|
results
|
Result #1
| Field |
Value |
|
ansible_loop_var
|
|
|
backup
|
|
|
changed
|
|
|
diff
|
|
|
failed
|
|
|
found
|
|
|
invocation
|
{
"module_args": {
"attributes": null,
"backrefs": false,
"backup": false,
"create": false,
"firstmatch": false,
"group": null,
"insertafter": null,
"insertbefore": null,
"line": null,
"mode": null,
"owner": null,
"path": "/etc/ssh/sshd_config",
"regexp": "^PermitEmptyPasswords\\s+(?!no)",
"search_string": null,
"selevel": null,
"serole": null,
"setype": null,
"seuser": null,
"state": "absent",
"unsafe_writes": false,
"validate": "/usr/sbin/sshd -T -f %s"
}
}
|
|
item
|
{
"enabled": true,
"name": "PermitEmptyPasswords",
"stig_id": "V-71939 / RHEL-07-010440",
"value": "no"
}
|
|
msg
|
|
Result #2
| Field |
Value |
|
ansible_loop_var
|
|
|
backup
|
|
|
changed
|
|
|
diff
|
|
|
failed
|
|
|
found
|
|
|
invocation
|
{
"module_args": {
"attributes": null,
"backrefs": false,
"backup": false,
"create": false,
"firstmatch": false,
"group": null,
"insertafter": null,
"insertbefore": null,
"line": null,
"mode": null,
"owner": null,
"path": "/etc/ssh/sshd_config",
"regexp": "^PermitUserEnvironment\\s+(?!no)",
"search_string": null,
"selevel": null,
"serole": null,
"setype": null,
"seuser": null,
"state": "absent",
"unsafe_writes": false,
"validate": "/usr/sbin/sshd -T -f %s"
}
}
|
|
item
|
{
"enabled": true,
"name": "PermitUserEnvironment",
"stig_id": "V-71957",
"value": "no"
}
|
|
msg
|
|
Result #3
| Field |
Value |
|
ansible_loop_var
|
|
|
backup
|
|
|
changed
|
|
|
diff
|
|
|
failed
|
|
|
found
|
|
|
invocation
|
{
"module_args": {
"attributes": null,
"backrefs": false,
"backup": false,
"create": false,
"firstmatch": false,
"group": null,
"insertafter": null,
"insertbefore": null,
"line": null,
"mode": null,
"owner": null,
"path": "/etc/ssh/sshd_config",
"regexp": "^HostbasedAuthentication\\s+(?!no)",
"search_string": null,
"selevel": null,
"serole": null,
"setype": null,
"seuser": null,
"state": "absent",
"unsafe_writes": false,
"validate": "/usr/sbin/sshd -T -f %s"
}
}
|
|
item
|
{
"enabled": true,
"name": "HostbasedAuthentication",
"stig_id": "V-71959",
"value": "no"
}
|
|
msg
|
|
Result #4
| Field |
Value |
|
ansible_loop_var
|
|
|
backup
|
|
|
changed
|
|
|
diff
|
|
|
failed
|
|
|
found
|
|
|
invocation
|
{
"module_args": {
"attributes": null,
"backrefs": false,
"backup": false,
"create": false,
"firstmatch": false,
"group": null,
"insertafter": null,
"insertbefore": null,
"line": null,
"mode": null,
"owner": null,
"path": "/etc/ssh/sshd_config",
"regexp": "^Ciphers\\s+(?!aes128-ctr,aes192-ctr,aes256-ctr)",
"search_string": null,
"selevel": null,
"serole": null,
"setype": null,
"seuser": null,
"state": "absent",
"unsafe_writes": false,
"validate": "/usr/sbin/sshd -T -f %s"
}
}
|
|
item
|
{
"enabled": true,
"name": "Ciphers",
"stig_id": "V-72221",
"value": "aes128-ctr,aes192-ctr,aes256-ctr"
}
|
|
msg
|
|
Result #5
| Field |
Value |
|
ansible_loop_var
|
|
|
backup
|
|
|
changed
|
|
|
diff
|
|
|
failed
|
|
|
found
|
|
|
invocation
|
{
"module_args": {
"attributes": null,
"backrefs": false,
"backup": false,
"create": false,
"firstmatch": false,
"group": null,
"insertafter": null,
"insertbefore": null,
"line": null,
"mode": null,
"owner": null,
"path": "/etc/ssh/sshd_config",
"regexp": "^ClientAliveInterval\\s+(?!600)",
"search_string": null,
"selevel": null,
"serole": null,
"setype": null,
"seuser": null,
"state": "absent",
"unsafe_writes": false,
"validate": "/usr/sbin/sshd -T -f %s"
}
}
|
|
item
|
{
"enabled": true,
"name": "ClientAliveInterval",
"stig_id": "V-72237",
"value": 600
}
|
|
msg
|
|
Result #6
| Field |
Value |
|
ansible_loop_var
|
|
|
backup
|
|
|
changed
|
|
|
diff
|
|
|
failed
|
|
|
found
|
|
|
invocation
|
{
"module_args": {
"attributes": null,
"backrefs": false,
"backup": false,
"create": false,
"firstmatch": false,
"group": null,
"insertafter": null,
"insertbefore": null,
"line": null,
"mode": null,
"owner": null,
"path": "/etc/ssh/sshd_config",
"regexp": "^ClientAliveCountMax\\s+(?!0)",
"search_string": null,
"selevel": null,
"serole": null,
"setype": null,
"seuser": null,
"state": "absent",
"unsafe_writes": false,
"validate": "/usr/sbin/sshd -T -f %s"
}
}
|
|
item
|
{
"enabled": true,
"name": "ClientAliveCountMax",
"stig_id": "V-72241",
"value": 0
}
|
|
msg
|
|
Result #7
| Field |
Value |
|
ansible_loop_var
|
|
|
backup
|
|
|
changed
|
|
|
diff
|
|
|
failed
|
|
|
found
|
|
|
invocation
|
{
"module_args": {
"attributes": null,
"backrefs": false,
"backup": false,
"create": false,
"firstmatch": false,
"group": null,
"insertafter": null,
"insertbefore": null,
"line": null,
"mode": null,
"owner": null,
"path": "/etc/ssh/sshd_config",
"regexp": "^PrintLastLog\\s+(?!yes)",
"search_string": null,
"selevel": null,
"serole": null,
"setype": null,
"seuser": null,
"state": "absent",
"unsafe_writes": false,
"validate": "/usr/sbin/sshd -T -f %s"
}
}
|
|
item
|
{
"enabled": true,
"name": "PrintLastLog",
"stig_id": "V-72245",
"value": "yes"
}
|
|
msg
|
|
Result #8
| Field |
Value |
|
ansible_loop_var
|
|
|
backup
|
|
|
changed
|
|
|
diff
|
|
|
failed
|
|
|
found
|
|
|
invocation
|
{
"module_args": {
"attributes": null,
"backrefs": false,
"backup": false,
"create": false,
"firstmatch": false,
"group": null,
"insertafter": null,
"insertbefore": null,
"line": null,
"mode": null,
"owner": null,
"path": "/etc/ssh/sshd_config",
"regexp": "^PermitRootLogin\\s+(?!without-password)",
"search_string": null,
"selevel": null,
"serole": null,
"setype": null,
"seuser": null,
"state": "absent",
"unsafe_writes": false,
"validate": "/usr/sbin/sshd -T -f %s"
}
}
|
|
item
|
{
"enabled": true,
"name": "PermitRootLogin",
"stig_id": "V-72247",
"value": "without-password"
}
|
|
msg
|
|
Result #9
| Field |
Value |
|
ansible_loop_var
|
|
|
backup
|
|
|
changed
|
|
|
diff
|
|
|
failed
|
|
|
found
|
|
|
invocation
|
{
"module_args": {
"attributes": null,
"backrefs": false,
"backup": false,
"create": false,
"firstmatch": false,
"group": null,
"insertafter": null,
"insertbefore": null,
"line": null,
"mode": null,
"owner": null,
"path": "/etc/ssh/sshd_config",
"regexp": "^IgnoreUserKnownHosts\\s+(?!yes)",
"search_string": null,
"selevel": null,
"serole": null,
"setype": null,
"seuser": null,
"state": "absent",
"unsafe_writes": false,
"validate": "/usr/sbin/sshd -T -f %s"
}
}
|
|
item
|
{
"enabled": true,
"name": "IgnoreUserKnownHosts",
"stig_id": "V-72249 / V-72239",
"value": "yes"
}
|
|
msg
|
|
Result #10
| Field |
Value |
|
ansible_loop_var
|
|
|
backup
|
|
|
changed
|
|
|
diff
|
|
|
failed
|
|
|
found
|
|
|
invocation
|
{
"module_args": {
"attributes": null,
"backrefs": false,
"backup": false,
"create": false,
"firstmatch": false,
"group": null,
"insertafter": null,
"insertbefore": null,
"line": null,
"mode": null,
"owner": null,
"path": "/etc/ssh/sshd_config",
"regexp": "^IgnoreRhosts\\s+(?!yes)",
"search_string": null,
"selevel": null,
"serole": null,
"setype": null,
"seuser": null,
"state": "absent",
"unsafe_writes": false,
"validate": "/usr/sbin/sshd -T -f %s"
}
}
|
|
item
|
{
"enabled": true,
"name": "IgnoreRhosts",
"stig_id": "V-72243",
"value": "yes"
}
|
|
msg
|
|
Result #11
| Field |
Value |
|
ansible_loop_var
|
|
|
backup
|
|
|
changed
|
|
|
diff
|
|
|
failed
|
|
|
found
|
|
|
invocation
|
{
"module_args": {
"attributes": null,
"backrefs": false,
"backup": false,
"create": false,
"firstmatch": false,
"group": null,
"insertafter": null,
"insertbefore": null,
"line": null,
"mode": null,
"owner": null,
"path": "/etc/ssh/sshd_config",
"regexp": "^X11Forwarding\\s+(?!yes)",
"search_string": null,
"selevel": null,
"serole": null,
"setype": null,
"seuser": null,
"state": "absent",
"unsafe_writes": false,
"validate": "/usr/sbin/sshd -T -f %s"
}
}
|
|
item
|
{
"enabled": true,
"name": "X11Forwarding",
"stig_id": "V-72303",
"value": "yes"
}
|
|
msg
|
|
Result #12
| Field |
Value |
|
ansible_loop_var
|
|
|
backup
|
|
|
changed
|
|
|
diff
|
|
|
failed
|
|
|
found
|
|
|
invocation
|
{
"module_args": {
"attributes": null,
"backrefs": false,
"backup": false,
"create": false,
"firstmatch": false,
"group": null,
"insertafter": null,
"insertbefore": null,
"line": null,
"mode": null,
"owner": null,
"path": "/etc/ssh/sshd_config",
"regexp": "^Protocol\\s+(?!2)",
"search_string": null,
"selevel": null,
"serole": null,
"setype": null,
"seuser": null,
"state": "absent",
"unsafe_writes": false,
"validate": "/usr/sbin/sshd -T -f %s"
}
}
|
|
item
|
{
"enabled": true,
"name": "Protocol",
"stig_id": "V-72251",
"value": 2
}
|
|
msg
|
|
Result #13
| Field |
Value |
|
ansible_loop_var
|
|
|
backup
|
|
|
changed
|
|
|
diff
|
|
|
failed
|
|
|
found
|
|
|
invocation
|
{
"module_args": {
"attributes": null,
"backrefs": false,
"backup": false,
"create": false,
"firstmatch": false,
"group": null,
"insertafter": null,
"insertbefore": null,
"line": null,
"mode": null,
"owner": null,
"path": "/etc/ssh/sshd_config",
"regexp": "^MACs\\s+(?!hmac-sha2-256,hmac-sha2-512)",
"search_string": null,
"selevel": null,
"serole": null,
"setype": null,
"seuser": null,
"state": "absent",
"unsafe_writes": false,
"validate": "/usr/sbin/sshd -T -f %s"
}
}
|
|
item
|
{
"enabled": true,
"name": "MACs",
"stig_id": "V-72253",
"value": "hmac-sha2-256,hmac-sha2-512"
}
|
|
msg
|
|
Result #14
| Field |
Value |
|
ansible_loop_var
|
|
|
backup
|
|
|
changed
|
|
|
diff
|
|
|
failed
|
|
|
found
|
|
|
invocation
|
{
"module_args": {
"attributes": null,
"backrefs": false,
"backup": false,
"create": false,
"firstmatch": false,
"group": null,
"insertafter": null,
"insertbefore": null,
"line": null,
"mode": null,
"owner": null,
"path": "/etc/ssh/sshd_config",
"regexp": "^Compression\\s+(?!delayed)",
"search_string": null,
"selevel": null,
"serole": null,
"setype": null,
"seuser": null,
"state": "absent",
"unsafe_writes": false,
"validate": "/usr/sbin/sshd -T -f %s"
}
}
|
|
item
|
{
"enabled": true,
"name": "Compression",
"stig_id": "V-72267",
"value": "delayed"
}
|
|
msg
|
|
Result #15
| Field |
Value |
|
ansible_loop_var
|
|
|
backup
|
|
|
changed
|
|
|
diff
|
|
|
failed
|
|
|
found
|
|
|
invocation
|
{
"module_args": {
"attributes": null,
"backrefs": false,
"backup": false,
"create": false,
"firstmatch": false,
"group": null,
"insertafter": null,
"insertbefore": null,
"line": null,
"mode": null,
"owner": null,
"path": "/etc/ssh/sshd_config",
"regexp": "^KerberosAuthentication\\s+(?!no)",
"search_string": null,
"selevel": null,
"serole": null,
"setype": null,
"seuser": null,
"state": "absent",
"unsafe_writes": false,
"validate": "/usr/sbin/sshd -T -f %s"
}
}
|
|
item
|
{
"enabled": true,
"name": "KerberosAuthentication",
"stig_id": "V-72261",
"value": "no"
}
|
|
msg
|
|
Result #16
| Field |
Value |
|
ansible_loop_var
|
|
|
backup
|
|
|
changed
|
|
|
diff
|
|
|
failed
|
|
|
found
|
|
|
invocation
|
{
"module_args": {
"attributes": null,
"backrefs": false,
"backup": false,
"create": false,
"firstmatch": false,
"group": null,
"insertafter": null,
"insertbefore": null,
"line": null,
"mode": null,
"owner": null,
"path": "/etc/ssh/sshd_config",
"regexp": "^GSSAPIAuthentication\\s+(?!no)",
"search_string": null,
"selevel": null,
"serole": null,
"setype": null,
"seuser": null,
"state": "absent",
"unsafe_writes": false,
"validate": "/usr/sbin/sshd -T -f %s"
}
}
|
|
item
|
{
"enabled": true,
"name": "GSSAPIAuthentication",
"stig_id": "V-204598",
"value": "no"
}
|
|
msg
|
|
Result #17
| Field |
Value |
|
ansible_loop_var
|
|
|
backup
|
|
|
changed
|
|
|
diff
|
|
|
failed
|
|
|
found
|
|
|
invocation
|
{
"module_args": {
"attributes": null,
"backrefs": false,
"backup": false,
"create": false,
"firstmatch": false,
"group": null,
"insertafter": null,
"insertbefore": null,
"line": null,
"mode": null,
"owner": null,
"path": "/etc/ssh/sshd_config",
"regexp": "^StrictModes\\s+(?!yes)",
"search_string": null,
"selevel": null,
"serole": null,
"setype": null,
"seuser": null,
"state": "absent",
"unsafe_writes": false,
"validate": "/usr/sbin/sshd -T -f %s"
}
}
|
|
item
|
{
"enabled": true,
"name": "StrictModes",
"stig_id": "V-72263",
"value": "yes"
}
|
|
msg
|
|
Result #18
| Field |
Value |
|
ansible_loop_var
|
|
|
backup
|
|
|
changed
|
|
|
diff
|
|
|
failed
|
|
|
found
|
|
|
invocation
|
{
"module_args": {
"attributes": null,
"backrefs": false,
"backup": false,
"create": false,
"firstmatch": false,
"group": null,
"insertafter": null,
"insertbefore": null,
"line": null,
"mode": null,
"owner": null,
"path": "/etc/ssh/sshd_config",
"regexp": "^PrintMotd\\s+(?!yes)",
"search_string": null,
"selevel": null,
"serole": null,
"setype": null,
"seuser": null,
"state": "absent",
"unsafe_writes": false,
"validate": "/usr/sbin/sshd -T -f %s"
}
}
|
|
item
|
{
"enabled": true,
"name": "PrintMotd",
"stig_id": "V-71861",
"value": "yes"
}
|
|
msg
|
|
|