Security Configuration Assessment Report
for CentOS_7_01

<rule-result xmlns="http://checklists.nist.gov/xccdf/1.2"
             xmlns:xccdf="http://checklists.nist.gov/xccdf/1.2"
             xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
             idref="xccdf_org.cisecurity.benchmarks_rule_1.1.1_Create_Separate_Partition_for_tmp"
             role="full"
             severity="unknown"
             time="2015-11-09T16:01:32.495-06:00"
             version="1"
             weight="1.0">
   <result>pass</result>
   <metadata>
      <cis:evidence xmlns:cis="http://benchmarks.cisecurity.org/evidence/1.0"
                    end-time="2015-11-09T16:01:32.495-06:00"
                    start-time="2015-11-09T16:01:32.452-06:00">
         <cis:and>
            <cis:evidence_test check="all" check_existence="at_least_one_exists"
                               comment="Ensure /tmp partition exists"
                               negated="false"
                               ns="linux"
                               objref="oval:org.cisecurity.benchmarks.o_centos_centos:obj:10003"
                               result="true"
                               testref="oval:org.cisecurity.benchmarks.o_centos_centos:tst:10003"
                               type="partition_test">
               <cis:evidence_object>
                  <cis:evidence_item itemref="256151834">
                     <cis:evidence_item_pk status="exists">
                        <cis:evidence_item_pk_field name="mount_point" value="/tmp"/>
                     </cis:evidence_item_pk>
                  </cis:evidence_item>
               </cis:evidence_object>
            </cis:evidence_test>
         </cis:and>
      </cis:evidence>
   </metadata>
   <complex-check operator="AND">
      <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
         <check-content-ref href="CIS_CentOS_Linux_7_Benchmark_v1.1.0-oval.xml"
                            name="oval:org.cisecurity.benchmarks.o_centos_centos:def:1002"/>
      </check>
   </complex-check>
</rule-result>

<rule-result xmlns="http://checklists.nist.gov/xccdf/1.2"
             xmlns:xccdf="http://checklists.nist.gov/xccdf/1.2"
             xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
             idref="xccdf_org.cisecurity.benchmarks_rule_1.1.2_Set_nodev_option_for_tmp_Partition"
             role="full"
             severity="unknown"
             time="2015-11-09T16:01:32.146-06:00"
             version="1"
             weight="1.0">
   <result>pass</result>
   <metadata>
      <cis:evidence xmlns:cis="http://benchmarks.cisecurity.org/evidence/1.0"
                    end-time="2015-11-09T16:01:32.146-06:00"
                    start-time="2015-11-09T16:01:32.087-06:00">
         <cis:and>
            <cis:evidence_test check="all" check_existence="at_least_one_exists"
                               comment="Ensure /tmp partition options Set Includes nodev (string)"
                               negated="false"
                               ns="linux"
                               objref="oval:org.cisecurity.benchmarks.o_centos_centos:obj:10004"
                               result="true"
                               testref="oval:org.cisecurity.benchmarks.o_centos_centos:tst:10004"
                               type="partition_test">
               <cis:evidence_state steref="oval:org.cisecurity.benchmarks.o_centos_centos:ste:10003">
                  <cis:evidence_item entity_check="at least one" itemref="1264782638">
                     <cis:evidence_item_pk status="exists">
                        <cis:evidence_item_pk_field name="mount_point" value="/tmp"/>
                     </cis:evidence_item_pk>
                     <cis:evidence_field cv="rw" dt="string" ev="nodev" name="mount_options" op="equals" result="false"/>
                     <cis:evidence_field cv="nosuid" dt="string" ev="nodev" name="mount_options" op="equals"
                                         result="false"/>
                     <cis:evidence_field cv="nodev" dt="string" ev="nodev" name="mount_options" op="equals"
                                         result="true"/>
                     <cis:evidence_field cv="relatime" dt="string" ev="nodev" name="mount_options" op="equals"
                                         result="false"/>
                     <cis:evidence_field cv="attr2" dt="string" ev="nodev" name="mount_options" op="equals"
                                         result="false"/>
                     <cis:evidence_field cv="inode64" dt="string" ev="nodev" name="mount_options" op="equals"
                                         result="false"/>
                     <cis:evidence_field cv="noquota" dt="string" ev="nodev" name="mount_options" op="equals"
                                         result="false"/>
                  </cis:evidence_item>
               </cis:evidence_state>
            </cis:evidence_test>
         </cis:and>
      </cis:evidence>
   </metadata>
   <complex-check operator="AND">
      <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
         <check-content-ref href="CIS_CentOS_Linux_7_Benchmark_v1.1.0-oval.xml"
                            name="oval:org.cisecurity.benchmarks.o_centos_centos:def:1003"/>
      </check>
   </complex-check>
</rule-result>

<rule-result xmlns="http://checklists.nist.gov/xccdf/1.2"
             xmlns:xccdf="http://checklists.nist.gov/xccdf/1.2"
             xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
             idref="xccdf_org.cisecurity.benchmarks_rule_1.1.3_Set_nosuid_option_for_tmp_Partition"
             role="full"
             severity="unknown"
             time="2015-11-09T16:01:32.451-06:00"
             version="1"
             weight="1.0">
   <result>pass</result>
   <metadata>
      <cis:evidence xmlns:cis="http://benchmarks.cisecurity.org/evidence/1.0"
                    end-time="2015-11-09T16:01:32.452-06:00"
                    start-time="2015-11-09T16:01:32.403-06:00">
         <cis:and>
            <cis:evidence_test check="all" check_existence="at_least_one_exists"
                               comment="Ensure /tmp partition options Set Includes nosuid (string)"
                               negated="false"
                               ns="linux"
                               objref="oval:org.cisecurity.benchmarks.o_centos_centos:obj:10005"
                               result="true"
                               testref="oval:org.cisecurity.benchmarks.o_centos_centos:tst:10005"
                               type="partition_test">
               <cis:evidence_state steref="oval:org.cisecurity.benchmarks.o_centos_centos:ste:10004">
                  <cis:evidence_item entity_check="at least one" itemref="1976053830">
                     <cis:evidence_item_pk status="exists">
                        <cis:evidence_item_pk_field name="mount_point" value="/tmp"/>
                     </cis:evidence_item_pk>
                     <cis:evidence_field cv="rw" dt="string" ev="nosuid" name="mount_options" op="equals" result="false"/>
                     <cis:evidence_field cv="nosuid" dt="string" ev="nosuid" name="mount_options" op="equals"
                                         result="true"/>
                     <cis:evidence_field cv="nodev" dt="string" ev="nosuid" name="mount_options" op="equals"
                                         result="false"/>
                     <cis:evidence_field cv="relatime" dt="string" ev="nosuid" name="mount_options" op="equals"
                                         result="false"/>
                     <cis:evidence_field cv="attr2" dt="string" ev="nosuid" name="mount_options" op="equals"
                                         result="false"/>
                     <cis:evidence_field cv="inode64" dt="string" ev="nosuid" name="mount_options" op="equals"
                                         result="false"/>
                     <cis:evidence_field cv="noquota" dt="string" ev="nosuid" name="mount_options" op="equals"
                                         result="false"/>
                  </cis:evidence_item>
               </cis:evidence_state>
            </cis:evidence_test>
         </cis:and>
      </cis:evidence>
   </metadata>
   <complex-check operator="AND">
      <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
         <check-content-ref href="CIS_CentOS_Linux_7_Benchmark_v1.1.0-oval.xml"
                            name="oval:org.cisecurity.benchmarks.o_centos_centos:def:1004"/>
      </check>
   </complex-check>
</rule-result>

<rule-result xmlns="http://checklists.nist.gov/xccdf/1.2"
             xmlns:xccdf="http://checklists.nist.gov/xccdf/1.2"
             xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
             idref="xccdf_org.cisecurity.benchmarks_rule_1.1.5_Create_Separate_Partition_for_var"
             role="full"
             severity="unknown"
             time="2015-11-09T16:01:33.020-06:00"
             version="1"
             weight="1.0">
   <result>pass</result>
   <metadata>
      <cis:evidence xmlns:cis="http://benchmarks.cisecurity.org/evidence/1.0"
                    end-time="2015-11-09T16:01:33.021-06:00"
                    start-time="2015-11-09T16:01:32.956-06:00">
         <cis:and>
            <cis:evidence_test check="all" check_existence="at_least_one_exists"
                               comment="Ensure /var partition exists"
                               negated="false"
                               ns="linux"
                               objref="oval:org.cisecurity.benchmarks.o_centos_centos:obj:10007"
                               result="true"
                               testref="oval:org.cisecurity.benchmarks.o_centos_centos:tst:10007"
                               type="partition_test">
               <cis:evidence_object>
                  <cis:evidence_item itemref="865440348">
                     <cis:evidence_item_pk status="exists">
                        <cis:evidence_item_pk_field name="mount_point" value="/var"/>
                     </cis:evidence_item_pk>
                  </cis:evidence_item>
               </cis:evidence_object>
            </cis:evidence_test>
         </cis:and>
      </cis:evidence>
   </metadata>
   <complex-check operator="AND">
      <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
         <check-content-ref href="CIS_CentOS_Linux_7_Benchmark_v1.1.0-oval.xml"
                            name="oval:org.cisecurity.benchmarks.o_centos_centos:def:1006"/>
      </check>
   </complex-check>
</rule-result>

<rule-result xmlns="http://checklists.nist.gov/xccdf/1.2"
             xmlns:xccdf="http://checklists.nist.gov/xccdf/1.2"
             xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
             idref="xccdf_org.cisecurity.benchmarks_rule_1.1.6_Bind_Mount_the_vartmp_directory_to_tmp"
             role="full"
             severity="unknown"
             time="2015-11-09T16:01:33.356-06:00"
             version="1"
             weight="1.0">
   <result>pass</result>
   <metadata>
      <cis:evidence xmlns:cis="http://benchmarks.cisecurity.org/evidence/1.0"
                    end-time="2015-11-09T16:01:33.357-06:00"
                    start-time="2015-11-09T16:01:33.354-06:00">
         <cis:and>
            <cis:evidence_test check="all" check_existence="at_least_one_exists"
                               comment="Ensure /etc/fstab contents pattern match $\s*/tmp\s+/var/tmp\s+none\s+bind\s+0\s+0\s*$ (string)"
                               negated="false"
                               ns="independent"
                               objref="oval:org.cisecurity.benchmarks.o_centos_centos:obj:10008"
                               result="true"
                               testref="oval:org.cisecurity.benchmarks.o_centos_centos:tst:10008"
                               type="textfilecontent54_test">
               <cis:evidence_object>
                  <cis:evidence_item itemref="459204301">
                     <cis:evidence_item_pk status="exists">
                        <cis:evidence_item_pk_field name="filepath" value="/etc/fstab"/>
                        <cis:evidence_item_pk_field name="path" value="/etc"/>
                        <cis:evidence_item_pk_field name="filename" value="fstab"/>
                        <cis:evidence_item_pk_field name="pattern" value="$\s*/tmp\s+/var/tmp\s+none\s+bind\s+0\s+0\s*$"/>
                        <cis:evidence_item_pk_field name="instance" value="1"/>
                        <cis:evidence_item_pk_field name="text" value=" /tmp /var/tmp none bind 0 0"/>
                     </cis:evidence_item_pk>
                  </cis:evidence_item>
               </cis:evidence_object>
            </cis:evidence_test>
         </cis:and>
      </cis:evidence>
   </metadata>
   <complex-check operator="AND">
      <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
         <check-export export-name="oval:org.cisecurity.benchmarks.o_centos_centos:var:1007"
                       value-id="xccdf_org.cisecurity.benchmarks_value_1.1.6.1_var"/>
         <check-content-ref href="CIS_CentOS_Linux_7_Benchmark_v1.1.0-oval.xml"
                            name="oval:org.cisecurity.benchmarks.o_centos_centos:def:1007"/>
      </check>
   </complex-check>
</rule-result>

<rule-result xmlns="http://checklists.nist.gov/xccdf/1.2"
             xmlns:xccdf="http://checklists.nist.gov/xccdf/1.2"
             xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
             idref="xccdf_org.cisecurity.benchmarks_rule_1.1.7_Create_Separate_Partition_for_varlog"
             role="full"
             severity="unknown"
             time="2015-11-09T16:01:31.033-06:00"
             version="1"
             weight="1.0">
   <result>pass</result>
   <metadata>
      <cis:evidence xmlns:cis="http://benchmarks.cisecurity.org/evidence/1.0"
                    end-time="2015-11-09T16:01:31.033-06:00"
                    start-time="2015-11-09T16:01:30.971-06:00">
         <cis:and>
            <cis:evidence_test check="all" check_existence="at_least_one_exists"
                               comment="Ensure /var/log partition exists"
                               negated="false"
                               ns="linux"
                               objref="oval:org.cisecurity.benchmarks.o_centos_centos:obj:10009"
                               result="true"
                               testref="oval:org.cisecurity.benchmarks.o_centos_centos:tst:10009"
                               type="partition_test">
               <cis:evidence_object>
                  <cis:evidence_item itemref="1506415844">
                     <cis:evidence_item_pk status="exists">
                        <cis:evidence_item_pk_field name="mount_point" value="/var/log"/>
                     </cis:evidence_item_pk>
                  </cis:evidence_item>
               </cis:evidence_object>
            </cis:evidence_test>
         </cis:and>
      </cis:evidence>
   </metadata>
   <complex-check operator="AND">
      <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
         <check-content-ref href="CIS_CentOS_Linux_7_Benchmark_v1.1.0-oval.xml"
                            name="oval:org.cisecurity.benchmarks.o_centos_centos:def:1008"/>
      </check>
   </complex-check>
</rule-result>

<rule-result xmlns="http://checklists.nist.gov/xccdf/1.2"
             xmlns:xccdf="http://checklists.nist.gov/xccdf/1.2"
             xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
             idref="xccdf_org.cisecurity.benchmarks_rule_1.1.8_Create_Separate_Partition_for_varlogaudit"
             role="full"
             severity="unknown"
             time="2015-11-09T16:01:33.822-06:00"
             version="1"
             weight="1.0">
   <result>pass</result>
   <metadata>
      <cis:evidence xmlns:cis="http://benchmarks.cisecurity.org/evidence/1.0"
                    end-time="2015-11-09T16:01:33.822-06:00"
                    start-time="2015-11-09T16:01:33.773-06:00">
         <cis:and>
            <cis:evidence_test check="all" check_existence="at_least_one_exists"
                               comment="Ensure /var/log/audit partition exists"
                               negated="false"
                               ns="linux"
                               objref="oval:org.cisecurity.benchmarks.o_centos_centos:obj:10010"
                               result="true"
                               testref="oval:org.cisecurity.benchmarks.o_centos_centos:tst:10010"
                               type="partition_test">
               <cis:evidence_object>
                  <cis:evidence_item itemref="925516587">
                     <cis:evidence_item_pk status="exists">
                        <cis:evidence_item_pk_field name="mount_point" value="/var/log/audit"/>
                     </cis:evidence_item_pk>
                  </cis:evidence_item>
               </cis:evidence_object>
            </cis:evidence_test>
         </cis:and>
      </cis:evidence>
   </metadata>
   <complex-check operator="AND">
      <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
         <check-content-ref href="CIS_CentOS_Linux_7_Benchmark_v1.1.0-oval.xml"
                            name="oval:org.cisecurity.benchmarks.o_centos_centos:def:1009"/>
      </check>
   </complex-check>
</rule-result>

<rule-result xmlns="http://checklists.nist.gov/xccdf/1.2"
             xmlns:xccdf="http://checklists.nist.gov/xccdf/1.2"
             xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
             idref="xccdf_org.cisecurity.benchmarks_rule_1.1.9_Create_Separate_Partition_for_home"
             role="full"
             severity="unknown"
             time="2015-11-09T16:01:33.700-06:00"
             version="1"
             weight="1.0">
   <result>pass</result>
   <metadata>
      <cis:evidence xmlns:cis="http://benchmarks.cisecurity.org/evidence/1.0"
                    end-time="2015-11-09T16:01:33.700-06:00"
                    start-time="2015-11-09T16:01:33.650-06:00">
         <cis:and>
            <cis:evidence_test check="all" check_existence="at_least_one_exists"
                               comment="Ensure /home partition exists"
                               negated="false"
                               ns="linux"
                               objref="oval:org.cisecurity.benchmarks.o_centos_centos:obj:10011"
                               result="true"
                               testref="oval:org.cisecurity.benchmarks.o_centos_centos:tst:10011"
                               type="partition_test">
               <cis:evidence_object>
                  <cis:evidence_item itemref="1795323158">
                     <cis:evidence_item_pk status="exists">
                        <cis:evidence_item_pk_field name="mount_point" value="/home"/>
                     </cis:evidence_item_pk>
                  </cis:evidence_item>
               </cis:evidence_object>
            </cis:evidence_test>
         </cis:and>
      </cis:evidence>
   </metadata>
   <complex-check operator="AND">
      <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
         <check-content-ref href="CIS_CentOS_Linux_7_Benchmark_v1.1.0-oval.xml"
                            name="oval:org.cisecurity.benchmarks.o_centos_centos:def:1010"/>
      </check>
   </complex-check>
</rule-result>

<rule-result xmlns="http://checklists.nist.gov/xccdf/1.2"
             xmlns:xccdf="http://checklists.nist.gov/xccdf/1.2"
             xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
             idref="xccdf_org.cisecurity.benchmarks_rule_1.1.10_Add_nodev_Option_to_home"
             role="full"
             severity="unknown"
             time="2015-11-09T16:01:33.141-06:00"
             version="1"
             weight="1.0">
   <result>pass</result>
   <metadata>
      <cis:evidence xmlns:cis="http://benchmarks.cisecurity.org/evidence/1.0"
                    end-time="2015-11-09T16:01:33.141-06:00"
                    start-time="2015-11-09T16:01:33.096-06:00">
         <cis:and>
            <cis:evidence_test check="all" check_existence="at_least_one_exists"
                               comment="Ensure /home partition options Set Includes nodev (string)"
                               negated="false"
                               ns="linux"
                               objref="oval:org.cisecurity.benchmarks.o_centos_centos:obj:10012"
                               result="true"
                               testref="oval:org.cisecurity.benchmarks.o_centos_centos:tst:10012"
                               type="partition_test">
               <cis:evidence_state steref="oval:org.cisecurity.benchmarks.o_centos_centos:ste:10006">
                  <cis:evidence_item entity_check="at least one" itemref="742916722">
                     <cis:evidence_item_pk status="exists">
                        <cis:evidence_item_pk_field name="mount_point" value="/home"/>
                     </cis:evidence_item_pk>
                     <cis:evidence_field cv="rw" dt="string" ev="nodev" name="mount_options" op="equals" result="false"/>
                     <cis:evidence_field cv="nodev" dt="string" ev="nodev" name="mount_options" op="equals"
                                         result="true"/>
                     <cis:evidence_field cv="relatime" dt="string" ev="nodev" name="mount_options" op="equals"
                                         result="false"/>
                     <cis:evidence_field cv="attr2" dt="string" ev="nodev" name="mount_options" op="equals"
                                         result="false"/>
                     <cis:evidence_field cv="inode64" dt="string" ev="nodev" name="mount_options" op="equals"
                                         result="false"/>
                     <cis:evidence_field cv="noquota" dt="string" ev="nodev" name="mount_options" op="equals"
                                         result="false"/>
                  </cis:evidence_item>
               </cis:evidence_state>
            </cis:evidence_test>
         </cis:and>
      </cis:evidence>
   </metadata>
   <complex-check operator="AND">
      <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
         <check-content-ref href="CIS_CentOS_Linux_7_Benchmark_v1.1.0-oval.xml"
                            name="oval:org.cisecurity.benchmarks.o_centos_centos:def:1011"/>
      </check>
   </complex-check>
</rule-result>

<rule-result xmlns="http://checklists.nist.gov/xccdf/1.2"
             xmlns:xccdf="http://checklists.nist.gov/xccdf/1.2"
             xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
             idref="xccdf_org.cisecurity.benchmarks_rule_1.1.14_Add_nodev_Option_to_devshm_Partition"
             role="full"
             severity="unknown"
             time="2015-11-09T16:01:33.402-06:00"
             version="1"
             weight="1.0">
   <result>pass</result>
   <metadata>
      <cis:evidence xmlns:cis="http://benchmarks.cisecurity.org/evidence/1.0"
                    end-time="2015-11-09T16:01:33.402-06:00"
                    start-time="2015-11-09T16:01:33.357-06:00">
         <cis:and>
            <cis:evidence_test check="all" check_existence="at_least_one_exists"
                               comment="Ensure /dev/shm partition options Set Includes nodev (string)"
                               negated="false"
                               ns="linux"
                               objref="oval:org.cisecurity.benchmarks.o_centos_centos:obj:10013"
                               result="true"
                               testref="oval:org.cisecurity.benchmarks.o_centos_centos:tst:10013"
                               type="partition_test">
               <cis:evidence_state steref="oval:org.cisecurity.benchmarks.o_centos_centos:ste:10007">
                  <cis:evidence_item entity_check="at least one" itemref="684276358">
                     <cis:evidence_item_pk status="exists">
                        <cis:evidence_item_pk_field name="mount_point" value="/dev/shm"/>
                     </cis:evidence_item_pk>
                     <cis:evidence_field cv="rw" dt="string" ev="nodev" name="mount_options" op="equals" result="false"/>
                     <cis:evidence_field cv="nosuid" dt="string" ev="nodev" name="mount_options" op="equals"
                                         result="false"/>
                     <cis:evidence_field cv="nodev" dt="string" ev="nodev" name="mount_options" op="equals"
                                         result="true"/>
                     <cis:evidence_field cv="noexec" dt="string" ev="nodev" name="mount_options" op="equals"
                                         result="false"/>
                     <cis:evidence_field cv="relatime" dt="string" ev="nodev" name="mount_options" op="equals"
                                         result="false"/>
                  </cis:evidence_item>
               </cis:evidence_state>
            </cis:evidence_test>
         </cis:and>
      </cis:evidence>
   </metadata>
   <complex-check operator="AND">
      <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
         <check-content-ref href="CIS_CentOS_Linux_7_Benchmark_v1.1.0-oval.xml"
                            name="oval:org.cisecurity.benchmarks.o_centos_centos:def:1012"/>
      </check>
   </complex-check>
</rule-result>

<rule-result xmlns="http://checklists.nist.gov/xccdf/1.2"
             xmlns:xccdf="http://checklists.nist.gov/xccdf/1.2"
             xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
             idref="xccdf_org.cisecurity.benchmarks_rule_1.1.15_Add_nosuid_Option_to_devshm_Partition"
             role="full"
             severity="unknown"
             time="2015-11-09T16:01:33.449-06:00"
             version="1"
             weight="1.0">
   <result>pass</result>
   <metadata>
      <cis:evidence xmlns:cis="http://benchmarks.cisecurity.org/evidence/1.0"
                    end-time="2015-11-09T16:01:33.449-06:00"
                    start-time="2015-11-09T16:01:33.403-06:00">
         <cis:and>
            <cis:evidence_test check="all" check_existence="at_least_one_exists"
                               comment="Ensure /dev/shm partition options Set Includes nosuid (string)"
                               negated="false"
                               ns="linux"
                               objref="oval:org.cisecurity.benchmarks.o_centos_centos:obj:10014"
                               result="true"
                               testref="oval:org.cisecurity.benchmarks.o_centos_centos:tst:10014"
                               type="partition_test">
               <cis:evidence_state steref="oval:org.cisecurity.benchmarks.o_centos_centos:ste:10008">
                  <cis:evidence_item entity_check="at least one" itemref="1299865175">
                     <cis:evidence_item_pk status="exists">
                        <cis:evidence_item_pk_field name="mount_point" value="/dev/shm"/>
                     </cis:evidence_item_pk>
                     <cis:evidence_field cv="rw" dt="string" ev="nosuid" name="mount_options" op="equals" result="false"/>
                     <cis:evidence_field cv="nosuid" dt="string" ev="nosuid" name="mount_options" op="equals"
                                         result="true"/>
                     <cis:evidence_field cv="nodev" dt="string" ev="nosuid" name="mount_options" op="equals"
                                         result="false"/>
                     <cis:evidence_field cv="noexec" dt="string" ev="nosuid" name="mount_options" op="equals"
                                         result="false"/>
                     <cis:evidence_field cv="relatime" dt="string" ev="nosuid" name="mount_options" op="equals"
                                         result="false"/>
                  </cis:evidence_item>
               </cis:evidence_state>
            </cis:evidence_test>
         </cis:and>
      </cis:evidence>
   </metadata>
   <complex-check operator="AND">
      <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
         <check-content-ref href="CIS_CentOS_Linux_7_Benchmark_v1.1.0-oval.xml"
                            name="oval:org.cisecurity.benchmarks.o_centos_centos:def:1013"/>
      </check>
   </complex-check>
</rule-result>

<rule-result xmlns="http://checklists.nist.gov/xccdf/1.2"
             xmlns:xccdf="http://checklists.nist.gov/xccdf/1.2"
             xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
             idref="xccdf_org.cisecurity.benchmarks_rule_1.1.16_Add_noexec_Option_to_devshm_Partition"
             role="full"
             severity="unknown"
             time="2015-11-09T16:01:30.666-06:00"
             version="1"
             weight="1.0">
   <result>pass</result>
   <metadata>
      <cis:evidence xmlns:cis="http://benchmarks.cisecurity.org/evidence/1.0"
                    end-time="2015-11-09T16:01:30.666-06:00"
                    start-time="2015-11-09T16:01:30.495-06:00">
         <cis:and>
            <cis:evidence_test check="all" check_existence="at_least_one_exists"
                               comment="Ensure /dev/shm partition options Set Includes noexec (string)"
                               negated="false"
                               ns="linux"
                               objref="oval:org.cisecurity.benchmarks.o_centos_centos:obj:10015"
                               result="true"
                               testref="oval:org.cisecurity.benchmarks.o_centos_centos:tst:10015"
                               type="partition_test">
               <cis:evidence_state steref="oval:org.cisecurity.benchmarks.o_centos_centos:ste:10009">
                  <cis:evidence_item entity_check="at least one" itemref="1996771451">
                     <cis:evidence_item_pk status="exists">
                        <cis:evidence_item_pk_field name="mount_point" value="/dev/shm"/>
                     </cis:evidence_item_pk>
                     <cis:evidence_field cv="rw" dt="string" ev="noexec" name="mount_options" op="equals" result="false"/>
                     <cis:evidence_field cv="nosuid" dt="string" ev="noexec" name="mount_options" op="equals"
                                         result="false"/>
                     <cis:evidence_field cv="nodev" dt="string" ev="noexec" name="mount_options" op="equals"
                                         result="false"/>
                     <cis:evidence_field cv="noexec" dt="string" ev="noexec" name="mount_options" op="equals"
                                         result="true"/>
                     <cis:evidence_field cv="relatime" dt="string" ev="noexec" name="mount_options" op="equals"
                                         result="false"/>
                  </cis:evidence_item>
               </cis:evidence_state>
            </cis:evidence_test>
         </cis:and>
      </cis:evidence>
   </metadata>
   <complex-check operator="AND">
      <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
         <check-content-ref href="CIS_CentOS_Linux_7_Benchmark_v1.1.0-oval.xml"
                            name="oval:org.cisecurity.benchmarks.o_centos_centos:def:1014"/>
      </check>
   </complex-check>
</rule-result>

<rule-result xmlns="http://checklists.nist.gov/xccdf/1.2"
             xmlns:xccdf="http://checklists.nist.gov/xccdf/1.2"
             xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
             idref="xccdf_org.cisecurity.benchmarks_rule_1.1.17_Set_Sticky_Bit_on_All_World-Writable_Directories"
             role="full"
             severity="unknown"
             time="2015-11-09T16:01:30.157-06:00"
             version="1"
             weight="1.0">
   <result>pass</result>
   <metadata>
      <cis:evidence xmlns:cis="http://benchmarks.cisecurity.org/evidence/1.0"
                    end-time="2015-11-09T16:01:30.158-06:00"
                    start-time="2015-11-09T16:01:29.233-06:00">
         <cis:and>
            <cis:evidence_test check="all" check_existence="none_exist"
                               comment="Linux Custom Object &#34;All World Writable Directories Have Sticky Bit Set&#34;"
                               negated="false"
                               ns="unix"
                               objref="oval:org.cisecurity.benchmarks.o_centos_centos:obj:10016"
                               result="true"
                               testref="oval:org.cisecurity.benchmarks.o_centos_centos:tst:10016"
                               type="file_test">
               <cis:evidence_object>
                  <cis:evidence_item itemref="827753408">
                     <cis:evidence_item_pk status="does not exist">
                        <cis:evidence_item_pk_field name="path" value="/"/>
                        <cis:evidence_item_pk_field name="filename" value="NIL"/>
                     </cis:evidence_item_pk>
                  </cis:evidence_item>
               </cis:evidence_object>
            </cis:evidence_test>
         </cis:and>
      </cis:evidence>
   </metadata>
   <complex-check operator="AND">
      <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
         <check-content-ref href="CIS_CentOS_Linux_7_Benchmark_v1.1.0-oval.xml"
                            name="oval:org.cisecurity.benchmarks.o_centos_centos:def:1015"/>
      </check>
   </complex-check>
</rule-result>

<rule-result xmlns="http://checklists.nist.gov/xccdf/1.2"
             xmlns:xccdf="http://checklists.nist.gov/xccdf/1.2"
             xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
             idref="xccdf_org.cisecurity.benchmarks_rule_1.2.1_Verify_CentOS_GPG_Key_is_Installed"
             role="full"
             severity="unknown"
             time="2015-11-09T16:01:33.772-06:00"
             version="1"
             weight="1.0">
   <result>pass</result>
   <metadata>
      <cis:evidence xmlns:cis="http://benchmarks.cisecurity.org/evidence/1.0"
                    end-time="2015-11-09T16:01:33.772-06:00"
                    start-time="2015-11-09T16:01:33.700-06:00">
         <cis:and>
            <cis:evidence_test check="all" check_existence="at_least_one_exists"
                               comment="Ensure gpg-pubkey package is installed"
                               negated="false"
                               ns="linux"
                               objref="oval:org.cisecurity.benchmarks.o_centos_centos:obj:10017"
                               result="true"
                               testref="oval:org.cisecurity.benchmarks.o_centos_centos:tst:10017"
                               type="rpminfo_test">
               <cis:evidence_object>
                  <cis:evidence_item itemref="1639600090">
                     <cis:evidence_item_pk status="exists">
                        <cis:evidence_item_pk_field name="name" value="gpg-pubkey"/>
                     </cis:evidence_item_pk>
                  </cis:evidence_item>
               </cis:evidence_object>
            </cis:evidence_test>
         </cis:and>
      </cis:evidence>
   </metadata>
   <complex-check operator="AND">
      <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
         <check-content-ref href="CIS_CentOS_Linux_7_Benchmark_v1.1.0-oval.xml"
                            name="oval:org.cisecurity.benchmarks.o_centos_centos:def:1016"/>
      </check>
   </complex-check>
</rule-result>

<rule-result xmlns="http://checklists.nist.gov/xccdf/1.2"
             xmlns:xccdf="http://checklists.nist.gov/xccdf/1.2"
             xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
             idref="xccdf_org.cisecurity.benchmarks_rule_1.2.2_Verify_that_gpgcheck_is_Globally_Activated"
             role="full"
             severity="unknown"
             time="2015-11-09T16:01:33.474-06:00"
             version="1"
             weight="1.0">
   <result>pass</result>
   <metadata>
      <cis:evidence xmlns:cis="http://benchmarks.cisecurity.org/evidence/1.0"
                    end-time="2015-11-09T16:01:33.474-06:00"
                    start-time="2015-11-09T16:01:33.471-06:00">
         <cis:and>
            <cis:evidence_test check="all" check_existence="at_least_one_exists"
                               comment="Ensure /etc/yum.conf contents pattern match ^\s*gpgcheck=1\s*(#.*)?$ (string)"
                               negated="false"
                               ns="independent"
                               objref="oval:org.cisecurity.benchmarks.o_centos_centos:obj:10018"
                               result="true"
                               testref="oval:org.cisecurity.benchmarks.o_centos_centos:tst:10018"
                               type="textfilecontent54_test">
               <cis:evidence_object>
                  <cis:evidence_item itemref="2083996210">
                     <cis:evidence_item_pk status="exists">
                        <cis:evidence_item_pk_field name="filepath" value="/etc/yum.conf"/>
                        <cis:evidence_item_pk_field name="path" value="/etc"/>
                        <cis:evidence_item_pk_field name="filename" value="yum.conf"/>
                        <cis:evidence_item_pk_field name="pattern" value="^\s*gpgcheck=1\s*(#.*)?$"/>
                        <cis:evidence_item_pk_field name="instance" value="1"/>
                        <cis:evidence_item_pk_field name="text" value="gpgcheck=1"/>
                     </cis:evidence_item_pk>
                  </cis:evidence_item>
               </cis:evidence_object>
            </cis:evidence_test>
         </cis:and>
      </cis:evidence>
   </metadata>
   <complex-check operator="AND">
      <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
         <check-export export-name="oval:org.cisecurity.benchmarks.o_centos_centos:var:1017"
                       value-id="xccdf_org.cisecurity.benchmarks_value_1.2.2.1_var"/>
         <check-content-ref href="CIS_CentOS_Linux_7_Benchmark_v1.1.0-oval.xml"
                            name="oval:org.cisecurity.benchmarks.o_centos_centos:def:1017"/>
      </check>
   </complex-check>
</rule-result>

<rule-result xmlns="http://checklists.nist.gov/xccdf/1.2"
             xmlns:xccdf="http://checklists.nist.gov/xccdf/1.2"
             xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
             idref="xccdf_org.cisecurity.benchmarks_rule_1.5.1_Set_UserGroup_Owner_on_bootgrub2grub.cfg"
             role="full"
             severity="unknown"
             time="2015-11-09T16:01:28.563-06:00"
             version="1"
             weight="1.0">
   <result>pass</result>
   <metadata>
      <cis:evidence xmlns:cis="http://benchmarks.cisecurity.org/evidence/1.0"
                    end-time="2015-11-09T16:01:28.564-06:00"
                    start-time="2015-11-09T16:01:28.501-06:00">
         <cis:and>
            <cis:evidence_test check="all" check_existence="at_least_one_exists"
                               comment="Ensure /boot/grub2/ is owned by user '0' group '0'"
                               negated="false"
                               ns="unix"
                               objref="oval:org.cisecurity.benchmarks.o_centos_centos:obj:10028"
                               result="true"
                               testref="oval:org.cisecurity.benchmarks.o_centos_centos:tst:10028"
                               type="file_test">
               <cis:evidence_state steref="oval:org.cisecurity.benchmarks.o_centos_centos:ste:10012">
                  <cis:evidence_item itemref="767334039">
                     <cis:evidence_item_pk status="exists">
                        <cis:evidence_item_pk_field name="filepath" value="/boot/grub2/grub.cfg"/>
                        <cis:evidence_item_pk_field name="path" value="/boot/grub2"/>
                        <cis:evidence_item_pk_field name="filename" value="grub.cfg"/>
                     </cis:evidence_item_pk>
                     <cis:evidence_field cv="0" dt="int" ev="0" name="group_id" op="equals" result="true"/>
                     <cis:evidence_field cv="0" dt="int" ev="0" name="user_id" op="equals" result="true"/>
                  </cis:evidence_item>
               </cis:evidence_state>
            </cis:evidence_test>
         </cis:and>
      </cis:evidence>
   </metadata>
   <complex-check operator="AND">
      <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
         <check-content-ref href="CIS_CentOS_Linux_7_Benchmark_v1.1.0-oval.xml"
                            name="oval:org.cisecurity.benchmarks.o_centos_centos:def:1027"/>
      </check>
   </complex-check>
</rule-result>

<rule-result xmlns="http://checklists.nist.gov/xccdf/1.2"
             xmlns:xccdf="http://checklists.nist.gov/xccdf/1.2"
             xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
             idref="xccdf_org.cisecurity.benchmarks_rule_1.5.2_Set_Permissions_on_bootgrub2grub.cfg"
             role="full"
             severity="unknown"
             time="2015-11-09T16:01:32.196-06:00"
             version="1"
             weight="1.0">
   <result>pass</result>
   <metadata>
      <cis:evidence xmlns:cis="http://benchmarks.cisecurity.org/evidence/1.0"
                    end-time="2015-11-09T16:01:32.196-06:00"
                    start-time="2015-11-09T16:01:32.185-06:00">
         <cis:and>
            <cis:evidence_test check="all" check_existence="all_exist"
                               comment="Ensure all_exist /boot/grub2/grub.cfg has permission bits --------- and does not have permissions ---rwxrwx"
                               negated="false"
                               ns="unix"
                               objref="oval:org.cisecurity.benchmarks.o_centos_centos:obj:10029"
                               result="true"
                               testref="oval:org.cisecurity.benchmarks.o_centos_centos:tst:10029"
                               type="file_test">
               <cis:evidence_state steref="oval:org.cisecurity.benchmarks.o_centos_centos:ste:10013">
                  <cis:evidence_item itemref="1715785195">
                     <cis:evidence_item_pk status="exists">
                        <cis:evidence_item_pk_field name="filepath" value="/boot/grub2/grub.cfg"/>
                        <cis:evidence_item_pk_field name="path" value="/boot/grub2"/>
                        <cis:evidence_item_pk_field name="filename" value="grub.cfg"/>
                     </cis:evidence_item_pk>
                     <cis:evidence_field cv="false" dt="boolean" ev="false" name="gexec" op="equals" result="true"/>
                     <cis:evidence_field cv="false" dt="boolean" ev="false" name="oread" op="equals" result="true"/>
                     <cis:evidence_field cv="false" dt="boolean" ev="false" name="oexec" op="equals" result="true"/>
                     <cis:evidence_field cv="false" dt="boolean" ev="false" name="owrite" op="equals" result="true"/>
                     <cis:evidence_field cv="false" dt="boolean" ev="false" name="gread" op="equals" result="true"/>
                     <cis:evidence_field cv="false" dt="boolean" ev="false" name="gwrite" op="equals" result="true"/>
                  </cis:evidence_item>
               </cis:evidence_state>
            </cis:evidence_test>
         </cis:and>
      </cis:evidence>
   </metadata>
   <complex-check operator="AND">
      <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
         <check-content-ref href="CIS_CentOS_Linux_7_Benchmark_v1.1.0-oval.xml"
                            name="oval:org.cisecurity.benchmarks.o_centos_centos:def:1028"/>
      </check>
   </complex-check>
</rule-result>

<rule-result xmlns="http://checklists.nist.gov/xccdf/1.2"
             xmlns:xccdf="http://checklists.nist.gov/xccdf/1.2"
             xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
             idref="xccdf_org.cisecurity.benchmarks_rule_1.6.1_Restrict_Core_Dumps"
             role="full"
             severity="unknown"
             time="2015-11-09T16:01:33.856-06:00"
             version="1"
             weight="1.0">
   <result>pass</result>
   <metadata>
      <cis:evidence xmlns:cis="http://benchmarks.cisecurity.org/evidence/1.0"
                    end-time="2015-11-09T16:01:33.857-06:00"
                    start-time="2015-11-09T16:01:33.853-06:00">
         <cis:and>
            <cis:evidence_test check="all" check_existence="at_least_one_exists"
                               comment="Ensure 'fs.suid_dumpable' kernel parameter equals 0 (int)"
                               negated="false"
                               ns="unix"
                               objref="oval:org.cisecurity.benchmarks.o_centos_centos:obj:10033"
                               result="true"
                               testref="oval:org.cisecurity.benchmarks.o_centos_centos:tst:10033"
                               type="sysctl_test">
               <cis:evidence_state steref="oval:org.cisecurity.benchmarks.o_centos_centos:ste:10014">
                  <cis:evidence_item itemref="67523818">
                     <cis:evidence_item_pk status="exists">
                        <cis:evidence_item_pk_field name="name" value="fs.suid_dumpable"/>
                     </cis:evidence_item_pk>
                     <cis:evidence_field cv="fs.suid_dumpable" dt="string" ev="fs.suid_dumpable" name="name" op="equals"
                                         result="true"/>
                     <cis:evidence_field cv="0" dt="int" ev="0" name="value" op="equals" result="true"/>
                  </cis:evidence_item>
               </cis:evidence_state>
            </cis:evidence_test>
            <cis:evidence_test check="all" check_existence="at_least_one_exists"
                               comment="Ensure /etc/security/limits.conf contents pattern match ^\s*\*\shard\score\s0(\s+#.*)?$ (string)"
                               negated="false"
                               ns="independent"
                               objref="oval:org.cisecurity.benchmarks.o_centos_centos:obj:10032"
                               result="true"
                               testref="oval:org.cisecurity.benchmarks.o_centos_centos:tst:10032"
                               type="textfilecontent54_test">
               <cis:evidence_object>
                  <cis:evidence_item itemref="1186031623">
                     <cis:evidence_item_pk status="exists">
                        <cis:evidence_item_pk_field name="filepath" value="/etc/security/limits.conf"/>
                        <cis:evidence_item_pk_field name="path" value="/etc/security"/>
                        <cis:evidence_item_pk_field name="filename" value="limits.conf"/>
                        <cis:evidence_item_pk_field name="pattern" value="^\s*\*\shard\score\s0(\s+#.*)?$"/>
                        <cis:evidence_item_pk_field name="instance" value="1"/>
                        <cis:evidence_item_pk_field name="text" value="* hard core 0  # End of file"/>
                     </cis:evidence_item_pk>
                  </cis:evidence_item>
               </cis:evidence_object>
            </cis:evidence_test>
         </cis:and>
      </cis:evidence>
   </metadata>
   <complex-check operator="AND">
      <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
         <check-export export-name="oval:org.cisecurity.benchmarks.o_centos_centos:var:1031"
                       value-id="xccdf_org.cisecurity.benchmarks_value_1.6.1.1_var"/>
         <check-content-ref href="CIS_CentOS_Linux_7_Benchmark_v1.1.0-oval.xml"
                            name="oval:org.cisecurity.benchmarks.o_centos_centos:def:1031"/>
      </check>
      <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
         <check-export export-name="oval:org.cisecurity.benchmarks.o_centos_centos:var:1032"
                       value-id="xccdf_org.cisecurity.benchmarks_value_1.6.1.2_var"/>
         <check-content-ref href="CIS_CentOS_Linux_7_Benchmark_v1.1.0-oval.xml"
                            name="oval:org.cisecurity.benchmarks.o_centos_centos:def:1032"/>
      </check>
   </complex-check>
</rule-result>

<rule-result xmlns="http://checklists.nist.gov/xccdf/1.2"
             xmlns:xccdf="http://checklists.nist.gov/xccdf/1.2"
             xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
             idref="xccdf_org.cisecurity.benchmarks_rule_1.6.2_Enable_Randomized_Virtual_Memory_Region_Placement"
             role="full"
             severity="unknown"
             time="2015-11-09T16:01:31.086-06:00"
             version="1"
             weight="1.0">
   <result>pass</result>
   <metadata>
      <cis:evidence xmlns:cis="http://benchmarks.cisecurity.org/evidence/1.0"
                    end-time="2015-11-09T16:01:31.086-06:00"
                    start-time="2015-11-09T16:01:31.084-06:00">
         <cis:and>
            <cis:evidence_test check="all" check_existence="at_least_one_exists"
                               comment="Ensure 'kernel.randomize_va_space' kernel parameter equals 2 (int)"
                               negated="false"
                               ns="unix"
                               objref="oval:org.cisecurity.benchmarks.o_centos_centos:obj:10034"
                               result="true"
                               testref="oval:org.cisecurity.benchmarks.o_centos_centos:tst:10034"
                               type="sysctl_test">
               <cis:evidence_state steref="oval:org.cisecurity.benchmarks.o_centos_centos:ste:10015">
                  <cis:evidence_item itemref="1498029262">
                     <cis:evidence_item_pk status="exists">
                        <cis:evidence_item_pk_field name="name" value="kernel.randomize_va_space"/>
                     </cis:evidence_item_pk>
                     <cis:evidence_field cv="kernel.randomize_va_space" dt="string" ev="kernel.randomize_va_space"
                                         name="name"
                                         op="equals"
                                         result="true"/>
                     <cis:evidence_field cv="2" dt="int" ev="2" name="value" op="equals" result="true"/>
                  </cis:evidence_item>
               </cis:evidence_state>
            </cis:evidence_test>
         </cis:and>
      </cis:evidence>
   </metadata>
   <complex-check operator="AND">
      <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
         <check-export export-name="oval:org.cisecurity.benchmarks.o_centos_centos:var:1033"
                       value-id="xccdf_org.cisecurity.benchmarks_value_1.6.2.1_var"/>
         <check-content-ref href="CIS_CentOS_Linux_7_Benchmark_v1.1.0-oval.xml"
                            name="oval:org.cisecurity.benchmarks.o_centos_centos:def:1033"/>
      </check>
   </complex-check>
</rule-result>

<rule-result xmlns="http://checklists.nist.gov/xccdf/1.2"
             xmlns:xccdf="http://checklists.nist.gov/xccdf/1.2"
             xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
             idref="xccdf_org.cisecurity.benchmarks_rule_2.1.1_Remove_telnet-server"
             role="full"
             severity="unknown"
             time="2015-11-09T16:01:31.321-06:00"
             version="1"
             weight="1.0">
   <result>pass</result>
   <metadata>
      <cis:evidence xmlns:cis="http://benchmarks.cisecurity.org/evidence/1.0"
                    end-time="2015-11-09T16:01:31.321-06:00"
                    start-time="2015-11-09T16:01:31.295-06:00">
         <cis:and>
            <cis:evidence_test check="all" check_existence="none_exist"
                               comment="Ensure telnet-server package is not installed"
                               negated="false"
                               ns="linux"
                               objref="oval:org.cisecurity.benchmarks.o_centos_centos:obj:10035"
                               result="true"
                               testref="oval:org.cisecurity.benchmarks.o_centos_centos:tst:10035"
                               type="rpminfo_test">
               <cis:evidence_object>
                  <cis:evidence_item itemref="2087055084">
                     <cis:evidence_item_pk status="does not exist">
                        <cis:evidence_item_pk_field name="name" value="telnet-server"/>
                     </cis:evidence_item_pk>
                  </cis:evidence_item>
               </cis:evidence_object>
            </cis:evidence_test>
         </cis:and>
      </cis:evidence>
   </metadata>
   <complex-check operator="AND">
      <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
         <check-content-ref href="CIS_CentOS_Linux_7_Benchmark_v1.1.0-oval.xml"
                            name="oval:org.cisecurity.benchmarks.o_centos_centos:def:1034"/>
      </check>
   </complex-check>
</rule-result>

<rule-result xmlns="http://checklists.nist.gov/xccdf/1.2"
             xmlns:xccdf="http://checklists.nist.gov/xccdf/1.2"
             xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
             idref="xccdf_org.cisecurity.benchmarks_rule_2.1.2_Remove_telnet_Clients"
             role="full"
             severity="unknown"
             time="2015-11-09T16:01:30.766-06:00"
             version="1"
             weight="1.0">
   <result>pass</result>
   <metadata>
      <cis:evidence xmlns:cis="http://benchmarks.cisecurity.org/evidence/1.0"
                    end-time="2015-11-09T16:01:30.766-06:00"
                    start-time="2015-11-09T16:01:30.742-06:00">
         <cis:and>
            <cis:evidence_test check="all" check_existence="none_exist"
                               comment="Ensure telnet package is not installed"
                               negated="false"
                               ns="linux"
                               objref="oval:org.cisecurity.benchmarks.o_centos_centos:obj:10036"
                               result="true"
                               testref="oval:org.cisecurity.benchmarks.o_centos_centos:tst:10036"
                               type="rpminfo_test">
               <cis:evidence_object>
                  <cis:evidence_item itemref="97166877">
                     <cis:evidence_item_pk status="does not exist">
                        <cis:evidence_item_pk_field name="name" value="telnet"/>
                     </cis:evidence_item_pk>
                  </cis:evidence_item>
               </cis:evidence_object>
            </cis:evidence_test>
         </cis:and>
      </cis:evidence>
   </metadata>
   <complex-check operator="AND">
      <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
         <check-content-ref href="CIS_CentOS_Linux_7_Benchmark_v1.1.0-oval.xml"
                            name="oval:org.cisecurity.benchmarks.o_centos_centos:def:1035"/>
      </check>
   </complex-check>
</rule-result>

<rule-result xmlns="http://checklists.nist.gov/xccdf/1.2"
             xmlns:xccdf="http://checklists.nist.gov/xccdf/1.2"
             xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
             idref="xccdf_org.cisecurity.benchmarks_rule_2.1.3_Remove_rsh-server"
             role="full"
             severity="unknown"
             time="2015-11-09T16:01:32.326-06:00"
             version="1"
             weight="1.0">
   <result>pass</result>
   <metadata>
      <cis:evidence xmlns:cis="http://benchmarks.cisecurity.org/evidence/1.0"
                    end-time="2015-11-09T16:01:32.327-06:00"
                    start-time="2015-11-09T16:01:32.298-06:00">
         <cis:and>
            <cis:evidence_test check="all" check_existence="none_exist"
                               comment="Ensure rsh-server package is not installed"
                               negated="false"
                               ns="linux"
                               objref="oval:org.cisecurity.benchmarks.o_centos_centos:obj:10037"
                               result="true"
                               testref="oval:org.cisecurity.benchmarks.o_centos_centos:tst:10037"
                               type="rpminfo_test">
               <cis:evidence_object>
                  <cis:evidence_item itemref="1703495570">
                     <cis:evidence_item_pk status="does not exist">
                        <cis:evidence_item_pk_field name="name" value="rsh-server"/>
                     </cis:evidence_item_pk>
                  </cis:evidence_item>
               </cis:evidence_object>
            </cis:evidence_test>
         </cis:and>
      </cis:evidence>
   </metadata>
   <complex-check operator="AND">
      <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
         <check-content-ref href="CIS_CentOS_Linux_7_Benchmark_v1.1.0-oval.xml"
                            name="oval:org.cisecurity.benchmarks.o_centos_centos:def:1036"/>
      </check>
   </complex-check>
</rule-result>

<rule-result xmlns="http://checklists.nist.gov/xccdf/1.2"
             xmlns:xccdf="http://checklists.nist.gov/xccdf/1.2"
             xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
             idref="xccdf_org.cisecurity.benchmarks_rule_2.1.4_Remove_rsh"
             role="full"
             severity="unknown"
             time="2015-11-09T16:01:33.564-06:00"
             version="1"
             weight="1.0">
   <result>pass</result>
   <metadata>
      <cis:evidence xmlns:cis="http://benchmarks.cisecurity.org/evidence/1.0"
                    end-time="2015-11-09T16:01:33.564-06:00"
                    start-time="2015-11-09T16:01:33.539-06:00">
         <cis:and>
            <cis:evidence_test check="all" check_existence="none_exist"
                               comment="Ensure rsh package is not installed"
                               negated="false"
                               ns="linux"
                               objref="oval:org.cisecurity.benchmarks.o_centos_centos:obj:10038"
                               result="true"
                               testref="oval:org.cisecurity.benchmarks.o_centos_centos:tst:10038"
                               type="rpminfo_test">
               <cis:evidence_object>
                  <cis:evidence_item itemref="108010517">
                     <cis:evidence_item_pk status="does not exist">
                        <cis:evidence_item_pk_field name="name" value="rsh"/>
                     </cis:evidence_item_pk>
                  </cis:evidence_item>
               </cis:evidence_object>
            </cis:evidence_test>
         </cis:and>
      </cis:evidence>
   </metadata>
   <complex-check operator="AND">
      <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
         <check-content-ref href="CIS_CentOS_Linux_7_Benchmark_v1.1.0-oval.xml"
                            name="oval:org.cisecurity.benchmarks.o_centos_centos:def:1037"/>
      </check>
   </complex-check>
</rule-result>

<rule-result xmlns="http://checklists.nist.gov/xccdf/1.2"
             xmlns:xccdf="http://checklists.nist.gov/xccdf/1.2"
             xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
             idref="xccdf_org.cisecurity.benchmarks_rule_2.1.5_Remove_NIS_Client"
             role="full"
             severity="unknown"
             time="2015-11-09T16:01:33.845-06:00"
             version="1"
             weight="1.0">
   <result>pass</result>
   <metadata>
      <cis:evidence xmlns:cis="http://benchmarks.cisecurity.org/evidence/1.0"
                    end-time="2015-11-09T16:01:33.845-06:00"
                    start-time="2015-11-09T16:01:33.822-06:00">
         <cis:and>
            <cis:evidence_test check="all" check_existence="none_exist"
                               comment="Ensure ypbind package is not installed"
                               negated="false"
                               ns="linux"
                               objref="oval:org.cisecurity.benchmarks.o_centos_centos:obj:10039"
                               result="true"
                               testref="oval:org.cisecurity.benchmarks.o_centos_centos:tst:10039"
                               type="rpminfo_test">
               <cis:evidence_object>
                  <cis:evidence_item itemref="150797786">
                     <cis:evidence_item_pk status="does not exist">
                        <cis:evidence_item_pk_field name="name" value="ypbind"/>
                     </cis:evidence_item_pk>
                  </cis:evidence_item>
               </cis:evidence_object>
            </cis:evidence_test>
         </cis:and>
      </cis:evidence>
   </metadata>
   <complex-check operator="AND">
      <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
         <check-content-ref href="CIS_CentOS_Linux_7_Benchmark_v1.1.0-oval.xml"
                            name="oval:org.cisecurity.benchmarks.o_centos_centos:def:1038"/>
      </check>
   </complex-check>
</rule-result>

<rule-result xmlns="http://checklists.nist.gov/xccdf/1.2"
             xmlns:xccdf="http://checklists.nist.gov/xccdf/1.2"
             xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
             idref="xccdf_org.cisecurity.benchmarks_rule_2.1.6_Remove_NIS_Server"
             role="full"
             severity="unknown"
             time="2015-11-09T16:01:33.522-06:00"
             version="1"
             weight="1.0">
   <result>pass</result>
   <metadata>
      <cis:evidence xmlns:cis="http://benchmarks.cisecurity.org/evidence/1.0"
                    end-time="2015-11-09T16:01:33.522-06:00"
                    start-time="2015-11-09T16:01:33.498-06:00">
         <cis:and>
            <cis:evidence_test check="all" check_existence="none_exist"
                               comment="Ensure ypserv package is not installed"
                               negated="false"
                               ns="linux"
                               objref="oval:org.cisecurity.benchmarks.o_centos_centos:obj:10040"
                               result="true"
                               testref="oval:org.cisecurity.benchmarks.o_centos_centos:tst:10040"
                               type="rpminfo_test">
               <cis:evidence_object>
                  <cis:evidence_item itemref="5255865">
                     <cis:evidence_item_pk status="does not exist">
                        <cis:evidence_item_pk_field name="name" value="ypserv"/>
                     </cis:evidence_item_pk>
                  </cis:evidence_item>
               </cis:evidence_object>
            </cis:evidence_test>
         </cis:and>
      </cis:evidence>
   </metadata>
   <complex-check operator="AND">
      <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
         <check-content-ref href="CIS_CentOS_Linux_7_Benchmark_v1.1.0-oval.xml"
                            name="oval:org.cisecurity.benchmarks.o_centos_centos:def:1039"/>
      </check>
   </complex-check>
</rule-result>

<rule-result xmlns="http://checklists.nist.gov/xccdf/1.2"
             xmlns:xccdf="http://checklists.nist.gov/xccdf/1.2"
             xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
             idref="xccdf_org.cisecurity.benchmarks_rule_2.1.7_Remove_tftp"
             role="full"
             severity="unknown"
             time="2015-11-09T16:01:28.364-06:00"
             version="1"
             weight="1.0">
   <result>pass</result>
   <metadata>
      <cis:evidence xmlns:cis="http://benchmarks.cisecurity.org/evidence/1.0"
                    end-time="2015-11-09T16:01:28.365-06:00"
                    start-time="2015-11-09T16:01:28.333-06:00">
         <cis:and>
            <cis:evidence_test check="all" check_existence="none_exist"
                               comment="Ensure tftp package is not installed"
                               negated="false"
                               ns="linux"
                               objref="oval:org.cisecurity.benchmarks.o_centos_centos:obj:10041"
                               result="true"
                               testref="oval:org.cisecurity.benchmarks.o_centos_centos:tst:10041"
                               type="rpminfo_test">
               <cis:evidence_object>
                  <cis:evidence_item itemref="1198951255">
                     <cis:evidence_item_pk status="does not exist">
                        <cis:evidence_item_pk_field name="name" value="tftp"/>
                     </cis:evidence_item_pk>
                  </cis:evidence_item>
               </cis:evidence_object>
            </cis:evidence_test>
         </cis:and>
      </cis:evidence>
   </metadata>
   <complex-check operator="AND">
      <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
         <check-content-ref href="CIS_CentOS_Linux_7_Benchmark_v1.1.0-oval.xml"
                            name="oval:org.cisecurity.benchmarks.o_centos_centos:def:1040"/>
      </check>
   </complex-check>
</rule-result>

<rule-result xmlns="http://checklists.nist.gov/xccdf/1.2"
             xmlns:xccdf="http://checklists.nist.gov/xccdf/1.2"
             xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
             idref="xccdf_org.cisecurity.benchmarks_rule_2.1.8_Remove_tftp-server"
             role="full"
             severity="unknown"
             time="2015-11-09T16:01:31.739-06:00"
             version="1"
             weight="1.0">
   <result>pass</result>
   <metadata>
      <cis:evidence xmlns:cis="http://benchmarks.cisecurity.org/evidence/1.0"
                    end-time="2015-11-09T16:01:31.740-06:00"
                    start-time="2015-11-09T16:01:31.716-06:00">
         <cis:and>
            <cis:evidence_test check="all" check_existence="none_exist"
                               comment="Ensure tftp-server package is not installed"
                               negated="false"
                               ns="linux"
                               objref="oval:org.cisecurity.benchmarks.o_centos_centos:obj:10042"
                               result="true"
                               testref="oval:org.cisecurity.benchmarks.o_centos_centos:tst:10042"
                               type="rpminfo_test">
               <cis:evidence_object>
                  <cis:evidence_item itemref="1511563324">
                     <cis:evidence_item_pk status="does not exist">
                        <cis:evidence_item_pk_field name="name" value="tftp-server"/>
                     </cis:evidence_item_pk>
                  </cis:evidence_item>
               </cis:evidence_object>
            </cis:evidence_test>
         </cis:and>
      </cis:evidence>
   </metadata>
   <complex-check operator="AND">
      <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
         <check-content-ref href="CIS_CentOS_Linux_7_Benchmark_v1.1.0-oval.xml"
                            name="oval:org.cisecurity.benchmarks.o_centos_centos:def:1041"/>
      </check>
   </complex-check>
</rule-result>

<rule-result xmlns="http://checklists.nist.gov/xccdf/1.2"
             xmlns:xccdf="http://checklists.nist.gov/xccdf/1.2"
             xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
             idref="xccdf_org.cisecurity.benchmarks_rule_2.1.9_Remove_talk"
             role="full"
             severity="unknown"
             time="2015-11-09T16:01:33.498-06:00"
             version="1"
             weight="1.0">
   <result>pass</result>
   <metadata>
      <cis:evidence xmlns:cis="http://benchmarks.cisecurity.org/evidence/1.0"
                    end-time="2015-11-09T16:01:33.498-06:00"
                    start-time="2015-11-09T16:01:33.474-06:00">
         <cis:and>
            <cis:evidence_test check="all" check_existence="none_exist"
                               comment="Ensure talk package is not installed"
                               negated="false"
                               ns="linux"
                               objref="oval:org.cisecurity.benchmarks.o_centos_centos:obj:10043"
                               result="true"
                               testref="oval:org.cisecurity.benchmarks.o_centos_centos:tst:10043"
                               type="rpminfo_test">
               <cis:evidence_object>
                  <cis:evidence_item itemref="559844914">
                     <cis:evidence_item_pk status="does not exist">
                        <cis:evidence_item_pk_field name="name" value="talk"/>
                     </cis:evidence_item_pk>
                  </cis:evidence_item>
               </cis:evidence_object>
            </cis:evidence_test>
         </cis:and>
      </cis:evidence>
   </metadata>
   <complex-check operator="AND">
      <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
         <check-content-ref href="CIS_CentOS_Linux_7_Benchmark_v1.1.0-oval.xml"
                            name="oval:org.cisecurity.benchmarks.o_centos_centos:def:1042"/>
      </check>
   </complex-check>
</rule-result>

<rule-result xmlns="http://checklists.nist.gov/xccdf/1.2"
             xmlns:xccdf="http://checklists.nist.gov/xccdf/1.2"
             xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
             idref="xccdf_org.cisecurity.benchmarks_rule_2.1.10_Remove_talk-server"
             role="full"
             severity="unknown"
             time="2015-11-09T16:01:29.233-06:00"
             version="1"
             weight="1.0">
   <result>pass</result>
   <metadata>
      <cis:evidence xmlns:cis="http://benchmarks.cisecurity.org/evidence/1.0"
                    end-time="2015-11-09T16:01:29.233-06:00"
                    start-time="2015-11-09T16:01:29.207-06:00">
         <cis:and>
            <cis:evidence_test check="all" check_existence="none_exist"
                               comment="Ensure talk-server package is not installed"
                               negated="false"
                               ns="linux"
                               objref="oval:org.cisecurity.benchmarks.o_centos_centos:obj:10044"
                               result="true"
                               testref="oval:org.cisecurity.benchmarks.o_centos_centos:tst:10044"
                               type="rpminfo_test">
               <cis:evidence_object>
                  <cis:evidence_item itemref="952172166">
                     <cis:evidence_item_pk status="does not exist">
                        <cis:evidence_item_pk_field name="name" value="talk-server"/>
                     </cis:evidence_item_pk>
                  </cis:evidence_item>
               </cis:evidence_object>
            </cis:evidence_test>
         </cis:and>
      </cis:evidence>
   </metadata>
   <complex-check operator="AND">
      <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
         <check-content-ref href="CIS_CentOS_Linux_7_Benchmark_v1.1.0-oval.xml"
                            name="oval:org.cisecurity.benchmarks.o_centos_centos:def:1043"/>
      </check>
   </complex-check>
</rule-result>

<rule-result xmlns="http://checklists.nist.gov/xccdf/1.2"
             xmlns:xccdf="http://checklists.nist.gov/xccdf/1.2"
             xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
             idref="xccdf_org.cisecurity.benchmarks_rule_2.1.12_Disable_chargen-dgram"
             role="full"
             severity="unknown"
             time="2015-11-09T16:01:33.626-06:00"
             version="1"
             weight="1.0">
   <result>pass</result>
   <metadata>
      <cis:evidence xmlns:cis="http://benchmarks.cisecurity.org/evidence/1.0"
                    end-time="2015-11-09T16:01:33.626-06:00"
                    start-time="2015-11-09T16:01:33.600-06:00">
         <cis:or>
            <cis:evidence_test check="all" check_existence="any_exist"
                               comment="Ensure chargen xinetd service on udp protocol is disabled"
                               negated="false"
                               ns="unix"
                               objref="oval:org.cisecurity.benchmarks.o_centos_centos:obj:10046"
                               result="true"
                               testref="oval:org.cisecurity.benchmarks.o_centos_centos:tst:10046"
                               type="xinetd_test">
               <cis:evidence_state steref="oval:org.cisecurity.benchmarks.o_centos_centos:ste:10016"/>
            </cis:evidence_test>
            <cis:evidence_test check="all" check_existence="none_exist"
                               comment="Ensure xinetd package is not installed"
                               negated="false"
                               ns="linux"
                               objref="oval:org.cisecurity.benchmarks.o_centos_centos:obj:10047"
                               result="true"
                               testref="oval:org.cisecurity.benchmarks.o_centos_centos:tst:10047"
                               type="rpminfo_test">
               <cis:evidence_object>
                  <cis:evidence_item itemref="995865919">
                     <cis:evidence_item_pk status="does not exist">
                        <cis:evidence_item_pk_field name="name" value="xinetd"/>
                     </cis:evidence_item_pk>
                  </cis:evidence_item>
               </cis:evidence_object>
            </cis:evidence_test>
         </cis:or>
      </cis:evidence>
   </metadata>
   <complex-check operator="OR">
      <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
         <check-content-ref href="CIS_CentOS_Linux_7_Benchmark_v1.1.0-oval.xml"
                            name="oval:org.cisecurity.benchmarks.o_centos_centos:def:1045"/>
      </check>
      <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
         <check-content-ref href="CIS_CentOS_Linux_7_Benchmark_v1.1.0-oval.xml"
                            name="oval:org.cisecurity.benchmarks.o_centos_centos:def:1046"/>
      </check>
   </complex-check>
</rule-result>

<rule-result xmlns="http://checklists.nist.gov/xccdf/1.2"
             xmlns:xccdf="http://checklists.nist.gov/xccdf/1.2"
             xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
             idref="xccdf_org.cisecurity.benchmarks_rule_2.1.13_Disable_chargen-stream"
             role="full"
             severity="unknown"
             time="2015-11-09T16:01:33.169-06:00"
             version="1"
             weight="1.0">
   <result>pass</result>
   <metadata>
      <cis:evidence xmlns:cis="http://benchmarks.cisecurity.org/evidence/1.0"
                    end-time="2015-11-09T16:01:33.169-06:00"
                    start-time="2015-11-09T16:01:33.144-06:00">
         <cis:or>
            <cis:evidence_test check="all" check_existence="any_exist"
                               comment="Ensure chargen xinetd service on tcp protocol is disabled"
                               negated="false"
                               ns="unix"
                               objref="oval:org.cisecurity.benchmarks.o_centos_centos:obj:10048"
                               result="true"
                               testref="oval:org.cisecurity.benchmarks.o_centos_centos:tst:10048"
                               type="xinetd_test">
               <cis:evidence_state steref="oval:org.cisecurity.benchmarks.o_centos_centos:ste:10017"/>
            </cis:evidence_test>
            <cis:evidence_test check="all" check_existence="none_exist"
                               comment="Ensure xinetd package is not installed"
                               negated="false"
                               ns="linux"
                               objref="oval:org.cisecurity.benchmarks.o_centos_centos:obj:10049"
                               result="true"
                               testref="oval:org.cisecurity.benchmarks.o_centos_centos:tst:10049"
                               type="rpminfo_test">
               <cis:evidence_object>
                  <cis:evidence_item itemref="548605787">
                     <cis:evidence_item_pk status="does not exist">
                        <cis:evidence_item_pk_field name="name" value="xinetd"/>
                     </cis:evidence_item_pk>
                  </cis:evidence_item>
               </cis:evidence_object>
            </cis:evidence_test>
         </cis:or>
      </cis:evidence>
   </metadata>
   <complex-check operator="OR">
      <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
         <check-content-ref href="CIS_CentOS_Linux_7_Benchmark_v1.1.0-oval.xml"
                            name="oval:org.cisecurity.benchmarks.o_centos_centos:def:1047"/>
      </check>
      <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
         <check-content-ref href="CIS_CentOS_Linux_7_Benchmark_v1.1.0-oval.xml"
                            name="oval:org.cisecurity.benchmarks.o_centos_centos:def:1048"/>
      </check>
   </complex-check>
</rule-result>

<rule-result xmlns="http://checklists.nist.gov/xccdf/1.2"
             xmlns:xccdf="http://checklists.nist.gov/xccdf/1.2"
             xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
             idref="xccdf_org.cisecurity.benchmarks_rule_2.1.14_Disable_daytime-dgram"
             role="full"
             severity="unknown"
             time="2015-11-09T16:01:33.650-06:00"
             version="1"
             weight="1.0">
   <result>pass</result>
   <metadata>
      <cis:evidence xmlns:cis="http://benchmarks.cisecurity.org/evidence/1.0"
                    end-time="2015-11-09T16:01:33.650-06:00"
                    start-time="2015-11-09T16:01:33.626-06:00">
         <cis:or>
            <cis:evidence_test check="all" check_existence="any_exist"
                               comment="Ensure daytime xinetd service on udp protocol is disabled"
                               negated="false"
                               ns="unix"
                               objref="oval:org.cisecurity.benchmarks.o_centos_centos:obj:10050"
                               result="true"
                               testref="oval:org.cisecurity.benchmarks.o_centos_centos:tst:10050"
                               type="xinetd_test">
               <cis:evidence_state steref="oval:org.cisecurity.benchmarks.o_centos_centos:ste:10018"/>
            </cis:evidence_test>
            <cis:evidence_test check="all" check_existence="none_exist"
                               comment="Ensure xinetd package is not installed"
                               negated="false"
                               ns="linux"
                               objref="oval:org.cisecurity.benchmarks.o_centos_centos:obj:10051"
                               result="true"
                               testref="oval:org.cisecurity.benchmarks.o_centos_centos:tst:10051"
                               type="rpminfo_test">
               <cis:evidence_object>
                  <cis:evidence_item itemref="1171257523">
                     <cis:evidence_item_pk status="does not exist">
                        <cis:evidence_item_pk_field name="name" value="xinetd"/>
                     </cis:evidence_item_pk>
                  </cis:evidence_item>
               </cis:evidence_object>
            </cis:evidence_test>
         </cis:or>
      </cis:evidence>
   </metadata>
   <complex-check operator="OR">
      <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
         <check-content-ref href="CIS_CentOS_Linux_7_Benchmark_v1.1.0-oval.xml"
                            name="oval:org.cisecurity.benchmarks.o_centos_centos:def:1049"/>
      </check>
      <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
         <check-content-ref href="CIS_CentOS_Linux_7_Benchmark_v1.1.0-oval.xml"
                            name="oval:org.cisecurity.benchmarks.o_centos_centos:def:1050"/>
      </check>
   </complex-check>
</rule-result>

<rule-result xmlns="http://checklists.nist.gov/xccdf/1.2"
             xmlns:xccdf="http://checklists.nist.gov/xccdf/1.2"
             xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
             idref="xccdf_org.cisecurity.benchmarks_rule_2.1.15_Disable_daytime-stream"
             role="full"
             severity="unknown"
             time="2015-11-09T16:01:32.898-06:00"
             version="1"
             weight="1.0">
   <result>pass</result>
   <metadata>
      <cis:evidence xmlns:cis="http://benchmarks.cisecurity.org/evidence/1.0"
                    end-time="2015-11-09T16:01:32.898-06:00"
                    start-time="2015-11-09T16:01:32.872-06:00">
         <cis:or>
            <cis:evidence_test check="all" check_existence="none_exist"
                               comment="Ensure xinetd package is not installed"
                               negated="false"
                               ns="linux"
                               objref="oval:org.cisecurity.benchmarks.o_centos_centos:obj:10053"
                               result="true"
                               testref="oval:org.cisecurity.benchmarks.o_centos_centos:tst:10053"
                               type="rpminfo_test">
               <cis:evidence_object>
                  <cis:evidence_item itemref="1346351880">
                     <cis:evidence_item_pk status="does not exist">
                        <cis:evidence_item_pk_field name="name" value="xinetd"/>
                     </cis:evidence_item_pk>
                  </cis:evidence_item>
               </cis:evidence_object>
            </cis:evidence_test>
            <cis:evidence_test check="all" check_existence="any_exist"
                               comment="Ensure daytime xinetd service on tcp protocol is disabled"
                               negated="false"
                               ns="unix"
                               objref="oval:org.cisecurity.benchmarks.o_centos_centos:obj:10052"
                               result="true"
                               testref="oval:org.cisecurity.benchmarks.o_centos_centos:tst:10052"
                               type="xinetd_test">
               <cis:evidence_state steref="oval:org.cisecurity.benchmarks.o_centos_centos:ste:10019"/>
            </cis:evidence_test>
         </cis:or>
      </cis:evidence>
   </metadata>
   <complex-check operator="OR">
      <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
         <check-content-ref href="CIS_CentOS_Linux_7_Benchmark_v1.1.0-oval.xml"
                            name="oval:org.cisecurity.benchmarks.o_centos_centos:def:1051"/>
      </check>
      <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
         <check-content-ref href="CIS_CentOS_Linux_7_Benchmark_v1.1.0-oval.xml"
                            name="oval:org.cisecurity.benchmarks.o_centos_centos:def:1052"/>
      </check>
   </complex-check>
</rule-result>

<rule-result xmlns="http://checklists.nist.gov/xccdf/1.2"
             xmlns:xccdf="http://checklists.nist.gov/xccdf/1.2"
             xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
             idref="xccdf_org.cisecurity.benchmarks_rule_2.1.16_Disable_echo-dgram"
             role="full"
             severity="unknown"
             time="2015-11-09T16:01:33.908-06:00"
             version="1"
             weight="1.0">
   <result>pass</result>
   <metadata>
      <cis:evidence xmlns:cis="http://benchmarks.cisecurity.org/evidence/1.0"
                    end-time="2015-11-09T16:01:33.908-06:00"
                    start-time="2015-11-09T16:01:33.884-06:00">
         <cis:or>
            <cis:evidence_test check="all" check_existence="any_exist"
                               comment="Ensure echo xinetd service on udp protocol is disabled"
                               negated="false"
                               ns="unix"
                               objref="oval:org.cisecurity.benchmarks.o_centos_centos:obj:10054"
                               result="true"
                               testref="oval:org.cisecurity.benchmarks.o_centos_centos:tst:10054"
                               type="xinetd_test">
               <cis:evidence_state steref="oval:org.cisecurity.benchmarks.o_centos_centos:ste:10020"/>
            </cis:evidence_test>
            <cis:evidence_test check="all" check_existence="none_exist"
                               comment="Ensure xinetd package is not installed"
                               negated="false"
                               ns="linux"
                               objref="oval:org.cisecurity.benchmarks.o_centos_centos:obj:10055"
                               result="true"
                               testref="oval:org.cisecurity.benchmarks.o_centos_centos:tst:10055"
                               type="rpminfo_test">
               <cis:evidence_object>
                  <cis:evidence_item itemref="1414317361">
                     <cis:evidence_item_pk status="does not exist">
                        <cis:evidence_item_pk_field name="name" value="xinetd"/>
                     </cis:evidence_item_pk>
                  </cis:evidence_item>
               </cis:evidence_object>
            </cis:evidence_test>
         </cis:or>
      </cis:evidence>
   </metadata>
   <complex-check operator="OR">
      <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
         <check-content-ref href="CIS_CentOS_Linux_7_Benchmark_v1.1.0-oval.xml"
                            name="oval:org.cisecurity.benchmarks.o_centos_centos:def:1053"/>
      </check>
      <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
         <check-content-ref href="CIS_CentOS_Linux_7_Benchmark_v1.1.0-oval.xml"
                            name="oval:org.cisecurity.benchmarks.o_centos_centos:def:1054"/>
      </check>
   </complex-check>
</rule-result>

<rule-result xmlns="http://checklists.nist.gov/xccdf/1.2"
             xmlns:xccdf="http://checklists.nist.gov/xccdf/1.2"
             xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
             idref="xccdf_org.cisecurity.benchmarks_rule_2.1.17_Disable_echo-stream"
             role="full"
             severity="unknown"
             time="2015-11-09T16:01:31.951-06:00"
             version="1"
             weight="1.0">
   <result>pass</result>
   <metadata>
      <cis:evidence xmlns:cis="http://benchmarks.cisecurity.org/evidence/1.0"
                    end-time="2015-11-09T16:01:31.951-06:00"
                    start-time="2015-11-09T16:01:31.908-06:00">
         <cis:or>
            <cis:evidence_test check="all" check_existence="none_exist"
                               comment="Ensure xinetd package is not installed"
                               negated="false"
                               ns="linux"
                               objref="oval:org.cisecurity.benchmarks.o_centos_centos:obj:10057"
                               result="true"
                               testref="oval:org.cisecurity.benchmarks.o_centos_centos:tst:10057"
                               type="rpminfo_test">
               <cis:evidence_object>
                  <cis:evidence_item itemref="1584380616">
                     <cis:evidence_item_pk status="does not exist">
                        <cis:evidence_item_pk_field name="name" value="xinetd"/>
                     </cis:evidence_item_pk>
                  </cis:evidence_item>
               </cis:evidence_object>
            </cis:evidence_test>
            <cis:evidence_test check="all" check_existence="any_exist"
                               comment="Ensure echo xinetd service on tcp protocol is disabled"
                               negated="false"
                               ns="unix"
                               objref="oval:org.cisecurity.benchmarks.o_centos_centos:obj:10056"
                               result="true"
                               testref="oval:org.cisecurity.benchmarks.o_centos_centos:tst:10056"
                               type="xinetd_test">
               <cis:evidence_state steref="oval:org.cisecurity.benchmarks.o_centos_centos:ste:10021"/>
            </cis:evidence_test>
         </cis:or>
      </cis:evidence>
   </metadata>
   <complex-check operator="OR">
      <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
         <check-content-ref href="CIS_CentOS_Linux_7_Benchmark_v1.1.0-oval.xml"
                            name="oval:org.cisecurity.benchmarks.o_centos_centos:def:1055"/>
      </check>
      <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
         <check-content-ref href="CIS_CentOS_Linux_7_Benchmark_v1.1.0-oval.xml"
                            name="oval:org.cisecurity.benchmarks.o_centos_centos:def:1056"/>
      </check>
   </complex-check>
</rule-result>

<rule-result xmlns="http://checklists.nist.gov/xccdf/1.2"
             xmlns:xccdf="http://checklists.nist.gov/xccdf/1.2"
             xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
             idref="xccdf_org.cisecurity.benchmarks_rule_2.1.18_Disable_tcpmux-server"
             role="full"
             severity="unknown"
             time="2015-11-09T16:01:32.185-06:00"
             version="1"
             weight="1.0">
   <result>pass</result>
   <metadata>
      <cis:evidence xmlns:cis="http://benchmarks.cisecurity.org/evidence/1.0"
                    end-time="2015-11-09T16:01:32.185-06:00"
                    start-time="2015-11-09T16:01:32.159-06:00">
         <cis:or>
            <cis:evidence_test check="all" check_existence="none_exist"
                               comment="Ensure xinetd package is not installed"
                               negated="false"
                               ns="linux"
                               objref="oval:org.cisecurity.benchmarks.o_centos_centos:obj:10059"
                               result="true"
                               testref="oval:org.cisecurity.benchmarks.o_centos_centos:tst:10059"
                               type="rpminfo_test">
               <cis:evidence_object>
                  <cis:evidence_item itemref="2019969921">
                     <cis:evidence_item_pk status="does not exist">
                        <cis:evidence_item_pk_field name="name" value="xinetd"/>
                     </cis:evidence_item_pk>
                  </cis:evidence_item>
               </cis:evidence_object>
            </cis:evidence_test>
            <cis:evidence_test check="all" check_existence="any_exist"
                               comment="Ensure tcpmux xinetd service on tcp protocol is disabled"
                               negated="false"
                               ns="unix"
                               objref="oval:org.cisecurity.benchmarks.o_centos_centos:obj:10058"
                               result="true"
                               testref="oval:org.cisecurity.benchmarks.o_centos_centos:tst:10058"
                               type="xinetd_test">
               <cis:evidence_state steref="oval:org.cisecurity.benchmarks.o_centos_centos:ste:10022"/>
            </cis:evidence_test>
         </cis:or>
      </cis:evidence>
   </metadata>
   <complex-check operator="OR">
      <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
         <check-content-ref href="CIS_CentOS_Linux_7_Benchmark_v1.1.0-oval.xml"
                            name="oval:org.cisecurity.benchmarks.o_centos_centos:def:1057"/>
      </check>
      <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
         <check-content-ref href="CIS_CentOS_Linux_7_Benchmark_v1.1.0-oval.xml"
                            name="oval:org.cisecurity.benchmarks.o_centos_centos:def:1058"/>
      </check>
   </complex-check>
</rule-result>

<rule-result xmlns="http://checklists.nist.gov/xccdf/1.2"
             xmlns:xccdf="http://checklists.nist.gov/xccdf/1.2"
             xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
             idref="xccdf_org.cisecurity.benchmarks_rule_3.2_Remove_the_X_Window_System"
             role="full"
             severity="unknown"
             time="2015-11-09T16:01:32.743-06:00"
             version="1"
             weight="1.0">
   <result>pass</result>
   <metadata>
      <cis:evidence xmlns:cis="http://benchmarks.cisecurity.org/evidence/1.0"
                    end-time="2015-11-09T16:01:32.743-06:00"
                    start-time="2015-11-09T16:01:32.712-06:00">
         <cis:and>
            <cis:evidence_test check="all" check_existence="any_exist"
                               comment="Linux Custom Object &#34;systemd Does Not Default To graphical.target&#34;"
                               negated="false"
                               ns="unix"
                               objref="oval:org.cisecurity.benchmarks.o_centos_centos:obj:10062"
                               result="true"
                               testref="oval:org.cisecurity.benchmarks.o_centos_centos:tst:10062"
                               type="file_test">
               <cis:evidence_state steref="oval:org.cisecurity.benchmarks.o_centos_centos:ste:10023">
                  <cis:evidence_item itemref="1978325770">
                     <cis:evidence_item_pk status="exists">
                        <cis:evidence_item_pk_field name="filepath" value="/usr/lib/systemd/system/multi-user.target"/>
                        <cis:evidence_item_pk_field name="path" value="/etc/systemd/system"/>
                        <cis:evidence_item_pk_field name="filename" value="multi-user.target"/>
                     </cis:evidence_item_pk>
                     <cis:evidence_field cv="multi-user.target" dt="string" ev="graphical.target" name="filename"
                                         op="not equal"
                                         result="true"/>
                  </cis:evidence_item>
               </cis:evidence_state>
            </cis:evidence_test>
            <cis:evidence_test check="all" check_existence="none_exist"
                               comment="Ensure xorg-x11-server-common package is not installed"
                               negated="false"
                               ns="linux"
                               objref="oval:org.cisecurity.benchmarks.o_centos_centos:obj:10061"
                               result="true"
                               testref="oval:org.cisecurity.benchmarks.o_centos_centos:tst:10061"
                               type="rpminfo_test">
               <cis:evidence_object>
                  <cis:evidence_item itemref="643157130">
                     <cis:evidence_item_pk status="does not exist">
                        <cis:evidence_item_pk_field name="name" value="xorg-x11-server-common"/>
                     </cis:evidence_item_pk>
                  </cis:evidence_item>
               </cis:evidence_object>
            </cis:evidence_test>
         </cis:and>
      </cis:evidence>
   </metadata>
   <complex-check operator="AND">
      <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
         <check-content-ref href="CIS_CentOS_Linux_7_Benchmark_v1.1.0-oval.xml"
                            name="oval:org.cisecurity.benchmarks.o_centos_centos:def:1060"/>
      </check>
      <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
         <check-content-ref href="CIS_CentOS_Linux_7_Benchmark_v1.1.0-oval.xml"
                            name="oval:org.cisecurity.benchmarks.o_centos_centos:def:1061"/>
      </check>
   </complex-check>
</rule-result>

<rule-result xmlns="http://checklists.nist.gov/xccdf/1.2"
             xmlns:xccdf="http://checklists.nist.gov/xccdf/1.2"
             xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
             idref="xccdf_org.cisecurity.benchmarks_rule_3.3_Disable_Avahi_Server"
             role="full"
             severity="unknown"
             time="2015-11-09T16:01:31.888-06:00"
             version="1"
             weight="1.0">
   <result>pass</result>
   <metadata>
      <cis:evidence xmlns:cis="http://benchmarks.cisecurity.org/evidence/1.0"
                    end-time="2015-11-09T16:01:31.888-06:00"
                    start-time="2015-11-09T16:01:31.879-06:00">
         <cis:and>
            <cis:evidence_test check="all" check_existence="at_least_one_exists"
                               comment="Ensure systemd 'avahi-daemon.service' unit 'UnitFileState' property not equal enabled (string)"
                               negated="false"
                               ns="linux"
                               objref="oval:org.cisecurity.benchmarks.o_centos_centos:obj:10063"
                               result="true"
                               testref="oval:org.cisecurity.benchmarks.o_centos_centos:tst:10063"
                               type="systemdunitproperty_test">
               <cis:evidence_state steref="oval:org.cisecurity.benchmarks.o_centos_centos:ste:10024">
                  <cis:evidence_item itemref="1752683459">
                     <cis:evidence_item_pk status="exists">
                        <cis:evidence_item_pk_field name="unit" value="avahi-daemon.service"/>
                        <cis:evidence_item_pk_field name="property" value="UnitFileState"/>
                     </cis:evidence_item_pk>
                     <cis:evidence_field cv="" dt="string" ev="enabled" name="value" op="not equal" result="true"/>
                  </cis:evidence_item>
               </cis:evidence_state>
            </cis:evidence_test>
         </cis:and>
      </cis:evidence>
   </metadata>
   <complex-check operator="AND">
      <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
         <check-export export-name="oval:org.cisecurity.benchmarks.o_centos_centos:var:1062"
                       value-id="xccdf_org.cisecurity.benchmarks_value_3.3.1_var"/>
         <check-content-ref href="CIS_CentOS_Linux_7_Benchmark_v1.1.0-oval.xml"
                            name="oval:org.cisecurity.benchmarks.o_centos_centos:def:1062"/>
      </check>
   </complex-check>
</rule-result>

<rule-result xmlns="http://checklists.nist.gov/xccdf/1.2"
             xmlns:xccdf="http://checklists.nist.gov/xccdf/1.2"
             xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
             idref="xccdf_org.cisecurity.benchmarks_rule_3.4_Disable_Print_Server_-_CUPS"
             role="unscored"
             severity="unknown"
             time="2015-11-09T16:01:31.059-06:00"
             version="1"
             weight="0.0">
   <result>pass</result>
   <metadata>
      <cis:evidence xmlns:cis="http://benchmarks.cisecurity.org/evidence/1.0"
                    end-time="2015-11-09T16:01:31.059-06:00"
                    start-time="2015-11-09T16:01:31.045-06:00">
         <cis:and>
            <cis:evidence_test check="all" check_existence="at_least_one_exists"
                               comment="Ensure systemd 'cups.service' unit 'UnitFileState' property not equal enabled (string)"
                               negated="false"
                               ns="linux"
                               objref="oval:org.cisecurity.benchmarks.o_centos_centos:obj:10064"
                               result="true"
                               testref="oval:org.cisecurity.benchmarks.o_centos_centos:tst:10064"
                               type="systemdunitproperty_test">
               <cis:evidence_state steref="oval:org.cisecurity.benchmarks.o_centos_centos:ste:10025">
                  <cis:evidence_item itemref="1227927114">
                     <cis:evidence_item_pk status="exists">
                        <cis:evidence_item_pk_field name="unit" value="cups.service"/>
                        <cis:evidence_item_pk_field name="property" value="UnitFileState"/>
                     </cis:evidence_item_pk>
                     <cis:evidence_field cv="" dt="string" ev="enabled" name="value" op="not equal" result="true"/>
                  </cis:evidence_item>
               </cis:evidence_state>
            </cis:evidence_test>
         </cis:and>
      </cis:evidence>
   </metadata>
   <complex-check operator="AND">
      <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
         <check-export export-name="oval:org.cisecurity.benchmarks.o_centos_centos:var:1063"
                       value-id="xccdf_org.cisecurity.benchmarks_value_3.4.1_var"/>
         <check-content-ref href="CIS_CentOS_Linux_7_Benchmark_v1.1.0-oval.xml"
                            name="oval:org.cisecurity.benchmarks.o_centos_centos:def:1063"/>
      </check>
   </complex-check>
</rule-result>

<rule-result xmlns="http://checklists.nist.gov/xccdf/1.2"
             xmlns:xccdf="http://checklists.nist.gov/xccdf/1.2"
             xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
             idref="xccdf_org.cisecurity.benchmarks_rule_3.5_Remove_DHCP_Server"
             role="full"
             severity="unknown"
             time="2015-11-09T16:01:33.588-06:00"
             version="1"
             weight="1.0">
   <result>pass</result>
   <metadata>
      <cis:evidence xmlns:cis="http://benchmarks.cisecurity.org/evidence/1.0"
                    end-time="2015-11-09T16:01:33.588-06:00"
                    start-time="2015-11-09T16:01:33.565-06:00">
         <cis:and>
            <cis:evidence_test check="all" check_existence="none_exist"
                               comment="Ensure dhcp package is not installed"
                               negated="false"
                               ns="linux"
                               objref="oval:org.cisecurity.benchmarks.o_centos_centos:obj:10065"
                               result="true"
                               testref="oval:org.cisecurity.benchmarks.o_centos_centos:tst:10065"
                               type="rpminfo_test">
               <cis:evidence_object>
                  <cis:evidence_item itemref="247411967">
                     <cis:evidence_item_pk status="does not exist">
                        <cis:evidence_item_pk_field name="name" value="dhcp"/>
                     </cis:evidence_item_pk>
                  </cis:evidence_item>
               </cis:evidence_object>
            </cis:evidence_test>
         </cis:and>
      </cis:evidence>
   </metadata>
   <complex-check operator="AND">
      <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
         <check-content-ref href="CIS_CentOS_Linux_7_Benchmark_v1.1.0-oval.xml"
                            name="oval:org.cisecurity.benchmarks.o_centos_centos:def:1064"/>
      </check>
   </complex-check>
</rule-result>

<rule-result xmlns="http://checklists.nist.gov/xccdf/1.2"
             xmlns:xccdf="http://checklists.nist.gov/xccdf/1.2"
             xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
             idref="xccdf_org.cisecurity.benchmarks_rule_3.6_Configure_Network_Time_Protocol_NTP"
             role="full"
             severity="unknown"
             time="2015-11-09T16:01:33.598-06:00"
             version="1"
             weight="1.0">
   <result>pass</result>
   <metadata>
      <cis:evidence xmlns:cis="http://benchmarks.cisecurity.org/evidence/1.0"
                    end-time="2015-11-09T16:01:33.598-06:00"
                    start-time="2015-11-09T16:01:33.588-06:00">
         <cis:and>
            <cis:and>
               <cis:and>
                  <cis:evidence_test check="all" check_existence="at_least_one_exists"
                                     comment="Ensure /etc/ntp.conf contents pattern match ^\s*restrict\s+default(?=[^#]*\s+kod)(?=[^#]*\s+nomodify)(?=[^#]*\s+notrap)(?=[^#]*\s+nopeer)(?=[^#]*\s+noquery)(\s+kod|\s+nomodify|\s+notrap|\s+nopeer|\s+noquery)*\s*(?:#.*)?$ (string)"
                                     negated="false"
                                     ns="independent"
                                     objref="oval:org.cisecurity.benchmarks.o_centos_centos:obj:10066"
                                     result="true"
                                     testref="oval:org.cisecurity.benchmarks.o_centos_centos:tst:10066"
                                     type="textfilecontent54_test">
                     <cis:evidence_object>
                        <cis:evidence_item itemref="1708519550">
                           <cis:evidence_item_pk status="exists">
                              <cis:evidence_item_pk_field name="filepath" value="/etc/ntp.conf"/>
                              <cis:evidence_item_pk_field name="path" value="/etc"/>
                              <cis:evidence_item_pk_field name="filename" value="ntp.conf"/>
                              <cis:evidence_item_pk_field name="pattern"
                                                          value="^\s*restrict\s+default(?=[^#]*\s+kod)(?=[^#]*\s+nomodify)(?=[^#]*\s+notrap)(?=[^#]*\s+nopeer)(?=[^#]*\s+noquery)(\s+kod|\s+nomodify|\s+notrap|\s+nopeer|\s+noquery)*\s*(?:#.*)?$"/>
                              <cis:evidence_item_pk_field name="instance" value="1"/>
                              <cis:evidence_item_pk_field name="text" value="restrict default kod nomodify notrap nopeer noquery "/>
                           </cis:evidence_item_pk>
                        </cis:evidence_item>
                     </cis:evidence_object>
                  </cis:evidence_test>
                  <cis:evidence_test check="all" check_existence="at_least_one_exists"
                                     comment="Ensure /etc/ntp.conf contents pattern match ^\s*restrict\s+-6\s+default(?=[^#]*\s+kod)(?=[^#]*\s+nomodify)(?=[^#]*\s+notrap)(?=[^#]*\s+nopeer)(?=[^#]*\s+noquery)(\s+kod|\s+nomodify|\s+notrap|\s+nopeer|\s+noquery)*\s*(?:#.*)?$ (string)"
                                     negated="false"
                                     ns="independent"
                                     objref="oval:org.cisecurity.benchmarks.o_centos_centos:obj:10067"
                                     result="true"
                                     testref="oval:org.cisecurity.benchmarks.o_centos_centos:tst:10067"
                                     type="textfilecontent54_test">
                     <cis:evidence_object>
                        <cis:evidence_item itemref="490940958">
                           <cis:evidence_item_pk status="exists">
                              <cis:evidence_item_pk_field name="filepath" value="/etc/ntp.conf"/>
                              <cis:evidence_item_pk_field name="path" value="/etc"/>
                              <cis:evidence_item_pk_field name="filename" value="ntp.conf"/>
                              <cis:evidence_item_pk_field name="pattern"
                                                          value="^\s*restrict\s+-6\s+default(?=[^#]*\s+kod)(?=[^#]*\s+nomodify)(?=[^#]*\s+notrap)(?=[^#]*\s+nopeer)(?=[^#]*\s+noquery)(\s+kod|\s+nomodify|\s+notrap|\s+nopeer|\s+noquery)*\s*(?:#.*)?$"/>
                              <cis:evidence_item_pk_field name="instance" value="1"/>
                              <cis:evidence_item_pk_field name="text"
                                                          value="restrict -6 default kod nomodify notrap nopeer noquery  # Permit all access over the loopback interface.  This could"/>
                           </cis:evidence_item_pk>
                        </cis:evidence_item>
                     </cis:evidence_object>
                  </cis:evidence_test>
               </cis:and>
               <cis:evidence_test check="all" check_existence="at_least_one_exists"
                                  comment="Ensure /etc/ntp.conf contents pattern match ^\s*server\s+\S+ (string)"
                                  negated="false"
                                  ns="independent"
                                  objref="oval:org.cisecurity.benchmarks.o_centos_centos:obj:10068"
                                  result="true"
                                  testref="oval:org.cisecurity.benchmarks.o_centos_centos:tst:10068"
                                  type="textfilecontent54_test">
                  <cis:evidence_object>
                     <cis:evidence_item itemref="252949715">
                        <cis:evidence_item_pk status="exists">
                           <cis:evidence_item_pk_field name="filepath" value="/etc/ntp.conf"/>
                           <cis:evidence_item_pk_field name="path" value="/etc"/>
                           <cis:evidence_item_pk_field name="filename" value="ntp.conf"/>
                           <cis:evidence_item_pk_field name="pattern" value="^\s*server\s+\S+"/>
                           <cis:evidence_item_pk_field name="instance" value="1"/>
                           <cis:evidence_item_pk_field name="text" value="server 0.centos.pool.ntp.org"/>
                        </cis:evidence_item_pk>
                     </cis:evidence_item>
                  </cis:evidence_object>
               </cis:evidence_test>
            </cis:and>
            <cis:evidence_test check="all" check_existence="at_least_one_exists"
                               comment="Ensure /etc/sysconfig/ntpd contents pattern match ^\s*OPTIONS=&#34;[^&#34;]*-u ntp:ntp[^&#34;]*&#34;\s*(?:#.*)?$ (string)"
                               negated="false"
                               ns="independent"
                               objref="oval:org.cisecurity.benchmarks.o_centos_centos:obj:10069"
                               result="true"
                               testref="oval:org.cisecurity.benchmarks.o_centos_centos:tst:10069"
                               type="textfilecontent54_test">
               <cis:evidence_object>
                  <cis:evidence_item itemref="2076414082">
                     <cis:evidence_item_pk status="exists">
                        <cis:evidence_item_pk_field name="filepath" value="/etc/sysconfig/ntpd"/>
                        <cis:evidence_item_pk_field name="path" value="/etc/sysconfig"/>
                        <cis:evidence_item_pk_field name="filename" value="ntpd"/>
                        <cis:evidence_item_pk_field name="pattern" value="^\s*OPTIONS=&#34;[^&#34;]*-u ntp:ntp[^&#34;]*&#34;\s*(?:#.*)?$"/>
                        <cis:evidence_item_pk_field name="instance" value="1"/>
                        <cis:evidence_item_pk_field name="text" value="OPTIONS=&#34;-g -u ntp:ntp&#34; "/>
                     </cis:evidence_item_pk>
                  </cis:evidence_item>
               </cis:evidence_object>
            </cis:evidence_test>
         </cis:and>
      </cis:evidence>
   </metadata>
   <complex-check operator="AND">
      <complex-check operator="AND">
         <complex-check operator="AND">
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
               <check-export export-name="oval:org.cisecurity.benchmarks.o_centos_centos:var:1065"
                             value-id="xccdf_org.cisecurity.benchmarks_value_3.6.1_var"/>
               <check-content-ref href="CIS_CentOS_Linux_7_Benchmark_v1.1.0-oval.xml"
                                  name="oval:org.cisecurity.benchmarks.o_centos_centos:def:1065"/>
            </check>
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
               <check-export export-name="oval:org.cisecurity.benchmarks.o_centos_centos:var:1066"
                             value-id="xccdf_org.cisecurity.benchmarks_value_3.6.2_var"/>
               <check-content-ref href="CIS_CentOS_Linux_7_Benchmark_v1.1.0-oval.xml"
                                  name="oval:org.cisecurity.benchmarks.o_centos_centos:def:1066"/>
            </check>
         </complex-check>
         <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
            <check-export export-name="oval:org.cisecurity.benchmarks.o_centos_centos:var:1067"
                          value-id="xccdf_org.cisecurity.benchmarks_value_3.6.3_var"/>
            <check-content-ref href="CIS_CentOS_Linux_7_Benchmark_v1.1.0-oval.xml"
                               name="oval:org.cisecurity.benchmarks.o_centos_centos:def:1067"/>
         </check>
      </complex-check>
      <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
         <check-export export-name="oval:org.cisecurity.benchmarks.o_centos_centos:var:1068"
                       value-id="xccdf_org.cisecurity.benchmarks_value_3.6.4_var"/>
         <check-content-ref href="CIS_CentOS_Linux_7_Benchmark_v1.1.0-oval.xml"
                            name="oval:org.cisecurity.benchmarks.o_centos_centos:def:1068"/>
      </check>
   </complex-check>
</rule-result>

<rule-result xmlns="http://checklists.nist.gov/xccdf/1.2"
             xmlns:xccdf="http://checklists.nist.gov/xccdf/1.2"
             xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
             idref="xccdf_org.cisecurity.benchmarks_rule_3.7_Remove_LDAP"
             role="unscored"
             severity="unknown"
             time="2015-11-09T16:01:32.402-06:00"
             version="1"
             weight="0.0">
   <result>pass</result>
   <metadata>
      <cis:evidence xmlns:cis="http://benchmarks.cisecurity.org/evidence/1.0"
                    end-time="2015-11-09T16:01:32.402-06:00"
                    start-time="2015-11-09T16:01:32.350-06:00">
         <cis:and>
            <cis:evidence_test check="all" check_existence="none_exist"
                               comment="Ensure openldap-servers package is not installed"
                               negated="false"
                               ns="linux"
                               objref="oval:org.cisecurity.benchmarks.o_centos_centos:obj:10070"
                               result="true"
                               testref="oval:org.cisecurity.benchmarks.o_centos_centos:tst:10070"
                               type="rpminfo_test">
               <cis:evidence_object>
                  <cis:evidence_item itemref="1969783850">
                     <cis:evidence_item_pk status="does not exist">
                        <cis:evidence_item_pk_field name="name" value="openldap-servers"/>
                     </cis:evidence_item_pk>
                  </cis:evidence_item>
               </cis:evidence_object>
            </cis:evidence_test>
            <cis:evidence_test check="all" check_existence="none_exist"
                               comment="Ensure openldap-clients package is not installed"
                               negated="false"
                               ns="linux"
                               objref="oval:org.cisecurity.benchmarks.o_centos_centos:obj:10071"
                               result="true"
                               testref="oval:org.cisecurity.benchmarks.o_centos_centos:tst:10071"
                               type="rpminfo_test">
               <cis:evidence_object>
                  <cis:evidence_item itemref="378795676">
                     <cis:evidence_item_pk status="does not exist">
                        <cis:evidence_item_pk_field name="name" value="openldap-clients"/>
                     </cis:evidence_item_pk>
                  </cis:evidence_item>
               </cis:evidence_object>
            </cis:evidence_test>
         </cis:and>
      </cis:evidence>
   </metadata>
   <complex-check operator="AND">
      <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
         <check-content-ref href="CIS_CentOS_Linux_7_Benchmark_v1.1.0-oval.xml"
                            name="oval:org.cisecurity.benchmarks.o_centos_centos:def:1069"/>
      </check>
      <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
         <check-content-ref href="CIS_CentOS_Linux_7_Benchmark_v1.1.0-oval.xml"
                            name="oval:org.cisecurity.benchmarks.o_centos_centos:def:1070"/>
      </check>
   </complex-check>
</rule-result>

<rule-result xmlns="http://checklists.nist.gov/xccdf/1.2"
             xmlns:xccdf="http://checklists.nist.gov/xccdf/1.2"
             xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
             idref="xccdf_org.cisecurity.benchmarks_rule_3.8_Disable_NFS_and_RPC"
             role="unscored"
             severity="unknown"
             time="2015-11-09T16:01:31.861-06:00"
             version="1"
             weight="0.0">
   <result>pass</result>
   <metadata>
      <cis:evidence xmlns:cis="http://benchmarks.cisecurity.org/evidence/1.0"
                    end-time="2015-11-09T16:01:31.861-06:00"
                    start-time="2015-11-09T16:01:31.834-06:00">
         <cis:and>
            <cis:and>
               <cis:and>
                  <cis:and>
                     <cis:evidence_test check="all" check_existence="at_least_one_exists"
                                        comment="Ensure systemd 'rpcidmapd' unit 'UnitFileState' property not equal enabled (string)"
                                        negated="false"
                                        ns="linux"
                                        objref="oval:org.cisecurity.benchmarks.o_centos_centos:obj:10072"
                                        result="true"
                                        testref="oval:org.cisecurity.benchmarks.o_centos_centos:tst:10072"
                                        type="systemdunitproperty_test">
                        <cis:evidence_state steref="oval:org.cisecurity.benchmarks.o_centos_centos:ste:10026">
                           <cis:evidence_item itemref="471925695">
                              <cis:evidence_item_pk status="exists">
                                 <cis:evidence_item_pk_field name="unit" value="rpcidmapd"/>
                                 <cis:evidence_item_pk_field name="property" value="UnitFileState"/>
                              </cis:evidence_item_pk>
                              <cis:evidence_field cv="" dt="string" ev="enabled" name="value" op="not equal" result="true"/>
                           </cis:evidence_item>
                        </cis:evidence_state>
                     </cis:evidence_test>
                     <cis:evidence_test check="all" check_existence="at_least_one_exists"
                                        comment="Ensure systemd 'rpcsvcgssd' unit 'UnitFileState' property not equal enabled (string)"
                                        negated="false"
                                        ns="linux"
                                        objref="oval:org.cisecurity.benchmarks.o_centos_centos:obj:10073"
                                        result="true"
                                        testref="oval:org.cisecurity.benchmarks.o_centos_centos:tst:10073"
                                        type="systemdunitproperty_test">
                        <cis:evidence_state steref="oval:org.cisecurity.benchmarks.o_centos_centos:ste:10027">
                           <cis:evidence_item itemref="1535581187">
                              <cis:evidence_item_pk status="exists">
                                 <cis:evidence_item_pk_field name="unit" value="rpcsvcgssd"/>
                                 <cis:evidence_item_pk_field name="property" value="UnitFileState"/>
                              </cis:evidence_item_pk>
                              <cis:evidence_field cv="" dt="string" ev="enabled" name="value" op="not equal" result="true"/>
                           </cis:evidence_item>
                        </cis:evidence_state>
                     </cis:evidence_test>
                  </cis:and>
                  <cis:evidence_test check="all" check_existence="at_least_one_exists"
                                     comment="Ensure systemd 'rpcbind' unit 'UnitFileState' property not equal enabled (string)"
                                     negated="false"
                                     ns="linux"
                                     objref="oval:org.cisecurity.benchmarks.o_centos_centos:obj:10074"
                                     result="true"
                                     testref="oval:org.cisecurity.benchmarks.o_centos_centos:tst:10074"
                                     type="systemdunitproperty_test">
                     <cis:evidence_state steref="oval:org.cisecurity.benchmarks.o_centos_centos:ste:10028">
                        <cis:evidence_item itemref="1305804855">
                           <cis:evidence_item_pk status="exists">
                              <cis:evidence_item_pk_field name="unit" value="rpcbind"/>
                              <cis:evidence_item_pk_field name="property" value="UnitFileState"/>
                           </cis:evidence_item_pk>
                           <cis:evidence_field cv="" dt="string" ev="enabled" name="value" op="not equal" result="true"/>
                        </cis:evidence_item>
                     </cis:evidence_state>
                  </cis:evidence_test>
               </cis:and>
               <cis:evidence_test check="all" check_existence="at_least_one_exists"
                                  comment="Ensure systemd 'rpcgssd' unit 'UnitFileState' property not equal enabled (string)"
                                  negated="false"
                                  ns="linux"
                                  objref="oval:org.cisecurity.benchmarks.o_centos_centos:obj:10075"
                                  result="true"
                                  testref="oval:org.cisecurity.benchmarks.o_centos_centos:tst:10075"
                                  type="systemdunitproperty_test">
                  <cis:evidence_state steref="oval:org.cisecurity.benchmarks.o_centos_centos:ste:10029">
                     <cis:evidence_item itemref="253028021">
                        <cis:evidence_item_pk status="exists">
                           <cis:evidence_item_pk_field name="unit" value="rpcgssd"/>
                           <cis:evidence_item_pk_field name="property" value="UnitFileState"/>
                        </cis:evidence_item_pk>
                        <cis:evidence_field cv="" dt="string" ev="enabled" name="value" op="not equal" result="true"/>
                     </cis:evidence_item>
                  </cis:evidence_state>
               </cis:evidence_test>
            </cis:and>
            <cis:evidence_test check="all" check_existence="at_least_one_exists"
                               comment="Ensure systemd 'nfslock' unit 'UnitFileState' property not equal enabled (string)"
                               negated="false"
                               ns="linux"
                               objref="oval:org.cisecurity.benchmarks.o_centos_centos:obj:10076"
                               result="true"
                               testref="oval:org.cisecurity.benchmarks.o_centos_centos:tst:10076"
                               type="systemdunitproperty_test">
               <cis:evidence_state steref="oval:org.cisecurity.benchmarks.o_centos_centos:ste:10030">
                  <cis:evidence_item itemref="606984289">
                     <cis:evidence_item_pk status="exists">
                        <cis:evidence_item_pk_field name="unit" value="nfslock"/>
                        <cis:evidence_item_pk_field name="property" value="UnitFileState"/>
                     </cis:evidence_item_pk>
                     <cis:evidence_field cv="" dt="string" ev="enabled" name="value" op="not equal" result="true"/>
                  </cis:evidence_item>
               </cis:evidence_state>
            </cis:evidence_test>
         </cis:and>
      </cis:evidence>
   </metadata>
   <complex-check operator="AND">
      <complex-check operator="AND">
         <complex-check operator="AND">
            <complex-check operator="AND">
               <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
                  <check-export export-name="oval:org.cisecurity.benchmarks.o_centos_centos:var:1071"
                                value-id="xccdf_org.cisecurity.benchmarks_value_3.8.4_var"/>
                  <check-content-ref href="CIS_CentOS_Linux_7_Benchmark_v1.1.0-oval.xml"
                                     name="oval:org.cisecurity.benchmarks.o_centos_centos:def:1071"/>
               </check>
               <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
                  <check-export export-name="oval:org.cisecurity.benchmarks.o_centos_centos:var:1072"
                                value-id="xccdf_org.cisecurity.benchmarks_value_3.8.5_var"/>
                  <check-content-ref href="CIS_CentOS_Linux_7_Benchmark_v1.1.0-oval.xml"
                                     name="oval:org.cisecurity.benchmarks.o_centos_centos:def:1072"/>
               </check>
            </complex-check>
            <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
               <check-export export-name="oval:org.cisecurity.benchmarks.o_centos_centos:var:1073"
                             value-id="xccdf_org.cisecurity.benchmarks_value_3.8.3_var"/>
               <check-content-ref href="CIS_CentOS_Linux_7_Benchmark_v1.1.0-oval.xml"
                                  name="oval:org.cisecurity.benchmarks.o_centos_centos:def:1073"/>
            </check>
         </complex-check>
         <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
            <check-export export-name="oval:org.cisecurity.benchmarks.o_centos_centos:var:1074"
                          value-id="xccdf_org.cisecurity.benchmarks_value_3.8.2_var"/>
            <check-content-ref href="CIS_CentOS_Linux_7_Benchmark_v1.1.0-oval.xml"
                               name="oval:org.cisecurity.benchmarks.o_centos_centos:def:1074"/>
         </check>
      </complex-check>
      <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
         <check-export export-name="oval:org.cisecurity.benchmarks.o_centos_centos:var:1075"
                       value-id="xccdf_org.cisecurity.benchmarks_value_3.8.1_var"/>
         <check-content-ref href="CIS_CentOS_Linux_7_Benchmark_v1.1.0-oval.xml"
                            name="oval:org.cisecurity.benchmarks.o_centos_centos:def:1075"/>
      </check>
   </complex-check>
</rule-result>

<rule-result xmlns="http://checklists.nist.gov/xccdf/1.2"
             xmlns:xccdf="http://checklists.nist.gov/xccdf/1.2"
             xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
             idref="xccdf_org.cisecurity.benchmarks_rule_3.9_Remove_DNS_Server"
             role="unscored"
             severity="unknown"
             time="2015-11-09T16:01:28.500-06:00"
             version="1"
             weight="0.0">
   <result>pass</result>
   <metadata>
      <cis:evidence xmlns:cis="http://benchmarks.cisecurity.org/evidence/1.0"
                    end-time="2015-11-09T16:01:28.500-06:00"
                    start-time="2015-11-09T16:01:28.474-06:00">
         <cis:and>
            <cis:evidence_test check="all" check_existence="none_exist"
                               comment="Ensure bind package is not installed"
                               negated="false"
                               ns="linux"
                               objref="oval:org.cisecurity.benchmarks.o_centos_centos:obj:10077"
                               result="true"
                               testref="oval:org.cisecurity.benchmarks.o_centos_centos:tst:10077"
                               type="rpminfo_test">
               <cis:evidence_object>
                  <cis:evidence_item itemref="92311110">
                     <cis:evidence_item_pk status="does not exist">
                        <cis:evidence_item_pk_field name="name" value="bind"/>
                     </cis:evidence_item_pk>
                  </cis:evidence_item>
               </cis:evidence_object>
            </cis:evidence_test>
         </cis:and>
      </cis:evidence>
   </metadata>
   <complex-check operator="AND">
      <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
         <check-content-ref href="CIS_CentOS_Linux_7_Benchmark_v1.1.0-oval.xml"
                            name="oval:org.cisecurity.benchmarks.o_centos_centos:def:1076"/>
      </check>
   </complex-check>
</rule-result>

<rule-result xmlns="http://checklists.nist.gov/xccdf/1.2"
             xmlns:xccdf="http://checklists.nist.gov/xccdf/1.2"
             xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
             idref="xccdf_org.cisecurity.benchmarks_rule_3.10_Remove_FTP_Server"
             role="unscored"
             severity="unknown"
             time="2015-11-09T16:01:33.353-06:00"
             version="1"
             weight="0.0">
   <result>pass</result>
   <metadata>
      <cis:evidence xmlns:cis="http://benchmarks.cisecurity.org/evidence/1.0"
                    end-time="2015-11-09T16:01:33.353-06:00"
                    start-time="2015-11-09T16:01:33.324-06:00">
         <cis:and>
            <cis:evidence_test check="all" check_existence="none_exist"
                               comment="Ensure vsftpd package is not installed"
                               negated="false"
                               ns="linux"
                               objref="oval:org.cisecurity.benchmarks.o_centos_centos:obj:10078"
                               result="true"
                               testref="oval:org.cisecurity.benchmarks.o_centos_centos:tst:10078"
                               type="rpminfo_test">
               <cis:evidence_object>
                  <cis:evidence_item itemref="201891156">
                     <cis:evidence_item_pk status="does not exist">
                        <cis:evidence_item_pk_field name="name" value="vsftpd"/>
                     </cis:evidence_item_pk>
                  </cis:evidence_item>
               </cis:evidence_object>
            </cis:evidence_test>
         </cis:and>
      </cis:evidence>
   </metadata>
   <complex-check operator="AND">
      <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
         <check-content-ref href="CIS_CentOS_Linux_7_Benchmark_v1.1.0-oval.xml"
                            name="oval:org.cisecurity.benchmarks.o_centos_centos:def:1077"/>
      </check>
   </complex-check>
</rule-result>

<rule-result xmlns="http://checklists.nist.gov/xccdf/1.2"
             xmlns:xccdf="http://checklists.nist.gov/xccdf/1.2"
             xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
             idref="xccdf_org.cisecurity.benchmarks_rule_3.11_Remove_HTTP_Server"
             role="unscored"
             severity="unknown"
             time="2015-11-09T16:01:33.883-06:00"
             version="1"
             weight="0.0">
   <result>pass</result>
   <metadata>
      <cis:evidence xmlns:cis="http://benchmarks.cisecurity.org/evidence/1.0"
                    end-time="2015-11-09T16:01:33.883-06:00"
                    start-time="2015-11-09T16:01:33.859-06:00">
         <cis:and>
            <cis:evidence_test check="all" check_existence="none_exist"
                               comment="Ensure httpd package is not installed"
                               negated="false"
                               ns="linux"
                               objref="oval:org.cisecurity.benchmarks.o_centos_centos:obj:10079"
                               result="true"
                               testref="oval:org.cisecurity.benchmarks.o_centos_centos:tst:10079"
                               type="rpminfo_test">
               <cis:evidence_object>
                  <cis:evidence_item itemref="1153453878">
                     <cis:evidence_item_pk status="does not exist">
                        <cis:evidence_item_pk_field name="name" value="httpd"/>
                     </cis:evidence_item_pk>
                  </cis:evidence_item>
               </cis:evidence_object>
            </cis:evidence_test>
         </cis:and>
      </cis:evidence>
   </metadata>
   <complex-check operator="AND">
      <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
         <check-content-ref href="CIS_CentOS_Linux_7_Benchmark_v1.1.0-oval.xml"
                            name="oval:org.cisecurity.benchmarks.o_centos_centos:def:1078"/>
      </check>
   </complex-check>
</rule-result>

<rule-result xmlns="http://checklists.nist.gov/xccdf/1.2"
             xmlns:xccdf="http://checklists.nist.gov/xccdf/1.2"
             xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
             idref="xccdf_org.cisecurity.benchmarks_rule_3.12_Remove_Dovecot_IMAP_and_POP3_services"
             role="unscored"
             severity="unknown"
             time="2015-11-09T16:01:31.996-06:00"
             version="1"
             weight="0.0">
   <result>pass</result>
   <metadata>
      <cis:evidence xmlns:cis="http://benchmarks.cisecurity.org/evidence/1.0"
                    end-time="2015-11-09T16:01:31.997-06:00"
                    start-time="2015-11-09T16:01:31.968-06:00">
         <cis:and>
            <cis:evidence_test check="all" check_existence="none_exist"
                               comment="Ensure dovecot package is not installed"
                               negated="false"
                               ns="linux"
                               objref="oval:org.cisecurity.benchmarks.o_centos_centos:obj:10080"
                               result="true"
                               testref="oval:org.cisecurity.benchmarks.o_centos_centos:tst:10080"
                               type="rpminfo_test">
               <cis:evidence_object>
                  <cis:evidence_item itemref="712880731">
                     <cis:evidence_item_pk status="does not exist">
                        <cis:evidence_item_pk_field name="name" value="dovecot"/>
                     </cis:evidence_item_pk>
                  </cis:evidence_item>
               </cis:evidence_object>
            </cis:evidence_test>
         </cis:and>
      </cis:evidence>
   </metadata>
   <complex-check operator="AND">
      <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
         <check-content-ref href="CIS_CentOS_Linux_7_Benchmark_v1.1.0-oval.xml"
                            name="oval:org.cisecurity.benchmarks.o_centos_centos:def:1079"/>
      </check>
   </complex-check>
</rule-result>

<rule-result xmlns="http://checklists.nist.gov/xccdf/1.2"
             xmlns:xccdf="http://checklists.nist.gov/xccdf/1.2"
             xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
             idref="xccdf_org.cisecurity.benchmarks_rule_3.13_Remove_Samba"
             role="unscored"
             severity="unknown"
             time="2015-11-09T16:01:31.083-06:00"
             version="1"
             weight="0.0">
   <result>pass</result>
   <metadata>
      <cis:evidence xmlns:cis="http://benchmarks.cisecurity.org/evidence/1.0"
                    end-time="2015-11-09T16:01:31.084-06:00"
                    start-time="2015-11-09T16:01:31.059-06:00">
         <cis:and>
            <cis:evidence_test check="all" check_existence="none_exist"
                               comment="Ensure samba package is not installed"
                               negated="false"
                               ns="linux"
                               objref="oval:org.cisecurity.benchmarks.o_centos_centos:obj:10081"
                               result="true"
                               testref="oval:org.cisecurity.benchmarks.o_centos_centos:tst:10081"
                               type="rpminfo_test">
               <cis:evidence_object>
                  <cis:evidence_item itemref="1274634318">
                     <cis:evidence_item_pk status="does not exist">
                        <cis:evidence_item_pk_field name="name" value="samba"/>
                     </cis:evidence_item_pk>
                  </cis:evidence_item>
               </cis:evidence_object>
            </cis:evidence_test>
         </cis:and>
      </cis:evidence>
   </metadata>
   <complex-check operator="AND">
      <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
         <check-content-ref href="CIS_CentOS_Linux_7_Benchmark_v1.1.0-oval.xml"
                            name="oval:org.cisecurity.benchmarks.o_centos_centos:def:1080"/>
      </check>
   </complex-check>
</rule-result>

<rule-result xmlns="http://checklists.nist.gov/xccdf/1.2"
             xmlns:xccdf="http://checklists.nist.gov/xccdf/1.2"
             xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
             idref="xccdf_org.cisecurity.benchmarks_rule_3.14_Remove_HTTP_Proxy_Server"
             role="unscored"
             severity="unknown"
             time="2015-11-09T16:01:33.192-06:00"
             version="1"
             weight="0.0">
   <result>pass</result>
   <metadata>
      <cis:evidence xmlns:cis="http://benchmarks.cisecurity.org/evidence/1.0"
                    end-time="2015-11-09T16:01:33.192-06:00"
                    start-time="2015-11-09T16:01:33.169-06:00">
         <cis:and>
            <cis:evidence_test check="all" check_existence="none_exist"
                               comment="Ensure squid package is not installed"
                               negated="false"
                               ns="linux"
                               objref="oval:org.cisecurity.benchmarks.o_centos_centos:obj:10082"
                               result="true"
                               testref="oval:org.cisecurity.benchmarks.o_centos_centos:tst:10082"
                               type="rpminfo_test">
               <cis:evidence_object>
                  <cis:evidence_item itemref="400830507">
                     <cis:evidence_item_pk status="does not exist">
                        <cis:evidence_item_pk_field name="name" value="squid"/>
                     </cis:evidence_item_pk>
                  </cis:evidence_item>
               </cis:evidence_object>
            </cis:evidence_test>
         </cis:and>
      </cis:evidence>
   </metadata>
   <complex-check operator="AND">
      <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
         <check-content-ref href="CIS_CentOS_Linux_7_Benchmark_v1.1.0-oval.xml"
                            name="oval:org.cisecurity.benchmarks.o_centos_centos:def:1081"/>
      </check>
   </complex-check>
</rule-result>

<rule-result xmlns="http://checklists.nist.gov/xccdf/1.2"
             xmlns:xccdf="http://checklists.nist.gov/xccdf/1.2"
             xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
             idref="xccdf_org.cisecurity.benchmarks_rule_3.15_Remove_SNMP_Server"
             role="unscored"
             severity="unknown"
             time="2015-11-09T16:01:30.957-06:00"
             version="1"
             weight="0.0">
   <result>pass</result>
   <metadata>
      <cis:evidence xmlns:cis="http://benchmarks.cisecurity.org/evidence/1.0"
                    end-time="2015-11-09T16:01:30.958-06:00"
                    start-time="2015-11-09T16:01:30.932-06:00">
         <cis:and>
            <cis:evidence_test check="all" check_existence="none_exist"
                               comment="Ensure net-snmp package is not installed"
                               negated="false"
                               ns="linux"
                               objref="oval:org.cisecurity.benchmarks.o_centos_centos:obj:10083"
                               result="true"
                               testref="oval:org.cisecurity.benchmarks.o_centos_centos:tst:10083"
                               type="rpminfo_test">
               <cis:evidence_object>
                  <cis:evidence_item itemref="2043440600">
                     <cis:evidence_item_pk status="does not exist">
                        <cis:evidence_item_pk_field name="name" value="net-snmp"/>
                     </cis:evidence_item_pk>
                  </cis:evidence_item>
               </cis:evidence_object>
            </cis:evidence_test>
         </cis:and>
      </cis:evidence>
   </metadata>
   <complex-check operator="AND">
      <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
         <check-content-ref href="CIS_CentOS_Linux_7_Benchmark_v1.1.0-oval.xml"
                            name="oval:org.cisecurity.benchmarks.o_centos_centos:def:1082"/>
      </check>
   </complex-check>
</rule-result>

<rule-result xmlns="http://checklists.nist.gov/xccdf/1.2"
             xmlns:xccdf="http://checklists.nist.gov/xccdf/1.2"
             xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
             idref="xccdf_org.cisecurity.benchmarks_rule_3.16_Configure_Mail_Transfer_Agent_for_Local-Only_Mode"
             role="full"
             severity="unknown"
             time="2015-11-09T16:01:28.325-06:00"
             version="1"
             weight="1.0">
   <result>pass</result>
   <metadata>
      <cis:evidence xmlns:cis="http://benchmarks.cisecurity.org/evidence/1.0"
                    end-time="2015-11-09T16:01:28.325-06:00"
                    start-time="2015-11-09T16:01:28.282-06:00">
         <cis:and>
            <cis:evidence_test check="all" check_existence="none_exist"
                               comment="Linux Custom Object &#34;No Servers Listening On Port 25&#34;"
                               negated="false"
                               ns="linux"
                               objref="oval:org.cisecurity.benchmarks.o_centos_centos:obj:10084"
                               result="true"
                               testref="oval:org.cisecurity.benchmarks.o_centos_centos:tst:10084"
                               type="inetlisteningservers_test">
               <cis:evidence_object>
                  <cis:evidence_item itemref="796237037">
                     <cis:evidence_item_pk status="does not exist">
                        <cis:evidence_item_pk_field name="protocol" value=".*"/>
                        <cis:evidence_item_pk_field name="local_address" value="^(?!127\.0\.0\.1|::1).*$"/>
                        <cis:evidence_item_pk_field name="local_port" value="25"/>
                     </cis:evidence_item_pk>
                  </cis:evidence_item>
               </cis:evidence_object>
            </cis:evidence_test>
         </cis:and>
      </cis:evidence>
   </metadata>
   <complex-check operator="AND">
      <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
         <check-content-ref href="CIS_CentOS_Linux_7_Benchmark_v1.1.0-oval.xml"
                            name="oval:org.cisecurity.benchmarks.o_centos_centos:def:1083"/>
      </check>
   </complex-check>
</rule-result>

<rule-result xmlns="http://checklists.nist.gov/xccdf/1.2"
             xmlns:xccdf="http://checklists.nist.gov/xccdf/1.2"
             xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
             idref="xccdf_org.cisecurity.benchmarks_rule_4.1.1_Disable_IP_Forwarding"
             role="full"
             severity="unknown"
             time="2015-11-09T16:01:28.468-06:00"
             version="1"
             weight="1.0">
   <result>pass</result>
   <metadata>
      <cis:evidence xmlns:cis="http://benchmarks.cisecurity.org/evidence/1.0"
                    end-time="2015-11-09T16:01:28.469-06:00"
                    start-time="2015-11-09T16:01:28.366-06:00">
         <cis:and>
            <cis:evidence_test check="all" check_existence="at_least_one_exists"
                               comment="Ensure 'net.ipv4.ip_forward' kernel parameter equals 0 (int)"
                               negated="false"
                               ns="unix"
                               objref="oval:org.cisecurity.benchmarks.o_centos_centos:obj:10085"
                               result="true"
                               testref="oval:org.cisecurity.benchmarks.o_centos_centos:tst:10085"
                               type="sysctl_test">
               <cis:evidence_state steref="oval:org.cisecurity.benchmarks.o_centos_centos:ste:10031">
                  <cis:evidence_item itemref="340433788">
                     <cis:evidence_item_pk status="exists">
                        <cis:evidence_item_pk_field name="name" value="net.ipv4.ip_forward"/>
                     </cis:evidence_item_pk>
                     <cis:evidence_field cv="net.ipv4.ip_forward" dt="string" ev="net.ipv4.ip_forward" name="name"
                                         op="equals"
                                         result="true"/>
                     <cis:evidence_field cv="0" dt="int" ev="0" name="value" op="equals" result="true"/>
                  </cis:evidence_item>
               </cis:evidence_state>
            </cis:evidence_test>
         </cis:and>
      </cis:evidence>
   </metadata>
   <complex-check operator="AND">
      <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
         <check-export export-name="oval:org.cisecurity.benchmarks.o_centos_centos:var:1084"
                       value-id="xccdf_org.cisecurity.benchmarks_value_4.1.1.1_var"/>
         <check-content-ref href="CIS_CentOS_Linux_7_Benchmark_v1.1.0-oval.xml"
                            name="oval:org.cisecurity.benchmarks.o_centos_centos:def:1084"/>
      </check>
   </complex-check>
</rule-result>

<rule-result xmlns="http://checklists.nist.gov/xccdf/1.2"
             xmlns:xccdf="http://checklists.nist.gov/xccdf/1.2"
             xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
             idref="xccdf_org.cisecurity.benchmarks_rule_4.1.2_Disable_Send_Packet_Redirects"
             role="full"
             severity="unknown"
             time="2015-11-09T16:01:33.539-06:00"
             version="1"
             weight="1.0">
   <result>pass</result>
   <metadata>
      <cis:evidence xmlns:cis="http://benchmarks.cisecurity.org/evidence/1.0"
                    end-time="2015-11-09T16:01:33.539-06:00"
                    start-time="2015-11-09T16:01:33.536-06:00">
         <cis:and>
            <cis:evidence_test check="all" check_existence="at_least_one_exists"
                               comment="Ensure 'net.ipv4.conf.default.send_redirects' kernel parameter equals 0 (int)"
                               negated="false"
                               ns="unix"
                               objref="oval:org.cisecurity.benchmarks.o_centos_centos:obj:10087"
                               result="true"
                               testref="oval:org.cisecurity.benchmarks.o_centos_centos:tst:10087"
                               type="sysctl_test">
               <cis:evidence_state steref="oval:org.cisecurity.benchmarks.o_centos_centos:ste:10033">
                  <cis:evidence_item itemref="1875263726">
                     <cis:evidence_item_pk status="exists">
                        <cis:evidence_item_pk_field name="name" value="net.ipv4.conf.default.send_redirects"/>
                     </cis:evidence_item_pk>
                     <cis:evidence_field cv="net.ipv4.conf.default.send_redirects" dt="string"
                                         ev="net.ipv4.conf.default.send_redirects"
                                         name="name"
                                         op="equals"
                                         result="true"/>
                     <cis:evidence_field cv="0" dt="int" ev="0" name="value" op="equals" result="true"/>
                  </cis:evidence_item>
               </cis:evidence_state>
            </cis:evidence_test>
            <cis:evidence_test check="all" check_existence="at_least_one_exists"
                               comment="Ensure 'net.ipv4.conf.all.send_redirects' kernel parameter equals 0 (int)"
                               negated="false"
                               ns="unix"
                               objref="oval:org.cisecurity.benchmarks.o_centos_centos:obj:10086"
                               result="true"
                               testref="oval:org.cisecurity.benchmarks.o_centos_centos:tst:10086"
                               type="sysctl_test">
               <cis:evidence_state steref="oval:org.cisecurity.benchmarks.o_centos_centos:ste:10032">
                  <cis:evidence_item itemref="1660429344">
                     <cis:evidence_item_pk status="exists">
                        <cis:evidence_item_pk_field name="name" value="net.ipv4.conf.all.send_redirects"/>
                     </cis:evidence_item_pk>
                     <cis:evidence_field cv="net.ipv4.conf.all.send_redirects" dt="string"
                                         ev="net.ipv4.conf.all.send_redirects"
                                         name="name"
                                         op="equals"
                                         result="true"/>
                     <cis:evidence_field cv="0" dt="int" ev="0" name="value" op="equals" result="true"/>
                  </cis:evidence_item>
               </cis:evidence_state>
            </cis:evidence_test>
         </cis:and>
      </cis:evidence>
   </metadata>
   <complex-check operator="AND">
      <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
         <check-export export-name="oval:org.cisecurity.benchmarks.o_centos_centos:var:1085"
                       value-id="xccdf_org.cisecurity.benchmarks_value_4.1.2.1_var"/>
         <check-content-ref href="CIS_CentOS_Linux_7_Benchmark_v1.1.0-oval.xml"
                            name="oval:org.cisecurity.benchmarks.o_centos_centos:def:1085"/>
      </check>
      <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
         <check-export export-name="oval:org.cisecurity.benchmarks.o_centos_centos:var:1086"
                       value-id="xccdf_org.cisecurity.benchmarks_value_4.1.2.2_var"/>
         <check-content-ref href="CIS_CentOS_Linux_7_Benchmark_v1.1.0-oval.xml"
                            name="oval:org.cisecurity.benchmarks.o_centos_centos:def:1086"/>
      </check>
   </complex-check>
</rule-result>

<rule-result xmlns="http://checklists.nist.gov/xccdf/1.2"
             xmlns:xccdf="http://checklists.nist.gov/xccdf/1.2"
             xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
             idref="xccdf_org.cisecurity.benchmarks_rule_4.2.1_Disable_Source_Routed_Packet_Acceptance"
             role="full"
             severity="unknown"
             time="2015-11-09T16:01:32.272-06:00"
             version="1"
             weight="1.0">
   <result>pass</result>
   <metadata>
      <cis:evidence xmlns:cis="http://benchmarks.cisecurity.org/evidence/1.0"
                    end-time="2015-11-09T16:01:32.272-06:00"
                    start-time="2015-11-09T16:01:32.269-06:00">
         <cis:and>
            <cis:evidence_test check="all" check_existence="at_least_one_exists"
                               comment="Ensure 'net.ipv4.conf.all.accept_source_route' kernel parameter equals 0 (int)"
                               negated="false"
                               ns="unix"
                               objref="oval:org.cisecurity.benchmarks.o_centos_centos:obj:10088"
                               result="true"
                               testref="oval:org.cisecurity.benchmarks.o_centos_centos:tst:10088"
                               type="sysctl_test">
               <cis:evidence_state steref="oval:org.cisecurity.benchmarks.o_centos_centos:ste:10034">
                  <cis:evidence_item itemref="968779462">
                     <cis:evidence_item_pk status="exists">
                        <cis:evidence_item_pk_field name="name" value="net.ipv4.conf.all.accept_source_route"/>
                     </cis:evidence_item_pk>
                     <cis:evidence_field cv="net.ipv4.conf.all.accept_source_route" dt="string"
                                         ev="net.ipv4.conf.all.accept_source_route"
                                         name="name"
                                         op="equals"
                                         result="true"/>
                     <cis:evidence_field cv="0" dt="int" ev="0" name="value" op="equals" result="true"/>
                  </cis:evidence_item>
               </cis:evidence_state>
            </cis:evidence_test>
            <cis:evidence_test check="all" check_existence="at_least_one_exists"
                               comment="Ensure 'net.ipv4.conf.default.accept_source_route' kernel parameter equals 0 (int)"
                               negated="false"
                               ns="unix"
                               objref="oval:org.cisecurity.benchmarks.o_centos_centos:obj:10089"
                               result="true"
                               testref="oval:org.cisecurity.benchmarks.o_centos_centos:tst:10089"
                               type="sysctl_test">
               <cis:evidence_state steref="oval:org.cisecurity.benchmarks.o_centos_centos:ste:10035">
                  <cis:evidence_item itemref="1398270407">
                     <cis:evidence_item_pk status="exists">
                        <cis:evidence_item_pk_field name="name" value="net.ipv4.conf.default.accept_source_route"/>
                     </cis:evidence_item_pk>
                     <cis:evidence_field cv="net.ipv4.conf.default.accept_source_route" dt="string"
                                         ev="net.ipv4.conf.default.accept_source_route"
                                         name="name"
                                         op="equals"
                                         result="true"/>
                     <cis:evidence_field cv="0" dt="int" ev="0" name="value" op="equals" result="true"/>
                  </cis:evidence_item>
               </cis:evidence_state>
            </cis:evidence_test>
         </cis:and>
      </cis:evidence>
   </metadata>
   <complex-check operator="AND">
      <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
         <check-export export-name="oval:org.cisecurity.benchmarks.o_centos_centos:var:1087"
                       value-id="xccdf_org.cisecurity.benchmarks_value_4.2.1.1_var"/>
         <check-content-ref href="CIS_CentOS_Linux_7_Benchmark_v1.1.0-oval.xml"
                            name="oval:org.cisecurity.benchmarks.o_centos_centos:def:1087"/>
      </check>
      <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
         <check-export export-name="oval:org.cisecurity.benchmarks.o_centos_centos:var:1088"
                       value-id="xccdf_org.cisecurity.benchmarks_value_4.2.1.2_var"/>
         <check-content-ref href="CIS_CentOS_Linux_7_Benchmark_v1.1.0-oval.xml"
                            name="oval:org.cisecurity.benchmarks.o_centos_centos:def:1088"/>
      </check>
   </complex-check>
</rule-result>

<rule-result xmlns="http://checklists.nist.gov/xccdf/1.2"
             xmlns:xccdf="http://checklists.nist.gov/xccdf/1.2"
             xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
             idref="xccdf_org.cisecurity.benchmarks_rule_4.2.2_Disable_ICMP_Redirect_Acceptance"
             role="full"
             severity="unknown"
             time="2015-11-09T16:01:31.325-06:00"
             version="1"
             weight="1.0">
   <result>pass</result>
   <metadata>
      <cis:evidence xmlns:cis="http://benchmarks.cisecurity.org/evidence/1.0"
                    end-time="2015-11-09T16:01:31.326-06:00"
                    start-time="2015-11-09T16:01:31.322-06:00">
         <cis:and>
            <cis:evidence_test check="all" check_existence="at_least_one_exists"
                               comment="Ensure 'net.ipv4.conf.all.accept_redirects' kernel parameter equals 0 (int)"
                               negated="false"
                               ns="unix"
                               objref="oval:org.cisecurity.benchmarks.o_centos_centos:obj:10090"
                               result="true"
                               testref="oval:org.cisecurity.benchmarks.o_centos_centos:tst:10090"
                               type="sysctl_test">
               <cis:evidence_state steref="oval:org.cisecurity.benchmarks.o_centos_centos:ste:10036">
                  <cis:evidence_item itemref="1015860141">
                     <cis:evidence_item_pk status="exists">
                        <cis:evidence_item_pk_field name="name" value="net.ipv4.conf.all.accept_redirects"/>
                     </cis:evidence_item_pk>
                     <cis:evidence_field cv="net.ipv4.conf.all.accept_redirects" dt="string"
                                         ev="net.ipv4.conf.all.accept_redirects"
                                         name="name"
                                         op="equals"
                                         result="true"/>
                     <cis:evidence_field cv="0" dt="int" ev="0" name="value" op="equals" result="true"/>
                  </cis:evidence_item>
               </cis:evidence_state>
            </cis:evidence_test>
            <cis:evidence_test check="all" check_existence="at_least_one_exists"
                               comment="Ensure 'net.ipv4.conf.default.accept_redirects' kernel parameter equals 0 (int)"
                               negated="false"
                               ns="unix"
                               objref="oval:org.cisecurity.benchmarks.o_centos_centos:obj:10091"
                               result="true"
                               testref="oval:org.cisecurity.benchmarks.o_centos_centos:tst:10091"
                               type="sysctl_test">
               <cis:evidence_state steref="oval:org.cisecurity.benchmarks.o_centos_centos:ste:10037">
                  <cis:evidence_item itemref="223853254">
                     <cis:evidence_item_pk status="exists">
                        <cis:evidence_item_pk_field name="name" value="net.ipv4.conf.default.accept_redirects"/>
                     </cis:evidence_item_pk>
                     <cis:evidence_field cv="net.ipv4.conf.default.accept_redirects" dt="string"
                                         ev="net.ipv4.conf.default.accept_redirects"
                                         name="name"
                                         op="equals"
                                         result="true"/>
                     <cis:evidence_field cv="0" dt="int" ev="0" name="value" op="equals" result="true"/>
                  </cis:evidence_item>
               </cis:evidence_state>
            </cis:evidence_test>
         </cis:and>
      </cis:evidence>
   </metadata>
   <complex-check operator="AND">
      <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
         <check-export export-name="oval:org.cisecurity.benchmarks.o_centos_centos:var:1089"
                       value-id="xccdf_org.cisecurity.benchmarks_value_4.2.2.1_var"/>
         <check-content-ref href="CIS_CentOS_Linux_7_Benchmark_v1.1.0-oval.xml"
                            name="oval:org.cisecurity.benchmarks.o_centos_centos:def:1089"/>
      </check>
      <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
         <check-export export-name="oval:org.cisecurity.benchmarks.o_centos_centos:var:1090"
                       value-id="xccdf_org.cisecurity.benchmarks_value_4.2.2.2_var"/>
         <check-content-ref href="CIS_CentOS_Linux_7_Benchmark_v1.1.0-oval.xml"
                            name="oval:org.cisecurity.benchmarks.o_centos_centos:def:1090"/>
      </check>
   </complex-check>
</rule-result>

<rule-result xmlns="http://checklists.nist.gov/xccdf/1.2"
             xmlns:xccdf="http://checklists.nist.gov/xccdf/1.2"
             xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
             idref="xccdf_org.cisecurity.benchmarks_rule_4.2.4_Log_Suspicious_Packets"
             role="full"
             severity="unknown"
             time="2015-11-09T16:01:30.399-06:00"
             version="1"
             weight="1.0">
   <result>pass</result>
   <metadata>
      <cis:evidence xmlns:cis="http://benchmarks.cisecurity.org/evidence/1.0"
                    end-time="2015-11-09T16:01:30.399-06:00"
                    start-time="2015-11-09T16:01:30.395-06:00">
         <cis:and>
            <cis:evidence_test check="all" check_existence="at_least_one_exists"
                               comment="Ensure 'net.ipv4.conf.all.log_martians' kernel parameter equals 1 (int)"
                               negated="false"
                               ns="unix"
                               objref="oval:org.cisecurity.benchmarks.o_centos_centos:obj:10094"
                               result="true"
                               testref="oval:org.cisecurity.benchmarks.o_centos_centos:tst:10094"
                               type="sysctl_test">
               <cis:evidence_state steref="oval:org.cisecurity.benchmarks.o_centos_centos:ste:10040">
                  <cis:evidence_item itemref="242312817">
                     <cis:evidence_item_pk status="exists">
                        <cis:evidence_item_pk_field name="name" value="net.ipv4.conf.all.log_martians"/>
                     </cis:evidence_item_pk>
                     <cis:evidence_field cv="net.ipv4.conf.all.log_martians" dt="string"
                                         ev="net.ipv4.conf.all.log_martians"
                                         name="name"
                                         op="equals"
                                         result="true"/>
                     <cis:evidence_field cv="1" dt="int" ev="1" name="value" op="equals" result="true"/>
                  </cis:evidence_item>
               </cis:evidence_state>
            </cis:evidence_test>
            <cis:evidence_test check="all" check_existence="at_least_one_exists"
                               comment="Ensure 'net.ipv4.conf.default.log_martians' kernel parameter equals 1 (int)"
                               negated="false"
                               ns="unix"
                               objref="oval:org.cisecurity.benchmarks.o_centos_centos:obj:10095"
                               result="true"
                               testref="oval:org.cisecurity.benchmarks.o_centos_centos:tst:10095"
                               type="sysctl_test">
               <cis:evidence_state steref="oval:org.cisecurity.benchmarks.o_centos_centos:ste:10041">
                  <cis:evidence_item itemref="2049101272">
                     <cis:evidence_item_pk status="exists">
                        <cis:evidence_item_pk_field name="name" value="net.ipv4.conf.default.log_martians"/>
                     </cis:evidence_item_pk>
                     <cis:evidence_field cv="net.ipv4.conf.default.log_martians" dt="string"
                                         ev="net.ipv4.conf.default.log_martians"
                                         name="name"
                                         op="equals"
                                         result="true"/>
                     <cis:evidence_field cv="1" dt="int" ev="1" name="value" op="equals" result="true"/>
                  </cis:evidence_item>
               </cis:evidence_state>
            </cis:evidence_test>
         </cis:and>
      </cis:evidence>
   </metadata>
   <complex-check operator="AND">
      <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
         <check-export export-name="oval:org.cisecurity.benchmarks.o_centos_centos:var:1093"
                       value-id="xccdf_org.cisecurity.benchmarks_value_4.2.4.1_var"/>
         <check-content-ref href="CIS_CentOS_Linux_7_Benchmark_v1.1.0-oval.xml"
                            name="oval:org.cisecurity.benchmarks.o_centos_centos:def:1093"/>
      </check>
      <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
         <check-export export-name="oval:org.cisecurity.benchmarks.o_centos_centos:var:1094"
                       value-id="xccdf_org.cisecurity.benchmarks_value_4.2.4.2_var"/>
         <check-content-ref href="CIS_CentOS_Linux_7_Benchmark_v1.1.0-oval.xml"
                            name="oval:org.cisecurity.benchmarks.o_centos_centos:def:1094"/>
      </check>
   </complex-check>
</rule-result>

<rule-result xmlns="http://checklists.nist.gov/xccdf/1.2"
             xmlns:xccdf="http://checklists.nist.gov/xccdf/1.2"
             xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
             idref="xccdf_org.cisecurity.benchmarks_rule_4.2.5_Enable_Ignore_Broadcast_Requests"
             role="full"
             severity="unknown"
             time="2015-11-09T16:01:30.769-06:00"
             version="1"
             weight="1.0">
   <result>pass</result>
   <metadata>
      <cis:evidence xmlns:cis="http://benchmarks.cisecurity.org/evidence/1.0"
                    end-time="2015-11-09T16:01:30.769-06:00"
                    start-time="2015-11-09T16:01:30.767-06:00">
         <cis:and>
            <cis:evidence_test check="all" check_existence="at_least_one_exists"
                               comment="Ensure 'net.ipv4.icmp_echo_ignore_broadcasts' kernel parameter equals 1 (int)"
                               negated="false"
                               ns="unix"
                               objref="oval:org.cisecurity.benchmarks.o_centos_centos:obj:10096"
                               result="true"
                               testref="oval:org.cisecurity.benchmarks.o_centos_centos:tst:10096"
                               type="sysctl_test">
               <cis:evidence_state steref="oval:org.cisecurity.benchmarks.o_centos_centos:ste:10042">
                  <cis:evidence_item itemref="226710403">
                     <cis:evidence_item_pk status="exists">
                        <cis:evidence_item_pk_field name="name" value="net.ipv4.icmp_echo_ignore_broadcasts"/>
                     </cis:evidence_item_pk>
                     <cis:evidence_field cv="net.ipv4.icmp_echo_ignore_broadcasts" dt="string"
                                         ev="net.ipv4.icmp_echo_ignore_broadcasts"
                                         name="name"
                                         op="equals"
                                         result="true"/>
                     <cis:evidence_field cv="1" dt="int" ev="1" name="value" op="equals" result="true"/>
                  </cis:evidence_item>
               </cis:evidence_state>
            </cis:evidence_test>
         </cis:and>
      </cis:evidence>
   </metadata>
   <complex-check operator="AND">
      <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
         <check-export export-name="oval:org.cisecurity.benchmarks.o_centos_centos:var:1095"
                       value-id="xccdf_org.cisecurity.benchmarks_value_4.2.5.1_var"/>
         <check-content-ref href="CIS_CentOS_Linux_7_Benchmark_v1.1.0-oval.xml"
                            name="oval:org.cisecurity.benchmarks.o_centos_centos:def:1095"/>
      </check>
   </complex-check>
</rule-result>

<rule-result xmlns="http://checklists.nist.gov/xccdf/1.2"
             xmlns:xccdf="http://checklists.nist.gov/xccdf/1.2"
             xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
             idref="xccdf_org.cisecurity.benchmarks_rule_4.2.6_Enable_Bad_Error_Message_Protection"
             role="full"
             severity="unknown"
             time="2015-11-09T16:01:33.858-06:00"
             version="1"
             weight="1.0">
   <result>pass</result>
   <metadata>
      <cis:evidence xmlns:cis="http://benchmarks.cisecurity.org/evidence/1.0"
                    end-time="2015-11-09T16:01:33.859-06:00"
                    start-time="2015-11-09T16:01:33.857-06:00">
         <cis:and>
            <cis:evidence_test check="all" check_existence="at_least_one_exists"
                               comment="Ensure 'net.ipv4.icmp_ignore_bogus_error_responses' kernel parameter equals 1 (int)"
                               negated="false"
                               ns="unix"
                               objref="oval:org.cisecurity.benchmarks.o_centos_centos:obj:10097"
                               result="true"
                               testref="oval:org.cisecurity.benchmarks.o_centos_centos:tst:10097"
                               type="sysctl_test">
               <cis:evidence_state steref="oval:org.cisecurity.benchmarks.o_centos_centos:ste:10043">
                  <cis:evidence_item itemref="667310607">
                     <cis:evidence_item_pk status="exists">
                        <cis:evidence_item_pk_field name="name" value="net.ipv4.icmp_ignore_bogus_error_responses"/>
                     </cis:evidence_item_pk>
                     <cis:evidence_field cv="net.ipv4.icmp_ignore_bogus_error_responses" dt="string"
                                         ev="net.ipv4.icmp_ignore_bogus_error_responses"
                                         name="name"
                                         op="equals"
                                         result="true"/>
                     <cis:evidence_field cv="1" dt="int" ev="1" name="value" op="equals" result="true"/>
                  </cis:evidence_item>
               </cis:evidence_state>
            </cis:evidence_test>
         </cis:and>
      </cis:evidence>
   </metadata>
   <complex-check operator="AND">
      <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
         <check-export export-name="oval:org.cisecurity.benchmarks.o_centos_centos:var:1096"
                       value-id="xccdf_org.cisecurity.benchmarks_value_4.2.6.1_var"/>
         <check-content-ref href="CIS_CentOS_Linux_7_Benchmark_v1.1.0-oval.xml"
                            name="oval:org.cisecurity.benchmarks.o_centos_centos:def:1096"/>
      </check>
   </complex-check>
</rule-result>

<rule-result xmlns="http://checklists.nist.gov/xccdf/1.2"
             xmlns:xccdf="http://checklists.nist.gov/xccdf/1.2"
             xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
             idref="xccdf_org.cisecurity.benchmarks_rule_4.2.8_Enable_TCP_SYN_Cookies"
             role="full"
             severity="unknown"
             time="2015-11-09T16:01:32.497-06:00"
             version="1"
             weight="1.0">
   <result>pass</result>
   <metadata>
      <cis:evidence xmlns:cis="http://benchmarks.cisecurity.org/evidence/1.0"
                    end-time="2015-11-09T16:01:32.497-06:00"
                    start-time="2015-11-09T16:01:32.496-06:00">
         <cis:and>
            <cis:evidence_test check="all" check_existence="at_least_one_exists"
                               comment="Ensure 'net.ipv4.tcp_syncookies' kernel parameter equals 1 (int)"
                               negated="false"
                               ns="unix"
                               objref="oval:org.cisecurity.benchmarks.o_centos_centos:obj:10100"
                               result="true"
                               testref="oval:org.cisecurity.benchmarks.o_centos_centos:tst:10100"
                               type="sysctl_test">
               <cis:evidence_state steref="oval:org.cisecurity.benchmarks.o_centos_centos:ste:10046">
                  <cis:evidence_item itemref="1925564927">
                     <cis:evidence_item_pk status="exists">
                        <cis:evidence_item_pk_field name="name" value="net.ipv4.tcp_syncookies"/>
                     </cis:evidence_item_pk>
                     <cis:evidence_field cv="net.ipv4.tcp_syncookies" dt="string" ev="net.ipv4.tcp_syncookies"
                                         name="name"
                                         op="equals"
                                         result="true"/>
                     <cis:evidence_field cv="1" dt="int" ev="1" name="value" op="equals" result="true"/>
                  </cis:evidence_item>
               </cis:evidence_state>
            </cis:evidence_test>
         </cis:and>
      </cis:evidence>
   </metadata>
   <complex-check operator="AND">
      <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
         <check-export export-name="oval:org.cisecurity.benchmarks.o_centos_centos:var:1099"
                       value-id="xccdf_org.cisecurity.benchmarks_value_4.2.8.1_var"/>
         <check-content-ref href="CIS_CentOS_Linux_7_Benchmark_v1.1.0-oval.xml"
                            name="oval:org.cisecurity.benchmarks.o_centos_centos:def:1099"/>
      </check>
   </complex-check>
</rule-result>

<rule-result xmlns="http://checklists.nist.gov/xccdf/1.2"
             xmlns:xccdf="http://checklists.nist.gov/xccdf/1.2"
             xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
             idref="xccdf_org.cisecurity.benchmarks_rule_4.5.3_Verify_Permissions_on_etchosts.allow"
             role="full"
             severity="unknown"
             time="2015-11-09T16:01:31.753-06:00"
             version="1"
             weight="1.0">
   <result>pass</result>
   <metadata>
      <cis:evidence xmlns:cis="http://benchmarks.cisecurity.org/evidence/1.0"
                    end-time="2015-11-09T16:01:31.753-06:00"
                    start-time="2015-11-09T16:01:31.740-06:00">
         <cis:and>
            <cis:evidence_test check="all" check_existence="all_exist"
                               comment="Ensure /etc/hosts.allow has permission bits rw-r--r-- and does not have permissions --x-wx-wx"
                               negated="false"
                               ns="unix"
                               objref="oval:org.cisecurity.benchmarks.o_centos_centos:obj:10101"
                               result="true"
                               testref="oval:org.cisecurity.benchmarks.o_centos_centos:tst:10101"
                               type="file_test">
               <cis:evidence_state steref="oval:org.cisecurity.benchmarks.o_centos_centos:ste:10047">
                  <cis:evidence_item itemref="914516131">
                     <cis:evidence_item_pk status="exists">
                        <cis:evidence_item_pk_field name="filepath" value="/etc/hosts.allow"/>
                        <cis:evidence_item_pk_field name="path" value="/etc"/>
                        <cis:evidence_item_pk_field name="filename" value="hosts.allow"/>
                     </cis:evidence_item_pk>
                     <cis:evidence_field cv="true" dt="boolean" ev="true" name="uwrite" op="equals" result="true"/>
                     <cis:evidence_field cv="false" dt="boolean" ev="false" name="gexec" op="equals" result="true"/>
                     <cis:evidence_field cv="true" dt="boolean" ev="true" name="oread" op="equals" result="true"/>
                     <cis:evidence_field cv="false" dt="boolean" ev="false" name="uexec" op="equals" result="true"/>
                     <cis:evidence_field cv="false" dt="boolean" ev="false" name="oexec" op="equals" result="true"/>
                     <cis:evidence_field cv="false" dt="boolean" ev="false" name="owrite" op="equals" result="true"/>
                     <cis:evidence_field cv="true" dt="boolean" ev="true" name="uread" op="equals" result="true"/>
                     <cis:evidence_field cv="true" dt="boolean" ev="true" name="gread" op="equals" result="true"/>
                     <cis:evidence_field cv="false" dt="boolean" ev="false" name="gwrite" op="equals" result="true"/>
                  </cis:evidence_item>
               </cis:evidence_state>
            </cis:evidence_test>
         </cis:and>
      </cis:evidence>
   </metadata>
   <complex-check operator="AND">
      <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
         <check-content-ref href="CIS_CentOS_Linux_7_Benchmark_v1.1.0-oval.xml"
                            name="oval:org.cisecurity.benchmarks.o_centos_centos:def:1100"/>
      </check>
   </complex-check>
</rule-result>

<rule-result xmlns="http://checklists.nist.gov/xccdf/1.2"
             xmlns:xccdf="http://checklists.nist.gov/xccdf/1.2"
             xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
             idref="xccdf_org.cisecurity.benchmarks_rule_4.5.5_Verify_Permissions_on_etchosts.deny"
             role="full"
             severity="unknown"
             time="2015-11-09T16:01:32.349-06:00"
             version="1"
             weight="1.0">
   <result>pass</result>
   <metadata>
      <cis:evidence xmlns:cis="http://benchmarks.cisecurity.org/evidence/1.0"
                    end-time="2015-11-09T16:01:32.349-06:00"
                    start-time="2015-11-09T16:01:32.327-06:00">
         <cis:and>
            <cis:evidence_test check="all" check_existence="all_exist"
                               comment="Ensure all_exist /etc/hosts.deny has permission bits rw-r--r-- and does not have permissions --x-wx-wx"
                               negated="false"
                               ns="unix"
                               objref="oval:org.cisecurity.benchmarks.o_centos_centos:obj:10102"
                               result="true"
                               testref="oval:org.cisecurity.benchmarks.o_centos_centos:tst:10102"
                               type="file_test">
               <cis:evidence_state steref="oval:org.cisecurity.benchmarks.o_centos_centos:ste:10048">
                  <cis:evidence_item itemref="997800694">
                     <cis:evidence_item_pk status="exists">
                        <cis:evidence_item_pk_field name="filepath" value="/etc/hosts.deny"/>
                        <cis:evidence_item_pk_field name="path" value="/etc"/>
                        <cis:evidence_item_pk_field name="filename" value="hosts.deny"/>
                     </cis:evidence_item_pk>
                     <cis:evidence_field cv="true" dt="boolean" ev="true" name="uwrite" op="equals" result="true"/>
                     <cis:evidence_field cv="false" dt="boolean" ev="false" name="gexec" op="equals" result="true"/>
                     <cis:evidence_field cv="true" dt="boolean" ev="true" name="oread" op="equals" result="true"/>
                     <cis:evidence_field cv="false" dt="boolean" ev="false" name="uexec" op="equals" result="true"/>
                     <cis:evidence_field cv="false" dt="boolean" ev="false" name="oexec" op="equals" result="true"/>
                     <cis:evidence_field cv="false" dt="boolean" ev="false" name="owrite" op="equals" result="true"/>
                     <cis:evidence_field cv="true" dt="boolean" ev="true" name="uread" op="equals" result="true"/>
                     <cis:evidence_field cv="true" dt="boolean" ev="true" name="gread" op="equals" result="true"/>
                     <cis:evidence_field cv="false" dt="boolean" ev="false" name="gwrite" op="equals" result="true"/>
                  </cis:evidence_item>
               </cis:evidence_state>
            </cis:evidence_test>
         </cis:and>
      </cis:evidence>
   </metadata>
   <complex-check operator="AND">
      <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
         <check-content-ref href="CIS_CentOS_Linux_7_Benchmark_v1.1.0-oval.xml"
                            name="oval:org.cisecurity.benchmarks.o_centos_centos:def:1101"/>
      </check>
   </complex-check>
</rule-result>

<rule-result xmlns="http://checklists.nist.gov/xccdf/1.2"
             xmlns:xccdf="http://checklists.nist.gov/xccdf/1.2"
             xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
             idref="xccdf_org.cisecurity.benchmarks_rule_4.7_Enable_firewalld"
             role="full"
             severity="unknown"
             time="2015-11-09T16:01:33.471-06:00"
             version="1"
             weight="1.0">
   <result>pass</result>
   <metadata>
      <cis:evidence xmlns:cis="http://benchmarks.cisecurity.org/evidence/1.0"
                    end-time="2015-11-09T16:01:33.471-06:00"
                    start-time="2015-11-09T16:01:33.461-06:00">
         <cis:and>
            <cis:evidence_test check="all" check_existence="at_least_one_exists"
                               comment="Ensure systemd 'firewalld' unit 'UnitFileState' property equals enabled (string)"
                               negated="false"
                               ns="linux"
                               objref="oval:org.cisecurity.benchmarks.o_centos_centos:obj:10103"
                               result="true"
                               testref="oval:org.cisecurity.benchmarks.o_centos_centos:tst:10103"
                               type="systemdunitproperty_test">
               <cis:evidence_state steref="oval:org.cisecurity.benchmarks.o_centos_centos:ste:10049">
                  <cis:evidence_item itemref="1945809107">
                     <cis:evidence_item_pk status="exists">
                        <cis:evidence_item_pk_field name="unit" value="firewalld"/>
                        <cis:evidence_item_pk_field name="property" value="UnitFileState"/>
                     </cis:evidence_item_pk>
                     <cis:evidence_field cv="enabled" dt="string" ev="enabled" name="value" op="equals" result="true"/>
                  </cis:evidence_item>
               </cis:evidence_state>
            </cis:evidence_test>
         </cis:and>
      </cis:evidence>
   </metadata>
   <complex-check operator="AND">
      <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
         <check-export export-name="oval:org.cisecurity.benchmarks.o_centos_centos:var:1102"
                       value-id="xccdf_org.cisecurity.benchmarks_value_4.7.1_var"/>
         <check-content-ref href="CIS_CentOS_Linux_7_Benchmark_v1.1.0-oval.xml"
                            name="oval:org.cisecurity.benchmarks.o_centos_centos:def:1102"/>
      </check>
   </complex-check>
</rule-result>

<rule-result xmlns="http://checklists.nist.gov/xccdf/1.2"
             xmlns:xccdf="http://checklists.nist.gov/xccdf/1.2"
             xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
             idref="xccdf_org.cisecurity.benchmarks_rule_5.1.1_Install_the_rsyslog_package"
             role="full"
             severity="unknown"
             time="2015-11-09T16:01:33.095-06:00"
             version="1"
             weight="1.0">
   <result>pass</result>
   <metadata>
      <cis:evidence xmlns:cis="http://benchmarks.cisecurity.org/evidence/1.0"
                    end-time="2015-11-09T16:01:33.095-06:00"
                    start-time="2015-11-09T16:01:33.021-06:00">
         <cis:and>
            <cis:evidence_test check="all" check_existence="at_least_one_exists"
                               comment="Ensure rsyslog package is installed"
                               negated="false"
                               ns="linux"
                               objref="oval:org.cisecurity.benchmarks.o_centos_centos:obj:10104"
                               result="true"
                               testref="oval:org.cisecurity.benchmarks.o_centos_centos:tst:10104"
                               type="rpminfo_test">
               <cis:evidence_object>
                  <cis:evidence_item itemref="1396752935">
                     <cis:evidence_item_pk status="exists">
                        <cis:evidence_item_pk_field name="name" value="rsyslog"/>
                     </cis:evidence_item_pk>
                  </cis:evidence_item>
               </cis:evidence_object>
            </cis:evidence_test>
         </cis:and>
      </cis:evidence>
   </metadata>
   <complex-check operator="AND">
      <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
         <check-content-ref href="CIS_CentOS_Linux_7_Benchmark_v1.1.0-oval.xml"
                            name="oval:org.cisecurity.benchmarks.o_centos_centos:def:1103"/>
      </check>
   </complex-check>
</rule-result>

<rule-result xmlns="http://checklists.nist.gov/xccdf/1.2"
             xmlns:xccdf="http://checklists.nist.gov/xccdf/1.2"
             xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
             idref="xccdf_org.cisecurity.benchmarks_rule_5.1.2_Activate_the_rsyslog_Service"
             role="full"
             severity="unknown"
             time="2015-11-09T16:01:33.923-06:00"
             version="1"
             weight="1.0">
   <result>pass</result>
   <metadata>
      <cis:evidence xmlns:cis="http://benchmarks.cisecurity.org/evidence/1.0"
                    end-time="2015-11-09T16:01:33.923-06:00"
                    start-time="2015-11-09T16:01:33.917-06:00">
         <cis:and>
            <cis:evidence_test check="all" check_existence="at_least_one_exists"
                               comment="Ensure systemd 'rsyslog.service' unit 'UnitFileState' property equals enabled (string)"
                               negated="false"
                               ns="linux"
                               objref="oval:org.cisecurity.benchmarks.o_centos_centos:obj:10105"
                               result="true"
                               testref="oval:org.cisecurity.benchmarks.o_centos_centos:tst:10105"
                               type="systemdunitproperty_test">
               <cis:evidence_state steref="oval:org.cisecurity.benchmarks.o_centos_centos:ste:10050">
                  <cis:evidence_item itemref="1252115558">
                     <cis:evidence_item_pk status="exists">
                        <cis:evidence_item_pk_field name="unit" value="rsyslog.service"/>
                        <cis:evidence_item_pk_field name="property" value="UnitFileState"/>
                     </cis:evidence_item_pk>
                     <cis:evidence_field cv="enabled" dt="string" ev="enabled" name="value" op="equals" result="true"/>
                  </cis:evidence_item>
               </cis:evidence_state>
            </cis:evidence_test>
         </cis:and>
      </cis:evidence>
   </metadata>
   <complex-check operator="AND">
      <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
         <check-export export-name="oval:org.cisecurity.benchmarks.o_centos_centos:var:1104"
                       value-id="xccdf_org.cisecurity.benchmarks_value_5.1.2.1_var"/>
         <check-content-ref href="CIS_CentOS_Linux_7_Benchmark_v1.1.0-oval.xml"
                            name="oval:org.cisecurity.benchmarks.o_centos_centos:def:1104"/>
      </check>
   </complex-check>
</rule-result>

<rule-result xmlns="http://checklists.nist.gov/xccdf/1.2"
             xmlns:xccdf="http://checklists.nist.gov/xccdf/1.2"
             xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
             idref="xccdf_org.cisecurity.benchmarks_rule_6.1.1_Enable_anacron_Daemon"
             role="full"
             severity="unknown"
             time="2015-11-09T16:01:31.715-06:00"
             version="1"
             weight="1.0">
   <result>pass</result>
   <metadata>
      <cis:evidence xmlns:cis="http://benchmarks.cisecurity.org/evidence/1.0"
                    end-time="2015-11-09T16:01:31.715-06:00"
                    start-time="2015-11-09T16:01:31.633-06:00">
         <cis:and>
            <cis:evidence_test check="all" check_existence="at_least_one_exists"
                               comment="Ensure cronie-anacron package is installed"
                               negated="false"
                               ns="linux"
                               objref="oval:org.cisecurity.benchmarks.o_centos_centos:obj:10167"
                               result="true"
                               testref="oval:org.cisecurity.benchmarks.o_centos_centos:tst:10165"
                               type="rpminfo_test">
               <cis:evidence_object>
                  <cis:evidence_item itemref="1183113783">
                     <cis:evidence_item_pk status="exists">
                        <cis:evidence_item_pk_field name="name" value="cronie-anacron"/>
                     </cis:evidence_item_pk>
                  </cis:evidence_item>
               </cis:evidence_object>
            </cis:evidence_test>
         </cis:and>
      </cis:evidence>
   </metadata>
   <complex-check operator="AND">
      <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
         <check-content-ref href="CIS_CentOS_Linux_7_Benchmark_v1.1.0-oval.xml"
                            name="oval:org.cisecurity.benchmarks.o_centos_centos:def:1164"/>
      </check>
   </complex-check>
</rule-result>

<rule-result xmlns="http://checklists.nist.gov/xccdf/1.2"
             xmlns:xccdf="http://checklists.nist.gov/xccdf/1.2"
             xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
             idref="xccdf_org.cisecurity.benchmarks_rule_6.1.2_Enable_crond_Daemon"
             role="full"
             severity="unknown"
             time="2015-11-09T16:01:32.158-06:00"
             version="1"
             weight="1.0">
   <result>pass</result>
   <metadata>
      <cis:evidence xmlns:cis="http://benchmarks.cisecurity.org/evidence/1.0"
                    end-time="2015-11-09T16:01:32.158-06:00"
                    start-time="2015-11-09T16:01:32.147-06:00">
         <cis:and>
            <cis:evidence_test check="all" check_existence="at_least_one_exists"
                               comment="Ensure systemd 'crond.service' unit 'UnitFileState' property equals enabled (string)"
                               negated="false"
                               ns="linux"
                               objref="oval:org.cisecurity.benchmarks.o_centos_centos:obj:10168"
                               result="true"
                               testref="oval:org.cisecurity.benchmarks.o_centos_centos:tst:10166"
                               type="systemdunitproperty_test">
               <cis:evidence_state steref="oval:org.cisecurity.benchmarks.o_centos_centos:ste:10062">
                  <cis:evidence_item itemref="1644045145">
                     <cis:evidence_item_pk status="exists">
                        <cis:evidence_item_pk_field name="unit" value="crond.service"/>
                        <cis:evidence_item_pk_field name="property" value="UnitFileState"/>
                     </cis:evidence_item_pk>
                     <cis:evidence_field cv="enabled" dt="string" ev="enabled" name="value" op="equals" result="true"/>
                  </cis:evidence_item>
               </cis:evidence_state>
            </cis:evidence_test>
         </cis:and>
      </cis:evidence>
   </metadata>
   <complex-check operator="AND">
      <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
         <check-export export-name="oval:org.cisecurity.benchmarks.o_centos_centos:var:1165"
                       value-id="xccdf_org.cisecurity.benchmarks_value_6.1.2.1_var"/>
         <check-content-ref href="CIS_CentOS_Linux_7_Benchmark_v1.1.0-oval.xml"
                            name="oval:org.cisecurity.benchmarks.o_centos_centos:def:1165"/>
      </check>
   </complex-check>
</rule-result>

<rule-result xmlns="http://checklists.nist.gov/xccdf/1.2"
             xmlns:xccdf="http://checklists.nist.gov/xccdf/1.2"
             xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
             idref="xccdf_org.cisecurity.benchmarks_rule_6.1.3_Set_UserGroup_Owner_and_Permission_on_etcanacrontab"
             role="full"
             severity="unknown"
             time="2015-11-09T16:01:31.248-06:00"
             version="1"
             weight="1.0">
   <result>pass</result>
   <metadata>
      <cis:evidence xmlns:cis="http://benchmarks.cisecurity.org/evidence/1.0"
                    end-time="2015-11-09T16:01:31.248-06:00"
                    start-time="2015-11-09T16:01:31.087-06:00">
         <cis:and>
            <cis:evidence_test check="all" check_existence="all_exist"
                               comment="Ensure /etc/anacrontab is owned by user '0' group '0'"
                               negated="false"
                               ns="unix"
                               objref="oval:org.cisecurity.benchmarks.o_centos_centos:obj:10170"
                               result="true"
                               testref="oval:org.cisecurity.benchmarks.o_centos_centos:tst:10168"
                               type="file_test">
               <cis:evidence_state steref="oval:org.cisecurity.benchmarks.o_centos_centos:ste:10064">
                  <cis:evidence_item itemref="1579934421">
                     <cis:evidence_item_pk status="exists">
                        <cis:evidence_item_pk_field name="filepath" value="/etc/anacrontab"/>
                        <cis:evidence_item_pk_field name="path" value="/etc"/>
                        <cis:evidence_item_pk_field name="filename" value="anacrontab"/>
                     </cis:evidence_item_pk>
                     <cis:evidence_field cv="0" dt="int" ev="0" name="group_id" op="equals" result="true"/>
                     <cis:evidence_field cv="0" dt="int" ev="0" name="user_id" op="equals" result="true"/>
                  </cis:evidence_item>
               </cis:evidence_state>
            </cis:evidence_test>
            <cis:evidence_test check="all" check_existence="all_exist"
                               comment="Ensure /etc/anacrontab has permission bits --------- and does not have permissions ---rwxrwx"
                               negated="false"
                               ns="unix"
                               objref="oval:org.cisecurity.benchmarks.o_centos_centos:obj:10169"
                               result="true"
                               testref="oval:org.cisecurity.benchmarks.o_centos_centos:tst:10167"
                               type="file_test">
               <cis:evidence_state steref="oval:org.cisecurity.benchmarks.o_centos_centos:ste:10063">
                  <cis:evidence_item itemref="766547370">
                     <cis:evidence_item_pk status="exists">
                        <cis:evidence_item_pk_field name="filepath" value="/etc/anacrontab"/>
                        <cis:evidence_item_pk_field name="path" value="/etc"/>
                        <cis:evidence_item_pk_field name="filename" value="anacrontab"/>
                     </cis:evidence_item_pk>
                     <cis:evidence_field cv="false" dt="boolean" ev="false" name="gexec" op="equals" result="true"/>
                     <cis:evidence_field cv="false" dt="boolean" ev="false" name="oread" op="equals" result="true"/>
                     <cis:evidence_field cv="false" dt="boolean" ev="false" name="oexec" op="equals" result="true"/>
                     <cis:evidence_field cv="false" dt="boolean" ev="false" name="owrite" op="equals" result="true"/>
                     <cis:evidence_field cv="false" dt="boolean" ev="false" name="gread" op="equals" result="true"/>
                     <cis:evidence_field cv="false" dt="boolean" ev="false" name="gwrite" op="equals" result="true"/>
                  </cis:evidence_item>
               </cis:evidence_state>
            </cis:evidence_test>
         </cis:and>
      </cis:evidence>
   </metadata>
   <complex-check operator="AND">
      <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
         <check-content-ref href="CIS_CentOS_Linux_7_Benchmark_v1.1.0-oval.xml"
                            name="oval:org.cisecurity.benchmarks.o_centos_centos:def:1166"/>
      </check>
      <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
         <check-content-ref href="CIS_CentOS_Linux_7_Benchmark_v1.1.0-oval.xml"
                            name="oval:org.cisecurity.benchmarks.o_centos_centos:def:1167"/>
      </check>
   </complex-check>
</rule-result>

<rule-result xmlns="http://checklists.nist.gov/xccdf/1.2"
             xmlns:xccdf="http://checklists.nist.gov/xccdf/1.2"
             xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
             idref="xccdf_org.cisecurity.benchmarks_rule_6.1.4_Set_UserGroup_Owner_and_Permission_on_etccrontab"
             role="full"
             severity="unknown"
             time="2015-11-09T16:01:31.579-06:00"
             version="1"
             weight="1.0">
   <result>pass</result>
   <metadata>
      <cis:evidence xmlns:cis="http://benchmarks.cisecurity.org/evidence/1.0"
                    end-time="2015-11-09T16:01:31.579-06:00"
                    start-time="2015-11-09T16:01:31.535-06:00">
         <cis:and>
            <cis:evidence_test check="all" check_existence="all_exist"
                               comment="Ensure /etc/crontab has permission bits --------- and does not have permissions ---rwxrwx"
                               negated="false"
                               ns="unix"
                               objref="oval:org.cisecurity.benchmarks.o_centos_centos:obj:10171"
                               result="true"
                               testref="oval:org.cisecurity.benchmarks.o_centos_centos:tst:10169"
                               type="file_test">
               <cis:evidence_state steref="oval:org.cisecurity.benchmarks.o_centos_centos:ste:10065">
                  <cis:evidence_item itemref="1049393356">
                     <cis:evidence_item_pk status="exists">
                        <cis:evidence_item_pk_field name="filepath" value="/etc/crontab"/>
                        <cis:evidence_item_pk_field name="path" value="/etc"/>
                        <cis:evidence_item_pk_field name="filename" value="crontab"/>
                     </cis:evidence_item_pk>
                     <cis:evidence_field cv="false" dt="boolean" ev="false" name="gexec" op="equals" result="true"/>
                     <cis:evidence_field cv="false" dt="boolean" ev="false" name="oread" op="equals" result="true"/>
                     <cis:evidence_field cv="false" dt="boolean" ev="false" name="oexec" op="equals" result="true"/>
                     <cis:evidence_field cv="false" dt="boolean" ev="false" name="owrite" op="equals" result="true"/>
                     <cis:evidence_field cv="false" dt="boolean" ev="false" name="gread" op="equals" result="true"/>
                     <cis:evidence_field cv="false" dt="boolean" ev="false" name="gwrite" op="equals" result="true"/>
                  </cis:evidence_item>
               </cis:evidence_state>
            </cis:evidence_test>
            <cis:evidence_test check="all" check_existence="all_exist"
                               comment="Ensure /etc/crontab is owned by user '0' group '0'"
                               negated="false"
                               ns="unix"
                               objref="oval:org.cisecurity.benchmarks.o_centos_centos:obj:10172"
                               result="true"
                               testref="oval:org.cisecurity.benchmarks.o_centos_centos:tst:10170"
                               type="file_test">
               <cis:evidence_state steref="oval:org.cisecurity.benchmarks.o_centos_centos:ste:10066">
                  <cis:evidence_item itemref="1742971967">
                     <cis:evidence_item_pk status="exists">
                        <cis:evidence_item_pk_field name="filepath" value="/etc/crontab"/>
                        <cis:evidence_item_pk_field name="path" value="/etc"/>
                        <cis:evidence_item_pk_field name="filename" value="crontab"/>
                     </cis:evidence_item_pk>
                     <cis:evidence_field cv="0" dt="int" ev="0" name="group_id" op="equals" result="true"/>
                     <cis:evidence_field cv="0" dt="int" ev="0" name="user_id" op="equals" result="true"/>
                  </cis:evidence_item>
               </cis:evidence_state>
            </cis:evidence_test>
         </cis:and>
      </cis:evidence>
   </metadata>
   <complex-check operator="AND">
      <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
         <check-content-ref href="CIS_CentOS_Linux_7_Benchmark_v1.1.0-oval.xml"
                            name="oval:org.cisecurity.benchmarks.o_centos_centos:def:1168"/>
      </check>
      <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
         <check-content-ref href="CIS_CentOS_Linux_7_Benchmark_v1.1.0-oval.xml"
                            name="oval:org.cisecurity.benchmarks.o_centos_centos:def:1169"/>
      </check>
   </complex-check>
</rule-result>

<rule-result xmlns="http://checklists.nist.gov/xccdf/1.2"
             xmlns:xccdf="http://checklists.nist.gov/xccdf/1.2"
             xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
             idref="xccdf_org.cisecurity.benchmarks_rule_6.1.7_Set_UserGroup_Owner_and_Permission_on_etccron.weekly"
             role="full"
             severity="unknown"
             time="2015-11-09T16:01:30.740-06:00"
             version="1"
             weight="1.0">
   <result>pass</result>
   <metadata>
      <cis:evidence xmlns:cis="http://benchmarks.cisecurity.org/evidence/1.0"
                    end-time="2015-11-09T16:01:30.740-06:00"
                    start-time="2015-11-09T16:01:30.700-06:00">
         <cis:and>
            <cis:evidence_test check="all" check_existence="all_exist"
                               comment="Ensure /etc/cron.weekly/ has permission bits --------- and does not have permissions ---rwxrwx"
                               negated="false"
                               ns="unix"
                               objref="oval:org.cisecurity.benchmarks.o_centos_centos:obj:10177"
                               result="true"
                               testref="oval:org.cisecurity.benchmarks.o_centos_centos:tst:10175"
                               type="file_test">
               <cis:evidence_state steref="oval:org.cisecurity.benchmarks.o_centos_centos:ste:10071">
                  <cis:evidence_item itemref="681580086">
                     <cis:evidence_item_pk status="exists">
                        <cis:evidence_item_pk_field name="filepath" value="/etc/cron.weekly"/>
                        <cis:evidence_item_pk_field name="path" value="/etc/cron.weekly"/>
                        <cis:evidence_item_pk_field name="filename" value="NIL"/>
                     </cis:evidence_item_pk>
                     <cis:evidence_field cv="false" dt="boolean" ev="false" name="gexec" op="equals" result="true"/>
                     <cis:evidence_field cv="false" dt="boolean" ev="false" name="oread" op="equals" result="true"/>
                     <cis:evidence_field cv="false" dt="boolean" ev="false" name="oexec" op="equals" result="true"/>
                     <cis:evidence_field cv="false" dt="boolean" ev="false" name="owrite" op="equals" result="true"/>
                     <cis:evidence_field cv="false" dt="boolean" ev="false" name="gread" op="equals" result="true"/>
                     <cis:evidence_field cv="false" dt="boolean" ev="false" name="gwrite" op="equals" result="true"/>
                  </cis:evidence_item>
               </cis:evidence_state>
            </cis:evidence_test>
            <cis:evidence_test check="all" check_existence="all_exist"
                               comment="Ensure /etc/cron.weekly/ is owned by user '0' group '0'"
                               negated="false"
                               ns="unix"
                               objref="oval:org.cisecurity.benchmarks.o_centos_centos:obj:10178"
                               result="true"
                               testref="oval:org.cisecurity.benchmarks.o_centos_centos:tst:10176"
                               type="file_test">
               <cis:evidence_state steref="oval:org.cisecurity.benchmarks.o_centos_centos:ste:10072">
                  <cis:evidence_item itemref="1889819864">
                     <cis:evidence_item_pk status="exists">
                        <cis:evidence_item_pk_field name="filepath" value="/etc/cron.weekly"/>
                        <cis:evidence_item_pk_field name="path" value="/etc/cron.weekly"/>
                        <cis:evidence_item_pk_field name="filename" value="NIL"/>
                     </cis:evidence_item_pk>
                     <cis:evidence_field cv="0" dt="int" ev="0" name="group_id" op="equals" result="true"/>
                     <cis:evidence_field cv="0" dt="int" ev="0" name="user_id" op="equals" result="true"/>
                  </cis:evidence_item>
               </cis:evidence_state>
            </cis:evidence_test>
         </cis:and>
      </cis:evidence>
   </metadata>
   <complex-check operator="AND">
      <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
         <check-content-ref href="CIS_CentOS_Linux_7_Benchmark_v1.1.0-oval.xml"
                            name="oval:org.cisecurity.benchmarks.o_centos_centos:def:1174"/>
      </check>
      <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
         <check-content-ref href="CIS_CentOS_Linux_7_Benchmark_v1.1.0-oval.xml"
                            name="oval:org.cisecurity.benchmarks.o_centos_centos:def:1175"/>
      </check>
   </complex-check>
</rule-result>

<rule-result xmlns="http://checklists.nist.gov/xccdf/1.2"
             xmlns:xccdf="http://checklists.nist.gov/xccdf/1.2"
             xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
             idref="xccdf_org.cisecurity.benchmarks_rule_6.1.8_Set_UserGroup_Owner_and_Permission_on_etccron.monthly"
             role="full"
             severity="unknown"
             time="2015-11-09T16:01:30.330-06:00"
             version="1"
             weight="1.0">
   <result>pass</result>
   <metadata>
      <cis:evidence xmlns:cis="http://benchmarks.cisecurity.org/evidence/1.0"
                    end-time="2015-11-09T16:01:30.330-06:00"
                    start-time="2015-11-09T16:01:30.276-06:00">
         <cis:and>
            <cis:evidence_test check="all" check_existence="all_exist"
                               comment="Ensure /etc/cron.monthly/ has permission bits --------- and does not have permissions ---rwxrwx"
                               negated="false"
                               ns="unix"
                               objref="oval:org.cisecurity.benchmarks.o_centos_centos:obj:10179"
                               result="true"
                               testref="oval:org.cisecurity.benchmarks.o_centos_centos:tst:10177"
                               type="file_test">
               <cis:evidence_state steref="oval:org.cisecurity.benchmarks.o_centos_centos:ste:10073">
                  <cis:evidence_item itemref="1473880084">
                     <cis:evidence_item_pk status="exists">
                        <cis:evidence_item_pk_field name="filepath" value="/etc/cron.monthly"/>
                        <cis:evidence_item_pk_field name="path" value="/etc/cron.monthly"/>
                        <cis:evidence_item_pk_field name="filename" value="NIL"/>
                     </cis:evidence_item_pk>
                     <cis:evidence_field cv="false" dt="boolean" ev="false" name="gexec" op="equals" result="true"/>
                     <cis:evidence_field cv="false" dt="boolean" ev="false" name="oread" op="equals" result="true"/>
                     <cis:evidence_field cv="false" dt="boolean" ev="false" name="oexec" op="equals" result="true"/>
                     <cis:evidence_field cv="false" dt="boolean" ev="false" name="owrite" op="equals" result="true"/>
                     <cis:evidence_field cv="false" dt="boolean" ev="false" name="gread" op="equals" result="true"/>
                     <cis:evidence_field cv="false" dt="boolean" ev="false" name="gwrite" op="equals" result="true"/>
                  </cis:evidence_item>
               </cis:evidence_state>
            </cis:evidence_test>
            <cis:evidence_test check="all" check_existence="all_exist"
                               comment="Ensure /etc/cron.monthly/ is owned by user '0' group '0'"
                               negated="false"
                               ns="unix"
                               objref="oval:org.cisecurity.benchmarks.o_centos_centos:obj:10180"
                               result="true"
                               testref="oval:org.cisecurity.benchmarks.o_centos_centos:tst:10178"
                               type="file_test">
               <cis:evidence_state steref="oval:org.cisecurity.benchmarks.o_centos_centos:ste:10074">
                  <cis:evidence_item itemref="133885056">
                     <cis:evidence_item_pk status="exists">
                        <cis:evidence_item_pk_field name="filepath" value="/etc/cron.monthly"/>
                        <cis:evidence_item_pk_field name="path" value="/etc/cron.monthly"/>
                        <cis:evidence_item_pk_field name="filename" value="NIL"/>
                     </cis:evidence_item_pk>
                     <cis:evidence_field cv="0" dt="int" ev="0" name="group_id" op="equals" result="true"/>
                     <cis:evidence_field cv="0" dt="int" ev="0" name="user_id" op="equals" result="true"/>
                  </cis:evidence_item>
               </cis:evidence_state>
            </cis:evidence_test>
         </cis:and>
      </cis:evidence>
   </metadata>
   <complex-check operator="AND">
      <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
         <check-content-ref href="CIS_CentOS_Linux_7_Benchmark_v1.1.0-oval.xml"
                            name="oval:org.cisecurity.benchmarks.o_centos_centos:def:1176"/>
      </check>
      <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
         <check-content-ref href="CIS_CentOS_Linux_7_Benchmark_v1.1.0-oval.xml"
                            name="oval:org.cisecurity.benchmarks.o_centos_centos:def:1177"/>
      </check>
   </complex-check>
</rule-result>

<rule-result xmlns="http://checklists.nist.gov/xccdf/1.2"
             xmlns:xccdf="http://checklists.nist.gov/xccdf/1.2"
             xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
             idref="xccdf_org.cisecurity.benchmarks_rule_6.1.10_Restrict_at_Daemon"
             role="full"
             severity="unknown"
             time="2015-11-09T16:01:33.323-06:00"
             version="1"
             weight="1.0">
   <result>pass</result>
   <metadata>
      <cis:evidence xmlns:cis="http://benchmarks.cisecurity.org/evidence/1.0"
                    end-time="2015-11-09T16:01:33.323-06:00"
                    start-time="2015-11-09T16:01:33.280-06:00">
         <cis:and>
            <cis:and>
               <cis:evidence_test check="all" check_existence="all_exist"
                                  comment="Ensure all_exist /etc/at.allow has permission bits --------- and does not have permissions ---rwxrwx"
                                  negated="false"
                                  ns="unix"
                                  objref="oval:org.cisecurity.benchmarks.o_centos_centos:obj:10184"
                                  result="true"
                                  testref="oval:org.cisecurity.benchmarks.o_centos_centos:tst:10182"
                                  type="file_test">
                  <cis:evidence_state steref="oval:org.cisecurity.benchmarks.o_centos_centos:ste:10078">
                     <cis:evidence_item itemref="1616166944">
                        <cis:evidence_item_pk status="exists">
                           <cis:evidence_item_pk_field name="filepath" value="/etc/at.allow"/>
                           <cis:evidence_item_pk_field name="path" value="/etc"/>
                           <cis:evidence_item_pk_field name="filename" value="at.allow"/>
                        </cis:evidence_item_pk>
                        <cis:evidence_field cv="false" dt="boolean" ev="false" name="gexec" op="equals" result="true"/>
                        <cis:evidence_field cv="false" dt="boolean" ev="false" name="oread" op="equals" result="true"/>
                        <cis:evidence_field cv="false" dt="boolean" ev="false" name="oexec" op="equals" result="true"/>
                        <cis:evidence_field cv="false" dt="boolean" ev="false" name="owrite" op="equals" result="true"/>
                        <cis:evidence_field cv="false" dt="boolean" ev="false" name="gread" op="equals" result="true"/>
                        <cis:evidence_field cv="false" dt="boolean" ev="false" name="gwrite" op="equals" result="true"/>
                     </cis:evidence_item>
                  </cis:evidence_state>
               </cis:evidence_test>
               <cis:evidence_test check="all" check_existence="none_exist"
                                  comment="Ensure none_exist /etc/at.deny"
                                  negated="false"
                                  ns="unix"
                                  objref="oval:org.cisecurity.benchmarks.o_centos_centos:obj:10183"
                                  result="true"
                                  testref="oval:org.cisecurity.benchmarks.o_centos_centos:tst:10181"
                                  type="file_test">
                  <cis:evidence_object>
                     <cis:evidence_item itemref="1651389734">
                        <cis:evidence_item_pk status="does not exist">
                           <cis:evidence_item_pk_field name="path" value="/etc"/>
                           <cis:evidence_item_pk_field name="filename" value="at.deny"/>
                        </cis:evidence_item_pk>
                     </cis:evidence_item>
                  </cis:evidence_object>
               </cis:evidence_test>
            </cis:and>
            <cis:evidence_test check="all" check_existence="all_exist"
                               comment="Ensure all_exist /etc/at.allow is owned by user '0' group '0'"
                               negated="false"
                               ns="unix"
                               objref="oval:org.cisecurity.benchmarks.o_centos_centos:obj:10185"
                               result="true"
                               testref="oval:org.cisecurity.benchmarks.o_centos_centos:tst:10183"
                               type="file_test">
               <cis:evidence_state steref="oval:org.cisecurity.benchmarks.o_centos_centos:ste:10079">
                  <cis:evidence_item itemref="1152296435">
                     <cis:evidence_item_pk status="exists">
                        <cis:evidence_item_pk_field name="filepath" value="/etc/at.allow"/>
                        <cis:evidence_item_pk_field name="path" value="/etc"/>
                        <cis:evidence_item_pk_field name="filename" value="at.allow"/>
                     </cis:evidence_item_pk>
                     <cis:evidence_field cv="0" dt="int" ev="0" name="group_id" op="equals" result="true"/>
                     <cis:evidence_field cv="0" dt="int" ev="0" name="user_id" op="equals" result="true"/>
                  </cis:evidence_item>
               </cis:evidence_state>
            </cis:evidence_test>
         </cis:and>
      </cis:evidence>
   </metadata>
   <complex-check operator="AND">
      <complex-check operator="AND">
         <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
            <check-content-ref href="CIS_CentOS_Linux_7_Benchmark_v1.1.0-oval.xml"
                               name="oval:org.cisecurity.benchmarks.o_centos_centos:def:1180"/>
         </check>
         <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
            <check-content-ref href="CIS_CentOS_Linux_7_Benchmark_v1.1.0-oval.xml"
                               name="oval:org.cisecurity.benchmarks.o_centos_centos:def:1181"/>
         </check>
      </complex-check>
      <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
         <check-content-ref href="CIS_CentOS_Linux_7_Benchmark_v1.1.0-oval.xml"
                            name="oval:org.cisecurity.benchmarks.o_centos_centos:def:1182"/>
      </check>
   </complex-check>
</rule-result>

<rule-result xmlns="http://checklists.nist.gov/xccdf/1.2"
             xmlns:xccdf="http://checklists.nist.gov/xccdf/1.2"
             xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
             idref="xccdf_org.cisecurity.benchmarks_rule_6.2.1_Set_SSH_Protocol_to_2"
             role="full"
             severity="unknown"
             time="2015-11-09T16:01:32.901-06:00"
             version="1"
             weight="1.0">
   <result>pass</result>
   <metadata>
      <cis:evidence xmlns:cis="http://benchmarks.cisecurity.org/evidence/1.0"
                    end-time="2015-11-09T16:01:32.901-06:00"
                    start-time="2015-11-09T16:01:32.899-06:00">
         <cis:and>
            <cis:evidence_test check="all" check_existence="at_least_one_exists"
                               comment="Ensure 'Protocol' sshd config parameter equals 2 (string)"
                               negated="false"
                               ns="independent"
                               objref="oval:org.cisecurity.benchmarks.o_centos_centos:obj:10189"
                               result="true"
                               testref="oval:org.cisecurity.benchmarks.o_centos_centos:tst:10187"
                               type="textfilecontent54_test">
               <cis:evidence_state steref="oval:org.cisecurity.benchmarks.o_centos_centos:ste:10083">
                  <cis:evidence_item itemref="342167681">
                     <cis:evidence_item_pk status="exists">
                        <cis:evidence_item_pk_field name="filepath" value="/etc/ssh/sshd_config"/>
                        <cis:evidence_item_pk_field name="path" value="/etc/ssh"/>
                        <cis:evidence_item_pk_field name="filename" value="sshd_config"/>
                        <cis:evidence_item_pk_field name="pattern" value="^\s*Protocol\s+(\S+)\s*(?:#.*)?$"/>
                        <cis:evidence_item_pk_field name="instance" value="1"/>
                        <cis:evidence_item_pk_field name="text" value="Protocol 2  # HostKey for protocol version 1"/>
                     </cis:evidence_item_pk>
                     <cis:evidence_field cv="2" dt="string" ev="2" name="subexpression" op="equals" result="true"/>
                  </cis:evidence_item>
               </cis:evidence_state>
            </cis:evidence_test>
         </cis:and>
      </cis:evidence>
   </metadata>
   <complex-check operator="AND">
      <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
         <check-export export-name="oval:org.cisecurity.benchmarks.o_centos_centos:var:1186"
                       value-id="xccdf_org.cisecurity.benchmarks_value_6.2.1.1_var"/>
         <check-content-ref href="CIS_CentOS_Linux_7_Benchmark_v1.1.0-oval.xml"
                            name="oval:org.cisecurity.benchmarks.o_centos_centos:def:1186"/>
      </check>
   </complex-check>
</rule-result>

<rule-result xmlns="http://checklists.nist.gov/xccdf/1.2"
             xmlns:xccdf="http://checklists.nist.gov/xccdf/1.2"
             xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
             idref="xccdf_org.cisecurity.benchmarks_rule_6.2.2_Set_LogLevel_to_INFO"
             role="full"
             severity="unknown"
             time="2015-11-09T16:01:31.868-06:00"
             version="1"
             weight="1.0">
   <result>pass</result>
   <metadata>
      <cis:evidence xmlns:cis="http://benchmarks.cisecurity.org/evidence/1.0"
                    end-time="2015-11-09T16:01:31.868-06:00"
                    start-time="2015-11-09T16:01:31.865-06:00">
         <cis:and>
            <cis:evidence_test check="all" check_existence="at_least_one_exists"
                               comment="Ensure 'LogLevel' sshd config parameter equals INFO (string)"
                               negated="false"
                               ns="independent"
                               objref="oval:org.cisecurity.benchmarks.o_centos_centos:obj:10190"
                               result="true"
                               testref="oval:org.cisecurity.benchmarks.o_centos_centos:tst:10188"
                               type="textfilecontent54_test">
               <cis:evidence_state steref="oval:org.cisecurity.benchmarks.o_centos_centos:ste:10084">
                  <cis:evidence_item itemref="1913822748">
                     <cis:evidence_item_pk status="exists">
                        <cis:evidence_item_pk_field name="filepath" value="/etc/ssh/sshd_config"/>
                        <cis:evidence_item_pk_field name="path" value="/etc/ssh"/>
                        <cis:evidence_item_pk_field name="filename" value="sshd_config"/>
                        <cis:evidence_item_pk_field name="pattern" value="^\s*LogLevel\s+(\S+)\s*(?:#.*)?$"/>
                        <cis:evidence_item_pk_field name="instance" value="1"/>
                        <cis:evidence_item_pk_field name="text" value="LogLevel INFO  # Authentication:"/>
                     </cis:evidence_item_pk>
                     <cis:evidence_field cv="INFO" dt="string" ev="INFO" name="subexpression" op="equals" result="true"/>
                  </cis:evidence_item>
               </cis:evidence_state>
            </cis:evidence_test>
         </cis:and>
      </cis:evidence>
   </metadata>
   <complex-check operator="AND">
      <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
         <check-export export-name="oval:org.cisecurity.benchmarks.o_centos_centos:var:1187"
                       value-id="xccdf_org.cisecurity.benchmarks_value_6.2.2.1_var"/>
         <check-content-ref href="CIS_CentOS_Linux_7_Benchmark_v1.1.0-oval.xml"
                            name="oval:org.cisecurity.benchmarks.o_centos_centos:def:1187"/>
      </check>
   </complex-check>
</rule-result>

<rule-result xmlns="http://checklists.nist.gov/xccdf/1.2"
             xmlns:xccdf="http://checklists.nist.gov/xccdf/1.2"
             xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
             idref="xccdf_org.cisecurity.benchmarks_rule_6.2.3_Set_Permissions_on_etcsshsshd_config"
             role="full"
             severity="unknown"
             time="2015-11-09T16:01:29.018-06:00"
             version="1"
             weight="1.0">
   <result>pass</result>
   <metadata>
      <cis:evidence xmlns:cis="http://benchmarks.cisecurity.org/evidence/1.0"
                    end-time="2015-11-09T16:01:29.019-06:00"
                    start-time="2015-11-09T16:01:28.965-06:00">
         <cis:and>
            <cis:evidence_test check="all" check_existence="all_exist"
                               comment="Ensure all_exist /etc/ssh/sshd_config has permission bits rw------- and does not have permissions --xrwxrwx"
                               negated="false"
                               ns="unix"
                               objref="oval:org.cisecurity.benchmarks.o_centos_centos:obj:10192"
                               result="true"
                               testref="oval:org.cisecurity.benchmarks.o_centos_centos:tst:10190"
                               type="file_test">
               <cis:evidence_state steref="oval:org.cisecurity.benchmarks.o_centos_centos:ste:10086">
                  <cis:evidence_item itemref="536270300">
                     <cis:evidence_item_pk status="exists">
                        <cis:evidence_item_pk_field name="filepath" value="/etc/ssh/sshd_config"/>
                        <cis:evidence_item_pk_field name="path" value="/etc/ssh"/>
                        <cis:evidence_item_pk_field name="filename" value="sshd_config"/>
                     </cis:evidence_item_pk>
                     <cis:evidence_field cv="true" dt="boolean" ev="true" name="uwrite" op="equals" result="true"/>
                     <cis:evidence_field cv="false" dt="boolean" ev="false" name="gexec" op="equals" result="true"/>
                     <cis:evidence_field cv="false" dt="boolean" ev="false" name="oread" op="equals" result="true"/>
                     <cis:evidence_field cv="false" dt="boolean" ev="false" name="uexec" op="equals" result="true"/>
                     <cis:evidence_field cv="false" dt="boolean" ev="false" name="oexec" op="equals" result="true"/>
                     <cis:evidence_field cv="false" dt="boolean" ev="false" name="owrite" op="equals" result="true"/>
                     <cis:evidence_field cv="true" dt="boolean" ev="true" name="uread" op="equals" result="true"/>
                     <cis:evidence_field cv="false" dt="boolean" ev="false" name="gread" op="equals" result="true"/>
                     <cis:evidence_field cv="false" dt="boolean" ev="false" name="gwrite" op="equals" result="true"/>
                  </cis:evidence_item>
               </cis:evidence_state>
            </cis:evidence_test>
            <cis:evidence_test check="all" check_existence="all_exist"
                               comment="Ensure all_exist /etc/ssh/sshd_config is owned by user '0' group '0'"
                               negated="false"
                               ns="unix"
                               objref="oval:org.cisecurity.benchmarks.o_centos_centos:obj:10191"
                               result="true"
                               testref="oval:org.cisecurity.benchmarks.o_centos_centos:tst:10189"
                               type="file_test">
               <cis:evidence_state steref="oval:org.cisecurity.benchmarks.o_centos_centos:ste:10085">
                  <cis:evidence_item itemref="1589962656">
                     <cis:evidence_item_pk status="exists">
                        <cis:evidence_item_pk_field name="filepath" value="/etc/ssh/sshd_config"/>
                        <cis:evidence_item_pk_field name="path" value="/etc/ssh"/>
                        <cis:evidence_item_pk_field name="filename" value="sshd_config"/>
                     </cis:evidence_item_pk>
                     <cis:evidence_field cv="0" dt="int" ev="0" name="group_id" op="equals" result="true"/>
                     <cis:evidence_field cv="0" dt="int" ev="0" name="user_id" op="equals" result="true"/>
                  </cis:evidence_item>
               </cis:evidence_state>
            </cis:evidence_test>
         </cis:and>
      </cis:evidence>
   </metadata>
   <complex-check operator="AND">
      <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
         <check-content-ref href="CIS_CentOS_Linux_7_Benchmark_v1.1.0-oval.xml"
                            name="oval:org.cisecurity.benchmarks.o_centos_centos:def:1188"/>
      </check>
      <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
         <check-content-ref href="CIS_CentOS_Linux_7_Benchmark_v1.1.0-oval.xml"
                            name="oval:org.cisecurity.benchmarks.o_centos_centos:def:1189"/>
      </check>
   </complex-check>
</rule-result>

<rule-result xmlns="http://checklists.nist.gov/xccdf/1.2"
             xmlns:xccdf="http://checklists.nist.gov/xccdf/1.2"
             xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
             idref="xccdf_org.cisecurity.benchmarks_rule_6.2.4_Disable_SSH_X11_Forwarding"
             role="full"
             severity="unknown"
             time="2015-11-09T16:01:31.251-06:00"
             version="1"
             weight="1.0">
   <result>pass</result>
   <metadata>
      <cis:evidence xmlns:cis="http://benchmarks.cisecurity.org/evidence/1.0"
                    end-time="2015-11-09T16:01:31.252-06:00"
                    start-time="2015-11-09T16:01:31.249-06:00">
         <cis:and>
            <cis:evidence_test check="all" check_existence="at_least_one_exists"
                               comment="Ensure 'X11Forwarding' sshd config parameter equals no (string)"
                               negated="false"
                               ns="independent"
                               objref="oval:org.cisecurity.benchmarks.o_centos_centos:obj:10193"
                               result="true"
                               testref="oval:org.cisecurity.benchmarks.o_centos_centos:tst:10191"
                               type="textfilecontent54_test">
               <cis:evidence_state steref="oval:org.cisecurity.benchmarks.o_centos_centos:ste:10087">
                  <cis:evidence_item itemref="1180489998">
                     <cis:evidence_item_pk status="exists">
                        <cis:evidence_item_pk_field name="filepath" value="/etc/ssh/sshd_config"/>
                        <cis:evidence_item_pk_field name="path" value="/etc/ssh"/>
                        <cis:evidence_item_pk_field name="filename" value="sshd_config"/>
                        <cis:evidence_item_pk_field name="pattern" value="^\s*X11Forwarding\s+(\S+)\s*(?:#.*)?$"/>
                        <cis:evidence_item_pk_field name="instance" value="1"/>
                        <cis:evidence_item_pk_field name="text" value="X11Forwarding no #X11Forwarding yes"/>
                     </cis:evidence_item_pk>
                     <cis:evidence_field cv="no" dt="string" ev="no" name="subexpression" op="equals" result="true"/>
                  </cis:evidence_item>
               </cis:evidence_state>
            </cis:evidence_test>
         </cis:and>
      </cis:evidence>
   </metadata>
   <complex-check operator="AND">
      <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
         <check-export export-name="oval:org.cisecurity.benchmarks.o_centos_centos:var:1190"
                       value-id="xccdf_org.cisecurity.benchmarks_value_6.2.4.1_var"/>
         <check-content-ref href="CIS_CentOS_Linux_7_Benchmark_v1.1.0-oval.xml"
                            name="oval:org.cisecurity.benchmarks.o_centos_centos:def:1190"/>
      </check>
   </complex-check>
</rule-result>

<rule-result xmlns="http://checklists.nist.gov/xccdf/1.2"
             xmlns:xccdf="http://checklists.nist.gov/xccdf/1.2"
             xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
             idref="xccdf_org.cisecurity.benchmarks_rule_6.2.5_Set_SSH_MaxAuthTries_to_4_or_Less"
             role="full"
             severity="unknown"
             time="2015-11-09T16:01:29.196-06:00"
             version="1"
             weight="1.0">
   <result>pass</result>
   <metadata>
      <cis:evidence xmlns:cis="http://benchmarks.cisecurity.org/evidence/1.0"
                    end-time="2015-11-09T16:01:29.197-06:00"
                    start-time="2015-11-09T16:01:29.191-06:00">
         <cis:and>
            <cis:evidence_test check="all" check_existence="at_least_one_exists"
                               comment="Ensure 'MaxAuthTries' sshd config parameter less than or equal 4 (int)"
                               negated="false"
                               ns="independent"
                               objref="oval:org.cisecurity.benchmarks.o_centos_centos:obj:10194"
                               result="true"
                               testref="oval:org.cisecurity.benchmarks.o_centos_centos:tst:10192"
                               type="textfilecontent54_test">
               <cis:evidence_state steref="oval:org.cisecurity.benchmarks.o_centos_centos:ste:10088">
                  <cis:evidence_item itemref="14950033">
                     <cis:evidence_item_pk status="exists">
                        <cis:evidence_item_pk_field name="filepath" value="/etc/ssh/sshd_config"/>
                        <cis:evidence_item_pk_field name="path" value="/etc/ssh"/>
                        <cis:evidence_item_pk_field name="filename" value="sshd_config"/>
                        <cis:evidence_item_pk_field name="pattern" value="^\s*MaxAuthTries\s+(\S+)\s*(?:#.*)?$"/>
                        <cis:evidence_item_pk_field name="instance" value="1"/>
                        <cis:evidence_item_pk_field name="text" value="MaxAuthTries 4 #MaxSessions 10"/>
                     </cis:evidence_item_pk>
                     <cis:evidence_field cv="4" dt="int" ev="4" name="subexpression" op="less than or equal"
                                         result="true"/>
                  </cis:evidence_item>
               </cis:evidence_state>
            </cis:evidence_test>
         </cis:and>
      </cis:evidence>
   </metadata>
   <complex-check operator="AND">
      <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
         <check-export export-name="oval:org.cisecurity.benchmarks.o_centos_centos:var:1191"
                       value-id="xccdf_org.cisecurity.benchmarks_value_6.2.5.1_var"/>
         <check-content-ref href="CIS_CentOS_Linux_7_Benchmark_v1.1.0-oval.xml"
                            name="oval:org.cisecurity.benchmarks.o_centos_centos:def:1191"/>
      </check>
   </complex-check>
</rule-result>