it-security-2-deep-thought/raw_scans/16_vmware_lamp_latest/lynis-report-3.dat

1039 lines
74 KiB
Plaintext
Raw Normal View History

2021-01-08 22:09:18 +01:00
# Lynis Report
report_version_major=1
report_version_minor=0
report_datetime_start=2021-01-07 20:55:16
auditor=[Not Specified]
lynis_version=3.0.3
os=Linux
os_name=Ubuntu
os_fullname=Ubuntu 20.04.1 LTS
os_version=20.04
linux_version=Ubuntu
os_kernel_version=5.4.0
os_kernel_version_full=5.4.0-59-generic
hostname=ubuntu20041
test_category=all
test_group=all
plugin_directory=./plugins
lynis_update_available=0
binaries_count=1522
binaries_suid_count=/usr/bin/chfn /usr/bin/chsh /usr/bin/fusermount /usr/bin/gpasswd /usr/bin/mount /usr/bin/newgrp /usr/bin/passwd /usr/bin/pkexec /usr/bin/procmail /usr/bin/sg /usr/bin/su /usr/bin/sudo /usr/bin/sudoedit /usr/bin/ubuntu-core-launcher /usr/bin/umount /usr/sbin/sensible-mda
binaries_sgid_count=/usr/bin/bsd-write /usr/bin/chage /usr/bin/crontab /usr/bin/dotlockfile /usr/bin/expiry /usr/bin/lockfile /usr/bin/mail-lock /usr/bin/mail-touchlock /usr/bin/mail-unlock /usr/bin/procmail /usr/bin/ssh-agent /usr/bin/wall /usr/bin/write /usr/sbin/hoststat /usr/sbin/pam_extrausers_chkpwd /usr/sbin/purgestat /usr/sbin/sendmail /usr/sbin/sendmail-msp /usr/sbin/sendmail-mta /usr/sbin/unix_chkpwd
binary_paths=/usr/local/games,/usr/games,/usr/bin,/usr/sbin,/usr/local/bin,/usr/local/sbin
vm=1
vmtype=vmware
container=0
systemd=1
plugin_enabled_phase1[]=pam|1.0.5|
authentication_two_factor_enabled=0
authentication_two_factor_required=0
minimum_password_length=8
password_strength_tested=1
min_password_class=0
password_max_digital_credit=1
password_max_l_credit=1
password_max_other_credit=1
password_max_u_credit=1
max_password_retry=3
plugin_enabled_phase1[]=systemd|1.0.4|
systemctl_exit_code=0
systemd_version=245
systemd_builtin_components=+PAM,+AUDIT,+SELINUX,+IMA,+APPARMOR,+SMACK,+SYSVINIT,+UTMP,+LIBCRYPTSETUP,+GCRYPT,+GNUTLS,+ACL,+XZ,+LZ4,+SECCOMP,+BLKID,+ELFUTILS,+KMOD,+IDN2,-IDN,+PCRE2,default-hierarchy=hybrid
systemd_unit_file[]=proc-sys-fs-binfmt_misc.automount|static|
systemd_unit_file[]=-.mount|generated|
systemd_unit_file[]=boot.mount|generated|
systemd_unit_file[]=dev-hugepages.mount|static|
systemd_unit_file[]=dev-mqueue.mount|static|
systemd_unit_file[]=proc-sys-fs-binfmt_misc.mount|disabled|
systemd_unit_file[]=snap-core18-1880.mount|enabled|
systemd_unit_file[]=snap-core18-1944.mount|enabled|
systemd_unit_file[]=snap-lxd-16099.mount|enabled|
systemd_unit_file[]=snap-lxd-18150.mount|enabled|
systemd_unit_file[]=snap-snapd-10707.mount|enabled|
systemd_unit_file[]=snap-snapd-8542.mount|enabled|
systemd_unit_file[]=sys-fs-fuse-connections.mount|static|
systemd_unit_file[]=sys-kernel-config.mount|static|
systemd_unit_file[]=sys-kernel-debug.mount|static|
systemd_unit_file[]=sys-kernel-tracing.mount|static|
systemd_unit_file[]=apport-autoreport.path|enabled|
systemd_unit_file[]=systemd-ask-password-console.path|static|
systemd_unit_file[]=systemd-ask-password-plymouth.path|static|
systemd_unit_file[]=systemd-ask-password-wall.path|static|
systemd_unit_file[]=session-1.scope|transient|
systemd_unit_file[]=accounts-daemon.service|enabled|
systemd_unit_file[]=acct.service|generated|
systemd_unit_file[]=apache-htcacheclean.service|disabled|
systemd_unit_file[]=apache-htcacheclean@.service|disabled|
systemd_unit_file[]=apache2.service|enabled|
systemd_unit_file[]=apache2@.service|disabled|
systemd_unit_file[]=apparmor.service|enabled|
systemd_unit_file[]=apport-autoreport.service|static|
systemd_unit_file[]=apport-forward@.service|static|
systemd_unit_file[]=apport.service|generated|
systemd_unit_file[]=apt-daily-upgrade.service|static|
systemd_unit_file[]=apt-daily.service|static|
systemd_unit_file[]=autovt@.service|enabled|
systemd_unit_file[]=blk-availability.service|enabled|
systemd_unit_file[]=bolt.service|static|
systemd_unit_file[]=cloud-config.service|enabled|
systemd_unit_file[]=cloud-final.service|enabled|
systemd_unit_file[]=cloud-init-local.service|enabled|
systemd_unit_file[]=cloud-init.service|enabled|
systemd_unit_file[]=console-getty.service|disabled|
systemd_unit_file[]=console-setup.service|enabled|
systemd_unit_file[]=container-getty@.service|static|
systemd_unit_file[]=cron.service|enabled|
systemd_unit_file[]=cryptdisks-early.service|masked|
systemd_unit_file[]=cryptdisks.service|masked|
systemd_unit_file[]=dbus-org.freedesktop.hostname1.service|static|
systemd_unit_file[]=dbus-org.freedesktop.locale1.service|static|
systemd_unit_file[]=dbus-org.freedesktop.login1.service|static|
systemd_unit_file[]=dbus-org.freedesktop.resolve1.service|enabled|
systemd_unit_file[]=dbus-org.freedesktop.thermald.service|enabled|
systemd_unit_file[]=dbus-org.freedesktop.timedate1.service|static|
systemd_unit_file[]=dbus-org.freedesktop.timesync1.service|enabled|
systemd_unit_file[]=dbus.service|static|
systemd_unit_file[]=debug-shell.service|disabled|
systemd_unit_file[]=dm-event.service|static|
systemd_unit_file[]=dmesg.service|enabled|
systemd_unit_file[]=e2scrub@.service|static|
systemd_unit_file[]=e2scrub_all.service|static|
systemd_unit_file[]=e2scrub_fail@.service|static|
systemd_unit_file[]=e2scrub_reap.service|enabled|
systemd_unit_file[]=emergency.service|static|
systemd_unit_file[]=fail2ban.service|enabled|
systemd_unit_file[]=finalrd.service|enabled|
systemd_unit_file[]=friendly-recovery.service|static|
systemd_unit_file[]=fstrim.service|static|
systemd_unit_file[]=fwupd-offline-update.service|static|
systemd_unit_file[]=fwupd-refresh.service|static|
systemd_unit_file[]=fwupd.service|static|
systemd_unit_file[]=getty-static.service|static|
systemd_unit_file[]=getty@.service|enabled|
systemd_unit_file[]=grub-common.service|generated|
systemd_unit_file[]=grub-initrd-fallback.service|enabled|
systemd_unit_file[]=hwclock.service|masked|
systemd_unit_file[]=initrd-cleanup.service|static|
systemd_unit_file[]=initrd-parse-etc.service|static|
systemd_unit_file[]=initrd-switch-root.service|static|
systemd_unit_file[]=initrd-udevadm-cleanup-db.service|static|
systemd_unit_file[]=irqbalance.service|enabled|
systemd_unit_file[]=iscsi.service|enabled|
systemd_unit_file[]=iscsid.service|disabled|
systemd_unit_file[]=keyboard-setup.service|enabled|
systemd_unit_file[]=kmod-static-nodes.service|static|
systemd_unit_file[]=kmod.service|static|
systemd_unit_file[]=logrotate.service|static|
systemd_unit_file[]=lvm2-lvmpolld.service|static|
systemd_unit_file[]=lvm2-monitor.service|enabled|
systemd_unit_file[]=lvm2-pvscan@.service|static|
systemd_unit_file[]=lvm2.service|masked|
systemd_unit_file[]=lxd-agent-9p.service|enabled|
systemd_unit_file[]=lxd-agent.service|enabled|
systemd_unit_file[]=man-db.service|static|
systemd_unit_file[]=mdadm-grow-continue@.service|static|
systemd_unit_file[]=mdadm-last-resort@.service|static|
systemd_unit_file[]=mdcheck_continue.service|static|
systemd_unit_file[]=mdcheck_start.service|static|
systemd_unit_file[]=mdmon@.service|static|
systemd_unit_file[]=mdmonitor-oneshot.service|static|
systemd_unit_file[]=mdmonitor.service|static|
systemd_unit_file[]=modprobe@.service|static|
systemd_unit_file[]=motd-news.service|static|
systemd_unit_file[]=multipath-tools-boot.service|masked|
systemd_unit_file[]=multipath-tools.service|enabled|
systemd_unit_file[]=multipathd.service|enabled|
systemd_unit_file[]=mysql.service|enabled|
systemd_unit_file[]=netplan-ovs-cleanup.service|enabled-runtime|
systemd_unit_file[]=networkd-dispatcher.service|enabled|
systemd_unit_file[]=ondemand.service|enabled|
systemd_unit_file[]=open-iscsi.service|enabled|
systemd_unit_file[]=open-vm-tools.service|enabled|
systemd_unit_file[]=packagekit-offline-update.service|static|
systemd_unit_file[]=packagekit.service|static|
systemd_unit_file[]=phpsessionclean.service|static|
systemd_unit_file[]=plymouth-halt.service|static|
systemd_unit_file[]=plymouth-kexec.service|static|
systemd_unit_file[]=plymouth-log.service|static|
systemd_unit_file[]=plymouth-poweroff.service|static|
systemd_unit_file[]=plymouth-quit-wait.service|static|
systemd_unit_file[]=plymouth-quit.service|static|
systemd_unit_file[]=plymouth-read-write.service|static|
systemd_unit_file[]=plymouth-reboot.service|static|
systemd_unit_file[]=plymouth-start.service|static|
systemd_unit_file[]=plymouth-switch-root.service|static|
systemd_unit_file[]=plymouth.service|static|
systemd_unit_file[]=polkit.service|static|
systemd_unit_file[]=pollinate.service|enabled|
systemd_unit_file[]=portsentry.service|generated|
systemd_unit_file[]=procps.service|static|
systemd_unit_file[]=quotaon.service|static|
systemd_unit_file[]=rc-local.service|static|
systemd_unit_file[]=rc.service|masked|
systemd_unit_file[]=rcS.service|masked|
systemd_unit_file[]=rescue.service|static|
systemd_unit_file[]=rsync.service|enabled|
systemd_unit_file[]=rsyslog.service|enabled|
systemd_unit_file[]=screen-cleanup.service|masked|
systemd_unit_file[]=secureboot-db.service|enabled|
systemd_unit_file[]=sendmail.service|generated|
systemd_unit_file[]=serial-getty@.service|disabled|
systemd_unit_file[]=setvtrgb.service|enabled|
systemd_unit_file[]=snap.lxd.activate.service|enabled|
systemd_unit_file[]=snap.lxd.daemon.service|static|
systemd_unit_file[]=snapd.apparmor.service|enabled|
systemd_unit_file[]=snapd.autoimport.service|enabled|
systemd_unit_file[]=snapd.core-fixup.service|enabled|
systemd_unit_file[]=snapd.failure.service|static|
systemd_unit_file[]=snapd.recovery-chooser-trigger.service|enabled|
systemd_unit_file[]=snapd.seeded.service|enabled|
systemd_unit_file[]=snapd.service|enabled|
systemd_unit_file[]=snapd.snap-repair.service|static|
systemd_unit_file[]=snapd.system-shutdown.service|enabled|
systemd_unit_file[]=sudo.service|masked|
systemd_unit_file[]=syslog.service|enabled|
systemd_unit_file[]=system-update-cleanup.service|static|
systemd_unit_file[]=systemd-ask-password-console.service|static|
systemd_unit_file[]=systemd-ask-password-plymouth.service|static|
systemd_unit_file[]=systemd-ask-password-wall.service|static|
systemd_unit_file[]=systemd-backlight@.service|static|
systemd_unit_file[]=systemd-binfmt.service|static|
systemd_unit_file[]=systemd-bless-boot.service|static|
systemd_unit_file[]=systemd-boot-check-no-failures.service|disabled|
systemd_unit_file[]=systemd-boot-system-token.service|static|
systemd_unit_file[]=systemd-exit.service|static|
systemd_unit_file[]=systemd-fsck-root.service|static|
systemd_unit_file[]=systemd-fsck@.service|static|
systemd_unit_file[]=systemd-fsckd.service|static|
systemd_unit_file[]=systemd-halt.service|static|
systemd_unit_file[]=systemd-hibernate-resume@.service|static|
systemd_unit_file[]=systemd-hibernate.service|static|
systemd_unit_file[]=systemd-hostnamed.service|static|
systemd_unit_file[]=systemd-hwdb-update.service|static|
systemd_unit_file[]=systemd-hybrid-sleep.service|static|
systemd_unit_file[]=systemd-initctl.service|static|
systemd_unit_file[]=systemd-journal-flush.service|static|
systemd_unit_file[]=systemd-journald.service|static|
systemd_unit_file[]=systemd-journald@.service|static|
systemd_unit_file[]=systemd-kexec.service|static|
systemd_unit_file[]=systemd-localed.service|static|
systemd_unit_file[]=systemd-logind.service|static|
systemd_unit_file[]=systemd-machine-id-commit.service|static|
systemd_unit_file[]=systemd-modules-load.service|static|
systemd_unit_file[]=systemd-network-generator.service|disabled|
systemd_unit_file[]=systemd-networkd-wait-online.service|enabled|
systemd_unit_file[]=systemd-networkd.service|enabled|
systemd_unit_file[]=systemd-poweroff.service|static|
systemd_unit_file[]=systemd-pstore.service|enabled|
systemd_unit_file[]=systemd-quotacheck.service|static|
systemd_unit_file[]=systemd-random-seed.service|static|
systemd_unit_file[]=systemd-reboot.service|static|
systemd_unit_file[]=systemd-remount-fs.service|enabled-runtime|
systemd_unit_file[]=systemd-resolved.service|enabled|
systemd_unit_file[]=systemd-rfkill.service|static|
systemd_unit_file[]=systemd-suspend-then-hibernate.service|static|
systemd_unit_file[]=systemd-suspend.service|static|
systemd_unit_file[]=systemd-sysctl.service|static|
systemd_unit_file[]=systemd-sysusers.service|static|
systemd_unit_file[]=systemd-time-wait-sync.service|disabled|
systemd_unit_file[]=systemd-timedated.service|static|
systemd_unit_file[]=systemd-timesyncd.service|enabled|
systemd_unit_file[]=systemd-tmpfiles-clean.service|static|
systemd_unit_file[]=systemd-tmpfiles-setup-dev.service|static|
systemd_unit_file[]=systemd-tmpfiles-setup.service|static|
systemd_unit_file[]=systemd-udev-settle.service|static|
systemd_unit_file[]=systemd-udev-trigger.service|static|
systemd_unit_file[]=systemd-udevd.service|static|
systemd_unit_file[]=systemd-update-utmp-runlevel.service|static|
systemd_unit_file[]=systemd-update-utmp.service|static|
systemd_unit_file[]=systemd-user-sessions.service|static|
systemd_unit_file[]=systemd-volatile-root.service|static|
systemd_unit_file[]=thermald.service|enabled|
systemd_unit_file[]=udev.service|static|
systemd_unit_file[]=ufw.service|enabled|
systemd_unit_file[]=unattended-upgrades.service|enabled|
systemd_unit_file[]=user-runtime-dir@.service|static|
systemd_unit_file[]=user@.service|static|
systemd_unit_file[]=uuidd.service|indirect|
systemd_unit_file[]=vgauth.service|enabled|
systemd_unit_file[]=vmtoolsd.service|enabled|
systemd_unit_file[]=x11-common.service|masked|
systemd_unit_file[]=xfs_scrub@.service|static|
systemd_unit_file[]=xfs_scrub_all.service|static|
systemd_unit_file[]=xfs_scrub_fail@.service|static|
systemd_unit_file[]=machine.slice|static|
systemd_unit_file[]=system-systemd\x2dcryptsetup.slice|static|
systemd_unit_file[]=user.slice|static|
systemd_unit_file[]=apport-forward.socket|enabled|
systemd_unit_file[]=dbus.socket|static|
systemd_unit_file[]=dm-event.socket|enabled|
systemd_unit_file[]=iscsid.socket|enabled|
systemd_unit_file[]=lvm2-lvmpolld.socket|enabled|
systemd_unit_file[]=multipathd.socket|enabled|
systemd_unit_file[]=snap.lxd.daemon.unix.socket|enabled|
systemd_unit_file[]=snapd.socket|enabled|
systemd_unit_file[]=syslog.socket|static|
systemd_unit_file[]=systemd-fsckd.socket|static|
systemd_unit_file[]=systemd-initctl.socket|static|
systemd_unit_file[]=systemd-journald-audit.socket|static|
systemd_unit_file[]=systemd-journald-dev-log.socket|static|
systemd_unit_file[]=systemd-journald-varlink@.socket|static|
systemd_unit_file[]=systemd-journald.socket|static|
systemd_unit_file[]=systemd-journald@.socket|static|
systemd_unit_file[]=systemd-networkd.socket|enabled|
systemd_unit_file[]=systemd-rfkill.socket|static|
systemd_unit_file[]=systemd-udevd-control.socket|static|
systemd_unit_file[]=systemd-udevd-kernel.socket|static|
systemd_unit_file[]=uuidd.socket|enabled|
systemd_unit_file[]=swap.img.swap|generated|
systemd_unit_file[]=basic.target|static|
systemd_unit_file[]=blockdev@.target|static|
systemd_unit_file[]=bluetooth.target|static|
systemd_unit_file[]=boot-complete.target|static|
systemd_unit_file[]=cloud-config.target|static|
systemd_unit_file[]=cloud-init.target|enabled-runtime|
systemd_unit_file[]=cryptsetup-pre.target|static|
systemd_unit_file[]=cryptsetup.target|static|
systemd_unit_file[]=ctrl-alt-del.target|disabled|
systemd_unit_file[]=default.target|static|
systemd_unit_file[]=emergency.target|static|
systemd_unit_file[]=exit.target|disabled|
systemd_unit_file[]=final.target|static|
systemd_unit_file[]=friendly-recovery.target|static|
systemd_unit_file[]=getty-pre.target|static|
systemd_unit_file[]=getty.target|static|
systemd_unit_file[]=graphical.target|static|
systemd_unit_file[]=halt.target|disabled|
systemd_unit_file[]=hibernate.target|static|
systemd_unit_file[]=hybrid-sleep.target|static|
systemd_unit_file[]=initrd-fs.target|static|
systemd_unit_file[]=initrd-root-device.target|static|
systemd_unit_file[]=initrd-root-fs.target|static|
systemd_unit_file[]=initrd-switch-root.target|static|
systemd_unit_file[]=initrd.target|static|
systemd_unit_file[]=kexec.target|disabled|
systemd_unit_file[]=local-fs-pre.target|static|
systemd_unit_file[]=local-fs.target|static|
systemd_unit_file[]=multi-user.target|static|
systemd_unit_file[]=network-online.target|static|
systemd_unit_file[]=network-pre.target|static|
systemd_unit_file[]=network.target|static|
systemd_unit_file[]=nss-lookup.target|static|
systemd_unit_file[]=nss-user-lookup.target|static|
systemd_unit_file[]=paths.target|static|
systemd_unit_file[]=poweroff.target|disabled|
systemd_unit_file[]=printer.target|static|
systemd_unit_file[]=reboot.target|disabled|
systemd_unit_file[]=remote-cryptsetup.target|disabled|
systemd_unit_file[]=remote-fs-pre.target|static|
systemd_unit_file[]=remote-fs.target|enabled|
systemd_unit_file[]=rescue.target|static|
systemd_unit_file[]=rpcbind.target|static|
systemd_unit_file[]=runlevel0.target|disabled|
systemd_unit_file[]=runlevel1.target|static|
systemd_unit_file[]=runlevel2.target|static|
systemd_unit_file[]=runlevel3.target|static|
systemd_unit_file[]=runlevel4.target|static|
systemd_unit_file[]=runlevel5.target|static|
systemd_unit_file[]=runlevel6.target|disabled|
systemd_unit_file[]=shutdown.target|static|
systemd_unit_file[]=sigpwr.target|static|
systemd_unit_file[]=sleep.target|static|
systemd_unit_file[]=slices.target|static|
systemd_unit_file[]=smartcard.target|static|
systemd_unit_file[]=sockets.target|static|
systemd_unit_file[]=sound.target|static|
systemd_unit_file[]=suspend-then-hibernate.target|static|
systemd_unit_file[]=suspend.target|static|
systemd_unit_file[]=swap.target|static|
systemd_unit_file[]=sysinit.target|static|
systemd_unit_file[]=system-update-pre.target|static|
systemd_unit_file[]=system-update.target|static|
systemd_unit_file[]=time-set.target|static|
systemd_unit_file[]=time-sync.target|static|
systemd_unit_file[]=timers.target|static|
systemd_unit_file[]=umount.target|static|
systemd_unit_file[]=apt-daily-upgrade.timer|enabled|
systemd_unit_file[]=apt-daily.timer|enabled|
systemd_unit_file[]=e2scrub_all.timer|enabled|
systemd_unit_file[]=fstrim.timer|enabled|
systemd_unit_file[]=fwupd-refresh.timer|enabled|
systemd_unit_file[]=logrotate.timer|enabled|
systemd_unit_file[]=man-db.timer|enabled|
systemd_unit_file[]=mdadm-last-resort@.timer|static|
systemd_unit_file[]=mdcheck_continue.timer|enabled|
systemd_unit_file[]=mdcheck_start.timer|enabled|
systemd_unit_file[]=mdmonitor-oneshot.timer|enabled|
systemd_unit_file[]=motd-news.timer|enabled|
systemd_unit_file[]=phpsessionclean.timer|enabled|
systemd_unit_file[]=snapd.snap-repair.timer|enabled|
systemd_unit_file[]=systemd-tmpfiles-clean.timer|static|
systemd_unit_file[]=xfs_scrub_all.timer|disabled|
systemd_binaries=systemd-time-wait-sync|systemd-journald|systemd-udevd|systemd-bless-boot|systemd-network-generator|systemd-sysctl|systemd-fsck|systemd-rfkill|systemd-ac-power|systemd-initctl|systemd-backlight|systemd-socket-proxyd|systemd-sleep|systemd-sulogin-shell|systemd-modules-load|systemd-fsckd|systemd-resolved|systemd-timesyncd|systemd-networkd|systemd-logind|systemd-sysv-install|systemd-remount-fs|systemd-shutdown|systemd-random-seed|systemd-makefs|systemd-pstore|systemd-reply-password|systemd-veritysetup|systemd-binfmt|systemd-update-utmp|systemd-hibernate-resume|systemd-growfs|systemd-boot-check-no-failures|systemd-volatile-root|systemd-quotacheck|systemd-networkd-wait-online|systemd-localed|systemd-cgroups-agent|systemd-hostnamed|systemd-dissect|systemd-user-runtime-dir|systemd-timedated|systemd-user-sessions|systemd-cryptsetup|
journal_bootlogs=4
journal_oldest_bootdate=2021-01-06
journal_contains_errors=0
journal_disk_size=40.0M
journal_meta_data=Filepath:/var/log/journal/e08fbde5fdae464a8aa702c576e998bf/user-1000.journal,FileID:3a5a2028f9744af2b2fc818ec649fdab,MachineID:e08fbde5fdae464a8aa702c576e998bf,BootID:abdcbd9a45ec4060a50d15bf1dab0413,SequentialnumberID:3a5a2028f9744af2b2fc818ec649fdab,State:OFFLINE,Compatibleflags:,Incompatibleflags:COMPRESSED-LZ4,Headersize:240,Arenasize:8388368,Datahashtablesize:233016,Fieldhashtablesize:333,Rotatesuggested:no,Headsequentialnumber:12585(3129),Tailsequentialnumber:14338(3802),Headrealtimetimestamp:Thu2021-01-0720:26:50UTC(5b855427440da),Tailrealtimetimestamp:Thu2021-01-0720:50:34UTC(5b855975fb569),Tailmonotonictimestamp:24min37.822s(5815c879),Objects:322,Entryobjects:22,Dataobjects:150,Datahashtablefill:0.1%,Fieldobjects:37,Fieldhashtablefill:11.1%,Tagobjects:0,Entryarrayobjects:111,Diskusage:8.0M,|,Filepath:/var/log/journal/e08fbde5fdae464a8aa702c576e998bf/user-1000@2899f954d8c84a479cf7a7cff60d027d-00000000000011d7-0005b8418d9282ff.journal,FileID:2899f954d8c84a479cf7a7cff60d027d,MachineID:e08fbde5fdae464a8aa702c576e998bf,BootID:abdcbd9a45ec4060a50d15bf1dab0413,SequentialnumberID:2899f954d8c84a479cf7a7cff60d027d,State:ARCHIVED,Compatibleflags:,Incompatibleflags:COMPRESSED-LZ4,Headersize:240,Arenasize:8388368,Datahashtablesize:233016,Fieldhashtablesize:333,Rotatesuggested:no,Headsequentialnumber:4567(11d7),Tailsequentialnumber:10300(283c),Headrealtimetimestamp:Wed2021-01-0620:56:11UTC(5b8418d9282ff),Tailrealtimetimestamp:Wed2021-01-0622:53:04UTC(5b8432f9a25cf),Tailmonotonictimestamp:1h3min11.329s(e1fb18aa),Objects:710,Entryobjects:86,Dataobjects:293,Datahashtablefill:0.1%,Fieldobjects:39,Fieldhashtablefill:11.7%,Tagobjects:0,Entryarrayobjects:290,Diskusage:8.0M,|,Filepath:/var/log/journal/e08fbde5fdae464a8aa702c576e998bf/system.journal,FileID:c674d5a77f0e4408a03d6ed1ec781efe,MachineID:e08fbde5fdae464a8aa702c576e998bf,BootID:abdcbd9a45ec4060a50d15bf1dab0413,SequentialnumberID:48becd64a26842a68c319744aa09638c,State:ONLINE,Compatibleflags:,Incompatibleflags:COMPRESSED-LZ4,Headersize:240,Arenasize:8388368,Datahashtablesize:233016,Fieldhashtablesize:333,Rotatesuggested:no,Headsequentialnumber:12562(3112),Tailsequentialnumber:14737(3991),Headrealtimetimestamp:Thu2021-01-0720:26:47UTC(5b855424965bc),Tailrealtimetimestamp:Thu2021-01-0720:55:14UTC(5b855a8076af3),Tailmonotonictimestamp:29min17.249s(68bd7e03),Objects:5780,Entryobjects:2154,Dataobjects:2294,Datahashtablefill:1.0%,Fieldobjects:75,Fieldhashtablefill:22.5%,Tagobjects:0,Entryarrayobjects:1255,Diskusage:8.0M,|,Filepath:/var/log/journal/e08fbde5fdae464a8aa702c576e998bf/system@48becd64a26842a68c319744aa09638c-0000000000000001-0005b84183afd1dc.journal,FileID:48becd64a26842a68c319744aa09638c,MachineID:e08fbde5fdae464a8aa702c576e998bf,BootID:abdcbd9a45ec4060a50d15bf1dab0413,SequentialnumberID:48becd64a26842a68c319744aa09638c,State:ARCHIVED,Compatibleflags:,Incompatibleflags:COMPRESSED-LZ4,Headersize:240,Arenasize:16776976,Datahashtablesize:233016,Fieldhashtablesize:333,Rotatesuggested:no,Headsequentialnumber:1(1),Tailsequentialnumber:12561(3111),Headrealtimetimestamp:Wed2021-01-0620:53:25UTC(5b84183afd1dc),Tailrealtimetimestamp:Thu2021-01-0720:26:48UTC(5b85542575c9b),Tailmonotonictimestamp:50.144s(2fd23ad),Objects:32974,Entryobjects:12475,Dataobjects:13773,Datahashtablefill:5.9%,Fieldobjects:81,Fieldhashtablefill:24.3%,Tagobjects:0,Entryarrayobjects:6643,Diskusage:16.0M,
systemd_status=running
systemd_unit_not_found[]=boot.automount
systemd_unit_not_found[]=auditd.service
systemd_unit_not_found[]=connman.service
systemd_unit_not_found[]=console-screen.service
systemd_unit_not_found[]=display-manager.service
systemd_unit_not_found[]=fcoe.service
systemd_unit_not_found[]=firewalld.service
systemd_unit_not_found[]=hv_kvp_daemon.service
systemd_unit_not_found[]=ip6tables.service
systemd_unit_not_found[]=ipset.service
systemd_unit_not_found[]=iptables.service
systemd_unit_not_found[]=iscsi-shutdown.service
systemd_unit_not_found[]=kbd.service
systemd_unit_not_found[]=lvm2-activation-early.service
systemd_unit_not_found[]=lvm2-activation.service
systemd_unit_not_found[]=networking.service
systemd_unit_not_found[]=NetworkManager.service
systemd_unit_not_found[]=nftables.service
systemd_unit_not_found[]=ovsdb-server.service
systemd_unit_not_found[]=rbdmap.service
systemd_unit_not_found[]=ssh.service
systemd_unit_not_found[]=sshd-keygen.service
systemd_unit_not_found[]=sshd.service
systemd_unit_not_found[]=systemd-update-done.service
systemd_unit_not_found[]=systemd-vconsole-setup.service
systemd_unit_not_found[]=whoopsie.service
systemd_unit_not_found[]=all.target
systemd_service_not_found[]=auditd.service
systemd_service_not_found[]=connman.service
systemd_service_not_found[]=console-screen.service
systemd_service_not_found[]=display-manager.service
systemd_service_not_found[]=fcoe.service
systemd_service_not_found[]=firewalld.service
systemd_service_not_found[]=hv_kvp_daemon.service
systemd_service_not_found[]=ip6tables.service
systemd_service_not_found[]=ipset.service
systemd_service_not_found[]=iptables.service
systemd_service_not_found[]=iscsi-shutdown.service
systemd_service_not_found[]=kbd.service
systemd_service_not_found[]=lvm2-activation-early.service
systemd_service_not_found[]=lvm2-activation.service
systemd_service_not_found[]=networking.service
systemd_service_not_found[]=NetworkManager.service
systemd_service_not_found[]=nftables.service
systemd_service_not_found[]=ovsdb-server.service
systemd_service_not_found[]=rbdmap.service
systemd_service_not_found[]=ssh.service
systemd_service_not_found[]=sshd-keygen.service
systemd_service_not_found[]=sshd.service
systemd_service_not_found[]=systemd-update-done.service
systemd_service_not_found[]=systemd-vconsole-setup.service
systemd_service_not_found[]=whoopsie.service
journal_coredumps_lastday=0
plugins_enabled=1
hostid=7fc25b80ff05df4e64d70b74ece09f81764d4087
hostid2=ff80e2121ea642494fc916efc1689e6a884995790320c5ed9309bad1b3d5ff9b
suggestion[]=BOOT-5122|Set a password on GRUB boot loader to prevent altering boot configuration (e.g. boot in single user mode without password)|-|-|
running_service_tool=systemctl
running_service[]=accounts-daemon
running_service[]=apache2
running_service[]=cron
running_service[]=dbus
running_service[]=fail2ban
running_service[]=fwupd
running_service[]=getty@tty1
running_service[]=irqbalance
running_service[]=multipathd
running_service[]=mysql
running_service[]=networkd-dispatcher
running_service[]=open-vm-tools
running_service[]=packagekit
running_service[]=polkit
running_service[]=portsentry
running_service[]=rsyslog
running_service[]=sendmail
running_service[]=snapd
running_service[]=systemd-journald
running_service[]=systemd-logind
running_service[]=systemd-networkd
running_service[]=systemd-resolved
running_service[]=systemd-timesyncd
running_service[]=systemd-udevd
running_service[]=unattended-upgrades
running_service[]=user@1000
running_service[]=uuidd
running_service[]=vgauth
boot_service_tool=systemctl
boot_service[]=accounts-daemon
boot_service[]=apache2
boot_service[]=apparmor
boot_service[]=autovt@
boot_service[]=blk-availability
boot_service[]=cloud-config
boot_service[]=cloud-final
boot_service[]=cloud-init-local
boot_service[]=cloud-init
boot_service[]=console-setup
boot_service[]=cron
boot_service[]=dbus-org.freedesktop.resolve1
boot_service[]=dbus-org.freedesktop.thermald
boot_service[]=dbus-org.freedesktop.timesync1
boot_service[]=dmesg
boot_service[]=e2scrub_reap
boot_service[]=fail2ban
boot_service[]=finalrd
boot_service[]=getty@
boot_service[]=grub-initrd-fallback
boot_service[]=irqbalance
boot_service[]=iscsi
boot_service[]=keyboard-setup
boot_service[]=lvm2-monitor
boot_service[]=lxd-agent-9p
boot_service[]=lxd-agent
boot_service[]=multipath-tools
boot_service[]=multipathd
boot_service[]=mysql
boot_service[]=networkd-dispatcher
boot_service[]=ondemand
boot_service[]=open-iscsi
boot_service[]=open-vm-tools
boot_service[]=pollinate
boot_service[]=rsync
boot_service[]=rsyslog
boot_service[]=secureboot-db
boot_service[]=setvtrgb
boot_service[]=snap.lxd.activate
boot_service[]=snapd.apparmor
boot_service[]=snapd.autoimport
boot_service[]=snapd.core-fixup
boot_service[]=snapd.recovery-chooser-trigger
boot_service[]=snapd.seeded
boot_service[]=snapd
boot_service[]=snapd.system-shutdown
boot_service[]=syslog
boot_service[]=systemd-networkd-wait-online
boot_service[]=systemd-networkd
boot_service[]=systemd-pstore
boot_service[]=systemd-resolved
boot_service[]=systemd-timesyncd
boot_service[]=thermald
boot_service[]=ufw
boot_service[]=unattended-upgrades
boot_service[]=vgauth
boot_service[]=vmtoolsd
uptime_in_seconds=1768
uptime_in_days=0
suggestion[]=BOOT-5264|Consider hardening system services|Run '/usr/bin/systemd-analyze security SERVICE' for each service|-|
boot_loader=GRUB2
boot_uefi_booted=0
boot_uefi_booted_secure=0
service_manager=systemd
linux_default_runlevel=5
cpu_pae=1
cpu_nx=1
linux_kernel_release=5.4.0-59-generic
linux_kernel_version=#65-Ubuntu SMP Thu Dec 10 12:01:51 UTC 2020
linux_kernel_type=modular
loaded_kernel_module[]=ac97_bus
loaded_kernel_module[]=aesni_intel
loaded_kernel_module[]=ahci
loaded_kernel_module[]=async_memcpy
loaded_kernel_module[]=async_pq
loaded_kernel_module[]=async_raid6_recov
loaded_kernel_module[]=async_tx
loaded_kernel_module[]=async_xor
loaded_kernel_module[]=autofs4
loaded_kernel_module[]=binfmt_misc
loaded_kernel_module[]=bpfilter
loaded_kernel_module[]=btrfs
loaded_kernel_module[]=crc32_pclmul
loaded_kernel_module[]=crct10dif_pclmul
loaded_kernel_module[]=cryptd
loaded_kernel_module[]=crypto_simd
loaded_kernel_module[]=dm_multipath
loaded_kernel_module[]=drm
loaded_kernel_module[]=drm_kms_helper
loaded_kernel_module[]=e1000
loaded_kernel_module[]=fb_sys_fops
loaded_kernel_module[]=floppy
loaded_kernel_module[]=gameport
loaded_kernel_module[]=ghash_clmulni_intel
loaded_kernel_module[]=glue_helper
loaded_kernel_module[]=hfs
loaded_kernel_module[]=hfsplus
loaded_kernel_module[]=hid
loaded_kernel_module[]=hid_generic
loaded_kernel_module[]=i2c_piix4
loaded_kernel_module[]=inet_diag
loaded_kernel_module[]=input_leds
loaded_kernel_module[]=intel_rapl_common
loaded_kernel_module[]=intel_rapl_msr
loaded_kernel_module[]=ip_tables
loaded_kernel_module[]=iptable_filter
loaded_kernel_module[]=iptable_nat
loaded_kernel_module[]=jfs
loaded_kernel_module[]=joydev
loaded_kernel_module[]=libahci
loaded_kernel_module[]=libcrc32c
loaded_kernel_module[]=linear
loaded_kernel_module[]=mac_hid
loaded_kernel_module[]=minix
loaded_kernel_module[]=mptbase
loaded_kernel_module[]=mptscsih
loaded_kernel_module[]=mptspi
loaded_kernel_module[]=msdos
loaded_kernel_module[]=multipath
loaded_kernel_module[]=nf_conntrack
loaded_kernel_module[]=nf_defrag_ipv4
loaded_kernel_module[]=nf_defrag_ipv6
loaded_kernel_module[]=nf_nat
loaded_kernel_module[]=ntfs
loaded_kernel_module[]=pata_acpi
loaded_kernel_module[]=psmouse
loaded_kernel_module[]=qnx4
loaded_kernel_module[]=raid0
loaded_kernel_module[]=raid1
loaded_kernel_module[]=raid10
loaded_kernel_module[]=raid456
loaded_kernel_module[]=raid6_pq
loaded_kernel_module[]=rapl
loaded_kernel_module[]=sb_edac
loaded_kernel_module[]=sch_fq_codel
loaded_kernel_module[]=scsi_dh_alua
loaded_kernel_module[]=scsi_dh_emc
loaded_kernel_module[]=scsi_dh_rdac
loaded_kernel_module[]=scsi_transport_spi
loaded_kernel_module[]=serio_raw
loaded_kernel_module[]=snd
loaded_kernel_module[]=snd_ac97_codec
loaded_kernel_module[]=snd_ens1371
loaded_kernel_module[]=snd_pcm
loaded_kernel_module[]=snd_rawmidi
loaded_kernel_module[]=snd_seq_device
loaded_kernel_module[]=snd_timer
loaded_kernel_module[]=soundcore
loaded_kernel_module[]=syscopyarea
loaded_kernel_module[]=sysfillrect
loaded_kernel_module[]=sysimgblt
loaded_kernel_module[]=tcp_diag
loaded_kernel_module[]=ttm
loaded_kernel_module[]=udp_diag
loaded_kernel_module[]=ufs
loaded_kernel_module[]=usbhid
loaded_kernel_module[]=vmw_balloon
loaded_kernel_module[]=vmw_vmci
loaded_kernel_module[]=vmw_vsock_vmci_transport
loaded_kernel_module[]=vmwgfx
loaded_kernel_module[]=vsock
loaded_kernel_module[]=x_tables
loaded_kernel_module[]=xfs
loaded_kernel_module[]=xor
loaded_kernel_module[]=zstd_compress
linux_config_file=/boot/config-5.4.0-59-generic
memory_size=4001744
memory_units=kB
auth_group_ids_unique=1
auth_group_names_unique=1
suggestion[]=AUTH-9229|Check PAM configuration, add rounds if applicable and expire passwords to encrypt with new values|-|-|
suggestion[]=AUTH-9230|Configure password hashing rounds in /etc/login.defs|-|-|
real_user[]=root,0
real_user[]=ll,1000
pam_cracklib=1
pam_module[]=/lib/x86_64-linux-gnu/security/pam_access.so
pam_module[]=/lib/x86_64-linux-gnu/security/pam_cap.so
pam_module[]=/lib/x86_64-linux-gnu/security/pam_cracklib.so
pam_module[]=/lib/x86_64-linux-gnu/security/pam_debug.so
pam_module[]=/lib/x86_64-linux-gnu/security/pam_deny.so
pam_module[]=/lib/x86_64-linux-gnu/security/pam_echo.so
pam_module[]=/lib/x86_64-linux-gnu/security/pam_env.so
pam_module[]=/lib/x86_64-linux-gnu/security/pam_exec.so
pam_module[]=/lib/x86_64-linux-gnu/security/pam_extrausers.so
pam_module[]=/lib/x86_64-linux-gnu/security/pam_faildelay.so
pam_module[]=/lib/x86_64-linux-gnu/security/pam_filter.so
pam_module[]=/lib/x86_64-linux-gnu/security/pam_ftp.so
pam_module[]=/lib/x86_64-linux-gnu/security/pam_group.so
pam_module[]=/lib/x86_64-linux-gnu/security/pam_issue.so
pam_module[]=/lib/x86_64-linux-gnu/security/pam_keyinit.so
pam_module[]=/lib/x86_64-linux-gnu/security/pam_lastlog.so
pam_module[]=/lib/x86_64-linux-gnu/security/pam_limits.so
pam_module[]=/lib/x86_64-linux-gnu/security/pam_listfile.so
pam_module[]=/lib/x86_64-linux-gnu/security/pam_localuser.so
pam_module[]=/lib/x86_64-linux-gnu/security/pam_loginuid.so
pam_module[]=/lib/x86_64-linux-gnu/security/pam_mail.so
pam_module[]=/lib/x86_64-linux-gnu/security/pam_mkhomedir.so
pam_module[]=/lib/x86_64-linux-gnu/security/pam_motd.so
pam_module[]=/lib/x86_64-linux-gnu/security/pam_namespace.so
pam_module[]=/lib/x86_64-linux-gnu/security/pam_nologin.so
pam_module[]=/lib/x86_64-linux-gnu/security/pam_permit.so
pam_module[]=/lib/x86_64-linux-gnu/security/pam_pwhistory.so
pam_module[]=/lib/x86_64-linux-gnu/security/pam_rhosts.so
pam_module[]=/lib/x86_64-linux-gnu/security/pam_rootok.so
pam_module[]=/lib/x86_64-linux-gnu/security/pam_securetty.so
pam_module[]=/lib/x86_64-linux-gnu/security/pam_selinux.so
pam_module[]=/lib/x86_64-linux-gnu/security/pam_sepermit.so
pam_module[]=/lib/x86_64-linux-gnu/security/pam_shells.so
pam_module[]=/lib/x86_64-linux-gnu/security/pam_stress.so
pam_module[]=/lib/x86_64-linux-gnu/security/pam_succeed_if.so
pam_module[]=/lib/x86_64-linux-gnu/security/pam_systemd.so
pam_module[]=/lib/x86_64-linux-gnu/security/pam_tally.so
pam_module[]=/lib/x86_64-linux-gnu/security/pam_tally2.so
pam_module[]=/lib/x86_64-linux-gnu/security/pam_time.so
pam_module[]=/lib/x86_64-linux-gnu/security/pam_timestamp.so
pam_module[]=/lib/x86_64-linux-gnu/security/pam_tty_audit.so
pam_module[]=/lib/x86_64-linux-gnu/security/pam_umask.so
pam_module[]=/lib/x86_64-linux-gnu/security/pam_unix.so
pam_module[]=/lib/x86_64-linux-gnu/security/pam_userdb.so
pam_module[]=/lib/x86_64-linux-gnu/security/pam_warn.so
pam_module[]=/lib/x86_64-linux-gnu/security/pam_wheel.so
pam_module[]=/lib/x86_64-linux-gnu/security/pam_xauth.so
suggestion[]=AUTH-9282|When possible set expire dates for all password protected accounts|-|-|
manual_event[]=AUTH-9328:03
auth_failed_logins_tooling[]=/etc/login.defs
auth_failed_logins_logged=1
ldap_auth_enabled=0
ldap_pam_enabled=0
password_min_days=7
password_max_days=90
available_shell[]=/bin/sh
available_shell[]=/bin/bash
available_shell[]=/usr/bin/bash
available_shell[]=/bin/rbash
available_shell[]=/usr/bin/rbash
available_shell[]=/bin/dash
available_shell[]=/usr/bin/dash
available_shell[]=/usr/bin/tmux
available_shell[]=/usr/bin/screen
session_timeout_enabled=0
suggestion[]=FILE-6310|To decrease the impact of a full /home file system, place /home on a separate partition|-|-|
suggestion[]=FILE-6310|To decrease the impact of a full /var file system, place /var on a separate partition|-|-|
lvm_volume_group[]=ubuntu-vg
lvm_volume[]=ubuntu-lv
file_systems_ext[]=/|ext4|
file_systems_ext[]=/boot|ext4|
swap_partition[]=/swap.img,/swap.img,
suggestion[]=FILE-6430|Consider disabling unused kernel modules|/etc/modprobe.d/blacklist.conf|Add 'install MODULENAME /bin/true' (without quotes)|
usb_authorized_default_device[]=/sys/bus/usb/devices/usb1
usb_authorized_device[]=/sys/bus/usb/devices/usb1
usb_authorized_default_device[]=/sys/bus/usb/devices/usb2
usb_authorized_device[]=/sys/bus/usb/devices/usb2
resolv_conf_search_domain[]=localdomain
resolv_conf_option[]=edns0
suggestion[]=NAME-4028|Check DNS configuration for the dns domain name|-|-|
localhost-mapped-to=::1
name_cache_used=0
package_manager[]=dpkg
installed_packages=647
suggestion[]=PKGS-7370|Install debsums utility for the verification of packages with known good database.|-|-|
suggestion[]=PKGS-7394|Install package apt-show-versions for patch management purposes|-|-|
installed_kernel_packages=1
unattended_upgrade_tool[]=unattended-upgrade
unattended_upgrade_option_available=1
ipv6_mode=auto
ipv6_only=0
nameserver[]=127.0.0.53
default_gateway[]=192.168.37.2
network_interface[]=lo
network_interface[]=ens33
network_mac_address[]=00:0c:29:4c:fa:60
network_ipv4_address[]=192.168.37.134
network_ipv4_address[]=127.0.0.1
network_listen[]=raw,ss,v1|udp|0.0.0.0:54321|portsentry|
network_listen[]=raw,ss,v1|udp|0.0.0.0:34555|portsentry|
network_listen[]=raw,ss,v1|udp|0.0.0.0:1|portsentry|
network_listen[]=raw,ss,v1|udp|0.0.0.0:32770|portsentry|
network_listen[]=raw,ss,v1|udp|0.0.0.0:32771|portsentry|
network_listen[]=raw,ss,v1|udp|0.0.0.0:32772|portsentry|
network_listen[]=raw,ss,v1|udp|0.0.0.0:32773|portsentry|
network_listen[]=raw,ss,v1|udp|0.0.0.0:32774|portsentry|
network_listen[]=raw,ss,v1|udp|0.0.0.0:7|portsentry|
network_listen[]=raw,ss,v1|udp|0.0.0.0:9|portsentry|
network_listen[]=raw,ss,v1|udp|127.0.0.53%lo:53|systemd-resolve|
network_listen[]=raw,ss,v1|udp|192.168.37.134%ens33:68|systemd-network|
network_listen[]=raw,ss,v1|udp|0.0.0.0:69|portsentry|
network_listen[]=raw,ss,v1|udp|0.0.0.0:161|portsentry|
network_listen[]=raw,ss,v1|udp|0.0.0.0:162|portsentry|
network_listen[]=raw,ss,v1|udp|0.0.0.0:513|portsentry|
network_listen[]=raw,ss,v1|udp|0.0.0.0:37444|portsentry|
network_listen[]=raw,ss,v1|udp|0.0.0.0:31335|portsentry|
network_listen[]=raw,ss,v1|udp|0.0.0.0:31337|portsentry|
network_listen[]=raw,ss,v1|udp|0.0.0.0:635|portsentry|
network_listen[]=raw,ss,v1|udp|0.0.0.0:640|portsentry|
network_listen[]=raw,ss,v1|udp|0.0.0.0:641|portsentry|
network_listen[]=raw,ss,v1|udp|0.0.0.0:700|portsentry|
network_listen[]=raw,ss,v1|tcp|127.0.0.1:33060|mysqld|
network_listen[]=raw,ss,v1|tcp|127.0.0.1:3306|mysqld|
network_listen[]=raw,ss,v1|tcp|127.0.0.1:587|sendmail-mta|
network_listen[]=raw,ss,v1|tcp|127.0.0.53%lo:53|systemd-resolve|
network_listen[]=raw,ss,v1|tcp|127.0.0.1:25|sendmail-mta|
network_listen[]=raw,ss,v1|tcp|*:80|apache2,apache2,apache2,apache2,apache2,apache2|
suggestion[]=NETW-3200|Determine if protocol 'dccp' is really needed on this system|-|-|
uncommon_network_protocol_enabled=dccp
suggestion[]=NETW-3200|Determine if protocol 'sctp' is really needed on this system|-|-|
uncommon_network_protocol_enabled=sctp
suggestion[]=NETW-3200|Determine if protocol 'rds' is really needed on this system|-|-|
uncommon_network_protocol_enabled=rds
suggestion[]=NETW-3200|Determine if protocol 'tipc' is really needed on this system|-|-|
uncommon_network_protocol_enabled=tipc
imap_daemon=
pop3_daemon=
smtp_daemon=
firewall_software[]=iptables
warning[]=FIRE-4512|iptables module(s) loaded, but no rules active|-|-|
firewall_no_logging[]=iptables
manual[]=Verify if there is a formal process for testing and applying firewall rules
manual[]=Verify all traffic is filtered the right way between the different security zones
manual[]=Verify if a list is available with all required services
manual[]=Make sure an explicit deny all is the default policy for all unmatched traffic
apache_version=2.4.41
apache_module[]=/usr/lib/apache2/modules/mod_access_compat.so
apache_module[]=/usr/lib/apache2/modules/mod_actions.so
apache_module[]=/usr/lib/apache2/modules/mod_alias.so
apache_module[]=/usr/lib/apache2/modules/mod_allowmethods.so
apache_module[]=/usr/lib/apache2/modules/mod_asis.so
apache_module[]=/usr/lib/apache2/modules/mod_auth_basic.so
apache_module[]=/usr/lib/apache2/modules/mod_auth_digest.so
apache_module[]=/usr/lib/apache2/modules/mod_auth_form.so
apache_module[]=/usr/lib/apache2/modules/mod_authn_anon.so
apache_module[]=/usr/lib/apache2/modules/mod_authn_core.so
apache_module[]=/usr/lib/apache2/modules/mod_authn_dbd.so
apache_module[]=/usr/lib/apache2/modules/mod_authn_dbm.so
apache_module[]=/usr/lib/apache2/modules/mod_authn_file.so
apache_module[]=/usr/lib/apache2/modules/mod_authn_socache.so
apache_module[]=/usr/lib/apache2/modules/mod_authnz_fcgi.so
apache_module[]=/usr/lib/apache2/modules/mod_authnz_ldap.so
apache_module[]=/usr/lib/apache2/modules/mod_authz_core.so
apache_module[]=/usr/lib/apache2/modules/mod_authz_dbd.so
apache_module[]=/usr/lib/apache2/modules/mod_authz_dbm.so
apache_module[]=/usr/lib/apache2/modules/mod_authz_groupfile.so
apache_module[]=/usr/lib/apache2/modules/mod_authz_host.so
apache_module[]=/usr/lib/apache2/modules/mod_authz_owner.so
apache_module[]=/usr/lib/apache2/modules/mod_authz_user.so
apache_module[]=/usr/lib/apache2/modules/mod_autoindex.so
apache_module[]=/usr/lib/apache2/modules/mod_brotli.so
apache_module[]=/usr/lib/apache2/modules/mod_bucketeer.so
apache_module[]=/usr/lib/apache2/modules/mod_buffer.so
apache_module[]=/usr/lib/apache2/modules/mod_cache.so
apache_module[]=/usr/lib/apache2/modules/mod_cache_disk.so
apache_module[]=/usr/lib/apache2/modules/mod_cache_socache.so
apache_module[]=/usr/lib/apache2/modules/mod_case_filter.so
apache_module[]=/usr/lib/apache2/modules/mod_case_filter_in.so
apache_module[]=/usr/lib/apache2/modules/mod_cern_meta.so
apache_module[]=/usr/lib/apache2/modules/mod_cgi.so
apache_module[]=/usr/lib/apache2/modules/mod_cgid.so
apache_module[]=/usr/lib/apache2/modules/mod_charset_lite.so
apache_module[]=/usr/lib/apache2/modules/mod_data.so
apache_module[]=/usr/lib/apache2/modules/mod_dav.so
apache_module[]=/usr/lib/apache2/modules/mod_dav_fs.so
apache_module[]=/usr/lib/apache2/modules/mod_dav_lock.so
apache_module[]=/usr/lib/apache2/modules/mod_dbd.so
apache_module[]=/usr/lib/apache2/modules/mod_deflate.so
apache_module[]=/usr/lib/apache2/modules/mod_dialup.so
apache_module[]=/usr/lib/apache2/modules/mod_dir.so
apache_module[]=/usr/lib/apache2/modules/mod_dumpio.so
apache_module[]=/usr/lib/apache2/modules/mod_echo.so
apache_module[]=/usr/lib/apache2/modules/mod_env.so
apache_module[]=/usr/lib/apache2/modules/mod_expires.so
apache_module[]=/usr/lib/apache2/modules/mod_ext_filter.so
apache_module[]=/usr/lib/apache2/modules/mod_file_cache.so
apache_module[]=/usr/lib/apache2/modules/mod_filter.so
apache_module[]=/usr/lib/apache2/modules/mod_headers.so
apache_module[]=/usr/lib/apache2/modules/mod_heartbeat.so
apache_module[]=/usr/lib/apache2/modules/mod_heartmonitor.so
apache_module[]=/usr/lib/apache2/modules/mod_http2.so
apache_module[]=/usr/lib/apache2/modules/mod_ident.so
apache_module[]=/usr/lib/apache2/modules/mod_imagemap.so
apache_module[]=/usr/lib/apache2/modules/mod_include.so
apache_module[]=/usr/lib/apache2/modules/mod_info.so
apache_module[]=/usr/lib/apache2/modules/mod_lbmethod_bybusyness.so
apache_module[]=/usr/lib/apache2/modules/mod_lbmethod_byrequests.so
apache_module[]=/usr/lib/apache2/modules/mod_lbmethod_bytraffic.so
apache_module[]=/usr/lib/apache2/modules/mod_lbmethod_heartbeat.so
apache_module[]=/usr/lib/apache2/modules/mod_ldap.so
apache_module[]=/usr/lib/apache2/modules/mod_log_debug.so
apache_module[]=/usr/lib/apache2/modules/mod_log_forensic.so
apache_module[]=/usr/lib/apache2/modules/mod_lua.so
apache_module[]=/usr/lib/apache2/modules/mod_macro.so
apache_module[]=/usr/lib/apache2/modules/mod_md.so
apache_module[]=/usr/lib/apache2/modules/mod_mime.so
apache_module[]=/usr/lib/apache2/modules/mod_mime_magic.so
apache_module[]=/usr/lib/apache2/modules/mod_mpm_event.so
apache_module[]=/usr/lib/apache2/modules/mod_mpm_prefork.so
apache_module[]=/usr/lib/apache2/modules/mod_mpm_worker.so
apache_module[]=/usr/lib/apache2/modules/mod_negotiation.so
apache_module[]=/usr/lib/apache2/modules/mod_proxy.so
apache_module[]=/usr/lib/apache2/modules/mod_proxy_ajp.so
apache_module[]=/usr/lib/apache2/modules/mod_proxy_balancer.so
apache_module[]=/usr/lib/apache2/modules/mod_proxy_connect.so
apache_module[]=/usr/lib/apache2/modules/mod_proxy_express.so
apache_module[]=/usr/lib/apache2/modules/mod_proxy_fcgi.so
apache_module[]=/usr/lib/apache2/modules/mod_proxy_fdpass.so
apache_module[]=/usr/lib/apache2/modules/mod_proxy_ftp.so
apache_module[]=/usr/lib/apache2/modules/mod_proxy_hcheck.so
apache_module[]=/usr/lib/apache2/modules/mod_proxy_html.so
apache_module[]=/usr/lib/apache2/modules/mod_proxy_http.so
apache_module[]=/usr/lib/apache2/modules/mod_proxy_http2.so
apache_module[]=/usr/lib/apache2/modules/mod_proxy_scgi.so
apache_module[]=/usr/lib/apache2/modules/mod_proxy_uwsgi.so
apache_module[]=/usr/lib/apache2/modules/mod_proxy_wstunnel.so
apache_module[]=/usr/lib/apache2/modules/mod_ratelimit.so
apache_module[]=/usr/lib/apache2/modules/mod_reflector.so
apache_module[]=/usr/lib/apache2/modules/mod_remoteip.so
apache_module[]=/usr/lib/apache2/modules/mod_reqtimeout.so
apache_module[]=/usr/lib/apache2/modules/mod_request.so
apache_module[]=/usr/lib/apache2/modules/mod_rewrite.so
apache_module[]=/usr/lib/apache2/modules/mod_sed.so
apache_module[]=/usr/lib/apache2/modules/mod_session.so
apache_module[]=/usr/lib/apache2/modules/mod_session_cookie.so
apache_module[]=/usr/lib/apache2/modules/mod_session_crypto.so
apache_module[]=/usr/lib/apache2/modules/mod_session_dbd.so
apache_module[]=/usr/lib/apache2/modules/mod_setenvif.so
apache_module[]=/usr/lib/apache2/modules/mod_slotmem_plain.so
apache_module[]=/usr/lib/apache2/modules/mod_slotmem_shm.so
apache_module[]=/usr/lib/apache2/modules/mod_socache_dbm.so
apache_module[]=/usr/lib/apache2/modules/mod_socache_memcache.so
apache_module[]=/usr/lib/apache2/modules/mod_socache_redis.so
apache_module[]=/usr/lib/apache2/modules/mod_socache_shmcb.so
apache_module[]=/usr/lib/apache2/modules/mod_speling.so
apache_module[]=/usr/lib/apache2/modules/mod_ssl.so
apache_module[]=/usr/lib/apache2/modules/mod_status.so
apache_module[]=/usr/lib/apache2/modules/mod_substitute.so
apache_module[]=/usr/lib/apache2/modules/mod_suexec.so
apache_module[]=/usr/lib/apache2/modules/mod_unique_id.so
apache_module[]=/usr/lib/apache2/modules/mod_userdir.so
apache_module[]=/usr/lib/apache2/modules/mod_usertrack.so
apache_module[]=/usr/lib/apache2/modules/mod_vhost_alias.so
apache_module[]=/usr/lib/apache2/modules/mod_xml2enc.so
suggestion[]=HTTP-6640|Install Apache mod_evasive to guard webserver against DoS/brute force attempts|-|-|
suggestion[]=HTTP-6643|Install Apache modsecurity to guard webserver against web application attacks|-|-|
ssh_daemon_running=0
openssh_daemon_running=0
mysql_running=1
suggestion[]=PHP-2376|Change the allow_url_fopen line to: allow_url_fopen = Off, to disable downloads via PHP|-|-|
syslog_daemon_present=1
syslog_daemon[]=systemd-journal
syslog_daemon_present=1
syslog_daemon[]=rsyslog
log_directory[]=/var/log
log_directory[]=/var/log/apache2
log_directory[]=/var/log/apt
log_directory[]=/var/log/mysql
log_directory[]=/var/log/unattended-upgrades
remote_syslog_configured=0
suggestion[]=LOGG-2154|Enable logging to an external logging host for archiving purposes and additional protection|-|-|
log_directory[]=/var/log
deleted_file[]=/(none)
deleted_file[]=/tmp/.ZendSem.m9Ufrh(apache2)
deleted_file[]=/usr/bin/su(su)
deleted_file[]=/usr/bin/sudo(sudo)
deleted_file[]=/usr/lib/systemd/systemd((sd-pam))
deleted_file[]=/usr/lib/systemd/systemd(systemd)
deleted_file[]=/usr/lib/systemd/systemd-logind(systemd-l)
suggestion[]=LOGG-2190|Check what deleted files are still in use and why.|-|-|
open_empty_log_file[]=apache2,/var/log/apache2/other_vhosts_access.log
log_rotation_config_found=1
log_rotation_tool=logrotate
suggestion[]=BANN-7126|Add a legal banner to /etc/issue, to warn unauthorized users|-|-|
weak_banner_file[]=/etc/issue
suggestion[]=BANN-7130|Add legal banner to /etc/issue.net, to warn unauthorized users|-|-|
crond_running=1
scheduler[]=crond
cronjob[]=17,*,*,*,*,root,cd,/,&&,run-parts,--report,/etc/cron.hourly
cronjob[]=25,6,*,*,*,root,test,-x,/usr/sbin/anacron,||,(,cd,/,&&,run-parts,--report,/etc/cron.daily,)
cronjob[]=47,6,*,*,7,root,test,-x,/usr/sbin/anacron,||,(,cd,/,&&,run-parts,--report,/etc/cron.weekly,)
cronjob[]=52,6,1,*,*,root,test,-x,/usr/sbin/anacron,||,(,cd,/,&&,run-parts,--report,/etc/cron.monthly,)
cronjob[]=/etc/cron.d/tiger
cronjob[]=/etc/cron.d/php
cronjob[]=/etc/cron.d/popularity-contest
cronjob[]=/etc/cron.d/e2scrub_all
cronjob[]=/etc/cron.d/e2scrub_all
cronjob[]=/etc/cron.d/sendmail
cronjob[]=/etc/cron.daily/dpkg
cronjob[]=/etc/cron.daily/tripwire
cronjob[]=/etc/cron.daily/chkrootkit
cronjob[]=/etc/cron.daily/popularity-contest
cronjob[]=/etc/cron.daily/apport
cronjob[]=/etc/cron.daily/logrotate
cronjob[]=/etc/cron.daily/man-db
cronjob[]=/etc/cron.daily/bsdmainutils
cronjob[]=/etc/cron.daily/apache2
cronjob[]=/etc/cron.daily/acct
cronjob[]=/etc/cron.daily/update-notifier-common
cronjob[]=/etc/cron.daily/cracklib-runtime
cronjob[]=/etc/cron.daily/apt-compat
cronjob[]=/etc/cron.daily/sendmail
cronjob[]=/etc/cron.weekly/man-db
cronjob[]=/etc/cron.weekly/update-notifier-common
cronjob[]=/etc/cron.monthly/acct
suggestion[]=ACCT-9626|Enable sysstat to collect accounting (no results)|-|-|
suggestion[]=ACCT-9628|Enable auditd to collect audit information|-|-|
linux_auditd_running=0
audit_daemon_running=0
tz_variable_empty=1
ntp_config_found=0
ntp_config_type_daemon=1
ntp_config_type_eventbased=0
ntp_config_type_scheduled=0
ntp_config_type_startup=0
ntp_daemon=systemd-timesyncd
ntp_daemon_running=1
certificate[]=/etc/ssl/certs/ca-certificates.crt|0|cn:subject=CN = ACCVRAIZ1, OU = PKIACCV, O = ACCV, C = ES;notafter:Dec 31 09:37:37 2030 GMT;|
certificate[]=/etc/ssl/certs/ssl-cert-snakeoil.pem|0|cn:subject=CN = ubuntu20041;notafter:Jan 4 21:58:05 2031 GMT;|
certificates=143
non_encrypted_swap[]=/swap.img
kernel_entropy=1514
rng_found=0
apparmor_enabled=1
apparmor_policy_loaded=1
framework_grsecurity=0
framework_selinux=0
file_integrity_tool[]=tripwire
suggestion[]=TOOL-5002|Determine if automation tools are present for system management|-|-|
ids_ips_tooling[]=fail2ban
fail2ban_config=/etc/fail2ban/jail.local
fail2ban_enabled_service[]=sshd
automation_tool_present=0
malware_scanner[]=chkrootkit
malware_scanner[]=rkhunter
malware_scanner_installed=1
suggestion[]=FILE-7524|Consider restricting file permissions|See screen output or log file|text:Use chmod to change file permissions|
home_directory[]=/
home_directory[]=/bin
home_directory[]=/dev
home_directory[]=/home/ll
home_directory[]=/root
home_directory[]=/run/systemd
home_directory[]=/run/uuidd
home_directory[]=/usr/games
home_directory[]=/usr/sbin
home_directory[]=/var/backups
home_directory[]=/var/cache/man
home_directory[]=/var/cache/pollinate
home_directory[]=/var/lib/landscape
home_directory[]=/var/lib/sendmail
home_directory[]=/var/lib/tpm
home_directory[]=/var/mail
home_directory[]=/var/snap/lxd/common/lxd
home_directory[]=/var/www
suggestion[]=HOME-9304|Double check the permissions of home directories as some might be not strict enough.|-|-|
details[]=KRNL-6000|sysctl|desc:Disable loading of TTY line disciplines;field:dev.tty.ldisc_autoload;prefval:0;value:1;|
details[]=KRNL-6000|sysctl|desc:Restrict FIFO special device creation behavior;field:fs.protected_fifos;prefval:2;value:1;|
details[]=KRNL-6000|sysctl|desc:Restrict module loading once this sysctl value is loaded;field:kernel.modules_disabled;prefval:1;value:0;|
details[]=KRNL-6000|sysctl|desc:Restrict BPF for unprivileged users;field:kernel.unprivileged_bpf_disabled;prefval:1;value:0;|
details[]=KRNL-6000|sysctl|desc:Hardened BPF JIT compilation;field:net.core.bpf_jit_harden;prefval:2;value:0;|
suggestion[]=KRNL-6000|One or more sysctl values differ from the scan profile and could be tweaked||Change sysctl value or disable test (skip-test=KRNL-6000:<sysctl-key>)|
compiler_installed=1
lynis_tests_done=271
report_datetime_end=2021-01-07 20:56:01
dhcp_client_running=0
arpwatch_running=0
firewall_active=1
firewall_empty_ruleset=1
firewall_installed=1
installed_packages_array=|accountsservice,0.6.55-0ubuntu12~20.04.4|acct,6.6.4-2|adduser,3.118ubuntu2|alsa-topology-conf,1.2.2-1|alsa-ucm-conf,1.2.2-1ubuntu0.5|amd64-microcode,3.20191218.1ubuntu1|apache2,2.4.41-4ubuntu3.1|apache2-bin,2.4.41-4ubuntu3.1|apache2-data,2.4.41-4ubuntu3.1|apache2-utils,2.4.41-4ubuntu3.1|apparmor,2.13.3-7ubuntu5.1|apport,2.20.11-0ubuntu27.14|apport-symptoms,0.23|apt,2.0.2ubuntu0.2|apt-utils,2.0.2ubuntu0.2|base-files,11ubuntu5.2|base-passwd,3.5.47|bash,5.0-6ubuntu1.1|bash-completion,1:2.10-1ubuntu1|bc,1.07.1-2build1|bcache-tools,1.0.8-3ubuntu0.1|bind9-dnsutils,1:9.16.1-0ubuntu2.4|bind9-host,1:9.16.1-0ubuntu2.4|bind9-libs:amd64,1:9.16.1-0ubuntu2.4|binutils,2.34-6ubuntu1|binutils-common:amd64,2.34-6ubuntu1|binutils-x86-64-linux-gnu,2.34-6ubuntu1|bolt,0.8-4ubuntu1|bsdmainutils,11.1.2ubuntu3|bsdutils,1:2.34-0.1ubuntu9.1|btrfs-progs,5.4.1-2|busybox-initramfs,1:1.30.1-4ubuntu6.3|busybox-static,1:1.30.1-4ubuntu6.3|byobu,5.133-0ubuntu1|bzip2,1.0.8-2|ca-certificates,20201027ubuntu0.20.04.1|chkrootkit,0.53-1|cloud-guest-utils,0.31-7-gd99b2d76-0ubuntu1|cloud-init,20.4-0ubuntu1~20.04.1|cloud-initramfs-copymods,0.45ubuntu1|cloud-initramfs-dyn-netconf,0.45ubuntu1|command-not-found,20.04.4|console-setup,1.194ubuntu3|console-setup-linux,1.194ubuntu3|coreutils,8.30-3ubuntu2|cpio,2.13+dfsg-2|cracklib-runtime,2.9.6-3.2|crda,3.18-1build1|cron,3.0pl1-136ubuntu1|cryptsetup,2:2.2.2-3ubuntu2.3|cryptsetup-bin,2:2.2.2-3ubuntu2.3|cryptsetup-initramfs,2:2.2.2-3ubuntu2.3|cryptsetup-run,2:2.2.2-3ubuntu2.3|curl,7.68.0-1ubuntu2.4|dash,0.5.10.2-6|dbus,1.12.16-2ubuntu2.1|dbus-user-session,1.12.16-2ubuntu2.1|dconf-gsettings-backend:amd64,0.36.0-1|dconf-service,0.36.0-1|debconf,1.5.73|debconf-i18n,1.5.73|debianutils,4.9.1|diffutils,1:3.7-3|dirmngr,2.2.19-3ubuntu2|distro-info-data,0.43ubuntu1.4|dmeventd,2:1.02.167-1ubuntu1|dmidecode,3.2-3|dmsetup,2:1.02.167-1ubuntu1|dosfstools,4.1-2|dpkg,1.19.7ubuntu3|e2fsprogs,1.45.5-2ubuntu1|eatmydata,105-7|ed,1.16-1|eject,2.1.5+deb1+cvs20081104-14|ethtool,1:5.4-1|fail2ban,0.11.1-1|fdisk,2.34-0.1ubuntu9.1|file,1:5.38-4|finalrd,6~ubuntu20.04.1|findutils,4.7.0-1ubuntu1|fonts-ubuntu-console,0.83-4ubuntu1|friendly-recovery,0.2.41|ftp,0.17-34.1|fuse,2.9.9-3|fwupd,1.3.11-1~focal1|fwupd-signed,1.27.1ubuntu2+1.3.11-1~focal1|gawk,1:5.0.1+dfsg-1|gcc-10-base:amd64,10.2.0-5ubuntu1~20.04|gdisk,1.0.5-1|gettext-base,0.19.8.1-10build1|gir1.2-glib-2.0:amd64,1.64.1-1~ubuntu20.04.1|gir1.2-packagekitglib-1.0,1.1.13-2ubuntu1.1|git,1:2.25.1-1ubuntu3|git-man,1:2.25.1-1ubuntu3|glib-networking-common,2.64.2-1ubuntu0.1|glib-networking-services,2.64.2-1ubuntu0.1|glib-networking:amd64,2.64.2-1ubuntu0.1|gnupg,2.2.19-3ubuntu2|gnupg-l10n,2.2.19-3ubuntu2|gnupg-utils,2.2.19-3ubuntu2|gpg,2.2.19-3ubuntu2|gpg-agent,2.2.19-3ubuntu2|gpg-wks-client,2.2.19-3ubuntu2|gpg-wks-server,2.2.19-3ubuntu2|gpgconf,2.2.19-3ubuntu2|gpgsm,2.2.19-3ubuntu2|gpgv,2.2.19-3ubuntu2|grep,3.4-1|groff-base,1.22.4-4build1|grub-common,2.04-1ubuntu26.7|grub-gfxpayload-lists,0.7|grub-pc,2.04-1ubuntu26.7|grub-pc-bin,2.04-1ubuntu26.7|grub2-common,2.04-1ubuntu26.7|gsettings-desktop-schemas,3.36.0-1ubuntu1|gzip,1.10-0ubuntu4|hdparm,9.58+ds-4|hostname,3.23|htop,2.2.0-2build1|info,6.7.0.dfsg.2-5|init,1.57|init-system-helpers,1.57|initramfs-tools,0.136ubuntu6.3|initramfs-tools-bin,0.136ubuntu6.3|initramfs-tools-core,0.136ubuntu6.3|install-info,6.7.0.dfsg.2-5|intel-microcode,3.20201110.0ubuntu0.20.04.2|iproute2,5.5.0-1ubuntu1|iptables,1.8.4-3ubuntu2|iputils-ping,3:20190709-3|iputils-tracepath,3:20190709-3|irqbalance,1.6.0-3ubuntu1|isc-dhcp-client,4.4.1-2.1ubuntu5|isc-dhcp-common,4.4.1-2.1ubuntu5|iso-codes,4.4-1|iucode-tool,2.3.1-1|iw,5.4-1|john,1.8.0-2build1|john-data,1.8.0-2build1|kbd,2.0.4-4ubuntu2|keyboard-configuration,1.194ubuntu3|klibc-utils,2.0.7-1ubuntu5|kmod,27-1ubuntu2|kpartx,0.8.3-1ubuntu2|krb5-locales,1.17-6ubuntu4.1|landscape-common,19.12-0ubuntu4.1|language-selector-common,0.204.2|less,551-1ubuntu0.1|libaccountsservice0:amd64,0.6.55-0ubuntu12~20.04.4|libacl1:amd64,2.2.53-6|libaio1:amd64,0.3.112-5|libapache2-mod-php,2:7.4+75|libapache2-mod-php7.4,7.4.3-4ubunt
package_audit_tool=apt-check
package_audit_tool_found=1
vulnerable_packages_found=0
hardening_index=81
tests_executed=HRDN-7231|HRDN-7230|HRDN-7222|HRDN-7220|KRNL-6000|HOME-9350|HOME-9310|HOME-9306|HOME-9304|HOME-9302|FILE-7524|MALW-3284|MALW-3282|MALW-3280|MALW-3278|MALW-3276|MALW-3275|TOOL-5190|TOOL-5126|TOOL-5130|TOOL-5122|TOOL-5120|TOOL-5104|TOOL-5102|TOOL-5002|FINT-4350|FINT-4341|FINT-4340|FINT-4338|FINT-4330|FINT-4328|FINT-4326|FINT-4322|FINT-4318|FINT-4314|FINT-4310|MACF-6290|RBAC-6272|MACF-6240|MACF-6232|MACF-6208|MACF-6204|CONT-8102|CRYP-8005|CRYP-8004|CRYP-8002|CRYP-7931|CRYP-7930|CRYP-7902|TIME-3185|TIME-3170|TIME-3148|TIME-3104|ACCT-9636|ACCT-9628|ACCT-9626|ACCT-9622|SCHD-7718|SCHD-7704|SCHD-7702|BANN-7130|BANN-7128|BANN-7126|BANN-7124|INSE-8320|INSE-8318|INSE-8316|INSE-8314|INSE-8322|INSE-8310|INSE-8304|INSE-8300|INSE-8102|INSE-8100|INSE-8000|LOGG-2192|LOGG-2190|LOGG-2180|LOGG-2170|LOGG-2154|LOGG-2150|LOGG-2148|LOGG-2146|LOGG-2142|LOGG-2138|LOGG-2240|LOGG-2230|LOGG-2210|LOGG-2136|LOGG-2132|LOGG-2130|SQD-3602|PHP-2382|PHP-2378|PHP-2376|PHP-2374|PHP-2372|PHP-2320|PHP-2211|LDAP-2219|DBS-1880|DBS-1860|DBS-1840|DBS-1826|DBS-1820|DBS-1818|DBS-1816|DBS-1804|SNMP-3302|SSH-7402|HTTP-6702|HTTP-6643|HTTP-6641|HTTP-6640|HTTP-6632|HTTP-6626|HTTP-6624|HTTP-6622|FIRE-4594|FIRE-4590|FIRE-4586|FIRE-4524|FIRE-4513|FIRE-4512|FIRE-4508|FIRE-4502|MAIL-8880|MAIL-8860|MAIL-8838|MAIL-8820|MAIL-8814|MAIL-8802|PRNT-2314|PRNT-2304|NETW-3200|NETW-3032|NETW-3030|NETW-3028|NETW-3015|NETW-3012|NETW-3008|NETW-3006|NETW-3004|NETW-3001|NETW-2706|NETW-2704|NETW-2600|NETW-2400|PKGS-7420|PKGS-7410|PKGS-7398|PKGS-7394|PKGS-7392|PKGS-7390|PKGS-7388|PKGS-7370|PKGS-7346|PKGS-7345|NAME-4408|NAME-4406|NAME-4404|NAME-4402|NAME-4304|NAME-4230|NAME-4202|NAME-4034|NAME-4032|NAME-4028|NAME-4020|NAME-4018|NAME-4016|STRG-1920|STRG-1846|USB-3000|USB-2000|USB-1000|FILE-6430|FILE-6394|FILE-6376|FILE-6374|FILE-6372|FILE-6368|FILE-6363|FILE-6362|FILE-6354|FILE-6344|FILE-6336|FILE-6332|FILE-6329|FILE-6324|FILE-6323|FILE-6312|FILE-6311|FILE-6310|SHLL-6230|SHLL-6220|SHLL-6211|AUTH-9408|AUTH-9402|AUTH-9328|AUTH-9308|AUTH-9288|AUTH-9286|AUTH-9284|AUTH-9283|AUTH-9282|AUTH-9278|AUTH-9268|AUTH-9266|AUTH-9264|AUTH-9262|AUTH-9252|AUTH-9250|AUTH-9242|AUTH-9240|AUTH-9234|AUTH-9230|AUTH-9229|AUTH-9228|AUTH-9226|AUTH-9222|AUTH-9216|AUTH-9208|AUTH-9204|PROC-3802|PROC-3614|PROC-3612|PROC-3602|KRNL-5830|KRNL-5820|KRNL-5788|KRNL-5730|KRNL-5728|KRNL-5726|KRNL-5723|KRNL-5695|KRNL-5677|KRNL-5622|BOOT-5264|BOOT-5260|BOOT-5202|BOOT-5184|BOOT-5180|BOOT-5177|BOOT-5155|BOOT-5142|BOOT-5139|BOOT-5122|BOOT-5121|BOOT-5116|BOOT-5109|BOOT-5108|BOOT-5104|PLGN-3860|PLGN-3856|PLGN-3834|PLGN-3832|PLGN-3830|PLGN-3820|PLGN-3818|PLGN-3816|PLGN-3814|PLGN-3812|PLGN-3810|PLGN-3808|PLGN-3806|PLGN-3804|PLGN-3802|PLGN-3800|PLGN-0010|CORE-1000|
tests_skipped=MALW-3288|MALW-3286|FINT-4402|FINT-4339|FINT-4336|FINT-4334|FINT-4316|FINT-4315|MACF-6242|MACF-6234|CONT-8108|CONT-8107|CONT-8106|CONT-8104|CONT-8004|TIME-3182|TIME-3181|TIME-3180|TIME-3160|TIME-3136|TIME-3132|TIME-3128|TIME-3124|TIME-3120|TIME-3116|TIME-3112|TIME-3106|ACCT-9662|ACCT-9660|ACCT-9656|ACCT-9654|ACCT-9652|ACCT-9650|ACCT-9634|ACCT-9632|ACCT-9630|ACCT-2760|ACCT-2754|SCHD-7724|SCHD-7720|BANN-7113|INSE-8050|INSE-8200|INSE-8116|INSE-8106|INSE-8104|INSE-8016|INSE-8006|INSE-8004|INSE-8002|LOGG-2164|LOGG-2162|LOGG-2160|LOGG-2153|LOGG-2152|LOGG-2134|SQD-3680|SQD-3630|SQD-3624|SQD-3620|SQD-3616|SQD-3614|SQD-3613|SQD-3610|SQD-3606|SQD-3604|PHP-2368|LDAP-2224|DBS-1888|DBS-1886|DBS-1884|DBS-1882|DBS-1828|SNMP-3306|SNMP-3304|SSH-7440|SSH-7408|SSH-7406|SSH-7404|HTTP-6720|HTTP-6716|HTTP-6714|HTTP-6712|HTTP-6710|HTTP-6708|HTTP-6706|HTTP-6704|FIRE-4540|FIRE-4538|FIRE-4536|FIRE-4534|FIRE-4532|FIRE-4530|FIRE-4526|FIRE-4520|FIRE-4518|MAIL-8920|MAIL-8818|MAIL-8817|MAIL-8816|MAIL-8804|PRNT-2420|PRNT-2418|PRNT-2316|PRNT-2308|PRNT-2307|PRNT-2306|PRNT-2302|NETW-3014|NETW-2705|PKGS-7393|PKGS-7387|PKGS-7386|PKGS-7384|PKGS-7383|PKGS-7382|PKGS-7381|PKGS-7380|PKGS-7378|PKGS-7366|PKGS-7354|PKGS-7352|PKGS-7350|PKGS-7348|PKGS-7334|PKGS-7332|PKGS-7330|PKGS-7328|PKGS-7322|PKGS-7320|PKGS-7314|PKGS-7312|PKGS-7310|PKGS-7308|PKGS-7306|PKGS-7304|PKGS-7303|PKGS-7302|PKGS-7301|NAME-4306|NAME-4238|NAME-4236|NAME-4232|NAME-4210|NAME-4206|NAME-4204|NAME-4036|NAME-4026|NAME-4024|STRG-1930|STRG-1928|STRG-1926|STRG-1906|STRG-1904|STRG-1902|FILE-6410|FILE-6439|FILE-6330|SHLL-6202|AUTH-9410|AUTH-9409|AUTH-9406|AUTH-9340|AUTH-9306|AUTH-9304|AUTH-9254|AUTH-9218|AUTH-9212|PROC-3604|KRNL-5770|KRNL-5831|KRNL-5745|BOOT-5263|BOOT-5262|BOOT-5170|BOOT-5165|BOOT-5159|BOOT-5126|BOOT-5261|BOOT-5124|BOOT-5117|BOOT-5106|BOOT-5102|PLGN-0008|
finish=true