype="boolean" var_ref="oval:org.open-scap.f14:var:32"/>
                  <unix-def:gexec var_check="all" datatype="boolean" var_ref="oval:org.open-scap.f14:var:33"/>
                  <unix-def:oread var_check="all" datatype="boolean" var_ref="oval:org.open-scap.f14:var:34"/>
                  <unix-def:owrite var_check="all" datatype="boolean" var_ref="oval:org.open-scap.f14:var:35"/>
                  <unix-def:oexec var_check="all" datatype="boolean" var_ref="oval:org.open-scap.f14:var:36"/>
            </unix-def:file_state>

            <unix-def:file_state id="oval:org.open-scap.f14:ste:20046" version="1">
                  <unix-def:sticky datatype="boolean">1</unix-def:sticky>
            </unix-def:file_state>
            <unix-def:file_state id="oval:org.open-scap.f14:ste:200462" version="1">
                  <unix-def:owrite datatype="boolean">0</unix-def:owrite>
            </unix-def:file_state>
            <unix-def:file_state id="oval:org.open-scap.f14:ste:200471" version="1">
                  <unix-def:owrite datatype="boolean">0</unix-def:owrite>
            </unix-def:file_state>
            <unix-def:file_state id="oval:org.open-scap.f14:ste:200472" version="1">
                  <unix-def:type datatype="string" operation="not equal">regular</unix-def:type>
            </unix-def:file_state>

            <unix-def:file_state id="oval:org.open-scap.f14:ste:200481" version="1" operator="OR">
                  <unix-def:type operation="not equal">regular</unix-def:type>
                  <unix-def:sgid datatype="boolean">0</unix-def:sgid>
            </unix-def:file_state>
            <unix-def:file_state id="oval:org.open-scap.f14:ste:200482" version="1">
                  <unix-def:path>/sbin</unix-def:path>
                  <unix-def:filename>netreport</unix-def:filename>
            </unix-def:file_state>
            <unix-def:file_state id="oval:org.open-scap.f14:ste:200483" version="1">
                  <unix-def:path>/var/cache/jwhois</unix-def:path>
                  <unix-def:filename>jwhois.db</unix-def:filename>
            </unix-def:file_state>
            <unix-def:file_state id="oval:org.open-scap.f14:ste:200484" version="1">
                  <unix-def:path>/usr/sbin</unix-def:path>
                  <unix-def:filename var_check="at least one" var_ref="oval:org.open-scap.f14:var:200484"/>
            </unix-def:file_state>
            <unix-def:file_state id="oval:org.open-scap.f14:ste:200485" version="1">
                  <unix-def:path>/usr/bin</unix-def:path>
                  <unix-def:filename var_check="at least one" var_ref="oval:org.open-scap.f14:var:200485"/>
            </unix-def:file_state>
            <unix-def:file_state id="oval:org.open-scap.f14:ste:200486" version="1">
                  <unix-def:path>/usr/libexec/utempter</unix-def:path>
                  <unix-def:filename>utempter</unix-def:filename>
            </unix-def:file_state>
            <unix-def:file_state id="oval:org.open-scap.f14:ste:200487" version="1">
                  <unix-def:path>/usr/lib/vte</unix-def:path>
                  <unix-def:filename>gnome-pty-helper</unix-def:filename>
            </unix-def:file_state>
            <unix-def:file_state id="oval:org.open-scap.f14:ste:200488" version="1">
                  <unix-def:path>/usr/lib64/vte</unix-def:path>
                  <unix-def:filename>gnome-pty-helper</unix-def:filename>
            </unix-def:file_state>

            <unix-def:file_state id="oval:org.open-scap.f14:ste:2004901" version="1" operator="OR">
                  <unix-def:type operation="not equal">regular</unix-def:type>
                  <unix-def:suid datatype="boolean">0</unix-def:suid>
            </unix-def:file_state>
            <unix-def:file_state id="oval:org.open-scap.f14:ste:2004902" version="1">
                  <unix-def:path>/bin</unix-def:path>
                  <unix-def:filename var_check="at least one" var_ref="oval:org.open-scap.f14:var:2004902"/>
            </unix-def:file_state>
            <unix-def:file_state id="oval:org.open-scap.f14:ste:2004903" version="1">
                  <unix-def:path>/lib/dbus-1</unix-def:path>
                  <unix-def:filename>dbus-daemon-launch-helper</unix-def:filename>
            </unix-def:file_state>
            <unix-def:file_state id="oval:org.open-scap.f14:ste:2004904" version="1">
                  <unix-def:path>/lib64/dbus-1</unix-def:path>
                  <unix-def:filename>dbus-daemon-launch-helper</unix-def:filename>
            </unix-def:file_state>
            <unix-def:file_state id="oval:org.open-scap.f14:ste:2004905" version="1">
                  <unix-def:path>/sbin</unix-def:path>
                  <unix-def:filename var_check="at least one" var_ref="oval:org.open-scap.f14:var:2004905"/>
            </unix-def:file_state>
            <unix-def:file_state id="oval:org.open-scap.f14:ste:2004906" version="1">
                  <unix-def:path>/usr/bin</unix-def:path>
                  <unix-def:filename var_check="at least one" var_ref="oval:org.open-scap.f14:var:2004906"/>
            </unix-def:file_state>
            <unix-def:file_state id="oval:org.open-scap.f14:ste:2004907" version="1">
                  <unix-def:path>/usr/lib/nspluginwrapper</unix-def:path>
                  <unix-def:filename>plugin-config</unix-def:filename>
            </unix-def:file_state>
            <unix-def:file_state id="oval:org.open-scap.f14:ste:2004908" version="1">
                  <unix-def:path>/usr/lib64/nspluginwrapper</unix-def:path>
                  <unix-def:filename>plugin-config</unix-def:filename>
            </unix-def:file_state>
            <unix-def:file_state id="oval:org.open-scap.f14:ste:2004909" version="1">
                  <unix-def:path>/usr/libexec/kde4</unix-def:path>
                  <unix-def:filename>kpac_dhcp_helper</unix-def:filename>
            </unix-def:file_state>
            <unix-def:file_state id="oval:org.open-scap.f14:ste:2004910" version="1">
                  <unix-def:path>/usr/libexec/news</unix-def:path>
                  <unix-def:filename var_check="at least one" var_ref="oval:org.open-scap.f14:var:2004910"/>
            </unix-def:file_state>
            <unix-def:file_state id="oval:org.open-scap.f14:ste:2004911" version="1">
                  <unix-def:path>/usr/libexec/openssh</unix-def:path>
                  <unix-def:filename>ssh-keysign</unix-def:filename>
            </unix-def:file_state>
            <unix-def:file_state id="oval:org.open-scap.f14:ste:2004912" version="1">
                  <unix-def:path>/usr/libexec/polkit-1</unix-def:path>
                  <unix-def:filename>polkit-agent-helper-1</unix-def:filename>
            </unix-def:file_state>
            <unix-def:file_state id="oval:org.open-scap.f14:ste:2004913" version="1">
                  <unix-def:path>/usr/libexec</unix-def:path>
                  <unix-def:filename>pt_chown</unix-def:filename>
            </unix-def:file_state>
            <unix-def:file_state id="oval:org.open-scap.f14:ste:2004914" version="1">
                  <unix-def:path>/usr/libexec/pulse</unix-def:path>
                  <unix-def:filename>proximity-helper</unix-def:filename>
            </unix-def:file_state>
            <unix-def:file_state id="oval:org.open-scap.f14:ste:2004915" version="1">
                  <unix-def:path>/usr/sbin</unix-def:path>
                  <unix-def:filename var_check="at least one" var_ref="oval:org.open-scap.f14:var:2004915"/>
            </unix-def:file_state>
            <unix-def:file_state id="oval:org.open-scap.f14:ste:2004916" version="1">
                  <unix-def:path>/usr/share/BackupPC/sbin</unix-def:path>
                  <unix-def:filename>BackupPC_Admin</unix-def:filename>
            </unix-def:file_state>

            <unix-def:file_state id="oval:org.open-scap.f14:ste:20050" version="1" comment="Files with a valid user id assigned">
                  <unix-def:user_id datatype="int" var_check="at least one" var_ref="oval:org.open-scap.f14:var:20050"/>
            </unix-def:file_state>
            <unix-def:file_state id="oval:org.open-scap.f14:ste:20051" version="1" comment="Files with a valid group id assigned">
                  <unix-def:group_id datatype="int" var_check="at least one" var_ref="oval:org.open-scap.f14:var:20051"/>
            </unix-def:file_state>
            <unix-def:file_state id="oval:org.open-scap.f14:ste:20052" version="1" operator="OR">
                  <unix-def:group_id datatype="int" operation="less than">500</unix-def:group_id>
                  <unix-def:owrite datatype="boolean">0</unix-def:owrite>
            </unix-def:file_state>
            <ind-def:textfilecontent54_state id="oval:org.open-scap.f14:ste:20053" version="1">
                  <ind-def:subexpression datatype="int" var_check="all" operation="equals" var_ref="oval:org.open-scap.f14:var:20053"/>
            </ind-def:textfilecontent54_state>
            <ind-def:textfilecontent54_state id="oval:org.open-scap.f14:ste:20055" version="1">
                  <ind-def:subexpression operation="equals">0</ind-def:subexpression>
            </ind-def:textfilecontent54_state>
            <ind-def:textfilecontent54_state id="oval:org.open-scap.f14:ste:20056" version="1">
                  <ind-def:subexpression datatype="int" operation="equals">0</ind-def:subexpression>
            </ind-def:textfilecontent54_state>
            <ind-def:textfilecontent54_state id="oval:org.open-scap.f14:ste:20058" version="1">
                  <ind-def:subexpression datatype="int" operation="greater than or equal">1</ind-def:subexpression>
            </ind-def:textfilecontent54_state>
            <ind-def:textfilecontent54_state id="oval:org.open-scap.f14:ste:20057" version="1">
                  <ind-def:subexpression datatype="int" operation="greater than or equal">1</ind-def:subexpression>
            </ind-def:textfilecontent54_state>
            <unix-def:password_state id="oval:org.open-scap.f14:ste:20068" version="1">
                  <unix-def:user_id operation="less than" datatype="int">500</unix-def:user_id>
                  <unix-def:login_shell operation="not equal">/sbin/nologin</unix-def:login_shell>
            </unix-def:password_state>
            <unix-def:password_state id="oval:org.open-scap.f14:ste:200695" version="1">
                  <unix-def:password>x</unix-def:password>
            </unix-def:password_state>
            <ind-def:textfilecontent54_state id="oval:org.open-scap.f14:ste:20071" version="1">
                  <ind-def:subexpression datatype="int" var_check="all" operation="greater than or equal" var_ref="oval:org.open-scap.f14:var:20071"/>
            </ind-def:textfilecontent54_state>
            <ind-def:textfilecontent54_state id="oval:org.open-scap.f14:ste:20072" version="1">
                  <ind-def:subexpression var_check="all" operation="equals" var_ref="oval:org.open-scap.f14:var:20072"/>
            </ind-def:textfilecontent54_state>
            <ind-def:textfilecontent54_state id="oval:org.open-scap.f14:ste:20073" version="1">
                  <ind-def:subexpression var_check="all" operation="equals" var_ref="oval:org.open-scap.f14:var:20073"/>
            </ind-def:textfilecontent54_state>
            <ind-def:textfilecontent54_state id="oval:org.open-scap.f14:ste:20074" version="1">
                  <ind-def:subexpression var_check="all" operation="equals" var_ref="oval:org.open-scap.f14:var:20074"/>
            </ind-def:textfilecontent54_state>
            <ind-def:textfilecontent54_state id="oval:org.open-scap.f14:ste:200781" version="1" comment="retry">
                  <ind-def:subexpression var_check="all" datatype="int" operation="equals" var_ref="oval:org.open-scap.f14:var:200781"/>
            </ind-def:textfilecontent54_state>
            <ind-def:textfilecontent54_state id="oval:org.open-scap.f14:ste:200782" version="1" comment="minlen">
                  <ind-def:subexpression datatype="int" operation="equals" var_check="all" var_ref="oval:org.open-scap.f14:var:200782"/>
            </ind-def:textfilecontent54_state>
            <ind-def:textfilecontent54_state id="oval:org.open-scap.f14:ste:200783" version="1" comment="dcredit">
                  <ind-def:subexpression datatype="int" operation="equals" var_check="all" var_ref="oval:org.open-scap.f14:var:200783"/>
            </ind-def:textfilecontent54_state>
            <ind-def:textfilecontent54_state id="oval:org.open-scap.f14:ste:200784" version="1" comment="ucredit">
                  <ind-def:subexpression datatype="int" var_check="all" operation="equals" var_ref="oval:org.open-scap.f14:var:200784"/>
            </ind-def:textfilecontent54_state>
            <ind-def:textfilecontent54_state id="oval:org.open-scap.f14:ste:200785" version="1" comment="ocredit">
                  <ind-def:subexpression datatype="int" var_check="all" operation="equals" var_ref="oval:org.open-scap.f14:var:200785"/>
            </ind-def:textfilecontent54_state>
            <ind-def:textfilecontent54_state id="oval:org.open-scap.f14:ste:200786" version="1" comment="lcredit">
                  <ind-def:subexpression datatype="int" var_check="all" operation="equals" var_ref="oval:org.open-scap.f14:var:200786"/>
            </ind-def:textfilecontent54_state>
            <ind-def:textfilecontent54_state id="oval:org.open-scap.f14:ste:200787" version="1" comment="difok">
                  <ind-def:subexpression datatype="int" var_check="all" operation="equals" var_ref="oval:org.open-scap.f14:var:200787"/>
            </ind-def:textfilecontent54_state>
            <ind-def:variable_state id="oval:org.open-scap.f14:ste:200800" version="1" comment="expected value of unlock_time">
                  <ind-def:value>0</ind-def:value>
            </ind-def:variable_state>
            <ind-def:textfilecontent54_state id="oval:org.open-scap.f14:ste:2008011" version="1" comment="deny">
                  <ind-def:subexpression datatype="int" var_check="all" var_ref="oval:org.open-scap.f14:var:200801"/>
            </ind-def:textfilecontent54_state>
            <ind-def:textfilecontent54_state id="oval:org.open-scap.f14:ste:2008012" version="1" comment="lock_time">
                  <ind-def:subexpression datatype="int" var_check="all" var_ref="oval:org.open-scap.f14:var:200802"/>
            </ind-def:textfilecontent54_state>
            <ind-def:textfilecontent54_state id="oval:org.open-scap.f14:ste:2008013" version="1" comment="unlock_time">
                  <ind-def:subexpression datatype="int" var_check="all" var_ref="oval:org.open-scap.f14:var:200803"/>
            </ind-def:textfilecontent54_state>
            <unix-def:file_state id="oval:org.open-scap.f14:ste:20081" version="1">
                  <unix-def:group_id datatype="int" var_ref="oval:org.open-scap.f14:var:200812"/>
            </unix-def:file_state>
            <unix-def:file_state id="oval:org.open-scap.f14:ste:20082" version="1">
                  <unix-def:suid var_check="all" datatype="boolean" var_ref="oval:org.open-scap.f14:var:200820"/>
                  <unix-def:uread var_check="all" datatype="boolean" var_ref="oval:org.open-scap.f14:var:200821"/>
                  <unix-def:uwrite var_check="all" datatype="boolean" var_ref="oval:org.open-scap.f14:var:200822"/>
                  <unix-def:uexec var_check="all" datatype="boolean" var_ref="oval:org.open-scap.f14:var:200823"/>
                  <unix-def:gread var_check="all" datatype="boolean" var_ref="oval:org.open-scap.f14:var:200824"/>
                  <unix-def:gwrite var_check="all" datatype="boolean" var_ref="oval:org.open-scap.f14:var:200825"/>
                  <unix-def:gexec var_check="all" datatype="boolean" var_ref="oval:org.open-scap.f14:var:200826"/>
                  <unix-def:oread var_check="all" datatype="boolean" var_ref="oval:org.open-scap.f14:var:200827"/>
                  <unix-def:owrite var_check="all" datatype="boolean" var_ref="oval:org.open-scap.f14:var:200828"/>
                  <unix-def:oexec var_check="all" datatype="boolean" var_ref="oval:org.open-scap.f14:var:200829"/>
            </unix-def:file_state>
            <ind-def:variable_state id="oval:org.open-scap.f14:ste:200831" version="1" comment="hashing algorithm is md5">
                  <ind-def:value>md5</ind-def:value>
            </ind-def:variable_state>
            <ind-def:textfilecontent54_state id="oval:org.open-scap.f14:ste:200832" version="1">
                  <ind-def:subexpression operation="equals">yes</ind-def:subexpression>
            </ind-def:textfilecontent54_state>
            <ind-def:textfilecontent54_state id="oval:org.open-scap.f14:ste:200833" version="1">
                  <ind-def:subexpression var_check="all" operation="case insensitive equals" var_ref="oval:org.open-scap.f14:var:20083" />
            </ind-def:textfilecontent54_state>
            <ind-def:variable_state id="oval:org.open-scap.f14:ste:200841" version="1" comment="remember is set to 0">
                  <ind-def:value datatype="string">0</ind-def:value>
            </ind-def:variable_state>
            <ind-def:textfilecontent54_state id="oval:org.open-scap.f14:ste:200842" version="1">
                  <ind-def:subexpression datatype="string" var_check="all" operation="equals" var_ref="oval:org.open-scap.f14:var:20084"/>
            </ind-def:textfilecontent54_state>
            <ind-def:environmentvariable_state id="oval:org.open-scap.f14:ste:200851" version="1" comment="starts with . or :">
                  <ind-def:value operation="pattern match">^:|^\.</ind-def:value>
            </ind-def:environmentvariable_state>
            <ind-def:environmentvariable_state id="oval:org.open-scap.f14:ste:200852" version="1" comment="ends with . or :">
                  <ind-def:value operation="pattern match">:$|\.$</ind-def:value>
            </ind-def:environmentvariable_state>
            <ind-def:environmentvariable_state id="oval:org.open-scap.f14:ste:200853" version="1" comment="contains :.: or ::">
                  <ind-def:value operation="pattern match">:\.:|::</ind-def:value>
            </ind-def:environmentvariable_state>

            <unix-def:file_state id="oval:org.open-scap.f14:ste:2008551" version="1" comment="Group has NO write privilege">
                  <unix-def:gwrite datatype="boolean">0</unix-def:gwrite>
                  <unix-def:owrite datatype="boolean">0</unix-def:owrite>
            </unix-def:file_state>

            <unix-def:file_state id="oval:org.open-scap.f14:ste:200861" version="1">
            	  <unix-def:path datatype="string" operation="not equal">/home</unix-def:path>
                  <unix-def:gwrite datatype="boolean">1</unix-def:gwrite> 
            </unix-def:file_state>
            <unix-def:file_state id="oval:org.open-scap.f14:ste:200862" version="1">
            	  <unix-def:path datatype="string" operation="not equal">/home</unix-def:path>
                  <unix-def:oread datatype="boolean">1</unix-def:oread> 
            </unix-def:file_state>

            <ind-def:textfilecontent54_state id="oval:org.open-scap.f14:ste:20087" version="1">
                  <ind-def:subexpression var_check="all" operation="equals" var_ref="oval:org.open-scap.f14:var:20087"/>
            </ind-def:textfilecontent54_state>
            <unix-def:file_state id="oval:org.open-scap.f14:ste:20092" version="1">
                  <unix-def:user_id datatype="int">0</unix-def:user_id>
            </unix-def:file_state>
            <unix-def:file_state id="oval:org.open-scap.f14:ste:20094" version="1">
                  <unix-def:uread var_check="all" datatype="boolean" var_ref="oval:org.open-scap.f14:var:37"/>
                  <unix-def:uwrite var_check="all" datatype="boolean" var_ref="oval:org.open-scap.f14:var:38"/>
                  <unix-def:uexec var_check="all" datatype="boolean" var_ref="oval:org.open-scap.f14:var:39"/>
                  <unix-def:gread var_check="all" datatype="boolean" var_ref="oval:org.open-scap.f14:var:40"/>
                  <unix-def:gwrite var_check="all" datatype="boolean" var_ref="oval:org.open-scap.f14:var:41"/>
                  <unix-def:gexec var_check="all" datatype="boolean" var_ref="oval:org.open-scap.f14:var:42"/>
                  <unix-def:oread var_check="all" datatype="boolean" var_ref="oval:org.open-scap.f14:var:43"/>
                  <unix-def:owrite var_check="all" datatype="boolean" var_ref="oval:org.open-scap.f14:var:44"/>
                  <unix-def:oexec var_check="all" datatype="boolean" var_ref="oval:org.open-scap.f14:var:45"/>
            </unix-def:file_state>
            <unix-def:file_state id="oval:org.open-scap.f14:ste:20093" version="1">
                  <unix-def:group_id datatype="int">0</unix-def:group_id>
            </unix-def:file_state>
            <ind-def:textfilecontent54_state id="oval:org.open-scap.f14:ste:20097" version="1">
                  <ind-def:subexpression>no</ind-def:subexpression>
            </ind-def:textfilecontent54_state>
            <ind-def:textfilecontent54_state id="oval:org.open-scap.f14:ste:20098" version="1">
                  <ind-def:subexpression datatype="int" var_check="all" operation="equals" var_ref="oval:org.open-scap.f14:var:20098"/>
            </ind-def:textfilecontent54_state>
            <ind-def:xmlfilecontent_state id="oval:org.open-scap.f14:ste:20100" version="1" comment="idle_delay (time before activation in minutes)">
                  <ind-def:value_of datatype="int" var_check="all" var_ref="oval:org.open-scap.f14:var:20098" />
            </ind-def:xmlfilecontent_state>
            <ind-def:xmlfilecontent_state id="oval:org.open-scap.f14:ste:201005" version="1" comment="idle_activation_enabled (Activation when idle)">
                  <ind-def:value_of datatype="boolean" var_check="all">true</ind-def:value_of>
            </ind-def:xmlfilecontent_state>
            <ind-def:xmlfilecontent_state id="oval:org.open-scap.f14:ste:201006" version="1" comment="lock_enabled (lock on Activation)">
                  <ind-def:value_of datatype="boolean" var_check="all">true</ind-def:value_of>
            </ind-def:xmlfilecontent_state>
            <ind-def:xmlfilecontent_state id="oval:org.open-scap.f14:ste:201007" version="1" comment="mode (Screensaver theme selection mode)">
                  <ind-def:value_of datatype="string" var_check="all">blank-only</ind-def:value_of>
            </ind-def:xmlfilecontent_state>
            <ind-def:textfilecontent54_state id="oval:org.open-scap.f14:ste:20102" version="1">
                  <ind-def:subexpression var_check="all" var_ref="oval:org.open-scap.f14:var:20102"/>
            </ind-def:textfilecontent54_state>
            <ind-def:xmlfilecontent_state id="oval:org.open-scap.f14:ste:20103" version="1" comment="Logon banner">
                  <ind-def:value_of var_check="all" var_ref="oval:org.open-scap.f14:var:20102" />
            </ind-def:xmlfilecontent_state>
            <ind-def:textfilecontent54_state id="oval:org.open-scap.f14:ste:20104" version="1">
                  <ind-def:subexpression datatype="int" operation="equals">1</ind-def:subexpression>
            </ind-def:textfilecontent54_state>
            <ind-def:textfilecontent54_state id="oval:org.open-scap.f14:ste:20105" version="1">
                  <ind-def:subexpression datatype="int" operation="equals">1</ind-def:subexpression>
            </ind-def:textfilecontent54_state>
            <ind-def:textfilecontent54_state id="oval:org.open-scap.f14:ste:20106" version="1">
                  <ind-def:subexpression var_check="all" operation="equals" var_ref="oval:org.open-scap.f14:var:20106"/>
            </ind-def:textfilecontent54_state>
            <ind-def:textfilecontent54_state id="oval:org.open-scap.f14:ste:20107" version="1">
                  <ind-def:subexpression var_check="all" operation="equals" var_ref="oval:org.open-scap.f14:var:20107"/>
            </ind-def:textfilecontent54_state>
            <unix-def:runlevel_state id="oval:org.open-scap.f14:ste:20111" version="1">
                  <unix-def:start datatype="boolean">false</unix-def:start>
                  <unix-def:kill datatype="boolean">true</unix-def:kill>
            </unix-def:runlevel_state>
            <unix-def:runlevel_state id="oval:org.open-scap.f14:ste:20171" version="1" comment="Define state of disableed service">
                  <unix-def:start datatype="boolean">false</unix-def:start>
                  <unix-def:kill datatype="boolean">true</unix-def:kill>
            </unix-def:runlevel_state>
            <unix-def:runlevel_state id="oval:org.open-scap.f14:ste:20172" version="1" comment="Define state of enabled service">
	          <unix-def:runlevel operation="pattern match">^[2345]$</unix-def:runlevel>
                  <unix-def:start datatype="boolean">true</unix-def:start>
            </unix-def:runlevel_state>
	    <!-- shared states: subexpression == {0, 1} -->
            <ind-def:textfilecontent54_state id="oval:org.open-scap.f14:ste:201120" version="1">
                  <ind-def:subexpression datatype="int" operation="equals">0</ind-def:subexpression>
            </ind-def:textfilecontent54_state>
            <ind-def:textfilecontent54_state id="oval:org.open-scap.f14:ste:201121" version="1">
                  <ind-def:subexpression datatype="int" operation="equals">1</ind-def:subexpression>
            </ind-def:textfilecontent54_state>
	    <!-- ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^ -->

            <ind-def:textfilecontent54_state id="oval:org.open-scap.f14:ste:20113" version="1">
                  <ind-def:subexpression datatype="int" operation="equals">0</ind-def:subexpression>
            </ind-def:textfilecontent54_state>
            <ind-def:textfilecontent54_state id="oval:org.open-scap.f14:ste:20114" version="1">
                  <ind-def:subexpression datatype="int" operation="equals">0</ind-def:subexpression>
            </ind-def:textfilecontent54_state>
            <ind-def:textfilecontent54_state id="oval:org.open-scap.f14:ste:20117" version="1">
                  <ind-def:subexpression var_check="all" operation="equals" var_ref="oval:org.open-scap.f14:var:20117"/>
            </ind-def:textfilecontent54_state>
            <ind-def:textfilecontent54_state id="oval:org.open-scap.f14:ste:20116" version="1">
                  <ind-def:subexpression var_check="all" operation="equals" var_ref="oval:org.open-scap.f14:var:20116"/>
            </ind-def:textfilecontent54_state>
            <ind-def:textfilecontent54_state id="oval:org.open-scap.f14:ste:20123" version="1">
                  <ind-def:subexpression var_check="all" operation="equals" var_ref="oval:org.open-scap.f14:var:20123"/>
            </ind-def:textfilecontent54_state>
            <ind-def:textfilecontent54_state id="oval:org.open-scap.f14:ste:20124" version="1">
                  <ind-def:subexpression var_check="all" operation="equals" var_ref="oval:org.open-scap.f14:var:20124"/>
            </ind-def:textfilecontent54_state>
            <ind-def:textfilecontent54_state id="oval:org.open-scap.f14:ste:20122" version="1">
                  <ind-def:subexpression var_check="all" operation="equals" var_ref="oval:org.open-scap.f14:var:20122"/>
            </ind-def:textfilecontent54_state>
            <ind-def:textfilecontent54_state id="oval:org.open-scap.f14:ste:20120" version="1">
                  <ind-def:subexpression var_check="all" operation="equals" var_ref="oval:org.open-scap.f14:var:20120"/>
            </ind-def:textfilecontent54_state>
            <ind-def:textfilecontent54_state id="oval:org.open-scap.f14:ste:20125" version="1">
                  <ind-def:subexpression var_check="all" operation="equals" var_ref="oval:org.open-scap.f14:var:20125"/>
            </ind-def:textfilecontent54_state>
            <ind-def:textfilecontent54_state id="oval:org.open-scap.f14:ste:20121" version="1">
                  <ind-def:subexpression var_check="all" operation="equals" var_ref="oval:org.open-scap.f14:var:20121"/>
            </ind-def:textfilecontent54_state>
            <ind-def:textfilecontent54_state id="oval:org.open-scap.f14:ste:20118" version="1">
                  <ind-def:subexpression var_check="all" operation="equals" var_ref="oval:org.open-scap.f14:var:20118"/>
            </ind-def:textfilecontent54_state>
            <ind-def:textfilecontent54_state id="oval:org.open-scap.f14:ste:20126" version="1">
                  <ind-def:subexpression var_check="all" operation="equals" var_ref="oval:org.open-scap.f14:var:20126"/>
            </ind-def:textfilecontent54_state>
            <ind-def:textfilecontent54_state id="oval:org.open-scap.f14:ste:20119" version="1">
                  <ind-def:subexpression var_check="all" operation="equals" var_ref="oval:org.open-scap.f14:var:20119"/>
            </ind-def:textfilecontent54_state>
            <ind-def:textfilecontent54_state id="oval:org.open-scap.f14:ste:20115" version="1">
                  <ind-def:subexpression var_check="all" operation="equals" var_ref="oval:org.open-scap.f14:var:20115"/>
            </ind-def:textfilecontent54_state>
            <ind-def:textfilecontent54_state id="oval:org.open-scap.f14:ste:20132" version="1">
                  <ind-def:subexpression operation="equals">no</ind-def:subexpression>
            </ind-def:textfilecontent54_state>
            <ind-def:textfilecontent54_state id="oval:org.open-scap.f14:ste:20133" version="1">
                  <ind-def:subexpression operation="equals">no</ind-def:subexpression>
            </ind-def:textfilecontent54_state>
            <ind-def:textfilecontent54_state id="oval:org.open-scap.f14:ste:20131" version="1">
                  <ind-def:subexpression operation="equals">no</ind-def:subexpression>
            </ind-def:textfilecontent54_state>
            <ind-def:textfilecontent54_state id="oval:org.open-scap.f14:ste:20134" version="1">
                  <ind-def:subexpression var_check="all" operation="equals" var_ref="oval:org.open-scap.f14:var:20134"/>
            </ind-def:textfilecontent54_state>
            <ind-def:textfilecontent54_state id="oval:org.open-scap.f14:ste:20140" version="1">
                  <ind-def:subexpression var_check="all" operation="equals" var_ref="oval:org.open-scap.f14:var:20140"/>
            </ind-def:textfilecontent54_state>
            <ind-def:textfilecontent54_state id="oval:org.open-scap.f14:ste:20145" version="1">
                  <ind-def:subexpression var_check="all" operation="equals" var_ref="oval:org.open-scap.f14:var:20145"/>
            </ind-def:textfilecontent54_state>
            <ind-def:textfilecontent54_state id="oval:org.open-scap.f14:ste:20139" version="1">
                  <ind-def:subexpression var_check="at least one" operation="equals" var_ref="oval:org.open-scap.f14:var:20139"/>
            </ind-def:textfilecontent54_state>
            <ind-def:textfilecontent54_state id="oval:org.open-scap.f14:ste:20144" version="1">
                  <ind-def:subexpression var_check="all" operation="equals" var_ref="oval:org.open-scap.f14:var:20144"/>
            </ind-def:textfilecontent54_state>
            <ind-def:textfilecontent54_state id="oval:org.open-scap.f14:ste:20143" version="1">
                  <ind-def:subexpression var_check="all" operation="equals" var_ref="oval:org.open-scap.f14:var:20143"/>
            </ind-def:textfilecontent54_state>
            <ind-def:textfilecontent54_state id="oval:org.open-scap.f14:ste:20141" version="1">
                  <ind-def:subexpression var_check="all" operation="equals" var_ref="oval:org.open-scap.f14:var:20141"/>
            </ind-def:textfilecontent54_state>
            <ind-def:textfilecontent54_state id="oval:org.open-scap.f14:ste:20142" version="1">
                  <ind-def:subexpression var_check="all" operation="equals" var_ref="oval:org.open-scap.f14:var:20142"/>
            </ind-def:textfilecontent54_state>

            <ind-def:textfilecontent54_state id="oval:org.open-scap.f14:ste:201745" version="1">
                  <ind-def:subexpression operation="equals">yes</ind-def:subexpression>
            </ind-def:textfilecontent54_state>

	    <unix-def:runlevel_state id="oval:org.open-scap.f14:ste:20146" version="1" comment="Starts at runlevel 3 or 5 (with network)">
	      <unix-def:runlevel operation="pattern match">^[35]$</unix-def:runlevel>
	      <unix-def:start datatype="boolean"   operation="equals">true</unix-def:start>
	    </unix-def:runlevel_state>

	    <unix-def:runlevel_state id="oval:org.open-scap.f14:ste:20148" version="1" comment="Starts at runlevel 2, 3, 4 or 5">
	      <unix-def:runlevel operation="pattern match">^[2345]$</unix-def:runlevel>
	      <unix-def:start  datatype="boolean"  operation="equals">true</unix-def:start>
	    </unix-def:runlevel_state>

            <unix-def:file_state id="oval:org.open-scap.f14:ste:20149" version="1">
                  <unix-def:user_id datatype="int" var_ref="oval:org.open-scap.f14:var:201491"/>
            </unix-def:file_state>

            <unix-def:file_state id="oval:org.open-scap.f14:ste:20150" version="1">
                  <unix-def:group_id datatype="int" var_ref="oval:org.open-scap.f14:var:201502"/>
            </unix-def:file_state>

            <unix-def:file_state id="oval:org.open-scap.f14:ste:20151" version="1">
                  <unix-def:uread var_check="all" datatype="boolean" var_ref="oval:org.open-scap.f14:var:201510"/>
                  <unix-def:uwrite var_check="all" datatype="boolean" var_ref="oval:org.open-scap.f14:var:201511"/>
                  <unix-def:uexec var_check="all" datatype="boolean" var_ref="oval:org.open-scap.f14:var:201512"/>
                  <unix-def:gread var_check="all" datatype="boolean" var_ref="oval:org.open-scap.f14:var:201513"/>
                  <unix-def:gwrite var_check="all" datatype="boolean" var_ref="oval:org.open-scap.f14:var:201514"/>
                  <unix-def:gexec var_check="all" datatype="boolean" var_ref="oval:org.open-scap.f14:var:201515"/>
                  <unix-def:oread var_check="all" datatype="boolean" var_ref="oval:org.open-scap.f14:var:201516"/>
                  <unix-def:owrite var_check="all" datatype="boolean" var_ref="oval:org.open-scap.f14:var:201517"/>
                  <unix-def:oexec var_check="all" datatype="boolean" var_ref="oval:org.open-scap.f14:var:201518"/>
            </unix-def:file_state>
            <unix-def:runlevel_state id="oval:org.open-scap.f14:ste:20156" version="1">
                  <unix-def:start datatype="boolean">true</unix-def:start>
                  <unix-def:kill datatype="boolean">false</unix-def:kill>
            </unix-def:runlevel_state>
            <unix-def:uname_state id="oval:org.open-scap.f14:ste:201670" version="1">
			<unix-def:processor_type operation="pattern match">^i386$|^i686$</unix-def:processor_type>
            </unix-def:uname_state>
            <unix-def:uname_state id="oval:org.open-scap.f14:ste:201672" version="1">
			<unix-def:processor_type operation="pattern match">^x86_64$|^ia64$|</unix-def:processor_type>
            </unix-def:uname_state>
            <unix-def:file_state id="oval:org.open-scap.f14:ste:20217" version="1">
                  <unix-def:group_id datatype="int" var_ref="oval:org.open-scap.f14:var:202142"/>
            </unix-def:file_state>
            <unix-def:file_state id="oval:org.open-scap.f14:ste:20225" version="1">
                  <unix-def:uread var_check="all" datatype="boolean" var_ref="oval:org.open-scap.f14:var:46"/>
                  <unix-def:uwrite var_check="all" datatype="boolean" var_ref="oval:org.open-scap.f14:var:47"/>
                  <unix-def:uexec var_check="all" datatype="boolean" var_ref="oval:org.open-scap.f14:var:48"/>
                  <unix-def:gread var_check="all" datatype="boolean" var_ref="oval:org.open-scap.f14:var:49"/>
                  <unix-def:gwrite var_check="all" datatype="boolean" var_ref="oval:org.open-scap.f14:var:50"/>
                  <unix-def:gexec var_check="all" datatype="boolean" var_ref="oval:org.open-scap.f14:var:51"/>
                  <unix-def:oread var_check="all" datatype="boolean" var_ref="oval:org.open-scap.f14:var:52"/>
                  <unix-def:owrite var_check="all" datatype="boolean" var_ref="oval:org.open-scap.f14:var:53"/>
                  <unix-def:oexec var_check="all" datatype="boolean" var_ref="oval:org.open-scap.f14:var:54"/>
            </unix-def:file_state>
            <unix-def:file_state id="oval:org.open-scap.f14:ste:20216" version="1">
                  <unix-def:group_id datatype="int" var_ref="oval:org.open-scap.f14:var:202142"/>
            </unix-def:file_state>
            <unix-def:file_state id="oval:org.open-scap.f14:ste:20209" version="1">
                  <unix-def:user_id datatype="int" var_ref="oval:org.open-scap.f14:var:202091"/>
            </unix-def:file_state>
            <unix-def:file_state id="oval:org.open-scap.f14:ste:20212" version="1">
                  <unix-def:user_id datatype="int" var_ref="oval:org.open-scap.f14:var:202121"/>
            </unix-def:file_state>
            <unix-def:file_state id="oval:org.open-scap.f14:ste:20210" version="1">
                  <unix-def:uread var_check="all" datatype="boolean" var_ref="oval:org.open-scap.f14:var:55"/>
                  <unix-def:uwrite var_check="all" datatype="boolean" var_ref="oval:org.open-scap.f14:var:56"/>
                  <unix-def:uexec var_check="all" datatype="boolean" var_ref="oval:org.open-scap.f14:var:57"/>
                  <unix-def:gread var_check="all" datatype="boolean" var_ref="oval:org.open-scap.f14:var:58"/>
                  <unix-def:gwrite var_check="all" datatype="boolean" var_ref="oval:org.open-scap.f14:var:59"/>
                  <unix-def:gexec var_check="all" datatype="boolean" var_ref="oval:org.open-scap.f14:var:60"/>
                  <unix-def:oread var_check="all" datatype="boolean" var_ref="oval:org.open-scap.f14:var:61"/>
                  <unix-def:owrite var_check="all" datatype="boolean" var_ref="oval:org.open-scap.f14:var:62"/>
                  <unix-def:oexec var_check="all" datatype="boolean" var_ref="oval:org.open-scap.f14:var:63"/>
            </unix-def:file_state>
            <unix-def:file_state id="oval:org.open-scap.f14:ste:20214" version="1">
                  <unix-def:group_id datatype="int" var_ref="oval:org.open-scap.f14:var:202142"/>
            </unix-def:file_state>
            <unix-def:file_state id="oval:org.open-scap.f14:ste:20222" version="1">
                  <unix-def:user_id datatype="int" var_ref="oval:org.open-scap.f14:var:202191"/>
            </unix-def:file_state>
            <unix-def:file_state id="oval:org.open-scap.f14:ste:20218" version="1">
                  <unix-def:group_id datatype="int" var_ref="oval:org.open-scap.f14:var:202142"/>
            </unix-def:file_state>
            <unix-def:file_state id="oval:org.open-scap.f14:ste:20223" version="1">
                  <unix-def:user_id datatype="int" var_ref="oval:org.open-scap.f14:var:202191"/>
            </unix-def:file_state>
            <unix-def:file_state id="oval:org.open-scap.f14:ste:20221" version="1">
                  <unix-def:user_id datatype="int" var_ref="oval:org.open-scap.f14:var:202191"/>
            </unix-def:file_state>
            <unix-def:file_state id="oval:org.open-scap.f14:ste:20211" version="1">
                  <unix-def:group_id datatype="int" var_ref="oval:org.open-scap.f14:var:202112"/>
            </unix-def:file_state>
            <unix-def:file_state id="oval:org.open-scap.f14:ste:20224" version="1">
                  <unix-def:uread var_check="all" datatype="boolean" var_ref="oval:org.open-scap.f14:var:64"/>
                  <unix-def:uwrite var_check="all" datatype="boolean" var_ref="oval:org.open-scap.f14:var:65"/>
                  <unix-def:uexec var_check="all" datatype="boolean" var_ref="oval:org.open-scap.f14:var:66"/>
                  <unix-def:gread var_check="all" datatype="boolean" var_ref="oval:org.open-scap.f14:var:67"/>
                  <unix-def:gwrite var_check="all" datatype="boolean" var_ref="oval:org.open-scap.f14:var:68"/>
                  <unix-def:gexec var_check="all" datatype="boolean" var_ref="oval:org.open-scap.f14:var:69"/>
                  <unix-def:oread var_check="all" datatype="boolean" var_ref="oval:org.open-scap.f14:var:70"/>
                  <unix-def:owrite var_check="all" datatype="boolean" var_ref="oval:org.open-scap.f14:var:71"/>
                  <unix-def:oexec var_check="all" datatype="boolean" var_ref="oval:org.open-scap.f14:var:72"/>
            </unix-def:file_state>
            <unix-def:file_state id="oval:org.open-scap.f14:ste:20219" version="1">
                  <unix-def:user_id datatype="int" var_ref="oval:org.open-scap.f14:var:202191"/>
            </unix-def:file_state>
            <unix-def:file_state id="oval:org.open-scap.f14:ste:20208" version="1">
                  <unix-def:group_id datatype="int" var_check="all" var_ref="oval:org.open-scap.f14:var:202082"/>
            </unix-def:file_state>
            <unix-def:file_state id="oval:org.open-scap.f14:ste:20220" version="1">
                  <unix-def:user_id datatype="int" var_ref="oval:org.open-scap.f14:var:202191"/>
            </unix-def:file_state>
            <unix-def:file_state id="oval:org.open-scap.f14:ste:20213" version="1">
                  <unix-def:uread var_check="all" datatype="boolean" var_ref="oval:org.open-scap.f14:var:73"/>
                  <unix-def:uwrite var_check="all" datatype="boolean" var_ref="oval:org.open-scap.f14:var:74"/>
                  <unix-def:uexec var_check="all" datatype="boolean" var_ref="oval:org.open-scap.f14:var:75"/>
                  <unix-def:gread var_check="all" datatype="boolean" var_ref="oval:org.open-scap.f14:var:76"/>
                  <unix-def:gwrite var_check="all" datatype="boolean" var_ref="oval:org.open-scap.f14:var:77"/>
                  <unix-def:gexec var_check="all" datatype="boolean" var_ref="oval:org.open-scap.f14:var:78"/>
                  <unix-def:oread var_check="all" datatype="boolean" var_ref="oval:org.open-scap.f14:var:79"/>
                  <unix-def:owrite var_check="all" datatype="boolean" var_ref="oval:org.open-scap.f14:var:80"/>
                  <unix-def:oexec var_check="all" datatype="boolean" var_ref="oval:org.open-scap.f14:var:81"/>
            </unix-def:file_state>
            <unix-def:file_state id="oval:org.open-scap.f14:ste:20226" version="1">
                  <unix-def:uread var_check="all" datatype="boolean" var_ref="oval:org.open-scap.f14:var:82"/>
                  <unix-def:uwrite var_check="all" datatype="boolean" var_ref="oval:org.open-scap.f14:var:83"/>
                  <unix-def:uexec var_check="all" datatype="boolean" var_ref="oval:org.open-scap.f14:var:84"/>
                  <unix-def:gread var_check="all" datatype="boolean" var_ref="oval:org.open-scap.f14:var:85"/>
                  <unix-def:gwrite var_check="all" datatype="boolean" var_ref="oval:org.open-scap.f14:var:86"/>
                  <unix-def:gexec var_check="all" datatype="boolean" var_ref="oval:org.open-scap.f14:var:87"/>
                  <unix-def:oread var_check="all" datatype="boolean" var_ref="oval:org.open-scap.f14:var:88"/>
                  <unix-def:owrite var_check="all" datatype="boolean" var_ref="oval:org.open-scap.f14:var:89"/>
                  <unix-def:oexec var_check="all" datatype="boolean" var_ref="oval:org.open-scap.f14:var:90"/>
            </unix-def:file_state>
            <unix-def:file_state id="oval:org.open-scap.f14:ste:20227" version="1">
                  <unix-def:uread var_check="all" datatype="boolean" var_ref="oval:org.open-scap.f14:var:91"/>
                  <unix-def:uwrite var_check="all" datatype="boolean" var_ref="oval:org.open-scap.f14:var:92"/>
                  <unix-def:uexec var_check="all" datatype="boolean" var_ref="oval:org.open-scap.f14:var:93"/>
                  <unix-def:gread var_check="all" datatype="boolean" var_ref="oval:org.open-scap.f14:var:94"/>
                  <unix-def:gwrite var_check="all" datatype="boolean" var_ref="oval:org.open-scap.f14:var:95"/>
                  <unix-def:gexec var_check="all" datatype="boolean" var_ref="oval:org.open-scap.f14:var:96"/>
                  <unix-def:oread var_check="all" datatype="boolean" var_ref="oval:org.open-scap.f14:var:97"/>
                  <unix-def:owrite var_check="all" datatype="boolean" var_ref="oval:org.open-scap.f14:var:98"/>
                  <unix-def:oexec var_check="all" datatype="boolean" var_ref="oval:org.open-scap.f14:var:99"/>
            </unix-def:file_state>
            <unix-def:file_state id="oval:org.open-scap.f14:ste:20215" version="1">
                  <unix-def:group_id datatype="int" var_ref="oval:org.open-scap.f14:var:202142"/>
            </unix-def:file_state>
            <unix-def:file_state id="oval:org.open-scap.f14:ste:20228" version="1">
                  <unix-def:uread var_check="all" datatype="boolean" var_ref="oval:org.open-scap.f14:var:100"/>
                  <unix-def:uwrite var_check="all" datatype="boolean" var_ref="oval:org.open-scap.f14:var:101"/>
                  <unix-def:uexec var_check="all" datatype="boolean" var_ref="oval:org.open-scap.f14:var:102"/>
                  <unix-def:gread var_check="all" datatype="boolean" var_ref="oval:org.open-scap.f14:var:103"/>
                  <unix-def:gwrite var_check="all" datatype="boolean" var_ref="oval:org.open-scap.f14:var:104"/>
                  <unix-def:gexec var_check="all" datatype="boolean" var_ref="oval:org.open-scap.f14:var:105"/>
                  <unix-def:oread var_check="all" datatype="boolean" var_ref="oval:org.open-scap.f14:var:106"/>
                  <unix-def:owrite var_check="all" datatype="boolean" var_ref="oval:org.open-scap.f14:var:107"/>
                  <unix-def:oexec var_check="all" datatype="boolean" var_ref="oval:org.open-scap.f14:var:108"/>
            </unix-def:file_state>
            <unix-def:file_state id="oval:org.open-scap.f14:ste:20229" version="1">
                  <unix-def:group_id datatype="int" var_ref="oval:org.open-scap.f14:var:202292"/>
            </unix-def:file_state>
            <unix-def:file_state id="oval:org.open-scap.f14:ste:20230" version="1">
                  <unix-def:group_id datatype="int" var_ref="oval:org.open-scap.f14:var:202302"/>
            </unix-def:file_state>
            <unix-def:file_state id="oval:org.open-scap.f14:ste:20231" version="1">
                  <unix-def:uread var_check="all" datatype="boolean" var_ref="oval:org.open-scap.f14:var:160"/>
                  <unix-def:uwrite var_check="all" datatype="boolean" var_ref="oval:org.open-scap.f14:var:161"/>
                  <unix-def:uexec var_check="all" datatype="boolean" var_ref="oval:org.open-scap.f14:var:162"/>
                  <unix-def:gread var_check="all" datatype="boolean" var_ref="oval:org.open-scap.f14:var:163"/>
                  <unix-def:gwrite var_check="all" datatype="boolean" var_ref="oval:org.open-scap.f14:var:164"/>
                  <unix-def:gexec var_check="all" datatype="boolean" var_ref="oval:org.open-scap.f14:var:165"/>
                  <unix-def:oread var_check="all" datatype="boolean" var_ref="oval:org.open-scap.f14:var:166"/>
                  <unix-def:owrite var_check="all" datatype="boolean" var_ref="oval:org.open-scap.f14:var:167"/>
                  <unix-def:oexec var_check="all" datatype="boolean" var_ref="oval:org.open-scap.f14:var:168"/>
            </unix-def:file_state>
            <ind-def:textfilecontent54_state id="oval:org.open-scap.f14:ste:86" version="1">
                  <ind-def:subexpression datatype="int" var_check="all" operation="pattern match" var_ref="oval:org.open-scap.f14:var:20239"/>
            </ind-def:textfilecontent54_state>
            <ind-def:textfilecontent54_state id="oval:org.open-scap.f14:ste:87" version="1">
                  <ind-def:subexpression var_check="all" operation="equals" var_ref="oval:org.open-scap.f14:var:20246"/>
            </ind-def:textfilecontent54_state>
            <ind-def:textfilecontent54_state id="oval:org.open-scap.f14:ste:20239" version="1" comment="ClientAliveInterval in seconds">
                  <ind-def:subexpression datatype="int" operation="equals" var_check="all" var_ref="oval:org.open-scap.f14:var:20239"/>
            </ind-def:textfilecontent54_state>
            <ind-def:textfilecontent54_state id="oval:org.open-scap.f14:ste:20240" version="1">
                  <ind-def:subexpression datatype="int" operation="equals" var_check="all" var_ref="oval:org.open-scap.f14:var:20240"/>
            </ind-def:textfilecontent54_state>
            <ind-def:textfilecontent54_state id="oval:org.open-scap.f14:ste:202456" version="1">
                  <ind-def:subexpression operation="equals">aes128-ctr,aes192-ctr,aes256-ctr</ind-def:subexpression>
            </ind-def:textfilecontent54_state>
            <ind-def:textfilecontent54_state id="oval:org.open-scap.f14:ste:20253" version="1">
                  <ind-def:subexpression operation="equals">yes</ind-def:subexpression>
            </ind-def:textfilecontent54_state>
            <ind-def:textfilecontent54_state id="oval:org.open-scap.f14:ste:20254" version="1">
                  <ind-def:subexpression operation="equals">yes</ind-def:subexpression>
            </ind-def:textfilecontent54_state>
            <ind-def:textfilecontent54_state id="oval:org.open-scap.f14:ste:20255" version="1">
                  <ind-def:subexpression operation="equals">yes</ind-def:subexpression>
            </ind-def:textfilecontent54_state>
            <ind-def:textfilecontent54_state id="oval:org.open-scap.f14:ste:20256" version="1">
                  <ind-def:subexpression operation="equals">yes</ind-def:subexpression>
            </ind-def:textfilecontent54_state>
            <ind-def:textfilecontent54_state id="oval:org.open-scap.f14:ste:20257" version="1">
                  <ind-def:subexpression operation="equals">no</ind-def:subexpression>
            </ind-def:textfilecontent54_state>
            <ind-def:textfilecontent54_state id="oval:org.open-scap.f14:ste:20258" version="1">
                  <ind-def:subexpression operation="equals">no</ind-def:subexpression>
            </ind-def:textfilecontent54_state>
            <ind-def:textfilecontent54_state id="oval:org.open-scap.f14:ste:20259" version="1">
                  <ind-def:subexpression operation="equals">no</ind-def:subexpression>
            </ind-def:textfilecontent54_state>
            <ind-def:textfilecontent54_state id="oval:org.open-scap.f14:ste:20260" version="1">
                  <ind-def:subexpression operation="equals">no</ind-def:subexpression>
            </ind-def:textfilecontent54_state>
            <ind-def:textfilecontent54_state id="oval:org.open-scap.f14:ste:20264" version="1">
                  <ind-def:subexpression operation="equals">off</ind-def:subexpression>
            </ind-def:textfilecontent54_state>
            <unix-def:file_state id="oval:org.open-scap.f14:ste:20290" version="1">
                  <unix-def:group_id datatype="int">0</unix-def:group_id>
            </unix-def:file_state>
            <unix-def:file_state id="oval:org.open-scap.f14:ste:20291" version="1">
                  <unix-def:user_id datatype="int">0</unix-def:user_id>
            </unix-def:file_state>
            <unix-def:file_state id="oval:org.open-scap.f14:ste:20313" version="1">
                  <unix-def:group_id datatype="int">0</unix-def:group_id>
            </unix-def:file_state>
            <unix-def:file_state id="oval:org.open-scap.f14:ste:20315" version="1">
                  <unix-def:uread var_check="all" datatype="boolean" var_ref="oval:org.open-scap.f14:var:109"/>
                  <unix-def:uwrite var_check="all" datatype="boolean" var_ref="oval:org.open-scap.f14:var:110"/>
                  <unix-def:uexec var_check="all" datatype="boolean" var_ref="oval:org.open-scap.f14:var:111"/>
                  <unix-def:gread var_check="all" datatype="boolean" var_ref="oval:org.open-scap.f14:var:112"/>
                  <unix-def:gwrite var_check="all" datatype="boolean" var_ref="oval:org.open-scap.f14:var:113"/>
                  <unix-def:gexec var_check="all" datatype="boolean" var_ref="oval:org.open-scap.f14:var:114"/>
                  <unix-def:oread var_check="all" datatype="boolean" var_ref="oval:org.open-scap.f14:var:115"/>
                  <unix-def:owrite var_check="all" datatype="boolean" var_ref="oval:org.open-scap.f14:var:116"/>
                  <unix-def:oexec var_check="all" datatype="boolean" var_ref="oval:org.open-scap.f14:var:117"/>
            </unix-def:file_state>
            <unix-def:file_state id="oval:org.open-scap.f14:ste:20314" version="1">
                  <unix-def:user_id datatype="int">0</unix-def:user_id>
            </unix-def:file_state>
            <ind-def:textfilecontent54_state id="oval:org.open-scap.f14:ste:20324" version="1">
                  <ind-def:subexpression var_check="all" operation="equals" var_ref="oval:org.open-scap.f14:var:20324"/>
            </ind-def:textfilecontent54_state>
            <ind-def:textfilecontent54_state id="oval:org.open-scap.f14:ste:20325" version="1">
                  <ind-def:subexpression var_check="all" operation="equals" var_ref="oval:org.open-scap.f14:var:20325"/>
            </ind-def:textfilecontent54_state>
            <unix-def:file_state id="oval:org.open-scap.f14:ste:20326" version="1">
                  <unix-def:uread var_check="all" datatype="boolean" var_ref="oval:org.open-scap.f14:var:118"/>
                  <unix-def:uwrite var_check="all" datatype="boolean" var_ref="oval:org.open-scap.f14:var:119"/>
                  <unix-def:uexec var_check="all" datatype="boolean" var_ref="oval:org.open-scap.f14:var:120"/>
                  <unix-def:gread var_check="all" datatype="boolean" var_ref="oval:org.open-scap.f14:var:121"/>
                  <unix-def:gwrite var_check="all" datatype="boolean" var_ref="oval:org.open-scap.f14:var:122"/>
                  <unix-def:gexec var_check="all" datatype="boolean" var_ref="oval:org.open-scap.f14:var:123"/>
                  <unix-def:oread var_check="all" datatype="boolean" var_ref="oval:org.open-scap.f14:var:124"/>
                  <unix-def:owrite var_check="all" datatype="boolean" var_ref="oval:org.open-scap.f14:var:125"/>
                  <unix-def:oexec var_check="all" datatype="boolean" var_ref="oval:org.open-scap.f14:var:126"/>
            </unix-def:file_state>
            <unix-def:file_state id="oval:org.open-scap.f14:ste:20327" version="1">
                  <unix-def:uread var_check="all" datatype="boolean" var_ref="oval:org.open-scap.f14:var:127"/>
                  <unix-def:uwrite var_check="all" datatype="boolean" var_ref="oval:org.open-scap.f14:var:128"/>
                  <unix-def:uexec var_check="all" datatype="boolean" var_ref="oval:org.open-scap.f14:var:129"/>
                  <unix-def:gread var_check="all" datatype="boolean" var_ref="oval:org.open-scap.f14:var:130"/>
                  <unix-def:gwrite var_check="all" datatype="boolean" var_ref="oval:org.open-scap.f14:var:131"/>
                  <unix-def:gexec var_check="all" datatype="boolean" var_ref="oval:org.open-scap.f14:var:132"/>
                  <unix-def:oread var_check="all" datatype="boolean" var_ref="oval:org.open-scap.f14:var:133"/>
                  <unix-def:owrite var_check="all" datatype="boolean" var_ref="oval:org.open-scap.f14:var:134"/>
                  <unix-def:oexec var_check="all" datatype="boolean" var_ref="oval:org.open-scap.f14:var:135"/>
            </unix-def:file_state>
            <unix-def:file_state id="oval:org.open-scap.f14:ste:20328" version="1">
                  <unix-def:uread var_check="all" datatype="boolean" var_ref="oval:org.open-scap.f14:var:136"/>
                  <unix-def:uwrite var_check="all" datatype="boolean" var_ref="oval:org.open-scap.f14:var:137"/>
                  <unix-def:uexec var_check="all" datatype="boolean" var_ref="oval:org.open-scap.f14:var:138"/>
                  <unix-def:gread var_check="all" datatype="boolean" var_ref="oval:org.open-scap.f14:var:139"/>
                  <unix-def:gwrite var_check="all" datatype="boolean" var_ref="oval:org.open-scap.f14:var:140"/>
                  <unix-def:gexec var_check="all" datatype="boolean" var_ref="oval:org.open-scap.f14:var:141"/>
                  <unix-def:oread var_check="all" datatype="boolean" var_ref="oval:org.open-scap.f14:var:142"/>
                  <unix-def:owrite var_check="all" datatype="boolean" var_ref="oval:org.open-scap.f14:var:143"/>
                  <unix-def:oexec var_check="all" datatype="boolean" var_ref="oval:org.open-scap.f14:var:144"/>
            </unix-def:file_state>
            <unix-def:file_state id="oval:org.open-scap.f14:ste:20329" version="1">
                  <unix-def:group_id datatype="int">0</unix-def:group_id>
            </unix-def:file_state>
            <unix-def:file_state id="oval:org.open-scap.f14:ste:20330" version="1">
                  <unix-def:uread var_check="all" datatype="boolean" var_ref="oval:org.open-scap.f14:var:145"/>
                  <unix-def:uwrite var_check="all" datatype="boolean" var_ref="oval:org.open-scap.f14:var:146"/>
                  <unix-def:uexec var_check="all" datatype="boolean" var_ref="oval:org.open-scap.f14:var:147"/>
                  <unix-def:gread var_check="all" datatype="boolean" var_ref="oval:org.open-scap.f14:var:148"/>
                  <unix-def:gwrite var_check="all" datatype="boolean" var_ref="oval:org.open-scap.f14:var:149"/>
                  <unix-def:gexec var_check="all" datatype="boolean" var_ref="oval:org.open-scap.f14:var:150"/>
                  <unix-def:oread var_check="all" datatype="boolean" var_ref="oval:org.open-scap.f14:var:151"/>
                  <unix-def:owrite var_check="all" datatype="boolean" var_ref="oval:org.open-scap.f14:var:152"/>
                  <unix-def:oexec var_check="all" datatype="boolean" var_ref="oval:org.open-scap.f14:var:153"/>
            </unix-def:file_state>
            <ind-def:textfilecontent54_state id="oval:org.open-scap.f14:ste:20337" version="1">
                  <ind-def:subexpression operation="equals">yes</ind-def:subexpression>
            </ind-def:textfilecontent54_state>
            <ind-def:textfilecontent54_state id="oval:org.open-scap.f14:ste:20338" version="1">
                  <ind-def:subexpression operation="equals">yes</ind-def:subexpression>
            </ind-def:textfilecontent54_state>
            <ind-def:textfilecontent54_state id="oval:org.open-scap.f14:ste:20339" version="1">
                  <ind-def:subexpression operation="equals">yes</ind-def:subexpression>
            </ind-def:textfilecontent54_state>
            <ind-def:textfilecontent54_state id="oval:org.open-scap.f14:ste:20340111" version="1">
                  <ind-def:instance datatype="int">1</ind-def:instance>
                  <ind-def:subexpression operation="not equal">cifs</ind-def:subexpression>
            </ind-def:textfilecontent54_state>
            <ind-def:textfilecontent54_state id="oval:org.open-scap.f14:ste:20340112" version="1">
                  <ind-def:instance datatype="int">2</ind-def:instance>
                  <ind-def:subexpression operation="pattern match">sec=(krb5i|ntlmv2i)</ind-def:subexpression>
            </ind-def:textfilecontent54_state>
            <ind-def:textfilecontent54_state id="oval:org.open-scap.f14:ste:20343" version="1">
                  <ind-def:subexpression operation="equals">on</ind-def:subexpression>
            </ind-def:textfilecontent54_state>
            <ind-def:textfilecontent54_state id="oval:org.open-scap.f14:ste:20346" version="1">
                  <ind-def:subexpression var_check="all" operation="equals" var_ref="oval:org.open-scap.f14:var:20346"/>
            </ind-def:textfilecontent54_state>
            <ind-def:textfilecontent54_state id="oval:org.open-scap.f14:ste:20345" version="1">
                  <ind-def:subexpression operation="equals">on</ind-def:subexpression>
            </ind-def:textfilecontent54_state>
            <ind-def:textfilecontent54_state id="oval:org.open-scap.f14:ste:20350" version="1">
                  <ind-def:subexpression operation="equals">on</ind-def:subexpression>
            </ind-def:textfilecontent54_state>
            <ind-def:textfilecontent54_state id="oval:org.open-scap.f14:ste:20347" version="1">
                  <ind-def:subexpression var_check="all" operation="equals" var_ref="oval:org.open-scap.f14:var:20347"/>
            </ind-def:textfilecontent54_state>
            <ind-def:textfilecontent54_state id="oval:org.open-scap.f14:ste:20348" version="1">
                  <ind-def:subexpression var_check="all" operation="equals" var_ref="oval:org.open-scap.f14:var:20348"/>
            </ind-def:textfilecontent54_state>
            <ind-def:textfilecontent54_state id="oval:org.open-scap.f14:ste:20344" version="1">
                  <ind-def:subexpression operation="equals">on</ind-def:subexpression>
            </ind-def:textfilecontent54_state>
            <ind-def:textfilecontent54_state id="oval:org.open-scap.f14:ste:20349" version="1">
                  <ind-def:subexpression var_check="all" operation="equals" var_ref="oval:org.open-scap.f14:var:20349"/>
            </ind-def:textfilecontent54_state>
            <ind-def:textfilecontent54_state id="oval:org.open-scap.f14:ste:20353" version="1">
                  <ind-def:subexpression var_check="all" operation="equals" var_ref="oval:org.open-scap.f14:var:20353"/>
            </ind-def:textfilecontent54_state>
            <ind-def:textfilecontent54_state id="oval:org.open-scap.f14:ste:20354" version="1">
                  <ind-def:subexpression var_check="all" operation="equals" var_ref="oval:org.open-scap.f14:var:20354"/>
            </ind-def:textfilecontent54_state>
            <ind-def:textfilecontent54_state id="oval:org.open-scap.f14:ste:20351" version="1">
                  <ind-def:subexpression var_check="all" operation="equals" var_ref="oval:org.open-scap.f14:var:20351"/>
            </ind-def:textfilecontent54_state>
            <ind-def:textfilecontent54_state id="oval:org.open-scap.f14:ste:20352" version="1">
                  <ind-def:subexpression var_check="all" operation="equals" var_ref="oval:org.open-scap.f14:var:20352"/>
            </ind-def:textfilecontent54_state>
            <ind-def:textfilecontent54_state id="oval:org.open-scap.f14:ste:20070" version="1">
                  <ind-def:subexpression operation="equals">root</ind-def:subexpression>
            </ind-def:textfilecontent54_state>
      </states>
      <variables>
            <external_variable id="oval:org.open-scap.f14:var:20042" version="1" datatype="string" comment="External variable for definition 20042"/> 
            <external_variable id="oval:org.open-scap.f14:var:20043" version="1" datatype="string" comment="External variable for definition 20043"/>
            <external_variable id="oval:org.open-scap.f14:var:20044" version="1" datatype="string" comment="External variable for definition 20044"/>
            <external_variable id="oval:org.open-scap.f14:var:20045" version="1" datatype="string" comment="External variable for definition 20045"/>
            <external_variable id="oval:org.open-scap.f14:var:20053" version="1" datatype="int" comment="External variable for definition 20053"/>
            <external_variable id="oval:org.open-scap.f14:var:20071" version="1" datatype="int" comment="External variable for definition 20071"/>
            <!-- val:org.fedoraproject.f14:def:20071 -->
            <external_variable id="oval:org.open-scap.f14:var:20072" version="1" datatype="string" comment="External variable for definition 20072"/>
            <external_variable id="oval:org.open-scap.f14:var:20073" version="1" datatype="string" comment="External variable for definition 20073"/>
            <external_variable id="oval:org.open-scap.f14:var:20074" version="1" datatype="string" comment="External variable for definition 20074"/>
            <external_variable id="oval:org.open-scap.f14:var:200781" version="1" datatype="int" comment="External variable for definition 200781"/>
            <external_variable id="oval:org.open-scap.f14:var:200782" version="1" datatype="int" comment="External variable for definition 200782"/>
            <external_variable id="oval:org.open-scap.f14:var:200783" version="1" datatype="int" comment="External variable for definition 200783"/>
            <external_variable id="oval:org.open-scap.f14:var:200784" version="1" datatype="int" comment="External variable for definition 200784"/>
            <external_variable id="oval:org.open-scap.f14:var:200785" version="1" datatype="int" comment="External variable for definition 200785"/>
            <external_variable id="oval:org.open-scap.f14:var:200786" version="1" datatype="int" comment="External variable for definition 200786"/>
            <external_variable id="oval:org.open-scap.f14:var:200787" version="1" datatype="int" comment="External variable for definition 200787"/>
            <external_variable id="oval:org.open-scap.f14:var:200801" version="1" datatype="int" comment="External variable for definition 20080 deny"/>
            <external_variable id="oval:org.open-scap.f14:var:200802" version="1" datatype="int" comment="External variable for definition 20080 lock_time"/>
            <external_variable id="oval:org.open-scap.f14:var:200803" version="1" datatype="int" comment="External variable for definition 20080 unlock_time"/>
            <external_variable id="oval:org.open-scap.f14:var:20081" version="1" datatype="string" comment="External variable for definition 20081"/>
            <external_variable id="oval:org.open-scap.f14:var:20082" version="1" datatype="string" comment="External variable for definition 20082"/>
            <external_variable id="oval:org.open-scap.f14:var:20083" version="1" datatype="string" comment="External variable for definition 20083 Password hashing algorithm"/>
            <external_variable id="oval:org.open-scap.f14:var:20084" version="1" datatype="string" comment="External variable for definition 20084 number of passwords to remember"/>
            <external_variable id="oval:org.open-scap.f14:var:20087" version="1" datatype="string" comment="External variable for definition 20087 - 20090"/>
            <external_variable id="oval:org.open-scap.f14:var:20092" version="1" datatype="string" comment="External variable for definition 20092"/>
            <external_variable id="oval:org.open-scap.f14:var:20094" version="1" datatype="string" comment="External variable for definition 20094"/>
            <external_variable id="oval:org.open-scap.f14:var:20093" version="1" datatype="string" comment="External variable for definition 20093"/>
            <external_variable id="oval:org.open-scap.f14:var:20098" version="1" datatype="int" comment="External variable for definitions 20098 20100"/>
            <external_variable id="oval:org.open-scap.f14:var:20099" version="1" datatype="int" comment="External variable for definitions 20099"/> <!-- turn minutes into seconds -->
            <external_variable id="oval:org.open-scap.f14:var:20102" version="1" datatype="string" comment="External variable for definitions 200102 20103 Warning Banner"/>
            <external_variable id="oval:org.open-scap.f14:var:20106" version="1" datatype="string" comment="External variable for definition 20106"/>
            <external_variable id="oval:org.open-scap.f14:var:20107" version="1" datatype="string" comment="External variable for definition 20107"/>
            <external_variable id="oval:org.open-scap.f14:var:20115" version="1" datatype="string" comment="External variable for definition 20115"/>
            <external_variable id="oval:org.open-scap.f14:var:20116" version="1" datatype="string" comment="External variable for definition 20116"/>
            <external_variable id="oval:org.open-scap.f14:var:20117" version="1" datatype="string" comment="External variable for definition 20117"/>
            <external_variable id="oval:org.open-scap.f14:var:20118" version="1" datatype="string" comment="External variable for definition 20118"/>
            <external_variable id="oval:org.open-scap.f14:var:20119" version="1" datatype="string" comment="External variable for definition 20119"/>
            <external_variable id="oval:org.open-scap.f14:var:20120" version="1" datatype="string" comment="External variable for definition 20120"/>
            <external_variable id="oval:org.open-scap.f14:var:20121" version="1" datatype="string" comment="External variable for definition 20121"/>
            <external_variable id="oval:org.open-scap.f14:var:20122" version="1" datatype="string" comment="External variable for definition 20122"/>
            <external_variable id="oval:org.open-scap.f14:var:20123" version="1" datatype="string" comment="External variable for definition 20123"/>
            <external_variable id="oval:org.open-scap.f14:var:20124" version="1" datatype="string" comment="External variable for definition 20124"/>
            <external_variable id="oval:org.open-scap.f14:var:20125" version="1" datatype="string" comment="External variable for definition 20125"/>
            <external_variable id="oval:org.open-scap.f14:var:20126" version="1" datatype="string" comment="External variable for definition 20126"/>
            <external_variable id="oval:org.open-scap.f14:var:20134" version="1" datatype="string" comment="External variable for definition 20134"/>
            <external_variable id="oval:org.open-scap.f14:var:20135" version="1" datatype="string" comment="External variable for definition 20135"/>
            <external_variable id="oval:org.open-scap.f14:var:20136" version="1" datatype="string" comment="External variable for definition 20136"/>
            <external_variable id="oval:org.open-scap.f14:var:20137" version="1" datatype="string" comment="External variable for definition 20137"/>
            <external_variable id="oval:org.open-scap.f14:var:20138" version="1" datatype="string" comment="External variable for definition 20138"/>
            <external_variable id="oval:org.open-scap.f14:var:20139" version="1" datatype="string" comment="External variable for definition 20139"/>
            <external_variable id="oval:org.open-scap.f14:var:20140" version="1" datatype="string" comment="External variable for definition 20140"/>
            <external_variable id="oval:org.open-scap.f14:var:20141" version="1" datatype="string" comment="External variable for definition 20141"/>
            <external_variable id="oval:org.open-scap.f14:var:20142" version="1" datatype="string" comment="External variable for definition 20142"/>
            <external_variable id="oval:org.open-scap.f14:var:20143" version="1" datatype="string" comment="External variable for definition 20143"/>
            <external_variable id="oval:org.open-scap.f14:var:20144" version="1" datatype="string" comment="External variable for definition 20144"/>
            <external_variable id="oval:org.open-scap.f14:var:20145" version="1" datatype="string" comment="External variable for definition 20145"/>
            <external_variable id="oval:org.open-scap.f14:var:20149" version="1" datatype="string" comment="External variable for definition 20149"/>
            <external_variable id="oval:org.open-scap.f14:var:20150" version="1" datatype="string" comment="External variable for definition 20150"/>
            <external_variable id="oval:org.open-scap.f14:var:20151" version="1" datatype="string" comment="External variable for definition 20151"/>
            <external_variable id="oval:org.open-scap.f14:var:20208" version="1" datatype="string" comment="External variable for definition 20208"/>
            <external_variable id="oval:org.open-scap.f14:var:20209" version="1" datatype="string" comment="External variable for definition 20209"/>
            <external_variable id="oval:org.open-scap.f14:var:20210" version="1" datatype="string" comment="External variable for definition 20210"/>
            <external_variable id="oval:org.open-scap.f14:var:20211" version="1" datatype="string" comment="External variable for definition 20211"/>
            <external_variable id="oval:org.open-scap.f14:var:20212" version="1" datatype="string" comment="External variable for definition 20212"/>
            <external_variable id="oval:org.open-scap.f14:var:20213" version="1" datatype="string" comment="External variable for definition 20213"/>
            <external_variable id="oval:org.open-scap.f14:var:20214" version="1" datatype="string" comment="External variable for definition 20214 20216 20217 20218"/>
            <external_variable id="oval:org.open-scap.f14:var:20219" version="1" datatype="string" comment="External variable for definition 20219 20220 20221 20222 20223"/>
            <external_variable id="oval:org.open-scap.f14:var:20224" version="1" datatype="string" comment="External variable for definition 20224 20225 20226 20227 20228"/>
            <external_variable id="oval:org.open-scap.f14:var:20229" version="1" datatype="string" comment="External variable for definition 20229"/>
            <external_variable id="oval:org.open-scap.f14:var:20230" version="1" datatype="string" comment="External variable for definition 20230"/>
            <external_variable id="oval:org.open-scap.f14:var:20231" version="1" datatype="string" comment="External variable for definition 20231"/>
            <external_variable id="oval:org.open-scap.f14:var:20239" version="1" datatype="int" comment="External variable for ClientActiveinterval in definition 20239"/>
            <external_variable id="oval:org.open-scap.f14:var:20240" version="1" datatype="int" comment="External variable for ClientAliveCountMax in definition 20240"/>
            <external_variable id="oval:org.open-scap.f14:var:20246" version="1" datatype="string" comment="External variable for definition 20246"/>
            <external_variable id="oval:org.open-scap.f14:var:20262" version="1" datatype="string" comment="External variable for definition 20262"/>
            <external_variable id="oval:org.open-scap.f14:var:20264" version="1" datatype="string" comment="External variable for definition 20264"/>
            <external_variable id="oval:org.open-scap.f14:var:20267" version="1" datatype="string" comment="External variable for definition 20267"/>
            <external_variable id="oval:org.open-scap.f14:var:20290" version="1" datatype="string" comment="External variable for definition 20290"/>
            <external_variable id="oval:org.open-scap.f14:var:20291" version="1" datatype="string" comment="External variable for definition 20291"/>
            <external_variable id="oval:org.open-scap.f14:var:20313" version="1" datatype="string" comment="External variable for definition 20313"/>
            <external_variable id="oval:org.open-scap.f14:var:20314" version="1" datatype="string" comment="External variable for definition 20314"/>
            <external_variable id="oval:org.open-scap.f14:var:20315" version="1" datatype="string" comment="External variable for definition 20315"/>
            <external_variable id="oval:org.open-scap.f14:var:20324" version="1" datatype="string" comment="External variable for definition 20324"/>
            <external_variable id="oval:org.open-scap.f14:var:20325" version="1" datatype="string" comment="External variable for definition 20325"/>
            <external_variable id="oval:org.open-scap.f14:var:20326" version="1" datatype="string" comment="External variable for definition 20326"/>
            <external_variable id="oval:org.open-scap.f14:var:20327" version="1" datatype="string" comment="External variable for definition 20327"/>
            <external_variable id="oval:org.open-scap.f14:var:20328" version="1" datatype="string" comment="External variable for definition 20328"/>
            <external_variable id="oval:org.open-scap.f14:var:20329" version="1" datatype="string" comment="External variable for definition 20329"/>
            <external_variable id="oval:org.open-scap.f14:var:20330" version="1" datatype="string" comment="External variable for definition 20330"/>
            <external_variable id="oval:org.open-scap.f14:var:20346" version="1" datatype="string" comment="External variable for definition 20346"/>
            <external_variable id="oval:org.open-scap.f14:var:20347" version="1" datatype="string" comment="External variable for definition 20347"/>
            <external_variable id="oval:org.open-scap.f14:var:20348" version="1" datatype="string" comment="External variable for definition 20348"/>
            <external_variable id="oval:org.open-scap.f14:var:20349" version="1" datatype="string" comment="External variable for definition 20349"/>
            <external_variable id="oval:org.open-scap.f14:var:20351" version="1" datatype="string" comment="External variable for definition 20351"/>
            <external_variable id="oval:org.open-scap.f14:var:20352" version="1" datatype="string" comment="External variable for definition 20352"/>
            <external_variable id="oval:org.open-scap.f14:var:20353" version="1" datatype="string" comment="External variable for definition 20353"/>
            <external_variable id="oval:org.open-scap.f14:var:20354" version="1" datatype="string" comment="External variable for definition 20354"/>

<!--
            <local_variable id="oval:org.open-scap.f14:var:201490" version="1" datatype="string" comment="list of paths in /etc/syslog.conf" >
                  <object_component item_field="subexpression" object_ref="oval:org.open-scap.f14:obj:201490"/> 
            </local_variable>
-->
<!--
            <constant_variable id="oval:org.open-scap.f14:var:20107" version="1" datatype="string" comment="foo">
            	  <value>targeted</value>
            </constant_variable>
-->

            <constant_variable id="oval:org.open-scap.f14:var:201490" version="1" datatype="string" comment="Filenames of mandatory log files">
	      <value>cron</value>
	      <value>messages</value>
	      <value>secure</value>
	      <value>maillog</value>
<!--
	      <value>boot.log</value>
	      <value>faillog</value>
	      <value>dmesg</value>
	      <value>audit</value>
	      <value>lastlog</value>
-->
	    </constant_variable>

            <constant_variable id="oval:org.open-scap.f14:var:200484" version="1" datatype="string" comment="List of files known to have the sgid bit set">
                  <value>lockdev</value>
                  <value>sendmail.sendmail</value>
            </constant_variable>
            <constant_variable id="oval:org.open-scap.f14:var:200485" version="1" datatype="string" comment="List of files known to have the sgid bit set">
                  <value>write</value>
                  <value>locate</value>
                  <value>ssh-agent</value>
                  <value>wall</value>
                  <value>screen</value>
                  <value>lockfile</value>
                  <value>gnomine</value>
                  <value>jwhois</value>
                  <value>iagno</value>
                  <value>crontab</value>
            </constant_variable>

            <constant_variable id="oval:org.open-scap.f14:var:2004902" version="1" datatype="string" comment="List of files known to have the suid bit set">
                  <value>cgexec</value>
                  <value>fusermount</value>
                  <value>mount</value>
                  <value>ping</value>
                  <value>ping6</value>
                  <value>su</value>
                  <value>umount</value>
            </constant_variable>
            <constant_variable id="oval:org.open-scap.f14:var:2004905" version="1" datatype="string" comment="List of files known to have the suid bit set">
                  <value>mount.nfs</value>
                  <value>pam_timestamp_check</value>
                  <value>unix_chkpwd</value>
            </constant_variable>
            <constant_variable id="oval:org.open-scap.f14:var:2004906" version="1" datatype="string" comment="List of files known to have the suid bit set">
                  <value>Xorg</value>
                  <value>at</value>
                  <value>chage</value>
                  <value>chfn</value>
                  <value>chsh</value>
                  <value>crontab</value>
                  <value>gpasswd</value>
                  <value>ksu</value>
                  <value>newgrp</value>
                  <value>passwd</value>
                  <value>pkexec</value>
                  <value>rcp</value>
                  <value>rlogin</value>
                  <value>rsh</value>
                  <value>staprun</value>
                  <value>sudo</value>
                  <value>sudoedit</value>
            </constant_variable>
            <constant_variable id="oval:org.open-scap.f14:var:2004910" version="1" datatype="string" comment="List of files known to have the suid bit set">
                  <value>innbind</value>
                  <value>rnews</value>
            </constant_variable>
            <constant_variable id="oval:org.open-scap.f14:var:2004915" version="1" datatype="string" comment="List of files known to have the suid bit set">
                  <value>ccreds_chkpwd</value>
                  <value>mtr</value>
                  <value>seunshare</value>
                  <value>suexec</value>
                  <value>userhelper</value>
                  <value>usernetctl</value>
                  <value>userisdnctl</value>
            </constant_variable>

            <constant_variable id="oval:org.open-scap.f14:var:2017" version="1" datatype="string" comment="Regexp pattern for xinetd services">
            	  <value>^[[:space:]]+disable[[:space:]]*=[[:space:]]*(yes|no)</value>
            </constant_variable>

            <local_variable id="oval:org.open-scap.f14:var:1" version="1" datatype="boolean" comment="Bit for a permission type">
                  <substring substring_length="1" substring_start="1">
                        <variable_component var_ref="oval:org.open-scap.f14:var:20042"/>
                  </substring>
            </local_variable>
            <local_variable id="oval:org.open-scap.f14:var:2" version="1" datatype="boolean" comment="Bit for a permission type">
                  <substring substring_length="1" substring_start="2">
                        <variable_component var_ref="oval:org.open-scap.f14:var:20042"/>
                  </substring>
            </local_variable>
            <local_variable id="oval:org.open-scap.f14:var:3" version="1" datatype="boolean" comment="Bit for a permission type">
                  <substring substring_length="1" substring_start="3">
                        <variable_component var_ref="oval:org.open-scap.f14:var:20042"/>
                  </substring>
            </local_variable>
            <local_variable id="oval:org.open-scap.f14:var:4" version="1" datatype="boolean" comment="Bit for a permission type">
                  <substring substring_length="1" substring_start="4">
                        <variable_component var_ref="oval:org.open-scap.f14:var:20042"/>
                  </substring>
            </local_variable>
            <local_variable id="oval:org.open-scap.f14:var:5" version="1" datatype="boolean" comment="Bit for a permission type">
                  <substring substring_length="1" substring_start="5">
                        <variable_component var_ref="oval:org.open-scap.f14:var:20042"/>
                  </substring>
            </local_variable>
            <local_variable id="oval:org.open-scap.f14:var:6" version="1" datatype="boolean" comment="Bit for a permission type">
                  <substring substring_length="1" substring_start="6">
                        <variable_component var_ref="oval:org.open-scap.f14:var:20042"/>
                  </substring>
            </local_variable>
            <local_variable id="oval:org.open-scap.f14:var:7" version="1" datatype="boolean" comment="Bit for a permission type">
                  <substring substring_length="1" substring_start="7">
                        <variable_component var_ref="oval:org.open-scap.f14:var:20042"/>
                  </substring>
            </local_variable>
            <local_variable id="oval:org.open-scap.f14:var:8" version="1" datatype="boolean" comment="Bit for a permission type">
                  <substring substring_length="1" substring_start="8">
                        <variable_component var_ref="oval:org.open-scap.f14:var:20042"/>
                  </substring>
            </local_variable>
            <local_variable id="oval:org.open-scap.f14:var:9" version="1" datatype="boolean" comment="Bit for a permission type">
                  <substring substring_length="1" substring_start="9">
                        <variable_component var_ref="oval:org.open-scap.f14:var:20042"/>
                  </substring>
            </local_variable>
            <local_variable id="oval:org.open-scap.f14:var:10" version="1" datatype="boolean" comment="Bit for a permission type">
                  <substring substring_length="1" substring_start="1">
                        <variable_component var_ref="oval:org.open-scap.f14:var:20043"/>
                  </substring>
            </local_variable>
            <local_variable id="oval:org.open-scap.f14:var:11" version="1" datatype="boolean" comment="Bit for a permission type">
                  <substring substring_length="1" substring_start="2">
                        <variable_component var_ref="oval:org.open-scap.f14:var:20043"/>
                  </substring>
            </local_variable>
            <local_variable id="oval:org.open-scap.f14:var:12" version="1" datatype="boolean" comment="Bit for a permission type">
                  <substring substring_length="1" substring_start="3">
                        <variable_component var_ref="oval:org.open-scap.f14:var:20043"/>
                  </substring>
            </local_variable>
            <local_variable id="oval:org.open-scap.f14:var:13" version="1" datatype="boolean" comment="Bit for a permission type">
                  <substring substring_length="1" substring_start="4">
                        <variable_component var_ref="oval:org.open-scap.f14:var:20043"/>
                  </substring>
            </local_variable>
            <local_variable id="oval:org.open-scap.f14:var:14" version="1" datatype="boolean" comment="Bit for a permission type">
                  <substring substring_length="1" substring_start="5">
                        <variable_component var_ref="oval:org.open-scap.f14:var:20043"/>
                  </substring>
            </local_variable>
            <local_variable id="oval:org.open-scap.f14:var:15" version="1" datatype="boolean" comment="Bit for a permission type">
                  <substring substring_length="1" substring_start="6">
                        <variable_component var_ref="oval:org.open-scap.f14:var:20043"/>
                  </substring>
            </local_variable>
            <local_variable id="oval:org.open-scap.f14:var:16" version="1" datatype="boolean" comment="Bit for a permission type">
                  <substring substring_length="1" substring_start="7">
                        <variable_component var_ref="oval:org.open-scap.f14:var:20043"/>
                  </substring>
            </local_variable>
            <local_variable id="oval:org.open-scap.f14:var:17" version="1" datatype="boolean" comment="Bit for a permission type">
                  <substring substring_length="1" substring_start="8">
                        <variable_component var_ref="oval:org.open-scap.f14:var:20043"/>
                  </substring>
            </local_variable>
            <local_variable id="oval:org.open-scap.f14:var:18" version="1" datatype="boolean" comment="Bit for a permission type">
                  <substring substring_length="1" substring_start="9">
                        <variable_component var_ref="oval:org.open-scap.f14:var:20043"/>
                  </substring>
            </local_variable>
            <local_variable id="oval:org.open-scap.f14:var:19" version="1" datatype="boolean" comment="Bit for a permission type">
                  <substring substring_length="1" substring_start="1">
                        <variable_component var_ref="oval:org.open-scap.f14:var:20044"/>
                  </substring>
            </local_variable>
            <local_variable id="oval:org.open-scap.f14:var:20" version="1" datatype="boolean" comment="Bit for a permission type">
                  <substring substring_length="1" substring_start="2">
                        <variable_component var_ref="oval:org.open-scap.f14:var:20044"/>
                  </substring>
            </local_variable>
            <local_variable id="oval:org.open-scap.f14:var:21" version="1" datatype="boolean" comment="Bit for a permission type">
                  <substring substring_length="1" substring_start="3">
                        <variable_component var_ref="oval:org.open-scap.f14:var:20044"/>
                  </substring>
            </local_variable>
            <local_variable id="oval:org.open-scap.f14:var:22" version="1" datatype="boolean" comment="Bit for a permission type">
                  <substring substring_length="1" substring_start="4">
                        <variable_component var_ref="oval:org.open-scap.f14:var:20044"/>
                  </substring>
            </local_variable>
            <local_variable id="oval:org.open-scap.f14:var:23" version="1" datatype="boolean" comment="Bit for a permission type">
                  <substring substring_length="1" substring_start="5">
                        <variable_component var_ref="oval:org.open-scap.f14:var:20044"/>
                  </substring>
            </local_variable>
            <local_variable id="oval:org.open-scap.f14:var:24" version="1" datatype="boolean" comment="Bit for a permission type">
                  <substring substring_length="1" substring_start="6">
                        <variable_component var_ref="oval:org.open-scap.f14:var:20044"/>
                  </substring>
            </local_variable>
            <local_variable id="oval:org.open-scap.f14:var:25" version="1" datatype="boolean" comment="Bit for a permission type">
                  <substring substring_length="1" substring_start="7">
                        <variable_component var_ref="oval:org.open-scap.f14:var:20044"/>
                  </substring>
            </local_variable>
            <local_variable id="oval:org.open-scap.f14:var:26" version="1" datatype="boolean" comment="Bit for a permission type">
                  <substring substring_length="1" substring_start="8">
                        <variable_component var_ref="oval:org.open-scap.f14:var:20044"/>
                  </substring>
            </local_variable>
            <local_variable id="oval:org.open-scap.f14:var:27" version="1" datatype="boolean" comment="Bit for a permission type">
                  <substring substring_length="1" substring_start="9">
                        <variable_component var_ref="oval:org.open-scap.f14:var:20044"/>
                  </substring>
            </local_variable>
            <local_variable id="oval:org.open-scap.f14:var:28" version="1" datatype="boolean" comment="Bit for a permission type">
                  <substring substring_length="1" substring_start="1">
                        <variable_component var_ref="oval:org.open-scap.f14:var:20045"/>
                  </substring>
            </local_variable>
            <local_variable id="oval:org.open-scap.f14:var:29" version="1" datatype="boolean" comment="Bit for a permission type">
                  <substring substring_length="1" substring_start="2">
                        <variable_component var_ref="oval:org.open-scap.f14:var:20045"/>
                  </substring>
            </local_variable>
            <local_variable id="oval:org.open-scap.f14:var:30" version="1" datatype="boolean" comment="Bit for a permission type">
                  <substring substring_length="1" substring_start="3">
                        <variable_component var_ref="oval:org.open-scap.f14:var:20045"/>
                  </substring>
            </local_variable>
            <local_variable id="oval:org.open-scap.f14:var:31" version="1" datatype="boolean" comment="Bit for a permission type">
                  <substring substring_length="1" substring_start="4">
                        <variable_component var_ref="oval:org.open-scap.f14:var:20045"/>
                  </substring>
            </local_variable>
            <local_variable id="oval:org.open-scap.f14:var:32" version="1" datatype="boolean" comment="Bit for a permission type">
                  <substring substring_length="1" substring_start="5">
                        <variable_component var_ref="oval:org.open-scap.f14:var:20045"/>
                  </substring>
            </local_variable>
            <local_variable id="oval:org.open-scap.f14:var:33" version="1" datatype="boolean" comment="Bit for a permission type">
                  <substring substring_length="1" substring_start="6">
                        <variable_component var_ref="oval:org.open-scap.f14:var:20045"/>
                  </substring>
            </local_variable>
            <local_variable id="oval:org.open-scap.f14:var:34" version="1" datatype="boolean" comment="Bit for a permission type">
                  <substring substring_length="1" substring_start="7">
                        <variable_component var_ref="oval:org.open-scap.f14:var:20045"/>
                  </substring>
            </local_variable>
            <local_variable id="oval:org.open-scap.f14:var:35" version="1" datatype="boolean" comment="Bit for a permission type">
                  <substring substring_length="1" substring_start="8">
                        <variable_component var_ref="oval:org.open-scap.f14:var:20045"/>
                  </substring>
            </local_variable>
            <local_variable id="oval:org.open-scap.f14:var:36" version="1" datatype="boolean" comment="Bit for a permission type">
                  <substring substring_length="1" substring_start="9">
                        <variable_component var_ref="oval:org.open-scap.f14:var:20045"/>
                  </substring>
            </local_variable>
            <local_variable id="oval:org.open-scap.f14:var:20050" version="1" datatype="int" comment="List of user ids">
                        <object_component item_field="subexpression" object_ref="oval:org.open-scap.f14:obj:200501"/>
            </local_variable>
            <local_variable id="oval:org.open-scap.f14:var:20051" version="1" datatype="int" comment="List of group ids">
                        <object_component item_field="subexpression" object_ref="oval:org.open-scap.f14:obj:200511"/>
            </local_variable>
            <local_variable id="oval:org.open-scap.f14:var:200820" version="1" datatype="boolean" comment="Bit for a permission type">
                  <substring substring_length="1" substring_start="1">
                        <variable_component var_ref="oval:org.open-scap.f14:var:20082"/>
                  </substring>
            </local_variable>
            <local_variable id="oval:org.open-scap.f14:var:200821" version="1" datatype="boolean" comment="Bit for a permission type">
                  <substring substring_length="1" substring_start="4">
                        <variable_component var_ref="oval:org.open-scap.f14:var:20082"/>
                  </substring>
            </local_variable>
            <local_variable id="oval:org.open-scap.f14:var:200822" version="1" datatype="boolean" comment="Bit for a permission type">
                  <substring substring_length="1" substring_start="5">
                        <variable_component var_ref="oval:org.open-scap.f14:var:20082"/>
                  </substring>
            </local_variable>
            <local_variable id="oval:org.open-scap.f14:var:200823" version="1" datatype="boolean" comment="Bit for a permission type">
                  <substring substring_length="1" substring_start="6">
                        <variable_component var_ref="oval:org.open-scap.f14:var:20082"/>
                  </substring>
            </local_variable>
            <local_variable id="oval:org.open-scap.f14:var:200824" version="1" datatype="boolean" comment="Bit for a permission type">
                  <substring substring_length="1" substring_start="7">
                        <variable_component var_ref="oval:org.open-scap.f14:var:20082"/>
                  </substring>
            </local_variable>
            <local_variable id="oval:org.open-scap.f14:var:200825" version="1" datatype="boolean" comment="Bit for a permission type">
                  <substring substring_length="1" substring_start="8">
                        <variable_component var_ref="oval:org.open-scap.f14:var:20082"/>
                  </substring>
            </local_variable>
            <local_variable id="oval:org.open-scap.f14:var:200826" version="1" datatype="boolean" comment="Bit for a permission type">
                  <substring substring_length="1" substring_start="9">
                        <variable_component var_ref="oval:org.open-scap.f14:var:20082"/>
                  </substring>
            </local_variable>
            <local_variable id="oval:org.open-scap.f14:var:200827" version="1" datatype="boolean" comment="Bit for a permission type">
                  <substring substring_length="1" substring_start="10">
                        <variable_component var_ref="oval:org.open-scap.f14:var:20082"/>
                  </substring>
            </local_variable>
            <local_variable id="oval:org.open-scap.f14:var:200828" version="1" datatype="boolean" comment="Bit for a permission type">
                  <substring substring_length="1" substring_start="11">
                        <variable_component var_ref="oval:org.open-scap.f14:var:20082"/>
                  </substring>
            </local_variable>
            <local_variable id="oval:org.open-scap.f14:var:200829" version="1" datatype="boolean" comment="Bit for a permission type">
                  <substring substring_length="1" substring_start="12">
                        <variable_component var_ref="oval:org.open-scap.f14:var:20082"/>
                  </substring>
            </local_variable>
            <local_variable id="oval:org.open-scap.f14:var:37" version="1" datatype="boolean" comment="Bit for a permission type">
                  <substring substring_length="1" substring_start="1">
                        <variable_component var_ref="oval:org.open-scap.f14:var:20094"/>
                  </substring>
            </local_variable>
            <local_variable id="oval:org.open-scap.f14:var:38" version="1" datatype="boolean" comment="Bit for a permission type">
                  <substring substring_length="1" substring_start="2">
                        <variable_component var_ref="oval:org.open-scap.f14:var:20094"/>
                  </substring>
            </local_variable>
            <local_variable id="oval:org.open-scap.f14:var:39" version="1" datatype="boolean" comment="Bit for a permission type">
                  <substring substring_length="1" substring_start="3">
                        <variable_component var_ref="oval:org.open-scap.f14:var:20094"/>
                  </substring>
            </local_variable>
            <local_variable id="oval:org.open-scap.f14:var:40" version="1" datatype="boolean" comment="Bit for a permission type">
                  <substring substring_length="1" substring_start="4">
                        <variable_component var_ref="oval:org.open-scap.f14:var:20094"/>
                  </substring>
            </local_variable>
            <local_variable id="oval:org.open-scap.f14:var:41" version="1" datatype="boolean" comment="Bit for a permission type">
                  <substring substring_length="1" substring_start="5">
                        <variable_component var_ref="oval:org.open-scap.f14:var:20094"/>
                  </substring>
            </local_variable>
            <local_variable id="oval:org.open-scap.f14:var:42" version="1" datatype="boolean" comment="Bit for a permission type">
                  <substring substring_length="1" substring_start="6">
                        <variable_component var_ref="oval:org.open-scap.f14:var:20094"/>
                  </substring>
            </local_variable>
            <local_variable id="oval:org.open-scap.f14:var:43" version="1" datatype="boolean" comment="Bit for a permission type">
                  <substring substring_length="1" substring_start="7">
                        <variable_component var_ref="oval:org.open-scap.f14:var:20094"/>
                  </substring>
            </local_variable>
            <local_variable id="oval:org.open-scap.f14:var:44" version="1" datatype="boolean" comment="Bit for a permission type">
                  <substring substring_length="1" substring_start="8">
                        <variable_component var_ref="oval:org.open-scap.f14:var:20094"/>
                  </substring>
            </local_variable>
            <local_variable id="oval:org.open-scap.f14:var:45" version="1" datatype="boolean" comment="Bit for a permission type">
                  <substring substring_length="1" substring_start="9">
                        <variable_component var_ref="oval:org.open-scap.f14:var:20094"/>
                  </substring>
            </local_variable>
            <local_variable id="oval:org.open-scap.f14:var:201510" version="1" datatype="boolean" comment="Bit for a permission type">
                  <substring substring_length="1" substring_start="1">
                        <variable_component var_ref="oval:org.open-scap.f14:var:20151"/>
                  </substring>
            </local_variable>
            <local_variable id="oval:org.open-scap.f14:var:201511" version="1" datatype="boolean" comment="Bit for a permission type">
                  <substring substring_length="1" substring_start="2">
                        <variable_component var_ref="oval:org.open-scap.f14:var:20151"/>
                  </substring>
            </local_variable>
            <local_variable id="oval:org.open-scap.f14:var:201512" version="1" datatype="boolean" comment="Bit for a permission type">
                  <substring substring_length="1" substring_start="3">
                        <variable_component var_ref="oval:org.open-scap.f14:var:20151"/>
                  </substring>
            </local_variable>
            <local_variable id="oval:org.open-scap.f14:var:201513" version="1" datatype="boolean" comment="Bit for a permission type">
                  <substring substring_length="1" substring_start="4">
                        <variable_component var_ref="oval:org.open-scap.f14:var:20151"/>
                  </substring>
            </local_variable>
            <local_variable id="oval:org.open-scap.f14:var:201514" version="1" datatype="boolean" comment="Bit for a permission type">
                  <substring substring_length="1" substring_start="5">
                        <variable_component var_ref="oval:org.open-scap.f14:var:20151"/>
                  </substring>
            </local_variable>
            <local_variable id="oval:org.open-scap.f14:var:201515" version="1" datatype="boolean" comment="Bit for a permission type">
                  <substring substring_length="1" substring_start="6">
                        <variable_component var_ref="oval:org.open-scap.f14:var:20151"/>
                  </substring>
            </local_variable>
            <local_variable id="oval:org.open-scap.f14:var:201516" version="1" datatype="boolean" comment="Bit for a permission type">
                  <substring substring_length="1" substring_start="7">
                        <variable_component var_ref="oval:org.open-scap.f14:var:20151"/>
                  </substring>
            </local_variable>
            <local_variable id="oval:org.open-scap.f14:var:201517" version="1" datatype="boolean" comment="Bit for a permission type">
                  <substring substring_length="1" substring_start="8">
                        <variable_component var_ref="oval:org.open-scap.f14:var:20151"/>
                  </substring>
            </local_variable>
            <local_variable id="oval:org.open-scap.f14:var:201518" version="1" datatype="boolean" comment="Bit for a permission type">
                  <substring substring_length="1" substring_start="9">
                        <variable_component var_ref="oval:org.open-scap.f14:var:20151"/>
                  </substring>
            </local_variable>
            <local_variable id="oval:org.open-scap.f14:var:46" version="1" datatype="boolean" comment="Bit for a permission type">
                  <substring substring_length="1" substring_start="1">
                        <variable_component var_ref="oval:org.open-scap.f14:var:20224"/>
                  </substring>
            </local_variable>
            <local_variable id="oval:org.open-scap.f14:var:47" version="1" datatype="boolean" comment="Bit for a permission type">
                  <substring substring_length="1" substring_start="2">
                        <variable_component var_ref="oval:org.open-scap.f14:var:20224"/>
                  </substring>
            </local_variable>
            <local_variable id="oval:org.open-scap.f14:var:48" version="1" datatype="boolean" comment="Bit for a permission type">
                  <substring substring_length="1" substring_start="3">
                        <variable_component var_ref="oval:org.open-scap.f14:var:20224"/>
                  </substring>
            </local_variable>
            <local_variable id="oval:org.open-scap.f14:var:49" version="1" datatype="boolean" comment="Bit for a permission type">
                  <substring substring_length="1" substring_start="4">
                        <variable_component var_ref="oval:org.open-scap.f14:var:20224"/>
                  </substring>
            </local_variable>
            <local_variable id="oval:org.open-scap.f14:var:50" version="1" datatype="boolean" comment="Bit for a permission type">
                  <substring substring_length="1" substring_start="5">
                        <variable_component var_ref="oval:org.open-scap.f14:var:20224"/>
                  </substring>
            </local_variable>
            <local_variable id="oval:org.open-scap.f14:var:51" version="1" datatype="boolean" comment="Bit for a permission type">
                  <substring substring_length="1" substring_start="6">
                        <variable_component var_ref="oval:org.open-scap.f14:var:20224"/>
                  </substring>
            </local_variable>
            <local_variable id="oval:org.open-scap.f14:var:52" version="1" datatype="boolean" comment="Bit for a permission type">
                  <substring substring_length="1" substring_start="7">
                        <variable_component var_ref="oval:org.open-scap.f14:var:20224"/>
                  </substring>
            </local_variable>
            <local_variable id="oval:org.open-scap.f14:var:53" version="1" datatype="boolean" comment="Bit for a permission type">
                  <substring substring_length="1" substring_start="8">
                        <variable_component var_ref="oval:org.open-scap.f14:var:20224"/>
                  </substring>
            </local_variable>
            <local_variable id="oval:org.open-scap.f14:var:54" version="1" datatype="boolean" comment="Bit for a permission type">
                  <substring substring_length="1" substring_start="9">
                        <variable_component var_ref="oval:org.open-scap.f14:var:20224"/>
                  </substring>
            </local_variable>
            <local_variable id="oval:org.open-scap.f14:var:55" version="1" datatype="boolean" comment="Bit for a permission type">
                  <substring substring_length="1" substring_start="1">
                        <variable_component var_ref="oval:org.open-scap.f14:var:20210"/>
                  </substring>
            </local_variable>
            <local_variable id="oval:org.open-scap.f14:var:56" version="1" datatype="boolean" comment="Bit for a permission type">
                  <substring substring_length="1" substring_start="2">
                        <variable_component var_ref="oval:org.open-scap.f14:var:20210"/>
                  </substring>
            </local_variable>
            <local_variable id="oval:org.open-scap.f14:var:57" version="1" datatype="boolean" comment="Bit for a permission type">
                  <substring substring_length="1" substring_start="3">
                        <variable_component var_ref="oval:org.open-scap.f14:var:20210"/>
                  </substring>
            </local_variable>
            <local_variable id="oval:org.open-scap.f14:var:58" version="1" datatype="boolean" comment="Bit for a permission type">
                  <substring substring_length="1" substring_start="4">
                        <variable_component var_ref="oval:org.open-scap.f14:var:20210"/>
                  </substring>
            </local_variable>
            <local_variable id="oval:org.open-scap.f14:var:59" version="1" datatype="boolean" comment="Bit for a permission type">
                  <substring substring_length="1" substring_start="5">
                        <variable_component var_ref="oval:org.open-scap.f14:var:20210"/>
                  </substring>
            </local_variable>
            <local_variable id="oval:org.open-scap.f14:var:60" version="1" datatype="boolean" comment="Bit for a permission type">
                  <substring substring_length="1" substring_start="6">
                        <variable_component var_ref="oval:org.open-scap.f14:var:20210"/>
                  </substring>
            </local_variable>
            <local_variable id="oval:org.open-scap.f14:var:61" version="1" datatype="boolean" comment="Bit for a permission type">
                  <substring substring_length="1" substring_start="7">
                        <variable_component var_ref="oval:org.open-scap.f14:var:20210"/>
                  </substring>
            </local_variable>
            <local_variable id="oval:org.open-scap.f14:var:62" version="1" datatype="boolean" comment="Bit for a permission type">
                  <substring substring_length="1" substring_start="8">
                        <variable_component var_ref="oval:org.open-scap.f14:var:20210"/>
                  </substring>
            </local_variable>
            <local_variable id="oval:org.open-scap.f14:var:63" version="1" datatype="boolean" comment="Bit for a permission type">
                  <substring substring_length="1" substring_start="9">
                        <variable_component var_ref="oval:org.open-scap.f14:var:20210"/>
                  </substring>
            </local_variable>
            <local_variable id="oval:org.open-scap.f14:var:64" version="1" datatype="boolean" comment="Bit for a permission type">
                  <substring substring_length="1" substring_start="1">
                        <variable_component var_ref="oval:org.open-scap.f14:var:20224"/>
                  </substring>
            </local_variable>
            <local_variable id="oval:org.open-scap.f14:var:65" version="1" datatype="boolean" comment="Bit for a permission type">
                  <substring substring_length="1" substring_start="2">
                        <variable_component var_ref="oval:org.open-scap.f14:var:20224"/>
                  </substring>
            </local_variable>
            <local_variable id="oval:org.open-scap.f14:var:66" version="1" datatype="boolean" comment="Bit for a permission type">
                  <substring substring_length="1" substring_start="3">
                        <variable_component var_ref="oval:org.open-scap.f14:var:20224"/>
                  </substring>
            </local_variable>
            <local_variable id="oval:org.open-scap.f14:var:67" version="1" datatype="boolean" comment="Bit for a permission type">
                  <substring substring_length="1" substring_start="4">
                        <variable_component var_ref="oval:org.open-scap.f14:var:20224"/>
                  </substring>
            </local_variable>
            <local_variable id="oval:org.open-scap.f14:var:68" version="1" datatype="boolean" comment="Bit for a permission type">
                  <substring substring_length="1" substring_start="5">
                        <variable_component var_ref="oval:org.open-scap.f14:var:20224"/>
                  </substring>
            </local_variable>
            <local_variable id="oval:org.open-scap.f14:var:69" version="1" datatype="boolean" comment="Bit for a permission type">
                  <substring substring_length="1" substring_start="6">
                        <variable_component var_ref="oval:org.open-scap.f14:var:20224"/>
                  </substring>
            </local_variable>
            <local_variable id="oval:org.open-scap.f14:var:70" version="1" datatype="boolean" comment="Bit for a permission type">
                  <substring substring_length="1" substring_start="7">
                        <variable_component var_ref="oval:org.open-scap.f14:var:20224"/>
                  </substring>
            </local_variable>
            <local_variable id="oval:org.open-scap.f14:var:71" version="1" datatype="boolean" comment="Bit for a permission type">
                  <substring substring_length="1" substring_start="8">
                        <variable_component var_ref="oval:org.open-scap.f14:var:20224"/>
                  </substring>
            </local_variable>
            <local_variable id="oval:org.open-scap.f14:var:72" version="1" datatype="boolean" comment="Bit for a permission type">
                  <substring substring_length="1" substring_start="9">
                        <variable_component var_ref="oval:org.open-scap.f14:var:20224"/>
                  </substring>
            </local_variable>
            <local_variable id="oval:org.open-scap.f14:var:73" version="1" datatype="boolean" comment="Bit for a permission type">
                  <substring substring_length="1" substring_start="1">
                        <variable_component var_ref="oval:org.open-scap.f14:var:20213"/>
                  </substring>
            </local_variable>
            <local_variable id="oval:org.open-scap.f14:var:74" version="1" datatype="boolean" comment="Bit for a permission type">
                  <substring substring_length="1" substring_start="2">
                        <variable_component var_ref="oval:org.open-scap.f14:var:20213"/>
                  </substring>
            </local_variable>
            <local_variable id="oval:org.open-scap.f14:var:75" version="1" datatype="boolean" comment="Bit for a permission type">
                  <substring substring_length="1" substring_start="3">
                        <variable_component var_ref="oval:org.open-scap.f14:var:20213"/>
                  </substring>
            </local_variable>
            <local_variable id="oval:org.open-scap.f14:var:76" version="1" datatype="boolean" comment="Bit for a permission type">
                  <substring substring_length="1" substring_start="4">
                        <variable_component var_ref="oval:org.open-scap.f14:var:20213"/>
                  </substring>
            </local_variable>
            <local_variable id="oval:org.open-scap.f14:var:77" version="1" datatype="boolean" comment="Bit for a permission type">
                  <substring substring_length="1" substring_start="5">
                        <variable_component var_ref="oval:org.open-scap.f14:var:20213"/>
                  </substring>
            </local_variable>
            <local_variable id="oval:org.open-scap.f14:var:78" version="1" datatype="boolean" comment="Bit for a permission type">
                  <substring substring_length="1" substring_start="6">
                        <variable_component var_ref="oval:org.open-scap.f14:var:20213"/>
                  </substring>
            </local_variable>
            <local_variable id="oval:org.open-scap.f14:var:79" version="1" datatype="boolean" comment="Bit for a permission type">
                  <substring substring_length="1" substring_start="7">
                        <variable_component var_ref="oval:org.open-scap.f14:var:20213"/>
                  </substring>
            </local_variable>
            <local_variable id="oval:org.open-scap.f14:var:80" version="1" datatype="boolean" comment="Bit for a permission type">
                  <substring substring_length="1" substring_start="8">
                        <variable_component var_ref="oval:org.open-scap.f14:var:20213"/>
                  </substring>
            </local_variable>
            <local_variable id="oval:org.open-scap.f14:var:81" version="1" datatype="boolean" comment="Bit for a permission type">
                  <substring substring_length="1" substring_start="9">
                        <variable_component var_ref="oval:org.open-scap.f14:var:20213"/>
                  </substring>
            </local_variable>
            <local_variable id="oval:org.open-scap.f14:var:82" version="1" datatype="boolean" comment="Bit for a permission type">
                  <substring substring_length="1" substring_start="1">
                        <variable_component var_ref="oval:org.open-scap.f14:var:20224"/>
                  </substring>
            </local_variable>
            <local_variable id="oval:org.open-scap.f14:var:83" version="1" datatype="boolean" comment="Bit for a permission type">
                  <substring substring_length="1" substring_start="2">
                        <variable_component var_ref="oval:org.open-scap.f14:var:20224"/>
                  </substring>
            </local_variable>
            <local_variable id="oval:org.open-scap.f14:var:84" version="1" datatype="boolean" comment="Bit for a permission type">
                  <substring substring_length="1" substring_start="3">
                        <variable_component var_ref="oval:org.open-scap.f14:var:20224"/>
                  </substring>
            </local_variable>
            <local_variable id="oval:org.open-scap.f14:var:85" version="1" datatype="boolean" comment="Bit for a permission type">
                  <substring substring_length="1" substring_start="4">
                        <variable_component var_ref="oval:org.open-scap.f14:var:20224"/>
                  </substring>
            </local_variable>
            <local_variable id="oval:org.open-scap.f14:var:86" version="1" datatype="boolean" comment="Bit for a permission type">
                  <substring substring_length="1" substring_start="5">
                        <variable_component var_ref="oval:org.open-scap.f14:var:20224"/>
                  </substring>
            </local_variable>
            <local_variable id="oval:org.open-scap.f14:var:87" version="1" datatype="boolean" comment="Bit for a permission type">
                  <substring substring_length="1" substring_start="6">
                        <variable_component var_ref="oval:org.open-scap.f14:var:20224"/>
                  </substring>
            </local_variable>
            <local_variable id="oval:org.open-scap.f14:var:88" version="1" datatype="boolean" comment="Bit for a permission type">
                  <substring substring_length="1" substring_start="7">
                        <variable_component var_ref="oval:org.open-scap.f14:var:20224"/>
                  </substring>
            </local_variable>
            <local_variable id="oval:org.open-scap.f14:var:89" version="1" datatype="boolean" comment="Bit for a permission type">
                  <substring substring_length="1" substring_start="8">
                        <variable_component var_ref="oval:org.open-scap.f14:var:20224"/>
                  </substring>
            </local_variable>
            <local_variable id="oval:org.open-scap.f14:var:90" version="1" datatype="boolean" comment="Bit for a permission type">
                  <substring substring_length="1" substring_start="9">
                        <variable_component var_ref="oval:org.open-scap.f14:var:20224"/>
                  </substring>
            </local_variable>
            <local_variable id="oval:org.open-scap.f14:var:91" version="1" datatype="boolean" comment="Bit for a permission type">
                  <substring substring_length="1" substring_start="1">
                        <variable_component var_ref="oval:org.open-scap.f14:var:20224"/>
                  </substring>
            </local_variable>
            <local_variable id="oval:org.open-scap.f14:var:92" version="1" datatype="boolean" comment="Bit for a permission type">
                  <substring substring_length="1" substring_start="2">
                        <variable_component var_ref="oval:org.open-scap.f14:var:20224"/>
                  </substring>
            </local_variable>
            <local_variable id="oval:org.open-scap.f14:var:93" version="1" datatype="boolean" comment="Bit for a permission type">
                  <substring substring_length="1" substring_start="3">
                        <variable_component var_ref="oval:org.open-scap.f14:var:20224"/>
                  </substring>
            </local_variable>
            <local_variable id="oval:org.open-scap.f14:var:94" version="1" datatype="boolean" comment="Bit for a permission type">
                  <substring substring_length="1" substring_start="4">
                        <variable_component var_ref="oval:org.open-scap.f14:var:20224"/>
                  </substring>
            </local_variable>
            <local_variable id="oval:org.open-scap.f14:var:95" version="1" datatype="boolean" comment="Bit for a permission type">
                  <substring substring_length="1" substring_start="5">
                        <variable_component var_ref="oval:org.open-scap.f14:var:20224"/>
                  </substring>
            </local_variable>
            <local_variable id="oval:org.open-scap.f14:var:96" version="1" datatype="boolean" comment="Bit for a permission type">
                  <substring substring_length="1" substring_start="6">
                        <variable_component var_ref="oval:org.open-scap.f14:var:20224"/>
                  </substring>
            </local_variable>
            <local_variable id="oval:org.open-scap.f14:var:97" version="1" datatype="boolean" comment="Bit for a permission type">
                  <substring substring_length="1" substring_start="7">
                        <variable_component var_ref="oval:org.open-scap.f14:var:20224"/>
                  </substring>
            </local_variable>
            <local_variable id="oval:org.open-scap.f14:var:98" version="1" datatype="boolean" comment="Bit for a permission type">
                  <substring substring_length="1" substring_start="8">
                        <variable_component var_ref="oval:org.open-scap.f14:var:20224"/>
                  </substring>
            </local_variable>
            <local_variable id="oval:org.open-scap.f14:var:99" version="1" datatype="boolean" comment="Bit for a permission type">
                  <substring substring_length="1" substring_start="9">
                        <variable_component var_ref="oval:org.open-scap.f14:var:20224"/>
                  </substring>
            </local_variable>
            <local_variable id="oval:org.open-scap.f14:var:100" version="1" datatype="boolean" comment="Bit for a permission type">
                  <substring substring_length="1" substring_start="1">
                        <variable_component var_ref="oval:org.open-scap.f14:var:20224"/>
                  </substring>
            </local_variable>
            <local_variable id="oval:org.open-scap.f14:var:101" version="1" datatype="boolean" comment="Bit for a permission type">
                  <substring substring_length="1" substring_start="2">
                        <variable_component var_ref="oval:org.open-scap.f14:var:20224"/>
                  </substring>
            </local_variable>
            <local_variable id="oval:org.open-scap.f14:var:102" version="1" datatype="boolean" comment="Bit for a permission type">
                  <substring substring_length="1" substring_start="3">
                        <variable_component var_ref="oval:org.open-scap.f14:var:20224"/>
                  </substring>
            </local_variable>
            <local_variable id="oval:org.open-scap.f14:var:103" version="1" datatype="boolean" comment="Bit for a permission type">
                  <substring substring_length="1" substring_start="4">
                        <variable_component var_ref="oval:org.open-scap.f14:var:20224"/>
                  </substring>
            </local_variable>
            <local_variable id="oval:org.open-scap.f14:var:104" version="1" datatype="boolean" comment="Bit for a permission type">
                  <substring substring_length="1" substring_start="5">
                        <variable_component var_ref="oval:org.open-scap.f14:var:20224"/>
                  </substring>
            </local_variable>
            <local_variable id="oval:org.open-scap.f14:var:105" version="1" datatype="boolean" comment="Bit for a permission type">
                  <substring substring_length="1" substring_start="6">
                        <variable_component var_ref="oval:org.open-scap.f14:var:20224"/>
                  </substring>
            </local_variable>
            <local_variable id="oval:org.open-scap.f14:var:106" version="1" datatype="boolean" comment="Bit for a permission type">
                  <substring substring_length="1" substring_start="7">
                        <variable_component var_ref="oval:org.open-scap.f14:var:20224"/>
                  </substring>
            </local_variable>
            <local_variable id="oval:org.open-scap.f14:var:107" version="1" datatype="boolean" comment="Bit for a permission type">
                  <substring substring_length="1" substring_start="8">
                        <variable_component var_ref="oval:org.open-scap.f14:var:20224"/>
                  </substring>
            </local_variable>
            <local_variable id="oval:org.open-scap.f14:var:108" version="1" datatype="boolean" comment="Bit for a permission type">
                  <substring substring_length="1" substring_start="9">
                        <variable_component var_ref="oval:org.open-scap.f14:var:20224"/>
                  </substring>
            </local_variable>
            <local_variable id="oval:org.open-scap.f14:var:109" version="1" datatype="boolean" comment="Bit for a permission type">
                  <substring substring_length="1" substring_start="1">
                        <variable_component var_ref="oval:org.open-scap.f14:var:20315"/>
                  </substring>
            </local_variable>
            <local_variable id="oval:org.open-scap.f14:var:110" version="1" datatype="boolean" comment="Bit for a permission type">
                  <substring substring_length="1" substring_start="2">
                        <variable_component var_ref="oval:org.open-scap.f14:var:20315"/>
                  </substring>
            </local_variable>
            <local_variable id="oval:org.open-scap.f14:var:111" version="1" datatype="boolean" comment="Bit for a permission type">
                  <substring substring_length="1" substring_start="3">
                        <variable_component var_ref="oval:org.open-scap.f14:var:20315"/>
                  </substring>
            </local_variable>
            <local_variable id="oval:org.open-scap.f14:var:112" version="1" datatype="boolean" comment="Bit for a permission type">
                  <substring substring_length="1" substring_start="4">
                        <variable_component var_ref="oval:org.open-scap.f14:var:20315"/>
                  </substring>
            </local_variable>
            <local_variable id="oval:org.open-scap.f14:var:113" version="1" datatype="boolean" comment="Bit for a permission type">
                  <substring substring_length="1" substring_start="5">
                        <variable_component var_ref="oval:org.open-scap.f14:var:20315"/>
                  </substring>
            </local_variable>
            <local_variable id="oval:org.open-scap.f14:var:114" version="1" datatype="boolean" comment="Bit for a permission type">
                  <substring substring_length="1" substring_start="6">
                        <variable_component var_ref="oval:org.open-scap.f14:var:20315"/>
                  </substring>
            </local_variable>
            <local_variable id="oval:org.open-scap.f14:var:115" version="1" datatype="boolean" comment="Bit for a permission type">
                  <substring substring_length="1" substring_start="7">
                        <variable_component var_ref="oval:org.open-scap.f14:var:20315"/>
                  </substring>
            </local_variable>
            <local_variable id="oval:org.open-scap.f14:var:116" version="1" datatype="boolean" comment="Bit for a permission type">
                  <substring substring_length="1" substring_start="8">
                        <variable_component var_ref="oval:org.open-scap.f14:var:20315"/>
                  </substring>
            </local_variable>
            <local_variable id="oval:org.open-scap.f14:var:117" version="1" datatype="boolean" comment="Bit for a permission type">
                  <substring substring_length="1" substring_start="9">
                        <variable_component var_ref="oval:org.open-scap.f14:var:20315"/>
                  </substring>
            </local_variable>
            <local_variable id="oval:org.open-scap.f14:var:118" version="1" datatype="boolean" comment="Bit for a permission type">
                  <substring substring_length="1" substring_start="1">
                        <variable_component var_ref="oval:org.open-scap.f14:var:20326"/>
                  </substring>
            </local_variable>
            <local_variable id="oval:org.open-scap.f14:var:119" version="1" datatype="boolean" comment="Bit for a permission type">
                  <substring substring_length="1" substring_start="2">
                        <variable_component var_ref="oval:org.open-scap.f14:var:20326"/>
                  </substring>
            </local_variable>
            <local_variable id="oval:org.open-scap.f14:var:120" version="1" datatype="boolean" comment="Bit for a permission type">
                  <substring substring_length="1" substring_start="3">
                        <variable_component var_ref="oval:org.open-scap.f14:var:20326"/>
                  </substring>
            </local_variable>
            <local_variable id="oval:org.open-scap.f14:var:121" version="1" datatype="boolean" comment="Bit for a permission type">
                  <substring substring_length="1" substring_start="4">
                        <variable_component var_ref="oval:org.open-scap.f14:var:20326"/>
                  </substring>
            </local_variable>
            <local_variable id="oval:org.open-scap.f14:var:122" version="1" datatype="boolean" comment="Bit for a permission type">
                  <substring substring_length="1" substring_start="5">
                        <variable_component var_ref="oval:org.open-scap.f14:var:20326"/>
                  </substring>
            </local_variable>
            <local_variable id="oval:org.open-scap.f14:var:123" version="1" datatype="boolean" comment="Bit for a permission type">
                  <substring substring_length="1" substring_start="6">
                        <variable_component var_ref="oval:org.open-scap.f14:var:20326"/>
                  </substring>
            </local_variable>
            <local_variable id="oval:org.open-scap.f14:var:124" version="1" datatype="boolean" comment="Bit for a permission type">
                  <substring substring_length="1" substring_start="7">
                        <variable_component var_ref="oval:org.open-scap.f14:var:20326"/>
                  </substring>
            </local_variable>
            <local_variable id="oval:org.open-scap.f14:var:125" version="1" datatype="boolean" comment="Bit for a permission type">
                  <substring substring_length="1" substring_start="8">
                        <variable_component var_ref="oval:org.open-scap.f14:var:20326"/>
                  </substring>
            </local_variable>
            <local_variable id="oval:org.open-scap.f14:var:126" version="1" datatype="boolean" comment="Bit for a permission type">
                  <substring substring_length="1" substring_start="9">
                        <variable_component var_ref="oval:org.open-scap.f14:var:20326"/>
                  </substring>
            </local_variable>
            <local_variable id="oval:org.open-scap.f14:var:127" version="1" datatype="boolean" comment="Bit for a permission type">
                  <substring substring_length="1" substring_start="1">
                        <variable_component var_ref="oval:org.open-scap.f14:var:20327"/>
                  </substring>
            </local_variable>
            <local_variable id="oval:org.open-scap.f14:var:128" version="1" datatype="boolean" comment="Bit for a permission type">
                  <substring substring_length="1" substring_start="2">
                        <variable_component var_ref="oval:org.open-scap.f14:var:20327"/>
                  </substring>
            </local_variable>
            <local_variable id="oval:org.open-scap.f14:var:129" version="1" datatype="boolean" comment="Bit for a permission type">
                  <substring substring_length="1" substring_start="3">
                        <variable_component var_ref="oval:org.open-scap.f14:var:20327"/>
                  </substring>
            </local_variable>
            <local_variable id="oval:org.open-scap.f14:var:130" version="1" datatype="boolean" comment="Bit for a permission type">
                  <substring substring_length="1" substring_start="4">
                        <variable_component var_ref="oval:org.open-scap.f14:var:20327"/>
                  </substring>
            </local_variable>
            <local_variable id="oval:org.open-scap.f14:var:131" version="1" datatype="boolean" comment="Bit for a permission type">
                  <substring substring_length="1" substring_start="5">
                        <variable_component var_ref="oval:org.open-scap.f14:var:20327"/>
                  </substring>
            </local_variable>
            <local_variable id="oval:org.open-scap.f14:var:132" version="1" datatype="boolean" comment="Bit for a permission type">
                  <substring substring_length="1" substring_start="6">
                        <variable_component var_ref="oval:org.open-scap.f14:var:20327"/>
                  </substring>
            </local_variable>
            <local_variable id="oval:org.open-scap.f14:var:133" version="1" datatype="boolean" comment="Bit for a permission type">
                  <substring substring_length="1" substring_start="7">
                        <variable_component var_ref="oval:org.open-scap.f14:var:20327"/>
                  </substring>
            </local_variable>
            <local_variable id="oval:org.open-scap.f14:var:134" version="1" datatype="boolean" comment="Bit for a permission type">
                  <substring substring_length="1" substring_start="8">
                        <variable_component var_ref="oval:org.open-scap.f14:var:20327"/>
                  </substring>
            </local_variable>
            <local_variable id="oval:org.open-scap.f14:var:135" version="1" datatype="boolean" comment="Bit for a permission type">
                  <substring substring_length="1" substring_start="9">
                        <variable_component var_ref="oval:org.open-scap.f14:var:20327"/>
                  </substring>
            </local_variable>
            <local_variable id="oval:org.open-scap.f14:var:136" version="1" datatype="boolean" comment="Bit for a permission type">
                  <substring substring_length="1" substring_start="1">
                        <variable_component var_ref="oval:org.open-scap.f14:var:20328"/>
                  </substring>
            </local_variable>
            <local_variable id="oval:org.open-scap.f14:var:137" version="1" datatype="boolean" comment="Bit for a permission type">
                  <substring substring_length="1" substring_start="2">
                        <variable_component var_ref="oval:org.open-scap.f14:var:20328"/>
                  </substring>
            </local_variable>
            <local_variable id="oval:org.open-scap.f14:var:138" version="1" datatype="boolean" comment="Bit for a permission type">
                  <substring substring_length="1" substring_start="3">
                        <variable_component var_ref="oval:org.open-scap.f14:var:20328"/>
                  </substring>
            </local_variable>
            <local_variable id="oval:org.open-scap.f14:var:139" version="1" datatype="boolean" comment="Bit for a permission type">
                  <substring substring_length="1" substring_start="4">
                        <variable_component var_ref="oval:org.open-scap.f14:var:20328"/>
                  </substring>
            </local_variable>
            <local_variable id="oval:org.open-scap.f14:var:140" version="1" datatype="boolean" comment="Bit for a permission type">
                  <substring substring_length="1" substring_start="5">
                        <variable_component var_ref="oval:org.open-scap.f14:var:20328"/>
                  </substring>
            </local_variable>
            <local_variable id="oval:org.open-scap.f14:var:141" version="1" datatype="boolean" comment="Bit for a permission type">
                  <substring substring_length="1" substring_start="6">
                        <variable_component var_ref="oval:org.open-scap.f14:var:20328"/>
                  </substring>
            </local_variable>
            <local_variable id="oval:org.open-scap.f14:var:142" version="1" datatype="boolean" comment="Bit for a permission type">
                  <substring substring_length="1" substring_start="7">
                        <variable_component var_ref="oval:org.open-scap.f14:var:20328"/>
                  </substring>
            </local_variable>
            <local_variable id="oval:org.open-scap.f14:var:143" version="1" datatype="boolean" comment="Bit for a permission type">
                  <substring substring_length="1" substring_start="8">
                        <variable_component var_ref="oval:org.open-scap.f14:var:20328"/>
                  </substring>
            </local_variable>
            <local_variable id="oval:org.open-scap.f14:var:144" version="1" datatype="boolean" comment="Bit for a permission type">
                  <substring substring_length="1" substring_start="9">
                        <variable_component var_ref="oval:org.open-scap.f14:var:20328"/>
                  </substring>
            </local_variable>
            <local_variable id="oval:org.open-scap.f14:var:145" version="1" datatype="boolean" comment="Bit for a permission type">
                  <substring substring_length="1" substring_start="1">
                        <variable_component var_ref="oval:org.open-scap.f14:var:20330"/>
                  </substring>
            </local_variable>
            <local_variable id="oval:org.open-scap.f14:var:146" version="1" datatype="boolean" comment="Bit for a permission type">
                  <substring substring_length="1" substring_start="2">
                        <variable_component var_ref="oval:org.open-scap.f14:var:20330"/>
                  </substring>
            </local_variable>
            <local_variable id="oval:org.open-scap.f14:var:147" version="1" datatype="boolean" comment="Bit for a permission type">
                  <substring substring_length="1" substring_start="3">
                        <variable_component var_ref="oval:org.open-scap.f14:var:20330"/>
                  </substring>
            </local_variable>
            <local_variable id="oval:org.open-scap.f14:var:148" version="1" datatype="boolean" comment="Bit for a permission type">
                  <substring substring_length="1" substring_start="4">
                        <variable_component var_ref="oval:org.open-scap.f14:var:20330"/>
                  </substring>
            </local_variable>
            <local_variable id="oval:org.open-scap.f14:var:149" version="1" datatype="boolean" comment="Bit for a permission type">
                  <substring substring_length="1" substring_start="5">
                        <variable_component var_ref="oval:org.open-scap.f14:var:20330"/>
                  </substring>
            </local_variable>
            <local_variable id="oval:org.open-scap.f14:var:150" version="1" datatype="boolean" comment="Bit for a permission type">
                  <substring substring_length="1" substring_start="6">
                        <variable_component var_ref="oval:org.open-scap.f14:var:20330"/>
                  </substring>
            </local_variable>
            <local_variable id="oval:org.open-scap.f14:var:151" version="1" datatype="boolean" comment="Bit for a permission type">
                  <substring substring_length="1" substring_start="7">
                        <variable_component var_ref="oval:org.open-scap.f14:var:20330"/>
                  </substring>
            </local_variable>
            <local_variable id="oval:org.open-scap.f14:var:152" version="1" datatype="boolean" comment="Bit for a permission type">
                  <substring substring_length="1" substring_start="8">
                        <variable_component var_ref="oval:org.open-scap.f14:var:20330"/>
                  </substring>
            </local_variable>
            <local_variable id="oval:org.open-scap.f14:var:153" version="1" datatype="boolean" comment="Bit for a permission type">
                  <substring substring_length="1" substring_start="9">
                        <variable_component var_ref="oval:org.open-scap.f14:var:20330"/>
                  </substring>
            </local_variable>

            <local_variable id="oval:org.open-scap.f14:var:160" version="1" datatype="boolean" comment="Bit for a permission type">
                  <substring substring_length="1" substring_start="1">
                        <variable_component var_ref="oval:org.open-scap.f14:var:20231"/>
                  </substring>
            </local_variable>
            <local_variable id="oval:org.open-scap.f14:var:161" version="1" datatype="boolean" comment="Bit for a permission type">
                  <substring substring_length="1" substring_start="2">
                        <variable_component var_ref="oval:org.open-scap.f14:var:20231"/>
                  </substring>
            </local_variable>
            <local_variable id="oval:org.open-scap.f14:var:162" version="1" datatype="boolean" comment="Bit for a permission type">
                  <substring substring_length="1" substring_start="3">
                        <variable_component var_ref="oval:org.open-scap.f14:var:20231"/>
                  </substring>
            </local_variable>
            <local_variable id="oval:org.open-scap.f14:var:163" version="1" datatype="boolean" comment="Bit for a permission type">
                  <substring substring_length="1" substring_start="4">
                        <variable_component var_ref="oval:org.open-scap.f14:var:20231"/>
                  </substring>
            </local_variable>
            <local_variable id="oval:org.open-scap.f14:var:164" version="1" datatype="boolean" comment="Bit for a permission type">
                  <substring substring_length="1" substring_start="5">
                        <variable_component var_ref="oval:org.open-scap.f14:var:20231"/>
                  </substring>
            </local_variable>
            <local_variable id="oval:org.open-scap.f14:var:165" version="1" datatype="boolean" comment="Bit for a permission type">
                  <substring substring_length="1" substring_start="6">
                        <variable_component var_ref="oval:org.open-scap.f14:var:20231"/>
                  </substring>
            </local_variable>
            <local_variable id="oval:org.open-scap.f14:var:166" version="1" datatype="boolean" comment="Bit for a permission type">
                  <substring substring_length="1" substring_start="7">
                        <variable_component var_ref="oval:org.open-scap.f14:var:20231"/>
                  </substring>
            </local_variable>
            <local_variable id="oval:org.open-scap.f14:var:167" version="1" datatype="boolean" comment="Bit for a permission type">
                  <substring substring_length="1" substring_start="8">
                        <variable_component var_ref="oval:org.open-scap.f14:var:20231"/>
                  </substring>
            </local_variable>
            <local_variable id="oval:org.open-scap.f14:var:168" version="1" datatype="boolean" comment="Bit for a permission type">
                  <substring substring_length="1" substring_start="9">
                        <variable_component var_ref="oval:org.open-scap.f14:var:20231"/>
                  </substring>
            </local_variable>

            <local_variable id="oval:org.open-scap.f14:var:200855" version="1" datatype="string" comment="Split the PATH on the : delimiter">
                  <split delimiter=":">
                        <object_component item_field="value" object_ref="oval:org.open-scap.f14:obj:20085"/>
                  </split>
            </local_variable>
            <local_variable comment="Regular expression for /etc/group: Get the group ID of given group name" version="1" id="oval:org.open-scap.f14:var:202081" datatype="string">
                  <concat>
                        <literal_component>^</literal_component>
                        <variable_component var_ref="oval:org.open-scap.f14:var:20208"/>
                        <literal_component>:[^:]*:([[:digit:]]+)</literal_component>
                  </concat>
            </local_variable>
            <local_variable comment="Object to Variable" version="1" id="oval:org.open-scap.f14:var:202082" datatype="int">
                        <object_component object_ref="oval:org.open-scap.f14:obj:202081" item_field="subexpression"/>
            </local_variable>
            <local_variable comment="Object to Variable" version="1" id="oval:org.open-scap.f14:var:202091" datatype="int">
                        <object_component object_ref="oval:org.open-scap.f14:obj:202091" item_field="user_id"/>
            </local_variable>
            <local_variable comment="Regular expression for /etc/group: Get the group ID of given group name" version="1" id="oval:org.open-scap.f14:var:202111" datatype="string">
                  <concat>
                        <literal_component>^</literal_component>
                        <variable_component var_ref="oval:org.open-scap.f14:var:20211"/>
                        <literal_component>:[^:]*:([[:digit:]]+)</literal_component>
                  </concat>
            </local_variable>
            <local_variable comment="Object to Variable" version="1" id="oval:org.open-scap.f14:var:202112" datatype="int">
                        <object_component object_ref="oval:org.open-scap.f14:obj:202111" item_field="subexpression"/>
            </local_variable>
            <local_variable comment="Object to Variable" version="1" id="oval:org.open-scap.f14:var:202121" datatype="int">
                        <object_component object_ref="oval:org.open-scap.f14:obj:202121" item_field="user_id"/>
            </local_variable>

            <local_variable comment="Regular expression for /etc/group: Get the group ID of given group name" version="1" id="oval:org.open-scap.f14:var:202141" datatype="string">
                  <concat>
                        <literal_component>^</literal_component>
                        <variable_component var_ref="oval:org.open-scap.f14:var:20214"/>
                        <literal_component>:[^:]*:([[:digit:]]+)</literal_component>
                  </concat>
            </local_variable>
            <local_variable comment="Object to Variable" version="1" id="oval:org.open-scap.f14:var:202142" datatype="int">
                        <object_component object_ref="oval:org.open-scap.f14:obj:202141" item_field="subexpression"/>
            </local_variable>
            <local_variable comment="Object to Variable" version="1" id="oval:org.open-scap.f14:var:202191" datatype="int">
                        <object_component object_ref="oval:org.open-scap.f14:obj:202191" item_field="user_id"/>
            </local_variable>
            <local_variable comment="Regular expression for /etc/group: Get the group ID of given group name" version="1" id="oval:org.open-scap.f14:var:202291" datatype="string">
                  <concat>
                        <literal_component>^</literal_component>
                        <variable_component var_ref="oval:org.open-scap.f14:var:20229"/>
                        <literal_component>:[^:]*:([[:digit:]]+)</literal_component>
                  </concat>
            </local_variable>
            <local_variable comment="Object to Variable" version="1" id="oval:org.open-scap.f14:var:202292" datatype="int">
                        <object_component object_ref="oval:org.open-scap.f14:obj:202291" item_field="subexpression"/>
            </local_variable>
            <local_variable comment="Regular expression for /etc/group: Get the group ID of given group name" version="1" id="oval:org.open-scap.f14:var:202301" datatype="string">
                  <concat>
                        <literal_component>^</literal_component>
                        <variable_component var_ref="oval:org.open-scap.f14:var:20230"/>
                        <literal_component>:[^:]*:([[:digit:]]+)</literal_component>
                  </concat>
            </local_variable>
            <local_variable comment="Object to Variable" version="1" id="oval:org.open-scap.f14:var:202302" datatype="int">
                        <object_component object_ref="oval:org.open-scap.f14:obj:202301" item_field="subexpression"/>
            </local_variable>
            <local_variable comment="Regular expression for /etc/group: Get the group ID of given group name" version="1" id="oval:org.open-scap.f14:var:200811" datatype="string">
                  <concat>
                        <literal_component>^</literal_component>
                        <variable_component var_ref="oval:org.open-scap.f14:var:20081"/>
                        <literal_component>:[^:]*:([[:digit:]]+)</literal_component>
                  </concat>
            </local_variable>
            <local_variable comment="Object to Variable" version="1" id="oval:org.open-scap.f14:var:200812" datatype="int">
                        <object_component object_ref="oval:org.open-scap.f14:obj:200811" item_field="subexpression"/>
            </local_variable>
            <local_variable comment="Object to Variable" version="1" id="oval:org.open-scap.f14:var:201491" datatype="int">
                        <object_component object_ref="oval:org.open-scap.f14:obj:2014911" item_field="user_id"/>
            </local_variable>
            <local_variable comment="Regular expression for /etc/group: Get the group ID of given group name" version="1" id="oval:org.open-scap.f14:var:201501" datatype="string">
                  <concat>
                        <literal_component>^</literal_component>
                        <variable_component var_ref="oval:org.open-scap.f14:var:20150"/>
                        <literal_component>:[^:]*:([[:digit:]]+)</literal_component>
                  </concat>
            </local_variable>
            <local_variable comment="Object to Variable" version="1" id="oval:org.open-scap.f14:var:201502" datatype="int">
                        <object_component object_ref="oval:org.open-scap.f14:obj:201501" item_field="subexpression"/>
            </local_variable>
      </variables>
</oval_definitions>
libopenscap8 1.2.9-1+b2 / usr / share / openscap / scap-fedora14-oval.xml
